@miphamai/cli 0.83.0 → 0.85.0

package/src/tools/agent/plan.ts

@@ -1,13 +1,14 @@
 import { mkdirSync, writeFileSync } from 'node:fs'
 import { join } from 'node:path'
 import type { ToolDefinition } from '../../shared/index.ts'
+import { MIPHAM_DIR } from '../../shared/constants.ts'
 
 export const planTool: ToolDefinition = {
   name: 'Plan',
   description:
     'Enter plan mode — read-only analysis and design. Creates a structured plan file in .mipham/plans/.',
   category: 'agent',
-  permission: 'auto',
+  permission: 'self',
   parameters: {
     type: 'object',
     properties: {
@@ -25,7 +26,7 @@ export const planTool: ToolDefinition = {
     const title = (params.title as string) || 'Implementation Plan'
     const description = (params.description as string) || ''
 
-    const planDir = join(ctx.cwd, '.mipham', 'plans')
+    const planDir = join(ctx.cwd, MIPHAM_DIR, 'plans')
     mkdirSync(planDir, { recursive: true })
 
     const timestamp = new Date().toISOString().replace(/[:.]/g, '-').slice(0, 19)

package/src/tools/agent/report-findings.ts

@@ -7,7 +7,7 @@ export const reportFindingsTool: ToolDefinition = {
     'Use this to output structured review results with file, line, summary, ' +
     'failure_scenario, and category. Findings are ranked most-severe first.',
   category: 'agent',
-  permission: 'auto',
+  permission: 'self',
   parameters: {
     type: 'object',
     properties: {

package/src/tools/agent/send-message.ts

@@ -8,7 +8,7 @@ export const sendMessageTool: ToolDefinition = {
     'Use "main" for the parent conversation, a background task ID for same-process agents, ' +
     'or a session ID (or unique session name) for cross-session messaging (use ListAgents to discover sessions).',
   category: 'agent',
-  permission: 'auto',
+  permission: 'self',
   parameters: {
     type: 'object',
     properties: {

package/src/tools/agent/skill.ts

@@ -10,7 +10,7 @@ export const skillTool: ToolDefinition = {
   description:
     'Execute a skill (.SKILL.md or .mipham-skill.md) by name. Skills extend AI capabilities with specialized instructions.',
   category: 'agent',
-  permission: 'auto',
+  permission: 'self',
   parameters: {
     type: 'object',
     properties: {

package/src/tools/exec/git.ts

@@ -205,7 +205,7 @@ export const gitTool: ToolDefinition = {
   name: 'Git',
   description: 'Execute git commands. Dangerous operations (force push, hard reset) are blocked.',
   category: 'exec',
-  permission: 'auto',
+  permission: 'self',
   parameters: {
     type: 'object',
     properties: {
@@ -240,7 +240,7 @@ export const gitTool: ToolDefinition = {
       }
     }
 
-    // Git runs without an approval prompt (`permission: 'auto'`), so an option
+    // Git runs without an approval prompt (`permission: 'self'`), so an option
     // that names a program to execute is a code-execution path Bash would have
     // had to ask for. Checked on argv, which is what git is handed below.
     const argv = splitCommand(command)

package/src/tools/exec/task.ts

@@ -61,7 +61,7 @@ export const taskTool: ToolDefinition = {
     'background task output/stop, and status workflow: pending → in_progress → completed. ' +
     'Use for complex multi-step tasks, session tracking, and organizing work.',
   category: 'exec',
-  permission: 'auto',
+  permission: 'self',
   parameters: {
     type: 'object',
     properties: {

package/src/tools/file/glob.ts

@@ -15,7 +15,7 @@ export function createGlobTool(credentialConfig?: CredentialMaskingConfig): Tool
     name: 'Glob',
     description: 'Find files matching a glob pattern.',
     category: 'file',
-    permission: 'auto',
+    permission: 'self',
     parameters: {
       type: 'object',
       properties: {

