huaweicloud-devkit 1.1.7-next.0 → 1.1.7-next.2

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "huaweicloud-devkit",
   "mcpName": "io.github.huaweicloud/huaweicloud-devkit",
-  "version": "1.1.7-next.0",
+  "version": "1.1.7-next.2",
   "kooCliVersion": "7.2.12",
   "description": "Agent toolkit that helps coding agents use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities safely and accurately.",
   "type": "module",

package/plugins/huaweicloud-core/.claude-plugin/plugin.json

@@ -17,7 +17,7 @@
   "mcpServers": "./.mcp.json",
   "description": "Guide coding agents to use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities with safer execution and less context.",
   "skills": "./skills/",
-  "version": "1.1.7-next.0",
+  "version": "1.1.7-next.2",
   "author": {
     "name": "HuaweiCloud Mate",
     "url": "https://github.com/huaweicloud"

package/plugins/huaweicloud-core/.codex-plugin/plugin.json

@@ -20,7 +20,7 @@
   "mcpServers": "./.mcp.json",
   "description": "Agent toolkit that helps coding agents use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities safely and accurately.",
   "skills": "./skills/",
-  "version": "1.1.7-next.0",
+  "version": "1.1.7-next.2",
   "author": {
     "name": "HuaweiCloud Mate",
     "url": "https://github.com/huaweicloud"

package/plugins/huaweicloud-core/.cursor-plugin/plugin.json

@@ -17,7 +17,7 @@
   "mcpServers": "./.mcp.json",
   "description": "Guide coding agents to use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities with safer execution and less context.",
   "skills": "./skills/",
-  "version": "1.1.7-next.0",
+  "version": "1.1.7-next.2",
   "author": {
     "name": "HuaweiCloud Mate",
     "url": "https://github.com/huaweicloud"

package/plugins/huaweicloud-core/.hermes-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "huaweicloud-devkit",
-  "version": "1.1.7-next.0",
+  "version": "1.1.7-next.2",
   "description": "Guide coding agents to use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities with safer execution and less context.",
   "author": {
     "name": "HuaweiCloud Mate",

package/plugins/huaweicloud-core/.workbuddy-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "huaweicloud-devkit",
-  "version": "1.1.7-next.0",
+  "version": "1.1.7-next.2",
   "description": "Guide coding agents to use Huawei Cloud Skills, KooCLI, APIs, SDKs, and future MCP capabilities with safer execution and less context.",
   "author": {
     "name": "HuaweiCloud Mate",

package/plugins/huaweicloud-core/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "name": "huaweicloud-devkit",
   "id": "huaweicloud-devkit",
   "displayName": "HuaweiCloud DevKit",
-  "version": "1.1.7-next.0",
+  "version": "1.1.7-next.2",
   "family": "bundle-plugin",
   "bundleFormat": "codex",
   "description": "Guide coding agents to use Huawei Cloud safely — KooCLI, APIs, SDKs, 28 MCP tools, skills, and safety guardrails.",

package/plugins/huaweicloud-core/skills/huawei-sandbox/SKILL.md

@@ -264,32 +264,45 @@ fi
 - **Old tunnels do not survive the upgrade**: 0.1.x-created tunnels are not registered on the s2 gateway — always rebuild the tunnel after upgrading (the expose flow below does this via pre-cleanup).
 - If `10006: quota exceeded` appears after upgrading, stale pre-upgrade tunnels still count against the quota — `devbridge delete-all` and retry.
 
-### Step 1: Authenticate with an API Key (0.2.x removed AK/SK login)
+### Step 1: Authenticate — probe the build's auth capability first
 
-devbridge 0.2.x removed `--access-key/--secret-key/--huaweicloud`. The only non-interactive auth is a DevBridge API Key. AK/SK (`/tmp/hw_creds.sh`) remains valid for hcloud, but not for devbridge.
+`0.2.2-release` ships as **two different builds** with identical version strings:
 
-**Check, then login if the key exists** (the API Key is a long-lived account-level credential stored in its own file `/tmp/hw_api_key`, separate from the temporary AK/SK in `/tmp/hw_creds.sh` — never echo its value):
+- **Image builds** (sandboxes created 2026-09+): retain AK/SK login (`--access-key/--secret-key`) AND auto-read `HW_ACCESS_KEY`/`HW_SECRET_KEY` env vars — fully automatic, no API Key needed.
+- **Release builds** (GitHub/GitCode downloads, incl. the Step 0 upgrade artifact): AK/SK removed, only API Key works.
+
+Version numbers cannot distinguish them — **probe the binary's capability at runtime** and branch:
 
 ```bash
+export PATH="$HOME/.huawei/bin:$PATH"
 source /tmp/hw_creds.sh 2>/dev/null
-source /tmp/hw_api_key 2>/dev/null
-if [ -n "$HW_API_KEY" ]; then
-  devbridge auth login --api-key "$HW_API_KEY" && devbridge auth status
+if devbridge auth login --help 2>&1 | grep -q -- '--access-key'; then
+  echo "AUTH_MODE=AKSK_SUPPORTED"
+  devbridge auth login --access-key "$HW_ACCESS_KEY" --secret-key "$HW_SECRET_KEY"
+  devbridge auth status   # separate step: a status failure must not mask the login result
 else
-  echo "NO_API_KEY"
+  echo "AUTH_MODE=API_KEY_ONLY"
+  source /tmp/hw_api_key 2>/dev/null
+  if [ -n "$HW_API_KEY" ]; then
+    devbridge auth login --api-key "$HW_API_KEY"
+    devbridge auth status   # separate step: a status failure must not mask the login result
+  else
+    echo "NO_API_KEY"
+  fi
 fi
 ```
 
-**If `NO_API_KEY`** — STOP and guide the developer through creating one (wait for the key before continuing):
+- **`AUTH_MODE=AKSK_SUPPORTED`** → done. The temporary AK/SK injected by `huaweicloud_sandbox_credentials` is used directly (validated against IAM before injection). If login fails, surface the CLI error — AK/SK was IAM-validated at injection time, so failures here are rare (expired STS token → re-run `huaweicloud_sandbox_credentials`).
+- **`AUTH_MODE=API_KEY_ONLY`** → the API Key is a long-lived account-level credential stored in its own file `/tmp/hw_api_key`, separate from the temporary AK/SK in `/tmp/hw_creds.sh` — never echo its value. On `NO_API_KEY`, STOP and guide the developer through creating one (wait for the key before continuing):
 
-1. **Why (one sentence)**: "沙箱的地址生成服务已升级到 0.2.x，新版本仅支持 API Key 登录（官方变更）。API Key 按账号管理，创建一次长期可用、所有沙箱通用。"
+1. **Why (one sentence)**: "沙箱的地址生成服务发布版构建已移除 AK/SK 登录，仅支持 API Key（镜像内置构建仍支持 AK/SK，Agent 已自动探测）。API Key 按账号管理，创建一次长期可用、所有沙箱通用。"
 2. **Where (exact steps)**: open https://devstation.connect.huaweicloud.com/space/devbridge/apikey → 登录控制台 → 选择 DevBridge 场景 → 点击"创建"。**完整值仅在创建时展示一次，立即复制**（`devbridge_` 开头）。
 3. **How to hand it over** (present both, recommend the first):
    - **Recommended**: 在本地终端执行 `export HW_API_KEY=<粘贴Key>`（或写入 shell profile），然后告知"已设置" — Key 不经过对话记录；随后 agent 重新调用 `huaweicloud_sandbox_credentials`（本地 `HW_API_KEY` 会被自动透传注入沙箱）。
    - **Alternative**: 直接把 Key 粘贴在对话中 — agent 通过 `huaweicloud_sandbox_credentials` 的 `api_key` 参数注入，**绝不回显、不复述、不写入日志**。
 4. **Security**: 不要提交到代码库或分享；怀疑泄露时在同页面删除并重建（1 分钟）。
 
-**Failure paths**:
+**Failure paths (API Key branch)**:
 
 | Symptom                                | Guidance                                             |
 | -------------------------------------- | ---------------------------------------------------- |
@@ -913,36 +926,36 @@ Returns `complete: true/false`, `score`, and `nextStep` to fix missing items.
 
