hunter-harness 0.2.10 → 0.2.12

package/README.md

@@ -21,8 +21,8 @@ npx hunter-harness update
 | Claude Code | `.claude/skills/` | `.claude/rules/*.md` | `.claude/agents/` |
 | Codex | `.agents/skills/` | `AGENTS.md` | 不生成 |
 | Cursor | `.cursor/skills/` | `.cursor/rules/*.mdc` | 不生成 |
-| CodeBuddy `both` | `.codebuddy/skills/` | `CODEBUDDY.md` | `.codebuddy/agents/` |
+| CodeBuddy `both` | `.codebuddy/skills/` | `CODEBUDDY.md` + `.codebuddy/.rules/*.mdc` + `.codebuddy/rules/*.md` | `.codebuddy/agents/` |
 
-需要 Node.js 24 或更高版本。token 只通过 `--token-env` 指定的环境变量读取，不要写入项目文件或命令参数。
+需要 Node.js 22.12 或更高版本。选择 CodeBuddy 时，可将已有 `.claude/rules` 非破坏性同步到 CodeBuddy，并在检测到 `.codegraph/` 时合并项目级 `.mcp.json`；疑似凭据内容会跳过。token 只通过 `--token-env` 指定的环境变量读取，不要写入项目文件或命令参数。
 
-本包当前为 `UNLICENSED`。参考迁移资产的上游 license、commit/tag 和允许再分发范围确认前，不得对外发布。
+本包使用 MIT License。

package/dist/bin.js

@@ -1098,8 +1098,8 @@ async function assertNoSymlinks(root, relativePath) {
   for (const segment of normalized.split("/")) {
     current = join(current, segment);
     try {
-      const stat6 = await lstat(current);
-      if (stat6.isSymbolicLink()) {
+      const stat7 = await lstat(current);
+      if (stat7.isSymbolicLink()) {
         throw new UnsafePathError("symbolic links are not managed");
       }
     } catch (error) {
@@ -1230,6 +1230,9 @@ var HunterHarnessApiClient = class {
       body
     });
   }
+  async getProject(projectId, requestId) {
+    return this.request("GET", "/api/v1/projects/" + encodeURIComponent(projectId), { requestId });
+  }
   async createProposalSession(projectId, body, requestId, idempotencyKey) {
     return this.request("POST", "/api/v1/projects/" + encodeURIComponent(projectId) + "/proposal-sessions", { requestId, idempotencyKey, body });
   }
@@ -1982,6 +1985,13 @@ function makeAdapter(spec) {
       return projectBundleFiles(bundle, spec.skillsRoot, spec.agentsRoot);
     },
     contextIndex(context) {
+      if (spec.name === "codebuddy") {
+        return {
+          instructions: spec.instructions,
+          skills_root: spec.skillsRoot,
+          rules: codebuddyRulePaths(context)
+        };
+      }
       const rules = [];
       if (spec.rulesRoot !== null && spec.ruleExt !== null) {
         rules.push(`${spec.rulesRoot}/harness-general${spec.ruleExt}`);
@@ -2001,6 +2011,9 @@ function makeAdapter(spec) {
         boundaries.push(spec.agentsRoot);
       if (spec.rulesRoot !== null)
         boundaries.push(spec.rulesRoot);
+      if (spec.name === "codebuddy") {
+        boundaries.push(".codebuddy/.rules", ".codebuddy/rules");
+      }
       const top = spec.skillsRoot.split("/")[0];
       if (top !== void 0)
         boundaries.push(top);
@@ -2053,6 +2066,17 @@ var ADAPTERS = {
 function getAdapter(name) {
   return ADAPTERS[name];
 }
+function codebuddyRulePaths(context) {
+  const names = context.profile === "java" ? ["harness-general", "harness-profile-java"] : ["harness-general"];
+  const paths = [];
+  if (context.codebuddySurface !== "cli") {
+    paths.push(...names.map((name) => `.codebuddy/.rules/${name}.mdc`));
+  }
+  if (context.codebuddySurface !== "ide") {
+    paths.push(...names.map((name) => `.codebuddy/rules/${name}.md`));
+  }
+  return paths.sort((left, right) => left.localeCompare(right));
+}
 function getAdapters(names) {
   return HARNESS_AGENT_ORDER.filter((n) => names.includes(n)).map(getAdapter);
 }
@@ -2068,6 +2092,13 @@ function managedTargetsFor(adapter, bundle, context) {
     if (context.profile === "java") {
       records.push(ruleTarget("rules/harness-profile-java.mdc", ".cursor/rules/harness-profile-java.mdc", CURSOR_JAVA_RULES_CONTENT));
     }
+  } else if (adapter.name === "codebuddy") {
+    for (const targetPath of codebuddyRulePaths(context)) {
+      const isMdc = targetPath.endsWith(".mdc");
+      const isJava = targetPath.includes("harness-profile-java");
+      const content = isJava ? isMdc ? CURSOR_JAVA_RULES_CONTENT : HARNESS_JAVA_RULES_CONTENT : isMdc ? CURSOR_GENERAL_RULES_CONTENT : HARNESS_GENERAL_RULES_CONTENT;
+      records.push(ruleTarget(`rules/${isJava ? "harness-profile-java" : "harness-general"}${isMdc ? ".mdc" : ".md"}`, targetPath, content));
+    }
   }
   assertNoCaseCollisions(records.map((record) => record.target_path));
   return records.sort((left, right) => left.target_path.localeCompare(right.target_path));
@@ -3704,6 +3735,10 @@ function assertPreviewAllowed(preview, skip) {
   }
 }
 var CREDENTIALS_HINT = "\u53EF\u5728\u4EA4\u4E92\u6A21\u5F0F\u4E0B\u5F55\u5165\uFF0C\u6216\u5199\u5165 .harness/credentials.local.yaml\uFF08\u52FF\u63D0\u4EA4 git\uFF09";
