npm - huaweicloud-devkit - Versions diffs - 1.1.2-next.2 → 1.1.2-next.3 - Mend

huaweicloud-devkit 1.1.2-next.2 → 1.1.2-next.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (28) hide show

package/integrations/hermes/skills-snapshot.json ADDED Viewed

@@ -0,0 +1,175 @@
+{
+  "hermes_version": "0.1.0",
+  "exported_at": "2026-09-07T00:00:00Z",
+  "skills": [
+    {
+      "name": "huawei-apig",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-apig",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-billing",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-billing",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-cbr",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-cbr",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-cce",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-cce",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-cloud-eye",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-cloud-eye",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-cloud-find-skills",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-cloud-find-skills",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-cts",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-cts",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-dds-dcs",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-dds-dcs",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-deployment",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-deployment",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-dew",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-dew",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-ecs",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-ecs",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-functiongraph",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-functiongraph",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-gaussdb",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-gaussdb",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-getting-started",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-getting-started",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-iam",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-iam",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-modelarts",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-modelarts",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-obs",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-obs",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-rds",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-rds",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-sandbox",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-sandbox",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-smn-dms",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-smn-dms",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-vpc",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-vpc",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-waf-aad",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-waf-aad",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huaweicloud-api-and-sdk",
+      "source": "official",
+      "identifier": "official/huaweicloud/huaweicloud-api-and-sdk",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huaweicloud-capability-discovery",
+      "source": "official",
+      "identifier": "official/huaweicloud/huaweicloud-capability-discovery",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huaweicloud-cli-and-auth",
+      "source": "official",
+      "identifier": "official/huaweicloud/huaweicloud-cli-and-auth",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huaweicloud-core",
+      "source": "official",
+      "identifier": "official/huaweicloud/huaweicloud-core",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huaweicloud-safety",
+      "source": "official",
+      "identifier": "official/huaweicloud/huaweicloud-safety",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huaweicloud-troubleshooting",
+      "source": "official",
+      "identifier": "official/huaweicloud/huaweicloud-troubleshooting",
+      "category": "huaweicloud"
+    }
+  ],
+  "taps": []
+}

package/package.json CHANGED Viewed

@@ -1,6 +1,8 @@
 {
   "name": "huaweicloud-devkit",
-  "version": "1.1.2-next.2",
+  "mcpName": "io.github.huaweicloud/huaweicloud-devkit",
+  "version": "1.1.2-next.3",
+  "kooCliVersion": "7.2.12",
   "description": "Agent toolkit that helps coding agents use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities safely and accurately.",
   "type": "module",
   "files": [

package/plugins/huaweicloud-core/.claude-plugin/plugin.json CHANGED Viewed

@@ -17,7 +17,7 @@
   "mcpServers": "./.mcp.json",
   "description": "Guide coding agents to use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities with safer execution and less context.",
   "skills": "./skills/",
-  "version": "1.1.2-next.2",
+  "version": "1.1.2-next.3",
   "author": {
     "name": "HuaweiCloud Mate",
     "url": "https://github.com/huaweicloud"

package/plugins/huaweicloud-core/.codex-plugin/plugin.json CHANGED Viewed

@@ -20,7 +20,7 @@
   "mcpServers": "./.mcp.json",
   "description": "Agent toolkit that helps coding agents use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities safely and accurately.",
   "skills": "./skills/",
-  "version": "1.1.2-next.2",
+  "version": "1.1.2-next.3",
   "author": {
     "name": "HuaweiCloud Mate",
     "url": "https://github.com/huaweicloud"

package/plugins/huaweicloud-core/.cursor-plugin/plugin.json CHANGED Viewed

@@ -17,7 +17,7 @@
   "mcpServers": "./.mcp.json",
   "description": "Guide coding agents to use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities with safer execution and less context.",
   "skills": "./skills/",
-  "version": "1.1.2-next.2",
+  "version": "1.1.2-next.3",
   "author": {
     "name": "HuaweiCloud Mate",
     "url": "https://github.com/huaweicloud"

package/plugins/huaweicloud-core/.hermes-plugin/plugin.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "huaweicloud-devkit",
-  "version": "1.1.2-next.2",
+  "version": "1.1.2-next.3",
   "description": "Guide coding agents to use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities with safer execution and less context.",
   "author": {
     "name": "HuaweiCloud Mate",

package/plugins/huaweicloud-core/.workbuddy-plugin/plugin.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "huaweicloud-devkit",
-  "version": "1.1.2-next.2",
+  "version": "1.1.2-next.3",
   "description": "Guide coding agents to use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities with safer execution and less context.",
   "author": {
     "name": "HuaweiCloud Mate",

package/plugins/huaweicloud-core/openclaw.plugin.json CHANGED Viewed

@@ -2,7 +2,7 @@
   "name": "huaweicloud-devkit",
   "id": "huaweicloud-devkit",
   "displayName": "HuaweiCloud DevKit",
-  "version": "1.1.2-next.2",
+  "version": "1.1.2-next.3",
   "family": "bundle-plugin",
   "bundleFormat": "codex",
   "description": "Guide coding agents to use Huawei Cloud safely — KooCLI, APIs, SDKs, 28 MCP tools, skills, and safety guardrails.",

package/plugins/huaweicloud-core/skills/huawei-apig/SKILL.md CHANGED Viewed

@@ -119,7 +119,7 @@ hcloud APIG BatchPublishOrOfflineApiV2 \
 ## Throttling
 ```bash
-hcloud APIG CreateThrottlingPolicyV2 --name=<n> --api_call_limits=1000
+hcloud APIG CreateRequestThrottlingPolicyV2 --instance_id=<id> --name=<n> --api_call_limits=1000
 ```
 ## Common Workflows

