diff --git a/package-lock.json b/package-lock.json
index 125023fc7..7839c1709 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -2896,23 +2896,9 @@
         "node": ">= 20"
       }
     },
-    "node_modules/@octokit/endpoint": {
-      "version": "11.0.3",
-      "resolved": "https://registry.npmjs.org/@octokit/endpoint/-/endpoint-11.0.3.tgz",
-      "integrity": "sha512-FWFlNxghg4HrXkD3ifYbS/IdL/mDHjh9QcsNyhQjN8dplUoZbejsdpmuqdA76nxj2xoWPs7p8uX2SNr9rYu0Ag==",
-      "license": "MIT",
-      "dependencies": {
-        "@octokit/types": "^16.0.0",
-        "universal-user-agent": "^7.0.2"
-      },
-      "engines": {
-        "node": ">= 20"
-      }
-    },
-    "node_modules/@octokit/endpoint/node_modules/@octokit/openapi-types": {
-      "version": "27.0.0",
-      "resolved": "https://registry.npmjs.org/@octokit/openapi-types/-/openapi-types-27.0.0.tgz",
-      "integrity": "sha512-whrdktVs1h6gtR+09+QsNk2+FO+49j6ga1c55YZudfEG+oKJVvJLQi3zkOm5JjiUXAagWK2tI2kTGKJ2Ys7MGA==",
+    "node_modules/@jridgewell/sourcemap-codec": {
+      "version": "1.5.5",
+      "dev": true,
       "license": "MIT"
     },
     "node_modules/@octokit/endpoint/node_modules/@octokit/types": {
@@ -11005,12 +10991,15 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
-    "node_modules/p-locate": {
-      "version": "5.0.0",
-      "dev": true,
+    "node_modules/multer": {
+      "version": "2.4.0",
+      "resolved": "https://registry.npmjs.org/multer/-/multer-2.4.0.tgz",
+      "integrity": "sha512-7dqa0ZcFfzbefdTuIkzOSMvZWC0J7FLqBOjJUZvDCXShIURWKxAyTT1wHhnE5q19c7jOJf43IYYKjBmZVZmvhg==",
       "license": "MIT",
       "dependencies": {
-        "p-limit": "^3.0.2"
+        "append-field": "^1.0.0",
+        "busboy": "^1.6.0",
+        "type-is": "^1.6.18"
       },
       "engines": {
         "node": ">=10"
@@ -13782,21 +13771,9 @@
         "node": ">=14.17"
       }
     },
-    "node_modules/typescript-eslint": {
-      "version": "8.66.0",
-      "resolved": "https://registry.npmjs.org/typescript-eslint/-/typescript-eslint-8.66.0.tgz",
-      "integrity": "sha512-QlEbBPz/RuJ1XUHj29nm3t0F/O/cSlEnntozqPOYHnnTGAXFamnMBu5i9Vn6vhUPHGAjR+Vl+5J8vPN/BMUrJw==",
-      "dev": true,
+    "node_modules/space-separated-tokens": {
+      "version": "2.0.2",
       "license": "MIT",
-      "dependencies": {
-        "@typescript-eslint/eslint-plugin": "8.66.0",
-        "@typescript-eslint/parser": "8.66.0",
-        "@typescript-eslint/typescript-estree": "8.66.0",
-        "@typescript-eslint/utils": "8.66.0"
-      },
-      "engines": {
-        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
-      },
       "funding": {
         "type": "opencollective",
         "url": "https://opencollective.com/typescript-eslint"
@@ -14346,23 +14323,8 @@
         "safe-buffer": "^5.0.1"
       }
     },
-    "node_modules/web-streams-polyfill": {
-      "version": "3.3.3",
-      "license": "MIT",
-      "engines": {
-        "node": ">= 8"
-      }
-    },
-    "node_modules/web-tree-sitter": {
-      "version": "0.26.11",
-      "resolved": "https://registry.npmjs.org/web-tree-sitter/-/web-tree-sitter-0.26.11.tgz",
-      "integrity": "sha512-Q5Dm3YTIXSXuH6FxX6RuzX2Qwpc4DPGiYMU87Wg5Z8OIStiQFiUex4zMDc0vBTw78EphaYJacncJghCHzbZptg==",