+var STALE_BASELINE_MESSAGE = "\u670D\u52A1\u7AEF\u5DF2\u6709\u66F4\u65B0\u7684\u63A8\u9001\uFF0C\u8BF7\u5148 git pull \u540E\u6267\u884C npx hunter-harness update \u518D\u63A8";
+function staleBaselineError(code) {
+  return new PushWorkflowError(STALE_BASELINE_MESSAGE, 5, code);
+}
 function makePreview(baseline, files, confirmedProjectLocal, ignorePaths, deletedAt = (/* @__PURE__ */ new Date()).toISOString()) {
   const filteredFiles = {};
   for (const [path, content] of Object.entries(files)) {
@@ -3748,14 +3783,12 @@ async function pushProject(options) {
   const profile = parseHarnessProfile(project.project.profiles[0]);
   const installedPaths = profile === null ? /* @__PURE__ */ new Set() : new Set(await Promise.all(enabledHarnessAgents(project).map((agent) => managedBundleTargets(options.resourcesRoot, profile, agent))).then((targets) => targets.flatMap((target) => [...target])));
   let preview = makePreview(baseline, await managedFiles(root, project), options.confirmedProjectLocal ?? [], installedPaths);
-  const initialSkip = await resolveSensitiveScanSkip(preview, options);
-  if (initialSkip.cancelled === true) {
-    return { preview, proposalId: null, projectId: project.project.project_id, cancelled: true };
-  }
-  let sensitiveScanSkip = initialSkip.skip;
-  let sensitiveScanSkipReason = initialSkip.reason;
-  assertPreviewAllowed(preview, sensitiveScanSkip);
   if (options.dryRun) {
+    const drySkip = await resolveSensitiveScanSkip(preview, options);
+    if (drySkip.cancelled === true) {
+      return { preview, proposalId: null, projectId: project.project.project_id, cancelled: true };
+    }
+    assertPreviewAllowed(preview, drySkip.skip);
     return { preview, proposalId: null, projectId: project.project.project_id };
   }
   const localCredentials = await readLocalCredentials(root);
@@ -3789,6 +3822,25 @@ async function pushProject(options) {
   if (parsedServerUrl.protocol !== "https:") {
     throw new PushWorkflowError("server_url must use HTTPS", 3, "SERVER_URL_INVALID");
   }
+  const client = new HunterHarnessApiClient({
+    serverUrl: parsedServerUrl.toString(),
+    token,
+    ...options.fetch === void 0 ? {} : { fetch: options.fetch }
+  });
+  const boundAtStart = project.project.project_id;
+  if (boundAtStart !== null) {
+    const remote = await client.getProject(boundAtStart, uuidV7());
+    if (remote.latest_project_version !== baseline.complete_project_version) {
+      throw staleBaselineError("PROJECT_VERSION_CONFLICT");
+    }
+  }
+  const initialSkip = await resolveSensitiveScanSkip(preview, options);
+  if (initialSkip.cancelled === true) {
+    return { preview, proposalId: null, projectId: project.project.project_id, cancelled: true };
+  }
+  let sensitiveScanSkip = initialSkip.skip;
+  let sensitiveScanSkipReason = initialSkip.reason;
+  assertPreviewAllowed(preview, sensitiveScanSkip);
   if (options.confirmProposal !== void 0 && !await options.confirmProposal(preview)) {
     return { preview, proposalId: null, projectId: project.project.project_id, cancelled: true };
   }
@@ -3803,11 +3855,6 @@ async function pushProject(options) {
     await atomicWriteJson(workflowPath, workflow);
     preview = makePreview(baseline, await managedFiles(root, project), options.confirmedProjectLocal ?? [], installedPaths, workflow.created_at);
     const requestId = workflow.request_id;
-    const client = new HunterHarnessApiClient({
-      serverUrl: parsedServerUrl.toString(),
-      token,
-      ...options.fetch === void 0 ? {} : { fetch: options.fetch }
-    });
     if (project.project.project_id === null) {
       const resolved = await client.resolveProject({
         schema_version: 1,
@@ -3914,8 +3961,8 @@ async function pushProject(options) {
       throw error;
     }
     if (error instanceof ApiError) {
-      if (error.code === "STALE_PUSH") {
-        throw new PushWorkflowError("\u670D\u52A1\u7AEF\u5DF2\u6709\u66F4\u65B0\u7684\u63A8\u9001\uFF0C\u8BF7\u5148 git pull \u540E\u6267\u884C npx hunter-harness update \u518D\u63A8", 5, "STALE_PUSH");
+      if (error.code === "STALE_PUSH" || error.code === "PROJECT_VERSION_CONFLICT") {
+        throw staleBaselineError(error.code);
       }
       if (error.code === "SENSITIVE_CONTENT_BLOCKED") {
         const details = error.details;
@@ -4107,8 +4154,8 @@ async function rollbackLatestCommittedUpdate(projectRoot) {
   const after = JSON.parse(await readFile11(join12(transactionRoot, "after", "manifest.json"), "utf8"));
   for (const entry of after) {
     const target = join12(projectRoot, entry.path);
