huaweicloud-devkit 0.1.21 → 0.1.24

package/plugins/huaweicloud-core/skills/huawei-obs/SKILL.md

@@ -1,118 +1,118 @@
----
-name: huawei-obs
-description: "Use when creating, configuring, or managing OBS buckets and objects on Huawei Cloud. Covers bucket creation, lifecycle policies, versioning, static website hosting, CORS, access control (IAM/bucket policy/ACL), cross-region replication, event notifications, and presigned URLs. Triggers on: OBS, bucket, object storage, lifecycle, versioning, static website, CORS, presigned, replication. NOT for: EVS block storage (use huawei-ecs), SFS file storage, CBR backup (use huawei-cbr)."
-version: 1
----
-
-# Huawei Cloud OBS
-
-**STOP - Do not answer from general knowledge.** Follow the procedure below.
-
-## Critical: OBS Command Syntax
-
-KooCLI OBS uses **obsutil-style** commands, NOT API-style operations. Always run `hcloud OBS help` (no `--`) before constructing commands:
-
-```bash
-hcloud OBS help           # NOT --help
-hcloud OBS help <command> # e.g. hcloud OBS help mb
-```
-
-| Wrong (API-style) | Correct (obsutil-style) |
-|-------------------|-------------------------|
-| `OBS CreateBucket` | `OBS mb obs://<bucket>` |
-| `OBS PutObject` | `OBS cp <file> obs://<bucket>/` |
-| `OBS DeleteBucket` | `OBS rm obs://<bucket> -r` |
-
-## Overview
-
-Domain expertise for Huawei Cloud Object Storage Service (OBS). Covers bucket/object lifecycle, access control, static website hosting, and presigned URLs.
-
-## Critical Warnings
-
-| Trap | Why |
-|------|-----|
-| Bucket name is global | All users share bucket namespace |
-| Three-layer permissions | IAM > Bucket Policy > ACL. Most restrictive wins |
-| Versioning is irreversible | Once enabled, cannot be disabled, only suspended |
-| OBS uses AK/SK directly | NOT IAM tokens. Auth errors mean check AK/SK validity |
-| Static website via CLI missing | KooCLI OBS lacks website config. Use REST API or console |
-| **OBS needs separate cred config** | `hcloud configure` is NOT enough for OBS. Run `hcloud OBS config -i` (interactive) to create `~/.obsutilconfig`. This must be done OUTSIDE agent chat. |
-| **obsutil interactive prompts** | `cp`/`rm` without `-f` causes "Please input (y/n)" → Agent hangs (TIMEOUT). Always use `-f` for non-interactive. |
-| **Directory upload adds prefix** | `cp <dir>/ obs://<bucket>/ -r` puts files under `bucket/<dir>/...`. Use `-flat` for root-level files (static sites). Preview with `-dryRun` first. |
-
-## OBS Credential Setup (Required Before First Use)
-
-KooCLI OBS uses a separate config file (`~/.obsutilconfig`), NOT `~/.hcloud/config.json`. Use the **same AK/SK** that you configured for hcloud. Run once outside agent chat:
-
-```bash
-# Preferred: interactive (safe, no AK/SK in shell history)
-hcloud OBS config -i
-# Follow prompts: AK, SK, endpoint (e.g. obs.cn-north-4.myhuaweicloud.com)
-
-# Alternative: non-interactive (use with caution — AK/SK in shell history)
-hcloud OBS config -e=<endpoint> -i=<AK> -k=<SK>
-```
-
-## Common Workflows
-
-| Task | Command |
-|------|---------|
-| Create bucket | `hcloud OBS mb obs://<bucket> -location=<region>` |
-| List buckets/objects | `hcloud OBS ls [obs://<bucket>]` |
-| Upload file | `hcloud OBS cp <file> obs://<bucket>/<key>` |
-| Upload directory (recursive) | `hcloud OBS cp <dir>/ obs://<bucket>/ -r -f -flat` |
-| Download object | `hcloud OBS cp obs://<bucket>/<key> <local-path>` |
-| Set bucket ACL | `hcloud OBS chattri obs://<bucket> -acl=public-read` |
-| Set object ACL | `hcloud OBS chattri obs://<bucket>/<key> -acl=public-read` | Bucket ACL does NOT cascade — anonymous reads need both |
-| Set lifecycle | `hcloud OBS lifecycle obs://<bucket> -method=put -localfile=<json>` |
-| Set bucket policy | `hcloud OBS bucketpolicy obs://<bucket> -method=put -localfile=<json>` |
-| Set CORS | `hcloud OBS cors obs://<bucket> -method=put -localfile=<json>` |
-| Delete bucket | `hcloud OBS rm obs://<bucket> -r` (must be empty) |
-| Presigned URL | `hcloud OBS sign obs://<bucket>/<key> -e=<seconds>` |
-| Object metadata | `hcloud OBS stat obs://<bucket>/<key>` |
-
-## Static Website Deployment Workflow
-
-See `references/static-website.md` for the full end-to-end workflow:
-Build → Create bucket → Upload → Set bucket ACL → Set object ACL → Configure website (REST API/console)
-
-> KooCLI OBS does NOT support `SetBucketWebsite`. Configure static website hosting via REST API (`PUT /?website`) or the Huawei Cloud console.
