huaweicloud-devkit 1.0.2-dev.9 → 1.0.2-next.10

package/README.md

@@ -1,138 +1,178 @@
-# HuaweiCloud DevKit
-
-[![License](https://img.shields.io/badge/License-Apache%202.0-blue.svg)](LICENSE)
-[![CI](https://github.com/huaweicloud/HuaweiCloud-Devkit/actions/workflows/ci.yml/badge.svg)](https://github.com/huaweicloud/HuaweiCloud-Devkit/actions/workflows/ci.yml)
-
-**[中文](README.zh-CN.md) | English**
-
-Help AI coding agents use Huawei Cloud safely and accurately — a single integration that gives agents cloud knowledge, CLI tooling, and safety guardrails.
-
-Supports OpenCode, Codex, CodeArts Agent, and WorkBuddy.
-
-## Prerequisites
-
-- Node.js >= 22
-
-## Quick Start
-
-### OpenCode
-
-```bash
-npx --yes huaweicloud-devkit install
-```
-
-Installs the DevKit into OpenCode automatically. **Restart the session** after installation.
-
-```bash
-npx --yes huaweicloud-devkit doctor    # self-check
-npx --yes huaweicloud-devkit status    # show status
-npx --yes huaweicloud-devkit update    # update
-npx --yes huaweicloud-devkit uninstall # uninstall
-```
-
-### Codex
-
-```bash
-npx --yes huaweicloud-devkit install --target codex
-```
-
-> The Codex CLI must be installed first.
-
-```bash
-npx --yes huaweicloud-devkit doctor                        # self-check
-npx --yes huaweicloud-devkit status --target codex
-npx --yes huaweicloud-devkit update --target codex         # update
-npx --yes huaweicloud-devkit uninstall --target codex
-```
-
-> **Codex Desktop** (Windows): use `--target codex-desktop` with the same commands.
-
-### CodeArts Agent
-
-```bash
-npx --yes huaweicloud-devkit install --target codearts
-```
-
-**Restart the session** after installation.
-
-```bash
-npx --yes huaweicloud-devkit install-hcloud   # install KooCLI
-npx --yes huaweicloud-devkit doctor           # self-check
-npx --yes huaweicloud-devkit status --target codearts
-npx --yes huaweicloud-devkit update --target codearts
-npx --yes huaweicloud-devkit uninstall --target codearts
-```
-
-> **Sandbox mode**: CodeArts defaults to sandbox mode which blocks KooCLI. `install-hcloud` detects this and shows how to resolve it — install KooCLI outside the sandbox terminal, or disable sandbox mode in CodeArts settings (Settings → Permissions → Bash mode).
->
-> **Authentication**: Run `npx huaweicloud-devkit auth init` to configure unified AK/SK credentials for KooCLI, OBS, and sandbox APIs.
-
-### WorkBuddy
-
-```bash
-npx --yes huaweicloud-devkit install --target workbuddy
-```
-
-**Restart the session** after installation.
-
-```bash
-npx --yes huaweicloud-devkit doctor
-npx --yes huaweicloud-devkit status --target workbuddy
-npx --yes huaweicloud-devkit update --target workbuddy   # update
-npx --yes huaweicloud-devkit uninstall --target workbuddy
-```
-
-> **Updating**: `update` is incremental per agent — it refreshes only the installed files and leaves your config untouched. Use `update --target all` to update every installed agent at once.
-
-### Other Agents
-
-For agents that support the Model Context Protocol (MCP):
-
-```json
-{
-  "mcp": {
-    "huaweicloud-devkit": {
-      "type": "local",
-      "command": ["node", "<path>/plugins/huaweicloud-core/src/mcp-server.mjs"],
-      "enabled": true
-    }
-  }
-}
-```
-
-Then install:
-
-```bash
-npx --yes huaweicloud-devkit install
-```
-
-> **Prerequisite:** Node.js >= 22. Run `npx huaweicloud-devkit auth init` for unified credentials.
