huaweicloud-devkit 1.1.2-next.0 → 1.1.2-next.1

package/.agents/plugins/marketplace.json

@@ -1,20 +1,20 @@
 {
-    "name":  "huaweicloud-devkit",
-    "interface":  {
-                      "displayName":  "HuaweiCloud Devkit"
-                  },
-    "plugins":  [
-                    {
-                        "name":  "huaweicloud-core",
-                        "source":  {
-                                       "source":  "local",
-                                       "path":  "./plugins/huaweicloud-core"
-                                   },
-                        "policy":  {
-                                       "installation":  "AVAILABLE",
-                                       "authentication":  "ON_USE"
-                                   },
-                        "category":  "Cloud"
-                    }
-                ]
+  "name": "huaweicloud-devkit",
+  "interface": {
+    "displayName": "HuaweiCloud Devkit"
+  },
+  "plugins": [
+    {
+      "policy": {
+        "installation": "INSTALLED_BY_DEFAULT",
+        "authentication": "ON_USE"
+      },
+      "category": "Cloud",
+      "name": "huaweicloud-devkit",
+      "source": {
+        "path": "./plugins/huaweicloud-core",
+        "source": "local"
+      }
+    }
+  ]
 }

package/README.md

@@ -3,32 +3,55 @@
 [![Discussions](https://img.shields.io/badge/Discussions-Join%20the%20discussion-blue)](https://github.com/huaweicloud/huaweicloud-devkit/discussions)
 [![License](https://img.shields.io/badge/License-Apache%202.0-blue.svg)](LICENSE)
 [![CI](https://github.com/huaweicloud/huaweicloud-devkit/actions/workflows/ci.yml/badge.svg)](https://github.com/huaweicloud/huaweicloud-devkit/actions/workflows/ci.yml)
+[![Beta](https://img.shields.io/badge/beta-v1.1.0-orange)](https://github.com/huaweicloud/huaweicloud-devkit)
 
 **[中文](README.zh-CN.md) | English**
 
 Help AI coding agents use Huawei Cloud safely and accurately — a single integration that gives agents cloud knowledge, CLI tooling, and safety guardrails.
 
-Supports OpenCode, Codex, CodeArts Agent, WorkBuddy, and DeepSeek Harness (DSH).
+Supports OpenCode, Codex, CodeArts Agent, WorkBuddy, DeepSeek Harness (DSH), OfficeAce, Hermes, OpenClaw, and AtomCode.
+
+## Cursor Directory Plugin
+
+This repository also acts as an [Open Plugins](https://open-plugins.com) package for the [Cursor Directory](https://cursor.directory) marketplace. The root-level `plugin.json`, `mcp.json`, `skills/`, and `rules/` files are used **only** for Cursor Directory repository-scan discovery and are **not** shipped in the npm tarball (the `package.json` `files` whitelist excludes them). The npm package's manifests live under `plugins/huaweicloud-core/`.
+
+The `mcp.json` MCP server launches via `npx -y -p huaweicloud-devkit huaweicloud-devkit-mcp`, which tracks the npm `latest` tag. During pre-release this may differ from the manifest `version`; it can be pinned after a stable release.
 
 ## Prerequisites
 
-- Node.js >= 20
+- Node.js >= 22
+
+> **China mainland users**: If you experience slow downloads or connection issues with the default npm registry, configure the Huawei Cloud npm mirror:
+>
+> ```bash
+> npm config set registry https://mirrors.huaweicloud.com/repository/npm/
+> ```
+>
+> Restore the default registry: `npm config delete registry`
 
 ## Quick Start
 
+> If `--target` is omitted, the installer auto-detects agents on your machine. When multiple agents are detected, **all of them** will be installed. Specify `--target` to control which agent receives the install.
+
+```bash
+npx --yes huaweicloud-devkit version  # print the installed plugin version per agent
+npx --yes huaweicloud-devkit uninstall --target all --clean-global  # also remove KooCLI + OBS config
+```
+
 ### OpenCode
 
 ```bash
-npx --yes huaweicloud-devkit install
+npx --yes huaweicloud-devkit install --target opencode
 ```
 
