easyai 1.7.0 → 2.0.0

data/lib/easyai/command/setup.rb

@@ -1,494 +1,603 @@
-require_relative '../config/easyai_config'
-require_relative '../base/system_keychain'
-require 'colored2'
+# frozen_string_literal: true
+
+require 'io/console'
 require 'json'
-require 'open3'
+require 'colored2'
+require_relative '../command'
+require_relative '../config/local_config'
+require_relative '../base/secret_masker'
 
 module EasyAI
   class Command
+    # 交互式本地配置生成器
+    #
+    # 子命令矩阵：
+    #   easyai setup                                       # 全量交互（首次）/ 选择菜单 upsert（已存在）
+    #   easyai setup --tool=claude                         # 仅配置指定工具
+    #   easyai setup --add=kimi --tool=claude              # 追加 / 覆盖单平台
+    #   easyai setup --remove=kimi --tool=claude           # 删除单平台
+    #   easyai setup --list                                # 脱敏概览
+    #   easyai setup --reset                               # 删除现有 config 后重走交互
+    #   easyai setup --edit                                # 用 $EDITOR 直接编辑 config.json
     class Setup < Command
-      self.summary = '初始化配置环境'
+      self.summary = '配置 EasyAI（写入 ~/.easyai/config.json）'
       self.description = <<-DESC
-      初始化 EasyAI 配置环境，自动下载并设置配置仓库。
-
-      主要功能：
-          * 自动下载配置仓库
-          * 验证配置完整性
-          * 解密配置文件（如需要）
-          * 显示可用用户列表
-          * 管理密码存储
-
-      使用示例：
-          $ easyai setup                    # 标准初始化
-          $ easyai setup --force            # 强制重新下载配置
-          $ easyai setup --branch dev       # 使用开发分支
-          $ easyai setup --verify           # 仅验证配置状态
-          $ easyai setup --list-users       # 列出可用用户
-      DESC
+配置 EasyAI 的本地凭证 / 代理设置。配置文件位于 ~/.easyai/config.json。
+
+使用示例：
+
+    $ easyai setup                                # 首次：全量交互；已存在：upsert 选择菜单
+    $ easyai setup --tool=claude                  # 仅配置 claude
+    $ easyai setup --add=kimi --tool=claude       # 追加或覆盖单个平台
+    $ easyai setup --remove=kimi --tool=claude    # 删除单个平台
+    $ easyai setup --list                         # 脱敏方式打印当前配置概览
+    $ easyai setup --reset                        # 删除现有 config 后重走交互
+    $ easyai setup --edit                         # 用 $EDITOR 打开 config.json 直接编辑
+DESC
+
+      # 仅 setup 内含的硬编码平台清单；runtime（AIToolBase）不读取此常量
+      KNOWN_PLATFORMS = {
+        'claude' => {
+          'claude_official' => {
+            label: 'Claude 官方',
+            required_env: %w[ANTHROPIC_AUTH_TOKEN],
+            optional_env: {
+              'ANTHROPIC_BASE_URL' => 'https://api.anthropic.com'
+            }
+          },
+          'kimi' => {
+            label: 'Kimi（Moonshot）',
+            required_env: %w[ANTHROPIC_AUTH_TOKEN],
+            optional_env: {
+              'ANTHROPIC_BASE_URL' => 'https://api.kimi.com/coding/'
+            }
+          },
+          'deepseek' => {
+            label: 'DeepSeek',
+            required_env: %w[ANTHROPIC_AUTH_TOKEN],
+            optional_env: {
+              'ANTHROPIC_BASE_URL' => 'https://api.deepseek.com/anthropic',
+              'ANTHROPIC_MODEL' => 'deepseek-v4-pro[1m]',
+              'ANTHROPIC_DEFAULT_OPUS_MODEL' => 'deepseek-v4-pro[1m]',