package/plugins/huaweicloud-core/skills/huawei-dew/SKILL.md CHANGED Viewed

@@ -31,16 +31,15 @@ Domain expertise for Huawei Cloud Data Encryption Workshop (DEW). Covers CSMS fo
 | Operation          | Description                                            |
 | ------------------ | ------------------------------------------------------ |
 | ListSecrets        | List all secrets (names only, no values)               |
-| DescribeSecret     | Get secret metadata (rotation config, KMS key, status) |
+| ShowSecret         | Get secret metadata (rotation config, KMS key, status) |
 | ListSecretVersions | List version IDs and stages (no values)                |
 ### Secret Value (blocked by policy — use runtime injection)
-| Operation         | Safe Alternative                              |
-| ----------------- | --------------------------------------------- |
-| DownloadSecret    | Use {{resolve:csms:secret-id}} in IaC or SDK  |
-| ShowSecretVersion | Use runtime injection, never in agent context |
-| GetSecretValue    | Blocked. Use MCP proxy resolve pattern        |
+| Operation          | Safe Alternative                              |
+| ------------------ | --------------------------------------------- |
+| DownloadSecretBlob | Use {{resolve:csms:secret-id}} in IaC or SDK  |
+| ShowSecretVersion  | Use runtime injection, never in agent context |
 ## KMS Operations
@@ -80,7 +79,7 @@ hcloud CSMS DownloadSecretBlob --secret_name=<name>
 | Error                | Root Cause -> Fix                                                           |
 | -------------------- | --------------------------------------------------------------------------- |
 | Secret not found     | Wrong region or project -> Verify secret ARN includes region/project        |
-| AccessDenied on CSMS | Missing IAM CSMS policy -> Add csms:DescribeSecret + kms:Decrypt            |
+| AccessDenied on CSMS | Missing IAM CSMS policy -> Add csms:ShowSecret + kms:Decrypt                |
 | KMS key disabled     | Key scheduled for deletion or manually disabled -> Enable or create new key |
 | Rotation stuck       | Lambda/Python function error -> Check rotation function logs                |

package/plugins/huaweicloud-core/skills/huawei-dew/references/csms-usage.md CHANGED Viewed

@@ -2,7 +2,7 @@
 ## Create Secret
-hcloud CSMS CreateSecret --secret_name=prod-db-password --secret_string='{"password":"CHANGE_ME"}'
+hcloud CSMS CreateSecret --name=prod-db-password --secret_string='{"password":"CHANGE_ME"}'
 ## List Secrets (metadata only)
@@ -10,7 +10,7 @@ hcloud CSMS ListSecrets
 ## Describe Secret
-hcloud CSMS DescribeSecret --secret_name=prod-db-password
+hcloud CSMS ShowSecret --secret_name=prod-db-password
 ## List Versions
@@ -25,12 +25,13 @@ Use: data.huaweicloud_csms_secret.db.secret_string
 ## Rotation
-- Enable auto-rotation: hcloud CSMS EnableSecretRotation --secret_name=<name> --rotation_interval=30
-- Rotation function ARN: provide Lambda to generate new secret value
+- Enable auto-rotation: `hcloud CSMS UpdateSecret --secret_name=<name> --auto_rotation=true --rotation_period=<days> --rotation_func_urn=<fn>` (or set at CreateSecret time)
+- Trigger rotation now: `hcloud CSMS RotateSecret --secret_name=<name>`
+- Rotation function ARN: provide a FunctionGraph rotation function to generate new secret values
 ## Policy Rules
-- hcloud CSMS DownloadSecret -> BLOCKED (use runtime injection)
+- hcloud CSMS DownloadSecretBlob -> BLOCKED (use runtime injection)
 - hcloud CSMS ShowSecretVersion -> BLOCKED
 - hcloud CSMS ListSecrets -> ALLOWED (metadata only)
-- hcloud CSMS DescribeSecret -> ALLOWED (metadata only)
+- hcloud CSMS ShowSecret -> ALLOWED (metadata only)

package/plugins/huaweicloud-core/skills/huawei-dew/references/kms-usage.md CHANGED Viewed

@@ -24,6 +24,6 @@ Use SDK with KMS client in application runtime.
 ## Key Deletion
-- Schedule: hcloud KMS ScheduleKeyDeletion --key_id=<key-id> --pending_days=7
+- Schedule: hcloud KMS DeleteKey --key_id=<key-id> --pending_days=7
 - Cancel during pending window: hcloud KMS CancelKeyDeletion --key_id=<key-id>
 - WARNING: After deletion window passes, data encrypted with this key is UNRECOVERABLE