package/src/tools/file/grep.ts

@@ -88,7 +88,7 @@ export function createGrepTool(credentialConfig?: CredentialMaskingConfig): Tool
       '(glob pattern, e.g. "*.ts") before searching. ' +
       'The `pattern` parameter accepts full regex syntax (e.g., "log.*Error", "\\bclass\\s+\\w+").',
     category: 'file',
-    permission: 'auto',
+    permission: 'self',
     parameters: {
       type: 'object',
       properties: {

package/src/tools/file/read.ts

@@ -121,7 +121,7 @@ export function createReadTool(credentialConfig?: CredentialMaskingConfig): Tool
     description:
       'Read a file from the local filesystem. Supports offset and limit for large files.',
     category: 'file',
-    permission: 'auto',
+    permission: 'self',
     parameters: {
       type: 'object',
       properties: {

package/src/tools/network/web-fetch.ts

@@ -148,7 +148,7 @@ export const webFetchTool: ToolDefinition = {
   description:
     'Fetches a URL, converts the page to markdown. HTTP is upgraded to HTTPS. Cross-host redirects are returned to the caller. Responses are cached for 15 minutes per URL.',
   category: 'network',
-  permission: 'auto',
+  permission: 'self',
   parameters: {
     type: 'object',
     properties: {

package/src/tools/network/web-search.ts

@@ -81,7 +81,7 @@ export const webSearchTool: ToolDefinition = {
   description:
     'Search the web via Brave Search API. Returns result blocks with titles, URLs, and descriptions. Set BRAVE_API_KEY to enable.',
   category: 'network',
-  permission: 'auto',
+  permission: 'self',
   parameters: {
     type: 'object',
     properties: {

package/src/tools/scheduling/cron.ts

@@ -8,11 +8,11 @@ import {
 } from 'node:fs'
 import { join } from 'node:path'
 import { createHash } from 'node:crypto'
-import { homedir } from 'node:os'
 import type { ToolDefinition } from '../../shared/index.ts'
 import { computeNextFire } from '../../core/cron'
+import { miphamHome } from '../../core/paths.ts'
 
-const CRON_DIR = join(homedir(), '.mipham', 'cron')
+const CRON_DIR = miphamHome('cron')
 
 function ensureCronDir(): void {
   if (!existsSync(CRON_DIR)) mkdirSync(CRON_DIR, { recursive: true })
@@ -97,7 +97,7 @@ export const cronCreateTool: ToolDefinition = {
     'For one-shot: set recurring:false with pinned minute/hour/day-of-month/month. ' +
     'Durable — survives restarts, written to ~/.mipham/cron/.',
   category: 'scheduling',
-  permission: 'auto',
+  permission: 'self',
   parameters: {
     type: 'object',
     properties: {
@@ -157,7 +157,7 @@ export const cronDeleteTool: ToolDefinition = {
   description:
     'Cancel a cron job previously scheduled with CronCreate. Removes from ~/.mipham/cron/.',
   category: 'scheduling',
-  permission: 'auto',
+  permission: 'self',
   parameters: {
     type: 'object',
     properties: {
@@ -181,7 +181,7 @@ export const cronListTool: ToolDefinition = {
   name: 'CronList',
   description: 'List all cron jobs scheduled via CronCreate, both durable and session-only.',
   category: 'scheduling',
-  permission: 'auto',
+  permission: 'self',
   parameters: {
     type: 'object',
     properties: {},

package/src/tools/scheduling/schedule-wakeup.ts

@@ -20,7 +20,7 @@ export const scheduleWakeupTool: ToolDefinition = {
   description:
     'Schedule when to resume work in /loop dynamic mode — the user invoked /loop without an interval, asking you to self-pace iterations of a specific task. Do NOT schedule a short-interval wakeup to poll for background work you started — when harness-tracked work finishes, you are re-invoked automatically. The runtime clamps to [60, 3600].',
   category: 'scheduling',
-  permission: 'auto',
+  permission: 'self',
   parameters: {
     type: 'object',
     properties: {

package/src/tools/system/config.ts

@@ -1,11 +1,11 @@
 import { readFileSync, existsSync, mkdirSync } from 'node:fs'
 import { join } from 'node:path'
-import { homedir } from 'node:os'
 import { parse as parseYaml, stringify } from 'yaml'
 import { atomicWriteFileSync } from '../../shared/atomic-write'
 import type { ToolDefinition } from '../../shared/index.ts'
+import { miphamHome } from '../../core/paths.ts'
 
