@lumi-ai-lab/harness-data 0.0.4 → 0.0.6

package/README.md

@@ -1,19 +1,43 @@
 # Harness Data npm installer
 
+Install a Harness Data runtime in the current directory:
+
 ```bash
 npx @lumi-ai-lab/harness-data install
-npx @lumi-ai-lab/harness-data install --git-protocol ssh
-npx @lumi-ai-lab/harness-data install --git-protocol https
-GITHUB_TOKEN=... npx @lumi-ai-lab/harness-data install --yes --agent codex --git-protocol https --github-token-env GITHUB_TOKEN --cas-config-dir /secure/path/to/cas
-npx @lumi-ai-lab/harness-data install --yes --agent pi --cas-config-dir /secure/path/to/cas
-npx @lumi-ai-lab/harness-data doctor --dir ~/harness-data
-npx @lumi-ai-lab/harness-data update --dir ~/harness-data
 ```
 
-This package is only the installer and updater. The full Harness Data workspace is cloned and maintained outside the npm package.
+Install into an explicit runtime directory:
+
+```bash
+npx @lumi-ai-lab/harness-data install --dir /path/to/runtime
+```
+
+Use a GitHub token for private Release assets:
+
+```bash
+npx @lumi-ai-lab/harness-data install --github-token ...
+```
+
+or:
+
+```bash
+GITHUB_TOKEN=... npx @lumi-ai-lab/harness-data install
+```
+
+Without a GitHub token, the installer interactively asks for local absolute paths to `cas-cli`, `qdm-indicators-cli`, `qdm-cmr-cli`, and `harness-data-wikis`. CAS username and password are always collected interactively.
+
+Update an existing runtime interactively:
+
+```bash
+npx @lumi-ai-lab/harness-data update
+```
+
+Diagnose a runtime:
 
-Private GitHub repository access defaults to `--git-protocol auto`: SSH is tried first, then HTTPS. HTTPS uses Git Credential Manager, `gh auth login`, or a token supplied through `--github-token-env`; GitHub account passwords are not supported.
+```bash
+npx @lumi-ai-lab/harness-data doctor
+```
 
-The `qdm-cmr-cli`, `qdm-indicators-cli`, and `cas-cli` binaries are downloaded from private GitHub Releases in `pengmide/qdm-cmr-cli`, `pengmide/qdm-indicators-cli`, and `pengmide/qdm-cas-cli`. The installer uses `gh auth login` first and falls back to `--github-token-env`.
+The runtime is assembled from the `harness-data` runtime bundle, platform-specific CLI Release assets, `harness-data-wikis`, generated local config, CAS credentials, and selected Agent symlinks.
 
-`--agent` supports `claude`, `codex`, `pi`, `both` (Claude + Codex), and `all` (Claude + Codex + Pi).
+`--agent` supports `claude`, `codex`, `pi`, and `all`; the default is `all`.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lumi-ai-lab/harness-data",
-  "version": "0.0.4",
+  "version": "0.0.6",
   "description": "Installer and updater for Harness Data",
   "type": "module",
   "bin": {

package/src/cli.js

@@ -36,13 +36,13 @@ export async function main(argv) {
   console.log(`Usage: harness-data <install|update|doctor|version> [options]
 
 Commands:
-  install  Clone/reuse a Harness Data workspace and complete setup
-  update   Check and apply installer, repository, CLI, and wikis updates
+  install  Install a Harness Data runtime in the current directory
+  update   Interactively check and apply runtime, CLI, and wikis updates
   doctor   Diagnose workspace CLI, config, auth, index, and Agent hooks
   version  Print installer, repository, wikis, and manifest versions
 
 Install options:
-  --git-protocol auto|ssh|https      Git protocol for private repositories (default: auto)
-  --github-token-env NAME            Token env var for HTTPS fallback or CI`);
+  --dir PATH                         Runtime directory (default: current directory)
+  --github-token TOKEN               GitHub token for private Release assets`);
   if (unknown) process.exitCode = 1;
 }

package/src/commands/doctor.js

@@ -2,8 +2,7 @@ import fs from "node:fs";
 import path from "node:path";
 import { run } from "../lib/exec.js";
 import { findWorkspaceDir } from "../lib/paths.js";
-import { currentCommit, submoduleCommit } from "../lib/git.js";
-import { validateCasConfigDir } from "../lib/config.js";
+import { binaryName } from "../lib/platform.js";
 