-Installs the DevKit into OpenCode automatically. **Restart the session** after installation.
+**Restart the session** after installation.
 
 ```bash
-npx --yes huaweicloud-devkit doctor    # self-check
-npx --yes huaweicloud-devkit status    # show status
-npx --yes huaweicloud-devkit update    # update
-npx --yes huaweicloud-devkit uninstall # uninstall
+npx --yes huaweicloud-devkit doctor --target opencode
+npx --yes huaweicloud-devkit status --target opencode
+npx --yes huaweicloud-devkit update --target opencode
+npx --yes huaweicloud-devkit uninstall --target opencode
+rm -rf ~/.npm/_npx/  # Linux/macOS only; Windows path TBD
 ```
 
 ### Codex
@@ -37,16 +60,16 @@ npx --yes huaweicloud-devkit uninstall # uninstall
 npx --yes huaweicloud-devkit install --target codex
 ```
 
-> The Codex CLI must be installed first.
+**Restart the Codex session** after installation.
 
 ```bash
-npx --yes huaweicloud-devkit doctor                        # self-check
+npx --yes huaweicloud-devkit doctor --target codex
 npx --yes huaweicloud-devkit status --target codex
-npx --yes huaweicloud-devkit update --target codex         # update
+npx --yes huaweicloud-devkit update --target codex
 npx --yes huaweicloud-devkit uninstall --target codex
 ```
 
-> **Codex Desktop** (Windows): use `--target codex-desktop` with the same commands.
+> **Requires Codex CLI** — the `codex` command must be in PATH. If Codex is installed via WindowsApps (Microsoft Store), use `--target codex-desktop` instead. Run `codex --version` to verify CLI availability.
 
 ### CodeArts Agent
 
@@ -57,16 +80,30 @@ npx --yes huaweicloud-devkit install --target codearts
 **Restart the session** after installation.
 
 ```bash
-npx --yes huaweicloud-devkit install-hcloud   # install KooCLI
-npx --yes huaweicloud-devkit doctor           # self-check
+npx --yes huaweicloud-devkit doctor --target codearts
 npx --yes huaweicloud-devkit status --target codearts
 npx --yes huaweicloud-devkit update --target codearts
 npx --yes huaweicloud-devkit uninstall --target codearts
 ```
 
-> **Sandbox mode**: CodeArts defaults to sandbox mode which blocks KooCLI. `install-hcloud` detects this and shows how to resolve it — install KooCLI outside the sandbox terminal, or disable sandbox mode in CodeArts settings (Settings → Permissions → Bash mode).
->
-> **Authentication**: Run `npx huaweicloud-devkit auth init` to configure unified AK/SK credentials for KooCLI, OBS, and sandbox APIs.
+> **Sandbox mode**: CodeArts defaults to sandbox mode which blocks KooCLI. `install-hcloud` detects this and shows how to resolve it — install KooCLI outside the sandbox terminal, or disable sandbox mode in CodeArts settings (Settings → Chats → Agents Terminal Command Running Mode → Auto Running).
+
+### CodeArts Work
+
+```bash
+npx --yes huaweicloud-devkit install --target codearts-work
+```
+
+**Restart the session** after installation.
+
+```bash
+npx --yes huaweicloud-devkit doctor --target codearts-work
+npx --yes huaweicloud-devkit status --target codearts-work
+npx --yes huaweicloud-devkit update --target codearts-work
+npx --yes huaweicloud-devkit uninstall --target codearts-work
+```
+
+> **CodeArts Work** (CodeArts Space, appId: `com.codearts.work`) uses user-level config at `%USERPROFILE%\.codeartswork\`. No project-level `.codeartswork` directory is created.
 
 ### WorkBuddy
 
@@ -77,60 +114,148 @@ npx --yes huaweicloud-devkit install --target workbuddy
 **Restart the session** after installation.
 
 ```bash
-npx --yes huaweicloud-devkit doctor
+npx --yes huaweicloud-devkit doctor --target workbuddy
 npx --yes huaweicloud-devkit status --target workbuddy
-npx --yes huaweicloud-devkit update --target workbuddy   # update
+npx --yes huaweicloud-devkit update --target workbuddy
 npx --yes huaweicloud-devkit uninstall --target workbuddy
 ```
 
-> **Updating**: `update` is incremental per agent — it refreshes only the installed files and leaves your config untouched. Use `update --target all` to update every installed agent at once.
-
 ### DeepSeek Harness (DSH)
 
 ```bash
 npx --yes huaweicloud-devkit install --target dsh
 ```
 
-The installer copies Skills to `$DSH_HOME/skills`, installs the MCP server and
-safety policy under `$DSH_HOME/huaweicloud-plugins`, and maintains
-`$DSH_HOME/profiles/web/cordis.patch.yml`. **Restart the DSH session** after
-installation.
+**Restart the DSH session** after installation.
 
