Skip to content

fix: MCP 工具能力映射不清导致 CLI 任务无法正确迁移 #642

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
binggg wants to merge 1 commit into
base: main
Choose a base branch
from
Open

fix: MCP 工具能力映射不清导致 CLI 任务无法正确迁移 #642

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
55 changes: 55 additions & 0 deletions config/.claude/skills/cloudbase-cli/SKILL.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -57,6 +57,61 @@ Use when the user wants to manage CloudBase resources via command line:
- Console UI operations
- CloudBase Agent SDK development → use `cloudbase-agent-ts`

## CLI → MCP Tool Mapping (when CLI is disabled)

When the runtime environment disables CLI (e.g., MCP-only mode), use these MCP tool equivalents instead of `tcb` commands:

### Permission & Role Management

| CLI Command | MCP Tool Equivalent |
|-------------|---------------------|
| `tcb role list` | `queryPermissions(action="listRoles")` |
| `tcb role get --id <roleId>` | `queryPermissions(action="getRole", roleId="<roleId>")` |
| `tcb role get --identity <identity>` | `queryPermissions(action="getRole", roleIdentity="<identity>")` |
| `tcb role get --name <name>` | `queryPermissions(action="getRole", roleName="<name>")` |
| `tcb role create --name <n> --identity <i>` | `managePermissions(action="createRole", roleName="<n>", roleIdentity="<i>", policies=[...], memberUids=[...])` |
| `tcb role update --id <id> --add-users` | `managePermissions(action="updateRole", roleId="<id>", memberUids=[...])` or `managePermissions(action="addRoleMembers", ...)` |
| `tcb role update --id <id> --add-policies` | `managePermissions(action="addRolePolicies", roleId="<id>", policies=[...])` |
| `tcb role delete <ids...>` | `managePermissions(action="deleteRoles", roleIds=[...])` |
| `tcb permission get table:users` | `queryPermissions(action="getResourcePermission", resourceType="sqlDatabase", resourceId="users")` |
| `tcb permission get collection:posts` | `queryPermissions(action="getResourcePermission", resourceType="noSqlDatabase", resourceId="posts")` |
| `tcb permission set table:users --level readonly` | `managePermissions(action="updateResourcePermission", resourceType="sqlDatabase", resourceId="users", permission="READONLY")` |

### User Management

| CLI Command | MCP Tool Equivalent |
|-------------|---------------------|
| `tcb user list` | `queryPermissions(action="listUsers")` |
| `tcb user list --name <name>` | `queryPermissions(action="listUsers", username="<name>")` |
| `tcb user update <uid> --status BLOCKED` | `managePermissions(action="updateUser", uid="<uid>", userStatus="BLOCKED")` |

### Function Management

| CLI Command | MCP Tool Equivalent |
|-------------|---------------------|
| `tcb fn list` | `queryFunctions(action="listFunctions")` |
| `tcb fn detail <name>` | `queryFunctions(action="getFunction", functionName="<name>")` |
| `tcb fn logs <name>` | `queryFunctions(action="getFunctionLogs", functionName="<name>")` |
| `tcb fn deploy` | `manageFunctions(action="updateFunctionCode", functionRootPath="...", functionName="...")` |
| `tcb fn create` | `manageFunctions(action="createFunction", ...)` |

### Database Operations

| CLI Command | MCP Tool Equivalent |
|-------------|---------------------|
| `tcb db list` | `readNoSqlDatabaseStructure(action="listCollections")` |
| `tcb db query <collection>` | `readNoSqlDatabaseContent(collection="<collection>", ...)` |
| `tcb mysql query "SELECT..."` | `querySqlDatabase(action="executeReadSQL", statement="SELECT...")` |

### Storage & Hosting

| CLI Command | MCP Tool Equivalent |
|-------------|---------------------|
| `tcb hosting deploy ./dist` | `uploadFiles(localPath="./dist", cloudPath="/")` |
| `tcb storage upload ./file.txt /path` | `manageStorage(action="uploadFile", localPath="./file.txt", cloudPath="/path")` |

> ⚠️ **Important**: When CLI is disabled, do NOT attempt to run `tcb` commands via shell. Use the MCP tool equivalents listed above. Check the runtime capability notice at the start of the conversation to determine which capabilities are enabled.

