npm - huaweicloud-devkit - Versions diffs - 1.1.2-next.1 → 1.1.2-next.3 - Mend

huaweicloud-devkit 1.1.2-next.1 → 1.1.2-next.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (33) hide show

package/README.md CHANGED Viewed

@@ -11,12 +11,6 @@ Help AI coding agents use Huawei Cloud safely and accurately — a single integr
 Supports OpenCode, Codex, CodeArts Agent, WorkBuddy, DeepSeek Harness (DSH), OfficeAce, Hermes, OpenClaw, and AtomCode.
-## Cursor Directory Plugin
-This repository also acts as an [Open Plugins](https://open-plugins.com) package for the [Cursor Directory](https://cursor.directory) marketplace. The root-level `plugin.json`, `mcp.json`, `skills/`, and `rules/` files are used **only** for Cursor Directory repository-scan discovery and are **not** shipped in the npm tarball (the `package.json` `files` whitelist excludes them). The npm package's manifests live under `plugins/huaweicloud-core/`.
-The `mcp.json` MCP server launches via `npx -y -p huaweicloud-devkit huaweicloud-devkit-mcp`, which tracks the npm `latest` tag. During pre-release this may differ from the manifest `version`; it can be pinned after a stable release.
 ## Prerequisites
 - Node.js >= 22
@@ -226,6 +220,30 @@ No installation required — `npx` handles everything.
 > Set `HW_ACCESS_KEY`/`HW_SECRET_KEY` in the MCP config `env` field for project-level credentials.
+#### Connecting over Remote (HTTP)
+If your agent supports `type: "remote"` (Streamable HTTP) instead of stdio, start the devkit remote MCP server locally first:
+```bash
+npx --yes huaweicloud-devkit-mcp --transport remote
+```
+It listens on `127.0.0.1:9528` by default (no conflict with the IACMCPServer port 9527). Then connect with a remote config (opencode example):
+```jsonc
+{
+  "mcp": {
+    "huaweicloud-devkit": {
+      "type": "remote",
+      "url": "http://localhost:9528",
+      "enabled": true,
+    },
+  },
+}
+```
+> Use `--port <port>` if 9528 is taken and update `url` accordingly; add `--host 0.0.0.0` for LAN access. The remote server has no built-in auth — do not expose it anonymously to the public internet.
 ### Install KooCLI
 ```bash

package/README.zh-CN.md CHANGED Viewed

@@ -11,12 +11,6 @@
 支持 OpenCode、Codex、码道（CodeArts Agent）、WorkBuddy、DeepSeek Harness（DSH）、OfficeAce、Hermes、OpenClaw、AtomCode。
-## Cursor Directory 插件
-本仓库同时作为 [Open Plugins](https://open-plugins.com) 包挂载到 [Cursor Directory](https://cursor.directory) 市场。根目录的 `plugin.json`、`mcp.json`、`skills/`、`rules/` 仅用于 Cursor Directory 的仓库扫描发现，**不会**打入 npm 包（`package.json` 的 `files` 白名单未包含它们）。npm 包的 manifests 位于 `plugins/huaweicloud-core/`。
-`mcp.json` 中的 MCP 服务通过 `npx -y -p huaweicloud-devkit huaweicloud-devkit-mcp` 启动，跟踪的是 npm 的 `latest` tag。预发布阶段可能与 manifest 中的 `version` 不一致，稳定发版后可以固定版本。
 ## 前置条件
 - Node.js >= 22
@@ -226,6 +220,30 @@ npx --yes huaweicloud-devkit uninstall --target atomcode
 > 项目级 AK/SK 可通过 MCP 配置的 `env` 字段设置 `HW_ACCESS_KEY`/`HW_SECRET_KEY`。
+#### 通过 Remote（HTTP）连接
+若 Agent 支持 `type: "remote"`（Streamable HTTP）而非 stdio，可在本地先启动 devkit 的远程 MCP 服务器：
+```bash
+npx --yes huaweicloud-devkit-mcp --transport remote
+```
+默认监听 `127.0.0.1:9528`（与预置的 IACMCPServer 端口 9527 不冲突）。随后以远程方式连接（以 opencode 为例）：
+```jsonc
+{
+  "mcp": {
+    "huaweicloud-devkit": {
+      "type": "remote",
+      "url": "http://localhost:9528",
+      "enabled": true,
+    },
+  },
+}
+```
+> 端口被占用时用 `--port <端口>` 换端口，`url` 同步修改；需要局域网访问时加 `--host 0.0.0.0`。remote 服务器不内置鉴权，请勿匿名暴露到公网。
 ### 安装 KooCLI
 ```bash