+              'ANTHROPIC_DEFAULT_SONNET_MODEL' => 'deepseek-v4-pro[1m]',
+              'ANTHROPIC_DEFAULT_HAIKU_MODEL' => 'deepseek-v4-flash',
+              'CLAUDE_CODE_SUBAGENT_MODEL' => 'deepseek-v4-flash',
+              'CLAUDE_CODE_EFFORT_LEVEL' => 'max'
+            }
+          },
+          'aliqwen' => {
+            label: '阿里千问 Coding Plan（兼容 Anthropic 协议）',
+            required_env: %w[ANTHROPIC_AUTH_TOKEN],
+            optional_env: {
+              'ANTHROPIC_BASE_URL' => 'https://coding.dashscope.aliyuncs.com/apps/anthropic',
+              'ANTHROPIC_MODEL' => 'qwen3.6-plus',
+              'ANTHROPIC_DEFAULT_OPUS_MODEL' => 'qwen3.6-plus',
+              'ANTHROPIC_DEFAULT_SONNET_MODEL' => 'qwen3.6-plus',
+              'ANTHROPIC_DEFAULT_HAIKU_MODEL' => 'qwen3.6-plus',
+              'ANTHROPIC_SMALL_FAST_MODEL' => 'qwen3.6-plus',
+              'CLAUDE_CODE_SUBAGENT_MODEL' => 'qwen3.6-plus',
+              'CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS' => '1'
+            }
+          },
+          'minimax' => {
+            label: 'MiniMax（兼容 Anthropic 协议）',
+            required_env: %w[ANTHROPIC_AUTH_TOKEN],
+            optional_env: {
+              'ANTHROPIC_BASE_URL' => 'https://api.minimaxi.com/anthropic',
+              'ANTHROPIC_MODEL' => 'MiniMax-M2.7-highspeed',
+              'ANTHROPIC_DEFAULT_SONNET_MODEL' => 'MiniMax-M2.7-highspeed',
+              'ANTHROPIC_DEFAULT_HAIKU_MODEL' => 'MiniMax-M2.7-highspeed',
+              'ANTHROPIC_DEFAULT_OPUS_MODEL' => 'MiniMax-M2.7-highspeed'
+            }
+          },
+          'glm' => {
+            label: 'GLM Coding Plan（bigmodel.cn）',
+            required_env: %w[ANTHROPIC_AUTH_TOKEN],
+            optional_env: {
+              'ANTHROPIC_BASE_URL' => 'https://open.bigmodel.cn/api/anthropic',
+              'API_TIMEOUT_MS' => '3000000',
+              'ANTHROPIC_DEFAULT_OPUS_MODEL' => 'glm-5.1',
+              'ANTHROPIC_DEFAULT_SONNET_MODEL' => 'glm-5-turbo',
+              'ANTHROPIC_DEFAULT_HAIKU_MODEL' => 'glm-4.5-air'
+            }
+          }
+        },
+        'gemini' => {
+          'google_official' => {
+            label: 'Google 官方',
+            required_env: %w[GEMINI_API_KEY],
+            optional_env: {}
+          }
+        },
+        'codex' => {
+          'openai_official' => {
+            label: 'OpenAI 官方',
+            required_env: %w[OPENAI_API_KEY],
+            optional_env: {
+              'OPENAI_BASE_URL' => 'https://api.openai.com/v1'
+            }
+          },
+          'azure_openai' => {
+            label: 'Azure OpenAI',
+            required_env: %w[AZURE_OPENAI_API_KEY AZURE_OPENAI_ENDPOINT],
+            optional_env: {}
+          },
+          'deepseek' => {
+            label: 'DeepSeek（兼容 OpenAI 协议）',
+            required_env: %w[OPENAI_API_KEY],
+            optional_env: {
+              'OPENAI_BASE_URL' => 'https://api.deepseek.com/v1'
+            }
+          }
+        }
+      }.freeze
+
+      # 敏感字段脱敏统一走 Base::SecretMasker，保留常量别名仅用于历史兼容
+      SENSITIVE_KEY_PATTERN = Base::SecretMasker::SENSITIVE_KEY_PATTERN
 
