npm - huaweicloud-devkit - Versions diffs - 1.1.2-next.2 → 1.1.2-next.4 - Mend

huaweicloud-devkit 1.1.2-next.2 → 1.1.2-next.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (38) hide show

package/README.md CHANGED Viewed

@@ -57,14 +57,36 @@ npx --yes huaweicloud-devkit install --target codex
 **Restart the Codex session** after installation.
 ```bash
+codex plugin list  # verify huaweicloud-devkit@huaweicloud-devkit is installed and enabled
 npx --yes huaweicloud-devkit doctor --target codex
 npx --yes huaweicloud-devkit status --target codex
 npx --yes huaweicloud-devkit update --target codex
 npx --yes huaweicloud-devkit uninstall --target codex
 ```
+Then mention `@huaweicloud-devkit` in Codex or describe your Huawei Cloud task directly.
 > **Requires Codex CLI** — the `codex` command must be in PATH. If Codex is installed via WindowsApps (Microsoft Store), use `--target codex-desktop` instead. Run `codex --version` to verify CLI availability.
+### Codex Desktop
+Use this target when the Codex CLI is unavailable or when Codex is installed through WindowsApps on Windows.
+```bash
+npx --yes huaweicloud-devkit install --target codex-desktop
+```
+**Restart the Codex Desktop session** after installation.
+```bash
+npx --yes huaweicloud-devkit doctor --target codex-desktop
+npx --yes huaweicloud-devkit status --target codex-desktop
+npx --yes huaweicloud-devkit update --target codex-desktop
+npx --yes huaweicloud-devkit uninstall --target codex-desktop
+```
+Then mention `@huaweicloud-devkit` in a new Codex Desktop task or describe your Huawei Cloud task directly.
 ### CodeArts Agent
 ```bash

package/README.zh-CN.md CHANGED Viewed

@@ -57,14 +57,36 @@ npx --yes huaweicloud-devkit install --target codex
 安装后**重启 Codex 会话**。
 ```bash
+codex plugin list  # 验证 huaweicloud-devkit@huaweicloud-devkit 已安装并启用
 npx --yes huaweicloud-devkit doctor --target codex
 npx --yes huaweicloud-devkit status --target codex
 npx --yes huaweicloud-devkit update --target codex
 npx --yes huaweicloud-devkit uninstall --target codex
 ```
+随后在 Codex 中提及 `@huaweicloud-devkit`，或直接描述华为云任务。
 > **需要 Codex CLI** — `codex` 命令必须在 PATH 中。若 Codex 通过 WindowsApps（Microsoft Store）安装，请使用 `--target codex-desktop` 替代。运行 `codex --version` 验证 CLI 可用性。
+### Codex Desktop
+当 Codex CLI 不可用，或 Windows 上通过 WindowsApps 安装 Codex 时，使用此目标。
+```bash
+npx --yes huaweicloud-devkit install --target codex-desktop
+```
+安装后**重启 Codex Desktop 会话**。
+```bash
+npx --yes huaweicloud-devkit doctor --target codex-desktop
+npx --yes huaweicloud-devkit status --target codex-desktop
+npx --yes huaweicloud-devkit update --target codex-desktop
+npx --yes huaweicloud-devkit uninstall --target codex-desktop
+```
+随后在新的 Codex Desktop 任务中提及 `@huaweicloud-devkit`，或直接描述华为云任务。
 ### CodeArts Agent（码道）
 ```bash

