@armadra/agent 0.3.0 → 0.4.0

package/dist/cli/proxy.d.ts

@@ -0,0 +1,51 @@
+/**
+ * 环境变量代理（W4-C）：Node 的全局 fetch 缺省不读 `HTTPS_PROXY` / `HTTP_PROXY` / `NO_PROXY`。
+ *
+ * - 没设代理变量 → 什么都不做。
+ * - 运行时已接管（`NODE_USE_ENV_PROXY=1` 或 `--use-env-proxy`，且 Node 支持）→ 不重复设置。
+ * - Node 有 `http.setGlobalProxyFromEnv()`（24.x / 26.x 等）→ 进程启动时调用一次，等价于
+ *   `NODE_USE_ENV_PROXY=1`（fetch 与 http/https 全局 agent 都走代理，`NO_PROXY` 生效）。零依赖。
+ * - 不支持的 Node 版本 → 只在会联网的命令里于 stderr 提示一次（不中断）。
+ *
+ * `ama doctor` 用 `describeProxy()` 显示同一份状态；代理 URL 里的账号密码打码。
+ */
+export interface ProxyEnv {
+    httpsProxy?: string;
+    httpProxy?: string;
+    noProxy?: string;
+}
+export type ProxyState = "none"
+/** 运行时已按环境变量接管（NODE_USE_ENV_PROXY / --use-env-proxy）。 */
+ | "runtime"
+/** ama 启动时调用 http.setGlobalProxyFromEnv() 启用。 */
+ | "enabled"
+/** 设了代理变量，但当前 Node 不支持内置代理。 */
+ | "unsupported"
+/** 代理 URL 无法解析。 */
+ | "invalid";
+export interface ProxyStatus {
+    env: ProxyEnv;
+    state: ProxyState;
+    error?: string;
+}
+type SetGlobalProxy = (env?: NodeJS.ProcessEnv) => () => void;
+export interface ProxyRuntime {
+    setGlobalProxyFromEnv?: SetGlobalProxy | undefined;
+    execArgv: readonly string[];
+    version: string;
+}
+export declare function readProxyEnv(env: Readonly<Record<string, string | undefined>>): ProxyEnv;
+export declare function defaultProxyRuntime(): ProxyRuntime;
+/** 只判断不启用：没设代理 / 运行时已接管 / 能启用 / 不支持 / URL 无法解析。 */
+export declare function inspectProxy(env: Readonly<Record<string, string | undefined>>, runtime?: ProxyRuntime): ProxyStatus;
+/** 按上面的规则启用代理（进程级副作用）；同一进程只做一次，之后返回同一份状态。 */
+export declare function enableEnvProxy(env: Readonly<Record<string, string | undefined>>, runtime?: ProxyRuntime): ProxyStatus;
+/** 测试用：清掉进程内记住的状态。 */
+export declare function resetProxyForTest(): void;
+/** 代理 URL 里的账号密码打码。 */
+export declare function redactProxyUrl(value: string): string;
+/** 不能启用时给一次 stderr 提示（每个进程至多一次）；能用或没设代理返回 undefined。 */
+export declare function proxyHint(status: ProxyStatus, nodeVersion?: string): string | undefined;
+/** `ama doctor` 的代理段落。 */
+export declare function describeProxy(status: ProxyStatus): string[];
+export {};

