huaweicloud-devkit 1.0.3-next.0 → 1.1.0-next.0

package/README.md

@@ -8,7 +8,7 @@
 
 Help AI coding agents use Huawei Cloud safely and accurately — a single integration that gives agents cloud knowledge, CLI tooling, and safety guardrails.
 
-Supports OpenCode, CodeArts Agent, WorkBuddy, DeepSeek Harness (DSH), OfficeAce, and OpenClaw.
+Supports OpenCode, CodeArts Agent, WorkBuddy, DeepSeek Harness (DSH), OfficeAce, OpenClaw, and AtomCode.
 
 ## Prerequisites
 
@@ -118,6 +118,21 @@ npx --yes huaweicloud-devkit uninstall --target openclaw
 rm -rf ~/.npm/_npx/  # Linux/macOS only; Windows path TBD
 ```
 
+### AtomCode
+
+```bash
+npx --yes huaweicloud-devkit install --target atomcode
+```
+
+**Restart the AtomCode session** after installation.
+
+```bash
+npx --yes huaweicloud-devkit doctor --target atomcode
+npx --yes huaweicloud-devkit status --target atomcode
+npx --yes huaweicloud-devkit update --target atomcode
+npx --yes huaweicloud-devkit uninstall --target atomcode
+```
+
 ### Other Agents
 
 Any agent that supports MCP can use the standard config:

package/README.zh-CN.md

@@ -8,7 +8,7 @@
 
 帮助 AI 编码助手安全、准确地使用华为云——一站式集成云知识、CLI 工具和安全护栏。
 
-支持 OpenCode、码道（CodeArts Agent）、WorkBuddy、DeepSeek Harness（DSH）、OfficeAce、OpenClaw。
+支持 OpenCode、码道（CodeArts Agent）、WorkBuddy、DeepSeek Harness（DSH）、OfficeAce、OpenClaw、AtomCode。
 
 ## 前置条件
 
@@ -118,6 +118,21 @@ npx --yes huaweicloud-devkit uninstall --target openclaw
 rm -rf ~/.npm/_npx/  # 仅 Linux/macOS；Windows 路径待确认
 ```
 
+### AtomCode
+
+```bash
+npx --yes huaweicloud-devkit install --target atomcode
+```
+
+安装后**重启 AtomCode 会话**。
+
+```bash
+npx --yes huaweicloud-devkit doctor --target atomcode
+npx --yes huaweicloud-devkit status --target atomcode
+npx --yes huaweicloud-devkit update --target atomcode
+npx --yes huaweicloud-devkit uninstall --target atomcode
+```
+
 ### 其他 Agent
 
 任何支持 MCP 协议的 Agent，直接使用标准 MCP 配置：

package/bin/setup.cjs

@@ -4,7 +4,8 @@ const path = require('node:path');
 const fileUrl = require('node:url').pathToFileURL(
   path.join(__dirname, '..', 'plugins', 'huaweicloud-core', 'src', 'setup-cli.mjs'),
 ).href;
-import(fileUrl).catch((e) => {
-  console.error(e.message);
+
+import(fileUrl).catch((error) => {
+  console.error(error.message);
   process.exit(1);
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "huaweicloud-devkit",
-  "version": "1.0.3-next.0",
+  "version": "1.1.0-next.0",
   "description": "Agent toolkit that helps coding agents use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities safely and accurately.",
   "type": "module",
   "files": [
@@ -36,7 +36,9 @@
     "@eslint/js": "^10.0.1",
     "eslint": "^10.8.1",
     "eslint-config-prettier": "^10.1.8",
+    "eslint-plugin-import-x": "^4.17.1",
     "eslint-plugin-n": "^18.3.0",
+    "eslint-plugin-unicorn": "^73.0.0",
     "globals": "^17.11.0",
     "markdownlint-cli2": "^0.23.2",
     "prettier": "^3.9.6"

package/plugins/huaweicloud-core/.claude-plugin/plugin.json

@@ -17,7 +17,7 @@
   "mcpServers": "./.mcp.json",
   "description": "Guide coding agents to use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities with safer execution and less context.",
   "skills": "./skills/",
-  "version": "1.0.3-next.0",
+  "version": "1.1.0-next.0",
   "author": {
     "name": "HuaweiCloud Mate",
     "url": "https://github.com/huaweicloud"

package/plugins/huaweicloud-core/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "huaweicloud-devkit",
-  "version": "1.0.3-next.0",
+  "version": "1.1.0-next.0",
   "description": "Guide coding agents to use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities with safer execution and less context.",
   "author": {
     "name": "HuaweiCloud Mate",

package/plugins/huaweicloud-core/.cursor-plugin/plugin.json

@@ -17,7 +17,7 @@
   "mcpServers": "./.mcp.json",
   "description": "Guide coding agents to use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities with safer execution and less context.",
   "skills": "./skills/",
-  "version": "1.0.3-next.0",
+  "version": "1.1.0-next.0",
   "author": {
     "name": "HuaweiCloud Mate",
     "url": "https://github.com/huaweicloud"

package/plugins/huaweicloud-core/.hermes-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "huaweicloud-devkit",
-  "version": "1.0.3-next.0",
+  "version": "1.1.0-next.0",
   "description": "Guide coding agents to use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities with safer execution and less context.",
   "author": {
     "name": "HuaweiCloud Mate",

package/plugins/huaweicloud-core/.workbuddy-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "huaweicloud-devkit",
-  "version": "1.0.3-next.0",
+  "version": "1.1.0-next.0",
   "description": "Guide coding agents to use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities with safer execution and less context.",
   "author": {
     "name": "HuaweiCloud Mate",

