huaweicloud-devkit 0.1.21-dev.0 → 0.1.21

package/plugins/huaweicloud-core/src/setup-cli.mjs

@@ -1,672 +1,869 @@
-#!/usr/bin/env node
-
-import { copyFileSync, existsSync, mkdirSync, readFileSync, readdirSync, rmSync, writeFileSync } from 'node:fs';
-import { join, dirname, resolve } from 'node:path';
-import { fileURLToPath } from 'node:url';
-import { homedir, platform } from 'node:os';
-import { createInterface } from 'node:readline';
-import { spawnSync } from 'node:child_process';
-
-const __dirname = dirname(fileURLToPath(import.meta.url));
-const PLUGIN_ROOT = resolve(__dirname, '..');
-const PACKAGE_ROOT = resolve(PLUGIN_ROOT, '..', '..');
-
-const BANNER = `
-╔══════════════════════════════════════════════╗
-║     HuaweiCloud DevKit v0.1.0              ║
-║     https://github.com/huaweicloud-mate   ║
-╚══════════════════════════════════════════════╝
-`;
-
-function configRoot(target = 'opencode') {
-  const home = homedir();
-  return join(home, '.config', target);
-}
-
-function opencodeSkillsDir() { return join(configRoot('opencode'), 'skills'); }
-function opencodeCommandsDir() { return join(configRoot('opencode'), 'commands'); }
-function opencodePluginsDir() { return join(configRoot('opencode'), 'huaweicloud-plugins'); }
-function opencodeConfigFile() {
-  const jsonc = join(configRoot('opencode'), 'opencode.jsonc');
-  if (existsSync(jsonc)) return jsonc;
-  return join(configRoot('opencode'), 'opencode.json');
-}
-
-function codexDesktopSkillsDir() { return join(homedir(), '.agents', 'skills'); }
-function codexDesktopCommandsDir() { return join(homedir(), '.agents', 'commands'); }
-function codexDesktopPluginsDir() { return join(homedir(), '.agents', 'huaweicloud-plugins'); }
-function codexDesktopConfigFile() { return join(homedir(), '.agents', 'opencode.json'); }
-
-function checkNode() {
-  const v = process.versions.node.split('.').map(Number);
-  if (v[0] < 20) {
-    console.error(`\x1b[31mNode.js >= 20 required (current: ${process.version})\x1b[0m`);
-    process.exit(1);
-  }
-  console.log(`  Node.js ${process.version} \x1b[32mOK\x1b[0m`);
-}
-
-function copyDir(src, dest) {
-  if (!existsSync(src)) return;
-  mkdirSync(dest, { recursive: true });
-  for (const entry of readdirSync(src, { withFileTypes: true })) {
-    const s = join(src, entry.name);
-    const d = join(dest, entry.name);
-    if (entry.isDirectory()) {
-      copyDir(s, d);
-    } else {
-      copyFileSync(s, d);
-    }
-  }
-}
-
-function removeIfExists(p) {
-  if (existsSync(p)) {
-    rmSync(p, { recursive: true, force: true });
-    return true;
-  }
-  return false;
-}
-
-function updateOpenCodeConfig(pluginDir) {
-  const configPath = opencodeConfigFile();
-  let config = {};
-  if (existsSync(configPath)) {
-    try { config = JSON.parse(readFileSync(configPath, 'utf8')); } catch {}
-  }
-  const mcpPath = join(pluginDir, 'src', 'mcp-server.mjs').replace(/\\/g, '/');
-  config.mcp = config.mcp || {};
-  config.mcp.huaweicloud = {
-    type: 'local',
-    command: ['node', mcpPath],
-    enabled: true,
-  };
-  writeFileSync(configPath, JSON.stringify(config, null, 2));
-  console.log(`  OpenCode MCP config updated: ${configPath}`);
-}
-
-function removeOpenCodeConfig() {
-  const configPath = opencodeConfigFile();
-  if (!existsSync(configPath)) return;
-  let config = {};
-  try { config = JSON.parse(readFileSync(configPath, 'utf8')); } catch { return; }
-  if (!config.mcp?.huaweicloud) return;
-  delete config.mcp.huaweicloud;
-  if (Object.keys(config.mcp).length === 0) delete config.mcp;
-  writeFileSync(configPath, JSON.stringify(config, null, 2));
-  console.log(`  OpenCode MCP config cleaned: ${configPath}`);
-}
-
-function hasCodexCLI() {
-  const r = spawnSync('codex --version', [], { shell: true, windowsHide: true, stdio: 'pipe' });
-  return r.status === 0 && r.stdout && r.stdout.toString().includes('codex');
-}
-
-function checkHcloud() {
-  const r = spawnSync('hcloud version', [], { shell: true, windowsHide: true, stdio: 'pipe', timeout: 5000 });
-  return r.status === 0 && /KooCLI|Current.*version/i.test(r.stdout ? r.stdout.toString() : '');
-}
-
-function getMarketplaceName() {
-  const marketplacePath = join(PACKAGE_ROOT, '.agents', 'plugins', 'marketplace.json');
-  try {
-    const manifest = JSON.parse(readFileSync(marketplacePath, 'utf8'));
-    if (manifest.name) return manifest.name;
-  } catch {}
-  return 'huaweicloud-devkit';
-}
-
-function installCodex() {
-  const marketplaceRoot = PACKAGE_ROOT;
-  const pluginName = 'huaweicloud-core';
-  const marketplaceName = getMarketplaceName();
-
-  console.log(`  Registering Codex marketplace: ${marketplaceRoot}`);
-  const r1 = spawnSync(`codex plugin marketplace add "${marketplaceRoot}"`, [], {
-    shell: true, windowsHide: true, stdio: 'pipe',
-  });
-  console.log(`  ${r1.stdout ? r1.stdout.toString().trim() : r1.stderr.toString().trim()}`);
-
-  console.log(`  Installing plugin: ${pluginName}@${marketplaceName}`);
-  const r2 = spawnSync(`codex plugin add "${pluginName}@${marketplaceName}"`, [], {
-    shell: true, windowsHide: true, stdio: 'pipe',
-  });
-  console.log(`  ${r2.stdout ? r2.stdout.toString().trim() : r2.stderr.toString().trim()}`);
-  return r2.status === 0;
-}
-
-function uninstallCodex() {
-  const pluginName = 'huaweicloud-core';
-  const marketplaceName = getMarketplaceName();
-  console.log(`  Removing Codex plugin: ${pluginName}@${marketplaceName}`);
-  const r = spawnSync(`codex plugin remove "${pluginName}@${marketplaceName}"`, [], {
-    shell: true, windowsHide: true, stdio: 'pipe',
-  });
-  console.log(`  ${r.stdout ? r.stdout.toString().trim() : r.stderr.toString().trim()}`);
-}
-
-function codexStatus() {
-  const r = spawnSync('codex plugin list', [], { shell: true, windowsHide: true, stdio: 'pipe' });
-  const out = r.stdout ? r.stdout.toString() : '';
-  return out.includes('huaweicloud-core');
-}
-
-async function installOpenCode() {
-  const skillsSrc = join(PLUGIN_ROOT, 'skills');
-  const commandsSrc = join(PACKAGE_ROOT, 'integrations', 'opencode', 'commands');
-  const srcDir = join(PLUGIN_ROOT, 'src');
-  const safetyDir = join(PLUGIN_ROOT, 'safety');
-  const pluginDest = opencodePluginsDir();
-
-  copyDir(skillsSrc, opencodeSkillsDir());
-  console.log(`  Skills -> ${opencodeSkillsDir()}`);
-  copyDir(commandsSrc, opencodeCommandsDir());
-  console.log(`  Commands -> ${opencodeCommandsDir()}`);
-  copyDir(srcDir, join(pluginDest, 'src'));
-  console.log(`  MCP Server -> ${join(pluginDest, 'src')}`);
-  copyDir(safetyDir, join(pluginDest, 'safety'));
-  console.log(`  Safety Policy -> ${join(pluginDest, 'safety')}`);
-  updateOpenCodeConfig(pluginDest);
-}
-
-function uninstallOpenCode() {
-  let removed = 0;
-
-  const skills = opencodeSkillsDir();
-  if (existsSync(skills)) {
-    for (const entry of readdirSync(skills, { withFileTypes: true })) {
-      if (entry.name.startsWith('huawei')) {
-        removeIfExists(join(skills, entry.name));
-        removed++;
-      }
-    }
-    console.log(`  Removed ${removed} skills`);
-  }
-
-  const commands = opencodeCommandsDir();
-  let cmdRemoved = 0;
-  if (existsSync(commands)) {
-    for (const entry of readdirSync(commands, { withFileTypes: true })) {
-      if (entry.name.startsWith('huawei')) {
-        removeIfExists(join(commands, entry.name));
-        cmdRemoved++;
-      }
-    }
-    if (cmdRemoved > 0) console.log(`  Removed ${cmdRemoved} commands`);
-  }
-
-  if (removeIfExists(opencodePluginsDir())) {
-    console.log('  Removed MCP server and safety policy');
-  }
-  removeOpenCodeConfig();
-}
-
-async function installCodexDesktop() {
-  const skillsSrc = join(PLUGIN_ROOT, 'skills');
-  const commandsSrc = join(PACKAGE_ROOT, 'integrations', 'opencode', 'commands');
-  const srcDir = join(PLUGIN_ROOT, 'src');
-  const safetyDir = join(PLUGIN_ROOT, 'safety');
-
-  copyDir(skillsSrc, codexDesktopSkillsDir());
-  console.log(`  Skills -> ${codexDesktopSkillsDir()}`);
-  copyDir(commandsSrc, codexDesktopCommandsDir());
-  console.log(`  Commands -> ${codexDesktopCommandsDir()}`);
-  mkdirSync(codexDesktopPluginsDir(), { recursive: true });
-  copyDir(srcDir, join(codexDesktopPluginsDir(), 'src'));
-  console.log(`  MCP Server -> ${join(codexDesktopPluginsDir(), 'src')}`);
-  copyDir(safetyDir, join(codexDesktopPluginsDir(), 'safety'));
-  console.log(`  Safety Policy -> ${join(codexDesktopPluginsDir(), 'safety')}`);
-
-  const mcpPath = join(codexDesktopPluginsDir(), 'src', 'mcp-server.mjs').replace(/\\/g, '/');
-  const configPath = codexDesktopConfigFile();
-  let config = {};
-  if (existsSync(configPath)) {
-    try { config = JSON.parse(readFileSync(configPath, 'utf8')); } catch {}
-  }
-  config.mcp = config.mcp || {};
-  config.mcp.huaweicloud = {
-    type: 'local',
-    command: ['node', mcpPath],
-    enabled: true,
-  };
-  writeFileSync(configPath, JSON.stringify(config, null, 2));
-  console.log(`  Config updated: ${configPath}`);
-}
-
-function uninstallCodexDesktop() {
-  const skillsDir = codexDesktopSkillsDir();
-  let removed = 0;
-  if (existsSync(skillsDir)) {
-    for (const entry of readdirSync(skillsDir, { withFileTypes: true })) {
-      if (entry.name.startsWith('huawei')) {
-        removeIfExists(join(skillsDir, entry.name));
-        removed++;
-      }
-    }
-    console.log(`  Removed ${removed} skills`);
-  }
-
-  const cmdDir = codexDesktopCommandsDir();
-  let cmdRemoved = 0;
-  if (existsSync(cmdDir)) {
-    for (const entry of readdirSync(cmdDir, { withFileTypes: true })) {
-      if (entry.name.startsWith('huawei')) {
-        removeIfExists(join(cmdDir, entry.name));
-        cmdRemoved++;
-      }
-    }
-    if (cmdRemoved > 0) console.log(`  Removed ${cmdRemoved} commands`);
-  }
-
-  if (removeIfExists(codexDesktopPluginsDir())) {
-    console.log('  Removed MCP server and safety policy');
-  }
-  const configPath = codexDesktopConfigFile();
-  if (existsSync(configPath)) {
-    let config = {};
-    try { config = JSON.parse(readFileSync(configPath, 'utf8')); } catch {}
-    if (config.mcp?.huaweicloud) {
-      delete config.mcp.huaweicloud;
-      if (Object.keys(config.mcp).length === 0) delete config.mcp;
-      writeFileSync(configPath, JSON.stringify(config, null, 2));
-      console.log('  Config cleaned');
-    }
-  }
-}
-
-function opencodeStatus() {
-  const pluginDir = opencodePluginsDir();
-  const skillsDir = opencodeSkillsDir();
-  console.log(`  MCP Server: ${existsSync(join(pluginDir, 'src', 'mcp-server.mjs')) ? '\x1b[32mInstalled\x1b[0m' : '\x1b[31mNot installed\x1b[0m'}`);
-  console.log(`  Safety Policy: ${existsSync(join(pluginDir, 'safety', 'policy.json')) ? '\x1b[32mInstalled\x1b[0m' : '\x1b[31mNot installed\x1b[0m'}`);
-  let skillCount = 0;
-  if (existsSync(skillsDir)) {
-    skillCount = readdirSync(skillsDir, { withFileTypes: true })
-      .filter((d) => d.isDirectory() && d.name.startsWith('huawei')).length;
-  }
-  console.log(`  Skills: ${skillCount > 0 ? `\x1b[32m${skillCount} installed\x1b[0m` : '\x1b[31mNot installed\x1b[0m'}`);
-  const configPath = opencodeConfigFile();
-  if (existsSync(configPath)) {
-    try {
-      const config = JSON.parse(readFileSync(configPath, 'utf8'));
-      console.log(`  MCP config: ${config.mcp?.huaweicloud ? '\x1b[32mConfigured\x1b[0m' : '\x1b[31mNot configured\x1b[0m'}`);
-    } catch {
-      console.log(`  MCP config: \x1b[31mInvalid\x1b[0m`);
-    }
-  }
-}
-
-function parseTarget() {
-  const idx = process.argv.indexOf('--target');
-  if (idx < 0) return 'opencode';
-  const val = (process.argv[idx + 1] || '').toLowerCase();
-  if (val === 'codex') return 'codex';
-  if (val === 'codex-desktop') return 'codex-desktop';
-  if (val === 'all') return 'all';
-  return 'opencode';
-}
-
-async function cmdInstall() {
-  const target = parseTarget();
-  console.log(BANNER);
-  console.log(`Installing HuaweiCloud DevKit${target !== 'opencode' ? ` for ${target}` : ''}...\n`);
-  checkNode();
-
-  if (target === 'opencode' || target === 'all') {
-    console.log('[OpenCode]');
-    await installOpenCode();
-  }
-  if (target === 'codex-desktop' || target === 'all') {
-    console.log('\n[Codex Desktop]');
-    await installCodexDesktop();
-  }
-  if (target === 'codex' || target === 'all') {
-    console.log('\n[Codex]');
-    if (!hasCodexCLI()) {
-      if (target === 'codex') {
-        console.log(`  \x1b[31mCodex CLI not found. Install Codex first: https://github.com/openai/codex-cli\x1b[0m`);
-        console.log(`  Then re-run: npx huaweicloud-devkit install --target codex`);
-        process.exit(1);
-      }
-      console.log(`  \x1b[33mCodex CLI not found. Skipping Codex.\x1b[0m`);
-      console.log('  Install Codex CLI to enable: npx huaweicloud-devkit install --target codex');
-    } else {
-      installCodex();
-    }
-  }
-
-  console.log(`\n\x1b[32mInstallation complete!\x1b[0m`);
-  console.log(`\n\x1b[1m\x1b[33m╔══════════════════════════════════════════════════════╗`);
-  console.log(`\x1b[1m\x1b[33m║  MCP 工具在重启 OpenCode 会话后才生效                ║`);
-  console.log(`\x1b[1m\x1b[33m║  关闭当前会话 → 重新打开，直接描述华为云任务即可      ║`);
-  console.log(`\x1b[1m\x1b[33m║  重启前请勿执行 hcloud 命令，避免 AK/SK 泄露         ║`);
-  console.log(`\x1b[1m\x1b[33m╚══════════════════════════════════════════════════════╝\x1b[0m`);
-
-  const hcloudOk = checkHcloud();
-  if (!hcloudOk) {
-    console.log(`\n\x1b[33mKooCLI (hcloud) is not installed.`);
-    console.log(`  Run: npx huaweicloud-devkit install-hcloud\x1b[0m`);
-  } else {
-    console.log(`\nKooCLI (hcloud) detected.`);
-  }
-
-  console.log(`\nAfter restart + hcloud setup, run: npx huaweicloud-devkit doctor`);
-
-  // Write install marker for doctor to detect
-  writeFileSync(join(opencodePluginsDir(), '.installed'), new Date().toISOString());
-  if (target === 'opencode' || target === 'all') {
-    console.log('Or describe your Huawei Cloud task in OpenCode');
-  }
-  if (target === 'codex' || target === 'all') {
-    console.log('Or mention @huaweicloud-core in Codex');
-  }
-}
-
-async function cmdUninstall() {
-  const target = parseTarget();
-  console.log(BANNER);
-  console.log(`Uninstalling HuaweiCloud DevKit${target !== 'opencode' ? ` from ${target}` : ''}...\n`);
-
-  if (target === 'opencode' || target === 'all') {
-    console.log('[OpenCode]');
-    await uninstallOpenCode();
-  }
-  if (target === 'codex' || target === 'all') {
-    console.log('\n[Codex]');
-    uninstallCodexDesktop();
-    if (!hasCodexCLI()) {
-      console.log('  \x1b[33mCodex CLI not found. Run "npm uninstall -g codex" to fully remove.\x1b[0m');
-    } else {
-      uninstallCodex();
-    }
-  }
-  console.log(`\n\x1b[32mUninstall complete.\x1b[0m`);
-}
-
-async function cmdStatus() {
-  const target = parseTarget();
-  console.log(BANNER);
-  console.log(`HuaweiCloud DevKit Status\n`);
-
-  if (target === 'opencode' || target === 'all') {
-    console.log('[OpenCode]');
-    opencodeStatus();
-  }
-  if (target === 'codex' || target === 'all') {
-    console.log('\n[Codex]');
-    if (!hasCodexCLI()) {
