@mushi-mushi/mcp 0.20.0 → 0.20.1

package/dist/index.js

@@ -375,7 +375,7 @@ var TDD_TOOL_CATALOG = [
   {
     name: "list_byok_keys",
     title: "List your API key pool",
-    description: "List the project's BYOK API keys grouped by provider (anthropic | openai | firecrawl | browserbase | cursor). Returns { keys: [{ id, provider, label, priority, status, cooldownUntil }] } \u2014 metadata only, never the raw secret. Read-only. Use to see which keys are active vs rate-limited/exhausted; use add_byok_key to add one.",
+    description: "List the project's BYOK API keys grouped by provider (anthropic | openai | firecrawl | browserbase | cursor). Returns pooled { keys: [{ id, provider_slug, label, priority, status, cooldown_until, test_status, key_hint, base_url, last_tested_at, last_used_at }] } plus read-only { legacyKeys } metadata for credentials saved before the pooled lifecycle \u2014 never the raw secret. Read-only. Use to see which keys are validated, active, pending, legacy, or rate-limited; use add_byok_key to add one.",
     scope: "mcp:read",
     hints: { readOnly: true, idempotent: true, openWorld: true },
     useCase: "Which API keys are active and which are rate-limited?"
@@ -383,11 +383,27 @@ var TDD_TOOL_CATALOG = [
   {
     name: "add_byok_key",
     title: "Add an API key",
-    description: "Add a BYOK API key to the project pool for a provider (anthropic | openai | firecrawl | browserbase | cursor), with a label and priority for failover ordering. The raw key is stored encrypted in Supabase Vault and never returned. Returns { id, provider, label }. Write; NOT idempotent \u2014 adds a new row each call. Use to register a backup/rotated key; use list_byok_keys to review the pool.",
+    description: "Add and immediately validate a BYOK API key for anthropic | openai | firecrawl | browserbase | cursor. The raw key is stored encrypted in Supabase Vault and never returned; failed probes remain quarantined. Optional baseUrl is accepted only for allow-listed OpenAI-compatible HTTPS providers. Write; NOT idempotent.",
     scope: "mcp:write",
     hints: { readOnly: false, destructive: false, idempotent: false, openWorld: true },
     useCase: "Add a backup Anthropic key to the pool."
   },
+  {
+    name: "test_byok_key",
+    title: "Test an API key",
+    description: "Re-test one pooled BYOK credential by key id. A successful provider probe activates the key; auth, quota, and network failures keep it out of the runtime pool. Returns the sanitized validation result and updated key metadata. Write; idempotent.",
+    scope: "mcp:write",
+    hints: { readOnly: false, destructive: false, idempotent: true, openWorld: true },
+    useCase: "Re-test a quarantined OpenAI key after fixing its account quota."
+  },
+  {
+    name: "remove_byok_key",
+    title: "Remove an API key",
+    description: "Permanently remove one pooled BYOK credential by key id from the authenticated project, including its Vault secret. Write; destructive; idempotent.",
+    scope: "mcp:write",
+    hints: { readOnly: false, destructive: true, idempotent: true, openWorld: true },
+    useCase: "Remove a rotated or compromised provider key from the runtime pool."
+  },
   {
     name: "list_pending_review_stories",
     title: "List QA stories pending review",
@@ -561,7 +577,9 @@ var USE_MUSHI_INTENTS = {
       "activation_status",
       "get_backend_health",
       "list_byok_keys",
-      "add_byok_key"
+      "add_byok_key",
+      "test_byok_key",
+      "remove_byok_key"
     ],
     hint: "Call mushi_setup first \u2014 it diagnoses setup gaps and returns the next command to run."
   },
@@ -591,12 +609,7 @@ var USE_MUSHI_INTENTS = {
   },
   audit: {
     label: "Audit / health check",
-    tools: [
-      "run_fullstack_audit",
-      "get_backend_health",
-      "get_dashboard",
-      "get_usage"
-    ],
+    tools: ["run_fullstack_audit", "get_backend_health", "get_dashboard", "get_usage"],
     hint: "Call run_fullstack_audit for a full-stack health scorecard."
   }
 };
@@ -759,8 +772,10 @@ var TOOL_FEATURE_MAP = {
   start_skill_pipeline: "skills",
   get_pipeline_run: "skills",
   checkin_pipeline_step: "skills",
-  list_byok_keys: "skills",
-  add_byok_key: "skills",
+  list_byok_keys: "setup",
+  add_byok_key: "setup",
+  test_byok_key: "setup",
+  remove_byok_key: "setup",
   // audit
   run_fullstack_audit: "audit",
   get_backend_health: "audit",
@@ -1004,7 +1019,7 @@ function createMushiServer(config) {
         // Authorization is accepted by `adminOrApiKey` only as a JWT, but we
         // still send it for endpoints still behind plain `jwtAuth` (legacy)
         // and for transparent proxies that strip X-Mushi-* headers.