package/dist/cli/proxy.js

@@ -0,0 +1,135 @@
+/**
+ * 环境变量代理（W4-C）：Node 的全局 fetch 缺省不读 `HTTPS_PROXY` / `HTTP_PROXY` / `NO_PROXY`。
+ *
+ * - 没设代理变量 → 什么都不做。
+ * - 运行时已接管（`NODE_USE_ENV_PROXY=1` 或 `--use-env-proxy`，且 Node 支持）→ 不重复设置。
+ * - Node 有 `http.setGlobalProxyFromEnv()`（24.x / 26.x 等）→ 进程启动时调用一次，等价于
+ *   `NODE_USE_ENV_PROXY=1`（fetch 与 http/https 全局 agent 都走代理，`NO_PROXY` 生效）。零依赖。
+ * - 不支持的 Node 版本 → 只在会联网的命令里于 stderr 提示一次（不中断）。
+ *
+ * `ama doctor` 用 `describeProxy()` 显示同一份状态；代理 URL 里的账号密码打码。
+ */
+import * as http from "node:http";
+function pick(env, name) {
+    const value = env[name.toLowerCase()] ?? env[name.toUpperCase()];
+    return value !== undefined && value.trim() !== "" ? value.trim() : undefined;
+}
+export function readProxyEnv(env) {
+    const out = {};
+    const https = pick(env, "https_proxy");
+    const plain = pick(env, "http_proxy");
+    const no = pick(env, "no_proxy");
+    if (https !== undefined)
+        out.httpsProxy = https;
+    if (plain !== undefined)
+        out.httpProxy = plain;
+    if (no !== undefined)
+        out.noProxy = no;
+    return out;
+}
+export function defaultProxyRuntime() {
+    const fn = http.setGlobalProxyFromEnv;
+    return {
+        setGlobalProxyFromEnv: typeof fn === "function" ? fn.bind(http) : undefined,
+        execArgv: process.execArgv,
+        version: process.versions.node,
+    };
+}
+/** Node ≥ 24，或 22.21+：认 NODE_USE_ENV_PROXY / --use-env-proxy。 */
+function runtimeReadsEnvProxy(version) {
+    const [major = 0, minor = 0] = version.split(".").map(Number);
+    return major >= 24 || (major === 22 && minor >= 21);
+}
+let current;
+let hinted = false;
+/** 只判断不启用：没设代理 / 运行时已接管 / 能启用 / 不支持 / URL 无法解析。 */
+export function inspectProxy(env, runtime = defaultProxyRuntime()) {
+    if (current !== undefined)
+        return current;
+    const proxy = readProxyEnv(env);
+    if (proxy.httpsProxy === undefined && proxy.httpProxy === undefined)
+        return { env: proxy, state: "none" };
+    const flagged = env["NODE_USE_ENV_PROXY"] === "1" ||
+        runtime.execArgv.includes("--use-env-proxy") ||
+        (env["NODE_OPTIONS"] ?? "").includes("--use-env-proxy");
+    if (flagged && runtimeReadsEnvProxy(runtime.version))
+        return { env: proxy, state: "runtime" };
+    if (runtime.setGlobalProxyFromEnv === undefined)
+        return { env: proxy, state: "unsupported" };
+    for (const value of [proxy.httpsProxy, proxy.httpProxy]) {
+        if (value !== undefined && !URL.canParse(value))
+            return { env: proxy, state: "invalid", error: `无法解析 ${redactProxyUrl(value)}` };
+    }
+    return { env: proxy, state: "enabled" };
+}
+/** 按上面的规则启用代理（进程级副作用）；同一进程只做一次，之后返回同一份状态。 */
+export function enableEnvProxy(env, runtime = defaultProxyRuntime()) {
+    if (current !== undefined)
+        return current;
+    const status = inspectProxy(env, runtime);
+    if (status.state === "enabled") {
+        try {
+            runtime.setGlobalProxyFromEnv?.({ ...env });
+        }
+        catch (error) {
+            current = { env: status.env, state: "invalid", error: error.message };
+            return current;
+        }
+    }
+    current = status;
+    return current;
+}
+/** 测试用：清掉进程内记住的状态。 */
+export function resetProxyForTest() {
+    current = undefined;
+    hinted = false;
+}
+/** 代理 URL 里的账号密码打码。 */
+export function redactProxyUrl(value) {
+    try {
+        const url = new URL(value);
+        if (url.username === "" && url.password === "")
+            return value;
+        url.username = url.username === "" ? "" : "***";
+        url.password = url.password === "" ? "" : "***";
+        return url.toString();
+    }
+    catch {
+        return value.replace(/\/\/[^@/]*@/, "//***@");
+    }
+}
+/** 不能启用时给一次 stderr 提示（每个进程至多一次）；能用或没设代理返回 undefined。 */
+export function proxyHint(status, nodeVersion = process.versions.node) {
+    if (hinted)
+        return undefined;
+    if (status.state === "unsupported") {
+        hinted = true;
+        return (`ama: 检测到 HTTPS_PROXY / HTTP_PROXY，但 Node ${nodeVersion} 的 fetch 不读代理变量，请求将直连；` +
+            "升级到 Node 24+，或在 Node 22.21+ 上设 NODE_USE_ENV_PROXY=1\n");
+    }
+    if (status.state === "invalid") {
+        hinted = true;
+        return `ama: 代理变量无法解析，请求将直连：${status.error ?? ""}\n`;
+    }
+    return undefined;
+}
+/** `ama doctor` 的代理段落。 */
+export function describeProxy(status) {
+    const { env } = status;
+    const lines = [];
+    if (env.httpsProxy !== undefined)
+        lines.push(`HTTPS_PROXY=${redactProxyUrl(env.httpsProxy)}`);
+    if (env.httpProxy !== undefined)
+        lines.push(`HTTP_PROXY=${redactProxyUrl(env.httpProxy)}`);
+    if (env.noProxy !== undefined)
+        lines.push(`NO_PROXY=${env.noProxy}`);
+    const state = {
+        none: "未设置代理变量：直连",
+        runtime: "已启用（Node 按 NODE_USE_ENV_PROXY / --use-env-proxy 接管）",
+        enabled: "已启用（ama 启动时调用 Node 内置的 setGlobalProxyFromEnv）",
+        unsupported: `✗ 当前 Node ${process.versions.node} 不支持内置代理，请求直连；升级到 Node 24+`,
+        invalid: `✗ 代理变量无法解析：${status.error ?? ""}`,
+    };
+    lines.push(state[status.state]);
+    return lines;
+}

