@mushi-mushi/mcp 0.24.1 → 0.24.3

package/README.md

@@ -494,4 +494,4 @@ MIT
 <!-- mushi-readme-stats-footer -->
 ---
 
-<sub>Monorepo scale (July 2026): 64 edge functions · 410 SQL migrations · 13 outbound plugins · 11 inbound adapters · 19 pipeline agents. Canonical counts: <a href="https://github.com/kensaurus/mushi-mushi/blob/master/docs/stats.md">docs/stats.md</a> · <code>pnpm docs-stats</code></sub>
+<sub>Monorepo scale (July 2026): 64 edge functions · 422 SQL migrations · 13 outbound plugins · 11 inbound adapters · 19 pipeline agents. Canonical counts: <a href="https://github.com/kensaurus/mushi-mushi/blob/master/docs/stats.md">docs/stats.md</a> · <code>pnpm docs-stats</code></sub>

package/dist/catalog.js

@@ -8,7 +8,7 @@ import {
   TOOL_CATALOG,
   USE_MUSHI_INTENTS,
   routeUseMushiIntent
-} from "./chunk-IC7PPRRZ.js";
+} from "./chunk-3IVSUYFV.js";
 export {
   ALL_SCOPES,
   CODEBASE_TOOL_CATALOG,

package/dist/{chunk-IC7PPRRZ.js → chunk-3IVSUYFV.js}

@@ -507,7 +507,7 @@ var TOOL_CATALOG = [
   {
     name: "test_gen_from_report",
     title: "Generate Playwright test from report",
-    description: "Generate a Playwright regression test from a classified report using your project LLM key, then open a draft GitHub PR with the spec. Requires the inventory_v2 plan plus GitHub and LLM keys configured. Returns { qaStoryId, prUrl }. Write; consumes LLM budget; NOT idempotent \u2014 each call opens a new PR. Use to lock in a regression as an E2E test; use generate_tdd_from_story to build a test from a mapped user story instead.",
+    description: "Generate a Playwright regression test from a classified report using your project LLM key, then open a draft GitHub PR with the spec. Requires the inventory_v2 plan plus GitHub and LLM keys configured. Returns { prUrl, prNumber, branch, path }. Write; consumes LLM budget; NOT idempotent \u2014 each call opens a new PR. Use to lock in a regression as an E2E test; use generate_tdd_from_story to build a test from a mapped user story instead.",
     scope: "mcp:write",
     hints: { readOnly: false, destructive: false, idempotent: false, openWorld: true },
     useCase: "Turn this regression report into an E2E test PR."
@@ -820,7 +820,7 @@ var TDD_TOOL_CATALOG = [
   {
     name: "list_byok_keys",
     title: "List your API key pool",
-    description: "List the project's BYOK API keys grouped by provider (anthropic | openai | firecrawl | browserbase | cursor). Returns pooled { keys: [{ id, provider_slug, label, priority, status, cooldown_until, test_status, key_hint, base_url, last_tested_at, last_used_at }] } plus read-only { legacyKeys } metadata for credentials saved before the pooled lifecycle \u2014 never the raw secret. Read-only. Use to see which keys are validated, active, pending, legacy, or rate-limited; use add_byok_key to add one.",
+    description: "List the project's BYOK API keys grouped by provider (anthropic | openai | firecrawl | browserbase | cursor | supabase). Returns pooled { keys: [{ id, provider_slug, label, priority, status, cooldown_until, test_status, key_hint, base_url, last_tested_at, last_used_at }] } plus read-only { legacyKeys } metadata for credentials saved before the pooled lifecycle \u2014 never the raw secret. Read-only. Use to see which keys are validated, active, pending, legacy, or rate-limited; use add_byok_key to add one.",
     scope: "mcp:read",
     hints: { readOnly: true, idempotent: true, openWorld: true },
     useCase: "Which API keys are active and which are rate-limited?"
@@ -828,7 +828,7 @@ var TDD_TOOL_CATALOG = [
   {
     name: "add_byok_key",
     title: "Add an API key",
-    description: "Add and immediately validate a BYOK API key for anthropic | openai | firecrawl | browserbase | cursor. The raw key is stored encrypted in Supabase Vault and never returned; failed probes remain quarantined. Optional baseUrl is accepted only for allow-listed OpenAI-compatible HTTPS providers. Write; NOT idempotent.",
+    description: "Add and immediately validate a BYOK API key for anthropic | openai | firecrawl | browserbase | cursor | supabase (a scoped, read-only Supabase access token, checked against the linked supabase_project_ref). The raw key is stored encrypted in Supabase Vault and never returned; failed probes remain quarantined. Optional baseUrl is accepted only for allow-listed OpenAI-compatible HTTPS providers. Write; NOT idempotent.",
     scope: "mcp:write",
     hints: { readOnly: false, destructive: false, idempotent: false, openWorld: true },
     useCase: "Add a backup Anthropic key to the pool."
@@ -984,7 +984,7 @@ var TDD_TOOL_CATALOG = [
   {
     name: "run_fullstack_audit",
     title: "Run a full-stack health audit",
-    description: "Fan out a full-stack health audit for the current project: DB schema + advisors, API contract gate results (Gates 3\u20138), recent backend error logs, and RLS gap detection. Returns a PM-readable scorecard with severity-ranked findings and fix hints. Requires the project to have a Supabase PAT configured (Settings \u2192 API Keys, slug: supabase) and supabase_project_ref set in project settings for backend analysis. The audit completes synchronously in ~10 s. Triggers a background gate run for orphan_endpoint and unknown_call gates if they have not run today.",
+    description: "Fan out a full-stack health audit for the current project: DB schema + advisors, API contract gate results (Gates 3\u20138), recent backend error logs, and RLS gap detection. Returns a PM-readable scorecard with severity-ranked findings and fix hints. Backend analysis needs supabase_project_ref set (Settings \u2192 General) and a scoped, read-only Supabase access token added (Settings \u2192 AI keys, slug: supabase). The audit completes synchronously in ~10 s. Triggers a background gate run for orphan_endpoint and unknown_call gates if they have not run today.",
     scope: "mcp:write",
     hints: { readOnly: false, destructive: false, idempotent: true, openWorld: true },
     useCase: "Is this project healthy? Run a one-click full-stack audit to find API contract mismatches, unlinked backend features, schema drift, and security gaps."

