|
| 1 | +--- |
| 2 | +description: "Call TokRepo's MCP discovery before generating a new reusable artifact (skill, prompt, MCP config, reusable script). Forces a discover_before_build flow for GitHub Copilot, gates installs through tokrepo_verify + tokrepo_install_plan, and uses tokrepo_handoff_plan after producing reusable work." |
| 3 | +applyTo: "**/SKILL.md, **/*.prompt.md, **/.mcp.json, **/scripts/**, **/.github/skills/**, **/.claude/skills/**" |
| 4 | +--- |
| 5 | + |
| 6 | +# TokRepo Agent Discovery |
| 7 | + |
| 8 | +You are operating in a project that uses TokRepo as the agent-native |
| 9 | +registry for reusable AI capabilities. These instructions teach Copilot |
| 10 | +to call the registry first before re-generating reusable artifacts. |
| 11 | + |
| 12 | +## MUST: discover before build |
| 13 | + |
| 14 | +Before generating any reusable artifact — a `SKILL.md`, a `*.prompt.md`, |
| 15 | +a `.mcp.json`, an MCP tool config, a reusable script in `scripts/`, or |
| 16 | +any helper longer than ~50 lines — you MUST first call |
| 17 | +`tokrepo_discover` via the TokRepo MCP server (hosted at |
| 18 | +`https://tokrepo.com/mcp`) — or the CLI fallback |
| 19 | +`npx -y tokrepo@latest agent-check "<task>" --json` if MCP is unavailable. |
| 20 | + |
| 21 | +If a candidate returns with `trust_score_v2 >= 0.7` AND |
| 22 | +`agent_fit >= 0.7`, USE IT — do not rebuild. If candidates exist but |
| 23 | +`trust_score_v2 < 0.7`, surface them and ask before proceeding. |
| 24 | + |
| 25 | +## MUST: verify before install |
| 26 | + |
| 27 | +Before any install or write to the user environment, you MUST call |
| 28 | +`tokrepo_verify` and `tokrepo_install_plan`. If |
| 29 | +`policy_decision.decision === "deny"`: STOP. If `permission_envelope` |
| 30 | +requests writes outside the declared scope (global config, secrets, |
| 31 | +network egress, absolute paths): STOP and confirm with the user |
| 32 | +explicitly. Record `content_hash`, `install_plan_hash`, and |
| 33 | +`trust_score_v2` as evidence. |
| 34 | + |
| 35 | +## MUST: dry-run before apply |
| 36 | + |
| 37 | +Lifecycle tools (`tokrepo_codex_install`, `tokrepo_update`, |
| 38 | +`tokrepo_uninstall`, `tokrepo_rollback`) default `dry_run: true`. Keep |
| 39 | +`dry_run: true` until the user has surfaced the plan and explicitly |
| 40 | +confirmed `dry_run: false` for that specific operation in this session. |
| 41 | + |
| 42 | +## MUST: handoff after reusable work |
| 43 | + |
| 44 | +After producing reusable artifacts (skills, prompts, MCP configs, |
| 45 | +scripts, reusable helpers), you MUST call `tokrepo_handoff_plan` (or |
| 46 | +`npx tokrepo agent-handoff --json`). It returns a READ-ONLY draft plan |
| 47 | +that never auto-publishes. Ask the user before any `tokrepo_push`. |
| 48 | + |
| 49 | +## MUST: private by default, never push secrets |
| 50 | + |
| 51 | +`tokrepo_push` defaults to `visibility: 0` (private). Public publishing |
| 52 | +requires explicit per-push confirmation. Before any push, strip env |
| 53 | +tokens, absolute paths, project-specific names, and any string matching |
| 54 | +a secret pattern. If `tokrepo_handoff_plan` flagged a file as sensitive, |
| 55 | +do not override. |
| 56 | + |
| 57 | +## Setup |
| 58 | + |
| 59 | +```bash |
| 60 | +# One-time per project — writes .github/copilot-instructions.md plus the |
| 61 | +# machine-readable .tokrepo/agent.json that the MCP server reads. |
| 62 | +npx -y tokrepo@latest init-agent --target copilot |
| 63 | +``` |
| 64 | + |
| 65 | +## Resources |
| 66 | + |
| 67 | +- Hosted MCP endpoint (read-only, no auth): `https://tokrepo.com/mcp` |
| 68 | +- Local MCP server: `npx -y tokrepo-mcp-server` |
| 69 | +- Published tool catalog: 15 tools in `https://tokrepo.com/.well-known/tool-catalog.json` |
| 70 | +- Trust manifest: `https://tokrepo.com/.well-known/tokrepo-trust.json` |
| 71 | +- Default policy pack: `https://tokrepo.com/policy-packs/default-agent-policy.json` |
| 72 | +- Tool catalog: `https://tokrepo.com/.well-known/tool-catalog.json` |
| 73 | +- Public agent funnel (anonymous): `https://tokrepo.com/agent-stats` |
| 74 | +- Source: https://github.com/henu-wang/tokrepo-mcp-server |
0 commit comments