huaweicloud-devkit 1.0.2-dev.9 → 1.0.2-next.0

package/plugins/huaweicloud-core/skills/huawei-obs/references/bucket-lifecycle.md

@@ -1,26 +1,26 @@
-# OBS Bucket Lifecycle
-
-> KooCLI OBS uses obsutil-style commands. `OBS CreateBucket` → `OBS mb`. `SetBucketWebsite` is NOT supported in KooCLI OBS (use API/SDK).
-
-## Create Bucket
-hcloud OBS mb obs://<bucket> -location=<region>
-
-## Lifecycle Rules (JSON)
-{
-  "Rules": [{
-    "ID": "move-to-ia-after-30d",
-    "Status": "Enabled",
-    "Filter": {"Prefix": ""},
-    "Transitions": [{"Days": 30, "StorageClass": "STANDARD_IA"}],
-    "Expiration": {"Days": 365}
-  }]
-}
-
-## Apply
-hcloud OBS lifecycle obs://<bucket> -method=put -localfile=<lifecycle.json>
-
-## Static Website
-Not available via KooCLI OBS CLI. Use `hcloud OBS chattri obs://<bucket> -acl=public-read` for bucket ACL, or use API/SDK for website configuration.
-
-## Cross-Region Replication
-Requires: source bucket versioning enabled, destination bucket in different region, replication IAM role.
+# OBS Bucket Lifecycle
+
+> KooCLI OBS uses obsutil-style commands. `OBS CreateBucket` → `OBS mb`. `SetBucketWebsite` is NOT supported in KooCLI OBS (use API/SDK).
+
+## Create Bucket
+hcloud OBS mb obs://<bucket> -location=<region>
+
+## Lifecycle Rules (JSON)
+{
+  "Rules": [{
+    "ID": "move-to-ia-after-30d",
+    "Status": "Enabled",
+    "Filter": {"Prefix": ""},
+    "Transitions": [{"Days": 30, "StorageClass": "STANDARD_IA"}],
+    "Expiration": {"Days": 365}
+  }]
+}
+
+## Apply
+hcloud OBS lifecycle obs://<bucket> -method=put -localfile=<lifecycle.json>
+
+## Static Website
+Not available via KooCLI OBS CLI. Use `hcloud OBS chattri obs://<bucket> -acl=public-read` for bucket ACL, or use API/SDK for website configuration.
+
+## Cross-Region Replication
+Requires: source bucket versioning enabled, destination bucket in different region, replication IAM role.

package/plugins/huaweicloud-core/skills/huawei-obs/references/common-pitfalls.md

@@ -1,100 +1,100 @@
-# OBS Common Pitfalls
-
-基于真实测试暴露的陷阱和避坑方法。
-
-## OBS 命令格式陷阱
-
-OBS 使用 **obsutil-style** 子命令，不是 API-style 操作名：
-
-| 错误写法（API-style） | 正确写法（obsutil-style） |
-|----------------------|--------------------------|
-| `OBS --help` | `hcloud OBS help`（无 `--`，`help` 是子命令） |
-| `OBS CreateBucket` | `hcloud OBS mb obs://<bucket>` |
-| `OBS PutObject` | `hcloud OBS cp <file> obs://<bucket>/` |
-| `OBS DeleteBucket` | `hcloud OBS rm obs://<bucket> -r` |
-| `OBS ListBuckets` | `hcloud OBS ls` |
-
-## 独立凭证配置
-
-KooCLI OBS 使用独立的凭证文件 `~/.obsutilconfig`，**不是** `~/.hcloud/config.json`。
-
-```bash
-# OBS 命令报 "Please set ak, sk and endpoint" 时运行：
-hcloud OBS config -i