package/dist/cli/startup-screen.d.ts

@@ -6,10 +6,39 @@
  * - normal：标题行 + 模型 / 信任 / 已加载资源清单 / 警告数
  * - header：只有标题行（版本与按键提示）
  * - silent：不输出
+ *
+ * 交互模式（终端界面视觉设计 v1 §3.1）用结构化的 `startupInfo()` 自己排版（框 / 无框两态）；
+ * `buildStartupScreen` 的纯文本行保留给 line 模式与测试。
  */
+import type { PermissionMode } from "../permissions/types.js";
 import type { Runtime } from "./runtime.js";
 export type StartupScreenLevel = "normal" | "header" | "silent";
 export declare function startupScreenLevel(runtime: Pick<Runtime, "config">): StartupScreenLevel;
 export declare function headerLine(): string;
 export type StartupScreenRuntime = Pick<Runtime, "config" | "trust" | "resources" | "model" | "thinkingLevel" | "hooks" | "host" | "paths" | "warnings">;
 export declare function buildStartupScreen(runtime: StartupScreenRuntime, level?: StartupScreenLevel): string[];
+/** 交互模式启动头的结构化字段（§3.1）。 */
+export interface StartupInfo {
+    version: string;
+    /** `provider/id[@渠道]`。 */
+    model: string;
+    thinking: string;
+    /** 会话目录（家目录缩写为 `~`）。 */
+    cwd: string;
+    trusted: boolean;
+    /** 信任来源的短名（trust.json / 命令行 / 本次确认 / profile / 缺省）。 */
+    trustSource: string;
+    permissionMode: PermissionMode;
+    preset: string;
+    codemode: "off" | "on" | "only";
+    /** 上下文文件的文件名（外层在前）。 */
+    contextFiles: string[];
+    skills: number;
+    prompts: number;
+    hooks: number;
+    host?: string;
+    warnings: number;
+}
+/** 家目录前缀缩写为 `~`（`/` 与 `\` 两种分隔都认，余下部分原样保留）。 */
+export declare function tildePath(path: string, home: string | undefined): string;
+export declare function startupInfo(runtime: StartupScreenRuntime & Pick<Runtime, "session">, home?: string): StartupInfo;

package/dist/cli/startup-screen.js

@@ -6,7 +6,13 @@
  * - normal：标题行 + 模型 / 信任 / 已加载资源清单 / 警告数
  * - header：只有标题行（版本与按键提示）
  * - silent：不输出
+ *
+ * 交互模式（终端界面视觉设计 v1 §3.1）用结构化的 `startupInfo()` 自己排版（框 / 无框两态）；
+ * `buildStartupScreen` 的纯文本行保留给 line 模式与测试。
  */
+import { basename } from "node:path";
+import { formatModelRef } from "../ai/providers/channels.js";
+import { effectiveCodemodeMode } from "../tools/presets.js";
 import { AMA_VERSION } from "../version.js";
 export function startupScreenLevel(runtime) {
     return runtime.config.ui?.quietStartup ?? "normal";
@@ -54,3 +60,44 @@ export function buildStartupScreen(runtime, level = startupScreenLevel(runtime))
         lines.push(`警告：${runtime.warnings.length} 条（ama doctor 查看）`);
     return lines;
 }
+const TRUST_SOURCE = {
+    flag: "命令行",
+    "trust-file": "trust.json",
+    prompt: "本次确认",
+    profile: "profile",
+    default: "缺省",
+};
+/** 家目录前缀缩写为 `~`（`/` 与 `\` 两种分隔都认，余下部分原样保留）。 */
+export function tildePath(path, home) {
+    if (home === undefined || home === "")
+        return path;
+    const trimmed = /[\\/]$/.test(home) ? home.slice(0, -1) : home;
+    if (path === trimmed)
+        return "~";
+    const next = path[trimmed.length];
+    return path.startsWith(trimmed) && (next === "/" || next === "\\")
+        ? `~${path.slice(trimmed.length)}`
+        : path;
+}
+export function startupInfo(runtime, home) {
+    const { resources } = runtime;
+    const info = {
+        version: AMA_VERSION,
+        model: formatModelRef(runtime.model),
+        thinking: runtime.thinkingLevel,
+        cwd: tildePath(runtime.paths.cwd, home),
+        trusted: runtime.trust.trusted,
+        trustSource: TRUST_SOURCE[runtime.trust.source],
+        permissionMode: runtime.session.state.permissionMode,
+        preset: runtime.config.tools?.preset ?? "default",
+        codemode: effectiveCodemodeMode(runtime.config),
+        contextFiles: resources.contextFiles.map((f) => basename(f.path)),
+        skills: resources.skills.length,
+        prompts: resources.prompts.length,
+        hooks: runtime.hooks.list().length,
+        warnings: runtime.warnings.length,
+    };
+    if (runtime.host !== undefined)
+        info.host = runtime.host.adapter.id;
+    return info;
+}