 function existsExecutable(file) {
   try {
@@ -16,7 +15,7 @@ function existsExecutable(file) {
 
 function agentOk(workspace, name) {
   const target = path.join(workspace, `.${name}`);
-  const source = path.join(workspace, ".agents", name);
+  const source = path.join(workspace, "agents", name);
   if (!fs.existsSync(target) || !fs.existsSync(source)) return false;
   try {
     return fs.realpathSync(target) === fs.realpathSync(source);
@@ -26,7 +25,7 @@ function agentOk(workspace, name) {
 }
 
 async function tokenCheck(workspace, binary, env) {
-  const file = path.join(workspace, "bin", binary);
+  const file = path.join(workspace, "bin", binaryName(binary));
   if (!existsExecutable(file)) return false;
   const result = await run(file, ["config", "check-token"], { cwd: workspace, env, allowFailure: true });
   return result.code === 0;
@@ -40,9 +39,9 @@ function configPathsValid(workspace) {
   return matches.length >= 3 && matches.every((entry) => fs.existsSync(entry));
 }
 
-function casCredentialsValid(dir) {
+function jsonFileValid(file) {
   try {
-    validateCasConfigDir(dir);
+    JSON.parse(fs.readFileSync(file, "utf8"));
     return true;
   } catch {
     return false;
@@ -55,24 +54,27 @@ export async function collectDoctor(workspace, options = {}) {
   const checks = [];
   const add = (name, ok, detail = "") => checks.push({ name, ok, detail });
 
-  add("workspace", fs.existsSync(path.join(workspace, "bootstrap", "cli-manifest.json")), workspace);
-  add("wikis submodule", fs.existsSync(path.join(workspace, "wikis", ".git")) || fs.existsSync(path.join(workspace, ".git", "modules", "wikis")));
+  add("runtime", fs.existsSync(path.join(workspace, "bootstrap", "cli-manifest.json")) && fs.existsSync(path.join(workspace, "agents")), workspace);
+  add("wikis/spec", fs.existsSync(path.join(workspace, "wikis", "spec")));
+  add("wikis/playbooks", fs.existsSync(path.join(workspace, "wikis", "playbooks")));
+  add("wikis/templates", fs.existsSync(path.join(workspace, "wikis", "templates")));
   for (const binary of ["data-harness-cli", "qdm-cmr-cli", "qdm-indicators-cli", "cas-cli"]) {
-    add(`bin/${binary}`, existsExecutable(path.join(workspace, "bin", binary)));
+    add(`bin/${binary}`, existsExecutable(path.join(workspace, "bin", binaryName(binary))));
   }
   add("config/harness-config.yaml", fs.existsSync(path.join(workspace, "config", "harness-config.yaml")));
   add("config/qdm-cli-paths.env", fs.existsSync(path.join(workspace, "config", "qdm-cli-paths.env")));
   add("config CLI paths", configPathsValid(workspace));
-  add("CAS credentials", casCredentialsValid(casConfigDir), casConfigDir);
+  add("CAS credentials file", jsonFileValid(path.join(casConfigDir, "config.json")), casConfigDir);
   add("CMR token", await tokenCheck(workspace, "qdm-cmr-cli", env));
   add("Indicators token", await tokenCheck(workspace, "qdm-indicators-cli", env));
-  add("wikis index", fs.existsSync(path.join(workspace, ".harness", "index", "wikis-index.json")) || fs.existsSync(path.join(workspace, ".harness", "index", "wikis-runtime-index.json")));
   add("Agent hook", agentOk(workspace, "claude") || agentOk(workspace, "codex") || agentOk(workspace, "pi"));
+  if (!fs.existsSync(path.join(workspace, ".harness", "index", "wikis-index.json")) &&
+      !fs.existsSync(path.join(workspace, ".harness", "index", "wikis-runtime-index.json"))) {
+    checks.push({ name: "wikis index", ok: true, detail: "missing; run data-harness-cli wikis build-index --skip-checks" });
+  }
 
   return {
     workspace,
-    mainCommit: await currentCommit(workspace),
-    wikisCommit: await submoduleCommit(workspace),
     checks
   };
 }
@@ -83,7 +85,7 @@ export async function doctorCommand(options = {}) {
   if (options.json) {
     console.log(JSON.stringify(report, null, 2));
   } else {
-    console.log(`Harness Data doctor: ${report.workspace}`);
+    console.log(`Harness Data runtime doctor: ${report.workspace}`);
     for (const check of report.checks) {
       console.log(`${check.ok ? "PASS" : "FAIL"} ${check.name}${check.detail ? ` (${check.detail})` : ""}`);
     }

