huaweicloud-devkit 1.1.0-next.2 → 1.1.0-next.21

package/plugins/huaweicloud-core/skills/huawei-dew/SKILL.md

@@ -69,7 +69,7 @@ secret_value = client.get_secret(secret_id="my-secret")
 
 # hcloud (for approved automation only)
 
-hcloud CSMS DownloadSecret --secret_name=<name>
+hcloud CSMS DownloadSecretBlob --secret_name=<name>
 
 # WARNING: Output goes to stdout. Pipe directly, never capture in agent.
 

package/plugins/huaweicloud-core/skills/huawei-ecs/SKILL.md

@@ -1,6 +1,8 @@
 ---
 name: huawei-ecs
-description: 'Use when creating, configuring, managing, or troubleshooting ECS instances on Huawei Cloud. Covers instance creation (hcloud ECS CreateServers), flavor selection, image management, security groups, EIP binding, disk attachment, auto-scaling (AS), and troubleshooting. Triggers on: ECS, instance, flavor, image, security group, EIP, EVS, auto-scaling. NOT for: CCE container workloads (use huawei-cce), BMS bare metal servers.'
+description: 'Use when creating, configuring, managing, or troubleshooting ECS instances on Huawei Cloud. Covers instance creation (hcloud ECS CreateServers), flavor selection, image management, security groups, EIP binding, disk attachment, auto-scaling (AS), and troubleshooting. Triggers on: ECS, instance, flavor, image, security group, EIP, EVS, auto-scaling. NOT for: CCE container workloads (use huawei-cce), BMS bare metal servers.
+
+HC活动场景(ECS+Nginx部署后端服务)触发词: HC活动, 华为HC, HC大会, 活动部署, HC ECS, 活动流程, 部署后端, Nginx部署, Nodejs部署, 上线后端服务, 部署个人网站, /hc-activity/.'
 version: 1
 ---
 
@@ -59,6 +61,7 @@ Flavor families are **region-dependent**. Always run `hcloud ECS ListFlavors --c
 | Attach disk         | hcloud EVS AttachVolume --volume_id=<id> --server_id=<id>                                                                                                | references/evs.md                                                                        |
 | Delete instance     | hcloud ECS DeleteServers --servers.1.id=<id> --delete_publicip=true --delete_volume=true                                                                 | references/create-instance.md                                                            |
 | Reboot instance     | hcloud ECS BatchRebootServers --reboot.servers.1.id=<id> --reboot.type=SOFT                                                                              | NOT `RebootServer` — that operation does not exist                                       |
+| HC活动部署          | 按量付费购买ECS+Nginx部署后端服务                                                                                                                        | references/hc-activity.md                                                                |
 
 ## How to Search for Instances
 
@@ -186,3 +189,4 @@ For Flexus X, use standard ECS CreateServers flow with `x1.*` flavors. For Flexu
 - ECS Docs: https://support.huaweicloud.com/ecs/
 - Flavor specs: references/flavors.md
 - Create instance: references/create-instance.md
+- HC活动 ECS+Nginx部署: references/hc-activity.md

package/plugins/huaweicloud-core/skills/huawei-ecs/references/hc-activity.md

@@ -0,0 +1,27 @@
+# HC活动 ECS + Nginx/Node.js 部署后端服务
+
+## 目标
+
+在华为云 cn-north-4 区域，按量付费购买 ECS，部署后端代码仓的后端服务。
+
+## 前置条件
+
+- 后端代码仓 git 地址
+- 账户已有默认 VPC 和子网(Agent 自动查询)
+
+## 流程
+
+1. 查询 VPC/子网，创建安全组，放通 SSH(22)仅本机IP、HTTP(80)全网
+2. 查询镜像(推荐 HCE 2.0)和规格，直接购买1核2G
+3. 创建 keypair，创建按量付费 ECS(系统盘 SSD 40GB)，轮询等待 ACTIVE
+4. 创建 5_bgp 按流量计费 EIP，绑定到 ECS 端口
+5. SSH 登录，安装 Node.js 18，git clone 代码仓，npm install
+6. Nginx反向代理:80->:3000
+7. 验证 /hc-activity/api/title 和 /hc-activity/health
+
+## 注意事项
+
+- 后端3000仅监听回环
+- Nginx修改后 nginx -t 再 reload
+- 按量付费停机仍计费
+- 删除实例时 --delete_publicip=true --delete_volume=true

package/plugins/huaweicloud-core/skills/huawei-iam/SKILL.md

@@ -42,14 +42,14 @@ Domain expertise for Huawei Cloud Identity and Access Management (IAM). Covers u
 
