git:20260811.3d46e2a to git:20261012.0b8e9af

---

name: huawei-cloud-devbridge-tunnel

description: |

Create and manage DevBridge development tunnels on Huawei Cloud to securely expose local development services to remote devices.

Trigger: user mentions "DevBridge", "开发隧道", "开发者隧道", "dev tunnel", "tunnel", "host local service", "expose local port", "connect tunnel", "托管本地服务", "隧道端口", "devbridge", "DevSpace", "开发空间隧道"

tags: [huawei-cloud, devbridge, tunnel, devtools, cloud]

---

# Huawei Cloud DevBridge Development Tunnel

Create and manage DevBridge development tunnels to securely expose local development services to remote devices via Huawei Cloud relay infrastructure.

## Overview

### Architecture

```

Developer Device (Host) Remote Device (Connect)

┌──────────────────────┐ ┌──────────────────────┐

│ Local Service :8080 │ │ localhost:8080 │

│ │ │ │ ▲ │

│ devbridge host │ │ devbridge connect │

│ │ │ │ │ │

└─────────┼────────────┘ └─────────┼────────────┘

│ Outbound connection │ Outbound connection

▼ ▼

┌─────────────────────────────────────────────────────────────────┐

│ DevBridge Relay Service (Huawei Cloud) │

│ │

└─────────────────────────────────────────────────────────────────┘

```

### Use Cases

- Remote debugging and integration testing with team members

- Sharing in-development web pages with stakeholders

- Receiving webhook callbacks during local development

- Accessing local services from mobile devices or other machines

- Temporarily exposing local APIs for demonstrations

### Typical User Expressions

- "Help me expose my local port 8080 to a remote device"

- "Create a development tunnel for my frontend dev server"

- "I need to share my local API with the team for testing"

- "Connect to a tunnel from another machine"

- "帮我把本地 8080 端口暴露给远程设备"

## Dynamic Command Adaptation Layer

> **CRITICAL — All tunnel/port/host operations MUST go through `db_*` wrapper functions** (defined in `scripts/devbridge_cmd.sh`), NOT direct `devbridge` commands. Only `devbridge auth` and `devbridge version` are exempt.

>

### Adaptation Layer Functions

| Function | Replaces | Purpose |

|----------|----------|---------|

| `db_port_create` | `devbridge port create` | Create port (adapts port, protocol, anonymous flags) |

| `db_show` | `devbridge show` | Show tunnel details |

| `db_update` | `devbridge update` | Update tunnel |

| `db_delete` | `devbridge delete` | Delete tunnel |

| `db_delete_all` | `devbridge delete-all` | Delete all tunnels |

| `db_port_list` | `devbridge port list` | List ports |

| `db_port_delete` | `devbridge port delete` | Delete port (adapts port flag) |

| `db_version` | `devbridge version` | Show CLI version |

| `db_auth_status` | `devbridge auth status` | Check auth status |

## Prerequisites

```bash

source <skill_directory>/scripts/devbridge_cmd.sh

db_init

```

### System Requirements

- Bash and `curl`, or PowerShell 5.1+

- x86-64 or ARM64 architecture

- Access to the DevBridge installation source

- Write permission to the `~/.huawei` directory

## Workflow

> **CRITICAL — Zero confirmation during tunnel creation.** Execute the entire flow (check CLI → load adaptation layer → check auth → create tunnel → configure port → start hosting) **fully automatically with ZERO user interaction**. Do NOT ask the user to confirm parameters or pause between steps. Only surface output after everything is done. **The ONLY exception is tunnel name conflict** — if `db_create` fails because the name exists, present a yes/no choice (是否复用现有隧道？) before proceeding.

### Default Parameters

| Parameter | Default Value |

|-----------|---------------|

| Tunnel name | `dev-tunnel-<random>` (e.g., `dev-tunnel-3847`) |

| Description | `开发隧道` |

| Port | `8080` |

### Parameter Resolution

For each parameter, if the user explicitly specified a value, use it. Otherwise, use the default. Do not ask to confirm — silently merge and proceed.

- Tunnel name: user mentions a name (e.g., "创建一个叫 my-api 的隧道" → `my-api`)

- Port: user mentions a port number (e.g., "暴露 3000 端口" → `3000`)

- Description: user mentions a description (e.g., "描述是后端API" → `后端API`)

### Quick Create Flow (when user says "创建隧道" without specifics)

```bash

echo "Tunnel ID: $TUNNEL_ID"

```

### Full Workflow (when user provides specific parameters)

### Step 1: Install or Update DevBridge CLI

```bash

devbridge version

devbridge version

```

### Step 2: Load Adaptation Layer & Authenticate

```bash

export PATH="$HOME/.huawei/bin:$PATH"

source <skill_directory>/scripts/devbridge_cmd.sh

db_init

```

### Step 3: Create a Tunnel

```bash

# Note: description only allows Chinese characters, digits, and letters (no spaces), max 64 characters

db_create <name> -d "<description>" -e <expiration>

```

> **Tunnel name conflict handling — the ONLY exception to zero confirmation.** If `db_create` fails with "This tunnel name is already in use":

> 2. Check usage status silently: `db_port_list <tunnelId>` (ports configured?), `ps aux | grep "devbridge host <tunnelId>" | grep -v grep` (active host?), `ps aux | grep "devbridge connect <tunnelId>" | grep -v grep` (active connect sessions?).

> 3. Display tunnel details and usage status: **active** (host running/sessions active — reusing may conflict), **idle** (ports configured but no active process — safe to reuse), or **empty** (no ports — needs setup).

