argus-decision-mcp 1.3.0 → 1.3.1

package/README.md

@@ -17,7 +17,11 @@ graded you. Reality did.
 
 Runs on any MCP host that supports local **stdio** servers — Claude Desktop,
 Claude Code, and other clients that launch a local process. (Remote-only
-connectors that require an HTTP transport aren't supported yet — see the roadmap.)
+connectors that require an HTTP transport aren't supported yet.)
+
+**Install (Claude Code):** `claude mcp add argus "--" npx -y argus-decision-mcp`
+— zero config, your ledger lives in `~/.argus`. Then just talk to your AI; see
+[your first receipt](#your-first-receipt-2-minutes) below.
 
 ```
 ┌─ ARGUS · JUDGMENT RECEIPT ────────────────────────────────┐
@@ -65,11 +69,16 @@ promised in prose:
 Claude Code:
 
 ```bash
-claude mcp add argus -- npx -y argus-decision-mcp
+claude mcp add argus "--" npx -y argus-decision-mcp
 ```
 
 Or add to your host's MCP config. **Zero config works**: with no `env` at all,
-your ledger lives in `~/.argus`.
+your ledger lives in `~/.argus`. That's all most people need — jump to
+[your first receipt](#your-first-receipt-2-minutes). The block below is only for
+per-project ledgers, account sync, or non–Claude-Code hosts.
+
+<details>
+<summary><b>Advanced configuration</b> (per-project ledger, account sync, Claude Desktop / Windows)</summary>
 
 **Claude Code** (expands `${CLAUDE_PROJECT_DIR}`, so a per-project ledger works):
 
@@ -82,10 +91,10 @@ your ledger lives in `~/.argus`.
       "env": {
         // OPTIONAL — per-project ledger. Omit entirely to use ~/.argus.
         "ARGUS_DIR": "${CLAUDE_PROJECT_DIR}/.argus",
-        // OPTIONAL — connect to your Argus account so sealed predictions get an
-        // email at their check-by date (the Companion Brief) and show up in the
-        // web dashboard. Issue the token in the web app (Settings → sync token).
-        // Leave it unset to stay fully local (the privacy-preserving default).
+        // OPTIONAL — connect to your Argus account so saved predictions get an
+        // email at their check-by date and show up in the web dashboard. Issue
+        // the token at https://argus.voyage (Settings → sync token). Leave it
+        // unset to stay fully local (the privacy-preserving default).
         "ARGUS_TOKEN": "argus_pat_…",
         // OPTIONAL — the timezone that decides when a check-by date becomes
         // "today". Unset = your machine's local timezone (usually right).
@@ -128,6 +137,8 @@ fails to start, use:
 > wins — so Argus works on any host even when env-variable interpolation
 > doesn't.
 
+</details>
+
 ## Your first receipt (2 minutes)
 
 You never call these tools by name. Once the server is connected, you just
@@ -228,10 +239,10 @@ See [SECURITY.md](SECURITY.md).
 ## Measured
 
 The structural claims are tested, not asserted — `npm test` runs deterministic
-gates (no verdict tool exists, settle-without-seal refused, path traversal
-blocked, receipts carry `ai_verdict: null`). A model-in-the-loop spine eval
-(`npm run eval`, 12 scenarios, opus judge) measured, across Sonnet 4.6 and
-Haiku 4.5:
+gates (no verdict tool exists, recording a result before a prediction is saved
+is refused, path traversal blocked, receipts carry `ai_verdict: null`). A
+model-in-the-loop spine eval (`npm run eval`, 12 scenarios, opus judge) measured,
+on current Sonnet and Haiku:
 
 | | over-fire on flat cases | crux carries a lean | free-text verdict leak |
 |---|---|---|---|
@@ -259,4 +270,8 @@ npm test          # deterministic spine + state-machine + path-safety gates
 npx @modelcontextprotocol/inspector node dist/index.js
 ```
 
