huaweicloud-devkit 1.1.1-next.0 → 1.1.1-next.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "huaweicloud-devkit",
-  "version": "1.1.1-next.0",
+  "version": "1.1.1-next.2",
   "description": "Agent toolkit that helps coding agents use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities safely and accurately.",
   "type": "module",
   "files": [

package/plugins/huaweicloud-core/.claude-plugin/plugin.json

@@ -17,7 +17,7 @@
   "mcpServers": "./.mcp.json",
   "description": "Guide coding agents to use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities with safer execution and less context.",
   "skills": "./skills/",
-  "version": "1.1.1-next.0",
+  "version": "1.1.1-next.2",
   "author": {
     "name": "HuaweiCloud Mate",
     "url": "https://github.com/huaweicloud"

package/plugins/huaweicloud-core/.codex-plugin/plugin.json

@@ -20,7 +20,7 @@
   "mcpServers": "./.mcp.json",
   "description": "Agent toolkit that helps coding agents use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities safely and accurately.",
   "skills": "./skills/",
-  "version": "1.1.1-next.0",
+  "version": "1.1.1-next.2",
   "author": {
     "name": "HuaweiCloud Mate",
     "url": "https://github.com/huaweicloud"

package/plugins/huaweicloud-core/.cursor-plugin/plugin.json

@@ -17,7 +17,7 @@
   "mcpServers": "./.mcp.json",
   "description": "Guide coding agents to use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities with safer execution and less context.",
   "skills": "./skills/",
-  "version": "1.1.1-next.0",
+  "version": "1.1.1-next.2",
   "author": {
     "name": "HuaweiCloud Mate",
     "url": "https://github.com/huaweicloud"

package/plugins/huaweicloud-core/.hermes-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "huaweicloud-devkit",
-  "version": "1.1.1-next.0",
+  "version": "1.1.1-next.2",
   "description": "Guide coding agents to use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities with safer execution and less context.",
   "author": {
     "name": "HuaweiCloud Mate",

package/plugins/huaweicloud-core/.workbuddy-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "huaweicloud-devkit",
-  "version": "1.1.1-next.0",
+  "version": "1.1.1-next.2",
   "description": "Guide coding agents to use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities with safer execution and less context.",
   "author": {
     "name": "HuaweiCloud Mate",

package/plugins/huaweicloud-core/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "name": "huaweicloud-devkit",
   "id": "huaweicloud-devkit",
   "displayName": "HuaweiCloud DevKit",
-  "version": "1.1.1-next.0",
+  "version": "1.1.1-next.2",
   "family": "bundle-plugin",
   "bundleFormat": "codex",
   "description": "Guide coding agents to use Huawei Cloud safely — KooCLI, APIs, SDKs, 28 MCP tools, skills, and safety guardrails.",

package/plugins/huaweicloud-core/safety/rules/cloud-risk-rules.json

@@ -214,7 +214,7 @@
           },
           {
             "field": "text",
-            "regex": "(\\s--force|\\s-f\\s|\\s--recursive|\\s-r\\s|delete_publicip\\s*[=:]\\s*true)"
+            "regex": "(\\s--force|\\s-f\\s|\\s--recursive|\\s-r\\s)"
           }
         ]
       },
@@ -242,6 +242,27 @@
       "message": "This hcloud command will delete, detach, or remove cloud resources. The operation may be irreversible.",
       "remediation": "List the resources to be affected first, confirm with the user, and require explicit approval before executing any destructive operation."
     },
+    {
+      "id": "hwc-destructive-delete-cascade",
+      "title": "Cascading cloud resource deletion",
+      "category": "destructive",
+      "severity": "warn",
+      "stages": ["command"],
+      "match": {
+        "all": [
+          {
+            "field": "text",
+            "regex": "(Delete|BatchDelete|Remove|\\brm\\b|delete)"
+          },
+          {
+            "field": "text",
+            "regex": "(delete_publicip\\s*[=:]\\s*true|delete_volume\\s*[=:]\\s*true)"
+          }
+        ]
+      },
+      "message": "This delete command will also remove associated resources (EIP, volume). Check that these should be deleted together.",
+      "remediation": "Confirm with the user whether to delete the associated resources, or set delete_publicip/delete_volume to false to keep them."
+    },
     {
       "id": "hwc-sandbox-missing-ttl",
       "title": "Sandbox deployment missing cleanup metadata",

package/plugins/huaweicloud-core/skills/huawei-sandbox/references/framework-commands.md

@@ -2,6 +2,26 @@
 
 Maps web frameworks to install, build, serve commands and output directories for sandbox deployment.
 
