huaweicloud-devkit 0.1.17 → 0.1.20

package/README.md

@@ -27,10 +27,10 @@ npx --yes huaweicloud-devkit uninstall # 卸载
 ### Codex
 
 ```bash
-npx --yes huaweicloud-devkit install --target codex     # 暂用于测试
+npx --yes huaweicloud-devkit install --target codex
 ```
 
-> **注意：** 如果未检测到 Codex CLI，安装程序会自动跳过 Codex。
+> 需要先安装 Codex CLI。`--target all` 会在 Codex CLI 缺失时跳过 Codex。
 
 ### Claude Code
 
@@ -143,6 +143,13 @@ Agent 技能是经过整理的指令和参考材料包，帮助 Agent 完成特
 - [安全模型](docs/safety-model.md)
 - [KooCLI 官方文档](https://support.huaweicloud.com/qs-hcli/hcli_02_003.html)
 
+## 发布流程
+
+发布采用两步 workflow，全部在 GitHub Actions 中完成：
+
+1. **Prepare Release**（手动触发，选 `patch` / `minor` / `major`）：自动 bump 版本、跑质量门、推 `release/vX.Y.Z` 分支并创建 PR，CI 全绿后自动合并进 `main`。
+2. **Publish Release**（PR 合并后手动触发）：读取 `main` 版本，创建并推送 `vX.Y.Z` tag，生成 GitHub Release；tag 触发 `CD Production`，经 `production` 环境人工审批后发布到 npm（包名 `huaweicloud-devkit`）。
+
 ## 许可证
 
 本项目基于 Apache-2.0 许可证发布。详见 [LICENSE](LICENSE)。

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "huaweicloud-devkit",
-  "version": "0.1.17",
+  "version": "0.1.20",
   "description": "Agent toolkit that helps coding agents use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities safely and accurately.",
   "type": "module",
   "files": [

package/plugins/huaweicloud-core/.claude-plugin/plugin.json

@@ -20,7 +20,7 @@
   "mcpServers": "./.mcp.json",
   "description": "Guide coding agents to use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities with safer execution and less context.",
   "skills": "./skills/",
-  "version": "0.1.17",
+  "version": "0.1.20",
   "author": {
     "name": "HuaweiCloud Mate",
     "url": "https://github.com/huaweicloud-mate"

package/plugins/huaweicloud-core/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "huaweicloud-core",
-  "version": "0.1.17",
+  "version": "0.1.20",
   "description": "Guide coding agents to use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities with safer execution and less context.",
   "author": {
     "name": "HuaweiCloud Mate",

package/plugins/huaweicloud-core/.cursor-plugin/plugin.json

@@ -20,7 +20,7 @@
   "mcpServers": "./.mcp.json",
   "description": "Guide coding agents to use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities with safer execution and less context.",
   "skills": "./skills/",
-  "version": "0.1.17",
+  "version": "0.1.20",
   "author": {
     "name": "HuaweiCloud Mate",
     "url": "https://github.com/huaweicloud-mate"

package/plugins/huaweicloud-core/skills/huawei-cloud-find-skills/SKILL.md

@@ -12,7 +12,7 @@ description: |
 
 # Huawei Cloud Agent Skills Search and Discovery
 
-This skill enables users to efficiently search, discover, and install Huawei Cloud skills. 
+This skill enables users to efficiently search, discover, and install Huawei Cloud skills.
 
 ## Scenario Description
 

package/plugins/huaweicloud-core/skills/huawei-dds-dcs/SKILL.md

@@ -12,7 +12,7 @@ Always run `hcloud DDS <Operation> --help` or `hcloud DCS <Operation> --help` be
 
 ## DDS (Document Database Service — MongoDB Compatible)
 
-## Critical Warnings
+## DDS Critical Warnings
 
 | Trap | Why |
 |------|-----|
@@ -35,7 +35,7 @@ Discover exact parameters with `--help` before executing any command.
 