package/integrations/hermes/skills-snapshot.json ADDED Viewed

@@ -0,0 +1,175 @@
+{
+  "hermes_version": "0.1.0",
+  "exported_at": "2026-09-07T00:00:00Z",
+  "skills": [
+    {
+      "name": "huawei-apig",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-apig",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-billing",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-billing",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-cbr",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-cbr",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-cce",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-cce",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-cloud-eye",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-cloud-eye",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-cloud-find-skills",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-cloud-find-skills",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-cts",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-cts",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-dds-dcs",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-dds-dcs",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-deployment",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-deployment",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-dew",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-dew",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-ecs",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-ecs",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-functiongraph",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-functiongraph",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-gaussdb",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-gaussdb",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-getting-started",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-getting-started",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-iam",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-iam",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-modelarts",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-modelarts",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-obs",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-obs",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-rds",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-rds",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-sandbox",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-sandbox",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-smn-dms",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-smn-dms",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-vpc",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-vpc",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-waf-aad",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-waf-aad",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huaweicloud-api-and-sdk",
+      "source": "official",
+      "identifier": "official/huaweicloud/huaweicloud-api-and-sdk",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huaweicloud-capability-discovery",
+      "source": "official",
+      "identifier": "official/huaweicloud/huaweicloud-capability-discovery",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huaweicloud-cli-and-auth",
+      "source": "official",
+      "identifier": "official/huaweicloud/huaweicloud-cli-and-auth",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huaweicloud-core",
+      "source": "official",
+      "identifier": "official/huaweicloud/huaweicloud-core",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huaweicloud-safety",
+      "source": "official",
+      "identifier": "official/huaweicloud/huaweicloud-safety",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huaweicloud-troubleshooting",
+      "source": "official",
+      "identifier": "official/huaweicloud/huaweicloud-troubleshooting",
+      "category": "huaweicloud"
+    }
+  ],
+  "taps": []
+}

package/package.json CHANGED Viewed

@@ -1,6 +1,8 @@
 {
   "name": "huaweicloud-devkit",
-  "version": "1.1.2-next.1",
+  "mcpName": "io.github.huaweicloud/huaweicloud-devkit",
+  "version": "1.1.2-next.3",
+  "kooCliVersion": "7.2.12",
   "description": "Agent toolkit that helps coding agents use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities safely and accurately.",
   "type": "module",
   "files": [

package/plugins/huaweicloud-core/.claude-plugin/plugin.json CHANGED Viewed

@@ -17,7 +17,7 @@
   "mcpServers": "./.mcp.json",
   "description": "Guide coding agents to use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities with safer execution and less context.",
   "skills": "./skills/",
-  "version": "1.1.2-next.1",
+  "version": "1.1.2-next.3",
   "author": {
     "name": "HuaweiCloud Mate",
     "url": "https://github.com/huaweicloud"

package/plugins/huaweicloud-core/.codex-plugin/plugin.json CHANGED Viewed

@@ -20,7 +20,7 @@
   "mcpServers": "./.mcp.json",
   "description": "Agent toolkit that helps coding agents use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities safely and accurately.",
   "skills": "./skills/",
-  "version": "1.1.2-next.1",
+  "version": "1.1.2-next.3",
   "author": {
     "name": "HuaweiCloud Mate",
     "url": "https://github.com/huaweicloud"

