huaweicloud-devkit 1.1.4-next.4 → 1.1.4-next.6

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "huaweicloud-devkit",
   "mcpName": "io.github.huaweicloud/huaweicloud-devkit",
-  "version": "1.1.4-next.4",
+  "version": "1.1.4-next.6",
   "kooCliVersion": "7.2.12",
   "description": "Agent toolkit that helps coding agents use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities safely and accurately.",
   "type": "module",

package/plugins/huaweicloud-core/.claude-plugin/plugin.json

@@ -17,7 +17,7 @@
   "mcpServers": "./.mcp.json",
   "description": "Guide coding agents to use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities with safer execution and less context.",
   "skills": "./skills/",
-  "version": "1.1.4-next.4",
+  "version": "1.1.4-next.6",
   "author": {
     "name": "HuaweiCloud Mate",
     "url": "https://github.com/huaweicloud"

package/plugins/huaweicloud-core/.codex-plugin/plugin.json

@@ -20,7 +20,7 @@
   "mcpServers": "./.mcp.json",
   "description": "Agent toolkit that helps coding agents use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities safely and accurately.",
   "skills": "./skills/",
-  "version": "1.1.4-next.4",
+  "version": "1.1.4-next.6",
   "author": {
     "name": "HuaweiCloud Mate",
     "url": "https://github.com/huaweicloud"

package/plugins/huaweicloud-core/.cursor-plugin/plugin.json

@@ -17,7 +17,7 @@
   "mcpServers": "./.mcp.json",
   "description": "Guide coding agents to use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities with safer execution and less context.",
   "skills": "./skills/",
-  "version": "1.1.4-next.4",
+  "version": "1.1.4-next.6",
   "author": {
     "name": "HuaweiCloud Mate",
     "url": "https://github.com/huaweicloud"

package/plugins/huaweicloud-core/.hermes-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "huaweicloud-devkit",
-  "version": "1.1.4-next.4",
+  "version": "1.1.4-next.6",
   "description": "Guide coding agents to use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities with safer execution and less context.",
   "author": {
     "name": "HuaweiCloud Mate",

package/plugins/huaweicloud-core/.workbuddy-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "huaweicloud-devkit",
-  "version": "1.1.4-next.4",
+  "version": "1.1.4-next.6",
   "description": "Guide coding agents to use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities with safer execution and less context.",
   "author": {
     "name": "HuaweiCloud Mate",

package/plugins/huaweicloud-core/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "name": "huaweicloud-devkit",
   "id": "huaweicloud-devkit",
   "displayName": "HuaweiCloud DevKit",
-  "version": "1.1.4-next.4",
+  "version": "1.1.4-next.6",
   "family": "bundle-plugin",
   "bundleFormat": "codex",
   "description": "Guide coding agents to use Huawei Cloud safely — KooCLI, APIs, SDKs, 28 MCP tools, skills, and safety guardrails.",

package/plugins/huaweicloud-core/skills/huawei-obs/SKILL.md

@@ -41,7 +41,7 @@ Domain expertise for Huawei Cloud Object Storage Service (OBS). Covers bucket/ob
 | Three-layer permissions            | IAM > Bucket Policy > ACL. Most restrictive wins                                                                                                   |
 | Versioning is irreversible         | Once enabled, cannot be disabled, only suspended                                                                                                   |
 | OBS uses AK/SK directly            | NOT IAM tokens. Auth errors mean check AK/SK validity                                                                                              |
-| Static website via CLI missing     | KooCLI OBS lacks website config. Use REST API or console                                                                                           |
+| Static website via CLI missing     | KooCLI OBS lacks website config. Use `huaweicloud_obs_set_website_config` MCP tool (handles AWS4 signing internally) or console                    |
 | **OBS needs separate cred config** | `hcloud configure` is NOT enough for OBS. Before any OBS operation, call `huaweicloud_setup_obs_config` to sync credentials from hcloud profile.   |
 | **obsutil interactive prompts**    | `cp`/`rm` without `-f` causes "Please input (y/n)" → Agent hangs (TIMEOUT). Always use `-f` for non-interactive.                                   |
 | **Directory upload adds prefix**   | `cp <dir>/ obs://<bucket>/ -r` puts files under `bucket/<dir>/...`. Use `-flat` for root-level files (static sites). Preview with `-dryRun` first. |
@@ -83,7 +83,7 @@ hcloud OBS config -e=<endpoint> -i=<AK> -k=<SK> -t=token
 See `references/static-website.md` for the full end-to-end workflow:
 Build → Create bucket → Upload → Set bucket ACL → Set object ACL → Configure website (REST API/console)
 
-> KooCLI OBS does NOT support `SetBucketWebsite`. Configure static website hosting via REST API (`PUT /?website`) or the Huawei Cloud console.
+> KooCLI OBS does NOT support `SetBucketWebsite`. Use the `huaweicloud_obs_set_website_config` MCP tool (handles AWS4 signing internally, no manual signature needed) or the Huawei Cloud console.
 
 ## Single-File Quick Share
 

package/plugins/huaweicloud-core/skills/huawei-obs/references/static-website.md

@@ -31,13 +31,9 @@ hcloud OBS chattri obs://my-static-site -acl=public-read
 hcloud OBS chattri obs://my-static-site/ -r -f -acl=public-read
 
 # 5. Configure static website hosting
-# KooCLI OBS does NOT support this. Use one of:
-# Option A — REST API:
-#   PUT /?website HTTP/1.1
-#   Host: my-static-site.obs.cn-north-4.myhuaweicloud.com
-#   Body: {"IndexDocument": {"Suffix": "index.html"}, "ErrorDocument": {"Key": "error.html"}}
-#   (requires AK/SK signature)
-# Option B — Huawei Cloud Console:
+# KooCLI OBS does NOT support this. Use the MCP tool (handles AWS4 signing internally):
+# action=set, bucket=<bucket>, region=<region>, indexDocument=index.html, errorDocument=404.html
+# Or use Huawei Cloud Console:
 #   Console → OBS → Bucket → Basic Settings → Static Website Hosting
 