-        "Authorization": `Bearer ${apiKey}`,
+        Authorization: `Bearer ${apiKey}`,
         "X-Mushi-Api-Key": apiKey,
         "X-Request-Id": requestId,
         ...projectId ? { "X-Mushi-Project-Id": projectId } : {},
@@ -1055,9 +1070,7 @@ function createMushiServer(config) {
     }
     if (projectId) return projectId;
     try {
-      const data = await apiCall(
-        "/v1/admin/mcp/account-overview"
-      );
+      const data = await apiCall("/v1/admin/mcp/account-overview");
       if (data.total === 1 && data.projects[0]) {
         return data.projects[0].id;
       }
@@ -1168,9 +1181,12 @@ function createMushiServer(config) {
       params.set("limit", String(Math.min(args.limit ?? 20, 100)));
       const pid = await resolveProjectId(args.project_id);
       const extraHeaders = pid !== projectId ? { "X-Mushi-Project-Id": pid } : {};
-      const data = await apiCall(`/v1/admin/reports?${params}`, {
-        headers: extraHeaders
-      });
+      const data = await apiCall(
+        `/v1/admin/reports?${params}`,
+        {
+          headers: extraHeaders
+        }
+      );
       return jsonResult(data);
     }
   );
@@ -1193,7 +1209,10 @@ function createMushiServer(config) {
       return {
         ...res,
         resource_links: [
-          { uri: `project://reports/${args.reportId}`, title: `Report ${args.reportId.slice(0, 8)}\u2026` }
+          {
+            uri: `project://reports/${args.reportId}`,
+            title: `Report ${args.reportId.slice(0, 8)}\u2026`
+          }
         ]
       };
     }
@@ -1297,17 +1316,20 @@ function createMushiServer(config) {
       const report = await apiCall(`/v1/admin/reports/${args.reportId}`, {
         headers
       });
-      return wrappedJsonResult({
-        report,
-        // Paste-ready fix prompt composed server-side by composeFixPacket()
-        // (diagnosis + repro + suggested fix + relevant code + blast radius).
-        // Hand this straight to the editing agent — no second LLM key needed.
-        fixPrompt: report.fix_packet ?? null,
-        reproductionSteps: report.reproduction_steps ?? [],
-        component: report.component,
-        rootCause: report.stage2_analysis?.rootCause,
-        bugOntologyTags: report.bug_ontology_tags
-      }, "fix context");
+      return wrappedJsonResult(
+        {
+          report,
+          // Paste-ready fix prompt composed server-side by composeFixPacket()
+          // (diagnosis + repro + suggested fix + relevant code + blast radius).
+          // Hand this straight to the editing agent — no second LLM key needed.
+          fixPrompt: report.fix_packet ?? null,
+          reproductionSteps: report.reproduction_steps ?? [],
+          component: report.component,
+          rootCause: report.stage2_analysis?.rootCause,
+          bugOntologyTags: report.bug_ontology_tags
+        },
+        "fix context"
+      );
     }
   );
   server.registerTool(
@@ -1356,7 +1378,9 @@ function createMushiServer(config) {
         seed: args.seed,
         depth: String(Math.min(args.depth ?? 2, 4))
       });
-      const data = await apiCall(`/v1/admin/graph/traverse?${params}`);
+      const data = await apiCall(
+        `/v1/admin/graph/traverse?${params}`
+      );
       return jsonResult(data);
     }
   );
@@ -1367,7 +1391,9 @@ function createMushiServer(config) {
       description: descOf("get_graph_neighborhood"),
       annotations: annotationsFor("get_graph_neighborhood"),
       inputSchema: {
-        seed: z.string().describe("Starting graph node id or label to expand around (e.g. an inventory Action id or component name)"),
+        seed: z.string().describe(
+          "Starting graph node id or label to expand around (e.g. an inventory Action id or component name)"
+        ),
         depth: z.number().int().min(1).max(4).optional().describe("BFS hops to traverse outward. Default 2; clamped to a max of 4.")
       },
       outputSchema: {
@@ -1380,7 +1406,9 @@ function createMushiServer(config) {
         seed: args.seed,
         depth: String(Math.min(args.depth ?? 2, 4))
       });
-      const data = await apiCall(`/v1/admin/graph/traverse?${params}`);
+      const data = await apiCall(
+        `/v1/admin/graph/traverse?${params}`
+      );
       return jsonResult(data);
     }
   );
@@ -1390,7 +1418,9 @@ function createMushiServer(config) {
       title: titleOf("get_graph_node"),
       description: descOf("get_graph_node"),
       annotations: annotationsFor("get_graph_node"),
-      inputSchema: { nodeId: z.string().describe("The graph_nodes.id of the node to fetch (UUID).") },
+      inputSchema: {
+        nodeId: z.string().describe("The graph_nodes.id of the node to fetch (UUID).")
+      },
       outputSchema: {
         node: z.unknown().describe("Single graph_nodes row including metadata (Action nodes carry v2 status)")
       }
@@ -1412,7 +1442,8 @@ function createMushiServer(config) {
     },
     async (args) => {
       const pid = args.projectId ?? projectId;
-      if (!pid) throw new MushiApiError(400, "MISSING_PROJECT", "projectId is required for get_inventory");
+      if (!pid)
+        throw new MushiApiError(400, "MISSING_PROJECT", "projectId is required for get_inventory");
       return jsonText(await apiCall(`/v1/admin/inventory/${pid}`));
     }
   );
@@ -1430,7 +1461,8 @@ function createMushiServer(config) {
     },
     async (args) => {
       const pid = args.projectId ?? projectId;
-      if (!pid) throw new MushiApiError(400, "MISSING_PROJECT", "projectId is required for diff_inventory");
+      if (!pid)
+        throw new MushiApiError(400, "MISSING_PROJECT", "projectId is required for diff_inventory");
       const q = new URLSearchParams({ from: args.fromSha, to: args.toSha });
       return jsonText(await apiCall(`/v1/admin/inventory/${pid}/diff?${q}`));
     }
@@ -1453,12 +1485,19 @@ function createMushiServer(config) {
     },
     async (args) => {
       const pid = args.projectId ?? projectId;
-      if (!pid) throw new MushiApiError(400, "MISSING_PROJECT", "projectId is required for list_gate_findings");
+      if (!pid)
+        throw new MushiApiError(
+          400,
+          "MISSING_PROJECT",
+          "projectId is required for list_gate_findings"
+        );
       const q = new URLSearchParams();
       if (args.gate) q.set("gate", args.gate);
       if (args.severity) q.set("severity", args.severity);
       const suffix = q.toString() ? `?${q}` : "";
-      const data = await apiCall(`/v1/admin/inventory/${pid}/findings${suffix}`);
+      const data = await apiCall(
+        `/v1/admin/inventory/${pid}/findings${suffix}`
+      );
       return jsonResult(data);
     }
   );
@@ -1468,7 +1507,9 @@ function createMushiServer(config) {
       title: titleOf("suggest_fix"),
       description: descOf("suggest_fix"),
       annotations: annotationsFor("suggest_fix"),
-      inputSchema: { reportId: z.string().describe("Report UUID to read the Stage-2 suggested-fix slice for") },
+      inputSchema: {
+        reportId: z.string().describe("Report UUID to read the Stage-2 suggested-fix slice for")
+      },
       outputSchema: {
         reportId: z.string().describe("The report this slice was read from"),
         rootCause: z.unknown().describe("Stage-2 root-cause hint, or null if not yet classified"),
@@ -1497,7 +1538,11 @@ function createMushiServer(config) {
       title: titleOf("run_nl_query"),
       description: descOf("run_nl_query"),
       annotations: annotationsFor("run_nl_query"),
-      inputSchema: { question: z.string().describe('Question in plain English, e.g. "Which components had the most critical bugs this week?"') }
+      inputSchema: {
+        question: z.string().describe(
+          'Question in plain English, e.g. "Which components had the most critical bugs this week?"'