package/src/commands/install.js

@@ -1,124 +1,293 @@
 import fs from "node:fs";
 import path from "node:path";
 import { commandExists, run } from "../lib/exec.js";
-import { writeLocalConfig, validateCasConfigDir, linkAgents } from "../lib/config.js";
-import { confirm, chooseAgent } from "../lib/prompt.js";
-import { defaultWorkspaceDir, looksLikeWorkspace, resolveWorkspaceDir, writeState } from "../lib/paths.js";
-import { isGitRepo, currentCommit, submoduleCommit } from "../lib/git.js";
+import { writeLocalConfig, linkAgents } from "../lib/config.js";
+import { ask, askSecret, chooseAgent } from "../lib/prompt.js";
+import { resolveWorkspaceDir, writeState } from "../lib/paths.js";
 import { installToolsFromManifest, manifestDigest, readManifest } from "../lib/manifest.js";
-import { platformKey } from "../lib/platform.js";
+import { binaryName, platformKey } from "../lib/platform.js";
 import { collectDoctor } from "./doctor.js";
-import { checkUpdates } from "./update.js";
 import { packageVersion } from "../lib/package.js";
-import { gitUrls, repoProtocol, repoUrl, resolveInstallProtocol, runGitWithProtocol, syncWikisSubmodule } from "../lib/git-auth.js";
+import { downloadReleaseAsset, findReleaseAsset, githubToken, hasGithubAuth, latestRelease } from "../lib/github.js";
+import { action, blank, fail, header, ok, shortSha, skip, step, warn } from "../lib/log.js";
+import { gitUrls, runGitWithProtocol } from "../lib/git-auth.js";
+
+const runtimeRepo = "lumi-ai-lab/harness-data";
+const wikisRepo = "lumi-ai-lab/harness-data-wikis";
 
 async function requireCommands(commands) {
   for (const command of commands) {
     if (!(await commandExists(command))) throw new Error(`missing required command: ${command}`);
   }
+  ok(commands.join(", "));
+}
+
+async function prepareRuntimeDir(options) {
+  const runtimeDir = resolveWorkspaceDir(options.dir || process.cwd());
+  fs.mkdirSync(runtimeDir, { recursive: true });
+  return runtimeDir;
 }
 
