@mushi-mushi/mcp 0.21.1 → 0.22.1

package/README.md

@@ -18,20 +18,6 @@ npx mushi-mushi setup --ide cursor
 
 That command reads CLI config at **`~/.config/mushi/config.json`** (legacy `~/.mushirc` auto-migrates), writes `.cursor/mcp.json` with the `mushi-<slug>` server block, and prints "Done; restart Cursor and ask: `list mushi tools`". No copy-pasting environment variables.
 
-### Codebase Understand tools (indexed repos)
-
-When codebase indexing is enabled on a project, these MCP tools ground on `project_codebase_files` (+ wiki chunks when configured):
-
-| Tool | Scope | Purpose |
-|------|-------|---------|
-| `ask_codebase` | write | Plain-English Q&A with file:line citations |
-| `get_file_summary` | read | Lazy plain-English file/symbol summary |
-| `get_codebase_tour` | read | Dependency-ordered onboarding tour |
-| `search_codebase` | read | Semantic (or scoped) embedding search |
-| `get_codebase_domains` | read | Business domain / flow map |
-| `analyze_codebase_impact` | read | Diff impact (paths, last push, compare, fix PR) |
-| `analyze_wiki_knowledge` | read | Wiki/docs knowledge graph |
-
 > **What this is, and what it isn't**
 >
 > - **This package** (`@mushi-mushi/mcp`) is the MCP **server**; runs locally next to your editor, talks to the Mushi API, and presents bug reports as MCP tools/resources to your coding agent. Always install it by its scoped name (`npx -y @mushi-mushi/mcp@latest`); the bare `mushi-mcp` name was never published to npm.
@@ -142,11 +128,11 @@ The Mushi backend now exposes the same tool catalog over the **Streamable HTTP**
 }
 ```
 
-> **Cursor icon:** HTTP MCP URLs on `*.supabase.co` often show the **Supabase favicon** in Cursor settings; not a Mushi bug. Use **stdio** (`command` + `npx @mushi-mushi/mcp`) for the red 虫 stamp, or set `"icon": "https://kensaur.us/mushi-mushi/integrations/mushi-mark-512.png"` in your server block. The hosted endpoint also emits MCP `serverInfo.icons` and serves inline SVG at `?icon=1`.
+> **Cursor icon:** HTTP MCP URLs on `*.supabase.co` often show the **Supabase favicon** in Cursor settings; not a Mushi bug. Use **stdio** (`command` + `npx @mushi-mushi/mcp`) for the red 虫 stamp, or set `"icon": "https://kensaur.us/mushi-mushi/docs/integrations/mushi-mark-512.png"` in your server block. The hosted endpoint also emits MCP `serverInfo.icons` and serves inline SVG at `?icon=1`.
 
 ### Feature groups (`?features=` / `MUSHI_FEATURES`)
 
-Full catalog is **73 tools** (stdio / `MUSHI_FEATURES=all`). The hosted HTTP
+Full catalog is **76 tools** (stdio / `MUSHI_FEATURES=all`). The hosted HTTP
 endpoint exposes a leaner subset filtered by feature groups (see
 `mcp-hosted-tool-manifest.json`). New installs now default to the lean
 `triage,fixes,inventory,setup,docs` set automatically (stdio: when
@@ -184,7 +170,9 @@ For custom MCP hosts or tests:
 
 1. **One global MCP config**; keep `mushi` in `~/.cursor/mcp.json` only. Do **not** duplicate `mushi` / `mushi-stdio` in per-project `.cursor/mcp.json` (prevents connection storms). Project repos may ship `{}` or a comment pointing to the global file.
 2. **Windows paths**; use forward slashes in JSON (`C:/Users/...`) or escaped backslashes (`C:\\Users\\...`). Raw `\f`, `\n`, `\t` in paths corrupt JSON.
-3. **Multi-project**; either one HTTP server per project (distinct server name + `X-Mushi-Project-Id`) or one stdio server and pass `project_id` on each tool call.
+3. **Multi-project**; either one HTTP server per project (distinct server name + `X-Mushi-Project-Id`) or one stdio server and pass `projectId` on each tool call.
+
+Tool parameters are camelCase (`projectId`, `reportId`, `includeRaw`). The snake_case spelling of any of them (`project_id`) is accepted too, on both transports, so older prompts and configs keep working.
 4. **After editing global config**; fully restart Cursor (MCP panel must reload).
 
 | Header | Role |
@@ -214,6 +202,9 @@ The endpoint accepts JSON-RPC 2.0 over POST (returns `application/json` or `text
 | `diagnose_setup` | Setup health in one call: `mode=full` (default) runs ingest + dispatch preflight, `mode=ingest` / `mode=dispatch` narrow it. Returns the single best next action. Run first when a user says setup is broken |
 | `check_sdk_version` | Compare a published `@mushi-mushi/*` pin to `GET /v1/sdk/latest-version`. Returns `{ package, current, latest, outdated }` and, when outdated, Sentry-style `suggestedActions` (max 1). Does not bump the pin. |
 | `activation_status` | Unified activation posture for the active project: required steps, SDK heartbeat, dispatch preflight, and the next best action |
+| `query_funnel` | Ordered funnel over `Mushi.track()` events (2–8 steps, per-step window, optional breakdown). Answers "where do users drop off?" from `GET /v1/admin/events/funnel` |
+| `get_product_events_summary` | Event names, counts, distinct users and daily volume for the trailing window — call first to discover event names |
+| `get_user_paths` | Most common events users fired right after a given event ("what did they do next?") from `GET /v1/admin/events/paths` |
 | `get_report_timeline` | Ordered report timeline: the reporter/admin comment thread (including verify/reopen signals) plus fix, QA, and status lanes. Use when triaging whether an end user still sees a bug as unfixed |