       def self.options
         [
-          ['--force', '强制重新下载配置仓库'],
-          ['--branch=BRANCH', '指定配置仓库分支 (默认: master)'],
-          ['--verify', '仅验证现有配置，不进行修改'],
-          ['--list-users', '列出所有可用用户'],
-          ['--clean', '清理所有临时解密文件'],
-          ['--no-password', '跳过密码设置'],
+          ['--tool=NAME', '指定要配置的工具（claude / gemini / codex）'],
+          ['--add=PLATFORM', '在指定工具下追加或覆盖单个平台'],
+          ['--remove=PLATFORM', '在指定工具下删除单个平台'],
+          ['--list', '脱敏方式展示当前所有配置'],
+          ['--reset', '删除现有 config.json 后重走全量交互'],
+          ['--edit', '使用 $EDITOR / $VISUAL 直接编辑 config.json']
         ].concat(super)
       end
 
       def initialize(argv)
-        @force = argv.flag?('force')
-        @branch = argv.option('branch') || 'master'
-        @verify_only = argv.flag?('verify')
-        @list_users = argv.flag?('list-users')
-        @clean = argv.flag?('clean')
-        @skip_password = argv.flag?('no-password')
+        @tool = argv.option('tool')
+        @add = argv.option('add')
+        @remove = argv.option('remove')
+        @list = argv.flag?('list')
+        @reset = argv.flag?('reset')
+        @edit = argv.flag?('edit')
         super
-
-        @config_dir = File.expand_path('~/.easyai')
-        @repo_dir = File.join(@config_dir, 'EasyAISetting')
       end
 
       def run
-        show_welcome_banner
+        return run_list if @list
+        return run_remove if @remove
+        return run_add if @add
+        return run_reset if @reset
+        return run_edit if @edit
+
+        run_full_interactive
+      rescue Config::LocalConfig::ParseError, Config::LocalConfig::IncompatibleVersionError => e
+        print_error(e.message)
+        puts "  可运行: #{'easyai setup --reset'.yellow} 重新生成配置"
+        exit 1
+      rescue Interrupt
+        puts
+        print_error('用户取消操作')
+        exit 130
+      end
 
-        if @verify_only
-          verify_configuration
-          return
-        end
+      private
 
-        if @clean
-          cleanup_files
-          return
-        end
+      # ----- list -----
 
-        if @list_users
-          show_available_users
-          return
+      def run_list
+        unless Config::LocalConfig.exists?
+          print_error("未找到本地配置 #{Config::LocalConfig.config_path}")
+          puts "  请运行: #{'easyai setup'.yellow}"
+          exit 1
         end
 
-        # 执行主要设置流程
-        perform_setup
-
-        # 显示完成信息
-        show_completion_info
-      end
-
-      private
-
-      def show_welcome_banner
+        cfg = Config::LocalConfig.load
         puts
-        puts "🚀 " + "EasyAI 配置环境初始化".green.bold
-        puts "=" * 60
-        puts
-      end
+        puts "EasyAI 配置概览（#{Config::LocalConfig.config_path}）".cyan.bold
+        puts '=' * 60
+        puts "schema 版本：#{cfg['version']}"
 
-      def perform_setup
-        step_counter = 0
+        printed_any = false
+        %w[claude gemini codex].each do |tool|
+          tool_cfg = cfg[tool]
+          next unless tool_cfg.is_a?(Hash)
 
-        # 步骤1: 检查并创建目录
-        step_counter += 1
-        print_step(step_counter, "检查配置目录")
-        ensure_directories
+          platforms = tool_cfg['platforms']
+          next unless platforms.is_a?(Hash) && !platforms.empty?
 
-        # 步骤2: 下载或更新配置仓库
-        step_counter += 1
-        print_step(step_counter, "下载配置仓库")
-        if @force || !repo_exists?
-          download_repo
-        else
-          update_repo
+          printed_any = true
+          puts
+          puts "[#{tool}]".green.bold
+          platforms.each do |name, data|
+            puts "  - #{name.cyan}"
+            print_platform_data(data)
+          end
         end
 
-        # 步骤3: 处理加密文件
-        step_counter += 1
-        print_step(step_counter, "处理配置文件")
-        handle_encrypted_files unless @skip_password
+        # 列出未列入三家但用户自定义的工具键
+        cfg.each do |key, value|
+          next if key == 'version'
+          next if %w[claude gemini codex].include?(key)
+          next unless value.is_a?(Hash) && value['platforms'].is_a?(Hash)
 
-        # 步骤4: 验证配置
-        step_counter += 1
-        print_step(step_counter, "验证配置完整性")
-        verify_basic_config
+          printed_any = true
+          puts
+          puts "[#{key}]".green.bold
+          value['platforms'].each do |name, data|
+            puts "  - #{name.cyan}"
+            print_platform_data(data)
+          end
+        end
 
-        # 步骤5: 显示可用用户
-        step_counter += 1
-        print_step(step_counter, "加载用户列表")
-        show_available_users(compact: true)
+        puts '  （暂无任何平台配置）' unless printed_any
       end
 
-      def print_step(number, description)
-        puts "\n" + "步骤 #{number}:".cyan + " #{description}"
-        puts "-" * 40
-      end
+      def print_platform_data(data)
+        return unless data.is_a?(Hash)
 