+        )
+      }
     },
     async (args) => {
       const data = await apiCall("/v1/admin/query", {
@@ -1514,7 +1559,9 @@ function createMushiServer(config) {
       description: descOf("diagnose_setup"),
       annotations: annotationsFor("diagnose_setup"),
       inputSchema: {
-        mode: z.enum(["full", "ingest", "dispatch"]).optional().describe("full (default) = ingest + dispatch; ingest = SDK pipeline only; dispatch = fix preflight only."),
+        mode: z.enum(["full", "ingest", "dispatch"]).optional().describe(
+          "full (default) = ingest + dispatch; ingest = SDK pipeline only; dispatch = fix preflight only."
+        ),
         project_id: z.string().optional().describe("Project UUID for dispatch checks (defaults to configured project)."),
         projectId: z.string().optional().describe("Alias for project_id.")
       },
@@ -1552,7 +1599,11 @@ function createMushiServer(config) {
       }
       if (mode === "dispatch") {
         if (!resolvedId) {
-          throw new MushiApiError(400, "MISSING_PROJECT", "project_id is required for dispatch mode");
+          throw new MushiApiError(
+            400,
+            "MISSING_PROJECT",
+            "project_id is required for dispatch mode"
+          );
         }
         const data = await apiCall(`/v1/admin/projects/${resolvedId}/preflight`);
         const failed = data.checks.filter((c) => !c.ready);
@@ -1686,7 +1737,12 @@ function createMushiServer(config) {
     async (args) => {
       const query = args.query ?? "";
       const hits = searchMushiDocs(query, args.limit ?? 8);
-      const results = hits.map(({ title, path, excerpt, score }) => ({ title, path, excerpt, score }));
+      const results = hits.map(({ title, path, excerpt, score }) => ({
+        title,
+        path,
+        excerpt,
+        score
+      }));
       return jsonResult({ query, results });
     }
   );
@@ -1836,7 +1892,9 @@ function createMushiServer(config) {
       } : { error: String(reportRes.reason) };
       return jsonText({
         evidence,
-        reporter_thread: timeline ?? { error: String(timelineRes.reason) }
+        reporter_thread: timeline ?? {
+          error: String(timelineRes.reason)
+        }
       });
     }
   );
@@ -1871,15 +1929,23 @@ function createMushiServer(config) {
       const includeLogs = args.include_logs !== false;
       const [reportRes, evidenceRes, similarRes, fixCtxRes, blastRes, logsRes] = await Promise.allSettled([
         apiCall(`/v1/admin/reports/${args.report_id}`, { headers }),
-        apiCall(`/v1/admin/reports/${args.report_id}/timeline`, { headers }),
+        apiCall(`/v1/admin/reports/${args.report_id}/timeline`, {
+          headers
+        }),
         apiCall(`/v1/admin/reports/similarity`, {
           method: "POST",
           headers,
           body: JSON.stringify({ report_id: args.report_id })
         }).catch(() => null),
-        apiCall(`/v1/admin/reports/${args.report_id}/fix-context`, { headers }).catch(() => null),
-        apiCall(`/v1/admin/reports/${args.report_id}/blast-radius`, { headers }).catch(() => null),
-        includeLogs ? apiCall(`/v1/admin/mcp/logs/${pid}?limit=20&level=warn`, { headers }).catch(() => null) : Promise.resolve(null)
+        apiCall(`/v1/admin/reports/${args.report_id}/fix-context`, { headers }).catch(
+          () => null
+        ),
+        apiCall(`/v1/admin/reports/${args.report_id}/blast-radius`, { headers }).catch(
+          () => null
+        ),
+        includeLogs ? apiCall(`/v1/admin/mcp/logs/${pid}?limit=20&level=warn`, { headers }).catch(
+          () => null
+        ) : Promise.resolve(null)
       ]);
       const report = reportRes.status === "fulfilled" ? reportRes.value : null;
       const severity = report ? report.severity : "unknown";
@@ -1946,7 +2012,10 @@ function createMushiServer(config) {
       return {
         ...res,
         resource_links: [
-          { uri: `project://reports/${args.report_id}`, title: `Report ${args.report_id.slice(0, 8)}\u2026` },
+          {
+            uri: `project://reports/${args.report_id}`,
+            title: `Report ${args.report_id.slice(0, 8)}\u2026`
+          },
           ...pid ? [{ uri: `project://dashboard`, title: "Project dashboard" }] : []
         ]
       };
@@ -1965,7 +2034,9 @@ function createMushiServer(config) {
         filesChanged: z.array(z.string()).describe("Repo-relative paths modified by the fix"),
         linesChanged: z.number().describe("Total lines added + removed across filesChanged"),
         summary: z.string().describe("One-line human summary of what the fix changed"),
-        idempotencyKey: z.string().uuid().optional().describe("Optional UUID \u2014 resend the same key to safely retry without creating duplicate fix rows")
+        idempotencyKey: z.string().uuid().optional().describe(
+          "Optional UUID \u2014 resend the same key to safely retry without creating duplicate fix rows"
+        )
       },
       outputSchema: {
         ok: z.boolean().describe("True when the fix_attempt row was created and marked completed"),
@@ -2003,8 +2074,12 @@ function createMushiServer(config) {
       inputSchema: {
         reportId: z.string().uuid().describe("Report UUID to fix"),
         agent: z.enum(["claude_code", "codex", "rest_worker", "mcp"]).optional().describe("Override the agent adapter"),
-        idempotencyKey: z.string().uuid().optional().describe("Optional RFC 4122 UUID. Resend the same key to safely retry without dispatching a duplicate fix job (Idempotency-Key IETF draft)."),
-        inventoryActionNodeId: z.string().uuid().optional().describe("Optional inventory Action node UUID for spec-traceability (\xA72.10). When provided, the fix-worker embeds the expected_outcome contract in the LLM prompt and runs validateAgainstSpec before opening the PR.")
