secufusion-mcp 1.0.8 → 1.0.10

package/README.md

@@ -115,7 +115,7 @@ Manages a structured JSON state file (`.secufusion-state.json`) keyed to the cur
 | `pending_acs` | array | No | Array of strings for pending tasks (For `initialize`/`update`) |
 | `completed_acs` | array | No | Array of completed AC strings (For `update`) |
 | `next_step` | string | No | **CRITICAL for `update`**: A clear instruction on what to do next to allow instant resumption. |
-| `reference_file_path` | string | No | Path to a reference file with standard coding patterns |
+| `reference_file_path` | string | No | Path to a reference file with standard coding patterns (auto-compressed to save tokens) |
 
 **Example — Starting a new task:**
 ```json
@@ -256,6 +256,7 @@ These rules are enforced automatically — the AI will never violate them:
 ✅ No hardcoded UAT/Prod IPs or environment URLs
 ✅ Every JPA @Entity change accompanied by a Flyway .sql migration
 ✅ State in .secufusion-state.json must be fully resolved before PR is raised
+✅ Token Efficiency: Every tool response includes a 📊 Telemetry receipt tracking input/output tokens, cost, and the Session Total
 ```
 
 ---
@@ -266,8 +267,9 @@ These rules are enforced automatically — the AI will never violate them:
 |---|---|
 | `.secufusion-state.json` | Living task blueprint — tracks pending/completed ACs per branch |
 | `.rejected-patterns.json` | Cumulative log of all rejected patterns across sessions |
+| `.secufusion-tokens.json` | Persistent tracking of session-wide LLM token usage and cost |
 
-> **Tip:** Commit both files to your repo so the entire team benefits from the shared knowledge.
+> **Tip:** Commit `.secufusion-state.json` and `.rejected-patterns.json` to your repo. Do **not** commit `.secufusion-tokens.json`.
 