## How to use this skill (for a coding agent)

1. **Always load `references/core.md` first** — it covers authentication,
Expand Down
21 changes: 21 additions & 0 deletions config/.claude/skills/cloudbase-cli/references/permission.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,6 +10,27 @@ CloudBase access control has **three independent layers** — know which one to

> ⚠️ Role policies and resource permissions are **two parallel systems with NO automatic sync**. Changing a role policy does NOT affect `permission get` results, and vice versa. Audit both separately.

## MCP Tool Equivalents (when CLI is disabled)

If the runtime environment shows CLI is disabled, use these MCP tools instead:

| CLI Command | MCP Tool Call |
|-------------|---------------|
| `tcb role list` | `queryPermissions(action="listRoles")` |
| `tcb role get --id <id>` | `queryPermissions(action="getRole", roleId="<id>")` |
| `tcb role get --identity <i>` | `queryPermissions(action="getRole", roleIdentity="<i>")` |
| `tcb role get --name <n>` | `queryPermissions(action="getRole", roleName="<n>")` |
| `tcb role create` | `managePermissions(action="createRole", roleName, roleIdentity, policies, memberUids)` |
| `tcb role update --add-users` | `managePermissions(action="addRoleMembers", roleId, memberUids)` |
| `tcb role update --add-policies` | `managePermissions(action="addRolePolicies", roleId, policies)` |
| `tcb role delete` | `managePermissions(action="deleteRoles", roleIds)` |
| `tcb permission get table:users` | `queryPermissions(action="getResourcePermission", resourceType="sqlDatabase", resourceId="users")` |
| `tcb permission set table:users --level readonly` | `managePermissions(action="updateResourcePermission", resourceType="sqlDatabase", resourceId="users", permission="READONLY")` |
| `tcb user list` | `queryPermissions(action="listUsers")` |
| `tcb user update <uid> --status BLOCKED` | `managePermissions(action="updateUser", uid="<uid>", userStatus="BLOCKED")` |

> ⚠️ Do NOT attempt `tcb` commands when CLI is disabled. Check the runtime capability notice to determine available interfaces.

---

## When to Use
Expand Down
55 changes: 55 additions & 0 deletions config/source/skills/cloudbase-cli/SKILL.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -57,6 +57,61 @@ Use when the user wants to manage CloudBase resources via command line:
- Console UI operations
- CloudBase Agent SDK development → use `cloudbase-agent-ts`

## CLI → MCP Tool Mapping (when CLI is disabled)

When the runtime environment disables CLI (e.g., MCP-only mode), use these MCP tool equivalents instead of `tcb` commands:

### Permission & Role Management

| CLI Command | MCP Tool Equivalent |
|-------------|---------------------|
| `tcb role list` | `queryPermissions(action="listRoles")` |
| `tcb role get --id <roleId>` | `queryPermissions(action="getRole", roleId="<roleId>")` |
| `tcb role get --identity <identity>` | `queryPermissions(action="getRole", roleIdentity="<identity>")` |
| `tcb role get --name <name>` | `queryPermissions(action="getRole", roleName="<name>")` |
| `tcb role create --name <n> --identity <i>` | `managePermissions(action="createRole", roleName="<n>", roleIdentity="<i>", policies=[...], memberUids=[...])` |
| `tcb role update --id <id> --add-users` | `managePermissions(action="updateRole", roleId="<id>", memberUids=[...])` or `managePermissions(action="addRoleMembers", ...)` |
| `tcb role update --id <id> --add-policies` | `managePermissions(action="addRolePolicies", roleId="<id>", policies=[...])` |
| `tcb role delete <ids...>` | `managePermissions(action="deleteRoles", roleIds=[...])` |
| `tcb permission get table:users` | `queryPermissions(action="getResourcePermission", resourceType="sqlDatabase", resourceId="users")` |
| `tcb permission get collection:posts` | `queryPermissions(action="getResourcePermission", resourceType="noSqlDatabase", resourceId="posts")` |
| `tcb permission set table:users --level readonly` | `managePermissions(action="updateResourcePermission", resourceType="sqlDatabase", resourceId="users", permission="READONLY")` |