-async function prepareWorkspace(options) {
-  const target = resolveWorkspaceDir(options.dir || (looksLikeWorkspace(process.cwd()) ? process.cwd() : defaultWorkspaceDir()));
-  const branch = options.branch || "master";
-  if (!fs.existsSync(target)) {
-    const protocol = await resolveInstallProtocol(options);
-    const repo = options.repo || gitUrls[protocol].repo;
-    if (!(await confirm(`Clone ${repo} to ${target}?`, { yes: options.yes }))) throw new Error("install cancelled");
-    fs.mkdirSync(path.dirname(target), { recursive: true });
-    await runGitWithProtocol(protocol, ["clone", "--branch", branch, repo, target], { ...options, stdio: "inherit" });
-    await syncWikisSubmodule(target, protocol);
-    await runGitWithProtocol(protocol, ["submodule", "update", "--init", "--recursive", "wikis"], { ...options, cwd: target, stdio: "inherit" });
-    return { workspace: target, gitProtocol: protocol, repoUrl: repo };
+export async function installRuntimeBundle(runtimeDir, options = {}) {
+  if (!options.force && fs.existsSync(path.join(runtimeDir, "agents")) &&
+      fs.existsSync(path.join(runtimeDir, "config")) &&
+      fs.existsSync(path.join(runtimeDir, "bootstrap", "cli-manifest.json"))) {
+    skip("runtime bundle 已存在");
+    return { tag: "", skipped: true };
+  }
+
+  const release = await latestRelease(runtimeRepo, options);
+  const tag = release.tag_name;
+  const assetName = `harness-data-runtime-${tag}.tar.gz`;
+  const asset = findReleaseAsset(release, assetName);
+  const shaAsset = findReleaseAsset(release, `${assetName}.sha256`);
+  if (!asset) throw new Error(`runtime bundle asset missing in ${runtimeRepo} ${tag}: ${assetName}`);
+
+  const cacheDir = path.join(runtimeDir, ".bootstrap-cache");
+  fs.mkdirSync(cacheDir, { recursive: true });
+  const archive = path.join(cacheDir, assetName);
+  action(`下载 harness-data-runtime ${tag}`);
+  await downloadReleaseAsset(asset, archive, options);
+  if (shaAsset) {
+    const shaFile = `${archive}.sha256`;
+    await downloadReleaseAsset(shaAsset, shaFile, options);
+    const expected = fs.readFileSync(shaFile, "utf8").trim().split(/\s+/)[0];
+    const crypto = await import("node:crypto");
+    const actual = crypto.createHash("sha256").update(fs.readFileSync(archive)).digest("hex");
+    if (expected && actual !== expected) throw new Error("runtime bundle sha256 mismatch");
+  } else {
+    warn("runtime bundle 未提供 sha256，已继续安装");
+  }
+
+  const extractDir = fs.mkdtempSync(path.join(cacheDir, "runtime-"));
+  await run("tar", ["-xzf", archive, "-C", extractDir]);
+  for (const dir of ["agents", "bootstrap"]) {
+    const source = path.join(extractDir, dir);
+    if (!fs.existsSync(source)) throw new Error(`runtime bundle missing ${dir}/`);
+    fs.rmSync(path.join(runtimeDir, dir), { recursive: true, force: true });
+    fs.cpSync(source, path.join(runtimeDir, dir), { recursive: true });
   }
-  if (!(await isGitRepo(target)) || !looksLikeWorkspace(target)) {
-    throw new Error(`${target} exists but is not a valid harness-data workspace; pass --dir or move the directory`);
+  const configSource = path.join(extractDir, "config");
+  if (!fs.existsSync(configSource)) throw new Error("runtime bundle missing config/");
+  fs.mkdirSync(path.join(runtimeDir, "config"), { recursive: true });
+  for (const file of fs.readdirSync(configSource)) {
+    fs.copyFileSync(path.join(configSource, file), path.join(runtimeDir, "config", file));
   }
-  if (!(await confirm(`Reuse existing workspace ${target}?`, { yes: options.yes }))) throw new Error("install cancelled");
-  return { workspace: target, gitProtocol: await repoProtocol(target), repoUrl: await repoUrl(target) };
+  fs.rmSync(extractDir, { recursive: true, force: true });
+  ok(`runtime bundle ${tag}`);
+  return { tag, skipped: false };
 }
 
-async function configureAuth(workspace, options) {
-  const casConfigDir = path.resolve(options.casConfigDir || path.join(workspace, ".qdm-auth", "cas"));
-  fs.mkdirSync(casConfigDir, { recursive: true, mode: 0o700 });
-  const env = { QDM_CAS_CONFIG_DIR: casConfigDir };
-  if (options.casConfigDir) {
-    validateCasConfigDir(casConfigDir);
-  } else if (options.yes) {
-    throw new Error("non-interactive install requires --cas-config-dir with existing CAS credentials");
-  } else {
-    await run(path.join(workspace, "bin", "cas-cli"), ["config", "set-credentials"], { cwd: workspace, env, stdio: "inherit" });
-    validateCasConfigDir(casConfigDir);
+function executable(file) {
+  try {
+    fs.accessSync(file, fs.constants.X_OK);
+    return true;
+  } catch {
+    return false;
   }
-  await run("sh", ["-c", `"${path.join(workspace, "bin", "qdm-cmr-cli")}" config set-token "$("${path.join(workspace, "bin", "cas-cli")}" token --app cmr)"`], {
-    cwd: workspace,
-    env,
-    stdio: "inherit"
-  });
-  await run("sh", ["-c", `"${path.join(workspace, "bin", "qdm-indicators-cli")}" config set-token "$("${path.join(workspace, "bin", "cas-cli")}" token --app indicators)"`], {
-    cwd: workspace,
-    env,
-    stdio: "inherit"
-  });
-  await run(path.join(workspace, "bin", "qdm-cmr-cli"), ["config", "check-token"], { cwd: workspace, env, stdio: "inherit" });
-  await run(path.join(workspace, "bin", "qdm-indicators-cli"), ["config", "check-token"], { cwd: workspace, env, stdio: "inherit" });
-  return casConfigDir;
 }
 