package/integrations/hermes/skills-snapshot.json ADDED Viewed

@@ -0,0 +1,175 @@
+{
+  "hermes_version": "0.1.0",
+  "exported_at": "2026-09-07T00:00:00Z",
+  "skills": [
+    {
+      "name": "huawei-apig",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-apig",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-billing",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-billing",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-cbr",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-cbr",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-cce",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-cce",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-cloud-eye",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-cloud-eye",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-cloud-find-skills",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-cloud-find-skills",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-cts",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-cts",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-dds-dcs",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-dds-dcs",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-deployment",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-deployment",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-dew",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-dew",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-ecs",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-ecs",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-functiongraph",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-functiongraph",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-gaussdb",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-gaussdb",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-getting-started",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-getting-started",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-iam",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-iam",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-modelarts",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-modelarts",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-obs",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-obs",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-rds",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-rds",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-sandbox",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-sandbox",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-smn-dms",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-smn-dms",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-vpc",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-vpc",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huawei-waf-aad",
+      "source": "official",
+      "identifier": "official/huaweicloud/huawei-waf-aad",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huaweicloud-api-and-sdk",
+      "source": "official",
+      "identifier": "official/huaweicloud/huaweicloud-api-and-sdk",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huaweicloud-capability-discovery",
+      "source": "official",
+      "identifier": "official/huaweicloud/huaweicloud-capability-discovery",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huaweicloud-cli-and-auth",
+      "source": "official",
+      "identifier": "official/huaweicloud/huaweicloud-cli-and-auth",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huaweicloud-core",
+      "source": "official",
+      "identifier": "official/huaweicloud/huaweicloud-core",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huaweicloud-safety",
+      "source": "official",
+      "identifier": "official/huaweicloud/huaweicloud-safety",
+      "category": "huaweicloud"
+    },
+    {
+      "name": "huaweicloud-troubleshooting",
+      "source": "official",
+      "identifier": "official/huaweicloud/huaweicloud-troubleshooting",
+      "category": "huaweicloud"
+    }
+  ],
+  "taps": []
+}

package/package.json CHANGED Viewed

@@ -1,6 +1,8 @@
 {
   "name": "huaweicloud-devkit",
-  "version": "1.1.2-next.2",
+  "mcpName": "io.github.huaweicloud/huaweicloud-devkit",
+  "version": "1.1.2-next.4",
+  "kooCliVersion": "7.2.12",
   "description": "Agent toolkit that helps coding agents use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities safely and accurately.",
   "type": "module",
   "files": [

package/plugins/huaweicloud-core/.claude-plugin/plugin.json CHANGED Viewed

@@ -17,7 +17,7 @@
   "mcpServers": "./.mcp.json",
   "description": "Guide coding agents to use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities with safer execution and less context.",
   "skills": "./skills/",
-  "version": "1.1.2-next.2",
+  "version": "1.1.2-next.4",
   "author": {
     "name": "HuaweiCloud Mate",
     "url": "https://github.com/huaweicloud"

package/plugins/huaweicloud-core/.codex-plugin/plugin.json CHANGED Viewed

@@ -20,7 +20,7 @@
   "mcpServers": "./.mcp.json",
   "description": "Agent toolkit that helps coding agents use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities safely and accurately.",
   "skills": "./skills/",
-  "version": "1.1.2-next.2",
+  "version": "1.1.2-next.4",
   "author": {
     "name": "HuaweiCloud Mate",
     "url": "https://github.com/huaweicloud"

package/plugins/huaweicloud-core/.cursor-plugin/plugin.json CHANGED Viewed

@@ -17,7 +17,7 @@
   "mcpServers": "./.mcp.json",
   "description": "Guide coding agents to use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities with safer execution and less context.",
   "skills": "./skills/",
-  "version": "1.1.2-next.2",
+  "version": "1.1.2-next.4",
   "author": {
     "name": "HuaweiCloud Mate",
     "url": "https://github.com/huaweicloud"

package/plugins/huaweicloud-core/.hermes-plugin/plugin.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "huaweicloud-devkit",
-  "version": "1.1.2-next.2",
+  "version": "1.1.2-next.4",
   "description": "Guide coding agents to use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities with safer execution and less context.",
   "author": {
     "name": "HuaweiCloud Mate",

package/plugins/huaweicloud-core/.workbuddy-plugin/plugin.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "huaweicloud-devkit",
-  "version": "1.1.2-next.2",
+  "version": "1.1.2-next.4",
   "description": "Guide coding agents to use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities with safer execution and less context.",
   "author": {
     "name": "HuaweiCloud Mate",

package/plugins/huaweicloud-core/hooks/hooks.json CHANGED Viewed

@@ -6,7 +6,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "python3 \"${CLAUDE_PLUGIN_ROOT}/hooks/huaweicloud-safety.py\"",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/huaweicloud-safety.mjs\"",
             "timeout": 5
           }
         ]
@@ -16,7 +16,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "python3 \"${CLAUDE_PLUGIN_ROOT}/hooks/huaweicloud-safety.py\"",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/huaweicloud-safety.mjs\"",
             "timeout": 5
           }
         ]

