@mushi-mushi/mcp 0.24.5 → 0.25.0

package/README.md

@@ -29,7 +29,7 @@ Restart the editor and ask *"what's broken in prod?"*. For Cursor and Claude, `s
   "mcpServers": {
     "mushi-mushi": {
       "command": "npx",
-      "args": ["-y", "@mushi-mushi/mcp@latest"],
+      "args": ["-y", "@mushi-mushi/mcp@0.25.0"],
       "env": {
         "MUSHI_API_KEY": "mushi_xxxxxxxxxxxxxxxxxxxx",
         "MUSHI_PROJECT_ID": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"

package/dist/clients.d.ts

@@ -31,6 +31,9 @@ import { FeatureGroup } from './feature-groups.js';
  * - claude-desktop                     — copy-config to claude_desktop_config.json
  * - zed                                — copy-config to ~/.config/zed/settings.json
  * - any                                — hosted Streamable HTTP URL + Bearer key
+ * - buildOAuthInstall()                — keyless variant of cursor / vscode(-insiders) /
+ *                                        claude-code / windsurf / any for public pages
+ *                                        (URL only, the client's OAuth sign-in runs)
  *
  * NOTES:
  * - All builders are pure functions — no side-effects, no DOM, no React.
@@ -46,7 +49,7 @@ import { FeatureGroup } from './feature-groups.js';
  * editor launch. Synced to package.json by `scripts/sync-mcp-pin.mjs` — never
  * hand-edit the version.
  */
-declare const MCP_PIN_SPEC = "@mushi-mushi/mcp@0.24.5";
+declare const MCP_PIN_SPEC = "@mushi-mushi/mcp@0.25.0";
 interface StdioConfig {
     command: string;
     args: string[];
@@ -123,7 +126,23 @@ declare function projectServerName(projectId: string, projectName: string): stri
 declare function buildStdioConfigObj(projectId: string | undefined, apiKey: string, apiEndpoint: string, features?: readonly string[], pinSpec?: string): StdioConfig;
 declare function buildHttpConfigObj(projectId: string | undefined, apiKey: string, mcpHttpUrl: string, features?: readonly string[], readOnly?: boolean): HttpConfig;
 declare const MCP_CLIENTS: McpClientDef[];
+/** Clients with a URL-only (OAuth) install. */
+type McpOAuthClientId = 'cursor' | 'vscode' | 'vscode-insiders' | 'windsurf' | 'claude-code' | 'any';
+declare const MCP_OAUTH_CLIENT_IDS: readonly McpOAuthClientId[];
+/** Server name written into the client's config by an OAuth install. */
+declare const MCP_OAUTH_SERVER_NAME = "mushi";
+interface McpOAuthInstallInput {
+    /** Hosted MCP URL that runs the client's own OAuth sign-in. */
+    mcpOAuthUrl: string;
+    /** Defaults to MCP_OAUTH_SERVER_NAME. */
+    serverName?: string;
+}
+/**
+ * Keyless install artifact for one client. Nothing it returns carries a key
+ * or a header; the client's OAuth sign-in supplies the credential.
+ */
+declare function buildOAuthInstall(id: McpOAuthClientId, input: McpOAuthInstallInput): McpBuildResult;
 /** Look up a client by id — throws if not found. */
 declare function getMcpClient(id: McpClientId): McpClientDef;
 
-export { MCP_CLIENTS, MCP_PIN_SPEC, type McpBuildInput, type McpBuildResult, type McpClientDef, type McpClientId, type McpInstallMethod, buildHttpConfigObj as buildRawHttpConfig, buildStdioConfigObj as buildRawStdioConfig, getMcpClient, projectServerName };
+export { MCP_CLIENTS, MCP_OAUTH_CLIENT_IDS, MCP_OAUTH_SERVER_NAME, MCP_PIN_SPEC, type McpBuildInput, type McpBuildResult, type McpClientDef, type McpClientId, type McpInstallMethod, type McpOAuthClientId, type McpOAuthInstallInput, buildOAuthInstall, buildHttpConfigObj as buildRawHttpConfig, buildStdioConfigObj as buildRawStdioConfig, getMcpClient, projectServerName };

package/dist/clients.js

@@ -8,7 +8,7 @@ import {
 } from "./chunk-F65T4IGT.js";
 