-    const exists5 = await pathExists(target);
-    if (exists5 !== entry.exists || exists5 && await sha256File(target) !== entry.hash) {
+    const exists6 = await pathExists(target);
+    if (exists6 !== entry.exists || exists6 && await sha256File(target) !== entry.hash) {
       throw new Error("cannot rollback dirty path: " + entry.path);
     }
   }
@@ -4120,15 +4167,15 @@ async function rollbackLatestCommittedUpdate(projectRoot) {
     }
     seen.add(snapshot.path);
     const target = join12(projectRoot, snapshot.path);
-    const exists5 = await pathExists(target);
+    const exists6 = await pathExists(target);
     if (snapshot.existed && snapshot.snapshot_name !== null) {
       const content = await readFile11(join12(transactionRoot, "before", snapshot.snapshot_name));
       operations.push({
-        operation: exists5 ? "modify" : "add",
+        operation: exists6 ? "modify" : "add",
         path: snapshot.path,
         content
       });
-    } else if (exists5) {
+    } else if (exists6) {
       operations.push({ operation: "delete", path: snapshot.path });
     }
   }
@@ -4286,17 +4333,20 @@ async function updateProject(options) {
   if (project.project.project_id === null) {
     throw new UpdateWorkflowError("project is not bound to a server", 3, "PROJECT_NOT_BOUND");
   }
-  const serverUrl = options.serverUrl ?? project.server.url;
   const tokenEnv = options.tokenEnv ?? project.server.token_env;
-  if (serverUrl === null || serverUrl === void 0) {
-    throw new UpdateWorkflowError("server_url is required", 3, "SERVER_URL_REQUIRED");
-  }
   if (!/^[A-Z_][A-Z0-9_]*$/.test(tokenEnv)) {
     throw new UpdateWorkflowError("token_env is invalid", 3, "TOKEN_ENV_INVALID");
   }
-  const token = options.env[tokenEnv];
-  if (token === void 0 || token.trim() === "") {
-    throw new UpdateWorkflowError("API token environment variable is unset", 8, "TOKEN_INVALID");
+  const local = await readLocalCredentials(root);
+  const serverUrl = options.serverUrl ?? local?.server_url ?? project.server.url;
+  if (serverUrl === null || serverUrl === void 0) {
+    throw new UpdateWorkflowError("server_url is required", 3, "SERVER_URL_REQUIRED");
+  }
+  const envToken = options.env[tokenEnv]?.trim();
+  const localToken = local?.token?.trim();
+  const token = envToken !== void 0 && envToken !== "" ? envToken : localToken !== void 0 && localToken !== "" ? localToken : void 0;
+  if (token === void 0) {
+    throw new UpdateWorkflowError(`API token \u672A\u914D\u7F6E\uFF1A\u8BF7\u8BBE\u7F6E\u73AF\u5883\u53D8\u91CF ${tokenEnv}\uFF0C\u6216\u5728 .harness/credentials.local.yaml \u914D\u7F6E token\uFF08\u53EF\u901A\u8FC7 npx hunter-harness push \u5F15\u5BFC\u5199\u5165\uFF09`, 8, "TOKEN_INVALID");
   }
   const requestId = uuidV7();
   const baseline = await readBaseline(root);
@@ -4541,13 +4591,15 @@ function normalizeProfile(value) {
   if (value === "2" || value === "java") return "java";
   throw new InitConfigurationError("\u914D\u7F6E\u7C7B\u578B\u5FC5\u987B\u4E3A general \u6216 java");
 }
+var ALL_AGENT_TOKENS = /* @__PURE__ */ new Set(["all", "5"]);
 function parseAgentsInput(raw) {
   const trimmed = raw.trim();
   if (trimmed === "") return ["claude-code"];
-  if (trimmed === "all") return [...HARNESS_AGENT_ORDER];
+  if (ALL_AGENT_TOKENS.has(trimmed)) return [...HARNESS_AGENT_ORDER];
   const agents = [];
   for (const token of trimmed.split(",")) {
     const value = token.trim();
+    if (ALL_AGENT_TOKENS.has(value)) return [...HARNESS_AGENT_ORDER];
     const byIndex = AGENT_BY_INDEX[value];
     if (byIndex !== void 0) {
       agents.push(byIndex);
@@ -4672,14 +4724,118 @@ function serializeCliResult(result) {
   return JSON.stringify(result) + "\n";
 }
 
+// src/config/codebuddy-setup.ts
+import { mkdir as mkdir4, readFile as readFile14, readdir as readdir7, stat as stat4, writeFile as writeFile5 } from "node:fs/promises";
+import { basename as basename2, dirname as dirname4, extname, join as join15 } from "node:path";
+var MANAGED_RULE_NAMES = /* @__PURE__ */ new Set([
+  "harness-general.md",
+  "harness-general.mdc",
+  "harness-profile-java.md",
+  "harness-profile-java.mdc"
+]);
+var SENSITIVE_ASSIGNMENT = /(?:password|passwd|token|secret|access[_-]?key|private[_-]?key)\s*[:=]\s*[^\s#]+/i;
+var PRIVATE_KEY_BLOCK = /-----BEGIN (?:RSA |EC |OPENSSH )?PRIVATE KEY-----/i;
+async function exists4(path) {
+  try {
+    await stat4(path);
+    return true;
+  } catch {
+    return false;
+  }
+}
+async function readJsonObject(path) {
+  try {
+    const parsed = JSON.parse(await readFile14(path, "utf8"));