 ## Critical Warnings
 
-| Trap                                  | Why                                                                                                                                                                                                                                                                                                     |
-| ------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| Target not confirmed                  | "部署到华为云" without a named target is NOT a go signal. You MUST run the Target-Selection Gate and get an explicit choice before calling any sandbox lifecycle tool. Skipping it and defaulting to the sandbox is a violation.                                                                        |
-| Agreement required first              | `sandbox_connect` fails if the agreement isn't signed; the `sandbox_check_user` preflight detects this, so surface it to the developer only when signing is needed                                                                                                                                      |
-| Real-name required                    | `sandbox_connect` fails if `realnameVerified=false`; tell the developer once and stop, don't loop on connect                                                                                                                                                                                            |
-| Never expose tunnel details           | Do not mention "DevBridge"/"tunnel"/"devbridge" to the developer — say "正在生成访问地址..." and hand over only the URL                                                                                                                                                                                 |
-| devbridge 0.2.x needs an API Key      | 0.2.x removed AK/SK login (`--access-key/--secret-key/--huaweicloud` are gone). Login with `--api-key "$HW_API_KEY"` from `/tmp/hw_api_key` (long-lived credential, stored separately from `/tmp/hw_creds.sh`). If missing, guide the developer to create one (see Step 1 of "Expose the deployed app") |
-| devbridge 0.1.x is dead               | Sandboxes created before Sep 2026 ship 0.1.13, which connects to a migrated gateway serving a 「服务已迁移」 placeholder with HTTP 200. Check `devbridge version` first and upgrade in place (Step 0) — old tunnels never survive the upgrade                                                           |
-| CLI PATH                              | The installer only writes `~/.bashrc`; run `export PATH="$HOME/.huawei/bin:$PATH"` (prepend) in the session before using `devbridge` — appending lets a stale image binary in `/usr/local/bin` win                                                                                                      |
-| Never install tunnel tooling locally  | If the sandbox cannot install it, report a generic error and stop — installing on the developer's machine defeats sandbox deployment                                                                                                                                                                    |
-| Return the deployment URL             | Always hand the public URL from the host log to the developer as the final result                                                                                                                                                                                                                       |
-| Deploy is not just nginx              | Configuring nginx does NOT complete the deployment. Steps 7 (DevBridge expose) and deploy_check are REQUIRED — `deploy_nginx` returns `nextStep: expose_via_devbridge` as a reminder. Do not stop after nginx.                                                                                          |
-| Call deploy_check before success      | Always call `huaweicloud_sandbox_deploy_check` before reporting deployment success. A green nginx status does not mean the tunnel is accessible — verify end-to-end with the tool.                                                                                                                      |
-| Session state persists                | `exec_with_session` preserves `cd`, env vars, aliases between calls                                                                                                                                                                                                                                     |
-| Long commands prefer one-shot         | `exec_one_shot` creates a fresh connection per call — more stable for builds, installs, and scripts >30s. See [Tool Selection Guide](#tool-selection-guide).                                                                                                                                            |
-| SSR nginx/Node ports must differ      | nginx `proxy_pass` targets `<nodePort>`, not `<port>`. `deploy_nginx` auto-defaults `nodePort` to `<port>+1` — always start the Node process with `PORT=<nodePort>` to match. Same-port = EADDRINUSE.                                                                                                   |
-| HTTP 200 ≠ correct content            | A green HTTP check does not guarantee the right project is serving — old processes from a previous session bound to the same port will still return 200. `deploy_check` verifies the deployment fingerprint to catch this.                                                                              |
-| Destructive commands blocked          | `rm -rf /`, `mkfs`, `dd if=`, fork bombs are denied by safety policy                                                                                                                                                                                                                                    |
-| Workspace ID = dev_stage_id           | Use `dev_stage_id` from `sandbox_connect` as `workspace_id` for terminal exec                                                                                                                                                                                                                           |
-| Projects live in `/workspace`         | Clone/install project code under `/workspace/<repo-name>` (filesystem-root workspace mount, not `$HOME/workspace`), never in `/tmp` — ephemeral locations lose the project when the sandbox session restarts                                                                                            |
-| Upload project for local code         | Use `sandbox_upload_project` to transfer local projects — packages as tar.gz, uploads via HTTP tunnel, extracts on sandbox. Much faster than base64 for multi-file projects                                                                                                                             |
-| Upload file for single files          | Use `sandbox_upload_file` for individual files — base64 chunked, reliable for small files (<1MB)                                                                                                                                                                                                        |
-| Node.js >= 22 required                | Sandbox terminal uses built-in WebSocket (globalThis.WebSocket); if Node.js is missing, install it from the Huawei Cloud mirror (see "Node.js in the sandbox")                                                                                                                                          |
-| Sandbox restart kills processes       | After sandbox restarts, all user processes (nginx, Node.js, Python servers) are stopped. Re-run startup commands and verify ports are listening before proceeding.                                                                                                                                      |
-| Cross-platform binaries incompatible  | The sandbox runs Linux. Native binaries built on Windows/macOS (e.g., Prisma client, `node_modules/.prisma/`, platform-specific native addons) will not execute. Always install and build dependencies inside the sandbox, not locally.                                                                 |
-| Cross-platform needs QR code          | When `detect_framework` returns `type: "cross-platform"` (Taro, uni-app), generating a QR code image is **mandatory** — the deployment is incomplete without it. Check the Deployment Completion Check table in Step 7.                                                                                 |
-| Build fails do NOT auto-fix           | When a build exits with non-zero exit code, STOP and present the error + fix options to the developer. Do not silently retry, modify configs, or change source files without explicit approval. See 4c-aux.                                                                                             |
-| Tunnel description: no spaces/hyphens | `devbridge create <name> -d 'hello world'` fails with `Invalid tunnel description: only Chinese characters, digits, letters, length 0-64`. The message is misleading — the real rule is no spaces/hyphens. Omit `-d` or use bare letters/digits.                                                        |
-| Use `host`, never `connect`           | `devbridge connect` is the sender side (for on-prem machines dialing out). For public preview it loops `Connection failed, retrying...` forever with no hint. Always use `devbridge host <tunnelId> -p <port>`.                                                                                         |
-| Port drift detaches the tunnel        | When deploy_nginx auto-increments to a free port, an existing tunnel stays bound to the old port — re-bind: `devbridge port create <tunnelId> -p <newPort> --protocol http -a` and restart `devbridge host`. deploy_nginx emits a warning when this happens.                                            |
+| Trap                                  | Why                                                                                                                                                                                                                                                                                                               |
