npm - huaweicloud-devkit - Versions diffs - 1.0.2-dev.9 → 1.0.2-next.10 - Mend

huaweicloud-devkit 1.0.2-dev.9 → 1.0.2-next.10

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (99) hide show

package/plugins/huaweicloud-core/skills/huaweicloud-cli-and-auth/SKILL.md CHANGED Viewed

@@ -1,128 +1,138 @@
----
-name: huaweicloud-cli-and-auth
-description: Safe Huawei Cloud KooCLI usage and authentication guidance. Use when working with hcloud, KooCLI, profiles, AK/SK, regions, projects, endpoints, CLI output, credential errors, or local Huawei Cloud account context.
----
-# Huawei Cloud CLI And Auth
-**STOP - Do not answer from general knowledge.** Follow the procedure below.
-Use KooCLI `hcloud` for local inspection and reviewed operations. Never ask the user to paste AK/SK, SK, tokens, passwords, or credential files into chat.
-## Install KooCLI
-Official guide: `https://support.huaweicloud.com/qs-hcli/hcli_02_003.html`.
-### Windows
-1. Download and unzip: `https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest/huaweicloud-cli-windows-amd64.zip`
-2. Extract to `%USERPROFILE%\hcloud`, add to user `PATH`
-3. Verify: `hcloud version`
-### Linux (amd64 / arm64)
-One-liner (recommended):
-```bash
-curl -sSL https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest/hcloud_install.sh -o ./hcloud_install.sh && bash ./hcloud_install.sh -y
-```
-Or manual download:
-```bash
-# amd64
-curl -LO "https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest/huaweicloud-cli-linux-amd64.tar.gz"
-tar -zxvf huaweicloud-cli-linux-amd64.tar.gz
-# arm64
-curl -LO "https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest/huaweicloud-cli-linux-arm64.tar.gz"
-tar -zxvf huaweicloud-cli-linux-arm64.tar.gz
-```
-Move to PATH: `mv $(pwd)/hcloud ~/.local/bin/`
-Verify: `hcloud version`
-### macOS (amd64 / arm64)
-One-liner (recommended):
-```bash
-curl -sSL https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest/hcloud_install.sh -o ./hcloud_install.sh && bash ./hcloud_install.sh -y
-```
-Or manual download:
-```bash
-# amd64
-curl -LO "https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest/huaweicloud-cli-mac-amd64.tar.gz"
-tar -zxvf huaweicloud-cli-mac-amd64.tar.gz
-# arm64 (Apple Silicon)
-curl -LO "https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest/huaweicloud-cli-mac-arm64.tar.gz"
-tar -zxvf huaweicloud-cli-mac-arm64.tar.gz
-```
-Move to PATH: `mv $(pwd)/hcloud /usr/local/bin/`
-Verify: `hcloud version`
-Agent processes find executables through `PATH`. If OpenCode/Codex cannot find `hcloud`, restart after updating `PATH`, or set `HCLOUD_BIN`.
-## Configure Credentials Outside Chat
-**NEVER let AK/SK enter shell history. This is the #1 credential leak vector.**
-- Create AK/SK in the Huawei Cloud console under `My Credentials -> Access Keys`.
-- **Unified credentials** (preferred): `npx huaweicloud-devkit auth init`. This is the DevKit's primary auth path; `hcloud configure init` only covers KooCLI.
-- **KooCLI only, interactive** (SAFE): `hcloud configure init` — prompts for AK/SK via terminal input. Values do NOT enter shell history.
-- **Non-interactive** (DANGEROUS — AK/SK in shell history): `hcloud configure set --cli-access-key=<AK> --cli-secret-key=<SK> --cli-region=<region>`. Only use in ephemeral CI/CD shells. User must execute outside agent chat.
-- If MCP is available, use `huaweicloud_show_profile_redacted` to check status without ever seeing credentials.
-- Never paste AK/SK, passwords, tokens, or profile files into the agent conversation.
-- KooCLI stores credentials in `~/.hcloud/config.json`, NOT environment variables. `HCLOUD_ACCESS_KEY` / `HCLOUD_SECRET_KEY` / `HCLOUD_REGION` env vars are NOT read by KooCLI 7.x.
-## Safe Flow
-1. Check whether `hcloud` is installed.