+    return parsed !== null && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : null;
+  } catch (error) {
+    if (error instanceof Error && "code" in error && error.code === "ENOENT") return {};
+    return null;
+  }
+}
+async function inspectCodeBuddySetup(projectRoot) {
+  const rulesRoot = join15(projectRoot, ".claude", "rules");
+  let claudeRules = [];
+  try {
+    claudeRules = (await readdir7(rulesRoot, { withFileTypes: true })).filter((entry) => entry.isFile() && [".md", ".mdc"].includes(extname(entry.name).toLowerCase())).map((entry) => entry.name).filter((name) => !MANAGED_RULE_NAMES.has(name)).sort();
+  } catch (error) {
+    if (!(error instanceof Error && "code" in error && error.code === "ENOENT")) throw error;
+  }
+  const mcp = await readJsonObject(join15(projectRoot, ".mcp.json"));
+  const servers = mcp?.mcpServers;
+  const configured = servers !== null && typeof servers === "object" && !Array.isArray(servers) && Object.prototype.hasOwnProperty.call(servers, "codegraph");
+  return {
+    claudeRules,
+    hasCodeGraphIndex: await exists4(join15(projectRoot, ".codegraph")),
+    codeGraphConfigured: configured
+  };
+}
+function destinationTargets(root, surface, name) {
+  const stem = basename2(name, extname(name));
+  const targets = [];
+  if (surface !== "cli") targets.push(join15(root, ".codebuddy", ".rules", `${stem}.mdc`));
+  if (surface !== "ide") targets.push(join15(root, ".codebuddy", "rules", `${stem}.md`));
+  return targets;
+}
+async function applyCodeBuddySetup(options) {
+  const result = {
+    copied: [],
+    preserved: [],
+    skippedSensitive: [],
+    mcpUpdated: false,
+    warnings: []
+  };
+  if (options.syncClaudeRules) {
+    const plan = await inspectCodeBuddySetup(options.projectRoot);
+    for (const name of plan.claudeRules) {
+      const source = join15(options.projectRoot, ".claude", "rules", name);
+      const content = await readFile14(source, "utf8");
+      if (SENSITIVE_ASSIGNMENT.test(content) || PRIVATE_KEY_BLOCK.test(content)) {
+        result.skippedSensitive.push(name);
+        continue;
+      }
+      for (const target of destinationTargets(options.projectRoot, options.surface, name)) {
+        if (await exists4(target)) {
+          result.preserved.push(target);
+          continue;
+        }
+        await mkdir4(dirname4(target), { recursive: true });
+        await writeFile5(target, content, { encoding: "utf8", flag: "wx" });
+        result.copied.push(target);
+      }
+    }
+  }
+  if (options.configureCodeGraph) {
+    const path = join15(options.projectRoot, ".mcp.json");
+    const current = await readJsonObject(path);
+    if (current === null) {
+      result.warnings.push(".mcp.json \u4E0D\u662F\u6709\u6548 JSON\uFF0C\u5DF2\u4FDD\u7559\u539F\u6587\u4EF6\u5E76\u8DF3\u8FC7 CodeGraph MCP \u914D\u7F6E");
+    } else {
+      const currentServers = current.mcpServers;
+      const servers = currentServers !== null && typeof currentServers === "object" && !Array.isArray(currentServers) ? currentServers : {};
+      if (!Object.prototype.hasOwnProperty.call(servers, "codegraph")) {
+        const next = {
+          ...current,
+          mcpServers: {
+            ...servers,
+            codegraph: { command: "codegraph", args: ["serve", "--mcp"] }
+          }
+        };
+        await writeFile5(path, JSON.stringify(next, null, 2) + "\n", "utf8");
+        result.mcpUpdated = true;
+      }
+    }
+  }
+  return result;
+}
+
 // src/commands/refresh.ts
-import { readFile as readFile14 } from "node:fs/promises";
-import { join as join15 } from "node:path";
+import { readFile as readFile15 } from "node:fs/promises";
+import { join as join16 } from "node:path";
 import { parse as parseYaml9 } from "yaml";
 async function detectProject(root) {
   let content;
   try {
-    content = await readFile14(join15(root, ".harness", "project.yaml"), "utf8");
+    content = await readFile15(join16(root, ".harness", "project.yaml"), "utf8");
   } catch (error) {
     if (error instanceof Error && "code" in error && error.code === "ENOENT") {
       return { status: "absent" };
@@ -4707,8 +4863,14 @@ function refreshAgents(config) {
   }));
   return agents.length > 0 ? agents : ["claude-code"];
 }
-function codebuddySurface(config) {
-  return config.adapter_options?.codebuddy?.surface ?? "both";
+function codebuddySurface(config, override) {
+  const value = override ?? config.adapter_options?.codebuddy?.surface ?? "both";
+  if (value === "both" || value === "ide" || value === "cli") return value;
+  throw new InitConfigurationError(