+| ------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| Target not confirmed                  | "部署到华为云" without a named target is NOT a go signal. You MUST run the Target-Selection Gate and get an explicit choice before calling any sandbox lifecycle tool. Skipping it and defaulting to the sandbox is a violation.                                                                                  |
+| Agreement required first              | `sandbox_connect` fails if the agreement isn't signed; the `sandbox_check_user` preflight detects this, so surface it to the developer only when signing is needed                                                                                                                                                |
+| Real-name required                    | `sandbox_connect` fails if `realnameVerified=false`; tell the developer once and stop, don't loop on connect                                                                                                                                                                                                      |
+| Never expose tunnel details           | Do not mention "DevBridge"/"tunnel"/"devbridge" to the developer — say "正在生成访问地址..." and hand over only the URL                                                                                                                                                                                           |
+| devbridge auth: probe the build       | `0.2.2-release` has two builds: image builds retain AK/SK login + env auto-read (fully automatic via `/tmp/hw_creds.sh`); release builds accept only API Key (`/tmp/hw_api_key`). Never assume — probe with `devbridge auth login --help 2>&1 \| grep -q -- '--access-key'` (Step 1 of "Expose the deployed app") |
+| devbridge 0.1.x is dead               | Sandboxes created before Sep 2026 ship 0.1.13, which connects to a migrated gateway serving a 「服务已迁移」 placeholder with HTTP 200. Check `devbridge version` first and upgrade in place (Step 0) — old tunnels never survive the upgrade                                                                     |
+| CLI PATH                              | The installer only writes `~/.bashrc`; run `export PATH="$HOME/.huawei/bin:$PATH"` (prepend) in the session before using `devbridge` — appending lets a stale image binary in `/usr/local/bin` win                                                                                                                |
+| Never install tunnel tooling locally  | If the sandbox cannot install it, report a generic error and stop — installing on the developer's machine defeats sandbox deployment                                                                                                                                                                              |
+| Return the deployment URL             | Always hand the public URL from the host log to the developer as the final result                                                                                                                                                                                                                                 |
+| Deploy is not just nginx              | Configuring nginx does NOT complete the deployment. Steps 7 (DevBridge expose) and deploy_check are REQUIRED — `deploy_nginx` returns `nextStep: expose_via_devbridge` as a reminder. Do not stop after nginx.                                                                                                    |
+| Call deploy_check before success      | Always call `huaweicloud_sandbox_deploy_check` before reporting deployment success. A green nginx status does not mean the tunnel is accessible — verify end-to-end with the tool.                                                                                                                                |
+| Session state persists                | `exec_with_session` preserves `cd`, env vars, aliases between calls                                                                                                                                                                                                                                               |
+| Long commands prefer one-shot         | `exec_one_shot` creates a fresh connection per call — more stable for builds, installs, and scripts >30s. See [Tool Selection Guide](#tool-selection-guide).                                                                                                                                                      |
+| SSR nginx/Node ports must differ      | nginx `proxy_pass` targets `<nodePort>`, not `<port>`. `deploy_nginx` auto-defaults `nodePort` to `<port>+1` — always start the Node process with `PORT=<nodePort>` to match. Same-port = EADDRINUSE.                                                                                                             |
+| HTTP 200 ≠ correct content            | A green HTTP check does not guarantee the right project is serving — old processes from a previous session bound to the same port will still return 200. `deploy_check` verifies the deployment fingerprint to catch this.                                                                                        |
+| Destructive commands blocked          | `rm -rf /`, `mkfs`, `dd if=`, fork bombs are denied by safety policy                                                                                                                                                                                                                                              |
+| Workspace ID = dev_stage_id           | Use `dev_stage_id` from `sandbox_connect` as `workspace_id` for terminal exec                                                                                                                                                                                                                                     |
+| Projects live in `/workspace`         | Clone/install project code under `/workspace/<repo-name>` (filesystem-root workspace mount, not `$HOME/workspace`), never in `/tmp` — ephemeral locations lose the project when the sandbox session restarts                                                                                                      |
+| Upload project for local code         | Use `sandbox_upload_project` to transfer local projects — packages as tar.gz, uploads via HTTP tunnel, extracts on sandbox. Much faster than base64 for multi-file projects                                                                                                                                       |
+| Upload file for single files          | Use `sandbox_upload_file` for individual files — base64 chunked, reliable for small files (<1MB)                                                                                                                                                                                                                  |
+| Node.js >= 22 required                | Sandbox terminal uses built-in WebSocket (globalThis.WebSocket); if Node.js is missing, install it from the Huawei Cloud mirror (see "Node.js in the sandbox")                                                                                                                                                    |
+| Sandbox restart kills processes       | After sandbox restarts, all user processes (nginx, Node.js, Python servers) are stopped. Re-run startup commands and verify ports are listening before proceeding.                                                                                                                                                |
+| Cross-platform binaries incompatible  | The sandbox runs Linux. Native binaries built on Windows/macOS (e.g., Prisma client, `node_modules/.prisma/`, platform-specific native addons) will not execute. Always install and build dependencies inside the sandbox, not locally.                                                                           |
+| Cross-platform needs QR code          | When `detect_framework` returns `type: "cross-platform"` (Taro, uni-app), generating a QR code image is **mandatory** — the deployment is incomplete without it. Check the Deployment Completion Check table in Step 7.                                                                                           |
+| Build fails do NOT auto-fix           | When a build exits with non-zero exit code, STOP and present the error + fix options to the developer. Do not silently retry, modify configs, or change source files without explicit approval. See 4c-aux.                                                                                                       |
+| Tunnel description: no spaces/hyphens | `devbridge create <name> -d 'hello world'` fails with `Invalid tunnel description: only Chinese characters, digits, letters, length 0-64`. The message is misleading — the real rule is no spaces/hyphens. Omit `-d` or use bare letters/digits.                                                                  |
+| Use `host`, never `connect`           | `devbridge connect` is the sender side (for on-prem machines dialing out). For public preview it loops `Connection failed, retrying...` forever with no hint. Always use `devbridge host <tunnelId> -p <port>`.                                                                                                   |
+| Port drift detaches the tunnel        | When deploy_nginx auto-increments to a free port, an existing tunnel stays bound to the old port — re-bind: `devbridge port create <tunnelId> -p <newPort> --protocol http -a` and restart `devbridge host`. deploy_nginx emits a warning when this happens.                                                      |
 
 ## Node.js in the sandbox
 

package/plugins/huaweicloud-core/src/auth/credentials.mjs

@@ -85,6 +85,95 @@ function present(v) {
   return typeof v === 'string' && v.length > 0 && !isPlaceholder(v);
 }
 