package/dist/cli/startup-steps.d.ts

@@ -26,7 +26,7 @@ export interface ModelChoice {
     provider: ProviderData;
 }
 /** 第 11 步：解析模型与 key。 */
-export declare function resolveModel(args: ParsedArgs, registry: ProviderRegistryApi, manager: SessionManagerApi, defaultModel: string | undefined, deps: RuntimeDeps, interactive: boolean): Promise<ModelChoice>;
+export declare function resolveModel(args: ParsedArgs, registry: ProviderRegistryApi, manager: SessionManagerApi, defaultModel: string | undefined, deps: RuntimeDeps, interactive: boolean, env?: Readonly<Record<string, string | undefined>>): Promise<ModelChoice>;
 export declare function thinkingOf(args: ParsedArgs, manager: SessionManagerApi, fallback: ModelThinkingLevel | undefined): ModelThinkingLevel;
 /** 第 12 步之后：`--tools` / `--exclude-tools`（宿主工具注册后再校验，宿主工具名也可用）。 */
 export declare function applyToolFilters(args: ParsedArgs, runtimeTools: Runtime["tools"]): void;

package/dist/cli/startup-steps.js

@@ -2,12 +2,14 @@
  * 启动序列的单步辅助（设计 §11.1）：错误映射、模式判定、profile 合并、会话请求、
  * 模型与思考级别解析、工具过滤、指令文件。[B5] 由 cli/bootstrap.ts 编排。
  */
+import { describeLookupFailure } from "../ai/providers/suggest.js";
 import { formatModelRef } from "../ai/providers/channels.js";
 import { statSync } from "node:fs";
 import { isAbsolute, resolve } from "node:path";
 import { AmaError, StartupError, isAmaError } from "../errors.js";
 import { UsageError } from "./args.js";
-import { pickDefaultModel } from "./default-model.js";
+import { noModelGuidance, pickDefaultModel } from "./default-model.js";
+import { hideFakeProvider } from "./fake-visibility.js";
 import { ExitCode } from "./exit-codes.js";
 /** 把非 StartupError 包成指定退出码；StartupError / UsageError 原样透传。 */
 export async function step(exitCode, label, fn) {
@@ -67,6 +69,8 @@ export function applyProfile(args, profile) {
     return merged;
 }
 export function sessionRequestOf(args) {
+    if (args.noSession)
+        return { kind: "memory" };
     if (args.continue)
         return { kind: "continue" };
     if (args.resume)
@@ -80,7 +84,7 @@ export function sessionRequestOf(args) {
 export function sourceOf(request, manager) {
     if (request.kind === "fork")
         return "fork";
-    if (request.kind === "new")
+    if (request.kind === "new" || request.kind === "memory")
         return "startup";
     return manager.entries().length > 0 ? "resume" : "startup";
 }
@@ -94,7 +98,7 @@ export function lastEntry(manager, predicate) {
     return undefined;
 }
 /** 第 11 步：解析模型与 key。 */
-export async function resolveModel(args, registry, manager, defaultModel, deps, interactive) {
+export async function resolveModel(args, registry, manager, defaultModel, deps, interactive, env = {}) {
     if (args.provider !== undefined && args.model === undefined) {
         throw new UsageError(`--provider ${args.provider} 需要同时给出 --model（不回退到该供应商的缺省模型）`);
     }
@@ -102,13 +106,8 @@ export async function resolveModel(args, registry, manager, defaultModel, deps,
         const found = registry.findModel(ref);
         if (found.ok)
             return { model: found.model, provider: found.provider };
-        const hint = found.candidates.length > 0 ? `；候选：${found.candidates.slice(0, 20).join(", ")}` : "";
-        const what = found.reason === "provider_not_found"
-            ? "供应商不存在"
-            : found.reason === "ambiguous"
-                ? "模型名有歧义"
-                : "模型不存在";
-        throw new StartupError("model_not_found", `${label}${what}：${ref}${hint}`, ExitCode.NoModel);
+        const code = found.reason === "provider_not_found" ? "provider_not_found" : "model_not_found";
+        throw new StartupError(code, `${label}${describeLookupFailure(ref, found)}`, ExitCode.NoModel);
     };
     let choice;
     if (args.model !== undefined) {
@@ -137,13 +136,16 @@ export async function resolveModel(args, registry, manager, defaultModel, deps,
         }
     }
     const pick = async (reason) => {
-        const picked = interactive ? await deps.ui?.pickModel?.(registry, reason) : undefined;
+        // 选择器不列测试供应商 fake（AMA_SHOW_FAKE=1 或 AMA_FAKE_SCRIPT 时照列）
+        const picked = interactive
+            ? await deps.ui?.pickModel?.(hideFakeProvider(registry, env), reason)
+            : undefined;
         if (picked === undefined)
             throw new StartupError("no_api_key", reason, ExitCode.NoModel);
         return lookup(picked, "");
     };
     if (choice === undefined) {
-        return pick("没有可用模型：用 `ama auth set <provider>` 保存 key，或设置对应环境变量，或 --model 指定");
+        return pick(noModelGuidance(registry));
     }
     if (choice.provider.requiresApiKey) {
         const key = await registry.resolveApiKey(choice.provider.id);

