Brand-System/brandsystem-mcp

Patch release bundling three pieces of work onto v0.9.0:

Added

• Brandcode MCP Phase 0 lock — spec at specs/brandcode-mcp-phase-0-lock.md locks the 8-tool hosted surface, @brandcode/mcp naming, mcp.brandcode.studio/{slug} URL structure, free-v1 pricing posture, and the Phase 1 staging-prototype handoff.
• Hosted MCP status surfacing — brand_brandcode_status now returns brandcode_mcp_available, brandcode_mcp_phase, brandcode_mcp_url, and the locked 8-tool list.
• Phase 1 Milestone A hosted scaffold (G-5b) — src/hosted/ registers the 8 locked tools and serves the hosted runtime over Web Standard Streamable HTTP. Bearer-token auth with per-brand scopes, path-based slug routing (/{slug}), memoized service-token pull from UCS, silent upstream fallback. brand_runtime and brand_status fully wired; other 6 tools registered with descriptive stubs pending Milestone B. Deploy scaffold: api/[slug].ts Vercel Function, vercel.json rewrite, bin/brandcode-mcp.mjs local dev entry.

Fixed

• Service-token header (G-5g) — hosted surface now sends Authorization: Bearer <service-token> to UCS (was custom x-brandcode-mcp-service-token, which UCS ignored). Unblocked the live UCS fetch path.
• brandInstance flat-shape normalizer (G-5h) — extractRuntime recognizes the flat brandInstance.{tokens, fonts, assets, verbalIdentity} shape UCS serves today and normalizes it into the runtime object the slicer expects. Minimal/visual/voice slices now return real colors, typography, and logo references instead of null.

Backward compatibility

Zero behavior change for the published @brandsystem/mcp stdio server. The hosted surface is additive scaffolding in the repo; no separate npm package publishes yet (that's Phase 2).

Tests

470 → 477 (+7 G-5h normalizer tests: colors, typography ordering, minimal slice, logo detection, fallback when fonts.roles is absent).