safely-bump-deps.sh does not need to do impossibly hard things. It can just call npm: outdated, install --save-exact and/or install --package-lock-only. There's plenty of solutions here.
Pushing this into a hook makes it invisible, implicit, hard to debug, and an entry point for all sorts of undefined behaviours.
The problem with MCP isn't MCP. It's the way it's invoked by your agent.
IMO, by default MCP tools should run in forked context. Only a compacted version of the tool response should be returned to the main context. This costs tokens yes, but doesn't blow out your entire context.
If other information is required post-hoc, the full response can be explored on disk.
This is quite literally the opposite opinion I and many others had when first exploring MCP. It's so _obviously_ simple, which is why it gained traction in the first place.
> It's significantly more wicked to pretend that tests, treatments, and more aren't done by healthcare workers (yes, even private ones), and to inundate them with unimportant medical procedures while truly sick people are dying.
Strawman+ad hominem. No one is suggesting to pretend _anything_. Charge premiums for these tests based on how "unimportant" they are. Use market forces to move money from those willing to pay, to those who cannot.
> We already have an extreme shortage of available healthcare workers. We don't need to stress them further because 20% of the population suddenly decides they need 80 elective surgeries to remove things that would've gone away or stayed benign on their own.
Strawman. No one is suggesting adding extra stress to healthcare workers. It's also not you or your doctors call to make: let's gatekeep this patients cancer because our hospital can't deal with the workload. What a truly wicked idea.
To help alleviate the extreme shortage of available healthcare workers we should instead allow those wanting to pay for these elective surgeries, to pay for them! Drive money into healthcare, scale up treatments, drive money into research. Let the system work.
Pushing this into a hook makes it invisible, implicit, hard to debug, and an entry point for all sorts of undefined behaviours.