package/plugins/huaweicloud-core/.cursor-plugin/plugin.json CHANGED Viewed

@@ -17,7 +17,7 @@
   "mcpServers": "./.mcp.json",
   "description": "Guide coding agents to use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities with safer execution and less context.",
   "skills": "./skills/",
-  "version": "1.1.2-next.1",
+  "version": "1.1.2-next.3",
   "author": {
     "name": "HuaweiCloud Mate",
     "url": "https://github.com/huaweicloud"

package/plugins/huaweicloud-core/.hermes-plugin/plugin.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "huaweicloud-devkit",
-  "version": "1.1.2-next.1",
+  "version": "1.1.2-next.3",
   "description": "Guide coding agents to use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities with safer execution and less context.",
   "author": {
     "name": "HuaweiCloud Mate",

package/plugins/huaweicloud-core/.workbuddy-plugin/plugin.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "huaweicloud-devkit",
-  "version": "1.1.2-next.1",
+  "version": "1.1.2-next.3",
   "description": "Guide coding agents to use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities with safer execution and less context.",
   "author": {
     "name": "HuaweiCloud Mate",

package/plugins/huaweicloud-core/openclaw.plugin.json CHANGED Viewed

@@ -2,7 +2,7 @@
   "name": "huaweicloud-devkit",
   "id": "huaweicloud-devkit",
   "displayName": "HuaweiCloud DevKit",
-  "version": "1.1.2-next.1",
+  "version": "1.1.2-next.3",
   "family": "bundle-plugin",
   "bundleFormat": "codex",
   "description": "Guide coding agents to use Huawei Cloud safely — KooCLI, APIs, SDKs, 28 MCP tools, skills, and safety guardrails.",

package/plugins/huaweicloud-core/skills/huawei-apig/SKILL.md CHANGED Viewed

@@ -119,7 +119,7 @@ hcloud APIG BatchPublishOrOfflineApiV2 \
 ## Throttling
 ```bash
-hcloud APIG CreateThrottlingPolicyV2 --name=<n> --api_call_limits=1000
+hcloud APIG CreateRequestThrottlingPolicyV2 --instance_id=<id> --name=<n> --api_call_limits=1000
 ```
 ## Common Workflows

package/plugins/huaweicloud-core/skills/huawei-dew/SKILL.md CHANGED Viewed

@@ -31,16 +31,15 @@ Domain expertise for Huawei Cloud Data Encryption Workshop (DEW). Covers CSMS fo
 | Operation          | Description                                            |
 | ------------------ | ------------------------------------------------------ |
 | ListSecrets        | List all secrets (names only, no values)               |
-| DescribeSecret     | Get secret metadata (rotation config, KMS key, status) |
+| ShowSecret         | Get secret metadata (rotation config, KMS key, status) |
 | ListSecretVersions | List version IDs and stages (no values)                |
 ### Secret Value (blocked by policy — use runtime injection)
-| Operation         | Safe Alternative                              |
-| ----------------- | --------------------------------------------- |
-| DownloadSecret    | Use {{resolve:csms:secret-id}} in IaC or SDK  |
-| ShowSecretVersion | Use runtime injection, never in agent context |
-| GetSecretValue    | Blocked. Use MCP proxy resolve pattern        |
+| Operation          | Safe Alternative                              |
+| ------------------ | --------------------------------------------- |
+| DownloadSecretBlob | Use {{resolve:csms:secret-id}} in IaC or SDK  |
+| ShowSecretVersion  | Use runtime injection, never in agent context |
 ## KMS Operations
@@ -80,7 +79,7 @@ hcloud CSMS DownloadSecretBlob --secret_name=<name>
 | Error                | Root Cause -> Fix                                                           |
 | -------------------- | --------------------------------------------------------------------------- |
 | Secret not found     | Wrong region or project -> Verify secret ARN includes region/project        |
-| AccessDenied on CSMS | Missing IAM CSMS policy -> Add csms:DescribeSecret + kms:Decrypt            |
+| AccessDenied on CSMS | Missing IAM CSMS policy -> Add csms:ShowSecret + kms:Decrypt                |
 | KMS key disabled     | Key scheduled for deletion or manually disabled -> Enable or create new key |
 | Rotation stuck       | Lambda/Python function error -> Check rotation function logs                |

package/plugins/huaweicloud-core/skills/huawei-dew/references/csms-usage.md CHANGED Viewed