package/plugins/huaweicloud-core/skills/huawei-ecs/SKILL.md CHANGED Viewed

@@ -59,7 +59,7 @@ Flavor families are **region-dependent**. Always run `hcloud ECS ListFlavors --c
 | Find by name        | See "How to search for instances" below                                                                                                                  |                                                                                          |
 | Bind EIP            | hcloud EIP AssociatePublicips --publicip_id=<id> --publicip.associate_instance_id=<port-id> --publicip.associate_instance_type=PORT                      | Get port ID from `hcloud ECS ListServersDetails --server_id=<id>` → `OS-EXT-IPS:port_id` |
 | Security group rule | hcloud VPC CreateSecurityGroupRule --security_group_id=<id> --direction=<direction> --protocol=<protocol>                                                | references/sg.md                                                                         |
-| Attach disk         | hcloud EVS AttachVolume --volume_id=<id> --server_id=<id>                                                                                                | references/evs.md                                                                        |
+| Attach disk         | hcloud ECS AttachServerVolume --server_id=<id> --volumeAttachment.volumeId=<id>                                                                          | references/evs.md                                                                        |
 | Delete instance     | hcloud ECS DeleteServers --servers.1.id=<id> --delete_publicip=true --delete_volume=true                                                                 | references/create-instance.md                                                            |
 | Reboot instance     | hcloud ECS BatchRebootServers --reboot.servers.1.id=<id> --reboot.type=SOFT                                                                              | NOT `RebootServer` — that operation does not exist                                       |
 | HC活动部署          | 按量付费购买ECS+Nginx部署后端服务                                                                                                                        | references/hc-activity.md                                                                |

package/plugins/huaweicloud-core/skills/huawei-ecs/references/evs.md CHANGED Viewed

@@ -18,9 +18,11 @@ hcloud EVS CreateVolume \
 ## Attach to ECS
 ```bash
-hcloud EVS AttachVolume --volume_id=<vol-id> --server_id=<ecs-id>
+hcloud ECS AttachServerVolume --server_id=<ecs-id> --volumeAttachment.volumeId=<vol-id>
 ```
+> The attach operation lives under `ECS` (not `EVS`), and the volume id uses the nested `--volumeAttachment.volumeId` parameter.
 ## List / Delete
 ```bash

package/plugins/huaweicloud-core/skills/huawei-ecs/references/troubleshooting.md CHANGED Viewed

@@ -4,16 +4,16 @@
 ## 错误码映射
-| 错误                                    | 根因                            | 修复                                                                                                     |
-| --------------------------------------- | ------------------------------- | -------------------------------------------------------------------------------------------------------- |
-| `Ecs.0005` flavor-image 不匹配          | 镜像虚拟化类型与规格不兼容      | 检查 image `__support_amd`/`__support_xen` 与 flavor `os_extra_specs`。BareMetal 镜像不兼容标准 ECS 规格 |
-| `[USE_ERROR]不正确的参数:imagetype`     | 参数名错误                      | KooCLI 使用双下划线前缀：`--__imagetype=gold`（不是 `--imagetype`）                                      |
-| `[USE_ERROR]不正确的参数:chargingMode`  | 参数路径错误                    | 计费模式参数路径：`--server.extendparam.chargingMode=postPaid`。不传默认按需付费                         |
-| `[USE_ERROR]不正确的参数:__support_amd` | 参数无效                        | `IMS ListImages` 某些版本不支持此过滤。去掉该参数，使用 client-side 过滤                                 |
-| Cannot SSH                              | 安全组未开放22端口 或 未绑定EIP | 1) 添加入方向规则 tcp 22。2) `hcloud EIP BindPublicIp`                                                   |
-| Flavor unavailable                      | 区域不支持该规格                | `hcloud ECS ListFlavors --cli-region=<r>` 先查。不硬编码 s6/m6 等规格名                                  |
-| Insufficient resources                  | AZ 库存不足                     | 换规格、换 AZ、或等待资源释放                                                                            |
-| AuthFailure                             | AK/SK 过期或无效                | `npx huaweicloud-devkit auth init` 重新配置统一凭据                                                      |
+| 错误                                    | 根因                            | 修复                                                                                                                                                               |
+| --------------------------------------- | ------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
+| `Ecs.0005` flavor-image 不匹配          | 镜像虚拟化类型与规格不兼容      | 检查 image `__support_amd`/`__support_xen` 与 flavor `os_extra_specs`。BareMetal 镜像不兼容标准 ECS 规格                                                           |
+| `[USE_ERROR]不正确的参数:imagetype`     | 参数名错误                      | KooCLI 使用双下划线前缀：`--__imagetype=gold`（不是 `--imagetype`）                                                                                                |
+| `[USE_ERROR]不正确的参数:chargingMode`  | 参数路径错误                    | 计费模式参数路径：`--server.extendparam.chargingMode=postPaid`。不传默认按需付费                                                                                   |
+| `[USE_ERROR]不正确的参数:__support_amd` | 参数无效                        | `IMS ListImages` 某些版本不支持此过滤。去掉该参数，使用 client-side 过滤                                                                                           |
+| Cannot SSH                              | 安全组未开放22端口 或 未绑定EIP | 1) 添加入方向规则 tcp 22。2) `hcloud EIP AssociatePublicips --publicip_id=<id> --publicip.associate_instance_id=<port-id> --publicip.associate_instance_type=PORT` |
+| Flavor unavailable                      | 区域不支持该规格                | `hcloud ECS ListFlavors --cli-region=<r>` 先查。不硬编码 s6/m6 等规格名                                                                                            |
+| Insufficient resources                  | AZ 库存不足                     | 换规格、换 AZ、或等待资源释放                                                                                                                                      |
+| AuthFailure                             | AK/SK 过期或无效                | `npx huaweicloud-devkit auth init` 重新配置统一凭据                                                                                                                |
 ## 创建失败诊断流程

package/plugins/huaweicloud-core/skills/huawei-functiongraph/references/create-function.md CHANGED Viewed

@@ -62,9 +62,9 @@ To access VPC-internal resources from FunctionGraph:
 ```bash
 # 1. Create agency (see huawei-iam skill)
-hcloud IAM CreateAgency --agency_name=<name> --trust_domain_name=functiongraph
+hcloud IAM CreateAgency --agency.name=<name> --agency.trust_domain_name=functiongraph --agency.domain_id=<id>
 # 2. Grant role (e.g., VPC Administrator)
-hcloud IAM GrantRoleToAgency --agency_name=<name> --role_id=<role-id>
+hcloud IAM AssociateAgencyWithDomainPermission --agency_id=<id> --domain_id=<id> --role_id=<role-id>
 # 3. Use in CreateFunction
 hcloud FunctionGraph CreateFunction --func_vpc.vpc_id=<vpc> --func_vpc.subnet_id=<subnet> --app_xrole=<name> ...
 ```

package/plugins/huaweicloud-core/skills/huawei-functiongraph/references/deploy-workflow.md CHANGED Viewed

@@ -88,7 +88,7 @@ hcloud FunctionGraph CreateFunctionTrigger \
   --trigger_status=ACTIVE \
   --event_data.name=test-timer \
   --event_data.schedule_type=Rate \
-  --event_data.schedule="5m"
+  --event_data.schedule="1m"
 ```
 ## DEDICATEDGATEWAY Pre-Flight Checklist

