huaweicloud-devkit 1.0.2-next.2 → 1.0.2-next.21

package/plugins/huaweicloud-core/skills/huawei-iam/references/policy-examples.md

@@ -9,6 +9,7 @@ Huawei Cloud IAM uses a different action naming convention from AWS. Actions use
 ```
 
 Examples:
+
 - `ecs:servers:list` (NOT `ecs:ListInstances`)
 - `obs:bucket:GetBucket` (NOT `s3:GetBucket`)
 - `vpc:vpcs:list` (NOT `vpc:DescribeVpcs`)
@@ -18,77 +19,100 @@ Always verify exact action names via `https://support.huaweicloud.com/usermanual
 ## Read-Only Policies
 
 ### ECS Read-Only
+
 ```json
 {
   "Version": "1.1",
-  "Statement": [{
-    "Effect": "Allow",
-    "Action": ["ecs:servers:list", "ecs:servers:get", "ecs:*:list", "ecs:*:get"],
-    "Resource": ["*"]
-  }]
+  "Statement": [
+    {
+      "Effect": "Allow",
+      "Action": ["ecs:servers:list", "ecs:servers:get", "ecs:*:list", "ecs:*:get"],
+      "Resource": ["*"]
+    }
+  ]
 }
 ```
 
 ### OBS Read-Only (scoped bucket)
+
 ```json
 {
   "Version": "1.1",
-  "Statement": [{
-    "Effect": "Allow",
-    "Action": ["obs:bucket:Get*", "obs:bucket:List*", "obs:object:Get*"],
-    "Resource": ["obs:*:*:bucket:my-bucket", "obs:*:*:bucket:my-bucket/*"]
-  }]
+  "Statement": [
+    {
+      "Effect": "Allow",
+      "Action": ["obs:bucket:Get*", "obs:bucket:List*", "obs:object:Get*"],
+      "Resource": ["obs:*:*:bucket:my-bucket", "obs:*:*:bucket:my-bucket/*"]
+    }
+  ]
 }
 ```
 
 ### FunctionGraph Read-Only
+
 ```json
 {
   "Version": "1.1",
-  "Statement": [{
-    "Effect": "Allow",
-    "Action": ["functiongraph:function:getConfig", "functiongraph:function:list", "functiongraph:function:invoke", "functiongraph:trigger:list"],
-    "Resource": ["*"]
-  }]
+  "Statement": [
+    {
+      "Effect": "Allow",
+      "Action": [
+        "functiongraph:function:getConfig",
+        "functiongraph:function:list",
+        "functiongraph:function:invoke",
+        "functiongraph:trigger:list"
+      ],
+      "Resource": ["*"]
+    }
+  ]
 }
 ```
 
 ## Full-Access (Scoped)
 
 ### RDS Operator
+
 ```json
 {
   "Version": "1.1",
-  "Statement": [{
-    "Effect": "Allow",
-    "Action": ["rds:*"],
-    "Resource": ["*"],
-    "Condition": {"StringEquals": {"g:ResourceTag/Environment": ["dev", "staging"]}}
-  }]
+  "Statement": [
+    {
+      "Effect": "Allow",
+      "Action": ["rds:*"],
+      "Resource": ["*"],
+      "Condition": { "StringEquals": { "g:ResourceTag/Environment": ["dev", "staging"] } }
+    }
+  ]
 }
 ```
 
 ### FunctionGraph Developer
+
 ```json
 {
   "Version": "1.1",
-  "Statement": [{
-    "Effect": "Allow",
-    "Action": ["functiongraph:function:*", "functiongraph:trigger:*", "functiongraph:runtime:list"],
-    "Resource": ["*"]
-  }]
+  "Statement": [
+    {
+      "Effect": "Allow",
+      "Action": ["functiongraph:function:*", "functiongraph:trigger:*", "functiongraph:runtime:list"],
+      "Resource": ["*"]
+    }
+  ]
 }
 ```
 
 ### APIG Operator
+
 ```json
 {
   "Version": "1.1",
-  "Statement": [{
-    "Effect": "Allow",
-    "Action": ["apig:instance:*", "apig:api:*", "apig:group:*", "apig:environment:*"],
-    "Resource": ["*"]
-  }]
+  "Statement": [
+    {
+      "Effect": "Allow",
+      "Action": ["apig:instance:*", "apig:api:*", "apig:group:*", "apig:environment:*"],
+      "Resource": ["*"]
+    }
+  ]
 }
 ```
 
@@ -104,15 +128,17 @@ Always verify exact action names via `https://support.huaweicloud.com/usermanual
 ```json
 {
   "Version": "1.1",
-  "Statement": [{
-    "Effect": "Allow",
-    "Action": ["ecs:*"],
-    "Resource": ["*"],
-    "Condition": {
-      "StringEquals": {"g:SourceAccount": "0123456789"},
-      "StringLike": {"g:SourceUrn": "urn:fss:*"}
+  "Statement": [
+    {
+      "Effect": "Allow",
+      "Action": ["ecs:*"],
+      "Resource": ["*"],
+      "Condition": {
+        "StringEquals": { "g:SourceAccount": "0123456789" },
+        "StringLike": { "g:SourceUrn": "urn:fss:*" }
+      }
     }
-  }]
+  ]
 }
 ```
 

package/plugins/huaweicloud-core/skills/huawei-iam/references/quick-ref.md

@@ -31,13 +31,13 @@ hcloud IAM GetAccountSummary                     # account summary
 
 ## IAM vs AWS Comparison
 
-| AWS | Huawei Cloud |
-|-----|-------------|
-| `iam:ListUsers` | `iam:users:list` (lowercase + colon) |
-| AWS Managed Policy | System Policy (系统策略) |
-| Customer Managed | Custom Policy (自定义策略) |
-| Resource-Based Policy | Project-Level Policy (项目级策略) |
-| IAM Role | Agency (委托) |
+| AWS                   | Huawei Cloud                         |
+| --------------------- | ------------------------------------ |
+| `iam:ListUsers`       | `iam:users:list` (lowercase + colon) |
+| AWS Managed Policy    | System Policy (系统策略)             |
+| Customer Managed      | Custom Policy (自定义策略)           |
+| Resource-Based Policy | Project-Level Policy (项目级策略)    |
+| IAM Role              | Agency (委托)                        |
 
 > Huawei Cloud IAM action naming: `<service>:<resource>:<action>`. Always verify at https://support.huaweicloud.com/usermanual-iam/iam_01_0001.html
 
@@ -49,8 +49,8 @@ hcloud IAM GetAccountSummary                     # account summary
   "Action": ["ecs:*"],
   "Resource": ["*"],
   "Condition": {
-    "StringEquals": {"g:SourceAccount": "<account-id>"},
-    "StringLike": {"g:SourceUrn": "urn:fss:*"}
+    "StringEquals": { "g:SourceAccount": "<account-id>" },
+    "StringLike": { "g:SourceUrn": "urn:fss:*" }
   }
 }
 ```