-      def ensure_directories
-        unless Dir.exist?(@config_dir)
-          FileUtils.mkdir_p(@config_dir)
-          puts "  ✓ 创建配置目录: #{@config_dir}"
+        env = data['env']
+        if env.is_a?(Hash) && !env.empty?
+          puts '      env:'
+          env.each do |k, v|
+            puts "        #{k} = #{format_value(k, v)}"
+          end
         else
-          puts "  ✓ 配置目录已存在: #{@config_dir}"
+          puts '      env: (空)'
+        end
+
+        proxy = data['proxy']
+        if proxy.is_a?(Hash) && !proxy.empty?
+          puts '      proxy:'
+          proxy.each do |k, v|
+            puts "        #{k} = #{v}"
+          end
         end
       end
 
-      def repo_exists?
-        Dir.exist?(@repo_dir) && Dir.exist?(File.join(@repo_dir, '.git'))
+      def format_value(key, value)
+        Base::SecretMasker.format_value(key, value)
       end
 
-      def download_repo
-        if repo_exists? && @force
-          puts "  正在删除现有仓库..."
-          FileUtils.rm_rf(@repo_dir)
-        end
+      def sensitive_key?(key)
+        Base::SecretMasker.sensitive_key?(key)
+      end
 
-        puts "  正在从 Gitee 下载配置仓库 (#{@branch} 分支)..."
+      def mask_sensitive(value)
+        Base::SecretMasker.mask(value)
+      end
 
-        # Gitee 不需要代理，临时清除代理环境变量
-        output = nil
-        success = false
+      # ----- remove -----
 
-        if Gem.win_platform?
-          # Windows: 保存并清除环境变量
-          old_env = {}
-          ['HTTP_PROXY', 'HTTPS_PROXY', 'http_proxy', 'https_proxy'].each do |key|
-            old_env[key] = ENV[key]
-            ENV.delete(key)
-          end
+      def run_remove
+        unless @tool && !@tool.empty?
+          print_error('--remove 必须配合 --tool=<name> 使用')
+          exit 1
+        end
 
-          begin
-            cmd = "git clone --depth 1 --branch #{@branch} #{EasyAIConfig::REPO_URL} #{@repo_dir} 2>&1"
-            puts "  执行命令: #{cmd}" if ENV['EASYAI_DEBUG']
-            output = `#{cmd}`
-            success = $?.success?
-          ensure
-            # 恢复环境变量
-            old_env.each { |k, v| ENV[k] = v if v }
-          end
-        else
-          # Unix/Linux/macOS: 使用 env -u
-          cmd = "env -u HTTP_PROXY -u HTTPS_PROXY -u http_proxy -u https_proxy git clone --depth 1 --branch #{@branch} #{EasyAIConfig::REPO_URL} #{@repo_dir} 2>&1"
-          puts "  执行命令: #{cmd}" if ENV['EASYAI_DEBUG']
-          output = `#{cmd}`
-          success = $?.success?
+        unless Config::LocalConfig.exists?
+          print_error("未找到本地配置 #{Config::LocalConfig.config_path}")
+          puts "  请运行: #{'easyai setup'.yellow}"
+          exit 1
         end
 
-        if success
-          puts "  ✓ 配置仓库下载成功"
-        else
-          puts "  ✗ 下载失败: #{output}".red
+        available = Config::LocalConfig.available_platforms(@tool)
+        unless available.include?(@remove)
+          print_error("工具 #{@tool} 下不存在平台 #{@remove}")
+          puts "  当前可用：#{available.join(', ')}" unless available.empty?
           exit 1
         end
-      end
 
-      def update_repo
-        puts "  检查配置仓库更新..."
-
-        Dir.chdir(@repo_dir) do
-          # 获取当前分支
-          current_branch = `git branch --show-current`.chomp
-
-          if current_branch != @branch
-            puts "  切换到 #{@branch} 分支..."
-            # 不使用代理
-            if Gem.win_platform?
-              # Windows: 临时清除环境变量
-              old_env = {}
-              ['HTTP_PROXY', 'HTTPS_PROXY', 'http_proxy', 'https_proxy'].each do |key|
-                old_env[key] = ENV[key]
-                ENV.delete(key)
-              end
-
-              begin
-                system("git fetch origin #{@branch} > nul 2>&1")
-              ensure
-                old_env.each { |k, v| ENV[k] = v if v }
-              end
-            else
-              system("env -u HTTP_PROXY -u HTTPS_PROXY -u http_proxy -u https_proxy git fetch origin #{@branch} > /dev/null 2>&1")
-            end
-            system("git checkout #{@branch} > /dev/null 2>&1")
-          end
+        Config::LocalConfig.delete_platform(@tool, @remove)
+        print_success("已删除 #{@tool} / #{@remove}")
 