-2. **KooCLI first-run privacy agreement**: On a fresh KooCLI install, `hcloud` blocks with `同意并继续使用(y)/不同意并退出(N)` and fails with `[USE_ERROR]您输入的是无效字符` in non-interactive mode. Detection: check command output for these strings. Ask the user: "KooCLI needs to accept its privacy agreement. May I accept it on your behalf?" If the user agrees, run `huaweicloud_run_readonly_command` with `args=["version"]` and `stdin="y\n"`. This accepts the agreement once, after which hcloud works normally.
-3. Ask the user to configure credentials outside the agent conversation when setup is needed.
-4. Inspect profile and region only through redacted tooling.
-5. Discover exact operation names with `hcloud <Service> --help` before guessing. Example: ECS instance listing is commonly `ECS ListServersDetails`; ECS creation is commonly `ECS CreateServers`; image lookup may be under `IMS GlanceShowImage`.
-6. Use `--cli-output=json` for machine-readable responses when supported.
-7. For resource operations, include `--cli-region`, `--cli-profile`, and service-specific project information when required.
-8. Classify every command before running it:
-   - Read-only: `List*`, `Show*`, `Get*`, `Describe*`.
-   - Write: `Create*`, `Delete*`, `Update*`, `Resize*`, `Start*`, `Stop*`, `Authorize*`, and similar.
-   - Secret: any operation returning secret string, binary secret, token, or password.
-9. For write operations, show the exact command and ask for explicit approval.
-## KooCLI Syntax Notes
-- Prefer `--param=value`; KooCLI 7.x may reject some space-separated parameter forms.
-- Array-style parameters use 1-based indexes, for example `--server.nics.1.subnet_id=<subnet-id>`, not `.0`.
-- For ECS creation, first inspect help: `hcloud ECS CreateServers --help`.
-- Minimal create shape to refine after help lookup:
-```bash
-hcloud ECS CreateServers --cli-region=<region> --server.name=<name> --server.flavorRef=<flavor-id> --server.imageRef=<image-id> --server.nics.1.subnet_id=<subnet-id> --server.root_volume.volumetype=<type>
-```
-If a command needs an `adminPass` or other password field, do not leave plaintext secrets in shell history. Prefer local-only input or runtime injection.
-## Output Formatting
-```bash
-# JSON format (recommended for Agent)
-hcloud <Service> <Op> --cli-output=json
-# Table format (manual viewing)
-hcloud <Service> <Op> --cli-output=table
-# JMESPath filtering (extract specific fields)
-hcloud <Service> <ListOp> --cli-output=json --cli-query "items[?status=='ACTIVE'].{ID:id,Name:name}"
-# Debug mode (when commands fail)
-hcloud <Service> <Op> --cli-debug=true
-```
-## Preferred Toolkit Tools
-- `huaweicloud_check_cli`
-- `huaweicloud_show_profile_redacted`
-- `huaweicloud_plan_cli_command`
-- `huaweicloud_run_readonly_command`
-- `huaweicloud_list_operations`
-- `huaweicloud_run_approved_command`
-## Do Not Run Directly
-- Raw `hcloud configure show/list/get/export` in agent tools.
-- Commands reading `.hcloud` or `.huaweicloud` files.
-- Commands dumping cloud credential environment variables.
-- Secret value reads such as CSMS `ShowSecretVersion`.
+---
+name: huaweicloud-cli-and-auth
+description: Safe Huawei Cloud KooCLI usage and authentication guidance. Use when working with hcloud, KooCLI, profiles, AK/SK, regions, projects, endpoints, CLI output, credential errors, or local Huawei Cloud account context.
+---
+# Huawei Cloud CLI And Auth
+**STOP - Do not answer from general knowledge.** Follow the procedure below.
+Use KooCLI `hcloud` for local inspection and reviewed operations. Never ask the user to paste AK/SK, SK, tokens, passwords, or credential files into chat.
+## Install KooCLI
+Official guide: `https://support.huaweicloud.com/qs-hcli/hcli_02_003.html`.