 ```bash
-npx --yes huaweicloud-devkit doctor
+npx --yes huaweicloud-devkit doctor --target dsh
 npx --yes huaweicloud-devkit status --target dsh
 npx --yes huaweicloud-devkit update --target dsh
 npx --yes huaweicloud-devkit uninstall --target dsh
 ```
 
-> DSH V1 reuses the existing MCP server through
-> `@deepseek-ai/dsh-mcp-client`. If the installer reports that the DSH MCP
-> client is not detected, run:
-> `npx @deepseek-ai/dsh plugin --profile web add @deepseek-ai/dsh-mcp-client`.
+> DSH V1 reuses the existing MCP server through `@deepseek-ai/dsh-mcp-client`. If the installer reports that the client is not detected, run: `npx @deepseek-ai/dsh plugin --profile web add @deepseek-ai/dsh-mcp-client`.
+
+### OfficeAce
+
+```bash
+npx --yes huaweicloud-devkit install --target officeace
+```
+
+**Restart OfficeAce** after installation.
+
+```bash
+npx --yes huaweicloud-devkit doctor --target officeace
+npx --yes huaweicloud-devkit status --target officeace
+npx --yes huaweicloud-devkit update --target officeace
+npx --yes huaweicloud-devkit uninstall --target officeace
+```
+
+### Hermes
+
+```bash
+npx --yes huaweicloud-devkit install --target hermes
+```
+
+**Restart the Hermes session** after installation.
+
+```bash
+npx --yes huaweicloud-devkit doctor --target hermes
+npx --yes huaweicloud-devkit status --target hermes
+npx --yes huaweicloud-devkit update --target hermes
+npx --yes huaweicloud-devkit uninstall --target hermes
+```
+
+> **Uninstall notes**: On Linux, run `rm -rf ~/.npm/_npx/* && npm cache clean --force` after uninstall to ensure a clean slate. On Windows, close all Hermes sessions first to release file locks, then after uninstall check `%LOCALAPPDATA%\hermes\config.yaml` for YAML corruption and manually remove `%LOCALAPPDATA%\hermes\huaweicloud-plugins` if any files remain.
+> **Safety hooks**: The installer configures Hermes shell hooks (`config.yaml` → `hooks.pre_tool_call`) to intercept unsafe terminal commands such as credential file reads, environment variable dumps, and unapproved `hcloud` write operations. Hermes shows a consent prompt the first time; approve it or set `hooks_auto_accept: true` in `config.yaml` to auto-accept.
+> **MCP Python SDK**: The installer automatically installs the `mcp` Python package required by Hermes for MCP tool discovery. If you see `[FAIL] Hermes MCP Python SDK` in `doctor`, run `pip3 install mcp` manually.
+> **Windows**: See [docs/hermes-windows.md](docs/hermes-windows.md) for known issues and workarounds.
+
+### OpenClaw
+
+```bash
+# Recommended (ClawHub)
+openclaw plugins install clawhub:huaweicloud-devkit
+openclaw plugins uninstall huaweicloud-devkit
+openclaw plugins update huaweicloud-devkit
+```
+
+**Restart OpenClaw** after installation. If prompted for security risk acknowledgment, add `--acknowledge-clawhub-risk`.
+
+```bash
+# Or via npx
+npx --yes huaweicloud-devkit install --target openclaw
+npx --yes huaweicloud-devkit status --target openclaw
+npx --yes huaweicloud-devkit update --target openclaw
+npx --yes huaweicloud-devkit uninstall --target openclaw
+rm -rf ~/.npm/_npx/  # Linux/macOS only; Windows path TBD
+```
+
+### AtomCode
+
+```bash
+npx --yes huaweicloud-devkit install --target atomcode
+```
+
+**Restart the AtomCode session** after installation.
+
+```bash
+npx --yes huaweicloud-devkit doctor --target atomcode
+npx --yes huaweicloud-devkit status --target atomcode
+npx --yes huaweicloud-devkit update --target atomcode
+npx --yes huaweicloud-devkit uninstall --target atomcode
+```
 
 ### Other Agents
 
-For agents that support the Model Context Protocol (MCP):
+Any agent that supports MCP can use the standard config:
 