-const MIPHAM_HOME = join(homedir(), '.mipham')
+const MIPHAM_HOME = miphamHome()
 const USER_CONFIG = join(MIPHAM_HOME, 'config.yml')
 
 export const configTool: ToolDefinition = {

package/src/tools/system/tool-search.ts

@@ -16,7 +16,7 @@ export const toolSearchTool: ToolDefinition = {
     'Use this to discover tools on demand instead of loading all tool definitions into context. ' +
     'Returns matching tool names with their server and description.',
   category: 'system',
-  permission: 'auto',
+  permission: 'self',
   parameters: {
     type: 'object',
     properties: {

package/src/ui/app.tsx

@@ -9,6 +9,7 @@ import type { RemoteEngine } from '../daemon/remote-engine'
 import type { MiphamConfig } from '../shared/index.ts'
 import type { Llm } from '../providers/llm'
 import { AUTOCOMPLETE_MAX_CONTEXT, type RecentMessage } from '../core/autocomplete'
+import { MODE_CYCLE } from '../core/permission-config'
 import { resolveGitPr, prColor, type GitPr } from '../core/git-pr'
 import type { SkillsLoader } from '../skills/loader'
 import type { PluginManager } from '../plugin/plugin-manager'
@@ -103,17 +104,43 @@ interface AgentProgress {
 // Version is read fresh from package.json at startup via runApp prop
 // (bypasses Bun module caching after npm update)
 
-// Cycle order: Claude Code modes (manual → accept edits → plan → bypass).
-const PERMISSION_MODES: PermissionMode[] = ['default', 'acceptEdits', 'plan', 'bypassPermissions']
+// The wheel is `MODE_CYCLE` — imported, not copied. This file used to hold its own
+// array, which is how a help screen and a footer come to advertise a mode the wheel
+// cannot reach: two lists that agree on the day they are written and drift after.
 // Labels aligned with Claude Code terminology: describe behavior, not capability.
-// Claude Code modes: manual mode → accept edits on → plan → bypass.
 const PERMISSION_COLORS: Record<PermissionMode, string> = {
   default: 'white',
   acceptEdits: 'blue',
   plan: 'yellow',
+  auto: 'magenta',
   bypassPermissions: 'red',
 }
 