package/plugins/huaweicloud-core/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "name": "huaweicloud-devkit",
   "id": "huaweicloud-devkit",
   "displayName": "HuaweiCloud DevKit",
-  "version": "1.0.3-next.0",
+  "version": "1.1.0-next.0",
   "family": "bundle-plugin",
   "bundleFormat": "codex",
   "description": "Guide coding agents to use Huawei Cloud safely — KooCLI, APIs, SDKs, 28 MCP tools, skills, and safety guardrails.",

package/plugins/huaweicloud-core/src/auth/agent-registration.mjs

@@ -14,6 +14,7 @@ export const SUPPORTED_AGENT_TARGETS = [
   'officeace',
   'hermes',
   'openclaw',
+  'atomcode',
 ];
 
 function baseHome() {
@@ -169,6 +170,15 @@ function officeaceRegistered() {
   return hasMcp || hasSkills;
 }
 
+function atomcodeHome() {
+  return process.env.ATOMCODE_HOME || join(baseHome(), '.atomcode');
+}
+
+function atomcodeRegistered() {
+  const cfg = readJsonSafe(join(atomcodeHome(), 'mcp.json'));
+  return Boolean(cfg?.mcpServers?.['huaweicloud-devkit']);
+}
+
 function hermesHome() {
   if (process.env.HERMES_HOME) return process.env.HERMES_HOME;
   // Hermes on Windows stores under LOCALAPPDATA, not ~/.hermes
@@ -202,6 +212,7 @@ export function getAgentRegistrationStatuses(target = 'all') {
     if (agent === 'dsh') configured = dshRegistered();
     if (agent === 'officeace') configured = officeaceRegistered();
     if (agent === 'hermes') configured = hermesRegistered();
+    if (agent === 'atomcode') configured = atomcodeRegistered();
     result.agents[agent] = { configured };
   }
   return result;

package/plugins/huaweicloud-core/src/auth/service.mjs

@@ -1,5 +1,6 @@
 import { existsSync } from 'node:fs';
 import { spawnSync } from 'node:child_process';
+
 import { getAgentRegistrationStatuses } from './agent-registration.mjs';
 import { globalCredentialsPath, obsConfigPath, readGlobalCredentials, writeObsConfig } from './credentials.mjs';
 

package/plugins/huaweicloud-core/src/hcloud-cli.mjs

@@ -1,4 +1,5 @@
 import { spawn } from 'node:child_process';
+
 import { classifyHcloudArgs, redactSecrets, assertAllowed } from './safety-policy.mjs';
 import { getProxySettings } from './proxy/proxy-config.mjs';
 
@@ -9,7 +10,7 @@ const DEFAULT_MAX_RETRIES = 1;
 export function planHcloudCommand(args, options = {}) {
   const normalizedArgs = Array.isArray(args) ? args.map(String) : [];
   const classification = classifyHcloudArgs(normalizedArgs, options);
-  const command = ['hcloud', ...normalizedArgs].map(quoteShellArg).join(' ');
+  const command = ['hcloud', ...normalizedArgs].map((arg) => quoteShellArg(arg)).join(' ');
   const warnings = planningWarnings(normalizedArgs);
   const paramValidation = validateRequiredParams(normalizedArgs);
   if (paramValidation.missing.length > 0) {

package/plugins/huaweicloud-core/src/icon-library.mjs

@@ -1,6 +1,7 @@
 import { readFileSync } from 'node:fs';
 import { join, dirname } from 'node:path';
 import { fileURLToPath } from 'node:url';
+
 import { getProxyDispatcher } from './proxy/proxy-agent.mjs';
 
 const __dirname = dirname(fileURLToPath(import.meta.url));
@@ -113,7 +114,11 @@ export async function getServiceIcon(service = '', category = '') {
     };
   }
   const { manifest, source } = await loadManifest();
-  const tokens = query.replace(/[,;]/g, ' ').split(/\s+/).filter(Boolean).map(normalizeToken);
+  const tokens = query
+    .replace(/[,;]/g, ' ')
+    .split(/\s+/)
+    .filter(Boolean)
+    .map((t) => normalizeToken(t));
 
   const index = { aliases: {}, tags: {}, categories: {}, descriptions: {} };
   for (const icon of manifest.icons) {

package/plugins/huaweicloud-core/src/mcp-server.mjs

@@ -3,6 +3,7 @@ import { stdin, stdout } from 'node:process';
 import { rmSync, existsSync, readFileSync } from 'node:fs';
 import { resolve, dirname, join } from 'node:path';
 import { fileURLToPath } from 'node:url';
+
 import { TOOL_DEFINITIONS, callTool } from './tools.mjs';
 
 try {

package/plugins/huaweicloud-core/src/safety-policy.mjs

@@ -1,6 +1,7 @@
 import { readFileSync } from 'node:fs';
 import { dirname, join } from 'node:path';
 import { fileURLToPath } from 'node:url';
+
 import { evaluateCommandRisk, mergeRiskDecision } from './risk-rule-engine.mjs';
 
 const __dirname = dirname(fileURLToPath(import.meta.url));

package/plugins/huaweicloud-core/src/sandbox/hwlink-api.mjs

@@ -1,4 +1,5 @@
 import crypto from 'node:crypto';
+
 import { resolveCredentialsWithRuntime } from '../auth/credentials.mjs';
 import { getProxyDispatcher } from '../proxy/proxy-agent.mjs';
 

package/plugins/huaweicloud-core/src/sandbox/session-manager.mjs

@@ -6,6 +6,7 @@ import { createHash, randomBytes } from 'node:crypto';
 import { join, dirname, basename } from 'node:path';
 import { tmpdir } from 'node:os';
 import { fileURLToPath, pathToFileURL } from 'node:url';
+
 import { createConnection, getCredentials } from './hwlink-api.mjs';
 import { getWebSocketImpl } from '../proxy/proxy-agent.mjs';
 