 # 6. Verify

package/plugins/huaweicloud-core/src/mcp-config-backup.mjs

@@ -0,0 +1,70 @@
+// Backup/restore of user-customized MCP config fields across uninstall/reinstall (issue #615).
+// Uninstall saves the user delta keyed by agent; a later install/update consumes and applies it.
+//
+// Residual semantics: deltas are namespaced per agent and only that agent's
+// next install/update consumes them (take-once). If the user never reinstalls
+// an agent, its delta simply stays in the backup file — this is expected and
+// harmless (no cross-agent contamination). `uninstall --target all` purges
+// the whole file explicitly.
+
+import { existsSync, mkdirSync, readFileSync, writeFileSync, rmSync } from 'node:fs';
+import { join, dirname } from 'node:path';
+import { homedir } from 'node:os';
+
+export function mcpBackupFilePath(base = process.env.HUAWEICLOUD_HOME || homedir()) {
+  return join(base, '.config', 'huaweicloud', 'devkit-mcp-backup.json');
+}
+
+function readBackup(file) {
+  if (!existsSync(file)) return {};
+  try {
+    const data = JSON.parse(readFileSync(file, 'utf8'));
+    return data && typeof data === 'object' && !Array.isArray(data) ? data : {};
+  } catch {
+    return {};
+  }
+}
+
+export function readAgentDelta(agentKey, file = mcpBackupFilePath()) {
+  const delta = readBackup(file)[agentKey];
+  return delta && typeof delta === 'object' ? delta : null;
+}
+
+export function saveAgentDelta(agentKey, delta, file = mcpBackupFilePath()) {
+  if (!agentKey || !delta || typeof delta !== 'object') return false;
+  const backup = readBackup(file);
+  backup[agentKey] = { ...delta, savedAt: new Date().toISOString() };
+  try {
+    mkdirSync(dirname(file), { recursive: true });
+    writeFileSync(file, JSON.stringify(backup, null, 2));
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+// Consume the delta for an agent: returns it and removes it from the backup file.
+export function takeAgentDelta(agentKey, file = mcpBackupFilePath()) {
+  const delta = readAgentDelta(agentKey, file);
+  if (!delta) return null;
+  const backup = readBackup(file);
+  delete backup[agentKey];
+  try {
+    if (Object.keys(backup).length === 0) {
+      rmSync(file, { force: true });
+    } else {
+      writeFileSync(file, JSON.stringify(backup, null, 2));
+    }
+  } catch {}
+  return delta;
+}
+
+export function purgeBackup(file = mcpBackupFilePath()) {
+  if (!existsSync(file)) return false;
+  try {
+    rmSync(file, { force: true });
+    return true;
+  } catch {
+    return false;
+  }
+}

package/plugins/huaweicloud-core/src/mcp-config-merge.mjs

@@ -0,0 +1,132 @@
+// Pure helpers for merging HuaweiCloud DevKit MCP config entries without
+// dropping user-customized fields (extra command args, env, timeout, enabled).
+// Program-owned fields (the node executable + mcp-server.mjs path, required env
+// keys) are corrected by the installer; everything else belongs to the user.
+
+function isPlainObject(value) {
+  return Boolean(value) && typeof value === 'object' && !Array.isArray(value);
+}
+
+function sameJson(a, b) {
+  return JSON.stringify(a) === JSON.stringify(b);
+}
+
+// Merge env maps: our required keys are only set when absent; user-set values
+// always win. Returns null when nothing needs to change.
+function mergeEnv(userEnv = {}, requiredEnv = {}) {
+  const merged = { ...userEnv };
+  let changed = false;
+  for (const [key, value] of Object.entries(requiredEnv)) {
+    if (merged[key] === undefined) {
+      merged[key] = value;
+      changed = true;
+    }
+  }
+  if (!changed && sameJson(merged, userEnv)) return null;
+  return merged;
+}
+
+function withDefaultTimeout(entry, defaultTimeout) {
+  // Pass null explicitly to omit the timeout field (defaults only apply to undefined).
+  if (defaultTimeout) entry.timeout = defaultTimeout;
+  return entry;
+}
+
+// OpenCode style entry: { type, command: ['node', mcpPath, ...userArgs], ... }
+export function mergeCommandStyle(existing, { mcpPath, defaultTimeout = 300000 } = {}) {
+  if (!isPlainObject(existing)) {
+    return {
+      entry: withDefaultTimeout({ type: 'local', command: ['node', mcpPath], enabled: true }, defaultTimeout),
+      changed: true,
+    };
+  }
+  const commandIsNodeStyle = Array.isArray(existing.command) && existing.command[0] === 'node';
+  if (!commandIsNodeStyle) {
+    // Foreign wrapper entry: keep current overwrite behavior.
+    return {
+      entry: withDefaultTimeout({ type: 'local', command: ['node', mcpPath], enabled: true }, defaultTimeout),
+      changed: true,
+    };
+  }
+  const merged = { ...existing, type: 'local', command: ['node', mcpPath, ...existing.command.slice(2)] };
+  if (merged.timeout === undefined && defaultTimeout) merged.timeout = defaultTimeout;
+  if (merged.enabled === undefined) merged.enabled = true;
+  return { entry: merged, changed: !sameJson(merged, existing) };
+}
+
+// WorkBuddy/AtomCode/CodeArts style entry: { command: 'node', args: [mcpPath, ...userArgs], env, ... }
+export function mergeArgsStyle(existing, { mcpPath, env = {}, defaultTimeout = 300000 } = {}) {
+  if (!isPlainObject(existing)) {
+    return {
+      entry: withDefaultTimeout({ command: 'node', args: [mcpPath], env: { ...env } }, defaultTimeout),
+      changed: true,
+    };
+  }
+  const commandIsNodeStyle = existing.command === 'node';
+  if (!commandIsNodeStyle) {
+    return {
+      entry: withDefaultTimeout({ command: 'node', args: [mcpPath], env: { ...env } }, defaultTimeout),
+      changed: true,
+    };
+  }
+  const merged = {
+    ...existing,
+    command: 'node',
+    args: [mcpPath, ...(Array.isArray(existing.args) ? existing.args.slice(1) : [])],
+  };
+  const envMerged = mergeEnv(isPlainObject(existing.env) ? existing.env : {}, env);
+  if (envMerged) merged.env = envMerged;
+  if (merged.timeout === undefined && defaultTimeout) merged.timeout = defaultTimeout;
+  return { entry: merged, changed: !sameJson(merged, existing) };
+}
+
+// Codex Desktop / OpenClaw .mcp.json style: { mcpServers: { 'huaweicloud-devkit': entry } }
+// Fresh entries keep the historical shape (no timeout field); user-set timeouts are preserved.
+export function mergeMcpServersFile(config, { mcpPath, env = {} } = {}) {
+  const existing = isPlainObject(config) ? config.mcpServers?.['huaweicloud-devkit'] : undefined;
+  const { entry, changed } = mergeArgsStyle(existing, { mcpPath, env, defaultTimeout: null });
+  const next = isPlainObject(config) ? { ...config } : {};
+  next.mcpServers = { ...(isPlainObject(config) ? config.mcpServers : {}), 'huaweicloud-devkit': entry };
+  return { entry, config: next, changed: changed || !isPlainObject(config) || !existing };
+}
+
+// Env keys the installer manages itself (recomputed on every install) — never
+// treated as user assets for backup purposes.
+const REQUIRED_ENV_KEYS = new Set(['HUAWEICLOUD_AGENT_TOOLKIT_MODE', 'HCLOUD_BIN']);
+
+// Extract the user-owned delta of an entry for backup before uninstall removes it.
+export function extractUserDelta(entry, style) {
+  if (!isPlainObject(entry)) return null;
+  const delta = {};
+  if (style === 'command') {
+    if (Array.isArray(entry.command) && entry.command.length > 2) delta.commandExtra = entry.command.slice(2);
+  } else if (style === 'args') {
+    if (Array.isArray(entry.args) && entry.args.length > 1) delta.argsExtra = entry.args.slice(1);
+  } else {
+    return null;
+  }
+  if (isPlainObject(entry.env)) {
+    const userEnv = Object.fromEntries(Object.entries(entry.env).filter(([key]) => !REQUIRED_ENV_KEYS.has(key)));
+    if (Object.keys(userEnv).length > 0) delta.env = userEnv;
+  }
+  if (entry.timeout !== undefined && entry.timeout !== 300000) delta.timeout = entry.timeout;
+  if (entry.enabled === false) delta.enabled = false;
+  return Object.keys(delta).length > 0 ? delta : null;
+}
+
+// Apply a previously saved delta onto a freshly written default entry.
+export function applyUserDelta(entry, delta, style) {
+  if (!isPlainObject(entry) || !isPlainObject(delta)) return entry;
+  const merged = { ...entry };
+  if (style === 'command' && Array.isArray(delta.commandExtra)) {
+    merged.command = [...entry.command, ...delta.commandExtra];
+  } else if (style === 'args' && Array.isArray(delta.argsExtra)) {
+    merged.args = [...entry.args, ...delta.argsExtra];
+  }
+  if (isPlainObject(delta.env)) {
+    merged.env = { ...(isPlainObject(entry.env) ? entry.env : {}), ...delta.env };
+  }
+  if (delta.timeout !== undefined) merged.timeout = delta.timeout;
+  if (delta.enabled === false) merged.enabled = false;
+  return merged;
+}

