@icode-js/icode 3.2.0 → 3.4.0

package/src/commands/config-ux.js

@@ -0,0 +1,292 @@
+import { spawnSync } from 'node:child_process'
+import fs from 'node:fs'
+import path from 'node:path'
+import { upsertAiProfile, useAiProfile } from '../core/ai/config.js'
+import { findRepoConfigFile, readRepoConfig } from '../core/config/repo-config.js'
+import { getConfigFilePath, getRepoPolicy, readConfig, setRepoPolicy, setValue, writeConfig } from '../core/config/store.js'
+import { IcodeError } from '../core/errors.js'
+import { resolveGitContext } from '../core/git/context.js'
+import { resolvePlatformToken, SUPPORTED_PLATFORM_NAMES } from '../core/platform/index.js'
+import { chooseOne, confirm, input, isInteractiveTerminal } from '../core/tools/interactive.js'
+import { logger } from '../core/tools/logger.js'
+
+// 常用配置项的简写，get/set/delete 都可以直接用。
+export const CONFIG_KEY_ALIASES = {
+  remote: 'defaults.remote',
+  'repo-mode': 'defaults.repoMode',
+  repoMode: 'defaults.repoMode',
+  main: 'defaults.defaultMainBranches',
+  'main-branches': 'defaults.defaultMainBranches',
+  'ai-profile': 'ai.activeProfile'
+}
+
+// 这些配置项的值是列表，set 时支持逗号分隔。
+const LIST_KEYS = new Set(['defaults.defaultMainBranches'])
+
+/**
+ * 解析配置路径：先查简写，再支持 token.<provider> / host.<域名> 这类快捷写法。
+ */
+export function resolveConfigKey(key) {
+  const raw = String(key || '').trim()
+  if (CONFIG_KEY_ALIASES[raw]) {
+    return CONFIG_KEY_ALIASES[raw]
+  }
+  const tokenMatch = raw.match(/^token\.(\w+)$/)
+  if (tokenMatch) {
+    return `platforms.tokens.${tokenMatch[1]}`
+  }
+  const hostMatch = raw.match(/^host\.(.+)$/)
+  if (hostMatch) {
+    return `platforms.hosts[${hostMatch[1]}]`
+  }
+  return raw
+}
+
+// 简写项的值做一次类型整理，例如 main=main,master -> ["main","master"]。
+export function normalizeAliasValue(resolvedKey, value) {
+  if (LIST_KEYS.has(resolvedKey) && typeof value === 'string') {
+    return value.split(',').map((item) => item.trim()).filter(Boolean)
+  }
+  return value
+}
+
+export function maskSecret(secret) {
+  const raw = String(secret || '').trim()
+  if (!raw) {
+    return ''
+  }
+  if (raw.length <= 8) {
+    return `${raw.slice(0, 2)}****${raw.slice(-1)}`
+  }
+  return `${raw.slice(0, 4)}****${raw.slice(-4)}`
+}
+
+const SECRET_KEY_PATTERN = /api[_-]?key|token|secret|password|authorization/i
+
+/**
+ * 返回脱敏后的配置副本：密钥类字段和 platforms.tokens 下的值都只显示首尾。
+ */
+export function maskConfig(value, parentKey = '') {
+  if (Array.isArray(value)) {
+    return value.map((item) => maskConfig(item, parentKey))
+  }
+  if (value && typeof value === 'object') {
+    const result = {}
+    for (const [key, item] of Object.entries(value)) {
+      const isSecret = (SECRET_KEY_PATTERN.test(key) || parentKey === 'tokens') && typeof item === 'string'
+      result[key] = isSecret ? maskSecret(item) : maskConfig(item, key)
+    }
+    return result
+  }
+  return value
+}
+
+/**
+ * 用 $VISUAL / $EDITOR 打开全局配置文件，保存后校验 JSON。
+ */
+export function runConfigEdit() {
+  const filePath = getConfigFilePath()
+  readConfig()
+  const editor = process.env.VISUAL || process.env.EDITOR || (process.platform === 'win32' ? 'notepad' : 'vi')
+  const result = spawnSync(editor, [filePath], { stdio: 'inherit', shell: true })
+  if (result.status !== 0) {
+    throw new IcodeError(`编辑器退出异常: ${editor}`, { code: 'CONFIG_EDIT_FAILED', exitCode: 2 })
+  }
+  try {
+    JSON.parse(fs.readFileSync(filePath, 'utf8'))
+  } catch (error) {
+    throw new IcodeError(`配置文件不是合法 JSON，请重新编辑: ${filePath}`, { code: 'CONFIG_PARSE_ERROR', exitCode: 2, cause: error })
+  }
+  logger.success(`配置已保存: ${filePath}`)
+}
+
+async function ask(message, defaultValue, interactive) {
+  if (!interactive) {
+    return defaultValue
+  }
+  return (await input(message, defaultValue)).trim() || defaultValue
+}
+
+/**
+ * 在仓库根目录生成 .icoderc.json（团队共享配置），值默认取自当前仓库的检测结果。
+ * 输入为 { force, yes }，输出写入的文件路径与内容。
+ */
+export async function runConfigInit(options = {}) {
