@cachly-dev/mcp-server 0.10.72 → 0.10.74

package/README.md

@@ -22,7 +22,7 @@
     <img src="https://img.shields.io/badge/GDPR-EU%20servers-green" alt="GDPR: EU servers" />
   </a>
   &nbsp;
-  <img src="https://img.shields.io/badge/105%20MCP%20tools-violet" alt="105 MCP tools" />
+  <img src="https://img.shields.io/badge/107%20MCP%20tools-violet" alt="107 MCP tools" />
   &nbsp;
   <img src="https://img.shields.io/badge/License-Apache--2.0-yellow" alt="License: Apache-2.0" />
 </p>

package/dist/src/handlers/brain.js

@@ -2,13 +2,21 @@ import { execSync } from 'node:child_process';
 import { calculateConfidence, confidenceBadge, STRUCTURED_TEMPLATES, CONFIDENCE_WARN_VALUE, CONFIDENCE_STALE_VALUE, CONFIDENCE_WARN_DAYS } from '../confidence.js';
 import { ckgSlug, extractProblemConcept, ckgUpsertNode, ckgUpdateEdge, ckgUpsertPersonNode, ckgUpsertFileNode, ckgRecordCollaboration, ckgUpsertServiceNode } from '../ckg.js';
 import { safeJsonParse, scanKeys } from '../utils.js';
-import { getRole, ROLE_BADGE } from './team.js';
+import { getRole, ROLE_BADGE, getScopes, lessonVisibleToScope } from './team.js';
 import { keywordSearch, tokenize, splitMultiQuery, levenshtein, indexVocab as _indexVocab } from '../search.js';
 import { rerankByQuality } from '../rerank.js';
 import { computeEmbedding, hasEmbedProvider } from '../embeddings.js';
 // ── Changelog (shown once per version in session_start) ──────────────────────
-const MCP_VERSION = '0.10.72';
+const MCP_VERSION = '0.10.73';
 const WHATS_NEW = {
+    '0.10.73': [
+        `🔐 **Team visibility scopes + one-command init + external bench**`,
+        `  🆕 \`team_grant_scope\` / \`team_scopes\` — scope lessons to a sub-team (group="security"); only members + admins recall them`,
+        `  🏷️ \`learn_from_attempts(group="...")\` — orthogonal to private; smart_recall enforces it per requester`,
+        `  ⚡ \`init\` is now zero-arg + idempotent (reuses saved creds, only writes what changed, <60s)`,
+        `  📦 \`npm run bench:external\` — prove recall-lift on a third-party-labeled corpus (portable JSON format)`,
+        `  📊 107 MCP tools`,
+    ],
     '0.10.72': [
         `👑 **Role model — admin · reviewer · contributor · viewer (Phase 3)**`,
         `  🆕 \`team_assign_role\` — establish governance; first call bootstraps, admins manage the rest`,
@@ -114,7 +122,7 @@ export const BRAIN_TOOL_NAMES = new Set([
 export async function handleBrainTool(name, args, getConnection, apiFetch) {
     switch (name) {
         case 'learn_from_attempts': {
-            const { instance_id, topic, outcome, what_worked, what_failed = '', context: ctx = '', severity = 'major', file_paths = [], commands = [], tags = [], depends_on = [], author = '', visibility = 'team', service = '', service_kind = 'service', } = args;
+            const { instance_id, topic, outcome, what_worked, what_failed = '', context: ctx = '', severity = 'major', file_paths = [], commands = [], tags = [], depends_on = [], author = '', visibility = 'team', service = '', service_kind = 'service', group = '', } = args;
             const redis = await getConnection(instance_id);
             const ts = new Date().toISOString();
             // ── Structured template hints ──────────────────────────────────────────
@@ -233,6 +241,7 @@ export async function handleBrainTool(name, args, getConnection, apiFetch) {
                 depends_on,
                 ...(author ? { author } : {}),
                 ...(service ? { service } : {}),
+                ...(group ? { group: String(group).toLowerCase().trim() } : {}),
                 visibility,
                 recall_count: recallCount,
                 ts,
@@ -585,6 +594,15 @@ export async function handleBrainTool(name, args, getConnection, apiFetch) {
                 ? rawContextFiles.filter((f) => typeof f === 'string')
                 : [];
             const redis = await getConnection(instance_id);
+            // Team-level visibility scopes: resolve the requester's group memberships +
+            // admin status once, so group-scoped lessons only surface for members/admins.
+            let requesterScopes = new Set();
+            let requesterIsAdmin = false;
+            if (requester) {
+                requesterScopes = await getScopes(redis, instance_id, requester).catch(() => new Set());
+                const reqRole = await getRole(redis, instance_id, requester).catch(() => null);
+                requesterIsAdmin = reqRole === 'admin';
+            }
             // ── Layer 1: Keyword search across ALL brain data (always works, no embedding) ──
             const rawMatches = await keywordSearch(redis, ['cachly:ctx:*', 'cachly:lesson:best:*', 'cachly:idx:*'], query, 10);
             // ── Layer 1.5: Quality-aware rerank — proven success lessons outrank
@@ -758,13 +776,18 @@ export async function handleBrainTool(name, args, getConnection, apiFetch) {
                     }
                 }
             }
-            // Filter private lessons — they are only accessible via exact recall_best_solution
+            // Filter private lessons (recall_best_solution only) + enforce team scopes:
+            // group-scoped lessons surface only for members of that group (admins see all).
             const hybridResults = [...hybridMap.values()]
                 .filter(r => {
                 if (!r.key.startsWith('cachly:lesson:best:'))
                     return true;
                 const ld = safeJsonParse(r.content, {});
-                return ld.visibility !== 'private';
+                if (ld.visibility === 'private')
+                    return false;
+                if (!lessonVisibleToScope(ld.group, requesterScopes, requesterIsAdmin))
+                    return false;
+                return true;
             })
                 .sort((a, b) => b.hybridScore - a.hybridScore);
             // ── Build output ──────────────────────────────────────────────────────────