@@ -2,7 +2,7 @@
 ## Create Secret
-hcloud CSMS CreateSecret --secret_name=prod-db-password --secret_string='{"password":"CHANGE_ME"}'
+hcloud CSMS CreateSecret --name=prod-db-password --secret_string='{"password":"CHANGE_ME"}'
 ## List Secrets (metadata only)
@@ -10,7 +10,7 @@ hcloud CSMS ListSecrets
 ## Describe Secret
-hcloud CSMS DescribeSecret --secret_name=prod-db-password
+hcloud CSMS ShowSecret --secret_name=prod-db-password
 ## List Versions
@@ -25,12 +25,13 @@ Use: data.huaweicloud_csms_secret.db.secret_string
 ## Rotation
-- Enable auto-rotation: hcloud CSMS EnableSecretRotation --secret_name=<name> --rotation_interval=30
-- Rotation function ARN: provide Lambda to generate new secret value
+- Enable auto-rotation: `hcloud CSMS UpdateSecret --secret_name=<name> --auto_rotation=true --rotation_period=<days> --rotation_func_urn=<fn>` (or set at CreateSecret time)
+- Trigger rotation now: `hcloud CSMS RotateSecret --secret_name=<name>`
+- Rotation function ARN: provide a FunctionGraph rotation function to generate new secret values
 ## Policy Rules
-- hcloud CSMS DownloadSecret -> BLOCKED (use runtime injection)
+- hcloud CSMS DownloadSecretBlob -> BLOCKED (use runtime injection)
 - hcloud CSMS ShowSecretVersion -> BLOCKED
 - hcloud CSMS ListSecrets -> ALLOWED (metadata only)
-- hcloud CSMS DescribeSecret -> ALLOWED (metadata only)
+- hcloud CSMS ShowSecret -> ALLOWED (metadata only)

package/plugins/huaweicloud-core/skills/huawei-dew/references/kms-usage.md CHANGED Viewed

@@ -24,6 +24,6 @@ Use SDK with KMS client in application runtime.
 ## Key Deletion
-- Schedule: hcloud KMS ScheduleKeyDeletion --key_id=<key-id> --pending_days=7
+- Schedule: hcloud KMS DeleteKey --key_id=<key-id> --pending_days=7
 - Cancel during pending window: hcloud KMS CancelKeyDeletion --key_id=<key-id>
 - WARNING: After deletion window passes, data encrypted with this key is UNRECOVERABLE

package/plugins/huaweicloud-core/skills/huawei-ecs/SKILL.md CHANGED Viewed

@@ -59,7 +59,7 @@ Flavor families are **region-dependent**. Always run `hcloud ECS ListFlavors --c
 | Find by name        | See "How to search for instances" below                                                                                                                  |                                                                                          |
 | Bind EIP            | hcloud EIP AssociatePublicips --publicip_id=<id> --publicip.associate_instance_id=<port-id> --publicip.associate_instance_type=PORT                      | Get port ID from `hcloud ECS ListServersDetails --server_id=<id>` → `OS-EXT-IPS:port_id` |
 | Security group rule | hcloud VPC CreateSecurityGroupRule --security_group_id=<id> --direction=<direction> --protocol=<protocol>                                                | references/sg.md                                                                         |
-| Attach disk         | hcloud EVS AttachVolume --volume_id=<id> --server_id=<id>                                                                                                | references/evs.md                                                                        |
+| Attach disk         | hcloud ECS AttachServerVolume --server_id=<id> --volumeAttachment.volumeId=<id>                                                                          | references/evs.md                                                                        |
 | Delete instance     | hcloud ECS DeleteServers --servers.1.id=<id> --delete_publicip=true --delete_volume=true                                                                 | references/create-instance.md                                                            |
 | Reboot instance     | hcloud ECS BatchRebootServers --reboot.servers.1.id=<id> --reboot.type=SOFT                                                                              | NOT `RebootServer` — that operation does not exist                                       |
 | HC活动部署          | 按量付费购买ECS+Nginx部署后端服务                                                                                                                        | references/hc-activity.md                                                                |

package/plugins/huaweicloud-core/skills/huawei-ecs/references/evs.md CHANGED Viewed