+  const context = await resolveGitContext({ repoMode: options.repoMode })
+  const existing = findRepoConfigFile(context.topLevelPath)
+  if (existing && !options.force) {
+    throw new IcodeError(`已存在仓库配置: ${existing}。覆盖请加 --force。`, { code: 'CONFIG_INIT_EXISTS', exitCode: 2 })
+  }
+
+  const interactive = !options.yes && isInteractiveTerminal()
+  const policy = getRepoPolicy(context.topLevelPath)
+  const current = readRepoConfig(context.topLevelPath)
+  const defaultProtected = [...new Set([context.defaultBranch, ...(policy.protectedBranches || []), ...current.protectedBranches])].filter(Boolean)
+
+  const remote = await ask('默认 remote', current.remote || context.remote, interactive)
+  const defaultBranch = await ask('主分支', current.defaultBranch || context.defaultBranch, interactive)
+  const protectedBranches = (await ask('受保护分支（逗号分隔）', defaultProtected.join(','), interactive))
+    .split(',').map((item) => item.trim()).filter(Boolean)
+  const maxFileSizeMB = Number(await ask('提交时大文件阈值（MB）', String(current.save.maxFileSizeMB), interactive)) || 5
+
+  const content = {
+    remote,
+    defaultBranch,
+    protectedBranches,
+    save: {
+      maxFileSizeMB,
+      sensitivePatterns: current.save.sensitivePatterns,
+      allowPatterns: current.save.allowPatterns
+    }
+  }
+  const filePath = existing || path.resolve(context.topLevelPath, '.icoderc.json')
+  fs.writeFileSync(filePath, `${JSON.stringify(content, null, 2)}\n`, 'utf8')
+  return { filePath, content }
+}
+
+function printConfigOverview() {
+  const config = readConfig()
+  const tokens = SUPPORTED_PLATFORM_NAMES
+    .map((provider) => {
+      const { token, source } = resolvePlatformToken(provider, config)
+      return token ? `${provider}(${source.replace(/^config:/, '')})` : ''
+    })
+    .filter(Boolean)
+  logger.info(`配置文件: ${getConfigFilePath()}`)
+  logger.info(`默认 remote: ${config.defaults?.remote || '(自动)'}  主分支候选: ${(config.defaults?.defaultMainBranches || []).join(', ')}`)
+  logger.info(`AI profile: ${config.ai?.activeProfile || '(未配置)'}  共 ${Object.keys(config.ai?.profiles || {}).length} 个`)
+  logger.info(`平台 token: ${tokens.join(', ') || '(未配置)'}`)
+}
+
+async function wizardPlatformToken() {
+  const provider = await chooseOne('选择平台：', SUPPORTED_PLATFORM_NAMES.map((name) => ({ value: name, label: name })), 0)
+  const token = (await input(`${provider} token（输入后回车）`, '')).trim()
+  if (!token) {
+    logger.warn('未输入，跳过。')
+    return
+  }
+  setValue(`platforms.tokens.${provider}`, token)
+  logger.success(`已保存 ${provider} token: ${maskSecret(token)}`)
+}
+
+async function wizardAiProfile() {
+  const format = await chooseOne('接口格式：', [
+    { value: 'openai', label: 'OpenAI 兼容（OpenAI / DeepSeek / 通义 / 本地 vLLM 等）' },
+    { value: 'anthropic', label: 'Anthropic' },
+    { value: 'ollama', label: 'Ollama 本地模型' }
+  ], 0)
+  const defaults = {
+    openai: { baseUrl: 'https://api.openai.com/v1', model: 'gpt-4o-mini' },
+    anthropic: { baseUrl: 'https://api.anthropic.com/v1', model: 'claude-sonnet-4-5' },
+    ollama: { baseUrl: 'http://127.0.0.1:11434', model: 'qwen2.5:7b' }
+  }[format]
+  // 常见服务和模型直接选，只有自定义时才需要输入。
+  const presets = {
+    openai: [
+      { value: 'https://api.openai.com/v1', label: 'OpenAI', models: ['gpt-4o-mini', 'gpt-4o', 'gpt-4.1-mini', 'gpt-4.1'] },
+      { value: 'https://api.deepseek.com/v1', label: 'DeepSeek', models: ['deepseek-chat', 'deepseek-reasoner'] },
+      { value: 'https://dashscope.aliyuncs.com/compatible-mode/v1', label: '通义千问', models: ['qwen-plus', 'qwen-max', 'qwen-turbo'] },
+      { value: 'https://open.bigmodel.cn/api/paas/v4', label: '智谱 GLM', models: ['glm-4-flash', 'glm-4-plus'] },
+      { value: 'https://api.moonshot.cn/v1', label: 'Moonshot Kimi', models: ['moonshot-v1-8k', 'moonshot-v1-32k'] }
+    ],
+    anthropic: [
+      { value: 'https://api.anthropic.com/v1', label: 'Anthropic', models: ['claude-sonnet-4-5', 'claude-haiku-4-5', 'claude-opus-4-1'] }