package/plugins/huaweicloud-core/skills/huawei-getting-started/SKILL.md CHANGED Viewed

@@ -10,11 +10,15 @@ version: 1
 ## KooCLI Installation
-| OS                   | Command                                                                                                               |
-| -------------------- | --------------------------------------------------------------------------------------------------------------------- |
-| Windows (PowerShell) | See https://support.huaweicloud.com/qs-hcli/hcli_02_003.html for MSI download                                         |
-| Linux                | curl -LO "https://hwcloudcli.obs.cn-north-1.myhuaweicloud.com/cli/latest/hcloud_install.sh" && bash hcloud_install.sh |
-| macOS                | curl -LO "https://hwcloudcli.obs.cn-north-1.myhuaweicloud.com/cli/latest/hcloud_install.sh" && bash hcloud_install.sh |
+This plugin is paired with **KooCLI v7.2.12**. Install the pinned version:
+| OS                   | Command                                                                                                                                                                 |
+| -------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| Windows (PowerShell) | See https://support.huaweicloud.com/qs-hcli/hcli_02_003.html for MSI download                                                                                           |
+| Linux                | curl -LO "https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/7.2.12/huaweicloud-cli-linux-amd64.tar.gz" && tar -zxvf huaweicloud-cli-linux-amd64.tar.gz |
+| macOS                | curl -LO "https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/7.2.12/huaweicloud-cli-mac-amd64.tar.gz" && tar -zxvf huaweicloud-cli-mac-amd64.tar.gz     |
+> See `huaweicloud-cli-and-auth` skill for arm64 variants and the one-liner (latest) option.
 ## First-Time Setup
@@ -24,20 +28,22 @@ version: 1
 4. **Verify**: `hcloud configure list` to confirm profile, then `hcloud ECS ListServersDetails --cli-region=cn-north-4`
 5. For detailed auth guidance, see `huaweicloud-cli-and-auth` skill
-> **Security**: Never pass AK/SK as command-line arguments (`--ak=...`). Always use `npx huaweicloud-devkit auth init` (unified, interactive, recommended) or `hcloud configure init` (KooCLI only) to avoid secrets in shell history.
+> **Security**: Never pass AK/SK as command-line arguments (`--ak=...`). Always use `npx huaweicloud-devkit auth init` (unified, interactive) or `hcloud configure init` (KooCLI only) to avoid secrets in shell history.
 ### Non-Interactive Setup (Agent/CI Environments)
-When the interactive TUI is unavailable (Agent tools, CI/CD), use `hcloud configure set` — this must be run outside agent chat by the user:
+When the interactive TUI is unavailable (Agent tools, CI/CD), configure credentials outside agent chat using the unified entry point:
 ```bash
 # User executes in their terminal (NOT in agent chat):
-hcloud configure set --cli-access-key=<AK> --cli-secret-key=<SK> --cli-region=<region>
+npx huaweicloud-devkit auth init
-# Agent verifies:
+# Agent verifies through redacted tooling only:
 hcloud configure list
 ```
+> Do **not** instruct the user to run `hcloud configure set --cli-access-key=... --cli-secret-key=...` — AK/SK would enter shell history. Use `npx huaweicloud-devkit auth init` instead.
 ## Critical Warnings
 | Trap                                   | Why                                                                                           |

package/plugins/huaweicloud-core/skills/huawei-iac/SKILL.md CHANGED Viewed

@@ -34,7 +34,7 @@ Always run `hcloud <Service> <Operation> --help` before constructing commands to
 ## Provisioning Rules (Stage 6)
 1. Generate `deployment_id` (`d-xxx`), initialize the session state file (path and schema: `references/state-file.md`).
-2. **Batch approval: show the RESOURCE LIST (name / type / purpose), never the raw commands.** After the user approves, execute each resource via `huaweicloud_run_approved_command`. Never execute anything outside the approved list.
+2. **Batch approval: show the RESOURCE LIST (name / type / purpose), never the raw commands.** Present the numbered manifest BEFORE any `huaweicloud_plan_cli_command` call and get ONE explicit list-level approval. After the user approves the manifest, execute each resource via `huaweicloud_plan_cli_command` → `huaweicloud_run_approved_command` without re-asking list-level consent (per-command approval tokens are still required by the tool gate). Never execute anything outside the approved list.
 3. Create in dependency-topological order (network → compute/db → bindings). After each success, extract the resource ID and write it to state immediately.
 4. Any failure: stop immediately, mark state `partial`, report the error, offer destroy of already-created resources. No automatic rollback.