@@ -18,9 +18,11 @@ hcloud EVS CreateVolume \
 ## Attach to ECS
 ```bash
-hcloud EVS AttachVolume --volume_id=<vol-id> --server_id=<ecs-id>
+hcloud ECS AttachServerVolume --server_id=<ecs-id> --volumeAttachment.volumeId=<vol-id>
 ```
+> The attach operation lives under `ECS` (not `EVS`), and the volume id uses the nested `--volumeAttachment.volumeId` parameter.
 ## List / Delete
 ```bash

package/plugins/huaweicloud-core/skills/huawei-ecs/references/troubleshooting.md CHANGED Viewed

@@ -4,16 +4,16 @@
 ## 错误码映射
-| 错误                                    | 根因                            | 修复                                                                                                     |
-| --------------------------------------- | ------------------------------- | -------------------------------------------------------------------------------------------------------- |
-| `Ecs.0005` flavor-image 不匹配          | 镜像虚拟化类型与规格不兼容      | 检查 image `__support_amd`/`__support_xen` 与 flavor `os_extra_specs`。BareMetal 镜像不兼容标准 ECS 规格 |
-| `[USE_ERROR]不正确的参数:imagetype`     | 参数名错误                      | KooCLI 使用双下划线前缀：`--__imagetype=gold`（不是 `--imagetype`）                                      |
-| `[USE_ERROR]不正确的参数:chargingMode`  | 参数路径错误                    | 计费模式参数路径：`--server.extendparam.chargingMode=postPaid`。不传默认按需付费                         |
-| `[USE_ERROR]不正确的参数:__support_amd` | 参数无效                        | `IMS ListImages` 某些版本不支持此过滤。去掉该参数，使用 client-side 过滤                                 |
-| Cannot SSH                              | 安全组未开放22端口 或 未绑定EIP | 1) 添加入方向规则 tcp 22。2) `hcloud EIP BindPublicIp`                                                   |
-| Flavor unavailable                      | 区域不支持该规格                | `hcloud ECS ListFlavors --cli-region=<r>` 先查。不硬编码 s6/m6 等规格名                                  |
-| Insufficient resources                  | AZ 库存不足                     | 换规格、换 AZ、或等待资源释放                                                                            |
-| AuthFailure                             | AK/SK 过期或无效                | `npx huaweicloud-devkit auth init` 重新配置统一凭据                                                      |
+| 错误                                    | 根因                            | 修复                                                                                                                                                               |
+| --------------------------------------- | ------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
+| `Ecs.0005` flavor-image 不匹配          | 镜像虚拟化类型与规格不兼容      | 检查 image `__support_amd`/`__support_xen` 与 flavor `os_extra_specs`。BareMetal 镜像不兼容标准 ECS 规格                                                           |
+| `[USE_ERROR]不正确的参数:imagetype`     | 参数名错误                      | KooCLI 使用双下划线前缀：`--__imagetype=gold`（不是 `--imagetype`）                                                                                                |
+| `[USE_ERROR]不正确的参数:chargingMode`  | 参数路径错误                    | 计费模式参数路径：`--server.extendparam.chargingMode=postPaid`。不传默认按需付费                                                                                   |
+| `[USE_ERROR]不正确的参数:__support_amd` | 参数无效                        | `IMS ListImages` 某些版本不支持此过滤。去掉该参数，使用 client-side 过滤                                                                                           |
+| Cannot SSH                              | 安全组未开放22端口 或 未绑定EIP | 1) 添加入方向规则 tcp 22。2) `hcloud EIP AssociatePublicips --publicip_id=<id> --publicip.associate_instance_id=<port-id> --publicip.associate_instance_type=PORT` |
+| Flavor unavailable                      | 区域不支持该规格                | `hcloud ECS ListFlavors --cli-region=<r>` 先查。不硬编码 s6/m6 等规格名                                                                                            |
+| Insufficient resources                  | AZ 库存不足                     | 换规格、换 AZ、或等待资源释放                                                                                                                                      |
+| AuthFailure                             | AK/SK 过期或无效                | `npx huaweicloud-devkit auth init` 重新配置统一凭据                                                                                                                |
 ## 创建失败诊断流程

package/plugins/huaweicloud-core/skills/huawei-functiongraph/references/create-function.md CHANGED Viewed

@@ -62,9 +62,9 @@ To access VPC-internal resources from FunctionGraph:
 ```bash
 # 1. Create agency (see huawei-iam skill)
-hcloud IAM CreateAgency --agency_name=<name> --trust_domain_name=functiongraph
+hcloud IAM CreateAgency --agency.name=<name> --agency.trust_domain_name=functiongraph --agency.domain_id=<id>
 # 2. Grant role (e.g., VPC Administrator)
-hcloud IAM GrantRoleToAgency --agency_name=<name> --role_id=<role-id>
+hcloud IAM AssociateAgencyWithDomainPermission --agency_id=<id> --domain_id=<id> --role_id=<role-id>
 # 3. Use in CreateFunction
 hcloud FunctionGraph CreateFunction --func_vpc.vpc_id=<vpc> --func_vpc.subnet_id=<subnet> --app_xrole=<name> ...
 ```

package/plugins/huaweicloud-core/skills/huawei-functiongraph/references/deploy-workflow.md CHANGED Viewed

@@ -88,7 +88,7 @@ hcloud FunctionGraph CreateFunctionTrigger \
   --trigger_status=ACTIVE \
   --event_data.name=test-timer \
   --event_data.schedule_type=Rate \
-  --event_data.schedule="5m"
+  --event_data.schedule="1m"
 ```
 ## DEDICATEDGATEWAY Pre-Flight Checklist

