User/Agent    │──────▶│   COC API   │──────▶│   UniAgent    │──────▶│  Flexus L Instance│
(Skill caller)       (Cloud Ops Center)       (Proxy program)              (Target Host) 

undefined

undefined

undefined

2. **Environment Variables** (recommended):
```bash
export HW_ACCESS_KEY="your_access_key"
export HW_SECRET_KEY="***"

> ⚠️ **Security note**: Passing AK/SK via `--ak "..." --sk "..."` on the command
> line exposes the credentials in the process list (e.g. `ps aux`). Only do this
> in a trusted, single-user environment; prefer environment variables or `hcloud configure`.

3. **Interactive Input** (Testing):
```bash
python {baseDir}/scripts/caller.py create

**Authentication Parameter Description**:

| Parameter | Description | Required | Default | Example |
|-----------|-------------|----------|---------|---------|
| --ak | Huawei Cloud Access Key AK (can be temporary AK) | Yes* | Prompted | `--ak AXXX...` |
| --sk | Huawei Cloud Access Key SK (can be temporary SK) | Yes* | Prompted | `--sk SXXX...` |
| --security-token | Security token for temporary credentials (required when using temporary AK/SK) | No | Prompted | `--security-token XXXX...` |
| --region | COC Service Region | No | cn-north-4 | `--region cn-north-4` |

**Note**: Parameters marked with * can be provided via environment variables (`HW_ACCESS_KEY`, `HW_SECRET_KEY`, `HW_SECURITY_TOKEN`, `HW_REGION`). If environment variables are set, they take priority over command line parameters.

**Authentication Priority**:
1. First check environment variables: `HW_ACCESS_KEY`, `HW_SECRET_KEY`, `HW_SECURITY_TOKEN`, `HW_REGION`
2. If all required environment variables are set, use them directly
3. If environment variables are not set, use command line parameters
4. If neither is provided, prompt for interactive input

**Security Rules**:
- **No Hardcoded Credentials**: Never embed AK/SK directly in code or configuration files
- **Principle of Least Privilege**: Grant only the minimum permissions required
- **Regular Key Rotation**: Rotate AK/SK every 90 days
- **Enable Key Rotation Alerts**: Set up expiration reminders in Huawei Cloud Console

undefined

2. **Troubleshooting Steps**:
   - Verify AK/SK configuration
   - Confirm user has required COC permissions
   - Validate region configuration
   - Check if IAM policy is active

3. **Resolution**:
   - Contact administrator for required permissions
   - Confirm IAM policy is properly attached to user/role
   - Wait for policy to take effect (typically 5-10 minutes)

4. **Verification**:
```bash

undefined

undefined

**View Script Details**:
```bash
export HW_ACCESS_KEY="your_ak"
export HW_SECRET_KEY="your_sk"

**List Scripts**:
```bash
export HW_ACCESS_KEY="your_ak"
export HW_SECRET_KEY="your_sk"

**Delete Script**:
```bash
export HW_ACCESS_KEY="your_ak"
export HW_SECRET_KEY="your_sk"

undefined

export HW_ACCESS_KEY="your_ak"
export HW_SECRET_KEY="your_sk"

**Interactive Execution**: `python {baseDir}/scripts/caller.py execute` (credentials are read from environment variables)

**Query Execution Result**:
```bash
export HW_ACCESS_KEY="your_ak"
export HW_SECRET_KEY="your_sk"

undefined

pip install -r {baseDir}/requirements.txt

python -c "from huaweicloudsdkcoc.v1 import CocClient; print('SDK installed successfully!')"

undefined

2. **Execute a script**:
```bash
export HW_ACCESS_KEY="your_ak"
export HW_SECRET_KEY="your_sk"
export HW_SECURITY_TOKEN="your_token"  # Optional

python {baseDir}/scripts/caller.py execute --script-uuid "SC202xxxxxxxx13701c4a8a62" --execute-user root --timeout 300 --success-rate 100

Found 25 scripts (Page 1, 10 per page):
--------------------------------------------------------------------------------
No.    Script UUID                    Name                 Type        Risk Level
--------------------------------------------------------------------------------
1       SC202xxxxxxxx13701c4a8a62     backup_script        SHELL       LOW
2       SC202xxxxxxxx10302201d5b9e78     deploy_script        SHELL       HIGH
3       SC202xxxxxxxx13701c4a8a62     monitor_script       PYTHON      MEDIUM
--------------------------------------------------------------------------------

{
  "ok": true,
  "text": "Script created successfully: SC202xxxxxxxx13701c4a8a62",
  "result": {
    "data": "SC202xxxxxxxx13701c4a8a62"
  },
  "error": null
}

{
  "ok": true,
  "text": "Script execution started: SCT202xxxxxxxx01af694bf",
  "result": {
    "data": "SCT202xxxxxxxx01af694bf"
  },
  "error": null
}

{
  "data": {
    "batch_index": 1,
    "total_instances": 1,
    "execute_instances": [
      {
        "id": 40304358,
        "cmd_uuid": "2exxxxxxxxxxxxxx6b5",
        "job_sign": null,
        "target_instance": {
          "resource_id": "6axxxxxxxxxxxxxxx9e",
          "agent_sn": "e5xxxxxxxxxxxxxxxxxx77",
          "agent_status": null,
          "agent_version": "1.1.8",
          "region_id": "cn-north-4",
          "project_id": null,
          "properties": {
            "host_name": "dify-test-001",
            "fixed_ip": null,
            "floating_ip": null,
            "region_id": "cn-north-4",
            "zone_id": null,
            "application": null,
            "group": null,
            "project_id": null
          },
          "custom_attributes": null,
          "provider": "hcss",
          "type": "l-instance"
        },
        "gmt_created": 1779934038727,
        "gmt_finished": 1779934107670,
        "execute_costs": 68943,
        "status": "ABNORMAL",
        "message": "Reading package lists...\nWARNING: apt does not have a stable CLI interface. Use with caution in scripts.\n\n\nBuilding dependency tree...\nReading state information...\nexpect is already the newest version (5.45.4-2build1).\n\n[SYSTEM INFO] script job execute timeout."
      }
    ]
  }
}

python -c "from huaweicloudsdkcoc.v1 import CocClient; print('SDK installed successfully!')"

export HW_ACCESS_KEY="your_ak"
export HW_SECRET_KEY="your_sk"

python {baseDir}/scripts/caller.py create --name "test_script" --type SHELL --content "echo hello" --description "Test script" --non-interactive

undefined

export HW_ACCESS_KEY="your_ak"
export HW_SECRET_KEY="your_sk"

python {baseDir}/scripts/caller.py execute --script-uuid "SC202xxxxxxxx13701c4a8a62" --execute-user root --timeout 300 --non-interactive

undefined

python {baseDir}/scripts/smoke_test.py

undefined

error: Authentication failed

error: API quota exceeded

error: Invalid parameter