secufusion-mcp 1.0.33 → 1.0.35

package/AGENTS.md

@@ -49,7 +49,7 @@ STEP 1 — if allowed_next_action == "PROCEED":
 STEP 2 — if allowed_next_action == "CONFIRM":
   → Present the developer_message to the developer
   → STOP. Wait for explicit "YES" or correction
-  → Do NOT call manage_task, do NOT write a plan, do NOT read files
+  → Do NOT call manage_task, do NOT write a plan
   → Resume only after developer responds
 
 STEP 3 — if allowed_next_action == "STOP":
@@ -57,7 +57,6 @@ STEP 3 — if allowed_next_action == "STOP":
   → Present the developer_message to the developer
   → DO NOT write any code
   → DO NOT call manage_task
-  → DO NOT read any files
   → HARD STOP — wait for developer to explicitly override
 ```
 
@@ -112,16 +111,9 @@ tool output is the authoritative classification record — your mental model is
 
 ### Hard enforcement — what you are NOT allowed to do before classify_task returns
 
-❌ Read any source file  
-❌ Call `manage_project_spec`  
-❌ Call `manage_task`  
-❌ Call `search_tasks`  
 ❌ Write a plan  
 ❌ Write any code  
 ❌ Ask "what service does this belong to?"  
-❌ Say "let me analyze the codebase first"  
-
-The ONLY tool call permitted before `classify_task` is complete is `classify_task` itself.
 
 ---
 
@@ -371,6 +363,10 @@ After making any architectural decision:
                      rationale: "<why>")
   — call this for every non-obvious decision, not just big ones
 
+After finding an optimal/efficient solution for a problem:
+  — You must dynamically seek the most optimized, core solution for a given problem statement, even if similar problems have been solved before.
+  — Once identified (through reasoning, `get_task_history`, or `get_pattern_from_task`), you MUST add a comment block directly into the source code where the solution is implemented. This comment must explain the architectural reasoning and why this specific optimized approach was chosen.
+
 After writing any test scenario:
   → call manage_task(action: "add_scenario",
                      scenario: "<description>",
@@ -444,6 +440,11 @@ STEP 3: if run_pre_pr_checks returns ANY error:
         → repeat until ZERO errors — no exceptions
 
 STEP 4: raise PR only when run_pre_pr_checks reports zero errors
+
+STEP 5: call generate_ado_comments(work_item_id, layman_summary, technical_deep_dive)
+        — Use this tool to output two distinct comments for the developer to paste into the Azure DevOps (ADO) board:
+          1. **Layman Summary**: A short, fundamental, non-technical explanation of the business value and what was resolved.
+          2. **Technical Deep-Dive**: A comprehensive, highly technical breakdown of the architectural changes, core optimizations, and exact implementation details.
 ```
 
 ### Hard enforcement

package/index.js

@@ -1866,7 +1866,16 @@ server.tool("classify_task", "MANDATORY FIRST STEP for every task without except
                 .replace(/_/g, " ")
                 .split(" ")
                 .filter(w => w.length > 3);
-            const ruleApplies = ruleWords.some(w => taskText.includes(w)) || Object.keys(spec.coding_patterns).some(k => taskText.includes(k.toLowerCase().replace(/_/g, " ")));
+            const stopWords = new Set(["the", "and", "must", "should", "only", "all", "backend", "frontend", "handled", "produces", "this", "that", "with", "from", "have", "when", "even", "though", "be", "by", "are", "is", "in", "to", "for", "of"]);
+            const textWords = ruleStr.replace(/[^a-z0-9\s]/g, "").split(/\s+/).filter(w => w.length >= 3 && !stopWords.has(w));
+            const taskWords = new Set(taskText.replace(/[^a-z0-9\s]/g, "").split(/\s+/));
+            let overlapCount = 0;
+            const uniqueTextWords = new Set(textWords);
+            for (const w of uniqueTextWords) {
+                if (taskWords.has(w))
+                    overlapCount++;
+            }
+            const ruleApplies = ruleWords.some(w => taskText.includes(w)) || Object.keys(spec.coding_patterns).some(k => taskText.includes(k.toLowerCase().replace(/_/g, " "))) || overlapCount >= 2;
             if (!ruleApplies)
                 continue;
             const isFrontendOwnership = FRONTEND_OWNERSHIP_PHRASES.some(phrase => ruleStr.includes(phrase));
@@ -2983,5 +2992,31 @@ server.tool("get_secufusion_rules", "Fetches the mandatory AGENTS.md workflow ru
         content: [{ type: "text", text: content }]
     }, 0);
 });
+server.tool("generate_ado_comments", "Generates and formats the final Azure DevOps board comments for a completed task. Call this in Phase 4 after PR checks pass.", {
+    work_item_id: z.string().describe("Azure DevOps work item ID, e.g. 'BUG-1140'."),
+    layman_summary: z.string().describe("A short, fundamental, non-technical explanation of the business value and what was resolved."),
+    technical_deep_dive: z.string().describe("A comprehensive, highly technical breakdown of the architectural changes, core optimizations, and exact implementation details.")
+}, async ({ work_item_id, layman_summary, technical_deep_dive }) => {
+    const inputChars = JSON.stringify({ work_item_id, layman_summary, technical_deep_dive }).length;
+    let out = `## ADO Board Comments for ${work_item_id}\n\n`;
+    out += `Please paste the following two comments into the Azure DevOps board:\n\n`;
+    out += `### 1. Layman Summary\n`;
+    out += `\`\`\`text\n${layman_summary}\n\`\`\`\n\n`;
+    out += `### 2. Technical Deep-Dive\n`;
+    out += `\`\`\`text\n${technical_deep_dive}\n\`\`\`\n\n`;
+    try {
+        const classifDir = resolve(".secufusion/classifications");
+        if (!fs.existsSync(classifDir)) {
+            fs.mkdirSync(classifDir, { recursive: true });
+        }
+        const commentsFile = path.join(classifDir, `${work_item_id}-comments.json`);
+        writeFile(commentsFile, JSON.stringify({ layman_summary, technical_deep_dive, generated_at: new Date().toISOString() }, null, 2));
+        out += `✅ Comments persisted to \`.secufusion/classifications/${work_item_id}-comments.json\`\n`;
+    }
+    catch (e) {
+        // ignore
+    }
+    return appendTelemetry({ content: [{ type: "text", text: out }] }, inputChars);
+});
 const transport = new StdioServerTransport();
 await server.connect(transport);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "secufusion-mcp",
-  "version": "1.0.33",
+  "version": "1.0.35",
   "type": "module",
   "description": "SecuFusion MCP server - developer workflow tooling with guardrails",
   "main": "index.js",