@@ -16,6 +17,10 @@ export const WS_EXEC_INDEX_URL = pathToFileURL(join(__dirname, '..', 'ws-exec',
 
 let currentWorkspaceId = process.env.HW_WORKSPACE_ID || null;
 
+function getCurrentWorkspaceId() {
+  return currentWorkspaceId;
+}
+
 function setWorkspaceId(id) {
   currentWorkspaceId = id;
   process.env.HW_WORKSPACE_ID = id;
@@ -366,7 +371,7 @@ async function uploadViaTunnel(localPort, archivePath, archiveSize, archiveRemot
             }
             try {
               resolve(JSON.parse(body));
-            } catch (e) {
+            } catch (error) {
               reject(new Error(`invalid JSON response: ${body.slice(0, 200)}`));
             }
           });
@@ -387,7 +392,7 @@ async function uploadViaTunnel(localPort, archivePath, archiveSize, archiveRemot
         }
         try {
           resolve(JSON.parse(body));
-        } catch (e) {
+        } catch (error) {
           reject(new Error(`invalid JSON response: ${body.slice(0, 200)}`));
         }
       });
@@ -431,8 +436,8 @@ async function waitForServerReady(localPort) {
         return;
       }
       uploadLog(`waitForServerReady: health check returned non-200 (retry ${i + 1})`);
-    } catch (err) {
-      uploadLog(`waitForServerReady: health check failed: ${err.message} (retry ${i + 1})`);
+    } catch (error) {
+      uploadLog(`waitForServerReady: health check failed: ${error.message} (retry ${i + 1})`);
     }
     await new Promise((r) => setTimeout(r, SERVER_HEALTH_INTERVAL_MS));
   }
@@ -615,4 +620,4 @@ export async function closeAllSessions() {
   }
 }
 
-export { currentWorkspaceId, setWorkspaceId, runNodeExec };
+export { getCurrentWorkspaceId, setWorkspaceId, runNodeExec };

package/plugins/huaweicloud-core/src/search-market.mjs

@@ -62,8 +62,8 @@ async function fetchJson(url, label = '') {
       return JSON.parse(decoded);
     }
     return data;
-  } catch (e) {
-    throw new Error(`Failed to fetch ${label}: ${e.message}`, { cause: e });
+  } catch (error) {
+    throw new Error(`Failed to fetch ${label}: ${error.message}`, { cause: error });
   } finally {
     clearTimeout(timer);
   }
@@ -100,7 +100,7 @@ function expandKeywords(rawKeyword, cnEnMap) {
       if (en === lower) expanded.push(cn);
     }
   }
-  const unique = [...new Set(expanded)].sort();
+  const unique = [...new Set(expanded)].sort((a, b) => a.localeCompare(b));
   const specific = unique.filter((kw) => !isGeneric(kw));
   const generic = unique.filter((kw) => isGeneric(kw));
   return [specific, generic];

package/plugins/huaweicloud-core/src/setup-cli.mjs

@@ -15,6 +15,7 @@ import { createInterface } from 'node:readline';
 import { spawnSync } from 'node:child_process';
 import { randomUUID } from 'node:crypto';
 import Database from 'better-sqlite3';
+
 import { getAuthStatus, syncAuth } from './auth/service.mjs';
 import { SUPPORTED_AGENT_TARGETS } from './auth/agent-registration.mjs';
 import {
@@ -112,6 +113,19 @@ function workbuddyPluginsDir() {
   return join(homedir(), '.workbuddy', 'huaweicloud-plugins');
 }
 
+function atomcodeHome() {
+  return process.env.ATOMCODE_HOME || join(homedir(), '.atomcode');
+}
+function atomcodeSkillsDir() {
+  return join(atomcodeHome(), 'skills');
+}
+function atomcodeMcpConfigFile() {
+  return join(atomcodeHome(), 'mcp.json');
+}
+function atomcodePluginsDir() {
+  return join(atomcodeHome(), 'huaweicloud-plugins');
+}
+
 function dshRoot() {
   return process.env.DSH_HOME || join(homedir(), '.dsh');
 }
@@ -248,13 +262,13 @@ function ensureOfficeaceMcpInSqlite() {
     }
     db.close();
     return true;
-  } catch (err) {
+  } catch (error) {
     if (db) {
       try {
         db.close();
       } catch {}
     }
-    console.log(`  \x1b[31mFailed to write MCP config: ${err.message}\x1b[0m`);
+    console.log(`  \x1b[31mFailed to write MCP config: ${error.message}\x1b[0m`);
     return false;
   }
 }
@@ -273,13 +287,13 @@ function removeOfficeaceMcpFromSqlite() {
       console.log(`  MCP config removed: ${dbPath}`);
     }
     db.close();
-  } catch (err) {
+  } catch (error) {
     if (db) {
       try {
         db.close();
       } catch {}
     }
-    console.log(`  \x1b[31mFailed to remove MCP config: ${err.message}\x1b[0m`);
+    console.log(`  \x1b[31mFailed to remove MCP config: ${error.message}\x1b[0m`);
   }
 }
 