-export async function buildAndCheck(workspace, options) {
-  const cli = path.join(workspace, "bin", "data-harness-cli");
-  const buildIndexArgs = ["wikis", "build-index"];
-  if (options.skipWikisCheck) buildIndexArgs.push("--skip-checks");
-  await run(cli, buildIndexArgs, { cwd: workspace, stdio: "inherit" });
-  await run(cli, ["context", "--question", "会员复购为什么下降？", "--json"], { cwd: workspace, stdio: "inherit" });
-  let runFullCheck = !options.skipWikisCheck;
-  if (!options.yes && !options.skipWikisCheck) {
-    runFullCheck = await confirm("Run wikis check-all?", { defaultNo: false });
+async function promptExecutable(runtimeDir, name, options = {}) {
+  const auto = path.join(runtimeDir, "bin", binaryName(name));
+  if (executable(auto)) {
+    ok(`自动识别 ${name}: ${auto}`);
+    return auto;
   }
-  if (runFullCheck) {
-    const result = await run(cli, ["wikis", "check-all"], { cwd: workspace, stdio: "inherit", allowFailure: true });
-    if (result.code !== 0) console.warn("warning: wikis check-all reported issues");
-  } else {
-    console.warn("warning: wikis check-all skipped");
+  const value = await ask(`请输入 ${name} 的绝对路径：`, options);
+  const file = path.resolve(value);
+  if (!executable(file)) throw new Error(`${name} path is missing or not executable: ${file}`);
+  return file;
+}
+
+async function installLocalTools(runtimeDir, options = {}) {
+  const binDir = path.join(runtimeDir, "bin");
+  fs.mkdirSync(binDir, { recursive: true });
+  const installed = {};
+  for (const name of ["cas-cli", "qdm-indicators-cli", "qdm-cmr-cli"]) {
+    const source = await promptExecutable(runtimeDir, name, options);
+    const target = path.join(binDir, binaryName(name));
+    if (path.resolve(source) !== path.resolve(target)) {
+      fs.copyFileSync(source, target);
+      fs.chmodSync(target, 0o755);
+    }
+    installed[name] = { mode: "local-path", source };
+  }
+  return installed;
+}
+
+async function installWikis(runtimeDir, options = {}) {
+  const target = path.join(runtimeDir, "wikis");
+  if (githubToken(options)) {
+    if (fs.existsSync(path.join(target, ".git"))) {
+      await runGitWithProtocol("https", ["-C", target, "pull", "--ff-only"], options);
+    } else {
+      fs.rmSync(target, { recursive: true, force: true });
+      await runGitWithProtocol("https", ["clone", gitUrls.https.wikis, target], options);
+    }
+    const commit = (await run("git", ["-C", target, "rev-parse", "HEAD"])).stdout.trim();
+    ok(`harness-data-wikis ${shortSha(commit)}`);
+    return { mode: "github", path: target, commit };
+  }
+  if (await hasGithubAuth(options)) {
+    if (fs.existsSync(path.join(target, ".git"))) {
+      await run("git", ["-C", target, "pull", "--ff-only"]);
+    } else {
+      fs.rmSync(target, { recursive: true, force: true });
+      await run("gh", ["repo", "clone", wikisRepo, target]);
+    }
+    const commit = (await run("git", ["-C", target, "rev-parse", "HEAD"])).stdout.trim();
+    ok(`harness-data-wikis ${shortSha(commit)}`);
+    return { mode: "github", path: target, commit };
+  }
+
+  const auto = path.join(runtimeDir, "harness-data-wikis");
+  const source = fs.existsSync(auto) ? auto : path.resolve(await ask("请输入 harness-data-wikis 的绝对路径：", options));