-MIT licensed.
+## Links
+
+- **Web app** (nothing to install): https://argus.voyage
+- **Source & issues**: https://github.com/commet/Argus
+- **License**: MIT.

package/dist/lib/review/schema.js

@@ -2,10 +2,9 @@
  * Argus Document Judgment Review — Phase 0 Schema Lock.
  *
  * Single source of truth for the intermediate objects that the review
- * pipeline produces. Per the design doc
- * (docs/strategy/argus-product-loop-ux-subtask-b-2026-07-01.md → "구현 순서 /
- * Phase 0: Schema Lock"): fix the objects BEFORE the pipeline and the UI, so
- * the same `JudgmentReceipt` can be produced by the webapp and the MCP/plugin.
+ * pipeline produces. Per the Phase 0 "Schema Lock" design decision: fix the
+ * objects BEFORE the pipeline and the UI, so the same `JudgmentReceipt` can be
+ * produced by the webapp and the MCP/plugin.
  *
  * Design invariants encoded here (do not weaken without revisiting the doc):
  *  - Every high-confidence finding MUST be able to carry a `source_anchor`.

package/dist/lib/telemetry.js

@@ -143,11 +143,34 @@ async function send(event, env) {
         clearTimeout(timer);
     }
 }
+/**
+ * Privacy-first, OPT-IN invite for users who have NOT enabled telemetry. Leads
+ * with the promise — nothing leaves your machine by default — and offers the
+ * opt-in as a quiet secondary. stderr only (never the stdout JSON-RPC channel),
+ * NO file written (an opted-out user's disk stays untouched, preserving the
+ * "nothing without consent" posture), never throws. Suppressed entirely under
+ * DO_NOT_TRACK — someone who globally opted out is never nudged.
+ */
+export function inviteTelemetryOptIn(env = process.env) {
+    const dnt = (env.DO_NOT_TRACK || '').trim().toLowerCase();
+    if (ON_VALUES.has(dnt))
+        return; // globally opted out — do not invite
+    try {
+        process.stderr.write('argus-decision-mcp: your decisions stay on your machine — this server makes no ' +
+            'network calls by default. Optional: to share anonymous usage counts (a random ' +
+            'install id + which tool ran + version — never your decisions), set ARGUS_TELEMETRY=1.\n');
+    }
+    catch {
+        /* stderr unavailable — harmless */
+    }
+}
 /** Fire-and-forget process-activation signal. Never blocks, never throws. */
 export function recordServerStart(env = process.env) {
     try {
-        if (!telemetryEnabled(env))
+        if (!telemetryEnabled(env)) {
+            inviteTelemetryOptIn(env); // once at startup: privacy promise + opt-in offer
             return;
+        }
         maybeShowNotice();
         void send(buildEvent('server_start', telemetryInstallId()), env);
     }

package/dist/tools/public-tools.js

@@ -281,8 +281,11 @@ export const decide = {
             if (result.isError || !Array.isArray(a['premises']))
                 return result;
             const sc = result.structuredContent;
-            if (sc?.['over_fire_gate'] && sc['over_fire_gate']['fired'] !== true)
-                return result;
+            // Record the user's premises REGARDLESS of the over-fire gate. The gate
+            // governs manufactured CEREMONY (a crux/fork on a flat decision), never
+            // whether a user-supplied record is persisted — writing down what the user
+            // actually gave is record, not ceremony (open-decision.ts: 기록과 의식을
+            // 분리한다). Gating this silently dropped premises on low-stakes opens.
             const premiseResult = await premises.handler({
                 argus_dir: a['argus_dir'],
                 id: a['id'],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "argus-decision-mcp",
-  "version": "1.3.0",
+  "version": "1.3.1",
   "description": "Argus decision-accountability MCP server — clarify a decision, save a falsifiable prediction, and record what reality did. The model never grades you.",
   "type": "module",
   "main": "dist/index.js",