+        idempotencyKey: z.string().uuid().optional().describe(
+          "Optional RFC 4122 UUID. Resend the same key to safely retry without dispatching a duplicate fix job (Idempotency-Key IETF draft)."
+        ),
+        inventoryActionNodeId: z.string().uuid().optional().describe(
+          "Optional inventory Action node UUID for spec-traceability (\xA72.10). When provided, the fix-worker embeds the expected_outcome contract in the LLM prompt and runs validateAgainstSpec before opening the PR."
+        )
       },
       outputSchema: {
         fixId: z.string(),
@@ -2077,11 +2152,19 @@ function createMushiServer(config) {
     },
     async (args) => {
       const pid = args.projectId ?? projectId;
-      if (!pid) throw new MushiApiError(400, "MISSING_PROJECT", "projectId is required for test_gen_from_report");
-      const data = await apiCall(`/v1/admin/inventory/${pid}/test-gen/from-report/${args.reportId}`, {
-        method: "POST",
-        body: JSON.stringify({})
-      });
+      if (!pid)
+        throw new MushiApiError(
+          400,
+          "MISSING_PROJECT",
+          "projectId is required for test_gen_from_report"
+        );
+      const data = await apiCall(
+        `/v1/admin/inventory/${pid}/test-gen/from-report/${args.reportId}`,
+        {
+          method: "POST",
+          body: JSON.stringify({})
+        }
+      );
       return jsonText(data);
     }
   );
@@ -2160,7 +2243,17 @@ function createMushiServer(config) {
       annotations: annotationsFor("transition_status"),
       inputSchema: {
         reportId: z.string().describe("Report UUID"),
-        status: z.enum(["pending", "classified", "grouped", "fixing", "fixed", "resolved", "verified", "reopened", "dismissed"]).describe("Target status"),
+        status: z.enum([
+          "pending",
+          "classified",
+          "grouped",
+          "fixing",
+          "fixed",
+          "resolved",
+          "verified",
+          "reopened",
+          "dismissed"
+        ]).describe("Target status"),
         reason: z.string().optional().describe("Reason for the transition (audit trail)")
       }
     },
@@ -2184,7 +2277,12 @@ function createMushiServer(config) {
     },
     async (args) => {
       const pid = args.projectId ?? projectId;
-      if (!pid) throw new MushiApiError(400, "MISSING_PROJECT", "projectId is required for setup_repo_for_mushi");
+      if (!pid)
+        throw new MushiApiError(
+          400,
+          "MISSING_PROJECT",
+          "projectId is required for setup_repo_for_mushi"
+        );
       const data = await apiCall(`/v1/admin/projects/${pid}/repo/bootstrap`, {
         method: "POST",
         body: JSON.stringify({})
@@ -2249,23 +2347,45 @@ function createMushiServer(config) {
     "project://stats",
     { description: "Report counts, category breakdown, severity distribution" },
     async () => ({
-      contents: [{ uri: "project://stats", mimeType: "application/json", text: JSON.stringify(await apiCall("/v1/admin/stats"), null, 2) }]
+      contents: [
+        {
+          uri: "project://stats",
+          mimeType: "application/json",
+          text: JSON.stringify(await apiCall("/v1/admin/stats"), null, 2)
+        }
+      ]
     })
   );
   server.resource(
     "project_settings",
     "project://settings",
-    { description: "Project configuration \u2014 autofix agent, plugins enabled, ontology, LLM budgets" },
+    {
+      description: "Project configuration \u2014 autofix agent, plugins enabled, ontology, LLM budgets"
+    },
     async () => ({
-      contents: [{ uri: "project://settings", mimeType: "application/json", text: JSON.stringify(await apiCall("/v1/admin/settings"), null, 2) }]
+      contents: [
+        {
+          uri: "project://settings",
+          mimeType: "application/json",
+          text: JSON.stringify(await apiCall("/v1/admin/settings"), null, 2)
+        }
+      ]
     })
   );
   server.resource(
     "project_dashboard",
     "project://dashboard",
-    { description: "PDCA health snapshot \u2014 stage counts, bottleneck, recent activity (same payload the admin console polls)" },
+    {
+      description: "PDCA health snapshot \u2014 stage counts, bottleneck, recent activity (same payload the admin console polls)"
+    },
     async () => ({
-      contents: [{ uri: "project://dashboard", mimeType: "application/json", text: JSON.stringify(await apiCall("/v1/admin/dashboard"), null, 2) }]
+      contents: [
+        {
+          uri: "project://dashboard",
+          mimeType: "application/json",
+          text: JSON.stringify(await apiCall("/v1/admin/dashboard"), null, 2)
+        }
+      ]
