secufusion-mcp 1.0.55 → 1.0.57

package/README.md

@@ -697,6 +697,12 @@ As of version **1.0.50**, the MCP server strictly enforces **Rule 0** and adds i
 - **Frontend Service Resolution**: `get_service` now intelligently resolves frontend and extension repositories (like `sfn-web-ui`) even when they aren't explicitly keyed as backend microservices.
 - **Explicit AC Recognition**: `classify_task` now overrides `VAGUE` completeness warnings if it detects explicit Acceptance Criteria in the task description.
 
+### Strict Comment Guardrails & Slugification Fixes (v1.0.55+)
+
+As of version **1.0.55**, the MCP server introduces two new quality-of-life and enforcement updates:
+- **No Ticket IDs in Comments**: A strict rule has been added to `AGENTS.md` and the Tier 2 AI Reviewer now explicitly flags any inline ticket IDs (e.g., `// WI-1097`) inside code comments as a CRITICAL violation. Comments must explain the durable WHY, not point to decaying tracking tickets.
+- **Clean Task Slugs**: `manage_task initialize` now automatically strips leading ticket prefixes (like `BUG-1173: `) from the title before generating the folder slug, preventing duplicated IDs in the folder path (e.g., no more `1173-bug-1173-`).
+
 ---
 
 ## Talking to the AI — What You'll Ever Say

package/index.js

@@ -4580,9 +4580,13 @@ server.tool("generate_ado_comments", "Generates and formats the final Azure DevO
         if (!fs.existsSync(classifDir)) {
             fs.mkdirSync(classifDir, { recursive: true });
         }
-        const commentsFile = path.join(classifDir, `${work_item_id}-comments.json`);
-        writeFile(commentsFile, JSON.stringify({ layman_summary, technical_deep_dive, generated_at: new Date().toISOString() }, null, 2));
-        out += `✅ Comments persisted to \`.secufusion/classifications/${work_item_id}-comments.json\`\n`;
+        const commentsFile = path.join(classifDir, `${work_item_id}-comments.md`);
+        const mdContent = `# ADO Board Comments for ${work_item_id}\n\n` +
+            `*Generated at: ${new Date().toISOString()}*\n\n` +
+            `## 1. Layman Summary\n${layman_summary}\n\n` +
+            `## 2. Technical Deep-Dive\n${technical_deep_dive}\n`;
+        writeFile(commentsFile, mdContent);
+        out += `✅ Comments persisted to \`.secufusion/classifications/${work_item_id}-comments.md\`\n`;
     }
     catch (e) {
         // ignore

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "secufusion-mcp",
-  "version": "1.0.55",
+  "version": "1.0.57",
   "type": "module",
   "description": "SecuFusion MCP server - developer workflow tooling with guardrails",
   "main": "index.js",