huaweicloud-devkit 1.1.0-next.10 → 1.1.0-next.12

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "huaweicloud-devkit",
-  "version": "1.1.0-next.10",
+  "version": "1.1.0-next.12",
   "description": "Agent toolkit that helps coding agents use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities safely and accurately.",
   "type": "module",
   "files": [

package/plugins/huaweicloud-core/.claude-plugin/plugin.json

@@ -17,7 +17,7 @@
   "mcpServers": "./.mcp.json",
   "description": "Guide coding agents to use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities with safer execution and less context.",
   "skills": "./skills/",
-  "version": "1.1.0-next.10",
+  "version": "1.1.0-next.12",
   "author": {
     "name": "HuaweiCloud Mate",
     "url": "https://github.com/huaweicloud"

package/plugins/huaweicloud-core/.codex-plugin/plugin.json

@@ -20,7 +20,7 @@
   "mcpServers": "./.mcp.json",
   "description": "Agent toolkit that helps coding agents use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities safely and accurately.",
   "skills": "./skills/",
-  "version": "1.1.0-next.10",
+  "version": "1.1.0-next.12",
   "author": {
     "name": "HuaweiCloud Mate",
     "url": "https://github.com/huaweicloud"

package/plugins/huaweicloud-core/.cursor-plugin/plugin.json

@@ -17,7 +17,7 @@
   "mcpServers": "./.mcp.json",
   "description": "Guide coding agents to use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities with safer execution and less context.",
   "skills": "./skills/",
-  "version": "1.1.0-next.10",
+  "version": "1.1.0-next.12",
   "author": {
     "name": "HuaweiCloud Mate",
     "url": "https://github.com/huaweicloud"

package/plugins/huaweicloud-core/.hermes-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "huaweicloud-devkit",
-  "version": "1.1.0-next.10",
+  "version": "1.1.0-next.12",
   "description": "Guide coding agents to use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities with safer execution and less context.",
   "author": {
     "name": "HuaweiCloud Mate",

package/plugins/huaweicloud-core/.workbuddy-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "huaweicloud-devkit",
-  "version": "1.1.0-next.10",
+  "version": "1.1.0-next.12",
   "description": "Guide coding agents to use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities with safer execution and less context.",
   "author": {
     "name": "HuaweiCloud Mate",

package/plugins/huaweicloud-core/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "name": "huaweicloud-devkit",
   "id": "huaweicloud-devkit",
   "displayName": "HuaweiCloud DevKit",
-  "version": "1.1.0-next.10",
+  "version": "1.1.0-next.12",
   "family": "bundle-plugin",
   "bundleFormat": "codex",
   "description": "Guide coding agents to use Huawei Cloud safely — KooCLI, APIs, SDKs, 28 MCP tools, skills, and safety guardrails.",

package/plugins/huaweicloud-core/skills/huawei-billing/SKILL.md

@@ -8,7 +8,7 @@ version: 1
 
 **STOP - Do not answer from general knowledge.** Follow the procedure below.
 
-Always run `hcloud BSS <Operation> --help` before constructing commands to discover exact parameter names and requirements.
+Always run `hcloud BSS <Operation> --help --cli-region=cn-north-1` before constructing commands to discover exact parameter names and requirements.
 
 ## Overview
 
@@ -16,22 +16,23 @@ Domain expertise for billing queries (BSS). Covers cost tracking, bill details,
 
 ## Critical Warnings
 
-| Trap                       | Why                                                  |
-| -------------------------- | ---------------------------------------------------- |
-| Bills delayed ~24h         | Yesterday's costs may not appear until the next day  |
-| BSS Admin role needed      | IAM user must have BSS Administrator or Finance role |
-| Currency conversion varies | Cross-region costs use daily exchange rates          |
+| Trap                       | Why                                                                                                                                                 |
+| -------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------- |
+| Bills delayed ~24h         | Yesterday's costs may not appear until the next day                                                                                                 |
+| BSS Admin role needed      | IAM user must have BSS Administrator or Finance role                                                                                                |
+| Currency conversion varies | Cross-region costs use daily exchange rates                                                                                                         |
+| Region fixed to cn-north-1 | BSS operations only support `--cli-region=cn-north-1` in KooCLI. This is a KooCLI metadata limitation — the billing data itself covers all regions. |
 
