Agent Skills › fastrepl/anarlog › release-mcp

release-mcp

GitHub

负责在发布前审查和验证 MCP 协议、契约、认证及访问边界，执行本地与托管环境的合约测试，确保运行时行为符合预期并生成发布证据。

.agents/skills/release-mcp/SKILL.md fastrepl/anarlog

Trigger Scenarios

软件版本发布流程 MCP协议变更审查运行时行为验证

Install

npx skills add fastrepl/anarlog --skill release-mcp -g -y

More Options

Non-standard path

npx skills add https://github.com/fastrepl/anarlog/tree/main/.agents/skills/release-mcp -g -y

Use without installing

npx skills use fastrepl/anarlog@release-mcp

指定 Agent (Claude Code)

npx skills add fastrepl/anarlog --skill release-mcp -a claude-code -g -y

安装 repo 全部 skill

npx skills add fastrepl/anarlog --all -g -y

预览 repo 内 skill

npx skills add fastrepl/anarlog --list

SKILL.md

Frontmatter

{
    "name": "release-mcp",
    "metadata": {
        "internal": true
    },
    "description": "Review and verify Anarlog local and hosted MCP protocols, contracts, authentication, access boundaries, and shipped runtime behavior during releases."
}

Release MCP

Review every release. Inherit scope and session authorization from Release a New Version.

Compare product changes with apps/cli/src/mcp.rs, crates/api-cloud/src/mcp.rs, crates/mcp, shared crates/agent-access, and current contract tests. Review initialization, tools/resources, schemas, pagination, errors, capability exposure, and local/hosted differences. Derive expected tools from current source, never a remembered tool count.
Preserve local proposal-approval and hosted read-only boundaries, authentication, scopes, and workspace isolation. Implement required coverage before candidate freeze or document the intentional difference/explicit deferral. Do not infer supported agent behavior from the database schema alone.
Run affected local and hosted contract/auth tests from cli_ci.yaml and api_ci.yaml, including allowed and denied paths. Reuse the CLI test evidence rather than rerunning identical shared checks.
For each shipped desktop platform, use the packaged CLI and isolated fixture database for a real stdio initialize/discovery exchange and affected calls. Keep stdout protocol-only and verify clean shutdown. Reuse the artifact and verify-packaged-cli.py evidence from Release CLI.
Publish required hosted changes through Release API. Verify the serving revision, authentication discovery/OAuth resource metadata, and authenticated discovery plus an affected operation with an authorized test account. Health/401 responses or mocks are not hosted runtime acceptance. Keep writes confined to supported local disposable fixtures and approval rules.
Review shared host manifests/setup references once via Agent packages. Update public setup instructions through Release Docs.

Return local and hosted revisions, contract decisions, protocol/auth evidence, package publication or reuse, and unavailable credentials or runtime checks.