-      console.log('  \x1b[33mCodex CLI not found.\x1b[0m');
-    } else {
-      console.log(`  Plugin: ${codexStatus() ? '\x1b[32mInstalled\x1b[0m' : '\x1b[31mNot installed\x1b[0m'}`);
-    }
-  }
-  console.log('\nEnvironment:');
-  console.log(`  Node.js: ${process.version}`);
-  console.log(`  Platform: ${platform()}`);
-}
-
-async function cmdDoctor() {
-  console.log(BANNER);
-  console.log('HuaweiCloud DevKit Doctor\n');
-
-  let pass = 0, warn = 0, fail = 0;
-
-  function check(label, ok, msg) {
-    if (ok) { console.log(`  \x1b[32m[PASS]\x1b[0m ${label}`); pass++; }
-    else { console.log(`  \x1b[31m[FAIL]\x1b[0m ${label} — ${msg}`); fail++; }
-  }
-
-  // Node.js
-  check('Node.js >= 20', process.versions.node.split('.')[0] >= 20, 'Run: nvm install 20 && nvm use 20');
-
-  // OpenCode installed files
-  const pluginDir = opencodePluginsDir();
-  const mcpOk = existsSync(join(pluginDir, 'src', 'mcp-server.mjs'));
-  check('MCP server installed', mcpOk, 'Run: npx huaweicloud-devkit-test install');
-
-  if (mcpOk) {
-    // Try to start MCP server briefly
-    const test = spawnSync('node', [join(pluginDir, 'src', 'mcp-server.mjs')], {
-      env: { ...process.env, HUAWEICLOUD_AGENT_TOOLKIT_MODE: 'local' },
-      timeout: 3000, stdio: 'pipe', windowsHide: true,
-    });
-    // MCP server reads stdin for JSON-RPC, so it will hang briefly then get killed
-    // We just check that the process spawned OK
-    check('MCP server can start', true, '');
-  }
-
-  const safetyOk = existsSync(join(pluginDir, 'safety', 'policy.json'));
-  check('Safety policy installed', safetyOk, 'Run: npx huaweicloud-devkit-test install');
-
-  const opencodeCfg = opencodeConfigFile();
-  let mcpConfigured = false;
-  if (existsSync(opencodeCfg)) {
-    try {
-      const cfg = JSON.parse(readFileSync(opencodeCfg, 'utf8'));
-      mcpConfigured = !!(cfg.mcp && cfg.mcp.huaweicloud);
-    } catch {}
-  }
-  check('OpenCode MCP configured', mcpConfigured, `Add MCP to ${opencodeCfg} — run: npx huaweicloud-devkit-test install`);
-
-  // hcloud CLI
-  const hcloudBin = process.env.HCLOUD_BIN || 'hcloud';
-  const hcloudCheck = spawnSync(`"${hcloudBin}" version`, [], { shell: true, windowsHide: true, stdio: 'pipe', timeout: 5000 });
-  const hcloudOk = hcloudCheck.status === 0 && hcloudCheck.stdout.toString().includes('KooCLI');
-  check('hcloud CLI installed', hcloudOk, 'Run: npx huaweicloud-devkit install-hcloud');
-
-  if (hcloudOk) {
-    const ver = (hcloudCheck.stdout.toString().match(/(\d+\.\d+\.\d+)/) || [])[1] || 'unknown';
-    console.log(`    Version: ${ver}`);
-
-    // Check auth
-    const authCheck = spawnSync(`"${hcloudBin}" configure list`, [], { shell: true, windowsHide: true, stdio: 'pipe', timeout: 5000 });
-    const hasAuth = authCheck.status === 0 && /access.?key/i.test(authCheck.stdout.toString());
-    check('hcloud credentials configured', hasAuth, 'Run: hcloud configure init');
-  }
-
-  // Skills
-  const skillsOptions = [opencodeSkillsDir(), codexDesktopSkillsDir()];
-  let skillCount = 0, skillsDir = '';
-  for (const dir of skillsOptions) {
-    if (!existsSync(dir)) continue;
-    const count = readdirSync(dir, { withFileTypes: true })
-      .filter((d) => d.isDirectory() && d.name.startsWith('huawei')).length;
-    if (count > skillCount) { skillCount = count; skillsDir = dir; }
-  }
-  const skillsOk = skillCount >= 6;
-  check(`Skills installed (${skillCount})`, skillsOk, 'Run: npx huaweicloud-devkit-test install');
-
-  console.log(`\nResults: ${pass} pass, ${warn} warn, ${fail} fail`);
-
-  if (mcpConfigured && !hcloudOk) {
-    console.log('\n\x1b[33mMCP is configured but hcloud is not installed. Install hcloud then restart OpenCode.\x1b[0m');
-  }
-  if (fail > 0) {
-    console.log('\x1b[33mFix failures above, then restart your OpenCode / Codex session.\x1b[0m');
-  }
-  if (fail === 0 && mcpConfigured) {
-    console.log('\n\x1b[32mAll checks passed.\x1b[0m Restart OpenCode, then describe your Huawei Cloud task');
-  }
-
-  // Detect "installed but not restarted" scenario
-  const installedMarker = join(opencodePluginsDir(), '.installed');
-  if (mcpConfigured && existsSync(installedMarker)) {
-    console.log(`\n\x1b[1m\x1b[31m╔══════════════════════════════════════════╗`);
-    console.log(`\x1b[1m\x1b[31m║  请重启 OpenCode！MCP 工具尚未激活       ║`);
-    console.log(`\x1b[1m\x1b[31m║  关闭当前会话 → 重新打开即可             ║`);
-    console.log(`\x1b[1m\x1b[31m╚══════════════════════════════════════════╝\x1b[0m`);
-  }
-}
-
-async function cmdUpdate() {
-  console.log(BANNER);
-  const target = parseTarget();
-
-  if (target === 'opencode' || target === 'all') {
-    if (!existsSync(join(opencodePluginsDir(), 'src', 'mcp-server.mjs')) && !codexStatus()) {
-      console.log('\x1b[33mNot installed. Use "install" command first.\x1b[0m');
-      return;
-    }
-  }
-
-  await cmdUninstall();
-  console.log('');
-  await cmdInstall();
-}
-
-async function cmdReinstall() {
-  console.log(BANNER);
-  if (!(await confirm('This will remove and reinstall all HuaweiCloud DevKit files. Continue?'))) {
-    console.log('Cancelled.');
-    return;
-  }
-  confirmed = true;
-  await cmdUninstall();
-  console.log('');
-  await cmdInstall();
-}
-
-let confirmed = false;
-async function confirm(msg) {
-  if (confirmed) return true;
-  const rl = createInterface({ input: process.stdin, output: process.stdout });
-  return new Promise((ok) => {
-    rl.question(`${msg} [y/N] `, (a) => {
-      rl.close();
-      ok(a.toLowerCase() === 'y' || a.toLowerCase() === 'yes');
-    });
-  });
-}
-
-async function cmdInstallHcloud() {
-  console.log(BANNER);
-  console.log('Installing KooCLI (hcloud)...\n');
-
-  const os = platform();
-  const arch = process.arch;
-  const baseUrl = 'https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest';
-  const installDir = os === 'win32'
-    ? join(homedir(), 'hcloud')
-    : join(homedir(), '.local', 'bin');
-
-  if (os === 'win32') {
-    const url = `${baseUrl}/huaweicloud-cli-windows-amd64.zip`;
-    const zipPath = join(installDir, 'hcloud.zip');
-
-    console.log(`[Windows] Auto-installing to ${installDir}...`);
-
-    try {
-      mkdirSync(installDir, { recursive: true });
-
-      // Download
-      console.log(`  Downloading ${url}...`);
-      const psCmd = `[Net.ServicePointManager]::SecurityProtocol=[Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri '${url}' -OutFile '${zipPath}' -UseBasicParsing`;
-      spawnSync('powershell', ['-NoProfile', '-Command', psCmd], { stdio: 'inherit', windowsHide: true });
-
-      // Extract
-      console.log('  Extracting...');
-      spawnSync('powershell', ['-NoProfile', '-Command', `Expand-Archive -Path '${zipPath}' -DestinationPath '${installDir}' -Force`], { stdio: 'inherit', windowsHide: true });
-
-      // Clean up zip
-      rmSync(zipPath, { force: true });
-
-      // Add to PATH
-      console.log('  Adding to user PATH...');
-      spawnSync('setx', ['PATH', `${process.env.PATH};${installDir}`], { stdio: 'inherit', windowsHide: true });
-
-      console.log(`\n\x1b[32mInstall complete.\x1b[0m`);
-      console.log(`  Verify: ${join(installDir, 'hcloud.exe')} version`);
-      console.log('  Or restart terminal and: hcloud version');
-    } catch (e) {
-      console.log(`\n\x1b[33mAuto-install failed: ${e.message}\x1b[0m`);
-      console.log(`  Manual: download ${url}, unzip to ${installDir}, add to PATH`);
-      console.log(`  Guide: https://support.huaweicloud.com/qs-hcli/hcli_02_003_01.html`);
-    }