 ## Common Workflows
 
-| Task                 | Operation                                                       |
-| -------------------- | --------------------------------------------------------------- |
-| List costs           | `ListCosts --cli-region=<r> --project_id=<p>`                   |
-| List customer bills  | `ListCustomerBills --cli-region=<r> --project_id=<p>`           |
-| List resource usage  | `ListResourceUsage --cli-region=<r> --project_id=<p>`           |
-| List sub-customers   | `ListConsumeSubCustomers --cli-region=<r> --project_id=<p>`     |
-| Show account balance | `ShowCustomerAccountBalances --cli-region=<r> --project_id=<p>` |
-| List conversions     | `ListConversions --cli-region=<r> --project_id=<p>`             |
+| Task                 | Operation                                                              |
+| -------------------- | ---------------------------------------------------------------------- |
+| List costs           | `ListCosts --cli-region=cn-north-1 --project_id=<p>`                   |
+| List customer bills  | `ListCustomerBillsFeeRecords --cli-region=cn-north-1 --project_id=<p>` |
+| List resource usage  | `ListResourceUsage --cli-region=cn-north-1 --project_id=<p>`           |
+| List sub-customers   | `ListConsumeSubCustomers --cli-region=cn-north-1 --project_id=<p>`     |
+| Show account balance | `ShowCustomerAccountBalances --cli-region=cn-north-1 --project_id=<p>` |
+| List conversions     | `ListConversions --cli-region=cn-north-1 --project_id=<p>`             |
 
 Discover exact parameters with `--help` before executing any command. All BSS operations are read-only.
 

package/plugins/huaweicloud-core/skills/huawei-dew/SKILL.md

@@ -69,7 +69,7 @@ secret_value = client.get_secret(secret_id="my-secret")
 
 # hcloud (for approved automation only)
 
-hcloud CSMS DownloadSecret --secret_name=<name>
+hcloud CSMS DownloadSecretBlob --secret_name=<name>
 
 # WARNING: Output goes to stdout. Pipe directly, never capture in agent.
 

package/plugins/huaweicloud-core/skills/huawei-vpc/SKILL.md

@@ -43,7 +43,7 @@ Domain expertise for Huawei Cloud Virtual Private Cloud (VPC). Covers VPC/subnet
 | SG rule         | hcloud VPC CreateSecurityGroupRule --security_group_rule.security_group_id=<id> --security_group_rule.direction=<direction> --security_group_rule.protocol=<protocol> --security_group_rule.multiport=<port> --security_group_rule.remote_ip_prefix=<cidr> | references/security-group.md                                                                                         |
 | Create EIP      | hcloud EIP CreatePublicip --publicip.type=<type> --bandwidth.size=<size> --bandwidth.share_type=<share-type> --bandwidth.name=<name>                                                                                                                       | Run `hcloud EIP CreatePublicip --help` to confirm valid type values per region                                       |
 | Bind EIP to ECS | hcloud EIP AssociatePublicips --publicip_id=<id> --publicip.associate_instance_id=<port-id> --publicip.associate_instance_type=PORT                                                                                                                        | Get port ID from `hcloud ECS ListServersDetails --server_id=<id>` → `OS-EXT-IPS:port_id`                             |
-| Unbind EIP      | hcloud EIP DisassociatePublicip --publicip_id=<id>                                                                                                                                                                                                         | references/eip.md                                                                                                    |
+| Unbind EIP      | hcloud EIP DisassociatePublicips --publicip_id=<id>                                                                                                                                                                                                        | references/eip.md                                                                                                    |
 | Delete EIP      | hcloud EIP DeletePublicip --publicip_id=<id>                                                                                                                                                                                                               | references/eip.md                                                                                                    |
 | List EIPs       | hcloud EIP ListPublicips                                                                                                                                                                                                                                   |                                                                                                                      |
 | NAT gateway     | hcloud NAT CreateNatGateway --nat.name=<name> --nat.spec=<spec> --router_id=<vpc-id> --internal_network_id=<subnet-id>                                                                                                                                     | Run `hcloud NAT CreateNatGateway --help` for available spec values                                                   |