package/plugins/huaweicloud-core/skills/huawei-modelarts/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: huawei-modelarts
-description: "Use when training, deploying, or managing AI/ML models on Huawei Cloud ModelArts. Covers training jobs, model registry, online services, notebook instances. Triggers: ModelArts, model training, AI, machine learning, deep learning, notebook, inference, deployment. NOT for: general AI/ML concepts, non-Huawei platforms."
+description: 'Use when training, deploying, or managing AI/ML models on Huawei Cloud ModelArts. Covers training jobs, model registry, online services, notebook instances. Triggers: ModelArts, model training, AI, machine learning, deep learning, notebook, inference, deployment. NOT for: general AI/ML concepts, non-Huawei platforms.'
 version: 1
 ---
 
@@ -16,13 +16,13 @@ Domain expertise for ModelArts. Covers training jobs, model deployment, notebook
 
 ## Critical Warnings
 
-| Trap | Why |
-|------|-----|
-| OBS bucket required | All training data, model outputs, and notebook storage use OBS. Create bucket first |
-| Training charges by duration | Pay-per-minute GPU/CPU billing. Stop unused notebooks and services |
-| Notebook auto-stop needed | Default no auto-stop — can run indefinitely and incur charges |
-| Model deployment needs quota | Online services may require service quota approval in new accounts |
-| Training job output must be OBS | Local output not supported. Ensure `--output_path` is a valid OBS path |
+| Trap                            | Why                                                                                 |
+| ------------------------------- | ----------------------------------------------------------------------------------- |
+| OBS bucket required             | All training data, model outputs, and notebook storage use OBS. Create bucket first |
+| Training charges by duration    | Pay-per-minute GPU/CPU billing. Stop unused notebooks and services                  |
+| Notebook auto-stop needed       | Default no auto-stop — can run indefinitely and incur charges                       |
+| Model deployment needs quota    | Online services may require service quota approval in new accounts                  |
+| Training job output must be OBS | Local output not supported. Ensure `--output_path` is a valid OBS path              |
 