-  } else if (os === 'linux') {
-    console.log('[Linux] One-liner install:');
-    console.log('  curl -sSL https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest/hcloud_install.sh -o ./hcloud_install.sh && bash ./hcloud_install.sh -y');
-    console.log(`\nOr manual: ${arch === 'arm64' ? 'ARM64' : 'AMD64'}`);
-    const pkg = arch === 'arm64' ? 'linux-arm64' : 'linux-amd64';
-    console.log(`  curl -LO "${baseUrl}/huaweicloud-cli-${pkg}.tar.gz"`);
-    console.log(`  tar -zxvf huaweicloud-cli-${pkg}.tar.gz`);
-    console.log(`  mv hcloud ~/.local/bin/`);
-    console.log(`  hcloud version`);
-    console.log(`\nFull guide: https://support.huaweicloud.com/qs-hcli/hcli_02_003_02.html`);
-  } else if (os === 'darwin') {
-    console.log('[macOS] One-liner install:');
-    console.log('  curl -sSL https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest/hcloud_install.sh -o ./hcloud_install.sh && bash ./hcloud_install.sh -y');
-    console.log(`\nOr manual: ${arch === 'arm64' ? 'ARM64 (Apple Silicon)' : 'AMD64 (Intel)'}`);
-    const pkg = arch === 'arm64' ? 'mac-arm64' : 'mac-amd64';
-    console.log(`  curl -LO "${baseUrl}/huaweicloud-cli-${pkg}.tar.gz"`);
-    console.log(`  tar -zxvf huaweicloud-cli-${pkg}.tar.gz`);
-    console.log(`  mv hcloud /usr/local/bin/`);
-    console.log(`  hcloud version`);
-    console.log(`\nFull guide: https://support.huaweicloud.com/qs-hcli/hcli_02_003_03.html`);
-  }
-
-  console.log('\nAfter install, set HCLOUD_BIN if hcloud is not on PATH.');
-  console.log('\n\x1b[1m\x1b[33m=== Configure credentials SAFELY ===\x1b[0m');
-  console.log('  Interactive (safe): hcloud configure init');
-  console.log('  NEVER: hcloud configure set --cli-access-key=xxx  (AK/SK in shell history!)');
-  console.log('\nThen run: npx huaweicloud-devkit doctor');
-}
-
-async function main() {
-  const cmd = process.argv[2] || 'help';
-
-  switch (cmd) {
-    case 'install':
-    case 'i':
-      await cmdInstall();
-      break;
-    case 'uninstall':
-    case 'remove':
-      await cmdUninstall();
-      break;
-    case 'update':
-    case 'upgrade':
-      await cmdUpdate();
-      break;
-    case 'reinstall':
-      await cmdReinstall();
-      break;
-    case 'status':
-    case 'info':
-      await cmdStatus();
-      break;
-    case 'doctor':
-    case 'check':
-      await cmdDoctor();
-      break;
-    case 'install-hcloud':
-      await cmdInstallHcloud();
-      break;
-    case 'help':
-    case '--help':
-    case '-h':
-    default:
-      console.log(BANNER);
-      console.log('Usage: npx huaweicloud-devkit <command> [--target <opencode|codex|all>]\n');
-      console.log('Commands:');
-      console.log('  install      Install skills, MCP server, safety policy');
-      console.log('  uninstall    Remove installed files');
-      console.log('  update       Update to latest version');
-      console.log('  reinstall    Full clean reinstall');
-      console.log('  status       Show installation status');
-      console.log('  doctor       Self-check: hcloud, MCP, skills, auth');
-      console.log('  install-hcloud  Show KooCLI install commands for your OS');
-      console.log('  help         Show this help');
-      console.log('\nOptions:');
-      console.log('  --target     Target agent: opencode (default), codex, all');
-      console.log('\nExamples:');
-      console.log('  npx huaweicloud-devkit install');
-      console.log('  npx huaweicloud-devkit install --target codex');
-      console.log('  npx huaweicloud-devkit install --target all');
-      break;
-  }
-}
-
-main().catch((e) => {
-  console.error(`\x1b[31mError: ${e.message}\x1b[0m`);
-  process.exit(1);
-});
+#!/usr/bin/env node
+
+import { copyFileSync, existsSync, mkdirSync, readFileSync, readdirSync, rmSync, writeFileSync } from 'node:fs';
+import { join, dirname, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { homedir, platform } from 'node:os';
+import { createInterface } from 'node:readline';
+import { spawnSync } from 'node:child_process';
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const PLUGIN_ROOT = resolve(__dirname, '..');
+const PACKAGE_ROOT = resolve(PLUGIN_ROOT, '..', '..');
+
+const BANNER = `
+╔══════════════════════════════════════════════╗
+║     HuaweiCloud DevKit v0.1.0              ║
+║     https://github.com/huaweicloud-mate   ║
+╚══════════════════════════════════════════════╝
+`;
+
+function configRoot(target = 'opencode') {
+  const home = homedir();
+  return join(home, '.config', target);
+}
+
+function opencodeSkillsDir() { return join(configRoot('opencode'), 'skills'); }
+function opencodeCommandsDir() { return join(configRoot('opencode'), 'commands'); }
+function opencodePluginsDir() { return join(configRoot('opencode'), 'huaweicloud-plugins'); }
+function opencodeConfigFile() {
+  const jsonc = join(configRoot('opencode'), 'opencode.jsonc');
+  if (existsSync(jsonc)) return jsonc;
+  return join(configRoot('opencode'), 'opencode.json');
+}
+
+function codexDesktopSkillsDir() { return join(homedir(), '.agents', 'skills'); }
+function codexDesktopCommandsDir() { return join(homedir(), '.agents', 'commands'); }
+function codexDesktopPluginsDir() { return join(homedir(), '.agents', 'huaweicloud-plugins'); }
+function codexDesktopConfigFile() { return join(homedir(), '.agents', 'opencode.json'); }
+
+function codeartsSkillsDir() { return join(homedir(), '.codeartsdoer', 'skills'); }
+function codeartsMcpSettingsDir() { return join(homedir(), '.codeartsdoer', 'mcp'); }
+function codeartsMcpSettingsFile() { return join(codeartsMcpSettingsDir(), 'mcp_settings.json'); }
+function codeartsProjectDir() { return join(process.cwd(), '.codeartsdoer'); }
+function codeartsProjectSkillsDir() { return join(codeartsProjectDir(), 'skills'); }
+function codeartsProjectMcpSettingsFile() { return join(codeartsProjectDir(), 'mcp', 'mcp_settings.json'); }
+function codeartsPluginsDir() { return join(homedir(), '.codeartsdoer', 'huaweicloud-plugins'); }
+
+// Detect CodeArts sandbox mode (bash_mode in permission config).
+function detectCodeartsSandbox() {
+  try {
+    const configPath = join(homedir(), '.codeartsdoer', 'codearts-data', 'storage', 'permission', 'config.json');
+    if (!existsSync(configPath)) return null;
+    const config = JSON.parse(readFileSync(configPath, 'utf8'));
+    return typeof config.bash_mode === 'string' ? config.bash_mode : null;
+  } catch {
+    return null;
+  }
+}
+
+// Locate an existing hcloud executable (HCLOUD_BIN, ~/hcloud on Windows, ~/.local/bin elsewhere).
+function findHcloudBin() {
+  if (process.env.HCLOUD_BIN && existsSync(process.env.HCLOUD_BIN)) return process.env.HCLOUD_BIN;
+  const rel = platform() === 'win32' ? join('hcloud', 'hcloud.exe') : join('.local', 'bin', 'hcloud');
+  const candidate = join(homedir(), rel);
+  return existsSync(candidate) ? candidate : null;
+}
+
+function printSandboxWarning(reason) {
+  console.log(`\n\x1b[1m\x1b[31m⚠ 检测到码道沙箱模式 (bash_mode: sandbox)\x1b[0m`);
+  console.log(`\x1b[31m  ${reason}\x1b[0m`);
+  console.log(`\x1b[31m  请任选其一继续:\x1b[0m`);
+  console.log(`\x1b[31m  A. 在码道外的终端安装并使用 KooCLI (推荐):`);
+  console.log(`\x1b[31m     https://support.huaweicloud.com/qs-hcli/hcli_02_003.html`);
+  console.log(`\x1b[31m  B. 在码道设置中关闭沙箱模式后重试 (设置 → 权限 → Bash 模式)`);
+  console.log(`\x1b[31m  关闭沙箱后重新运行: npx huaweicloud-devkit install-hcloud\x1b[0m`);
+}
+
+// Try to auto-accept the KooCLI privacy agreement by answering 'y' on stdin.
+// Returns true when hcloud runs without re-prompting for the agreement.
