@rigour-labs/mcp 6.5.3 → 6.5.4

package/dist/tools/execution-handlers.d.ts

@@ -19,6 +19,7 @@ export declare function handleRunSupervised(opts: {
 }): Promise<ToolResult>;
 /**
  * Fail-closed: timeout with no human decision → timeout-deny (not approve).
+ * Only a decision Studio signed with this request's token counts; any other line is ignored.
  */
-export declare function pollArbitration(cwd: string, rid: string, timeout: number): Promise<string | null>;
+export declare function pollArbitration(cwd: string, rid: string, token: string, timeout: number): Promise<string | null>;
 export {};

package/dist/tools/execution-handlers.js

@@ -6,7 +6,7 @@
  */
 import fs from "fs-extra";
 import path from "path";
-import { FixPacketService, runTypedCommand, evaluateTypedCommand, issueArbitrationToken, } from "@rigour-labs/core";
+import { FixPacketService, runTypedCommand, evaluateTypedCommand, issueArbitrationToken, verifyArbitrationDecision, } from "@rigour-labs/core";
 import { logStudioEvent } from '../utils/config.js';
 import { notifyProgress } from '../utils/notifications.js';
 async function requireHumanApproval(cwd, command, requestId, tool) {
@@ -16,10 +16,9 @@ async function requireHumanApproval(cwd, command, requestId, tool) {
         requestId,
         tool,
         command,
-        arbitrationToken,
     });
     console.error(`[RIGOUR] Waiting for human arbitration for command: ${command}`);
-    const decision = await pollArbitration(cwd, requestId, 60000);
+    const decision = await pollArbitration(cwd, requestId, arbitrationToken, 60000);
     if (decision === 'approve')
         return null;
     await logStudioEvent(cwd, {
@@ -230,19 +229,20 @@ function formatFixPacketForSupervisor(fixPacket) {
 }
 /**
  * Fail-closed: timeout with no human decision → timeout-deny (not approve).
+ * Only a decision Studio signed with this request's token counts; any other line is ignored.
  */
-export async function pollArbitration(cwd, rid, timeout) {
+export async function pollArbitration(cwd, rid, token, timeout) {
     const eventsPath = path.join(cwd, '.rigour/events.jsonl');
     const maxIterations = Math.max(1, Math.ceil(timeout / 1000));
     for (let i = 0; i < maxIterations; i++) {
-        const found = await readArbitrationDecision(eventsPath, rid);
+        const found = await readArbitrationDecision(eventsPath, rid, token);
         if (found)
             return found;
         await sleepMs(1000);
     }
     return "timeout-deny";
 }
-async function readArbitrationDecision(eventsPath, rid) {
+async function readArbitrationDecision(eventsPath, rid, token) {
     if (!(await fs.pathExists(eventsPath)))
         return null;
     const content = await fs.readFile(eventsPath, 'utf-8');
@@ -255,7 +255,8 @@ async function readArbitrationDecision(eventsPath, rid) {
         catch {
             continue;
         }
-        if (event.tool === 'human_arbitration' && event.requestId === rid) {
+        if (event.tool === 'human_arbitration' && event.requestId === rid
+            && verifyArbitrationDecision(token, rid, event.decision, event.proof)) {
             return event.decision;
         }
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rigour-labs/mcp",
-  "version": "6.5.3",
+  "version": "6.5.4",
   "description": "MCP server + live dashboard for AI code governance — OWASP LLM Top 10 (10/10), real-time MCP App UI, 25+ security patterns, memory and lessons recalled by meaning, hallucinated import detection, multi-agent governance. Works with Claude, Cursor, VS Code, ChatGPT, Goose, Windsurf. Industry presets for HIPAA, SOC2, FedRAMP.",
   "engines": {
     "node": ">=22"
@@ -65,7 +65,7 @@
     "execa": "^8.0.1",
     "fs-extra": "^11.4.0",
     "yaml": "^2.8.2",
-    "@rigour-labs/core": "6.5.3"
+    "@rigour-labs/core": "6.5.4"
   },
   "devDependencies": {
     "@types/node": "^25.0.3",