jinzd-ai-cli 0.4.270 → 0.4.271

package/dist/index.js

@@ -25,7 +25,7 @@ import {
   sessionHasMeaningfulContent,
   setupProxy,
   stripRoutingTags
-} from "./chunk-X3JPBJ6C.js";
+} from "./chunk-BFPF3JF2.js";
 import {
   CostTracker,
   computeCost,
@@ -33,16 +33,6 @@ import {
   getPricing,
   setCostCurrency
 } from "./chunk-JT6UN5C6.js";
-import {
-  buildReviewPrompt,
-  buildSecurityReviewPrompt
-} from "./chunk-HLWUDRBO.js";
-import {
-  NO_THINKING,
-  applyThinkingFlag,
-  chatParamsFrom,
-  thinkingParamsFor
-} from "./chunk-6YZEZFX5.js";
 import {
   ToolExecutor,
   ToolRegistry,
@@ -64,7 +54,23 @@ import {
   setMaxOutputCap,
   spawnAgentContext,
   undoStack
-} from "./chunk-DIJIYWQE.js";
+} from "./chunk-V26ZMB3D.js";
+import {
+  buildReviewPrompt,
+  buildSecurityReviewPrompt
+} from "./chunk-HLWUDRBO.js";
+import {
+  NO_THINKING,
+  applyThinkingFlag,
+  chatParamsFrom,
+  thinkingParamsFor
+} from "./chunk-6YZEZFX5.js";
+import {
+  buildChatIndex,
+  clearChatIndex,
+  getChatIndexStatus,
+  searchChatMemory
+} from "./chunk-6RPGQ5CG.js";
 import {
   addMemoryEntry,
   backupMemoryStore,
@@ -89,11 +95,12 @@ import {
   touchMemoryReferences,
   updateMemoryApproval,
   updateMemoryEntry
-} from "./chunk-YHLTSZVH.js";
+} from "./chunk-4UNRDXZV.js";
 import "./chunk-GLSR2NR3.js";
 import "./chunk-UUSRWSSX.js";
 import "./chunk-CKH4KQ4E.js";
 import "./chunk-BXP6YZ2P.js";
+import "./chunk-KHYD3WXE.js";
 import {
   initTheme,
   theme
@@ -102,19 +109,17 @@ import {
   SessionManager,
   getContentText
 } from "./chunk-OBULDJSU.js";
+import "./chunk-NYNSYLFY.js";
+import {
+  DEFAULT_PATTERNS,
+  scanString
+} from "./chunk-B5TYJO7V.js";
 import {
   buildDoctorReport,
   formatDoctorReport,
   loadContextFiles,
   writeCrashLog
-} from "./chunk-HOT76ATM.js";
-import {
-  ProviderRegistry,
-  listBuiltInProviderMetadata
-} from "./chunk-AUEX6RNY.js";
-import {
-  ConfigManager
-} from "./chunk-F26YTEMB.js";
+} from "./chunk-PG7O7N7D.js";
 import {
   describePlugin,
   getActivePluginAssets,
@@ -131,7 +136,14 @@ import {
   trustHook,
   trustPlugin,
   untrustHook
-} from "./chunk-M3GDYEUH.js";
+} from "./chunk-PDRAOFGI.js";
+import {
+  ProviderRegistry,
+  listBuiltInProviderMetadata
+} from "./chunk-AUEX6RNY.js";
+import {
+  ConfigManager
+} from "./chunk-PMRU2CAF.js";
 import {
   CONTENT_ONLY_STREAM_REMINDER,
   TEE_FINAL_USER_NUDGE,
@@ -162,10 +174,16 @@ import {
   getGitContext,
   getGitRoot
 } from "./chunk-HOSJZMQS.js";
+import {
+  atomicWriteFileSync
+} from "./chunk-IW3Q7AE5.js";
+import {
+  applyConfigCommand
+} from "./chunk-XNFIYS7G.js";
 import {
   fileCheckpoints
 } from "./chunk-4BKXL7SM.js";
-import "./chunk-TG4PF7FZ.js";
+import "./chunk-OSYK6D4G.js";
 import {
   AGENTIC_BEHAVIOR_GUIDELINE,
   AUTHOR,
@@ -183,22 +201,7 @@ import {
   SKILLS_DIR_NAME,
   VERSION,
   buildUserIdentityPrompt
-} from "./chunk-75SPJKDY.js";
-import {
-  buildChatIndex,
-  clearChatIndex,
-  getChatIndexStatus,
-  searchChatMemory
-} from "./chunk-6RPGQ5CG.js";
-import "./chunk-KHYD3WXE.js";
-import "./chunk-NYNSYLFY.js";
-import {
-  DEFAULT_PATTERNS,
-  scanString
-} from "./chunk-B5TYJO7V.js";
-import {
-  atomicWriteFileSync
-} from "./chunk-IW3Q7AE5.js";
+} from "./chunk-FT3WS5PG.js";
 
