8000 Distribution hardening + tool workspace manifest · Issue #15 · Mnehmos/mnehmos.ooda.mcp · GitHub
[go: up one dir, main page]

Skip to content

Distribution hardening + tool workspace manifest #15

Open

Description

@Mnehmos

Goal

Make OODA MCP fully distributable and machine-discoverable by the Mnehmos distribution dashboard.

Current audit

  • TypeScript MCP server with npm-oriented package structure and CLI bin.
  • MIT licensed and already documented for npm/npx use.
  • Package hardening is incomplete: add a strict published-files boundary and a release gate before publish.

Distribution work

  • Add/verify files whitelist and package-content validation.
  • Add prepublishOnly/prepack build + test/typecheck gate.
  • Configure npm Trusted Publishing/provenance.
  • Publish/verify first-party npm package and current package metadata.
  • Register with the official MCP Registry and add registry/package badges.
  • Add a minimal 30-second setup/demo path to README.

Workspace contract

  • Add .mnehmos/tool.json with tool id, category, package channels, executable, runtime requirements, setup/build/test/start commands, permissions, state paths, and external dependencies.
  • Add deterministic workspace bootstrap (scripts/workspace-setup.*, devcontainer, or equivalent).
  • Explicitly declare elevated capabilities (shell, files, input, screen, browser) so the dashboard can warn before launch.

Acceptance criteria

A fresh workspace can be created, installed, built, tested, and launched from manifest data alone; npm packaging is reproducible; MCP Registry metadata is live.

Activity

  1. self-assigned this
    on Sep 11, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

No labels
No labels

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions

    0