Bump joshcirre/instruckt-laravel from 0.4.25 to 0.4.28

[dependabot]

Bumps joshcirre/instruckt-laravel from 0.4.25 to 0.4.28.

Release notes

Sourced from joshcirre/instruckt-laravel's releases.

v0.4.27

What's new

Database store

Annotations can now be persisted to a database table instead of a flat JSON file. Set INSTRUCKT_STORE=database and run the migration:

php artisan vendor:publish --tag=instruckt-migrations
php artisan migrate

Required for hosted and multi-instance environments.

S3 / remote screenshot storage

Set INSTRUCKT_SCREENSHOT_DISK=s3 (or any configured Laravel disk) to store screenshots on a remote disk. Screenshots are served via temporary signed URLs so they survive deploys.

MCP token authentication

Protect the /instruckt/mcp SSE endpoint with a Bearer token:

INSTRUCKT_MCP_TOKEN=your-secret-token

Then add the header in your .mcp.json:

{
  "instruckt": {
    "url": "https://your-app.com/instruckt/mcp",
    "headers": { "Authorization": "Bearer your-secret-token" }
  }
}

Split middleware config

middleware is now split into api_middleware (annotation CRUD routes) and mcp_middleware (MCP SSE endpoint) for independent control.

MCP error handling fix

instruckt.get_screenshot now returns a proper MCP error response (isError: true) when an annotation has no screenshot or the file is missing, preventing Claude Code from attempting to recover by locating the image via other means.

Upgrade notes

• If you have published the config, re-publish or manually add api_middleware, mcp_middleware, mcp_token, store, and screenshot_disk keys (all have sensible defaults).
• The old middleware key still works but is superseded by api_middleware.

v0.4.26

Add Laravel 13 support

Commits

• e04b53b fix: use configured storage disk for screenshots in GetScreenshotTool
• bcdaddd feat: database store, S3 screenshots, MCP token auth, and error handling fixes
• c0a3e1b feat: add Laravel 13 support
• 2246a89 Merge pull request #4 from JonPurvis/hide-tools-in-toolbar
• 4a81411 docs: update README for Vite plugin as primary setup method
• 04cf23f feat: prefer Vite plugin injection over legacy JS snippet
• d8dc9a9 feat: pass mcp: true to instruckt client config
• e387bd1 Update toolbar component with configurable options
• 26a2a91 hide tools in toolbar
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)