+function acceptKooCliPrivacy(hcloudBin) {
+  const run = () => spawnSync(hcloudBin, ['version'], {
+    encoding: 'utf8', timeout: 10000, windowsHide: true, input: 'y\n',
+  });
+  const first = run();
+  const out = (first.stdout || '') + (first.stderr || '');
+  if (!/同意并继续使用|agree/i.test(out)) return first.status === 0;
+  const second = run();
+  const out2 = (second.stdout || '') + (second.stderr || '');
+  return second.status === 0 && !/同意并继续使用/.test(out2);
+}
+
+function checkNode() {
+  const v = process.versions.node.split('.').map(Number);
+  if (v[0] < 20) {
+    console.error(`\x1b[31mNode.js >= 20 required (current: ${process.version})\x1b[0m`);
+    process.exit(1);
+  }
+  console.log(`  Node.js ${process.version} \x1b[32mOK\x1b[0m`);
+}
+
+function copyDir(src, dest) {
+  if (!existsSync(src)) return;
+  mkdirSync(dest, { recursive: true });
+  for (const entry of readdirSync(src, { withFileTypes: true })) {
+    const s = join(src, entry.name);
+    const d = join(dest, entry.name);
+    if (entry.isDirectory()) {
+      copyDir(s, d);
+    } else {
+      copyFileSync(s, d);
+    }
+  }
+}
+
+function removeIfExists(p) {
+  if (existsSync(p)) {
+    rmSync(p, { recursive: true, force: true });
+    return true;
+  }
+  return false;
+}
+
+function updateOpenCodeConfig(pluginDir) {
+  const configPath = opencodeConfigFile();
+  let config = {};
+  if (existsSync(configPath)) {
+    try { config = JSON.parse(readFileSync(configPath, 'utf8')); } catch {}
+  }
+  const mcpPath = join(pluginDir, 'src', 'mcp-server.mjs').replace(/\\/g, '/');
+  config.mcp = config.mcp || {};
+  config.mcp.huaweicloud = {
+    type: 'local',
+    command: ['node', mcpPath],
+    enabled: true,
+  };
+  writeFileSync(configPath, JSON.stringify(config, null, 2));
+  console.log(`  OpenCode MCP config updated: ${configPath}`);
+}
+
+function removeOpenCodeConfig() {
+  const configPath = opencodeConfigFile();
+  if (!existsSync(configPath)) return;
+  let config = {};
+  try { config = JSON.parse(readFileSync(configPath, 'utf8')); } catch { return; }
+  if (!config.mcp?.huaweicloud) return;
+  delete config.mcp.huaweicloud;
+  if (Object.keys(config.mcp).length === 0) delete config.mcp;
+  writeFileSync(configPath, JSON.stringify(config, null, 2));
+  console.log(`  OpenCode MCP config cleaned: ${configPath}`);
+}
+
+function hasCodexCLI() {
+  const r = spawnSync('codex --version', [], { shell: true, windowsHide: true, stdio: 'pipe' });
+  return r.status === 0 && r.stdout && r.stdout.toString().includes('codex');
+}
+
+function checkHcloud() {
+  const bin = findHcloudBin() || (process.env.HCLOUD_BIN || 'hcloud');
+  const r = spawnSync(`"${bin}" version`, [], { shell: true, windowsHide: true, stdio: 'pipe', timeout: 5000, input: 'y\n' });
+  const out = (r.stdout ? r.stdout.toString() : '') + (r.stderr ? r.stderr.toString() : '');
+  return r.status === 0 && /KooCLI|Current.*version|当前KooCLI/i.test(out);
+}
+
+function getMarketplaceName() {
+  const marketplacePath = join(PACKAGE_ROOT, '.agents', 'plugins', 'marketplace.json');
+  try {
+    const manifest = JSON.parse(readFileSync(marketplacePath, 'utf8'));
+    if (manifest.name) return manifest.name;
+  } catch {}
+  return 'huaweicloud-devkit';
+}
+
+function installCodex() {
+  const marketplaceRoot = PACKAGE_ROOT;
+  const pluginName = 'huaweicloud-core';
+  const marketplaceName = getMarketplaceName();
+
+  console.log(`  Registering Codex marketplace: ${marketplaceRoot}`);
+  const r1 = spawnSync(`codex plugin marketplace add "${marketplaceRoot}"`, [], {
+    shell: true, windowsHide: true, stdio: 'pipe',
+  });
+  console.log(`  ${r1.stdout ? r1.stdout.toString().trim() : r1.stderr.toString().trim()}`);
+
+  console.log(`  Installing plugin: ${pluginName}@${marketplaceName}`);
+  const r2 = spawnSync(`codex plugin add "${pluginName}@${marketplaceName}"`, [], {
+    shell: true, windowsHide: true, stdio: 'pipe',
+  });
+  console.log(`  ${r2.stdout ? r2.stdout.toString().trim() : r2.stderr.toString().trim()}`);
+  return r2.status === 0;
+}
+
+function uninstallCodex() {
+  const pluginName = 'huaweicloud-core';
+  const marketplaceName = getMarketplaceName();
+  console.log(`  Removing Codex plugin: ${pluginName}@${marketplaceName}`);
+  const r = spawnSync(`codex plugin remove "${pluginName}@${marketplaceName}"`, [], {
+    shell: true, windowsHide: true, stdio: 'pipe',
+  });
+  console.log(`  ${r.stdout ? r.stdout.toString().trim() : r.stderr.toString().trim()}`);
+}
+
+function codexStatus() {
+  const r = spawnSync('codex plugin list', [], { shell: true, windowsHide: true, stdio: 'pipe' });
+  const out = r.stdout ? r.stdout.toString() : '';
+  return out.includes('huaweicloud-core');
+}
+
+async function installOpenCode() {
+  const skillsSrc = join(PLUGIN_ROOT, 'skills');
+  const commandsSrc = join(PACKAGE_ROOT, 'integrations', 'opencode', 'commands');
+  const srcDir = join(PLUGIN_ROOT, 'src');
+  const safetyDir = join(PLUGIN_ROOT, 'safety');
+  const pluginDest = opencodePluginsDir();
+
+  copyDir(skillsSrc, opencodeSkillsDir());
+  console.log(`  Skills -> ${opencodeSkillsDir()}`);
+  copyDir(commandsSrc, opencodeCommandsDir());
+  console.log(`  Commands -> ${opencodeCommandsDir()}`);
+  copyDir(srcDir, join(pluginDest, 'src'));
+  console.log(`  MCP Server -> ${join(pluginDest, 'src')}`);
+  copyDir(safetyDir, join(pluginDest, 'safety'));
+  console.log(`  Safety Policy -> ${join(pluginDest, 'safety')}`);
+  updateOpenCodeConfig(pluginDest);
+}
+
+function uninstallOpenCode() {
+  let removed = 0;
+
+  const skills = opencodeSkillsDir();
+  if (existsSync(skills)) {
+    for (const entry of readdirSync(skills, { withFileTypes: true })) {
+      if (entry.name.startsWith('huawei')) {
+        removeIfExists(join(skills, entry.name));
+        removed++;
+      }
+    }
+    console.log(`  Removed ${removed} skills`);
+  }
+
+  const commands = opencodeCommandsDir();
+  let cmdRemoved = 0;
+  if (existsSync(commands)) {
+    for (const entry of readdirSync(commands, { withFileTypes: true })) {
+      if (entry.name.startsWith('huawei')) {
+        removeIfExists(join(commands, entry.name));
+        cmdRemoved++;
+      }
+    }
+    if (cmdRemoved > 0) console.log(`  Removed ${cmdRemoved} commands`);
+  }
+
+  if (removeIfExists(opencodePluginsDir())) {
+    console.log('  Removed MCP server and safety policy');
+  }
+  removeOpenCodeConfig();
+}
+
+async function installCodexDesktop() {
+  const skillsSrc = join(PLUGIN_ROOT, 'skills');
+  const commandsSrc = join(PACKAGE_ROOT, 'integrations', 'opencode', 'commands');
+  const srcDir = join(PLUGIN_ROOT, 'src');
+  const safetyDir = join(PLUGIN_ROOT, 'safety');
+
+  copyDir(skillsSrc, codexDesktopSkillsDir());
+  console.log(`  Skills -> ${codexDesktopSkillsDir()}`);
+  copyDir(commandsSrc, codexDesktopCommandsDir());
+  console.log(`  Commands -> ${codexDesktopCommandsDir()}`);
+  mkdirSync(codexDesktopPluginsDir(), { recursive: true });
+  copyDir(srcDir, join(codexDesktopPluginsDir(), 'src'));
+  console.log(`  MCP Server -> ${join(codexDesktopPluginsDir(), 'src')}`);
+  copyDir(safetyDir, join(codexDesktopPluginsDir(), 'safety'));
+  console.log(`  Safety Policy -> ${join(codexDesktopPluginsDir(), 'safety')}`);
+
+  const mcpPath = join(codexDesktopPluginsDir(), 'src', 'mcp-server.mjs').replace(/\\/g, '/');
+  const configPath = codexDesktopConfigFile();
+  let config = {};
+  if (existsSync(configPath)) {
+    try { config = JSON.parse(readFileSync(configPath, 'utf8')); } catch {}
+  }
+  config.mcp = config.mcp || {};
+  config.mcp.huaweicloud = {
+    type: 'local',
+    command: ['node', mcpPath],
+    enabled: true,
+  };
+  writeFileSync(configPath, JSON.stringify(config, null, 2));
+  console.log(`  Config updated: ${configPath}`);
+}
+
+function uninstallCodexDesktop() {
+  const skillsDir = codexDesktopSkillsDir();
