@miphamai/cli 0.81.6 → 0.81.7

package/README.md

@@ -1,6 +1,6 @@
-# Mipham Code v0.5.9
+# Mipham Code v0.81.6
 
-**Multi-model open-core intelligent coding terminal** — 9 AI providers, 66 commands, 16 tools, 14 skills + marketplace, self-update. AI-assisted code generation, security auditing, MCP protocol, and extensible skills — in a single CLI.
+**Multi-model open-core intelligent coding terminal** — 12 AI providers, 137 commands, 31 tools, 28 skills + marketplace, self-update. AI-assisted code generation, security auditing, MCP protocol, and extensible skills — in a single CLI.
 
 Built by [One Mipham Corporation](https://onemipham.com) (北京华安麦逄科技有限公司) | Brand: MiphamAI
 
@@ -15,13 +15,13 @@ Requirements: **Bun 1.2+** (recommended) or **Node.js 22+**
 
 ## Features
 
-- **9 AI Providers** — Anthropic Claude · OpenAI GPT · DeepSeek · Kimi (Moonshot) · Google Gemini · Doubao 豆包 · Tencent Hunyuan 混元 · Qwen 通义千问 · MiphamAI
-- **66 Slash Commands** — Interactive command picker (↑↓ Enter Esc), intuitive command interface, zero re-learning
-- **16 Built-in Tools** — File ops, shell execution, agent dispatch, MCP integration, web search
-- **14 Skills + Marketplace** — 11 standard + 3 Mipham-exclusive skills. `/browse-skills` `/install-skill` community marketplace
+- **12 AI Providers** — Anthropic Claude · OpenAI GPT · DeepSeek · Kimi (Moonshot) · Google Gemini · Doubao 豆包 · Tencent Hunyuan 混元 · Qwen 通义千问 · MiniMax（国内 / 国际）· Ollama（本地）· MiphamAI
+- **137 Slash Commands** — Interactive command picker (↑↓ Enter Esc), intuitive command interface, zero re-learning
+- **31 Built-in Tools** — File ops, shell execution, agent dispatch, MCP integration, web search
+- **28 Skills + Marketplace** — 22 standard + 6 Mipham-exclusive skills. `/browse-skills` `/install-skill` community marketplace
 - **Self-Update** — `mipham update` / `/upgrade` — one command to check, backup config, upgrade, restore. API keys preserved
 - **Smart Recommendations** — `/recommend` analyzes your project, suggests skills, providers, and config
-- **One-Click Config** — `/init` generates config.yml with all 9 providers pre-populated (just replace API keys)
+- **One-Click Config** — `/init` generates config.yml with the providers pre-populated (just replace API keys)
 - **MCP Protocol** — Full JSON-RPC 2.0 stdio transport for external server integration
 - **Security Hardened** — Path sandbox · SSRF protection · Bash blacklist · Permission gating · Parameter validation · command injection prevention · API key redaction
 - **Config Resilience** — YAML error recovery, deep merge providers, auto-backup (5 copies), corruption auto-restore
@@ -34,7 +34,7 @@ Requirements: **Bun 1.2+** (recommended) or **Node.js 22+**
 mipham
 
 # First run auto-initializes config. Or:
-/init     # Generate ~/.mipham/config.yml with 9 providers pre-configured
+/init     # Generate ~/.mipham/config.yml with providers pre-configured
 
 # Set API keys (env vars or config.yml)
 export DEEPSEEK_API_KEY="sk-..."
@@ -73,7 +73,7 @@ Press **Ctrl+P** for model picker · **Shift+Tab** to cycle permission mode · *
 - [Website (International)](https://mipham.ai/mipham-code)
 - [国内站](https://onemipham.com/mipham-code)
 - [GitHub](https://github.com/One-Mipham/mipham-code)
-- [Product Specification](https://github.com/One-Mipham/mipham-code/blob/main/PRODUCT.md)
+- [Product Specification (v1.0.0, 2026-06-10 snapshot)](https://github.com/One-Mipham/mipham-code/blob/main/PRODUCT.md) — frozen, not current
 - [npm](https://www.npmjs.com/package/@miphamai/cli)
 