+### Windows
+1. Download and unzip: `https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest/huaweicloud-cli-windows-amd64.zip`
+2. Extract to `%USERPROFILE%\hcloud`, add to user `PATH`
+3. Verify: `hcloud version`
+### Linux (amd64 / arm64)
+One-liner (recommended):
+```bash
+curl -sSL https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest/hcloud_install.sh -o ./hcloud_install.sh && bash ./hcloud_install.sh -y
+```
+Or manual download:
+```bash
+# amd64
+curl -LO "https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest/huaweicloud-cli-linux-amd64.tar.gz"
+tar -zxvf huaweicloud-cli-linux-amd64.tar.gz
+# arm64
+curl -LO "https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest/huaweicloud-cli-linux-arm64.tar.gz"
+tar -zxvf huaweicloud-cli-linux-arm64.tar.gz
+```
+Move to PATH: `mv $(pwd)/hcloud ~/.local/bin/`
+Verify: `hcloud version`
+### macOS (amd64 / arm64)
+One-liner (recommended):
+```bash
+curl -sSL https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest/hcloud_install.sh -o ./hcloud_install.sh && bash ./hcloud_install.sh -y
+```
+Or manual download:
+```bash
+# amd64
+curl -LO "https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest/huaweicloud-cli-mac-amd64.tar.gz"
+tar -zxvf huaweicloud-cli-mac-amd64.tar.gz
+# arm64 (Apple Silicon)
+curl -LO "https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest/huaweicloud-cli-mac-arm64.tar.gz"
+tar -zxvf huaweicloud-cli-mac-arm64.tar.gz
+```
+Move to PATH: `mv $(pwd)/hcloud /usr/local/bin/`
+Verify: `hcloud version`
+Agent processes find executables through `PATH`. If OpenCode/Codex cannot find `hcloud`, restart after updating `PATH`, or set `HCLOUD_BIN`.
+## Configure Credentials Outside Chat
+**NEVER let AK/SK enter shell history. This is the #1 credential leak vector.**
+- Create AK/SK in the Huawei Cloud console under `My Credentials -> Access Keys`.
+- **Unified credentials** (preferred): `npx huaweicloud-devkit auth init`. This is the DevKit's primary auth path; `hcloud configure init` only covers KooCLI.
+- **KooCLI only, interactive** (SAFE): `hcloud configure init` — prompts for AK/SK via terminal input. Values do NOT enter shell history.
+- **Non-interactive** (DANGEROUS — AK/SK in shell history): `hcloud configure set --cli-access-key=<AK> --cli-secret-key=<SK> --cli-region=<region>`. Only use in ephemeral CI/CD shells. User must execute outside agent chat.
+- If MCP is available, use `huaweicloud_show_profile_redacted` to check status without ever seeing credentials.
+- Never paste AK/SK, passwords, tokens, or profile files into the agent conversation.
+- KooCLI stores credentials in `~/.hcloud/config.json`, NOT environment variables. `HCLOUD_ACCESS_KEY` / `HCLOUD_SECRET_KEY` / `HCLOUD_REGION` env vars are NOT read by KooCLI 7.x.
+## Safe Flow
+1. Check whether `hcloud` is installed.
+2. **KooCLI first-run privacy agreement**: On a fresh KooCLI install, `hcloud` blocks with `同意并继续使用(y)/不同意并退出(N)` and fails with `[USE_ERROR]您输入的是无效字符` in non-interactive mode. Detection: check command output for these strings. Ask the user: "KooCLI needs to accept its privacy agreement. May I accept it on your behalf?" If the user agrees, run `huaweicloud_run_readonly_command` with `args=["version"]` and `stdin="y\n"`. This accepts the agreement once, after which hcloud works normally.
+3. Ask the user to configure credentials outside the agent conversation when setup is needed.
+4. Inspect profile and region only through redacted tooling.
+5. Discover exact operation names with `hcloud <Service> --help` before guessing. Example: ECS instance listing is commonly `ECS ListServersDetails`; ECS creation is commonly `ECS CreateServers`; image lookup may be under `IMS GlanceShowImage`.
+6. Use `--cli-output=json` for machine-readable responses when supported.
+7. For resource operations, include `--cli-region`, `--cli-profile`, and service-specific project information when required.
+8. Classify every command before running it:
+   - Read-only: `List*`, `Show*`, `Get*`, `Describe*`.
+   - Write: `Create*`, `Delete*`, `Update*`, `Resize*`, `Start*`, `Stop*`, `Authorize*`, and similar.