package/plugins/huaweicloud-core/src/setup-cli.mjs

@@ -36,6 +36,8 @@ import {
   getProxySettings,
 } from './proxy/proxy-config.mjs';
 import { removeKooCli, removeObsConfig } from './sandbox/uninstall-cleanup.mjs';
+import { mergeCommandStyle, mergeArgsStyle, extractUserDelta, applyUserDelta } from './mcp-config-merge.mjs';
+import { saveAgentDelta, takeAgentDelta, purgeBackup } from './mcp-config-backup.mjs';
 import { queryDistTagsFetch, determineTarget, semverCompare } from './update-check.mjs';
 import { getKooCliVersion, compareVersion, kooCliDownloadBase, KOO_CLI_BASE } from './koocli-version.mjs';
 import { findHcloudBin, hcloudProbeNextStep, probeHcloud } from './hcloud-probe.mjs';
@@ -261,15 +263,30 @@ function ensureOfficeaceMcpInSqlite() {
     const envJson = JSON.stringify(env);
 
     if (existing) {
-      if (existing.command === 'node' && existing.args_json === argsJson && existing.env_json === envJson) {
+      // Merge: keep user's extra args/env values, only correct program-owned fields (issue #615).
+      let existingArgs = [];
+      let existingEnv = [];
+      try {
+        existingArgs = JSON.parse(existing.args_json || '[]');
+        existingEnv = JSON.parse(existing.env_json || '[]');
+      } catch {}
+      const userArgs = Array.isArray(existingArgs) ? existingArgs.slice(1) : [];
+      // Start from the user's env and add our required keys only when absent (user values win).
+      const envMerged = [...(Array.isArray(existingEnv) ? existingEnv : [])];
+      for (const e of env) {
+        if (e && e.key && !envMerged.some((x) => x && x.key === e.key)) envMerged.push(e);
+      }
+      const nextArgsJson = JSON.stringify([mcpPath, ...userArgs]);
+      const nextEnvJson = JSON.stringify(envMerged);
+      if (existing.command === 'node' && existing.args_json === nextArgsJson && existing.env_json === nextEnvJson) {
         console.log(`  MCP config unchanged: ${dbPath}`);
         db.close();
         return true;
       }
       db.prepare(
         'UPDATE mcp_connectors SET command = ?, args_json = ?, env_json = ?, updated_at = ?, status = ?, enabled = 1 WHERE id = ?',
-      ).run('node', argsJson, envJson, now, 'disconnected', existing.id);
-      console.log(`  MCP config updated: ${dbPath}`);
+      ).run('node', nextArgsJson, nextEnvJson, now, 'disconnected', existing.id);
+      console.log(`  MCP config merged (user fields preserved): ${dbPath}`);
     } else {
       const ownerUserId = officeaceGetOwnerUserId();
       if (!ownerUserId) {
@@ -277,10 +294,16 @@ function ensureOfficeaceMcpInSqlite() {
         db.close();
         return false;
       }
+      // Restore user args saved by a previous uninstall (issue #615).
+      const officeaceDelta = takeAgentDelta('officeace');
+      const insertArgsJson =
+        officeaceDelta && Array.isArray(officeaceDelta.argsExtra)
+          ? JSON.stringify([mcpPath, ...officeaceDelta.argsExtra])
+          : argsJson;
       db.prepare(
         `INSERT INTO mcp_connectors (id, owner_user_id, type, name, normalized_name, transport, timeout_ms, command, args_json, env_json, enabled, status, created_at, updated_at, version, seeded)
          VALUES (?, ?, 'custom', 'huaweicloud-devkit', 'huaweicloud-devkit', 'stdio', 60000, 'node', ?, ?, 1, 'disconnected', ?, ?, 1, 0)`,
-      ).run(randomUUID(), ownerUserId, argsJson, envJson, now, now);
+      ).run(randomUUID(), ownerUserId, insertArgsJson, envJson, now, now);
       console.log(`  MCP config created: ${dbPath}`);
     }
     db.close();
@@ -302,6 +325,14 @@ function removeOfficeaceMcpFromSqlite() {
   let db;
   try {
     db = openOfficeaceDb();
+    // Back up user args before deleting the connector row (issue #615).
+    try {
+      const row = db.prepare("SELECT args_json FROM mcp_connectors WHERE name = 'huaweicloud-devkit'").get();
+      const parsed = row ? JSON.parse(row.args_json || '[]') : [];
+      if (Array.isArray(parsed) && parsed.length > 1) {
+        saveAgentDelta('officeace', { argsExtra: parsed.slice(1) });
+      }
+    } catch {}
     db.prepare(
       "DELETE FROM mcp_connector_tools WHERE connector_id IN (SELECT id FROM mcp_connectors WHERE name = 'huaweicloud-devkit')",
     ).run();
@@ -558,29 +589,68 @@ function updateOpenCodeConfig(pluginDir) {
       return;
     }
     const existing = config.mcp?.['huaweicloud-devkit'];
-    if (
-      existing &&
-      existing.type === 'local' &&
-      Array.isArray(existing.command) &&
-      existing.command[0] === 'node' &&
-      existing.command[1] === mcpPath &&
-      existing.timeout === 300000
-    ) {
+    const { entry, changed } = mergeCommandStyle(existing, { mcpPath });
+    if (existing && !changed) {
       console.log(`  OpenCode MCP config unchanged: ${configPath}`);
       return;
     }
+    if (existing && changed) {
+      config.mcp['huaweicloud-devkit'] = entry;
+      writeFileSync(configPath, JSON.stringify(config, null, 2));
+      console.log(`  OpenCode MCP config merged (user fields preserved): ${configPath}`);
+      return;
+    }
   }
   config.mcp = config.mcp || {};
-  config.mcp['huaweicloud-devkit'] = {
-    type: 'local',
-    command: ['node', mcpPath],
-    enabled: true,
-    timeout: 300000,
-  };
+  config.mcp['huaweicloud-devkit'] = mergeCommandStyle(undefined, { mcpPath }).entry;
+  // Restore user fields saved by a previous uninstall (issue #615).
+  const delta = takeAgentDelta('opencode');
+  if (delta) config.mcp['huaweicloud-devkit'] = applyUserDelta(config.mcp['huaweicloud-devkit'], delta, 'command');
   writeFileSync(configPath, JSON.stringify(config, null, 2));
   console.log(`  OpenCode config updated: ${configPath}`);
 }
 