package/plugins/huaweicloud-core/skills/huawei-getting-started/SKILL.md CHANGED Viewed

@@ -10,11 +10,15 @@ version: 1
 ## KooCLI Installation
-| OS                   | Command                                                                                                               |
-| -------------------- | --------------------------------------------------------------------------------------------------------------------- |
-| Windows (PowerShell) | See https://support.huaweicloud.com/qs-hcli/hcli_02_003.html for MSI download                                         |
-| Linux                | curl -LO "https://hwcloudcli.obs.cn-north-1.myhuaweicloud.com/cli/latest/hcloud_install.sh" && bash hcloud_install.sh |
-| macOS                | curl -LO "https://hwcloudcli.obs.cn-north-1.myhuaweicloud.com/cli/latest/hcloud_install.sh" && bash hcloud_install.sh |
+This plugin is paired with **KooCLI v7.2.12**. Install the pinned version:
+| OS                   | Command                                                                                                                                                                 |
+| -------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| Windows (PowerShell) | See https://support.huaweicloud.com/qs-hcli/hcli_02_003.html for MSI download                                                                                           |
+| Linux                | curl -LO "https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/7.2.12/huaweicloud-cli-linux-amd64.tar.gz" && tar -zxvf huaweicloud-cli-linux-amd64.tar.gz |
+| macOS                | curl -LO "https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/7.2.12/huaweicloud-cli-mac-amd64.tar.gz" && tar -zxvf huaweicloud-cli-mac-amd64.tar.gz     |
+> See `huaweicloud-cli-and-auth` skill for arm64 variants and the one-liner (latest) option.
 ## First-Time Setup
@@ -24,20 +28,22 @@ version: 1
 4. **Verify**: `hcloud configure list` to confirm profile, then `hcloud ECS ListServersDetails --cli-region=cn-north-4`
 5. For detailed auth guidance, see `huaweicloud-cli-and-auth` skill
-> **Security**: Never pass AK/SK as command-line arguments (`--ak=...`). Always use `npx huaweicloud-devkit auth init` (unified, interactive, recommended) or `hcloud configure init` (KooCLI only) to avoid secrets in shell history.
+> **Security**: Never pass AK/SK as command-line arguments (`--ak=...`). Always use `npx huaweicloud-devkit auth init` (unified, interactive) or `hcloud configure init` (KooCLI only) to avoid secrets in shell history.
 ### Non-Interactive Setup (Agent/CI Environments)
-When the interactive TUI is unavailable (Agent tools, CI/CD), use `hcloud configure set` — this must be run outside agent chat by the user:
+When the interactive TUI is unavailable (Agent tools, CI/CD), configure credentials outside agent chat using the unified entry point:
 ```bash
 # User executes in their terminal (NOT in agent chat):
-hcloud configure set --cli-access-key=<AK> --cli-secret-key=<SK> --cli-region=<region>
+npx huaweicloud-devkit auth init
-# Agent verifies:
+# Agent verifies through redacted tooling only:
 hcloud configure list
 ```
+> Do **not** instruct the user to run `hcloud configure set --cli-access-key=... --cli-secret-key=...` — AK/SK would enter shell history. Use `npx huaweicloud-devkit auth init` instead.
 ## Critical Warnings
 | Trap                                   | Why                                                                                           |