+   - Secret: any operation returning secret string, binary secret, token, or password.
+9. For write operations, show the exact command and ask for explicit approval.
+## KooCLI Syntax Notes
+- Prefer `--param=value`; KooCLI 7.x may reject some space-separated parameter forms.
+- Array-style parameters use 1-based indexes, for example `--server.nics.1.subnet_id=<subnet-id>`, not `.0`.
+- For ECS creation, first inspect help: `hcloud ECS CreateServers --help`.
+- Minimal create shape to refine after help lookup:
+```bash
+hcloud ECS CreateServers --cli-region=<region> --server.name=<name> --server.flavorRef=<flavor-id> --server.imageRef=<image-id> --server.nics.1.subnet_id=<subnet-id> --server.root_volume.volumetype=<type>
+```
+If a command needs an `adminPass` or other password field, do not leave plaintext secrets in shell history. Prefer local-only input or runtime injection.
+## Output Formatting
+```bash
+# JSON format (recommended for Agent)
+hcloud <Service> <Op> --cli-output=json
+# Table format (manual viewing)
+hcloud <Service> <Op> --cli-output=table
+# JMESPath filtering (extract specific fields)
+hcloud <Service> <ListOp> --cli-output=json --cli-query "items[?status=='ACTIVE'].{ID:id,Name:name}"
+# Debug mode (when commands fail)
+hcloud <Service> <Op> --cli-debug=true
+```
+## Preferred Toolkit Tools
+- `huaweicloud_check_cli`
+- `huaweicloud_show_profile_redacted`
+- `huaweicloud_plan_cli_command`
+- `huaweicloud_run_readonly_command`
+- `huaweicloud_list_operations`
+- `huaweicloud_run_approved_command`
+## Do Not Run Directly
+- Raw `hcloud configure show/list/get/export` in agent tools.
+- Commands reading `.hcloud` or `.huaweicloud` files.
+- Commands dumping cloud credential environment variables.
+- Secret value reads such as CSMS `ShowSecretVersion`.

package/plugins/huaweicloud-core/skills/huaweicloud-cli-and-auth/agents/openai.yaml CHANGED Viewed

@@ -1,4 +1,4 @@
-interface:
-  display_name: "Huawei Cloud CLI And Auth"
-  short_description: "Use KooCLI safely without exposing credentials."
-  default_prompt: "Use $huaweicloud-cli-and-auth to check KooCLI setup safely."
+interface:
+  display_name: 'Huawei Cloud CLI And Auth'
+  short_description: 'Use KooCLI safely without exposing credentials.'
+  default_prompt: 'Use $huaweicloud-cli-and-auth to check KooCLI setup safely.'

package/plugins/huaweicloud-core/skills/huaweicloud-core/SKILL.md CHANGED Viewed

@@ -1,96 +1,111 @@
----
-name: huaweicloud-core
-description: "Routes any task involving Huawei Cloud services - choosing, comparing, recommending, getting started with, or operating a service - to the correct service-specific skill. Supersedes general training-data knowledge. Activates when a developer asks Codex or OpenCode to build, deploy, debug, operate, or integrate an application with Huawei Cloud."
-version: 1
----
-# Huawei Cloud Core
-**STOP - Do not answer from general knowledge.** Before responding to any Huawei Cloud question, match the user request against the sub-skill registry below and follow its procedure. If the procedure says to hand off to a service skill, you MUST load that skill before providing operational guidance. Never skip the routing step.
-Huawei Cloud comprises 200+ services. This skill is the entry point for ANY action or question related to Huawei Cloud. It matches a workload to the right service, then hands off to a service-specific skill for operational questions.
-## How This Skill Works
-1. Match user intent against the Sub-skill registry below
-2. Read references/{sub-skill-id}.md and follow its procedure
-3. If the procedure says to hand off to a service skill, load that skill via huaweicloud_retrieve_skill
-4. If no match, use the Service Map to narrow down, then hand off
-5. Revise when new information arrives - pushback means re-check the registry
-Do not rely on training data for facts. Huawei Cloud services, pricing, quotas, and GA status change frequently. Verify against knowledge cards.