+    "codebuddy surface \u5FC5\u987B\u4E3A both\u3001ide \u6216 cli",
+    3,
+    "CODEBUDDY_SURFACE_INVALID"
+  );
 }
 function summarize(result) {
   const items = [
@@ -4795,7 +4957,7 @@ async function runRefresh(options, dependencies) {
         resourcesRoot: dependencies.resourcesRoot,
         ...targetProfile === void 0 ? {} : { profile: targetProfile },
         agents: targetAgents,
-        codebuddySurface: codebuddySurface(detection.config),
+        codebuddySurface: codebuddySurface(detection.config, options.codebuddySurface),
         dryRun: true,
         forceManaged: options.forceManaged === true
       });
@@ -4831,7 +4993,7 @@ async function runRefresh(options, dependencies) {
       resourcesRoot: dependencies.resourcesRoot,
       ...targetProfile === void 0 ? {} : { profile: targetProfile },
       agents: targetAgents,
-      codebuddySurface: codebuddySurface(detection.config),
+      codebuddySurface: codebuddySurface(detection.config, options.codebuddySurface),
       dryRun,
       forceManaged: options.forceManaged === true
     });
@@ -4880,6 +5042,54 @@ var AGENT_LABELS = {
   cursor: "Cursor",
   codebuddy: "CodeBuddy"
 };
+function agentMenuLines(installedProfiles) {
+  const lines = HARNESS_AGENT_ORDER.map((agent, index) => {
+    const profile = installedProfiles?.[agent];
+    const suffix = profile === void 0 ? "" : `\uFF08\u5DF2\u5B89\u88C5\uFF1A${profile}\uFF09`;
+    return `  ${index + 1}. ${AGENT_LABELS[agent]}${suffix}`;
+  }).join("\n");
+  return lines + "\n  5. \u5168\u90E8";
+}
+async function configureCodeBuddyExtras(agents, surface, options, dependencies) {
+  if (!agents.includes("codebuddy")) return;
+  const plan = await inspectCodeBuddySetup(dependencies.cwd);
+  let syncClaudeRules = false;
+  let configureCodeGraph = false;
+  if (plan.claudeRules.length > 0) {
+    syncClaudeRules = options.nonInteractive === true ? options.yes === true : /^(?:|y|yes)$/i.test((await dependencies.prompt(
+      `\u53D1\u73B0 ${plan.claudeRules.length} \u4E2A Claude \u81EA\u5B9A\u4E49\u89C4\u5219\uFF0C\u662F\u5426\u590D\u5236\u5230 CodeBuddy\uFF08\u4FDD\u7559\u6E90\u6587\u4EF6\u4E14\u4E0D\u8986\u76D6\u76EE\u6807\uFF09\uFF1F[Y/n]\uFF1A`
+    )).trim());
+  }
+  if (plan.hasCodeGraphIndex && !plan.codeGraphConfigured) {
+    configureCodeGraph = options.nonInteractive === true ? options.yes === true : /^(?:|y|yes)$/i.test((await dependencies.prompt(
+      "\u68C0\u6D4B\u5230 .codegraph \u7D22\u5F15\uFF0C\u662F\u5426\u5408\u5E76 CodeGraph MCP \u5230\u9879\u76EE .mcp.json\uFF1F[Y/n]\uFF1A"
+    )).trim());
+  }
+  if (options.dryRun === true) {
+    if (syncClaudeRules || configureCodeGraph) {
+      dependencies.stdout("CodeBuddy \u9644\u52A0\u914D\u7F6E\u5904\u4E8E dry-run\uFF0C\u672A\u5199\u5165\u89C4\u5219\u6216 .mcp.json\u3002\n");
+    }
+    return;
+  }
+  const result = await applyCodeBuddySetup({
+    projectRoot: dependencies.cwd,
+    surface,
+    syncClaudeRules,
+    configureCodeGraph
+  });
+  if (result.copied.length > 0) {
+    dependencies.stdout(`\u5DF2\u5B89\u5168\u590D\u5236 ${result.copied.length} \u4E2A CodeBuddy \u89C4\u5219\u6587\u4EF6\u3002
+`);
+  }
+  if (result.skippedSensitive.length > 0) {
+    dependencies.stderr(
+      `\u68C0\u6D4B\u5230 ${result.skippedSensitive.length} \u4E2A\u7591\u4F3C\u542B\u51ED\u636E\u7684 Claude \u89C4\u5219\uFF0C\u5DF2\u4FDD\u7559\u539F\u5904\u4E14\u672A\u590D\u5236\u3002
+`
+    );
+  }
+  if (result.mcpUpdated) dependencies.stdout("\u5DF2\u5408\u5E76 CodeGraph MCP \u5230 .mcp.json\u3002\n");
+  for (const warning of result.warnings) dependencies.stderr(warning + "\n");
+}
 async function runFirstInstall(options, dependencies) {
   const requestId = uuidV7();
   try {
@@ -4889,7 +5099,7 @@ async function runFirstInstall(options, dependencies) {
       options,
       options.nonInteractive === true ? {} : {
         agents: () => dependencies.prompt(
-          "\u8BF7\u9009\u62E9\u76EE\u6807 Agent\uFF08\u53EF\u591A\u9009\uFF0C\u4F7F\u7528\u9017\u53F7\u5206\u9694\uFF09\n  1. Claude Code\n  2. Codex\n  3. Cursor\n  4. CodeBuddy\n\u8BF7\u8F93\u5165\u7F16\u53F7 [1]: "
+          "\u8BF7\u9009\u62E9\u76EE\u6807 Agent\uFF08\u53EF\u591A\u9009\uFF0C\u4F7F\u7528\u9017\u53F7\u5206\u9694\uFF09\n" + agentMenuLines() + "\n\u8BF7\u8F93\u5165\u7F16\u53F7 [1]: "
         ).then((answer) => answer.trim()),
         profile: () => dependencies.prompt(
           "\u8BF7\u9009\u62E9 Harness \u7C7B\u578B\uFF1A\n1. \u901A\u7528\uFF08\u9ED8\u8BA4\uFF09\n2. Java\n\u8BF7\u8F93\u5165 1 \u6216 2 [1]: "
