secufusion-mcp 2.2.3 → 2.2.4

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "secufusion-mcp",
   "description": "SecuFusion MSSP platform dev agent — project-level spec driven, tenant-isolation enforced, zero-trust guardrails. 5 Core Slash Commands: /sfn-init (dynamic DNA + architecture diagram + watcher), /sfn-plan (philosophy check + intent WHY + classify + plan), /sfn-code (spec-driven implementation), /sfn-review (zero-tolerance 3-tier PR gate), /sfn-explore (on-demand service graph or blast-radius analysis).",
-  "version": "2.2.3",
+  "version": "2.2.4",
   "author": {
     "name": "Motivity Labs"
   },

package/README.md

@@ -134,7 +134,7 @@ The AI is now **proactively context-aware** — it knows your entire architectur
 
 ---
 
-## 🤖 The Autonomous AI Reviewer Engine (v2.2.3)
+## 🤖 The Autonomous AI Reviewer Engine (v2.2.4)
 
 Version 2.2.0 removes the legacy, rigid TypeScript tools (`run_pre_pr_checks`) and replaces them with a fully standalone, AI-driven markdown execution contract (`/sfn:review`). 
 
@@ -159,13 +159,13 @@ npx secufusion-mcp
 ### Option 2 — Global install
 
 ```bash
-npm install -g secufusion-mcp@2.2.3
+npm install -g secufusion-mcp@2.2.4
 ```
 
 ### Option 3 — Local project install
 
 ```bash
-npm install --save-dev secufusion-mcp@2.2.3
+npm install --save-dev secufusion-mcp@2.2.4
 ```
 
 ---
@@ -731,7 +731,7 @@ Phase 4: /sfn:review → APPROVED / DISCUSS
 
 As of version **1.0.13+**, `secufusion-mcp` globally bundles both `.secufusion-project-spec.json` and `AGENTS.md`. You **no longer need to copy these files** into every single repository!
 
-When you install globally (`npm install -g secufusion-mcp@2.2.3`), the AI can automatically read your rules and project spec on the fly from the global installation.
+When you install globally (`npm install -g secufusion-mcp@2.2.4`), the AI can automatically read your rules and project spec on the fly from the global installation.
 
 **How to load the Rules in a new project:**
 Depending on your AI client's capabilities, you can load the rules instantly by telling the AI:

package/commands/sfn-init.md

@@ -208,6 +208,11 @@ WORKSPACE-OWNED sections (preserved from scan, updated with new scan results):
    The full history must be preserved so any developer can audit exactly what changed
    on their machine and when.
 
+6. **Generate Human-Readable Release Notes**
+   In addition to appending the JSON changelog, `/sfn-init` MUST generate a Markdown release notes file in a dedicated tracking folder so developers can easily read what changed without parsing JSON.
+   - **Path:** `.secufusion/releases/v{new_version}.md`
+   - **Format:** Write a clean Markdown document summarizing the version bump, new golden rules added, modified terminology, and any workspace topology changes (new services, topics, etc.) discovered during the scan.
+
 6. **Write merged file**
    Write the final merged JSON to workspace root — with the updated `_changelog` included.
    Report what changed:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "secufusion-mcp",
-  "version": "2.2.3",
+  "version": "2.2.4",
   "type": "module",
   "description": "Project-level spec driven AI workflow tooling for SecuFusion, MCP server - developer workflow tooling with guardrails",
   "main": "mcp/dist/server.js",