+  for (const dir of ["spec", "playbooks", "templates"]) {
+    if (!fs.existsSync(path.join(source, dir))) throw new Error(`harness-data-wikis missing ${dir}/: ${source}`);
+  }
+  fs.rmSync(target, { recursive: true, force: true });
+  fs.cpSync(source, target, { recursive: true });
+  ok(`harness-data-wikis 本地路径 ${source}`);
+  return { mode: "local-path", source, path: target };
+}
+
+function casConfigDir(runtimeDir) {
+  return path.join(runtimeDir, ".qdm-auth", "cas");
+}
+
+async function writeCasCredentials(runtimeDir, options = {}) {
+  const username = await ask("CAS 用户名：", options);
+  const password = await askSecret("CAS 密码：", options);
+  if (!username || !password) throw new Error("CAS username and password are required");
+  const dir = casConfigDir(runtimeDir);
+  fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
+  fs.writeFileSync(path.join(dir, "config.json"), `${JSON.stringify({ cas: { username, password } }, null, 2)}\n`, { mode: 0o600 });
+  ok("CAS 凭证已保存到 .qdm-auth/cas/config.json");
+  return dir;
+}
+
+async function configureTokens(runtimeDir, casDir) {
+  const env = { QDM_CAS_CONFIG_DIR: casDir };
+  const bin = (name) => path.join(runtimeDir, "bin", binaryName(name));
+  const cmrToken = (await run(bin("cas-cli"), ["token", "--app", "cmr"], { cwd: runtimeDir, env })).stdout.trim();
+  await run(bin("qdm-cmr-cli"), ["config", "set-token", cmrToken], { cwd: runtimeDir, env });
+  ok("CMR Token 已配置");
+  const indicatorsToken = (await run(bin("cas-cli"), ["token", "--app", "indicators"], { cwd: runtimeDir, env })).stdout.trim();
+  await run(bin("qdm-indicators-cli"), ["config", "set-token", indicatorsToken], { cwd: runtimeDir, env });
+  ok("Indicators Token 已配置");
+  await run(bin("qdm-cmr-cli"), ["config", "check-token"], { cwd: runtimeDir, env });
+  await run(bin("qdm-indicators-cli"), ["config", "check-token"], { cwd: runtimeDir, env });
+}
+
+export async function buildAndCheck(runtimeDir, options = {}) {
+  const cli = path.join(runtimeDir, "bin", binaryName("data-harness-cli"));
+  action("执行：data-harness-cli wikis build-index --skip-checks");
+  const result = await run(cli, ["wikis", "build-index", "--skip-checks"], { cwd: runtimeDir, allowFailure: true });
+  if (result.code !== 0) {
+    warn("wikis 索引构建失败，安装会继续；后续可手动执行 data-harness-cli wikis build-index --skip-checks");
+    return { ok: false };
+  }
+  const output = `${result.stdout}\n${result.stderr}`;
+  const docs = output.match(/\bdocs=(\d+)/)?.[1];
+  const recall = output.match(/\brecall=(\d+)/)?.[1];
+  const runtimeDocs = output.match(/\bruntimeDocs=(\d+)/)?.[1];
+  ok([docs ? `docs=${docs}` : "", recall ? `recall=${recall}` : "", runtimeDocs ? `runtimeDocs=${runtimeDocs}` : ""].filter(Boolean).join(", ") || "Wikis 索引已构建");
+  return { ok: true, docs, recall, runtimeDocs };
+}
+
+export function printDoctorSummary(doctor) {
+  const failed = doctor.checks.filter((check) => !check.ok);
+  if (!failed.length) {
+    ok("runtime");
+    ok("wikis/spec");
+    ok("wikis/playbooks");
+    ok("wikis/templates");
+    ok("4 个 CLI");
+    ok("本地配置");
+    ok("CAS 凭证");
+    ok("CMR Token");
+    ok("Indicators Token");
+    ok("Agent Hook");
+    return;
   }
+  for (const check of failed) fail(`${check.name}${check.detail ? ` (${check.detail})` : ""}`);
 }
 