@@ -4910,6 +5120,12 @@ async function runFirstInstall(options, dependencies) {
       config,
       dryRun: options.dryRun === true
     });
+    await configureCodeBuddyExtras(
+      config.agents,
+      config.codebuddy_surface,
+      options,
+      dependencies
+    );
     const output = {
       schema_version: 1,
       command: "configure",
@@ -4949,20 +5165,29 @@ async function runFirstInstall(options, dependencies) {
     return exitCode;
   }
 }
-async function runExistingProject(options, dependencies, currentProfile) {
+async function runExistingProject(options, dependencies, currentProfile, currentSurface) {
   const refreshOptions = {};
   if (options.agents !== void 0) refreshOptions.agents = options.agents;
+  if (options.codebuddySurface !== void 0) {
+    refreshOptions.codebuddySurface = options.codebuddySurface;
+  }
   if (options.profile !== void 0) refreshOptions.profile = options.profile;
   if (options.nonInteractive !== void 0) refreshOptions.nonInteractive = options.nonInteractive;
   if (options.yes !== void 0) refreshOptions.yes = options.yes;
   if (options.dryRun !== void 0) refreshOptions.dryRun = options.dryRun;
   if (options.json !== void 0) refreshOptions.json = options.json;
   if (options.forceManaged !== void 0) refreshOptions.forceManaged = options.forceManaged;
-  if (options.nonInteractive === true) {
-    return runRefresh(refreshOptions, dependencies);
-  }
   const installed = await readInstalledAgentConfiguration(dependencies.cwd);
   const currentAgents = installed.agents.length > 0 ? installed.agents : ["claude-code"];
+  if (options.nonInteractive === true) {
+    const selectedAgents2 = options.agents === void 0 ? currentAgents : parseAgentsInput(options.agents);
+    const code2 = await runRefresh(refreshOptions, dependencies);
+    if (code2 === 0) {
+      const surface = options.codebuddySurface === "ide" || options.codebuddySurface === "cli" || options.codebuddySurface === "both" ? options.codebuddySurface : currentSurface;
+      await configureCodeBuddyExtras(selectedAgents2, surface, options, dependencies);
+    }
+    return code2;
+  }
   const currentLines = currentAgents.map(
     (agent) => `- ${AGENT_LABELS[agent]}\uFF1A${installed.profiles[agent] ?? currentProfile}`
   ).join("\n");
@@ -4972,10 +5197,7 @@ async function runExistingProject(options, dependencies, currentProfile) {
       `Hunter Harness \u5F53\u524D\u914D\u7F6E\uFF1A
 ${currentLines}
 \u8BF7\u9009\u62E9\u672C\u6B21\u8981\u65B0\u589E\u6216\u5237\u65B0\u7684\u5DE5\u5177\uFF08\u53EF\u591A\u9009\uFF0C\u9017\u53F7\u5206\u9694\uFF1B\u672A\u9009\u62E9\u7684\u5DE5\u5177\u4FDD\u6301\u4E0D\u53D8\uFF09\uFF1A
-  1. Claude Code
-  2. Codex
-  3. Cursor
-  4. CodeBuddy
+` + agentMenuLines(installed.profiles) + `
 \u8BF7\u8F93\u5165\u7F16\u53F7 [${defaultSelection}]\uFF0C\u6216\u8F93\u5165 0 \u53D6\u6D88\uFF1A`
     );
     if (answer.trim() === "0" || /^c/i.test(answer.trim())) return 2;
@@ -4997,7 +5219,13 @@ ${currentLines}
     refreshOptions.profile = answer.trim() === "" ? defaultProfile : answer.trim();
   }
   refreshOptions.confirmed = true;
-  return runRefresh(refreshOptions, dependencies);
+  const selectedAgents = parseAgentsInput(refreshOptions.agents);
+  const code = await runRefresh(refreshOptions, dependencies);
+  if (code === 0) {
+    const surface = options.codebuddySurface === "ide" || options.codebuddySurface === "cli" || options.codebuddySurface === "both" ? options.codebuddySurface : currentSurface;
+    await configureCodeBuddyExtras(selectedAgents, surface, options, dependencies);
+  }
+  return code;
 }
 async function runConfigure(options, dependencies) {
   const detection = await detectProject(dependencies.cwd);
@@ -5022,7 +5250,8 @@ async function runConfigure(options, dependencies) {
   }
   if (detection.status === "valid") {
     const currentProfile = detection.config.project.profiles[0] ?? "general";
-    return runExistingProject(options, dependencies, currentProfile);
+    const currentSurface = detection.config.adapter_options?.codebuddy?.surface ?? "both";
+    return runExistingProject(options, dependencies, currentProfile, currentSurface);
   }
   return runFirstInstall(options, dependencies);
 }
@@ -5371,11 +5600,11 @@ async function runUpdate(options, dependencies) {
 }
 
 // src/commands/recovery.ts
-import { stat as stat4 } from "node:fs/promises";
-import { join as join16 } from "node:path";
-async function exists4(path) {
+import { stat as stat5 } from "node:fs/promises";
+import { join as join17 } from "node:path";
+async function exists5(path) {
   try {
-    await stat4(path);