package/plugins/huaweicloud-core/skills/huawei-iac/references/resource-catalog.md CHANGED Viewed

@@ -22,7 +22,7 @@ Every resource type the orchestration flow can purchase, bind, and destroy. This
 | Resource      | Create                                                                                                                                                                                                                                                                                                                                                                               | Delete                                                                                     | Skill      | Depends on                                                                 |
 | ------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------ | ---------- | -------------------------------------------------------------------------- |
 | ECS instance  | `hcloud ECS CreateServers --server.name=<n> --server.flavorRef=<id> --server.imageRef=<id> --server.vpcid=<id> --server.nics.1.subnet_id=<id> --server.security_groups.1.id=<id> --server.availability_zone=<az> --server.root_volume.volumetype=<type>` (hidden required: `vpcid` + `root_volume.volumetype`; check flavor family vs image arch, e.g. kc1 = ARM needs an ARM image) | `hcloud ECS DeleteServers --servers.1.id=<id> --delete_publicip=true --delete_volume=true` | huawei-ecs | VPC + Subnet + SG. Set both delete flags true on teardown or EIP/disk leak |
-| EVS data disk | `hcloud EVS CreateVolume`                                                                                                                                                                                                                                                                                                                                                            | `hcloud EVS DeleteVolume`                                                                  | huawei-ecs | - (attach with `hcloud EVS AttachVolume`)                                  |
+| EVS data disk | `hcloud EVS CreateVolume`                                                                                                                                                                                                                                                                                                                                                            | `hcloud EVS DeleteVolume`                                                                  | huawei-ecs | - (attach with `hcloud ECS AttachServerVolume`)                            |
 ## Databases

package/plugins/huaweicloud-core/skills/huawei-iam/references/quick-ref.md CHANGED Viewed

@@ -15,9 +15,9 @@ hcloud IAM KeystoneShowUser                      # show user detail
 ## Credential Management
 ```bash
-hcloud IAM KeystoneListAccessKeys --user_id=<id> # list AK/SK for user
-hcloud IAM CreateLoginToken                      # create login token
-hcloud IAM GetAccountSummary                     # account summary
+hcloud IAM ListAccessKeysV5 --user_id=<id> # list AK/SK for user
+hcloud IAM CreateLoginToken                # create login token
+hcloud IAM GetAccountSummaryV5             # account summary
 ```
 ## Security Best Practices

package/plugins/huaweicloud-core/skills/huawei-obs/SKILL.md CHANGED Viewed

@@ -62,21 +62,21 @@ hcloud OBS config -e=<endpoint> -i=<AK> -k=<SK> -t=token
 ## Common Workflows
-| Task                         | Command                                                                |
-| ---------------------------- | ---------------------------------------------------------------------- |
-| Create bucket                | `hcloud OBS mb obs://<bucket> -location=<region>`                      |
-| List buckets/objects         | `hcloud OBS ls [obs://<bucket>]`                                       |
-| Upload file                  | `hcloud OBS cp <file> obs://<bucket>/<key>`                            |
-| Upload directory (recursive) | `hcloud OBS cp <dir>/ obs://<bucket>/ -r -f -flat`                     |
-| Download object              | `hcloud OBS cp obs://<bucket>/<key> <local-path>`                      |
-| Set bucket ACL               | `hcloud OBS chattri obs://<bucket> -acl=public-read`                   |
-| Set object ACL               | `hcloud OBS chattri obs://<bucket>/<key> -acl=public-read`             | Bucket ACL does NOT cascade — anonymous reads need both |
-| Set lifecycle                | `hcloud OBS lifecycle obs://<bucket> -method=put -localfile=<json>`    |
-| Set bucket policy            | `hcloud OBS bucketpolicy obs://<bucket> -method=put -localfile=<json>` |
-| Set CORS                     | `hcloud OBS cors obs://<bucket> -method=put -localfile=<json>`         |
-| Delete bucket                | `hcloud OBS rm obs://<bucket> -r` (must be empty)                      |
-| Presigned URL                | `hcloud OBS sign obs://<bucket>/<key> -e=<seconds>`                    |
-| Object metadata              | `hcloud OBS stat obs://<bucket>/<key>`                                 |
+| Task                         | Command                                                                   |
+| ---------------------------- | ------------------------------------------------------------------------- |
+| Create bucket                | `hcloud OBS mb obs://<bucket> -location=<region>`                         |
+| List buckets/objects         | `hcloud OBS ls [obs://<bucket>]`                                          |
+| Upload file                  | `hcloud OBS cp <file> obs://<bucket>/<key>`                               |
+| Upload directory (recursive) | `hcloud OBS cp <dir>/ obs://<bucket>/ -r -f -flat`                        |
+| Download object              | `hcloud OBS cp obs://<bucket>/<key> <local-path>`                         |
+| Set bucket ACL               | `hcloud OBS chattri obs://<bucket> -acl=public-read`                      |
+| Set object ACL               | `hcloud OBS chattri obs://<bucket>/<key> -acl=public-read`                | Bucket ACL does NOT cascade — anonymous reads need both |
+| Set lifecycle                | `hcloud OBS lifecycle obs://<bucket> -method=put -localfile=<json>`       |
+| Set bucket policy            | `hcloud OBS bucketpolicy obs://<bucket> -method=put -localfile=<json>`    |
+| Set CORS                     | Not available via `hcloud OBS` — use API/SDK (`SetBucketCors`) or console |
+| Delete bucket                | `hcloud OBS rm obs://<bucket> -r` (must be empty)                         |
+| Presigned URL                | `hcloud OBS sign obs://<bucket>/<key> -e=<seconds>`                       |
+| Object metadata              | `hcloud OBS stat obs://<bucket>/<key>`                                    |
 ## Static Website Deployment Workflow

package/plugins/huaweicloud-core/skills/huawei-vpc/references/network.md CHANGED Viewed