-
-## What It Does
-
-- **Guided cloud operations** — agents get step-by-step guidance for 20+ Huawei Cloud services (ECS, OBS, VPC, RDS, GaussDB, FunctionGraph, APIG, CCE, and more)
-- **Safety-first execution** — all write operations require explicit user approval; credentials and secrets are automatically redacted from output
-- **Pre-execution risk checks** — public exposure, credential leaks, and destructive operations are caught before they run
-- **Regional awareness** — auto-discovers available regions and checks service availability before creating resources
-
-## Supported Services
-
-ECS, OBS, VPC, IAM, RDS, GaussDB, FunctionGraph, APIG, CCE, SMN/DMS, ModelArts, Cloud Eye, CTS, DEW, Billing, CBR, WAF/AAD, DDS/DCS, Deployment, and Getting Started guides.
-
-## Documentation
-
-- [Architecture](docs/architecture.md)
-- [Safety Model](docs/safety-model.md)
-- [Hook Rule Model](docs/hook-rule-model.md)
-- [Changelog](docs/CHANGELOG.md)
-- [KooCLI official docs](https://support.huaweicloud.com/qs-hcli/hcli_02_003.html)
-
-## Contributors
-
-<a href="https://github.com/huaweicloud/huaweicloud-devkit/graphs/contributors">
-  <img src="https://contrib.rocks/image?repo=huaweicloud/huaweicloud-devkit" />
-</a>
-
-## License
-
-This project is licensed under the Apache-2.0 License. See [LICENSE](LICENSE).
+# HuaweiCloud DevKit
+
+[![Discussions](https://img.shields.io/badge/Discussions-Join%20the%20discussion-blue)](https://github.com/huaweicloud/huaweicloud-devkit/discussions)
+[![License](https://img.shields.io/badge/License-Apache%202.0-blue.svg)](LICENSE)
+[![CI](https://github.com/huaweicloud/huaweicloud-devkit/actions/workflows/ci.yml/badge.svg)](https://github.com/huaweicloud/huaweicloud-devkit/actions/workflows/ci.yml)
+
+**[中文](README.zh-CN.md) | English**
+
+Help AI coding agents use Huawei Cloud safely and accurately — a single integration that gives agents cloud knowledge, CLI tooling, and safety guardrails.
+
+Supports OpenCode, Codex, CodeArts Agent, WorkBuddy, DeepSeek Harness (DSH), and OfficeAce.
+
+## Prerequisites
+
+- Node.js >= 20
+
+## Quick Start
+
+### OpenCode
+
+```bash
+npx --yes huaweicloud-devkit install
+```
+
+Installs the DevKit into OpenCode automatically. **Restart the session** after installation.
+
+```bash
+npx --yes huaweicloud-devkit doctor    # self-check
+npx --yes huaweicloud-devkit status    # show status
+npx --yes huaweicloud-devkit update    # update
+npx --yes huaweicloud-devkit uninstall # uninstall
+```
+
+### Codex
+
+```bash
+npx --yes huaweicloud-devkit install --target codex
+```
+
+> The Codex CLI must be installed first.
+
+```bash
+npx --yes huaweicloud-devkit doctor                        # self-check
+npx --yes huaweicloud-devkit status --target codex
+npx --yes huaweicloud-devkit update --target codex         # update
+npx --yes huaweicloud-devkit uninstall --target codex
+```
+
+> **Codex Desktop** (Windows): use `--target codex-desktop` with the same commands.
+
+### CodeArts Agent
+
+```bash
+npx --yes huaweicloud-devkit install --target codearts
+```
+
+**Restart the session** after installation.
+
+```bash
+npx --yes huaweicloud-devkit install-hcloud   # install KooCLI
+npx --yes huaweicloud-devkit doctor           # self-check
+npx --yes huaweicloud-devkit status --target codearts
+npx --yes huaweicloud-devkit update --target codearts
+npx --yes huaweicloud-devkit uninstall --target codearts
+```
+
+> **Sandbox mode**: CodeArts defaults to sandbox mode which blocks KooCLI. `install-hcloud` detects this and shows how to resolve it — install KooCLI outside the sandbox terminal, or disable sandbox mode in CodeArts settings (Settings → Permissions → Bash mode).
+>
+> **Authentication**: Run `npx huaweicloud-devkit auth init` to configure unified AK/SK credentials for KooCLI, OBS, and sandbox APIs.
+
+### WorkBuddy
+
+```bash
+npx --yes huaweicloud-devkit install --target workbuddy
+```
+
+**Restart the session** after installation.