 ## DCS (Distributed Cache Service — Redis/Memcached)
 
-## Critical Warnings
+## DCS Critical Warnings
 
 | Trap | Why |
 |------|-----|

package/plugins/huaweicloud-core/skills/huawei-ecs/references/create-instance.md

@@ -9,16 +9,20 @@ hcloud ECS ListFlavors --cli-region=<region> --cli-output=json
 hcloud ECS NovaListAvailabilityZones --cli-region=<region>
 
 ## 3. Find image
+
+```bash
+# Broad search — specific names may return empty in some regions
 hcloud IMS ListImages --cli-region=<region> --__imagetype=gold --__isregistered=true --limit=20
+```
 
-Common image IDs (cn-south-1, verify with region):
-| Image | ID |
-|-------|----|
-| Ubuntu 22.04 | Query live via ListImages |
-| CentOS 8.2 64bit | Query live via ListImages |
-| EulerOS 2.9 64bit | Query live via ListImages |
+If searching by name (e.g. --name="Ubuntu") returns empty: use broad search without name filter, pick from results. Some regions only offer Huawei Cloud EulerOS (HCE).
 
-Always run ListImages to get the latest image IDs — they change over time.
+Common images (verify live per region):
+| Image | Region | ID |
+|-------|--------|----|
+| HCE 2.0 Standard | cn-north-4 | 7d940784-ac0a-425f-b3fa-8478f1a1df70 |
+| Ubuntu 22.04 | Query live | Query live |
+| CentOS 8.2 | Query live | Query live |
 
 ## 4. Verify or create VPC/subnet
 hcloud VPC ListVpcs --cli-region=<region>
@@ -26,7 +30,7 @@ hcloud VPC ListSubnets --vpc_id=<vpc-id> --cli-region=<region>
 If no VPC/subnet exists: load `huawei-vpc` skill → create VPC → create subnet (with DNS) → create security group → return here.
 
 ## 5. Create keypair (recommended over adminPass)
-hcloud ECS NovaCreateKeypair --keypair.name=<name>
+hcloud ECS NovaCreateKeypair --keypair_name=<name>
 Save the returned private key to a local file. The public key is auto-injected.
 
 Password alternative:
@@ -54,18 +58,20 @@ hcloud ECS CreateServers ... --server.user_data=$user_data
 ```
 
 > **Security**: Never embed secrets (passwords, AK/SK, tokens) in user_data. It is stored unencrypted and readable from within the instance via IMDS. Fetch secrets at boot from DEW/CSMS instead.
-
+>
 > **Debugging**: If the script didn't run, check `/var/log/cloud-init-output.log` on the instance.
 
 ## 7. EIP (optional)
 hcloud EIP CreatePublicip --publicip.type=<type> --bandwidth.size=<size> --bandwidth.share_type=<share-type> --bandwidth.name=<name>
 
+```bash
 # Get the ECS network port ID
 hcloud ECS ListServersDetails --cli-region=<region> --server_id=<instance-id>
 # → addresses.<vpc-id>[].OS-EXT-IPS:port_id
 
 # Bind EIP via port
 hcloud EIP AssociatePublicips --publicip_id=<eip-id> --publicip.associate_instance_id=<port-id> --publicip.associate_instance_type=PORT
+```
 
 ## 8. Verify
 hcloud ECS ListServersDetails --cli-region=<region> --server_id=<instance-id>

package/plugins/huaweicloud-core/skills/huawei-functiongraph/references/triggers.md

@@ -138,5 +138,5 @@ hcloud FunctionGraph DeleteFunctionTrigger --function_urn=<urn> --trigger_type_c
 ```
 
 > Deleting a trigger does NOT cascade-delete the associated APIG API. After `DeleteFunctionTrigger`, also run `hcloud APIG ListApisV2 --instance_id=<id>` and delete orphaned APIs to avoid resource residue.
-
+>
 > **APIG event format**: When using DEDICATEDGATEWAY, the event body is Base64 encoded and uses a non-standard structure. See `apig-event-format.md` for handler templates.

