huaweicloud-devkit 1.1.2-next.1 → 1.1.2-next.3

package/plugins/huaweicloud-core/skills/huawei-vpc/references/network.md

@@ -54,7 +54,7 @@ hcloud EIP AssociatePublicips --publicip_id=<id> \
   --publicip.associate_instance_id=<port-id> --publicip.associate_instance_type=PORT
 
 # Unbind
-hcloud EIP DisassociatePublicip --publicip_id=<id>
+hcloud EIP DisassociatePublicips --publicip_id=<id>
 
 # List
 hcloud EIP ListPublicips

package/plugins/huaweicloud-core/skills/huaweicloud-cli-and-auth/SKILL.md

@@ -13,56 +13,58 @@ Use KooCLI `hcloud` for local inspection and reviewed operations. Never ask the
 
 Official guide: `https://support.huaweicloud.com/qs-hcli/hcli_02_003.html`.
 
+> **Version pairing**: this plugin is paired with **KooCLI v7.2.12** (`kooCliVersion` in `package.json`). Prefer the pinned download below. The one-liner script `hcloud_install.sh` always installs the `latest` version and cannot be pinned — if you use it, `check_cli`/`doctor` will warn when the installed version does not match v7.2.12.
+
 ### Windows
 
-1. Download and unzip: `https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest/huaweicloud-cli-windows-amd64.zip`
+1. Download and unzip: `https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/7.2.12/huaweicloud-cli-windows-amd64.zip`
 2. Extract to `%USERPROFILE%\hcloud`, add to user `PATH`
 3. Verify: `hcloud version`
 
 ### Linux (amd64 / arm64)
 
-One-liner (recommended):
-
-```bash
-curl -sSL https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest/hcloud_install.sh -o ./hcloud_install.sh && bash ./hcloud_install.sh -y
-```
-
-Or manual download:
+Fixed download (recommended):
 
 ```bash
 # amd64
-curl -LO "https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest/huaweicloud-cli-linux-amd64.tar.gz"
+curl -LO "https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/7.2.12/huaweicloud-cli-linux-amd64.tar.gz"
 tar -zxvf huaweicloud-cli-linux-amd64.tar.gz
 # arm64
-curl -LO "https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest/huaweicloud-cli-linux-arm64.tar.gz"
+curl -LO "https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/7.2.12/huaweicloud-cli-linux-arm64.tar.gz"
 tar -zxvf huaweicloud-cli-linux-arm64.tar.gz
 ```
 
 Move to PATH: `mv $(pwd)/hcloud ~/.local/bin/`
 Verify: `hcloud version`
 
-### macOS (amd64 / arm64)
-
-One-liner (recommended):
+One-liner (installs `latest`, may drift from v7.2.12):
 
 ```bash
 curl -sSL https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest/hcloud_install.sh -o ./hcloud_install.sh && bash ./hcloud_install.sh -y
 ```
 
-Or manual download:
+### macOS (amd64 / arm64)
+
+Fixed download (recommended):
 
 ```bash
 # amd64
-curl -LO "https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest/huaweicloud-cli-mac-amd64.tar.gz"
+curl -LO "https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/7.2.12/huaweicloud-cli-mac-amd64.tar.gz"
 tar -zxvf huaweicloud-cli-mac-amd64.tar.gz
 # arm64 (Apple Silicon)
-curl -LO "https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest/huaweicloud-cli-mac-arm64.tar.gz"
+curl -LO "https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/7.2.12/huaweicloud-cli-mac-arm64.tar.gz"
 tar -zxvf huaweicloud-cli-mac-arm64.tar.gz
 ```
 
 Move to PATH: `mv $(pwd)/hcloud /usr/local/bin/`
 Verify: `hcloud version`
 
+One-liner (installs `latest`, may drift from v7.2.12):
+
+```bash
+curl -sSL https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest/hcloud_install.sh -o ./hcloud_install.sh && bash ./hcloud_install.sh -y
+```
+
 Agent processes find executables through `PATH`. If OpenCode/Codex cannot find `hcloud`, restart after updating `PATH`, or set `HCLOUD_BIN`.
 