     })
   );
   server.registerTool(
@@ -2280,14 +2400,16 @@ function createMushiServer(config) {
       }
     },
     async ({ limit, range }) => ({
-      content: [{
-        type: "text",
-        text: JSON.stringify(
-          await apiCall(`/v1/admin/rewards/leaderboard?range=${range}&limit=${limit}`),
-          null,
-          2
-        )
-      }]
+      content: [
+        {
+          type: "text",
+          text: JSON.stringify(
+            await apiCall(`/v1/admin/rewards/leaderboard?range=${range}&limit=${limit}`),
+            null,
+            2
+          )
+        }
+      ]
     })
   );
   server.registerTool(
@@ -2303,18 +2425,20 @@ function createMushiServer(config) {
       }
     },
     async ({ external_user_id, points, reason }) => ({
-      content: [{
-        type: "text",
-        text: JSON.stringify(
-          await apiCall("/v1/admin/rewards/bonus-points", {
-            method: "POST",
-            headers: { "Content-Type": "application/json" },
-            body: JSON.stringify({ external_user_id, points, reason })
-          }),
-          null,
-          2
-        )
-      }]
+      content: [
+        {
+          type: "text",
+          text: JSON.stringify(
+            await apiCall("/v1/admin/rewards/bonus-points", {
+              method: "POST",
+              headers: { "Content-Type": "application/json" },
+              body: JSON.stringify({ external_user_id, points, reason })
+            }),
+            null,
+            2
+          )
+        }
+      ]
     })
   );
   server.registerTool(
@@ -2330,18 +2454,20 @@ function createMushiServer(config) {
       }
     },
     async ({ external_user_id, tier_slug, reason }) => ({
-      content: [{
-        type: "text",
-        text: JSON.stringify(
-          await apiCall("/v1/admin/rewards/set-tier", {
-            method: "POST",
-            headers: { "Content-Type": "application/json" },
-            body: JSON.stringify({ external_user_id, tier_slug, reason })
-          }),
-          null,
-          2
-        )
-      }]
+      content: [
+        {
+          type: "text",
+          text: JSON.stringify(
+            await apiCall("/v1/admin/rewards/set-tier", {
+              method: "POST",
+              headers: { "Content-Type": "application/json" },
+              body: JSON.stringify({ external_user_id, tier_slug, reason })
+            }),
+            null,
+            2
+          )
+        }
+      ]
     })
   );
   server.resource(
@@ -2351,11 +2477,13 @@ function createMushiServer(config) {
       description: "Returns the privacy posture for this project: storage region, LLM provider, whether BYOK is configured, data retention window, and last audit timestamp."
     },
     async () => ({
-      contents: [{
-        uri: "privacy://status",
-        mimeType: "application/json",
-        text: JSON.stringify(await apiCall("/v1/admin/privacy-status"), null, 2)
-      }]
+      contents: [
+        {
+          uri: "privacy://status",
+          mimeType: "application/json",
+          text: JSON.stringify(await apiCall("/v1/admin/privacy-status"), null, 2)
+        }
+      ]
     })
   );
   server.resource(
@@ -2365,15 +2493,19 @@ function createMushiServer(config) {
       description: "Returns the project's last 30 days of judge scores, prompt promotions, fixed-bug count, and lesson inductions. Agents can read this to see whether the loop is converging (rising judge scores, falling recurrence) or stalling."
     },
     async () => ({
-      contents: [{
-        uri: "evolution://history",
-        mimeType: "application/json",
-        text: projectId ? JSON.stringify(
-          await apiCall(`/v1/admin/projects/${encodeURIComponent(projectId)}/evolution-history`),
-          null,
-          2
-        ) : JSON.stringify({ ok: false, error: "project_id required" })
-      }]
+      contents: [
+        {
+          uri: "evolution://history",
+          mimeType: "application/json",
+          text: projectId ? JSON.stringify(
+            await apiCall(
+              `/v1/admin/projects/${encodeURIComponent(projectId)}/evolution-history`
+            ),
+            null,
+            2
+          ) : JSON.stringify({ ok: false, error: "project_id required" })
+        }
+      ]
     })
   );
   server.resource(
@@ -2383,11 +2515,13 @@ function createMushiServer(config) {
       description: "Live health status of every configured BYOK channel (Sentry, GitHub, LangFuse, PagerDuty, \u2026). Orchestrators should check this before dispatching a fix to fail-fast on broken channels rather than burning LLM budget and discovering the failure mid-run."