+// Read-merge-write for pluginDir/.mcp.json (OpenClaw, Codex Desktop).
+// Preserves user extra args/env; restores a prior uninstall's backup on fresh install (issue #615).
+function writeMcpServersFile(pluginDest, mcpPath, agentKey) {
+  const configPath = join(pluginDest, '.mcp.json');
+  let config;
+  try {
+    config = existsSync(configPath) ? JSON.parse(readFileSync(configPath, 'utf8')) : undefined;
+  } catch {
+    config = undefined;
+  }
+  const existing = config && typeof config === 'object' ? config.mcpServers?.['huaweicloud-devkit'] : undefined;
+  const { entry, changed } = mergeArgsStyle(existing, {
+    mcpPath,
+    env: { HUAWEICLOUD_AGENT_TOOLKIT_MODE: 'local' },
+    defaultTimeout: null,
+  });
+  if (existing && !changed) {
+    console.log(`  MCP Config unchanged: ${configPath}`);
+    return;
+  }
+  const next = config && typeof config === 'object' && !Array.isArray(config) ? { ...config } : {};
+  next.mcpServers = { ...(config && typeof config === 'object' ? config.mcpServers : {}), 'huaweicloud-devkit': entry };
+  if (!existing) {
+    const delta = takeAgentDelta(agentKey);
+    if (delta)
+      next.mcpServers['huaweicloud-devkit'] = applyUserDelta(next.mcpServers['huaweicloud-devkit'], delta, 'args');
+  }
+  writeFileSync(configPath, JSON.stringify(next, null, 2));
+  console.log(`  MCP Config -> ${configPath}`);
+}
+
+// Back up the user delta from a pluginDir/.mcp.json before the directory is removed (issue #615).
+function backupDeltaFromMcpServersFile(pluginDest, agentKey) {
+  const configPath = join(pluginDest, '.mcp.json');
+  try {
+    const config = JSON.parse(readFileSync(configPath, 'utf8'));
+    const delta = extractUserDelta(config?.mcpServers?.['huaweicloud-devkit'], 'args');
+    if (delta) saveAgentDelta(agentKey, delta);
+  } catch {}
+}
+
 function removeOpenCodeConfig() {
   const configPath = opencodeConfigFile();
   if (!existsSync(configPath)) return;
@@ -591,6 +661,9 @@ function removeOpenCodeConfig() {
     return;
   }
   if (!config.mcp?.['huaweicloud-devkit']) return;
+  // Back up user-customized fields before removal so a later reinstall can restore them (issue #615).
+  const delta = extractUserDelta(config.mcp['huaweicloud-devkit'], 'command');
+  if (delta) saveAgentDelta('opencode', delta);
   delete config.mcp['huaweicloud-devkit'];
   if (Object.keys(config.mcp).length === 0) delete config.mcp;
   writeFileSync(configPath, JSON.stringify(config, null, 2));
@@ -920,17 +993,7 @@ async function installOpenClaw() {
   console.log(`  Safety Policy -> ${join(pluginDest, 'safety')}`);
 
   const mcpServerAbsPath = join(pluginDest, 'src', 'mcp-server.mjs').replace(/\\/g, '/');
-  const mcpConfig = {
-    mcpServers: {
-      'huaweicloud-devkit': {
-        command: 'node',
-        args: [mcpServerAbsPath],
-        env: { HUAWEICLOUD_AGENT_TOOLKIT_MODE: 'local' },
-      },
-    },
-  };
-  writeFileSync(join(pluginDest, '.mcp.json'), JSON.stringify(mcpConfig, null, 2));
-  console.log(`  MCP Config -> ${join(pluginDest, '.mcp.json')}`);
+  writeMcpServersFile(pluginDest, mcpServerAbsPath, 'openclaw');
 
   const codexPluginSrc = join(PLUGIN_ROOT, '.codex-plugin');
   if (existsSync(codexPluginSrc)) {
@@ -967,6 +1030,7 @@ function uninstallOpenClaw() {
     if (cmdRemoved > 0) console.log(`  Removed ${cmdRemoved} commands`);
   }
 
+  backupDeltaFromMcpServersFile(openclawPluginsDir(), 'openclaw');
   if (removeIfExists(openclawPluginsDir())) {
     console.log('  Removed MCP server and safety policy');
   }
@@ -991,17 +1055,7 @@ async function updateOpenClaw() {
   console.log(`  Safety Policy updated -> ${join(pluginDest, 'safety')}`);
 
   const mcpServerAbsPath = join(pluginDest, 'src', 'mcp-server.mjs').replace(/\\/g, '/');
-  const mcpConfig = {
-    mcpServers: {
-      'huaweicloud-devkit': {
-        command: 'node',
-        args: [mcpServerAbsPath],
-        env: { HUAWEICLOUD_AGENT_TOOLKIT_MODE: 'local' },
-      },
-    },
-  };
-  writeFileSync(join(pluginDest, '.mcp.json'), JSON.stringify(mcpConfig, null, 2));
-  console.log(`  MCP Config updated -> ${join(pluginDest, '.mcp.json')}`);
+  writeMcpServersFile(pluginDest, mcpServerAbsPath, 'openclaw');
 
   const codexPluginSrc = join(PLUGIN_ROOT, '.codex-plugin');
   if (existsSync(codexPluginSrc)) {
@@ -1039,17 +1093,7 @@ async function installCodexDesktop() {
 
   // Generate .mcp.json for Codex plugin MCP server discovery
   const mcpServerAbsPath = join(pluginDest, 'src', 'mcp-server.mjs').replace(/\\/g, '/');
-  const mcpConfig = {
-    mcpServers: {
-      'huaweicloud-devkit': {
-        command: 'node',
-        args: [mcpServerAbsPath],
-        env: { HUAWEICLOUD_AGENT_TOOLKIT_MODE: 'local' },
-      },
-    },
-  };
-  writeFileSync(join(pluginDest, '.mcp.json'), JSON.stringify(mcpConfig, null, 2));
-  console.log(`  MCP Config -> ${join(pluginDest, '.mcp.json')}`);
+  writeMcpServersFile(pluginDest, mcpServerAbsPath, 'codex-desktop');
 