-
-## Storage Classes
-
-| Class | Use Case | Min Storage | Retrieval Fee |
-|-------|----------|-------------|---------------|
-| STANDARD | Frequently accessed | None | No |
-| STANDARD_IA | Infrequent access | 30 days | Yes |
-| ARCHIVE | Long-term archive | 90 days | Yes (hours) |
-
-## Troubleshooting
-
-| Error | Root Cause -> Fix |
-|-------|------------------|
-| AccessDenied on bucket | IAM/bucket policy/ACL conflict -> Check all three layers |
-| BucketAlreadyExists | Name taken globally -> Choose different name |
-| NoSuchKey | Object doesn't exist or wrong region -> Verify key and region |
-| InvalidAccessKeyId | OBS uses AK/SK directly -> Verify AK/SK validity, OBS endpoint, OBS permissions |
-| EntityTooLarge | Single PUT limit 5GB -> Use multipart upload |
-| OBS --help fails | KooCLI OBS uses `help` not `--help` -> Run `hcloud OBS help` |
-
-## Security Considerations
-
-- MUST block public access by default
-- MUST use HTTPS-only for buckets
-- SHOULD enable access logging for audit
-- SHOULD rotate presigned URL expiry (max 7 days)
-- MUST NOT store AK/SK in bucket policies
-
-## Cross-Skill References
-
-- **EIP**: See `huawei-vpc` for public network access
-- **DEW**: See `huawei-dew` for secret management
-
-## References
-
-- OBS Docs: https://support.huaweicloud.com/obs/
-- Static website: references/static-website.md
-- Lifecycle: references/bucket-lifecycle.md
-- Replication: references/replication.md
+---
+name: huawei-obs
+description: "Use when creating, configuring, or managing OBS buckets and objects on Huawei Cloud. Covers bucket creation, lifecycle policies, versioning, static website hosting, CORS, access control (IAM/bucket policy/ACL), cross-region replication, event notifications, and presigned URLs. Triggers on: OBS, bucket, object storage, lifecycle, versioning, static website, CORS, presigned, replication. NOT for: EVS block storage (use huawei-ecs), SFS file storage, CBR backup (use huawei-cbr)."
+version: 1
+---
+
+# Huawei Cloud OBS
+
+**STOP - Do not answer from general knowledge.** Follow the procedure below.
+
+## Critical: OBS Command Syntax
+
+KooCLI OBS uses **obsutil-style** commands, NOT API-style operations. Always run `hcloud OBS help` (no `--`) before constructing commands:
+
+```bash
+hcloud OBS help           # NOT --help
+hcloud OBS help <command> # e.g. hcloud OBS help mb
+```
+
+| Wrong (API-style) | Correct (obsutil-style) |
+|-------------------|-------------------------|
+| `OBS CreateBucket` | `OBS mb obs://<bucket>` |
+| `OBS PutObject` | `OBS cp <file> obs://<bucket>/` |
+| `OBS DeleteBucket` | `OBS rm obs://<bucket> -r` |
+
+## Overview
+
+Domain expertise for Huawei Cloud Object Storage Service (OBS). Covers bucket/object lifecycle, access control, static website hosting, and presigned URLs.