package/dist/clients.d.ts

@@ -46,7 +46,7 @@ import { FeatureGroup } from './feature-groups.js';
  * editor launch. Synced to package.json by `scripts/sync-mcp-pin.mjs` — never
  * hand-edit the version.
  */
-declare const MCP_PIN_SPEC = "@mushi-mushi/mcp@0.24.1";
+declare const MCP_PIN_SPEC = "@mushi-mushi/mcp@0.24.3";
 interface StdioConfig {
     command: string;
     args: string[];
@@ -84,6 +84,13 @@ interface McpBuildInput {
      * of an `mcp:read` key for defence in depth. No-op for stdio configs.
      */
     readOnly?: boolean;
+    /**
+     * The `@mushi-mushi/mcp@x.y.z` spec to write into stdio configs. The console
+     * passes the published version from the sdk_versions catalog, so a release
+     * reaches its install buttons without a console redeploy. Anything that is
+     * not an exact `@mushi-mushi/mcp@<semver>` falls back to MCP_PIN_SPEC.
+     */
+    pinSpec?: string;
 }
 type McpBuildResult = {
     kind: 'deeplink';
@@ -113,7 +120,7 @@ interface McpClientDef {
 }
 /** Build a stable, unique, human-readable MCP server slug for a project. */
 declare function projectServerName(projectId: string, projectName: string): string;
-declare function buildStdioConfigObj(projectId: string | undefined, apiKey: string, apiEndpoint: string, features?: readonly string[]): StdioConfig;
+declare function buildStdioConfigObj(projectId: string | undefined, apiKey: string, apiEndpoint: string, features?: readonly string[], pinSpec?: string): StdioConfig;
 declare function buildHttpConfigObj(projectId: string | undefined, apiKey: string, mcpHttpUrl: string, features?: readonly string[], readOnly?: boolean): HttpConfig;
 declare const MCP_CLIENTS: McpClientDef[];
 /** Look up a client by id — throws if not found. */

package/dist/clients.js

@@ -8,13 +8,17 @@ import {
 } from "./chunk-F65T4IGT.js";
 
