@xcanwin/manyoyo 3.7.0 → 3.7.5

package/README.md

@@ -53,7 +53,7 @@ podman pull ubuntu:24.04
 
 ```bash
 # 使用 manyoyo 构建镜像（推荐，自动使用缓存加速）
-manyoyo --ib                                     # 默认构建 full 版本（推荐）
+manyoyo --ib --iv 1.6.4                          # 默认构建 full 版本（推荐，建议指定版本号）
 manyoyo --ib --iba TOOL=common                   # 构建常见组件版本（python,nodejs,claude）
 manyoyo --ib --iba TOOL=go,codex,java,gemini     # 构建自定义组件版本
 manyoyo --ib --iba GIT_SSL_NO_VERIFY=true        # 构建 full 版本且跳过git的ssl验证
@@ -85,7 +85,10 @@ manyoyo -l
 manyoyo -n test --ef .env -y c
 
 # 恢复现有会话
-manyoyo -n test -- -c
+manyoyo -n test -- -c                 # Claude Code
+manyoyo -n test -- resume --last      # Codex
+manyoyo -n test -- -r                 # Gemini
+manyoyo -n test -- -c                 # OpenCode
 
 # 在交互式 shell 中执行命令
 manyoyo -n test -x /bin/bash
@@ -120,7 +123,7 @@ manyoyo -e "ANTHROPIC_BASE_URL=https://xxxx" -e "ANTHROPIC_AUTH_TOKEN=your-key"
 
 ```bash
 export ANTHROPIC_BASE_URL="https://xxxx"
-AUTH_TOANTHROPIC_AUTH_TOKENKEN=your-key
+AUTH_TOANTHROPIC_AUTH_TOKEN=your-key
 # MESSAGE="Hello World"  # 注释会被忽略
 TESTPATH='/usr/local/bin'
 ```
@@ -171,7 +174,7 @@ manyoyo --ef claude -x claude
   "hostPath": "/path/to/project",      // 默认宿主机工作目录
   "containerPath": "/path/to/project", // 默认容器工作目录
   "imageName": "localhost/xcanwin/manyoyo",  // 默认镜像名称
-  "imageVersion": "1.6.3-full",        // 默认镜像版本
+  "imageVersion": "1.6.4-full",        // 默认镜像版本
   "containerMode": "common",           // 容器嵌套模式 (common, dind, sock)
 
   // 环境变量配置
@@ -199,18 +202,26 @@ manyoyo --ef claude -x claude
 
 合并型参数包括：`envFile`, `env`, `volumes`, `imageBuildArgs`
 
-#### 常用样例
+#### 常用样例-全局
+
+```bash
+mkdir -p ~/.manyoyo/
+
+cat > ~/.manyoyo/manyoyo.json << 'EOF'
+{
+  "imageName": "localhost/xcanwin/manyoyo",
+  "imageVersion": "1.6.4-full"
+}
+EOF
+```
+
+#### 常用样例-Claude Code
 
 ```bash
-# 创建运行配置目录
 mkdir -p ~/.manyoyo/run/
 
-# 创建 Claude 运行配置
 cat > ~/.manyoyo/run/c.json << 'EOF'
 {
-  // Claude Code 快捷配置
-  "imageName": "localhost/xcanwin/manyoyo",
-  "imageVersion": "1.6.3-full",
   "envFile": [
     "claude"  // 自动加载 ~/.manyoyo/env/claude.env
   ],
@@ -222,6 +233,24 @@ EOF
 manyoyo -r c
 ```
 
+#### 常用样例-Codex
+
+```bash
+mkdir -p ~/.manyoyo/run/
+
+cat > ~/.manyoyo/run/codex.json << 'EOF'
+{
+    "volumes": [
+        "/Users/mac_user/.codex/auth.json:/root/.codex/auth.json"
+    ],
+    "yolo": "cx"
+}
+EOF
+
+# 在任意目录下使用运行配置
+manyoyo -r codex
+```
+
 ### AI CLI 快捷方式（跳过权限确认）
 