 ## Prerequisites
 
@@ -32,31 +32,31 @@ Domain expertise for ModelArts. Covers training jobs, model deployment, notebook
 
 ## Common Workflows
 
-| Task | Operation |
-|------|-----------|
-| List models | `ListModels --cli-region=<r> --project_id=<p>` |
-| List training jobs | `ListTrainJobs --cli-region=<r> --project_id=<p>` |
-| List services | `ListServices --cli-region=<r> --project_id=<p>` |
-| List notebooks | `ListNotebooks --cli-region=<r> --project_id=<p>` |
-| Create model | `CreateModel --cli-region=<r> --project_id=<p>` |
-| Create notebook | `CreateNotebook --cli-region=<r> --project_id=<p>` |
+| Task               | Operation                                          |
+| ------------------ | -------------------------------------------------- |
+| List models        | `ListModels --cli-region=<r> --project_id=<p>`     |
+| List training jobs | `ListTrainJobs --cli-region=<r> --project_id=<p>`  |
+| List services      | `ListServices --cli-region=<r> --project_id=<p>`   |
+| List notebooks     | `ListNotebooks --cli-region=<r> --project_id=<p>`  |
+| Create model       | `CreateModel --cli-region=<r> --project_id=<p>`    |
+| Create notebook    | `CreateNotebook --cli-region=<r> --project_id=<p>` |
 
 Discover operation parameters with `--help` before executing any write operation.
 
 ## Service Types
 
-| Type | Purpose |
-|------|---------|
-| Training Job | Train models on GPU/CPU resources |
-| Model | Register trained models for deployment |
-| Service (Online) | Deploy models as REST API endpoints |
-| Notebook | JupyterLab environments for development |
+| Type             | Purpose                                 |
+| ---------------- | --------------------------------------- |
+| Training Job     | Train models on GPU/CPU resources       |
+| Model            | Register trained models for deployment  |
+| Service (Online) | Deploy models as REST API endpoints     |
+| Notebook         | JupyterLab environments for development |
 
 ## Troubleshooting
 
-| Error | Fix |
-|-------|-----|
-| OBS path not found | Verify OBS bucket exists and path is correct |
+| Error              | Fix                                                              |
+| ------------------ | ---------------------------------------------------------------- |
+| OBS path not found | Verify OBS bucket exists and path is correct                     |
 | Training job fails | Check training data format, resource quotas, and logs in console |
 
 ## Cross-Skill References

package/plugins/huaweicloud-core/skills/huawei-obs/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: huawei-obs
-description: "Use when creating, configuring, or managing OBS buckets and objects on Huawei Cloud. Covers bucket creation, lifecycle policies, versioning, static website hosting, CORS, access control (IAM/bucket policy/ACL), cross-region replication, event notifications, and presigned URLs. Triggers on: OBS, bucket, object storage, lifecycle, versioning, static website, CORS, presigned, replication. NOT for: EVS block storage (use huawei-ecs), SFS file storage, CBR backup (use huawei-cbr)."
+description: 'Use when creating, configuring, or managing OBS buckets and objects on Huawei Cloud. Covers bucket creation, lifecycle policies, versioning, static website hosting, CORS, access control (IAM/bucket policy/ACL), cross-region replication, event notifications, and presigned URLs. Triggers on: OBS, bucket, object storage, lifecycle, versioning, static website, CORS, presigned, replication. NOT for: EVS block storage (use huawei-ecs), SFS file storage, CBR backup (use huawei-cbr).'
 version: 1
 ---
 
