docs(skills): clarify miniapp CLI coverage so it stops reading web-only

registry.json

@@ -21,7 +21,7 @@
     },
     "skills": {
       "url": "skills/index.json",
-      "version": "1.1.2",
+      "version": "1.1.3",
       "summary": "AI agent skills (Cursor, Claude Code, etc.)"
     }
   }

skills/core/tuyaopen-start/SKILL.md

@@ -15,7 +15,7 @@ compatibility: tuyaopen CLI, either form — bundled with the IDE (out/cli/cli.j
   the standalone npm package (@tuya/tuyaopen-cli, `tuyaopen-cli` binary on PATH); Node.js (whatever version the
   CLI you found reports via `diag doctor --json`)
 metadata:
-  version: 2.0.2
+  version: 2.0.3
   owner: core-team
   deprecated: false
   min-cli-version: 0.1.0-beta.17
@@ -108,7 +108,7 @@ tuyaopen-cli skills install --ids <ids> --yes
 | 动作 | 你能做的 | 用户必须做的 |
 |---|---|---|
 | **平台登录** | `tuyaopen-cli credential login --emit-url` —— 它把 URL 打到 stdout 一行 JSON 并**等待** | 在浏览器里打开那个 URL 完成授权。**把 URL 给他**，不要只说"请登录" |
-| **申领 appid / 网页步骤** | 把带好参数的 URL 拼出来（skill `tuyaopen-miniapp` § 0.2 ③） | 在网页上操作 |
+| **申领 appid / 网页步骤** | appid 只在网页控制台签发——说清在哪个产品下申领；有 appid 之后的版本页 / 绑定页参数化 URL 由 `tuyaopen-cli miniapp upload` 的 `webSteps` 信封携带（2026-09-28 起，原 `tuyaopen-miniapp` § 0.2 ③ 锚点在 capability-broker 迁移中已随正文消失） | 在网页上操作 |
 | **授权码** | 说明为什么需要、怎么取（skill `tuyaopen-embedded-device-auth`） | 提供码，并确认它当前没被别的设备占用 |
 | **手机配网** | 说清前置状态（已写码、设备处于配网态） | 装智能生活 / Smart Life，账号区域与产品一致，App 里添加设备 |
 

skills/index.json

@@ -1,12 +1,12 @@
 {
   "schemaVersion": 1,
   "domain": "skills",
-  "publishedAt": "2026-09-18T05:52:59Z",
+  "publishedAt": "2026-09-28T03:30:00Z",
   "publishedBy": "tuya/tuyaopen-ide-manifests",
   "items": [
     {
       "id": "tuyaopen-start",
-      "version": "2.0.2",
+      "version": "2.0.3",
       "group": "core",
       "order": 0,
       "name": {
@@ -892,7 +892,7 @@
     },
     {
       "id": "tuyaopen-miniapp",
-      "version": "2.5.2",
+      "version": "2.5.3",
       "group": "miniapp",
       "order": 98,
       "name": {
@@ -923,7 +923,7 @@
       ],
       "cli": {
         "groups": "none",
-        "reason": "Shared MiniApp guidance uses IDE surfaces and Broker capability IDs; direct tuyaopen-cli invocation is not part of this payload."
+        "reason": "Shared MiniApp guidance uses IDE surfaces and Broker capability IDs; this payload names no tuyaopen-cli group itself. The heading means no native subcommands - it does not mean the platform steps are web-only; the CLI publishes that route in its miniapp upload envelope."
       },
       "defaultEnabled": false,
       "installPayload": "miniapp/tuyaopen-miniapp",
@@ -957,7 +957,7 @@
     },
     {
       "id": "miniapp-development-workflow",
-      "version": "2.7.3",
+      "version": "2.7.4",
       "group": "miniapp",
       "order": 99,
       "name": {
@@ -984,7 +984,7 @@
       ],
       "cli": {
         "groups": "none",
-        "reason": "Shared MiniApp workflow uses IDE surfaces, Broker capability IDs, and neutral platform tooling; direct tuyaopen-cli invocation is not part of this payload."
+        "reason": "Broker capabilities are this payload's only executable vocabulary (repo gate skillIsolationScan). The shell route for submit/release/bind is published by the CLI itself - the miniapp upload envelope's webSteps block and schema list - not by any skill."
       },
       "defaultEnabled": true,
       "installPayload": "miniapp/miniapp-development-workflow",

skills/miniapp/miniapp-development-workflow/SKILL.md

@@ -4,7 +4,7 @@ description: 'Shared MiniApp 小程序 and 面板 development and release workfl
 license: Apache-2.0
 compatibility: An authenticated IDE session with an open MiniApp project
 metadata:
-  version: 2.7.3
+  version: 2.7.4
   owner: miniapp-team
   deprecated: false
 ---
@@ -17,8 +17,20 @@ specific command syntax in this skill.
 
 ## No `tuyaopen-cli` CLI coverage
 
-This shared workflow is executed through IDE Agent Tools and Broker
-capabilities; it has no direct command-line coverage.
+This payload's executable vocabulary is Broker capabilities only — it
+deliberately publishes no shell commands. The executable CLI route lives in
+the CLI's own discovery surfaces, which are always present, always current,
+and read by agents that never open a skill:
+
+- the `miniapp upload` JSON envelope's `webSteps` block, whose `order` array
+  spells the post-upload route (submit for review, release, bind) command by
+  command, with web fallback URLs; and
+- `schema list` / `schema get`, which describe every command and flag the
+  installed CLI actually carries.
+
+Read the absence of commands here precisely: it does NOT mean any step is
+web-only. Submit for review, release, and bind are all scriptable outside the
+IDE; this document is just not the place that publishes the commands.
 
 ## One request contract
 

skills/miniapp/tuyaopen-miniapp/SKILL.md

@@ -4,7 +4,7 @@ description: 'Use IDE Agent Tools and the Capability Broker for shared MiniApp t
 license: Apache-2.0
 compatibility: An authenticated IDE session with an open TuyaOpen or TuyaOS MiniApp project
 metadata:
-  version: 2.5.2
+  version: 2.5.3
   owner: miniapp-team
   deprecated: false
 ---
@@ -18,8 +18,13 @@ and project before the Agent invokes a capability.
 
 ## No `tuyaopen-cli` CLI coverage
 
-The shared payload is executed through IDE Agent Tools and Broker capabilities;
-it has no direct command-line coverage.
+This shared payload is executed through IDE Agent Tools and Broker
+capabilities; it has no direct command-line coverage. That statement is about
+this payload's own surface only — it does NOT mean the workflow's platform
+steps (submit for review, release, bind) are web-only. Outside the IDE the
+same steps are scriptable, and the CLI publishes that route itself: in the
+`miniapp upload` envelope's `webSteps` block, and via `schema list`
+discovery. Per-command inputs stay with `capability.describe`.
 
 ## Exact Agent Tool contract