@@ -54,7 +54,7 @@ hcloud EIP AssociatePublicips --publicip_id=<id> \
   --publicip.associate_instance_id=<port-id> --publicip.associate_instance_type=PORT
 # Unbind
-hcloud EIP DisassociatePublicip --publicip_id=<id>
+hcloud EIP DisassociatePublicips --publicip_id=<id>
 # List
 hcloud EIP ListPublicips

package/plugins/huaweicloud-core/skills/huaweicloud-cli-and-auth/SKILL.md CHANGED Viewed

@@ -13,56 +13,58 @@ Use KooCLI `hcloud` for local inspection and reviewed operations. Never ask the
 Official guide: `https://support.huaweicloud.com/qs-hcli/hcli_02_003.html`.
+> **Version pairing**: this plugin is paired with **KooCLI v7.2.12** (`kooCliVersion` in `package.json`). Prefer the pinned download below. The one-liner script `hcloud_install.sh` always installs the `latest` version and cannot be pinned — if you use it, `check_cli`/`doctor` will warn when the installed version does not match v7.2.12.
 ### Windows
-1. Download and unzip: `https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest/huaweicloud-cli-windows-amd64.zip`
+1. Download and unzip: `https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/7.2.12/huaweicloud-cli-windows-amd64.zip`
 2. Extract to `%USERPROFILE%\hcloud`, add to user `PATH`
 3. Verify: `hcloud version`
 ### Linux (amd64 / arm64)
-One-liner (recommended):
-```bash
-curl -sSL https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest/hcloud_install.sh -o ./hcloud_install.sh && bash ./hcloud_install.sh -y
-```
-Or manual download:
+Fixed download (recommended):
 ```bash
 # amd64
-curl -LO "https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest/huaweicloud-cli-linux-amd64.tar.gz"
+curl -LO "https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/7.2.12/huaweicloud-cli-linux-amd64.tar.gz"
 tar -zxvf huaweicloud-cli-linux-amd64.tar.gz
 # arm64
-curl -LO "https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest/huaweicloud-cli-linux-arm64.tar.gz"
+curl -LO "https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/7.2.12/huaweicloud-cli-linux-arm64.tar.gz"
 tar -zxvf huaweicloud-cli-linux-arm64.tar.gz
 ```
 Move to PATH: `mv $(pwd)/hcloud ~/.local/bin/`
 Verify: `hcloud version`
-### macOS (amd64 / arm64)
-One-liner (recommended):
+One-liner (installs `latest`, may drift from v7.2.12):
 ```bash
 curl -sSL https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest/hcloud_install.sh -o ./hcloud_install.sh && bash ./hcloud_install.sh -y
 ```
-Or manual download:
+### macOS (amd64 / arm64)
+Fixed download (recommended):
 ```bash
 # amd64
-curl -LO "https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest/huaweicloud-cli-mac-amd64.tar.gz"
+curl -LO "https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/7.2.12/huaweicloud-cli-mac-amd64.tar.gz"
 tar -zxvf huaweicloud-cli-mac-amd64.tar.gz
 # arm64 (Apple Silicon)
-curl -LO "https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest/huaweicloud-cli-mac-arm64.tar.gz"
+curl -LO "https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/7.2.12/huaweicloud-cli-mac-arm64.tar.gz"
 tar -zxvf huaweicloud-cli-mac-arm64.tar.gz
 ```
 Move to PATH: `mv $(pwd)/hcloud /usr/local/bin/`
 Verify: `hcloud version`
+One-liner (installs `latest`, may drift from v7.2.12):
+```bash
+curl -sSL https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest/hcloud_install.sh -o ./hcloud_install.sh && bash ./hcloud_install.sh -y
+```
 Agent processes find executables through `PATH`. If OpenCode/Codex cannot find `hcloud`, restart after updating `PATH`, or set `HCLOUD_BIN`.
 ## Configure Credentials Outside Chat

package/plugins/huaweicloud-core/src/hcloud-cli.mjs CHANGED Viewed

@@ -131,11 +131,22 @@ function applyPreflightFindings(classification, sgFindings) {
   return classification;
 }
+const OBS_WRITE_SUBCOMMANDS = new Set(['mb', 'cp', 'mv', 'rm', 'chattri', 'restore']);
+function obsWriteHint(args) {
+  if (!Array.isArray(args) || args.length < 2) return null;
+  if (String(args[0]).toUpperCase() !== 'OBS') return null;
+  if (!OBS_WRITE_SUBCOMMANDS.has(String(args[1]).toLowerCase())) return null;
+  return 'OBS write operations are obsutil-style and always write-class. Before executing, present the full resource manifest (bucket/object list) to the user for ONE batch approval, then run each command through plan → approve (see huawei-iac skill, Provisioning Rules).';
+}
 export function planHcloudCommand(args, options = {}) {
   const normalizedArgs = Array.isArray(args) ? args.map(String) : [];
   const classification = classifyHcloudArgs(normalizedArgs, options);
   const command = ['hcloud', ...normalizedArgs].map((arg) => quoteShellArg(arg)).join(' ');
   const warnings = planningWarnings(normalizedArgs);
+  const obsHint = obsWriteHint(normalizedArgs);
+  if (obsHint) warnings.push(obsHint);
   const sgFindings = preflightSecurityGroupCheck(normalizedArgs);
   if (sgFindings.length > 0) {
     for (const f of sgFindings) warnings.push(f);

