v2.16.0 — Remote MCP Stabilization

v2.16.0 — Remote MCP Stabilization

Release date: 2026-08-08

Highlights

Remote MCP Endpoint

• POST https://misakanet.org/mcp — Streamable HTTP transport (MCP 2025-06-18)
• Forward-compatible with 2026-07-28 RC (Mcp-Method/Mcp-Name headers)
• Bearer token auth + Origin validation
• Read-only tools: misakanet_search, misakanet_get_lesson

One-Time Pairing Code (Coogen-inspired)

• POST /mcp/connect — generate 6-char pairing code (10min TTL)
• POST /mcp/pair — exchange code for 24h MCP token
• GET /connect — human landing page with code generator
• No account required, no OAuth, no login

Identity Aura (御坂共有視界モード)

• MCP tool responses include identity badge
• Static token: "MisakaNet MCP — public read-only access"
• Pairing token: "MisakaNet failure-memory connected"
• Upgraded: Japanese identity badge (AIM拡散力場)

Voice Prompts (Optional)

• 4 pre-generated Japanese MP3 voice prompts
• GET /connect page with opt-in "Enable Misaka Voice" button
• Events: connect, pair, lesson-found, failure-warning
• No runtime TTS, no external dependencies

stdio Sandbox Fallback

• When SAG-Lite/BM25 unavailable (e.g. Glama sandbox), search falls back to lessons.json keyword matching
• Source field distinguishes: sag-lite / bm25 / fallback

Contributor Reputation (Non-transferable)

• Points system for lesson contributions
• Anti-gaming: daily caps, dedup, new account limits
• No cash value, not a token, not blockchain

New Features

• Remote MCP endpoint at /mcp (#804)
• One-time pairing code onboarding (#868)
• Site health snapshot script (#783)
• Unsolved failure map endpoint (#788)
• Evidence levels E0-E4 for lessons (#786)
• PR Genius v1.6.2 with anti-patterns
• Journey report UX absorption tracker (#868)
• Contributor reputation points system (#819)

Bug Fixes

• MCP BM25 fallback import (#800)
• Danmaku widget XSS fix (CodeQL #45)
• Package.json miniflare dependency sync
• Worker async/await syntax fix

Docs

• Remote MCP endpoint documentation
• v2.16.0 acceptance record
• PR Genius v1.6.1/v1.6.2 observation logs
• Journey report absorption tracker
• Contributor points documentation

Dependencies

• undici 7.28 → 7.29 (5 CVEs fixed)
• jsdom 29 → 30
• wrangler 4.107 → 4.118
• PR Genius v1.3.1 → v1.6.2

Breaking Changes

None.

Upgrade Notes

• MCP_TOKEN secret required for remote endpoint
• MCP_VERSION secret optional (defaults to pyproject.toml version)
• Cloudflare Routes: misakanet.org/api/connect*, /api/pair*, /connect* → register-proxy Worker