+// 页脚那一行的**字形**，取值与 Claude Code 二进制里那四个格逐字对齐（`$Pe="⏸"` /
+// `Ije="⏵⏵"`）：`default` **什么都不显示**、`acceptEdits` 与 `auto` 都是 `⏵⏵`、`plan` 是 `⏸`。
+// 这本是设计文档决策 9 的一半，Step 6/7 只做了标签派生、漏了字形，此处补上。
+// `bypassPermissions` 在 CC 的转盘上没有对应格（它的转盘 4 格、我们这张是 5 档），
+// 无从对照 ⇒ **保留既有渲染** `⏵⏵`，是最小的选择而不是新决定。
+// 穷尽 `Record` 与 `PERMISSION_COLORS` 同形：将来加档位忘了字形是**编译错**，不是静默空串。
+const PERMISSION_GLYPHS: Record<PermissionMode, string> = {
+  default: '',
+  acceptEdits: '⏵⏵',
+  plan: '⏸',
+  auto: '⏵⏵',
+  bypassPermissions: '⏵⏵',
+}
+
+/**
+ * 页脚前缀 = `<字形> `，**没有字形时连那个空格都不留**（否则 `default` 那一行会以空格起头）。
+ *
+ * 与 `PERMISSION_LABELS` 合成**单独一个**文本节点交给 Ink：分两处写时，中间那点缩进是否
+ * 落成空格取决于 JSX 的空白折叠规则 —— 一件与权限无关、却会改变用户读到的东西的巧合。
+ */
+export function permissionGlyphPrefix(mode: PermissionMode): string {
+  const glyph = PERMISSION_GLYPHS[mode]
+  return glyph ? `${glyph} ` : ''
+}
+
 /** 页脚读模式所需的最小面 —— `QueryEngine` 与 `RemoteEngine` 都满足。 */
 export type PermissionSource = {
   setMode(mode: PermissionMode): void
@@ -136,8 +163,17 @@ export function cyclePermissionMode(
   permission: PermissionSource,
   current: PermissionMode,
 ): PermissionMode {
-  const idx = PERMISSION_MODES.indexOf(current)
-  const next = PERMISSION_MODES[(idx + 1) % PERMISSION_MODES.length]!
+  // An off-wheel *current* mode is reachable, not hypothetical: `bypassPermissions`
+  // is legal (`ALL_MODES`) without being cyclable, so `permission: bypassPermissions`
+  // in config puts the user in a state the wheel has no slot for. `indexOf` then
+  // answers `-1`, and `(-1 + 1) % length` lands on slot 0 by arithmetic accident.
+  // Spelled out here so it is a decision rather than an accident: off-wheel goes to
+  // the wheel's first slot, the same answer `nextMode` gives. That slot is `default`,
+  // which is **not** the narrowest mode (`plan` is) — the wheel is not a permissiveness
+  // order — but it *is* narrower than the only off-wheel state you can reach,
+  // `bypassPermissions`, so the step still points away from wider.
+  const idx = MODE_CYCLE.indexOf(current)
+  const next = idx === -1 ? MODE_CYCLE[0]! : MODE_CYCLE[(idx + 1) % MODE_CYCLE.length]!
   permission.setMode(next)
   return permission.getMode()
 }
@@ -204,6 +240,7 @@ export function App({
       default: t('ui.permission.manual'),
       acceptEdits: t('ui.permission.accept_edits'),
       plan: t('ui.permission.plan_mode'),
+      auto: t('ui.permission.auto_mode'),
       bypassPermissions: t('ui.permission.bypass'),
     }),
     [t],
@@ -231,6 +268,10 @@ export function App({
   const [providerId, setProviderId] = useState(initialProvider || config.defaultProvider)
   const [modelId, setModelId] = useState(initialModel || config.defaultModel)
   const [pickerOpen, setPickerOpen] = useState(false)
+  // ↑/↓ 翻历史用的已提交输入。**必须住在这里而不是 InputBar 里** —— InputBar 会被
+  // 卸载（pickerOpen 三元 / apiKeyPrompt 早退 / Ctrl+G），组件内 state 随之清零，
+  // 于是「开一次模型选择器，历史就没了」（ROADMAP D7）。
+  const [inputHistory, setInputHistory] = useState<string[]>([])
   const [updateStatus, setUpdateStatus] = useState<UpdateStatus | null>(null)
   // Current git branch — read once at mount (not a git repo → null).
   const [gitBranch] = useState<string | null>(() => {
@@ -1242,6 +1283,8 @@ export function App({
                 <InputBar
                   onSubmit={handleSubmit}
                   isLoading={isLoading}
+                  history={inputHistory}
+                  onHistoryAppend={(v) => setInputHistory((prev) => [...prev, v])}
                   llm={autocompleteLlm}
                   recentMessages={recentMessages}
                   autocompleteEnabled={
@@ -1319,13 +1362,12 @@ export function App({
             <Box flexDirection="column">
               <Box flexDirection="row">
                 <Text color={PERMISSION_COLORS[permissionMode]}>
-                  ⏵⏵ {PERMISSION_LABELS[permissionMode]}
+                  {permissionGlyphPrefix(permissionMode) + PERMISSION_LABELS[permissionMode]}
                 </Text>
                 <Text dimColor>
                   {' '}
-                  ({t('ui.status.shift_tab_cycle')}: {PERMISSION_LABELS.default} ·{' '}
-                  {PERMISSION_LABELS.acceptEdits} · {PERMISSION_LABELS.plan} ·{' '}
-                  {PERMISSION_LABELS.bypassPermissions}){' · '}
+                  ({t('ui.status.shift_tab_cycle')}:{' '}
+                  {MODE_CYCLE.map((m) => PERMISSION_LABELS[m]).join(' · ')}){' · '}
                   {t('ui.status.esc_to_interrupt')}
                   {' · '}
                   {t('ui.status.left_for_agents')}

