@ateam-ai/mcp 0.4.38 → 0.4.40

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ateam-ai/mcp",
-  "version": "0.4.38",
+  "version": "0.4.40",
   "mcpName": "io.github.ariekogan/ateam-mcp",
   "description": "A-Team MCP Server — build, validate, and deploy multi-agent solutions from any AI environment",
   "type": "module",

package/src/tools.js

@@ -1066,6 +1066,10 @@ export const tools = [
           type: "boolean",
           description: "Opt into FULL REPLACE: wipe the connector dir and write only the provided `files`. Default: false (= merge with GitHub state at `ref`). Use with intent — sending an incomplete file set with replace:true will break the connector.",
         },
+        force: {
+          type: "boolean",
+          description: "RECOVERY: respawn the connector + re-inject its CURRENT env even when the source is UNCHANGED. Normally an unchanged-source upload no-ops (unchanged:true) and leaves the process running. But a connector spawned before a shared-secret rotation keeps the STALE secret — it still lists tools (looks healthy) yet 401s on every per-actor call, with no recovery short of a fake source edit. Use `ateam_upload_connector(solution_id, connector_id, github:true, force:true)` to pull the current source and force a fresh respawn (which picks up the current secret). Default: false.",
+        },
       },
       required: ["solution_id", "connector_id"],
     },
@@ -4307,11 +4311,16 @@ const handlers = {
         const id = c.id || c.connector_id || c.name;
         const connected = c.status === "connected" || c.connected === true || c.ok === true || c.healthy === true;
         const tools = Array.isArray(c.tools) ? c.tools.length : (typeof c.tools === "number" ? c.tools : (c.toolCount ?? c.tool_count));
-        return { id, connected, tools };
+        // OPEN-30(c): a connector can be connected + list tools yet 401 on every
+        // per-actor call (stale/rotated credential). Surface Core's auth marker.
+        const auth_error = c.auth_error || c.authError || null;
+        return { id, connected, tools, ...(auth_error ? { auth_error } : {}) };
       });
       for (const c of out.connectors) {
         if (!c.connected) gaps.push(`connector '${c.id}' not connected`);
         else if (c.tools === 0) gaps.push(`connector '${c.id}' connected but discovered 0 tools`);
+        // Connected + tools > 0 but auth failing = the silent OPEN-30 failure — flag it.
+        if (c.auth_error) gaps.push(`connector '${c.id}' connected but auth failing (${c.auth_error}) — per-actor calls 401; refresh its credential (ateam_upload_connector github:true force:true)`);
       }
     } catch (e) {
       out.connectors = { error: e.message };
@@ -4464,7 +4473,7 @@ const handlers = {
     return del(`/deploy/solutions/${solution_id}/connectors/${connector_id}`, sid);
   },
 
-  ateam_upload_connector: async ({ solution_id, connector_id, github, files, ref, replace }, sid) => {
+  ateam_upload_connector: async ({ solution_id, connector_id, github, files, ref, replace, force }, sid) => {
     // OPEN-32: accept content_base64 per file (single-line, escape-safe) and
     // decode it to plain content here, so an agent can upload a multi-file
     // connector without hand-escaping ~90KB of HTML/JS/JSON in one tool call —
@@ -4501,6 +4510,7 @@ const handlers = {
       files: normFiles,
       ...(ref ? { ref } : {}),
       ...(replace === true ? { replace: true } : {}),
+      ...(force === true ? { force: true } : {}),
     };
     const url = `/deploy/solutions/${solution_id}/connectors/${connector_id}/upload`;
     let kicked;