-          # 拉取更新（不使用代理）
-          output = nil
-          if Gem.win_platform?
-            # Windows: 临时清除环境变量
-            old_env = {}
-            ['HTTP_PROXY', 'HTTPS_PROXY', 'http_proxy', 'https_proxy'].each do |key|
-              old_env[key] = ENV[key]
-              ENV.delete(key)
-            end
+        # 如果该 tool 已被一并清除，再做一次温和提示
+        unless Config::LocalConfig.available_platforms(@tool).any?
+          puts "  工具 #{@tool} 下已无任何平台，已从配置中移除该工具键。"
+        end
+      end
 
-            begin
-              output = `git pull --force 2>&1`
-            ensure
-              old_env.each { |k, v| ENV[k] = v if v }
-            end
-          else
-            output = `env -u HTTP_PROXY -u HTTPS_PROXY -u http_proxy -u https_proxy git pull --force 2>&1`
-          end
+      # ----- add -----
 
-          if $?.success?
-            if output.include?("Already up to date")
-              puts "  ✓ 配置已是最新版本"
-            else
-              puts "  ✓ 配置已更新到最新版本"
-            end
-          else
-            puts "  ⚠️ 更新失败，使用现有配置"
-          end
+      def run_add
+        unless @tool && !@tool.empty?
+          print_error('--add 必须配合 --tool=<name> 使用')
+          exit 1
         end
-      end
 
-      def handle_encrypted_files
-        encrypted_files = Dir.glob(File.join(@repo_dir, '**/*.encrypted'))
+        tool_known = KNOWN_PLATFORMS[@tool]
+        unless tool_known
+          print_error("未支持的工具：#{@tool}")
+          puts "  可用工具：#{KNOWN_PLATFORMS.keys.join(', ')}"
+          exit 1
+        end
 
-        if encrypted_files.empty?
-          puts "  ✓ 未发现加密文件"
-          return
+        unless tool_known.key?(@add)
+          print_error("未知平台：#{@add}（不在 KNOWN_PLATFORMS[#{@tool}] 中）")
+          puts "  可用平台：#{tool_known.keys.join(', ')}"
+          puts '  提示：如确需新增自定义平台，可使用 --edit 手工编辑 config.json'
+          exit 1
         end
 
-        puts "  发现 #{encrypted_files.length} 个加密文件"
+        existing = Config::LocalConfig.available_platforms(@tool).include?(@add)
+        if existing
+          print_status('覆盖', "#{@tool} / #{@add}（已存在，将覆盖原有数据）")
+        else
+          print_status('新增', "#{@tool} / #{@add}")
+        end
 
-        # 获取密码
-        password = get_setup_password
-        return unless password
+        data = collect_platform_data(@tool, @add)
+        Config::LocalConfig.upsert_platform(@tool, @add, data)
+        print_success("已写入 #{@tool} / #{@add}")
+      end
 
-        # 测试密码
-        if test_password(password, encrypted_files.first)
-          puts "  ✓ 密码验证成功"
+      # ----- reset -----
 
-          # 保存到钥匙串
-          if should_save_password?
-            if Base::SystemKeychain.store_password(password)
-              puts "  ✓ 密码已保存到系统钥匙串"
-            end
-          end
+      def run_reset
+        path = Config::LocalConfig.config_path
+        if File.exist?(path)
+          File.delete(path)
+          print_success("已删除原配置文件 #{path}")
         else
-          puts "  ✗ 密码验证失败".red
-          puts "  提示: 配置文件将在使用时解密"
+          print_status('提示', "原配置文件不存在 #{path}，直接进入交互配置")
         end
+
+        run_full_interactive
       end
 
-      def get_setup_password
-        # 优先使用环境变量
-        if ENV['EASYAI_TEST_PASSWORD']
-          puts "  使用环境变量中的密码"
-          return ENV['EASYAI_TEST_PASSWORD']
-        end
+      # ----- edit -----
 
-        # 检查钥匙串
-        stored_password = Base::SystemKeychain.get_stored_password
-        if stored_password && !stored_password.empty?
-          puts "  使用系统钥匙串中的密码"
-          return stored_password
+      def run_edit
+        editor = ENV['VISUAL'] || ENV['EDITOR']
+        if editor.nil? || editor.empty?
+          print_error('未设置 $VISUAL / $EDITOR 环境变量')
+          puts '  请先 export EDITOR=vim 等并重试'
+          exit 1
         end
 