@@ -476,8 +490,8 @@ function removeIfExists(p) {
     try {
       rmSync(p, { recursive: true, force: true });
       return true;
-    } catch (e) {
-      console.log(`  \x1b[33m[WARN]\x1b[0m Could not remove ${p}: ${e.message}`);
+    } catch (error) {
+      console.log(`  \x1b[33m[WARN]\x1b[0m Could not remove ${p}: ${error.message}`);
       return false;
     }
   }
@@ -1202,6 +1216,148 @@ function workbuddyStatus() {
   }
 }
 
+function ensureAtomcodeMcpConfig() {
+  const configPath = atomcodeMcpConfigFile();
+  const mcpPath = join(atomcodePluginsDir(), 'src', 'mcp-server.mjs').replace(/\\/g, '/');
+  const env = { HUAWEICLOUD_AGENT_TOOLKIT_MODE: 'local' };
+  const hcloudBin = findHcloudBin();
+  if (hcloudBin) env.HCLOUD_BIN = hcloudBin.replace(/\\/g, '/');
+  let config = {};
+  if (existsSync(configPath)) {
+    try {
+      config = JSON.parse(readFileSync(configPath, 'utf8'));
+    } catch {
+      console.log(
+        `  \x1b[33m[WARN]\x1b[0m Could not parse ${configPath}. Skipping MCP config write; ensure "mcpServers.huaweicloud-devkit" points to ${mcpPath}.`,
+      );
+      return false;
+    }
+    const existing = config.mcpServers?.['huaweicloud-devkit'];
+    if (
+      existing &&
+      existing.command === 'node' &&
+      Array.isArray(existing.args) &&
+      existing.args[0] === mcpPath &&
+      existing.timeout === 300000
+    ) {
+      console.log(`  MCP config unchanged: ${configPath}`);
+      return false;
+    }
+  }
+  config.mcpServers = config.mcpServers || {};
+  config.mcpServers['huaweicloud-devkit'] = {
+    command: 'node',
+    args: [mcpPath],
+    env,
+    timeout: 300000,
+  };
+  mkdirSync(dirname(configPath), { recursive: true });
+  writeFileSync(configPath, JSON.stringify(config, null, 2));
+  console.log(`  MCP config updated: ${configPath}`);
+  return true;
+}
+
+async function installAtomCode() {
+  const skillsSrc = join(PLUGIN_ROOT, 'skills');
+  const srcDir = join(PLUGIN_ROOT, 'src');
+  const safetyDir = join(PLUGIN_ROOT, 'safety');
+  const pluginDest = atomcodePluginsDir();
+
+  copyDir(skillsSrc, atomcodeSkillsDir());
+  console.log(`  Skills -> ${atomcodeSkillsDir()}`);
+
+  copyDir(srcDir, join(pluginDest, 'src'));
+  console.log(`  MCP Server -> ${join(pluginDest, 'src')}`);
+  copyDir(safetyDir, join(pluginDest, 'safety'));
+  console.log(`  Safety Policy -> ${join(pluginDest, 'safety')}`);
+
+  ensureAtomcodeMcpConfig();
+  installRuntimeDeps(pluginDest);
+}
+
+// Incremental update: overwrite copied files, prune stale ones, and only touch the config when necessary.
+async function updateAtomCode() {
+  const skillsSrc = join(PLUGIN_ROOT, 'skills');
+  const srcDir = join(PLUGIN_ROOT, 'src');
+  const safetyDir = join(PLUGIN_ROOT, 'safety');
+  const pluginDest = atomcodePluginsDir();
+
+  copyDir(skillsSrc, atomcodeSkillsDir());
+  const stale = pruneStale(atomcodeSkillsDir(), skillsSrc);
+  console.log(`  Skills updated -> ${atomcodeSkillsDir()}${stale > 0 ? ` (removed ${stale} stale)` : ''}`);
+  copyDir(srcDir, join(pluginDest, 'src'));
+  console.log(`  MCP Server updated -> ${join(pluginDest, 'src')}`);
+  copyDir(safetyDir, join(pluginDest, 'safety'));
+  console.log(`  Safety Policy updated -> ${join(pluginDest, 'safety')}`);
+  ensureAtomcodeMcpConfig();
+  mkdirSync(pluginDest, { recursive: true });
+  writeFileSync(join(pluginDest, '.installed'), new Date().toISOString());
+  installRuntimeDeps(pluginDest);
+}
+
+function uninstallAtomCode() {
+  const skillsDir = atomcodeSkillsDir();
+  let removed = 0;
+  if (existsSync(skillsDir)) {
+    for (const entry of readdirSync(skillsDir, { withFileTypes: true })) {
+      if (entry.name.startsWith('huawei')) {
+        removeIfExists(join(skillsDir, entry.name));
+        removed++;
+      }
+    }
+    if (removed > 0) console.log(`  Removed ${removed} skills`);
+  }
+
+  if (removeIfExists(atomcodePluginsDir())) {
+    console.log('  Removed MCP server and safety policy');
+  }
+
+  const configPath = atomcodeMcpConfigFile();
+  if (existsSync(configPath)) {
+    let config = {};
+    try {
+      config = JSON.parse(readFileSync(configPath, 'utf8'));
+    } catch {}
+    if (config.mcpServers?.['huaweicloud-devkit']) {
+      delete config.mcpServers['huaweicloud-devkit'];
+      if (Object.keys(config.mcpServers).length === 0) delete config.mcpServers;
+      writeFileSync(configPath, JSON.stringify(config, null, 2));
+      console.log(`  MCP config cleaned: ${configPath}`);
+    }
+  }
+}
+
+function atomcodeStatus() {
+  const pluginDir = atomcodePluginsDir();
+  const skillsDir = atomcodeSkillsDir();
+  console.log(
+    `  MCP Server: ${existsSync(join(pluginDir, 'src', 'mcp-server.mjs')) ? '\x1b[32mInstalled\x1b[0m' : '\x1b[31mNot installed\x1b[0m'}`,
+  );
+  console.log(
+    `  Safety Policy: ${existsSync(join(pluginDir, 'safety', 'policy.json')) ? '\x1b[32mInstalled\x1b[0m' : '\x1b[31mNot installed\x1b[0m'}`,
+  );
+  let skillCount = 0;
+  if (existsSync(skillsDir)) {
+    skillCount = readdirSync(skillsDir, { withFileTypes: true }).filter(
+      (d) => d.isDirectory() && d.name.startsWith('huawei'),
+    ).length;
+  }
+  console.log(
+    `  Skills: ${skillCount > 0 ? `\x1b[32m${skillCount} installed\x1b[0m` : '\x1b[31mNot installed\x1b[0m'}`,
+  );
+  const configPath = atomcodeMcpConfigFile();
+  if (existsSync(configPath)) {
+    try {
+      const config = JSON.parse(readFileSync(configPath, 'utf8'));
+      console.log(
+        `  MCP config: ${config.mcpServers?.['huaweicloud-devkit'] ? '\x1b[32mConfigured\x1b[0m' : '\x1b[31mNot configured\x1b[0m'}`,
+      );
+    } catch {
+      console.log(`  MCP config: \x1b[31mInvalid\x1b[0m`);
+    }
+  }
+}
+
 function dshMcpServerPath() {
   return join(dshPluginsDir(), 'src', 'mcp-server.mjs').replace(/\\/g, '/');
 }
@@ -1694,9 +1850,6 @@ function removeHermesMcpConfigBlock() {
     }
     // If we just skipped the only server under mcp_servers, remove the key too
     if (line.trim() === 'mcp_servers:') {
-      // Peek ahead to check if this mcp_servers block only has huaweicloud-devkit
-      const remaining = out.join('\n');
-      // Remove trailing mcp_servers: if it's the last meaningful line
       continue; // skip the mcp_servers key for now, re-add if other servers exist
     }
     out.push(line);
@@ -1848,6 +2001,7 @@ function autoDetectTarget() {
     ['officeace', () => existsSync(officeaceCapabilitiesDir())],
     ['hermes', () => existsSync(hermesHomeDir())],
     ['openclaw', () => existsSync(join(homedir(), '.openclaw'))],
+    ['atomcode', () => existsSync(atomcodeHome())],
   ];
   const detected = checks.filter(([, check]) => check()).map(([name]) => name);
   if (detected.length === 0) {
@@ -1908,6 +2062,10 @@ async function cmdInstall() {
     console.log('\n[OpenClaw]');
     await installCodexDesktop();
   }
+  if (target === 'atomcode' || target === 'all') {
+    console.log('\n[AtomCode]');
+    await installAtomCode();
+  }
   if (target === 'codex' || target === 'all') {
     console.log('\n[Codex]');
     if (!hasCodexCLI()) {
@@ -1949,7 +2107,9 @@ async function cmdInstall() {
                   ? 'Hermes Agent'
                   : target === 'openclaw'
                     ? 'OpenClaw'
-                    : '当前 agent';
+                    : target === 'atomcode'
+                      ? 'AtomCode'
+                      : '当前 agent';
   const pad = ' '.repeat(24 - appName.length);
   if (target === 'officeace') {
     console.log(`\n\x1b[1m\x1b[33m╔══════════════════════════════════════════════════════════╗`);
@@ -2002,9 +2162,11 @@ async function cmdInstall() {
             ? officeacePluginsDir()
             : target === 'openclaw'
               ? codexDesktopPluginsDir()
-              : target === 'codex-desktop'
-                ? codexDesktopPluginsDir()
-                : opencodePluginsDir();
+              : target === 'atomcode'
+                ? atomcodePluginsDir()
+                : target === 'codex-desktop'
+                  ? codexDesktopPluginsDir()
+                  : opencodePluginsDir();
   mkdirSync(markerDir, { recursive: true });
   writeFileSync(join(markerDir, '.installed'), new Date().toISOString());
   if (target === 'opencode' || target === 'all') {
@@ -2028,6 +2190,9 @@ async function cmdInstall() {
   if (target === 'openclaw' || target === 'all') {
     console.log('Or describe your Huawei Cloud task in OpenClaw');
   }
+  if (target === 'atomcode' || target === 'all') {
+    console.log('Or describe your Huawei Cloud task in AtomCode');
+  }
 }
 