-# 交互式输入：AK、SK、endpoint（如 obs.cn-north-4.myhuaweicloud.com）
-# 这必须由用户在 agent 对话外手动执行
-```
-
-## 目录上传语义
-
-`hcloud OBS cp <dir>/ obs://bucket/ -r` 将本地**文件夹名作为对象前缀**：
-
-```
-本地结构:
-  devkit/
-    index.html
-    assets/app.js
-
-上传后 OBS 结构:
-  obs://bucket/devkit/index.html     ← 多了 devkit/ 前缀
-  obs://bucket/devkit/assets/app.js
-
-预期结构:
-  obs://bucket/index.html
-  obs://bucket/assets/app.js
-```
-
-**规避方法**：
-1. 先 `-dryRun` 预览实际键名，再执行真实上传
-2. 或先将本地目录重命名为目标前缀名，如 `mv devkit/ root/` 后上传 `root/`
-3. 或使用 `-flat` 参数（如支持）
-
-## 静态网站托管
-
-KooCLI OBS **不支持** `SetBucketWebsite` 命令。配置静态网站托管需要：
-
-1. **REST API**: `PUT /?website` 到桶的 endpoint
-2. **控制台**: OBS 控制台 → 桶 → 静态网站托管 → 开启
-
-插件只能完成"上传文件 + 设置 ACL"，静态托管开关需用户手动完成。
-
-## 权限模型（三层）
-
-| 层级 | 作用域 | 优先级 |
-|------|--------|--------|
-| IAM Policy | 用户/用户组 | 最高 |
-| Bucket Policy | 桶级 | 中 |
-| ACL | 对象级 | 最低 |
-
-**关键规则**：三层中**最严格**的生效。Bucket Policy 设为 public-read，但 IAM deny 了 → 结果是 deny。
-
-**静态网站场景**：必须同时设置桶级 AND 对象级 `-acl=public-read`，因为 ACL 不级联。
-
-```bash
-# 桶级
-hcloud OBS chattri obs://<bucket> -acl=public-read
-# 对象级（必须单独执行）
-hcloud OBS chattri obs://<bucket>/index.html -acl=public-read
-```
-
-## 桶命名约束
-
-- 全局唯一，所有用户共享命名空间
-- 小写字母、数字、连字符
-- 3-63 字符
-- 不能以连字符开头或结尾
-- 不能是 IP 地址格式
-
-## 版本控制陷阱
-
-- 开启后**无法关闭**，只能暂停
-- 删除桶前必须清空所有版本和删除标记
-- 版本存储按对象大小计费
-
-## 安全注意事项
-
-- MUST 默认阻止公网访问
-- MUST 启用 HTTPS-only
-- SHOULD 开启访问日志
-- 预签名 URL 最大 7 天有效期
-- AK/SK 绝对不能写入 Bucket Policy
+# OBS Common Pitfalls
+
+基于真实测试暴露的陷阱和避坑方法。
+
+## OBS 命令格式陷阱
+
+OBS 使用 **obsutil-style** 子命令，不是 API-style 操作名：
+
+| 错误写法（API-style） | 正确写法（obsutil-style） |
+|----------------------|--------------------------|
+| `OBS --help` | `hcloud OBS help`（无 `--`，`help` 是子命令） |
+| `OBS CreateBucket` | `hcloud OBS mb obs://<bucket>` |
+| `OBS PutObject` | `hcloud OBS cp <file> obs://<bucket>/` |
+| `OBS DeleteBucket` | `hcloud OBS rm obs://<bucket> -r` |
+| `OBS ListBuckets` | `hcloud OBS ls` |
+
+## 独立凭证配置
+
+KooCLI OBS 使用独立的凭证文件 `~/.obsutilconfig`，**不是** `~/.hcloud/config.json`。
+
+```bash
+# OBS 命令报 "Please set ak, sk and endpoint" 时运行：
+hcloud OBS config -i
+# 交互式输入：AK、SK、endpoint（如 obs.cn-north-4.myhuaweicloud.com）
+# 这必须由用户在 agent 对话外手动执行
+```
+
+## 目录上传语义
+
+`hcloud OBS cp <dir>/ obs://bucket/ -r` 将本地**文件夹名作为对象前缀**：
+
+```
+本地结构:
+  devkit/
+    index.html
+    assets/app.js
+
+上传后 OBS 结构:
+  obs://bucket/devkit/index.html     ← 多了 devkit/ 前缀
+  obs://bucket/devkit/assets/app.js
+
+预期结构:
+  obs://bucket/index.html
+  obs://bucket/assets/app.js
+```
+
+**规避方法**：
+1. 先 `-dryRun` 预览实际键名，再执行真实上传
+2. 或先将本地目录重命名为目标前缀名，如 `mv devkit/ root/` 后上传 `root/`
+3. 或使用 `-flat` 参数（如支持）
+
+## 静态网站托管
+
+KooCLI OBS **不支持** `SetBucketWebsite` 命令。配置静态网站托管需要：
+
