MaxCompute Project Management

Manage Alibaba Cloud MaxCompute (ODPS) Projects including creation, querying, and listing operations.

Prerequisites

Pre-check: Aliyun CLI >= 3.3.3 required

> Run aliyun version to verify >= 3.3.3. If not installed or version too low,

> run curl -fsSL https://aliyuncli.alicdn.com/setup.sh | bash to update,

> or see references/cli-installation-guide.md for installation instructions.

>

> Then [MUST] run aliyun plugin update to ensure that any existing plugins on your local machine are always up-to-date.

[MUST] CLI User-Agent — Every aliyun CLI command invocation must include:

--user-agent AlibabaCloud-Agent-Skills/alibabacloud-odps-project-manage

[MUST] AI-Mode Commands — When using aliyun CLI, declare AI-Mode lifecycle:

1. Enable AI-Mode before commands:

```bash

aliyun configure ai-mode enable

```

1. Set User-Agent for AI-Mode:

```bash

aliyun configure ai-mode set-user-agent --user-agent "AlibabaCloud-Agent-Skills/alibabacloud-odps-project-manage"

```

1. Disable AI-Mode after workflow ends:

```bash

aliyun configure ai-mode disable

```

Quick Start

When user asks about MaxCompute projects, follow these steps:

1. Identify intent: create / list / get
2. Get RegionId: Ask user which region (e.g., cn-hangzhou, cn-shanghai)
3. Execute: Run the appropriate command with --region {REGION_ID} and --user-agent AlibabaCloud-Agent-Skills/alibabacloud-odps-project-manage
4. Verify: Confirm the result and report to user

Pre-flight Checklist (Execute BEFORE every command)

You MUST verify ALL of these before running any command:

• [ ] I have asked the user for RegionId (not using default)
• [ ] I have the actual RegionId value from user (not placeholder)
• [ ] My command includes --region {ACTUAL_REGION_ID}
• [ ] My command includes --user-agent AlibabaCloud-Agent-Skills/alibabacloud-odps-project-manage
• [ ] I am NOT reading or echoing any AK/SK values
• [ ] I am NOT using hardcoded values for user-provided parameters

If ANY check fails, STOP and fix before proceeding.

Task Completion Checklist

CRITICAL: You MUST complete ALL steps in order. Do NOT stop early.

For LIST Projects:

1. [ ] Ask user: "Which region would you like to query? (e.g., cn-hangzhou, cn-shanghai)"
2. [ ] Ask user: "Which quota nickname to filter by? (e.g., os_PayAsYouGoQuota, or press Enter for default)"
3. [ ] MUST use quota-nick-name parameter:
• If user specified a quota: Use --quota-nick-name={USER_QUOTA}
• If user didn't specify: Use --quota-nick-name=os_PayAsYouGo
4. [ ] Execute with REQUIRED parameters:

```bash

aliyun maxcompute list-projects --region {REGION_ID} --quota-nick-name={QUOTA_NICKNAME} --max-item=20 --user-agent AlibabaCloud-Agent-Skills/alibabacloud-odps-project-manage

```

1. [ ] Wait for command output
2. [ ] If 400 error (quota not found):
• Call aliyun maxcompute list-quotas --billing-type ALL --region {REGION_ID} --user-agent AlibabaCloud-Agent-Skills/alibabacloud-odps-project-manage
• Present available quotas to user for selection
• Re-run list-projects with user-selected quota
3. [ ] Parse response and present results
4. [ ] Confirm task completion

FORBIDDEN:

• ❌ Use --marker for pagination
• ❌ Fetch all projects then filter locally with Python/jq
• ❌ Call API without --quota-nick-name parameter

REQUIRED:

• ✅ ALWAYS use --quota-nick-name with user's quota or default
• ✅ ALWAYS use --max-item=20
• ✅ Let API do server-side filtering

For GET Project:

1. [ ] Ask user: "Which region? (e.g., cn-hangzhou)"
2. [ ] Ask user: "What is the project name?"
3. [ ] Execute: aliyun maxcompute get-project --region {REGION_ID} --project-name {PROJECT_NAME} --user-agent AlibabaCloud-Agent-Skills/alibabacloud-odps-project-manage
4. [ ] Wait for command output
5. [ ] Parse the JSON response - look for data.name, data.status, data.owner
6. [ ] Present project details to user in a clear format
7. [ ] Confirm task completion to user

For CREATE Project:

