@ateam-ai/mcp 0.4.62 → 0.4.64

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ateam-ai/mcp",
-  "version": "0.4.62",
+  "version": "0.4.64",
   "mcpName": "io.github.ariekogan/ateam-mcp",
   "description": "A-Team MCP Server — build, validate, and deploy multi-agent solutions from any AI environment",
   "type": "module",

package/src/tools.js

@@ -1038,8 +1038,15 @@ export const tools = [
       "A building agent starts every run empty — it does not know which tool " +
       "misled the last run or the workaround that got past it. Log a lesson the " +
       "moment a tool misleads you AND you find a way through.\n\n" +
-      "APPEND-ONLY. You cannot edit or delete earlier lessons, and you do not " +
-      "supply the timestamp, job or actor — the server stamps those.\n\n" +
+      "APPEND-ONLY. You cannot edit or delete earlier lessons, and you do not supply " +
+      "the timestamp — the server stamps it, so it cannot be forged.\n\n" +
+      "PROVENANCE CAVEAT, stated because the earlier wording over-promised: `job_id` " +
+      "and `actor` are recorded ONLY when the caller supplies x-adas-job-id / " +
+      "x-adas-actor-id. An agent calling this tool does not, so those fields are " +
+      "usually null — a lesson cannot currently be traced back to the run that " +
+      "produced it, and the file cannot tell 'three runs hit this' from 'one run hit " +
+      "it three times'. Do not put a job id in `error` to compensate; keep that field " +
+      "verbatim.\n\n" +
       "LOG ONLY WHAT YOU OBSERVED. Quote the error VERBATIM; never paraphrase it " +
       "and never write a theory about platform internals. A wrong lesson is worse " +
       "than no lesson, because the next run cannot check it and will act on it.\n\n" +
@@ -2248,6 +2255,16 @@ const EXAMPLE_PATHS = {
 // baked into MCP config (e.g., ADAS_TENANT + ADAS_API_KEY in ~/.claude.json).
 // Any tool that touches tenant-specific data (solutions, skills, logs, tests) is here.
 const TENANT_TOOLS = new Set([
+  // Lessons are tenant-specific data — a solution's own failure history. They
+  // were MISSING from this set when the tools shipped (2026-08-21), which is a
+  // bug on two counts: they ran without the explicit-auth requirement every
+  // other tenant-scoped tool has, and in master mode `switchTenant` never fired
+  // for them, so a caller passing `tenant` could read or write ANOTHER
+  // tenant's lessons. Tenant isolation is the one boundary this platform
+  // treats as absolute.
+  "ateam_log_lesson",
+  "ateam_get_lessons",
+
   // Write operations
   "ateam_build_and_run",
   "ateam_patch",