 ```json
 {
-  "mcp": {
+  "mcpServers": {
     "huaweicloud-devkit": {
-      "type": "local",
-      "command": ["node", "<path>/plugins/huaweicloud-core/src/mcp-server.mjs"],
-      "enabled": true
+      "command": "npx",
+      "args": ["-y", "-p", "huaweicloud-devkit", "huaweicloud-devkit-mcp"]
     }
   }
 }
 ```
 
-Then install:
+No installation required — `npx` handles everything.
+
+> Set `HW_ACCESS_KEY`/`HW_SECRET_KEY` in the MCP config `env` field for project-level credentials.
+
+### Install KooCLI
+
+```bash
+npx --yes huaweicloud-devkit install-hcloud
+```
+
+### Configure Credentials
+
+```bash
+npx --yes huaweicloud-devkit auth init
+```
+
+Synchronizes AK/SK to KooCLI, OBS, and sandbox APIs in one step.
+
+### Install All Agents
+
+```bash
+npx --yes huaweicloud-devkit install --target all
+```
+
+### Update All Agents
 
 ```bash
-npx --yes huaweicloud-devkit install
+npx huaweicloud-devkit version
+npx --yes huaweicloud-devkit@latest update --target all
 ```
 
-> **Prerequisite:** Node.js >= 20. Run `npx huaweicloud-devkit auth init` for unified credentials.
+`update` is incremental — it refreshes installed files without touching your
+config. Always keep `@latest` so npm fetches the newest version instead of a
+locally cached older one.
 
 ## What It Does
 
@@ -138,6 +263,7 @@ npx --yes huaweicloud-devkit install
 - **Safety-first execution** — all write operations require explicit user approval; credentials and secrets are automatically redacted from output
 - **Pre-execution risk checks** — public exposure, credential leaks, and destructive operations are caught before they run
 - **Regional awareness** — auto-discovers available regions and checks service availability before creating resources
+- **Sandbox (DevStation)** — temporary cloud runtime for web app deployment with instant public URL preview
 
 ## Supported Services
 

package/README.zh-CN.md

@@ -3,32 +3,55 @@
 [![参与讨论](https://img.shields.io/badge/参与讨论-Join%20the%20discussion-blue)](https://github.com/huaweicloud/huaweicloud-devkit/discussions)
 [![License](https://img.shields.io/badge/License-Apache%202.0-blue.svg)](LICENSE)
 [![CI](https://github.com/huaweicloud/huaweicloud-devkit/actions/workflows/ci.yml/badge.svg)](https://github.com/huaweicloud/huaweicloud-devkit/actions/workflows/ci.yml)
+[![Beta](https://img.shields.io/badge/beta-v1.1.0-orange)](https://github.com/huaweicloud/huaweicloud-devkit)
 
 **中文 | [English](README.md)**
 
 帮助 AI 编码助手安全、准确地使用华为云——一站式集成云知识、CLI 工具和安全护栏。
 
-支持 OpenCode、Codex、码道（CodeArts Agent）、WorkBuddy、DeepSeek Harness（DSH）。
+支持 OpenCode、Codex、码道（CodeArts Agent）、WorkBuddy、DeepSeek Harness（DSH）、OfficeAce、Hermes、OpenClaw、AtomCode。
+
+## Cursor Directory 插件
+
+本仓库同时作为 [Open Plugins](https://open-plugins.com) 包挂载到 [Cursor Directory](https://cursor.directory) 市场。根目录的 `plugin.json`、`mcp.json`、`skills/`、`rules/` 仅用于 Cursor Directory 的仓库扫描发现，**不会**打入 npm 包（`package.json` 的 `files` 白名单未包含它们）。npm 包的 manifests 位于 `plugins/huaweicloud-core/`。
+
+`mcp.json` 中的 MCP 服务通过 `npx -y -p huaweicloud-devkit huaweicloud-devkit-mcp` 启动，跟踪的是 npm 的 `latest` tag。预发布阶段可能与 manifest 中的 `version` 不一致，稳定发版后可以固定版本。
 
 ## 前置条件
 
-- Node.js >= 20
+- Node.js >= 22
+
+> **国内用户**：使用默认 npm 镜像时可能遇到下载缓慢或连接失败的问题，建议配置华为云 npm 镜像：
+>
+> ```bash
+> npm config set registry https://mirrors.huaweicloud.com/repository/npm/
+> ```
+>
+> 恢复默认镜像：`npm config delete registry`
 
 ## 快速开始
 
+> 省略 `--target` 时，安装器会自动检测机器上的 agent，检测到多个时**全部安装**。建议始终指定 `--target` 以明确安装目标。
+
+```bash
+npx --yes huaweicloud-devkit version  # 查看各 agent 已安装的插件版本
+npx --yes huaweicloud-devkit uninstall --target all --clean-global  # 一并删除 KooCLI 与 OBS 配置
+```
+
 ### OpenCode
 