+// Pick the Huawei Cloud DevKit MCP server entry from a map using prefix matching.
+// CodeArts Work marketplace presets keyed entries like `huaweicloud-devkit_1`
+// (suffix per installed instance); match by prefix so `_1`/`_2`/`HuaweiCloud DevKit`
+// all resolve without hardcoding an instance number.
+// Deterministically choose the Huawei Cloud DevKit MCP server entry from a map.
+// Priority (stable, independent of object key order):
+//   1. exact `huaweicloud-devkit` (installer-managed key)
+//   2. `HuaweiCloud DevKit`
+//   3. prefixed instances `huaweicloud-devkit_N` sorted by ascending N
+export function pickDevkitMcpServer(mcpMap) {
+  if (!mcpMap || typeof mcpMap !== 'object') return null;
+  const keys = Object.keys(mcpMap);
+  const rank = (k) => {
+    if (k === 'huaweicloud-devkit') return -2;
+    if (k === 'HuaweiCloud DevKit') return -1;
+    const m = /^huaweicloud-devkit_(\d+)$/i.exec(k);
+    return m ? Number(m[1]) : Number.MAX_SAFE_INTEGER;
+  };
+  const candidates = keys
+    .filter((k) => /^huaweicloud-devkit(?:_|$)/i.test(k) || k === 'HuaweiCloud DevKit')
+    .sort((a, b) => rank(a) - rank(b));
+  for (const k of candidates) {
+    if (mcpMap[k]) return mcpMap[k];
+  }
+  return null;
+}
+
+// Derive the expiry (epoch ms) of a temporary STS credential set.
+// Priority: 1) HW_STS_EXPIRES_AT env (ISO8601 or epoch seconds); 2) decode the
+// security token (JWT payload or bare URL-safe base64 JSON) reading common
+// expiry fields (exp, timeout_at, expires_at, id_expires_at; issued_at+duration).
+// Returns null when unknown/unparseable. Never throws.
+export function parseStsExpiry({ securityToken, expiresAtEnv = process.env.HW_STS_EXPIRES_AT } = {}) {
+  if (expiresAtEnv) {
+    const v = String(expiresAtEnv).trim();
+    if (!v) return null;
+    const asNum = Number(v);
+    if (Number.isFinite(asNum) && asNum > 0) return asNum > 1e12 ? asNum : asNum * 1000;
+    const t = Date.parse(v);
+    if (Number.isFinite(t)) return t;
+    return null;
+  }
+  if (!securityToken || typeof securityToken !== 'string') return null;
+  const token = String(securityToken).trim();
+  if (!token) return null;
+
+  const payload = (() => {
+    try {
+      if (token.includes('.')) {
+        const parts = token.split('.');
+        const b64 = parts.length >= 2 ? parts[1] : null;
+        if (!b64) return null;
+        const pad = b64 + '='.repeat((4 - (b64.length % 4)) % 4);
+        return JSON.parse(Buffer.from(pad.replace(/-/g, '+').replace(/_/g, '/'), 'base64').toString('utf8'));
+      }
+      const pad = token + '='.repeat((4 - (token.length % 4)) % 4);
+      return JSON.parse(Buffer.from(pad.replace(/-/g, '+').replace(/_/g, '/'), 'base64').toString('utf8'));
+    } catch {
+      return null;
+    }
+  })();
+  if (!payload || typeof payload !== 'object') return null;
+
+  const exp = Number(payload.exp ?? payload.expires_at ?? payload.timeout_at ?? Number.NaN);
+  if (Number.isFinite(exp) && exp > 0) return exp * 1000;
+  const issued = Number(payload.issued_at ?? payload.iat ?? Number.NaN);
+  const duration = Number(payload.duration ?? payload.expires_in ?? payload.lifetime ?? Number.NaN);
+  if (Number.isFinite(issued) && issued > 0 && Number.isFinite(duration) && duration > 0) {
+    return (issued + duration) * 1000;
+  }
+  return null;
+}
+
+function readWorkEnvironmentEntry(config) {
+  const server = pickDevkitMcpServer(config?.mcp);
+  if (!server?.environment) return null;
+  const ak = server.environment.HW_ACCESS_KEY;
+  const sk = server.environment.HW_SECRET_KEY;
+  if (present(ak) && present(sk)) {
+    return {
+      ak,
+      sk,
+      securityToken: present(server.environment.HW_SECURITY_TOKEN) ? server.environment.HW_SECURITY_TOKEN : '',
+      region: server.environment.HW_REGION || server.environment.HUAWEICLOUD_REGION || '',
+    };
+  }
+  return null;
+}
+
 export function writeGlobalCredentials(credentials = {}) {
   const path = globalCredentialsPath();
   mkdirSync(dirname(path), { recursive: true });
@@ -136,6 +225,7 @@ export function resolveCredentials(options = {}) {
   if (codeartsCreds) {
     if (!ak && codeartsCreds.ak) ak = codeartsCreds.ak;
     if (!sk && codeartsCreds.sk) sk = codeartsCreds.sk;
+    if (!securityToken && codeartsCreds.securityToken) securityToken = codeartsCreds.securityToken;
     if (!region && codeartsCreds.region) region = codeartsCreds.region;
   }
 
@@ -234,7 +324,8 @@ function isCodeArtsContext() {
   return (
     existsSync(join(process.cwd(), '.codeartsdoer')) ||
     existsSync(join(homedir(), '.codeartsdoer')) ||
-    existsSync(join(homedir(), '.codeartswork'))
+    existsSync(join(homedir(), '.codeartswork')) ||
+    existsSync(join(homedir(), '.codearts'))
   );
 }
 
@@ -248,7 +339,7 @@ export function readCodeArtsCredentials() {
     try {
       if (!existsSync(path)) continue;
       const config = JSON.parse(readFileSync(path, 'utf8'));
-      const server = config?.mcpServers?.['huaweicloud-devkit'] || config?.mcpServers?.['HuaweiCloud DevKit'];
+      const server = pickDevkitMcpServer(config?.mcpServers);
       if (!server?.env) continue;
 
       const ak = server.env.HW_ACCESS_KEY;
@@ -266,26 +357,20 @@ export function readCodeArtsCredentials() {
     }
   }
 
-  // CodeArts Work — user-level only
-  {
-    const path = join(homedir(), '.codeartswork', 'mcp', 'mcp_settings.json');
+  // CodeArts Work — user-level only.
+  // New layout (post platform migration): ~/.codearts/mcp/mcp_settings.json with
+  // prefixed keys like `huaweicloud-devkit_1`; legacy ~/.codeartswork kept as
+  // fallback while still in service.
+  const workPaths = [
+    join(homedir(), '.codearts', 'mcp', 'mcp_settings.json'),
+    join(homedir(), '.codeartswork', 'mcp', 'mcp_settings.json'),
+  ];
+  for (const path of workPaths) {
     try {
-      if (existsSync(path)) {
-        const config = JSON.parse(readFileSync(path, 'utf8'));
-        const server = config?.mcp?.['huaweicloud-devkit'] || config?.mcp?.['HuaweiCloud DevKit'];
-        if (server?.environment) {
-          const ak = server.environment.HW_ACCESS_KEY;
-          const sk = server.environment.HW_SECRET_KEY;
-          if (present(ak) && present(sk)) {
-            return {
-              ak,
-              sk,
-              securityToken: present(server.environment.HW_SECURITY_TOKEN) ? server.environment.HW_SECURITY_TOKEN : '',
-              region: server.environment.HW_REGION || server.environment.HUAWEICLOUD_REGION || '',
-            };
-          }
-        }
-      }
+      if (!existsSync(path)) continue;
+      const config = JSON.parse(readFileSync(path, 'utf8'));
+      const entry = readWorkEnvironmentEntry(config);
+      if (entry) return entry;
     } catch {
       // mcp_settings.json missing or invalid — skip
     }