 // src/clients.ts
-var MCP_PIN_SPEC = "@mushi-mushi/mcp@0.24.5";
+var MCP_PIN_SPEC = "@mushi-mushi/mcp@0.25.0";
 var PIN_SPEC_RE = /^@mushi-mushi\/mcp@\d+\.\d+\.\d+$/;
 function pinOf(pinSpec) {
   return pinSpec && PIN_SPEC_RE.test(pinSpec) ? pinSpec : MCP_PIN_SPEC;
@@ -262,6 +262,37 @@ var MCP_CLIENTS = [
     }
   }
 ];
+var MCP_OAUTH_CLIENT_IDS = [
+  "cursor",
+  "vscode",
+  "vscode-insiders",
+  "claude-code",
+  "windsurf",
+  "any"
+];
+var MCP_OAUTH_SERVER_NAME = "mushi";
+function buildOAuthInstall(id, input) {
+  const name = input.serverName ?? MCP_OAUTH_SERVER_NAME;
+  const url = input.mcpOAuthUrl;
+  switch (id) {
+    case "cursor":
+      return { kind: "deeplink", url: encodeCursorDeeplink(name, { url }) };
+    case "vscode":
+    case "vscode-insiders":
+      return { kind: "deeplink", url: `${id}:mcp/install?${encodeURIComponent(JSON.stringify({ name, type: "http", url }))}` };
+    case "claude-code":
+      return { kind: "command", text: `claude mcp add --transport http ${name} ${url}` };
+    case "windsurf":
+      return {
+        kind: "config",
+        filePath: "~/.codeium/windsurf/mcp_config.json",
+        // Windsurf reads `serverUrl`, not `url`.
+        json: JSON.stringify({ mcpServers: { [name]: { serverUrl: url } } }, null, 2)
+      };
+    case "any":
+      return { kind: "remote-url", url, headerSnippet: "" };
+  }
+}
 function getMcpClient(id) {
   const client = MCP_CLIENTS.find((c) => c.id === id);
   if (!client) throw new Error(`Unknown MCP client id: ${id}`);
@@ -269,7 +300,10 @@ function getMcpClient(id) {
 }
 export {
   MCP_CLIENTS,
+  MCP_OAUTH_CLIENT_IDS,
+  MCP_OAUTH_SERVER_NAME,
   MCP_PIN_SPEC,
+  buildOAuthInstall,
   buildHttpConfigObj as buildRawHttpConfig,
   buildStdioConfigObj as buildRawStdioConfig,
   getMcpClient,