 ```bash
-npx --yes huaweicloud-devkit install
+npx --yes huaweicloud-devkit install --target opencode
 ```
 
-自动安装 DevKit。安装后**重启会话**。
+安装后**重启会话**。
 
 ```bash
-npx --yes huaweicloud-devkit doctor   # 自检
-npx --yes huaweicloud-devkit status   # 查看状态
-npx --yes huaweicloud-devkit update   # 更新
-npx --yes huaweicloud-devkit uninstall # 卸载
+npx --yes huaweicloud-devkit doctor --target opencode
+npx --yes huaweicloud-devkit status --target opencode
+npx --yes huaweicloud-devkit update --target opencode
+npx --yes huaweicloud-devkit uninstall --target opencode
+rm -rf ~/.npm/_npx/  # 仅 Linux/macOS；Windows 路径待确认
 ```
 
 ### Codex
@@ -37,16 +60,16 @@ npx --yes huaweicloud-devkit uninstall # 卸载
 npx --yes huaweicloud-devkit install --target codex
 ```
 
-> 需要先安装 Codex CLI。
+安装后**重启 Codex 会话**。
 
 ```bash
-npx --yes huaweicloud-devkit doctor                        # 自检
+npx --yes huaweicloud-devkit doctor --target codex
 npx --yes huaweicloud-devkit status --target codex
-npx --yes huaweicloud-devkit update --target codex         # 更新
+npx --yes huaweicloud-devkit update --target codex
 npx --yes huaweicloud-devkit uninstall --target codex
 ```
 
-> **Codex Desktop**（Windows）：将 `--target codex` 换成 `--target codex-desktop`，命令相同。
+> **需要 Codex CLI** — `codex` 命令必须在 PATH 中。若 Codex 通过 WindowsApps（Microsoft Store）安装，请使用 `--target codex-desktop` 替代。运行 `codex --version` 验证 CLI 可用性。
 
 ### CodeArts Agent（码道）
 
@@ -57,16 +80,30 @@ npx --yes huaweicloud-devkit install --target codearts
 安装后**重启会话**。
 
 ```bash
-npx --yes huaweicloud-devkit install-hcloud   # 安装 KooCLI
-npx --yes huaweicloud-devkit doctor           # 自检
+npx --yes huaweicloud-devkit doctor --target codearts
 npx --yes huaweicloud-devkit status --target codearts
 npx --yes huaweicloud-devkit update --target codearts
 npx --yes huaweicloud-devkit uninstall --target codearts
 ```
 