package/plugins/huaweicloud-core/skills/huawei-vpc/SKILL.md

@@ -38,7 +38,8 @@ Domain expertise for Huawei Cloud Virtual Private Cloud (VPC). Covers VPC/subnet
 | SG rule | hcloud VPC CreateSecurityGroupRule --security_group_rule.security_group_id=<id> --security_group_rule.direction=<direction> --security_group_rule.protocol=<protocol> --security_group_rule.multiport=<port> --security_group_rule.remote_ip_prefix=<cidr> | references/security-group.md |
 | Create EIP | hcloud EIP CreatePublicip --publicip.type=<type> --bandwidth.size=<size> --bandwidth.share_type=<share-type> --bandwidth.name=<name> | Run `hcloud EIP CreatePublicip --help` to confirm valid type values per region |
 | Bind EIP to ECS | hcloud EIP AssociatePublicips --publicip_id=<id> --publicip.associate_instance_id=<port-id> --publicip.associate_instance_type=PORT | Get port ID from `hcloud ECS ListServersDetails --server_id=<id>` → `OS-EXT-IPS:port_id` |
-| Unbind EIP | hcloud EIP UnbindPublicIp --publicip_id=<id> | references/eip.md |
+| Unbind EIP | hcloud EIP DisassociatePublicip --publicip_id=<id> | references/eip.md |
+| Delete EIP | hcloud EIP DeletePublicip --publicip_id=<id> | references/eip.md |
 | List EIPs | hcloud EIP ListPublicips | |
 | NAT gateway | hcloud NAT CreateNatGateway --nat.name=<name> --nat.spec=<spec> --router_id=<vpc-id> --internal_network_id=<subnet-id> | Run `hcloud NAT CreateNatGateway --help` for available spec values |
 

package/plugins/huaweicloud-core/skills/huawei-vpc/references/network.md

@@ -1,5 +1,29 @@
 # VPC Network Management Reference
 
+## DNS Addresses by Region
+
+Subnets without DNS configuration will fail cloud-init. Use these DNS addresses:
+
+| Region | Primary DNS | Secondary DNS |
+|--------|------------|---------------|
+| cn-north-1 | 100.125.1.250 | 100.125.129.250 |
+| cn-north-4 | 100.125.1.250 | 100.125.129.250 |
+| cn-east-3 | 100.125.1.250 | 100.125.129.250 |
+| cn-south-1 | 100.125.1.250 | 100.125.129.250 |
+| ap-southeast-3 | 100.125.1.250 | 100.125.129.250 |
+
+**Subnet create with DNS**:
+```bash
+hcloud VPC CreateSubnet \
+  --subnet.name=<name> \
+  --subnet.vpc_id=<id> \
+  --subnet.cidr=10.50.1.0/24 \
+  --subnet.gateway_ip=10.50.1.1 \
+  --subnet.availability_zone=<az> \
+  --subnet.dnsList.1=100.125.1.250 \
+  --subnet.dnsList.2=100.125.129.250
+```
+
 ## Nested Prefix Summary
 
 KooCLI 7.x VPC API requires nested prefixes:
@@ -23,7 +47,7 @@ hcloud EIP AssociatePublicips --publicip_id=<id> \
   --publicip.associate_instance_id=<port-id> --publicip.associate_instance_type=PORT
 
 # Unbind
-hcloud EIP UnbindPublicIp --publicip_id=<id>
+hcloud EIP DisassociatePublicip --publicip_id=<id>
 
 # List
 hcloud EIP ListPublicips

package/plugins/huaweicloud-core/skills/huaweicloud-cli-and-auth/SKILL.md

@@ -70,14 +70,14 @@ Agent processes find executables through `PATH`. If OpenCode/Codex cannot find `
 2. **KooCLI first-run privacy agreement**: On a fresh KooCLI install, `hcloud` blocks with `同意并继续使用(y)/不同意并退出(N)` and fails with `[USE_ERROR]您输入的是无效字符` in non-interactive mode. Detection: check command output for these strings. Ask the user: "KooCLI needs to accept its privacy agreement. May I accept it on your behalf?" If the user agrees, run `huaweicloud_run_readonly_command` with `args=["version"]` and `stdin="y\n"`. This accepts the agreement once, after which hcloud works normally.
 3. Ask the user to configure credentials outside the agent conversation when setup is needed.
 4. Inspect profile and region only through redacted tooling.
-4. Discover exact operation names with `hcloud <Service> --help` before guessing. Example: ECS instance listing is commonly `ECS ListServersDetails`; ECS creation is commonly `ECS CreateServers`; image lookup may be under `IMS GlanceShowImage`.
-5. Use `--cli-output=json` for machine-readable responses when supported.
-6. For resource operations, include `--cli-region`, `--cli-profile`, and service-specific project information when required.
-7. Classify every command before running it:
+5. Discover exact operation names with `hcloud <Service> --help` before guessing. Example: ECS instance listing is commonly `ECS ListServersDetails`; ECS creation is commonly `ECS CreateServers`; image lookup may be under `IMS GlanceShowImage`.
+6. Use `--cli-output=json` for machine-readable responses when supported.
+7. For resource operations, include `--cli-region`, `--cli-profile`, and service-specific project information when required.
+8. Classify every command before running it:
    - Read-only: `List*`, `Show*`, `Get*`, `Describe*`.
    - Write: `Create*`, `Delete*`, `Update*`, `Resize*`, `Start*`, `Stop*`, `Authorize*`, and similar.
    - Secret: any operation returning secret string, binary secret, token, or password.
-8. For write operations, show the exact command and ask for explicit approval.
+9. For write operations, show the exact command and ask for explicit approval.
 