+    await stat5(path);
     return true;
   } catch {
     return false;
@@ -5432,7 +5661,7 @@ async function runRecoveryMenuIfApplicable(options, dependencies) {
       return 5;
     }
   }
-  const initialized = await exists4(join16(dependencies.cwd, ".harness", "project.yaml"));
+  const initialized = await exists5(join17(dependencies.cwd, ".harness", "project.yaml"));
   if (!initialized || options.nonInteractive === true || explicitConfigure(options)) {
     return null;
   }
@@ -5475,8 +5704,8 @@ async function runRecoveryMenuIfApplicable(options, dependencies) {
 }
 
 // src/workflow-data/resolve.ts
-import { cp, mkdir as mkdir4, readdir as readdir7, readFile as readFile15, rm as rm8, stat as stat5 } from "node:fs/promises";
-import { dirname as dirname4, join as join17, relative as relative2 } from "node:path";
+import { cp, mkdir as mkdir5, readdir as readdir8, readFile as readFile16, rm as rm8, stat as stat6 } from "node:fs/promises";
+import { dirname as dirname5, join as join18, relative as relative2 } from "node:path";
 import { fileURLToPath } from "node:url";
 var WorkflowDataResolutionError = class extends Error {
   code;
@@ -5490,7 +5719,7 @@ var WorkflowDataResolutionError = class extends Error {
 };
 async function pathExists3(path) {
   try {
-    await stat5(path);
+    await stat6(path);
     return true;
   } catch {
     return false;
@@ -5510,17 +5739,17 @@ function workflowPackageName(family, env) {
   return `${scope}/workflow-${family}`;
 }
 async function listFilesRecursive(root, base = root) {
-  const entries = await readdir7(root, { withFileTypes: true });
+  const entries = await readdir8(root, { withFileTypes: true });
   const files = [];
   for (const entry of entries) {
-    const absolute = join17(root, entry.name);
+    const absolute = join18(root, entry.name);
     if (entry.isDirectory()) {
       files.push(...await listFilesRecursive(absolute, base));
       continue;
     }
     if (!entry.isFile()) continue;
     const rel = relative2(base, absolute).replaceAll("\\", "/");
-    files.push({ path: rel, content: await readFile15(absolute, "utf8") });
+    files.push({ path: rel, content: await readFile16(absolute, "utf8") });
   }
   return files;
 }
@@ -5533,7 +5762,7 @@ async function verifyWorkflowPackageIntegrity(resourcesRoot) {
   const manifest = await readWorkflowFamilyManifest(resourcesRoot);
   const expected = manifest.content_sha256;
   if (typeof expected !== "string" || expected.length === 0) return;
-  const harnessRoot = join17(resourcesRoot, "harness");
+  const harnessRoot = join18(resourcesRoot, "harness");
   if (!await pathExists3(harnessRoot)) {
     throw new WorkflowDataResolutionError(
       "\u5DE5\u4F5C\u6D41\u6570\u636E\u5305\u7F3A\u5C11 harness/\uFF0C\u65E0\u6CD5\u6821\u9A8C SHA-256",
@@ -5552,40 +5781,40 @@ async function verifyWorkflowPackageIntegrity(resourcesRoot) {
   }
 }
 async function monorepoResourcesRoot() {
-  const here = dirname4(fileURLToPath(import.meta.url));
+  const here = dirname5(fileURLToPath(import.meta.url));
   const candidates = [
     // TypeScript source: packages/cli/src/workflow-data -> packages/workflow-data-harness.
-    join17(here, "../../../workflow-data-harness"),
+    join18(here, "../../../workflow-data-harness"),
     // Bundled CLI: packages/cli/dist -> packages/workflow-data-harness.
-    join17(here, "../../workflow-data-harness"),
+    join18(here, "../../workflow-data-harness"),
     // Test/build layouts that preserve additional source directory levels.
-    join17(here, "../../../../packages/workflow-data-harness")
+    join18(here, "../../../../packages/workflow-data-harness")
   ];
   for (const candidate of candidates) {
-    if (await pathExists3(join17(candidate, "harness", "manifests"))) return candidate;
+    if (await pathExists3(join18(candidate, "harness", "manifests"))) return candidate;
   }
   return null;
 }
 async function siblingWorkflowPackage(cwd) {
-  const here = dirname4(fileURLToPath(import.meta.url));
+  const here = dirname5(fileURLToPath(import.meta.url));
   const candidates = [
-    join17(cwd, "node_modules", "@hunter-harness", "workflow-harness"),
+    join18(cwd, "node_modules", "@hunter-harness", "workflow-harness"),
     // Published layout: node_modules/hunter-harness/dist/bin.js alongside the
     // scoped workflow package in node_modules/@hunter-harness/workflow-harness.
-    join17(here, "..", "..", "@hunter-harness", "workflow-harness"),
+    join18(here, "..", "..", "@hunter-harness", "workflow-harness"),
     // Monorepo bundled layout: packages/cli/dist/bin.js.