-        # 提示用户输入
-        puts "  配置文件已加密，请输入解密密码"
-        print "  密码: "
+        path = Config::LocalConfig.config_path
+        unless File.exist?(path)
+          print_status('提示', "config 不存在，先创建空骨架：#{path}")
+          Config::LocalConfig.save('version' => Config::LocalConfig::SCHEMA_VERSION)
+        end
 
-        begin
-          require 'io/console'
-          password = STDIN.noecho(&:gets)&.chomp
-          puts
-          password
-        rescue
-          nil
+        print_status('编辑', "#{editor} #{path}")
+        unless system(editor, path)
+          print_error("编辑器退出非零：#{editor}")
+          exit 1
         end
-      end
 
-      def test_password(password, test_file)
+        # 校验回写后是否仍可解析
         begin
-          require_relative '../base/file_crypto'
-          key = Base::FileCrypto.generate_key(password)
-          content = File.read(test_file)
-          Base::FileCrypto.aes_128_ecb_decrypt(key, content)
-          true
-        rescue
-          false
+          Config::LocalConfig.load
+          print_success('配置文件解析通过')
+        rescue Config::LocalConfig::Error => e
+          print_error("配置解析失败：#{e.message}")
+          puts "  可运行: #{'easyai setup --reset'.yellow} 重新生成"
+          exit 1
         end
       end
 
-      def should_save_password?
-        print "  是否保存密码到系统钥匙串？(y/n): "
-        response = STDIN.gets&.chomp&.downcase
-        response == 'y' || response == 'yes'
-      end
-
-      def verify_basic_config
-        required_files = [
-          'index.json.encrypted',
-          'jps_client_config.json.encrypted'
-        ]
-
-        missing_files = []
-        required_files.each do |file|
-          path = File.join(@repo_dir, file)
-          if File.exist?(path)
-            puts "  ✓ #{file}"
-          else
-            missing_files << file
-            puts "  ✗ #{file} (缺失)".red
-          end
-        end
+      # ----- 全量交互 / upsert 选择菜单 -----
 
-        if missing_files.empty?
-          puts "  ✓ 核心配置文件完整"
+      def run_full_interactive
+        if Config::LocalConfig.exists?
+          run_upsert_menu
         else
-          puts "  ⚠️ 缺少 #{missing_files.length} 个配置文件".yellow
+          run_first_time_setup
         end
       end
 
-      def show_available_users(compact: false)
-        # 初始化配置
-        EasyAIConfig.initialize(verbose: false)
+      def run_first_time_setup
+        puts
+        puts 'EasyAI 首次配置向导'.green.bold
+        puts '=' * 60
 
-        # 获取 index 配置
-        index_config = EasyAIConfig.get_config('index', verbose: false)
+        tools = select_multi('请选择要配置的 AI 工具（用逗号分隔多个序号，回车默认全部）',
+                             KNOWN_PLATFORMS.keys, allow_all_default: true)
 
-        unless index_config
-          puts "  ✗ 无法加载用户配置".red
-          return
+        tools.each do |tool|
+          puts
+          puts "[#{tool}]".green.bold
+          available = KNOWN_PLATFORMS[tool].keys
+          chosen = select_multi(
+            "  请选择 #{tool} 下要配置的平台（逗号分隔多个序号，回车默认全部）",
+            available, allow_all_default: true
+          )
+
+          chosen.each do |platform|
+            data = collect_platform_data(tool, platform)
+            Config::LocalConfig.upsert_platform(tool, platform, data)
+            print_success("已写入 #{tool} / #{platform}")
+          end
         end
 
-        if compact
-          user_count = count_users(index_config)
-          puts "  ✓ 发现 #{user_count} 个可用用户配置"
-        else
-          display_users_table(index_config)
-        end
-      rescue => e
-        puts "  ✗ 加载用户列表失败: #{e.message}".red
+        puts
+        run_list
       end
 
-      def count_users(config)
-        count = 0
-
-        if config.is_a?(Hash)
-          %w[claude gemini gpt].each do |tool|
-            next unless config[tool]
+      def run_upsert_menu
+        if @tool && !@tool.empty?
+          tools = [@tool]
+          unless KNOWN_PLATFORMS.key?(@tool)
+            print_error("未支持的工具：#{@tool}")
+            puts "  可用工具：#{KNOWN_PLATFORMS.keys.join(', ')}"
+            exit 1
+          end
+        else
+          puts
+          puts 'EasyAI upsert 配置菜单'.green.bold
+          puts '=' * 60
+          tools = select_multi('请选择要更新的 AI 工具（逗号分隔多个序号）',
+                               KNOWN_PLATFORMS.keys, allow_all_default: false)
+        end
 