package/plugins/huaweicloud-core/src/auth/service.mjs

@@ -8,6 +8,7 @@ import {
   globalCredentialsPath,
   isPlaceholder,
   obsConfigPath,
+  readCodeArtsCredentials,
   readGlobalCredentials,
   writeLastSync,
   writeObsConfig,
@@ -47,6 +48,8 @@ export function computeOnboarding({ credentials, reconciled } = {}) {
   const creds = credentials ?? readGlobalCredentials();
   const scan = reconciled ?? exportStateForStatus();
   const s1Has = Boolean(creds?.ak && creds?.sk && !isPlaceholder(creds.ak) && !isPlaceholder(creds.sk));
+  const s4Creds = readCodeArtsCredentials();
+  const s4Has = Boolean(s4Creds?.ak && s4Creds?.sk);
   const injected = envHasRealTriplet();
   // env has real non-triplet creds that are NOT placeholders (e.g. devspace AK/SK w/o token)
   const envRealAk = !isPlaceholder(process.env.HW_ACCESS_KEY) && Boolean(process.env.HW_ACCESS_KEY);
@@ -72,6 +75,14 @@ export function computeOnboarding({ credentials, reconciled } = {}) {
     message = 'Platform credentials are active; nothing to configure.';
     return { needsSetup: false, scenario, reason, message, steps: [], accountHint };
   }
+  if (s4Has && !s1Has && !envHasCreds) {
+    // CodeArts Work/IDE carries the user's temporary STS credentials in the MCP
+    // settings file only (not surfaced in the UI, not in S1/env).
+    scenario = 0;
+    reason = 'mcp-settings-injected';
+    message = '已从码道 MCP settings 读取到临时凭证,MCP 工具可直接使用。';
+    return { needsSetup: false, scenario, reason, message, steps: [], accountHint };
+  }
   if (s1Has && !envHasCreds) {
     scenario = 1;
     reason = 's1-only';
@@ -155,11 +166,14 @@ export function getAuthStatus(target = 'all') {
   const credentials = readGlobalCredentials();
   const reconciled = { ...exportStateForStatus(), runtimeActive: hasRuntimeCredentials() };
   const hcloud = probeHcloud();
+  const s4Creds = readCodeArtsCredentials();
   const onboarding = computeOnboarding({ credentials, reconciled });
   return {
     target,
     credentialsConfigured: Boolean(credentials?.ak && credentials?.sk),
     credentialsPath: globalCredentialsPath(),
+    mcpSettingsConfigured: Boolean(s4Creds?.ak && s4Creds?.sk),
+    mcpSettingsSource: s4Creds ? 'codearts' : null,
     obsConfigured: existsSync(obsConfigPath()),
     obsConfigPath: obsConfigPath(),
     kooCliInstalled: hcloud.installed,

package/plugins/huaweicloud-core/src/hcloud-cli.mjs

@@ -7,6 +7,7 @@ import { dirname, join } from 'node:path';
 import { classifyHcloudArgs, redactSecrets, assertAllowed } from './safety-policy.mjs';
 import { getProxySettings } from './proxy/proxy-config.mjs';
 import { findHcloudBin, resolveHcloudCommand } from './hcloud-probe.mjs';
+import { parseStsExpiry, resolveCredentialsWithRuntime } from './auth/credentials.mjs';
 
 const DEFAULT_TIMEOUT_MS = 60_000;
 const DEFAULT_FORCE_KILL_AFTER_MS = 2_000;
@@ -237,6 +238,105 @@ export function classifyUnsupported(service, metaDir) {
   return 'unknown';
 }
 
+// Build command-line credential-injection args when the current credentials are
+// temporary STS (carry a non-empty security token). KooCLI/obsutil do not read the
+// platform-injected HW_* env (link B reads only S2/S3 config), so for a live STS
+// credential set that R3 forbids writing to disk, we pass it per-command instead.
+// Zero-persist: nothing touches S1/S2/S3 and every invocation re-reads the current
+// value (stale as soon as the token is).
+// Redact executed args for MCP-visible output. Besides the generic key=value
+// redaction (--cli-access-key=...), obsutil-style standalone credential flags
+// (-i AK / -k SK / -t TOKEN) carry the temporary STS as following array elements,
+// which redactSecrets can't match. We scrub those explicitly.
+export function redactArgsWithObs(rawArgs) {
+  const arr = Array.isArray(rawArgs) ? rawArgs.map(String) : [];
+  const out = [...arr];
+  for (let i = 0; i < out.length; i += 1) {
+    if (out[i] === '-i' || out[i] === '-k' || out[i] === '-t') {
+      if (i + 1 < out.length) out[i + 1] = '<redacted>';
+      i += 1;
+    } else if (/^-i[A-Za-z0-9]/.test(out[i])) {
+      out[i] = '-i<redacted>';
+    } else if (/^-k[A-Za-z0-9]/.test(out[i])) {
+      out[i] = '-k<redacted>';
+    } else if (/^-t[A-Za-z0-9]/.test(out[i])) {
+      out[i] = '-t<redacted>';
+    }
+  }
+  return redactSecrets(out);
+}
+
+export function resolveStsInjectArgs(rawArgs) {
+  const normalized = Array.isArray(rawArgs) ? rawArgs.map(String) : [];
+  if (normalized.length === 0) return [];
+  const flat = normalized.map(String);
+
+  // Explicit kill-switch (R2): CI/ops can disable argv-injection entirely so the
+  // temporary STS never appears in a process list.
+  const flag = process.env.HUAWEICLOUD_INJECT_STS_CMD;
+  if (flag === '0' || flag === 'false') return [];
+
+  // Never inject for help / metadata subcommands — the flags are meaningless there.
+  if (flat.some((a) => a === '--help' || a === '-h' || a === 'help')) return [];
+
+  // Wrapper invocation (bash -c / sudo / sh ...): our extra args would land in the
+  // wrapper's argv, not hcloud's — either ineffective or misleading. Skip them.
+  const WRAP = new Set([
+    'bash',
+    'sh',
+    'zsh',
+    'dash',
+    'bash.exe',
+    'sh.exe',
+    '/bin/bash',
+    '/bin/sh',
+    '/bin/zsh',
+    '/bin/dash',
+    'sudo',
+  ]);
+  const first = String(flat[0] || '').toLowerCase();
+  if (WRAP.has(first)) return [];
+
+  // KooCLI profile-management subcommands don't take --cli-security-token.
+  if (first === 'configure' || first === 'config') return [];
+
+  // If the caller already passed explicit credential flags, do not override them.
+  if (
+    flat.some(
+      (a) =>
+        a.startsWith('--cli-access-key=') || a.startsWith('--cli-secret-key=') || a.startsWith('--cli-security-token='),
+    )
+  ) {
+    return [];
+  }
+  // Explicit obsutil-style credentials already present — standalone (-i AK) or
+  // attached (-iAK) — should not be overridden by an extra injection.
+  if (flat.some((a) => a === '-i' || a === '-k' || a === '-t' || /^-[ikt][A-Za-z0-9]/.test(a))) return [];
+
+  let creds;
+  try {
+    creds = resolveCredentialsWithRuntime({ allowMissing: true });
+  } catch {
+    return [];
+  }
+  if (!creds || !creds.ak || !creds.sk || !creds.securityToken) return [];
+
+  // R3: if we can derive an expiry and the token is already at/within 60s of
+  // expiring, skip injection — using a dead token would make a doomed IAM round
+  // trip. If expiry is unknown/unparseable we keep the existing "inject anyway"
+  // behavior (can't prove it's stale).
+  const expiry = parseStsExpiry({ securityToken: creds.securityToken });
+  if (expiry !== null) {
+    const grace = 60 * 1000;
+    if (expiry <= Date.now() + grace) return [];
+  }
+
+  const isObs = flat[0].toUpperCase() === 'OBS';
+  return isObs
+    ? ['-i', creds.ak, '-k', creds.sk, '-t', creds.securityToken]
+    : ['--cli-access-key=' + creds.ak, '--cli-secret-key=' + creds.sk, '--cli-security-token=' + creds.securityToken];
+}
+
 export function planHcloudCommand(args, options = {}) {
   const normalizedArgs = Array.isArray(args) ? args.map(String) : [];
   const classification = classifyHcloudArgs(normalizedArgs, options);
@@ -299,6 +399,16 @@ export async function runHcloud(args, options = {}) {
   };
   assertAllowed(plan.classification);
 
