@mushi-mushi/mcp 0.19.0 → 0.20.1

package/dist/{chunk-DSOPGMDX.js → chunk-TP2QQWDJ.js}

@@ -282,7 +282,7 @@ var TOOL_CATALOG = [
   {
     name: "get_report_evidence",
     title: "Bug report evidence",
-    description: "Return the full evidence package for a single bug report: screenshot URL, console logs, network excerpts, browser environment (user agent, URL, viewport, SDK version), user replay link if available, breadcrumb trail, and the reporter's own comments thread. This is the same data an engineer would collect for a root-cause investigation. Faster than calling get_report_detail + report timeline separately.",
+    description: "Return the full evidence package for a single bug report covering all three observability pillars: (1) LOGS \u2014 console_logs (error/warn/info/debug entries with timestamps), breadcrumbs (SDK ring buffer: navigation, clicks, network, lifecycle events with category/level), repro_timeline (merged SDK event stream: route/click/request/log/screen), and the reporter's own comments thread; (2) TRACES \u2014 network_requests (SDK-captured fetch/XHR with method/status/duration/traceId), backend_spans (server-side spans joined by W3C trace_id: name/duration_ms/parentSpanId/status), and Sentry trace correlation IDs (sentry_trace_id, sentry_event_id) for deeplinks; (3) METRICS \u2014 performance_metrics (Web Vitals snapshot: LCP/CLS/INP/TTFB/FCP + INP attribution + page timing + connection info), anomalies (statistical provenance when auto-filed by CI metric regression: baseline_mean/std, score in \u03C3, threshold); plus screenshot_url, browser environment (user agent, URL, viewport, SDK version), and tags. This is the same data an engineer would collect for a root-cause investigation. Faster than calling get_report_detail + report timeline separately.",
     scope: "mcp:read",
     hints: { readOnly: true, idempotent: true, openWorld: true },
     useCase: "I need all the evidence for this bug report to diagnose the root cause."
@@ -449,7 +449,7 @@ var TDD_TOOL_CATALOG = [
   {
     name: "list_byok_keys",
     title: "List your API key pool",
-    description: "List the project's BYOK API keys grouped by provider (anthropic | openai | firecrawl | browserbase | cursor). Returns { keys: [{ id, provider, label, priority, status, cooldownUntil }] } \u2014 metadata only, never the raw secret. Read-only. Use to see which keys are active vs rate-limited/exhausted; use add_byok_key to add one.",
+    description: "List the project's BYOK API keys grouped by provider (anthropic | openai | firecrawl | browserbase | cursor). Returns pooled { keys: [{ id, provider_slug, label, priority, status, cooldown_until, test_status, key_hint, base_url, last_tested_at, last_used_at }] } plus read-only { legacyKeys } metadata for credentials saved before the pooled lifecycle \u2014 never the raw secret. Read-only. Use to see which keys are validated, active, pending, legacy, or rate-limited; use add_byok_key to add one.",
     scope: "mcp:read",
     hints: { readOnly: true, idempotent: true, openWorld: true },
     useCase: "Which API keys are active and which are rate-limited?"
@@ -457,11 +457,27 @@ var TDD_TOOL_CATALOG = [
   {
     name: "add_byok_key",
     title: "Add an API key",
-    description: "Add a BYOK API key to the project pool for a provider (anthropic | openai | firecrawl | browserbase | cursor), with a label and priority for failover ordering. The raw key is stored encrypted in Supabase Vault and never returned. Returns { id, provider, label }. Write; NOT idempotent \u2014 adds a new row each call. Use to register a backup/rotated key; use list_byok_keys to review the pool.",
+    description: "Add and immediately validate a BYOK API key for anthropic | openai | firecrawl | browserbase | cursor. The raw key is stored encrypted in Supabase Vault and never returned; failed probes remain quarantined. Optional baseUrl is accepted only for allow-listed OpenAI-compatible HTTPS providers. Write; NOT idempotent.",
     scope: "mcp:write",
     hints: { readOnly: false, destructive: false, idempotent: false, openWorld: true },
     useCase: "Add a backup Anthropic key to the pool."
   },
+  {
+    name: "test_byok_key",
+    title: "Test an API key",
+    description: "Re-test one pooled BYOK credential by key id. A successful provider probe activates the key; auth, quota, and network failures keep it out of the runtime pool. Returns the sanitized validation result and updated key metadata. Write; idempotent.",
+    scope: "mcp:write",