 ## License

package/bin/daemon.ts

@@ -1,40 +1,15 @@
 #!/usr/bin/env bun
 
 /**
- * Mipham Code Daemon — standalone background process.
- * Spawned by `mipham daemon start`.
+ * Mipham Code Daemon — standalone source-mode entry.
+ *
+ * The compiled binary reaches the same code through the hidden `__daemon`
+ * branch in bin/mipham.ts. Both call runDaemonProcess() so there is exactly
+ * one implementation of the daemon process body.
  *
  * Usage: bun run bin/daemon.ts [--port PORT] [--bind HOST]
  */
 
-import { startDaemon } from '../src/daemon/index'
-
-const args = process.argv.slice(2)
-
-// Parse --port and --bind from CLI args (passed by mipham CLI)
-for (let i = 0; i < args.length; i++) {
-  if (args[i] === '--port' && args[i + 1]) {
-    process.env.MIPHAM_PORT = args[i + 1]!
-  }
-  if (args[i] === '--bind' && args[i + 1]) {
-    process.env.MIPHAM_BIND = args[i + 1]!
-  }
-}
-
-const { port } = await startDaemon()
-
-console.log(`Daemon running on http://127.0.0.1:${port}`)
-console.log(`PID: ${process.pid}`)
-
-// Keep process alive
-process.on('SIGTERM', async () => {
-  const { stopDaemon } = await import('../src/daemon/index')
-  await stopDaemon(true)
-  process.exit(0)
-})
+import { runDaemonProcess } from '../src/daemon/launch'
 
-process.on('SIGINT', async () => {
-  const { stopDaemon } = await import('../src/daemon/index')
-  await stopDaemon(true)
-  process.exit(0)
-})
+await runDaemonProcess()

package/bin/mipham.ts

@@ -6,6 +6,8 @@
 
 export {} // ensure module scope (prevents global name collisions)
 
+import { DAEMON_ENTRY, userArgs } from '../src/daemon/launch'
+
 async function runWorkflowCLI(): Promise<boolean> {
   const args = process.argv.slice(2)
   if (args[0] !== 'workflow') return false
@@ -324,8 +326,6 @@ async function runDaemonCLI(): Promise<boolean> {
 
   const subcmd = args[1]
 
-  const { spawn } = await import('node:child_process')
-
   if (subcmd === 'start') {
     const { getDaemonStatus } = await import('../src/daemon/index')
     const status = getDaemonStatus()
@@ -335,23 +335,13 @@ async function runDaemonCLI(): Promise<boolean> {
     }
 
     console.log('Starting daemon...')
-    const daemonScript = new URL('./daemon.ts', import.meta.url).pathname
-    const child = spawn('bun', ['run', daemonScript], {
-      detached: true,
-      stdio: 'ignore',
-      env: { ...process.env },
-    })
-    child.unref()
-
-    // Wait briefly for daemon to write PID/port files
-    await new Promise((resolve) => setTimeout(resolve, 1000))
-
-    const newStatus = getDaemonStatus()
-    if (newStatus) {
-      console.log(`Daemon started (PID: ${newStatus.pid}, Port: ${newStatus.port})`)
-    } else {
-      console.log('Daemon started (PID unknown — check `mipham daemon status`)')
+    const { startDetachedDaemon } = await import('../src/daemon/launch')
+    const launch = await startDetachedDaemon()
+    if (!launch.ok) {
+      console.error(`Failed to start daemon: ${launch.reason}`)
+      process.exit(1)
     }
+    console.log(`Daemon started (PID: ${launch.pid}, Port: ${launch.port})`)
     process.exit(0)
   }
 
@@ -387,6 +377,7 @@ async function runDaemonCLI(): Promise<boolean> {
 
   if (subcmd === 'restart') {
     const { getDaemonStatus } = await import('../src/daemon/index')
+    const { startDetachedDaemon, waitForDaemonExit } = await import('../src/daemon/launch')
     const status = getDaemonStatus()
     if (status) {
       try {
@@ -394,18 +385,28 @@ async function runDaemonCLI(): Promise<boolean> {
       } catch {
         // Process may have already exited
       }
-      await new Promise((resolve) => setTimeout(resolve, 500))
+      // A fixed sleep here is a guess, and the guess is load-bearing:
+      // startDetachedDaemon() opens by probing getStatus(), so a pid file the old
+      // daemon has not unlinked yet reads as "already running" — restart would
+      // then report success for a start it never performed. Wait for the old
+      // daemon to be *gone*; if it never goes, refuse instead of starting blind.
+      const waitStarted = Date.now()
+      const gone = await waitForDaemonExit()
+      if (!gone) {
+        const waitedMs = Date.now() - waitStarted
+        console.error(
+          `Refusing to restart: old daemon (PID: ${status.pid}) is still running after ${waitedMs}ms`,
+        )
+        process.exit(1)
+      }
     }
 