package/plugins/huaweicloud-core/hooks/huaweicloud-safety.mjs ADDED Viewed

@@ -0,0 +1,56 @@
+import { readFileSync } from 'node:fs';
+import { classifyTextCommand } from '../src/safety-policy.mjs';
+const DENY_PREFIX = 'Huawei Cloud safety hook blocked this action: ';
+function commandText(toolInput) {
+  if (typeof toolInput === 'string') return toolInput;
+  if (toolInput && typeof toolInput === 'object') {
+    const values = [];
+    for (const key of ['command', 'cmd', 'script', 'args', 'arguments']) {
+      const value = toolInput[key];
+      if (Array.isArray(value)) values.push(value.map(String).join(' '));
+      else if (value !== undefined && value !== null) values.push(String(value));
+    }
+    if (values.length > 0) return values.join('\n');
+    return JSON.stringify(toolInput);
+  }
+  return JSON.stringify(toolInput);
+}
+function deny(reason) {
+  process.stdout.write(
+    JSON.stringify({
+      hookSpecificOutput: {
+        hookEventName: 'PreToolUse',
+        permissionDecision: 'deny',
+        permissionDecisionReason: DENY_PREFIX + reason,
+      },
+    }) + '\n',
+  );
+}
+function readStdin() {
+  try {
+    return readFileSync(0, 'utf8');
+  } catch {
+    return '';
+  }
+}
+function main() {
+  const input = readStdin();
+  let data;
+  try {
+    data = JSON.parse(input);
+  } catch {
+    return;
+  }
+  const text = commandText(data.tool_input ?? {});
+  const result = classifyTextCommand(text);
+  if (result.decision === 'deny') deny(result.reason);
+}
+main();

package/plugins/huaweicloud-core/openclaw.plugin.json CHANGED Viewed

@@ -2,7 +2,7 @@
   "name": "huaweicloud-devkit",
   "id": "huaweicloud-devkit",
   "displayName": "HuaweiCloud DevKit",
-  "version": "1.1.2-next.2",
+  "version": "1.1.2-next.4",
   "family": "bundle-plugin",
   "bundleFormat": "codex",
   "description": "Guide coding agents to use Huawei Cloud safely — KooCLI, APIs, SDKs, 28 MCP tools, skills, and safety guardrails.",

package/plugins/huaweicloud-core/skills/huawei-apig/SKILL.md CHANGED Viewed

@@ -119,7 +119,7 @@ hcloud APIG BatchPublishOrOfflineApiV2 \
 ## Throttling
 ```bash
-hcloud APIG CreateThrottlingPolicyV2 --name=<n> --api_call_limits=1000
+hcloud APIG CreateRequestThrottlingPolicyV2 --instance_id=<id> --name=<n> --api_call_limits=1000
 ```
 ## Common Workflows

package/plugins/huaweicloud-core/skills/huawei-dew/SKILL.md CHANGED Viewed

@@ -31,16 +31,15 @@ Domain expertise for Huawei Cloud Data Encryption Workshop (DEW). Covers CSMS fo
 | Operation          | Description                                            |
 | ------------------ | ------------------------------------------------------ |
 | ListSecrets        | List all secrets (names only, no values)               |
-| DescribeSecret     | Get secret metadata (rotation config, KMS key, status) |
+| ShowSecret         | Get secret metadata (rotation config, KMS key, status) |
 | ListSecretVersions | List version IDs and stages (no values)                |
 ### Secret Value (blocked by policy — use runtime injection)
-| Operation         | Safe Alternative                              |
-| ----------------- | --------------------------------------------- |
-| DownloadSecret    | Use {{resolve:csms:secret-id}} in IaC or SDK  |
-| ShowSecretVersion | Use runtime injection, never in agent context |
-| GetSecretValue    | Blocked. Use MCP proxy resolve pattern        |
+| Operation          | Safe Alternative                              |
+| ------------------ | --------------------------------------------- |
+| DownloadSecretBlob | Use {{resolve:csms:secret-id}} in IaC or SDK  |
+| ShowSecretVersion  | Use runtime injection, never in agent context |
 ## KMS Operations
@@ -80,7 +79,7 @@ hcloud CSMS DownloadSecretBlob --secret_name=<name>
 | Error                | Root Cause -> Fix                                                           |
 | -------------------- | --------------------------------------------------------------------------- |
 | Secret not found     | Wrong region or project -> Verify secret ARN includes region/project        |
-| AccessDenied on CSMS | Missing IAM CSMS policy -> Add csms:DescribeSecret + kms:Decrypt            |
+| AccessDenied on CSMS | Missing IAM CSMS policy -> Add csms:ShowSecret + kms:Decrypt                |
 | KMS key disabled     | Key scheduled for deletion or manually disabled -> Enable or create new key |
 | Rotation stuck       | Lambda/Python function error -> Check rotation function logs                |