 ## KooCLI Syntax Notes
 

package/plugins/huaweicloud-core/src/setup-cli.mjs

@@ -323,9 +323,13 @@ async function cmdInstall() {
   if (target === 'codex' || target === 'all') {
     console.log('\n[Codex]');
     if (!hasCodexCLI()) {
-      console.log(`  \x1b[33mCodex CLI not found. Skipping Codex install.\x1b[0m`);
-      console.log('  To install for Codex, first install Codex CLI, then run:');
-      console.log('    npx huaweicloud-devkit install --target codex');
+      if (target === 'codex') {
+        console.log(`  \x1b[31mCodex CLI not found. Install Codex first: https://github.com/openai/codex-cli\x1b[0m`);
+        console.log(`  Then re-run: npx huaweicloud-devkit install --target codex`);
+        process.exit(1);
+      }
+      console.log(`  \x1b[33mCodex CLI not found. Skipping Codex.\x1b[0m`);
+      console.log('  Install Codex CLI to enable: npx huaweicloud-devkit install --target codex');
     } else {
       installCodex();
     }
@@ -533,14 +537,38 @@ async function cmdInstallHcloud() {
     : join(homedir(), '.local', 'bin');
 
   if (os === 'win32') {
-    console.log(`[Windows] Download and unzip to ${installDir}`);
     const url = `${baseUrl}/huaweicloud-cli-windows-amd64.zip`;
-    console.log(`  Download: ${url}`);
-    console.log(`  Unzip to: ${installDir}`);
-    console.log(`  Add to PATH: ${installDir}`);
-    console.log(`  Verify: hcloud version`);
-    console.log('\n\x1b[33mWindows auto-install not supported yet. Run commands above manually.\x1b[0m');
-    console.log(`\nFull guide: https://support.huaweicloud.com/qs-hcli/hcli_02_003_01.html`);
+    const zipPath = join(installDir, 'hcloud.zip');
+
+    console.log(`[Windows] Auto-installing to ${installDir}...`);
+
+    try {
+      mkdirSync(installDir, { recursive: true });
+
+      // Download
+      console.log(`  Downloading ${url}...`);
+      const psCmd = `[Net.ServicePointManager]::SecurityProtocol=[Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri '${url}' -OutFile '${zipPath}' -UseBasicParsing`;
+      spawnSync('powershell', ['-NoProfile', '-Command', psCmd], { stdio: 'inherit', windowsHide: true });
+
+      // Extract
+      console.log('  Extracting...');
+      spawnSync('powershell', ['-NoProfile', '-Command', `Expand-Archive -Path '${zipPath}' -DestinationPath '${installDir}' -Force`], { stdio: 'inherit', windowsHide: true });
+
+      // Clean up zip
+      rmSync(zipPath, { force: true });
+
+      // Add to PATH
+      console.log('  Adding to user PATH...');
+      spawnSync('setx', ['PATH', `${process.env.PATH};${installDir}`], { stdio: 'inherit', windowsHide: true });
+
+      console.log(`\n\x1b[32mInstall complete.\x1b[0m`);
+      console.log(`  Verify: ${join(installDir, 'hcloud.exe')} version`);
+      console.log('  Or restart terminal and: hcloud version');
+    } catch (e) {
+      console.log(`\n\x1b[33mAuto-install failed: ${e.message}\x1b[0m`);
+      console.log(`  Manual: download ${url}, unzip to ${installDir}, add to PATH`);
+      console.log(`  Guide: https://support.huaweicloud.com/qs-hcli/hcli_02_003_01.html`);
+    }
   } else if (os === 'linux') {
     console.log('[Linux] One-liner install:');
     console.log('  curl -sSL https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest/hcloud_install.sh -o ./hcloud_install.sh && bash ./hcloud_install.sh -y');