-    const daemonScript = new URL('./daemon.ts', import.meta.url).pathname
-    const child = spawn('bun', ['run', daemonScript], {
-      detached: true,
-      stdio: 'ignore',
-      env: { ...process.env },
-    })
-    child.unref()
-    await new Promise((resolve) => setTimeout(resolve, 1000))
-    console.log('Daemon restarted.')
+    const launch = await startDetachedDaemon()
+    if (!launch.ok) {
+      console.error(`Failed to restart daemon: ${launch.reason}`)
+      process.exit(1)
+    }
+    console.log(`Daemon restarted (PID: ${launch.pid}, Port: ${launch.port})`)
     process.exit(0)
   }
 
@@ -1095,6 +1096,19 @@ async function runInitCLI(): Promise<boolean> {
 }
 
 async function main() {
+  // ── Hidden daemon entry ────────────────────────────────────────────────
+  // `daemon start` re-execs this same program with `__daemon` (see
+  // src/daemon/launch.ts). This must come first: everything below assumes an
+  // interactive TTY — the stty block would run against a detached child whose
+  // stdio is the daemon log. The sentinel is stripped here because the two
+  // entry points have different argv shapes (see runDaemonProcess).
+  const argv = userArgs(process.argv)
+  if (argv[0] === DAEMON_ENTRY) {
+    const { runDaemonProcess } = await import('../src/daemon/launch')
+    await runDaemonProcess(argv.slice(1))
+    return
+  }
+
   // ── Deleted-cwd guard ──────────────────────────────────────────────────
   // `process.cwd()` throws ENOENT when the directory the process was launched
   // from no longer exists (e.g. a removed git worktree). Print a clear message
@@ -1309,4 +1323,4 @@ Docs: https://onemipham.com/mipham-code
   }
 }
 
-main()
+void main()

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@miphamai/cli",
-  "version": "0.81.6",
+  "version": "0.81.7",
   "description": "Mipham Code — Multi-model open-core intelligent coding terminal by MiphamAI",
   "keywords": [
     "ai",
@@ -40,7 +40,8 @@
     "typecheck": "tsc --noEmit",
     "test": "vitest run",
     "knip": "knip --production --no-progress --no-exit-code",
-    "coverage": "vitest run --coverage --coverage.provider=v8 --coverage.include='src/**/*.{ts,tsx}' --coverage.reporter=text-summary --coverage.reporter=json-summary"
+    "coverage": "vitest run --coverage",
+    "mutate": "stryker run"
   },
   "dependencies": {
     "@larksuiteoapi/node-sdk": "^1.73.0",
@@ -53,6 +54,8 @@
   },
   "devDependencies": {
     "@mipham/shared": "workspace:*",
+    "@stryker-mutator/core": "10.0.0",
+    "@stryker-mutator/vitest-runner": "10.0.0",
     "@types/bun": "^1.4.2",
     "@types/node": "^22.19.19",
     "@types/react": "^19.3.0",

package/skills/standard/mipham-code-setup.SKILL.md

@@ -286,10 +286,10 @@ providers:
 
 ### 5.1 — Built-in Skills
 
-Mipham Code ships with 17 built-in skills loaded automatically:
+Mipham Code ships with 28 built-in skills loaded automatically:
 
-- **Standard (14)**: code-review, compassionate-communication, doc-generator, github-ops, memory, mipham-code-setup, security-review, self-review, superpower, systematic-debugging, tdd, test-driven-development, web-access, web-search
-- **Mipham (3)**: om-artifact, om-model-optimize, om-security
+- **Standard (22)**: code-review, codebase-design, compassionate-communication, debug-loop, doc-generator, domain-modeling, github-ops, grill-with-docs, implement, memory, mipham-code-setup, research, safe-coding, security-review, self-review, superpower, tdd, to-spec, triage, trim-process-prose, web-access, web-search
+- **Mipham (6)**: doc-sync, om-artifact, om-model-optimize, om-security, save-to-wiki, self-audit
 