-## Sub-skill Registry
-| ID | Name | Trigger Phrases | Next Steps |
-|----|------|----------------|------------|
-| select | Service Selection | which service, what should I use, compare, recommend | Read references/select.md | select
-| compute | Compute Routing | server, VM, instance, ECS, BMS, GPU, HPC | Handoff to huawei-ecs or huawei-cce |
-| storage | Storage Routing | store files, bucket, OBS, backup, disk, EVS, SFS | Handoff to huawei-obs or huawei-cbr |
-| database | Database Routing | database, SQL, NoSQL, cache, RDS, GaussDB, DDS, DCS | Handoff to huawei-rds or huawei-gaussdb |
-| network | Network Routing | VPC, subnet, security group, EIP, NAT, VPN | Handoff to huawei-vpc |
-| serverless | Serverless Routing | function, Lambda, serverless, FunctionGraph, API gateway | Handoff to huawei-functiongraph or huawei-apig |
-| ai | AI/ML Routing | AI, model, LLM, Pangu, training, inference, RAG | Handoff to huawei-modelarts |
-| messaging | Messaging Routing | message queue, notification, Kafka, RabbitMQ, event, SMN | Handoff to huawei-smn-dms |
-| security | Security Routing | secret, credential, encrypt, KMS, WAF, firewall, DDoS | Handoff to huawei-dew or huawei-waf-aad |
-| observability | Observability Routing | monitor, alarm, log, audit, trace, Cloud Eye | Handoff to huawei-cloud-eye or huawei-cts |
-| billing | Billing Routing | cost, bill, budget, spending, invoice | Handoff to huawei-billing |
-| iam | IAM Routing | permission, policy, role, user, group, AK/SK | Handoff to huawei-iam |
-| deployment | Deployment Routing | deploy, CI/CD, pipeline, release | CI/CD pipeline -> huawei-deployment; deploy a web app or a GitHub repo (no CI/CD target) -> huawei-sandbox |
-| sandbox | Sandbox Routing | sandbox, DevStation, workspace, terminal, preview, temporary runtime | Handoff to huawei-sandbox |
-| cli | CLI and Auth Routing | install hcloud, configure KooCLI, AK/SK setup | Handoff to huaweicloud-cli-and-auth |
-| safety | Safety Routing | is this safe, approve command, risk review | Handoff to huaweicloud-safety |
-| troubleshoot | Troubleshooting Routing | error, bug, failed, AccessDenied, quota | Handoff to huaweicloud-troubleshooting |
-| api-sdk | API/SDK Routing | API call, SDK, REST, integration, code example | Handoff to huaweicloud-api-and-sdk |
-| report-issue | Issue Reporting | wrong service, you picked wrong, incorrect | Read references/report-issue.md |
-## Service Map
-| Workload | Primary Service | Skill |
-|----------|----------------|-------|
-| Web application hosting | ECS | huawei-ecs |
-| Containerized microservices | CCE | huawei-cce |
-| Static file storage / CDN | OBS | huawei-obs |
-| Relational database (MySQL/PG) | RDS | huawei-rds |
-| Distributed SQL database | GaussDB | huawei-gaussdb |
-| Document database (MongoDB API) | DDS | huawei-dds-dcs |
-| In-memory cache | DCS (Redis) | huawei-dds-dcs |
-| Serverless functions | FunctionGraph | huawei-functiongraph |
-| API management | APIG | huawei-apig |
-| AI model training/inference | ModelArts | huawei-modelarts |
-| Message queuing | DMS (Kafka/RabbitMQ) | huawei-smn-dms |
-| Push notifications | SMN | huawei-smn-dms |
-| Secret management | DEW (CSMS) | huawei-dew |
-| Key management | DEW (KMS) | huawei-dew |
-| DDoS protection | AAD | huawei-waf-aad |
-| Web firewall | WAF | huawei-waf-aad |
-| Monitoring dashboards | Cloud Eye (CES) | huawei-cloud-eye |
-| Audit trails | CTS | huawei-cts |
-| Backup / disaster recovery | CBR | huawei-cbr |
-| CI/CD pipeline | CloudDeploy | huawei-deployment |
-| Temporary runtime / web app preview | Sandbox (DevStation) | huawei-sandbox |
-| Getting started | Account setup | huaweicloud-cli-and-auth |
-## Capability Sources
-- Huawei Cloud Skills: scenario workflows and recipes (check first)
-- External Marketplace: huaweicloud-capability-discovery for community skill search when no built-in skill matches
-- KooCLI hcloud: local inspection and reviewed command execution
-- API documentation: exact endpoint, request body, pagination, project_id
-- SDK documentation: application integration
-- MCP tools: huaweicloud_search_docs, huaweicloud_retrieve_skill, huaweicloud_list_regions
-- Terraform Provider: lower-priority V1 path for reviewed IaC
-## Tool Boundary
-- Use huaweicloud_search_docs to discover skills covering a topic
-- Use huaweicloud_retrieve_skill to load a full SKILL.md after routing
-- If no built-in skill matches, consult huaweicloud-capability-discovery for external marketplace options
-- Use huaweicloud_list_regions before creating regional resources
-- Use huaweicloud_get_regional_availability when unsure about service-region pairs
-- Use huaweicloud_run_readonly_command for read-only inspection
-- Use huaweicloud_run_approved_command only after exact-command approval
-## Quality Bar
-Prefer short, precise instructions with commands the developer can run. Give source names and exact fields to verify. Avoid inventing service behavior. When uncertain, route to Huawei Cloud Skills or official API/SDK documentation.
