ruvector 0.2.30 → 0.2.32

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -91,6 +91,38 @@ claude mcp add ruvector -- npx ruvector mcp start
91
91
  - `midstream_status`, `midstream_attractor`, `midstream_scheduler` — Streaming analysis
92
92
  - `midstream_benchmark`, `midstream_search`, `midstream_health` — Latency benchmarks + health
93
93
 
94
+ **MCP tool-access policy (default-deny, ADR-256):** restrict the exposed/callable
95
+ tool surface with environment variables — useful for least-privilege deployments.
96
+
97
+ ```bash
98
+ # Only expose specific tools (everything else is denied)
99
+ RUVECTOR_MCP_ALLOW="hooks_route,hooks_recall" npx ruvector mcp start
100
+
101
+ # Block specific tools (deny wins over allow)
102
+ RUVECTOR_MCP_DENY="hooks_force_learn" npx ruvector mcp start
103
+
104
+ # Apply a curated read-only profile (safe, non-mutating subset)
105
+ RUVECTOR_MCP_PROFILE=readonly npx ruvector mcp start
106
+ ```
107
+
108
+ Precedence is **DENY > ALLOW/PROFILE > allow-all**. With no policy set, all tools
109
+ are available (backward compatible). Inspect the active posture with
110
+ `npx ruvector harness status --json` (see `mcp.accessControl`).
111
+
112
+ ### Harness Router (ADR-256)
113
+
114
+ `ruvector harness` surfaces the unified routing/agentic primitives ruvector ships —
115
+ cost-optimal model routing (Tiny Dancer), semantic routing, hooks routing, the MCP
116
+ server, witness-signed provenance, and SONA memory — in one place:
117
+
118
+ ```bash
119
+ npx ruvector harness status # human-readable surface + availability
120
+ npx ruvector harness status --json # structured, for tooling/CI
121
+ ```
122
+
123
+ Memory + learning loops use a stable namespace (default `ruvector`), overridable per
124
+ deployment with `RUVECTOR_MEMORY_NAMESPACE` and reported under `memory.namespace`.
125
+
94
126
  ### Brain AGI Commands
95
127
 
96
128
  Access all 8 AGI subsystems deployed at π.ruv.io: