@skyelight/mcp 0.6.0 → 0.7.1

package/CHANGELOG.md

@@ -11,7 +11,32 @@ keeps working. A **patch** is a fix or a wording change. A **major** would be
 removing a tool or an argument, or changing what an existing field means, and
 there has not been one.
 
-## 0.6.0 — unreleased
+## 0.7.1 — unreleased
+
+### Changed
+
+- **Docs.** The README lists `publish_review_link` and says what the MCP
+  does on Free. No change to the tools.
+
+## 0.7.0 — 2026-10-05
+
+### Changed
+
+- **`publish_prototype` is now `publish_review_link`, and takes `code` or
+  `url`.** With `code`, as before: Skyelight hosts one file at its own link.
+  With `url`, a deployed app (Lovable, v0, Bolt, Vercel) goes on the
+  project's Review Links, and the answer carries the script tag to add to
+  the app's `<head>`. Code that is part of a larger app is no longer hosted;
+  the answer says to send the app's `url`. The server still answers the old
+  name, so 0.6.0 keeps working.
+- **`source`:** where a hosted prototype was made (`claude`, `openai`, `v0`,
+  `lovable` and others), shown as its logo on the project's Review Links.
+
+- **`list_workspaces` says what an agent can't do in a workspace:** a
+  reviewer seat, a plan without agent tools, or Free, whose MCP publishes
+  prototypes.
+
+## 0.6.0 — 2026-10-05
 
 ### Added
 

package/README.md

@@ -8,7 +8,7 @@ Full guide: [skyelight.ai/docs/mcp](https://skyelight.ai/docs/mcp). The REST
 API behind the local server is documented at
 [skyelight.ai/docs/api](https://skyelight.ai/docs/api).
 
-Two ways to connect, with the same seventeen tools either way:
+Two ways to connect, with the same eighteen tools either way:
 
 - **Remote, with OAuth** — the default. Your agent talks to Skyelight over
   HTTP and you sign in once in the browser. Nothing is pasted and no key is
@@ -18,8 +18,10 @@ Two ways to connect, with the same seventeen tools either way:
   browser sign-in is not an option.
 
 Coding agents need a paid seat (owner, admin or collaborator) on a Pro plan or
-above. A reviewer seat reads and comments in the web app but does not carry
-agent tools.
+above. On Free, the same seat connects too and can publish to Skyelight
+(`publish_review_link`, one hosted prototype); reading feedback with an agent
+is on Pro. A reviewer seat reads and comments in the web app but does not
+carry agent tools.
 
 ## The short way
 
@@ -101,25 +103,41 @@ agent calls `list_projects` first rather than guess.
 