+    ],
+    ollama: [
+      { value: 'http://127.0.0.1:11434', label: '本机 Ollama', models: ['qwen2.5:7b', 'qwen2.5-coder:7b', 'llama3.1:8b', 'deepseek-r1:7b'] }
+    ]
+  }[format]
+
+  const service = await chooseOne('服务', [
+    ...presets.map((item) => ({ value: item.value, label: item.label, hint: item.value })),
+    { value: '__custom__', label: '其它（自己填 base url）' }
+  ], 0, { filter: false })
+  const preset = presets.find((item) => item.value === service)
+  const baseUrl = service === '__custom__' ? ((await input('base url', defaults.baseUrl)).trim() || defaults.baseUrl) : service
+
+  const modelChoice = await chooseOne('模型', [
+    ...(preset?.models || [defaults.model]).map((item) => ({ value: item, label: item })),
+    { value: '__custom__', label: '其它（自己填）' }
+  ], 0, { filter: false })
+  const model = modelChoice === '__custom__' ? ((await input('模型名称', defaults.model)).trim() || defaults.model) : modelChoice
+  const suggestedName = (preset?.label || format).toLowerCase().replace(/\s+/g, '-')
+  const name = (await input('profile 名称', suggestedName)).trim() || suggestedName
+  const apiKey = format === 'ollama' ? '' : (await input('API key', '')).trim()
+  upsertAiProfile(name, { format, baseUrl, model, ...(apiKey ? { apiKey } : {}) })
+  useAiProfile(name)
+  logger.success(`已保存并启用 AI profile: ${name}（可用 icode config ai test 测试连通性）`)
+}
+
+async function wizardRemoteAndBranches() {
+  const config = readConfig()
+  const remote = (await input('默认 remote（留空表示自动识别）', config.defaults?.remote || '')).trim()
+  const mains = (await input('主分支候选（逗号分隔）', (config.defaults?.defaultMainBranches || ['main', 'master']).join(','))).trim()
+  const next = {
+    ...config,
+    defaults: {
+      ...config.defaults,
+      remote,
+      defaultMainBranches: mains.split(',').map((item) => item.trim()).filter(Boolean)
+    }
+  }
+  if (!remote) {
+    delete next.defaults.remote
+  }
+  writeConfig(next)
+  logger.success('已保存。')
+}
+
+async function wizardProtectedBranches() {
+  let repoRoot
+  try {
+    repoRoot = (await resolveGitContext({})).topLevelPath
+  } catch {
+    logger.warn('当前不在 Git 仓库中，无法设置受保护分支。')
+    return
+  }
+  const current = getRepoPolicy(repoRoot).protectedBranches || []
+  const value = (await input('受保护分支（逗号分隔，留空清除）', current.join(','))).trim()
+  setRepoPolicy(repoRoot, { protectedBranches: value.split(',').map((item) => item.trim()).filter(Boolean) })
+  logger.success(`已保存（仅本机生效）。团队共享请用 icode config init 写入 .icoderc.json。`)
+}
+
+/**
+ * 不带参数执行 icode config 时的引导式配置菜单。
+ */
+export async function runConfigWizard() {
+  printConfigOverview()
+  for (;;) {
+    const action = await chooseOne('要配置什么？', [
+      { value: 'token', label: '平台 token（GitHub / GitLab / Gitee / Gitea，用于 PR、远程合并、Release）' },
+      { value: 'ai', label: 'AI profile（AI 提交信息、代码评审）' },
+      { value: 'remote', label: '默认 remote 和主分支' },
+      { value: 'protect', label: '当前仓库的受保护分支' },
+      { value: 'init', label: '为当前仓库生成团队共享配置 .icoderc.json' },
+      { value: 'edit', label: '直接编辑配置文件' },
+      { value: 'exit', label: '完成' }
+    ], 0)
+
+    if (action === 'exit') {
+      return
+    }
+    if (action === 'token') {
+      await wizardPlatformToken()
+    } else if (action === 'ai') {
+      await wizardAiProfile()
+    } else if (action === 'remote') {
+      await wizardRemoteAndBranches()
+    } else if (action === 'protect') {
+      await wizardProtectedBranches()
+    } else if (action === 'init') {
+      const force = Boolean(findRepoConfigFile((await resolveGitContext({})).topLevelPath)) && await confirm('已存在 .icoderc.json，是否覆盖？', false)
+      try {
+        const result = await runConfigInit({ force })
+        logger.success(`已生成 ${result.filePath}，记得提交到仓库。`)
+      } catch (error) {
+        logger.warn(error.message)
+      }
+    } else if (action === 'edit') {
+      runConfigEdit()
+    }
+  }
+}

