@rigour-labs/mcp 6.5.3 → 6.6.0

package/dist/tools/context-handlers.js

@@ -11,7 +11,7 @@
 import fs from 'fs-extra';
 import path from 'path';
 import { createHash } from 'crypto';
-import { getTaskContextStats, getTaskCostStats, getCacheStats, explainContext, getSemanticQueryCache, setSemanticQueryCache, findRelatedSemanticQueryCache, filterExistingEditScope, estimateTokenCount, ensureAutomaticIndex, getApplicableLessons, searchTeamKnowledge, recordScopeOffer, } from '@rigour-labs/core';
+import { getTaskContextStats, getTaskCostStats, getCacheStats, explainContext, getSemanticQueryCache, setSemanticQueryCache, findRelatedSemanticQueryCache, filterExistingEditScope, estimateTokenCount, ensureAutomaticIndex, getApplicableLessons, recordLessonsServed, searchTeamKnowledge, recordScopeOffer, } from '@rigour-labs/core';
 import { loadPatternIndex, getDefaultIndexPath, generateEmbedding, semanticSearch, } from '@rigour-labs/core/pattern-index';
 import { buildTelemetryMeta, getWorkspaceCommitSha } from '../utils/context-telemetry.js';
 import { appendContextFooter } from '../utils/context-footer.js';
@@ -262,6 +262,7 @@ export async function handleContextScope(cwd, query, limit = 10, taskId, agentId
         getApplicableLessons(cwd, agentId, process.env.RIGOUR_TEAM_ID),
         searchTeamKnowledge(query, Math.min(limit, 8)),
     ]);
+    recordLessonsServed(cwd, 'context', applicableLearning.lessons.map(lesson => lesson.subject));
     let fullFileTokens = 0;
     const offered = [];
     for (const file of editScope) {

package/dist/tools/execution-handlers.d.ts

@@ -19,6 +19,7 @@ export declare function handleRunSupervised(opts: {
 }): Promise<ToolResult>;
 /**
  * Fail-closed: timeout with no human decision → timeout-deny (not approve).
+ * Only a decision Studio signed with this request's token counts; any other line is ignored.
  */
-export declare function pollArbitration(cwd: string, rid: string, timeout: number): Promise<string | null>;
+export declare function pollArbitration(cwd: string, rid: string, token: string, timeout: number): Promise<string | null>;
 export {};

package/dist/tools/execution-handlers.js

@@ -6,7 +6,7 @@
  */
 import fs from "fs-extra";
 import path from "path";
-import { FixPacketService, runTypedCommand, evaluateTypedCommand, issueArbitrationToken, } from "@rigour-labs/core";
+import { FixPacketService, runTypedCommand, evaluateTypedCommand, issueArbitrationToken, verifyArbitrationDecision, } from "@rigour-labs/core";
 import { logStudioEvent } from '../utils/config.js';
 import { notifyProgress } from '../utils/notifications.js';
 async function requireHumanApproval(cwd, command, requestId, tool) {
@@ -16,10 +16,9 @@ async function requireHumanApproval(cwd, command, requestId, tool) {
         requestId,
         tool,
         command,
-        arbitrationToken,
     });
     console.error(`[RIGOUR] Waiting for human arbitration for command: ${command}`);
-    const decision = await pollArbitration(cwd, requestId, 60000);
+    const decision = await pollArbitration(cwd, requestId, arbitrationToken, 60000);
     if (decision === 'approve')
         return null;
     await logStudioEvent(cwd, {
@@ -230,19 +229,20 @@ function formatFixPacketForSupervisor(fixPacket) {
 }
 /**
  * Fail-closed: timeout with no human decision → timeout-deny (not approve).
+ * Only a decision Studio signed with this request's token counts; any other line is ignored.
  */
-export async function pollArbitration(cwd, rid, timeout) {
+export async function pollArbitration(cwd, rid, token, timeout) {
     const eventsPath = path.join(cwd, '.rigour/events.jsonl');
     const maxIterations = Math.max(1, Math.ceil(timeout / 1000));
     for (let i = 0; i < maxIterations; i++) {
-        const found = await readArbitrationDecision(eventsPath, rid);
+        const found = await readArbitrationDecision(eventsPath, rid, token);
         if (found)
             return found;
         await sleepMs(1000);
     }
     return "timeout-deny";
 }
-async function readArbitrationDecision(eventsPath, rid) {
+async function readArbitrationDecision(eventsPath, rid, token) {
     if (!(await fs.pathExists(eventsPath)))
         return null;
     const content = await fs.readFile(eventsPath, 'utf-8');
@@ -255,7 +255,8 @@ async function readArbitrationDecision(eventsPath, rid) {
         catch {
             continue;
         }
-        if (event.tool === 'human_arbitration' && event.requestId === rid) {
+        if (event.tool === 'human_arbitration' && event.requestId === rid
+            && verifyArbitrationDecision(token, rid, event.decision, event.proof)) {
             return event.decision;
         }
     }