### User Management

| CLI Command | MCP Tool Equivalent |
|-------------|---------------------|
| `tcb user list` | `queryPermissions(action="listUsers")` |
| `tcb user list --name <name>` | `queryPermissions(action="listUsers", username="<name>")` |
| `tcb user update <uid> --status BLOCKED` | `managePermissions(action="updateUser", uid="<uid>", userStatus="BLOCKED")` |

### Function Management

| CLI Command | MCP Tool Equivalent |
|-------------|---------------------|
| `tcb fn list` | `queryFunctions(action="listFunctions")` |
| `tcb fn detail <name>` | `queryFunctions(action="getFunction", functionName="<name>")` |
| `tcb fn logs <name>` | `queryFunctions(action="getFunctionLogs", functionName="<name>")` |
| `tcb fn deploy` | `manageFunctions(action="updateFunctionCode", functionRootPath="...", functionName="...")` |
| `tcb fn create` | `manageFunctions(action="createFunction", ...)` |

### Database Operations

| CLI Command | MCP Tool Equivalent |
|-------------|---------------------|
| `tcb db list` | `readNoSqlDatabaseStructure(action="listCollections")` |
| `tcb db query <collection>` | `readNoSqlDatabaseContent(collection="<collection>", ...)` |
| `tcb mysql query "SELECT..."` | `querySqlDatabase(action="executeReadSQL", statement="SELECT...")` |

### Storage & Hosting

| CLI Command | MCP Tool Equivalent |
|-------------|---------------------|
| `tcb hosting deploy ./dist` | `uploadFiles(localPath="./dist", cloudPath="/")` |
| `tcb storage upload ./file.txt /path` | `manageStorage(action="uploadFile", localPath="./file.txt", cloudPath="/path")` |

> ⚠️ **Important**: When CLI is disabled, do NOT attempt to run `tcb` commands via shell. Use the MCP tool equivalents listed above. Check the runtime capability notice at the start of the conversation to determine which capabilities are enabled.

## How to use this skill (for a coding agent)

1. **Always load `references/core.md` first** — it covers authentication,
Expand Down
21 changes: 21 additions & 0 deletions config/source/skills/cloudbase-cli/references/permission.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,6 +10,27 @@ CloudBase access control has **three independent layers** — know which one to

> ⚠️ Role policies and resource permissions are **two parallel systems with NO automatic sync**. Changing a role policy does NOT affect `permission get` results, and vice versa. Audit both separately.

## MCP Tool Equivalents (when CLI is disabled)

If the runtime environment shows CLI is disabled, use these MCP tools instead:

| CLI Command | MCP Tool Call |
|-------------|---------------|
| `tcb role list` | `queryPermissions(action="listRoles")` |
| `tcb role get --id <id>` | `queryPermissions(action="getRole", roleId="<id>")` |
| `tcb role get --identity <i>` | `queryPermissions(action="getRole", roleIdentity="<i>")` |
| `tcb role get --name <n>` | `queryPermissions(action="getRole", roleName="<n>")` |
| `tcb role create` | `managePermissions(action="createRole", roleName, roleIdentity, policies, memberUids)` |
| `tcb role update --add-users` | `managePermissions(action="addRoleMembers", roleId, memberUids)` |
| `tcb role update --add-policies` | `managePermissions(action="addRolePolicies", roleId, policies)` |
| `tcb role delete` | `managePermissions(action="deleteRoles", roleIds)` |
| `tcb permission get table:users` | `queryPermissions(action="getResourcePermission", resourceType="sqlDatabase", resourceId="users")` |
| `tcb permission set table:users --level readonly` | `managePermissions(action="updateResourcePermission", resourceType="sqlDatabase", resourceId="users", permission="READONLY")` |
| `tcb user list` | `queryPermissions(action="listUsers")` |
| `tcb user update <uid> --status BLOCKED` | `managePermissions(action="updateUser", uid="<uid>", userStatus="BLOCKED")` |

> ⚠️ Do NOT attempt `tcb` commands when CLI is disabled. Check the runtime capability notice to determine available interfaces.

---

## When to Use
Expand Down
Loading