+
+```bash
+npx --yes huaweicloud-devkit doctor
+npx --yes huaweicloud-devkit status --target workbuddy
+npx --yes huaweicloud-devkit update --target workbuddy   # update
+npx --yes huaweicloud-devkit uninstall --target workbuddy
+```
+
+> **Updating**: `update` is incremental per agent — it refreshes only the installed files and leaves your config untouched. Use `update --target all` to update every installed agent at once.
+
+### DeepSeek Harness (DSH)
+
+```bash
+npx --yes huaweicloud-devkit install --target dsh
+```
+
+The installer copies Skills to `$DSH_HOME/skills`, installs the MCP server and
+safety policy under `$DSH_HOME/huaweicloud-plugins`, and maintains
+`$DSH_HOME/profiles/web/cordis.patch.yml`. **Restart the DSH session** after
+installation.
+
+```bash
+npx --yes huaweicloud-devkit doctor
+npx --yes huaweicloud-devkit status --target dsh
+npx --yes huaweicloud-devkit update --target dsh
+npx --yes huaweicloud-devkit uninstall --target dsh
+```
+
+> DSH V1 reuses the existing MCP server through
+> `@deepseek-ai/dsh-mcp-client`. If the installer reports that the DSH MCP
+> client is not detected, run:
+> `npx @deepseek-ai/dsh plugin --profile web add @deepseek-ai/dsh-mcp-client`.
+
+### OfficeAce
+
+```bash
+npx --yes huaweicloud-devkit install --target officeace
+```
+
+**Restart OfficeAce** after installation.
+
+```bash
+npx --yes huaweicloud-devkit doctor
+npx --yes huaweicloud-devkit status --target officeace
+npx --yes huaweicloud-devkit update --target officeace
+npx --yes huaweicloud-devkit uninstall --target officeace
+```
+
+### Other Agents
+
+For agents that support the Model Context Protocol (MCP):
+
+```json
+{
+  "mcp": {
+    "huaweicloud-devkit": {
+      "type": "local",
+      "command": ["node", "<path>/plugins/huaweicloud-core/src/mcp-server.mjs"],
+      "enabled": true
+    }
+  }
+}
+```
+
+Then install:
+
+```bash
+npx --yes huaweicloud-devkit install
+```
+
+> **Prerequisite:** Node.js >= 20. Run `npx huaweicloud-devkit auth init` for unified credentials.
+
+## What It Does
+
+- **Guided cloud operations** — agents get step-by-step guidance for 20+ Huawei Cloud services (ECS, OBS, VPC, RDS, GaussDB, FunctionGraph, APIG, CCE, and more)
+- **Safety-first execution** — all write operations require explicit user approval; credentials and secrets are automatically redacted from output
+- **Pre-execution risk checks** — public exposure, credential leaks, and destructive operations are caught before they run
+- **Regional awareness** — auto-discovers available regions and checks service availability before creating resources
+
+## Supported Services
+
+ECS, OBS, VPC, IAM, RDS, GaussDB, FunctionGraph, APIG, CCE, SMN/DMS, ModelArts, Cloud Eye, CTS, DEW, Billing, CBR, WAF/AAD, DDS/DCS, Deployment, and Getting Started guides.
+
+## Documentation
+
+- [Architecture](docs/architecture.md)
+- [Safety Model](docs/safety-model.md)
+- [Hook Rule Model](docs/hook-rule-model.md)
+- [DeepSeek Harness Integration](docs/dsh-integration.md)
+- [Changelog](docs/CHANGELOG.md)
+- [KooCLI official docs](https://support.huaweicloud.com/qs-hcli/hcli_02_003.html)
+
+## Contributors
+
+<a href="https://github.com/huaweicloud/huaweicloud-devkit/graphs/contributors">
+  <img src="https://contrib.rocks/image?repo=huaweicloud/huaweicloud-devkit" />
+</a>
+
+## License
+
+This project is licensed under the Apache-2.0 License. See [LICENSE](LICENSE).