   // Copy .codex-plugin manifest for Codex Desktop plugin registration
   const codexPluginSrc = join(PLUGIN_ROOT, '.codex-plugin');
@@ -1106,17 +1150,7 @@ async function updateCodexDesktop() {
   }
 
   const mcpServerAbsPath = join(pluginDest, 'src', 'mcp-server.mjs').replace(/\\/g, '/');
-  const mcpConfig = {
-    mcpServers: {
-      'huaweicloud-devkit': {
-        command: 'node',
-        args: [mcpServerAbsPath],
-        env: { HUAWEICLOUD_AGENT_TOOLKIT_MODE: 'local' },
-      },
-    },
-  };
-  writeFileSync(join(pluginDest, '.mcp.json'), JSON.stringify(mcpConfig, null, 2));
-  console.log(`  MCP Config updated -> ${join(pluginDest, '.mcp.json')}`);
+  writeMcpServersFile(pluginDest, mcpServerAbsPath, 'codex-desktop');
 
   const codexPluginSrc = join(PLUGIN_ROOT, '.codex-plugin');
   if (existsSync(codexPluginSrc)) {
@@ -1155,6 +1189,7 @@ function uninstallCodexDesktop() {
     if (cmdRemoved > 0) console.log(`  Removed ${cmdRemoved} commands`);
   }
 
+  backupDeltaFromMcpServersFile(pluginDest, 'codex-desktop');
   if (removeIfExists(pluginDest)) {
     console.log('  Removed MCP server and safety policy');
   }
@@ -1185,10 +1220,13 @@ function uninstallCodexDesktop() {
   }
 }
 
-function registerCodeartsMcp(configPath) {
+function registerCodeartsMcp(configPath, agentKey = 'codearts') {
   const mcpPath = join(codeartsPluginsDir(), 'src', 'mcp-server.mjs').replace(/\\/g, '/');
   const hcloudBin = findHcloudBin();
+  const env = { HUAWEICLOUD_AGENT_TOOLKIT_MODE: 'local' };
+  if (hcloudBin) env.HCLOUD_BIN = hcloudBin.replace(/\\/g, '/');
   let config = {};
+  let existing;
   if (existsSync(configPath)) {
     try {
       config = JSON.parse(readFileSync(configPath, 'utf8'));
@@ -1198,51 +1236,27 @@ function registerCodeartsMcp(configPath) {
       );
       return;
     }
-    const existing = config.mcpServers?.['huaweicloud-devkit'];
-    if (
-      existing &&
-      existing.command === 'node' &&
-      Array.isArray(existing.args) &&
-      existing.args[0] === mcpPath &&
-      existing.timeout === 300000
-    ) {
-      let changed = false;
-      if (!existing.env) {
-        existing.env = {};
-        changed = true;
-      }
-      if (!existing.env.HUAWEICLOUD_AGENT_TOOLKIT_MODE) {
-        existing.env.HUAWEICLOUD_AGENT_TOOLKIT_MODE = 'local';
-        changed = true;
-      }
-      if (hcloudBin && !existing.env.HCLOUD_BIN) {
-        existing.env.HCLOUD_BIN = hcloudBin.replace(/\\/g, '/');
-        changed = true;
-      }
-      if (existing.enabled !== true) {
-        existing.enabled = true;
-        changed = true;
-      }
-      if (changed) {
-        mkdirSync(dirname(configPath), { recursive: true });
-        writeFileSync(configPath, JSON.stringify(config, null, 2));
-        console.log(`  MCP config refreshed: ${configPath}`);
-      } else {
+    existing = config.mcpServers?.['huaweicloud-devkit'];
+    if (existing) {
+      const { entry, changed } = mergeArgsStyle(existing, { mcpPath, env });
+      if (!changed) {
         console.log(`  MCP config unchanged: ${configPath}`);
+        return;
       }
+      config.mcpServers['huaweicloud-devkit'] = entry;
+      mkdirSync(dirname(configPath), { recursive: true });
+      writeFileSync(configPath, JSON.stringify(config, null, 2));
+      console.log(`  MCP config merged (user fields preserved): ${configPath}`);
       return;
     }
   }
   config.mcpServers = config.mcpServers || {};
-  const env = { HUAWEICLOUD_AGENT_TOOLKIT_MODE: 'local' };
-  if (hcloudBin) env.HCLOUD_BIN = hcloudBin.replace(/\\/g, '/');
-  config.mcpServers['huaweicloud-devkit'] = {
-    command: 'node',
-    args: [mcpPath],
-    env,
-    enabled: true,
-    timeout: 300000,
-  };
+  let entry = mergeArgsStyle(undefined, { mcpPath, env }).entry;
+  entry.enabled = true;
+  // Restore user fields saved by a previous uninstall (issue #615).
+  const delta = takeAgentDelta(agentKey);
+  if (delta) entry = applyUserDelta(entry, delta, 'args');
+  config.mcpServers['huaweicloud-devkit'] = entry;
   mkdirSync(dirname(configPath), { recursive: true });
   writeFileSync(configPath, JSON.stringify(config, null, 2));
   console.log(`  MCP config updated: ${configPath}`);
@@ -1336,6 +1350,8 @@ function uninstallCodeArts() {
       config = JSON.parse(readFileSync(configPath, 'utf8'));
     } catch {}
     if (config.mcpServers?.['huaweicloud-devkit']) {
+      const delta = extractUserDelta(config.mcpServers['huaweicloud-devkit'], 'args');
+      if (delta) saveAgentDelta('codearts', delta);
       delete config.mcpServers['huaweicloud-devkit'];
       if (Object.keys(config.mcpServers).length === 0) delete config.mcpServers;
       writeFileSync(configPath, JSON.stringify(config, null, 2));
@@ -1392,31 +1408,44 @@ function registerCodeartsWorkMcp() {
       return;
     }
     const existing = config.mcp?.['huaweicloud-devkit'];
-    if (
-      existing &&
-      existing.type === 'local' &&
-      Array.isArray(existing.command) &&
-      existing.command[0] === 'node' &&
-      existing.command[1] === mcpPath &&
-      existing.timeout === 300000
-    ) {
-      console.log(`  MCP config unchanged: ${configPath}`);
+    if (existing) {
+      // codearts-work uses `command` array + `environment` naming; adapt via mergeCommandStyle.
+      const { entry, changed } = mergeCommandStyle(existing, { mcpPath });
+      if (!changed) {
+        console.log(`  MCP config unchanged: ${configPath}`);
+        return;
+      }
+      const merged = { ...entry };
+      merged.environment = {
+        ...(isPlainLocal(existing.environment) ? existing.environment : {}),
+        HUAWEICLOUD_AGENT_TOOLKIT_MODE: 'local',
+      };
+      if (hcloudBin && merged.environment.HCLOUD_BIN === undefined) {
+        merged.environment.HCLOUD_BIN = hcloudBin.replace(/\\/g, '/');
+      }
+      config.mcp['huaweicloud-devkit'] = merged;
+      mkdirSync(dirname(configPath), { recursive: true });
+      writeFileSync(configPath, JSON.stringify(config, null, 2));
+      console.log(`  MCP config merged (user fields preserved): ${configPath}`);
       return;
     }
   }
   config.mcp = config.mcp || {};
-  config.mcp['huaweicloud-devkit'] = {
-    type: 'local',
-    command: ['node', mcpPath],
-    environment,
-    enabled: true,
-    timeout: 300000,
-  };
+  let entry = mergeCommandStyle(undefined, { mcpPath }).entry;
+  entry.environment = { ...environment };
+  // Restore user fields saved by a previous uninstall (issue #615).
+  const delta = takeAgentDelta('codearts-work');
+  if (delta) entry = applyUserDelta(entry, delta, 'command');
+  config.mcp['huaweicloud-devkit'] = entry;
   mkdirSync(dirname(configPath), { recursive: true });
   writeFileSync(configPath, JSON.stringify(config, null, 2));
   console.log(`  MCP config updated: ${configPath}`);
 }
 