 | `list_projects` | Discover all Mushi projects accessible to this API key. Returns project id, name, and created date |
 | `get_project_context` | Rich context snapshot: SDK heartbeat, ingest status, autofix readiness, and open report counts |
@@ -233,6 +224,20 @@ The endpoint accepts JSON-RPC 2.0 over POST (returns `application/json` or `text
 | `transition_status` | Move a report between workflow states (enforces the same rules as the UI) |
 | `run_nl_query` | Natural-language → read-only SQL against your project data (60/hour rate-limited) |
 
+### Codebase (indexed repos)
+
+When codebase indexing is enabled on a project, these tools ground on `project_codebase_files` (+ wiki chunks when configured):
+
+| Tool | Scope | Purpose |
+|------|-------|---------|
+| `ask_codebase` | write | Plain-English Q&A with file:line citations |
+| `get_file_summary` | read | Lazy plain-English file/symbol summary |
+| `get_codebase_tour` | read | Dependency-ordered onboarding tour |
+| `search_codebase` | read | Semantic (or scoped) embedding search |
+| `get_codebase_domains` | read | Business domain / flow map |
+| `analyze_codebase_impact` | read | Diff impact (paths, last push, compare, fix PR) |
+| `analyze_wiki_knowledge` | read | Wiki/docs knowledge graph |
+
 > Need a tool that isn't here? Open an issue at [github.com/kensaurus/mushi-mushi/issues](https://github.com/kensaurus/mushi-mushi/issues) and tag it `mcp`.
 
 ### Tool annotations (what clients see before invoking)
@@ -255,7 +260,7 @@ The same catalog entries power the `/mcp` beginner console in the admin app; so
 ## Resources
 
 Full list (8). See also the generated catalog at
-[`apps/docs/content/sdks/mcp-tools.generated.mdx`](../../apps/docs/content/sdks/mcp-tools.generated.mdx).
+[kensaur.us/mushi-mushi/docs/sdks/mcp-tools](https://kensaur.us/mushi-mushi/docs/sdks/mcp-tools).
 
 | URI | Returns |
 |---|---|
@@ -286,6 +291,9 @@ Named templates the MCP client surfaces in its slash-menu. Each one bakes in the
 | `MUSHI_API_KEY` | yes | — | Project API key with `mcp:read` or `mcp:write` scope. Mint one in the admin console → **Projects** (the one-time reveal card has a **Copy as `.env.local`** tab). |
 | `MUSHI_PROJECT_ID` | yes | — | UUID from the admin console URL (`/projects/<uuid>/...`) or the reveal card. |
 | `MUSHI_API_ENDPOINT` | no | `https://dxptnwrhwsqckaftyymj.supabase.co/functions/v1/api` | Override only if you self-host. Localhost: `http://localhost:54321/functions/v1/api`. |
+| `MUSHI_MCP_SENTRY_DSN` | no | — | Reports this server's own errors to your Sentry project. Needs `@sentry/node` installed next to the server (an optional peer, not installed by default): `npx -p @sentry/node -p @mushi-mushi/mcp mushi-mcp`. |
+
+If a client passes a variable reference through unexpanded (the server receives the literal text `${MUSHI_API_KEY}`), the server treats it as unset: it falls back to the `mushi login` config, or serves setup mode and prints which client syntax to use. Claude Desktop expands no variables; Cursor and VS Code expand `${env:MUSHI_API_KEY}`; Claude Code expands `${MUSHI_API_KEY}`.
 
 ### Storing the key in `.env.local`
 
@@ -297,7 +305,7 @@ The MCP binary reads these three vars from `process.env` on spawn; that means **
    # Mushi MCP; drop into .env.local (gitignored). The MCP binary picks these up on spawn.
    MUSHI_API_ENDPOINT=https://dxptnwrhwsqckaftyymj.supabase.co/functions/v1/api
    MUSHI_PROJECT_ID=<your-uuid>
-   MUSHI_API_KEY=mushi_live_…
+   MUSHI_API_KEY=mushi_…
    ```
 
 2. Paste it into your repo's `.env.local` (already gitignored by every Vite / Next.js / Node project scaffold). Confirm `.env.local` is in `.gitignore` if you're in an unusual setup.
@@ -353,7 +361,7 @@ For teams that live in Cursor / Claude Code / Continue / Cline / Zed / Windsurf:
 | Shipped | Tools, resources, prompts; tool annotations; progress on `dispatch_fix`; scope-aware errors; stdio + Streamable HTTP; `outputSchema` / `structuredContent` on key tools; inventory action anchors on `dispatch_fix` / `get_fix_context` |
 | Waiting on clients | Resource subscriptions / `list_changed` push; sampling / elicitation |
 
-Detail and tool tables: [docs `/sdks/mcp`](https://kensaur.us/mushi-mushi/docs/sdks/mcp) and the generated [MCP tools](https://kensaur.us/mushi-mushi/docs/sdks/mcp-tools.generated) page. Open an issue for a waiting-on-clients row once ≥2 major clients ship support.
+Detail and tool tables: [docs `/sdks/mcp`](https://kensaur.us/mushi-mushi/docs/sdks/mcp) and the generated [MCP tools reference](https://kensaur.us/mushi-mushi/docs/sdks/mcp-tools) page. Open an issue for a waiting-on-clients row once ≥2 major clients ship support.
 
 ## Admin console: `/mcp` page
 
@@ -391,7 +399,7 @@ Spawns `dist/index.js` with a dummy unreachable endpoint and confirms it adverti
 pnpm --filter @mushi-mushi/mcp build
 pnpm --filter @mushi-mushi/mcp test:smoke
 # OK; prints live tool/resource/prompt counts from the catalog
-# (see packages/mcp/src/catalog.ts — currently 73 tools / 8 resources / 4 prompts)
+# (see packages/mcp/src/catalog.ts — currently 76 tools / 8 resources / 4 prompts)
 ```
 