@@ -23,11 +23,11 @@ hcloud OBS help           # NOT --help
 hcloud OBS help <command> # e.g. hcloud OBS help mb
 ```
 
-| Wrong (API-style) | Correct (obsutil-style) |
-|-------------------|-------------------------|
-| `OBS CreateBucket` | `OBS mb obs://<bucket>` |
-| `OBS PutObject` | `OBS cp <file> obs://<bucket>/` |
-| `OBS DeleteBucket` | `OBS rm obs://<bucket> -r` |
+| Wrong (API-style)  | Correct (obsutil-style)         |
+| ------------------ | ------------------------------- |
+| `OBS CreateBucket` | `OBS mb obs://<bucket>`         |
+| `OBS PutObject`    | `OBS cp <file> obs://<bucket>/` |
+| `OBS DeleteBucket` | `OBS rm obs://<bucket> -r`      |
 
 ## Overview
 
@@ -35,16 +35,16 @@ Domain expertise for Huawei Cloud Object Storage Service (OBS). Covers bucket/ob
 
 ## Critical Warnings
 
-| Trap | Why |
-|------|-----|
-| Bucket name is global | All users share bucket namespace. Always use a unique name: `{prefix}-{timestamp}` (e.g. `mybucket-20260810155048`) |
-| Three-layer permissions | IAM > Bucket Policy > ACL. Most restrictive wins |
-| Versioning is irreversible | Once enabled, cannot be disabled, only suspended |
-| OBS uses AK/SK directly | NOT IAM tokens. Auth errors mean check AK/SK validity |
-| Static website via CLI missing | KooCLI OBS lacks website config. Use REST API or console |
-| **OBS needs separate cred config** | `hcloud configure` is NOT enough for OBS. Before any OBS operation, call `huaweicloud_setup_obs_config` to sync credentials from hcloud profile. |
-| **obsutil interactive prompts** | `cp`/`rm` without `-f` causes "Please input (y/n)" → Agent hangs (TIMEOUT). Always use `-f` for non-interactive. |
-| **Directory upload adds prefix** | `cp <dir>/ obs://<bucket>/ -r` puts files under `bucket/<dir>/...`. Use `-flat` for root-level files (static sites). Preview with `-dryRun` first. |
+| Trap                               | Why                                                                                                                                                |
+| ---------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------- |
+| Bucket name is global              | All users share bucket namespace. Always use a unique name: `{prefix}-{timestamp}` (e.g. `mybucket-20260810155048`)                                |
+| Three-layer permissions            | IAM > Bucket Policy > ACL. Most restrictive wins                                                                                                   |
+| Versioning is irreversible         | Once enabled, cannot be disabled, only suspended                                                                                                   |
+| OBS uses AK/SK directly            | NOT IAM tokens. Auth errors mean check AK/SK validity                                                                                              |
+| Static website via CLI missing     | KooCLI OBS lacks website config. Use REST API or console                                                                                           |
+| **OBS needs separate cred config** | `hcloud configure` is NOT enough for OBS. Before any OBS operation, call `huaweicloud_setup_obs_config` to sync credentials from hcloud profile.   |
+| **obsutil interactive prompts**    | `cp`/`rm` without `-f` causes "Please input (y/n)" → Agent hangs (TIMEOUT). Always use `-f` for non-interactive.                                   |
+| **Directory upload adds prefix**   | `cp <dir>/ obs://<bucket>/ -r` puts files under `bucket/<dir>/...`. Use `-flat` for root-level files (static sites). Preview with `-dryRun` first. |
 
 ## OBS Credential Setup (Required Before First Use)
 
@@ -62,21 +62,21 @@ hcloud OBS config -e=<endpoint> -i=<AK> -k=<SK> -t=token
 
 ## Common Workflows
 
-| Task | Command |
-|------|---------|
-| Create bucket | `hcloud OBS mb obs://<bucket> -location=<region>` |
-| List buckets/objects | `hcloud OBS ls [obs://<bucket>]` |
-| Upload file | `hcloud OBS cp <file> obs://<bucket>/<key>` |
-| Upload directory (recursive) | `hcloud OBS cp <dir>/ obs://<bucket>/ -r -f -flat` |
-| Download object | `hcloud OBS cp obs://<bucket>/<key> <local-path>` |
-| Set bucket ACL | `hcloud OBS chattri obs://<bucket> -acl=public-read` |
-| Set object ACL | `hcloud OBS chattri obs://<bucket>/<key> -acl=public-read` | Bucket ACL does NOT cascade — anonymous reads need both |
-| Set lifecycle | `hcloud OBS lifecycle obs://<bucket> -method=put -localfile=<json>` |
-| Set bucket policy | `hcloud OBS bucketpolicy obs://<bucket> -method=put -localfile=<json>` |
-| Set CORS | `hcloud OBS cors obs://<bucket> -method=put -localfile=<json>` |
-| Delete bucket | `hcloud OBS rm obs://<bucket> -r` (must be empty) |
-| Presigned URL | `hcloud OBS sign obs://<bucket>/<key> -e=<seconds>` |
-| Object metadata | `hcloud OBS stat obs://<bucket>/<key>` |
+| Task                         | Command                                                                |
+| ---------------------------- | ---------------------------------------------------------------------- |
+| Create bucket                | `hcloud OBS mb obs://<bucket> -location=<region>`                      |
+| List buckets/objects         | `hcloud OBS ls [obs://<bucket>]`                                       |
+| Upload file                  | `hcloud OBS cp <file> obs://<bucket>/<key>`                            |
+| Upload directory (recursive) | `hcloud OBS cp <dir>/ obs://<bucket>/ -r -f -flat`                     |
+| Download object              | `hcloud OBS cp obs://<bucket>/<key> <local-path>`                      |
+| Set bucket ACL               | `hcloud OBS chattri obs://<bucket> -acl=public-read`                   |
+| Set object ACL               | `hcloud OBS chattri obs://<bucket>/<key> -acl=public-read`             | Bucket ACL does NOT cascade — anonymous reads need both |