 export async function installCommand(options = {}) {
-  platformKey();
-  await requireCommands(["git", "curl", "tar", "unzip"]);
-  const prepared = await prepareWorkspace(options);
-  const workspace = prepared.workspace;
-  const manifestPath = path.resolve(options.manifest || path.join(workspace, "bootstrap", "cli-manifest.json"));
-  if (!(await confirm("Download or refresh CLI binaries?", { yes: options.yes }))) throw new Error("install cancelled");
-  const manifest = await installToolsFromManifest(workspace, manifestPath, options);
-  const configExists = fs.existsSync(path.join(workspace, "config", "harness-config.yaml")) ||
-    fs.existsSync(path.join(workspace, "config", "qdm-cli-paths.env"));
-  const overwrite = configExists && !options.yes ? await confirm("Overwrite existing local config files?", { defaultNo: true }) : !configExists;
-  if (configExists && !overwrite) {
-    console.log("Reusing existing local config files");
+  const key = platformKey();
+  header("Harness Data 安装器", packageVersion(), [
+    `安装目录：${resolveWorkspaceDir(options.dir || process.cwd())}`,
+    `平台：${key}`
+  ]);
+
+  step(1, 8, "检查本机依赖");
+  await requireCommands(["git", "tar", "unzip"]);
+  blank();
+
+  step(2, 8, "安装 runtime bundle");
+  const runtimeDir = await prepareRuntimeDir(options);
+  const bundle = await installRuntimeBundle(runtimeDir, options);
+  blank();
+
+  step(3, 8, "安装 CLI 工具");
+  const manifestPath = path.resolve(options.manifest || path.join(runtimeDir, "bootstrap", "cli-manifest.json"));
+  const tokenMode = await hasGithubAuth(options);
+
+  let manifest;
+  let localTools = {};
+  if (tokenMode) {
+    manifest = await installToolsFromManifest(runtimeDir, manifestPath, options);
   } else {
-    writeLocalConfig(workspace, { overwrite: true });
+    manifest = readManifest(manifestPath);
+    await installToolsFromManifest(runtimeDir, manifestPath, { ...options, tools: ["data-harness-cli"] });
+    localTools = await installLocalTools(runtimeDir, options);
   }
-  const casConfigDir = await configureAuth(workspace, options);
-  await buildAndCheck(workspace, options);
-  const agent = await chooseAgent(options);
-  linkAgents(workspace, agent);
-  const doctor = await collectDoctor(workspace, { ...options, casConfigDir });
-  for (const check of doctor.checks) console.log(`${check.ok ? "PASS" : "FAIL"} ${check.name}`);
-  if (doctor.checks.some((check) => !check.ok)) throw new Error("doctor failed; install is incomplete");
-  const gitProtocol = prepared.gitProtocol || await repoProtocol(workspace) || "ssh";
-  const updates = await checkUpdates(workspace, { ...options, gitProtocol });
-  if (updates.hasUpdates) {
-    console.log(`Updates available. Next step: npx @lumi-ai-lab/harness-data update --dir "${workspace}"`);
+  ok(`${Object.keys(manifest.installedTools || {}).length + Object.keys(localTools).length} 个 CLI 已安装到 bin/`);
+  blank();
+
+  step(4, 8, "同步 Wikis 知识库");
+  await installWikis(runtimeDir, options);
+  blank();
+
+  step(5, 8, "生成本地配置");
+  writeLocalConfig(runtimeDir, { overwrite: true });
+  ok("config/harness-config.yaml");
+  ok("config/qdm-cli-paths.env");
+  blank();
+
+  step(6, 8, "配置 CAS 认证");
+  const casDir = await writeCasCredentials(runtimeDir, options);
+  await configureTokens(runtimeDir, casDir);
+  blank();
+
+  step(7, 8, "构建 Wikis 索引");
+  await buildAndCheck(runtimeDir, options);
+  blank();
+
+  step(8, 8, "配置 Agent Hook");
+  linkAgents(runtimeDir, await chooseAgent(options));
+  for (const [target, source] of [[".claude", "agents/claude"], [".codex", "agents/codex"], [".pi", "agents/pi"]]) {
+    if (fs.existsSync(path.join(runtimeDir, target))) ok(`${target} -> ${source}`);
   }
-  writeState(workspace, {
-    mainCommit: await currentCommit(workspace),
-    wikisCommit: await submoduleCommit(workspace),
+  blank();
+
+  console.log("安装校验");
+  const doctor = await collectDoctor(runtimeDir, { ...options, casConfigDir: casDir });
+  printDoctorSummary(doctor);
+  if (doctor.checks.some((check) => !check.ok)) throw new Error("doctor failed; install is incomplete");
+  blank();
+
+  writeState(runtimeDir, {
+    installMode: tokenMode ? "github-token" : "local-path",
+    runtimeTag: bundle.tag,
+    localTools,
+    tools: manifest.installedTools || {},
     manifestSha256: manifestDigest(manifest),
-    lastCheckAt: new Date().toISOString(),
     packageVersion: packageVersion(),
-    gitProtocol,
-    repoUrl: prepared.repoUrl
+    lastCheckAt: new Date().toISOString()
   });
-  console.log(`Harness Data installed: ${workspace}`);
+  console.log(`安装完成：${runtimeDir}`);
+  console.log("");
+  console.log("下一步：");
+  console.log(`cd ${runtimeDir}`);
 }