fix: MCP 工具可发现性不足：CLI 被禁用时未引导使用 MCP 替代方案

[binggg]

Attribution issue

• issueId: issue_mo8y7mwz_mlzskt
• category: tool
• canonicalTitle: MCP 工具可发现性不足：CLI 被禁用时未引导使用 MCP 替代方案
• representativeRun: atomic-js-cloudbase-cli-role-get/2026-04-21T18-17-19-bvs713

Automation summary

• root_cause: When CloudBase CLI (tcb) is disabled (tcbCliEnabled=false), agents attempting role/permission/user management tasks have no discoverable guidance to use the MCP tools queryPermissions/managePermissions as alternatives. The queryPermissions tool supports listRoles, getRole, listUsers, getUser actions, and managePermissions supports createRole, updateRole, deleteRoles, addRoleMembers, etc. — but the skill docs and tool descriptions never mapped these to their CLI equivalents (tcb role, tcb permission, tcb user), so agents encountering CLI-disabled environments give up after errors instead of rerouting to MCP.
• changes: (1) Added a "CLI → MCP Alternative Mapping" section to config/source/skills/cloudbase-platform/SKILL.md with detailed tables mapping every tcb role/permission/user command to its queryPermissions/managePermissions equivalent with exact action names and parameter examples. (2) Added a 4th point to the "When Using CLI for Resource Management" section in config/source/guideline/cloudbase/SKILL.md directing agents to use MCP tools when CLI is unavailable, with key mappings. (3) Enhanced the queryPermissions and `ma

Changed files

• config/source/guideline/cloudbase/SKILL.md
• config/source/skills/cloudbase-platform/SKILL.md
• mcp/src/tools/permissions.ts

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.

[binggg]

Attribution post-PR evaluation

• visibility: internal identifiers, run ids, and private links are intentionally omitted
• attempt: 1
• eval_scope: primary_only
• overall: ERROR
• summary: post-PR evaluation errored
• updated_at: 2026-05-06T20:48:43.631Z

Cases

• [ERROR] — primary — evaluation errored

[binggg]

Closing as duplicate: same case has newer PR #642. Keeping #642.