 // src/index.ts
 import { program } from "commander";
@@ -1404,7 +1407,7 @@ No tools match "${filter}".
           const { join: join6 } = await import("path");
           const { existsSync: existsSync6 } = await import("fs");
           const { getGitRoot: getGitRoot2 } = await import("./git-context-EXOEHQSF.js");
-          const { MCP_PROJECT_CONFIG_NAME: MCP_PROJECT_CONFIG_NAME2 } = await import("./constants-4TPE3JSV.js");
+          const { MCP_PROJECT_CONFIG_NAME: MCP_PROJECT_CONFIG_NAME2 } = await import("./constants-Y43DJFGV.js");
           const { approveProject, hashMcpFile } = await import("./project-trust-NKYHL3VZ.js");
           const cwd = process.cwd();
           const projectRoot = getGitRoot2(cwd) ?? cwd;
@@ -1615,57 +1618,24 @@ function createSecurityCommands() {
       description: "Configuration: wizard, get/set values, show all",
       usage: "/config [set <path> <value> | get <path> | show]",
       async execute(args, ctx) {
-        const sub = args[0]?.toLowerCase();
-        const config = ctx.config;
-        if (!sub) {
+        const outcome = applyConfigCommand(args, ctx.config);
+        if (outcome.action === "wizard") {
           await ctx.runSetupWizard();
           return;
         }
-        if (sub === "show") {
-          const masked = config.toJSON();
-          if (masked.apiKeys && typeof masked.apiKeys === "object") {
-            const keys = masked.apiKeys;
-            for (const key of Object.keys(keys)) {
-              const val = keys[key];
-              if (typeof val === "string" && val.length > 8) {
-                keys[key] = val.slice(0, 4) + "****" + val.slice(-4);
-              }
-            }
-          }
-          console.log(JSON.stringify(masked, null, 2));
+        if (outcome.action === "show") {
+          console.log(outcome.json);
           return;
         }
-        if (sub === "get") {
-          const path = args[1]?.trim();
-          if (!path) {
-            console.log(theme.warning("Usage: /config get <path>  (e.g. ui.theme)"));
-            return;
-          }
-          const val = config.getByPath(path);
-          if (val === void 0) {
-            console.log(theme.dim(`  ${path} = (undefined)`));
-          } else {
-            console.log(theme.dim(`  ${path} = `) + chalk2.white(typeof val === "object" ? JSON.stringify(val) : String(val)));
-          }
+        if (outcome.isError) {
+          console.log(theme.warning(`  ${outcome.summary}`));
           return;
         }
-        if (sub === "set") {
-          const path = args[1]?.trim();
-          const value = args.slice(2).join(" ").trim();
-          if (!path || value === "") {
-            console.log(theme.warning("Usage: /config set <path> <value>  (e.g. ui.theme light)"));
-            return;
-          }
-          const FORBIDDEN_KEYS = ["__proto__", "constructor", "prototype"];
-          if (path.split(".").some((k) => FORBIDDEN_KEYS.includes(k))) {
-            console.log(theme.error(`  \u2717 Forbidden path segment: ${path}`));
-            return;
-          }
-          config.setByPath(path, value);
-          console.log(theme.success(`  \u2713 Set ${path} = ${value}`));
+        if (outcome.changed) {
+          console.log(theme.success(`  \u2713 ${outcome.summary}`));
           return;
         }
-        console.log(theme.warning("Usage: /config [set <path> <value> | get <path> | show]"));
+        console.log(theme.dim(`  ${outcome.summary}`));
       }
     },
     {
@@ -2357,7 +2327,7 @@ function createReviewCommands() {
       usage: "/test [command|filter]",
       async execute(args, ctx) {
         try {
-          const { executeTests } = await import("./run-tests-WM7TMO2N.js");
+          const { executeTests } = await import("./run-tests-UTES6HCT.js");
           const argStr = args.join(" ").trim();
           let testArgs = {};
           if (argStr) {
@@ -7521,12 +7491,26 @@ program.option("--provider <name>", `AI provider to use (${builtInProviderIds},