+
+## Critical Warnings
+
+| Trap | Why |
+|------|-----|
+| Bucket name is global | All users share bucket namespace |
+| Three-layer permissions | IAM > Bucket Policy > ACL. Most restrictive wins |
+| Versioning is irreversible | Once enabled, cannot be disabled, only suspended |
+| OBS uses AK/SK directly | NOT IAM tokens. Auth errors mean check AK/SK validity |
+| Static website via CLI missing | KooCLI OBS lacks website config. Use REST API or console |
+| **OBS needs separate cred config** | `hcloud configure` is NOT enough for OBS. Run `hcloud OBS config -i` (interactive) to create `~/.obsutilconfig`. This must be done OUTSIDE agent chat. |
+| **obsutil interactive prompts** | `cp`/`rm` without `-f` causes "Please input (y/n)" → Agent hangs (TIMEOUT). Always use `-f` for non-interactive. |
+| **Directory upload adds prefix** | `cp <dir>/ obs://<bucket>/ -r` puts files under `bucket/<dir>/...`. Use `-flat` for root-level files (static sites). Preview with `-dryRun` first. |
+
+## OBS Credential Setup (Required Before First Use)
+
+KooCLI OBS uses a separate config file (`~/.obsutilconfig`), NOT `~/.hcloud/config.json`. Use the **same AK/SK** that you configured for hcloud. Run once outside agent chat:
+
+```bash
+# Preferred: interactive (safe, no AK/SK in shell history)
+hcloud OBS config -i
+# Follow prompts: AK, SK, endpoint (e.g. obs.cn-north-4.myhuaweicloud.com)
+
+# Alternative: non-interactive (use with caution — AK/SK in shell history)
+hcloud OBS config -e=<endpoint> -i=<AK> -k=<SK>
+```
+
+## Common Workflows
+
+| Task | Command |
+|------|---------|
+| Create bucket | `hcloud OBS mb obs://<bucket> -location=<region>` |
+| List buckets/objects | `hcloud OBS ls [obs://<bucket>]` |
+| Upload file | `hcloud OBS cp <file> obs://<bucket>/<key>` |
+| Upload directory (recursive) | `hcloud OBS cp <dir>/ obs://<bucket>/ -r -f -flat` |
+| Download object | `hcloud OBS cp obs://<bucket>/<key> <local-path>` |
+| Set bucket ACL | `hcloud OBS chattri obs://<bucket> -acl=public-read` |
+| Set object ACL | `hcloud OBS chattri obs://<bucket>/<key> -acl=public-read` | Bucket ACL does NOT cascade — anonymous reads need both |
+| Set lifecycle | `hcloud OBS lifecycle obs://<bucket> -method=put -localfile=<json>` |
+| Set bucket policy | `hcloud OBS bucketpolicy obs://<bucket> -method=put -localfile=<json>` |
+| Set CORS | `hcloud OBS cors obs://<bucket> -method=put -localfile=<json>` |
+| Delete bucket | `hcloud OBS rm obs://<bucket> -r` (must be empty) |
+| Presigned URL | `hcloud OBS sign obs://<bucket>/<key> -e=<seconds>` |
+| Object metadata | `hcloud OBS stat obs://<bucket>/<key>` |
+
+## Static Website Deployment Workflow
+
+See `references/static-website.md` for the full end-to-end workflow:
+Build → Create bucket → Upload → Set bucket ACL → Set object ACL → Configure website (REST API/console)
+
+> KooCLI OBS does NOT support `SetBucketWebsite`. Configure static website hosting via REST API (`PUT /?website`) or the Huawei Cloud console.
+
+## Storage Classes
+
+| Class | Use Case | Min Storage | Retrieval Fee |
+|-------|----------|-------------|---------------|
+| STANDARD | Frequently accessed | None | No |
+| STANDARD_IA | Infrequent access | 30 days | Yes |
+| ARCHIVE | Long-term archive | 90 days | Yes (hours) |
+
+## Troubleshooting
+
+| Error | Root Cause -> Fix |
+|-------|------------------|
+| AccessDenied on bucket | IAM/bucket policy/ACL conflict -> Check all three layers |
+| BucketAlreadyExists | Name taken globally -> Choose different name |
+| NoSuchKey | Object doesn't exist or wrong region -> Verify key and region |
+| InvalidAccessKeyId | OBS uses AK/SK directly -> Verify AK/SK validity, OBS endpoint, OBS permissions |
+| EntityTooLarge | Single PUT limit 5GB -> Use multipart upload |
+| OBS --help fails | KooCLI OBS uses `help` not `--help` -> Run `hcloud OBS help` |
+
+## Security Considerations
+
+- MUST block public access by default
+- MUST use HTTPS-only for buckets
+- SHOULD enable access logging for audit
+- SHOULD rotate presigned URL expiry (max 7 days)
+- MUST NOT store AK/SK in bucket policies
+
+## Cross-Skill References
+
+- **EIP**: See `huawei-vpc` for public network access
+- **DEW**: See `huawei-dew` for secret management
+
+## References
+
+- OBS Docs: https://support.huaweicloud.com/obs/
+- Static website: references/static-website.md
+- Lifecycle: references/bucket-lifecycle.md
+- Replication: references/replication.md

package/plugins/huaweicloud-core/skills/huawei-obs/references/bucket-lifecycle.md

@@ -1,26 +1,26 @@
-# OBS Bucket Lifecycle
-
-> KooCLI OBS uses obsutil-style commands. `OBS CreateBucket` → `OBS mb`. `SetBucketWebsite` is NOT supported in KooCLI OBS (use API/SDK).
