@cachly-dev/mcp-server 0.10.71 → 0.10.73

package/README.md

@@ -22,7 +22,7 @@
     <img src="https://img.shields.io/badge/GDPR-EU%20servers-green" alt="GDPR: EU servers" />
   </a>
   &nbsp;
-  <img src="https://img.shields.io/badge/102%20MCP%20tools-violet" alt="102 MCP tools" />
+  <img src="https://img.shields.io/badge/107%20MCP%20tools-violet" alt="107 MCP tools" />
   &nbsp;
   <img src="https://img.shields.io/badge/License-Apache--2.0-yellow" alt="License: Apache-2.0" />
 </p>

package/dist/src/handlers/brain.js

@@ -2,12 +2,29 @@ import { execSync } from 'node:child_process';
 import { calculateConfidence, confidenceBadge, STRUCTURED_TEMPLATES, CONFIDENCE_WARN_VALUE, CONFIDENCE_STALE_VALUE, CONFIDENCE_WARN_DAYS } from '../confidence.js';
 import { ckgSlug, extractProblemConcept, ckgUpsertNode, ckgUpdateEdge, ckgUpsertPersonNode, ckgUpsertFileNode, ckgRecordCollaboration, ckgUpsertServiceNode } from '../ckg.js';
 import { safeJsonParse, scanKeys } from '../utils.js';
+import { getRole, ROLE_BADGE, getScopes, lessonVisibleToScope } from './team.js';
 import { keywordSearch, tokenize, splitMultiQuery, levenshtein, indexVocab as _indexVocab } from '../search.js';
 import { rerankByQuality } from '../rerank.js';
 import { computeEmbedding, hasEmbedProvider } from '../embeddings.js';
 // ── Changelog (shown once per version in session_start) ──────────────────────
-const MCP_VERSION = '0.10.71';
+const MCP_VERSION = '0.10.73';
 const WHATS_NEW = {
+    '0.10.73': [
+        `🔐 **Team visibility scopes + one-command init + external bench**`,
+        `  🆕 \`team_grant_scope\` / \`team_scopes\` — scope lessons to a sub-team (group="security"); only members + admins recall them`,
+        `  🏷️ \`learn_from_attempts(group="...")\` — orthogonal to private; smart_recall enforces it per requester`,
+        `  ⚡ \`init\` is now zero-arg + idempotent (reuses saved creds, only writes what changed, <60s)`,
+        `  📦 \`npm run bench:external\` — prove recall-lift on a third-party-labeled corpus (portable JSON format)`,
+        `  📊 107 MCP tools`,
+    ],
+    '0.10.72': [
+        `👑 **Role model — admin · reviewer · contributor · viewer (Phase 3)**`,
+        `  🆕 \`team_assign_role\` — establish governance; first call bootstraps, admins manage the rest`,
+        `  🆕 \`team_whoami\` — see your own role and capabilities`,
+        `  🆕 \`team_roster\` — full team role table (👑🛡️✏️👁️)`,
+        `  🛡️ \`team_confirm\` is now role-aware — admin/reviewer auto-get senior weight; contributor gets peer; no self-promotion`,
+        `  👑 Setup CLI now prompts for governance bootstrap (idempotent). 105 MCP tools`,
+    ],
     '0.10.71': [
         `🛡️ **Self-healing auth** — no more silent "0 recalls because the token quietly died"`,
         `  ♻️ Near-expiry tokens auto-refresh into a long-lived key while still valid (zero interaction)`,
@@ -105,7 +122,7 @@ export const BRAIN_TOOL_NAMES = new Set([
 export async function handleBrainTool(name, args, getConnection, apiFetch) {
     switch (name) {
         case 'learn_from_attempts': {
-            const { instance_id, topic, outcome, what_worked, what_failed = '', context: ctx = '', severity = 'major', file_paths = [], commands = [], tags = [], depends_on = [], author = '', visibility = 'team', service = '', service_kind = 'service', } = args;
+            const { instance_id, topic, outcome, what_worked, what_failed = '', context: ctx = '', severity = 'major', file_paths = [], commands = [], tags = [], depends_on = [], author = '', visibility = 'team', service = '', service_kind = 'service', group = '', } = args;
             const redis = await getConnection(instance_id);
             const ts = new Date().toISOString();
             // ── Structured template hints ──────────────────────────────────────────
@@ -224,6 +241,7 @@ export async function handleBrainTool(name, args, getConnection, apiFetch) {
                 depends_on,
