secufusion-mcp 1.0.9 → 1.0.10

package/README.md

@@ -115,7 +115,7 @@ Manages a structured JSON state file (`.secufusion-state.json`) keyed to the cur
 | `pending_acs` | array | No | Array of strings for pending tasks (For `initialize`/`update`) |
 | `completed_acs` | array | No | Array of completed AC strings (For `update`) |
 | `next_step` | string | No | **CRITICAL for `update`**: A clear instruction on what to do next to allow instant resumption. |
-| `reference_file_path` | string | No | Path to a reference file with standard coding patterns |
+| `reference_file_path` | string | No | Path to a reference file with standard coding patterns (auto-compressed to save tokens) |
 
 **Example — Starting a new task:**
 ```json
@@ -256,6 +256,7 @@ These rules are enforced automatically — the AI will never violate them:
 ✅ No hardcoded UAT/Prod IPs or environment URLs
 ✅ Every JPA @Entity change accompanied by a Flyway .sql migration
 ✅ State in .secufusion-state.json must be fully resolved before PR is raised
+✅ Token Efficiency: Every tool response includes a 📊 Telemetry receipt tracking input/output tokens, cost, and the Session Total
 ```
 
 ---
@@ -266,8 +267,9 @@ These rules are enforced automatically — the AI will never violate them:
 |---|---|
 | `.secufusion-state.json` | Living task blueprint — tracks pending/completed ACs per branch |
 | `.rejected-patterns.json` | Cumulative log of all rejected patterns across sessions |
+| `.secufusion-tokens.json` | Persistent tracking of session-wide LLM token usage and cost |
 
-> **Tip:** Commit both files to your repo so the entire team benefits from the shared knowledge.
+> **Tip:** Commit `.secufusion-state.json` and `.rejected-patterns.json` to your repo. Do **not** commit `.secufusion-tokens.json`.
 
 ---
 

package/index.js

@@ -24,6 +24,7 @@ import { execSync } from "child_process";
 // ─────────────────────────────────────────────
 const STATE_FILE = ".secufusion-state.json";
 const REJECTED_FILE = ".rejected-patterns.json";
+const TOKEN_FILE = ".secufusion-tokens.json";
 /** Resolve a path relative to cwd (where the MCP server is invoked). */
 function resolve(file) {
     return path.resolve(process.cwd(), file);
@@ -71,8 +72,22 @@ function appendTelemetry(response, inputChars) {
     const outputTokens = Math.ceil(outputChars / 4);
     const inputCost = (inputTokens / 1000000) * 3.0;
     const outputCost = (outputTokens / 1000000) * 15.0;
-    const totalCost = (inputCost + outputCost).toFixed(4);
-    const telemetry = `\n\n> 📊 Telemetry\n> Input Tokens: ~${inputTokens}\n> Output Tokens: ~${outputTokens}\n> Estimated Cost: ${totalCost}`;
+    const totalCost = inputCost + outputCost;
+    // Track Session Totals
+    const tokenFilePath = resolve(TOKEN_FILE);
+    let session = { inputTokens: 0, outputTokens: 0, totalCost: 0 };
+    const existing = readFileSafe(tokenFilePath);
+    if (existing) {
+        try {
+            session = JSON.parse(existing);
+        }
+        catch { }
+    }
+    session.inputTokens += inputTokens;
+    session.outputTokens += outputTokens;
+    session.totalCost += totalCost;
+    writeFile(tokenFilePath, JSON.stringify(session, null, 2));
+    const telemetry = `\n\n> 📊 Telemetry\n> **Request:** Input: ~${inputTokens} | Output: ~${outputTokens} | Cost: ${totalCost.toFixed(4)}\n> **Session Total:** Input: ~${session.inputTokens} | Output: ~${session.outputTokens} | Cost: ${session.totalCost.toFixed(4)}`;
     if (response.content && response.content.length > 0 && response.content[0].type === "text") {
         response.content[0].text += telemetry;
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "secufusion-mcp",
-  "version": "1.0.9",
+  "version": "1.0.10",
   "type": "module",
   "description": "SecuFusion MCP server - developer workflow tooling with guardrails",
   "main": "index.js",