     await startRepl(options);
   }
 });
-program.command("config").description("Configure API keys and preferences").action(async () => {
+program.command("config [action] [path] [value...]").description("Configure API keys and preferences: wizard (no args) | show | get <path> | set <path> <value>").action(async (action, path, valueParts) => {
   const config = new ConfigManager();
-  const { SetupWizard } = await import("./setup-wizard-S55ICNHH.js");
-  const wizard = new SetupWizard(config);
-  await wizard.runFull();
-  console.log("Configuration saved.");
+  if (!action) {
+    const { SetupWizard } = await import("./setup-wizard-S55ICNHH.js");
+    const wizard = new SetupWizard(config);
+    await wizard.runFull();
+    console.log("Configuration saved.");
+    return;
+  }
+  const { applyConfigCommand: applyConfigCommand2 } = await import("./config-command-E5DHADEV.js");
+  const outcome = applyConfigCommand2([action, ...path ? [path] : [], ...valueParts ?? []], config);
+  if (outcome.action === "show") {
+    console.log(outcome.json);
+    return;
+  }
+  if (outcome.isError) {
+    console.error(outcome.summary);
+    process.exit(1);
+  }
+  console.log(outcome.changed ? `\u2713 ${outcome.summary}` : outcome.summary);
 });
 program.command("providers").description("List all AI providers and their configuration status").action(async () => {
   const config = new ConfigManager();
@@ -7562,7 +7546,7 @@ program.command("web").description("Start Web UI server with browser-based chat
     console.error("Error: Invalid port number. Must be between 1 and 65535.");
     process.exit(1);
   }
-  const { startWebServer } = await import("./server-HPRLFLOI.js");
+  const { startWebServer } = await import("./server-R56CVHCM.js");
   await startWebServer({ port, host: options.host });
 });
 program.command("user [action] [username]").description("Manage Web UI users (list | create <name> | delete <name> | reset-password <name> | logout-all <name> | migrate <name>)").action(async (action, username) => {
@@ -7729,11 +7713,11 @@ program.command("sessions").description("List recent conversation sessions").opt
   console.log(footer + "\n");
 });
 program.command("usage").description("Show token + cost usage grouped by provider/model (cross-session)").option("--days <n>", "Only the last N days (inclusive of today)").option("--month <ym>", "Only a specific month, format YYYY-MM (e.g. 2026-06)").option("--json", "Output as JSON (for scripting)").action(async (options) => {
-  const { runUsageCli } = await import("./usage-L3DUPHD6.js");
+  const { runUsageCli } = await import("./usage-FHX7PQQH.js");
   await runUsageCli(options);
 });
 program.command("doctor").description("Health check: API keys, config, MCP, recent crashes, tool usage, disk usage").option("--json", "Output as JSON (for scripting)").option("--reset-stats", "Reset accumulated tool usage statistics").action(async (options) => {
-  const { runDoctorCli } = await import("./doctor-cli-3ES6NFVL.js");
+  const { runDoctorCli } = await import("./doctor-cli-RZGZB2TF.js");
   const argv = process.argv.slice(2);
   await runDoctorCli({
     json: !!options.json || argv.includes("--json"),
@@ -7742,7 +7726,7 @@ program.command("doctor").description("Health check: API keys, config, MCP, rece
 });
 program.command("batch <action> [arg] [arg2]").description("Anthropic Message Batches: submit | list | status <id> | results <id> [out] | cancel <id>").option("--dry-run", "Parse and validate input without submitting (submit only)").action(async (action, arg, arg2, options) => {
   try {
-    const batch = await import("./batch-IMLMUXJL.js");
+    const batch = await import("./batch-FPDT2USZ.js");
     switch (action) {
       case "submit":
         if (!arg) {
@@ -7785,7 +7769,7 @@ program.command("batch <action> [arg] [arg2]").description("Anthropic Message Ba
   }
 });