+| Set lifecycle                | `hcloud OBS lifecycle obs://<bucket> -method=put -localfile=<json>`    |
+| Set bucket policy            | `hcloud OBS bucketpolicy obs://<bucket> -method=put -localfile=<json>` |
+| Set CORS                     | `hcloud OBS cors obs://<bucket> -method=put -localfile=<json>`         |
+| Delete bucket                | `hcloud OBS rm obs://<bucket> -r` (must be empty)                      |
+| Presigned URL                | `hcloud OBS sign obs://<bucket>/<key> -e=<seconds>`                    |
+| Object metadata              | `hcloud OBS stat obs://<bucket>/<key>`                                 |
 
 ## Static Website Deployment Workflow
 
@@ -94,22 +94,23 @@ See `references/single-file-share.md` for the full workflow to host one file and
 
 ## Storage Classes
 
-| Class | Use Case | Min Storage | Retrieval Fee |
-|-------|----------|-------------|---------------|
-| STANDARD | Frequently accessed | None | No |
-| STANDARD_IA | Infrequent access | 30 days | Yes |
-| ARCHIVE | Long-term archive | 90 days | Yes (hours) |
+| Class       | Use Case            | Min Storage | Retrieval Fee |
+| ----------- | ------------------- | ----------- | ------------- |
+| STANDARD    | Frequently accessed | None        | No            |
+| STANDARD_IA | Infrequent access   | 30 days     | Yes           |
+| ARCHIVE     | Long-term archive   | 90 days     | Yes (hours)   |
 
 ## Troubleshooting
 
-| Error | Root Cause -> Fix |
-|-------|------------------|
-| AccessDenied on bucket | IAM/bucket policy/ACL conflict -> Check all three layers |
-| BucketAlreadyExists | Name taken globally -> Generate unique name with timestamp suffix: `{prefix}-{yyyymmddHHMMSS}` |
-| NoSuchKey | Object doesn't exist or wrong region -> Verify key and region |
-| InvalidAccessKeyId | OBS uses AK/SK directly -> Verify AK/SK validity, OBS endpoint, OBS permissions |
-| EntityTooLarge | Single PUT limit 5GB -> Use multipart upload |
-| OBS --help fails | KooCLI OBS uses `help` not `--help` -> Run `hcloud OBS help` |
+| Error                                 | Root Cause -> Fix                                                                                                                                                                                                                                      |
+| ------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
+| AccessDenied on bucket                | IAM/bucket policy/ACL conflict -> Check all three layers                                                                                                                                                                                               |
+| BucketAlreadyExists                   | Name taken globally -> Generate unique name with timestamp suffix: `{prefix}-{yyyymmddHHMMSS}`                                                                                                                                                         |
+| NoSuchKey                             | Object doesn't exist or wrong region -> Verify key and region                                                                                                                                                                                          |
+| InvalidAccessKeyId                    | OBS uses AK/SK directly -> Verify AK/SK validity, OBS endpoint, OBS permissions                                                                                                                                                                        |
+| EntityTooLarge                        | Single PUT limit 5GB -> Use multipart upload                                                                                                                                                                                                           |
+| OBS --help fails                      | KooCLI OBS uses `help` not `--help` -> Run `hcloud OBS help`                                                                                                                                                                                           |
+| Configuration file is not well-formed | `~/.obsutilconfig` was generated by a non-standard path (CRLF line endings or field-order differences). Even `hcloud OBS --help` fails. Rebuild it with `hcloud OBS config -e=<endpoint> -i=<AK> -k=<SK>` (or `huaweicloud_setup_obs_config`) -> retry |
 
 ## Security Considerations
 

package/plugins/huaweicloud-core/skills/huawei-obs/references/bucket-create.md

@@ -4,14 +4,14 @@ From Huawei Cloud marketplace best practices.
 
 ## Naming Rules
 
-| Rule | Detail |
-|------|--------|
-| Length | 3-63 characters |
-| Characters | Lowercase letters, numbers, `-`, `.` |
-| No IP format | Cannot be IP address pattern |
-| No leading/trailing `-` or `.` | Start and end must be alphanumeric |
-| No `..` | Adjacent dots forbidden |
-| No `-.` or `.-` | Adjacent dot-hyphen combos forbidden |
+| Rule                           | Detail                               |
+| ------------------------------ | ------------------------------------ |
+| Length                         | 3-63 characters                      |
+| Characters                     | Lowercase letters, numbers, `-`, `.` |
+| No IP format                   | Cannot be IP address pattern         |
+| No leading/trailing `-` or `.` | Start and end must be alphanumeric   |
+| No `..`                        | Adjacent dots forbidden              |
+| No `-.` or `.-`                | Adjacent dot-hyphen combos forbidden |
 
 ## Create Bucket
 
@@ -19,11 +19,11 @@ From Huawei Cloud marketplace best practices.
 hcloud OBS mb obs://<bucket> [-acl=xxx] [-location=<r>] [-sc=xxx]
 ```
 