1. [ ] Ask user: "Which region to create in? (e.g., cn-hangzhou)"
2. [ ] Ask user: "What is the project name?"
3. [ ] MANDATORY VALIDATION: If project name is empty or whitespace, STOP and ask user again: "Project name cannot be empty. Please provide a valid project name."
4. [ ] CRITICAL: Store the user's exact project name - do NOT use placeholder text
5. [ ] MUST call list-quotas: Execute: aliyun maxcompute list-quotas --billing-type ALL --region {REGION_ID} --user-agent AlibabaCloud-Agent-Skills/alibabacloud-odps-project-manage
6. [ ] Wait for command output
7. [ ] Parse list-quotas response: Find a quota with nickName and its secondary quotas (look in data.quotas[].subQuotas or similar)
8. [ ] STRICT VALIDATION: Select a secondary quota's nickName from the list-quotas response (NOT the primary quota)
9. [ ] TRIM WHITESPACE: Remove any leading/trailing spaces from the quota nickName. If nickName contains internal spaces, trim them or select a different quota
10. [ ] PRE-FLIGHT CHECK: Verify you have actual values for REGION_ID, PROJECT_NAME, and SECONDARY_QUOTA_NICKNAME (trimmed, no spaces)
11. [ ] Ask for typeSystem (optional): "Which typeSystem? (1=MaxCompute, 2=MaxCompute2, hive=Hive compatible; default: 2)"
12. [ ] Validate typeSystem: Must be "1", "2", or "hive". If not specified or invalid, use default "2"
13. [ ] Execute create command with ACTUAL values:

```bash

aliyun maxcompute create-project --region {ACTUAL_REGION} --body '{"name":"ACTUAL_PROJECT_NAME","defaultQuota":"SECONDARY_QUOTA_NICKNAME","productType":"payasyougo","typeSystem":"TYPE_SYSTEM_VALUE"}' --user-agent AlibabaCloud-Agent-Skills/alibabacloud-odps-project-manage

```

Example with real values:

```bash

aliyun maxcompute create-project --region cn-hangzhou --body '{"name":"my-project-123","defaultQuota":"os_PayAsYouGoQuota_sub","productType":"payasyougo","typeSystem":"2"}' --user-agent AlibabaCloud-Agent-Skills/alibabacloud-odps-project-manage

```

1. [ ] Wait for command output
2. [ ] CHECK CREATE RESPONSE: If create command returned error (non-2xx), STOP and report error to user. Do NOT proceed to verification.
3. [ ] ONLY IF create succeeded: Verify by executing: aliyun maxcompute get-project --region {REGION_ID} --project-name {PROJECT_NAME} --user-agent AlibabaCloud-Agent-Skills/alibabacloud-odps-project-manage
4. [ ] CRITICAL: Verify the response contains the CORRECT project name (the one user requested, not a different project)
5. [ ] CHECK STATUS: Verify response contains "status":"AVAILABLE"
6. [ ] If verification returns 403/Access Denied: Inform user about permission requirements and stop
7. [ ] If project not found: Report "Project creation failed - project not found after creation"
8. [ ] If wrong project returned: Report error - do not use a different project as substitute
9. [ ] ONLY IF all checks pass: Confirm to user: "Project {PROJECT_NAME} created successfully with status AVAILABLE"

If User Requests Deletion:

Respond: "Project deletion is not supported by this skill. Please use the Alibaba Cloud Console or contact your administrator."

Common Errors & Solutions

Forbidden Actions

> CRITICAL: Never do these:

> 1. NEVER read/echo AK/SK values (e.g., echo $ALIBABA_CLOUD_ACCESS_KEY_ID)

> 2. NEVER use hardcoded values — always ask user for parameters, then use their ACTUAL answer (not placeholder text)

> 3. NEVER use aliyun configure set with literal credential values

> 4. NEVER run aliyun ram commands

> 5. NEVER execute ANY command without --user-agent AlibabaCloud-Agent-Skills/alibabacloud-odps-project-manage

> 6. NEVER skip asking for RegionId — this is ALWAYS required

> 7. NEVER assume a default region — always ask the user

> 8. NEVER use uppercase API action format as CLI commands — ALWAYS use plugin format with lowercase and hyphens (e.g., create-project)

> 9. NEVER execute aliyun maxcompute delete-project — project deletion is NOT supported by this skill

Negative Examples

Architecture

MaxCompute Service
    └── Project (Workspace)
          ├── defaultQuota (Compute Resource - MUST exist before project creation)
          ├── productType (payasyougo/subscription)
          └── typeSystem ("1", "2", or "hive"; default: "2")

Dependencies

> Prerequisite: Quota must exist before creating a project.

>

> Every MaxCompute project requires a compute quota (defaultQuota). The quota must already exist in your account — if it does not, the create-project call will fail with get project default quota error.