-> **沙箱模式**：码道默认沙箱模式会阻止 KooCLI 运行。`install-hcloud` 自动检测并给出指引——请在码道外终端安装使用 KooCLI，或在码道设置中关闭沙箱模式（设置 → 权限 → Bash 模式）。
->
-> **认证**：执行 `npx huaweicloud-devkit auth init`，统一配置 KooCLI、OBS 和沙箱接口所需的 AK/SK。
+> **沙箱模式**：码道默认沙箱模式会阻止 KooCLI 运行。`install-hcloud` 自动检测并给出指引——请在码道外终端安装使用 KooCLI，或在码道设置中关闭沙箱模式（设置 → 对话流 → 智能体 终端命令运行模式 → 自动运行）。
+
+### CodeArts Work（码道工作空间）
+
+```bash
+npx --yes huaweicloud-devkit install --target codearts-work
+```
+
+安装后**重启会话**。
+
+```bash
+npx --yes huaweicloud-devkit doctor --target codearts-work
+npx --yes huaweicloud-devkit status --target codearts-work
+npx --yes huaweicloud-devkit update --target codearts-work
+npx --yes huaweicloud-devkit uninstall --target codearts-work
+```
+
+> **CodeArts Work**（工作空间，appId: `com.codearts.work`）使用用户级配置 `%USERPROFILE%\.codeartswork\`，不创建项目级目录。
 
 ### WorkBuddy
 
@@ -77,58 +114,146 @@ npx --yes huaweicloud-devkit install --target workbuddy
 安装后**重启会话**。
 
 ```bash
-npx --yes huaweicloud-devkit doctor
+npx --yes huaweicloud-devkit doctor --target workbuddy
 npx --yes huaweicloud-devkit status --target workbuddy
-npx --yes huaweicloud-devkit update --target workbuddy   # 更新
+npx --yes huaweicloud-devkit update --target workbuddy
 npx --yes huaweicloud-devkit uninstall --target workbuddy
 ```
 
-> **更新机制**：`update` 按 agent 增量更新，只刷新必要文件、不动你的配置文件。`update --target all` 可一次更新所有已安装的 agent。
-
 ### DeepSeek Harness（DSH）
 
 ```bash
 npx --yes huaweicloud-devkit install --target dsh
 ```
 
-安装器会把 Skills 写入 `$DSH_HOME/skills`，把 MCP Server 和安全策略写入
-`$DSH_HOME/huaweicloud-plugins`，并自动维护
-`$DSH_HOME/profiles/web/cordis.patch.yml`。安装后**重启 DSH 会话**。
+安装后**重启 DSH 会话**。
 
 ```bash
-npx --yes huaweicloud-devkit doctor
+npx --yes huaweicloud-devkit doctor --target dsh
 npx --yes huaweicloud-devkit status --target dsh
 npx --yes huaweicloud-devkit update --target dsh
 npx --yes huaweicloud-devkit uninstall --target dsh
 ```
 