+function isPlainLocal(value) {
+  return Boolean(value) && typeof value === 'object' && !Array.isArray(value);
+}
+
 async function installCodeArtsWork() {
   const skillsSrc = join(PLUGIN_ROOT, 'skills');
   const srcDir = join(PLUGIN_ROOT, 'src');
@@ -1477,6 +1506,8 @@ function uninstallCodeArtsWork() {
       config = JSON.parse(readFileSync(configPath, 'utf8'));
     } catch {}
     if (config.mcp?.['huaweicloud-devkit']) {
+      const delta = extractUserDelta(config.mcp['huaweicloud-devkit'], 'command');
+      if (delta) saveAgentDelta('codearts-work', delta);
       delete config.mcp['huaweicloud-devkit'];
       if (Object.keys(config.mcp).length === 0) delete config.mcp;
       writeFileSync(configPath, JSON.stringify(config, null, 2));
@@ -1532,24 +1563,25 @@ function ensureWorkbuddyMcpConfig() {
       return false;
     }
     const existing = config.mcpServers?.['huaweicloud-devkit'];
-    if (
-      existing &&
-      existing.command === 'node' &&
-      Array.isArray(existing.args) &&
-      existing.args[0] === mcpPath &&
-      existing.timeout === 300000
-    ) {
-      console.log(`  MCP config unchanged: ${configPath}`);
-      return false;
+    if (existing) {
+      const { entry, changed } = mergeArgsStyle(existing, { mcpPath, env });
+      if (!changed) {
+        console.log(`  MCP config unchanged: ${configPath}`);
+        return false;
+      }
+      config.mcpServers['huaweicloud-devkit'] = entry;
+      mkdirSync(dirname(configPath), { recursive: true });
+      writeFileSync(configPath, JSON.stringify(config, null, 2));
+      console.log(`  MCP config merged (user fields preserved): ${configPath}`);
+      return true;
     }
   }
   config.mcpServers = config.mcpServers || {};
-  config.mcpServers['huaweicloud-devkit'] = {
-    command: 'node',
-    args: [mcpPath],
-    env,
-    timeout: 300000,
-  };
+  let entry = mergeArgsStyle(undefined, { mcpPath, env }).entry;
+  // Restore user fields saved by a previous uninstall (issue #615).
+  const delta = takeAgentDelta('workbuddy');
+  if (delta) entry = applyUserDelta(entry, delta, 'args');
+  config.mcpServers['huaweicloud-devkit'] = entry;
   mkdirSync(dirname(configPath), { recursive: true });
   writeFileSync(configPath, JSON.stringify(config, null, 2));
   console.log(`  MCP config updated: ${configPath}`);
@@ -1762,6 +1794,8 @@ function uninstallWorkBuddy() {
       config = JSON.parse(readFileSync(configPath, 'utf8'));
     } catch {}
     if (config.mcpServers?.['huaweicloud-devkit']) {
+      const delta = extractUserDelta(config.mcpServers['huaweicloud-devkit'], 'args');
+      if (delta) saveAgentDelta('workbuddy', delta);
       delete config.mcpServers['huaweicloud-devkit'];
       if (Object.keys(config.mcpServers).length === 0) delete config.mcpServers;
       writeFileSync(configPath, JSON.stringify(config, null, 2));
@@ -1861,24 +1895,25 @@ function ensureAtomcodeMcpConfig() {
       return false;
     }
     const existing = config.mcpServers?.['huaweicloud-devkit'];
-    if (
-      existing &&
-      existing.command === 'node' &&
-      Array.isArray(existing.args) &&
-      existing.args[0] === mcpPath &&
-      existing.timeout === 300000
-    ) {
-      console.log(`  MCP config unchanged: ${configPath}`);
-      return false;
+    if (existing) {
+      const { entry, changed } = mergeArgsStyle(existing, { mcpPath, env });
+      if (!changed) {
+        console.log(`  MCP config unchanged: ${configPath}`);
+        return false;
+      }
+      config.mcpServers['huaweicloud-devkit'] = entry;
+      mkdirSync(dirname(configPath), { recursive: true });
+      writeFileSync(configPath, JSON.stringify(config, null, 2));
+      console.log(`  MCP config merged (user fields preserved): ${configPath}`);
+      return true;
     }
   }
   config.mcpServers = config.mcpServers || {};
-  config.mcpServers['huaweicloud-devkit'] = {
-    command: 'node',
-    args: [mcpPath],
-    env,
-    timeout: 300000,
-  };
+  let entry = mergeArgsStyle(undefined, { mcpPath, env }).entry;
+  // Restore user fields saved by a previous uninstall (issue #615).
+  const delta = takeAgentDelta('atomcode');
+  if (delta) entry = applyUserDelta(entry, delta, 'args');
+  config.mcpServers['huaweicloud-devkit'] = entry;
   mkdirSync(dirname(configPath), { recursive: true });
   writeFileSync(configPath, JSON.stringify(config, null, 2));
   console.log(`  MCP config updated: ${configPath}`);
@@ -1951,6 +1986,8 @@ function uninstallAtomCode() {
       config = JSON.parse(readFileSync(configPath, 'utf8'));
     } catch {}
     if (config.mcpServers?.['huaweicloud-devkit']) {
+      const delta = extractUserDelta(config.mcpServers['huaweicloud-devkit'], 'args');
+      if (delta) saveAgentDelta('atomcode', delta);
       delete config.mcpServers['huaweicloud-devkit'];
       if (Object.keys(config.mcpServers).length === 0) delete config.mcpServers;
       writeFileSync(configPath, JSON.stringify(config, null, 2));
@@ -2478,7 +2515,6 @@ function ensureHermesMcpConfig() {
   if (hcloudBin) {
     blockLines.push(`      HCLOUD_BIN: "${hcloudBin.replace(/\\/g, '/')}"`);
   }
-  const block = blockLines.join('\n');
 