package/plugins/huaweicloud-core/skills/huawei-iac/SKILL.md CHANGED Viewed

@@ -34,7 +34,7 @@ Always run `hcloud <Service> <Operation> --help` before constructing commands to
 ## Provisioning Rules (Stage 6)
 1. Generate `deployment_id` (`d-xxx`), initialize the session state file (path and schema: `references/state-file.md`).
-2. **Batch approval: show the RESOURCE LIST (name / type / purpose), never the raw commands.** After the user approves, execute each resource via `huaweicloud_run_approved_command`. Never execute anything outside the approved list.
+2. **Batch approval: show the RESOURCE LIST (name / type / purpose), never the raw commands.** Present the numbered manifest BEFORE any `huaweicloud_plan_cli_command` call and get ONE explicit list-level approval. After the user approves the manifest, execute each resource via `huaweicloud_plan_cli_command` → `huaweicloud_run_approved_command` without re-asking list-level consent (per-command approval tokens are still required by the tool gate). Never execute anything outside the approved list.
 3. Create in dependency-topological order (network → compute/db → bindings). After each success, extract the resource ID and write it to state immediately.
 4. Any failure: stop immediately, mark state `partial`, report the error, offer destroy of already-created resources. No automatic rollback.

package/plugins/huaweicloud-core/skills/huawei-iac/references/resource-catalog.md CHANGED Viewed

@@ -22,7 +22,7 @@ Every resource type the orchestration flow can purchase, bind, and destroy. This
 | Resource      | Create                                                                                                                                                                                                                                                                                                                                                                               | Delete                                                                                     | Skill      | Depends on                                                                 |
 | ------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------ | ---------- | -------------------------------------------------------------------------- |
 | ECS instance  | `hcloud ECS CreateServers --server.name=<n> --server.flavorRef=<id> --server.imageRef=<id> --server.vpcid=<id> --server.nics.1.subnet_id=<id> --server.security_groups.1.id=<id> --server.availability_zone=<az> --server.root_volume.volumetype=<type>` (hidden required: `vpcid` + `root_volume.volumetype`; check flavor family vs image arch, e.g. kc1 = ARM needs an ARM image) | `hcloud ECS DeleteServers --servers.1.id=<id> --delete_publicip=true --delete_volume=true` | huawei-ecs | VPC + Subnet + SG. Set both delete flags true on teardown or EIP/disk leak |
-| EVS data disk | `hcloud EVS CreateVolume`                                                                                                                                                                                                                                                                                                                                                            | `hcloud EVS DeleteVolume`                                                                  | huawei-ecs | - (attach with `hcloud EVS AttachVolume`)                                  |
+| EVS data disk | `hcloud EVS CreateVolume`                                                                                                                                                                                                                                                                                                                                                            | `hcloud EVS DeleteVolume`                                                                  | huawei-ecs | - (attach with `hcloud ECS AttachServerVolume`)                            |
 ## Databases

package/plugins/huaweicloud-core/skills/huawei-iam/references/quick-ref.md CHANGED Viewed