+1. **REST API**: `PUT /?website` 到桶的 endpoint
+2. **控制台**: OBS 控制台 → 桶 → 静态网站托管 → 开启
+
+插件只能完成"上传文件 + 设置 ACL"，静态托管开关需用户手动完成。
+
+## 权限模型（三层）
+
+| 层级 | 作用域 | 优先级 |
+|------|--------|--------|
+| IAM Policy | 用户/用户组 | 最高 |
+| Bucket Policy | 桶级 | 中 |
+| ACL | 对象级 | 最低 |
+
+**关键规则**：三层中**最严格**的生效。Bucket Policy 设为 public-read，但 IAM deny 了 → 结果是 deny。
+
+**静态网站场景**：必须同时设置桶级 AND 对象级 `-acl=public-read`，因为 ACL 不级联。
+
+```bash
+# 桶级
+hcloud OBS chattri obs://<bucket> -acl=public-read
+# 对象级（必须单独执行）
+hcloud OBS chattri obs://<bucket>/index.html -acl=public-read
+```
+
+## 桶命名约束
+
+- 全局唯一，所有用户共享命名空间
+- 小写字母、数字、连字符
+- 3-63 字符
+- 不能以连字符开头或结尾
+- 不能是 IP 地址格式
+
+## 版本控制陷阱
+
+- 开启后**无法关闭**，只能暂停
+- 删除桶前必须清空所有版本和删除标记
+- 版本存储按对象大小计费
+
+## 安全注意事项
+
+- MUST 默认阻止公网访问
+- MUST 启用 HTTPS-only
+- SHOULD 开启访问日志
+- 预签名 URL 最大 7 天有效期
+- AK/SK 绝对不能写入 Bucket Policy

package/plugins/huaweicloud-core/skills/huawei-obs/references/single-file-share.md

@@ -1,40 +1,40 @@
-# OBS Single-File Quick Share
-
-Host one file and get a shareable link in seconds. Two options:
-
-| Option | Link type | Bucket/object visibility | Expiry |
-|--------|-----------|--------------------------|--------|
-| Presigned URL | Time-limited private link | Keep private | `-e=<seconds>`, max 7 days |
-| Public URL | Permanent public link | Set object `-acl=public-read` | None |
-
-## Option 1: Presigned URL (private, time-limited)
-
-No ACL change needed. The object stays private; the link grants temporary access.
-
-```bash
-hcloud OBS cp <file> obs://<bucket>/<key> -f
-hcloud OBS sign obs://<bucket>/<key> -e=3600   # valid 1 hour, max 604800 (7 days)
-```
-
-The `sign` command prints the full presigned URL directly — share it as-is.
-
-## Option 2: Public URL (permanent, public-read)
-
-```bash
-hcloud OBS cp <file> obs://<bucket>/<key> -f
-hcloud OBS chattri obs://<bucket>/<key> -acl=public-read
-```
-
-The shareable public URL follows the OBS endpoint format (NOT the `obs-website` static-site endpoint):
-
-```
-https://<bucket>.obs.<region>.myhuaweicloud.com/<key>
-```
-
-## Key Gotchas
-
-- **Bucket ACL does NOT cascade**: `chattri obs://<bucket> -acl=public-read` alone does not make objects public. Set the object-level ACL explicitly.
-- **`-f` is mandatory**: `cp` without `-f` prompts "Please input (y/n)" on overwrite → agent hangs (TIMEOUT).
-- **Public-read means anyone with the link can access**: use presigned URLs when the file is sensitive.
-- **Presigned URL max expiry is 7 days** (`-e=604800`). For longer-lived public access, use the public-read option.
-- **Credential setup**: OBS uses a separate config (`~/.obsutilconfig`). Call `huaweicloud_setup_obs_config` before first use.