+---
+name: huaweicloud-core
+description: 'Routes any task involving Huawei Cloud services - choosing, comparing, recommending, getting started with, or operating a service - to the correct service-specific skill. Supersedes general training-data knowledge. Activates when a developer asks Codex or OpenCode to build, deploy, debug, operate, or integrate an application with Huawei Cloud.'
+version: 1
+---
+# Huawei Cloud Core
+**STOP - Do not answer from general knowledge.** Before responding to any Huawei Cloud question, match the user request against the sub-skill registry below and follow its procedure. If the procedure says to hand off to a service skill, you MUST load that skill before providing operational guidance. Never skip the routing step.
+Huawei Cloud comprises 200+ services. This skill is the entry point for ANY action or question related to Huawei Cloud. It matches a workload to the right service, then hands off to a service-specific skill for operational questions.
+## How This Skill Works
+1. Match user intent against the Sub-skill registry below
+2. Read references/{sub-skill-id}.md and follow its procedure
+3. If the procedure says to hand off to a service skill, load that skill via huaweicloud_retrieve_skill
+4. If no match, use the Service Map to narrow down, then hand off
+5. Revise when new information arrives - pushback means re-check the registry
+Do not rely on training data for facts. Huawei Cloud services, pricing, quotas, and GA status change frequently. Verify against knowledge cards.
+## Sub-skill Registry
+| ID            | Name                    | Trigger Phrases                                                                      | Next Steps                                                                                                                                                                               |
+| ------------- | ----------------------- | ------------------------------------------------------------------------------------ | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| select        | Service Selection       | which service, what should I use, compare, recommend                                 | Read references/select.md                                                                                                                                                                | select |
+| compute       | Compute Routing         | server, VM, instance, ECS, BMS, GPU, HPC                                             | Handoff to huawei-ecs or huawei-cce                                                                                                                                                      |
+| storage       | Storage Routing         | store files, bucket, OBS, backup, disk, EVS, SFS (long-term storage/CDN intent only) | Handoff to huawei-obs or huawei-cbr                                                                                                                                                      |
+| database      | Database Routing        | database, SQL, NoSQL, cache, RDS, GaussDB, DDS, DCS                                  | Handoff to huawei-rds or huawei-gaussdb                                                                                                                                                  |
+| network       | Network Routing         | VPC, subnet, security group, EIP, NAT, VPN                                           | Handoff to huawei-vpc                                                                                                                                                                    |
+| serverless    | Serverless Routing      | function, Lambda, serverless, FunctionGraph, API gateway                             | Handoff to huawei-functiongraph or huawei-apig                                                                                                                                           |
+| ai            | AI/ML Routing           | AI, model, LLM, Pangu, training, inference, RAG                                      | Handoff to huawei-modelarts                                                                                                                                                              |
+| messaging     | Messaging Routing       | message queue, notification, Kafka, RabbitMQ, event, SMN                             | Handoff to huawei-smn-dms                                                                                                                                                                |
+| security      | Security Routing        | secret, credential, encrypt, KMS, WAF, firewall, DDoS                                | Handoff to huawei-dew or huawei-waf-aad                                                                                                                                                  |
+| observability | Observability Routing   | monitor, alarm, log, audit, trace, Cloud Eye                                         | Handoff to huawei-cloud-eye or huawei-cts                                                                                                                                                |
+| billing       | Billing Routing         | cost, bill, budget, spending, invoice                                                | Handoff to huawei-billing                                                                                                                                                                |
+| iam           | IAM Routing             | permission, policy, role, user, group, AK/SK                                         | Handoff to huawei-iam                                                                                                                                                                    |