 ### Layer 3; Full localhost E2E (real binary + real backend behaviour)
@@ -435,7 +443,7 @@ Replace the public endpoint block in your client's MCP config with the three env
       "args": ["/absolute/path/to/mushi-mushi/packages/mcp/dist/index.js"],
       "env": {
         "MUSHI_API_ENDPOINT": "http://localhost:54321/functions/v1/api",
-        "MUSHI_API_KEY": "mushi_live_abc…",
+        "MUSHI_API_KEY": "mushi_abc…",
         "MUSHI_PROJECT_ID": "00000000-0000-0000-0000-000000000000"
       }
     }
@@ -473,32 +481,16 @@ Both are complementary; use Sentry for exception noise, Mushi for "the user says
 
 ## See also
 
-- [GTM distribution runbook](../../docs/marketing/GTM-DISTRIBUTION.md); MCP registry, Glama, Connect, cursor.directory, release checklist.
-- [V5.3 whitepaper §2.10](../../MushiMushi_Whitepaper_V5.md); the agentic fix architecture this server feeds into.
-- [`@mushi-mushi/agents`](../agents/README.md); orchestrator that consumes MCP-exposed fix workers.
+- [Fix orchestrator](https://kensaur.us/mushi-mushi/docs/concepts/fix-orchestrator); the agentic fix architecture this server feeds into.
+- [MCP tool reference](https://kensaur.us/mushi-mushi/docs/sdks/mcp-tools); every tool's parameters, generated from the catalog.
+- [`@mushi-mushi/agents`](https://www.npmjs.com/package/@mushi-mushi/agents); orchestrator that consumes MCP-exposed fix workers.
 