package/plugins/huaweicloud-core/skills/huawei-dew/references/csms-usage.md CHANGED Viewed

@@ -2,7 +2,7 @@
 ## Create Secret
-hcloud CSMS CreateSecret --secret_name=prod-db-password --secret_string='{"password":"CHANGE_ME"}'
+hcloud CSMS CreateSecret --name=prod-db-password --secret_string='{"password":"CHANGE_ME"}'
 ## List Secrets (metadata only)
@@ -10,7 +10,7 @@ hcloud CSMS ListSecrets
 ## Describe Secret
-hcloud CSMS DescribeSecret --secret_name=prod-db-password
+hcloud CSMS ShowSecret --secret_name=prod-db-password
 ## List Versions
@@ -25,12 +25,13 @@ Use: data.huaweicloud_csms_secret.db.secret_string
 ## Rotation
-- Enable auto-rotation: hcloud CSMS EnableSecretRotation --secret_name=<name> --rotation_interval=30
-- Rotation function ARN: provide Lambda to generate new secret value
+- Enable auto-rotation: `hcloud CSMS UpdateSecret --secret_name=<name> --auto_rotation=true --rotation_period=<days> --rotation_func_urn=<fn>` (or set at CreateSecret time)
+- Trigger rotation now: `hcloud CSMS RotateSecret --secret_name=<name>`
+- Rotation function ARN: provide a FunctionGraph rotation function to generate new secret values
 ## Policy Rules
-- hcloud CSMS DownloadSecret -> BLOCKED (use runtime injection)
+- hcloud CSMS DownloadSecretBlob -> BLOCKED (use runtime injection)
 - hcloud CSMS ShowSecretVersion -> BLOCKED
 - hcloud CSMS ListSecrets -> ALLOWED (metadata only)
-- hcloud CSMS DescribeSecret -> ALLOWED (metadata only)
+- hcloud CSMS ShowSecret -> ALLOWED (metadata only)

package/plugins/huaweicloud-core/skills/huawei-dew/references/kms-usage.md CHANGED Viewed

@@ -24,6 +24,6 @@ Use SDK with KMS client in application runtime.
 ## Key Deletion
-- Schedule: hcloud KMS ScheduleKeyDeletion --key_id=<key-id> --pending_days=7
+- Schedule: hcloud KMS DeleteKey --key_id=<key-id> --pending_days=7
 - Cancel during pending window: hcloud KMS CancelKeyDeletion --key_id=<key-id>
 - WARNING: After deletion window passes, data encrypted with this key is UNRECOVERABLE

package/plugins/huaweicloud-core/skills/huawei-ecs/SKILL.md CHANGED Viewed

@@ -59,7 +59,7 @@ Flavor families are **region-dependent**. Always run `hcloud ECS ListFlavors --c
 | Find by name        | See "How to search for instances" below                                                                                                                  |                                                                                          |
 | Bind EIP            | hcloud EIP AssociatePublicips --publicip_id=<id> --publicip.associate_instance_id=<port-id> --publicip.associate_instance_type=PORT                      | Get port ID from `hcloud ECS ListServersDetails --server_id=<id>` → `OS-EXT-IPS:port_id` |
 | Security group rule | hcloud VPC CreateSecurityGroupRule --security_group_id=<id> --direction=<direction> --protocol=<protocol>                                                | references/sg.md                                                                         |
-| Attach disk         | hcloud EVS AttachVolume --volume_id=<id> --server_id=<id>                                                                                                | references/evs.md                                                                        |
+| Attach disk         | hcloud ECS AttachServerVolume --server_id=<id> --volumeAttachment.volumeId=<id>                                                                          | references/evs.md                                                                        |
 | Delete instance     | hcloud ECS DeleteServers --servers.1.id=<id> --delete_publicip=true --delete_volume=true                                                                 | references/create-instance.md                                                            |
 | Reboot instance     | hcloud ECS BatchRebootServers --reboot.servers.1.id=<id> --reboot.type=SOFT                                                                              | NOT `RebootServer` — that operation does not exist                                       |
 | HC活动部署          | 按量付费购买ECS+Nginx部署后端服务                                                                                                                        | references/hc-activity.md                                                                |