     },
     async () => ({
-      contents: [{
-        uri: "project://integration-health",
-        mimeType: "application/json",
-        text: JSON.stringify(await apiCall("/v1/admin/integrations/health"), null, 2)
-      }]
+      contents: [
+        {
+          uri: "project://integration-health",
+          mimeType: "application/json",
+          text: JSON.stringify(await apiCall("/v1/admin/integrations/health"), null, 2)
+        }
+      ]
     })
   );
   server.resource(
@@ -2399,11 +2533,13 @@ function createMushiServer(config) {
     async () => {
       const path = projectId ? `/v1/admin/inventory/${projectId}` : "/v1/admin/inventory";
       return {
-        contents: [{
-          uri: "inventory://current",
-          mimeType: "application/json",
-          text: JSON.stringify(await apiCall(path), null, 2)
-        }]
+        contents: [
+          {
+            uri: "inventory://current",
+            mimeType: "application/json",
+            text: JSON.stringify(await apiCall(path), null, 2)
+          }
+        ]
       };
     }
   );
@@ -2432,11 +2568,13 @@ function createMushiServer(config) {
     async () => {
       const qs = projectId ? `?project_id=${encodeURIComponent(projectId)}` : "";
       return {
-        contents: [{
-          uri: "mushi://activation",
-          mimeType: "application/json",
-          text: JSON.stringify(await apiCall(`/v1/admin/activation${qs}`), null, 2)
-        }]
+        contents: [
+          {
+            uri: "mushi://activation",
+            mimeType: "application/json",
+            text: JSON.stringify(await apiCall(`/v1/admin/activation${qs}`), null, 2)
+          }
+        ]
       };
     }
   );
@@ -2445,11 +2583,12 @@ function createMushiServer(config) {
     "Turn a Mushi report into a one-line root cause, smallest file set, repro steps, and blast-radius warnings. Use before asking an agent to write the patch.",
     { reportId: z.string().describe("The report UUID to summarize") },
     ({ reportId }) => ({
-      messages: [{
-        role: "user",
-        content: {
-          type: "text",
-          text: `You are a senior engineer preparing a fix plan. Use the Mushi MCP tools to:
+      messages: [
+        {
+          role: "user",
+          content: {
+            type: "text",
+            text: `You are a senior engineer preparing a fix plan. Use the Mushi MCP tools to:
 1. Call get_fix_context for reportId "${reportId}".
 2. Call get_blast_radius if the report has a component node id.
 3. Call get_similar_bugs with the component or summary as the query.
@@ -2462,8 +2601,9 @@ Then produce a markdown fix plan with exactly these sections:
 - Confidence (low/medium/high) with a one-line justification
 
 Lead with the fix. Skip the preamble.`
+          }
         }
-      }]
+      ]
     })
   );
   server.prompt(
@@ -2471,11 +2611,12 @@ Lead with the fix. Skip the preamble.`
     "Turn raw Sonnet-as-Judge scores into ship / iterate / dismiss guidance. Use after a fix attempt has been judged.",
     { fixId: z.string().describe("The fix_attempt UUID to explain") },
     ({ fixId }) => ({
-      messages: [{
-        role: "user",
-        content: {
-          type: "text",
-          text: `You are a release engineer. Use the Mushi MCP tools:
+      messages: [
+        {
+          role: "user",
+          content: {
+            type: "text",
+            text: `You are a release engineer. Use the Mushi MCP tools:
 1. Call get_fix_timeline for fixId "${fixId}" to see the full PDCA journey.
 
 Then write a short verdict in this format:
@@ -2484,8 +2625,9 @@ Then write a short verdict in this format:
 - **If iterate:** bullet list of the smallest next patch
 
 No preamble, no score-by-score recap \u2014 the numbers are in the tool output.`
+          }
         }
-      }]
+      ]
     })
   );
   server.prompt(
@@ -2493,11 +2635,12 @@ No preamble, no score-by-score recap \u2014 the numbers are in the tool output.`
     'Answer "what should I focus on right now?" \u2014 five-item markdown list drawn from the dashboard + recent classified queue.',
     {},
     () => ({
-      messages: [{
-        role: "user",
-        content: {
-          type: "text",
-          text: `You are a tech lead looking at the Mushi cockpit. Use the MCP tools:
+      messages: [
+        {
+          role: "user",
+          content: {
+            type: "text",
+            text: `You are a tech lead looking at the Mushi cockpit. Use the MCP tools:
 1. Read the project://dashboard resource for the PDCA snapshot.
 2. Call get_recent_reports with status="classified", limit=10.
 
@@ -2505,8 +2648,9 @@ Then output exactly 5 bullets, in priority order, each formatted as:
 \`**Action** \u2014 why it matters \u2014 suggested tool call\`
 
 Prefer items that are bottlenecks or critical severity. Skip filler.`
+          }
         }
-      }]
+      ]
     })
   );
   server.prompt(
@@ -2514,11 +2658,12 @@ Prefer items that are bottlenecks or critical severity. Skip filler.`
     "Diagnose why Mushi setup is stuck and return the single next command or console step to unblock it.",
     {},
     () => ({
-      messages: [{
-        role: "user",
-        content: {
-          type: "text",
-          text: `You are a Mushi onboarding copilot. Use the MCP tools:
+      messages: [
+        {
+          role: "user",
+          content: {
+            type: "text",
+            text: `You are a Mushi onboarding copilot. Use the MCP tools:
 1. Read mushi://activation for unified setup posture.
 2. Read project://integration-health if GitHub or Sentry looks blocked.
 3. Call diagnose_setup if the resource is unavailable.
@@ -2530,8 +2675,9 @@ Then output:
 - **If still stuck:** one diagnostic command (e.g. mushi doctor --fix)
 
 Be specific. No generic advice.`
+          }
         }
-      }]
+      ]
     })
   );
   server.registerTool(
@@ -2552,7 +2698,15 @@ Be specific. No generic advice.`
       if (!projectId2) throw new MushiApiError(400, "MISSING_PROJECT", "projectId is required");
       const data = await apiCall(
         `/v1/admin/inventory/${projectId2}/map-from-live`,
-        { method: "POST", body: JSON.stringify({ base_url: baseUrl, max_pages: maxPages, provider, cursor_cloud_refine: cursorCloudRefine }) }
+        {
+          method: "POST",
+          body: JSON.stringify({
+            base_url: baseUrl,
+            max_pages: maxPages,
+            provider,
+            cursor_cloud_refine: cursorCloudRefine
+          })
+        }
       );
       return { content: [{ type: "text", text: JSON.stringify(data, null, 2) }] };
     }
@@ -2580,7 +2734,9 @@ Be specific. No generic advice.`
       annotations: annotationsFor("generate_tdd_from_story", TDD_TOOL_CATALOG),
       inputSchema: {
         projectId: z.string().describe("Project UUID that owns the inventory story"),
-        storyNodeId: z.string().describe("User story node id/slug from accepted inventory (from map_user_stories or inventory.yaml)"),
+        storyNodeId: z.string().describe(
+          "User story node id/slug from accepted inventory (from map_user_stories or inventory.yaml)"
+        ),
         automationMode: z.enum(["auto", "review", "approve"]).optional().describe("Approval gate for the generated qa_story (default review \u2192 pending_review)"),
         baseUrl: z.string().url().optional().describe("Override the live app URL the Playwright test should target"),
         openPr: z.boolean().optional().describe("Open a draft GitHub PR with the generated spec (default true)")
@@ -2594,10 +2750,14 @@ Be specific. No generic advice.`
     },
     async ({ projectId: projectId2, storyNodeId, automationMode, baseUrl, openPr }) => {
       if (!projectId2) throw new MushiApiError(400, "MISSING_PROJECT", "projectId is required");
-      const data = await apiCall(
-        `/v1/admin/inventory/${projectId2}/stories/${storyNodeId}/generate-test`,
-        { method: "POST", body: JSON.stringify({ automation_mode: automationMode, base_url: baseUrl, open_pr: openPr }) }
-      );
+      const data = await apiCall(`/v1/admin/inventory/${projectId2}/stories/${storyNodeId}/generate-test`, {
+        method: "POST",
+        body: JSON.stringify({
+          automation_mode: automationMode,
+          base_url: baseUrl,
+          open_pr: openPr
+        })
+      });
       return jsonResult(data);
     }
   );
@@ -2612,10 +2772,10 @@ Be specific. No generic advice.`
       }
     },
     async ({ projectId: projectId2 }) => {
-      const data = await apiCall(
-        "/v1/admin/pdca/improve-qa-stories",
-        { method: "POST", body: JSON.stringify({ project_id: projectId2 }) }
-      );
+      const data = await apiCall("/v1/admin/pdca/improve-qa-stories", {
+        method: "POST",
+        body: JSON.stringify({ project_id: projectId2 })
+      });
       return { content: [{ type: "text", text: JSON.stringify(data, null, 2) }] };
     }
   );
@@ -2649,7 +2809,9 @@ Be specific. No generic advice.`
       }
     },
     async ({ projectId: projectId2 }) => {
-      const data = await apiCall(`/v1/admin/byok/keys?project_id=${encodeURIComponent(projectId2)}`);
+      const data = await apiCall(
+        `/v1/admin/byok/keys?project_id=${encodeURIComponent(projectId2)}`
+      );
       return { content: [{ type: "text", text: JSON.stringify(data, null, 2) }] };
     }
   );
@@ -2662,16 +2824,60 @@ Be specific. No generic advice.`
       inputSchema: {
         projectId: z.string().describe("Project id"),
         provider: z.enum(["anthropic", "openai", "firecrawl", "browserbase", "cursor"]).describe("Provider slug"),
-        key: z.string().min(10).describe("The API key value to add"),
+        key: z.string().min(8).max(4096).describe("The API key value to add"),
         label: z.string().optional().describe("Human-readable label for this key"),
-        priority: z.number().int().min(1).max(999).optional().describe("Priority for ordering (lower = higher priority)")
+        priority: z.number().int().min(0).max(1e4).optional().describe("Priority for ordering (lower = higher priority)"),
+        baseUrl: z.string().url().max(2048).optional().describe("Allow-listed OpenAI-compatible HTTPS base URL")
       }
     },
-    async ({ projectId: projectId2, provider, key, label, priority }) => {
-      const data = await apiCall(
-        "/v1/admin/byok/keys",
-        { method: "POST", body: JSON.stringify({ project_id: projectId2, provider_slug: provider, key, label, priority }) }
-      );
+    async ({ projectId: projectId2, provider, key, label, priority, baseUrl }) => {
+      const data = await apiCall("/v1/admin/byok/keys", {
+        method: "POST",
+        body: JSON.stringify({
+          project_id: projectId2,
+          provider_slug: provider,
+          key,
+          label,
+          priority,
+          base_url: baseUrl
+        })
+      });
+      return { content: [{ type: "text", text: JSON.stringify(data, null, 2) }] };
+    }
+  );
+  server.registerTool(
+    "test_byok_key",
+    {
+      title: titleOf("test_byok_key", TDD_TOOL_CATALOG),
+      description: descOf("test_byok_key", TDD_TOOL_CATALOG),
+      annotations: annotationsFor("test_byok_key", TDD_TOOL_CATALOG),
+      inputSchema: {
+        projectId: z.string().describe("Project id"),
+        keyId: z.string().uuid().describe("Pooled BYOK key id")
+      }
+    },
+    async ({ keyId }) => {
+      const data = await apiCall(`/v1/admin/byok/keys/${encodeURIComponent(keyId)}/test`, {