   let existing = '';
   if (existsSync(configPath)) {
@@ -2486,10 +2522,15 @@ function ensureHermesMcpConfig() {
       existing = readFileSync(configPath, 'utf8');
     } catch {}
     if (existing.includes('mcp_servers:') && existing.includes('huaweicloud-devkit')) {
-      if (existing.includes(`args: ["${mcpPath}"]`)) {
+      // Preserve user's extra args (e.g. --hdkitservice-endpoint) when rewriting the block (issue #615).
+      const argsMatch = existing.match(/^\s*huaweicloud-devkit\s*:[\s\S]*?^\s*args:\s*\[[^\]]*\]\s*$/m);
+      const extrasMatch = argsMatch ? argsMatch[0].match(/args:\s*\[".*?"(.*)\]/) : null;
+      const extras = extrasMatch && extrasMatch[1].trim() ? extrasMatch[1].replace(/,\s*$/, '') : '';
+      if (existing.includes(`args: ["${mcpPath}"${extras}]`)) {
         console.log(`  MCP config unchanged: ${configPath}`);
         return false;
       }
+      if (extras) blockLines[3] = `    args: ["${mcpPath}"${extras}]`;
       removeHermesMcpConfigBlock();
       existing = '';
       if (existsSync(configPath)) {
@@ -2500,7 +2541,14 @@ function ensureHermesMcpConfig() {
     }
   }
   mkdirSync(dirname(configPath), { recursive: true });
-  const newContent = existing ? `${existing.trimEnd()}\n\n${block}\n` : `${block}\n`;
+  // Restore user args saved by a previous uninstall (issue #615).
+  const hermesDelta = takeAgentDelta('hermes');
+  if (hermesDelta && Array.isArray(hermesDelta.argsExtra) && hermesDelta.argsExtra.length > 0) {
+    const extras = hermesDelta.argsExtra.map((a) => `"${String(a)}"`).join(', ');
+    blockLines[3] = `    args: ["${mcpPath}", ${extras}]`;
+  }
+  const newBlock = blockLines.join('\n');
+  const newContent = existing ? `${existing.trimEnd()}\n\n${newBlock}\n` : `${newBlock}\n`;
   writeFileSync(configPath, newContent);
   console.log(`  MCP config updated: ${configPath}`);
   return true;
@@ -2917,7 +2965,25 @@ function uninstallHermes() {
     }
   }
 
-  // 3. Remove MCP config from config.yaml
+  // 3. Remove MCP config from config.yaml (back up user args first, issue #615)
+  const hermesConfig = hermesConfigFile();
+  if (existsSync(hermesConfig)) {
+    try {
+      const text = readFileSync(hermesConfig, 'utf8');
+      const argsLine = text.match(/^\s*args:\s*\[([^\]]*)\]\s*$/m);
+      if (argsLine) {
+        let parsed;
+        try {
+          parsed = JSON.parse(`[${argsLine[1].replace(/'/g, '"')}]`);
+        } catch {
+          parsed = null;
+        }
+        if (Array.isArray(parsed) && parsed.length > 1) {
+          saveAgentDelta('hermes', { argsExtra: parsed.slice(1) });
+        }
+      }
+    } catch {}
+  }
   removeHermesMcpConfigBlock();
   console.log('  MCP config removed');
 
@@ -3583,6 +3649,10 @@ async function cmdUninstall() {
     if (removeIfExists(vaultPath)) {
       console.log('  Removed credential vault');
     }
+    // Full uninstall also discards any saved MCP config backups (issue #615).
+    if (purgeBackup()) {
+      console.log('  Removed MCP config backup');
+    }
     const vaultDir = dirname(vaultPath);
     try {
       if (existsSync(vaultDir) && readdirSync(vaultDir).length === 0) {

package/plugins/huaweicloud-core/src/tools.mjs

@@ -4,6 +4,7 @@ import { fileURLToPath } from 'node:url';
 import { homedir, tmpdir } from 'node:os';
 import { spawnSync, execFile } from 'node:child_process';
 import { promisify } from 'node:util';
+import { createHmac, createHash } from 'node:crypto';
 
 import { evaluateArtifacts, evaluateCommandRisk, evaluateDeployPlan } from './risk-rule-engine.mjs';
 import { classifyTextCommand, redactSecrets } from './safety-policy.mjs';
@@ -48,6 +49,7 @@ import {
   resolveCredentialsWithRuntime,
 } from './auth/credentials.mjs';
 import { trackToolInvoke, trackSkillRetrieve, clearUserHash } from './telemetry/telemetry.mjs';
+import { fetchWithProxy } from './proxy/proxy-agent.mjs';
 import { fingerprint, runHcloudConfigure, resolveManagedProfile } from './auth/reconcile.mjs';
 import {
   getCachedUpdateInfo,
@@ -846,6 +848,32 @@ export const TOOL_DEFINITIONS = [
       },
     },
   },
+  {
+    name: 'huaweicloud_obs_set_website_config',
+    description:
+      '配置 OBS 桶的静态网站托管。KooCLI OBS 不支持 SetBucketWebsite API，此工具内部实现 AWS4 签名调用 OBS REST API，屏蔽签名细节。支持 set（配置）、get（查询）、delete（删除）三种操作。操作前需确保桶已创建且已设置 public-read ACL。',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        action: {
+          type: 'string',
+          enum: ['set', 'get', 'delete'],
+          description: '操作类型：set=配置静态网站托管，get=查询当前配置，delete=删除配置',
+        },
+        bucket: { type: 'string', description: 'OBS 桶名称' },
+        region: { type: 'string', description: 'OBS 桶所在区域，如 cn-north-4' },
+        indexDocument: {
+          type: 'string',
+          description: '首页文件名（action=set 时必填），如 index.html',
+        },
+        errorDocument: {
+          type: 'string',
+          description: '错误页面文件名（action=set 时可选），如 404.html 或 error.html',
+        },
+      },
+      required: ['action', 'bucket', 'region'],
+    },
+  },
 ];
 
 function toolInvokeValue(name, args) {
@@ -1448,19 +1476,26 @@ export async function callTool(name, rawArgs = {}, opts = {}) {
     case 'huaweicloud_voucher_claim':
       return await hdkitVoucherClaim(args.domain_id);
     case 'huaweicloud_check_update':
-      return await handleCheckUpdate(args, { sessionId: opts?.sessionId });
+      return await handleCheckUpdate(args, { sessionId: opts?.sessionId, doQuery: opts?.doQuery });
     case 'huaweicloud_upgrade':
       return await handleUpgrade(args, { sessionId: opts?.sessionId });
+    case 'huaweicloud_obs_set_website_config':
+      return await handleObsWebsiteConfig(args);
     default:
       throw new Error(`Unknown tool: ${name}`);
   }
 }
 