> 4. Present yes/no choice: "隧道名称已存在，当前状态为 <active/idle/empty>，是否复用现有隧道？"

> - **yes** — reuse existing tunnel, continue to Step 4 (skip Step 5 if already active).

> - **no** — ask for a new tunnel name and retry.

### Step 4: Configure Ports

```bash

```

### Step 5: Host Local Service

```bash

nohup python3 -m http.server <port> > /tmp/devbridge-service.log 2>&1 &

```

### Step 6: Connect from Remote Device

```bash

db_connect <tunnelId>

```

Access the service via `http://localhost:8080` on the remote device.

### Step 7: Cleanup

```bash

```

## Core Commands

> **NOTE:** All commands show the `db_*` wrapper form. The adaptation layer automatically detects correct flag names for the installed CLI version.

### Authentication

| Command | Description |

|---------|-------------|

| `devbridge auth status` | Check current login status. |

| `devbridge auth logout` | Clear local credentials. |

### Tunnel Management

| Command | Description |

|---------|-------------|

| `db_create <name> -d <desc> -e <hours>` | Create a tunnel. |

| `db_list` | List active tunnels in the current workspace. |

| `db_show <tunnelId>` | Show tunnel details. |

| `db_update <tunnelId> -n <name> -d <desc> -e <hours>` | Update tunnel name/description/expiration. |

| `db_delete <tunnelId>` | Delete a tunnel. |

| `db_delete_all` | Delete all tunnels in the current workspace. |

| `devbridge token <tunnelId> -s host` | Issue a new Host token. |

| `devbridge token <tunnelId> -s connect` | Issue a new Connect token. |

| `devbridge set <tunnelId>` | Set the default tunnel for this machine. |

| `devbridge unset` | Clear the default tunnel. |

### Port Management

| Command | Description |

|---------|-------------|

| `db_port_list <tunnelId>` | List tunnel ports. |

| `devbridge port show <tunnelId> -p <port>` | Show port details. |

| `db_port_delete <tunnelId> -p <port>` | Delete a port. |

### Host and Connect

| Command | Description |

|---------|-------------|

| `db_host <tunnelId>` | Host all configured ports of an existing tunnel. |

| `db_connect <tunnelId>` | Connect to a tunnel and establish local port mapping. |

## Parameters

| Parameter | CLI Flag | Default | Range / Constraint | Description |

|-----------|----------|---------|---------------------|-------------|

| `<name>` | `db_create` | `dev-tunnel-<random>` | Max 128 chars | Tunnel name. |

| `-d` | `db_create`, `db_update` | `开发隧道` | Chinese chars, digits, letters only (no spaces), max 64 chars | Tunnel description. |

| `-n` | `db_update` | None | — | New tunnel name. |

| `-s` | `token` | Required | `host` or `connect` | Token scope. |

> **Destructive operations** (`db_delete`, `db_delete_all`, `db_port_delete`) should be executed directly without asking for confirmation.

## Output Format

```text

```

```text

```

### Port Creation Output

```text

Port added: TunnelId=noh56s7x, Port=8080

```

### Token Output

```text

Tunnel ID: noh56s7x

Scope: host

Lifetime: 24:00:00

Expires At: 2026-08-09 06:57:10 UTC

Token: <token-value>

```

```

## Verification

For detailed verification steps, see [references/verification-method.md](references/verification-method.md).

Quick verification:

```bash

```

## Best Practices

2. **Set reasonable expiration times** — Use the shortest expiration that covers your work session (default 72 hours, max 720 hours).

4. **Use persistent tunnels for repeated work** — Create a tunnel once and reuse it with `db_host <tunnelId>`.

5. **Set a default tunnel for convenience** — Use `devbridge set <tunnelId>` to avoid specifying the tunnel ID repeatedly.

6. **Clean up after use** — Stop Host/Connect processes and delete tunnels when no longer needed.

7. **Never expose management interfaces** — Admin panels, debug endpoints, and data-modifying APIs should always have anonymous access disabled.

8. **Not for production use** — Development tunnels are for development, debugging, and temporary sharing only.

## Reference Documentation

- [CLI Installation Guide](references/cli-installation-guide.md) — DevBridge CLI installation, PATH configuration, and verification.

- [Verification Method](references/verification-method.md) — Step-by-step verification of installation, configuration, and functionality.

- [Acceptance Criteria](references/acceptance-criteria.md) — Pass/fail criteria for skill testing.

- [CLI Command Reference](references/cli-command-reference.md) — Complete CLI command reference with all parameters.

- [REST API Reference](references/rest-api-reference.md) — REST API for programmatic tunnel and port management.

- [Troubleshooting](references/troubleshooting.md) — Common issues and solutions.

## Notes

### Security

- **Tunnel tokens are sensitive** — Do not write them to logs, URLs, code repositories, or long-term config files.

- **Anonymous access** means anyone with the tunnel address can access the port without DevBridge identity. Enable only for explicitly public content.

### Limitations

- Maximum 10 active tunnels per workspace (default quota).

- Tunnel expiration: 1-720 hours (default 72 hours).

- Port range: 1-65535, ports cannot be duplicated within the same tunnel.

- CLI does not support modifying an existing port's protocol — delete and recreate.

- Port commands do not support the `-d` (description) parameter.

- No bulk port deletion command — delete ports individually or delete the entire tunnel.

### Compatibility

- Linux/macOS requires Bash and `curl`; Windows requires PowerShell 5.1+.

- CLI installs to `~/.huawei/bin`; configuration and state are stored in `~/.huawei/devbridge`.

- Never commit `~/.huawei/devbridge` to version control or share between users.