 ### 5.2 — Community Skills
 

package/src/agent/sub-agent.ts

@@ -10,6 +10,7 @@ import type { PermissionSystem } from '../core/permission'
 import { AgentExperience } from './agent-experience'
 import { PatternAnalyzer } from './pattern-analyzer.js'
 import { getWorkspaceTrust } from '../core/workspace-trust'
+import { recordToolCall } from '../telemetry/index'
 import type { ExperienceRuleEngine } from '../core/rule-engine.js'
 
 // Singleton instances (created lazily)
@@ -85,7 +86,7 @@ export class SubAgent {
       // Register completion callback for hook firing
       bgRegistry.onComplete(taskId, (task) => {
         if (this.hookEngine) {
-          this.hookEngine.executeSubagentStop(
+          void this.hookEngine.executeSubagentStop(
             agentType,
             description,
             taskId,
@@ -397,6 +398,15 @@ export class SubAgent {
             throw new DOMException('Aborted', 'AbortError')
           }
 
+          // Counted here, at dispatch, mirroring `Engine.executeTool`'s entry
+          // increment — this loop bypasses `executeTool` entirely and
+          // reimplements the hook/permission steps itself, so without this line
+          // every tool call made inside a sub-agent (and therefore inside a
+          // workflow, which derives sub-agents) is invisible to the metrics
+          // registry. Same failure shape as the two "one of two paths wired"
+          // bugs this repo has already recorded.
+          recordToolCall(tu.name)
+
           const tool = this.toolRegistry.get(tu.name)
           if (!tool) {
             currentMessages.push({
@@ -490,6 +500,7 @@ export class SubAgent {
                   content: displayResult.success
                     ? displayResult.content
                     : displayResult.error || displayResult.content,
+                  ...(displayResult.success ? {} : { is_error: true }),
                 },
               ],
             })

package/src/commands/project.ts

@@ -8,6 +8,7 @@
 import type { CommandHandler, CommandContext, CommandResult } from '../ui/commands.js'
 import { getWorkspaceTrust } from '../core/workspace-trust'
 import { atomicWriteFileSync } from '../shared/atomic-write'
+import { CLOUD_PROVIDERS } from '../config/wizard-config'
 import { homedir } from 'node:os'
 
 export {
@@ -21,6 +22,18 @@ export {
   trustCmd,
 }
 
+/**
+ * provider id → 环境变量名，例如 `minimax-global` → `MINIMAX_GLOBAL_API_KEY`。
+ *
+ * 非字母数字字符必须归一为 `_`：生成的模板里写着 `export <名字>=...`，
+ * 而带连字符的 `export MINIMAX-GLOBAL_API_KEY=…` 是 shell 语法错误
+ * （`openai-compat.ts` 的 `${VAR}` 解析器另一条 `$VAR` 分支也只认
+ * `[A-Z_][A-Z0-9_]*`）。`/init` 过去只输出无连字符的 mipham，所以这条一直不可达。
+ */
+function envVarFor(providerId: string): string {
+  return `${providerId.toUpperCase().replace(/[^A-Z0-9]+/g, '_')}_API_KEY`
+}
+
 const initCmd: CommandHandler = async (ctx) => {
   const { existsSync, mkdirSync } = await import('node:fs')
   const { join } = await import('node:path')
@@ -33,8 +46,11 @@ const initCmd: CommandHandler = async (ctx) => {
   if (!existsSync(userConfigPath)) {
     mkdirSync(join(home, '.mipham'), { recursive: true })
 
-    const activeProviders = ctx.config.providers.filter((p) => p.status === 'active')
-    const providerYaml = activeProviders
+    // 生成物必须来自随包发布的清单，不能来自 ctx.config —— 后者的 status 表达
+    // 的是「用户停用了哪家」这个**运行时**状态，而 12 家里只有 mipham 声明了它
+    // （其余 status 全在 model 层），拿它筛会恒得 1 家。
+    const presetProviders = CLOUD_PROVIDERS
+    const providerYaml = presetProviders
       .map((p) => {
         const tips: Record<string, string> = {
           anthropic: '# Get key: https://console.anthropic.com/',
@@ -51,7 +67,7 @@ const initCmd: CommandHandler = async (ctx) => {
         return `  ${comment}
   - id: ${p.id}
     name: "${p.name}"${baseUrlLine}
-    apiKey: "\${${p.id.toUpperCase()}_API_KEY}"`
+    apiKey: "\${${envVarFor(p.id)}}"`
       })
       .join('\n\n')
 