-      "license": "MIT"
-    },
-    "node_modules/webidl-conversions": {
-      "version": "8.0.1",
-      "resolved": "https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-8.0.1.tgz",
-      "integrity": "sha512-BMhLD/Sw+GbJC21C/UgyaZX41nPt8bUTg+jWyDeg7e7YN4xOM05YPSIXceACnXVtqyEw/LMClUQMtMZ+PGGpqQ==",
+    "node_modules/thenify": {
+      "version": "3.3.1",
       "dev": true,
       "license": "BSD-2-Clause",
       "engines": {
@@ -14738,13 +14700,11 @@
         "@img/sharp-libvips-darwin-arm64": "1.3.4"
       }
     },
-    "packages/api/node_modules/@img/sharp-darwin-x64": {
-      "version": "0.35.5",
-      "resolved": "https://registry.npmjs.org/@img/sharp-darwin-x64/-/sharp-darwin-x64-0.35.5.tgz",
-      "integrity": "sha512-+BR255RhDlpygUpOc/Jdt1nT6DQ3XG/ERo5wbcdOf5Q320dKtPCKPLR1LJs9VGXRaMa8l1uUa0tkCNOXiAxZUw==",
-      "cpu": [
-        "x64"
-      ],
+    "node_modules/typescript": {
+      "version": "5.9.3",
+      "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.9.3.tgz",
+      "integrity": "sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw==",
+      "devOptional": true,
       "license": "Apache-2.0",
       "optional": true,
       "os": [
@@ -15752,20 +15712,36 @@
         "@img/sharp-libvips-linux-riscv64": "1.3.4"
       }
     },
-    "packages/core/node_modules/@img/sharp-linux-s390x": {
-      "version": "0.35.5",
-      "resolved": "https://registry.npmjs.org/@img/sharp-linux-s390x/-/sharp-linux-s390x-0.35.5.tgz",
-      "integrity": "sha512-UZasTOFiYzotTsGOCu42BfUzP6Tu6Do/947iRm1RsLKvlllxwGcn4RN27LibGWceix4Y+Pmw3jsnTcCQIgWjqA==",
-      "cpu": [
-        "s390x"
-      ],
-      "license": "Apache-2.0",
-      "optional": true,
-      "os": [
-        "linux"
-      ],
-      "engines": {
-        "node": ">=20.9.0"
+    "packages/api": {
+      "name": "@propr/api",
+      "version": "0.8.15",
+      "dependencies": {
+        "@modelcontextprotocol/node": "^2.0.0",
+        "@modelcontextprotocol/sdk": "^1.30.0",
+        "@modelcontextprotocol/server": "^2.0.0",
+        "@propr/core": "^0.8.15",
+        "@propr/local-setup": "^0.8.15",
+        "@propr/shared": "^0.8.15",
+        "@types/multer": "^2.0.0",
+        "bullmq": "^5.81.3",
+        "chokidar": "^3.6.0",
+        "connect-redis": "^9.0.0",
+        "cors": "^2.8.5",
+        "dotenv": "^16.0.3",
+        "express": "^5.2.1",
+        "express-session": "^1.18.2",
+        "fs-extra": "^11.3.0",
+        "ioredis": "5.11.1",
+        "jose": "^6.2.12",
+        "knex": "^3.1.0",
+        "multer": "^2.4.0",
+        "node-fetch": "^3.3.0",
+        "passport": "^0.7.0",
+        "passport-github2": "^0.1.12",
+        "redis": "^5.0.0",
+        "socket.io": "^4.8.1",
+        "web-push": "^3.6.7",
+        "zod": "^4.6.1"
       },
       "funding": {
         "url": "https://opencollective.com/libvips"
diff --git a/packages/api/package.json b/packages/api/package.json
index 2154b0352..c1c018a57 100644
--- a/packages/api/package.json
+++ b/packages/api/package.json
@@ -34,7 +34,7 @@
     "ioredis": "5.11.1",
     "jose": "^6.2.12",
     "knex": "^3.1.0",
-    "multer": "^2.5.0",
+    "multer": "^2.4.0",
     "node-fetch": "^3.3.0",
     "passport": "^0.7.0",
     "passport-github2": "^0.1.12",