万字长文丨Claude Code 源码泄漏技术复盘:第一梯队 AI 公司如何打造 Harness Engineering

• 如何把模型能力绑定到工具能力

• 如何定义执行边界，而不是仅靠 prompt 自觉

• 如何让任务可以被拆分、追踪、验证和恢复

• 如何把长期记忆、外部系统和多 Agent 协作纳入统一执行平面

• 如何通过 feature flag、权限模式、实验开关来运营整个系统

exportfunction getAllBaseTools(): Tools {return [    AgentTool,    TaskOutputTool,    BashTool,    ...(hasEmbeddedSearchTools() ? [] : [GlobTool, GrepTool]),    ExitPlanModeV2Tool,    FileReadTool,    FileEditTool,    FileWriteTool,    NotebookEditTool,    WebFetchTool,    TodoWriteTool,    WebSearchTool,    TaskStopTool,    AskUserQuestionTool,    SkillTool,    EnterPlanModeTool,    ...(process.env.USER_TYPE === 'ant' ? [ConfigTool] : []),    ...(process.env.USER_TYPE === 'ant' ? [TungstenTool] : []),

const SleepTool =  feature('PROACTIVE') || feature('KAIROS')    ? require('./tools/SleepTool/SleepTool.js').SleepTool    : nullconst cronTools = feature('AGENT_TRIGGERS')  ? [      require('./tools/ScheduleCronTool/CronCreateTool.js').CronCreateTool,      require('./tools/ScheduleCronTool/CronDeleteTool.js').CronDeleteTool,      require('./tools/ScheduleCronTool/CronListTool.js').CronListTool,    ]  : []const RemoteTriggerTool = feature('AGENT_TRIGGERS_REMOTE')  ? require('./tools/RemoteTriggerTool/RemoteTriggerTool.js').RemoteTriggerTool  : null

import teleport from './commands/teleport/index.js'import chrome from './commands/chrome/index.js'import stickers from './commands/stickers/index.js'import advisor from './commands/advisor.js'import mobile from './commands/mobile/index.js'

const voiceCommand = feature('VOICE_MODE')  ? require('./commands/voice/index.js').default  : nullconst webCmd = feature('CCR_REMOTE_SETUP')  ? (      require('./commands/remote-setup/index.js') as typeof import('./commands/remote-setup/index.js')    ).default  : nullconst buddy = feature('BUDDY')  ? (      require('./commands/buddy/index.js') as typeof import('./commands/buddy/index.js')    ).default  : null

if (currentMode !== 'plan') {  handlePlanModeTransition(currentMode, 'plan');  setAppState(prev => ({    ...prev,    toolPermissionContext: applyPermissionUpdate(prepareContextForPlanMode(prev.toolPermissionContext), {type: 'setMode',      mode: 'plan',      destination: 'session'    })  }));  const description = args.trim();if (description && description !== 'open') {    onDone('Enabled plan mode', {      shouldQuery: true    });  } else {    onDone('Enabled plan mode');  }return null;}

export const TodoWriteTool = buildTool({  name: TODO_WRITE_TOOL_NAME,  searchHint: 'manage the session task checklist',  ...  async call({ todos }, context) {    const appState = context.getAppState()    const todoKey = context.agentId ?? getSessionId()    const oldTodos = appState.todos[todoKey] ?? []    const allDone = todos.every(_ => _.status === 'completed')    const newTodos = allDone ? [] : todos

if (  feature('VERIFICATION_AGENT') &&  getFeatureValue_CACHED_MAY_BE_STALE('tengu_hive_evidence', false) &&  !context.agentId &&  allDone &&  todos.length >= 3 &&  !todos.some(t => /verif/i.test(t.content))) {  verificationNudgeNeeded = true}

const nudge = verificationNudgeNeeded  ? \n\nNOTE: You just closed out 3+ tasks and none of them was a verification step. Before writing your final summary, spawn the verification agent...  : ''

// NOTE: excludedCommands is a user-facing convenience feature, not a security boundary.// It is not a security bug to be able to bypass excludedCommands — the sandbox permission// system (which prompts users) is the actual security control.

