chore: update the MCP version with Dependabot

.github/dependabot.yml

@@ -8,3 +8,14 @@ updates:
       interval: "daily"
     commit-message:
       prefix: "chore(deps)"
+  - package-ecosystem: "npm"
+    directory: "/"
+    schedule:
+      interval: "daily"
+    allow:
+      - dependency-name: "@supabase/mcp-server-supabase"
+    cooldown:
+      exclude:
+        - "@supabase/mcp-server-supabase"
+    commit-message:
+      prefix: "chore(deps)"

apps/framework/harness/mcp-tools.ts

@@ -1,6 +1,5 @@
 export {
   executorMcpServer,
-  MCP_SERVER_VERSION,
   supabaseMcpServer,
 } from '@supabase-evals/core';
 export type {

apps/framework/scripts/mcp-demo.ts

@@ -12,8 +12,10 @@ import { createMCPClient } from '@ai-sdk/mcp';
 import { Experimental_StdioMCPTransport as StdioMCPTransport } from '@ai-sdk/mcp/mcp-stdio';
 import { openai } from '@ai-sdk/openai';
 import { generateText, stepCountIs } from 'ai';
-import { createPlatform } from '@supabase-evals/platform-lite';
-import { MCP_SERVER_VERSION } from '../harness/mcp-tools.js';
+import {
+  createPlatform,
+  MCP_SERVER_VERSION,
+} from '@supabase-evals/platform-lite';
 
 const ACCESS_TOKEN = 'demo-token';
 

packages/core/src/index.ts

@@ -33,6 +33,7 @@ import {
   createManagementApiClient,
   createPlatform,
   loadFunctionSeeds,
+  MCP_SERVER_VERSION,
   type ManagementApiClient,
   type PgServerHandle,
   type PlatformHandle,
@@ -1415,7 +1416,6 @@ async function getAvailablePort(): Promise<number> {
 }
 
 export const ACCESS_TOKEN = 'eval-token';
-export const MCP_SERVER_VERSION = '0.16.0';
 // Well-formed but inert PAT used when a Supabase MCP server is docs-only: the
 // server requires a token to boot but never authenticates without a platform.
 const THROWAWAY_ACCESS_TOKEN = `sbp_${'0'.repeat(40)}`;

packages/core/src/mcp-server.test.ts

@@ -9,7 +9,10 @@ import {
 } from 'vitest';
 import { execFile, execFileSync } from 'node:child_process';
 import { promisify } from 'node:util';
-import { createPlatform } from '@supabase-evals/platform-lite';
+import {
+  createPlatform,
+  MCP_SERVER_VERSION,
+} from '@supabase-evals/platform-lite';
 import { rewriteLoopback } from './agents/shared.js';
 import {
   mkdirSync,
@@ -21,11 +24,7 @@ import {
 } from 'node:fs';
 import { join, relative } from 'node:path';
 import { tmpdir } from 'node:os';
-import {
-  MCP_SERVER_VERSION,
-  supabaseMcpServer,
-  supabaseMcpServerMounts,
-} from './index.js';
+import { supabaseMcpServer, supabaseMcpServerMounts } from './index.js';
 
 // Stub (not mutate) env so a pre-existing SUPABASE_MCP_SERVER_PATH is restored
 // per test.

packages/core/src/mcp-version.test.ts

@@ -0,0 +1,18 @@
+import { afterEach, expect, it, vi } from 'vitest';
+
+afterEach(() => {
+  vi.doUnmock('../../platform-lite/package.json');
+  vi.resetModules();
+});
+
+it('rejects a version range before configuring the MCP server', async () => {
+  vi.doMock('../../platform-lite/package.json', () => ({
+    default: {
+      devDependencies: { '@supabase/mcp-server-supabase': '^0.16.1' },
+    },
+  }));
+
+  await expect(import('./index.js')).rejects.toThrow(
+    'MCP version must be an exact stable version'
+  );
+});

packages/platform-lite/package.json

@@ -29,7 +29,7 @@
   },
   "devDependencies": {
     "@modelcontextprotocol/server": "^2.4.0",
-    "@supabase/mcp-server-supabase": "^0.16.0",
+    "@supabase/mcp-server-supabase": "0.16.1",
     "@types/node": "catalog:",
     "openapi-typescript": "^7.8.0",
     "tsx": "^4.21.0",

packages/platform-lite/src/index.ts

@@ -1,3 +1,6 @@
+import { z } from 'zod';
+import platformLitePackage from '../package.json' with { type: 'json' };
+
 export { createPlatform } from './app.js';
 export type { PlatformHandle, ServerHandle, PgServerHandle } from './app.js';
 export type {
@@ -11,3 +14,10 @@ export type { ProjectInstance } from './project/ProjectInstance.js';
 export { createManagementApiClient } from './management-api/client.js';
 export type { ManagementApiClient } from './management-api/client.js';
 export { loadFunctionSeeds } from './seed.js';
+export const MCP_SERVER_VERSION = z
+  .string()
+  .regex(
+    /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)$/,
+    'MCP version must be an exact stable version'
+  )
+  .parse(platformLitePackage.devDependencies['@supabase/mcp-server-supabase']);