package/dist/index.js

@@ -1476,7 +1476,7 @@ var MUSHI_DOCS_INDEX = [
     route: "/admin/billing",
     markdown: "admin/billing.md",
     keywords: ["admin", "billing"],
-    headings: ["Reading your usage card", "Usage breakdown", "Predictability controls", "Upgrading your plan", "Managing payment and invoices", "CLI parity", "Related docs"],
+    headings: ["Reading your usage card", "Usage breakdown", "Predictability controls", "Upgrading your plan", "Changing plan", "Managing payment and invoices", "CLI parity", "Related docs"],
     excerpt: "The Billing page shows your diagnosis quota, usage alerts at 50% and 80%, your projected bill, and spend caps for your Mushi plan."
   },
   {
@@ -1674,7 +1674,7 @@ var MUSHI_DOCS_INDEX = [
     route: "/admin/inventory",
     markdown: "admin/inventory.md",
     keywords: ["admin", "inventory", "user", "stories"],
-    headings: ["What you see", "Run gates / Run crawler", "SDK-driven discovery", "Surface mode in the graph", "Five gates", "Synthetic monitor", "Spec traceability \u2014 every fix carries the originating Action", "See also"],
+    headings: ["What you see", "Run gates / Run crawler", "SDK-driven discovery", "Surface mode in the graph", "Five gates", "Watch your live site", "Synthetic monitor", "Spec traceability \u2014 every fix carries the originating Action"],
     excerpt: "The User stories page manages your inventory.yaml \u2014 every page, action and story your app should have \u2014 and shows which of them the gates cover."
   },
   {
@@ -1854,7 +1854,7 @@ var MUSHI_DOCS_INDEX = [
     route: "/admin/research",
     markdown: "admin/research.md",
     keywords: ["admin", "research"],
-    headings: ["What it's for", "Running a search", "Saving results", "Prerequisites", "Related pages"],
+    headings: ["What it's for", "Running a search", "Saving results", "Automatic results on error reports", "Prerequisites", "Related pages"],
     excerpt: "The Research page runs a Firecrawl web search scoped to your tech stack and returns summarised answers with links to their sources."
   },
   {
@@ -3141,7 +3141,7 @@ var MUSHI_DOCS_INDEX = [
     route: "/security/byok",
     markdown: "security/byok.md",
     keywords: ["security", "byok", "bring-your-own-key"],
-    headings: ["Setup", "What uses the key", "OpenRouter", "Audit trail", "Rotation", "Langfuse trace attribution"],
+    headings: ["Setup", "One key for every app", "What uses the key", "OpenRouter", "Audit trail", "Rotation", "Langfuse trace attribution"],
     excerpt: "Use your own Anthropic, OpenAI or OpenRouter key for a Mushi project, so every diagnosis, fix and grading run bills to your provider account."
   },
   {
@@ -5305,7 +5305,8 @@ function createMushiServer(config) {
       );
       const latest = data.latest ?? data.version;
       const current = args.current;
-      const outdated = current && latest ? current !== latest : void 0;
+      const pinned = current?.trim().replace(/^[\^~>=<v\s]+/, "");
+      const outdated = pinned && latest ? pinned !== latest : void 0;
       return jsonResult({
         package: data.package ?? pkg,
         latest,
@@ -7494,6 +7495,11 @@ Be specific. No generic advice.`
     });
   }
   {
+    const ALIAS_DEFAULT_ARGS = {
+      setup_check: { mode: "dispatch" },
+      ingest_setup_check: { mode: "ingest" },
+      diagnose_connection: { mode: "full" }
+    };
     const llAliasServer = server.server;
     const innerHandler = llAliasServer?._requestHandlers?.get("tools/call");
     if (typeof innerHandler === "function") {
@@ -7502,9 +7508,15 @@ Be specific. No generic advice.`
         const originalName = req?.params?.name;
         const canonicalName = originalName ? DEPRECATED_TOOL_ALIASES[originalName] : void 0;
         if (canonicalName) {
+          const defaults = ALIAS_DEFAULT_ARGS[originalName];
+          const callerArgs = req?.params?.arguments && typeof req.params.arguments === "object" ? req.params.arguments : {};
           const rewritten = {
             ...args[0],
-            params: { ...req?.params ?? {}, name: canonicalName }
+            params: {
+              ...req?.params ?? {},
+              name: canonicalName,
+              ...defaults ? { arguments: { ...defaults, ...callerArgs } } : {}
+            }
           };
           const result = await innerHandler(rewritten, ...args.slice(1));
           if (result != null && typeof result === "object" && "content" in result && Array.isArray(result.content)) {
@@ -7512,11 +7524,11 @@ Be specific. No generic advice.`
             return {
               ...r,
               content: [
+                ...r.content,
                 {
                   type: "text",
                   text: `\u26A0\uFE0F Deprecated: \`${originalName}\` was renamed to \`${canonicalName}\`. Update your agent config \u2014 this alias will be removed in the next release.`
-                },
-                ...r.content
+                }
               ]
             };
           }