@@ -75,7 +91,7 @@ defaultProvider: ${ctx.providerId}
 defaultModel: ${ctx.modelId}
 permission: ask
 
-# ── Providers (${activeProviders.length} pre-configured — just add your API keys) ──
+# ── Providers (${presetProviders.length} pre-configured — just add your API keys) ──
 providers:
 ${providerYaml}
 `
@@ -84,14 +100,14 @@ ${providerYaml}
     return {
       content: `✅ Mipham Code initialized!
 
-Created: ~/.mipham/config.yml (${activeProviders.length} providers pre-configured)
+Created: ~/.mipham/config.yml (${presetProviders.length} providers pre-configured)
 
 Next steps:
   1. Edit ~/.mipham/config.yml — replace API key placeholders with your real keys
   2. Run mipham to start
 
 Providers configured:
-${activeProviders.map((p) => `  • ${p.name} — ${p.id.toUpperCase()}_API_KEY`).join('\n')}
+${presetProviders.map((p) => `  • ${p.name} — ${envVarFor(p.id)}`).join('\n')}
 
 Tip: /setup for the full 6-step wizard.`,
     }
@@ -105,10 +121,64 @@ Run /setup for the full wizard, or /config to view current settings.`,
   }
 }
 
-const permissionsCmd: CommandHandler = (ctx) => {
+const permissionsCmd: CommandHandler = async (ctx, args) => {
   const c = ctx.engine.getContext()
   const msgs = c.getMessages()
 
+  // ── Rule persistence: allow/deny/remove <rule> [--user] ──
+  const positional = args.filter((a) => !a.startsWith('--'))
+  const scope: 'project' | 'user' = args.includes('--user') ? 'user' : 'project'
+  const verb = positional[0]
+  const rule = positional[1]
+
+  if (verb === 'allow' || verb === 'deny' || verb === 'remove') {
+    const { validateRulePattern } = await import('../core/permission-rules')
+    const { addSettingsRule, removeSettingsRule, settingsPathFor } =
+      await import('../config/loader')
+
+    // A rule that can't match is worse than no rule: it reads as protection
+    // that isn't there. Validate before writing.
+    const invalid = validateRulePattern(rule ?? '')
+    const usage =
+      `Usage: /permissions <allow|deny|remove> <rule> [--user]\n\n` +
+      `  rule   Tool pattern — "Bash" or "Bash(npm test)".\n` +
+      `  --user Write to ~/.mipham/settings.json instead of .mipham/settings.json.`
+
+    if (verb !== 'remove' && !rule) {
+      return { content: `Missing rule.\n\n${usage}` }
+    }
+    if (invalid && verb !== 'remove') {
+      return { content: `Invalid rule "${rule}": ${invalid}.\n\n${usage}` }
+    }
+
+    const perm = ctx.engine.getPermission()
+
+    if (verb === 'remove') {
+      const removed = removeSettingsRule(rule!, scope)
+      if (!removed) {
+        return { content: `No rule "${rule}" in ${settingsPathFor(scope)}.` }
+      }
+      perm.removeRule(rule!)
+      return {
+        content: `Removed from ${removed.path}\n\npermissions.${removed.key}:\n  ${rule}`,
+      }
+    }
+
+    const path = addSettingsRule(verb, rule!, scope)
+    if (verb === 'allow') perm.allow(rule!)
+    else perm.deny(rule!)
+    return {
+      content:
+        `Added to ${path}\n\n` +
+        `permissions.${verb}:\n  ${rule}\n\n` +
+        `This rule persists across sessions and applies from now on.`,
+    }
+  }
+
+  const settings = await import('../config/loader').then((m) => m.loadSettingsJson())
+  const ruleLines = (label: string, rules: string[]) =>
+    rules.length > 0 ? `  ${label}\n${rules.map((r) => `    ${r}`).join('\n')}` : `  no ${label}`
+
   return {
     content: `─ Permission Settings ─
 
@@ -125,6 +195,15 @@ Switch mode with Shift+Tab. Modes (least → most permissive):
 To let Bash run without asking: press Shift+Tab until the status line shows
 "acceptEdits", then send your message again.
 
