secufusion-mcp 2.2.0 → 2.2.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +21 -6
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -134,8 +134,22 @@ The AI is now **proactively context-aware** — it knows your entire architectur
|
|
|
134
134
|
|
|
135
135
|
---
|
|
136
136
|
|
|
137
|
+
## 🤖 The Autonomous AI Reviewer Engine (v2.2.0)
|
|
138
|
+
|
|
139
|
+
Version 2.2.0 removes the legacy, rigid TypeScript tools (`run_pre_pr_checks`) and replaces them with a fully standalone, AI-driven markdown execution contract (`/sfn:review`).
|
|
140
|
+
|
|
141
|
+
### Why is this significant?
|
|
142
|
+
1. **Context-Aware, Not Regex-Bound**: The old tools blindly searched for regex patterns (like `@TenantScopeException`). The new AI reviewer genuinely reads the file, understands *how* the `tenantId` is flowing through the thread context, and makes intelligent architectural judgments.
|
|
143
|
+
2. **Zero Dependencies**: You no longer need to rely on the MCP server executing heavy AST-parsing scripts under the hood. The AI handles the review completely independently.
|
|
144
|
+
3. **10 Strict Passes**: The reviewer is contractually bound to execute 10 precise checks before it can output a verdict, including Kafka blocking detection, Acceptance Criteria coverage, Decision Drift (did you write code you didn't plan?), and Rejected Pattern enforcement.
|
|
145
|
+
4. **Ruthless Persona**: We injected a specific persona into the reviewer. It is explicitly forbidden from saying "Looks good to me!" to be polite. It operates as a senior architect with a zero-tolerance policy for guardrail violations.
|
|
146
|
+
|
|
147
|
+
---
|
|
148
|
+
|
|
137
149
|
## Installation
|
|
138
150
|
|
|
151
|
+
[](https://claude.ai/marketplace/secufusion-mcp)
|
|
152
|
+
|
|
139
153
|
### Option 1 — `npx` (no install required)
|
|
140
154
|
|
|
141
155
|
```bash
|
|
@@ -145,13 +159,13 @@ npx secufusion-mcp
|
|
|
145
159
|
### Option 2 — Global install
|
|
146
160
|
|
|
147
161
|
```bash
|
|
148
|
-
npm install -g secufusion-mcp@2.
|
|
162
|
+
npm install -g secufusion-mcp@2.2.0
|
|
149
163
|
```
|
|
150
164
|
|
|
151
165
|
### Option 3 — Local project install
|
|
152
166
|
|
|
153
167
|
```bash
|
|
154
|
-
npm install --save-dev secufusion-mcp@2.
|
|
168
|
+
npm install --save-dev secufusion-mcp@2.2.0
|
|
155
169
|
```
|
|
156
170
|
|
|
157
171
|
---
|
|
@@ -488,8 +502,9 @@ These rules are enforced automatically — the AI will never violate them:
|
|
|
488
502
|
│ Phase 3 │ log_rejected_pattern │
|
|
489
503
|
│ Correction │ → Record mistakes permanently to avoid repeat │
|
|
490
504
|
├──────────────┼──────────────────────────────────────────────────────────────┤
|
|
491
|
-
│ Phase 4 │
|
|
492
|
-
│ PR Handoff │ →
|
|
505
|
+
│ Phase 4 │ /sfn:review (Standalone AI Reviewer Engine) │
|
|
506
|
+
│ PR Handoff │ → Enforces 10 strict architecture passes directly on code │
|
|
507
|
+
│ │ → manage_task (action=complete) → pr-summary.md generated │
|
|
493
508
|
│ │ → Document Generation (ado-comments.md, pr-comment.md) │
|
|
494
509
|
└──────────────┴──────────────────────────────────────────────────────────────┘
|
|
495
510
|
```
|
|
@@ -707,7 +722,7 @@ Phase 1: search_tasks (always) → get_task_history → manage_task initialize
|
|
|
707
722
|
↓
|
|
708
723
|
Phase 2: code + log_file_touched + log_decision + add_scenario (ALL mandatory)
|
|
709
724
|
↓
|
|
710
|
-
Phase 4:
|
|
725
|
+
Phase 4: /sfn:review → APPROVED / DISCUSS
|
|
711
726
|
→ manage_task complete → pr-summary.md generated
|
|
712
727
|
→ Generate PR & ADO Documents natively using templates
|
|
713
728
|
```
|
|
@@ -716,7 +731,7 @@ Phase 4: run_pre_pr_checks_with_reviewer_agent → APPROVED / DISCUSS
|
|
|
716
731
|
|
|
717
732
|
As of version **1.0.13+**, `secufusion-mcp` globally bundles both `.secufusion-project-spec.json` and `AGENTS.md`. You **no longer need to copy these files** into every single repository!
|
|
718
733
|
|
|
719
|
-
When you install globally (`npm install -g secufusion-mcp@2.
|
|
734
|
+
When you install globally (`npm install -g secufusion-mcp@2.2.0`), the AI can automatically read your rules and project spec on the fly from the global installation.
|
|
720
735
|
|
|
721
736
|
**How to load the Rules in a new project:**
|
|
722
737
|
Depending on your AI client's capabilities, you can load the rules instantly by telling the AI:
|
package/package.json
CHANGED