 ```bash
@@ -280,11 +309,11 @@ docker ps -a             # 现在可以在容器内使用 docker 命令
 | 选项 | 别名 | 描述 |
 |------|------|------|
 | `--hp PATH` | `--host-path` | 设置宿主机工作目录（默认：当前路径） |
-| `-n NAME` | `--cn`, `--cont-name` | 设置容器名称 |
+| `-n NAME` | `--cont-name` | 设置容器名称 |
 | `--cp PATH` | `--cont-path` | 设置容器工作目录 |
-| `-l` | `--cl`, `--cont-list` | 列出所有 manyoyo 容器 |
+| `-l` | `--cont-list` | 列出所有 manyoyo 容器 |
 | `--crm` | `--cont-remove` | 删除容器 |
-| `-m MODE` | `--cm`, `--cont-mode` | 设置容器模式（common, dind, sock） |
+| `-m MODE` | `--cont-mode` | 设置容器模式（common, dind, sock） |
 | `--in NAME` | `--image-name` | 指定镜像名称 |
 | `--iv VERSION` | `--image-ver` | 指定镜像版本 |
 | `--ib` | `--image-build` | 构建镜像 |
@@ -298,6 +327,8 @@ docker ps -a             # 现在可以在容器内使用 docker 命令
 | `--` | `--ss`, `--shell-suffix` | 命令参数（作为 -s 的后缀） |
 | `-x CMD` | `--sf`, `--shell-full` | 完整命令（替代 --sp, -s 和 --） |
 | `-y CLI` | `--yolo` | 无需确认运行 AI 智能体 |
+| `--show-config` | | 显示最终生效配置并退出 |
+| `--show-command` | | 显示将执行的命令并退出（存在容器时为 docker exec，不存在时为 docker run） |
 | `--install NAME` | | 安装 manyoyo 命令 |
 | `-q LIST` | `--quiet` | 静默显示 |
 | `-r NAME` | `--run` | 加载运行配置（支持 `name` 或 `./path.json`） |

package/bin/manyoyo.js

@@ -41,6 +41,7 @@ let CONTAINER_VOLUMES = [];
 let MANYOYO_NAME = "manyoyo";
 let CONT_MODE = "";
 let QUIET = {};
+let SHOW_COMMAND = false;
 
 // Color definitions using ANSI codes
 const RED = '\x1b[0;31m';
@@ -160,6 +161,14 @@ function setQuiet(actions) {
     });
 }
 
+function validateName(label, value, pattern) {
+    if (!value) return;
+    if (!pattern.test(value)) {
+        console.error(`${RED}⚠️  错误: ${label} 非法: ${value}${NC}`);
+        process.exit(1);
+    }
+}
+
 async function askQuestion(prompt) {
     const rl = readline.createInterface({
         input: process.stdin,
@@ -179,6 +188,21 @@ async function askQuestion(prompt) {
 // ==============================================================================
 
 function addEnv(env) {
+    const idx = env.indexOf('=');
+    if (idx <= 0) {
+        console.error(`${RED}⚠️  错误: env 格式应为 KEY=VALUE: ${env}${NC}`);
+        process.exit(1);
+    }
+    const key = env.slice(0, idx);
+    const value = env.slice(idx + 1);
+    if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(key)) {
+        console.error(`${RED}⚠️  错误: env key 非法: ${key}${NC}`);
+        process.exit(1);
+    }
+    if (/[\r\n\0]/.test(value) || /[;&|`$<>]/.test(value)) {
+        console.error(`${RED}⚠️  错误: env value 含非法字符: ${key}${NC}`);
+        process.exit(1);
+    }
     CONTAINER_ENVS.push("--env", env);
 }
 
@@ -208,7 +232,8 @@ function addEnvFile(envFile) {
                 let value = match[2].trim();
 
                 // Filter malicious characters
-                if (/[\$\(\)\`\|\&\*\{\}]/.test(value)) continue;
+                if (/[\r\n\0]/.test(value)) continue;
+                if (/[\$\(\)\`\|\&\*\{\};<>]/.test(value)) continue;
                 if (/^\(/.test(value)) continue;
 