+    hints: { readOnly: false, destructive: false, idempotent: true, openWorld: true },
+    useCase: "Re-test a quarantined OpenAI key after fixing its account quota."
+  },
+  {
+    name: "remove_byok_key",
+    title: "Remove an API key",
+    description: "Permanently remove one pooled BYOK credential by key id from the authenticated project, including its Vault secret. Write; destructive; idempotent.",
+    scope: "mcp:write",
+    hints: { readOnly: false, destructive: true, idempotent: true, openWorld: true },
+    useCase: "Remove a rotated or compromised provider key from the runtime pool."
+  },
   {
     name: "list_pending_review_stories",
     title: "List QA stories pending review",
@@ -584,8 +600,93 @@ var TDD_TOOL_CATALOG = [
     scope: "mcp:read",
     hints: { readOnly: true, idempotent: true, openWorld: true },
     useCase: "Are there any tables without RLS? Show me recent backend errors for this project."
+  },
+  // ── Meta-tool (context-cost reduction) ───────────────────────────────────
+  //
+  // Sentry ships `use_sentry` (a single meta-tool an agent calls to get a
+  // recommended subset of tools for a given intent) as the primary context-
+  // cost reduction lever.  We do the same: `use_mushi` returns a curated
+  // list of the 6–12 tools most relevant to the caller's stated intent, plus
+  // a short orientation block.  Agents that call use_mushi first avoid
+  // loading 68 tool descriptions up-front, cutting context cost by ~60% for
+  // narrow tasks (fix a bug, check status, start a pipeline).
+  {
+    name: "use_mushi",
+    title: "Mushi \u2014 where to start",
+    description: 'CALL THIS FIRST if you are new to this Mushi project or unsure which tool to use. Pass your intent as a short natural-language phrase ("fix the top bug", "check what I should work on", "run QA tests", "set up Mushi", \u2026). Returns: (1) a curated list of the 5\u201312 tool names most relevant to that intent, (2) a one-paragraph orientation to the Mushi project and dashboard state, and (3) the single recommended first tool to call. Avoids loading the full 68-tool catalog into context when only a small subset is needed. Read-only; does not call any downstream tools itself.',
+    scope: "mcp:read",
+    hints: { readOnly: true, idempotent: true, openWorld: false },
+    useCase: "What should I do next with Mushi? / Which tools do I need for this task?"
   }
 ];
+var USE_MUSHI_INTENTS = {
+  fix: {
+    label: "Fix a bug",
+    tools: [
+      "get_recent_reports",
+      "get_report",
+      "summarize_report_for_fix",
+      "dispatch_fix",
+      "start_skill_pipeline",
+      "checkin_pipeline_step",
+      "get_pipeline_run"
+    ],
+    hint: "Call get_recent_reports to find the top unresolved bug, then summarize_report_for_fix before dispatching."
+  },
+  status: {
+    label: "Check project status",
+    tools: [
+      "get_dashboard",
+      "triage_next_steps",
+      "get_usage",
+      "get_backend_health",
+      "activation_status"
+    ],
+    hint: "Call triage_next_steps for a prioritised list of what to work on today."
+  },
+  setup: {
+    label: "Set up Mushi",
+    tools: [
+      "mushi_setup",
+      "activation_status",
+      "get_backend_health",
+      "list_byok_keys",
+      "add_byok_key",
+      "test_byok_key",
+      "remove_byok_key"
+    ],
+    hint: "Call mushi_setup first \u2014 it diagnoses setup gaps and returns the next command to run."
+  },
+  qa: {
+    label: "Run / review QA tests",
+    tools: [
+      "list_qa_stories",
+      "run_qa_story",
+      "list_qa_story_runs",
+      "get_qa_story_run",
+      "list_pending_review_stories",
+      "approve_qa_story",
+      "improve_qa_story"
+    ],
+    hint: "Call list_qa_stories to see what test coverage exists; run_qa_story to trigger a run."
+  },
+  pipeline: {
+    label: "Run an agent pipeline / skill",
+    tools: [
+      "list_skills",
+      "get_skill",
+      "start_skill_pipeline",
+      "checkin_pipeline_step",
+      "get_pipeline_run"
+    ],
+    hint: "Call list_skills to find the right skill, then start_skill_pipeline."
+  },
+  audit: {
+    label: "Audit / health check",
+    tools: ["run_fullstack_audit", "get_backend_health", "get_dashboard", "get_usage"],
+    hint: "Call run_fullstack_audit for a full-stack health scorecard."
+  }
+};
 var CODEBASE_TOOL_CATALOG = [
   {
     name: "ask_codebase",
@@ -651,5 +752,6 @@ export {
   RESOURCE_CATALOG,
   PROMPT_CATALOG,
   TDD_TOOL_CATALOG,
+  USE_MUSHI_INTENTS,
   CODEBASE_TOOL_CATALOG
 };