package/dist/cli/subcommands/config.d.ts

@@ -3,16 +3,20 @@
  * 每一项标出来自哪一层（default / user / profile / project），并给出将使用的模型与原因
  * （`config.defaultModel` 或零配置选择）。只读；config 里的字面量 apiKey 只显示种类。[B6]
  *
+ * 缺省值来自 config/key-docs.ts 的 DISPLAY_DEFAULTS（含 DEFAULT_CONFIG 不写的 cache / codemode 等段），
+ * `codemode.mode` 不写时显示跟随预设的结果与原因；`--tools-preset` / `--codemode` 作为 cli 层叠加；
+ * 预设写的是旧名（codemode）时显示规范名并提示。
+ *
  * [W3-B12] 「供应商」节：config 里出现的供应商与 baseUrl 来自环境变量（`OPENAI_BASE_URL` /
  * `ANTHROPIC_BASE_URL`）的内置供应商，列出协议、生效 baseUrl 与来源、config 里每个模型的协议
  * （模型级 `api` 生效后的值）。
  */
-import type { AmaConfig } from "../../config/types.js";
+import { type AmaConfig, type CodemodeMode } from "../../config/types.js";
 import type { Api, ProviderRegistryApi } from "../../ai/types.js";
 import type { CliIo, RuntimeDeps } from "../deps.js";
-export declare const CONFIG_USAGE = "\u7528\u6CD5\uFF1Aama config show [--json] [--profile <\u6587\u4EF6>] [--auth-file <\u6587\u4EF6>]\n      ama config path    \u914D\u7F6E\u76EE\u5F55\u3001\u6570\u636E\u76EE\u5F55\u4E0E\u5404\u6587\u4EF6\u8DEF\u5F84\n      ama config edit    \u7528 $VISUAL / $EDITOR \u6253\u5F00 config.json\uFF08\u6CA1\u6709\u7F16\u8F91\u5668\u65F6\u6253\u5370\u8DEF\u5F84\uFF09\n";
+export declare const CONFIG_USAGE = "\u7528\u6CD5\uFF1Aama config show [--json] [--profile <\u6587\u4EF6>] [--auth-file <\u6587\u4EF6>]\n                        [--tools-preset <\u540D>] [--codemode off|on|only]\n      ama config path    \u914D\u7F6E\u76EE\u5F55\u3001\u6570\u636E\u76EE\u5F55\u4E0E\u5404\u6587\u4EF6\u8DEF\u5F84\n      ama config edit    \u7528 $VISUAL / $EDITOR \u6253\u5F00 config.json\uFF08\u6CA1\u6709\u7F16\u8F91\u5668\u65F6\u6253\u5370\u8DEF\u5F84\uFF09\n";
 type Layer = {
-    name: "default" | "user" | "profile" | "project";
+    name: "default" | "user" | "profile" | "project" | "cli";
     label: string;
     value: unknown;
 };
@@ -49,5 +53,17 @@ export interface ProviderDescription {
 export declare function describeProviders(config: AmaConfig, registry: ProviderRegistryApi | undefined): ProviderDescription[];
 /** 每个生效叶子的来源：累加型列表列出所有贡献层，其余取最后设置它的层。 */
 export declare function sourcesOf(effective: AmaConfig, layers: readonly Layer[]): Map<string, string>;
+export interface CodemodeDescription {
+    mode: CodemodeMode;
+    /** config：显式 codemode.mode；preset：跟随预设。 */
+    source: "config" | "preset";
+    /** 人读原因。 */
+    reason: string;
+    strict: boolean;
+    /** 生效模式不是 off 但 codemode 工具不可用（requireStrict）时的说明。 */
+    unavailable?: string;
+}
+/** codemode 生效模式与原因（跟随预设时写明预设与运行时 Node 是否隔离网络）。 */
+export declare function describeCodemode(config: AmaConfig, nodeVersion?: string): CodemodeDescription;
 export declare function runConfig(argv: readonly string[], io: CliIo, deps: Pick<RuntimeDeps, "providers"> | undefined): Promise<number>;
 export {};