                 // Remove quotes
@@ -247,11 +272,11 @@ function setYolo(cli) {
             break;
         case 'codex':
         case 'cx':
-            EXEC_COMMAND = "codex";
+            EXEC_COMMAND = "codex --dangerously-bypass-approvals-and-sandbox";
             break;
         case 'opencode':
         case 'oc':
-            EXEC_COMMAND = "opencode";
+            EXEC_COMMAND = "OPENCODE_PERMISSION=allow opencode";
             break;
         default:
             console.log(`${RED}⚠️  未知LLM CLI: ${cli}${NC}`);
@@ -297,18 +322,40 @@ function dockerExec(cmd, options = {}) {
     }
 }
 
+function runCmd(cmd, args, options = {}) {
+    const result = spawnSync(cmd, args, { encoding: 'utf-8', ...options });
+    if (result.error) {
+        throw result.error;
+    }
+    if (result.status !== 0) {
+        if (options.ignoreError) {
+            return result.stdout || '';
+        }
+        const err = new Error(`Command failed: ${cmd} ${args.join(' ')}`);
+        err.stdout = result.stdout;
+        err.stderr = result.stderr;
+        err.status = result.status;
+        throw err;
+    }
+    return result.stdout || '';
+}
+
+function dockerExecArgs(args, options = {}) {
+    return runCmd(DOCKER_CMD, args, options);
+}
+
 function containerExists(name) {
-    const containers = dockerExec(`${DOCKER_CMD} ps -a --format '{{.Names}}'`);
+    const containers = dockerExecArgs(['ps', '-a', '--format', '{{.Names}}']);
     return containers.split('\n').some(n => n.trim() === name);
 }
 
 function getContainerStatus(name) {
-    return dockerExec(`${DOCKER_CMD} inspect -f '{{.State.Status}}' "${name}"`).trim();
+    return dockerExecArgs(['inspect', '-f', '{{.State.Status}}', name]).trim();
 }
 
 function removeContainer(name) {
     if ( !(QUIET.crm || QUIET.full) ) console.log(`${YELLOW}🗑️ 正在删除容器: ${name}...${NC}`);
-    dockerExec(`${DOCKER_CMD} rm -f "${name}"`, { stdio: 'pipe' });
+    dockerExecArgs(['rm', '-f', name], { stdio: 'pipe' });
     if ( !(QUIET.crm || QUIET.full) ) console.log(`${GREEN}✅ 已彻底删除。${NC}`);
 }
 
@@ -320,7 +367,7 @@ function ensureDocker() {
     const commands = ['docker', 'podman'];
     for (const cmd of commands) {
         try {
-            execSync(`${cmd} --version`, { stdio: 'pipe' });
+            runCmd(cmd, ['--version'], { stdio: 'pipe' });
             DOCKER_CMD = cmd;
             return true;
         } catch (e) {
@@ -361,11 +408,11 @@ function getContList() {
 
 function pruneDanglingImages() {
     console.log(`\n${YELLOW}清理悬空镜像...${NC}`);
-    execSync(`${DOCKER_CMD} image prune -f`, { stdio: 'inherit' });
+    dockerExecArgs(['image', 'prune', '-f'], { stdio: 'inherit' });
 
     // Remove remaining <none> images
     try {
-        const imagesOutput = execSync(`${DOCKER_CMD} images -a --format "{{.ID}} {{.Repository}}"`, { encoding: 'utf-8' });
+        const imagesOutput = dockerExecArgs(['images', '-a', '--format', '{{.ID}} {{.Repository}}']);
         const noneImages = imagesOutput
             .split('\n')
             .filter(line => line.includes('<none>'))
@@ -374,7 +421,7 @@ function pruneDanglingImages() {
 