+  // Link B: when the runtime/environment carries live temporary STS credentials
+  // (security token set), KooCLI/obsutil would not see them (they read S2/S3 only
+  // and R3 forbids writing them to disk). Inject per-command so hcloud actually
+  // authenticates with the platform-provided STS. Injection args are appended to
+  // the EXECUTED args only; classification/approval used the original args.
+  const stsInject = resolveStsInjectArgs(normalizedArgs);
+  if (stsInject.length > 0) {
+    plan.rawArgs = [...plan.rawArgs, ...stsInject];
+  }
+
   const metaDir = options.metaDir;
 
   // KooCLI only switches language globally (`hcloud configure set --cli-lang=cn`); there is no
@@ -411,6 +521,13 @@ function runHcloudOnce(plan, options) {
           result.stdout = String(result.stdout).slice(0, 2000) + `\n...(truncated, full output saved to ${outputFile})`;
         }
       }
+      // Never surface raw args (may include the injected temporary STS) to MCP
+      // clients / agent conversation — redact before resolve. The live `plan`
+      // object itself is left untouched so retries keep executing the real args.
+      if (result.plan && Array.isArray(result.plan.rawArgs)) {
+        const redactedPlan = { ...result.plan, rawArgs: redactArgsWithObs(result.plan.rawArgs) };
+        result.plan = redactedPlan;
+      }
       resolve(result);
     }
 
@@ -509,7 +626,7 @@ function quoteShellArg(value) {
 function planningWarnings(args) {
   const joined = args.join(' ');
   const warnings = [];
-  if (/adminPass|password|passwd|secret|token/i.test(joined)) {
+  if (/admin[_-]?pass|password|passwd|secret|token/i.test(joined)) {
     warnings.push(
       'This command appears to contain a password or secret field. Do not leave plaintext secrets in shell history; prefer local-only input or a runtime injection pattern.',
     );

package/plugins/huaweicloud-core/src/mcp-config-merge.mjs

@@ -130,3 +130,26 @@ export function applyUserDelta(entry, delta, style) {
   if (delta.enabled === false) merged.enabled = false;
   return merged;
 }
+
+// Collect user-owned environment variables from peer DevKit server entries in the
+// same MCP map (e.g. market-preset keys like `huaweicloud-devkit_1` that carry the
+// user's temporary STS credentials HW_ACCESS_KEY / HW_SECRET_KEY / HW_SECURITY_TOKEN).
+// When the installer writes a NEW `huaweicloud-devkit` entry these must be inherited
+// so the freshly installed key also has the user's credentials (the CodeArts Work
+// UI never surfaces them; they live only in mcp_settings.json).
+export function inheritPeerUserEnv(mcpMap) {
+  if (!isPlainObject(mcpMap)) return null;
+  const collected = {};
+  for (const [key, entry] of Object.entries(mcpMap)) {
+    if (key === 'huaweicloud-devkit') continue;
+    if (!/^huaweicloud-devkit(?:_|$)/i.test(key) && key !== 'HuaweiCloud DevKit') continue;
+    const env = isPlainObject(entry?.environment) ? entry.environment : isPlainObject(entry?.env) ? entry.env : null;
+    if (!env) continue;
+    for (const [k, v] of Object.entries(env)) {
+      if (REQUIRED_ENV_KEYS.has(k)) continue;
+      if (typeof v !== 'string' || v === '') continue;
+      if (!(k in collected)) collected[k] = v;
+    }
+  }
+  return Object.keys(collected).length > 0 ? collected : null;
+}

package/plugins/huaweicloud-core/src/risk-rule-engine.mjs

@@ -19,7 +19,7 @@ export function loadRiskRules(options = {}) {
 function redactEvidence(text) {
   return String(text)
     .replace(
-      /((?:access[_-]?key|secret[_-]?key|security[_-]?token|x[_-]?auth[_-]?token|authorization|password|passwd|adminPass|credential)\s*[:=]\s*)("[^"]*"|'[^']*'|[^\s,;]+)/gi,
+      /((?:access[_-]?key|secret[_-]?key|security[_-]?token|x[_-]?auth[_-]?token|token|authorization|password|passwd|admin[_-]?pass|credential)\s*[:=]\s*)("[^"]*"|'[^']*'|[^\s,;]+)/gi,
       '$1<redacted>',
     )
     .replace(/(AK|SK)\s*[:=]\s*("[^"]*"|'[^']*'|[^\s,;]+)/g, '$1=<redacted>');

package/plugins/huaweicloud-core/src/safety-policy.mjs

@@ -39,7 +39,7 @@ function redactString(text) {
       // Redact the ENTIRE value of this arg — not just the first whitespace token.
       .replace(/((?:user[_-]?data|metadata|private[_-]?key)\s*[:=]\s*).*/gi, '$1<redacted>')
       .replace(
-        /((?:access[_-]?key|secret[_-]?key|security[_-]?token|x[_-]?auth[_-]?token|authorization|password|passwd|adminPass|credential)\s*[:=]\s*)("[^"]*"|'[^']*'|[^\s,;]+)/gi,
+        /((?:access[_-]?key|secret[_-]?key|security[_-]?token|x[_-]?auth[_-]?token|token|authorization|password|passwd|admin[_-]?pass|credential)\s*[:=]\s*)("[^"]*"|'[^']*'|[^\s,;]+)/gi,
         '$1<redacted>',
       )
       .replace(/(AK|SK)\s*[:=]\s*("[^"]*"|'[^']*'|[^\s,;]+)/g, '$1=<redacted>')

package/plugins/huaweicloud-core/src/sandbox/hdkitservice-api.mjs

@@ -65,6 +65,16 @@ async function hdkitRequest(method, path, body, timeoutMs = 300000) {
     err.code = code;
     err.status = resp.status;
     err.traceId = data.traceId;
+    if (code === 'HDKIT_CRED_INVALID') {
+      err.remediation = {
+        hint: '已保存的凭证(S1)可能已失效。请执行以下操作之一：',
+        steps: [
+          '运行 huaweicloud_auth_status 查看当前凭证状态（S1 指纹 vs 环境注入指纹）',
+          '若环境注入了有效凭证：运行 huaweicloud_auth_switch action=clear 清除 runtime 凭证，或删除 ~/.config/huaweicloud/credentials.json 让平台凭证接管',
+          '若需更新 S1：运行 npx huaweicloud-devkit auth init 重新配置有效 AK/SK',
+        ],
+      };
+    }
     throw err;
   }
 