-
-## Create Bucket
-hcloud OBS mb obs://<bucket> -location=<region>
-
-## Lifecycle Rules (JSON)
-{
-  "Rules": [{
-    "ID": "move-to-ia-after-30d",
-    "Status": "Enabled",
-    "Filter": {"Prefix": ""},
-    "Transitions": [{"Days": 30, "StorageClass": "STANDARD_IA"}],
-    "Expiration": {"Days": 365}
-  }]
-}
-
-## Apply
-hcloud OBS lifecycle obs://<bucket> -method=put -localfile=<lifecycle.json>
-
-## Static Website
-Not available via KooCLI OBS CLI. Use `hcloud OBS chattri obs://<bucket> -acl=public-read` for bucket ACL, or use API/SDK for website configuration.
-
-## Cross-Region Replication
-Requires: source bucket versioning enabled, destination bucket in different region, replication IAM role.
+# OBS Bucket Lifecycle
+
+> KooCLI OBS uses obsutil-style commands. `OBS CreateBucket` → `OBS mb`. `SetBucketWebsite` is NOT supported in KooCLI OBS (use API/SDK).
+
+## Create Bucket
+hcloud OBS mb obs://<bucket> -location=<region>
+
+## Lifecycle Rules (JSON)
+{
+  "Rules": [{
+    "ID": "move-to-ia-after-30d",
+    "Status": "Enabled",
+    "Filter": {"Prefix": ""},
+    "Transitions": [{"Days": 30, "StorageClass": "STANDARD_IA"}],
+    "Expiration": {"Days": 365}
+  }]
+}
+
+## Apply
+hcloud OBS lifecycle obs://<bucket> -method=put -localfile=<lifecycle.json>
+
+## Static Website
+Not available via KooCLI OBS CLI. Use `hcloud OBS chattri obs://<bucket> -acl=public-read` for bucket ACL, or use API/SDK for website configuration.
+
+## Cross-Region Replication
+Requires: source bucket versioning enabled, destination bucket in different region, replication IAM role.

package/plugins/huaweicloud-core/skills/huawei-obs/references/static-website.md

@@ -1,56 +1,56 @@
-# OBS Static Website Deployment
-
-## Workflow
-
-```
-1. Build project     → npm run build / yarn build
-2. Create OBS bucket  → hcloud OBS mb obs://<bucket> -location=<region>
-3. Bulk upload        → hcloud OBS cp <build-dir>/ obs://<bucket>/ -r -f -flat -acl=public-read
-4. Set bucket ACL     → hcloud OBS chattri obs://<bucket> -acl=public-read
-5. Set object ACLs    → hcloud OBS chattri obs://<bucket>/ -r -f -acl=public-read
-6. Configure website  → REST API (KooCLI OBS lacks this feature)
-7. Verify             → curl http://<bucket>.obs-website.<region>.myhuaweicloud.com
-```
-
-## Step-by-Step (Vue/Vite Example)
-
-```bash
-# 1. Build
-npm run build                  # outputs to dist/
-
-# 2. Create bucket in target region
-hcloud OBS mb obs://my-static-site -location=cn-north-4
-
-# 3. Upload entire build directory (recursive, force, flatten, public ACL)
-hcloud OBS cp dist/ obs://my-static-site/ -r -f -flat -acl=public-read
-
-# 4. Set bucket ACL (required for static website access)
-hcloud OBS chattri obs://my-static-site -acl=public-read
-
-# 5. Set object ACLs recursively (objects don't inherit bucket ACL automatically)
-hcloud OBS chattri obs://my-static-site/ -r -f -acl=public-read
-
-# 5. Configure static website hosting
-# KooCLI OBS does NOT support this. Use one of:
-# Option A — REST API:
-#   PUT /?website HTTP/1.1
-#   Host: my-static-site.obs.cn-north-4.myhuaweicloud.com
-#   Body: {"IndexDocument": {"Suffix": "index.html"}, "ErrorDocument": {"Key": "error.html"}}
-#   (requires AK/SK signature)
-# Option B — Huawei Cloud Console:
-#   Console → OBS → Bucket → Basic Settings → Static Website Hosting
-
-# 6. Verify
-curl http://my-static-site.obs-website.cn-north-4.myhuaweicloud.com
-```
-
-## Key Gotchas
-
-- **Build output dir varies**: `dist/` (Vite), `build/` (CRA), `out/` (Next.js). Check `package.json` scripts.
