---
summary: "Maintenance: pick up @cyanheads/mcp-ts-core 0.8.7 → 0.8.12, biome 2.4.13 → 2.4.14, tsc-alias 1.8.16 → 1.8.17; resync 7 framework skills + add api-canvas reference. No tool/service code changes."
breaking: false
---

# 0.6.7 — 2026-05-03

Pure maintenance release. Five framework versions of `@cyanheads/mcp-ts-core` (0.8.8 → 0.8.12) — all additive (DataCanvas Tier-3 primitive, `disabledTool()` wrapper, mutability-bucket annotations, `RequestContext` widening, SQL-gate hardening). None of the new surfaces apply to this server: there's no canvas usage, no feature-flagged tools to disable, and the existing `readOnlyHint`/`idempotentHint` annotations already place all three tools in the `read` mutability bucket. Audited the current `OpenAlexService` HTTP-error pattern (`fetchWithTimeout` + `httpStatusToErrorCode` + factory throw with `data.reason`) against the `httpErrorFromResponse` helper introduced earlier in 0.8.x — both helpers operate at different layers (transport vs. plain-fetch classification) and the current pattern is correct, not suboptimal.

## Maintenance

- `@cyanheads/mcp-ts-core` ^0.8.7 → ^0.8.12.
- `@biomejs/biome` ^2.4.13 → ^2.4.14, `tsc-alias` ^1.8.16 → ^1.8.17 (devDeps).
- Project skills resynced from package: `add-tool` 2.4 → 2.6, `api-config` 1.2 → 1.3, `api-workers` 1.1 → 1.2, `design-mcp-server` 2.8 → 2.9, `report-issue-framework` 1.4 → 1.5, `report-issue-local` 1.3 → 1.4, `security-pass` 1.2 → 1.3. Added `api-canvas` (new external skill) for reference.
- Phase B agent-skill mirrors (`.claude/skills/`, `.agents/skills/`) refreshed from the project `skills/` tree.
- Phase C framework `scripts/` already in sync; no script changes.