Contentrain/ai

v@contentrain/[email protected] Feature

This release adds 3 notable features for engineering teams evaluating rollout.

Published 13d Developer Productivity

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

ai-agents claude-code content-governance contentrain cursor developer-tools

+8 more

git i18n mcp mcp-server model-context-protocol sdk typescript windsurf

Affected surfaces

auth rbac

Summary

AI summary

Updates Minor Changes, mcp, and req across a mixed release.

Changes in this release

Type	Severity	Summary	CVE
Security	High	Enforces session tenant binding, rejecting mismatched session IDs to prevent cross‑tenant replay. Enforces session tenant binding, rejecting mismatched session IDs to prevent cross‑tenant replay. Source: llm_adapter@2026-07-13 Confidence: high	—
Feature
Feature	Medium	Adds capability-aware tool registration to MCP server. Adds capability-aware tool registration to MCP server. Source: llm_adapter@2026-07-13 Confidence: high	—
Feature	Medium	Introduces `instructions` support in CreateServerOptions threading to clients. Introduces `instructions` support in CreateServerOptions threading to clients. Source: llm_adapter@2026-07-13 Confidence: high	—
Feature	Medium	Adds `openWorldHint: false` to all 19 tool annotations, restricting tools to configured repository. Adds `openWorldHint: false` to all 19 tool annotations, restricting tools to configured repository. Source: llm_adapter@2026-07-13 Confidence: high	—

Full changelog

Minor Changes

1387ce1: feat(mcp): capability-aware tool listing, server instructions, openWorldHint, session tenant binding

@contentrain/mcp: the MCP surface now tells the truth about what it can do, per session.
- Capability-aware registration. createServer consults a new declarative requirement map (TOOL_REQUIREMENTS, exported from @contentrain/mcp/tools/availability together with isToolAvailable) and only registers tools the resolved provider + projectRoot pair can satisfy. Local stdio/CLI flows keep the full 19-tool surface; remote-provider sessions (Studio MCP Cloud, GitHub/GitLab providers) now list only the remote-safe subset instead of advertising tools that always failed with a capability error. Input-dependent checks (validate --fix, apply reuse) remain call-time guards.
- instructions support. CreateServerOptions.instructions threads the MCP instructions string to clients at initialize. Defaults to a new DEFAULT_INSTRUCTIONS (< 512 chars, describes the describe-format-first and dry-run-first operating rules); pass '' to omit.
- openWorldHint: false added to all 19 tool annotations — every tool operates on the configured repository only.
- Session tenant binding. Multi-tenant HTTP mode accepts sessionFingerprint(req): the fingerprint captured at session creation must match on every follow-up request carrying that Mcp-Session-Id; a mismatch answers 404 Session not found so the client re-initializes against its own provider. Closes cross-tenant session-id replay.

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track Contentrain/ai

Get notified when new releases ship.

About Contentrain/ai

Local-first MCP server for AI content governance — 13 tools for model/content CRUD, validation, normalization, and i18n across any framework.

All releases →

Related context

Related tools

Earlier breaking changes

v@contentrain/[email protected] `validateModelDefinition` now returns `{ errors, warnings }` instead of a string array.
v@contentrain/[email protected] `model_save` rejects models with unknown keys, `min > max`, invalid constraints, and `unique` on singletons.
v@contentrain/[email protected] `content_save` now validates before committing and rejects invalid content.
v@contentrain/[email protected] `validateModelDefinition` now returns `{ errors, warnings }` instead of a string array.
v@contentrain/[email protected] `model_save` rejects models with unknown keys, `min > max`, invalid constraints, and `unique` on singletons.