chore(release): 0.4.0

[JSONbored]

Summary

• Prepare @jsonbored/gittensory-mcp@0.4.0 for release.
• Add release-aware MCP changelog generation that preserves historical sections.
• Add a daily/manual MCP release-due issue workflow.
• Modernize the MCP dependency stack, including agents@0.13.3.

What changed

• Bumped the MCP package, CLI package version, and MCP compatibility metadata to 0.4.0.
• Treat 0.4.0 as both the minimum supported and latest recommended MCP client version.
• Generated the mcp-v0.4.0 changelog section with MCP-client-visible API/server changes and release-prep dependency updates.
• Replaced the MCP changelog path-only git-cliff call with a deterministic release-aware generator and stale checker.
• Added scripts/check-mcp-release-due.mjs and .github/workflows/mcp-release-watch.yml to open/update one marked maintainer issue when an MCP release is due.
• Updated the MCP release dependency stack to agents@0.13.3, @modelcontextprotocol/sdk@1.29.0, Zod v4, and @asteasolutions/zod-to-openapi@8.5.0.
• Updated the Node/Vitest Cloudflare Workers shim for the newer agents package and removed the old MCP server type cast.
• Hardened release reminder matching so the workflow only updates its own github-actions[bot] reminder issue, not any public issue containing the marker.

Why

• main has MCP-visible feature work after mcp-v0.3.0, but npm is still on 0.3.0.
• The old changelog filter only saw package/workflow paths and missed API/server changes that MCP clients actually consume.
• The project is still young, so the release should advertise a current-only support window instead of carrying stale-client compatibility promises.
• Staying on agents@0.7.9 was unnecessary after fixing the stale Workers test shim.

Validation

• npm run build:mcp
• npm run test:mcp-pack
• npm run changelog:check:mcp
• npm run actionlint
• npm run test -- test/unit/mcp-release.test.ts test/unit/mcp-cli.test.ts test/unit/mcp-compatibility.test.ts test/unit/mcp-server-telemetry.test.ts
• npm run test -- test/integration/api.test.ts
• npm run test -- test/unit/mcp-release.test.ts
• npm run typecheck
• npm run test:release:mcp
• Codex Security diff scan completed with no remaining reportable findings; the release-reminder marker-hijack candidate was fixed in this PR.

Notes

• After merge, tag mcp-v0.4.0 and watch the npm trusted publishing workflow plus GitHub Release job.

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	gittensory-ui	e9d45ed	Commit Preview URL Branch Preview URL	Jun 02 2026, 08:41 AM

[dosubot]

Documentation Updates

2 document(s) were updated by changes in this PR:

Gittensory Architecture

View Changes

@@ -95,9 +95,9 @@
 
 ### **H. MCP Package (`packages/gittensory-mcp`)**
 
-The `@jsonbored/gittensory-mcp` package (v0.3.0, Node >= 22) exposes 21 MCP tools in five categories: repo intelligence, PR preflight & scoring, contributor decisions, current branch analysis, and agent operations [[27]](https://github.com/JSONbored/gittensory/blob/40c019c82d87568c232fbe7fabf50212e983075a/packages/gittensory-mcp/package.json) [[28]](https://github.com/JSONbored/gittensory/blob/40c019c82d87568c232fbe7fabf50212e983075a/packages/gittensory-mcp/bin/gittensory-mcp.js#L156-L458).
-
-It also provides 13 CLI commands including login, logout, whoami, status, changelog, doctor, init-client, analyze-branch, preflight, and agent plan/status/explain/packet. Core dependencies are `@modelcontextprotocol/sdk` 1.26.0 and `zod` ^3.25.76 [[29]](https://github.com/JSONbored/gittensory/blob/40c019c82d87568c232fbe7fabf50212e983075a/packages/gittensory-mcp/package.json#L40-L42).
+The `@jsonbored/gittensory-mcp` package (v0.4.0, Node >= 22) exposes 21 MCP tools in five categories: repo intelligence, PR preflight & scoring, contributor decisions, current branch analysis, and agent operations [[27]](https://github.com/JSONbored/gittensory/blob/40c019c82d87568c232fbe7fabf50212e983075a/packages/gittensory-mcp/package.json) [[28]](https://github.com/JSONbored/gittensory/blob/40c019c82d87568c232fbe7fabf50212e983075a/packages/gittensory-mcp/bin/gittensory-mcp.js#L156-L458).
+
+It also provides 13 CLI commands including login, logout, whoami, status, changelog, doctor, init-client, analyze-branch, preflight, and agent plan/status/explain/packet. Core dependencies are `@modelcontextprotocol/sdk` 1.29.0 and `zod` ^4.4.3 [[29]](https://github.com/JSONbored/gittensory/blob/40c019c82d87568c232fbe7fabf50212e983075a/packages/gittensory-mcp/package.json#L40-L42).
 