package/README.zh-CN.md

@@ -1,138 +1,176 @@
-# HuaweiCloud DevKit
-
-[![License](https://img.shields.io/badge/License-Apache%202.0-blue.svg)](LICENSE)
-[![CI](https://github.com/huaweicloud/HuaweiCloud-Devkit/actions/workflows/ci.yml/badge.svg)](https://github.com/huaweicloud/HuaweiCloud-Devkit/actions/workflows/ci.yml)
-
-**中文 | [English](README.md)**
-
-帮助 AI 编码助手安全、准确地使用华为云——一站式集成云知识、CLI 工具和安全护栏。
-
-支持 OpenCode、Codex、码道（CodeArts Agent）、WorkBuddy。
-
-## 前置条件
-
-- Node.js >= 22
-
-## 快速开始
-
-### OpenCode
-
-```bash
-npx --yes huaweicloud-devkit install
-```
-
-自动安装 DevKit。安装后**重启会话**。
-
-```bash
-npx --yes huaweicloud-devkit doctor   # 自检
-npx --yes huaweicloud-devkit status   # 查看状态
-npx --yes huaweicloud-devkit update   # 更新
-npx --yes huaweicloud-devkit uninstall # 卸载
-```
-
-### Codex
-
-```bash
-npx --yes huaweicloud-devkit install --target codex
-```
-
-> 需要先安装 Codex CLI。
-
-```bash
-npx --yes huaweicloud-devkit doctor                        # 自检
-npx --yes huaweicloud-devkit status --target codex
-npx --yes huaweicloud-devkit update --target codex         # 更新
-npx --yes huaweicloud-devkit uninstall --target codex
-```
-
-> **Codex Desktop**（Windows）：将 `--target codex` 换成 `--target codex-desktop`，命令相同。
-
-### CodeArts Agent（码道）
-
-```bash
-npx --yes huaweicloud-devkit install --target codearts
-```
-
-安装后**重启会话**。
-
-```bash
-npx --yes huaweicloud-devkit install-hcloud   # 安装 KooCLI
-npx --yes huaweicloud-devkit doctor           # 自检
-npx --yes huaweicloud-devkit status --target codearts
-npx --yes huaweicloud-devkit update --target codearts
-npx --yes huaweicloud-devkit uninstall --target codearts
-```
-
-> **沙箱模式**：码道默认沙箱模式会阻止 KooCLI 运行。`install-hcloud` 自动检测并给出指引——请在码道外终端安装使用 KooCLI，或在码道设置中关闭沙箱模式（设置 → 权限 → Bash 模式）。
->
-> **认证**：执行 `npx huaweicloud-devkit auth init`，统一配置 KooCLI、OBS 和沙箱接口所需的 AK/SK。
-
-### WorkBuddy
-
-```bash
-npx --yes huaweicloud-devkit install --target workbuddy
-```
-
-安装后**重启会话**。
-
-```bash
-npx --yes huaweicloud-devkit doctor
-npx --yes huaweicloud-devkit status --target workbuddy
-npx --yes huaweicloud-devkit update --target workbuddy   # 更新
-npx --yes huaweicloud-devkit uninstall --target workbuddy
-```
-
-> **更新机制**：`update` 按 agent 增量更新，只刷新必要文件、不动你的配置文件。`update --target all` 可一次更新所有已安装的 agent。
-
-### 其他 Agent
-
-支持 MCP 协议的 Agent，手动配置：
-
-```json
-{
-  "mcp": {
-    "huaweicloud-devkit": {
-      "type": "local",
-      "command": ["node", "<路径>/plugins/huaweicloud-core/src/mcp-server.mjs"],
-      "enabled": true
-    }
-  }
-}
-```
-
-然后安装：
-
-```bash
-npx --yes huaweicloud-devkit install
-```
-
-> **前置条件：** Node.js >= 22。执行 `npx huaweicloud-devkit auth init` 完成统一认证。
-
-## 功能特性
-
-- **引导式云操作** — Agent 获得 20+ 华为云服务的分步操作指引（ECS、OBS、VPC、RDS、GaussDB、FunctionGraph、APIG、CCE 等）
-- **安全优先执行** — 所有写操作需用户明确批准；凭证和密钥自动脱敏
-- **执行前风险检查** — 公网暴露、凭证泄露、破坏性操作在执行前即被拦截
-- **区域感知** — 自动发现可用区域，创建资源前检查服务可用性
-
-## 支持的服务
-