package/plugins/huaweicloud-core/skills/huawei-ecs/references/evs.md CHANGED Viewed

@@ -18,9 +18,11 @@ hcloud EVS CreateVolume \
 ## Attach to ECS
 ```bash
-hcloud EVS AttachVolume --volume_id=<vol-id> --server_id=<ecs-id>
+hcloud ECS AttachServerVolume --server_id=<ecs-id> --volumeAttachment.volumeId=<vol-id>
 ```
+> The attach operation lives under `ECS` (not `EVS`), and the volume id uses the nested `--volumeAttachment.volumeId` parameter.
 ## List / Delete
 ```bash

package/plugins/huaweicloud-core/skills/huawei-ecs/references/troubleshooting.md CHANGED Viewed

@@ -4,16 +4,16 @@
 ## 错误码映射
-| 错误                                    | 根因                            | 修复                                                                                                     |
-| --------------------------------------- | ------------------------------- | -------------------------------------------------------------------------------------------------------- |
-| `Ecs.0005` flavor-image 不匹配          | 镜像虚拟化类型与规格不兼容      | 检查 image `__support_amd`/`__support_xen` 与 flavor `os_extra_specs`。BareMetal 镜像不兼容标准 ECS 规格 |
-| `[USE_ERROR]不正确的参数:imagetype`     | 参数名错误                      | KooCLI 使用双下划线前缀：`--__imagetype=gold`（不是 `--imagetype`）                                      |
-| `[USE_ERROR]不正确的参数:chargingMode`  | 参数路径错误                    | 计费模式参数路径：`--server.extendparam.chargingMode=postPaid`。不传默认按需付费                         |
-| `[USE_ERROR]不正确的参数:__support_amd` | 参数无效                        | `IMS ListImages` 某些版本不支持此过滤。去掉该参数，使用 client-side 过滤                                 |
-| Cannot SSH                              | 安全组未开放22端口 或 未绑定EIP | 1) 添加入方向规则 tcp 22。2) `hcloud EIP BindPublicIp`                                                   |
-| Flavor unavailable                      | 区域不支持该规格                | `hcloud ECS ListFlavors --cli-region=<r>` 先查。不硬编码 s6/m6 等规格名                                  |
-| Insufficient resources                  | AZ 库存不足                     | 换规格、换 AZ、或等待资源释放                                                                            |
-| AuthFailure                             | AK/SK 过期或无效                | `npx huaweicloud-devkit auth init` 重新配置统一凭据                                                      |
+| 错误                                    | 根因                            | 修复                                                                                                                                                               |
+| --------------------------------------- | ------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
+| `Ecs.0005` flavor-image 不匹配          | 镜像虚拟化类型与规格不兼容      | 检查 image `__support_amd`/`__support_xen` 与 flavor `os_extra_specs`。BareMetal 镜像不兼容标准 ECS 规格                                                           |
+| `[USE_ERROR]不正确的参数:imagetype`     | 参数名错误                      | KooCLI 使用双下划线前缀：`--__imagetype=gold`（不是 `--imagetype`）                                                                                                |
+| `[USE_ERROR]不正确的参数:chargingMode`  | 参数路径错误                    | 计费模式参数路径：`--server.extendparam.chargingMode=postPaid`。不传默认按需付费                                                                                   |
+| `[USE_ERROR]不正确的参数:__support_amd` | 参数无效                        | `IMS ListImages` 某些版本不支持此过滤。去掉该参数，使用 client-side 过滤                                                                                           |
+| Cannot SSH                              | 安全组未开放22端口 或 未绑定EIP | 1) 添加入方向规则 tcp 22。2) `hcloud EIP AssociatePublicips --publicip_id=<id> --publicip.associate_instance_id=<port-id> --publicip.associate_instance_type=PORT` |
+| Flavor unavailable                      | 区域不支持该规格                | `hcloud ECS ListFlavors --cli-region=<r>` 先查。不硬编码 s6/m6 等规格名                                                                                            |
+| Insufficient resources                  | AZ 库存不足                     | 换规格、换 AZ、或等待资源释放                                                                                                                                      |
+| AuthFailure                             | AK/SK 过期或无效                | `npx huaweicloud-devkit auth init` 重新配置统一凭据                                                                                                                |
 ## 创建失败诊断流程

package/plugins/huaweicloud-core/skills/huawei-functiongraph/references/create-function.md CHANGED Viewed

@@ -62,9 +62,9 @@ To access VPC-internal resources from FunctionGraph:
 ```bash
 # 1. Create agency (see huawei-iam skill)
-hcloud IAM CreateAgency --agency_name=<name> --trust_domain_name=functiongraph
+hcloud IAM CreateAgency --agency.name=<name> --agency.trust_domain_name=functiongraph --agency.domain_id=<id>
 # 2. Grant role (e.g., VPC Administrator)
-hcloud IAM GrantRoleToAgency --agency_name=<name> --role_id=<role-id>
+hcloud IAM AssociateAgencyWithDomainPermission --agency_id=<id> --domain_id=<id> --role_id=<role-id>
 # 3. Use in CreateFunction
 hcloud FunctionGraph CreateFunction --func_vpc.vpc_id=<vpc> --func_vpc.subnet_id=<subnet> --app_xrole=<name> ...
 ```

package/plugins/huaweicloud-core/skills/huawei-functiongraph/references/deploy-workflow.md CHANGED Viewed

@@ -88,7 +88,7 @@ hcloud FunctionGraph CreateFunctionTrigger \
   --trigger_status=ACTIVE \
   --event_data.name=test-timer \
   --event_data.schedule_type=Rate \
-  --event_data.schedule="5m"
+  --event_data.schedule="1m"
 ```
 ## DEDICATEDGATEWAY Pre-Flight Checklist