@@ -119,6 +129,7 @@ export async function hdkitVoucherStatus(domainId) {
       claimed: false,
       message: error?.message || 'Incentive service unavailable, please try again later',
       code: error?.code,
+      ...(error?.remediation ? { remediation: error.remediation } : {}),
     };
   }
 }
@@ -132,6 +143,7 @@ export async function hdkitVoucherClaim(domainId) {
       claimed: false,
       message: error?.message || 'Incentive service unavailable, please try again later',
       code: error?.code,
+      ...(error?.remediation ? { remediation: error.remediation } : {}),
     };
   }
 }

package/plugins/huaweicloud-core/src/setup-cli.mjs

@@ -1,4 +1,5 @@
 import {
+  chmodSync,
   copyFileSync,
   existsSync,
   mkdirSync,
@@ -36,7 +37,13 @@ import {
   getProxySettings,
 } from './proxy/proxy-config.mjs';
 import { removeKooCli, removeObsConfig } from './sandbox/uninstall-cleanup.mjs';
-import { mergeCommandStyle, mergeArgsStyle, extractUserDelta, applyUserDelta } from './mcp-config-merge.mjs';
+import {
+  mergeCommandStyle,
+  mergeArgsStyle,
+  extractUserDelta,
+  applyUserDelta,
+  inheritPeerUserEnv,
+} from './mcp-config-merge.mjs';
 import { readAgentDelta, saveAgentDelta, takeAgentDelta, purgeBackup } from './mcp-config-backup.mjs';
 import { isUsableOfficeaceRoot, readOfficeaceRootMarker, writeOfficeaceRootMarker } from './officeace-paths.mjs';
 import { queryDistTagsFetch, determineTarget, semverCompare } from './update-check.mjs';
@@ -123,7 +130,12 @@ function codeartsWorkSkillsDir() {
   return join(homedir(), '.codeartswork', 'skills');
 }
 function codeartsWorkMcpSettingsFile() {
-  return join(homedir(), '.codeartswork', 'mcp', 'mcp_settings.json');
+  // Post platform migration the marketplace presets the plugin under ~/.codearts
+  // (new layout); legacy ~/.codeartswork is kept as fallback while still in
+  // service. Default to the new dir when it exists, otherwise legacy.
+  const newDir = join(homedir(), '.codearts', 'mcp');
+  const legacy = join(homedir(), '.codeartswork', 'mcp', 'mcp_settings.json');
+  return existsSync(newDir) ? join(newDir, 'mcp_settings.json') : legacy;
 }
 function codeartsWorkPluginsDir() {
   return join(homedir(), '.codeartswork', 'huaweicloud-plugins');
@@ -524,6 +536,22 @@ function copyFileVerified(src, dest) {
   );
 }
 
+// R5: write an MCP settings JSON file with least-privilege permissions
+// (parent dir 0700, file 0600) so the platform-injected temporary credentials
+// (HW_ACCESS_KEY/HW_SECRET_KEY/HW_SECURITY_TOKEN) are not world-readable.
+function writeMcpSettingsFile(configPath, config) {
+  mkdirSync(dirname(configPath), { recursive: true, mode: 0o700 });
+  writeFileSync(configPath, JSON.stringify(config, null, 2), { encoding: 'utf8', mode: 0o600 });
+  try {
+    chmodSync(configPath, 0o600);
+    // Re-assert the parent dir mode too — later un-mode'd mkdirSync calls can
+    // produce a broader default (e.g. 0775) on existing trees.
+    chmodSync(dirname(configPath), 0o700);
+  } catch {
+    // best-effort; unsupported on some platforms
+  }
+}
+
 function copyDir(src, dest) {
   if (!existsSync(src)) return;
   mkdirSync(dest, { recursive: true });
@@ -625,7 +653,7 @@ function updateOpenCodeConfig(pluginDir) {
     }
     if (existing && changed) {
       config.mcp['huaweicloud-devkit'] = entry;
-      writeFileSync(configPath, JSON.stringify(config, null, 2));
+      writeMcpSettingsFile(configPath, config);
       console.log(`  OpenCode MCP config merged (user fields preserved): ${configPath}`);
       return;
     }
@@ -635,7 +663,7 @@ function updateOpenCodeConfig(pluginDir) {
   // Restore user fields saved by a previous uninstall (issue #615).
   const delta = takeAgentDelta('opencode');
   if (delta) config.mcp['huaweicloud-devkit'] = applyUserDelta(config.mcp['huaweicloud-devkit'], delta, 'command');
-  writeFileSync(configPath, JSON.stringify(config, null, 2));
+  writeMcpSettingsFile(configPath, config);
   console.log(`  OpenCode config updated: ${configPath}`);
 }
 
@@ -666,7 +694,7 @@ function writeMcpServersFile(pluginDest, mcpPath, agentKey) {
     if (delta)
       next.mcpServers['huaweicloud-devkit'] = applyUserDelta(next.mcpServers['huaweicloud-devkit'], delta, 'args');
   }
-  writeFileSync(configPath, JSON.stringify(next, null, 2));
+  writeMcpSettingsFile(configPath, next);
   console.log(`  MCP Config -> ${configPath}`);
 }
 
@@ -695,7 +723,7 @@ function removeOpenCodeConfig() {
   if (delta) saveAgentDelta('opencode', delta);
   delete config.mcp['huaweicloud-devkit'];
   if (Object.keys(config.mcp).length === 0) delete config.mcp;
-  writeFileSync(configPath, JSON.stringify(config, null, 2));
+  writeMcpSettingsFile(configPath, config);
   console.log(`  OpenCode MCP config cleaned: ${configPath}`);
 }
 
@@ -1267,7 +1295,7 @@ function registerCodeartsMcp(configPath, agentKey = 'codearts') {
       }
       config.mcpServers['huaweicloud-devkit'] = entry;
       mkdirSync(dirname(configPath), { recursive: true });
-      writeFileSync(configPath, JSON.stringify(config, null, 2));
+      writeMcpSettingsFile(configPath, config);
       console.log(`  MCP config merged (user fields preserved): ${configPath}`);
       return;
     }
@@ -1280,7 +1308,7 @@ function registerCodeartsMcp(configPath, agentKey = 'codearts') {
   if (delta) entry = applyUserDelta(entry, delta, 'args');
   config.mcpServers['huaweicloud-devkit'] = entry;
   mkdirSync(dirname(configPath), { recursive: true });
-  writeFileSync(configPath, JSON.stringify(config, null, 2));
+  writeMcpSettingsFile(configPath, config);
   console.log(`  MCP config updated: ${configPath}`);
 }
 