-    join17(here, "..", "..", "workflow-data-harness")
+    join18(here, "..", "..", "workflow-data-harness")
   ];
   for (const candidate of candidates) {
-    if (await pathExists3(join17(candidate, "harness", "manifests"))) return candidate;
+    if (await pathExists3(join18(candidate, "harness", "manifests"))) return candidate;
   }
   return null;
 }
 async function readCachedNpmPackageVersion(cacheRoot) {
-  const manifestPath = join17(cacheRoot, "package.json");
+  const manifestPath = join18(cacheRoot, "package.json");
   if (!await pathExists3(manifestPath)) return null;
   try {
-    const pkg = JSON.parse(await readFile15(manifestPath, "utf8"));
+    const pkg = JSON.parse(await readFile16(manifestPath, "utf8"));
     return typeof pkg.version === "string" && pkg.version.length > 0 ? pkg.version : null;
   } catch {
     return null;
@@ -5607,13 +5836,13 @@ async function latestWorkflowCacheIsStale(cacheRoot, packageName, resolveManifes
   }
 }
 async function materializeWorkflowPackageCache(cacheRoot, packageSpec, extract) {
-  await mkdir4(cacheRoot, { recursive: true });
-  const staging = join17(cacheRoot, ".extract");
+  await mkdir5(cacheRoot, { recursive: true });
+  const staging = join18(cacheRoot, ".extract");
   await rm8(staging, { recursive: true, force: true });
-  await mkdir4(staging, { recursive: true });
+  await mkdir5(staging, { recursive: true });
   await extract(packageSpec, staging);
-  const packageDir = await pathExists3(join17(staging, "harness", "manifests")) ? staging : join17(staging, "package");
-  if (!await pathExists3(join17(packageDir, "harness", "manifests"))) {
+  const packageDir = await pathExists3(join18(staging, "harness", "manifests")) ? staging : join18(staging, "package");
+  if (!await pathExists3(join18(packageDir, "harness", "manifests"))) {
     throw new WorkflowDataResolutionError(
       "\u5DE5\u4F5C\u6D41\u6570\u636E\u5305\u5185\u5BB9\u65E0\u6548\uFF1A\u7F3A\u5C11 harness/manifests",
       "WORKFLOW_DATA_INVALID",
@@ -5642,8 +5871,8 @@ async function resolveWorkflowResourcesRoot(options, argv = []) {
   const packageName = workflowPackageName(family, options.env);
   const packageSpec = version === "latest" ? packageName : `${packageName}@${version}`;
   const cacheKey = packageSpec.replace("/", "+");
-  const cacheRoot = join17(options.cwd, ".harness", "cache", "workflow-packages", cacheKey);
-  if (await pathExists3(join17(cacheRoot, "harness", "manifests"))) {
+  const cacheRoot = join18(options.cwd, ".harness", "cache", "workflow-packages", cacheKey);
+  if (await pathExists3(join18(cacheRoot, "harness", "manifests"))) {
     if (version === "latest") {
       const stale = await latestWorkflowCacheIsStale(cacheRoot, packageName, options.pacoteManifest);
       if (stale) {
@@ -5689,9 +5918,9 @@ function describeWorkflowDataFetchFailure(error, packageSpec) {
   return `\u65E0\u6CD5\u83B7\u53D6\u5DE5\u4F5C\u6D41\u6570\u636E\u5305 ${packageSpec}\uFF1A\u672C\u5730\u7F13\u5B58\u4E0D\u5B58\u5728\u4E14\u83B7\u53D6\u5931\u8D25\u3002\u53EF${hintRoot}\u3002\u539F\u56E0\uFF1A${code !== "" ? code + " " : ""}${detail}`;
 }
 async function readWorkflowFamilyManifest(resourcesRoot) {
-  const manifestPath = join17(resourcesRoot, "hunter-workflow-family.json");
+  const manifestPath = join18(resourcesRoot, "hunter-workflow-family.json");
   if (!await pathExists3(manifestPath)) return {};
-  return JSON.parse(await readFile15(manifestPath, "utf8"));
+  return JSON.parse(await readFile16(manifestPath, "utf8"));
 }
 
 // src/bin.ts

package/package.json

@@ -1,11 +1,11 @@
-{
+{
   "name": "hunter-harness",
-  "version": "0.2.10",
+  "version": "0.2.12",
   "description": "Local-first, server-governed agent harness",
   "license": "MIT",
   "type": "module",
   "engines": {
-    "node": ">=24.0.0"
+    "node": ">=22.12.0"
   },
   "bin": {
     "hunter-harness": "dist/bin.js"
@@ -15,7 +15,7 @@
   ],
   "scripts": {
     "build": "node ../../node_modules/typescript/bin/tsc -p tsconfig.json && npm run bundle",
-    "bundle": "node ../../scripts/bundle-cli.mjs",
+    "bundle": "node ../../scripts/bundle-cli.mjs",
     "typecheck": "node ../../node_modules/typescript/bin/tsc -p tsconfig.json --noEmit",
     "prepack": "npm run build"
   },
@@ -25,7 +25,7 @@
     "zod": "4.4.3"
   },
   "optionalDependencies": {
-    "pacote": "^21.0.0"
+    "pacote": "21.4.0"
   },
   "devDependencies": {
     "@hunter-harness/contracts": "*",