 program.command("mcp-serve").description("Start an MCP server over STDIO, exposing aicli's built-in tools to Claude Desktop / Cursor / other MCP clients").option("--allow-destructive", "Allow bash / run_interactive / task_create (always destructive in MCP mode)").option("--allow-outside-cwd", "Allow tool path arguments to escape the sandbox root \u2014 disabled by default").option("--tools <list>", "Comma-separated whitelist of tools to expose (default: all eligible tools)").option("--cwd <path>", "Working directory AND sandbox root (default: current directory)").action(async (options) => {
-  const { startMcpServer } = await import("./server-E5OBXT33.js");
+  const { startMcpServer } = await import("./server-IGCCSX4B.js");
   await startMcpServer({
     allowDestructive: !!options.allowDestructive,
     allowOutsideCwd: !!options.allowOutsideCwd,
@@ -7798,7 +7782,7 @@ program.command("pr <action> [target]").description("PR review helpers: review |
     console.error(`Unknown pr action: ${action}. Use review | security-review | summarize.`);
     process.exit(1);
   }
-  const { runPrCli } = await import("./pr-HVVHZOJ2.js");
+  const { runPrCli } = await import("./pr-NTQ3N4B4.js");
   const result = await runPrCli({
     action,
     target,
@@ -7818,8 +7802,8 @@ program.command("pr <action> [target]").description("PR review helpers: review |
   process.exit(result.exitCode);
 });
 program.command("ci").description("Headless PR review (code + security) \u2014 reads git/gh diff, optionally posts to PR. Designed for GitHub Actions.").option("--pr <num>", "PR number or URL; diff fetched via gh pr diff <value>", (v) => /^#?\d+$/.test(v) ? parseInt(v.replace(/^#/, ""), 10) : v).option("--base <ref>", "Base ref for git diff <ref>...HEAD (ignored when --pr set)").option("--post", "Post review as a PR comment (requires gh CLI + GH_TOKEN, needs --pr)").option("--no-update", "Always create a new comment instead of updating the previous aicli review").option("--skip-code", "Skip the code review section").option("--skip-security", "Skip the security review section").option("--detailed", "Use the detailed code-review prompt").option("--max-diff <n>", "Max diff chars sent to the model (default 30000)", (v) => parseInt(v, 10)).option("--provider <id>", "Override provider (default: config.defaultProvider)").option("--model <id>", "Override model").option("--dry-run", "Print result to stdout instead of posting (overrides --post)").option("--json", "Output a structured JSON report").option("--markdown", "Output Markdown report (default)").option("--sarif", "Output SARIF 2.1.0 for code scanning artifacts").option("--fail-on-security-high", "Fail when the security review contains HIGH/CRITICAL findings (default)").option("--no-fail-on-security-high", "Do not fail on security HIGH/CRITICAL findings").option("--fail-on-test-failure", "Fail when the report mentions test failures (default)").option("--no-fail-on-test-failure", "Do not fail on test failure findings").option("--fail-on-lint-failure", "Fail when the report mentions lint/typecheck failures (default)").option("--no-fail-on-lint-failure", "Do not fail on lint/typecheck failure findings").action(async (options) => {
-  const { runCi } = await import("./ci-HQVXWJ53.js");
-  const { formatCiResult } = await import("./ci-format-762IL4OM.js");
+  const { runCi } = await import("./ci-VPN5RWCO.js");
+  const { formatCiResult } = await import("./ci-format-GKXVCVME.js");
   const formats = [options.json, options.markdown, options.sarif].filter(Boolean).length;
   if (formats > 1) {
     console.error("Choose only one output format: --json, --markdown, or --sarif.");
@@ -7977,7 +7961,7 @@ program.command("hub [topic]").description("Start multi-agent hub (discuss / bra
     config.get("customProviders"),
     config.getConfigDir()
   );
-  const { startHub } = await import("./hub-QXRWPBJP.js");
+  const { startHub } = await import("./hub-FJWP6SDG.js");
   await startHub(
     {
       topic: topic ?? "",