>

> Use the alibabacloud-odps-quota-manage skill to create or query quotas:

> - Pay-as-you-go: aliyun maxcompute create-quota --charge-type payasyougo --commodity-code odps --region --user-agent AlibabaCloud-Agent-Skills/alibabacloud-odps-project-manage

> - Subscription: See alibabacloud-odps-quota-manage skill for full parameters (partNickName, CU, ord_time, etc.)

> - List existing quotas: aliyun maxcompute list-quotas --billing-type ALL --region --user-agent AlibabaCloud-Agent-Skills/alibabacloud-odps-project-manage

>

> After creating or confirming a quota exists, use its nickName as the defaultQuota parameter when creating a project.

Installation

Pre-check: Aliyun CLI >= 3.3.3 required

> Run aliyun version to verify >= 3.3.3. If not installed or version too low,

> run curl -fsSL https://aliyuncli.alicdn.com/setup.sh | bash to update,

> or see references/cli-installation-guide.md for installation instructions.

Pre-check: Aliyun CLI plugin update required

> [MUST] run aliyun configure set --auto-plugin-install true to enable automatic plugin installation.

> [MUST] run aliyun plugin update to ensure that any existing plugins are always up-to-date.

# Install/Update Alibaba Cloud CLI
curl -fsSL https://aliyuncli.alicdn.com/setup.sh | bash

# Verify version (must be >= 3.3.3)
aliyun version

# Enable auto plugin installation
aliyun configure set --auto-plugin-install true

# Update plugins
aliyun plugin update

Environment Variables

No additional environment variables required beyond standard Alibaba Cloud credentials.

Authentication

CRITICAL: You MUST check credentials before ANY operation.

Allowed Credential Check (ONLY this command):

aliyun configure list

What to look for:

• Output shows at least one profile with mode: AK or mode: StsToken
• Profile shows access_key_id: ** (masked is OK)

If NO valid profile:

• Tell user: "Please run aliyun configure to set up credentials first."
• STOP - Do not proceed with any MaxCompute commands

FORBIDDEN - NEVER do these:

• ❌ echo $ALIBABA_CLOUD_ACCESS_KEY_ID
• ❌ echo $ALIBABA_CLOUD_ACCESS_KEY_SECRET
• ❌ aliyun configure get | grep access-key
• ❌ Any command that displays actual credential values

RAM Policy

> [MUST] RAM Permission Pre-check: Before executing the workflow, verify that the current user has the required permissions.

>

> Required permissions are listed in references/ram-policies.md.

>

> Note: You do NOT need to verify RAM permissions via CLI commands. The permissions listed in ram-policies.md are for user reference only. Proceed with the workflow assuming the user has configured appropriate permissions.

Parameters

Always ask user for these values — never assume defaults:

Example Conversation

LIST: User asks → Agent requests RegionId → Agent executes list-projects → Agent presents results

CREATE: User asks → Agent requests RegionId → Agent requests projectName → Agent calls list-quotas → Agent creates project → Agent verifies → Agent confirms success

Commands

List Projects

# Ask user for quota nickname first, then:
aliyun maxcompute list-projects --region {REGION_ID} --quota-nick-name={QUOTA_NICKNAME} --max-item=20 --user-agent AlibabaCloud-Agent-Skills/alibabacloud-odps-project-manage

MUST: Always use --quota-nick-name parameter (user-specified or default). Never fetch all and filter locally.

Get Project

aliyun maxcompute get-project --region {REGION_ID} --project-name {PROJECT_NAME} --user-agent AlibabaCloud-Agent-Skills/alibabacloud-odps-project-manage

Create Project

1. List quotas first:

aliyun maxcompute list-quotas --billing-type ALL --region {REGION_ID} --user-agent AlibabaCloud-Agent-Skills/alibabacloud-odps-project-manage

1. Create with quota nickName from response:

aliyun maxcompute create-project --region {REGION_ID} --body '{"name":"{PROJECT_NAME}","defaultQuota":"{QUOTA_NICKNAME}","productType":"payasyougo"}' --user-agent AlibabaCloud-Agent-Skills/alibabacloud-odps-project-manage

Success Verification Method

See references/verification-method.md for detailed verification steps.

Verification Command:

aliyun maxcompute get-project --region {REGION_ID} --project-name {PROJECT_NAME} --user-agent AlibabaCloud-Agent-Skills/alibabacloud-odps-project-manage

Success Criteria:

• Response contains "status":"AVAILABLE"
• Response contains correct "name" matching the created project
• Response contains correct "defaultQuota" matching the specified quota

If verification fails:

1. Check error message for specific issue
2. Report failure reason to user
3. Suggest corrective action based on error type

Limitations

The following operations cannot be performed via CLI/API and require Console access:

API and Command Tables

See references/related-apis.md for complete API reference.