package/dist/tools/index-handlers.js

@@ -3,50 +3,11 @@
  *
  * Wraps PatternIndexer for agent-accessible index build/update.
  */
-import path from 'path';
 import { PatternIndexer, savePatternIndex, loadPatternIndex, getDefaultIndexPath, } from '@rigour-labs/core/pattern-index';
-import { setStaticCache, setComponentCache, recordIndexChoice, } from '@rigour-labs/core';
+import { recordIndexChoice } from '@rigour-labs/core';
 import { notifyProgress } from '../utils/notifications.js';
-import { buildTelemetryMeta, getWorkspaceCommitSha } from '../utils/context-telemetry.js';
+import { buildTelemetryMeta } from '../utils/context-telemetry.js';
 import { appendContextFooter } from '../utils/context-footer.js';
-import fs from 'fs-extra';
-async function syncIndexToCache(cwd, index) {
-    const commitSha = await getWorkspaceCommitSha(cwd);
-    const repo = path.basename(cwd);
-    const byFile = new Map();
-    for (const pattern of index.patterns) {
-        const list = byFile.get(pattern.file) ?? [];
-        list.push(pattern);
-        byFile.set(pattern.file, list);
-    }
-    for (const [filePath, patterns] of byFile) {
-        const absPath = path.join(cwd, filePath);
-        let content = '';
-        try {
-            if (await fs.pathExists(absPath)) {
-                content = await fs.readFile(absPath, 'utf-8');
-            }
-        }
-        catch {
-            content = patterns.map(p => p.signature ?? p.name).join('\n');
-        }
-        await setStaticCache(repo, 'main', filePath, content || filePath, {
-            exports: patterns.map(p => p.name),
-            rigourPatterns: patterns.map(p => `${p.type}:${p.name}`),
-            ownership: path.dirname(filePath),
-        }, cwd);
-        const componentName = path.dirname(filePath) || filePath;
-        const dossier = {
-            component: componentName,
-            responsibility: `Indexed patterns in ${filePath}`,
-            canonicalFiles: [filePath],
-            contracts: patterns.filter(p => p.type === 'interface' || p.type === 'type').map(p => p.name),
-            directConsumers: [],
-            validationCommands: [],
-        };
-        await setComponentCache(componentName, commitSha, dossier, `index-${index.lastUpdated}`, '3', cwd);
-    }
-}
 export async function handleIndex(cwd, options = {}) {
     const indexPath = options.output || getDefaultIndexPath(cwd);
     const candidateEstimate = 'Full codebase AST scan for pattern extraction';
@@ -63,7 +24,6 @@ export async function handleIndex(cwd, options = {}) {
             index = await indexer.buildIndex();
         }
         await savePatternIndex(index, indexPath);
-        await syncIndexToCache(cwd, index);
         await recordIndexChoice(cwd, index, semantic);
         notifyProgress('info', 'Pattern index complete');
         const byType = Object.entries(index.stats.byType)
@@ -76,7 +36,7 @@ export async function handleIndex(cwd, options = {}) {
         text += `- Duration: ${index.stats.indexDurationMs}ms\n`;
         text += `- Search by meaning: ${semantic ? (index.patterns.some(p => p.embedding?.length) ? 'on' : 'unavailable (local model did not load; name matching still works)') : 'off'}\n`;
         text += `- Types: ${byType}\n\n`;
-        text += `Index synced to context cache layers. Use rigour_context_scope before reading files.`;
+        text += `Use rigour_context_scope before reading files.`;
         const telemetry = buildTelemetryMeta({
             candidateText: candidateEstimate,
             returnedText: text,

package/dist/tools/memory-handlers.js

@@ -145,7 +145,7 @@ async function shareWithTeam(cwd, key, value) {
     if (!(await loadTeamConfiguration())) {
         return '\nKept as a team candidate on this machine; it is shared once team mode is configured (rigour team configure).';
     }
-    return '\nShared with your team as a candidate. Teammates\' agents receive it once someone promotes it in Studio (Knowledge › Lessons).';
+    return '\nShared with your team as a candidate. Teammates\' agents receive it once someone shares it from Studio (How it learns).';
 }
 export async function handleForget(cwd, key, scope = 'repo') {
     const store = await loadMemory(cwd, scope);