 // src/clients.ts
-var MCP_PIN_SPEC = "@mushi-mushi/mcp@0.24.1";
+var MCP_PIN_SPEC = "@mushi-mushi/mcp@0.24.3";
+var PIN_SPEC_RE = /^@mushi-mushi\/mcp@\d+\.\d+\.\d+$/;
+function pinOf(pinSpec) {
+  return pinSpec && PIN_SPEC_RE.test(pinSpec) ? pinSpec : MCP_PIN_SPEC;
+}
 function projectServerName(projectId, projectName) {
   const nameSlug = projectName.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "").slice(0, 22);
   const idSuffix = projectId.replace(/-/g, "").slice(0, 6);
   return `mushi-${nameSlug}-${idSuffix}`;
 }
-function buildStdioConfigObj(projectId, apiKey, apiEndpoint, features = DEFAULT_FEATURE_GROUPS) {
+function buildStdioConfigObj(projectId, apiKey, apiEndpoint, features = DEFAULT_FEATURE_GROUPS, pinSpec) {
   const env = {
     MUSHI_API_ENDPOINT: apiEndpoint,
     MUSHI_API_KEY: apiKey,
@@ -23,7 +27,7 @@ function buildStdioConfigObj(projectId, apiKey, apiEndpoint, features = DEFAULT_
   if (projectId) env.MUSHI_PROJECT_ID = projectId;
   return {
     command: "npx",
-    args: ["-y", MCP_PIN_SPEC],
+    args: ["-y", pinOf(pinSpec)],
     env,
     icon: MUSHI_ICON_PNG_URL
   };
@@ -67,9 +71,9 @@ var MCP_CLIENTS = [
     method: "deeplink",
     transport: "stdio",
     cliIde: "cursor",
-    build({ projectId, projectName, apiKey, endpoint, features }) {
+    build({ projectId, projectName, apiKey, endpoint, features, pinSpec }) {
       const name = projectId ? projectServerName(projectId, projectName) : `mushi-${projectName.toLowerCase().replace(/[^a-z0-9]+/g, "-").slice(0, 24)}`;
-      const config = buildStdioConfigObj(projectId, apiKey, endpoint, features);
+      const config = buildStdioConfigObj(projectId, apiKey, endpoint, features, pinSpec);
       return { kind: "deeplink", url: encodeCursorDeeplink(name, config) };
     }
   },
@@ -80,9 +84,9 @@ var MCP_CLIENTS = [
     description: "One-click install via VS Code MCP extension",
     method: "deeplink",
     transport: "stdio",
-    build({ projectId, projectName, apiKey, endpoint, features }) {
+    build({ projectId, projectName, apiKey, endpoint, features, pinSpec }) {
       const name = projectId ? projectServerName(projectId, projectName) : `mushi-${projectName.toLowerCase().replace(/[^a-z0-9]+/g, "-").slice(0, 24)}`;
-      const config = buildStdioConfigObj(projectId, apiKey, endpoint, features);
+      const config = buildStdioConfigObj(projectId, apiKey, endpoint, features, pinSpec);
       return { kind: "deeplink", url: encodeVsCodeDeeplink("vscode", name, config) };
     }
   },
@@ -93,9 +97,9 @@ var MCP_CLIENTS = [
     description: "One-click install via VS Code Insiders MCP extension",
     method: "deeplink",
     transport: "stdio",
-    build({ projectId, projectName, apiKey, endpoint, features }) {
+    build({ projectId, projectName, apiKey, endpoint, features, pinSpec }) {