package/src/ui/commands.ts

@@ -17,7 +17,7 @@ import { unregisterMcpServerTools } from '../mcp/registry'
 import { buildCapabilityReport } from '../core/capability-inventory'
 import { InstructionsLoader } from '../core/instructions'
 import { findDerivableSections, DERIVABLE_HINTS } from '../core/claude-md-audit'
-import { worktreeRoot, workflowScriptDir, workflowScriptDirs } from '../core/paths.ts'
+import { miphamHome, workflowScriptDir, workflowScriptDirs, worktreeRoot } from '../core/paths.ts'
 import { fixDoctor, fixConfig, fixCache, selectRepoClaudeFiles } from '../core/fix'
 import { fixCodeTarget } from '../core/fix-code'
 import { homedir } from 'node:os'
@@ -108,7 +108,7 @@ import { keysCmd } from '../commands/keys'
 import { workflowViewCmd, workflowWatchCmd } from '../commands/workflow-view.js'
 import { listActiveAutoloops, formatLoopRows } from '../commands/autoloop-journal.js'
 import { execSync } from 'node:child_process'
-import { OLLAMA_PRESET_MODELS } from '../shared/constants'
+import { MIPHAM_DIR, OLLAMA_PRESET_MODELS } from '../shared/constants'
 import { renameActiveSession } from '../agent/cross-session/discovery'
 
 export interface CommandContext {
@@ -3366,7 +3366,6 @@ const fixCmd: CommandHandler = async (ctx, args) => {
   const t = resolveT(ctx)
   const { readFileSync, writeFileSync } = await import('node:fs')
   const { join } = await import('node:path')
-  const { homedir } = await import('node:os')
   const { parse: parseYaml } = await import('yaml')
 
   const target = args.find((a) => a === 'doctor' || a === 'config' || a === 'cache' || a === 'test')
@@ -3406,11 +3405,7 @@ const fixCmd: CommandHandler = async (ctx, args) => {
   }
 
   if (!target || target === 'config') {
-    const home = homedir()
-    const configPaths = [
-      join(process.cwd(), '.mipham', 'config.yml'),
-      join(home, '.mipham', 'config.yml'),
-    ]
+    const configPaths = [join(process.cwd(), MIPHAM_DIR, 'config.yml'), miphamHome('config.yml')]
     const hookEngine = ctx.engine.getHookEngine?.()
     const result = fixConfig({
       configPaths,
@@ -3444,7 +3439,7 @@ const fixCmd: CommandHandler = async (ctx, args) => {
   }
 