 ## Configure Credentials Outside Chat

package/plugins/huaweicloud-core/src/hcloud-cli.mjs

@@ -131,11 +131,22 @@ function applyPreflightFindings(classification, sgFindings) {
   return classification;
 }
 
+const OBS_WRITE_SUBCOMMANDS = new Set(['mb', 'cp', 'mv', 'rm', 'chattri', 'restore']);
+
+function obsWriteHint(args) {
+  if (!Array.isArray(args) || args.length < 2) return null;
+  if (String(args[0]).toUpperCase() !== 'OBS') return null;
+  if (!OBS_WRITE_SUBCOMMANDS.has(String(args[1]).toLowerCase())) return null;
+  return 'OBS write operations are obsutil-style and always write-class. Before executing, present the full resource manifest (bucket/object list) to the user for ONE batch approval, then run each command through plan → approve (see huawei-iac skill, Provisioning Rules).';
+}
+
 export function planHcloudCommand(args, options = {}) {
   const normalizedArgs = Array.isArray(args) ? args.map(String) : [];
   const classification = classifyHcloudArgs(normalizedArgs, options);
   const command = ['hcloud', ...normalizedArgs].map((arg) => quoteShellArg(arg)).join(' ');
   const warnings = planningWarnings(normalizedArgs);
+  const obsHint = obsWriteHint(normalizedArgs);
+  if (obsHint) warnings.push(obsHint);
   const sgFindings = preflightSecurityGroupCheck(normalizedArgs);
   if (sgFindings.length > 0) {
     for (const f of sgFindings) warnings.push(f);

package/plugins/huaweicloud-core/src/koocli-version.mjs

@@ -0,0 +1,47 @@
+import { readFileSync } from 'node:fs';
+import { resolve, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const PACKAGE_JSON = resolve(__dirname, '..', '..', '..', 'package.json');
+
+export const KOO_CLI_BASE = 'https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli';
+
+const VERSION_RE = /\d+\.\d+\.\d+(?:[-+][0-9A-Za-z.-]+)?/;
+
+export function getKooCliVersion() {
+  try {
+    const pkg = JSON.parse(readFileSync(PACKAGE_JSON, 'utf8'));
+    return pkg.kooCliVersion || null;
+  } catch {
+    return null;
+  }
+}
+
+export function parseHcloudVersion(out) {
+  if (!out) return null;
+  const match = String(out).match(VERSION_RE);
+  return match ? match[0] : null;
+}
+
+export function compareVersion(a, b) {
+  const pa = String(a || '')
+    .split(/[-+]/)[0]
+    .split('.')
+    .map((n) => Number.parseInt(n, 10) || 0);
+  const pb = String(b || '')
+    .split(/[-+]/)[0]
+    .split('.')
+    .map((n) => Number.parseInt(n, 10) || 0);
+  for (let i = 0; i < Math.max(pa.length, pb.length); i += 1) {
+    const va = pa[i] || 0;
+    const vb = pb[i] || 0;
+    if (va > vb) return 1;
+    if (va < vb) return -1;
+  }
+  return 0;
+}
+
+export function kooCliDownloadBase() {
+  return `${KOO_CLI_BASE}/${getKooCliVersion() || 'latest'}`;
+}

package/plugins/huaweicloud-core/src/mcp-protocol.mjs

@@ -0,0 +1,88 @@
+import { readFileSync } from 'node:fs';
+import { resolve, dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+import { TOOL_DEFINITIONS, callTool } from './tools.mjs';
+import { peekCachedUpdateInfo, applyUpdateHint } from './update-check.mjs';
+import { initTelemetry } from './telemetry/telemetry.mjs';
+import { detectAgent } from './telemetry/agent-detect.mjs';
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const pluginRoot = resolve(__dirname, '..');
+const packageRoot = resolve(pluginRoot, '..', '..');
+let pkgVersion = '0.0.0';
+for (const base of [pluginRoot, packageRoot]) {
+  try {
+    const version = JSON.parse(readFileSync(join(base, 'package.json'), 'utf8')).version;
+    if (version) {
+      pkgVersion = version;
+      break;
+    }
+  } catch {}
+}
+
+// 会话内首个非 check/upgrade 工具调用附加 _updateInfo，只消费一次。
+let hintConsumed = false;
+function decorateResult(name, result) {
+  if (hintConsumed) return result;
+  try {
+    const hint = peekCachedUpdateInfo();
+    if (!hint) return result;
+    const decorated = applyUpdateHint(result, name, hint);
+    if (decorated !== result) hintConsumed = true;
+    return decorated;
+  } catch {
+    return result; // 兜底装饰失败绝不影响工具调用
+  }
+}
+
+export async function dispatch(method, params) {
+  if (method === 'initialize') {
+    const ci = params.clientInfo || {};
+
+    try {
+      const { hdkitGenerateUserHash } = await import('./sandbox/hdkitservice-api.mjs');
+      await Promise.race([
+        hdkitGenerateUserHash(),
+        new Promise((_, reject) => setTimeout(() => reject(new Error('timeout')), 3000)),
+      ]);
+    } catch {}
+
+    const agent = detectAgent(ci);
+    initTelemetry({ harness: agent.harness, version: agent.version });
+    return {
+      protocolVersion: params.protocolVersion || '2024-11-05',
+      capabilities: {
+        tools: {},
+      },
+      serverInfo: {
+        name: 'huaweicloud-devkit',
+        version: pkgVersion,
+      },
+    };
+  }
+
+  if (method === 'tools/list') {
+    return { tools: TOOL_DEFINITIONS };
+  }
+
+  if (method === 'tools/call') {
+    const result = await callTool(params.name, params.arguments || {});
+    const decorated = decorateResult(params.name, result);
+    return {
+      content: [
+        {
+          type: 'text',
+          text: JSON.stringify(decorated, null, 2),
+        },
+      ],
+      isError: false,
+    };
+  }
+
+  if (method === 'resources/list') {
+    return { resources: [] };
+  }
+
+  throw new Error(`Unsupported method: ${method}`);
+}