package/dist/server.js

@@ -86,7 +86,7 @@ var MUSHI_DOCS_INDEX = [
     route: "/admin/billing",
     markdown: "admin/billing.md",
     keywords: ["admin", "billing"],
-    headings: ["Reading your usage card", "Usage breakdown", "Predictability controls", "Upgrading your plan", "Managing payment and invoices", "CLI parity", "Related docs"],
+    headings: ["Reading your usage card", "Usage breakdown", "Predictability controls", "Upgrading your plan", "Changing plan", "Managing payment and invoices", "CLI parity", "Related docs"],
     excerpt: "The Billing page shows your diagnosis quota, usage alerts at 50% and 80%, your projected bill, and spend caps for your Mushi plan."
   },
   {
@@ -284,7 +284,7 @@ var MUSHI_DOCS_INDEX = [
     route: "/admin/inventory",
     markdown: "admin/inventory.md",
     keywords: ["admin", "inventory", "user", "stories"],
-    headings: ["What you see", "Run gates / Run crawler", "SDK-driven discovery", "Surface mode in the graph", "Five gates", "Synthetic monitor", "Spec traceability \u2014 every fix carries the originating Action", "See also"],
+    headings: ["What you see", "Run gates / Run crawler", "SDK-driven discovery", "Surface mode in the graph", "Five gates", "Watch your live site", "Synthetic monitor", "Spec traceability \u2014 every fix carries the originating Action"],
     excerpt: "The User stories page manages your inventory.yaml \u2014 every page, action and story your app should have \u2014 and shows which of them the gates cover."
   },
   {
@@ -464,7 +464,7 @@ var MUSHI_DOCS_INDEX = [
     route: "/admin/research",
     markdown: "admin/research.md",
     keywords: ["admin", "research"],
-    headings: ["What it's for", "Running a search", "Saving results", "Prerequisites", "Related pages"],
+    headings: ["What it's for", "Running a search", "Saving results", "Automatic results on error reports", "Prerequisites", "Related pages"],
     excerpt: "The Research page runs a Firecrawl web search scoped to your tech stack and returns summarised answers with links to their sources."
   },
   {
@@ -1751,7 +1751,7 @@ var MUSHI_DOCS_INDEX = [
     route: "/security/byok",
     markdown: "security/byok.md",
     keywords: ["security", "byok", "bring-your-own-key"],
-    headings: ["Setup", "What uses the key", "OpenRouter", "Audit trail", "Rotation", "Langfuse trace attribution"],
+    headings: ["Setup", "One key for every app", "What uses the key", "OpenRouter", "Audit trail", "Rotation", "Langfuse trace attribution"],
     excerpt: "Use your own Anthropic, OpenAI or OpenRouter key for a Mushi project, so every diagnosis, fix and grading run bills to your provider account."
   },
   {
@@ -3981,7 +3981,8 @@ function createMushiServer(config) {
       );
       const latest = data.latest ?? data.version;
       const current = args.current;
-      const outdated = current && latest ? current !== latest : void 0;
+      const pinned = current?.trim().replace(/^[\^~>=<v\s]+/, "");
+      const outdated = pinned && latest ? pinned !== latest : void 0;
       return jsonResult({
         package: data.package ?? pkg,
         latest,
@@ -6170,6 +6171,11 @@ Be specific. No generic advice.`
     });
   }
   {
+    const ALIAS_DEFAULT_ARGS = {
+      setup_check: { mode: "dispatch" },
+      ingest_setup_check: { mode: "ingest" },
+      diagnose_connection: { mode: "full" }
+    };
     const llAliasServer = server.server;
     const innerHandler = llAliasServer?._requestHandlers?.get("tools/call");
     if (typeof innerHandler === "function") {
@@ -6178,9 +6184,15 @@ Be specific. No generic advice.`
         const originalName = req?.params?.name;
         const canonicalName = originalName ? DEPRECATED_TOOL_ALIASES[originalName] : void 0;
         if (canonicalName) {
+          const defaults = ALIAS_DEFAULT_ARGS[originalName];
+          const callerArgs = req?.params?.arguments && typeof req.params.arguments === "object" ? req.params.arguments : {};
           const rewritten = {
             ...args[0],
-            params: { ...req?.params ?? {}, name: canonicalName }
+            params: {
+              ...req?.params ?? {},
+              name: canonicalName,
+              ...defaults ? { arguments: { ...defaults, ...callerArgs } } : {}
+            }
           };
           const result = await innerHandler(rewritten, ...args.slice(1));
           if (result != null && typeof result === "object" && "content" in result && Array.isArray(result.content)) {
@@ -6188,11 +6200,11 @@ Be specific. No generic advice.`
             return {
               ...r,
               content: [
+                ...r.content,
                 {
                   type: "text",
                   text: `\u26A0\uFE0F Deprecated: \`${originalName}\` was renamed to \`${canonicalName}\`. Update your agent config \u2014 this alias will be removed in the next release.`
-                },
-                ...r.content
+                }
               ]
             };
           }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@mushi-mushi/mcp",
   "mcpName": "io.github.kensaurus/mushi-mushi",
-  "version": "0.24.5",
+  "version": "0.25.0",
   "license": "MIT",
   "description": "MCP server for Cursor, Claude Code and Copilot. The bug mediator for AI-built apps: plain-English diagnosis + a ready fix, in your editor.",
   "type": "module",
@@ -45,7 +45,7 @@
     "@modelcontextprotocol/core": "^2.0.0",
     "@modelcontextprotocol/server": "^2.0.0",
     "zod": "^4.4.3",
-    "@mushi-mushi/core": "^1.32.0"
+    "@mushi-mushi/core": "^1.32.3"
   },
   "peerDependencies": {
     "@sentry/node": "^10.57.0"