   if (!target || target === 'cache') {
-    const crsiDir = join(homedir(), '.mipham', 'crsi')
+    const crsiDir = miphamHome('crsi')
     const cacheFiles = ['eval-scores.jsonl', 'improvements.jsonl', 'prose-proposals.jsonl'].map(
       (f) => join(crsiDir, f),
     )
@@ -3670,7 +3665,7 @@ const filesCmd: CommandHandler = async (ctx) => {
   try {
     const entries = readdirSync(cwd, { withFileTypes: true })
     const items = entries
-      .filter((e) => !e.name.startsWith('.') || e.name === '.mipham' || e.name === '.mcp.json')
+      .filter((e) => !e.name.startsWith('.') || e.name === MIPHAM_DIR || e.name === '.mcp.json')
       .slice(0, 40)
       .map((e) => {
         const icon = e.isDirectory() ? '📁' : '📄'
@@ -4316,8 +4311,7 @@ const memoryCmd: CommandHandler = async (ctx, args) => {
   const { existsSync, readdirSync, readFileSync, statSync } = await import('node:fs')
   const { join } = await import('node:path')
 
-  const home = homedir()
-  const memoryDir = join(home, '.mipham', 'memory')
+  const memoryDir = miphamHome('memory')
 
   // /memory gc — 记忆卫生：归档「0 召回 + 过期」的 auto-* 记忆（手写只报告）
   if (args[0]?.toLowerCase() === 'gc') {
@@ -4467,15 +4461,20 @@ const upgradeCmd: CommandHandler = async (ctx) => {
     lines.push(`Config backed up to: ${backupPath}`)
   }
 
-  const ok = performUpdate(update.latest)
+  const result = performUpdate(update.latest)
 
-  if (ok) {
+  if (result.ok) {
     const configPath = getConfigPath()
     const { existsSync } = await import('node:fs')
-    ctx.setUpdateStatus({ state: 'installed', latest: update.latest })
+    // 只有自证通过才置「已装待重启」—— 装坏了还提示重启，是在骗用户。
+    if (result.verified) ctx.setUpdateStatus({ state: 'installed', latest: update.latest })
     lines.push('')
     lines.push(t('commands.upgrade.updated', { version: update.latest }))
 
+    if (!result.verified) {
+      lines.push(t('commands.upgrade.unverified', { reason: result.reason ?? '' }))
+    }
+
     if (existsSync(configPath)) {
       lines.push(t('commands.upgrade.config_preserved', { path: configPath }))
     } else if (backupPath) {
@@ -4488,8 +4487,17 @@ const upgradeCmd: CommandHandler = async (ctx) => {
     lines.push(t('commands.upgrade.old_version_warning'))
   } else {
     lines.push('')
+    // 失败信息必须回答两件事：为什么，以及**我手里还有没有 CLI**。
+    const rollbackNote = t(
+      result.rolledBack ? 'commands.upgrade.rolled_back' : 'commands.upgrade.no_rollback',
+    )
     lines.push(
-      t('commands.upgrade.update_failed', { command: NPM_UPDATE_COMMAND, path: backupPath || '' }),
+      t('commands.upgrade.update_failed', {
+        reason: result.reason ?? '',
+        command: NPM_UPDATE_COMMAND,
+        path: backupPath || '',
+        rolledBack: rollbackNote,
+      }),
     )
   }
 
@@ -4982,10 +4990,8 @@ const loginCmd: CommandHandler = (ctx) => {
 
 const logoutCmd: CommandHandler = async () => {
   const { existsSync } = await import('node:fs')
-  const { join } = await import('node:path')
 
-  const home = homedir()
-  const userConfig = join(home, '.mipham', 'config.yml')
+  const userConfig = miphamHome('config.yml')
   const hasUserConfig = existsSync(userConfig)
 
   return {
@@ -5027,9 +5033,8 @@ const feedbackCmd: CommandHandler = async (ctx, args) => {
     try {
       const { writeFileSync, mkdirSync, existsSync } = await import('node:fs')
       const { join } = await import('node:path')
-      const { homedir } = await import('node:os')
 