 async function cmdUninstall() {
@@ -2063,6 +2228,10 @@ async function cmdUninstall() {
     console.log('\n[OpenClaw]');
     uninstallCodexDesktop();
   }
+  if (target === 'atomcode' || target === 'all') {
+    console.log('\n[AtomCode]');
+    uninstallAtomCode();
+  }
   if (target === 'codex-desktop' || target === 'codex' || target === 'all') {
     console.log('\n[Codex]');
     uninstallCodexDesktop();
@@ -2139,6 +2308,10 @@ async function cmdStatus() {
       `  Skills: ${cdSkillCount > 0 ? `\x1b[32m${cdSkillCount} installed\x1b[0m` : '\x1b[31mNot installed\x1b[0m'}`,
     );
   }
+  if (target === 'atomcode' || target === 'all') {
+    console.log('\n[AtomCode]');
+    atomcodeStatus();
+  }
   if (target === 'codex' || target === 'all') {
     console.log('\n[Codex]');
     if (!hasCodexCLI()) {
@@ -2181,6 +2354,7 @@ async function cmdDoctor() {
   const dshPluginDir = dshPluginsDir();
   const officeacePluginDir = officeacePluginsDir();
   const hermesPluginDir = hermesPluginsDir();
+  const atomcodePluginDir = atomcodePluginsDir();
   const mcpOk =
     existsSync(join(opencodePluginDir, 'src', 'mcp-server.mjs')) ||
     existsSync(join(codexPluginDir, 'src', 'mcp-server.mjs')) ||
@@ -2188,7 +2362,8 @@ async function cmdDoctor() {
     existsSync(join(workbuddyPluginDir, 'src', 'mcp-server.mjs')) ||
     existsSync(join(dshPluginDir, 'src', 'mcp-server.mjs')) ||
     existsSync(join(officeacePluginDir, 'src', 'mcp-server.mjs')) ||
-    existsSync(join(hermesPluginDir, 'src', 'mcp-server.mjs'));
+    existsSync(join(hermesPluginDir, 'src', 'mcp-server.mjs')) ||
+    existsSync(join(atomcodePluginDir, 'src', 'mcp-server.mjs'));
   const mcpTarget = existsSync(join(opencodePluginDir, 'src', 'mcp-server.mjs'))
     ? 'OpenCode'
     : existsSync(join(codexPluginDir, 'src', 'mcp-server.mjs'))
@@ -2203,7 +2378,9 @@ async function cmdDoctor() {
               ? 'OfficeAce'
               : existsSync(join(hermesPluginDir, 'src', 'mcp-server.mjs'))
                 ? 'Hermes Agent'
-                : '';
+                : existsSync(join(atomcodePluginDir, 'src', 'mcp-server.mjs'))
+                  ? 'AtomCode'
+                  : '';
   check('MCP server installed', mcpOk, 'Run: npx huaweicloud-devkit install');
 