package/src/commands/config.js

@@ -21,58 +21,72 @@ import {
   readConfig,
   setPlatformConfig,
   setRepoPolicy,
-  setValue
+  setValue,
+  writeConfig
 } from '../core/config/store.js'
+import { resolvePlatformToken, SUPPORTED_PLATFORM_NAMES } from '../core/platform/index.js'
+import { readRepoConfig } from '../core/config/repo-config.js'
+import { isInteractiveTerminal } from '../core/tools/interactive.js'
+import {
+  maskConfig,
+  maskSecret,
+  normalizeAliasValue,
+  resolveConfigKey,
+  runConfigEdit,
+  runConfigInit,
+  runConfigWizard
+} from './config-ux.js'
 import { normalizeLegacyArgs, parseConfigValue } from '../core/cli/args.js'
 import { IcodeError } from '../core/errors.js'
 import { resolveGitContext } from '../core/git/context.js'
 import { logger } from '../core/tools/logger.js'
 
-// 输出 config 命令帮助，并展示当前支持的远程合并配置方式。
+// 输出 config 命令帮助。
 function printHelp() {
   process.stdout.write(`
 Usage:
+  icode config                        引导式配置（交互终端中）
   icode config <command> [...args]
 
-Arguments:
-  <command>                子命令（list/get/set/delete/ai/protect/platform）
-
 Commands:
-  list                    查看全部配置
-  get <path>              读取指定配置项
-  set <path> <value>      写入配置项
-  delete <path>           删除配置项
+  list [--show-secrets]   查看全部配置（默认脱敏），同时显示当前仓库的 .icoderc.json
+  get <key>               读取配置项（密钥默认脱敏）
+  set <key> <value>       写入配置项（值支持数字/布尔/JSON）
+  delete <key>            删除配置项
+  path                    输出配置文件路径
+  edit                    用 $EDITOR 打开配置文件，保存时校验 JSON
+  init [--force] [-y]     为当前仓库生成团队共享的 .icoderc.json
   ai <subcommand> [...]   AI profile 配置
-  protect list            查看受保护分支
-  protect add <branch...> 添加受保护分支
-  protect remove <branch...> 移除受保护分支
-  platform <subcommand>   平台级配置（如远程合并密钥）
+  protect list|add|remove 当前仓库的受保护分支（仅本机）
+  platform <subcommand>   平台 token / 自建域名映射
+
+Key 简写:
+  remote       -> defaults.remote
+  repo-mode    -> defaults.repoMode
+  main         -> defaults.defaultMainBranches（逗号分隔）
+  ai-profile   -> ai.activeProfile
+  token.<平台> -> platforms.tokens.<平台>
+  host.<域名>  -> platforms.hosts[<域名>]
+  路径里的键带点时用方括号：platforms.hosts[git.company.com]
 
