@ateam-ai/mcp 0.4.62 → 0.4.63
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/package.json +1 -1
- package/src/tools.js +10 -0
package/package.json
CHANGED
package/src/tools.js
CHANGED
|
@@ -2248,6 +2248,16 @@ const EXAMPLE_PATHS = {
|
|
|
2248
2248
|
// baked into MCP config (e.g., ADAS_TENANT + ADAS_API_KEY in ~/.claude.json).
|
|
2249
2249
|
// Any tool that touches tenant-specific data (solutions, skills, logs, tests) is here.
|
|
2250
2250
|
const TENANT_TOOLS = new Set([
|
|
2251
|
+
// Lessons are tenant-specific data — a solution's own failure history. They
|
|
2252
|
+
// were MISSING from this set when the tools shipped (2026-08-21), which is a
|
|
2253
|
+
// bug on two counts: they ran without the explicit-auth requirement every
|
|
2254
|
+
// other tenant-scoped tool has, and in master mode `switchTenant` never fired
|
|
2255
|
+
// for them, so a caller passing `tenant` could read or write ANOTHER
|
|
2256
|
+
// tenant's lessons. Tenant isolation is the one boundary this platform
|
|
2257
|
+
// treats as absolute.
|
|
2258
|
+
"ateam_log_lesson",
|
|
2259
|
+
"ateam_get_lessons",
|
|
2260
|
+
|
|
2251
2261
|
// Write operations
|
|
2252
2262
|
"ateam_build_and_run",
|
|
2253
2263
|
"ateam_patch",
|