@rigour-labs/mcp 6.2.2 → 6.2.3

package/dist/advertised-tools.d.ts

@@ -75,6 +75,37 @@ export declare function getAdvertisedToolDefinitions(): ({
         idempotentHint: boolean;
         openWorldHint: boolean;
     };
+} | {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: string;
+        properties: {
+            offset: {
+                type: string;
+                minimum: number;
+                description: string;
+            };
+            limit: {
+                type: string;
+                minimum: number;
+                maximum: number;
+                description: string;
+            };
+            cwd: {
+                type: "string";
+                description: string;
+            };
+        };
+        required: string[];
+    };
+    annotations: {
+        title: string;
+        readOnlyHint: boolean;
+        destructiveHint: boolean;
+        idempotentHint: boolean;
+        openWorldHint: boolean;
+    };
 } | {
     name: string;
     description: string;
@@ -545,6 +576,8 @@ export declare function getAdvertisedToolDefinitions(): ({
             limit: {
                 type: string;
                 description: string;
+                minimum?: undefined;
+                maximum?: undefined;
             };
             cwd: {
                 type: "string";
@@ -696,6 +729,8 @@ export declare function getAdvertisedToolDefinitions(): ({
             limit: {
                 type: string;
                 description: string;
+                minimum?: undefined;
+                maximum?: undefined;
             };
             taskId: {
                 type: string;

package/dist/index.js

@@ -128,7 +128,7 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
                 result = await handleStatus(runner, cwd);
                 break;
             case "rigour_get_fix_packet":
-                result = await handleGetFixPacket(runner, cwd, config);
+                result = await handleGetFixPacket(runner, cwd, config, args);
                 break;
             case "rigour_list_gates":
                 result = handleListGates(config);

package/dist/tools/definitions.d.ts

@@ -87,6 +87,37 @@ export declare const TOOL_DEFINITIONS: ({
         idempotentHint: boolean;
         openWorldHint: boolean;
     };
+} | {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: string;
+        properties: {
+            offset: {
+                type: string;
+                minimum: number;
+                description: string;
+            };
+            limit: {
+                type: string;
+                minimum: number;
+                maximum: number;
+                description: string;
+            };
+            cwd: {
+                type: "string";
+                description: string;
+            };
+        };
+        required: string[];
+    };
+    annotations: {
+        title: string;
+        readOnlyHint: boolean;
+        destructiveHint: boolean;
+        idempotentHint: boolean;
+        openWorldHint: boolean;
+    };
 } | {
     name: string;
     description: string;
@@ -557,6 +588,8 @@ export declare const TOOL_DEFINITIONS: ({
             limit: {
                 type: string;
                 description: string;
+                minimum?: undefined;
+                maximum?: undefined;
             };
             cwd: {
                 type: "string";
@@ -708,6 +741,8 @@ export declare const TOOL_DEFINITIONS: ({
             limit: {
                 type: string;
                 description: string;
+                minimum?: undefined;
+                maximum?: undefined;
             };
             taskId: {
                 type: string;

package/dist/tools/definitions.js

@@ -84,10 +84,14 @@ export const TOOL_DEFINITIONS = [
     },
     {
         name: "rigour_get_fix_packet",
-        description: "Call this after rigour_check returns FAIL. Returns a prioritized Fix Packet with exact violations, file locations, and step-by-step fix instructions. Apply fixes in severity order (critical first), then re-run rigour_check to verify. Repeat until PASS. **After applying all fixes, tell the user what Rigour caught and that fixes were applied.**",
+        description: "Call this after rigour_check returns FAIL. Returns a bounded, prioritized page of violations with file locations and fix instructions. Use next_offset from the response to read further pages, then re-run rigour_check. Report only fixes that were actually verified.",
         inputSchema: {
             type: "object",
-            properties: cwdParam(),
+            properties: {
+                ...cwdParam(),
+                offset: { type: "integer", minimum: 0, description: "Zero-based violation offset. Start at 0, then use the next offset in the response." },
+                limit: { type: "integer", minimum: 1, maximum: 10, description: "Violations per page (default 5, maximum 10)." },
+            },
             required: ["cwd"],
         },
         annotations: {