package/plugins/huaweicloud-core/src/search-market.mjs

@@ -171,6 +171,7 @@ export async function searchMarketplace(query = '', category = '') {
       description: truncate(skill.description),
       triggers: (skill.triggers || []).slice(0, 5),
       matched,
+      installCommand: `npx skills add huaweicloud/huaweicloud-skills --skill ${skill.name}`,
     });
   }
   results.sort((a, b) => b.score - a.score);

package/plugins/huaweicloud-core/src/setup-cli.mjs

@@ -2070,26 +2070,19 @@ function removeHermesHooksConfigBlock() {
   const configPath = hermesConfigFile();
   if (!existsSync(configPath)) return;
   const lines = readFileSync(configPath, 'utf8').split(/\r?\n/);
+  let inHooksBlock = false;
   const out = [];
-  let skip = false;
   for (const line of lines) {
-    if (/^\s*huaweicloud-safety\.py/.test(line.trim())) {
-      skip = true;
-      continue;
-    }
-    if (skip) {
-      if (line.trim() === '') continue;
-      if (/^\s{2,}/.test(line) && line.trim() !== '') continue;
-      skip = false;
-    }
-    if (line.trim() === 'hooks:') {
-      continue;
-    }
-    if (line.trim() === 'pre_tool_call:') {
+    const trimmed = line.trim();
+    if (trimmed === 'hooks:' && !inHooksBlock) {
+      inHooksBlock = true;
       continue;
     }
-    if (/^\s*- matcher:\s*"terminal"/.test(line)) {
-      continue;
+    if (inHooksBlock) {
+      if (trimmed === '' || line.startsWith(' ') || line.startsWith('\t')) {
+        continue;
+      }
+      inHooksBlock = false;
     }
     out.push(line);
   }
@@ -2186,6 +2179,36 @@ async function updateHermes() {
 function uninstallHermes() {
   const skillsDir = hermesSkillsDir();
   let removed = 0;
+
+  // 1. Remove hook config from config.yaml (before deleting script files)
+  removeHermesHooksConfigBlock();
+  console.log('  Hooks config removed');
+
+  // 2. Clean shell-hooks-allowlist.json (remove approved hook references)
+  const hermesHome = hermesHomeDir();
+  const allowlistPath = join(hermesHome, 'shell-hooks-allowlist.json');
+  if (existsSync(allowlistPath)) {
+    try {
+      const allowlist = JSON.parse(readFileSync(allowlistPath, 'utf8'));
+      const before = (allowlist.approvals || []).length;
+      allowlist.approvals = (allowlist.approvals || []).filter((a) =>
+        typeof a === 'string' ? !a.includes('huaweicloud-safety.py') : true,
+      );
+      if (allowlist.approvals.length < before) {
+        writeFileSync(allowlistPath, JSON.stringify(allowlist, null, 2));
+        console.log(`  Removed ${before - allowlist.approvals.length} hook approvals from allowlist`);
+      }
+    } catch {
+      removeIfExists(allowlistPath);
+      console.log('  Removed hook allowlist file');
+    }
+  }
+
+  // 3. Remove MCP config from config.yaml
+  removeHermesMcpConfigBlock();
+  console.log('  MCP config removed');
+
+  // 4. Remove skills (file deletion comes after config cleanup)
   if (existsSync(skillsDir)) {
     for (const entry of readdirSync(skillsDir, { withFileTypes: true })) {
       if (entry.name.startsWith('huawei')) {
@@ -2202,11 +2225,10 @@ function uninstallHermes() {
     } catch {}
   }
 
+  // 5. Remove plugin directory (hook script files deleted last)
   if (removeIfExists(hermesPluginsDir())) {
     console.log('  Removed MCP server, safety policy and hooks');
   }
-  removeHermesMcpConfigBlock();
-  removeHermesHooksConfigBlock();
 }
 
 function hermesStatus() {