fix: resolve discourse-mcp TS2345 build error and add env-var auth

The discourse-mcp was BLOCKED with a TypeScript TS2345 error caused by
the Dockerfile forcing SDK ^1.23.0 via `pnpm add`, while the upstream
code requires the lockfile's v1.17.3. Removed the override to use
`pnpm install --frozen-lockfile`.

The upstream server does not read environment variables directly — it
requires CLI args (--auth-pairs, --site) or a --profile JSON file. Added
a docker-entrypoint.sh that converts DISCOURSE_URL, DISCOURSE_API_KEY,
and DISCOURSE_API_USERNAME env vars into a profile JSON with auth_pairs
and site tethering.

Validated end-to-end: MCP handshake passes, site auto-tethers on startup,
live tool calls (discourse_search, discourse_filter_topics) return real
data from community.turnsys.com.

Updates STATUS.md and README.md to reflect discourse-mcp as production
ready. Adds JOURNAL.md entries for discourse-cli, discourse-mcp fix, and
protocol improvements.

💘 Generated with Crush

Assisted-by: Crush:glm-5.2

dockerfiles/discourse-mcp/Dockerfile

@@ -7,12 +7,34 @@ RUN corepack enable && corepack prepare pnpm@10.14.0 --activate
 
 COPY package.json pnpm-lock.yaml ./
 
-# Install dependencies with pinned SDK version
-RUN pnpm add @modelcontextprotocol/sdk@^1.23.0
+# Install dependencies from lockfile (pins SDK to upstream-compatible version)
 RUN pnpm install --frozen-lockfile
 
 COPY . .
 
 RUN pnpm build
 
-CMD ["node", "dist/index.js"]
+# Entrypoint script converts env vars to CLI args (profile JSON file)
+RUN cat <<'ENTRYEOF' > /docker-entrypoint.sh
+#!/bin/sh
+set -e
+if [ -n "${DISCOURSE_URL}" ] && [ -n "${DISCOURSE_API_KEY}" ]; then
+  echo -n '{"auth_pairs":[{"site":"' > /tmp/profile.json
+  echo -n "${DISCOURSE_URL}" >> /tmp/profile.json
+  echo -n '","api_key":"' >> /tmp/profile.json
+  echo -n "${DISCOURSE_API_KEY}" >> /tmp/profile.json
+  echo -n '"' >> /tmp/profile.json
+  if [ -n "${DISCOURSE_API_USERNAME}" ]; then
+    echo -n ',"api_username":"' >> /tmp/profile.json
+    echo -n "${DISCOURSE_API_USERNAME}" >> /tmp/profile.json
+    echo -n '"' >> /tmp/profile.json
+  fi
+  echo -n '}]}' >> /tmp/profile.json
+  exec node dist/index.js --profile /tmp/profile.json --site "${DISCOURSE_URL}" --allow-writes --read-only false "$@"
+else
+  exec node dist/index.js "$@"
+fi
+ENTRYEOF
+RUN chmod +x /docker-entrypoint.sh
+
+ENTRYPOINT ["/docker-entrypoint.sh"]

dockerfiles/discourse-mcp/docker-entrypoint.sh

@@ -0,0 +1,32 @@
+#!/bin/sh
+# Convert env vars to discourse-mcp CLI arguments, then exec the server.
+#
+# Env vars:
+#   DISCOURSE_URL          - base URL of the Discourse site
+#   DISCOURSE_API_KEY      - API key
+#   DISCOURSE_API_USERNAME - username for the API key
+#
+# When DISCOURSE_URL is set, the server is tethered to that site with auth
+# pre-configured. Otherwise, the client must call discourse_select_site.
+
+set -e
+
+ARGS=""
+
+if [ -n "${DISCOURSE_URL}" ]; then
+    ARGS="${ARGS} --site ${DISCOURSE_URL}"
+
+    if [ -n "${DISCOURSE_API_KEY}" ]; then
+        AUTH_PAIR="{\"site\":\"${DISCOURSE_URL}\""
+        AUTH_PAIR="${AUTH_PAIR},\"api_key\":\"${DISCOURSE_API_KEY}\""
+        if [ -n "${DISCOURSE_API_USERNAME}" ]; then
+            AUTH_PAIR="${AUTH_PAIR},\"api_username\":\"${DISCOURSE_API_USERNAME}\""
+        fi
+        AUTH_PAIR="${AUTH_PAIR}}"
+        ARGS="${ARGS} --auth-pairs '[${AUTH_PAIR}]'"
+    fi
+fi
+
+ARGS="${ARGS} --allow-writes --read-only false"
+
+exec eval node dist/index.js ${ARGS} "$@"