         if (noneImages.length > 0) {
             console.log(`${YELLOW}清理剩余的 <none> 镜像 (${noneImages.length} 个)...${NC}`);
-            execSync(`${DOCKER_CMD} rmi -f ${noneImages.join(' ')}`, { stdio: 'inherit' });
+            dockerExecArgs(['rmi', '-f', ...noneImages], { stdio: 'inherit' });
         }
     } catch (e) {
         // Ignore errors if no <none> images found
@@ -434,7 +481,7 @@ async function prepareBuildCache(imageTool) {
             const shasum = execSync(`curl -sL ${mirror}/latest-v${nodeVersion}.x/SHASUMS256.txt | grep linux-${archNode}.tar.gz | awk '{print $2}'`, { encoding: 'utf-8' }).trim();
             const nodeUrl = `${mirror}/latest-v${nodeVersion}.x/${shasum}`;
             const nodeTargetPath = path.join(nodeCacheDir, shasum);
-            execSync(`curl -fsSL "${nodeUrl}" -o "${nodeTargetPath}"`, { stdio: 'inherit' });
+            runCmd('curl', ['-fsSL', nodeUrl, '-o', nodeTargetPath], { stdio: 'inherit' });
             timestamps[nodeKey] = now.toISOString();
             fs.writeFileSync(timestampFile, JSON.stringify(timestamps, null, 2));
             console.log(`${GREEN}✓ Node.js 下载完成${NC}`);
@@ -458,15 +505,23 @@ async function prepareBuildCache(imageTool) {
 
         if (!fs.existsSync(jdtlsPath) || isExpired(jdtlsKey)) {
             console.log(`${YELLOW}下载 JDT Language Server...${NC}`);
-            const jdtUrl = 'https://download.eclipse.org/jdtls/snapshots/jdt-language-server-latest.tar.gz';
+            const apkUrl = 'https://mirrors.tencent.com/alpine/latest-stable/community/x86_64/jdtls-1.53.0-r0.apk';
+            const tmpDir = path.join(jdtlsCacheDir, '.tmp-apk');
+            const apkPath = path.join(tmpDir, 'jdtls.apk');
             try {
-                execSync(`curl -fsSL "${jdtUrl}" -o "${jdtlsPath}"`, { stdio: 'inherit' });
+                fs.mkdirSync(tmpDir, { recursive: true });
+                runCmd('curl', ['-fsSL', apkUrl, '-o', apkPath], { stdio: 'inherit' });
+                runCmd('tar', ['-xzf', apkPath, '-C', tmpDir], { stdio: 'inherit' });
+                const srcDir = path.join(tmpDir, 'usr', 'share', 'jdtls');
+                runCmd('tar', ['-czf', jdtlsPath, '-C', srcDir, '.'], { stdio: 'inherit' });
                 timestamps[jdtlsKey] = now.toISOString();
                 fs.writeFileSync(timestampFile, JSON.stringify(timestamps, null, 2));
                 console.log(`${GREEN}✓ JDT LSP 下载完成${NC}`);
             } catch (e) {
                 console.error(`${RED}错误: JDT LSP 下载失败${NC}`);
                 throw e;
+            } finally {
+                try { runCmd('rm', ['-rf', tmpDir], { stdio: 'inherit', ignoreError: true }); } catch {}
             }
         } else {
             console.log(`${GREEN}✓ JDT LSP 缓存已存在${NC}`);
@@ -501,9 +556,12 @@ async function prepareBuildCache(imageTool) {
                 }
                 fs.mkdirSync(tmpGoPath, { recursive: true });
 
-                execSync(`GOPATH="${tmpGoPath}" GOOS=linux GOARCH=${arch} go install golang.org/x/tools/gopls@latest`, { stdio: 'inherit' });
+                runCmd('go', ['install', 'golang.org/x/tools/gopls@latest'], {
+                    stdio: 'inherit',
+                    env: { ...process.env, GOPATH: tmpGoPath, GOOS: 'linux', GOARCH: arch }
+                });
                 execSync(`cp "${tmpGoPath}/bin/linux_${arch}/gopls" "${goplsPath}" || cp "${tmpGoPath}/bin/gopls" "${goplsPath}"`, { stdio: 'inherit' });
-                execSync(`chmod +x "${goplsPath}"`, { stdio: 'inherit' });
+                runCmd('chmod', ['+x', goplsPath], { stdio: 'inherit' });
 