package/plugins/huaweicloud-core/skills/huawei-getting-started/SKILL.md CHANGED Viewed

@@ -10,11 +10,15 @@ version: 1
 ## KooCLI Installation
-| OS                   | Command                                                                                                               |
-| -------------------- | --------------------------------------------------------------------------------------------------------------------- |
-| Windows (PowerShell) | See https://support.huaweicloud.com/qs-hcli/hcli_02_003.html for MSI download                                         |
-| Linux                | curl -LO "https://hwcloudcli.obs.cn-north-1.myhuaweicloud.com/cli/latest/hcloud_install.sh" && bash hcloud_install.sh |
-| macOS                | curl -LO "https://hwcloudcli.obs.cn-north-1.myhuaweicloud.com/cli/latest/hcloud_install.sh" && bash hcloud_install.sh |
+This plugin is paired with **KooCLI v7.2.12**. Install the pinned version:
+| OS                   | Command                                                                                                                                                                 |
+| -------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| Windows (PowerShell) | See https://support.huaweicloud.com/qs-hcli/hcli_02_003.html for MSI download                                                                                           |
+| Linux                | curl -LO "https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/7.2.12/huaweicloud-cli-linux-amd64.tar.gz" && tar -zxvf huaweicloud-cli-linux-amd64.tar.gz |
+| macOS                | curl -LO "https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/7.2.12/huaweicloud-cli-mac-amd64.tar.gz" && tar -zxvf huaweicloud-cli-mac-amd64.tar.gz     |
+> See `huaweicloud-cli-and-auth` skill for arm64 variants and the one-liner (latest) option.
 ## First-Time Setup
@@ -24,20 +28,22 @@ version: 1
 4. **Verify**: `hcloud configure list` to confirm profile, then `hcloud ECS ListServersDetails --cli-region=cn-north-4`
 5. For detailed auth guidance, see `huaweicloud-cli-and-auth` skill
-> **Security**: Never pass AK/SK as command-line arguments (`--ak=...`). Always use `npx huaweicloud-devkit auth init` (unified, interactive, recommended) or `hcloud configure init` (KooCLI only) to avoid secrets in shell history.
+> **Security**: Never pass AK/SK as command-line arguments (`--ak=...`). Always use `npx huaweicloud-devkit auth init` (unified, interactive) or `hcloud configure init` (KooCLI only) to avoid secrets in shell history.
 ### Non-Interactive Setup (Agent/CI Environments)
-When the interactive TUI is unavailable (Agent tools, CI/CD), use `hcloud configure set` — this must be run outside agent chat by the user:
+When the interactive TUI is unavailable (Agent tools, CI/CD), configure credentials outside agent chat using the unified entry point:
 ```bash
 # User executes in their terminal (NOT in agent chat):
-hcloud configure set --cli-access-key=<AK> --cli-secret-key=<SK> --cli-region=<region>
+npx huaweicloud-devkit auth init
-# Agent verifies:
+# Agent verifies through redacted tooling only:
 hcloud configure list
 ```
+> Do **not** instruct the user to run `hcloud configure set --cli-access-key=... --cli-secret-key=...` — AK/SK would enter shell history. Use `npx huaweicloud-devkit auth init` instead.
 ## Critical Warnings
 | Trap                                   | Why                                                                                           |