-- **Bucket name must be DNS-compliant**: lowercase, numbers, hyphens only. No underscores or uppercase.
-- **Region matters**: Website endpoint depends on bucket region. `obs-website.<region>.myhuaweicloud.com`.
-- **Index.html routing**: For SPA apps (Vue Router, React Router), set `ErrorDocument` to `index.html` as well.
-- **Cache invalidation**: New uploads don't clear CDN cache. Add `?v=<timestamp>` to asset references or use OBS versioning.
-- **Always use `-f`**: Without `-f`, obsutil prompts "Please input (y/n)" on large uploads — Agent hangs (TIMEOUT).
-- **Use `-flat` for root files**: Without `-flat`, `dist/` becomes `bucket/dist/` prefix. Static sites need files at bucket root.
-- **Objects don't inherit bucket ACL**: Setting bucket to public-read does NOT make individual objects public. You must also set object-level ACL with `chattri obs://<bucket>/ -r -f -acl=public-read` or use `-acl=public-read` during upload.
+# OBS Static Website Deployment
+
+## Workflow
+
+```
+1. Build project     → npm run build / yarn build
+2. Create OBS bucket  → hcloud OBS mb obs://<bucket> -location=<region>
+3. Bulk upload        → hcloud OBS cp <build-dir>/ obs://<bucket>/ -r -f -flat -acl=public-read
+4. Set bucket ACL     → hcloud OBS chattri obs://<bucket> -acl=public-read
+5. Set object ACLs    → hcloud OBS chattri obs://<bucket>/ -r -f -acl=public-read
+6. Configure website  → REST API (KooCLI OBS lacks this feature)
+7. Verify             → curl http://<bucket>.obs-website.<region>.myhuaweicloud.com
+```
+
+## Step-by-Step (Vue/Vite Example)
+
+```bash
+# 1. Build
+npm run build                  # outputs to dist/
+
+# 2. Create bucket in target region
+hcloud OBS mb obs://my-static-site -location=cn-north-4
+
+# 3. Upload entire build directory (recursive, force, flatten, public ACL)
+hcloud OBS cp dist/ obs://my-static-site/ -r -f -flat -acl=public-read
+
+# 4. Set bucket ACL (required for static website access)
+hcloud OBS chattri obs://my-static-site -acl=public-read
+
+# 5. Set object ACLs recursively (objects don't inherit bucket ACL automatically)
+hcloud OBS chattri obs://my-static-site/ -r -f -acl=public-read
+
+# 5. Configure static website hosting
+# KooCLI OBS does NOT support this. Use one of:
+# Option A — REST API:
+#   PUT /?website HTTP/1.1
+#   Host: my-static-site.obs.cn-north-4.myhuaweicloud.com
+#   Body: {"IndexDocument": {"Suffix": "index.html"}, "ErrorDocument": {"Key": "error.html"}}
+#   (requires AK/SK signature)
+# Option B — Huawei Cloud Console:
+#   Console → OBS → Bucket → Basic Settings → Static Website Hosting
+
+# 6. Verify
+curl http://my-static-site.obs-website.cn-north-4.myhuaweicloud.com
+```
+
+## Key Gotchas
+
+- **Build output dir varies**: `dist/` (Vite), `build/` (CRA), `out/` (Next.js). Check `package.json` scripts.
+- **Bucket name must be DNS-compliant**: lowercase, numbers, hyphens only. No underscores or uppercase.
+- **Region matters**: Website endpoint depends on bucket region. `obs-website.<region>.myhuaweicloud.com`.
+- **Index.html routing**: For SPA apps (Vue Router, React Router), set `ErrorDocument` to `index.html` as well.
+- **Cache invalidation**: New uploads don't clear CDN cache. Add `?v=<timestamp>` to asset references or use OBS versioning.
+- **Always use `-f`**: Without `-f`, obsutil prompts "Please input (y/n)" on large uploads — Agent hangs (TIMEOUT).
+- **Use `-flat` for root files**: Without `-flat`, `dist/` becomes `bucket/dist/` prefix. Static sites need files at bucket root.
+- **Objects don't inherit bucket ACL**: Setting bucket to public-read does NOT make individual objects public. You must also set object-level ACL with `chattri obs://<bucket>/ -r -f -acl=public-read` or use `-acl=public-read` during upload.