+# OBS Single-File Quick Share
+
+Host one file and get a shareable link in seconds. Two options:
+
+| Option | Link type | Bucket/object visibility | Expiry |
+|--------|-----------|--------------------------|--------|
+| Presigned URL | Time-limited private link | Keep private | `-e=<seconds>`, max 7 days |
+| Public URL | Permanent public link | Set object `-acl=public-read` | None |
+
+## Option 1: Presigned URL (private, time-limited)
+
+No ACL change needed. The object stays private; the link grants temporary access.
+
+```bash
+hcloud OBS cp <file> obs://<bucket>/<key> -f
+hcloud OBS sign obs://<bucket>/<key> -e=3600   # valid 1 hour, max 604800 (7 days)
+```
+
+The `sign` command prints the full presigned URL directly — share it as-is.
+
+## Option 2: Public URL (permanent, public-read)
+
+```bash
+hcloud OBS cp <file> obs://<bucket>/<key> -f
+hcloud OBS chattri obs://<bucket>/<key> -acl=public-read
+```
+
+The shareable public URL follows the OBS endpoint format (NOT the `obs-website` static-site endpoint):
+
+```
+https://<bucket>.obs.<region>.myhuaweicloud.com/<key>
+```
+
+## Key Gotchas
+
+- **Bucket ACL does NOT cascade**: `chattri obs://<bucket> -acl=public-read` alone does not make objects public. Set the object-level ACL explicitly.
+- **`-f` is mandatory**: `cp` without `-f` prompts "Please input (y/n)" on overwrite → agent hangs (TIMEOUT).
+- **Public-read means anyone with the link can access**: use presigned URLs when the file is sensitive.
+- **Presigned URL max expiry is 7 days** (`-e=604800`). For longer-lived public access, use the public-read option.
+- **Credential setup**: OBS uses a separate config (`~/.obsutilconfig`). Call `huaweicloud_setup_obs_config` before first use.

package/plugins/huaweicloud-core/skills/huawei-obs/references/static-website.md

@@ -1,56 +1,56 @@
-# OBS Static Website Deployment
-
-## Workflow
-
-```
-1. Build project     → npm run build / yarn build
-2. Create OBS bucket  → hcloud OBS mb obs://<bucket> -location=<region>
-3. Bulk upload        → hcloud OBS cp <build-dir>/ obs://<bucket>/ -r -f -flat -acl=public-read
-4. Set bucket ACL     → hcloud OBS chattri obs://<bucket> -acl=public-read
-5. Set object ACLs    → hcloud OBS chattri obs://<bucket>/ -r -f -acl=public-read
-6. Configure website  → REST API (KooCLI OBS lacks this feature)
-7. Verify             → curl http://<bucket>.obs-website.<region>.myhuaweicloud.com
-```
-
-## Step-by-Step (Vue/Vite Example)
-
-```bash
-# 1. Build
-npm run build                  # outputs to dist/
-
-# 2. Create bucket in target region
-hcloud OBS mb obs://my-static-site -location=cn-north-4
-
-# 3. Upload entire build directory (recursive, force, flatten, public ACL)
-hcloud OBS cp dist/ obs://my-static-site/ -r -f -flat -acl=public-read
-
-# 4. Set bucket ACL (required for static website access)
-hcloud OBS chattri obs://my-static-site -acl=public-read
-
-# 5. Set object ACLs recursively (objects don't inherit bucket ACL automatically)
-hcloud OBS chattri obs://my-static-site/ -r -f -acl=public-read
-
-# 5. Configure static website hosting
-# KooCLI OBS does NOT support this. Use one of:
-# Option A — REST API:
-#   PUT /?website HTTP/1.1
-#   Host: my-static-site.obs.cn-north-4.myhuaweicloud.com
-#   Body: {"IndexDocument": {"Suffix": "index.html"}, "ErrorDocument": {"Key": "error.html"}}
-#   (requires AK/SK signature)
-# Option B — Huawei Cloud Console:
-#   Console → OBS → Bucket → Basic Settings → Static Website Hosting
-
-# 6. Verify
-curl http://my-static-site.obs-website.cn-north-4.myhuaweicloud.com
-```
-
-## Key Gotchas
-
-- **Build output dir varies**: `dist/` (Vite), `build/` (CRA), `out/` (Next.js). Check `package.json` scripts.
-- **Bucket name must be DNS-compliant**: lowercase, numbers, hyphens only. No underscores or uppercase.