       const name = projectId ? projectServerName(projectId, projectName) : `mushi-${projectName.toLowerCase().replace(/[^a-z0-9]+/g, "-").slice(0, 24)}`;
-      const config = buildStdioConfigObj(projectId, apiKey, endpoint, features);
+      const config = buildStdioConfigObj(projectId, apiKey, endpoint, features, pinSpec);
       return { kind: "deeplink", url: encodeVsCodeDeeplink("vscode-insiders", name, config) };
     }
   },
@@ -137,7 +141,7 @@ var MCP_CLIENTS = [
     description: "Copy config into cline_mcp_settings.json",
     method: "config-json",
     transport: "stdio",
-    build({ projectId, projectName, apiKey, endpoint, features }) {
+    build({ projectId, projectName, apiKey, endpoint, features, pinSpec }) {
       const name = projectId ? projectServerName(projectId, projectName) : `mushi-${projectName.toLowerCase().replace(/[^a-z0-9]+/g, "-").slice(0, 24)}`;
       const env = {
         MUSHI_API_ENDPOINT: endpoint,
@@ -147,7 +151,7 @@ var MCP_CLIENTS = [
       if (projectId) env.MUSHI_PROJECT_ID = projectId;
       const clineConfig = {
         mcpServers: {
-          [name]: { command: "npx", args: ["-y", MCP_PIN_SPEC], env }
+          [name]: { command: "npx", args: ["-y", pinOf(pinSpec)], env }
         }
       };
       return {
@@ -183,7 +187,7 @@ var MCP_CLIENTS = [
     description: "Copy config into claude_desktop_config.json",
     method: "config-json",
     transport: "stdio",
-    build({ projectId, projectName, apiKey, endpoint, features }) {
+    build({ projectId, projectName, apiKey, endpoint, features, pinSpec }) {
       const name = projectId ? projectServerName(projectId, projectName) : `mushi-${projectName.toLowerCase().replace(/[^a-z0-9]+/g, "-").slice(0, 24)}`;
       const env = {
         MUSHI_API_ENDPOINT: endpoint,
@@ -193,7 +197,7 @@ var MCP_CLIENTS = [
       if (projectId) env.MUSHI_PROJECT_ID = projectId;
       const desktopConfig = {
         mcpServers: {
-          [name]: { command: "npx", args: ["-y", MCP_PIN_SPEC], env }
+          [name]: { command: "npx", args: ["-y", pinOf(pinSpec)], env }
         }
       };
       return {
@@ -211,7 +215,7 @@ var MCP_CLIENTS = [
     method: "config-json",
     transport: "stdio",
     cliIde: "zed",
-    build({ projectId, projectName, apiKey, endpoint, features }) {
+    build({ projectId, projectName, apiKey, endpoint, features, pinSpec }) {
       const name = projectId ? projectServerName(projectId, projectName) : `mushi-${projectName.toLowerCase().replace(/[^a-z0-9]+/g, "-").slice(0, 24)}`;
       const env = {
         MUSHI_API_ENDPOINT: endpoint,
@@ -224,7 +228,7 @@ var MCP_CLIENTS = [
           [name]: {
             command: {
               path: "npx",
-              args: ["-y", MCP_PIN_SPEC],
+              args: ["-y", pinOf(pinSpec)],
               env
             },
             settings: {}