package/dist/{persistent-memory-F4JPWYZJ.js → persistent-memory-IR47JCTF.js}

@@ -28,11 +28,11 @@ import {
   touchMemoryReferences,
   updateMemoryApproval,
   updateMemoryEntry
-} from "./chunk-YHLTSZVH.js";
-import "./chunk-HOSJZMQS.js";
-import "./chunk-75SPJKDY.js";
+} from "./chunk-4UNRDXZV.js";
 import "./chunk-B5TYJO7V.js";
+import "./chunk-HOSJZMQS.js";
 import "./chunk-IW3Q7AE5.js";
+import "./chunk-FT3WS5PG.js";
 export {
   addMemoryEntry,
   backupMemoryStore,

package/dist/{persistent-memory-URIJJJ3N.js → persistent-memory-KX2R67AT.js}

@@ -27,9 +27,9 @@ import {
   touchMemoryReferences,
   updateMemoryApproval,
   updateMemoryEntry
-} from "./chunk-BOMB6XCF.js";
+} from "./chunk-VPXNLE7E.js";
 import "./chunk-YVTASHS5.js";
-import "./chunk-JJVVCWO4.js";
+import "./chunk-5JFRM47R.js";
 import "./chunk-6BUTA5VW.js";
 export {
   addMemoryEntry,

package/dist/{pr-HVVHZOJ2.js → pr-NTQ3N4B4.js}

@@ -2,8 +2,8 @@
 import {
   countSeverity,
   runCi
-} from "./chunk-FXCDD7JS.js";
-import "./chunk-PLFXDRNX.js";
+} from "./chunk-RNDHIERN.js";
+import "./chunk-2RN4T4XD.js";
 import {
   buildReviewPrompt,
   buildSecurityReviewPrompt,
@@ -17,13 +17,13 @@ import {
 } from "./chunk-AUEX6RNY.js";
 import {
   ConfigManager
-} from "./chunk-F26YTEMB.js";
+} from "./chunk-PMRU2CAF.js";
 import "./chunk-3OBY7WSS.js";
 import "./chunk-TU3L3PW7.js";
+import "./chunk-IW3Q7AE5.js";
 import {
   VERSION
-} from "./chunk-75SPJKDY.js";
-import "./chunk-IW3Q7AE5.js";
+} from "./chunk-FT3WS5PG.js";
 
 // src/cli/pr.ts
 import { execFileSync } from "child_process";

package/dist/{run-tests-UZG6SVJ5.js → run-tests-25CNXJ4N.js}

@@ -1,8 +1,8 @@
 import {
   executeTests,
   runTestsTool
-} from "./chunk-UDUE4DAE.js";
-import "./chunk-JJVVCWO4.js";
+} from "./chunk-RLAUMACS.js";
+import "./chunk-5JFRM47R.js";
 export {
   executeTests,
   runTestsTool

package/dist/{run-tests-WM7TMO2N.js → run-tests-UTES6HCT.js}

@@ -2,8 +2,8 @@
 import {
   executeTests,
   runTestsTool
-} from "./chunk-TG4PF7FZ.js";
-import "./chunk-75SPJKDY.js";
+} from "./chunk-OSYK6D4G.js";
+import "./chunk-FT3WS5PG.js";
 export {
   executeTests,
   runTestsTool

package/dist/{server-E5OBXT33.js → server-IGCCSX4B.js}

@@ -1,32 +1,32 @@
 #!/usr/bin/env node
 import {
   ToolRegistry
-} from "./chunk-DIJIYWQE.js";
-import "./chunk-YHLTSZVH.js";
+} from "./chunk-V26ZMB3D.js";
+import "./chunk-6RPGQ5CG.js";
+import "./chunk-4UNRDXZV.js";
 import "./chunk-GLSR2NR3.js";
 import "./chunk-UUSRWSSX.js";
 import "./chunk-CKH4KQ4E.js";
 import "./chunk-BXP6YZ2P.js";
+import "./chunk-KHYD3WXE.js";
 import "./chunk-5C76XDDF.js";
+import "./chunk-NYNSYLFY.js";
+import "./chunk-B5TYJO7V.js";
 import {
   runTool
-} from "./chunk-M3GDYEUH.js";
+} from "./chunk-PDRAOFGI.js";
 import {
   getDangerLevel,
   schemaToJsonSchema
 } from "./chunk-3OBY7WSS.js";
 import "./chunk-TU3L3PW7.js";
 import "./chunk-HOSJZMQS.js";
+import "./chunk-IW3Q7AE5.js";
 import "./chunk-4BKXL7SM.js";
-import "./chunk-TG4PF7FZ.js";
+import "./chunk-OSYK6D4G.js";
 import {
   VERSION
-} from "./chunk-75SPJKDY.js";
-import "./chunk-6RPGQ5CG.js";
-import "./chunk-KHYD3WXE.js";
-import "./chunk-NYNSYLFY.js";
-import "./chunk-B5TYJO7V.js";
-import "./chunk-IW3Q7AE5.js";
+} from "./chunk-FT3WS5PG.js";
 