exportfunction isDangerousBashPermission(  toolName: string,  ruleContent: string | undefined,): boolean {if (toolName !== BASH_TOOL_NAME) {returnfalse  }if (ruleContent === undefined || ruleContent === '') {returntrue  }

if (content === ${lowerPattern}:*) {returntrue}if (content === ${lowerPattern}*) {returntrue}if (content.startsWith(${lowerPattern} -) && content.endsWith('*')) {returntrue}

const patterns: readonly string[] = [  ...CROSS_PLATFORM_CODE_EXEC,'pwsh','powershell','cmd','wsl','iex','invoke-expression','icm','invoke-command','start-process',  ...'add-type','new-object',]

const disabledCommands = getFeatureValue_CACHED_MAY_BE_STALE<{  commands: string[]  substrings: string[]}>('tengu_sandbox_disabled_commands', { commands: [], substrings: [] })

import { CLAUDE_CODE_GUIDE_AGENT } from './built-in/claudeCodeGuideAgent.js'import { EXPLORE_AGENT } from './built-in/exploreAgent.js'import { GENERAL_PURPOSE_AGENT } from './built-in/generalPurposeAgent.js'import { PLAN_AGENT } from './built-in/planAgent.js'import { STATUSLINE_SETUP_AGENT } from './built-in/statuslineSetup.js'import { VERIFICATION_AGENT } from './built-in/verificationAgent.js'

const agents: AgentDefinition[] = [  GENERAL_PURPOSE_AGENT,  STATUSLINE_SETUP_AGENT,]if (areExplorePlanAgentsEnabled()) {  agents.push(EXPLORE_AGENT, PLAN_AGENT)}if (  feature('VERIFICATION_AGENT') &&  getFeatureValue_CACHED_MAY_BE_STALE('tengu_hive_evidence', false)) {  agents.push(VERIFICATION_AGENT)}

/**Shared spawn module for teammate creation.Extracted from TeammateTool to allow reuse by AgentTool.*/

import {  SWARM_SESSION_NAME,  TEAM_LEAD_NAME,  TEAMMATE_COMMAND_ENV_VAR,  TMUX_COMMAND,} from '../../utils/swarm/constants.js'

exporttype SpawnOutput = {  teammate_id: string  agent_id: string  agent_type?: string  model?: string  name: string  color?: string  tmux_session_name: string  tmux_window_name: string  tmux_pane_id: string  team_name?: string  is_splitpane?: boolean  plan_mode_required?: boolean}

exportfunction shouldExtractMemory(messages: Message[]): boolean {  const currentTokenCount = tokenCountWithEstimation(messages)if (!isSessionMemoryInitialized()) {if (!hasMetInitializationThreshold(currentTokenCount)) {returnfalse    }    markSessionMemoryInitialized()  }

const shouldExtract =  (hasMetTokenThreshold && hasMetToolCallThreshold) ||  (hasMetTokenThreshold && !hasToolCallsInLastTurn)

await fs.mkdir(sessionMemoryDir, { mode: 0o700 })...await writeFile(memoryPath, '', {  encoding: 'utf-8',  mode: 0o600,  flag: 'wx',})

exportfunction getEnterpriseMcpFilePath(): string {return join(getManagedFilePath(), 'managed-mcp.json')}

const tempPath = ${mcpJsonPath}.tmp.${process.pid}.${Date.now()}const handle = await open(tempPath, 'w', existingMode ?? 0o644)...await handle.datasync()...await rename(tempPath, mcpJsonPath)

exportfunction getMcpServerSignature(config: McpServerConfig): string | null {  const cmd = getServerCommandArray(config)if (cmd) {return stdio:${jsonStringify(cmd)}  }  const url = getServerUrl(config)if (url) {return url:${unwrapCcrProxyUrl(url)}  }return null}

const buddy = feature('BUDDY')  ? (      require('./commands/buddy/index.js') as typeof import('./commands/buddy/index.js')    ).default  : null

companionReaction?: string// Timestamp of last /buddy pet — CompanionSprite renders hearts while recentcompanionPetAt?: number

const PET_BURST_MS = 2500; // how long hearts float after /buddy petconst PET_HEARTS = [  ${H}${H}  ,  ${H}${H}${H} , ${H}${H}${H}  , ${H}${H}${H} , '·    ·   ·  '];以及：const petAt = useAppState(s => s.companionPetAt);...const petting = petAge * TICK_MS < PET_BURST_MS;

export async function call(): Promise<LocalCommandResult> {  const url = 'https://www.stickermule.com/claudecode'  const success = await openBrowser(url)

const ultrareview: Command = {type: 'local-jsx',  name: 'ultrareview',  description: ~10–20 min · Finds and verifies bugs in your branch. Runs in Claude Code on the web. See ${CCR_TERMS_URL},  isEnabled: () => isUltrareviewEnabled(),  load: () => import('./review/ultrareviewCommand.js'),}

玉衡实验室是华清未央旗下开展前瞻科技研发的实验室，我们秉持“独到、精准、深刻”的内容理念，致力于为决策者、创新者和思想者提供具有穿透力的观点与洞见，在众声喧哗中辨别真正价值。