@rigour-labs/mcp 5.2.2 → 5.2.4

package/dist/index.js

@@ -38,6 +38,7 @@ const ESSENTIAL_TOOLS = new Set([
     'rigour_recall', // Load project memory (START of every task)
     'rigour_remember', // Store conventions/decisions
     'rigour_explain', // Explain gate failures
+    'rigour_get_fix_packet', // Get structured fix instructions on FAIL
     'rigour_review', // Review diffs
     'rigour_security_audit', // CVE check
     'rigour_forget', // Remove stored memory

package/dist/tools/definitions.js

@@ -27,7 +27,7 @@ export const TOOL_DEFINITIONS = [
     // ─── Core Quality Gates ───────────────────────────────
     {
         name: "rigour_check",
-        description: "Run quality gate checks on the project. MUST be called before declaring any coding task complete. Checks code complexity, file size, required docs, security patterns, and more. Returns PASS or FAIL with details.",
+        description: "Run quality gate checks on the project. MUST be called before declaring any coding task complete. Checks code complexity, file size, required docs, security patterns, and more. Returns PASS or FAIL with details. **Always show the user the headline summary from this tool's output** — it tells them what Rigour caught. If FAIL, call rigour_get_fix_packet for structured fix instructions with exact file locations and step-by-step remediation.",
         inputSchema: {
             type: "object",
             properties: {
@@ -52,7 +52,7 @@ export const TOOL_DEFINITIONS = [
     },
     {
         name: "rigour_explain",
-        description: "Explain the last quality gate failures with actionable bullets. Matches the CLI 'explain' command.",
+        description: "Explain WHY quality gates failed in human-readable language. Use this to understand the reasoning behind each violation before fixing. For machine-readable fix instructions, use rigour_get_fix_packet instead.",
         inputSchema: {
             type: "object",
             properties: cwdParam(),
@@ -84,7 +84,7 @@ export const TOOL_DEFINITIONS = [
     },
     {
         name: "rigour_get_fix_packet",
-        description: "Retrieves a prioritized 'Fix Packet' (v2 schema) containing detailed machine-readable diagnostic data.",
+        description: "Call this after rigour_check returns FAIL. Returns a prioritized Fix Packet with exact violations, file locations, and step-by-step fix instructions. Apply fixes in severity order (critical first), then re-run rigour_check to verify. Repeat until PASS. **After applying all fixes, tell the user what Rigour caught and that fixes were applied.**",
         inputSchema: {
             type: "object",
             properties: cwdParam(),

package/dist/tools/quality-handlers.js

@@ -1,3 +1,12 @@
+/**
+ * Quality Gate Tool Handlers
+ *
+ * Handlers for: rigour_check, rigour_explain, rigour_status,
+ * rigour_get_fix_packet, rigour_list_gates, rigour_get_config
+ *
+ * @since v2.17.0 — extracted from monolithic index.ts
+ */
+import { renderMcpHeadline, renderFixAttribution } from "@rigour-labs/core";
 function resolveDeepExecution(args) {
     const requestedProvider = (args.provider || '').toLowerCase();
     const isForcedLocal = requestedProvider === 'local';
@@ -51,10 +60,12 @@ export async function handleCheck(runner, cwd, args = {}) {
             `${execution.isLocal
                 ? '\nPrivacy: Local sidecar/model execution. Code remains on this machine.'
                 : `\nPrivacy: Cloud provider execution. Code context may be sent to ${execution.provider} API.`}`;
+    // Human-facing headline — agents naturally pass this through to users
+    const headline = renderMcpHeadline(report);
     const result = {
         content: [{
                 type: "text",
-                text: `RIGOUR AUDIT RESULT: ${report.status}${scoreText}${sevText}${deepText}\n\nSummary:\n${Object.entries(report.summary).map(([k, v]) => `- ${k}: ${v}`).join("\n")}`,
+                text: `${headline}\n\n${scoreText.trim()}${sevText}${deepText}\n\nSummary:\n${Object.entries(report.summary).map(([k, v]) => `- ${k}: ${v}`).join("\n")}`,
             }],
     };
     result._rigour_report = report;
@@ -108,8 +119,14 @@ export async function handleGetFixPacket(runner, cwd, config) {
     const { FixPacketService } = await import("@rigour-labs/core");
     const fixPacketService = new FixPacketService();
     const fixPacket = fixPacketService.generate(report, config);
+    // Find worst violation for attribution
+    const worst = report.failures.find(f => f.severity === 'critical')
+        || report.failures.find(f => f.severity === 'high')
+        || report.failures[0];
+    const worstLabel = worst ? worst.title : 'quality violations';
+    const attribution = renderFixAttribution(report.failures.length, worstLabel);
     return {
-        content: [{ type: "text", text: formatFixPacketText(fixPacket, report) }],
+        content: [{ type: "text", text: formatFixPacketText(fixPacket, report) + attribution }],
     };
 }
 /**

package/package.json

@@ -1,30 +1,35 @@
 {
   "name": "@rigour-labs/mcp",
-  "version": "5.2.2",
+  "version": "5.2.4",
   "description": "MCP server for AI code governance — OWASP LLM Top 10 (10/10), real-time hooks, 25+ security patterns, hallucinated import detection, multi-agent governance. Works with Claude, Cursor, Cline, Windsurf, Gemini. Industry presets for HIPAA, SOC2, FedRAMP.",
   "license": "MIT",
   "homepage": "https://rigour.run",
   "icon": "https://raw.githubusercontent.com/rigour-labs/rigour/main/docs/assets/icon.svg",
   "keywords": [
+    "ai",
+    "llm",
     "mcp",
     "model-context-protocol",
-    "owasp-llm-top-10",
+    "ai-agent",
     "ai-code-governance",
+    "owasp-llm-top-10",
+    "bayesian-learning",
     "real-time-hooks",
     "security-patterns",
     "hallucinated-imports",
-    "industry-presets",
-    "hipaa",
-    "soc2",
-    "fedramp",
+    "vibe-coding",
     "claude",
     "cursor",
     "cline",
     "windsurf",
+    "copilot",
+    "gemini",
+    "codex",
     "multi-agent-governance",
     "quality-gates",
-    "static-analysis",
-    "code-review"
+    "fix-packets",
+    "agent-governance",
+    "drift-detection"
   ],
   "type": "module",
   "mcpName": "io.github.rigour-labs/rigour",
@@ -48,7 +53,7 @@
     "execa": "^8.0.1",
     "fs-extra": "^11.2.0",
     "yaml": "^2.8.2",
-    "@rigour-labs/core": "5.2.2"
+    "@rigour-labs/core": "5.2.4"
   },
   "devDependencies": {
     "@types/node": "^25.0.3",