package/dist/index.js

@@ -583,7 +583,7 @@ var TOOL_CATALOG = [
   {
     name: "test_gen_from_report",
     title: "Generate Playwright test from report",
-    description: "Generate a Playwright regression test from a classified report using your project LLM key, then open a draft GitHub PR with the spec. Requires the inventory_v2 plan plus GitHub and LLM keys configured. Returns { qaStoryId, prUrl }. Write; consumes LLM budget; NOT idempotent \u2014 each call opens a new PR. Use to lock in a regression as an E2E test; use generate_tdd_from_story to build a test from a mapped user story instead.",
+    description: "Generate a Playwright regression test from a classified report using your project LLM key, then open a draft GitHub PR with the spec. Requires the inventory_v2 plan plus GitHub and LLM keys configured. Returns { prUrl, prNumber, branch, path }. Write; consumes LLM budget; NOT idempotent \u2014 each call opens a new PR. Use to lock in a regression as an E2E test; use generate_tdd_from_story to build a test from a mapped user story instead.",
     scope: "mcp:write",
     hints: { readOnly: false, destructive: false, idempotent: false, openWorld: true },
     useCase: "Turn this regression report into an E2E test PR."
@@ -812,7 +812,7 @@ var TDD_TOOL_CATALOG = [
   {
     name: "list_byok_keys",
     title: "List your API key pool",
-    description: "List the project's BYOK API keys grouped by provider (anthropic | openai | firecrawl | browserbase | cursor). Returns pooled { keys: [{ id, provider_slug, label, priority, status, cooldown_until, test_status, key_hint, base_url, last_tested_at, last_used_at }] } plus read-only { legacyKeys } metadata for credentials saved before the pooled lifecycle \u2014 never the raw secret. Read-only. Use to see which keys are validated, active, pending, legacy, or rate-limited; use add_byok_key to add one.",
+    description: "List the project's BYOK API keys grouped by provider (anthropic | openai | firecrawl | browserbase | cursor | supabase). Returns pooled { keys: [{ id, provider_slug, label, priority, status, cooldown_until, test_status, key_hint, base_url, last_tested_at, last_used_at }] } plus read-only { legacyKeys } metadata for credentials saved before the pooled lifecycle \u2014 never the raw secret. Read-only. Use to see which keys are validated, active, pending, legacy, or rate-limited; use add_byok_key to add one.",
     scope: "mcp:read",
     hints: { readOnly: true, idempotent: true, openWorld: true },
     useCase: "Which API keys are active and which are rate-limited?"
@@ -820,7 +820,7 @@ var TDD_TOOL_CATALOG = [
   {
     name: "add_byok_key",
     title: "Add an API key",
-    description: "Add and immediately validate a BYOK API key for anthropic | openai | firecrawl | browserbase | cursor. The raw key is stored encrypted in Supabase Vault and never returned; failed probes remain quarantined. Optional baseUrl is accepted only for allow-listed OpenAI-compatible HTTPS providers. Write; NOT idempotent.",
+    description: "Add and immediately validate a BYOK API key for anthropic | openai | firecrawl | browserbase | cursor | supabase (a scoped, read-only Supabase access token, checked against the linked supabase_project_ref). The raw key is stored encrypted in Supabase Vault and never returned; failed probes remain quarantined. Optional baseUrl is accepted only for allow-listed OpenAI-compatible HTTPS providers. Write; NOT idempotent.",
     scope: "mcp:write",
     hints: { readOnly: false, destructive: false, idempotent: false, openWorld: true },
     useCase: "Add a backup Anthropic key to the pool."
@@ -976,7 +976,7 @@ var TDD_TOOL_CATALOG = [
   {
     name: "run_fullstack_audit",
     title: "Run a full-stack health audit",
-    description: "Fan out a full-stack health audit for the current project: DB schema + advisors, API contract gate results (Gates 3\u20138), recent backend error logs, and RLS gap detection. Returns a PM-readable scorecard with severity-ranked findings and fix hints. Requires the project to have a Supabase PAT configured (Settings \u2192 API Keys, slug: supabase) and supabase_project_ref set in project settings for backend analysis. The audit completes synchronously in ~10 s. Triggers a background gate run for orphan_endpoint and unknown_call gates if they have not run today.",