-| Option | Values | Default |
-|--------|--------|---------|
-| `-acl` | private, public-read, public-read-write | private |
-| `-location` | cn-south-1, cn-north-4, ... | config default |
-| `-sc` | standard, warm, cold, deep-archive | standard |
+| Option      | Values                                  | Default        |
+| ----------- | --------------------------------------- | -------------- |
+| `-acl`      | private, public-read, public-read-write | private        |
+| `-location` | cn-south-1, cn-north-4, ...             | config default |
+| `-sc`       | standard, warm, cold, deep-archive      | standard       |
 
 ## Quick Verify
 
@@ -34,12 +34,12 @@ hcloud OBS stat obs://<bucket>
 
 ## Storage Class Guide
 
-| Class | Access Frequency | Min Storage | Retrieval Cost |
-|-------|-----------------|-------------|----------------|
-| standard | Frequent | None | No |
-| warm | Infrequent | 30 days | Yes |
-| cold | Rare | 90 days | Yes |
-| deep-archive | Archive | 180 days | Yes |
+| Class        | Access Frequency | Min Storage | Retrieval Cost |
+| ------------ | ---------------- | ----------- | -------------- |
+| standard     | Frequent         | None        | No             |
+| warm         | Infrequent       | 30 days     | Yes            |
+| cold         | Rare             | 90 days     | Yes            |
+| deep-archive | Archive          | 180 days    | Yes            |
 
 ## Critical Rules
 

package/plugins/huaweicloud-core/skills/huawei-obs/references/bucket-lifecycle.md

@@ -3,24 +3,29 @@
 > KooCLI OBS uses obsutil-style commands. `OBS CreateBucket` → `OBS mb`. `SetBucketWebsite` is NOT supported in KooCLI OBS (use API/SDK).
 