+  let removed = 0;
+  if (existsSync(skillsDir)) {
+    for (const entry of readdirSync(skillsDir, { withFileTypes: true })) {
+      if (entry.name.startsWith('huawei')) {
+        removeIfExists(join(skillsDir, entry.name));
+        removed++;
+      }
+    }
+    console.log(`  Removed ${removed} skills`);
+  }
+
+  const cmdDir = codexDesktopCommandsDir();
+  let cmdRemoved = 0;
+  if (existsSync(cmdDir)) {
+    for (const entry of readdirSync(cmdDir, { withFileTypes: true })) {
+      if (entry.name.startsWith('huawei')) {
+        removeIfExists(join(cmdDir, entry.name));
+        cmdRemoved++;
+      }
+    }
+    if (cmdRemoved > 0) console.log(`  Removed ${cmdRemoved} commands`);
+  }
+
+  if (removeIfExists(codexDesktopPluginsDir())) {
+    console.log('  Removed MCP server and safety policy');
+  }
+  const configPath = codexDesktopConfigFile();
+  if (existsSync(configPath)) {
+    let config = {};
+    try { config = JSON.parse(readFileSync(configPath, 'utf8')); } catch {}
+    if (config.mcp?.huaweicloud) {
+      delete config.mcp.huaweicloud;
+      if (Object.keys(config.mcp).length === 0) delete config.mcp;
+      writeFileSync(configPath, JSON.stringify(config, null, 2));
+      console.log('  Config cleaned');
+    }
+  }
+}
+
+function registerCodeartsMcp(configPath) {
+  const mcpPath = join(codeartsPluginsDir(), 'src', 'mcp-server.mjs').replace(/\\/g, '/');
+  let config = {};
+  if (existsSync(configPath)) {
+    try { config = JSON.parse(readFileSync(configPath, 'utf8')); } catch {}
+  }
+  config.mcpServers = config.mcpServers || {};
+  const env = { HUAWEICLOUD_AGENT_TOOLKIT_MODE: 'local' };
+  const hcloudBin = findHcloudBin();
+  if (hcloudBin) env.HCLOUD_BIN = hcloudBin.replace(/\\/g, '/');
+  config.mcpServers.huaweicloud = {
+    command: 'node',
+    args: [mcpPath],
+    env,
+    enabled: true,
+  };
+  mkdirSync(dirname(configPath), { recursive: true });
+  writeFileSync(configPath, JSON.stringify(config, null, 2));
+  console.log(`  MCP config updated: ${configPath}`);
+}
+
+async function installCodeArts() {
+  const skillsSrc = join(PLUGIN_ROOT, 'skills');
+  const srcDir = join(PLUGIN_ROOT, 'src');
+  const safetyDir = join(PLUGIN_ROOT, 'safety');
+
+  copyDir(skillsSrc, codeartsSkillsDir());
+  console.log(`  Skills -> ${codeartsSkillsDir()}`);
+  copyDir(skillsSrc, codeartsProjectSkillsDir());
+  console.log(`  Skills -> ${codeartsProjectSkillsDir()}`);
+
+  const pluginDest = codeartsPluginsDir();
+  copyDir(srcDir, join(pluginDest, 'src'));
+  console.log(`  MCP Server -> ${join(pluginDest, 'src')}`);
+  copyDir(safetyDir, join(pluginDest, 'safety'));
+  console.log(`  Safety Policy -> ${join(pluginDest, 'safety')}`);
+
+  registerCodeartsMcp(codeartsMcpSettingsFile());
+  registerCodeartsMcp(codeartsProjectMcpSettingsFile());
+}
+
+function uninstallCodeArts() {
+  let removed = 0;
+  for (const skillsDir of [codeartsSkillsDir(), codeartsProjectSkillsDir()]) {
+    if (!existsSync(skillsDir)) continue;
+    for (const entry of readdirSync(skillsDir, { withFileTypes: true })) {
+      if (entry.name.startsWith('huawei')) {
+        removeIfExists(join(skillsDir, entry.name));
+        removed++;
+      }
+    }
+  }
+  if (removed > 0) console.log(`  Removed ${removed} skills`);
+
+  if (removeIfExists(codeartsPluginsDir())) {
+    console.log('  Removed MCP server and safety policy');
+  }
+  for (const configPath of [codeartsMcpSettingsFile(), codeartsProjectMcpSettingsFile()]) {
+    if (!existsSync(configPath)) continue;
+    let config = {};
+    try { config = JSON.parse(readFileSync(configPath, 'utf8')); } catch {}
+    if (config.mcpServers?.huaweicloud) {
+      delete config.mcpServers.huaweicloud;
+      if (Object.keys(config.mcpServers).length === 0) delete config.mcpServers;
+      writeFileSync(configPath, JSON.stringify(config, null, 2));
+      console.log(`  Config cleaned: ${configPath}`);
+    }
+  }
+}
+
+function codeartsStatus() {
+  const pluginDir = codeartsPluginsDir();
+  console.log(`  MCP Server: ${existsSync(join(pluginDir, 'src', 'mcp-server.mjs')) ? '\x1b[32mInstalled\x1b[0m' : '\x1b[31mNot installed\x1b[0m'}`);
+  console.log(`  Safety Policy: ${existsSync(join(pluginDir, 'safety', 'policy.json')) ? '\x1b[32mInstalled\x1b[0m' : '\x1b[31mNot installed\x1b[0m'}`);
+  let skillCount = 0;
+  if (existsSync(codeartsSkillsDir())) {
+    skillCount = readdirSync(codeartsSkillsDir(), { withFileTypes: true })
+      .filter((d) => d.isDirectory() && d.name.startsWith('huawei')).length;
+  }
+  console.log(`  Skills: ${skillCount > 0 ? `\x1b[32m${skillCount} installed\x1b[0m` : '\x1b[31mNot installed\x1b[0m'}`);
+  if (existsSync(codeartsMcpSettingsFile())) {
+    try {
+      const config = JSON.parse(readFileSync(codeartsMcpSettingsFile(), 'utf8'));
+      console.log(`  MCP config: ${config.mcpServers?.huaweicloud ? '\x1b[32mConfigured\x1b[0m' : '\x1b[31mNot configured\x1b[0m'}`);
+    } catch {
+      console.log(`  MCP config: \x1b[31mInvalid\x1b[0m`);
+    }
+  }
+}
+
+function opencodeStatus() {
+  const pluginDir = opencodePluginsDir();
+  const skillsDir = opencodeSkillsDir();
+  console.log(`  MCP Server: ${existsSync(join(pluginDir, 'src', 'mcp-server.mjs')) ? '\x1b[32mInstalled\x1b[0m' : '\x1b[31mNot installed\x1b[0m'}`);
+  console.log(`  Safety Policy: ${existsSync(join(pluginDir, 'safety', 'policy.json')) ? '\x1b[32mInstalled\x1b[0m' : '\x1b[31mNot installed\x1b[0m'}`);
+  let skillCount = 0;
+  if (existsSync(skillsDir)) {
+    skillCount = readdirSync(skillsDir, { withFileTypes: true })
+      .filter((d) => d.isDirectory() && d.name.startsWith('huawei')).length;
+  }
+  console.log(`  Skills: ${skillCount > 0 ? `\x1b[32m${skillCount} installed\x1b[0m` : '\x1b[31mNot installed\x1b[0m'}`);
+  const configPath = opencodeConfigFile();
+  if (existsSync(configPath)) {
+    try {
+      const config = JSON.parse(readFileSync(configPath, 'utf8'));
+      console.log(`  MCP config: ${config.mcp?.huaweicloud ? '\x1b[32mConfigured\x1b[0m' : '\x1b[31mNot configured\x1b[0m'}`);
+    } catch {
+      console.log(`  MCP config: \x1b[31mInvalid\x1b[0m`);
+    }
+  }
+}
+
+function parseTarget() {
+  const idx = process.argv.indexOf('--target');
+  if (idx < 0) return 'opencode';
+  const val = (process.argv[idx + 1] || '').toLowerCase();
+  if (val === 'codex') return 'codex';
+  if (val === 'codex-desktop') return 'codex-desktop';
+  if (val === 'codearts') return 'codearts';
+  if (val === 'all') return 'all';
+  return 'opencode';
+}
+
+async function cmdInstall() {
+  const target = parseTarget();
+  console.log(BANNER);
+  console.log(`Installing HuaweiCloud DevKit${target !== 'opencode' ? ` for ${target}` : ''}...\n`);
+  checkNode();
+
+  if (target === 'opencode' || target === 'all') {
+    console.log('[OpenCode]');
+    await installOpenCode();
+  }
+  if (target === 'codex-desktop' || target === 'all') {
+    console.log('\n[Codex Desktop]');
+    await installCodexDesktop();
+  }
+  if (target === 'codearts' || target === 'all') {
+    console.log('\n[CodeArts]');
+    await installCodeArts();
+  }
+  if (target === 'codex' || target === 'all') {
+    console.log('\n[Codex]');
+    if (!hasCodexCLI()) {
+      if (target === 'codex') {
+        console.log(`  \x1b[31mCodex CLI not found. Install Codex first: https://github.com/openai/codex-cli\x1b[0m`);
+        console.log(`  Then re-run: npx huaweicloud-devkit install --target codex`);
+        process.exit(1);
+      }
+      console.log(`  \x1b[33mCodex CLI not found. Skipping Codex.\x1b[0m`);
+      console.log('  Install Codex CLI to enable: npx huaweicloud-devkit install --target codex');
+    } else {
+      installCodex();
+    }
+  }
+
+  console.log(`\n\x1b[32mInstallation complete!\x1b[0m`);
+  const appName = target === 'codearts' ? 'CodeArts'
+    : target === 'codex-desktop' ? 'Codex Desktop'