-- **Region matters**: Website endpoint depends on bucket region. `obs-website.<region>.myhuaweicloud.com`.
-- **Index.html routing**: For SPA apps (Vue Router, React Router), set `ErrorDocument` to `index.html` as well.
-- **Cache invalidation**: New uploads don't clear CDN cache. Add `?v=<timestamp>` to asset references or use OBS versioning.
-- **Always use `-f`**: Without `-f`, obsutil prompts "Please input (y/n)" on large uploads — Agent hangs (TIMEOUT).
-- **Use `-flat` for root files**: Without `-flat`, `dist/` becomes `bucket/dist/` prefix. Static sites need files at bucket root.
-- **Objects don't inherit bucket ACL**: Setting bucket to public-read does NOT make individual objects public. You must also set object-level ACL with `chattri obs://<bucket>/ -r -f -acl=public-read` or use `-acl=public-read` during upload.
+# OBS Static Website Deployment
+
+## Workflow
+
+```
+1. Build project     → npm run build / yarn build
+2. Create OBS bucket  → hcloud OBS mb obs://<bucket> -location=<region>
+3. Bulk upload        → hcloud OBS cp <build-dir>/ obs://<bucket>/ -r -f -flat -acl=public-read
+4. Set bucket ACL     → hcloud OBS chattri obs://<bucket> -acl=public-read
+5. Set object ACLs    → hcloud OBS chattri obs://<bucket>/ -r -f -acl=public-read
+6. Configure website  → REST API (KooCLI OBS lacks this feature)
+7. Verify             → curl http://<bucket>.obs-website.<region>.myhuaweicloud.com
+```
+
+## Step-by-Step (Vue/Vite Example)
+
+```bash
+# 1. Build
+npm run build                  # outputs to dist/
+
+# 2. Create bucket in target region
+hcloud OBS mb obs://my-static-site -location=cn-north-4
+
+# 3. Upload entire build directory (recursive, force, flatten, public ACL)
+hcloud OBS cp dist/ obs://my-static-site/ -r -f -flat -acl=public-read
+
+# 4. Set bucket ACL (required for static website access)
+hcloud OBS chattri obs://my-static-site -acl=public-read
+
+# 5. Set object ACLs recursively (objects don't inherit bucket ACL automatically)
+hcloud OBS chattri obs://my-static-site/ -r -f -acl=public-read
+
+# 5. Configure static website hosting
+# KooCLI OBS does NOT support this. Use one of:
+# Option A — REST API:
+#   PUT /?website HTTP/1.1
+#   Host: my-static-site.obs.cn-north-4.myhuaweicloud.com
+#   Body: {"IndexDocument": {"Suffix": "index.html"}, "ErrorDocument": {"Key": "error.html"}}
+#   (requires AK/SK signature)
+# Option B — Huawei Cloud Console:
+#   Console → OBS → Bucket → Basic Settings → Static Website Hosting
+
+# 6. Verify
+curl http://my-static-site.obs-website.cn-north-4.myhuaweicloud.com
+```
+
+## Key Gotchas
+
+- **Build output dir varies**: `dist/` (Vite), `build/` (CRA), `out/` (Next.js). Check `package.json` scripts.
+- **Bucket name must be DNS-compliant**: lowercase, numbers, hyphens only. No underscores or uppercase.
+- **Region matters**: Website endpoint depends on bucket region. `obs-website.<region>.myhuaweicloud.com`.
+- **Index.html routing**: For SPA apps (Vue Router, React Router), set `ErrorDocument` to `index.html` as well.
+- **Cache invalidation**: New uploads don't clear CDN cache. Add `?v=<timestamp>` to asset references or use OBS versioning.
+- **Always use `-f`**: Without `-f`, obsutil prompts "Please input (y/n)" on large uploads — Agent hangs (TIMEOUT).
+- **Use `-flat` for root files**: Without `-flat`, `dist/` becomes `bucket/dist/` prefix. Static sites need files at bucket root.
+- **Objects don't inherit bucket ACL**: Setting bucket to public-read does NOT make individual objects public. You must also set object-level ACL with `chattri obs://<bucket>/ -r -f -acl=public-read` or use `-acl=public-read` during upload.