Skill Completion Criteria (REQUIRED for skill_pass)

For skill_pass_rate to be successful, ALL of these MUST be true:

Universal Requirements (ALL operations):

1. ✅ User was asked for RegionId and provided an answer
2. ✅ ALL commands used --region {USER_PROVIDED_VALUE} (not hardcoded)
3. ✅ ALL commands included --user-agent AlibabaCloud-Agent-Skills/alibabacloud-odps-project-manage
4. ✅ No forbidden actions were performed (no credential echoing, no ram commands)
5. ✅ Task result was reported to user clearly

Operation-Specific Requirements:

LIST:

• Command executed: aliyun maxcompute list-projects --region {REGION} --quota-nick-name=os_PayAsYouGo --max-item=20 --user-agent AlibabaCloud-Agent-Skills/alibabacloud-odps-project-manage
• MUST include --quota-nick-name=os_PayAsYouGo parameter for first attempt
• MUST include --max-item=20 parameter
• If first attempt fails with 400 error, retry with --quota-nick-name=os_PayAsYouGoQuota
• Results presented to user (list of projects or "no projects found")

GET:

• Command executed: aliyun maxcompute get-project --region {REGION} --project-name {NAME} --user-agent AlibabaCloud-Agent-Skills/alibabacloud-odps-project-manage
• Project details presented to user

CREATE:

• User was asked for RegionId and projectName (actual values obtained)
• Quota was listed first: aliyun maxcompute list-quotas --billing-type ALL --region {REGION} --user-agent AlibabaCloud-Agent-Skills/alibabacloud-odps-project-manage
• MUST use actual values in body - NOT placeholders like {PROJECT_NAME}
• Create command format: --body '{"name":"ACTUAL_NAME","defaultQuota":"ACTUAL_QUOTA","productType":"payasyougo"}'
• MUST check create response for errors before proceeding
• Verification command executed: aliyun maxcompute get-project --region {REGION} --project-name {NAME} --user-agent AlibabaCloud-Agent-Skills/alibabacloud-odps-project-manage
• MUST verify the project name in response matches the requested project
• MUST verify status is AVAILABLE
• If verification fails due to permissions (403), inform user and stop
• If project not found or wrong project returned, report failure
• If verification succeeds (status=AVAILABLE), confirm success to user

• If user requests deletion, inform them to use Alibaba Cloud Console

Final Skill Pass Check:

Before responding to user, verify:
□ I followed the correct workflow for the operation type
□ I asked for ALL required parameters from user
□ I used user's actual values in commands (not placeholders or defaults)
□ I included --user-agent AlibabaCloud-Agent-Skills/alibabacloud-odps-project-manage in EVERY command
□ I did NOT perform any forbidden actions
□ I reported the final result to user

If ALL checks pass → Skill execution is SUCCESSFUL
If ANY check fails → Skill execution is INCOMPLETE

Final Verification (Before Marking Task Complete)

You MUST verify ALL of these before telling user the task is done:

For LIST:

• [ ] I asked for RegionId and got user's answer
• [ ] I executed list-projects with --region {USER_ANSWER} and --user-agent AlibabaCloud-Agent-Skills/alibabacloud-odps-project-manage
• [ ] I presented the results to user clearly

For GET:

• [ ] I asked for RegionId and got user's answer
• [ ] I asked for projectName and got user's answer
• [ ] I executed get-project with user's values and --user-agent AlibabaCloud-Agent-Skills/alibabacloud-odps-project-manage
• [ ] I presented project details to user clearly

For CREATE:

• [ ] I asked for RegionId and got user's answer
• [ ] I asked for projectName and got user's answer
• [ ] I executed list-quotas to get a valid quota
• [ ] I executed create-project with user's values and --user-agent AlibabaCloud-Agent-Skills/alibabacloud-odps-project-manage
• [ ] I verified creation by calling get-project
• [ ] I confirmed success to user

For DELETE:

• [ ] Inform user that deletion is not supported and suggest using Alibaba Cloud Console

If ANY check fails, the task is NOT complete.

Best Practices

1. Naming Convention: Use lowercase letters, numbers, and underscores for project names
2. Quota Selection: Choose appropriate quota based on workload requirements
3. Product Type: Use payasyougo for development/testing, subscription for production with predictable workloads
4. Type System: Use 2 (MaxCompute) for new projects unless Hive compatibility is required
5. Resource Cleanup: Always clean up test projects to avoid unnecessary costs

Reference Links