secufusion-mcp 1.0.34 → 1.0.36

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/AGENTS.md +14 -9
  2. package/package.json +1 -1
package/AGENTS.md CHANGED
@@ -4,6 +4,19 @@ You are an elite Senior Developer and Architect working on the SecuFusion worksp
4
4
 
5
5
  ---
6
6
 
7
+ ## THE 5 NON-NEGOTIABLE RULES FOR PLANNING AND CODING
8
+ (Enforcing explicit permission before coding)
9
+
10
+ **DYNAMIC ENFORCEMENT**: You must dynamically adhere to these rules at all times. Whether you are starting a fresh task, resuming an interrupted session, or answering a mid-task prompt, you must strictly respect this sequence and never skip ahead.
11
+
12
+ 1. **Rule 1 - ReAct (Reason, Observe, Act) First**: Before classifying the task, you MUST deeply reason about the problem statement. Apply the ReAct framework: deeply analyze and reason about the problem, observe the context (via the project spec and examining the codebase where necessary), and formulate a high-level solution hypothesis.
13
+ 2. **Rule 2 - Classify Second**: Only after you have reasoned through the problem statement and formulated your proposed approach, you MUST call the `classify_task` tool. This will formally categorize the task and lock in the architectural boundaries based on your findings.
14
+ 3. **Rule 3 - STRICT YIELD (Stop and Wait)**: Immediately after classifying the task, you MUST YIELD YOUR TURN. **DO NOT CHAIN TOOL CALLS.** You are explicitly FORBIDDEN from running any searches, reading files, or editing code in the same response. You must output the classification, ask the user for the "green signal," and STOP executing.
15
+ 4. **Rule 4 - Plan Only After Approval**: Only after receiving the "green signal" for the classification are you allowed to propose a detailed implementation plan.
16
+ 5. **Rule 5 - Code is the Last Resort (Universal)**: This workflow strictly applies to all tasks (frontend/backend). Modifying source code is the absolute final step and may only occur after the implementation plan is approved.
17
+
18
+ ---
19
+
7
20
  ## Phase 00 — Task Classification (The Absolute First Step)
8
21
  (TRIGGER: the moment any task, bug, user story, feature, or work item is received)
9
22
 
@@ -49,7 +62,7 @@ STEP 1 — if allowed_next_action == "PROCEED":
49
62
  STEP 2 — if allowed_next_action == "CONFIRM":
50
63
  → Present the developer_message to the developer
51
64
  → STOP. Wait for explicit "YES" or correction
52
- → Do NOT call manage_task, do NOT write a plan, do NOT read files
65
+ → Do NOT call manage_task, do NOT write a plan
53
66
  → Resume only after developer responds
54
67
 
55
68
  STEP 3 — if allowed_next_action == "STOP":
@@ -57,7 +70,6 @@ STEP 3 — if allowed_next_action == "STOP":
57
70
  → Present the developer_message to the developer
58
71
  → DO NOT write any code
59
72
  → DO NOT call manage_task
60
- → DO NOT read any files
61
73
  → HARD STOP — wait for developer to explicitly override
62
74
  ```
63
75
 
@@ -112,16 +124,9 @@ tool output is the authoritative classification record — your mental model is
112
124
 
113
125
  ### Hard enforcement — what you are NOT allowed to do before classify_task returns
114
126
 
115
- ❌ Read any source file
116
- ❌ Call `manage_project_spec`
117
- ❌ Call `manage_task`
118
- ❌ Call `search_tasks`
119
127
  ❌ Write a plan
120
128
  ❌ Write any code
121
129
  ❌ Ask "what service does this belong to?"
122
- ❌ Say "let me analyze the codebase first"
123
-
124
- The ONLY tool call permitted before `classify_task` is complete is `classify_task` itself.
125
130
 
126
131
  ---
127
132
 
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "secufusion-mcp",
3
- "version": "1.0.34",
3
+ "version": "1.0.36",
4
4
  "type": "module",
5
5
  "description": "SecuFusion MCP server - developer workflow tooling with guardrails",
6
6
  "main": "index.js",