Skip to content

docs(config): reconcile default tool-pack exposure (#179) - #187

Merged
rafaself merged 1 commit into
mainfrom
feat/179-reconcile-tool-pack-exposure
Jun 24, 2026
Merged

docs(config): reconcile default tool-pack exposure (#179)#187
rafaself merged 1 commit into
mainfrom
feat/179-reconcile-tool-pack-exposure

Conversation

@rafaself

Copy link
Copy Markdown
Owner

Summary

  • Add explicit OPT_IN_TOOL_PACKS, DEFAULT_ENABLED_TOOL_PACKS_CSV, and default exposure count constants in tool-exposure.ts
  • Move get_sns_topic_status and get_eventbridge_rules_status to the opt-in security pack
  • Add tool-exposure.test.ts contract tests so default/opt-in partition and exposure counts cannot drift from docs
  • Update README, wrangler comments, SECURITY.md, connector docs, and capability matrix to document the security-first default model (21 default MCP tools; security/aggregates/application-ops opt-in)

Closes #179

Test plan

  • pnpm run typecheck
  • pnpm test
  • pnpm run test:integrity
  • pnpm run verify:connector-contract

Made with Cursor

Establish explicit default vs opt-in pack constants, move SNS and
EventBridge status tools to the security pack, add contract tests that
fail on exposure drift, and align docs/config comments with the
security-first default model.

Fixes #179

Co-authored-by: Cursor <cursoragent@cursor.com>
@rafaself
rafaself merged commit e9b4cde into main Jun 24, 2026
2 checks passed
@rafaself
rafaself deleted the feat/179-reconcile-tool-pack-exposure branch June 24, 2026 01:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Reconcile default tool-pack exposure with docs and new operational tools

1 participant