 ---
 

package/index.js

@@ -24,6 +24,7 @@ import { execSync } from "child_process";
 // ─────────────────────────────────────────────
 const STATE_FILE = ".secufusion-state.json";
 const REJECTED_FILE = ".rejected-patterns.json";
+const TOKEN_FILE = ".secufusion-tokens.json";
 /** Resolve a path relative to cwd (where the MCP server is invoked). */
 function resolve(file) {
     return path.resolve(process.cwd(), file);
@@ -49,6 +50,50 @@ function getCurrentBranch(cwd) {
     }
 }
 // ─────────────────────────────────────────────
+//  Telemetry & Compression helpers
+// ─────────────────────────────────────────────
+function compressCode(code) {
+    return code
+        .replace(/\/\*[\s\S]*?\*\//g, "") // Remove multi-line comments
+        .replace(/\/\/.*$/gm, "") // Remove single-line comments
+        .replace(/^\s*[\r\n]/gm, "") // Remove empty lines
+        .replace(/[ \t]+$/gm, ""); // Remove trailing whitespace
+}
+function appendTelemetry(response, inputChars) {
+    const inputTokens = Math.ceil(inputChars / 4);
+    let outputChars = 0;
+    if (response.content && Array.isArray(response.content)) {
+        for (const c of response.content) {
+            if (c.type === "text" && c.text) {
+                outputChars += c.text.length;
+            }
+        }
+    }
+    const outputTokens = Math.ceil(outputChars / 4);
+    const inputCost = (inputTokens / 1000000) * 3.0;
+    const outputCost = (outputTokens / 1000000) * 15.0;
+    const totalCost = inputCost + outputCost;
+    // Track Session Totals
+    const tokenFilePath = resolve(TOKEN_FILE);
+    let session = { inputTokens: 0, outputTokens: 0, totalCost: 0 };
+    const existing = readFileSafe(tokenFilePath);
+    if (existing) {
+        try {
+            session = JSON.parse(existing);
+        }
+        catch { }
+    }
+    session.inputTokens += inputTokens;
+    session.outputTokens += outputTokens;
+    session.totalCost += totalCost;
+    writeFile(tokenFilePath, JSON.stringify(session, null, 2));
+    const telemetry = `\n\n> 📊 Telemetry\n> **Request:** Input: ~${inputTokens} | Output: ~${outputTokens} | Cost: ${totalCost.toFixed(4)}\n> **Session Total:** Input: ~${session.inputTokens} | Output: ~${session.outputTokens} | Cost: ${session.totalCost.toFixed(4)}`;
+    if (response.content && response.content.length > 0 && response.content[0].type === "text") {
+        response.content[0].text += telemetry;
+    }
+    return response;
+}
+// ─────────────────────────────────────────────
 //  run_pre_pr_checks helpers
 // ─────────────────────────────────────────────
 const CONSOLE_LOG_REGEX = [
@@ -282,6 +327,7 @@ server.tool("manage_branch_state", "Manage the structured JSON state for the cur
         .optional()
         .describe("Explicit actionable instruction for resuming. Required for 'update'."),
 }, async ({ action, task_description, reference_file_path, pending_acs, completed_acs, next_step }) => {
+    const inputChars = JSON.stringify({ action, task_description, reference_file_path, pending_acs, completed_acs, next_step }).length;
     const cwd = process.cwd();
     const branch = getCurrentBranch(cwd);
     const statePath = path.resolve(STATE_FILE);
@@ -297,18 +343,18 @@ server.tool("manage_branch_state", "Manage the structured JSON state for the cur
     if (action === "read") {
         const branchState = state[branch];
         if (!branchState) {
-            return {
+            return appendTelemetry({
                 content: [
                     {
                         type: "text",
                         text: `No state found for branch '${branch}'. Please initialize first.`,
                     },
                 ],
-            };
+            }, inputChars);
         }
-        return {
+        return appendTelemetry({
             content: [{ type: "text", text: JSON.stringify(branchState, null, 2) }],
-        };
+        }, inputChars);
     }
     if (action === "initialize") {
         state[branch] = {
@@ -320,31 +366,42 @@ server.tool("manage_branch_state", "Manage the structured JSON state for the cur
             last_updated: new Date().toISOString()
         };
         writeFile(statePath, JSON.stringify(state, null, 2));
-        return {
+        let refText = "";
+        if (reference_file_path) {
+            const refPath = resolve(reference_file_path);
+            const content = readFileSafe(refPath);
+            if (content) {
+                refText = `\n\n**Reference Code (Compressed):**\n\`\`\`\n${compressCode(content)}\n\`\`\``;
+            }
+            else {
+                refText = `\n\n*(Warning: reference file '${reference_file_path}' not found)*`;
+            }
+        }
+        return appendTelemetry({
             content: [
                 {
                     type: "text",
-                    text: `✅ Branch state initialized for '${branch}'.\n\nState:\n${JSON.stringify(state[branch], null, 2)}`,
+                    text: `✅ Branch state initialized for '${branch}'.\n\nState:\n${JSON.stringify(state[branch], null, 2)}${refText}`,
                 },
             ],
-        };
+        }, inputChars);
     }
     if (action === "update") {
         if (!state[branch]) {
-            return {
+            return appendTelemetry({
                 isError: true,
                 content: [
                     { type: "text", text: `No state found for branch '${branch}'. Initialize first.` },
                 ],
-            };
+            }, inputChars);
         }
         if (!next_step) {
-            return {
+            return appendTelemetry({
                 isError: true,
                 content: [
                     { type: "text", text: "ERROR: 'next_step' is required when updating." },
                 ],
-            };
+            }, inputChars);
         }
         if (pending_acs)
             state[branch].pending_acs = pending_acs;
@@ -353,16 +410,16 @@ server.tool("manage_branch_state", "Manage the structured JSON state for the cur
         state[branch].next_step = next_step;
         state[branch].last_updated = new Date().toISOString();
         writeFile(statePath, JSON.stringify(state, null, 2));
-        return {
+        return appendTelemetry({
             content: [
                 {
                     type: "text",
                     text: `✅ Branch state updated for '${branch}'. Next step recorded:\n> ${next_step}`,
                 },
             ],
-        };
+        }, inputChars);
     }
-    return { content: [{ type: "text", text: "Invalid action." }] };
+    return appendTelemetry({ content: [{ type: "text", text: "Invalid action." }] }, inputChars);
 });
 // ─── Tool 2: log_rejected_pattern ────────────────────────────────────────────
 server.tool("log_rejected_pattern", "Record a coding pattern that was rejected by the team so it is never repeated. " +
@@ -390,6 +447,7 @@ server.tool("log_rejected_pattern", "Record a coding pattern that was rejected b
         .optional()
         .describe("Optional: the file or code area where this was observed."),
 }, async ({ pattern, reason, category, file_context }) => {
+    const inputChars = JSON.stringify({ pattern, reason, category, file_context }).length;
     const rejectedPath = resolve(REJECTED_FILE);
     let records = [];
     const existing = readFileSafe(rejectedPath);
@@ -411,7 +469,7 @@ server.tool("log_rejected_pattern", "Record a coding pattern that was rejected b
     };
     records.push(newEntry);
     writeFile(rejectedPath, JSON.stringify(records, null, 2));
-    return {
+    return appendTelemetry({
         content: [
             {
                 type: "text",
@@ -422,7 +480,7 @@ server.tool("log_rejected_pattern", "Record a coding pattern that was rejected b
                     `This will be checked automatically in all future architectural suggestions.`,
             },
         ],
-    };
+    }, inputChars);
 });
 // ─── Tool 3: run_pre_pr_checks ───────────────────────────────────────────────
 server.tool("run_pre_pr_checks", "Run all SecuFusion pre-PR guardrail checks across the workspace. " +
@@ -448,6 +506,7 @@ server.tool("run_pre_pr_checks", "Run all SecuFusion pre-PR guardrail checks acr
         .optional()
         .describe("Explicitly skip specific checks. Use sparingly — document the reason in your PR description."),
 }, async ({ work_item_id, root_dir, skip_checks = [] }) => {
+    const inputChars = JSON.stringify({ work_item_id, root_dir, skip_checks }).length;
     const scanRoot = root_dir ? path.resolve(root_dir) : process.cwd();
     const errors = [];
     const warnings = [];
@@ -613,10 +672,10 @@ server.tool("run_pre_pr_checks", "Run all SecuFusion pre-PR guardrail checks acr
                 `- **Ready to raise PR** 🚀\n` +
                 rejectedReminder;
     }
-    return {
+    return appendTelemetry({
         content: [{ type: "text", text: report }],
         isError: hasErrors,
-    };
+    }, inputChars);
 });
 // ─────────────────────────────────────────────
 //  Start transport

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "secufusion-mcp",
-  "version": "1.0.8",
+  "version": "1.0.10",
   "type": "module",
   "description": "SecuFusion MCP server - developer workflow tooling with guardrails",
   "main": "index.js",