package/plugins/huaweicloud-core/src/mcp-server-remote.mjs

@@ -0,0 +1,107 @@
+import { createServer } from 'node:http';
+import { resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { format } from 'node:util';
+
+import { dispatch } from './mcp-protocol.mjs';
+
+export const DEFAULT_PORT = 9528;
+export const DEFAULT_HOST = '127.0.0.1';
+
+export async function startRemoteServer({ port = DEFAULT_PORT, host = DEFAULT_HOST } = {}) {
+  const server = createServer(async (req, res) => {
+    res.setHeader('Access-Control-Allow-Origin', '*');
+    res.setHeader('Access-Control-Allow-Methods', 'GET, POST, OPTIONS');
+    res.setHeader(
+      'Access-Control-Allow-Headers',
+      'Content-Type, MCP-Protocol-Version, Mcp-Session-Id, Accept, Authorization',
+    );
+    res.setHeader('Access-Control-Expose-Headers', 'MCP-Protocol-Version, Mcp-Session-Id');
+
+    if (req.method === 'OPTIONS') {
+      res.writeHead(204);
+      res.end();
+      return;
+    }
+
+    if (req.method !== 'POST') {
+      res.writeHead(405, { Allow: 'POST, OPTIONS' });
+      res.end();
+      return;
+    }
+
+    let message;
+    try {
+      const chunks = [];
+      for await (const chunk of req) chunks.push(chunk);
+      message = JSON.parse(Buffer.concat(chunks).toString('utf8'));
+    } catch {
+      res.writeHead(400, { 'Content-Type': 'application/json' });
+      res.end(JSON.stringify({ jsonrpc: '2.0', id: null, error: { code: -32700, message: 'Parse error' } }));
+      return;
+    }
+
+    if (!Object.hasOwn(message, 'id')) {
+      // 通知类消息（含 notifications/initialized）无需响应体，HTTP 层直接 202。
+      res.writeHead(202);
+      res.end();
+      return;
+    }
+
+    let response;
+    try {
+      const result = await dispatch(message.method, message.params || {});
+      response = { jsonrpc: '2.0', id: message.id, result };
+      if (message.method === 'initialize') {
+        res.setHeader('MCP-Protocol-Version', result.protocolVersion || '2024-11-05');
+      }
+    } catch (error) {
+      response = {
+        jsonrpc: '2.0',
+        id: message.id,
+        error: { code: -32603, message: error.message },
+      };
+    }
+
+    writeMCPResponse(res, response, req.headers.accept || '');
+  });
+
+  await new Promise((resolvePromise, rejectPromise) => {
+    server.once('error', rejectPromise);
+    server.listen(port, host, () => resolvePromise());
+  });
+
+  const address = server.address();
+  process.stdout.write(format('huaweicloud-devkit MCP server (remote) listening on %s:%s\n', host, address.port));
+
+  return {
+    server,
+    port: address.port,
+    close: () => new Promise((resolvePromise) => server.close(resolvePromise)),
+  };
+}
+
+function writeMCPResponse(res, response, accept) {
+  const json = JSON.stringify(response);
+  if (accept.includes('application/json')) {
+    res.writeHead(200, { 'Content-Type': 'application/json' });
+    res.end(json);
+    return;
+  }
+  // 客户端只接受 SSE 时的兜底：单帧 event 后关闭流。
+  res.writeHead(200, { 'Content-Type': 'text/event-stream', 'Cache-Control': 'no-cache' });
+  res.write(`event: message\ndata: ${json}\n\n`);
+  res.end();
+}
+
+if (process.argv[1] && fileURLToPath(import.meta.url) === resolve(process.argv[1])) {
+  const portIdx = process.argv.indexOf('--port');
+  const port = portIdx > -1 ? Number(process.argv[portIdx + 1]) : DEFAULT_PORT;
+  const hostIdx = process.argv.indexOf('--host');
+  const host = hostIdx > -1 && process.argv[hostIdx + 1] ? process.argv[hostIdx + 1] : DEFAULT_HOST;
+  startRemoteServer({ port, host }).catch((error) => {
+    process.stderr.write(`Failed to start MCP remote server: ${error.message}\n`);
+    // eslint-disable-next-line n/no-process-exit -- fatal startup error in standalone CLI mode
+    process.exit(1);
+  });
+}