+Persisted rules (settings.json):
+${ruleLines('allow', settings.permissions.allow)}
+${ruleLines('deny', settings.permissions.deny)}
+
+Persist a rule with:
+  /permissions allow "Bash(npm test)"     → .mipham/settings.json
+  /permissions deny  "Bash(rm *)" --user  → ~/.mipham/settings.json
+  /permissions remove "Bash(npm test)"
+
 Current directory permissions:
   CWD:      ${process.cwd()}
 
@@ -384,8 +463,9 @@ async function setupStep1(ctx: CommandContext): Promise<CommandResult> {
   if (!existsSync(configPath)) {
     // Generate a user-friendly config with all providers pre-populated.
     // Users just need to replace the API key placeholders with their real keys.
-    const activeProviders = ctx.config.providers.filter((p) => p.status === 'active')
-    const providerYaml = activeProviders
+    // 同 /init：清单来自 CLOUD_PROVIDERS，与运行时 status 无关（见上方注释）。
+    const presetProviders = CLOUD_PROVIDERS
+    const providerYaml = presetProviders
       .map((p) => {
         const comment =
           p.id === 'anthropic'
@@ -409,12 +489,12 @@ async function setupStep1(ctx: CommandContext): Promise<CommandResult> {
         return `  ${comment}
   - id: ${p.id}
     name: "${p.name}"${baseUrlLine}
-    apiKey: "\${${p.id.toUpperCase()}_API_KEY}"`
+    apiKey: "\${${envVarFor(p.id)}}"`
       })
       .join('\n\n')
 
     const defaultConfig = `# Mipham Code — User Configuration
-# Location: ~/.mipham/config.yml
+# Location: <project>/.mipham/config.yml  (project-level; ~/.mipham/config.yml is the user-level file — both are read)
 # Docs:     https://mipham.ai/code/docs/config
 #
 # ═══ Quick Start ═══
@@ -433,7 +513,7 @@ defaultProvider: ${ctx.providerId}
 defaultModel: ${ctx.modelId}
 permission: ask
 
-# ── Providers (8 configured, just add your API keys) ──
+# ── Providers (${presetProviders.length} pre-configured — just add your API keys) ──
 providers:
 ${providerYaml}
 `

package/src/config/keys-manager.ts

@@ -3,8 +3,8 @@ import { join, dirname } from 'node:path'
 import { homedir } from 'node:os'
 import { saveProviderApiKey } from './loader'
 
-const MIPHAM_DIR = join(homedir(), '.mipham')
-const KEYS_FILE = join(MIPHAM_DIR, 'keys.json')
+const MIPHAM_HOME = join(homedir(), '.mipham')
+const KEYS_FILE = join(MIPHAM_HOME, 'keys.json')
 const EXPIRY_DAYS = 90
 
 export interface KeyEntry {
@@ -84,7 +84,7 @@ export class KeyManager {
 
     // Backup old entry if it exists
     if (existing) {
-      const backupDir = join(MIPHAM_DIR, 'keys')
+      const backupDir = join(MIPHAM_HOME, 'keys')
       mkdirSync(backupDir, { recursive: true })
       const backupPath = join(backupDir, `${provider}.backup`)
       writeFileSync(backupPath, JSON.stringify(existing, null, 2) + '\n', { mode: 0o600 })

package/src/config/loader.ts

@@ -7,7 +7,7 @@ import {
   unlinkSync,
   chmodSync,
 } from 'node:fs'
-import { join } from 'node:path'
+import { join, dirname } from 'node:path'
 import { homedir } from 'node:os'
 import { parse as parseYaml, stringify as stringifyYaml } from 'yaml'
 import { atomicWriteFileSync } from '../shared/atomic-write'
@@ -271,6 +271,87 @@ export function loadSettingsJson(cwd: string = process.cwd()): SettingsJson {
   return { hooks, permissions }
 }
 