 ## License
 
 MIT
 
-## More from KENSAURUS
-
-| | App | What it is |
-|---|---|---|
-| <img src="https://kensaur.us/glot-it/icon-512.png" width="28" height="28" alt=""> | [Glot It](https://kensaur.us/glot-it/?utm_source=github&utm_medium=readme) | Learn Thai — bite-size lessons, smart flashcards, and an AI tutor |
-| <img src="https://kensaur.us/yen-yen/icon.svg" width="28" height="28" alt=""> | [yen-yen](https://kensaur.us/yen-yen/?utm_source=github&utm_medium=readme) | Where did the money go? Now you'll know. A kakeibo for households |
-| <img src="https://kensaur.us/the-wanting-mind/pwa-512x512.png" width="28" height="28" alt=""> | [The Wanting Mind](https://kensaur.us/the-wanting-mind/?utm_source=github&utm_medium=readme) | How the Battle Between Extraction and Generation Is Reshaping Our World — a 147,000-word interactive webbook with 268 concepts, 242 citations, and original illustrations |
-| <img src="https://kensaur.us/help-her-take-photo/assets/apple-touch-icon.png" width="28" height="28" alt=""> | [Help Her Take Photo](https://kensaur.us/help-her-take-photo/?utm_source=github&utm_medium=readme) | Pair phones, direct the pose, nail the photo |
-| <img src="https://talk.kensaur.us/pwa-192.png" width="28" height="28" alt=""> | [Cooler Heads](https://talk.kensaur.us/?utm_source=github&utm_medium=readme) | Practice hard conversations before you have them |
-| <img src="https://solo-boss.kensaur.us/apple-touch-icon.png" width="28" height="28" alt=""> | [一人社長 Solo Boss](https://solo-boss.kensaur.us/?utm_source=github&utm_medium=readme) | Bookkeeping and tax-filing co-pilot for one-person companies in Japan |
-| <img src="https://tsumagoi.kensaur.us/apple-touch-icon.png" width="28" height="28" alt=""> | [Tsumagoi Work&Camp 嬬恋牧場](https://tsumagoi.kensaur.us/?utm_source=github&utm_medium=readme) | Coworking camp at 1,444 m — [Instagram](https://www.instagram.com/tsumagoicamp/) · [Facebook](https://www.facebook.com/profile.php?id=61592113053042) · [Maps](https://maps.app.goo.gl/JCNnTfsdQVHCS1FA7) |
-| <img src="https://github.com/kensaurus.png" width="28" height="28" alt=""> | [cursor-kenji](https://github.com/kensaurus/cursor-kenji) | Ready-made playbooks for your AI coding editor |
-| <img src="https://kensaur.us/favicon.svg" width="28" height="28" alt=""> | [KENSAURUS](https://kensaur.us/?view=portfolio&utm_source=github&utm_medium=readme) | Everything else built under the same roof |
-
-All apps live under [kensaur.us](https://kensaur.us).
-
 
 <!-- mushi-readme-stats-footer -->
 ---
 
-<sub>Monorepo scale (July 2026): 58 edge functions · 347 SQL migrations · 13 outbound plugins · 11 inbound adapters · 19 pipeline agents. Canonical counts: <a href="https://github.com/kensaurus/mushi-mushi/blob/master/docs/stats.md">docs/stats.md</a> · <code>pnpm docs-stats</code></sub>
+<sub>Monorepo scale (July 2026): 59 edge functions · 376 SQL migrations · 13 outbound plugins · 11 inbound adapters · 19 pipeline agents. Canonical counts: <a href="https://github.com/kensaurus/mushi-mushi/blob/master/docs/stats.md">docs/stats.md</a> · <code>pnpm docs-stats</code></sub>

package/dist/branding.d.ts

@@ -7,8 +7,14 @@
  */
 /** Public marketing site — also hosts favicon.svg for the docs app. */
 declare const MUSHI_WEBSITE_URL = "https://kensaur.us/mushi-mushi";
-/** 512×512 stamp mark — safe PNG on CDN (Cursor requires png/jpeg reliably). */
-declare const MUSHI_ICON_PNG_URL = "https://kensaur.us/mushi-mushi/integrations/mushi-mark-512.png";
+/**
+ * 512×512 stamp mark — safe PNG on CDN (Cursor requires png/jpeg reliably).
+ * Served from the docs app's `public/integrations/`, which CloudFront exposes
+ * under `/mushi-mushi/docs/`; the site root serves only the favicon, so the
+ * `/mushi-mushi/integrations/...` form this used until 2026-09-22 was a 404 —
+ * which is what every MCP client asking for our icon received.
+ */
+declare const MUSHI_ICON_PNG_URL = "https://kensaur.us/mushi-mushi/docs/integrations/mushi-mark-512.png";
 /** SVG favicon from the docs app (scalable; some clients sanitize SVG). */
 declare const MUSHI_ICON_SVG_URL = "https://kensaur.us/mushi-mushi/favicon.svg";
 /** Hosted MCP icon route — same origin as the MCP endpoint when proxied. */