   if (mcpOk) {
@@ -2229,7 +2406,8 @@ async function cmdDoctor() {
     existsSync(join(workbuddyPluginDir, 'safety', 'policy.json')) ||
     existsSync(join(dshPluginDir, 'safety', 'policy.json')) ||
     existsSync(join(officeacePluginDir, 'safety', 'policy.json')) ||
-    existsSync(join(hermesPluginDir, 'safety', 'policy.json'));
+    existsSync(join(hermesPluginDir, 'safety', 'policy.json')) ||
+    existsSync(join(atomcodePluginDir, 'safety', 'policy.json'));
   check('Safety policy installed', safetyOk, 'Run: npx huaweicloud-devkit install');
 
   // MCP config — check OpenCode, Codex Desktop, CodeArts, WorkBuddy, and DSH
@@ -2306,6 +2484,18 @@ async function cmdDoctor() {
       } catch {}
     }
   }
+  if (!mcpConfigured) {
+    const atomcodeCfg = atomcodeMcpConfigFile();
+    if (existsSync(atomcodeCfg)) {
+      try {
+        const cfg = JSON.parse(readFileSync(atomcodeCfg, 'utf8'));
+        if (cfg.mcpServers && cfg.mcpServers['huaweicloud-devkit']) {
+          mcpConfigured = true;
+          mcpCfgTarget = 'AtomCode';
+        }
+      } catch {}
+    }
+  }
   check(
     'MCP configured',
     mcpConfigured,
@@ -2357,6 +2547,7 @@ async function cmdDoctor() {
     dshSkillsDir(),
     officeaceSkillsDir(),
     hermesSkillsDir(),
+    atomcodeSkillsDir(),
   ];
   let skillCount = 0;
   const missingSkills = [];
@@ -2413,6 +2604,7 @@ async function cmdDoctor() {
     { path: join(codeartsPluginsDir(), '.installed'), name: 'CodeArts' },
     { path: join(dshPluginsDir(), '.installed'), name: 'DSH' },
     { path: join(officeacePluginsDir(), '.installed'), name: 'OfficeAce' },
+    { path: join(atomcodePluginsDir(), '.installed'), name: 'AtomCode' },
   ];
   for (const marker of installedMarkers) {
     if (existsSync(marker.path)) {
@@ -2542,6 +2734,18 @@ async function cmdUpdate() {
     return;
   }
 
+  if (target === 'atomcode') {
+    if (!existsSync(join(atomcodePluginsDir(), 'src', 'mcp-server.mjs'))) {
+      console.log('\x1b[33mNot installed. Use "install" command first.\x1b[0m');
+      return;
+    }
+    console.log('[AtomCode]');
+    await updateAtomCode();
+    console.log(`\n\x1b[32mUpdate complete.\x1b[0m`);
+    console.log(`\x1b[33mRestart the AtomCode session for changes to take effect.\x1b[0m`);
+    return;
+  }
+
   if (target === 'all') {
     let updatedAny = false;
     if (existsSync(join(opencodePluginsDir(), 'src', 'mcp-server.mjs'))) {
@@ -2584,6 +2788,11 @@ async function cmdUpdate() {
       await updateCodexDesktop();
       updatedAny = true;
     }
+    if (existsSync(join(atomcodePluginsDir(), 'src', 'mcp-server.mjs'))) {
+      console.log('\n[AtomCode]');
+      await updateAtomCode();
+      updatedAny = true;
+    }
     if (codexStatus()) {
       console.log('\n[Codex]');
       installCodex();
@@ -2721,8 +2930,8 @@ async function cmdInstallHcloud() {
       }
 