 // src/mcp/server.ts
 import { createInterface } from "readline";

package/dist/{server-HPRLFLOI.js → server-R56CVHCM.js}

@@ -5,13 +5,13 @@ import {
   resolveRoleProviders
 } from "./chunk-23SJVOQD.js";
 import "./chunk-VOIOUJXI.js";
-import {
-  persistDiscussion
-} from "./chunk-JQXXPTWL.js";
 import {
   AuthManager,
   TOKEN_EXPIRY_MS
 } from "./chunk-RYQBBEMM.js";
+import {
+  persistDiscussion
+} from "./chunk-JQXXPTWL.js";
 import {
   AUTO_COMPACT_INSTRUCTION,
   McpManager,
@@ -34,7 +34,7 @@ import {
   scanProject,
   setupProxy,
   stripRoutingTags
-} from "./chunk-X3JPBJ6C.js";
+} from "./chunk-BFPF3JF2.js";
 import {
   CNY_PER_USD,
   CostTracker,
@@ -44,13 +44,6 @@ import {
   getPricing,
   setCostCurrency
 } from "./chunk-JT6UN5C6.js";
-import {
-  buildReviewPrompt,
-  buildSecurityReviewPrompt
-} from "./chunk-HLWUDRBO.js";
-import {
-  thinkingParamsFor
-} from "./chunk-6YZEZFX5.js";
 import {
   ToolExecutor,
   ToolRegistry,
@@ -82,7 +75,15 @@ import {
   spawnAgentContext,
   truncateOutput,
   undoStack
-} from "./chunk-DIJIYWQE.js";
+} from "./chunk-V26ZMB3D.js";
+import {
+  buildReviewPrompt,
+  buildSecurityReviewPrompt
+} from "./chunk-HLWUDRBO.js";
+import {
+  thinkingParamsFor
+} from "./chunk-6YZEZFX5.js";
+import "./chunk-6RPGQ5CG.js";
 import {
   addMemoryEntry,
   clearMemoryEntries,
@@ -97,27 +98,26 @@ import {
   parseWritableScope,
   updateMemoryApproval,
   updateMemoryEntry
-} from "./chunk-YHLTSZVH.js";
+} from "./chunk-4UNRDXZV.js";
 import "./chunk-GLSR2NR3.js";
 import "./chunk-UUSRWSSX.js";
 import "./chunk-CKH4KQ4E.js";
 import "./chunk-BXP6YZ2P.js";
+import "./chunk-KHYD3WXE.js";
 import "./chunk-5C76XDDF.js";
 import {
   SessionManager,
   getContentText
 } from "./chunk-OBULDJSU.js";
+import "./chunk-NYNSYLFY.js";
+import {
+  scanString
+} from "./chunk-B5TYJO7V.js";
 import {
   buildDoctorReport,
   formatDoctorReport,
   loadContextFiles
-} from "./chunk-HOT76ATM.js";
-import {
-  ProviderRegistry
-} from "./chunk-AUEX6RNY.js";
-import {
-  ConfigManager
-} from "./chunk-F26YTEMB.js";
+} from "./chunk-PG7O7N7D.js";
 import {
   describePlugin,
   getActivePluginAssets,
@@ -132,7 +132,13 @@ import {
   runTool,
   setPluginEnabled,
   trustPlugin
-} from "./chunk-M3GDYEUH.js";
+} from "./chunk-PDRAOFGI.js";
+import {
+  ProviderRegistry
+} from "./chunk-AUEX6RNY.js";
+import {
+  ConfigManager
+} from "./chunk-PMRU2CAF.js";
 import {
   CONTENT_ONLY_STREAM_REMINDER,
   TEE_FINAL_USER_NUDGE,
@@ -156,8 +162,15 @@ import {
   getGitContext,
   getGitRoot
 } from "./chunk-HOSJZMQS.js";
+import {
+  atomicWriteFileSync
+} from "./chunk-IW3Q7AE5.js";
+import {
+  applyConfigCommand,
+  maskConfigSecrets
+} from "./chunk-XNFIYS7G.js";
 import "./chunk-4BKXL7SM.js";
-import "./chunk-TG4PF7FZ.js";
+import "./chunk-OSYK6D4G.js";
 import {
   AGENTIC_BEHAVIOR_GUIDELINE,
   AUTHOR,
@@ -173,16 +186,7 @@ import {
   SKILLS_DIR_NAME,
   VERSION,
   buildUserIdentityPrompt
-} from "./chunk-75SPJKDY.js";
-import "./chunk-6RPGQ5CG.js";
-import "./chunk-KHYD3WXE.js";
-import "./chunk-NYNSYLFY.js";
-import {
-  scanString
-} from "./chunk-B5TYJO7V.js";
-import {
-  atomicWriteFileSync
-} from "./chunk-IW3Q7AE5.js";
+} from "./chunk-FT3WS5PG.js";
 