package/dist/branding.js

@@ -5,7 +5,7 @@ import {
   MUSHI_SERVER_METADATA,
   MUSHI_WEBSITE_URL,
   mcpIconUrl
-} from "./chunk-EANW5YTI.js";
+} from "./chunk-FJRPC4VR.js";
 export {
   MUSHI_ICON_PNG_URL,
   MUSHI_ICON_SVG_URL,

package/dist/catalog.d.ts

@@ -41,6 +41,16 @@ interface ToolSpec {
     scope: McpScope;
     /** MCP annotation hints. */
     hints: ToolHints;
+    /**
+     * The result carries text neither Mushi nor the operator wrote: reporter
+     * descriptions, console logs, comments, timeline bodies, SDK event names, or
+     * LLM output derived from them. Reports arrive from a public widget, so both
+     * transports wrap these results in data delimiters (wrap-untrusted) before an
+     * agent that also holds write tools reads them. The stdio server applies it
+     * centrally from this flag; the hosted server's UNTRUSTED_TOOLS set is held
+     * to it by scripts/check-catalog-sync.mjs.
+     */
+    returnsUntrusted?: true;
     /**
      * One-liner that tells a human "what problem does calling this tool solve?".
      * Shown on the admin /mcp catalog cards — should be end-user-shaped, not
@@ -74,6 +84,36 @@ interface UseMushiIntent {
     hint: string;
 }
 declare const USE_MUSHI_INTENTS: Record<string, UseMushiIntent>;
+/** What use_mushi recommends for one intent on one connection. */
+interface UseMushiRoute {
+    /** Matched USE_MUSHI_INTENTS key (`status` when nothing matched). */
+    key: string;
+    label: string;
+    /** The intent's tools this connection exposes, in recommendation order. */
+    tools: string[];
+    /** The intent's tools the active feature groups or key scope hide. */
+    hidden: string[];
+    /** First tool to call — always one of `tools`, or null when none is exposed. */
+    firstTool: string | null;
+    /** Orientation sentence; never names a tool the connection does not expose. */
+    hint: string;
+}
+/**
+ * Route a use_mushi intent against the tools a connection actually exposes.
+ * With feature filtering on, the static intent table named tools the lean
+ * default does not register (start_skill_pipeline, get_account_overview, …),
+ * which is the phantom-tool failure the 2026-08-16 audit fixed, reintroduced.
+ */
+declare function routeUseMushiIntent(intent: string, isAvailable: (tool: string) => boolean): UseMushiRoute;
+/**
+ * Server instructions returned in `initialize` by both transports. Clients
+ * that defer tool loading (Claude Code tool search) show the model only this
+ * and the bare tool names at session start, so it says what Mushi is, where
+ * to start, and which calls need the user's say-so. The hosted server keeps a
+ * copy (functions/mcp/index.ts SERVER_INSTRUCTIONS) that
+ * packages/mcp/scripts/check-catalog-sync.mjs holds equal to this one.
+ */
+declare const MUSHI_SERVER_INSTRUCTIONS: string;
 declare const CODEBASE_TOOL_CATALOG: ToolSpec[];
 
-export { ALL_SCOPES, CODEBASE_TOOL_CATALOG, type McpScope, PROMPT_CATALOG, type PromptSpec, RESOURCE_CATALOG, type ResourceSpec, TDD_TOOL_CATALOG, TOOL_CATALOG, type ToolHints, type ToolSpec, USE_MUSHI_INTENTS, type UseMushiIntent };
+export { ALL_SCOPES, CODEBASE_TOOL_CATALOG, MUSHI_SERVER_INSTRUCTIONS, type McpScope, PROMPT_CATALOG, type PromptSpec, RESOURCE_CATALOG, type ResourceSpec, TDD_TOOL_CATALOG, TOOL_CATALOG, type ToolHints, type ToolSpec, USE_MUSHI_INTENTS, type UseMushiIntent, type UseMushiRoute, routeUseMushiIntent };