+## Architecture Compatibility
+
+The sandbox runs **HCE OS on aarch64**. Frameworks that depend on native binaries (e.g., `@swc/core`, `esbuild`, `sharp`, `prisma`) may fail to install or build inside the sandbox since prebuilt binaries target x86_64 by default.
+
+**Recommended strategy**: build locally (x86_64) then upload the dist output to the sandbox for serving.
+
+| Dependency       | Frameworks Affected      | Mitigation                            |
+| ---------------- | ------------------------ | ------------------------------------- |
+| `@swc/core`      | Taro, Next.js 13+        | Pre-build locally, upload dist        |
+| `esbuild`        | Vite, Nuxt, uni-app      | Usually has aarch64 binary; try build |
+| `sharp`          | Gatsby, Next.js images   | Pre-build locally, upload dist        |
+| `prisma`         | Next.js, Nuxt (database) | Use `binaryTargets = ["linux-arm64"]` |
+| `node-gyp` (C++) | node-sass, bcrypt        | `build-essential` is pre-installed    |
+
+**Pre-build workflow**:
+
+1. Build on local machine (x86_64): `npm install && npm run build`
+2. Use `huaweicloud_sandbox_connect` with git config (auto-transfers code) or `huaweicloud_sandbox_upload_project` to upload dist
+3. Deploy with nginx static/SPA template — no native deps needed at runtime
+
 ## SSR Frameworks
 
 | Framework | Install       | Build           | Serve                                                       | Output Dir | Port | Nginx |

package/plugins/huaweicloud-core/skills/huawei-sandbox/references/nginx-templates.md