+/** Which settings.json a permission rule is persisted to. */
+export type SettingsScope = 'project' | 'user'
+
+export function settingsPathFor(scope: SettingsScope, cwd: string = process.cwd()): string {
+  return scope === 'user'
+    ? join(MIPHAM_HOME, 'settings.json')
+    : join(cwd, '.mipham', 'settings.json')
+}
+
+/**
+ * Read a settings.json as a plain object, preserving any key we don't model
+ * (hooks, and anything a future version adds). A malformed file is an error,
+ * not something to clobber — the user's other settings live in the same file.
+ */
+export function readSettingsDoc(path: string): Record<string, unknown> {
+  if (!existsSync(path)) return {}
+  let parsed: unknown
+  try {
+    parsed = JSON.parse(readFileSync(path, 'utf-8'))
+  } catch {
+    throw new Error(`${path} is not valid JSON. Fix or remove it, then retry.`)
+  }
+  if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed)) {
+    throw new Error(`${path} does not contain a JSON object. Fix or remove it, then retry.`)
+  }
+  return parsed as Record<string, unknown>
+}
+
+export function writeSettingsDoc(path: string, doc: Record<string, unknown>): void {
+  mkdirSync(dirname(path), { recursive: true })
+  atomicWriteFileSync(path, JSON.stringify(doc, null, 2) + '\n')
+}
+
+/**
+ * Persist one rule into `permissions.<key>` of a scope's settings.json.
+ * Idempotent: re-adding an existing rule leaves the file unchanged.
+ * Returns the path written.
+ */
+export function addSettingsRule(
+  key: 'allow' | 'deny',
+  rule: string,
+  scope: SettingsScope = 'project',
+  cwd: string = process.cwd(),
+): string {
+  const path = settingsPathFor(scope, cwd)
+  const doc = readSettingsDoc(path)
+  const perms = (doc.permissions ?? {}) as Record<string, unknown>
+  const list = Array.isArray(perms[key]) ? perms[key] : []
+  const strings = (list as unknown[]).filter((r): r is string => typeof r === 'string')
+  if (!strings.includes(rule)) strings.push(rule)
+  perms[key] = strings
+  doc.permissions = perms
+  writeSettingsDoc(path, doc)
+  return path
+}
+
+/**
+ * Remove a rule from whichever `permissions` list holds it. Returns the path
+ * and key it was removed from, or null when the rule was not present.
+ */
+export function removeSettingsRule(
+  rule: string,
+  scope: SettingsScope = 'project',
+  cwd: string = process.cwd(),
+): { path: string; key: 'allow' | 'deny' } | null {
+  const path = settingsPathFor(scope, cwd)
+  const doc = readSettingsDoc(path)
+  const perms = (doc.permissions ?? {}) as Record<string, unknown>
+
+  for (const key of ['allow', 'deny'] as const) {
+    if (!Array.isArray(perms[key])) continue
+    const list = (perms[key] as unknown[]).filter((r): r is string => typeof r === 'string')
+    if (!list.includes(rule)) continue
+    perms[key] = list.filter((r) => r !== rule)
+    doc.permissions = perms
+    writeSettingsDoc(path, doc)
+    return { path, key }
+  }
+  return null
+}
+
 export function loadConfig(cwd: string = process.cwd()): MiphamConfig {
   const configPath = join(cwd, '.mipham', 'config.yml')
   const userConfigPath = join(MIPHAM_HOME, 'config.yml')

package/src/core/context.ts

@@ -146,7 +146,15 @@ export class ContextManager {
     const content = result.success ? result.content : result.error || result.content
     const msg: Message = {
       role: 'user',
-      content: [{ type: 'tool_result', tool_use_id: toolUseId, content }],
+      content: [
+        {
+          type: 'tool_result',
+          tool_use_id: toolUseId,
+          content,
+          // 成功不写该键 —— 与 session-log.deriveMessages 的展平式对称（保字节级互逆）
+          ...(result.success ? {} : { is_error: true }),
+        },
+      ],
     }
     this.messages.push(msg)
     this.estimatedTokens += this.estimateTokens(JSON.stringify(msg.content))
@@ -369,7 +377,7 @@ export class ContextManager {
     if (usage > microThreshold) {
       this.compressionPending = true
       // Schedule microcompact asynchronously (fire-and-forget)
-      Promise.resolve().then(() => {
+      void Promise.resolve().then(() => {
         this.runMicrocompact()
         this.compressionPending = false
       })