+    description: "Fan out a full-stack health audit for the current project: DB schema + advisors, API contract gate results (Gates 3\u20138), recent backend error logs, and RLS gap detection. Returns a PM-readable scorecard with severity-ranked findings and fix hints. Backend analysis needs supabase_project_ref set (Settings \u2192 General) and a scoped, read-only Supabase access token added (Settings \u2192 AI keys, slug: supabase). The audit completes synchronously in ~10 s. Triggers a background gate run for orphan_endpoint and unknown_call gates if they have not run today.",
     scope: "mcp:write",
     hints: { readOnly: false, destructive: false, idempotent: true, openWorld: true },
     useCase: "Is this project healthy? Run a one-click full-stack audit to find API contract mismatches, unlinked backend features, schema drift, and security gaps."
@@ -1875,6 +1875,15 @@ var MUSHI_DOCS_INDEX = [
     headings: ["What it shows", "Out-of-date detection", "Setup checklist integration", "Where it lives", "Related"],
     excerpt: "The SDK health card shows the live heartbeat of every Mushi SDK that reported in the last 24 hours, so an SDK that never shipped is obvious."
   },
+  {
+    title: "SDK upgrade lockfile helper",
+    url: docUrl("/admin/sdk-upgrade-lockfile"),
+    route: "/admin/sdk-upgrade-lockfile",
+    markdown: "admin/sdk-upgrade-lockfile.md",
+    keywords: ["admin", "sdk-upgrade-lockfile", "sdk", "upgrade", "lockfile", "helper"],
+    headings: ["How it works", "Add the workflow", "What the action does", "Private registries", "Pinning", "Why Mushi does not write the lockfile or the workflow", "Limits"],
+    excerpt: "Add one workflow to your repo so Mushi's SDK upgrade PRs arrive with a refreshed lockfile and pass npm ci or pnpm install --frozen-lockfile."
+  },
   {
     title: "Settings",
     url: docUrl("/admin/settings"),
@@ -2709,7 +2718,7 @@ var MUSHI_DOCS_INDEX = [
     route: "/quickstart/incident-loop",
     markdown: "quickstart/incident-loop.md",
     keywords: ["quickstart", "incident-loop", "incident", "loop", "bug", "fix", "prompt"],
-    headings: ["Prerequisites", "Step 1 \u2014 Capture or pick a report", "Step 2 \u2014 Pull fix context", "Step 3 \u2014 Generate the fix prompt", "Step 4 \u2014 Paste and ship", "Troubleshooting", "See also"],
+    headings: ["No MCP? Copy the fix prompt", "Prerequisites", "Step 1 \u2014 Capture or pick a report", "Step 2 \u2014 Pull fix context", "Step 3 \u2014 Generate the fix prompt", "Step 4 \u2014 Paste and ship", "Troubleshooting", "See also"],
     excerpt: "Run npx mushi-mushi, ship, and turn your first user-reported bug into a plain-English diagnosis and a paste-ready fix for Cursor or Claude Code."
   },
   {
@@ -6629,7 +6638,7 @@ Be specific. No generic advice.`
       description: descOf("improve_qa_story", TDD_TOOL_CATALOG),
       annotations: annotationsFor("improve_qa_story", TDD_TOOL_CATALOG),
       inputSchema: z.object({
-        projectId: z.string().optional().describe("Project id (omit to run across all projects)")
+        projectId: z.string().optional().describe("Project id (defaults to the configured project; one project per call)")
       })
     },
     async ({ projectId: projectId2 }) => {
@@ -6684,7 +6693,7 @@ Be specific. No generic advice.`
       annotations: annotationsFor("add_byok_key", TDD_TOOL_CATALOG),
       inputSchema: z.object({
         projectId: z.string().describe("Project id"),
-        provider: z.enum(["anthropic", "openai", "firecrawl", "browserbase", "cursor"]).describe("Provider slug"),
+        provider: z.enum(["anthropic", "openai", "firecrawl", "browserbase", "cursor", "supabase"]).describe("Provider slug"),
         key: z.string().min(8).max(4096).describe("The API key value to add"),
         label: z.string().optional().describe("Human-readable label for this key"),
         priority: z.number().int().min(0).max(1e4).optional().describe("Priority for ordering (lower = higher priority)"),