package/dist/tools/memory-recall.js

@@ -10,7 +10,7 @@
  *
  * Every returned memory passes the credential scan first; nothing is cached.
  */
-import { formatDLPAlert, createDLPAuditEntry, listKnowledgeLessons, rankByMeaning, rankMemories, scanInputForCredentials, searchTeamKnowledge } from '@rigour-labs/core';
+import { formatDLPAlert, createDLPAuditEntry, listKnowledgeLessons, rankByMeaning, rankMemories, recordLessonsServed, scanInputForCredentials, searchTeamKnowledge } from '@rigour-labs/core';
 import { loadMemory } from '../utils/config.js';
 import { appendDLPAudit, getIndexHealthBlock, wrapRecallResult } from './memory-handlers.js';
 export async function handleRecall(cwd, args = {}) {
@@ -51,6 +51,7 @@ async function recallQuery(cwd, query, entries, candidateText) {
         searchTeamKnowledge(query, 3),
     ]);
     const teamOnly = team.status === 'ready' ? team.candidates.filter(c => !lessons.some(l => l.id === c.lessonId)) : [];
+    recordLessonsServed(cwd, 'recall', [...lessons.map(l => l.subject), ...teamOnly.map(c => c.subject)]);
     const sections = [];
     if (ranked.length) {
         sections.push(`MEMORIES MATCHING "${query}":\n\n` + ranked.map(m => `## ${m.key} (${m.scope}, ${m.match} ${m.score.toFixed(2)})\n${m.value}`).join('\n\n'));

package/dist/tools/pattern-handlers.js

@@ -9,7 +9,7 @@ import path from "path";
 import yaml from "yaml";
 import fs from "fs-extra";
 import { assessPattern, loadPatternIndex, getDefaultIndexPath, SecurityDetector, } from "@rigour-labs/core/pattern-index";
-import { ConfigSchema, estimateTokenCount } from "@rigour-labs/core";
+import { ConfigSchema, estimateTokenCount, recordReuseSuggested } from "@rigour-labs/core";
 import { notifyProgress } from '../utils/notifications.js';
 import { buildTelemetryMeta } from '../utils/context-telemetry.js';
 import { appendContextFooter } from '../utils/context-footer.js';
@@ -90,6 +90,8 @@ export async function handleCheckPattern(cwd, patternName, type, intent, file, s
             resultText += action === 'BLOCK' ? `🚨 PATTERN REINVENTION DETECTED\n` : `💡 SIMILAR PATTERN EXISTS\n`;
             resultText += `"${best.pattern.name}" in ${best.pattern.file}:${best.pattern.line} (${best.matchType}, ${best.confidence}%)\n`;
             resultText += `SUGGESTION: ${assessment.suggestion}\n\n`;
+            if (action !== 'ALLOW')
+                recordReuseSuggested(cwd, patternName, `${best.pattern.name} in ${best.pattern.file}:${best.pattern.line}`, action);
         }
         if (assessment.deprecations.length) {
             resultText += `⚠️ THE EXISTING "${matchedPattern?.name}" USES SOMETHING DEPRECATED\n`;

package/dist/tools/review-handler.js

@@ -5,7 +5,7 @@
  * With no diff, the change is taken from git: uncommitted work (what the
  * agent just wrote, new files included), or the branch against `base`.
  */
-import { acknowledgeReview, buildReviewTask, diffFromGit, recordFixLessons, recordReviewOutcome, reviewChange, toReviewFinding } from "@rigour-labs/core";
+import { acknowledgeReview, buildReviewTask, diffFromGit, recordFixLessons, recordLessonsServed, recordReviewOutcome, reviewChange, toReviewFinding } from "@rigour-labs/core";
 import { notifyProgress } from '../utils/notifications.js';
 export async function handleReview(config, cwd, args) {
     notifyProgress("info", args.diff ? "Reviewing the provided diff..." : `Reviewing ${args.base ? `this branch against ${args.base}` : "uncommitted changes"}...`);
@@ -13,7 +13,9 @@ export async function handleReview(config, cwd, args) {
         const diff = args.diff ?? diffFromGit(cwd, args.base ? { mode: 'base', base: args.base } : { mode: 'working' });
         const result = await reviewChange({ cwd, config, diff, files: args.files });
         const task = args.mode === 'agent' ? buildReviewTask(cwd, diff, config.gates.deep?.router, config.gates.deep?.review_lessons, config.gates.deep?.repo_rules) : undefined;
-        const capture = recordReviewOutcome(cwd, result.findings, Object.keys(result.changedLines));
+        const capture = recordReviewOutcome(cwd, result.findings, Object.keys(result.changedLines), 'review');
+        if (task)
+            recordLessonsServed(cwd, 'review', task.lessons.map(l => l.text));
         await recordFixLessons(cwd, capture.fixes).catch(() => undefined); // learning never fails a review
         const stats = result.report?.stats;
         return text({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rigour-labs/mcp",
-  "version": "6.5.3",
+  "version": "6.6.0",
   "description": "MCP server + live dashboard for AI code governance — OWASP LLM Top 10 (10/10), real-time MCP App UI, 25+ security patterns, memory and lessons recalled by meaning, hallucinated import detection, multi-agent governance. Works with Claude, Cursor, VS Code, ChatGPT, Goose, Windsurf. Industry presets for HIPAA, SOC2, FedRAMP.",
   "engines": {
     "node": ">=22"
@@ -65,7 +65,7 @@
     "execa": "^8.0.1",
     "fs-extra": "^11.4.0",
     "yaml": "^2.8.2",
-    "@rigour-labs/core": "6.5.3"
+    "@rigour-labs/core": "6.6.0"
   },
   "devDependencies": {
     "@types/node": "^25.0.3",