 ## Common Workflows
 
-| Task                     | Command                                                                                        | Steps                         |
-| ------------------------ | ---------------------------------------------------------------------------------------------- | ----------------------------- |
-| List users               | hcloud IAM ListUsers                                                                           | references/iam-ops.md         |
-| Create group             | hcloud IAM CreateGroup --group.name=<name>                                                     | references/iam-ops.md         |
-| Create custom policy     | hcloud IAM CreateCustomPolicy --policy.name=<n> --policy.document=<json>                       | references/policy-examples.md |
-| Create agency            | hcloud IAM CreateAgency --agency.name=<n> --agency.domain_id=<id> --agency.trust_policy=<json> | references/agency.md          |
-| Get temporary credential | hcloud STS GetTemporaryCredential --agency_name=<n> --domain_id=<id> --duration_seconds=3600   | references/sts.md             |
-| Attach policy            | hcloud IAM AttachGroupPolicy --group_id=<id> --policy_id=<id>                                  | references/iam-ops.md         |
+| Task                     | Command                                                                                                                     | Steps                         |
+| ------------------------ | --------------------------------------------------------------------------------------------------------------------------- | ----------------------------- |
+| List users               | hcloud IAM KeystoneListUsers --cli-region=<r>                                                                               | references/iam-ops.md         |
+| Create group             | hcloud IAM CreateGroupV5 --group_name=<name>                                                                                | references/iam-ops.md         |
+| Create custom policy     | hcloud IAM CreateCloudServiceCustomPolicy --role.display_name=<n> --role.type=<type> --role.policy.Statement.1.Effect=Allow | references/policy-examples.md |
+| Create agency            | hcloud IAM CreateAgency --agency.name=<n> --agency.domain_id=<id> --agency.trust_domain_name=<domain>                       | references/agency.md          |
+| Get temporary credential | hcloud STS AssumeAgency --agency_urn=<urn> --agency_session_name=<n> --duration_seconds=3600                                | references/sts.md             |
+| Attach policy to group   | hcloud IAM AttachGroupPolicyV5 --group_id=<id> --policy_id=<id>                                                             | references/iam-ops.md         |
 