 Local branch analysis sends branch metadata (branch names, SHAs, changed file paths, commit messages, validation details, labels, body text, linked issues, scenario notes) to the Worker API; source code contents remain local.
 
@@ -213,7 +213,7 @@
 
 ### MCP Package Structure
 
-The `@jsonbored/gittensory-mcp` package (v0.3.0) ships as a standalone npm module with Node >= 22 requirement [[55]](https://github.com/JSONbored/gittensory/blob/40c019c82d87568c232fbe7fabf50212e983075a/packages/gittensory-mcp/package.json#L1-L48):
+The `@jsonbored/gittensory-mcp` package (v0.4.0) ships as a standalone npm module with Node >= 22 requirement [[55]](https://github.com/JSONbored/gittensory/blob/40c019c82d87568c232fbe7fabf50212e983075a/packages/gittensory-mcp/package.json#L1-L48):
 
 ```
 packages/gittensory-mcp/
@@ -346,15 +346,15 @@
 
 **HTTP Routing:** [Hono ^4.12.23](https://github.com/JSONbored/gittensory/blob/40c019c82d87568c232fbe7fabf50212e983075a/package.json#L63) — a lightweight, edge-first web framework handles all REST API routing in the Worker environment.
 
-**MCP Protocol:** [@modelcontextprotocol/sdk 1.26.0](https://github.com/JSONbored/gittensory/blob/40c019c82d87568c232fbe7fabf50212e983075a/packages/gittensory-mcp/package.json#L41) implements the Model Context Protocol, enabling coding agents to interact with Gittensory via a standardized interface. The MCP package requires [Node >= 22](https://github.com/JSONbored/gittensory/blob/40c019c82d87568c232fbe7fabf50212e983075a/packages/gittensory-mcp/package.json#L44-L46).
+**MCP Protocol:** [@modelcontextprotocol/sdk 1.29.0](https://github.com/JSONbored/gittensory/blob/40c019c82d87568c232fbe7fabf50212e983075a/packages/gittensory-mcp/package.json#L41) implements the Model Context Protocol, enabling coding agents to interact with Gittensory via a standardized interface. The MCP package requires [Node >= 22](https://github.com/JSONbored/gittensory/blob/40c019c82d87568c232fbe7fabf50212e983075a/packages/gittensory-mcp/package.json#L44-L46).
 
 **GitHub Integration:** [@octokit/core ^7.0.6](https://github.com/JSONbored/gittensory/blob/40c019c82d87568c232fbe7fabf50212e983075a/package.json#L60) provides GitHub REST and GraphQL API client functionality for syncing repositories, issues, PRs, and handling webhook events.
 
 ### Schema & Validation
 
-**Zod:** [zod ^3.25.76](https://github.com/JSONbored/gittensory/blob/40c019c82d87568c232fbe7fabf50212e983075a/package.json#L64) validates runtime types for all API inputs and MCP tool schemas, ensuring type safety at system boundaries.
-
-**OpenAPI:** [@asteasolutions/zod-to-openapi ^7.3.4](https://github.com/JSONbored/gittensory/blob/40c019c82d87568c232fbe7fabf50212e983075a/package.json#L58) automatically generates OpenAPI specifications from Zod schemas, maintaining consistency between validation and documentation.
+**Zod:** [zod ^4.4.3](https://github.com/JSONbored/gittensory/blob/40c019c82d87568c232fbe7fabf50212e983075a/package.json#L64) validates runtime types for all API inputs and MCP tool schemas, ensuring type safety at system boundaries.
+
+**OpenAPI:** [@asteasolutions/zod-to-openapi ^8.5.0](https://github.com/JSONbored/gittensory/blob/40c019c82d87568c232fbe7fabf50212e983075a/package.json#L58) automatically generates OpenAPI specifications from Zod schemas, maintaining consistency between validation and documentation.
 
 ### Optional AI Layer
 
@@ -395,7 +395,7 @@
 
