tokrepo-mcp-server 2.3.0 → 2.5.0

package/README.md

@@ -35,29 +35,26 @@ gemini settings mcp add tokrepo -- npx -y tokrepo-mcp-server
 
 Once connected, your AI assistant can:
 
-- **Search** 200+ curated AI assets by keyword or category
+- **Search** 200+ curated AI assets by keyword or category with Codex-first `agent_fit` ranking
 - **Browse** trending assets, filter by type (MCP, Skill, Prompt, Agent, Script)
 - **Get details** — full documentation, install instructions, and metadata
 - **Plan before install** — get install plan v2 with policy decisions, rollback, and verification
 - **Safe Codex install** — dry-run by default; risky assets must be staged or explicitly approved
-- **Lifecycle control** — list installed assets, uninstall managed files, and roll back install sessions
-- **Agent eval** — run TokRepo's agent-native search/plan/install/rollback contract checks
+- **Lifecycle control** — list, update, uninstall, and roll back managed Codex installs
 
 ## Available Tools
 
 | Tool | Description |
 |------|-------------|
-| `tokrepo_search` | Search assets by keyword and tag |
+| `tokrepo_search` | Search assets by keyword/tag with `agent_fit` ranking |
 | `tokrepo_detail` | Get full asset details by UUID |
 | `tokrepo_install_plan` | Get agent-native install plan v2 |
 | `tokrepo_codex_install` | Dry-run, stage, or install a Codex skill safely |
-| `tokrepo_clone_plan` | Bulk profile clone dry-run plan |
 | `tokrepo_installed` | List TokRepo-managed Codex installs |
+| `tokrepo_update` | Dry-run or update managed Codex installs |
 | `tokrepo_uninstall` | Dry-run or remove a managed Codex install |
 | `tokrepo_rollback` | Dry-run or roll back a prior Codex install session |
-| `tokrepo_eval_agent` | Run agent-native CLI contract and lifecycle evals |
-| `tokrepo_install` | Get raw installable content |
-| `tokrepo_trending` | Browse popular/latest assets |
+| `tokrepo_push` | Push one explicit asset to TokRepo after user confirmation |
 
 ## Example Conversations
 
@@ -65,14 +62,13 @@ Once connected, your AI assistant can:
 You: "Find me a good MCP server for databases"
 AI: [calls tokrepo_search] → Shows DBHub, Supabase MCP, PostgreSQL MCP with install commands
 
-You: "What's trending on TokRepo?"
-AI: [calls tokrepo_trending] → Shows top assets by popularity
+You: "What video assets should I install?"
+AI: [calls tokrepo_search] → Ranks native Codex assets by `agent_fit`
 