-            if tool == "claude" && config[tool].is_a?(Hash)
-              config[tool].each do |_auth_type, users|
-                count += users.keys.length if users.is_a?(Hash)
-              end
-            elsif config[tool].is_a?(Hash)
-              count += config[tool].keys.length
+        tools.each do |tool|
+          available_known = KNOWN_PLATFORMS[tool].keys
+          puts
+          puts "[#{tool}]".green.bold
+          chosen = select_multi(
+            "  请选择 #{tool} 下要追加 / 覆盖的平台（逗号分隔多个序号）",
+            available_known, allow_all_default: false
+          )
+
+          chosen.each do |platform|
+            existed = Config::LocalConfig.available_platforms(tool).include?(platform)
+            if existed
+              print_status('覆盖', "#{tool} / #{platform}（已存在，将覆盖原有数据）")
+            else
+              print_status('新增', "#{tool} / #{platform}")
             end
+
+            data = collect_platform_data(tool, platform)
+            Config::LocalConfig.upsert_platform(tool, platform, data)
+            print_success("已写入 #{tool} / #{platform}")
           end
         end
 
-        count
+        puts
+        run_list
       end
 
-      def display_users_table(config)
-        puts "\n可用用户列表:"
-        puts "=" * 60
+      # ----- 通用交互辅助 -----
 
-        %w[claude gemini gpt].each do |tool|
-          next unless config[tool]
+      # 多选列表，返回选中的 name 列表
+      def select_multi(prompt, options, allow_all_default:)
+        loop do
+          puts "#{prompt}："
+          options.each_with_index do |name, idx|
+            puts "  #{idx + 1}) #{Config::LocalConfig.platform_display_name(name)}"
+          end
+          tail = allow_all_default ? '（回车选全部，q 取消）' : '（q 取消）'
+          print "请输入 #{tail} > "
 
-          puts "\n#{tool.upcase}:"
+          input = $stdin.gets
+          raise Interrupt, '用户取消选择' if input.nil?
 
-          if tool == "claude" && config[tool].is_a?(Hash)
-            config[tool].each do |auth_type, users|
-              next unless users.is_a?(Hash)
-              puts "  #{auth_type}:"
-              users.each do |name, _file|
-                puts "    - #{name}"
-              end
-            end
-          elsif config[tool].is_a?(Hash)
-            config[tool].each do |name, _file|
-              puts "  - #{name}"
-            end
+          input = input.chomp.strip
+          raise Interrupt, '用户取消选择' if input.casecmp('q').zero?
+
+          if input.empty?
+            return options.dup if allow_all_default
+
+            print_error('输入不能为空，请重试')
+            next
           end
-        end
-      end
 
-      def verify_configuration
-        puts "\n验证配置状态..."
-        puts "=" * 60
-
-        # 检查目录
-        puts "\n目录检查:"
-        puts "  配置目录: #{@config_dir} - " + (Dir.exist?(@config_dir) ? "✓".green : "✗".red)
-        puts "  仓库目录: #{@repo_dir} - " + (repo_exists? ? "✓".green : "✗".red)
-
-        # 检查 Git 状态
-        if repo_exists?
-          puts "\nGit 状态:"
-          Dir.chdir(@repo_dir) do
-            branch = `git branch --show-current`.chomp
-            puts "  当前分支: #{branch}"
-
-            status = `git status --short`
-            if status.empty?
-              puts "  工作区: 干净 ✓".green
-            else
-              puts "  工作区: 有修改 ⚠️".yellow
-            end
+          indices = input.split(/[,\s]+/).reject(&:empty?).map { |s| Integer(s, 10) rescue nil }
+          if indices.any?(&:nil?) || indices.any? { |i| i < 1 || i > options.size }
+            print_error("非法序号：#{input}，请重试")
+            next
           end
+
+          return indices.uniq.map { |i| options[i - 1] }
         end
+      end
 
-        # 检查配置文件
-        puts "\n配置文件:"
-        verify_basic_config
+      # 收集单个平台的 env / proxy 数据
+      def collect_platform_data(tool, platform)
+        spec = KNOWN_PLATFORMS.dig(tool, platform) || {}
+        env = {}
 