                 // Save timestamp immediately after successful download
                 timestamps[goplsKey] = now.toISOString();
@@ -642,6 +700,8 @@ function setupCommander() {
         .option('-x, --shell-full <command...>', '指定完整命令执行 (代替--sp和-s和--命令)')
         .option('-y, --yolo <cli>', '使AGENT无需确认 (claude/c, gemini/gm, codex/cx, opencode/oc)')
         .option('--install <name>', '安装manyoyo命令 (docker-cli-plugin)')
+        .option('--show-config', '显示最终生效配置并退出')
+        .option('--show-command', '显示将执行的 docker run 命令并退出')
         .option('-q, --quiet <item>', '静默显示 (可多次使用: cnew,crm,tip,cmd,full)', (value, previous) => [...(previous || []), value], []);
 
     // Docker CLI plugin metadata check
@@ -693,6 +753,11 @@ function setupCommander() {
         EXEC_COMMAND = options.shell || runConfig.shell || config.shell;
     }
 
+    // Basic name validation to reduce injection risk
+    validateName('containerName', CONTAINER_NAME, /^[A-Za-z0-9][A-Za-z0-9_.-]*$/);
+    validateName('imageName', IMAGE_NAME, /^[A-Za-z0-9][A-Za-z0-9._/:-]*$/);
+    validateName('imageVersion', IMAGE_VERSION, /^[A-Za-z0-9][A-Za-z0-9_.-]*$/);
+
     // Merge mode (array values): concatenate all sources
     const toArray = (val) => Array.isArray(val) ? val : (val ? [val] : []);
     const envFileList = [
@@ -721,23 +786,58 @@ function setupCommander() {
     const quietValue = options.quiet || runConfig.quiet || config.quiet;
     if (quietValue) setQuiet(quietValue);
 
-    if (options.contList) { getContList(); process.exit(0); }
-    if (options.contRemove) SHOULD_REMOVE = true;
-    if (options.imageBuild) IMAGE_BUILD_NEED = true;
-    if (options.imageRemove) { pruneDanglingImages(); process.exit(0); }
-    if (options.install) { installManyoyo(options.install); process.exit(0); }
-
     // Handle shell-full (variadic arguments)
     if (options.shellFull) {
         EXEC_COMMAND = options.shellFull.join(' ');
+        EXEC_COMMAND_PREFIX = "";
+        EXEC_COMMAND_SUFFIX = "";
     }
 
     // Handle -- suffix arguments
-    const doubleDashIndex = process.argv.indexOf('--');
-    if (doubleDashIndex !== -1 && doubleDashIndex < process.argv.length - 1) {
-        EXEC_COMMAND_SUFFIX = " " + process.argv.slice(doubleDashIndex + 1).join(' ');
+    if (!options.shellFull) {
+        const doubleDashIndex = process.argv.indexOf('--');
+        if (doubleDashIndex !== -1 && doubleDashIndex < process.argv.length - 1) {
+            EXEC_COMMAND_SUFFIX = " " + process.argv.slice(doubleDashIndex + 1).join(' ');
+        }
+    }
+
+    if (options.showConfig) {
+        const finalConfig = {
+            hostPath: HOST_PATH,
+            containerName: CONTAINER_NAME,
+            containerPath: CONTAINER_PATH,
+            imageName: IMAGE_NAME,
+            imageVersion: IMAGE_VERSION,
+            envFile: envFileList,
+            env: envList,
+            volumes: volumeList,
+            imageBuildArgs: buildArgList,
+            containerMode: contModeValue || "",
+            shellPrefix: EXEC_COMMAND_PREFIX.trim(),
+            shell: EXEC_COMMAND || "",
+            shellSuffix: EXEC_COMMAND_SUFFIX || "",
+            yolo: yoloValue || "",
+            quiet: quietValue || [],
+            exec: {
+                prefix: EXEC_COMMAND_PREFIX,
+                shell: EXEC_COMMAND,
+                suffix: EXEC_COMMAND_SUFFIX
+            }
+        };
+        console.log(JSON.stringify(finalConfig, null, 2));
+        process.exit(0);
     }
 
+    if (options.showCommand) {
+        SHOW_COMMAND = true;
+    }
+
+    if (options.contList) { getContList(); process.exit(0); }
+    if (options.contRemove) SHOULD_REMOVE = true;
+    if (options.imageBuild) IMAGE_BUILD_NEED = true;
+    if (options.imageRemove) { pruneDanglingImages(); process.exit(0); }
+    if (options.install) { installManyoyo(options.install); process.exit(0); }
+
     return program;
 }
 