+| deployment    | Deployment Routing      | deploy, host, publish, CI/CD, pipeline, release                                      | CI/CD pipeline -> huawei-deployment; deploy/host/preview a web app or static website (no CI/CD target) -> present deployment-target options first, see "Deployment Target Options" below |
+| sandbox       | Sandbox Routing         | sandbox, DevStation, workspace, terminal, preview, temporary runtime                 | Handoff to huawei-sandbox                                                                                                                                                                |
+| cli           | CLI and Auth Routing    | install hcloud, configure KooCLI, AK/SK setup                                        | Handoff to huaweicloud-cli-and-auth                                                                                                                                                      |
+| safety        | Safety Routing          | is this safe, approve command, risk review                                           | Handoff to huaweicloud-safety                                                                                                                                                            |
+| troubleshoot  | Troubleshooting Routing | error, bug, failed, AccessDenied, quota                                              | Handoff to huaweicloud-troubleshooting                                                                                                                                                   |
+| api-sdk       | API/SDK Routing         | API call, SDK, REST, integration, code example                                       | Handoff to huaweicloud-api-and-sdk                                                                                                                                                       |
+| report-issue  | Issue Reporting         | wrong service, you picked wrong, incorrect                                           | Read references/report-issue.md                                                                                                                                                          |
+## Service Map
+| Workload                              | Primary Service      | Skill                    |
+| ------------------------------------- | -------------------- | ------------------------ |
+| Web application hosting               | ECS                  | huawei-ecs               |
+| Containerized microservices           | CCE                  | huawei-cce               |
+| Static file storage / CDN (long-term) | OBS                  | huawei-obs               |
+| Relational database (MySQL/PG)        | RDS                  | huawei-rds               |
+| Distributed SQL database              | GaussDB              | huawei-gaussdb           |
+| Document database (MongoDB API)       | DDS                  | huawei-dds-dcs           |
+| In-memory cache                       | DCS (Redis)          | huawei-dds-dcs           |
+| Serverless functions                  | FunctionGraph        | huawei-functiongraph     |
+| API management                        | APIG                 | huawei-apig              |
+| AI model training/inference           | ModelArts            | huawei-modelarts         |
+| Message queuing                       | DMS (Kafka/RabbitMQ) | huawei-smn-dms           |
+| Push notifications                    | SMN                  | huawei-smn-dms           |
+| Secret management                     | DEW (CSMS)           | huawei-dew               |
+| Key management                        | DEW (KMS)            | huawei-dew               |
+| DDoS protection                       | AAD                  | huawei-waf-aad           |
+| Web firewall                          | WAF                  | huawei-waf-aad           |
+| Monitoring dashboards                 | Cloud Eye (CES)      | huawei-cloud-eye         |
+| Audit trails                          | CTS                  | huawei-cts               |
+| Backup / disaster recovery            | CBR                  | huawei-cbr               |
+| CI/CD pipeline                        | CloudDeploy          | huawei-deployment        |
+| Temporary runtime / web app preview   | Sandbox (DevStation) | huawei-sandbox           |
+| Getting started                       | Account setup        | huaweicloud-cli-and-auth |
+## Deployment Target Options
+When the intent is to **deploy, host, or preview a web app or static website** (no explicit target named), NEVER default to a single service such as OBS. Ask the developer to choose a target and present the options in this order:
+| #   | Option                                 | When to choose                                             | Skill          |
+| --- | -------------------------------------- | ---------------------------------------------------------- | -------------- |
+| 1   | **Sandbox (DevStation) — recommended** | Temporary runtime, quick preview, demo; instant public URL | huawei-sandbox |
+| 2   | OBS static website hosting             | Long-term static hosting / CDN, no backend                 | huawei-obs     |
+| 3   | ECS                                    | Needs a server runtime (backend, custom server)            | huawei-ecs     |
+| 4   | CCE                                    | Containerized workloads, scaling                           | huawei-cce     |
+- Recommended prompt: "这个项目是 Web 应用/静态网站，建议优先部署到沙箱（临时运行环境，立即可预览）。也可选择 OBS 静态托管、ECS 或 CCE，你想部署到哪里？"
+- If the developer explicitly names a target (e.g. "deploy to OBS"), follow that target and hand off to the corresponding service skill.