package/dist/cli/subcommands/config.js

@@ -3,13 +3,18 @@
  * 每一项标出来自哪一层（default / user / profile / project），并给出将使用的模型与原因
  * （`config.defaultModel` 或零配置选择）。只读；config 里的字面量 apiKey 只显示种类。[B6]
  *
+ * 缺省值来自 config/key-docs.ts 的 DISPLAY_DEFAULTS（含 DEFAULT_CONFIG 不写的 cache / codemode 等段），
+ * `codemode.mode` 不写时显示跟随预设的结果与原因；`--tools-preset` / `--codemode` 作为 cli 层叠加；
+ * 预设写的是旧名（codemode）时显示规范名并提示。
+ *
  * [W3-B12] 「供应商」节：config 里出现的供应商与 baseUrl 来自环境变量（`OPENAI_BASE_URL` /
  * `ANTHROPIC_BASE_URL`）的内置供应商，列出协议、生效 baseUrl 与来源、config 里每个模型的协议
  * （模型级 `api` 生效后的值）。
  */
 import { metadataOf, modelFlags, sourcesLine } from "./model-meta.js";
 import { loadConfigFile } from "../../config/load.js";
-import { DEFAULT_CONFIG, PROFILE_DEFAULTS, mergeProjectAndCli } from "../../config/merge.js";
+import { PROFILE_DEFAULTS, cliOverridesToConfig, mergeConfig, mergeProjectAndCli, } from "../../config/merge.js";
+import { DISPLAY_DEFAULTS } from "../../config/key-docs.js";
 import { AUTH_FILE, CONFIG_FILE, HOOKS_FILE, projectFile, resolveConfigDir, resolveDataDir, } from "../../config/paths.js";
 import { spawnSync } from "node:child_process";
 import { existsSync } from "node:fs";
@@ -17,15 +22,18 @@ import { join } from "node:path";
 import { modelsDevCachePath } from "../../ai/providers/models-dev-cache.js";
 import { initConfigDir } from "../../config/init.js";
 import { CONFIG_SCHEMA_FILE } from "../../config/json-schema.js";
+import { CODEMODE_MODES, TOOLS_PRESET_ALIASES, TOOLS_PRESET_INPUTS, canonicalPreset, } from "../../config/types.js";
+import { codemodeAvailability, detectSandboxCapability } from "../../codemode/capability.js";
 import { baseUrlEnvOf } from "../../ai/providers/registry.js";
 import { classifyKeyValue } from "../../config/auth-file.js";
-import { effectiveCodemodeMode, resolvePreset } from "../../tools/presets.js";
+import { CODEMODE_TOOL, resolveCodemodeMode, resolvePreset } from "../../tools/presets.js";
 import { builtinTools } from "../../tools/registry.js";
 import { parseSubArgs, UsageError } from "../args.js";
-import { pickDefaultModel } from "../default-model.js";
+import { noModelGuidance, pickDefaultModel } from "../default-model.js";
 import { ExitCode } from "../exit-codes.js";
 import { buildRegistry, loadUserLevel } from "./context.js";
 export const CONFIG_USAGE = `用法：ama config show [--json] [--profile <文件>] [--auth-file <文件>]
+                        [--tools-preset <名>] [--codemode off|on|only]
       ama config path    配置目录、数据目录与各文件路径
       ama config edit    用 $VISUAL / $EDITOR 打开 config.json（没有编辑器时打印路径）
 `;
@@ -105,13 +113,16 @@ export async function describeModel(config, registry) {
         return { ref: undefined, reason: "注册表未装配" };
     const picked = await pickDefaultModel(registry);
     if (picked === undefined)
-        return { ref: undefined, reason: "没有可用模型：ama auth set <provider> 或设置对应环境变量" };
+        return { ref: undefined, reason: noModelGuidance(registry) };
     const ref = `${picked.provider.id}/${picked.model.id}`;
     if (picked.via === "local")
-        return { ref, reason: `零配置：本地 ${picked.provider.id} 可达` };
+        return { ref, reason: `零配置：本地 ${picked.provider.id} 可达；${picked.rule}` };
     const key = await registry.resolveApiKey(picked.provider.id);
     const origin = key.origin !== undefined ? ` ${key.origin}` : "";
-    return { ref, reason: `零配置：${picked.provider.id} 有 key（${key.source}${origin}）` };
+    return {
+        ref,
+        reason: `零配置：${picked.provider.id} 有 key（${key.source}${origin}）；${picked.rule}`,
+    };
 }
 /** config 里出现的供应商 + baseUrl 来自环境变量的内置供应商。 */
 export function describeProviders(config, registry) {
@@ -171,8 +182,8 @@ function providerLines(providers) {
     }
     return lines;
 }
-function layersOf(level, project, effective) {