-ECS、OBS、VPC、IAM、RDS、GaussDB、FunctionGraph、APIG、CCE、SMN/DMS、ModelArts、Cloud Eye、CTS、DEW、Billing、CBR、WAF/AAD、DDS/DCS、Deployment，以及入门指南。
-
-## 文档
-
-- [架构](docs/architecture.md)
-- [安全模型](docs/safety-model.md)
-- [Hook 规则模型](docs/hook-rule-model.md)
-- [变更记录](docs/CHANGELOG.md)
-- [KooCLI 官方文档](https://support.huaweicloud.com/qs-hcli/hcli_02_003.html)
-
-## 贡献者
-
-<a href="https://github.com/huaweicloud/huaweicloud-devkit/graphs/contributors">
-  <img src="https://contrib.rocks/image?repo=huaweicloud/huaweicloud-devkit" />
-</a>
-
-## 许可证
-
-本项目基于 Apache-2.0 许可证发布。详见 [LICENSE](LICENSE)。
+# HuaweiCloud DevKit
+
+[![参与讨论](https://img.shields.io/badge/参与讨论-Join%20the%20discussion-blue)](https://github.com/huaweicloud/huaweicloud-devkit/discussions)
+[![License](https://img.shields.io/badge/License-Apache%202.0-blue.svg)](LICENSE)
+[![CI](https://github.com/huaweicloud/huaweicloud-devkit/actions/workflows/ci.yml/badge.svg)](https://github.com/huaweicloud/huaweicloud-devkit/actions/workflows/ci.yml)
+
+**中文 | [English](README.md)**
+
+帮助 AI 编码助手安全、准确地使用华为云——一站式集成云知识、CLI 工具和安全护栏。
+
+支持 OpenCode、Codex、码道（CodeArts Agent）、WorkBuddy、DeepSeek Harness（DSH）、OfficeAce。
+
+## 前置条件
+
+- Node.js >= 20
+
+## 快速开始
+
+### OpenCode
+
+```bash
+npx --yes huaweicloud-devkit install
+```
+
+自动安装 DevKit。安装后**重启会话**。
+
+```bash
+npx --yes huaweicloud-devkit doctor   # 自检
+npx --yes huaweicloud-devkit status   # 查看状态
+npx --yes huaweicloud-devkit update   # 更新
+npx --yes huaweicloud-devkit uninstall # 卸载
+```
+
+### Codex
+
+```bash
+npx --yes huaweicloud-devkit install --target codex
+```
+
+> 需要先安装 Codex CLI。
+
+```bash
+npx --yes huaweicloud-devkit doctor                        # 自检
+npx --yes huaweicloud-devkit status --target codex
+npx --yes huaweicloud-devkit update --target codex         # 更新
+npx --yes huaweicloud-devkit uninstall --target codex
+```
+
+> **Codex Desktop**（Windows）：将 `--target codex` 换成 `--target codex-desktop`，命令相同。
+
+### CodeArts Agent（码道）
+
+```bash
+npx --yes huaweicloud-devkit install --target codearts
+```
+
+安装后**重启会话**。
+
+```bash
+npx --yes huaweicloud-devkit install-hcloud   # 安装 KooCLI
+npx --yes huaweicloud-devkit doctor           # 自检
+npx --yes huaweicloud-devkit status --target codearts
+npx --yes huaweicloud-devkit update --target codearts
+npx --yes huaweicloud-devkit uninstall --target codearts
+```
+
+> **沙箱模式**：码道默认沙箱模式会阻止 KooCLI 运行。`install-hcloud` 自动检测并给出指引——请在码道外终端安装使用 KooCLI，或在码道设置中关闭沙箱模式（设置 → 权限 → Bash 模式）。
+>
+> **认证**：执行 `npx huaweicloud-devkit auth init`，统一配置 KooCLI、OBS 和沙箱接口所需的 AK/SK。
+
+### WorkBuddy
+
+```bash
+npx --yes huaweicloud-devkit install --target workbuddy
+```
+
+安装后**重启会话**。
+
+```bash
+npx --yes huaweicloud-devkit doctor
+npx --yes huaweicloud-devkit status --target workbuddy
+npx --yes huaweicloud-devkit update --target workbuddy   # 更新
+npx --yes huaweicloud-devkit uninstall --target workbuddy
+```
+