package/plugins/huaweicloud-core/src/koocli-version.mjs ADDED Viewed

@@ -0,0 +1,47 @@
+import { readFileSync } from 'node:fs';
+import { resolve, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const PACKAGE_JSON = resolve(__dirname, '..', '..', '..', 'package.json');
+export const KOO_CLI_BASE = 'https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli';
+const VERSION_RE = /\d+\.\d+\.\d+(?:[-+][0-9A-Za-z.-]+)?/;
+export function getKooCliVersion() {
+  try {
+    const pkg = JSON.parse(readFileSync(PACKAGE_JSON, 'utf8'));
+    return pkg.kooCliVersion || null;
+  } catch {
+    return null;
+  }
+}
+export function parseHcloudVersion(out) {
+  if (!out) return null;
+  const match = String(out).match(VERSION_RE);
+  return match ? match[0] : null;
+}
+export function compareVersion(a, b) {
+  const pa = String(a || '')
+    .split(/[-+]/)[0]
+    .split('.')
+    .map((n) => Number.parseInt(n, 10) || 0);
+  const pb = String(b || '')
+    .split(/[-+]/)[0]
+    .split('.')
+    .map((n) => Number.parseInt(n, 10) || 0);
+  for (let i = 0; i < Math.max(pa.length, pb.length); i += 1) {
+    const va = pa[i] || 0;
+    const vb = pb[i] || 0;
+    if (va > vb) return 1;
+    if (va < vb) return -1;
+  }
+  return 0;
+}
+export function kooCliDownloadBase() {
+  return `${KOO_CLI_BASE}/${getKooCliVersion() || 'latest'}`;
+}

package/plugins/huaweicloud-core/src/setup-cli.mjs CHANGED Viewed

@@ -36,6 +36,13 @@ import {
 } from './proxy/proxy-config.mjs';
 import { removeKooCli, removeObsConfig } from './sandbox/uninstall-cleanup.mjs';
 import { queryDistTagsSync, determineTarget, semverCompare } from './update-check.mjs';
+import {
+  getKooCliVersion,
+  parseHcloudVersion,
+  compareVersion,
+  kooCliDownloadBase,
+  KOO_CLI_BASE,
+} from './koocli-version.mjs';
 const { DatabaseSync } = createRequire(import.meta.url)('node:sqlite');
@@ -3668,12 +3675,28 @@ async function cmdDoctor() {
   const hcloudOk = hcloudCheck.status === 0 && /KooCLI|Current.*version|当前KooCLI/i.test(hcloudOut);
   check('hcloud CLI installed', hcloudOk, 'Run: npx huaweicloud-devkit install-hcloud');
+  const kooCliTarget = getKooCliVersion();
+  if (hcloudOk && kooCliTarget) {
+    const installed = parseHcloudVersion(hcloudOut);
+    if (installed && compareVersion(installed, kooCliTarget) !== 0) {
+      warn++;
+      console.log(
+        `  \x1b[33m[WARN]\x1b[0m KooCLI version mismatch: installed ${installed}, this plugin is paired with ${kooCliTarget}.`,
+      );
+      console.log(
+        `        Reinstall the pinned version: curl -LO "${kooCliDownloadBase()}/huaweicloud-cli-linux-amd64.tar.gz" (or your platform's package), or run \`npx huaweicloud-devkit install-hcloud\`.`,
+      );
+    }
+  }
   // CodeArts sandbox mode warning
   const sandboxMode = detectCodeartsSandbox();
   if (sandboxMode === 'sandbox') {
-    console.log(`  \x1b[33m[WARN]\x1b[0m CodeArts sandbox mode active (bash_mode: sandbox)`);
-    console.log(`        KooCLI may fail to write config in ~/.hcloud/ and hang on the privacy agreement.`);
-    console.log(`        Fix: disable sandbox (Settings → Permissions) or use a terminal outside CodeArts.`);
+    console.log(`  \x1b[33m[WARN]\x1b[0m 检测到码道沙箱模式 (bash_mode: sandbox)`);
+    console.log(`        KooCLI 可能无法写入 ~/.hcloud/ 配置目录，并卡在隐私协议确认。`);
+    console.log(
+      `        修复：在码道设置中关闭沙箱模式后重试 (设置 → 对话流 → 智能体 终端命令运行模式 → 自动运行)，或改用码道外的终端。`,
+    );
     warn++;
   }
@@ -4016,7 +4039,9 @@ async function cmdInstallHcloud() {
   const os = platform();
   const arch = process.arch;
-  const baseUrl = 'https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest';
+  const baseUrl = kooCliDownloadBase();
+  const kooCliVersion = getKooCliVersion();
+  const latestUrl = `${KOO_CLI_BASE}/latest`;
   const installDir = os === 'win32' ? join(homedir(), 'hcloud') : join(homedir(), '.local', 'bin');
   if (os === 'win32') {
@@ -4113,28 +4138,30 @@ async function cmdInstallHcloud() {
       }
     }
   } else if (os === 'linux') {
-    console.log('[Linux] One-liner install:');
-    console.log(
-      '  curl -sSL https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest/hcloud_install.sh -o ./hcloud_install.sh && bash ./hcloud_install.sh -y',
-    );
-    console.log(`\nOr manual: ${arch === 'arm64' ? 'ARM64' : 'AMD64'}`);
+    console.log('[Linux] Auto-install (pinned to KooCLI <version>):'.replace('<version>', kooCliVersion || ''));
     const pkg = arch === 'arm64' ? 'linux-arm64' : 'linux-amd64';
     console.log(`  curl -LO "${baseUrl}/huaweicloud-cli-${pkg}.tar.gz"`);
     console.log(`  tar -zxvf huaweicloud-cli-${pkg}.tar.gz`);
     console.log(`  mv hcloud ~/.local/bin/`);
     console.log(`  hcloud version`);
-    console.log(`\nFull guide: https://support.huaweicloud.com/qs-hcli/hcli_02_003_02.html`);
-  } else if (os === 'darwin') {
-    console.log('[macOS] One-liner install:');
+    console.log(`\n  Or one-liner (installs LATEST, may differ from pinned ${kooCliVersion || ''}):`);
+    console.log(`  curl -sSL ${latestUrl}/hcloud_install.sh -o ./hcloud_install.sh && bash ./hcloud_install.sh -y`);
     console.log(
-      '  curl -sSL https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest/hcloud_install.sh -o ./hcloud_install.sh && bash ./hcloud_install.sh -y',
+      `  \x1b[33m⚠️  The one-liner installs the latest KooCLI. If \`hcloud version\` != ${kooCliVersion}, doctor/check_cli will warn — use the pinned download above instead.\x1b[0m`,
     );
-    console.log(`\nOr manual: ${arch === 'arm64' ? 'ARM64 (Apple Silicon)' : 'AMD64 (Intel)'}`);
+    console.log(`\nFull guide: https://support.huaweicloud.com/qs-hcli/hcli_02_003_02.html`);
+  } else if (os === 'darwin') {
+    console.log('[macOS] Auto-install (pinned to KooCLI <version>):'.replace('<version>', kooCliVersion || ''));
     const pkg = arch === 'arm64' ? 'mac-arm64' : 'mac-amd64';
     console.log(`  curl -LO "${baseUrl}/huaweicloud-cli-${pkg}.tar.gz"`);
     console.log(`  tar -zxvf huaweicloud-cli-${pkg}.tar.gz`);
     console.log(`  mv hcloud /usr/local/bin/`);
     console.log(`  hcloud version`);
+    console.log(`\n  Or one-liner (installs LATEST, may differ from pinned ${kooCliVersion || ''}):`);
+    console.log(`  curl -sSL ${latestUrl}/hcloud_install.sh -o ./hcloud_install.sh && bash ./hcloud_install.sh -y`);
+    console.log(
+      `  \x1b[33m⚠️  The one-liner installs the latest KooCLI. If \`hcloud version\` != ${kooCliVersion}, doctor/check_cli will warn — use the pinned download above instead.\x1b[0m`,
+    );
     console.log(`\nFull guide: https://support.huaweicloud.com/qs-hcli/hcli_02_003_03.html`);
   }