@@ -757,6 +857,10 @@ function handleRemoveContainer() {
 }
 
 function validateHostPath() {
+    if (!fs.existsSync(HOST_PATH)) {
+        console.log(`${RED}⚠️  错误: 宿主机路径不存在: ${HOST_PATH}${NC}`);
+        process.exit(1);
+    }
     const realHostPath = fs.realpathSync(HOST_PATH);
     const homeDir = process.env.HOME || '/home';
     if (realHostPath === '/' || realHostPath === '/home' || realHostPath === homeDir) {
@@ -778,7 +882,7 @@ async function waitForContainerReady(containerName) {
 
             if (status === 'exited') {
                 console.log(`${RED}⚠️  错误: 容器启动后立即退出。${NC}`);
-                dockerExec(`${DOCKER_CMD} logs "${containerName}"`, { stdio: 'inherit' });
+                dockerExecArgs(['logs', containerName], { stdio: 'inherit' });
                 process.exit(1);
             }
 
@@ -787,7 +891,7 @@ async function waitForContainerReady(containerName) {
 
             if (count >= MAX_RETRIES) {
                 console.log(`${RED}⚠️  错误: 容器启动超时（当前状态: ${status}）。${NC}`);
-                dockerExec(`${DOCKER_CMD} logs "${containerName}"`, { stdio: 'inherit' });
+                dockerExecArgs(['logs', containerName], { stdio: 'inherit' });
                 process.exit(1);
             }
         } catch (e) {
@@ -807,13 +911,12 @@ async function createNewContainer() {
     EXEC_COMMAND = `${EXEC_COMMAND_PREFIX}${EXEC_COMMAND}${EXEC_COMMAND_SUFFIX}`;
     const defaultCommand = EXEC_COMMAND;
 
-    // Build docker run command
-    const fullImage = `${IMAGE_NAME}:${IMAGE_VERSION}`;
-    const envArgs = CONTAINER_ENVS.join(' ');
-    const volumeArgs = CONTAINER_VOLUMES.join(' ');
-    const contModeArg = CONT_MODE || '';
+    const dockerRunCmd = buildDockerRunCmd();
 
-    const dockerRunCmd = `${DOCKER_CMD} run -d --name "${CONTAINER_NAME}" --entrypoint "" ${contModeArg} ${envArgs} ${volumeArgs} --volume "${HOST_PATH}:${CONTAINER_PATH}" --workdir "${CONTAINER_PATH}" --label "manyoyo.default_cmd=${EXEC_COMMAND}" "${fullImage}" tail -f /dev/null`;
+    if (SHOW_COMMAND) {
+        console.log(dockerRunCmd);
+        process.exit(0);
+    }
 
     dockerExec(dockerRunCmd, { stdio: 'pipe' });
 
@@ -823,17 +926,30 @@ async function createNewContainer() {
     return defaultCommand;
 }
 
+function buildDockerRunCmd() {
+    // Build docker run command
+    const fullImage = `${IMAGE_NAME}:${IMAGE_VERSION}`;
+    const envArgs = CONTAINER_ENVS.join(' ');
+    const volumeArgs = CONTAINER_VOLUMES.join(' ');
+    const contModeArg = CONT_MODE || '';
+
+    const safeLabelCmd = EXEC_COMMAND.replace(/[\r\n]/g, ' ').replace(/"/g, '\\"');
+    const dockerRunCmd = `${DOCKER_CMD} run -d --name "${CONTAINER_NAME}" --entrypoint "" ${contModeArg} ${envArgs} ${volumeArgs} --volume "${HOST_PATH}:${CONTAINER_PATH}" --workdir "${CONTAINER_PATH}" --label "manyoyo.default_cmd=${safeLabelCmd}" "${fullImage}" tail -f /dev/null`;
+
+    return dockerRunCmd;
+}
+
 async function connectExistingContainer() {
     if ( !(QUIET.cnew || QUIET.full) ) console.log(`${CYAN}🔄 manyoyo by xcanwin 正在连接到现有容器: ${YELLOW}${CONTAINER_NAME}${NC}`);
 