 async function handleCheckUpdate(args = {}, opts = {}) {
-  const sessionId = opts?.sessionId || null;
+  const { sessionId = null, doQuery } = opts;
   const current = readInstalledVersion() || '0.0.0';
   if (args.dismiss === true) {
-    const distTags = await getUpdateDistTags(current, { sessionId });
+    const distTags = await getUpdateDistTags(current, { sessionId, doQuery });
+    if (!distTags) {
+      // 查询失败：不降级为 current 冷却、不写 skip，返回 check_failed。
+      // 不调 invalidateUpdateCache()，以保留 failedAt 的 5 分钟失败节流。
+      return judgeUpdate(current, null, null);
+    }
     const target = determineTarget(current, distTags);
     const dismissedVersion =
       typeof args.dismissVersion === 'string' && args.dismissVersion ? args.dismissVersion : target || current;
@@ -1468,7 +1503,7 @@ async function handleCheckUpdate(args = {}, opts = {}) {
     invalidateUpdateCache();
     return judgeUpdate(current, distTags, state);
   }
-  return getCachedUpdateInfo(current, { sessionId });
+  return getCachedUpdateInfo(current, { sessionId, doQuery });
 }
 
 async function handleUpgrade(args = {}, opts = {}) {
@@ -2255,3 +2290,112 @@ async function getRegionalAvailability(service, region) {
 export function classifyRawCommand(command) {
   return classifyTextCommand(command);
 }
+
+// ── OBS Static Website Hosting (AWS4 signed REST API) ──
+
+async function handleObsWebsiteConfig(args) {
+  const { action, bucket, region, indexDocument, errorDocument } = args;
+  if (!bucket || !region) {
+    throw new Error('bucket and region are required');
+  }
+  const creds = resolveCredentialsWithRuntime({});
+  if (!creds?.ak || !creds?.sk) {
+    throw new Error('OBS website config requires AK/SK credentials. Run huaweicloud_auth_init first.');
+  }
+
+  const host = `${bucket}.obs.${region}.myhuaweicloud.com`;
+  const endpoint = `https://${host}`;
+
+  if (action === 'get') {
+    const res = await obsSignedRequest('GET', endpoint, '/?website', '', creds, region);
+    return { ok: res.status === 200, status: res.status, body: res.body };
+  }
+
+  if (action === 'delete') {
+    const res = await obsSignedRequest('DELETE', endpoint, '/?website', '', creds, region);
+    return { ok: res.status === 204, status: res.status };
+  }
+
+  if (action === 'set') {
+    if (!indexDocument) {
+      throw new Error('indexDocument is required for action=set');
+    }
+    const xmlParts = ['<WebsiteConfiguration>', `  <IndexDocument><Suffix>${indexDocument}</Suffix></IndexDocument>`];
+    if (errorDocument) {
+      xmlParts.push(`  <ErrorDocument><Key>${errorDocument}</Key></ErrorDocument>`);
+    }
+    xmlParts.push('</WebsiteConfiguration>');
+    const body = xmlParts.join('\n');
+    const res = await obsSignedRequest('PUT', endpoint, '/?website', body, creds, region);
+    const websiteUrl = `http://${bucket}.obs-website.${region}.myhuaweicloud.com`;
+    return {
+      ok: res.status === 200,
+      status: res.status,
+      websiteUrl,
+      message:
+        res.status === 200
+          ? `Static website hosting configured. Website URL: ${websiteUrl} (may take ~1 min to propagate)`
+          : `Failed to configure website: HTTP ${res.status}`,
+    };
+  }
+
+  throw new Error(`Unknown action: ${action}. Use set, get, or delete.`);
+}
+
+async function obsSignedRequest(method, endpoint, pathAndQuery, body, creds, region) {
+  const now = new Date();
+  const dateStamp = now.toISOString().slice(0, 10).replace(/-/g, '');
+  const amzDate = dateStamp + 'T' + now.toISOString().slice(11, 19).replace(/:/g, '') + 'Z';
+  const payloadHash = createHash('sha256').update(body).digest('hex');
+
+  const url = new URL(endpoint + pathAndQuery);
+  const canonicalUri = '/';
+  const canonicalQueryString = 'website=';
+  const canonicalHeaders = `host:${url.host}\n` + `x-amz-content-sha256:${payloadHash}\n` + `x-amz-date:${amzDate}\n`;
+  const signedHeaders = 'host;x-amz-content-sha256;x-amz-date';
+  const canonicalRequest = [
+    method,
+    canonicalUri,
+    canonicalQueryString,
+    canonicalHeaders,
+    signedHeaders,
+    payloadHash,
+  ].join('\n');
+
+  const credentialScope = `${dateStamp}/${region}/s3/aws4_request`;
+  const stringToSign = [
+    'AWS4-HMAC-SHA256',
+    amzDate,
+    credentialScope,
+    createHash('sha256').update(canonicalRequest).digest('hex'),
+  ].join('\n');
+
+  const kDate = createHmac('sha256', 'AWS4' + creds.sk)
+    .update(dateStamp)
+    .digest();
+  const kRegion = createHmac('sha256', kDate).update(region).digest();
+  const kService = createHmac('sha256', kRegion).update('s3').digest();
+  const kSigning = createHmac('sha256', kService).update('aws4_request').digest();
+  const signature = createHmac('sha256', kSigning).update(stringToSign).digest('hex');
+
+  const authorization =
+    `AWS4-HMAC-SHA256 Credential=${creds.ak}/${credentialScope}, ` +
+    `SignedHeaders=${signedHeaders}, Signature=${signature}`;
+
+  const headers = {
+    Host: url.host,
+    'x-amz-content-sha256': payloadHash,
+    'x-amz-date': amzDate,
+    Authorization: authorization,
+  };
+  if (body) headers['Content-Type'] = 'application/xml';
+  if (creds.securityToken) headers['x-amz-security-token'] = creds.securityToken;
+
+  const res = await fetchWithProxy(endpoint + pathAndQuery, {
+    method,
+    headers,
+    body: body || undefined,
+  });
+  const resBody = await res.text();
+  return { status: res.status, body: resBody };
+}

package/plugins/huaweicloud-core/src/update-check.mjs

@@ -114,6 +114,10 @@ export function judgeUpdate(current, distTags, skipState, now = Date.now()) {
   if (!distTags) {
     return buildResult(current, null, { result: 'check_failed', note: '检测失败，不影响使用' });
   }
+  // truthy 但无有效版本（如 failure 折叠后的 { latest:null, next:null }）同样视为检测失败
+  if (!distTags.latest && !distTags.next) {
+    return buildResult(current, null, { result: 'check_failed', note: '检测失败，不影响使用' });
+  }
   const target = determineTarget(current, distTags);
   if (!target || semverCompare(target, current) <= 0) {
     return buildResult(current, distTags, { result: 'up_to_date', target: target ?? null });
@@ -348,9 +352,9 @@ export function peekCachedUpdateInfo() {
   return lastHint && lastHint.updateAvailable && lastHint.targetVersion ? lastHint : null;
 }
 
-export async function getUpdateDistTags(current, { sessionId = null } = {}) {
-  const result = await getCachedUpdateInfo(current, { sessionId });
-  if (!result) return null;
+export async function getUpdateDistTags(current, { sessionId = null, doQuery } = {}) {
+  const result = await getCachedUpdateInfo(current, { sessionId, doQuery });
+  if (!result || result.result === 'check_failed') return null;
   return { latest: result.latestStable ?? null, next: result.latestNext ?? null };
 }