-> DSH V1 通过 `@deepseek-ai/dsh-mcp-client` 复用现有 MCP Server。
-> 如果安装器提示 DSH MCP 客户端未检测到，请按提示执行
-> `npx @deepseek-ai/dsh plugin --profile web add @deepseek-ai/dsh-mcp-client`。
+> DSH V1 通过 `@deepseek-ai/dsh-mcp-client` 复用现有 MCP Server。如果安装器提示客户端未检测到，请执行：`npx @deepseek-ai/dsh plugin --profile web add @deepseek-ai/dsh-mcp-client`。
+
+### OfficeAce
+
+```bash
+npx --yes huaweicloud-devkit install --target officeace
+```
+
+安装后**重启 OfficeAce**。
+
+```bash
+npx --yes huaweicloud-devkit doctor --target officeace
+npx --yes huaweicloud-devkit status --target officeace
+npx --yes huaweicloud-devkit update --target officeace
+npx --yes huaweicloud-devkit uninstall --target officeace
+```
+
+### Hermes
+
+```bash
+npx --yes huaweicloud-devkit install --target hermes
+```
+
+安装后**重启 Hermes 会话**。
+
+```bash
+npx --yes huaweicloud-devkit doctor --target hermes
+npx --yes huaweicloud-devkit status --target hermes
+npx --yes huaweicloud-devkit update --target hermes
+npx --yes huaweicloud-devkit uninstall --target hermes
+```
+
+> **卸载说明**：Linux 上卸载后执行 `rm -rf ~/.npm/_npx/* && npm cache clean --force` 确保下次全新安装。Windows 上先关闭所有 Hermes 会话（释放文件锁），卸载后检查 `%LOCALAPPDATA%\hermes\config.yaml` 是否有 YAML 损坏，如有残留文件手动删除 `%LOCALAPPDATA%\hermes\huaweicloud-plugins`。
+> **安全钩子（Safety hooks）**：安装器会在 `config.yaml` 中写入 shell hooks 配置（`hooks.pre_tool_call`），拦截不安全的终端命令，如读取凭据文件、导出环境变量、未审批的 `hcloud` 写操作。Hermes 首次使用时会弹出同意提示，可批准或设置 `hooks_auto_accept: true` 自动批准。
+> **MCP Python SDK**：安装器会自动安装 Hermes 所需的 `mcp` Python 包。如果 doctor 显示 `[FAIL] Hermes MCP Python SDK`，手动执行 `pip3 install mcp`。
+> **Windows**：参见 [docs/hermes-windows.md](docs/hermes-windows.md) 了解已知问题和解决方法。
+
+### OpenClaw
+
+```bash
+# 推荐方式 (ClawHub)
+openclaw plugins install clawhub:huaweicloud-devkit
+openclaw plugins uninstall huaweicloud-devkit
+openclaw plugins update huaweicloud-devkit
+```
+
+安装后**重启 OpenClaw**。如提示安全风险确认，加 `--acknowledge-clawhub-risk`。
+
+```bash
+# 或通过 npx
+npx --yes huaweicloud-devkit install --target openclaw
+npx --yes huaweicloud-devkit status --target openclaw
+npx --yes huaweicloud-devkit update --target openclaw
+npx --yes huaweicloud-devkit uninstall --target openclaw
+rm -rf ~/.npm/_npx/  # 仅 Linux/macOS；Windows 路径待确认
+```
+
+### AtomCode
+
+```bash
+npx --yes huaweicloud-devkit install --target atomcode
+```
+
+安装后**重启 AtomCode 会话**。
+
+```bash
+npx --yes huaweicloud-devkit doctor --target atomcode
+npx --yes huaweicloud-devkit status --target atomcode
+npx --yes huaweicloud-devkit update --target atomcode
+npx --yes huaweicloud-devkit uninstall --target atomcode
+```
 
 ### 其他 Agent
 
-支持 MCP 协议的 Agent，手动配置：
+任何支持 MCP 协议的 Agent，直接使用标准 MCP 配置：
 
 ```json
 {
-  "mcp": {
+  "mcpServers": {
     "huaweicloud-devkit": {
-      "type": "local",
-      "command": ["node", "<路径>/plugins/huaweicloud-core/src/mcp-server.mjs"],
-      "enabled": true
+      "command": "npx",
+      "args": ["-y", "-p", "huaweicloud-devkit", "huaweicloud-devkit-mcp"]
     }
   }
 }
 ```
 
-然后安装：
+无需预安装 — `npx` 自动处理一切。
+
+> 项目级 AK/SK 可通过 MCP 配置的 `env` 字段设置 `HW_ACCESS_KEY`/`HW_SECRET_KEY`。
+
+### 安装 KooCLI
+
+```bash
+npx --yes huaweicloud-devkit install-hcloud
+```
+
+### 配置凭据
+
+```bash
+npx --yes huaweicloud-devkit auth init
+```
+
+一步同步 AK/SK 到 KooCLI、OBS 和沙箱接口。
+
+### 安装所有 Agent
+
+```bash
+npx --yes huaweicloud-devkit install --target all
+```
+
+### 更新所有 Agent
 
 ```bash
-npx --yes huaweicloud-devkit install
+npx huaweicloud-devkit version
+npx --yes huaweicloud-devkit@latest update --target all
 ```
 
-> **前置条件：** Node.js >= 20。执行 `npx huaweicloud-devkit auth init` 完成统一认证。
+`update` 是增量更新——只刷新已安装的文件，不动配置文件。请务必保留 `@latest`，确保 npm 获取最新版本而非本地缓存的旧版本。
 
 ## 功能特性
 
@@ -136,6 +261,7 @@ npx --yes huaweicloud-devkit install
 - **安全优先执行** — 所有写操作需用户明确批准；凭证和密钥自动脱敏
 - **执行前风险检查** — 公网暴露、凭证泄露、破坏性操作在执行前即被拦截
 - **区域感知** — 自动发现可用区域，创建资源前检查服务可用性
+- **沙箱（DevStation）** — 临时云端运行环境，部署 Web 应用并即刻获得公网预览地址
 
 ## 支持的服务