+    : target === 'codex' ? 'Codex' : 'OpenCode';
+  const pad = ' '.repeat(24 - appName.length);
+  console.log(`\n\x1b[1m\x1b[33m╔══════════════════════════════════════════════════════╗`);
+  console.log(`\x1b[1m\x1b[33m║  MCP 工具在重启 ${appName} 会话后才生效${pad}║`);
+  console.log(`\x1b[1m\x1b[33m║  关闭当前会话 → 重新打开，直接描述华为云任务即可      ║`);
+  console.log(`\x1b[1m\x1b[33m║  重启前请勿执行 hcloud 命令，避免 AK/SK 泄露         ║`);
+  console.log(`\x1b[1m\x1b[33m╚══════════════════════════════════════════════════════╝\x1b[0m`);
+
+  const hcloudOk = checkHcloud();
+  if (!hcloudOk) {
+    console.log(`\n\x1b[33mKooCLI (hcloud) is not installed.`);
+    console.log(`  Run: npx huaweicloud-devkit install-hcloud\x1b[0m`);
+  } else {
+    console.log(`\nKooCLI (hcloud) detected.`);
+  }
+
+  console.log(`\nAfter restart + hcloud setup, run: npx huaweicloud-devkit doctor`);
+
+  // Write install marker for doctor to detect
+  const markerDir = target === 'codearts' ? codeartsPluginsDir() : opencodePluginsDir();
+  writeFileSync(join(markerDir, '.installed'), new Date().toISOString());
+  if (target === 'opencode' || target === 'all') {
+    console.log('Or describe your Huawei Cloud task in OpenCode');
+  }
+  if (target === 'codearts' || target === 'all') {
+    console.log('Or describe your Huawei Cloud task in CodeArts');
+  }
+  if (target === 'codex' || target === 'all') {
+    console.log('Or mention @huaweicloud-core in Codex');
+  }
+}
+
+async function cmdUninstall() {
+  const target = parseTarget();
+  console.log(BANNER);
+  console.log(`Uninstalling HuaweiCloud DevKit${target !== 'opencode' ? ` from ${target}` : ''}...\n`);
+
+  if (target === 'opencode' || target === 'all') {
+    console.log('[OpenCode]');
+    await uninstallOpenCode();
+  }
+  if (target === 'codearts' || target === 'all') {
+    console.log('\n[CodeArts]');
+    uninstallCodeArts();
+  }
+  if (target === 'codex' || target === 'all') {
+    console.log('\n[Codex]');
+    uninstallCodexDesktop();
+    if (!hasCodexCLI()) {
+      console.log('  \x1b[33mCodex CLI not found. Run "npm uninstall -g codex" to fully remove.\x1b[0m');
+    } else {
+      uninstallCodex();
+    }
+  }
+  console.log(`\n\x1b[32mUninstall complete.\x1b[0m`);
+}
+
+async function cmdStatus() {
+  const target = parseTarget();
+  console.log(BANNER);
+  console.log(`HuaweiCloud DevKit Status\n`);
+
+  if (target === 'opencode' || target === 'all') {
+    console.log('[OpenCode]');
+    opencodeStatus();
+  }
+  if (target === 'codearts' || target === 'all') {
+    console.log('\n[CodeArts]');
+    codeartsStatus();
+  }
+  if (target === 'codex' || target === 'all') {
+    console.log('\n[Codex]');
+    if (!hasCodexCLI()) {
+      console.log('  \x1b[33mCodex CLI not found.\x1b[0m');
+    } else {
+      console.log(`  Plugin: ${codexStatus() ? '\x1b[32mInstalled\x1b[0m' : '\x1b[31mNot installed\x1b[0m'}`);
+    }
+  }
+  console.log('\nEnvironment:');
+  console.log(`  Node.js: ${process.version}`);
+  console.log(`  Platform: ${platform()}`);
+}
+
+async function cmdDoctor() {
+  console.log(BANNER);
+  console.log('HuaweiCloud DevKit Doctor\n');
+
+  let pass = 0, warn = 0, fail = 0;
+
+  function check(label, ok, msg) {
+    if (ok) { console.log(`  \x1b[32m[PASS]\x1b[0m ${label}`); pass++; }
+    else { console.log(`  \x1b[31m[FAIL]\x1b[0m ${label} — ${msg}`); fail++; }
+  }
+
+  // Node.js
+  check('Node.js >= 20', process.versions.node.split('.')[0] >= 20, 'Run: nvm install 20 && nvm use 20');
+
+  // OpenCode installed files
+  const pluginDir = opencodePluginsDir();
+  const mcpOk = existsSync(join(pluginDir, 'src', 'mcp-server.mjs'));
+  check('MCP server installed', mcpOk, 'Run: npx huaweicloud-devkit-test install');
+
+  if (mcpOk) {
+    // Try to start MCP server briefly
+    const test = spawnSync('node', [join(pluginDir, 'src', 'mcp-server.mjs')], {
+      env: { ...process.env, HUAWEICLOUD_AGENT_TOOLKIT_MODE: 'local' },
+      timeout: 3000, stdio: 'pipe', windowsHide: true,
+    });
+    // MCP server reads stdin for JSON-RPC, so it will hang briefly then get killed
+    // We just check that the process spawned OK
+    check('MCP server can start', true, '');
+  }
+
+  const safetyOk = existsSync(join(pluginDir, 'safety', 'policy.json'));
+  check('Safety policy installed', safetyOk, 'Run: npx huaweicloud-devkit-test install');
+
+  const opencodeCfg = opencodeConfigFile();
+  let mcpConfigured = false;
+  if (existsSync(opencodeCfg)) {
+    try {
+      const cfg = JSON.parse(readFileSync(opencodeCfg, 'utf8'));
+      mcpConfigured = !!(cfg.mcp && cfg.mcp.huaweicloud);
+    } catch {}
+  }
+  check('OpenCode MCP configured', mcpConfigured, `Add MCP to ${opencodeCfg} — run: npx huaweicloud-devkit-test install`);
+
+  // hcloud CLI
+  const hcloudBin = findHcloudBin() || (process.env.HCLOUD_BIN || 'hcloud');
+  const hcloudCheck = spawnSync(`"${hcloudBin}" version`, [], { shell: true, windowsHide: true, stdio: 'pipe', timeout: 5000, input: 'y\n' });
+  const hcloudOut = (hcloudCheck.stdout || '').toString() + (hcloudCheck.stderr || '').toString();
+  const hcloudOk = hcloudCheck.status === 0 && /KooCLI|Current.*version|当前KooCLI/i.test(hcloudOut);
+  check('hcloud CLI installed', hcloudOk, 'Run: npx huaweicloud-devkit install-hcloud');
+
+  // CodeArts sandbox mode warning
+  const sandboxMode = detectCodeartsSandbox();
+  if (sandboxMode === 'sandbox') {
+    console.log(`  \x1b[33m[WARN]\x1b[0m CodeArts sandbox mode active (bash_mode: sandbox)`);
+    console.log(`        KooCLI may fail to write config in ~/.hcloud/ and hang on the privacy agreement.`);
+    console.log(`        Fix: disable sandbox (Settings → Permissions) or use a terminal outside CodeArts.`);
+    warn++;
+  }
+
+  if (hcloudOk) {
+    const ver = (hcloudCheck.stdout.toString().match(/(\d+\.\d+\.\d+)/) || [])[1] || 'unknown';
+    console.log(`    Version: ${ver}`);
+
+    // Check auth
+    const authCheck = spawnSync(`"${hcloudBin}" configure list`, [], { shell: true, windowsHide: true, stdio: 'pipe', timeout: 5000 });
+    const hasAuth = authCheck.status === 0 && /access.?key/i.test(authCheck.stdout.toString());
+    check('hcloud credentials configured', hasAuth, 'Run: hcloud configure init');
+  }
+
+  // Skills
+  const skillsOptions = [opencodeSkillsDir(), codexDesktopSkillsDir(), codeartsSkillsDir()];
+  let skillCount = 0, skillsDir = '';
+  for (const dir of skillsOptions) {
+    if (!existsSync(dir)) continue;
+    const count = readdirSync(dir, { withFileTypes: true })
+      .filter((d) => d.isDirectory() && d.name.startsWith('huawei')).length;
+    if (count > skillCount) { skillCount = count; skillsDir = dir; }
+  }
+  const skillsOk = skillCount >= 6;
+  check(`Skills installed (${skillCount})`, skillsOk, 'Run: npx huaweicloud-devkit-test install');
+
+  console.log(`\nResults: ${pass} pass, ${warn} warn, ${fail} fail`);
+
+  if (mcpConfigured && !hcloudOk) {
+    console.log('\n\x1b[33mMCP is configured but hcloud is not installed. Install hcloud then restart OpenCode.\x1b[0m');
+  }
+  if (fail > 0) {
+    console.log('\x1b[33mFix failures above, then restart your OpenCode / Codex session.\x1b[0m');
+  }
+  if (fail === 0 && mcpConfigured) {
+    console.log('\n\x1b[32mAll checks passed.\x1b[0m Restart OpenCode, then describe your Huawei Cloud task');
+  }
+
+  // Detect "installed but not restarted" scenario
+  const installedMarker = join(opencodePluginsDir(), '.installed');
+  if (mcpConfigured && existsSync(installedMarker)) {
+    console.log(`\n\x1b[1m\x1b[31m╔══════════════════════════════════════════╗`);
+    console.log(`\x1b[1m\x1b[31m║  请重启 OpenCode！MCP 工具尚未激活       ║`);
+    console.log(`\x1b[1m\x1b[31m║  关闭当前会话 → 重新打开即可             ║`);
+    console.log(`\x1b[1m\x1b[31m╚══════════════════════════════════════════╝\x1b[0m`);
+  }
+}
+
+async function cmdUpdate() {
+  console.log(BANNER);