-      const dir = join(homedir(), '.mipham', 'feedback')
+      const dir = miphamHome('feedback')
       if (!existsSync(dir)) mkdirSync(dir, { recursive: true })
 
       const ts = new Date().toISOString().replace(/[:.]/g, '-')

package/src/ui/config-wizard.tsx

@@ -17,10 +17,10 @@ import type { ModelInfo } from '../shared/types'
 import { mkdirSync } from 'node:fs'
 import { atomicWriteFileSync } from '../shared/atomic-write'
 import { join } from 'node:path'
-import { homedir } from 'node:os'
 import { execSync } from 'node:child_process'
 import { getCredentialKey, encryptApiKey } from '../config/credential-crypto'
 import { CLOUD_PROVIDERS, getActiveModels, buildConfigYaml } from '../config/wizard-config'
+import { miphamHome } from '../core/paths.ts'
 
 // ── Types ──
 
@@ -38,7 +38,7 @@ const SELECTED_COLOR = 'cyan'
 // ── Helpers ──
 
 function writeConfigFile(providerId: string, modelId: string, apiKey: string): void {
-  const configDir = join(homedir(), '.mipham')
+  const configDir = miphamHome()
   mkdirSync(configDir, { recursive: true })
 
   const models = providerId === 'ollama' ? getOllamaModelListForConfig() : []

package/src/ui/input.tsx

@@ -24,6 +24,14 @@ interface InputBarProps {
   onCancel?: () => void
   /** When false, don't auto-open the slash-command picker when typing `/`. */
   showCommandPicker?: boolean
+  /**
+   * ↑/↓ 翻历史用的已提交输入。**由调用方持有，不放本组件内** —— app.tsx 有三条路径把
+   * InputBar 整个卸载（`pickerOpen` 三元 / `apiKeyPrompt` 早退 / Ctrl+G），
+   * 放在这里会被卸载清空（ROADMAP D7）。
+   */
+  history: string[]
+  /** 提交时把该条追加进 history（由调用方落 state）。 */
+  onHistoryAppend: (value: string) => void
   /** LLM 续写建议所需的模型（app.tsx 传；RemoteEngine 下 undefined → 补全禁用）。 */
   llm?: Llm
   /** 最近对话上下文（供续写贴合）。 */
@@ -288,6 +296,8 @@ export function InputBar({
   onCyclePermission,
   onCancel,
   showCommandPicker = true,
+  history,
+  onHistoryAppend,
   llm,
   recentMessages,
   autocompleteEnabled = true,
@@ -302,7 +312,9 @@ export function InputBar({
   const prevLoading = useRef(isLoading)
 
   // ── Message history for arrow-key navigation (Claude Code parity) ──
-  const [submittedHistory, setSubmittedHistory] = useState<string[]>([])
+  // `history` 由调用方持有（见 InputBarProps.history）：本组件不拥有它，因为
+  // app.tsx 会卸载本组件，而卸载会清空组件内 state（ROADMAP D7）。
+  // 下面两个 ref 是**浏览游标**、不是历史本体，随卸载重置才是对的。
   const historyIndexRef = useRef(-1) // -1 = not browsing history
   const savedDraftRef = useRef('') // saved user draft before browsing history
 
@@ -434,7 +446,7 @@ export function InputBar({
 
       const result = navigateHistory(
         {
-          history: submittedHistory,
+          history,
           index: historyIndexRef.current,
           savedDraft: savedDraftRef.current,
         },
@@ -480,7 +492,7 @@ export function InputBar({
       onCancel?.()
     }
     // Save to message history for arrow-key navigation
-    setSubmittedHistory((prev) => [...prev, finalValue])
+    onHistoryAppend(finalValue)
     historyIndexRef.current = -1
     savedDraftRef.current = ''
     onSubmit(finalValue)

package/src/workflow/journal.ts

@@ -7,9 +7,9 @@ import {
   readdirSync,
 } from 'node:fs'
 import { join } from 'node:path'
-import { homedir } from 'node:os'
+import { miphamHome } from '../core/paths.ts'
 
-const WORKFLOW_DIR = join(homedir(), '.mipham', 'workflows')
+const WORKFLOW_DIR = miphamHome('workflows')
 
 export interface JournalEntry {
   seq: number