     // Start container if stopped
     const status = getContainerStatus(CONTAINER_NAME);
     if (status !== 'running') {
-        dockerExec(`${DOCKER_CMD} start "${CONTAINER_NAME}"`, { stdio: 'pipe' });
+        dockerExecArgs(['start', CONTAINER_NAME], { stdio: 'pipe' });
     }
 
     // Get default command from label
-    const defaultCommand = dockerExec(`${DOCKER_CMD} inspect -f '{{index .Config.Labels "manyoyo.default_cmd"}}' "${CONTAINER_NAME}"`).trim();
+    const defaultCommand = dockerExecArgs(['inspect', '-f', '{{index .Config.Labels "manyoyo.default_cmd"}}', CONTAINER_NAME]).trim();
 
     if (!EXEC_COMMAND) {
         EXEC_COMMAND = `${EXEC_COMMAND_PREFIX}${defaultCommand}${EXEC_COMMAND_SUFFIX}`;
@@ -845,6 +961,19 @@ async function connectExistingContainer() {
 }
 
 async function setupContainer() {
+    if (SHOW_COMMAND) {
+        if (containerExists(CONTAINER_NAME)) {
+            const defaultCommand = dockerExecArgs(['inspect', '-f', '{{index .Config.Labels "manyoyo.default_cmd"}}', CONTAINER_NAME]).trim();
+            const execCmd = EXEC_COMMAND
+                ? `${EXEC_COMMAND_PREFIX}${EXEC_COMMAND}${EXEC_COMMAND_SUFFIX}`
+                : `${EXEC_COMMAND_PREFIX}${defaultCommand}${EXEC_COMMAND_SUFFIX}`;
+            console.log(`${DOCKER_CMD} exec -it ${CONTAINER_NAME} /bin/bash -c "${execCmd.replace(/"/g, '\\"')}"`);
+            process.exit(0);
+        }
+        EXEC_COMMAND = `${EXEC_COMMAND_PREFIX}${EXEC_COMMAND}${EXEC_COMMAND_SUFFIX}`;
+        console.log(buildDockerRunCmd());
+        process.exit(0);
+    }
     if (!containerExists(CONTAINER_NAME)) {
         return await createNewContainer();
     } else {

package/docker/manyoyo.Dockerfile

@@ -169,6 +169,10 @@ EOF
     # 安装 Codex CLI
     case ",$TOOL," in *,full,*|*,codex,*)
         npm install -g @openai/codex
+        mkdir -p ~/.codex
+        cat > ~/.codex/config.toml <<EOF
+check_for_update_on_startup = false
+EOF
     ;; esac
 
     # 安装 Copilot CLI
@@ -194,7 +198,6 @@ EOF
 {
   "\$schema": "https://opencode.ai/config.json",
   "autoupdate": false,
-  "permission": "allow",
   "model": "myprovider/{env:ANTHROPIC_MODEL}",
   "provider": {
     "myprovider": {