+  const target = parseTarget();
+
+  if (target === 'opencode' || target === 'all') {
+    if (!existsSync(join(opencodePluginsDir(), 'src', 'mcp-server.mjs')) && !codexStatus()) {
+      console.log('\x1b[33mNot installed. Use "install" command first.\x1b[0m');
+      return;
+    }
+  }
+
+  await cmdUninstall();
+  console.log('');
+  await cmdInstall();
+}
+
+async function cmdReinstall() {
+  console.log(BANNER);
+  if (!(await confirm('This will remove and reinstall all HuaweiCloud DevKit files. Continue?'))) {
+    console.log('Cancelled.');
+    return;
+  }
+  confirmed = true;
+  await cmdUninstall();
+  console.log('');
+  await cmdInstall();
+}
+
+let confirmed = false;
+async function confirm(msg) {
+  if (confirmed) return true;
+  const rl = createInterface({ input: process.stdin, output: process.stdout });
+  return new Promise((ok) => {
+    rl.question(`${msg} [y/N] `, (a) => {
+      rl.close();
+      ok(a.toLowerCase() === 'y' || a.toLowerCase() === 'yes');
+    });
+  });
+}
+
+async function cmdInstallHcloud() {
+  console.log(BANNER);
+  console.log('Installing KooCLI (hcloud)...\n');
+
+  const os = platform();
+  const arch = process.arch;
+  const baseUrl = 'https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest';
+  const installDir = os === 'win32'
+    ? join(homedir(), 'hcloud')
+    : join(homedir(), '.local', 'bin');
+
+  if (os === 'win32') {
+    const url = `${baseUrl}/huaweicloud-cli-windows-amd64.zip`;
+    const zipPath = join(installDir, 'hcloud.zip');
+
+    console.log(`[Windows] Auto-installing to ${installDir}...`);
+
+    try {
+      mkdirSync(installDir, { recursive: true });
+
+      // Download
+      console.log(`  Downloading ${url}...`);
+      const psCmd = `[Net.ServicePointManager]::SecurityProtocol=[Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri '${url}' -OutFile '${zipPath}' -UseBasicParsing`;
+      const dl = spawnSync('powershell', ['-NoProfile', '-Command', psCmd], { stdio: 'inherit', windowsHide: true, timeout: 180000 });
+      if (dl.status !== 0) throw new Error(`下载失败 (PowerShell exit ${dl.status})`);
+
+      // Extract
+      console.log('  Extracting...');
+      const ex = spawnSync('powershell', ['-NoProfile', '-Command', `Expand-Archive -Path '${zipPath}' -DestinationPath '${installDir}' -Force`], { stdio: 'inherit', windowsHide: true, timeout: 60000 });
+      if (ex.status !== 0) throw new Error(`解压失败 (PowerShell exit ${ex.status})`);
+      if (!existsSync(join(installDir, 'hcloud.exe'))) throw new Error('hcloud.exe 未生成，可能已被安全软件拦截');
+
+      // Clean up zip
+      rmSync(zipPath, { force: true });
+
+      // Add to PATH
+      console.log('  Adding to user PATH...');
+      spawnSync('setx', ['PATH', `${process.env.PATH};${installDir}`], { stdio: 'inherit', windowsHide: true });
+
+      console.log(`\n\x1b[32mInstall complete.\x1b[0m`);
+      console.log(`  Verify: ${join(installDir, 'hcloud.exe')} version`);
+
+      // Auto-accept the KooCLI privacy agreement so first run does not hang
+      console.log('\n  Accepting KooCLI privacy agreement...');
+      const hcloudBin = join(installDir, 'hcloud.exe');
+      if (acceptKooCliPrivacy(hcloudBin)) {
+        console.log('  \x1b[32mPrivacy agreement accepted. KooCLI ready.\x1b[0m');
+      } else {
+        console.log('  \x1b[33m无法自动接受隐私协议（可能因沙箱阻止写入配置目录）。\x1b[0m');
+        if (detectCodeartsSandbox() === 'sandbox') {
+          printSandboxWarning('KooCLI 需要写入配置目录 (如 ~/.hcloud/root) 以保存隐私协议同意状态，但沙箱模式阻止了写入。');
+        } else {
+          console.log('  请在码道外终端运行一次: hcloud version 并按提示输入 y');
+        }
+      }
+
+      console.log('  Or restart terminal and: hcloud version');
+    } catch (e) {
+      console.log(`\n\x1b[33mAuto-install failed: ${e.message}\x1b[0m`);
+      console.log(`  Manual: download ${url}, unzip to ${installDir}, add to PATH`);
+      console.log(`  Guide: https://support.huaweicloud.com/qs-hcli/hcli_02_003_01.html`);
+      if (detectCodeartsSandbox() === 'sandbox') {
+        printSandboxWarning('沙箱模式拦截了 KooCLI 自动安装（无法创建/写入安装目录）。');
+      }
+    }
+  } else if (os === 'linux') {
+    console.log('[Linux] One-liner install:');
+    console.log('  curl -sSL https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest/hcloud_install.sh -o ./hcloud_install.sh && bash ./hcloud_install.sh -y');
+    console.log(`\nOr manual: ${arch === 'arm64' ? 'ARM64' : 'AMD64'}`);
+    const pkg = arch === 'arm64' ? 'linux-arm64' : 'linux-amd64';
+    console.log(`  curl -LO "${baseUrl}/huaweicloud-cli-${pkg}.tar.gz"`);
+    console.log(`  tar -zxvf huaweicloud-cli-${pkg}.tar.gz`);
+    console.log(`  mv hcloud ~/.local/bin/`);
+    console.log(`  hcloud version`);
+    console.log(`\nFull guide: https://support.huaweicloud.com/qs-hcli/hcli_02_003_02.html`);
+  } else if (os === 'darwin') {
+    console.log('[macOS] One-liner install:');
+    console.log('  curl -sSL https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest/hcloud_install.sh -o ./hcloud_install.sh && bash ./hcloud_install.sh -y');
+    console.log(`\nOr manual: ${arch === 'arm64' ? 'ARM64 (Apple Silicon)' : 'AMD64 (Intel)'}`);
+    const pkg = arch === 'arm64' ? 'mac-arm64' : 'mac-amd64';
+    console.log(`  curl -LO "${baseUrl}/huaweicloud-cli-${pkg}.tar.gz"`);
+    console.log(`  tar -zxvf huaweicloud-cli-${pkg}.tar.gz`);
+    console.log(`  mv hcloud /usr/local/bin/`);
+    console.log(`  hcloud version`);
+    console.log(`\nFull guide: https://support.huaweicloud.com/qs-hcli/hcli_02_003_03.html`);
+  }
+
+  console.log('\nAfter install, set HCLOUD_BIN if hcloud is not on PATH.');
+  console.log('\n\x1b[1m\x1b[33m=== Configure credentials SAFELY ===\x1b[0m');
+  console.log('  Interactive (safe): hcloud configure init');
+  console.log('  NEVER: hcloud configure set --cli-access-key=xxx  (AK/SK in shell history!)');
+  console.log('\nThen run: npx huaweicloud-devkit doctor');
+}
+
+async function main() {
+  const cmd = process.argv[2] || 'help';
+
+  switch (cmd) {
+    case 'install':
+    case 'i':
+      await cmdInstall();
+      break;
+    case 'uninstall':
+    case 'remove':
+      await cmdUninstall();
+      break;
+    case 'update':
+    case 'upgrade':
+      await cmdUpdate();
+      break;
+    case 'reinstall':
+      await cmdReinstall();
+      break;
+    case 'status':
+    case 'info':
+      await cmdStatus();
+      break;
+    case 'doctor':
+    case 'check':
+      await cmdDoctor();
+      break;
+    case 'install-hcloud':
+      await cmdInstallHcloud();
+      break;
+    case 'help':
+    case '--help':
+    case '-h':
+    default:
+      console.log(BANNER);
+      console.log('Usage: npx huaweicloud-devkit <command> [--target <opencode|codex|codearts|all>]\n');
+      console.log('Commands:');
+      console.log('  install      Install skills, MCP server, safety policy');
+      console.log('  uninstall    Remove installed files');
+      console.log('  update       Update to latest version');
+      console.log('  reinstall    Full clean reinstall');
+      console.log('  status       Show installation status');
+      console.log('  doctor       Self-check: hcloud, MCP, skills, auth');
+      console.log('  install-hcloud  Show KooCLI install commands for your OS');
+      console.log('  help         Show this help');
+      console.log('\nOptions:');
+      console.log('  --target     Target agent: opencode (default), codex, codearts, all');
+      console.log('\nExamples:');
+      console.log('  npx huaweicloud-devkit install');
+      console.log('  npx huaweicloud-devkit install --target codex');
+      console.log('  npx huaweicloud-devkit install --target codearts');
+      console.log('  npx huaweicloud-devkit install --target all');
+      break;
+  }
+}
+
+main().catch((e) => {
+  console.error(`\x1b[31mError: ${e.message}\x1b[0m`);
+  process.exit(1);
+});