Skip to content

fix(http+mcp): tenant isolation for cross-project recall #220

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
wtthornton merged 7 commits into from
Jul 2, 2026
Merged

fix(http+mcp): tenant isolation for cross-project recall #220

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
c5f06a1
fix(mcp): Claude Code HTTP fleet entries — 'http' type (streamableHtt…
wtthornton Jul 1, 2026
a85ff4c
fix(http): tenant-scoped MemoryStore on REST data-plane routes (ADR-010)
wtthornton Jul 2, 2026
71c4a83
fix(mcp): honor per-request X-Project-Id in Streamable HTTP session t…
wtthornton Jul 2, 2026
f27fcd0
fix(lint): satisfy ruff on MCP tenant context helpers
wtthornton Jul 2, 2026
6c477c4
style: ruff format on branch files for CI lint gate
wtthornton Jul 2, 2026
dcbd21d
fix(http): MagicMock-safe tenant store resolution for integration tests
wtthornton Jul 2, 2026
757673d
style: satisfy ruff B009 on _default_store slot access
wtthornton Jul 2, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
145 changes: 42 additions & 103 deletions .mcp.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,113 +1,52 @@
{
"mcpServers": {
"nlt-build": {
"type": "stdio",
"command": "/home/wtthornton/.local/bin/tapps-mcp",
"args": [
"serve",
"--profile",
"nlt-build"
],
"env": {
"TAPPS_MCP_PROJECT_ROOT": ".",
"TAPPS_MCP_MEMORY_BRAIN_HTTP_URL": "http://localhost:8080",
"TAPPS_MCP_MEMORY_BRAIN_AUTH_TOKEN": "${TAPPS_BRAIN_AUTH_TOKEN}",
"TAPPS_MCP_MEMORY_BRAIN_PROJECT_ID": "tapps-brain",
"TAPPS_MCP_CONTEXT7_API_KEY": "${TAPPS_MCP_CONTEXT7_API_KEY}",
"TAPPS_BRAIN_PROFILE": "full",
"TAPPS_METRICS_STORAGE": "dual"
},
"instructions": "Code quality scoring (0-100 across 7 categories), security scanning (Bandit + secret detection), quality gates (pass/fail against configurable presets), documentation lookup, domain expert consultation, and project profiling for Python projects."
"type": "http",
"url": "http://127.0.0.1:8760/mcp",
"headers": {
"X-Tapps-Project-Root": "/home/wtthornton/code/tapps-brain"
},
"nlt-memory": {
"type": "stdio",
"command": "/home/wtthornton/.local/bin/tapps-mcp",
"args": [
"serve",
"--profile",
"nlt-memory"
],
"env": {
"TAPPS_MCP_PROJECT_ROOT": ".",
"TAPPS_MCP_MEMORY_BRAIN_HTTP_URL": "http://localhost:8080",
"TAPPS_MCP_MEMORY_BRAIN_AUTH_TOKEN": "${TAPPS_BRAIN_AUTH_TOKEN}",
"TAPPS_BRAIN_PROFILE": "full",
"TAPPS_METRICS_STORAGE": "dual",
"TAPPS_MCP_CONTEXT7_API_KEY": "${TAPPS_MCP_CONTEXT7_API_KEY}",
"TAPPS_MCP_MEMORY_BRAIN_PROJECT_ID": "tapps-brain"
},
"instructions": "Code quality scoring (0-100 across 7 categories), security scanning (Bandit + secret detection), quality gates (pass/fail against configurable presets), documentation lookup, domain expert consultation, and project profiling for Python projects."
"instructions": "Code quality scoring (0-100 across 7 categories), security scanning (Bandit + secret detection), quality gates (pass/fail against configurable presets), documentation lookup, domain expert consultation, and project profiling for Python projects."
},
"nlt-memory": {
"type": "http",
"url": "http://127.0.0.1:8761/mcp",
"headers": {
"X-Tapps-Project-Root": "/home/wtthornton/code/tapps-brain"
},
"nlt-setup": {
"type": "stdio",
"command": "/home/wtthornton/.local/bin/tapps-mcp",
"args": [
"serve",
"--profile",
"nlt-setup"
],
"env": {
"TAPPS_MCP_PROJECT_ROOT": ".",
"TAPPS_MCP_MEMORY_BRAIN_HTTP_URL": "http://localhost:8080",
"TAPPS_MCP_MEMORY_BRAIN_AUTH_TOKEN": "${TAPPS_BRAIN_AUTH_TOKEN}",
"TAPPS_BRAIN_PROFILE": "full",
"TAPPS_METRICS_STORAGE": "dual",
"TAPPS_MCP_CONTEXT7_API_KEY": "${TAPPS_MCP_CONTEXT7_API_KEY}",
"TAPPS_MCP_MEMORY_BRAIN_PROJECT_ID": "tapps-brain"
},
"instructions": "Code quality scoring (0-100 across 7 categories), security scanning (Bandit + secret detection), quality gates (pass/fail against configurable presets), documentation lookup, domain expert consultation, and project profiling for Python projects."
"instructions": "Code quality scoring (0-100 across 7 categories), security scanning (Bandit + secret detection), quality gates (pass/fail against configurable presets), documentation lookup, domain expert consultation, and project profiling for Python projects."