 ## Tools
 
-| Tool              | What it is for                                                          |
-| ----------------- | ----------------------------------------------------------------------- |
-| `list_workspaces` | Which workspaces this credential can reach, and who you are.            |
-| `list_projects`   | The projects inside them, with the ids the other tools take.            |
-| `list_items`      | What is outstanding. Filter by page, type, status, assignee.            |
-| `search_items`    | Find items whose thread mentions some text, replies included.           |
-| `get_item`        | Everything needed to work one item: thread, page, anchor, code, images. |
-| `post_update`     | Report back on the thread the feedback came from.                       |
-| `create_item`     | Raise a new item — an audit finding, something you noticed.             |
-| `set_status`      | Move an item to open, deferred or resolved.                             |
-| `list_members`    | Who is in the workspace, so you can name an assignee or a mention.      |
-| `assign`          | Hand an item to a person, or unassign it.                               |
-| `whats_new`       | What changed since you last looked, from your own bookmark.             |
-| `project_review`  | Where a project landed, for a wrap-up or hand-off document.             |
-| `decision_log`    | What the team decided in its threads, quoted, and its current rules.    |
-| `save_rule`       | Keep an agreed rule in the project context (owners and admins).         |
-| `find_by_source`  | Feedback on a file or component before you edit it, or the hot spots.   |
-| `find_similar`    | Check for an existing report before creating one.                       |
-| `merge_items`     | Fold duplicate items into one.                                          |
+| Tool                  | What it is for                                                                       |
+| --------------------- | ------------------------------------------------------------------------------------ |
+| `list_workspaces`     | Which workspaces this credential can reach, and who you are.                         |
+| `list_projects`       | The projects inside them, with the ids the other tools take.                         |
+| `list_items`          | What is outstanding. Filter by page, type, status, assignee.                         |
+| `search_items`        | Find items whose thread mentions some text, replies included.                        |
+| `get_item`            | Everything needed to work one item: thread, page, anchor, code, images.              |
+| `post_update`         | Report back on the thread the feedback came from.                                    |
+| `create_item`         | Raise a new item — an audit finding, something you noticed.                          |
+| `set_status`          | Move an item to open, deferred or resolved.                                          |
+| `list_members`        | Who is in the workspace, so you can name an assignee or a mention.                   |
+| `assign`              | Hand an item to a person, or unassign it.                                            |
+| `whats_new`           | What changed since you last looked, from your own bookmark.                          |
+| `project_review`      | Where a project landed, for a wrap-up or hand-off document.                          |
+| `decision_log`        | What the team decided in its threads, quoted, and its current rules.                 |
+| `save_rule`           | Keep an agreed rule in the project context (owners and admins).                      |
+| `find_by_source`      | Feedback on a file or component before you edit it, or the hot spots.                |
+| `find_similar`        | Check for an existing report before creating one.                                    |
+| `merge_items`         | Fold duplicate items into one.                                                       |
+| `publish_review_link` | Share something for review: code for Skyelight to host, or a deployed app's address. |
+
+**Publishing for review.** `publish_review_link` takes one of two things:
+
+- `code`: one HTML page, or one React component with an export default (a
+  Claude prototype, a v0 snippet). Skyelight hosts it at its own link on
+  `skyelight.page` with the review badge on it, in a project you name or a new
+  one. Publishing again makes a new version at the same link.
+- `url`: an app already deployed, such as a Lovable, v0 or Bolt project on
+  `*.lovable.app` or `*.vercel.app`. The address goes on the project's Review
+  Links, and the answer carries a script tag for the app's `<head>` and the
+  review link to share (the address with `?skyelight=1`).
+
+Code that imports the rest of its app is not hosted; the answer says to send
+the app's `url` instead. It answers to `publish_prototype` too, its name
+before 0.7.0.
 
 `list_items` leads with a summary — totals, breakdown by type and by page — so
 an agent can tell you the shape of the work before pulling any of it. Rows are
@@ -205,10 +223,14 @@ The server enforces nothing; the API does. The agent can do what your account
 can do in that workspace, and nothing more:
 
 - Agent tools need a **paid seat** (owner, admin or collaborator) in an
-  organization on **Pro or above**. A reviewer seat, or a Free plan, is
-  refused with the reason — the workspace is listed and marked rather than
-  hidden, so you are told which gate closed instead of being told it does not
-  exist.
+  organization on **Pro or above**. A reviewer seat is refused with the
+  reason — the workspace is listed and marked rather than hidden, so you are
+  told which gate closed instead of being told it does not exist.
+- **On Free**, a paid seat connects for publishing: `list_workspaces`,
+  `list_projects` and `publish_review_link` (one hosted prototype). The
+  reading tools answer with how much feedback is waiting and that reading it
+  is on Pro; the rest name the plan.
+- Adding a deployed app's address to Review Links is for owners and admins.
 - Owners, admins and collaborators read, reply, raise items and change any
   thread's status.
 - A token only reaches workspaces in the organization it was created in.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@skyelight/mcp",
-  "version": "0.6.0",
+  "version": "0.7.1",
   "description": "MCP server for Skyelight — read feedback items from your project as an agent",
   "type": "module",
   "bin": {

package/src/brand.js

@@ -61,8 +61,5 @@ export const STATUS = {
   merge_items: ["Merging duplicates", "Merged the duplicates"],
   decision_log: ["Reading the decisions", "Read the decisions"],
   save_rule: ["Saving the rule", "Saved the rule"],
-  publish_prototype: [
-    "Publishing the prototype to Skyelight",
-    "Published the prototype",
-  ],
+  publish_review_link: ["Publishing to Skyelight", "Published to Skyelight"],
 };