 Options:
-  --repo-mode <mode>      仓库模式: auto(自动继承父仓库) | strict(禁止继承)，仅影响 protect
+  --repo-mode <mode>      仓库模式: auto | strict（影响 protect / init）
+  --show-secrets          list/get 时显示密钥原文
   -h, --help              查看帮助
 
 Examples:
-  icode config set defaults.repoMode strict
-  icode config get defaults.repoMode
+  icode config
+  icode config set remote upstream
+  icode config set main main,master,develop
+  icode config set token.github ghp_xxx
+  icode config set host.git.company.com gitlab
+  icode config get remote
+  icode config init
   icode config protect add main release
-  icode config platform remote-merge set --provider gitlab --api-key rm_xxx
   icode config ai set openai --format openai --base-url https://api.openai.com/v1 --api-key sk-xxx --model gpt-4o-mini --activate
-  icode config ai set ollama --format ollama --base-url http://127.0.0.1:11434 --model qwen2.5:7b --activate
 `)
 }
 
-function maskSecret(secret) {
-  const raw = String(secret || '').trim()
-  if (!raw) {
-    return ''
-  }
-  if (raw.length <= 8) {
-    return `${raw.slice(0, 2)}****${raw.slice(-1)}`
-  }
-  return `${raw.slice(0, 4)}****${raw.slice(-4)}`
-}
-
 // 输出 platform 子命令帮助，明确 remote-merge 仅需平台名与密钥。
 function printPlatformHelp() {
   process.stdout.write(`
@@ -80,16 +94,97 @@ Usage:
   icode config platform <subcommand> [options]
 
 Subcommands:
-  remote-merge show
-  remote-merge set --provider gitlab --api-key <key>
+  token show                        查看各平台 token（脱敏）与来源
+  token set <provider> <token>      写入平台 token（github | gitlab | gitee | gitea）
+  token remove <provider>           删除平台 token
+  host set <host> <provider>        把自建平台域名映射到 provider（例如 git.company.com gitlab）
+  host remove <host>
+  remote-merge show                 （兼容旧命令）
+  remote-merge set --provider <name> --api-key <key>
+
+Notes:
+  平台按 remote 地址的域名自动识别；token 也可以用环境变量提供：
+  GITHUB_TOKEN / GH_TOKEN、GITLAB_TOKEN、GITEE_TOKEN、GITEA_TOKEN。
 
 Examples:
-  icode config platform remote-merge show
-  icode config platform remote-merge set --provider gitlab --api-key rm_xxx
+  icode config platform token set github ghp_xxx
+  icode config platform token set gitlab glpat-xxx
+  icode config platform host set git.company.com gitlab
+  icode config platform token show
 `)
 }
 