},
"nlt-setup": {
"type": "http",
"url": "http://127.0.0.1:8762/mcp",
"headers": {
"X-Tapps-Project-Root": "/home/wtthornton/code/tapps-brain"
},
"nlt-linear-issues": {
"type": "stdio",
"command": "/home/wtthornton/.local/bin/tapps-platform",
"args": [
"serve",
"--profile",
"nlt-linear-issues"
],
"env": {
"TAPPS_MCP_PROJECT_ROOT": ".",
"TAPPS_MCP_MEMORY_BRAIN_HTTP_URL": "http://localhost:8080",
"TAPPS_MCP_MEMORY_BRAIN_AUTH_TOKEN": "${TAPPS_BRAIN_AUTH_TOKEN}",
"TAPPS_BRAIN_PROFILE": "full",
"TAPPS_METRICS_STORAGE": "dual",
"TAPPS_MCP_CONTEXT7_API_KEY": "${TAPPS_MCP_CONTEXT7_API_KEY}",
"TAPPS_MCP_MEMORY_BRAIN_PROJECT_ID": "tapps-brain"
},
"instructions": "Code quality scoring (0-100 across 7 categories), security scanning (Bandit + secret detection), quality gates (pass/fail against configurable presets), documentation lookup, domain expert consultation, and project profiling for Python projects."
"instructions": "Code quality scoring (0-100 across 7 categories), security scanning (Bandit + secret detection), quality gates (pass/fail against configurable presets), documentation lookup, domain expert consultation, and project profiling for Python projects."
},
"nlt-linear-issues": {
"type": "http",
"url": "http://127.0.0.1:8763/mcp",
"headers": {
"X-Tapps-Project-Root": "/home/wtthornton/code/tapps-brain"
},
"nlt-project-docs": {
"type": "stdio",
"command": "/home/wtthornton/.local/bin/docsmcp",
"args": [
"serve",
"--profile",
"nlt-project-docs"
],
"env": {
"DOCS_MCP_PROJECT_ROOT": ".",
"TAPPS_BRAIN_PROFILE": "agent_brain"
},
"instructions": "Documentation MCP: epic/story/prompt generators, artifact validation, and planning helpers for Markdown docs in this repo."
"instructions": "Code quality scoring (0-100 across 7 categories), security scanning (Bandit + secret detection), quality gates (pass/fail against configurable presets), documentation lookup, domain expert consultation, and project profiling for Python projects."
},
"nlt-project-docs": {
"type": "http",
"url": "http://127.0.0.1:8764/mcp",
"headers": {
"X-Tapps-Project-Root": "/home/wtthornton/code/tapps-brain"
},
"nlt-release-ship": {
"type": "stdio",
"command": "/home/wtthornton/.local/bin/tapps-platform",
"args": [
"serve",
"--profile",
"nlt-release-ship"
],
"env": {
"TAPPS_MCP_PROJECT_ROOT": ".",
"TAPPS_MCP_MEMORY_BRAIN_HTTP_URL": "http://localhost:8080",
"TAPPS_MCP_MEMORY_BRAIN_AUTH_TOKEN": "${TAPPS_BRAIN_AUTH_TOKEN}",
"TAPPS_BRAIN_PROFILE": "full",
"TAPPS_METRICS_STORAGE": "dual",
"TAPPS_MCP_CONTEXT7_API_KEY": "${TAPPS_MCP_CONTEXT7_API_KEY}",
"TAPPS_MCP_MEMORY_BRAIN_PROJECT_ID": "tapps-brain"
},
"instructions": "Code quality scoring (0-100 across 7 categories), security scanning (Bandit + secret detection), quality gates (pass/fail against configurable presets), documentation lookup, domain expert consultation, and project profiling for Python projects."
}
"instructions": "Documentation MCP: epic/story/prompt generators, artifact validation, and planning helpers for Markdown docs in this repo."
},
"nlt-release-ship": {
"type": "http",
"url": "http://127.0.0.1:8765/mcp",
"headers": {
"X-Tapps-Project-Root": "/home/wtthornton/code/tapps-brain"
},
"instructions": "Code quality scoring (0-100 across 7 categories), security scanning (Bandit + secret detection), quality gates (pass/fail against configurable presets), documentation lookup, domain expert consultation, and project profiling for Python projects."
}
}
}
4 changes: 1 addition & 3 deletions src/tapps_brain/diagnostics.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -251,9 +251,7 @@ def _freshness(store: MemoryStore) -> DimensionScore:
tier_age_days_sum[tier_s] = tier_age_days_sum.get(tier_s, 0.0) + age_days
avg = sum(scores) / len(scores)
n = len(entries)
tier_avg_age = {
k: round(tier_age_days_sum[k] / tier_counts[k], 2) for k in sorted(tier_counts)
}
tier_avg_age = {k: round(tier_age_days_sum[k] / tier_counts[k], 2) for k in sorted(tier_counts)}
context_n = tier_counts.get(MemoryTier.context.value, 0)
return DimensionScore(
name="freshness",
Expand Down
Loading