       console.log('  Or restart terminal and: hcloud version');
-    } catch (e) {
-      console.log(`\n\x1b[33mAuto-install failed: ${e.message}\x1b[0m`);
+    } catch (error) {
+      console.log(`\n\x1b[33mAuto-install failed: ${error.message}\x1b[0m`);
       console.log(`  Manual: download ${url}, unzip to ${installDir}, add to PATH`);
       console.log(`  Guide: https://support.huaweicloud.com/qs-hcli/hcli_02_003_01.html`);
       if (detectCodeartsSandbox() === 'sandbox') {
@@ -3079,7 +3288,7 @@ async function main() {
     default:
       console.log(BANNER);
       console.log(
-        'Usage: npx huaweicloud-devkit <command> [--target <opencode|codex|codearts|workbuddy|dsh|officeace|hermes|openclaw|all>]\n',
+        'Usage: npx huaweicloud-devkit <command> [--target <opencode|codex|codearts|workbuddy|dsh|officeace|hermes|openclaw|atomcode|all>]\n',
       );
       console.log('Commands:');
       console.log('  install      Install skills, MCP server, safety policy');
@@ -3094,7 +3303,7 @@ async function main() {
       console.log('  help         Show this help');
       console.log('\nOptions:');
       console.log(
-        '  --target     Target agent: opencode (default), codex, codearts, workbuddy, dsh, officeace, hermes, openclaw, all',
+        '  --target     Target agent: opencode (default), codex, codearts, workbuddy, dsh, officeace, hermes, openclaw, atomcode, all',
       );
       console.log('\nExamples:');
       console.log('  npx huaweicloud-devkit install');
@@ -3104,6 +3313,7 @@ async function main() {
       console.log('  npx huaweicloud-devkit install --target dsh');
       console.log('  npx huaweicloud-devkit install --target officeace');
       console.log('  npx huaweicloud-devkit install --target hermes');
+      console.log('  npx huaweicloud-devkit install --target atomcode');
       console.log('  npx huaweicloud-devkit install --target all');
       console.log('  npx huaweicloud-devkit auth init');
       console.log('  npx huaweicloud-devkit auth sync --target all');
@@ -3114,7 +3324,7 @@ async function main() {
   }
 }
 
-main().catch((e) => {
-  console.error(`\x1b[31mError: ${e.message}\x1b[0m`);
+main().catch((error) => {
+  console.error(`\x1b[31mError: ${error.message}\x1b[0m`);
   process.exit(1);
 });

package/plugins/huaweicloud-core/src/tools.mjs

@@ -1,11 +1,12 @@
-import { planHcloudCommand, runHcloud } from './hcloud-cli.mjs';
-import { classifyTextCommand, redactSecrets } from './safety-policy.mjs';
-import { evaluateArtifacts, evaluateCommandRisk, evaluateDeployPlan } from './risk-rule-engine.mjs';
 import { readFileSync, readdirSync, existsSync, writeFileSync } from 'node:fs';
 import { join, dirname } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { homedir } from 'node:os';
 import { spawnSync } from 'node:child_process';
+
+import { evaluateArtifacts, evaluateCommandRisk, evaluateDeployPlan } from './risk-rule-engine.mjs';
+import { classifyTextCommand, redactSecrets } from './safety-policy.mjs';
+import { planHcloudCommand, runHcloud } from './hcloud-cli.mjs';
 import { searchMarketplace } from './search-market.mjs';
 import { getServiceIcon } from './icon-library.mjs';
 import {
@@ -14,7 +15,7 @@ import {
   closeSession,
   uploadFileWithSession,
   uploadProjectWithSession,
-  currentWorkspaceId,
+  getCurrentWorkspaceId,
   setWorkspaceId,
 } from './sandbox/session-manager.mjs';
 import { hdkitCheckUser, hdkitSignAgreement, hdkitConnect, hdkitCredentials } from './sandbox/hdkitservice-api.mjs';
@@ -425,7 +426,7 @@ export const TOOL_DEFINITIONS = [
         target: {
           type: 'string',
           description:
-            'Agent target to check: opencode, codex, codex-desktop, codearts, workbuddy, dsh, officeace, hermes, openclaw, or all (default).',
+            'Agent target to check: opencode, codex, codex-desktop, codearts, workbuddy, dsh, officeace, hermes, openclaw, atomcode, or all (default).',
         },
       },
     },
@@ -685,7 +686,7 @@ export async function callTool(name, args = {}) {
       setRuntimeCredentials(args.ak, args.sk, undefined, args.region);
       return { status: 'ok', message: 'Runtime credentials set for this MCP session.' };
     case 'huaweicloud_sandbox_exec_with_session': {
-      const sandboxWsId2 = args.workspace_id || currentWorkspaceId;
+      const sandboxWsId2 = args.workspace_id || getCurrentWorkspaceId();
       if (!sandboxWsId2) {
         throw new Error(
           'workspace_id is required. No sandbox connected — call huaweicloud_sandbox_connect first, ' +
@@ -698,7 +699,7 @@ export async function callTool(name, args = {}) {
       return { stdout: sandboxResult2.stdout, exitCode: sandboxResult2.exitCode };
     }
     case 'huaweicloud_sandbox_exec_one_shot': {
-      const sandboxWsId3 = args.workspace_id || currentWorkspaceId;
+      const sandboxWsId3 = args.workspace_id || getCurrentWorkspaceId();
       if (!sandboxWsId3) {
         throw new Error(
           'workspace_id is required. No sandbox connected — call huaweicloud_sandbox_connect first, ' +
@@ -711,7 +712,7 @@ export async function callTool(name, args = {}) {
       return { stdout: sandboxResult3.stdout, exitCode: sandboxResult3.exitCode };
     }
     case 'huaweicloud_sandbox_close_session': {
-      const sandboxWsId4 = args.workspace_id || currentWorkspaceId;
+      const sandboxWsId4 = args.workspace_id || getCurrentWorkspaceId();
       if (!sandboxWsId4) {
         throw new Error(
           'workspace_id is required. No sandbox connected — call huaweicloud_sandbox_connect first, ' +
@@ -726,7 +727,7 @@ export async function callTool(name, args = {}) {
       if (!args.local_path || !args.remote_path) {
         throw new Error('local_path and remote_path are required.');
       }
-      const sandboxWsId5 = args.workspace_id || currentWorkspaceId;
+      const sandboxWsId5 = args.workspace_id || getCurrentWorkspaceId();
       if (!sandboxWsId5) {
         throw new Error(
           'workspace_id is required. No sandbox connected — call huaweicloud_sandbox_connect first, ' +
@@ -747,7 +748,7 @@ export async function callTool(name, args = {}) {
       if (!args.local_dir) {
         throw new Error('local_dir is required.');
       }
-      const sandboxWsId6 = args.workspace_id || currentWorkspaceId;
+      const sandboxWsId6 = args.workspace_id || getCurrentWorkspaceId();
       if (!sandboxWsId6) {
         throw new Error(
           'workspace_id is required. No sandbox connected — call huaweicloud_sandbox_connect first, ' +
@@ -942,11 +943,11 @@ async function setupObsConfigFromHcloud(profile) {
 