package/dist/tools/fix-packet-format.d.ts

@@ -0,0 +1,4 @@
+import type { FixPacketV2, Report } from '@rigour-labs/core';
+export declare const DEFAULT_FIX_PACKET_PAGE_SIZE = 5;
+export declare const MAX_FIX_PACKET_PAGE_SIZE = 10;
+export declare function formatFixPacketPage(packet: FixPacketV2, report: Report, offset: number, limit: number): string;

package/dist/tools/fix-packet-format.js

@@ -0,0 +1,64 @@
+export const DEFAULT_FIX_PACKET_PAGE_SIZE = 5;
+export const MAX_FIX_PACKET_PAGE_SIZE = 10;
+const MAX_ITEM_CHARS = 1_600;
+function clip(value, max) {
+    const text = String(value ?? '');
+    return text.length <= max ? text : `${text.slice(0, max - 16)}... [truncated]`;
+}
+function formatViolation(violation, index, total) {
+    const lines = [
+        `━━━ FIX ${index + 1}/${total}: [${violation.severity.toUpperCase()}] ${clip(violation.title, 180)} ━━━`,
+        `GATE: ${clip(violation.id, 100)}`,
+        `PROBLEM: ${clip(violation.details, 600)}`,
+    ];
+    const locations = violation.locations ?? [];
+    if (locations.length > 0) {
+        const shown = locations.slice(0, 5).map(loc => `${clip(loc.file, 160)}${loc.line ? `:${loc.line}` : ''}${loc.endLine && loc.endLine !== loc.line ? `-${loc.endLine}` : ''}`);
+        lines.push(`WHERE: ${shown.join(', ')}${locations.length > 5 ? ` (+${locations.length - 5} more locations)` : ''}`);
+    }
+    else if (violation.files?.length) {
+        lines.push(`FILES: ${violation.files.slice(0, 5).map(file => clip(file, 160)).join(', ')}`);
+    }
+    if (violation.instructions?.length) {
+        lines.push('FIX:');
+        for (const [step, instruction] of violation.instructions.slice(0, 3).entries()) {
+            lines.push(`  ${step + 1}. ${clip(instruction, 260)}`);
+        }
+    }
+    else if (violation.hint) {
+        lines.push(`HINT: ${clip(violation.hint, 300)}`);
+    }
+    return clip(lines.join('\n'), MAX_ITEM_CHARS);
+}
+export function formatFixPacketPage(packet, report, offset, limit) {
+    const total = packet.violations.length;
+    const start = Math.min(offset, total);
+    const end = Math.min(start + limit, total);
+    const lines = [
+        'ENGINEERING REFINEMENT REQUIRED',
+        `Score: ${report.stats.score ?? 'unknown'}/100 | Violations: ${total}`,
+        `Failed gates: ${clip(packet.failed_gates.join(', '), 900)}`,
+        `Page: ${start}-${end} of ${total}`,
+        `next_offset: ${end < total ? end : 'none'}`,
+        '',
+    ];
+    for (let index = start; index < end; index++) {
+        lines.push(formatViolation(packet.violations[index], index, total), '');
+    }
+    if (packet.verification?.commands?.length) {
+        lines.push('VERIFICATION:');
+        for (const command of packet.verification.commands.slice(0, 5)) {
+            lines.push(`  $ ${clip(command.cmd, 180)} — ${clip(command.purpose, 120)}`);
+        }
+    }
+    if (packet.constraints?.do_not_touch?.length) {
+        lines.push(`DO NOT TOUCH: ${clip(packet.constraints.do_not_touch.join(', '), 600)}`);
+    }
+    if (packet.constraints?.allowed_scope?.length) {
+        lines.push(`Allowed scope: ${packet.constraints.allowed_scope.length} file(s); see individual locations above.`);
+    }
+    lines.push(end < total
+        ? `More violations remain. Call rigour_get_fix_packet with offset=${end} and limit=${limit}.`
+        : 'End of Fix Packet. Re-run rigour_check after repairs; report PASS only after verification.');
+    return lines.join('\n');
+}