@@ -15,9 +15,9 @@ hcloud IAM KeystoneShowUser                      # show user detail
 ## Credential Management
 ```bash
-hcloud IAM KeystoneListAccessKeys --user_id=<id> # list AK/SK for user
-hcloud IAM CreateLoginToken                      # create login token
-hcloud IAM GetAccountSummary                     # account summary
+hcloud IAM ListAccessKeysV5 --user_id=<id> # list AK/SK for user
+hcloud IAM CreateLoginToken                # create login token
+hcloud IAM GetAccountSummaryV5             # account summary
 ```
 ## Security Best Practices

package/plugins/huaweicloud-core/skills/huawei-obs/SKILL.md CHANGED Viewed

@@ -62,21 +62,21 @@ hcloud OBS config -e=<endpoint> -i=<AK> -k=<SK> -t=token
 ## Common Workflows
-| Task                         | Command                                                                |
-| ---------------------------- | ---------------------------------------------------------------------- |
-| Create bucket                | `hcloud OBS mb obs://<bucket> -location=<region>`                      |
-| List buckets/objects         | `hcloud OBS ls [obs://<bucket>]`                                       |
-| Upload file                  | `hcloud OBS cp <file> obs://<bucket>/<key>`                            |
-| Upload directory (recursive) | `hcloud OBS cp <dir>/ obs://<bucket>/ -r -f -flat`                     |
-| Download object              | `hcloud OBS cp obs://<bucket>/<key> <local-path>`                      |
-| Set bucket ACL               | `hcloud OBS chattri obs://<bucket> -acl=public-read`                   |
-| Set object ACL               | `hcloud OBS chattri obs://<bucket>/<key> -acl=public-read`             | Bucket ACL does NOT cascade — anonymous reads need both |
-| Set lifecycle                | `hcloud OBS lifecycle obs://<bucket> -method=put -localfile=<json>`    |
-| Set bucket policy            | `hcloud OBS bucketpolicy obs://<bucket> -method=put -localfile=<json>` |
-| Set CORS                     | `hcloud OBS cors obs://<bucket> -method=put -localfile=<json>`         |
-| Delete bucket                | `hcloud OBS rm obs://<bucket> -r` (must be empty)                      |
-| Presigned URL                | `hcloud OBS sign obs://<bucket>/<key> -e=<seconds>`                    |
-| Object metadata              | `hcloud OBS stat obs://<bucket>/<key>`                                 |
+| Task                         | Command                                                                   |
+| ---------------------------- | ------------------------------------------------------------------------- |
+| Create bucket                | `hcloud OBS mb obs://<bucket> -location=<region>`                         |
+| List buckets/objects         | `hcloud OBS ls [obs://<bucket>]`                                          |
+| Upload file                  | `hcloud OBS cp <file> obs://<bucket>/<key>`                               |
+| Upload directory (recursive) | `hcloud OBS cp <dir>/ obs://<bucket>/ -r -f -flat`                        |
+| Download object              | `hcloud OBS cp obs://<bucket>/<key> <local-path>`                         |
+| Set bucket ACL               | `hcloud OBS chattri obs://<bucket> -acl=public-read`                      |
+| Set object ACL               | `hcloud OBS chattri obs://<bucket>/<key> -acl=public-read`                | Bucket ACL does NOT cascade — anonymous reads need both |
+| Set lifecycle                | `hcloud OBS lifecycle obs://<bucket> -method=put -localfile=<json>`       |
+| Set bucket policy            | `hcloud OBS bucketpolicy obs://<bucket> -method=put -localfile=<json>`    |
+| Set CORS                     | Not available via `hcloud OBS` — use API/SDK (`SetBucketCors`) or console |
+| Delete bucket                | `hcloud OBS rm obs://<bucket> -r` (must be empty)                         |
+| Presigned URL                | `hcloud OBS sign obs://<bucket>/<key> -e=<seconds>`                       |
+| Object metadata              | `hcloud OBS stat obs://<bucket>/<key>`                                    |
 ## Static Website Deployment Workflow