 ## Create Bucket
+
 hcloud OBS mb obs://<bucket> -location=<region>
 
 ## Lifecycle Rules (JSON)
+
 {
-  "Rules": [{
-    "ID": "move-to-ia-after-30d",
-    "Status": "Enabled",
-    "Filter": {"Prefix": ""},
-    "Transitions": [{"Days": 30, "StorageClass": "STANDARD_IA"}],
-    "Expiration": {"Days": 365}
-  }]
+"Rules": [{
+"ID": "move-to-ia-after-30d",
+"Status": "Enabled",
+"Filter": {"Prefix": ""},
+"Transitions": [{"Days": 30, "StorageClass": "STANDARD_IA"}],
+"Expiration": {"Days": 365}
+}]
 }
 
 ## Apply
+
 hcloud OBS lifecycle obs://<bucket> -method=put -localfile=<lifecycle.json>
 
 ## Static Website
+
 Not available via KooCLI OBS CLI. Use `hcloud OBS chattri obs://<bucket> -acl=public-read` for bucket ACL, or use API/SDK for website configuration.
 
 ## Cross-Region Replication
+
 Requires: source bucket versioning enabled, destination bucket in different region, replication IAM role.

package/plugins/huaweicloud-core/skills/huawei-obs/references/common-pitfalls.md

@@ -6,13 +6,13 @@
 
 OBS 使用 **obsutil-style** 子命令，不是 API-style 操作名：
 
-| 错误写法（API-style） | 正确写法（obsutil-style） |
-|----------------------|--------------------------|
-| `OBS --help` | `hcloud OBS help`（无 `--`，`help` 是子命令） |
-| `OBS CreateBucket` | `hcloud OBS mb obs://<bucket>` |
-| `OBS PutObject` | `hcloud OBS cp <file> obs://<bucket>/` |
-| `OBS DeleteBucket` | `hcloud OBS rm obs://<bucket> -r` |
-| `OBS ListBuckets` | `hcloud OBS ls` |
+| 错误写法（API-style） | 正确写法（obsutil-style）                     |
+| --------------------- | --------------------------------------------- |
+| `OBS --help`          | `hcloud OBS help`（无 `--`，`help` 是子命令） |
+| `OBS CreateBucket`    | `hcloud OBS mb obs://<bucket>`                |
+| `OBS PutObject`       | `hcloud OBS cp <file> obs://<bucket>/`        |
+| `OBS DeleteBucket`    | `hcloud OBS rm obs://<bucket> -r`             |
+| `OBS ListBuckets`     | `hcloud OBS ls`                               |
 
 ## 独立凭证配置
 
@@ -45,6 +45,7 @@ hcloud OBS config -i
 ```
 
 **规避方法**：
+
 1. 先 `-dryRun` 预览实际键名，再执行真实上传
 2. 或先将本地目录重命名为目标前缀名，如 `mv devkit/ root/` 后上传 `root/`
 3. 或使用 `-flat` 参数（如支持）
@@ -60,11 +61,11 @@ KooCLI OBS **不支持** `SetBucketWebsite` 命令。配置静态网站托管需
 
 ## 权限模型（三层）
 
-| 层级 | 作用域 | 优先级 |
-|------|--------|--------|
-| IAM Policy | 用户/用户组 | 最高 |
-| Bucket Policy | 桶级 | 中 |
-| ACL | 对象级 | 最低 |
+| 层级          | 作用域      | 优先级 |
+| ------------- | ----------- | ------ |
+| IAM Policy    | 用户/用户组 | 最高   |
+| Bucket Policy | 桶级        | 中     |
+| ACL           | 对象级      | 最低   |
 
 **关键规则**：三层中**最严格**的生效。Bucket Policy 设为 public-read，但 IAM deny 了 → 结果是 deny。
 

package/plugins/huaweicloud-core/skills/huawei-obs/references/single-file-share.md

@@ -2,10 +2,10 @@
 
 Host one file and get a shareable link in seconds. Two options:
 
-| Option | Link type | Bucket/object visibility | Expiry |
-|--------|-----------|--------------------------|--------|
-| Presigned URL | Time-limited private link | Keep private | `-e=<seconds>`, max 7 days |
-| Public URL | Permanent public link | Set object `-acl=public-read` | None |
+| Option        | Link type                 | Bucket/object visibility      | Expiry                     |
+| ------------- | ------------------------- | ----------------------------- | -------------------------- |
+| Presigned URL | Time-limited private link | Keep private                  | `-e=<seconds>`, max 7 days |
+| Public URL    | Permanent public link     | Set object `-acl=public-read` | None                       |
 
 ## Option 1: Presigned URL (private, time-limited)