-        # 检查密码
-        puts "\n密码状态:"
-        if ENV['EASYAI_TEST_PASSWORD']
-          puts "  环境变量密码: ✓".green
-        elsif Base::SystemKeychain.get_stored_password
-          puts "  系统钥匙串密码: ✓".green
-        else
-          puts "  未设置密码 ⚠️".yellow
+        Array(spec[:required_env]).each do |key|
+          env[key] = ask_required(key)
         end
 
-        # 尝试加载用户
-        show_available_users(compact: true)
-      end
+        (spec[:optional_env] || {}).each do |key, default|
+          env[key] = ask_optional(key, default)
+        end
 
-      def cleanup_files
-        puts "\n清理临时文件..."
-        puts "=" * 60
+        proxy = ask_proxy
 
-        # 清理解密的 JSON 文件
-        json_files = Dir.glob(File.join(@repo_dir, '**/*.json'))
-        cleanup_count = 0
+        data = { 'env' => env }
+        data['proxy'] = proxy unless proxy.empty?
+        data
+      end
 
-        json_files.each do |file|
-          encrypted_file = "#{file}.encrypted"
-          if File.exist?(encrypted_file)
-            FileUtils.rm_f(file)
-            cleanup_count += 1
-            puts "  删除: #{File.basename(file)}"
+      def ask_required(key)
+        loop do
+          if sensitive_key?(key)
+            print "  #{key}（必填，输入不回显）: "
+            value = read_secret_line
+          else
+            print "  #{key}（必填）: "
+            value = read_line
           end
+
+          return value if value && !value.empty?
+
+          print_error("#{key} 不能为空，请重试")
         end
+      end
 
-        if cleanup_count > 0
-          puts "\n  ✓ 清理了 #{cleanup_count} 个临时文件".green
+      def ask_optional(key, default)
+        if default && !default.to_s.empty?
+          print "  #{key}（可选，回车使用默认 #{default}）: "
         else
-          puts "  ✓ 没有需要清理的文件".green
+          print "  #{key}（可选，回车跳过）: "
         end
+
+        value =
+          if sensitive_key?(key)
+            read_secret_line
+          else
+            read_line
+          end
+
+        return default.to_s if (value.nil? || value.empty?) && default
+        return '' if value.nil?
+
+        value
       end
 
-      def show_completion_info
-        puts "\n" + "=" * 60
-        puts "✅ " + "配置初始化完成！".green.bold
-        puts
-        puts "您可以开始使用以下命令："
-        puts "  • easyai claude".cyan + "    - 启动 Claude"
-        puts "  • easyai gemini".cyan + "    - 启动 Gemini"
-        puts "  • easyai gpt".cyan + "       - 启动 GPT"
-        puts
-        puts "其他有用的命令："
-        puts "  • easyai setup --verify".cyan + "      - 验证配置状态"
-        puts "  • easyai setup --list-users".cyan + "  - 查看可用用户"
-        puts "  • easyai setup --clean".cyan + "       - 清理临时文件"
+      def ask_proxy
+        print '  是否配置 HTTP/HTTPS 代理？(y/N) > '
+        ans = read_line
+        return {} unless ans && ans.downcase.start_with?('y')
+
+        print '    HTTP_PROXY  (例如 http://127.0.0.1:7890): '
+        http = read_line
+        print '    HTTPS_PROXY (回车与 HTTP_PROXY 相同): '
+        https = read_line
+        https = http if https.nil? || https.empty?
+
+        proxy = {}
+        proxy['HTTP_PROXY'] = http unless http.nil? || http.empty?
+        proxy['HTTPS_PROXY'] = https unless https.nil? || https.empty?
+        proxy
+      end
+
+      def read_line
+        line = $stdin.gets
+        raise Interrupt, '用户取消输入' if line.nil?
+
+        line.chomp
+      end
+
+      def read_secret_line
+        line =
+          if $stdin.respond_to?(:noecho)
+            $stdin.noecho(&:gets)
+          else
+            # 在非 TTY（如测试用 StringIO）下退化为普通 gets，避免 NoMethodError
+            $stdin.gets
+          end
         puts
+        raise Interrupt, '用户取消输入' if line.nil?
+
+        line.chomp
+      end
+
+      # ----- 输出辅助 -----
+
+      def print_status(icon_text, detail)
+        puts "  #{icon_text.to_s.ljust(4).cyan} #{detail}"
+      end
+
+      def print_success(message)
+        puts "  ✓ #{message.green}"
+      end
+
+      def print_warning(message)
+        puts "  ⚠ #{message.yellow}"
+      end
+
+      def print_error(message)
+        puts "  ✗ #{message.red}"
       end
     end
   end
-end
+end