package/dist/server.js

@@ -4,7 +4,7 @@ import {
   TDD_TOOL_CATALOG,
   TOOL_CATALOG,
   routeUseMushiIntent
-} from "./chunk-IC7PPRRZ.js";
+} from "./chunk-3IVSUYFV.js";
 import {
   MUSHI_SERVER_METADATA
 } from "./chunk-FJRPC4VR.js";
@@ -485,6 +485,15 @@ var MUSHI_DOCS_INDEX = [
     headings: ["What it shows", "Out-of-date detection", "Setup checklist integration", "Where it lives", "Related"],
     excerpt: "The SDK health card shows the live heartbeat of every Mushi SDK that reported in the last 24 hours, so an SDK that never shipped is obvious."
   },
+  {
+    title: "SDK upgrade lockfile helper",
+    url: docUrl("/admin/sdk-upgrade-lockfile"),
+    route: "/admin/sdk-upgrade-lockfile",
+    markdown: "admin/sdk-upgrade-lockfile.md",
+    keywords: ["admin", "sdk-upgrade-lockfile", "sdk", "upgrade", "lockfile", "helper"],
+    headings: ["How it works", "Add the workflow", "What the action does", "Private registries", "Pinning", "Why Mushi does not write the lockfile or the workflow", "Limits"],
+    excerpt: "Add one workflow to your repo so Mushi's SDK upgrade PRs arrive with a refreshed lockfile and pass npm ci or pnpm install --frozen-lockfile."
+  },
   {
     title: "Settings",
     url: docUrl("/admin/settings"),
@@ -1319,7 +1328,7 @@ var MUSHI_DOCS_INDEX = [
     route: "/quickstart/incident-loop",
     markdown: "quickstart/incident-loop.md",
     keywords: ["quickstart", "incident-loop", "incident", "loop", "bug", "fix", "prompt"],
-    headings: ["Prerequisites", "Step 1 \u2014 Capture or pick a report", "Step 2 \u2014 Pull fix context", "Step 3 \u2014 Generate the fix prompt", "Step 4 \u2014 Paste and ship", "Troubleshooting", "See also"],
+    headings: ["No MCP? Copy the fix prompt", "Prerequisites", "Step 1 \u2014 Capture or pick a report", "Step 2 \u2014 Pull fix context", "Step 3 \u2014 Generate the fix prompt", "Step 4 \u2014 Paste and ship", "Troubleshooting", "See also"],
     excerpt: "Run npx mushi-mushi, ship, and turn your first user-reported bug into a plain-English diagnosis and a paste-ready fix for Cursor or Claude Code."
   },
   {
@@ -5305,7 +5314,7 @@ Be specific. No generic advice.`
       description: descOf("improve_qa_story", TDD_TOOL_CATALOG),
       annotations: annotationsFor("improve_qa_story", TDD_TOOL_CATALOG),
       inputSchema: z.object({
-        projectId: z.string().optional().describe("Project id (omit to run across all projects)")
+        projectId: z.string().optional().describe("Project id (defaults to the configured project; one project per call)")
       })
     },
     async ({ projectId: projectId2 }) => {
@@ -5360,7 +5369,7 @@ Be specific. No generic advice.`
       annotations: annotationsFor("add_byok_key", TDD_TOOL_CATALOG),
       inputSchema: z.object({
         projectId: z.string().describe("Project id"),
-        provider: z.enum(["anthropic", "openai", "firecrawl", "browserbase", "cursor"]).describe("Provider slug"),
+        provider: z.enum(["anthropic", "openai", "firecrawl", "browserbase", "cursor", "supabase"]).describe("Provider slug"),
         key: z.string().min(8).max(4096).describe("The API key value to add"),
         label: z.string().optional().describe("Human-readable label for this key"),
         priority: z.number().int().min(0).max(1e4).optional().describe("Priority for ordering (lower = higher priority)"),

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@mushi-mushi/mcp",
   "mcpName": "io.github.kensaurus/mushi-mushi",
-  "version": "0.24.1",
+  "version": "0.24.3",
   "license": "MIT",
   "description": "MCP server for Cursor, Claude Code and Copilot. The bug mediator for AI-built apps: plain-English diagnosis + a ready fix, in your editor.",
   "type": "module",