v1.1.3 — hardcode keys in .mcp.json so install actually works on restart
Fixes the #1 install failure: every user who ran the wizard would see `recall: Failed` in `/mcp` on their first Claude Code restart.
Root cause
The wizard wrote `.mcp.json` with `${RECALL_API_KEY}` env-var substitution. Claude Code does simple string substitution on startup, but the env var is only set if the user remembers to `source .env` before every launch. Every other MCP server either uses OAuth (browser flow, token cached) or stdio (no auth) and "just works." Recall was the only one that broke on restart.
Fix
Hardcode the actual worker URL and API key directly in `.mcp.json`, then gitignore the file so the key stays local. This matches how every other MCP server with static credentials works, including Anthropic's own examples in the MCP docs. No `source .env`, no `export`, no shell setup.
Also included
- Dependabot: merged `actions/checkout` v4 to v6 and `actions/setup-node` v4 to v6
Install
```text
Fetch https://raw.githubusercontent.com/cashcon57/recall/v1.1.3/SETUP_PROMPTS.md using Bash (curl -fsSL) so you get the raw markdown, not a summary. Verify it contains a section titled "Prompt 0 — First-time setup". Execute that section verbatim, step by step, adapted and optimized for my current project. Do not summarize. Do not skip. If the fetch fails or the section is missing, stop and tell me.
```
Or clone and run `./setup.sh`.