@papi-ai/server 0.7.69 → 0.7.71
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/backfill-cycle-metrics.js +6 -3
- package/dist/index.js +606 -327
- package/package.json +1 -1
|
@@ -1865,9 +1865,12 @@ Check PAPI_PROJECT_ID in your .mcp.json config. Find your project ID in the PAPI
|
|
|
1865
1865
|
return this.invoke("getOwnerIdentity", []);
|
|
1866
1866
|
}
|
|
1867
1867
|
// --- Contributor cohort (task-2029, C288) ---
|
|
1868
|
-
// Owner-only enforcement is BOTH tool-layer (resolveOwnerGate) and
|
|
1869
|
-
//
|
|
1870
|
-
//
|
|
1868
|
+
// Owner-only enforcement is BOTH tool-layer (resolveOwnerGate) and server-side
|
|
1869
|
+
// in the edge function (auth-derived caller vs project owner). task-2442 (C351)
|
|
1870
|
+
// added addContributorByEmail/removeContributorByEmail to the proxy WRITE_METHODS
|
|
1871
|
+
// set too, so a viewer is now rejected at the role-gate wall before the handler —
|
|
1872
|
+
// three layers of defence, since this client runs on the user's machine.
|
|
1873
|
+
// listContributors stays a member-open read (task-2377).
|
|
1871
1874
|
async listContributors() {
|
|
1872
1875
|
return this.invoke("listContributors", []);
|
|
1873
1876
|
}
|