tokrepo-mcp-server 2.12.0 → 2.12.2

package/README.md

@@ -39,11 +39,11 @@ Once connected, your AI assistant can:
 - **Search** 200+ curated AI assets by keyword or category with agent fit signals
 - **Browse** trending assets, filter by type (MCP, Skill, Prompt, Agent, Script)
 - **Get details** — full documentation, install instructions, and metadata
-- **Verify trust** — read-only content hash, install plan hash, permission envelope, policy, trust_score_v2, blockers, and warnings
-- **Plan before install** — get install plan v2 with policy decisions, rollback, and verification
+- **Verify trust** — read-only content hash, install plan hash, permission envelope, policy, trust_score_v2, `evidence_bundle`, SBOM-lite, `signature_evidence`, blockers, and warnings
+- **Plan before install** — get install plan v2 with policy decisions, rollback, verification, `evidence_bundle`, SBOM-lite, and `signature_evidence`
 - **Safe Codex install** — dry-run by default; risky assets must be staged or explicitly approved
 - **Lifecycle control** — list, update, uninstall, and roll back managed Codex installs
-- **Post-task handoff planning** — inspect reusable local work with `tokrepo_handoff_plan` before any push
+- **Post-task handoff planning** — inspect reusable local work with `tokrepo_handoff_plan` before any push, including `quality_gate`, package manifest, SBOM-lite, and provenance
 - **Project memory** — pair with `tokrepo init-agent --target all` so future agents know to call TokRepo during planning
 - **Discovery surfaces** — official MCP `server.json`, A2A agent card, portable agent manifest, tool catalog, `.well-known`, `agents.txt`, `llms.txt`, and npm metadata are kept machine-readable for agents and registries
 - **Funnel visibility** — anonymous aggregate events show whether agents actually discover, plan, install, hand off, and push reusable assets
@@ -55,14 +55,14 @@ Once connected, your AI assistant can:
 | `tokrepo_discover` | Planning-time capability discovery from a task, environment, and constraints |
 | `tokrepo_search` | Search assets by keyword/tag with `agent_fit` ranking |
 | `tokrepo_detail` | Get full asset details by UUID |
-| `tokrepo_verify` | Verify trust, hashes, permissions, and policy before activation |
-| `tokrepo_install_plan` | Get agent-native install plan v2 |
+| `tokrepo_verify` | Verify trust, hashes, permissions, policy, evidence_bundle, SBOM-lite, and signature_evidence before activation |
+| `tokrepo_install_plan` | Get agent-native install plan v2 with rollback, evidence_bundle, SBOM-lite, and signature_evidence |
 | `tokrepo_codex_install` | Dry-run, stage, or install a Codex skill safely |
 | `tokrepo_installed` | List TokRepo-managed Codex installs |
 | `tokrepo_update` | Dry-run or update managed Codex installs |
 | `tokrepo_uninstall` | Dry-run or remove a managed Codex install |
 | `tokrepo_rollback` | Dry-run or roll back a prior Codex install session |
-| `tokrepo_handoff_plan` | Read-only packaging plan for reusable local work after a task |
+| `tokrepo_handoff_plan` | Read-only packaging plan with quality_gate and package manifest for reusable local work after a task |
 | `tokrepo_push` | Push one explicit asset to TokRepo after user confirmation |
 
 ## Example Conversations
@@ -81,7 +81,7 @@ AI: [calls tokrepo_codex_install with dry_run=false, confirm=true] → Writes on
 AI: [calls tokrepo_rollback with dry_run=true] → Shows exactly what would be removed before rollback
 