package/src/client.js

@@ -110,6 +110,6 @@ export function createClient({ apiUrl, token, fetchImpl = fetch }) {
     mergeItems: (body) => post("/api/v1/items/merge", body),
     decisionLog: (params) => request("/api/v1/decisions", params),
     saveRule: (body) => post("/api/v1/rules", body),
-    publishPrototype: (body) => post("/api/v1/prototypes/publish", body),
+    publishReviewLink: (body) => post("/api/v1/review-links", body),
   };
 }

package/src/tools.d.ts

@@ -42,6 +42,7 @@ export declare function renderMembers(result: unknown): string;
 export declare function renderAssigned(result: unknown): string;
 
 export declare function renderPublished(result: unknown): string;
+export declare function renderReviewLink(result: unknown): string;
 export declare function renderPosted(
   result: unknown,
   opts: { kind: "update" | "item" },

package/src/tools.js

@@ -204,31 +204,42 @@ export function toolDefinitions(opts = {}) {
       },
     },
     {
-      name: "publish_prototype",
+      name: "publish_review_link",
       description:
-        "Host a prototype on Skyelight so people can review it: Skyelight serves the code at " +
-        "its own link with the review badge on it, and their pins land in a Skyelight project. " +
-        "Pass the complete code of one file: a whole HTML page, or one React component with " +
-        "an export default (Tailwind classes and npm imports work; local imports such as " +
-        "@/components do not). Returns the share link and the project link; give both to the " +
-        "person. Publishing again with the same prototypeId, or the same name in the same " +
-        "project, makes a new version at the same link. The link is public to anyone who has it.",
+        "Share something with Skyelight for review, and get a link people can pin feedback on. " +
+        "Two ways:\n" +
+        "- code: one file Skyelight hosts at its own link with the review badge on it. A whole HTML page, " +
+        "or one React component with an export default (Tailwind classes and npm imports work; local " +
+        "imports such as @/components do not). For Claude prototypes, v0 snippets and single pages. " +
+        "Publishing again with the same prototypeId, or the same name in the same project, makes a new " +
+        "version at the same link.\n" +
+        "- url: an app already deployed (a Lovable, v0, Bolt or Vercel project: anything with more than " +
+        "one file). Adds its address to the project's Review Links and returns a script tag to add to the " +
+        "app's <head> (index.html, or the root layout); add it and redeploy. Owners and admins.\n" +
+        "Returns the share link and the project link; give both to the person. A hosted link is public " +
+        "to anyone who has it.",
       inputSchema: {
         type: "object",
         properties: {
-          name: {
+          code: {
             type: "string",
             description:
-              "What it is, in a few words. Names the link and, when no project is given, a new project.",
+              "For Skyelight to host: the complete file, never a summary or an excerpt. Or give url.",
           },
-          code: {
+          url: {
             type: "string",
-            description: "The complete file. Never a summary or an excerpt.",
+            description:
+              "Where the app is deployed, e.g. https://my-app.lovable.app. Or give code.",
+          },
+          name: {
+            type: "string",
+            description:
+              "What it is, in a few words. Names the hosted link and, when no project is given, a new project.",
           },
           kind: {
             type: "string",
             enum: ["html", "react"],
-            description: "Optional; worked out from the code when left out.",
+            description: "With code; worked out from it when left out.",
           },
           projectId: {
             type: "string",
@@ -238,15 +249,19 @@ export function toolDefinitions(opts = {}) {
           prototypeId: {
             type: "string",
             description:
-              "To publish a new version of a prototype published before.",
+              "With code: to publish a new version of a prototype published before.",
           },
           workspaceId: {
             type: "string",
             description:
               "When you are in more than one workspace and give no project, from list_workspaces.",
           },
+          source: {
+            type: "string",
+            description:
+              'With code: where it was made, shown as its logo in Skyelight: "claude", "claude-code", "openai" (ChatGPT), "cursor", "windsurf", "v0", "lovable" or "other". Name yourself.',
+          },
         },
-        required: ["code"],
       },
     },
     {
@@ -386,8 +401,9 @@ const TOOL_ANNOTATIONS = {
   save_rule: { ...WRITE, idempotentHint: true },
   // Hides items from every list (reversible in the app, but not here).
   merge_items: { ...WRITE, destructiveHint: true },
-  // Puts code at a public link: something the person should agree to.
-  publish_prototype: { ...WRITE, openWorldHint: true },
+  // Puts code at a public link, or lets reviewers sign in on another site:
+  // either way, something the person should agree to.
+  publish_review_link: { ...WRITE, openWorldHint: true },
 };
 