-    const layers = [{ name: "default", label: "内置缺省", value: DEFAULT_CONFIG }];
+function layersOf(level, project, effective, cli) {
+    const layers = [{ name: "default", label: "内置缺省", value: DISPLAY_DEFAULTS }];
     const user = loadConfigFile("config", level.userConfigPath)?.value;
     if (user !== undefined)
         layers.push({ name: "user", label: level.userConfigPath, value: user });
@@ -195,6 +206,8 @@ function layersOf(level, project, effective) {
         }
         layers.push({ name: "project", label: ".ama/config.json", value: unflatten(accepted) });
     }
+    if (cli !== undefined && Object.keys(cli).length > 0)
+        layers.push({ name: "cli", label: "命令行", value: cli });
     return layers;
 }
 function unflatten(flat) {
@@ -221,8 +234,48 @@ export function sourcesOf(effective, layers) {
     }
     return sources;
 }
+/** codemode 生效模式与原因（跟随预设时写明预设与运行时 Node 是否隔离网络）。 */
+export function describeCodemode(config, nodeVersion) {
+    const capability = detectSandboxCapability(nodeVersion);
+    const resolved = resolveCodemodeMode(config, capability.strict);
+    const sandbox = capability.strict
+        ? `Node ${capability.nodeMajor} 网络已隔离`
+        : `Node ${capability.nodeMajor} < 25 网络未隔离`;
+    const reason = resolved.source === "config"
+        ? `codemode.mode 显式设置（${sandbox}）`
+        : `跟随预设 ${resolved.preset}（${sandbox}）`;
+    const out = {
+        mode: resolved.mode,
+        source: resolved.source,
+        reason,
+        strict: capability.strict,
+    };
+    if (resolved.mode !== "off") {
+        const availability = codemodeAvailability(config.codemode?.requireStrict, capability);
+        if (!availability.available)
+            out.unavailable = availability.warning;
+    }
+    return out;
+}
+/** 各层里把 tools.preset 写成旧名（别名）的：`user（写的是旧名 codemode）`。 */
+function presetAliasNotes(layers) {
+    const notes = [];
+    for (const layer of layers) {
+        const preset = layer.value?.tools?.preset;
+        if (preset !== undefined && Object.hasOwn(TOOLS_PRESET_ALIASES, preset))
+            notes.push(`${layer.name}（${layer.label}）的 tools.preset 写的是旧名 ${preset}，规范名 ${canonicalPreset(preset)}`);
+    }
+    return notes;
+}
+function choice(name, value, all) {
+    if (value === undefined)
+        return undefined;
+    if (all.includes(value))
+        return value;
+    throw new UsageError(`--${name} 的取值应为 ${all.join(" | ")}（收到 ${value}）`);
+}
 export async function runConfig(argv, io, deps) {
-    const { positionals, values, flags } = parseSubArgs(argv, ["profile", "auth-file"], ["json"]);
+    const { positionals, values, flags } = parseSubArgs(argv, ["profile", "auth-file", "tools-preset", "codemode"], ["json"]);
     const action = positionals[0] ?? "show";
     if (flags.has("help")) {
         io.stdout(CONFIG_USAGE);
@@ -234,42 +287,76 @@ export async function runConfig(argv, io, deps) {
         return editConfig(io);
     if (action !== "show")
         throw new UsageError(`未知的 config 子命令：${action}`);
+    const cli = {};
+    const presetFlag = choice("tools-preset", values.get("tools-preset"), TOOLS_PRESET_INPUTS);
+    if (presetFlag !== undefined)
+        cli.toolsPreset = presetFlag;
+    const codemodeFlag = choice("codemode", values.get("codemode"), CODEMODE_MODES);
+    if (codemodeFlag !== undefined)
+        cli.codemode = codemodeFlag;
     const level = loadUserLevel(io, {
         profile: values.get("profile"),
         authFile: values.get("auth-file"),
     });
     const project = loadConfigFile("config", projectFile(io.cwd, CONFIG_FILE))?.value;
-    const merged = mergeProjectAndCli(level.merged, project, undefined);
+    const merged = mergeProjectAndCli(level.merged, project, cli);
     const config = merged.config;
-    const layers = layersOf(level, project, config);