 You: "Install that cursor rules asset"
 AI: [calls tokrepo_install_plan] → Reviews policy and actions
 AI: [calls tokrepo_codex_install with dry_run=false, confirm=true] → Writes only after explicit confirmation
 AI: [calls tokrepo_rollback with dry_run=true] → Shows exactly what would be removed before rollback
-AI: [calls tokrepo_eval_agent] → Verifies TokRepo's agent-facing flow end to end
 ```
 
 ## Why TokRepo?

package/bin/server.js

@@ -19,7 +19,7 @@ const API_BASE = process.env.TOKREPO_API || 'https://api.tokrepo.com';
 const TOKREPO_URL = 'https://tokrepo.com';
 const TOKREPO_TOKEN = process.env.TOKREPO_TOKEN || '';
 const TOKREPO_CLI = process.env.TOKREPO_CLI || '';
-const SERVER_VERSION = '2.3.0';
+const SERVER_VERSION = '2.5.0';
 
 // ─── MCP Protocol (JSON-RPC over stdio) ───
 
@@ -55,8 +55,9 @@ const TOOLS = [
         },
         target: {
           type: 'string',
-          description: 'Optional agent target filter. Use codex for Codex-compatible assets.',
+          description: 'Agent target filter. Defaults to codex so results include agent_fit ranking for installable Codex assets.',
           enum: ['codex'],
+          default: 'codex',
         },
         kind: {
           type: 'string',
@@ -183,6 +184,35 @@ const TOOLS = [
       properties: {},
     },
   },
+  {
+    name: 'tokrepo_update',
+    description: 'Check or update TokRepo-managed Codex assets from the local manifest. Defaults to dry_run=true. To write updates, set dry_run=false and confirm=true.',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        dry_run: {
+          type: 'boolean',
+          description: 'When true, check for updates and return the plan without writing files. Default true.',
+          default: true,
+        },
+        confirm: {
+          type: 'boolean',
+          description: 'Required when dry_run=false to prevent accidental writes.',
+          default: false,
+        },
+        stage: {
+          type: 'boolean',
+          description: 'Stage risky updates under ~/.codex/tokrepo/staged instead of activating them.',
+          default: false,
+        },
+        approve_risk: {
+          type: 'boolean',
+          description: 'Allow updates whose install policy requires explicit risk approval.',
+          default: false,
+        },
+      },
+    },
+  },
   {
     name: 'tokrepo_uninstall',
     description: 'Safely uninstall a TokRepo-managed Codex asset. Defaults to dry_run=true. To remove files, set dry_run=false and confirm=true. Local changes are blocked unless force=true.',
@@ -366,6 +396,20 @@ const TOOLS = [
   },
 ];
 
+const EXPOSED_TOOL_NAMES = new Set([
+  'tokrepo_search',
+  'tokrepo_detail',
+  'tokrepo_install_plan',
+  'tokrepo_codex_install',
+  'tokrepo_installed',
+  'tokrepo_update',
+  'tokrepo_uninstall',
+  'tokrepo_rollback',
+  'tokrepo_push',
+]);
+
+const EXPOSED_TOOLS = TOOLS.filter((tool) => EXPOSED_TOOL_NAMES.has(tool.name));
+
 // ─── HTTP Helper ───
 
 function apiGet(path) {
@@ -536,7 +580,7 @@ function jsonText(title, data) {
 // ─── Tool Handlers ───
 
 async function handleSearch(args) {
-  const { query, tag, limit = 10, target = '', kind = '', policy = '' } = args;
+  const { query, tag, limit = 10, target = 'codex', kind = '', policy = '' } = args;
   if (target || kind || policy) {
     const cliArgs = ['search', query, '--json', '--page-size', String(Math.min(limit, 20))];
     if (target) cliArgs.push('--target', target);
@@ -756,6 +800,39 @@ async function handleInstalled() {
   return { content: [{ type: 'text', text: jsonText('TokRepo Codex installed assets', data) }] };
 }
 
+async function handleUpdate(args) {
+  const { dry_run = true, confirm = false, stage = false, approve_risk = false } = args || {};
+  const cliArgs = ['sync-installed', '--target', 'codex', '--json'];
+  if (dry_run !== false) cliArgs.push('--dry-run');
+  if (stage) cliArgs.push('--stage');
+  if (approve_risk) cliArgs.push('--approve-mcp');
+
+  if (dry_run === false && !confirm) {
+    cliArgs.push('--dry-run');
+    const { stdout, stderr } = await runTokrepoCli(cliArgs);
+    let data;
+    try {
+      data = JSON.parse(stdout);
+    } catch {
+      data = { stdout, stderr };
+    }
+    return {
+      isError: true,
+      content: [{ type: 'text', text: jsonText('Refused to update because confirm=true was not provided. Dry-run plan follows.', data) }],
+    };
+  }
+
+  if (dry_run === false) cliArgs.push('--update');
+  const { stdout, stderr } = await runTokrepoCli(cliArgs);
+  let data;
+  try {
+    data = JSON.parse(stdout);
+  } catch {
+    data = { stdout, stderr };
+  }
+  return { content: [{ type: 'text', text: jsonText(dry_run === false ? 'TokRepo Codex update result' : 'TokRepo Codex update dry-run', data) }] };
+}
+
 async function handleUninstall(args) {
   const { uuid, dry_run = true, confirm = false, force = false } = args;
   const cliArgs = ['uninstall', uuid, '--target', 'codex', '--json'];
@@ -973,7 +1050,7 @@ async function handleRequest(msg) {
       return null; // no response for notifications
 
     case 'tools/list':
-      return { jsonrpc: '2.0', id, result: { tools: TOOLS } };
+      return { jsonrpc: '2.0', id, result: { tools: EXPOSED_TOOLS } };
 
     case 'tools/call': {
       const { name, arguments: args } = params || {};
@@ -987,6 +1064,7 @@ async function handleRequest(msg) {
           case 'tokrepo_codex_install': result = await handleCodexInstall(args || {}); break;
           case 'tokrepo_clone_plan': result = await handleClonePlan(args || {}); break;
           case 'tokrepo_installed': result = await handleInstalled(args || {}); break;
+          case 'tokrepo_update': result = await handleUpdate(args || {}); break;
           case 'tokrepo_uninstall': result = await handleUninstall(args || {}); break;
           case 'tokrepo_rollback': result = await handleRollback(args || {}); break;
           case 'tokrepo_eval_agent': result = await handleEvalAgent(args || {}); break;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tokrepo-mcp-server",
-  "version": "2.3.0",
+  "version": "2.5.0",
   "description": "Agent-native MCP server for TokRepo — search, plan, safely install, and push AI assets from MCP clients.",
   "mcpName": "io.github.tokrepo/mcp-server",
   "bin": {