 ### Developer Tooling
 
-**Changelog Generation:** [git-cliff ^2.13.1](https://github.com/JSONbored/gittensory/blob/40c019c82d87568c232fbe7fabf50212e983075a/package.json#L71) generates changelogs with [separate configurations](https://github.com/JSONbored/gittensory/blob/40c019c82d87568c232fbe7fabf50212e983075a/) for the main workspace (`cliff.toml`) and MCP package (`cliff.mcp.toml`).
+**Changelog Generation:** [git-cliff ^2.13.1](https://github.com/JSONbored/gittensory/blob/40c019c82d87568c232fbe7fabf50212e983075a/package.json#L71) generates changelogs for the main workspace (`cliff.toml`). The MCP changelog is generated by a deterministic script (`scripts/generate-mcp-changelog.mjs`) that creates release-aware changelog sections and preserves historical content. The script reads MCP-client-visible commits and release-prep dependency updates to produce structured release notes. An automated workflow (`mcp-release-watch.yml`) checks for release-due status daily and opens maintainer issues when an MCP release is overdue.
 
 **Secrets Scanning:** [gitleaks](https://github.com/JSONbored/gittensory/blob/40c019c82d87568c232fbe7fabf50212e983075a/) (`.gitleaks.toml`) prevents accidental credential commits.
 

MCP & Agent Integration

View Changes

@@ -10,7 +10,7 @@
 
 The **Model Context Protocol (MCP)** is a standardized interface that allows coding agents and AI tools to connect with external data sources and services in a structured, tool-call-based way. Rather than ad-hoc API integrations, MCP defines a common schema for tool registration, input validation, and structured JSON responses — enabling any MCP-compatible client (Claude Desktop, Cursor, Codex, etc.) to interact with a server like Gittensory without custom wiring.
 
-`@jsonbored/gittensory-mcp` implements MCP using `@modelcontextprotocol/sdk` v1.26.0 [[4]](https://app.dosu.dev/7d8810aa-91c6-4074-849b-92fab65de734/documents/09d20768-c6a2-4ac0-9000-4395a9728dc9#L323-L334). It registers 21 tools across five capability areas and exposes them over standard stdio transport, making Gittensory's intelligence layer accessible to any MCP-compatible client.
+`@jsonbored/gittensory-mcp` implements MCP using `@modelcontextprotocol/sdk` v1.29.0 [[4]](https://app.dosu.dev/7d8810aa-91c6-4074-849b-92fab65de734/documents/09d20768-c6a2-4ac0-9000-4395a9728dc9#L323-L334). It registers 21 tools across five capability areas and exposes them over standard stdio transport, making Gittensory's intelligence layer accessible to any MCP-compatible client.
 
 ### What it provides
 
@@ -81,7 +81,7 @@
 
 ```sh
 gittensory-mcp status
-# @jsonbored/gittensory-mcp: 0.3.0 (latest 0.3.0)
+# @jsonbored/gittensory-mcp: 0.4.0 (latest 0.4.0)
 # API: https://gittensory-api.aethereal.dev
 # API health: ok
 # Auth: authenticated (jsonbored)
@@ -94,8 +94,8 @@
 gittensory-mcp doctor
 # Gittensory doctor: ok
 # - pass: api_health - API responded from https://gittensory-api.aethereal.dev.
-# - pass: version - Installed 0.3.0 matches npm latest 0.3.0.
-# - pass: api_compatibility - Local 0.3.0 meets the API minimum 0.3.0.
+# - pass: version - Installed 0.4.0 matches npm latest 0.4.0.
+# - pass: api_compatibility - Local 0.4.0 meets the API minimum 0.4.0.
 # - pass: auth - Authenticated as jsonbored; session expires 2026-08-01T00:00:00.000Z.
 # - pass: source_upload - Source upload is disabled and unsupported in v1.
 # - pass: git_metadata - owner/repo on feature-branch; 4 changed file(s).

^{How did I do? Any feedback?}