package/plugins/huaweicloud-core/skills/huawei-iac/SKILL.md CHANGED Viewed

@@ -34,7 +34,7 @@ Always run `hcloud <Service> <Operation> --help` before constructing commands to
 ## Provisioning Rules (Stage 6)
 1. Generate `deployment_id` (`d-xxx`), initialize the session state file (path and schema: `references/state-file.md`).
-2. **Batch approval: show the RESOURCE LIST (name / type / purpose), never the raw commands.** After the user approves, execute each resource via `huaweicloud_run_approved_command`. Never execute anything outside the approved list.
+2. **Batch approval: show the RESOURCE LIST (name / type / purpose), never the raw commands.** Present the numbered manifest BEFORE any `huaweicloud_plan_cli_command` call and get ONE explicit list-level approval. After the user approves the manifest, execute each resource via `huaweicloud_plan_cli_command` → `huaweicloud_run_approved_command` without re-asking list-level consent (per-command approval tokens are still required by the tool gate). Never execute anything outside the approved list.
 3. Create in dependency-topological order (network → compute/db → bindings). After each success, extract the resource ID and write it to state immediately.
 4. Any failure: stop immediately, mark state `partial`, report the error, offer destroy of already-created resources. No automatic rollback.

package/plugins/huaweicloud-core/skills/huawei-iac/references/resource-catalog.md CHANGED Viewed

@@ -22,7 +22,7 @@ Every resource type the orchestration flow can purchase, bind, and destroy. This
 | Resource      | Create                                                                                                                                                                                                                                                                                                                                                                               | Delete                                                                                     | Skill      | Depends on                                                                 |
 | ------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------ | ---------- | -------------------------------------------------------------------------- |
 | ECS instance  | `hcloud ECS CreateServers --server.name=<n> --server.flavorRef=<id> --server.imageRef=<id> --server.vpcid=<id> --server.nics.1.subnet_id=<id> --server.security_groups.1.id=<id> --server.availability_zone=<az> --server.root_volume.volumetype=<type>` (hidden required: `vpcid` + `root_volume.volumetype`; check flavor family vs image arch, e.g. kc1 = ARM needs an ARM image) | `hcloud ECS DeleteServers --servers.1.id=<id> --delete_publicip=true --delete_volume=true` | huawei-ecs | VPC + Subnet + SG. Set both delete flags true on teardown or EIP/disk leak |
-| EVS data disk | `hcloud EVS CreateVolume`                                                                                                                                                                                                                                                                                                                                                            | `hcloud EVS DeleteVolume`                                                                  | huawei-ecs | - (attach with `hcloud EVS AttachVolume`)                                  |
+| EVS data disk | `hcloud EVS CreateVolume`                                                                                                                                                                                                                                                                                                                                                            | `hcloud EVS DeleteVolume`                                                                  | huawei-ecs | - (attach with `hcloud ECS AttachServerVolume`)                            |
 ## Databases