-// 处理平台级远程合并配置，当前只接受 GitLab 平台密钥写入。
+function assertSupportedProvider(provider) {
+  if (!SUPPORTED_PLATFORM_NAMES.includes(provider)) {
+    throw new IcodeError(`不支持的平台: ${provider || '(空)'}，可选 ${SUPPORTED_PLATFORM_NAMES.join(', ')}`, {
+      code: 'CONFIG_PLATFORM_PROVIDER_UNSUPPORTED',
+      exitCode: 2
+    })
+  }
+}
+
+// 平台 token 管理：platforms.tokens.<provider>。
+function runPlatformTokenCommand(action, rest) {
+  if (action === 'show' || !action) {
+    const config = readConfig()
+    const view = {}
+    for (const provider of SUPPORTED_PLATFORM_NAMES) {
+      const { token, source } = resolvePlatformToken(provider, config)
+      view[provider] = { hasToken: Boolean(token), tokenMasked: maskSecret(token), source }
+    }
+    process.stdout.write(`${JSON.stringify({ tokens: view, hosts: config.platforms?.hosts || {} }, null, 2)}\n`)
+    return
+  }
+
+  const provider = String(rest[0] || '').trim().toLowerCase()
+  assertSupportedProvider(provider)
+
+  if (action === 'set') {
+    const token = String(rest[1] || '').trim()
+    if (!token) {
+      throw new IcodeError(`缺少 token: icode config platform token set ${provider} <token>`, {
+        code: 'CONFIG_PLATFORM_TOKEN_REQUIRED',
+        exitCode: 2
+      })
+    }
+    setValue(`platforms.tokens.${provider}`, token)
+    logger.success(`已写入 ${provider} token: ${maskSecret(token)}`)
+    return
+  }
+
+  if (action === 'remove') {
+    deleteValue(`platforms.tokens.${provider}`)
+    logger.success(`已删除 ${provider} token`)
+    return
+  }
+
+  throw new IcodeError('platform token 仅支持: show | set | remove', { code: 'CONFIG_PLATFORM_INVALID_ACTION', exitCode: 2 })
+}
+
+// 自建平台域名映射：platforms.hosts.<host> = provider。域名里的点不能用 setValue 的点路径，直接改对象。
+function runPlatformHostCommand(action, rest) {
+  const host = String(rest[0] || '').trim().toLowerCase()
+  if (!host) {
+    throw new IcodeError('缺少域名: icode config platform host set <host> <provider>', { code: 'CONFIG_PLATFORM_HOST_REQUIRED', exitCode: 2 })
+  }
+  const config = readConfig()
+  const hosts = { ...(config.platforms?.hosts || {}) }
+
+  if (action === 'set') {
+    const provider = String(rest[1] || '').trim().toLowerCase()
+    assertSupportedProvider(provider)
+    hosts[host] = provider
+  } else if (action === 'remove') {
+    delete hosts[host]
+  } else {
+    throw new IcodeError('platform host 仅支持: set | remove', { code: 'CONFIG_PLATFORM_INVALID_ACTION', exitCode: 2 })
+  }
+
+  writeConfig({ ...config, platforms: { ...(config.platforms || {}), hosts } })
+  logger.success(action === 'set' ? `已映射 ${host} -> ${hosts[host]}` : `已移除 ${host}`)
+}
+
+// 处理平台级远程合并配置（旧命令，保留兼容）。
 async function runPlatformConfigCommand(args) {
   if (!args.length || args[0] === '-h' || args[0] === '--help') {
     printPlatformHelp()
@@ -97,6 +192,14 @@ async function runPlatformConfigCommand(args) {
   }
 
   const [domain, action, ...rest] = args
+  if (domain === 'token') {
+    runPlatformTokenCommand(action, rest)
+    return
+  }
+  if (domain === 'host') {
+    runPlatformHostCommand(action, rest)
+    return
+  }
   if (domain !== 'remote-merge') {
     throw new IcodeError(`未知 platform 子命令: ${domain}`, {
       code: 'CONFIG_PLATFORM_UNKNOWN_SUBCOMMAND',
@@ -141,8 +244,8 @@ async function runPlatformConfigCommand(args) {
       })
     }
 
-    if (provider !== 'gitlab') {
-      throw new IcodeError(`platform remote-merge 当前仅支持 gitlab，收到 provider=${provider}`, {
+    if (!SUPPORTED_PLATFORM_NAMES.includes(provider)) {
+      throw new IcodeError(`platform remote-merge 仅支持 ${SUPPORTED_PLATFORM_NAMES.join(', ')}，收到 provider=${provider}`, {
         code: 'CONFIG_PLATFORM_PROVIDER_UNSUPPORTED',
         exitCode: 2
       })
@@ -504,11 +607,23 @@ export async function runConfigCommand(rawArgs) {
     allowPositionals: true,
     options: {
       help: { type: 'boolean', short: 'h', default: false },
-      'repo-mode': { type: 'string', default: 'auto' }
+      'repo-mode': { type: 'string', default: 'auto' },
+      'show-secrets': { type: 'boolean', default: false },
+      force: { type: 'boolean', default: false },
+      yes: { type: 'boolean', short: 'y', default: false }
     }
   })
 