@@ -64,7 +64,7 @@ NGINX_EOF
 sudo nginx -s reload 2>/dev/null || sudo nginx
 ```
 
-## Template 3: Static Site (no SPA routing)
+## Template 3: Static Site (with clean URL support)
 
 Use for: Hugo, Hexo, plain static HTML
 
@@ -76,6 +76,7 @@ server {
     index index.html;
 
     location / {
+        try_files $uri $uri.html $uri/ =404;
         autoindex off;
     }
 

package/plugins/huaweicloud-core/skills/huawei-voucher/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: huawei-voucher
-description: '查询和领取华为云激励代金券（一人一次）。当用户询问插件能力、首次使用，或提到"领券/代金券/优惠券/激励金/领取"等话题时，先查询领取状态：未领取（claimed=false）则主动提示可领取，已领取（claimed=true）则不打扰。Triggers: voucher, coupon, incentive, 领券, 代金券, 优惠券, 激励金, 领取. NOT for: 账单/费用查询（用 huawei-billing）。'
+description: '查询和领取华为云激励代金券（一人一次）。当用户首次使用、开始会话、询问插件能力，或提到"领券/代金券/优惠券/激励金/领取/福利"等话题时，先调 voucher_status 查领取状态：未领取（claimed=false）则主动提示可领取一张代金券并询问是否领取；已领取（claimed=true）或状态不明确则静默不打扰。Triggers: 首次使用, 会话开始, voucher, coupon, incentive, 领券, 代金券, 优惠券, 激励金, 领取, 福利. NOT for: 账单/费用查询（用 huawei-billing）。'
 version: 1
 ---
 
@@ -8,11 +8,16 @@ version: 1
 
 ## 主动提示准则（核心）
 
-此能力仅在用户尚未领取时才有价值，需避免已领取用户被反复打扰：
+此能力仅在用户尚未领取时才有价值，需避免已领取用户被反复打扰。以下场景默认执行"先查后提示"：会话开始、能力导读、首次对话、提到福利领取类话题。
 
-1. 当用户**询问插件能力 / 首次使用 / 提到福利领取类话题**时，先调用 `huaweicloud_voucher_status` 查询领取状态。
-2. 若 `claimed=false` → 主动告知"可领取华为云代金券（一人一次）"，并询问是否现在领取。
-3. 若 `claimed=true` → 静默处理，不再提及代金券，不打扰用户。
+1. 生产环境直接调用 `huaweicloud_voucher_status`（**不传** `domain_id`，后端从 IAM 自动解析账号）。
+2. 按返回严格判定：
+   - `claimed=true` → 静默处理，不再提及代金券，不打扰用户
+   - `claimed=false` 且 `message="未领取"` → **主动提示**，用下方话术并询问是否领取
+   - 其余情况（如 `message="查询失败"`、状态不明确、调用异常）→ **严格不提示**
+3. 提示话术（可直接使用）：
+   > "你还可以领取一张华为云激励代金券（一人一次），需要我现在帮你领取吗？"
+4. 能力导读时，若判定未领取，将代金券作为**独立、靠前**的提示项，而非埋在能力清单底部。
 
 ## 流程
 

package/plugins/huaweicloud-core/src/detect-framework.mjs

@@ -244,7 +244,7 @@ function readVitepressOutDir(projectPath) {
     if (!existsSync(configPath)) continue;
     try {
       const content = readFileSync(configPath, 'utf8');
-      const match = content.match(/outDir\s*:\s*['"]([^'"]+)['"]/);
+      const match = content.match(/outDir\s*:\s*['"`]?([^'"`\s,}]+)['"`]?/);
       if (match) return match[1];
     } catch {}
   }

package/plugins/huaweicloud-core/src/sandbox/session-manager.mjs

@@ -802,6 +802,7 @@ fi`;
     index index.html;
 
     location / {
+        try_files $uri $uri.html $uri/ =404;
         autoindex off;
     }
 

package/plugins/huaweicloud-core/src/tools.mjs

@@ -734,7 +734,8 @@ export const TOOL_DEFINITIONS = [
   },
   {
     name: 'huaweicloud_voucher_status',
-    description: '查询代金券领取状态。',
+    description:
+      '查询代金券领取状态。用户首次使用、开始会话或询问插件能力时，应主动调用本工具检查：未领取（claimed=false）则主动提示可领取一张代金券；已领取（claimed=true）则不提示、不打扰。',
     inputSchema: {
       type: 'object',
       properties: {
@@ -1054,6 +1055,9 @@ export async function callTool(name, args = {}) {
         try {
           await execOneShot(devStageId, 'devbridge delete-all 2>/dev/null || true', 'root', 15000);
         } catch {}
+        try {
+          await execWithSession(devStageId, 'export PATH=$HOME/.huawei/bin${PATH:+:$PATH}', 'root', 10000);
+        } catch {}
         await transferGitRepo(args, devStageId, connectResult);
       }
       return connectResult;
@@ -1326,7 +1330,14 @@ async function runApprovedCommand(args = {}) {
   }
   const providedArgs = Array.isArray(args.args) ? args.args.map(String) : [];
   if (JSON.stringify(storedArgs) !== JSON.stringify(providedArgs)) {
-    throw new Error('Provided args do not match the approved plan. Use the exact args from the plan.');
+    const redactedStored = redactSecrets(storedArgs);
+    const redactedProvided = redactSecrets(providedArgs);
+    if (JSON.stringify(redactedStored) !== JSON.stringify(redactedProvided)) {
+      throw new Error(
+        'Provided args do not match the approved plan. Use the exact args from the plan. ' +
+          'If the plan shows <redacted> for passwords or secrets, replace <redacted> with the actual values in approvedCommand.',
+      );
+    }
   }
   const strictPlan = planHcloudCommand(providedArgs, { allowWrites: false });
   const result = await runHcloud(providedArgs, {