 You: "We created a reusable project rule; save it for future agents"
-AI: [calls tokrepo_handoff_plan] → Returns explicit files, hashes, metadata defaults, and private-by-default push guidance
+AI: [calls tokrepo_handoff_plan] → Returns explicit files, hashes, quality_gate, package manifest, SBOM-lite, provenance, metadata defaults, and private-by-default push guidance
 AI: [asks for confirmation before tokrepo_push] → Uploads only reviewed files
 ```
 
@@ -109,6 +109,8 @@ Registries and agents can discover this server through:
 - Eval evidence: [tokrepo.com/evals/agent-discovery.json](https://tokrepo.com/evals/agent-discovery.json)
 - Multi-agent compatibility: [tokrepo.com/evals/multi-agent-compatibility.json](https://tokrepo.com/evals/multi-agent-compatibility.json)
 - Agent memory schema: [tokrepo.com/schemas/agent-memory.schema.json](https://tokrepo.com/schemas/agent-memory.schema.json)
+- Agent evidence bundle schema: [tokrepo.com/schemas/agent-evidence-bundle.schema.json](https://tokrepo.com/schemas/agent-evidence-bundle.schema.json)
+- Handoff package schema: [tokrepo.com/schemas/handoff-package.schema.json](https://tokrepo.com/schemas/handoff-package.schema.json)
 - Agent text entry: [tokrepo.com/agents.txt](https://tokrepo.com/agents.txt)
 - Agent instructions: [tokrepo.com/agent-instructions/tokrepo.md](https://tokrepo.com/agent-instructions/tokrepo.md)
 - Agent ecosystem distribution pack: [tokrepo.com/agent-ecosystem.json](https://tokrepo.com/agent-ecosystem.json)

package/bin/server.js

@@ -20,7 +20,7 @@ const API_BASE = process.env.TOKREPO_API || 'https://api.tokrepo.com';
 const TOKREPO_URL = 'https://tokrepo.com';
 const TOKREPO_TOKEN = process.env.TOKREPO_TOKEN || '';
 const TOKREPO_CLI = process.env.TOKREPO_CLI || '';
-const SERVER_VERSION = '2.12.0';
+const SERVER_VERSION = '2.12.2';
 
 // ─── MCP Protocol (JSON-RPC over stdio) ───
 
@@ -137,7 +137,7 @@ const TOOLS = [
   },
   {
     name: 'tokrepo_install_plan',
-    description: 'Return an agent-native install plan v2 for a TokRepo asset. Use this before installing: it includes preconditions, actions, risk profile, policy decision, rollback, and post-install verification.',
+    description: 'Return an agent-native install plan v2 for a TokRepo asset. Use this before installing: it includes preconditions, actions, risk profile, policy decision, rollback, post-install verification, evidence_bundle, SBOM-lite, signature_evidence, and provenance_v2.',
     inputSchema: {
       type: 'object',
       properties: {
@@ -157,7 +157,7 @@ const TOOLS = [
   },
   {
     name: 'tokrepo_verify',
-    description: 'Read-only asset trust verification for agents. Produces content hash, install plan hash, policy decision, permission envelope, trust_score_v2, blockers, warnings, schemas, and safe next actions before activation.',
+    description: 'Read-only asset trust verification for agents. Produces content hash, install plan hash, policy decision, permission envelope, trust_score_v2, evidence_bundle, SBOM-lite, signature_evidence, blockers, warnings, schemas, and safe next actions before activation.',
     inputSchema: {
       type: 'object',
       properties: {
@@ -342,7 +342,7 @@ const TOOLS = [
   },
   {
     name: 'tokrepo_handoff_plan',
-    description: 'Inspect local files after a task and return an agent handoff packaging plan. This is read-only and never publishes automatically; use tokrepo_push only after human confirmation with explicit reviewed files.',
+    description: 'Inspect local files after a task and return an agent handoff packaging plan with quality_gate, package_manifest, SBOM-lite, and provenance. This is read-only and never publishes automatically; use tokrepo_push only after human confirmation with explicit reviewed files.',
     inputSchema: {
       type: 'object',
       properties: {
@@ -1123,9 +1123,9 @@ function buildCandidate(item, target, ranking = {}) {
     agent_use_contract: [
       'Use only if the capability matches the current subtask.',
       'Call tokrepo_detail before install to inspect content and metadata.',
-      'Call tokrepo_verify to inspect hashes, permissions, trust_score_v2, blockers, and warnings.',
+      'Call tokrepo_verify to inspect hashes, permissions, trust_score_v2, evidence_bundle, SBOM-lite, signature_evidence, blockers, and warnings.',
       'Call tokrepo audit if future agents need a persistent trust-history snapshot.',
-      'Call tokrepo_install_plan and respect policy_decision before writing files.',
+      'Call tokrepo_install_plan and respect policy_decision, evidence_bundle, SBOM-lite, signature_evidence, rollback, and verification steps before writing files.',
       'Prefer dry-run or stage-only when risk or fit is uncertain.',
       'After using it, verify the original task outcome and record failures.',
     ],
@@ -1207,7 +1207,7 @@ async function handleDiscover(args) {
       'Rank candidates by fit, policy, trust, and whether the entrypoint matches the active agent runtime.',
       'Call tokrepo_detail for the top candidate before installation or use.',
       'Call tokrepo audit if the chosen asset materially affects the task and future agents need a trust-history snapshot.',
-      'Call tokrepo_install_plan and respect policy_decision, rollback, and verification steps.',
+      'Call tokrepo_install_plan and respect policy_decision, evidence_bundle, SBOM-lite, signature_evidence, rollback, and verification steps.',
       'Dry-run or stage when the asset may write files, execute code, require secrets, or change global config.',
       'Use the installed capability only for the matching subtask, then verify the user goal.',
       'If the agent creates a reusable improvement, ask before publishing and use tokrepo_push with explicit files.',
@@ -1347,6 +1347,29 @@ async function handleInstall(args) {
 
 async function handleInstallPlan(args) {
   const { uuid, target = 'codex' } = args;
+  if (target === 'codex') {
+    try {
+      const { stdout, stderr } = await runTokrepoCli(['plan', uuid, '--target', target]);
+      let data;
+      try {
+        data = JSON.parse(stdout);
+      } catch {
+        data = { stdout, stderr };
+      }
+      const decision = planPolicyDecision(data);
+      const command = decision === 'allow'
+        ? `tokrepo install ${data.asset_uuid || uuid} --target ${target} --yes`
+        : `tokrepo install ${data.asset_uuid || uuid} --target ${target} --dry-run --json`;
+      return {
+        content: [{
+          type: 'text',
+          text: jsonText(`Install plan v${data.schema_version || 1} for ${data.asset_title || uuid}\n\nPolicy: ${decision}\nCLI: ${command}`, data),
+        }],
+      };
+    } catch {
+      // Fall back to the API plan below when the CLI is unavailable.
+    }
+  }
   const plan = await fetchInstallPlan(uuid, target);
   const decision = planPolicyDecision(plan);
   const command = decision === 'allow'

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tokrepo-mcp-server",
-  "version": "2.12.0",
+  "version": "2.12.2",
   "description": "Agent-native MCP server for TokRepo - discover, verify, plan, safely install, hand off, and push AI assets from MCP clients.",
   "mcpName": "io.github.henu-wang/tokrepo-mcp-server",
   "bin": {