+> **更新机制**：`update` 按 agent 增量更新，只刷新必要文件、不动你的配置文件。`update --target all` 可一次更新所有已安装的 agent。
+
+### DeepSeek Harness（DSH）
+
+```bash
+npx --yes huaweicloud-devkit install --target dsh
+```
+
+安装器会把 Skills 写入 `$DSH_HOME/skills`，把 MCP Server 和安全策略写入
+`$DSH_HOME/huaweicloud-plugins`，并自动维护
+`$DSH_HOME/profiles/web/cordis.patch.yml`。安装后**重启 DSH 会话**。
+
+```bash
+npx --yes huaweicloud-devkit doctor
+npx --yes huaweicloud-devkit status --target dsh
+npx --yes huaweicloud-devkit update --target dsh
+npx --yes huaweicloud-devkit uninstall --target dsh
+```
+
+> DSH V1 通过 `@deepseek-ai/dsh-mcp-client` 复用现有 MCP Server。
+> 如果安装器提示 DSH MCP 客户端未检测到，请按提示执行
+> `npx @deepseek-ai/dsh plugin --profile web add @deepseek-ai/dsh-mcp-client`。
+
+### OfficeAce
+
+```bash
+npx --yes huaweicloud-devkit install --target officeace
+```
+
+安装后**重启 OfficeAce**。
+
+```bash
+npx --yes huaweicloud-devkit doctor
+npx --yes huaweicloud-devkit status --target officeace
+npx --yes huaweicloud-devkit update --target officeace
+npx --yes huaweicloud-devkit uninstall --target officeace
+```
+
+### 其他 Agent
+
+支持 MCP 协议的 Agent，手动配置：
+
+```json
+{
+  "mcp": {
+    "huaweicloud-devkit": {
+      "type": "local",
+      "command": ["node", "<路径>/plugins/huaweicloud-core/src/mcp-server.mjs"],
+      "enabled": true
+    }
+  }
+}
+```
+
+然后安装：
+
+```bash
+npx --yes huaweicloud-devkit install
+```
+
+> **前置条件：** Node.js >= 20。执行 `npx huaweicloud-devkit auth init` 完成统一认证。
+
+## 功能特性
+
+- **引导式云操作** — Agent 获得 20+ 华为云服务的分步操作指引（ECS、OBS、VPC、RDS、GaussDB、FunctionGraph、APIG、CCE 等）
+- **安全优先执行** — 所有写操作需用户明确批准；凭证和密钥自动脱敏
+- **执行前风险检查** — 公网暴露、凭证泄露、破坏性操作在执行前即被拦截
+- **区域感知** — 自动发现可用区域，创建资源前检查服务可用性
+
+## 支持的服务
+
+ECS、OBS、VPC、IAM、RDS、GaussDB、FunctionGraph、APIG、CCE、SMN/DMS、ModelArts、Cloud Eye、CTS、DEW、Billing、CBR、WAF/AAD、DDS/DCS、Deployment，以及入门指南。
+
+## 文档
+
+- [架构](docs/architecture.md)
+- [安全模型](docs/safety-model.md)
+- [Hook 规则模型](docs/hook-rule-model.md)
+- [DeepSeek Harness 集成](docs/dsh-integration.md)
+- [变更记录](docs/CHANGELOG.md)
+- [KooCLI 官方文档](https://support.huaweicloud.com/qs-hcli/hcli_02_003.html)
+
+## 贡献者
+
+<a href="https://github.com/huaweicloud/huaweicloud-devkit/graphs/contributors">
+  <img src="https://contrib.rocks/image?repo=huaweicloud/huaweicloud-devkit" />
+</a>
+
+## 许可证
+
+本项目基于 Apache-2.0 许可证发布。详见 [LICENSE](LICENSE)。

package/bin/setup.cjs

@@ -1,8 +1,10 @@
-#!/usr/bin/env node
-'use strict';
-const path = require('path');
-const fileUrl = require('url').pathToFileURL(path.join(__dirname, '..', 'plugins', 'huaweicloud-core', 'src', 'setup-cli.mjs')).href;
-import(fileUrl).catch(e => {
-  console.error(e.message);
-  process.exit(1);
-});
+#!/usr/bin/env node
+'use strict';
+const path = require('node:path');
+const fileUrl = require('node:url').pathToFileURL(
+  path.join(__dirname, '..', 'plugins', 'huaweicloud-core', 'src', 'setup-cli.mjs'),
+).href;
+import(fileUrl).catch((e) => {
+  console.error(e.message);
+  process.exit(1);
+});