   try {
     writeFileSync(obsConfigPath, configContent, { encoding: 'utf8', mode: 0o600 });
-  } catch (e) {
+  } catch (error) {
     return {
       ok: false,
       error: 'Failed to write OBS config file.',
-      detail: e.message,
+      detail: error.message,
       path: obsConfigPath,
     };
   }
@@ -1132,10 +1133,10 @@ function serviceCatalog(intent = '') {
     },
   ];
   const matched = [];
-  const tokens = it.split(/[\s,./-]+/).filter((t) => t.length > 0);
+  const tokens = new Set(it.split(/[\s,./-]+/).filter((t) => t.length > 0));
   const cjk = /[\u4e00-\u9fff]/;
   for (const route of routeMap) {
-    if (route.keywords.some((kw) => (kw.includes(' ') || cjk.test(kw) ? it.includes(kw) : tokens.includes(kw)))) {
+    if (route.keywords.some((kw) => (kw.includes(' ') || cjk.test(kw) ? it.includes(kw) : tokens.has(kw)))) {
       matched.push(route);
     }
   }
@@ -1328,8 +1329,8 @@ async function searchDocs(query, topic = 'all') {
         }
       }
     }
-  } catch (err) {
-    return { ok: false, error: err.message, results: [] };
+  } catch (error) {
+    return { ok: false, error: error.message, results: [] };
   }
   results.sort((a, b) => b.relevance - a.relevance);
   return { ok: true, query: q, topic, count: results.length, results: results.slice(0, 10) };
@@ -1366,10 +1367,12 @@ async function retrieveSkill(name) {
 }
 
 async function listRegions() {
-  const result = await runHcloud(['IAM', 'KeystoneListRegions'], { timeoutMs: 30000, maxRetries: 0 }).catch((err) => ({
-    ok: false,
-    error: err.message,
-  }));
+  const result = await runHcloud(['IAM', 'KeystoneListRegions'], { timeoutMs: 30000, maxRetries: 0 }).catch(
+    (error) => ({
+      ok: false,
+      error: error.message,
+    }),
+  );
   if (!result.ok) {
     return {
       ok: false,

package/plugins/huaweicloud-core/src/ws-exec/hwlink-multiplexer.js

@@ -93,7 +93,7 @@ class HwlinkWebSocketMultiplexer {
     const { WebSocketImpl = globalThis.WebSocket, protocol = 'devenv', onFrame, trace = false } = options;
 
     if (typeof WebSocketImpl !== 'function') {
-      throw new Error('global WebSocket is unavailable; use Node.js 22+ or pass WebSocketImpl');
+      throw new TypeError('global WebSocket is unavailable; use Node.js 22+ or pass WebSocketImpl');
     }
     if (!Number.isInteger(source) || source < -0x80000000 || source > 0xffffffff) {
       throw new Error('hwlink source must be an int32 or uint32 number');

package/plugins/huaweicloud-core/src/ws-exec/hwlink-tunnel-channel.mjs

@@ -8,6 +8,7 @@
  */
 
 import { createServer } from 'node:net';
+
 import {
   OpCode,
   ReserveSource,

package/plugins/huaweicloud-core/src/ws-exec/ws-exec-client.js

@@ -287,10 +287,12 @@ class WebSocketShellSession {
     const markerIndex = pending.buffer.lastIndexOf(doneMarker);
     if (markerIndex === -1) return;
 
+    // eslint-disable-next-line unicorn/no-unsafe-buffer-conversion -- pending.buffer is a String, not a Buffer
     const afterMarker = pending.buffer.slice(markerIndex + doneMarker.length);
     const exitMatch = afterMarker.match(/^(\d+)/);
     if (!exitMatch) return;
 
+    // eslint-disable-next-line unicorn/no-unsafe-buffer-conversion -- pending.buffer is a String, not a Buffer
     const rawOutput = pending.buffer.slice(0, markerIndex);
     const stdout = cleanCommandOutput(rawOutput, {
       inputEchoed: this.inputEchoed,