+        method: "POST"
+      });
+      return { content: [{ type: "text", text: JSON.stringify(data, null, 2) }] };
+    }
+  );
+  server.registerTool(
+    "remove_byok_key",
+    {
+      title: titleOf("remove_byok_key", TDD_TOOL_CATALOG),
+      description: descOf("remove_byok_key", TDD_TOOL_CATALOG),
+      annotations: annotationsFor("remove_byok_key", TDD_TOOL_CATALOG),
+      inputSchema: {
+        projectId: z.string().describe("Project id"),
+        keyId: z.string().uuid().describe("Pooled BYOK key UUID from list_byok_keys")
+      }
+    },
+    async ({ keyId }) => {
+      const data = await apiCall(`/v1/admin/byok/keys/${encodeURIComponent(keyId)}`, {
+        method: "DELETE"
+      });
       return { content: [{ type: "text", text: JSON.stringify(data, null, 2) }] };
     }
   );
@@ -2686,7 +2892,9 @@ Be specific. No generic advice.`
       }
     },
     async ({ projectId: projectId2 }) => {
-      const data = await apiCall(`/v1/admin/inventory/${projectId2}/stories/pending-review`);
+      const data = await apiCall(
+        `/v1/admin/inventory/${projectId2}/stories/pending-review`
+      );
       return { content: [{ type: "text", text: JSON.stringify(data, null, 2) }] };
     }
   );
@@ -2723,13 +2931,10 @@ Be specific. No generic advice.`
       }
     },
     async ({ reportId, message, authorName }) => {
-      const data = await apiCall(
-        `/v1/sync/reports/${reportId}/reply`,
-        {
-          method: "POST",
-          body: JSON.stringify({ message, author_name: authorName })
-        }
-      );
+      const data = await apiCall(`/v1/sync/reports/${reportId}/reply`, {
+        method: "POST",
+        body: JSON.stringify({ message, author_name: authorName })
+      });
       return { content: [{ type: "text", text: JSON.stringify(data, null, 2) }] };
     }
   );
@@ -2808,10 +3013,10 @@ Be specific. No generic advice.`
     async ({ project_id }) => {
       const pid = project_id ?? config.projectId;
       if (!pid) throw new MushiApiError(400, "MISSING_PROJECT_ID", "project_id is required");
-      const data = await apiCall(
-        `/v1/admin/projects/${pid}/audit`,
-        { method: "POST", body: "{}" }
-      );
+      const data = await apiCall(`/v1/admin/projects/${pid}/audit`, {
+        method: "POST",
+        body: "{}"
+      });
       return { content: [{ type: "text", text: JSON.stringify(data, null, 2) }] };
     }
   );
@@ -2907,17 +3112,19 @@ Be specific. No generic advice.`
       inputSchema: {
         root_skill_slug: z.string().describe('Root skill slug to run, e.g. "workflow-fix-and-ship"'),
         report_id: z.string().optional().describe("Report UUID to attach the pipeline to"),
-        mode: z.enum(["handoff", "cloud"]).optional().describe("handoff (default): get context packet for local agent. cloud: auto-dispatch via Cursor Cloud."),
+        mode: z.enum(["handoff", "cloud"]).optional().describe(
+          "handoff (default): get context packet for local agent. cloud: auto-dispatch via Cursor Cloud."
+        ),
         project_id: z.string().optional().describe("Project UUID. Falls back to the configured project.")
       }
     },
     async (args) => {
       const resolvedProjectId = args.project_id ?? projectId;
       if (!resolvedProjectId) return jsonText({ error: "No project_id provided or configured." });
-      const data = await apiCall(
-        "/v1/admin/skills/pipelines",
-        { method: "POST", body: JSON.stringify({ ...args, project_id: resolvedProjectId }) }
-      );
+      const data = await apiCall("/v1/admin/skills/pipelines", {
+        method: "POST",
+        body: JSON.stringify({ ...args, project_id: resolvedProjectId })
+      });
       return jsonText(data);
     }
   );
@@ -2953,10 +3160,10 @@ Be specific. No generic advice.`
     },
     async (args) => {
       const { run_id, step_index, ...body } = args;
-      await apiCall(
-        `/v1/admin/skills/pipelines/${run_id}/steps/${step_index}/checkin`,
-        { method: "POST", body: JSON.stringify(body) }
-      );
+      await apiCall(`/v1/admin/skills/pipelines/${run_id}/steps/${step_index}/checkin`, {
+        method: "POST",
+        body: JSON.stringify(body)
+      });
       return jsonText({ ok: true, message: `Step ${step_index} \u2192 ${args.status}` });
     }
   );
@@ -3124,7 +3331,11 @@ Be specific. No generic advice.`
       if (args.compare) qs.set("compare", args.compare);
       if (args.fix_id) qs.set("fix_id", args.fix_id);
       if (!qs.toString()) {
-        throw new MushiApiError(400, "BAD_REQUEST", "Provide paths, source=last_push, compare, or fix_id");
+        throw new MushiApiError(
+          400,
+          "BAD_REQUEST",
+          "Provide paths, source=last_push, compare, or fix_id"
+        );
       }
       const data = await apiCall(`/v1/admin/projects/${pid}/codebase/impact?${qs}`);
       return jsonResult(data);
@@ -3176,7 +3387,7 @@ Be specific. No generic advice.`
         "### First step",
         `Call \`${cluster.tools[0]}\` to get started.`,
         "",
-        "> Tip: call any tool by name \u2014 `use_mushi` is a read-only helper that never calls other tools itself. All 68 tools remain available."
+        "> Tip: call any tool by name \u2014 `use_mushi` is a read-only helper that never calls other tools itself. All 71 tools remain available."
       ].join("\n");
       return { content: [{ type: "text", text: orientation }] };
     }
@@ -3185,11 +3396,7 @@ Be specific. No generic advice.`
   const featureFilter = config.features ?? "all";
   if (grantedScopes !== void 0 || featureFilter !== "all") {
     const toolRegistry = server._registeredTools;
-    const allSpecs = [
-      ...TOOL_CATALOG,
-      ...TDD_TOOL_CATALOG,
-      ...CODEBASE_TOOL_CATALOG
-    ];
+    const allSpecs = [...TOOL_CATALOG, ...TDD_TOOL_CATALOG, ...CODEBASE_TOOL_CATALOG];
     for (const spec of allSpecs) {
       if (grantedScopes !== void 0 && !grantedScopes.includes(spec.scope)) {
         toolRegistry[spec.name]?.remove();