+- If the developer has no preference, recommend the sandbox first.
+## Capability Sources
+- Huawei Cloud Skills: scenario workflows and recipes (check first)
+- External Marketplace: huaweicloud-capability-discovery for community skill search when no built-in skill matches
+- KooCLI hcloud: local inspection and reviewed command execution
+- API documentation: exact endpoint, request body, pagination, project_id
+- SDK documentation: application integration
+- MCP tools: huaweicloud_search_docs, huaweicloud_retrieve_skill, huaweicloud_list_regions
+- Terraform Provider: lower-priority V1 path for reviewed IaC
+## Tool Boundary
+- Use huaweicloud_search_docs to discover skills covering a topic
+- Use huaweicloud_retrieve_skill to load a full SKILL.md after routing
+- If no built-in skill matches, consult huaweicloud-capability-discovery for external marketplace options
+- Use huaweicloud_list_regions before creating regional resources
+- Use huaweicloud_get_regional_availability when unsure about service-region pairs
+- Use huaweicloud_run_readonly_command for read-only inspection
+- Use huaweicloud_run_approved_command only after exact-command approval
+## Quality Bar
+Prefer short, precise instructions with commands the developer can run. Give source names and exact fields to verify. Avoid inventing service behavior. When uncertain, route to Huawei Cloud Skills or official API/SDK documentation.

package/plugins/huaweicloud-core/skills/huaweicloud-core/agents/openai.yaml CHANGED Viewed

@@ -1,4 +1,4 @@
-interface:
-  display_name: "Huawei Cloud Core"
-  short_description: "Route Huawei Cloud tasks to Skills, CLI, API, SDK, MCP, or Terraform."
-  default_prompt: "Use $huaweicloud-core to choose the right Huawei Cloud capability path."
+interface:
+  display_name: 'Huawei Cloud Core'
+  short_description: 'Route Huawei Cloud tasks to Skills, CLI, API, SDK, MCP, or Terraform.'
+  default_prompt: 'Use $huaweicloud-core to choose the right Huawei Cloud capability path.'

package/plugins/huaweicloud-core/skills/huaweicloud-core/references/report-issue.md CHANGED Viewed

@@ -1,20 +1,20 @@
-# Issue Reporting Procedure
-Use when the user reports an issue with a previous routing decision.
-## Procedure
-1. Acknowledge the feedback without defensiveness
-2. Re-check the Sub-skill registry for a better match
-3. If a different service is clearly right, load that skill
-4. If unclear, broaden the search: use huaweicloud_search_docs
-5. Document the mismatch so the registry can be improved
-## Common Corrections
-| Wrong Routing | Likely Correct |
-|---------------|---------------|
-| ECS for containers | CCE |
-| OBS for block storage | EVS (via huawei-ecs) |
-| RDS for cache | DCS (via huawei-dds-dcs) |
-| FunctionGraph for long-running tasks | ECS or CCE |
+# Issue Reporting Procedure
+Use when the user reports an issue with a previous routing decision.
+## Procedure
+1. Acknowledge the feedback without defensiveness
+2. Re-check the Sub-skill registry for a better match
+3. If a different service is clearly right, load that skill
+4. If unclear, broaden the search: use huaweicloud_search_docs
+5. Document the mismatch so the registry can be improved
+## Common Corrections
+| Wrong Routing                        | Likely Correct           |
+| ------------------------------------ | ------------------------ |
+| ECS for containers                   | CCE                      |
+| OBS for block storage                | EVS (via huawei-ecs)     |
+| RDS for cache                        | DCS (via huawei-dds-dcs) |
+| FunctionGraph for long-running tasks | ECS or CCE               |