 // src/web/server.ts
 import express from "express";
@@ -853,7 +857,7 @@ Cache:  write=${cacheCreate} read=${cacheRead}` : "";
 Cost:   ${formatCost(cost)}` : "";
   let memoryLine = "";
   try {
-    const { countPendingMemories } = await import("./persistent-memory-F4JPWYZJ.js");
+    const { countPendingMemories } = await import("./persistent-memory-IR47JCTF.js");
     const pending = countPendingMemories(ctx.config.getConfigDir());
     if (pending > 0) memoryLine = `
 Memory: \u26A0 ${pending} pending approval \u2014 see the Memory panel or /memory`;
@@ -1666,7 +1670,7 @@ async function handleTest(args, ctx) {
       const isCommand = argStr.includes(" ") || /^(mvn|gradle|npm|pytest|cargo|go)\b/.test(argStr);
       testArgs = isCommand ? { command: argStr } : { filter: argStr };
     }
-    const runTests = ctx.runTests ?? (await import("./run-tests-WM7TMO2N.js")).executeTests;
+    const runTests = ctx.runTests ?? (await import("./run-tests-UTES6HCT.js")).executeTests;
     const report = await runTests(testArgs);
     ctx.send({ type: "info", message: report });
   } catch (err) {
@@ -1924,7 +1928,7 @@ async function handleMemory(args, ctx) {
     ctx.handleMemoryManage(sub, args[1], sub === "expire" ? args[2] : void 0);
   } else if (sub === "export") {
     if (args[1] === "md") {
-      const { exportMemoryEntries: exportMemoryEntries2 } = await import("./persistent-memory-F4JPWYZJ.js");
+      const { exportMemoryEntries: exportMemoryEntries2 } = await import("./persistent-memory-IR47JCTF.js");
       ctx.send({
         type: "export_data",
         format: "md",
@@ -1978,26 +1982,19 @@ It will be included in AI context for subsequent messages.` });
 
 // src/web/commands/security-commands.ts
 async function handleConfig(args, ctx) {
-  const sub = args[0];
-  if (sub === "show" || !sub) {
-    ctx.send({ type: "info", message: `\u2699\uFE0F Configuration:
+  const outcome = applyConfigCommand(args, ctx.config);
+  if (outcome.action === "show" || outcome.action === "wizard") {
+    const json = outcome.json ?? JSON.stringify(maskConfigSecrets(ctx.config.toJSON()), null, 2);
+    ctx.send({ type: "info", message: `\u2699\uFE0F Configuration (secrets masked):
 \`\`\`json
-${ctx.config.toFormattedJSON()}
+${json}
 \`\`\`` });
-  } else if (sub === "get" && args[1]) {
-    const val = ctx.config.getByPath(args[1]);
-    const display = typeof val === "object" ? JSON.stringify(val, null, 2) : String(val ?? "undefined");
-    ctx.send({ type: "info", message: `${args[1]} = ${display}` });
-  } else if (sub === "set" && args[1] && args[2] !== void 0) {
-    try {
-      ctx.config.setByPath(args[1], args.slice(2).join(" "));
-      ctx.send({ type: "info", message: `\u2713 ${args[1]} = ${args.slice(2).join(" ")}` });
-    } catch (err) {
-      ctx.send({ type: "error", message: `Config error: ${err.message}` });
-    }
-  } else {
-    ctx.send({ type: "info", message: "Usage: /config [show] | /config get <key> | /config set <key> <value>" });
+    return;
   }
+  ctx.send({
+    type: outcome.isError ? "error" : "info",
+    message: (outcome.changed ? "\u2713 " : "") + (outcome.summary ?? "")
+  });
 }
 async function handleDoctor(_args, ctx) {
   const report = buildDoctorReport({