                 ...(author ? { author } : {}),
                 ...(service ? { service } : {}),
+                ...(group ? { group: String(group).toLowerCase().trim() } : {}),
                 visibility,
                 recall_count: recallCount,
                 ts,
@@ -576,6 +594,15 @@ export async function handleBrainTool(name, args, getConnection, apiFetch) {
                 ? rawContextFiles.filter((f) => typeof f === 'string')
                 : [];
             const redis = await getConnection(instance_id);
+            // Team-level visibility scopes: resolve the requester's group memberships +
+            // admin status once, so group-scoped lessons only surface for members/admins.
+            let requesterScopes = new Set();
+            let requesterIsAdmin = false;
+            if (requester) {
+                requesterScopes = await getScopes(redis, instance_id, requester).catch(() => new Set());
+                const reqRole = await getRole(redis, instance_id, requester).catch(() => null);
+                requesterIsAdmin = reqRole === 'admin';
+            }
             // ── Layer 1: Keyword search across ALL brain data (always works, no embedding) ──
             const rawMatches = await keywordSearch(redis, ['cachly:ctx:*', 'cachly:lesson:best:*', 'cachly:idx:*'], query, 10);
             // ── Layer 1.5: Quality-aware rerank — proven success lessons outrank
@@ -749,13 +776,18 @@ export async function handleBrainTool(name, args, getConnection, apiFetch) {
                     }
                 }
             }
-            // Filter private lessons — they are only accessible via exact recall_best_solution
+            // Filter private lessons (recall_best_solution only) + enforce team scopes:
+            // group-scoped lessons surface only for members of that group (admins see all).
             const hybridResults = [...hybridMap.values()]
                 .filter(r => {
                 if (!r.key.startsWith('cachly:lesson:best:'))
                     return true;
                 const ld = safeJsonParse(r.content, {});
-                return ld.visibility !== 'private';
+                if (ld.visibility === 'private')
+                    return false;
+                if (!lessonVisibleToScope(ld.group, requesterScopes, requesterIsAdmin))
+                    return false;
+                return true;
             })
                 .sort((a, b) => b.hybridScore - a.hybridScore);
             // ── Build output ──────────────────────────────────────────────────────────
@@ -2068,7 +2100,10 @@ export async function handleBrainTool(name, args, getConnection, apiFetch) {
                 const conf = (p.avgConfidence * 100).toFixed(0);
                 const daysSince = Math.floor((Date.now() - new Date(p.lastActive).getTime()) / 86400000);
                 const recency = daysSince < 1 ? 'today' : daysSince < 7 ? `${daysSince}d ago` : daysSince < 30 ? `${Math.floor(daysSince / 7)}w ago` : `${Math.floor(daysSince / 30)}mo ago`;
-                lines.push(`${medal} **${p.handle}** — ${p.lessonCount} lesson${p.lessonCount !== 1 ? 's' : ''} · ${conf}% confidence · last active ${recency}`, `   _domains: ${p.domains}_`, ``);
+                // Show role badge if assigned (non-blocking — role lookup is best-effort)
+                const roleVal = await getRole(redis, instance_id, p.handle).catch(() => null);
+                const roleBadge = roleVal ? ` ${ROLE_BADGE[roleVal]}` : '';
+                lines.push(`${medal} **${p.handle}**${roleBadge} — ${p.lessonCount} lesson${p.lessonCount !== 1 ? 's' : ''} · ${conf}% confidence · last active ${recency}`, `   _domains: ${p.domains}_`, ``);
             }
             if (topCollaborators.length > 0 && topExpert) {
                 lines.push(`🤝 **${topExpert.handle}** frequently works with: ${topCollaborators.map(h => `**${h}**`).join(', ')}`, `   _(ask them together — they've solved structurally similar things on shared files)_`, ``);