package/dist/catalog.js

@@ -1,18 +1,22 @@
 import {
   ALL_SCOPES,
   CODEBASE_TOOL_CATALOG,
+  MUSHI_SERVER_INSTRUCTIONS,
   PROMPT_CATALOG,
   RESOURCE_CATALOG,
   TDD_TOOL_CATALOG,
   TOOL_CATALOG,
-  USE_MUSHI_INTENTS
-} from "./chunk-FNDGCFSJ.js";
+  USE_MUSHI_INTENTS,
+  routeUseMushiIntent
+} from "./chunk-RPSPV4FC.js";
 export {
   ALL_SCOPES,
   CODEBASE_TOOL_CATALOG,
+  MUSHI_SERVER_INSTRUCTIONS,
   PROMPT_CATALOG,
   RESOURCE_CATALOG,
   TDD_TOOL_CATALOG,
   TOOL_CATALOG,
-  USE_MUSHI_INTENTS
+  USE_MUSHI_INTENTS,
+  routeUseMushiIntent
 };

package/dist/{chunk-EANW5YTI.js → chunk-FJRPC4VR.js}

@@ -1,6 +1,6 @@
 // src/branding.ts
 var MUSHI_WEBSITE_URL = "https://kensaur.us/mushi-mushi";
-var MUSHI_ICON_PNG_URL = `${MUSHI_WEBSITE_URL}/integrations/mushi-mark-512.png`;
+var MUSHI_ICON_PNG_URL = `${MUSHI_WEBSITE_URL}/docs/integrations/mushi-mark-512.png`;
 var MUSHI_ICON_SVG_URL = `${MUSHI_WEBSITE_URL}/favicon.svg`;
 function mcpIconUrl(mcpBaseUrl) {
   let end = mcpBaseUrl.length;

package/dist/{chunk-XSL2FPLV.js → chunk-LFSAKI6Z.js}

@@ -27,6 +27,7 @@ var ALL_FEATURE_GROUPS = FEATURE_GROUPS.filter(
 );
 var TOOL_FEATURE_MAP = {
   // triage
+  triage_next_steps: "triage",
   get_recent_reports: "triage",
   get_report_detail: "triage",
   get_report_timeline: "triage",
@@ -48,13 +49,10 @@ var TOOL_FEATURE_MAP = {
   get_inventory: "inventory",
   diff_inventory: "inventory",
   list_gate_findings: "inventory",
-  inventory_current: "admin",
   // setup
   diagnose_setup: "setup",
   check_sdk_version: "setup",
   activation_status: "setup",
-  project_integration_health: "setup",
-  setup_repo_for_mushi: "setup",
   get_two_way_comms_health: "setup",
   // fixes
   submit_fix_result: "fixes",
@@ -75,13 +73,11 @@ var TOOL_FEATURE_MAP = {
   get_account_overview: "admin",
   get_project_context: "admin",
   get_pipeline_logs: "admin",
-  project_dashboard: "admin",
-  project_stats: "admin",
-  project_settings: "admin",
-  privacy_status: "admin",
-  evolution_history: "admin",
-  // usage / billing
+  // usage / billing / product analytics (Mushi.track() funnels)
   get_usage: "usage",
+  query_funnel: "usage",
+  get_product_events_summary: "usage",
+  get_user_paths: "usage",
   // qa / tdd
   map_user_stories: "qa",
   get_map_run_status: "qa",
@@ -114,8 +110,10 @@ var TOOL_FEATURE_MAP = {
   get_codebase_domains: "codebase",
   analyze_codebase_impact: "codebase",
   analyze_wiki_knowledge: "codebase",
-  // docs
-  search_mushi_docs: "docs"
+  // docs / orientation
+  search_mushi_docs: "docs",
+  get_mushi_doc: "docs",
+  use_mushi: "docs"
 };
 var DEPRECATED_TOOL_ALIASES = {
   // Removed deprecated tools → successor.
@@ -152,12 +150,11 @@ function parseFeaturesCsv(raw) {
 }
 function toolMatchesFeatures(toolName, filter) {
   if (filter === "all") return true;
-  const group = TOOL_FEATURE_MAP[toolName];
-  if (!group) return true;
-  if (group === "legacy") {
+  if (Object.prototype.hasOwnProperty.call(DEPRECATED_TOOL_ALIASES, toolName)) {
     return filter.includes("legacy");
   }
-  return filter.includes(group);
+  const group = TOOL_FEATURE_MAP[toolName];
+  return group !== void 0 && filter.includes(group);
 }
 function featuresQueryString(groups) {
   return groups.join(",");