package/dist/tools/quality-handlers.d.ts

@@ -29,7 +29,10 @@ export interface CheckArgs {
 export declare function handleCheck(runner: GateRunner, cwd: string, args?: CheckArgs): Promise<ToolResult>;
 export declare function handleExplain(runner: GateRunner, cwd: string): Promise<ToolResult>;
 export declare function handleStatus(runner: GateRunner, cwd: string): Promise<ToolResult>;
-export declare function handleGetFixPacket(runner: GateRunner, cwd: string, config: Config): Promise<ToolResult>;
+export declare function handleGetFixPacket(runner: GateRunner, cwd: string, config: Config, args?: {
+    offset?: number;
+    limit?: number;
+}): Promise<ToolResult>;
 export declare function handleListGates(config: Config): ToolResult;
 export declare function handleGetConfig(config: Config): ToolResult;
 export {};

package/dist/tools/quality-handlers.js

@@ -6,8 +6,9 @@
  *
  * @since v2.17.0 — extracted from monolithic index.ts
  */
-import { renderMcpHeadline, renderFixAttribution } from "@rigour-labs/core";
+import { renderMcpHeadline } from "@rigour-labs/core";
 import { notifyProgress } from '../utils/notifications.js';
+import { DEFAULT_FIX_PACKET_PAGE_SIZE, MAX_FIX_PACKET_PAGE_SIZE, formatFixPacketPage } from './fix-packet-format.js';
 function resolveDeepExecution(args) {
     const requestedProvider = (args.provider || '').toLowerCase();
     const isForcedLocal = requestedProvider === 'local';
@@ -124,7 +125,13 @@ export async function handleStatus(runner, cwd) {
             }],
     };
 }
-export async function handleGetFixPacket(runner, cwd, config) {
+export async function handleGetFixPacket(runner, cwd, config, args = {}) {
+    const offset = args.offset ?? 0;
+    const limit = args.limit ?? DEFAULT_FIX_PACKET_PAGE_SIZE;
+    if (!Number.isInteger(offset) || offset < 0 || !Number.isInteger(limit)
+        || limit < 1 || limit > MAX_FIX_PACKET_PAGE_SIZE) {
+        return { isError: true, content: [{ type: 'text', text: 'offset must be a nonnegative integer and limit must be an integer from 1 to 10.' }] };
+    }
     const report = await runner.run(cwd);
     if (report.status === "PASS") {
         const passScore = report.stats.score !== undefined ? ` Score: ${report.stats.score}/100.` : '';
@@ -136,98 +143,10 @@ export async function handleGetFixPacket(runner, cwd, config) {
     const { FixPacketService } = await import("@rigour-labs/core");
     const fixPacketService = new FixPacketService();
     const fixPacket = fixPacketService.generate(report, config);
-    // Find worst violation for attribution
-    const worst = report.failures.find(f => f.severity === 'critical')
-        || report.failures.find(f => f.severity === 'high')
-        || report.failures[0];
-    const worstLabel = worst ? worst.title : 'quality violations';
-    const attribution = renderFixAttribution(report.failures.length, worstLabel);
     return {
-        content: [{ type: "text", text: formatFixPacketText(fixPacket, report) + attribution }],
+        content: [{ type: "text", text: formatFixPacketPage(fixPacket, report, offset, limit) }],
     };
 }
-/**
- * Formats a FixPacketV2 into a structured, agent-readable text block.
- * Every violation includes: who failed, which files, what rule, where (line numbers),
- * and what commands must pass after fixing.
- */
-function formatFixPacketText(fixPacket, report) {
-    const lines = [];
-    // Header
-    let scoreHeader = formatScoreText(report.stats).trim();
-    lines.push('ENGINEERING REFINEMENT REQUIRED');
-    if (scoreHeader)
-        lines.push(scoreHeader);
-    lines.push(`Violations: ${report.failures.length} | Failed gates: ${fixPacket.failed_gates.join(', ')}`);