 ## Policy Examples (Least Privilege)
 
@@ -88,10 +88,10 @@ FunctionGraph needs an agency to access VPC resources (RDS, DCS, etc.):
 
 ```bash
 # 1. Create agency with FunctionGraph trust
-hcloud IAM CreateAgency --agency_name=<name> --trust_domain_name=functiongraph
+hcloud IAM CreateAgency --agency.name=<name> --agency.trust_domain_name=functiongraph
 
-# 2. Attach VPC Administrator role
-hcloud IAM GrantRoleToAgency --agency_name=<name> --role_id=<role-id>
+# 2. Grant role to agency
+hcloud IAM AssociateAgencyWithDomainPermission --agency_id=<id> --role_id=<role-id>
 
 # 3. Use in CreateFunction
 hcloud FunctionGraph CreateFunction ... --app_xrole=<agency-name>

package/plugins/huaweicloud-core/skills/huawei-rds/SKILL.md

@@ -40,7 +40,7 @@ hcloud RDS <Operation> --cli-region=<region> [--key=value ...]
 | Automated backups use OBS           | Backup storage incurs separate charges. Set retention period explicitly                                                                      |
 | Storage auto-scaling off by default | Enable before storage runs out or instance goes read-only                                                                                    |
 | `--password` conflicts with KooCLI  | Use `--cli-jsonInput=<file>` with JSON file (see `--cli-jsonInput` section below). The `printf "b\n"` workaround is broken in KooCLI 7.2.12+ |
-| Volume type must match flavor       | General→CLOUDSSD; Dedicated→CLOUDSSD\|ESSD; ARM→ULTRAHIGH                                                                                    |
+| Volume type must match flavor       | General→CLOUDSSD; Dedicated→CLOUDSSD\|ESSD; ARM→CLOUDSSD                                                                                     |
 | Flavor not in region                | Always `ListFlavors` first. Spec codes vary by region                                                                                        |
 | `database_name` is case-sensitive   | Use `MySQL` / `PostgreSQL` / `SQLServer` / `MariaDB` — NOT lower-case `mysql`                                                                |
 | Instance creation takes 3–8 min     | Status: BUILD→MODIFYING→ACTIVE. Poll every 15s: `hcloud RDS ListInstances --cli-region=<r> --instance_id=<id> \| jq '.instances[0].status'`  |
@@ -55,7 +55,7 @@ hcloud RDS <Operation> --cli-region=<region> [--key=value ...]
 hcloud RDS ListInstances --cli-region=<r>
 hcloud RDS ListFlavors --database_name=<engine> --cli-region=<r>
 hcloud RDS ListDatastores --database_name=<engine> --cli-region=<r>
-hcloud RDS ListEngineFlavors --instance_id=<id> --cli-region=<r>
+hcloud RDS ListEngineFlavors --instance_id=<id> --availability_zone_ids=<az> --ha_mode=<mode> --cli-region=<r>
 ```
 
 ### Create Instance
@@ -109,7 +109,7 @@ hcloud RDS CreateInstance --cli-region=<r> \
 | `--name`              | Yes      | Instance name                                                                                |
 | `--datastore`         | Yes      | `--datastore.type=<engine> --datastore.version=<version>`                                    |
 | `--flavor_ref`        | Yes      | From `ListFlavors` output                                                                    |
-| `--volume`            | Yes      | Type matching: General→CLOUDSSD, Dedicated→CLOUDSSD\|ESSD, ARM→ULTRAHIGH                     |
+| `--volume`            | Yes      | Type matching: General→CLOUDSSD, Dedicated→CLOUDSSD\|ESSD, ARM→CLOUDSSD                      |
 | `--vpc_id`            | Yes      | Must exist in target region                                                                  |
 | `--subnet_id`         | Yes      | Must exist in target region                                                                  |
 | `--security_group_id` | Yes      | Must have DB port open                                                                       |
@@ -150,7 +150,8 @@ hcloud RDS CreateRestoreInstance --instance_id=<id> --backup_id=<id> --name=<new
 ## Read Replicas
 
 ```bash
-hcloud RDS CreateReadReplica --replica_of_id=<primary-id> --name=<name> --flavor_ref=<id> --volume.type=<vol-type> --volume.size=<size> --cli-region=<r>
+# Create a read replica via CreateInstance with --replica_of_id
+hcloud RDS CreateInstance --replica_of_id=<primary-id> --name=<name> --flavor_ref=<id> --volume.type=<vol-type> --volume.size=<size> --cli-region=<r>
 ```
 
 ## Fault Diagnosis
@@ -159,7 +160,7 @@ hcloud RDS CreateReadReplica --replica_of_id=<primary-id> --name=<name> --flavor
 hcloud RDS ListErrorLogs --instance_id=<id> --start_date=2024-01-01T00:00:00Z --end_date=2024-01-31T23:59:59Z --cli-region=<r>
 hcloud RDS ListSlowLogs --instance_id=<id> --start_date=... --end_date=... --cli-region=<r>
 hcloud RDS ShowReplicationStatus --instance_id=<id> --cli-region=<r>
-hcloud RDS ListInstanceDiagnosis --cli-region=<r>
+hcloud RDS ListInstanceDiagnosis --engine=<engine> --cli-region=<r>
 ```
 
 ## Connecting