package/plugins/huaweicloud-core/src/tools.mjs CHANGED Viewed

@@ -57,6 +57,7 @@ import {
   resolveSkipFilePath,
   upgradePackage,
 } from './update-check.mjs';
+import { getKooCliVersion, parseHcloudVersion, compareVersion } from './koocli-version.mjs';
 const __dirname = dirname(fileURLToPath(import.meta.url));
 const SKILLS_ROOT_DEV = join(__dirname, '..', 'skills');
@@ -174,7 +175,8 @@ const SKILLS_ROOT = resolveSkillsRoot();
 export const TOOL_DEFINITIONS = [
   {
     name: 'huaweicloud_check_cli',
-    description: 'Check whether Huawei Cloud KooCLI hcloud is installed. Returns redacted output.',
+    description:
+      'Check whether Huawei Cloud KooCLI hcloud is installed and whether its version matches the plugin paired version. Returns redacted output.',
     inputSchema: {
       type: 'object',
       properties: {},
@@ -1386,13 +1388,26 @@ export async function runVersionCheck(options = {}) {
   });
   const errorText = result.error || result.stderr || '';
   const isSpawnError = /ENOENT|SPAWN_ERROR/i.test(errorText) || result.code === 'SPAWN_ERROR';
+  const requiredVersion = getKooCliVersion();
+  const installedVersion = parseHcloudVersion(result.stdout || '');
+  const versionMismatch = !!(
+    result.ok &&
+    requiredVersion &&
+    installedVersion &&
+    compareVersion(installedVersion, requiredVersion) !== 0
+  );
   return {
     installed: result.ok,
     authenticated: result.ok && !/配置文件中不存在配置项|USE_ERROR.*配置/i.test(result.stdout || ''),
     errorCode: isSpawnError ? 'HCLOUD_NOT_FOUND' : undefined,
     output: result.ok ? result.stdout : errorText,
+    kooCliVersion: requiredVersion || undefined,
+    installedVersion: installedVersion || undefined,
+    versionMismatch,
     nextStep: result.ok
-      ? 'Use huaweicloud_show_profile_redacted to inspect the active KooCLI profile safely.'
+      ? versionMismatch
+        ? `KooCLI version mismatch: installed ${installedVersion}, this plugin is paired with ${requiredVersion}. Reinstall the pinned version (see huaweicloud-cli-and-auth skill) and restart the agent.`
+        : 'Use huaweicloud_show_profile_redacted to inspect the active KooCLI profile safely.'
       : isSpawnError
         ? 'hcloud executable not found. Set HCLOUD_BIN to the full hcloud path, or install KooCLI: npx huaweicloud-devkit install-hcloud. Then restart the agent.'
         : 'Install Huawei Cloud KooCLI: npx huaweicloud-devkit install-hcloud. Configure credentials outside the agent conversation.',