package/dist/{chunk-VBXXUK5G.js → chunk-ZSVRLSW5.js}

@@ -98,8 +98,10 @@ var TOOL_FEATURE_MAP = {
   start_skill_pipeline: "skills",
   get_pipeline_run: "skills",
   checkin_pipeline_step: "skills",
-  list_byok_keys: "skills",
-  add_byok_key: "skills",
+  list_byok_keys: "setup",
+  add_byok_key: "setup",
+  test_byok_key: "setup",
+  remove_byok_key: "setup",
   // audit
   run_fullstack_audit: "audit",
   get_backend_health: "audit",

package/dist/clients.d.ts

@@ -40,6 +40,13 @@ import { FeatureGroup } from './feature-groups.js';
  * - The `cliIde` field drives `mushi setup --ide <cliIde>` in the CLI lane.
  */
 
+/**
+ * Pinned npm spec written into persistent MCP configs (mcp.json, settings.json).
+ * Pinning avoids the supply-chain and cold-start costs of `@latest` on every
+ * editor launch. Synced to package.json by `scripts/sync-mcp-pin.mjs` — never
+ * hand-edit the version.
+ */
+declare const MCP_PIN_SPEC = "@mushi-mushi/mcp@0.20.1";
 interface StdioConfig {
     command: string;
     args: string[];
@@ -112,4 +119,4 @@ declare const MCP_CLIENTS: McpClientDef[];
 /** Look up a client by id — throws if not found. */
 declare function getMcpClient(id: McpClientId): McpClientDef;
 
-export { MCP_CLIENTS, type McpBuildInput, type McpBuildResult, type McpClientDef, type McpClientId, type McpInstallMethod, buildHttpConfigObj as buildRawHttpConfig, buildStdioConfigObj as buildRawStdioConfig, getMcpClient, projectServerName };
+export { MCP_CLIENTS, MCP_PIN_SPEC, type McpBuildInput, type McpBuildResult, type McpClientDef, type McpClientId, type McpInstallMethod, buildHttpConfigObj as buildRawHttpConfig, buildStdioConfigObj as buildRawStdioConfig, getMcpClient, projectServerName };

package/dist/clients.js

@@ -5,9 +5,10 @@ import {
   DEFAULT_FEATURE_GROUPS,
   appendFeaturesToUrl,
   featuresQueryString
-} from "./chunk-VBXXUK5G.js";
+} from "./chunk-ZSVRLSW5.js";
 
 // src/clients.ts
+var MCP_PIN_SPEC = "@mushi-mushi/mcp@0.20.1";
 function projectServerName(projectId, projectName) {
   const nameSlug = projectName.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "").slice(0, 22);
   const idSuffix = projectId.replace(/-/g, "").slice(0, 6);
@@ -22,7 +23,7 @@ function buildStdioConfigObj(projectId, apiKey, apiEndpoint, features = DEFAULT_
   if (projectId) env.MUSHI_PROJECT_ID = projectId;
   return {
     command: "npx",
-    args: ["-y", "@mushi-mushi/mcp@latest"],
+    args: ["-y", MCP_PIN_SPEC],
     env,
     icon: MUSHI_ICON_PNG_URL
   };
@@ -146,7 +147,7 @@ var MCP_CLIENTS = [
       if (projectId) env.MUSHI_PROJECT_ID = projectId;
       const clineConfig = {
         mcpServers: {
-          [name]: { command: "npx", args: ["-y", "@mushi-mushi/mcp@latest"], env }
+          [name]: { command: "npx", args: ["-y", MCP_PIN_SPEC], env }
         }
       };
       return {
@@ -192,7 +193,7 @@ var MCP_CLIENTS = [
       if (projectId) env.MUSHI_PROJECT_ID = projectId;
       const desktopConfig = {
         mcpServers: {
-          [name]: { command: "npx", args: ["-y", "@mushi-mushi/mcp@latest"], env }
+          [name]: { command: "npx", args: ["-y", MCP_PIN_SPEC], env }
         }
       };
       return {
@@ -223,7 +224,7 @@ var MCP_CLIENTS = [
           [name]: {
             command: {
               path: "npx",
-              args: ["-y", "@mushi-mushi/mcp@latest"],
+              args: ["-y", MCP_PIN_SPEC],
               env
             },
             settings: {}
@@ -264,6 +265,7 @@ function getMcpClient(id) {
 }
 export {
   MCP_CLIENTS,
+  MCP_PIN_SPEC,
   buildHttpConfigObj as buildRawHttpConfig,
   buildStdioConfigObj as buildRawStdioConfig,
   getMcpClient,

package/dist/feature-groups.js

@@ -9,7 +9,7 @@ import {
   parseFeaturesCsv,
   parseFeaturesParam,
   toolMatchesFeatures
-} from "./chunk-VBXXUK5G.js";
+} from "./chunk-ZSVRLSW5.js";
 export {
   ALL_FEATURE_GROUPS,
   DEFAULT_FEATURE_GROUPS,