-  if (parsed.values.help || parsed.positionals.length === 0) {
+  if (parsed.values.help) {
+    printHelp()
+    return
+  }
+
+  if (parsed.positionals.length === 0) {
+    if (isInteractiveTerminal()) {
+      await runConfigWizard()
+      return
+    }
     printHelp()
     return
   }
@@ -516,13 +631,42 @@ export async function runConfigCommand(rawArgs) {
   const [command, ...rest] = parsed.positionals
 
   if (command === 'list') {
-    process.stdout.write(`${JSON.stringify(readConfig(), null, 2)}\n`)
-    logger.info(`配置文件路径: ${getConfigFilePath()}`)
+    const config = readConfig()
+    process.stdout.write(`${JSON.stringify(parsed.values['show-secrets'] ? config : maskConfig(config), null, 2)}\n`)
+    logger.info(`配置文件路径: ${getConfigFilePath()}${parsed.values['show-secrets'] ? '' : '（密钥已脱敏，--show-secrets 查看原文）'}`)
+    try {
+      const context = await resolveGitContext({ repoMode: parsed.values['repo-mode'] })
+      const repoConfig = readRepoConfig(context.topLevelPath)
+      if (repoConfig.filePath) {
+        const { filePath, ...content } = repoConfig
+        logger.info(`仓库配置 ${filePath}:`)
+        process.stdout.write(`${JSON.stringify(content, null, 2)}\n`)
+      }
+    } catch {
+      // 不在仓库中时只显示全局配置。
+    }
+    return
+  }
+
+  if (command === 'path') {
+    process.stdout.write(`${getConfigFilePath()}\n`)
+    return
+  }
+
+  if (command === 'edit') {
+    runConfigEdit()
+    return
+  }
+
+  if (command === 'init') {
+    const result = await runConfigInit({ force: parsed.values.force, yes: parsed.values.yes, repoMode: parsed.values['repo-mode'] })
+    process.stdout.write(`${JSON.stringify(result.content, null, 2)}\n`)
+    logger.success(`已生成 ${result.filePath}，提交到仓库后团队成员共享这些设置。`)
     return
   }
 
   if (command === 'get') {
-    const pathExpression = rest[0]
+    const pathExpression = resolveConfigKey(rest[0])
     if (!pathExpression) {
       throw new IcodeError('缺少配置路径: icode config get <path>', {
         code: 'CONFIG_GET_PATH_REQUIRED',
@@ -530,12 +674,18 @@ export async function runConfigCommand(rawArgs) {
       })
     }
 
-    const value = getValue(pathExpression)
-    if (value === undefined) {
-      logger.warn('配置不存在。')
+    const rawValue = getValue(pathExpression)
+    if (rawValue === undefined) {
+      logger.warn(`配置不存在: ${pathExpression}`)
       return
     }
 
+    const lastSegment = pathExpression.split('.').pop() || ''
+    const isSecretKey = /api[_-]?key|token|secret|password/i.test(lastSegment) || /^platforms\.tokens\./.test(pathExpression)
+    const value = parsed.values['show-secrets']
+      ? rawValue
+      : typeof rawValue === 'object' ? maskConfig(rawValue, lastSegment) : isSecretKey ? maskSecret(rawValue) : rawValue
+
     if (typeof value === 'object') {
       process.stdout.write(`${JSON.stringify(value, null, 2)}\n`)
     } else {
@@ -546,7 +696,8 @@ export async function runConfigCommand(rawArgs) {
   }
 
   if (command === 'set') {
-    const [pathExpression, rawValue] = rest
+    const [rawKey, rawValue] = rest
+    const pathExpression = resolveConfigKey(rawKey)
     if (!pathExpression || rawValue == null) {
       throw new IcodeError('缺少参数: icode config set <path> <value>', {
         code: 'CONFIG_SET_ARGUMENTS_REQUIRED',
@@ -554,14 +705,14 @@ export async function runConfigCommand(rawArgs) {
       })
     }
 
-    const value = parseConfigValue(rawValue)
+    const value = normalizeAliasValue(pathExpression, parseConfigValue(rawValue))
     setValue(pathExpression, value)
-    logger.success(`已写入: ${pathExpression}`)
+    logger.success(`已写入: ${pathExpression}${pathExpression !== rawKey ? `（${rawKey}）` : ''}`)
     return
   }
 
   if (command === 'delete') {
-    const [pathExpression] = rest
+    const pathExpression = resolveConfigKey(rest[0])
     if (!pathExpression) {
       throw new IcodeError('缺少参数: icode config delete <path>', {
         code: 'CONFIG_DELETE_PATH_REQUIRED',