 function plural(n, one, many) {
@@ -433,6 +449,9 @@ export function renderWorkspaces(result) {
     const projects = plural(w.projectCount, "project", "projects");
     lines.push(`  ${w.name} — ${w.role}, ${projects}`);
     lines.push(`    ${w.id}`);
+    // What an agent cannot do here, and why: a seat to ask for, a plan to
+    // upgrade, or Free's MCP, which publishes prototypes.
+    if (w.unavailableReason) lines.push(`    ${w.unavailableReason}`);
   }
   return lines.join("\n");
 }
@@ -810,6 +829,19 @@ export function renderPublished(result) {
   return lines.join("\n");
 }
 
+export function renderReviewLink(result) {
+  return [
+    result.alreadyAdded
+      ? `${result.origin} was already on ${result.projectName}'s Review Links.`
+      : `Added ${result.origin} to ${result.projectName}'s Review Links${result.createdProject ? " (new project)" : ""}.`,
+    "Add this to the app's <head> (index.html, or the root layout), then redeploy:",
+    result.scriptTag,
+    `Share link: ${result.shareUrl}`,
+    `Project: ${result.projectUrl}`,
+    "Reviewers sign in to Skyelight from the badge to leave pins.",
+  ].join("\n");
+}
+
 export function renderMembers(result) {
   const members = result?.members ?? [];
   const where = result?.workspace?.name ? ` in ${result.workspace.name}` : "";
@@ -897,24 +929,38 @@ export async function callTool(name, args, { client, config }) {
     return { text: renderPosted(result, { kind: "item" }), data: result };
   }
 
-  if (name === "publish_prototype") {
-    if (!args.code?.trim()) {
+  if (name === "publish_review_link" || name === "publish_prototype") {
+    const hasCode = !!args.code?.trim();
+    const hasUrl = !!args.url?.trim();
+    if (hasCode === hasUrl) {
       throw new Error(
-        "publish_prototype needs code: the whole page, or one React component",
+        "publish_review_link takes code (one file for Skyelight to host) or url (where the app is deployed)",
       );
     }
-    if (!args.prototypeId && !args.name?.trim()) {
-      throw new Error("publish_prototype needs a name");
+    if (hasCode && !args.prototypeId && !args.name?.trim()) {
+      throw new Error("publish_review_link needs a name");
     }
-    const result = await client.publishPrototype({
-      name: args.name ?? "",
-      code: args.code,
-      ...(args.kind ? { kind: args.kind } : {}),
-      ...(args.projectId ? { projectId: args.projectId } : {}),
-      ...(args.prototypeId ? { prototypeId: args.prototypeId } : {}),
-      ...(args.workspaceId ? { workspaceId: args.workspaceId } : {}),
-    });
-    return { text: renderPublished(result), data: result };
+    const pick = (keys) =>
+      Object.fromEntries(keys.filter((k) => args[k]).map((k) => [k, args[k]]));
+    const result = await client.publishReviewLink(
+      hasUrl
+        ? pick(["url", "projectId", "name", "workspaceId"])
+        : {
+            name: args.name ?? "",
+            ...pick([
+              "code",
+              "kind",
+              "projectId",
+              "prototypeId",
+              "workspaceId",
+              "source",
+            ]),
+          },
+    );
+    return {
+      text: result?.linked ? renderReviewLink(result) : renderPublished(result),
+      data: result,
+    };
   }
 
   if (name === "list_members") {

package/src/version.js

@@ -12,4 +12,4 @@
  * filesystem there. `test/server.test.js` asserts the two agree, so the pair
  * cannot drift again without a test going red.
  */
-export const VERSION = "0.6.0";
+export const VERSION = "0.7.1";