-    lines.push('');
-    // Violations
-    fixPacket.violations.forEach((v, i) => {
-        const sevTag = `[${(v.severity || 'medium').toUpperCase()}]`;
-        const catTag = v.category ? ` (${v.category})` : '';
-        lines.push(`━━━ FIX ${i + 1}/${fixPacket.violations.length}: ${sevTag}${catTag} ${v.title} ━━━`);
-        lines.push(`GATE: ${v.id}`);
-        lines.push(`PROBLEM: ${v.details}`);
-        // Locations with line numbers (precise targeting)
-        if (v.locations && v.locations.length > 0) {
-            const locStrs = v.locations.map((loc) => {
-                let s = loc.file;
-                if (loc.line)
-                    s += `:${loc.line}`;
-                if (loc.endLine && loc.endLine !== loc.line)
-                    s += `-${loc.endLine}`;
-                return s;
-            });
-            lines.push(`WHERE: ${locStrs.join(', ')}`);
-        }
-        else if (v.files && v.files.length > 0) {
-            lines.push(`FILES: ${v.files.join(', ')}`);
-        }
-        // Metrics (thresholds vs actuals)
-        if (v.metrics && Object.keys(v.metrics).length > 0) {
-            const metricStrs = Object.entries(v.metrics).map(([k, val]) => `${k}=${val}`);
-            lines.push(`METRICS: ${metricStrs.join(', ')}`);
-        }
-        // Instructions
-        if (v.instructions && v.instructions.length > 0) {
-            lines.push(`FIX:`);
-            v.instructions.forEach((inst, j) => {
-                lines.push(`  ${j + 1}. ${inst}`);
-            });
-        }
-        else if (v.hint) {
-            lines.push(`HINT: ${v.hint}`);
-        }
-        lines.push('');
-    });
-    // Verification commands
-    if (fixPacket.verification?.commands?.length > 0) {
-        lines.push('━━━ VERIFICATION (run these after fixing) ━━━');
-        fixPacket.verification.commands.forEach((c) => {
-            lines.push(`  $ ${c.cmd}  — ${c.purpose}`);
-        });
-        lines.push('');
-    }
-    // Constraints
-    const c = fixPacket.constraints;
-    if (c) {
-        const constraintParts = [];
-        if (c.allowed_scope?.length > 0)
-            constraintParts.push(`ALLOWED SCOPE: ${c.allowed_scope.join(', ')}`);
-        if (c.do_not_touch?.length > 0)
-            constraintParts.push(`DO NOT TOUCH: ${c.do_not_touch.join(', ')}`);
-        if (c.max_files_changed)
-            constraintParts.push(`MAX FILES CHANGED: ${c.max_files_changed}`);
-        if (c.no_new_deps)
-            constraintParts.push('NO NEW DEPENDENCIES');
-        if (c.paradigm)
-            constraintParts.push(`PARADIGM: ${c.paradigm}`);
-        if (constraintParts.length > 0) {
-            lines.push('━━━ CONSTRAINTS ━━━');
-            constraintParts.forEach(p => lines.push(`  ${p}`));
-        }
-    }
-    return lines.join('\n');
-}
 export function handleListGates(config) {
     return {
         content: [{

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rigour-labs/mcp",
-  "version": "6.2.2",
+  "version": "6.2.3",
   "description": "MCP server + live dashboard for AI code governance — OWASP LLM Top 10 (10/10), real-time MCP App UI, 25+ security patterns, Bayesian learning Brain, hallucinated import detection, multi-agent governance. Works with Claude, Cursor, VS Code, ChatGPT, Goose, Windsurf. Industry presets for HIPAA, SOC2, FedRAMP.",
   "license": "MIT",
   "homepage": "https://rigour.run",
@@ -62,7 +62,7 @@
     "execa": "^8.0.1",
     "fs-extra": "^11.4.0",
     "yaml": "^2.8.2",
-    "@rigour-labs/core": "6.2.2"
+    "@rigour-labs/core": "6.2.3"
   },
   "devDependencies": {
     "@types/node": "^25.0.3",