diff options
| author | Craig Jennings <c@cjennings.net> | 2026-05-22 17:41:58 -0500 |
|---|---|---|
| committer | Craig Jennings <c@cjennings.net> | 2026-05-22 17:41:58 -0500 |
| commit | d5abd5b493a166ab82ea5ec29213794a94f7f547 (patch) | |
| tree | bd253fc85f92a2ba6348f9247e43f3f0280fb112 /scripts/sync-language-bundle.sh | |
| parent | 34453f69696cd0a6e6eab13ad02915cb7a7e0e3e (diff) | |
| download | rulesets-d5abd5b493a166ab82ea5ec29213794a94f7f547.tar.gz rulesets-d5abd5b493a166ab82ea5ec29213794a94f7f547.zip | |
docs(mcp): document the install pipeline in mcp/README.org
mcp/ had install.py, servers.json, and the encrypted secrets bundle but no README, so the structure and the token-rotation flow were a re-discovery every few months. Added mcp/README.org covering the file layout (tracked vs gitignored), the secrets-bundle shape (plain ${VAR} secrets plus base64-bundled OAuth artifacts, AES256 symmetric encryption), the install flow (decrypt, materialize the OAuth keys and the Google Docs token caches at mode 600, expand placeholders, register the unregistered servers idempotently), the http/sse-vs-stdio transport split, the recovery steps when a Google refresh token is revoked, and how to add a server. Written against a read of the actual install.py and servers.json, not from memory.
Diffstat (limited to 'scripts/sync-language-bundle.sh')
0 files changed, 0 insertions, 0 deletions