package/docs/README_EN.md

@@ -53,7 +53,7 @@ Only one of the following commands needs to be executed:
 
 ```bash
 # Build using manyoyo (Recommended, auto-cache enabled)
-manyoyo --ib                                     # Build full version by default (Recommended)
+manyoyo --ib --iv 1.6.4                          # Build full version by default (Recommended, specify version)
 manyoyo --ib --iba TOOL=common                   # Build common version (python,nodejs,claude)
 manyoyo --ib --iba TOOL=go,codex,java,gemini     # Build custom combination
 manyoyo --ib --iba GIT_SSL_NO_VERIFY=true        # Build the full version and skip Git SSL verification
@@ -85,7 +85,10 @@ manyoyo -l
 manyoyo -n test --ef .env -y c
 
 # Resume existing session
-manyoyo -n test -- -c
+manyoyo -n test -- -c                 # Claude Code
+manyoyo -n test -- resume --last      # Codex
+manyoyo -n test -- -r                 # Gemini
+manyoyo -n test -- -c                 # OpenCode
 
 # Execute command in interactive shell
 manyoyo -n test -x /bin/bash
@@ -171,7 +174,7 @@ Refer to `config.example.json` for all available options:
   "hostPath": "/path/to/project",      // Default host working directory
   "containerPath": "/path/to/project", // Default container working directory
   "imageName": "localhost/xcanwin/manyoyo",  // Default image name
-  "imageVersion": "1.6.3-full",        // Default image version
+  "imageVersion": "1.6.4-full",        // Default image version
   "containerMode": "common",           // Container nesting mode (common, dind, sock)
 
   // Environment variable configuration
@@ -199,18 +202,26 @@ Override parameters include: `containerName`, `hostPath`, `containerPath`, `imag
 
 Merge parameters include: `envFile`, `env`, `volumes`, `imageBuildArgs`
 
-#### Common Examples
+#### Common Examples-Global
+
+```bash
+mkdir -p ~/.manyoyo/
+
+cat > ~/.manyoyo/manyoyo.json << 'EOF'
+{
+  "imageName": "localhost/xcanwin/manyoyo",
+  "imageVersion": "1.6.4-full"
+}
+EOF
+```
+
+#### Common Examples-Claude Code
 
 ```bash
-# Create run configuration directory
 mkdir -p ~/.manyoyo/run/
 
-# Create Claude run configuration
 cat > ~/.manyoyo/run/c.json << 'EOF'
 {
-  // Claude Code quick configuration
-  "imageName": "localhost/xcanwin/manyoyo",
-  "imageVersion": "1.6.3-full",
   "envFile": [
     "claude"  // Automatically loads ~/.manyoyo/env/claude.env
   ],
@@ -222,6 +233,24 @@ EOF
 manyoyo -r c
 ```
 
+#### Common Examples-Codex
+
+```bash
+mkdir -p ~/.manyoyo/run/
+
+cat > ~/.manyoyo/run/codex.json << 'EOF'
+{
+    "volumes": [
+        "/Users/mac_user/.codex/auth.json:/root/.codex/auth.json"
+    ],
+    "yolo": "cx"
+}
+EOF
+
+# Use run configuration from any directory
+manyoyo -r codex
+```
+
 ### AI CLI Shortcuts (skip permissions)
 
 ```bash
@@ -280,11 +309,11 @@ docker ps -a             # Now you can use docker commands inside the container
 | Option | Aliases | Description |
 |--------|---------|-------------|
 | `--hp PATH` | `--host-path` | Set host working directory (default: current path) |
-| `-n NAME` | `--cn`, `--cont-name` | Set container name |
+| `-n NAME` | `--cont-name` | Set container name |
 | `--cp PATH` | `--cont-path` | Set container working directory |
-| `-l` | `--cl`, `--cont-list` | List all manyoyo containers |
+| `-l` | `--cont-list` | List all manyoyo containers |
 | `--crm` | `--cont-remove` | Remove container |
-| `-m MODE` | `--cm`, `--cont-mode` | Set container mode (common, dind, sock) |
+| `-m MODE` | `--cont-mode` | Set container mode (common, dind, sock) |
 | `--in NAME` | `--image-name` | Specify image name |
 | `--iv VERSION` | `--image-ver` | Specify image version |
 | `--ib` | `--image-build` | Build image |
@@ -298,6 +327,8 @@ docker ps -a             # Now you can use docker commands inside the container
 | `--` | `--ss`, `--shell-suffix` | Command arguments (suffix for -s) |
 | `-x CMD` | `--sf`, `--shell-full` | Full command (replaces --sp, -s, and --) |
 | `-y CLI` | `--yolo` | Run AI agent without confirmation |
+| `--show-config` | | Print final effective config and exit |
+| `--show-command` | | Print the command to be executed and exit (docker exec if container exists, otherwise docker run) |
 | `--install NAME` | | Install manyoyo command |
 | `-q LIST` | `--quiet` | Quiet output |
 | `-r NAME` | `--run` | Load run configuration (supports `name` or `./path.json`) |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xcanwin/manyoyo",
-  "version": "3.7.0",
+  "version": "3.7.5",
   "imageVersion": "1.6.4",
   "description": "AI Agent CLI Security Sandbox",
   "keywords": [