-    const sources = sourcesOf(config, layers);
+    const layers = layersOf(level, project, config, cliOverridesToConfig(cli));
+    // 展示：生效配置补上 DEFAULT_CONFIG 不写的缺省（cache、codemode.inlineBudget 等），来源 default
+    const shown = mergeConfig(DISPLAY_DEFAULTS, config);
+    const sources = sourcesOf(shown, layers);
     const registry = deps === undefined ? undefined : await buildRegistry(level, io, deps);
     const model = await describeModel(config, registry);
     const providers = describeProviders(config, registry);
+    const codemode = describeCodemode(config);
     const builtin = new Set(builtinTools().map((tool) => tool.name));
-    const preset = resolvePreset({ config, available: (name) => builtin.has(name) });
+    if (codemode.mode !== "off" && codemode.unavailable === undefined)
+        builtin.add(CODEMODE_TOOL);
+    const preset = resolvePreset({
+        config,
+        available: (name) => builtin.has(name),
+        strict: codemode.strict,
+    });
+    const notes = presetAliasNotes(layers);
     const warnings = [...level.warnings, ...merged.warnings];
+    const rows = [...flatten(shown)].map(([path, value]) => ({
+        path,
+        value,
+        source: sources.get(path) ?? "default",
+    }));
+    if (config.codemode?.mode === undefined)
+        rows.push({
+            path: "codemode.mode",
+            value: codemode.mode,
+            source: `default（${codemode.reason}）`,
+        });
+    rows.sort((a, b) => (a.path < b.path ? -1 : a.path > b.path ? 1 : 0));
     if (flags.has("json")) {
-        const entries = [...flatten(config)].map(([path, value]) => ({
+        const entries = rows.map(({ path, value, source }) => ({
             path,
             value: path.endsWith(".apiKey") ? display(path, value) : value,
-            source: sources.get(path),
+            source,
         }));
-        io.stdout(`${JSON.stringify({ model, providers, tools: preset.builtin, codemode: effectiveCodemodeMode(config), entries, layers: layers.map((l) => ({ name: l.name, file: l.label })), warnings }, null, 2)}\n`);
+        io.stdout(`${JSON.stringify({ model, providers, tools: preset.builtin, preset: preset.preset, codemode, entries, layers: layers.map((l) => ({ name: l.name, file: l.label })), notes, warnings }, null, 2)}\n`);
         return ExitCode.Ok;
     }
-    const lines = ["生效配置（来源：default 内置 ← user ← profile ← project 只能收紧）"];
+    const lines = ["生效配置（来源：default 内置 ← user ← profile ← project 只能收紧 ← cli）"];
     for (const layer of layers.slice(1))
         lines.push(`  ${layer.name}：${layer.label}`);
     lines.push("");
-    const rows = [...flatten(config)].map(([path, value]) => [`${path} = ${display(path, value)}`, sources.get(path) ?? "default"]);
-    const width = Math.min(60, Math.max(...rows.map(([text]) => text.length)));
-    for (const [text, source] of rows)
-        lines.push(`  ${text.padEnd(width)}  ${source}`);
+    const texts = rows.map((row) => [`${row.path} = ${display(row.path, row.value)}`, row.source]);
+    const width = Math.min(60, Math.max(...texts.map(([text]) => (text ?? "").length)));
+    for (const [text, source] of texts)
+        lines.push(`  ${(text ?? "").padEnd(width)}  ${source}`);
     lines.push(...providerLines(providers));
     lines.push("");
     lines.push(`模型：${model.ref ?? "（无）"}  ${model.reason}`);
     lines.push(`工具：${preset.builtin.join(", ")}（预设 ${preset.preset}，codemode ${preset.codemode}）`);
+    lines.push(`codemode：${codemode.mode}  ${codemode.reason}`);
+    if (codemode.unavailable !== undefined)
+        lines.push(`  ${codemode.unavailable}`);
+    for (const note of notes)
+        lines.push(`提示：${note}`);
     for (const warning of [...warnings, ...preset.warnings])
         lines.push(`警告：${warning}`);
     io.stdout(`${lines.join("\n")}\n`);