@@ -1375,7 +1403,7 @@ function uninstallCodeArts() {
       if (delta) saveAgentDelta('codearts', delta);
       delete config.mcpServers['huaweicloud-devkit'];
       if (Object.keys(config.mcpServers).length === 0) delete config.mcpServers;
-      writeFileSync(configPath, JSON.stringify(config, null, 2));
+      writeMcpSettingsFile(configPath, config);
       console.log(`  Config cleaned: ${configPath}`);
     }
   }
@@ -1446,7 +1474,7 @@ function registerCodeartsWorkMcp() {
       }
       config.mcp['huaweicloud-devkit'] = merged;
       mkdirSync(dirname(configPath), { recursive: true });
-      writeFileSync(configPath, JSON.stringify(config, null, 2));
+      writeMcpSettingsFile(configPath, config);
       console.log(`  MCP config merged (user fields preserved): ${configPath}`);
       return;
     }
@@ -1454,12 +1482,16 @@ function registerCodeartsWorkMcp() {
   config.mcp = config.mcp || {};
   let entry = mergeCommandStyle(undefined, { mcpPath }).entry;
   entry.environment = { ...environment };
+  // Inherit user-owned env (e.g. market-preset `huaweicloud-devkit_1` carrying the
+  // user's temporary STS credentials) so a freshly installed key also has them.
+  const peerEnv = inheritPeerUserEnv(config.mcp);
+  if (peerEnv) entry.environment = { ...peerEnv, ...entry.environment };
   // Restore user fields saved by a previous uninstall (issue #615).
   const delta = takeAgentDelta('codearts-work');
   if (delta) entry = applyUserDelta(entry, delta, 'command');
   config.mcp['huaweicloud-devkit'] = entry;
   mkdirSync(dirname(configPath), { recursive: true });
-  writeFileSync(configPath, JSON.stringify(config, null, 2));
+  writeMcpSettingsFile(configPath, config);
   console.log(`  MCP config updated: ${configPath}`);
 }
 
@@ -1530,7 +1562,7 @@ function uninstallCodeArtsWork() {
       if (delta) saveAgentDelta('codearts-work', delta);
       delete config.mcp['huaweicloud-devkit'];
       if (Object.keys(config.mcp).length === 0) delete config.mcp;
-      writeFileSync(configPath, JSON.stringify(config, null, 2));
+      writeMcpSettingsFile(configPath, config);
       console.log(`  Config cleaned: ${configPath}`);
     }
   }
@@ -1591,7 +1623,7 @@ function ensureWorkbuddyMcpConfig() {
       }
       config.mcpServers['huaweicloud-devkit'] = entry;
       mkdirSync(dirname(configPath), { recursive: true });
-      writeFileSync(configPath, JSON.stringify(config, null, 2));
+      writeMcpSettingsFile(configPath, config);
       console.log(`  MCP config merged (user fields preserved): ${configPath}`);
       return true;
     }
@@ -1603,7 +1635,7 @@ function ensureWorkbuddyMcpConfig() {
   if (delta) entry = applyUserDelta(entry, delta, 'args');
   config.mcpServers['huaweicloud-devkit'] = entry;
   mkdirSync(dirname(configPath), { recursive: true });
-  writeFileSync(configPath, JSON.stringify(config, null, 2));
+  writeMcpSettingsFile(configPath, config);
   console.log(`  MCP config updated: ${configPath}`);
   return true;
 }
@@ -1817,7 +1849,7 @@ function uninstallWorkBuddy() {
       if (delta) saveAgentDelta('workbuddy', delta);
       delete config.mcpServers['huaweicloud-devkit'];
       if (Object.keys(config.mcpServers).length === 0) delete config.mcpServers;
-      writeFileSync(configPath, JSON.stringify(config, null, 2));
+      writeMcpSettingsFile(configPath, config);
       console.log(`  MCP config cleaned: ${configPath}`);
     }
   }
@@ -1923,7 +1955,7 @@ function ensureAtomcodeMcpConfig() {
       }
       config.mcpServers['huaweicloud-devkit'] = entry;
       mkdirSync(dirname(configPath), { recursive: true });
-      writeFileSync(configPath, JSON.stringify(config, null, 2));
+      writeMcpSettingsFile(configPath, config);
       console.log(`  MCP config merged (user fields preserved): ${configPath}`);
       return true;
     }
@@ -1935,7 +1967,7 @@ function ensureAtomcodeMcpConfig() {
   if (delta) entry = applyUserDelta(entry, delta, 'args');
   config.mcpServers['huaweicloud-devkit'] = entry;
   mkdirSync(dirname(configPath), { recursive: true });
-  writeFileSync(configPath, JSON.stringify(config, null, 2));
+  writeMcpSettingsFile(configPath, config);
   console.log(`  MCP config updated: ${configPath}`);
   return true;
 }
@@ -2009,7 +2041,7 @@ function uninstallAtomCode() {
       if (delta) saveAgentDelta('atomcode', delta);
       delete config.mcpServers['huaweicloud-devkit'];
       if (Object.keys(config.mcpServers).length === 0) delete config.mcpServers;
-      writeFileSync(configPath, JSON.stringify(config, null, 2));
+      writeMcpSettingsFile(configPath, config);
       console.log(`  MCP config cleaned: ${configPath}`);
     }
   }

package/plugins/huaweicloud-core/src/tools.mjs

@@ -1500,10 +1500,10 @@ export async function callTool(name, rawArgs = {}, opts = {}) {
       if (sandboxWsIdCred) result.apiKeyInjected = Boolean(apiKey);
       if (apiKey) {
         result.apiKeyHint =
-          'DevBridge API Key written to /tmp/hw_api_key (0600, kept separate from the temporary AK/SK in /tmp/hw_creds.sh — it is a long-lived account-level credential). devbridge 0.2.x uses it via: source /tmp/hw_api_key && devbridge auth login --api-key "$HW_API_KEY". Never echo it into logs.';
+          'DevBridge API Key written to /tmp/hw_api_key (0600, kept separate from the temporary AK/SK in /tmp/hw_creds.sh — it is a long-lived account-level credential). Release builds of devbridge 0.2.x use it via: source /tmp/hw_api_key && devbridge auth login --api-key "$HW_API_KEY". Image builds retain AK/SK login — the huawei-sandbox skill probes the capability at expose time. Never echo the key into logs.';
       } else {
         result.apiKeyHint =
-          'No DevBridge API Key provided — devbridge 0.2.x cannot log in with AK/SK. To expose web apps, ask the user for an API Key (created at https://devstation.connect.huaweicloud.com/space/devbridge/apikey) and re-run with api_key, or set the local HW_API_KEY environment variable (preferred — keeps the key out of the conversation).';
+          'No DevBridge API Key provided — release builds of devbridge 0.2.x cannot log in with AK/SK (image builds retain AK/SK; the huawei-sandbox skill probes the build at expose time and uses the injected AK/SK directly when supported). For release builds, ask the user for an API Key (created at https://devstation.connect.huaweicloud.com/space/devbridge/apikey) and re-run with api_key, or set the local HW_API_KEY environment variable (preferred — keeps the key out of the conversation).';
       }
       if (validation.projectId) result.projectId = validation.projectId;
       if (validation.warning) result.warning = validation.warning;