secufusion-mcp 2.3.0 → 2.4.1

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "secufusion-mcp",
   "description": "SecuFusion MSSP platform dev agent — project-level spec driven, tenant-isolation enforced, zero-trust guardrails. 5 Core Slash Commands: /sfn-init (dynamic DNA + architecture diagram + watcher), /sfn-plan (philosophy check + intent WHY + classify + plan), /sfn-code (spec-driven implementation), /sfn-review (zero-tolerance 3-tier PR gate), /sfn-explore (on-demand service graph or blast-radius analysis).",
-  "version": "2.3.0",
+  "version": "2.4.1",
   "author": {
     "name": "Motivity Labs"
   },

package/mcp/dist/server.js

@@ -1556,15 +1556,31 @@ server.tool("philosophy_check", "MANDATORY PHASE -1 STEP — runs BEFORE classif
     // Check cache
     const philosophyDir = resolve(".secufusion/philosophy");
     const philosophyFile = path.join(philosophyDir, `${work_item_id}.json`);
+    let cached = null;
     if (fs.existsSync(philosophyFile)) {
         try {
-            const cached = JSON.parse(readFileSafe(philosophyFile) || "null");
+            cached = JSON.parse(readFileSafe(philosophyFile) || "null");
             if (cached && (cached.philosophy_verdict === "PHILOSOPHY_PASS" || cached.philosophy_verdict === "PHILOSOPHY_ADVISORY")) {
                 return appendTelemetry({ content: [{ type: "text", text: `[PHILOSOPHY CACHED] ${work_item_id} — verdict: ${cached.philosophy_verdict}\n\n${cached.developer_message}` }] }, inputChars);
             }
         }
         catch { }
     }
+    // Mandatory interview for ALL work items (features, bugs, chores, etc.)
+    if (!cached || !cached.interview_completed) {
+        const interviewText = `[PHILOSOPHY FAIL] ${work_item_id}\n\nBefore I help you build this, talk to me.\n\nWhat problem is this solving?\nWalk me through what the user is experiencing today\nwithout this feature. What's broken? What's painful?\nWhat happens if we don't build this at all?\n\nWho will actually use this and how often?\nIs this solving a problem for 1 client or all tenants?\n\nI see you said WHO: CONFIRMED —\nbut confirmed by whom exactly?\nIs that a verbal yes in a meeting or\na written requirement from the client?\nThose are very different things.\n\nDo NOT call classify_task. Re-run philosophy_check after resolving.`;
+        if (!fs.existsSync(philosophyDir))
+            fs.mkdirSync(philosophyDir, { recursive: true });
+        try {
+            writeFile(philosophyFile, JSON.stringify({
+                work_item_id,
+                philosophy_verdict: "PHILOSOPHY_FAIL",
+                interview_completed: true
+            }, null, 2));
+        }
+        catch { }
+        return appendTelemetry({ content: [{ type: "text", text: interviewText }] }, inputChars);
+    }
     const wsRoot = getWorkspaceRoot();
     let rejectedPatterns = [];
     const rejRaw = readFileSafe(resolve(REJECTED_FILE));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "secufusion-mcp",
-  "version": "2.3.0",
+  "version": "2.4.1",
   "type": "module",
   "description": "Project-level spec driven AI workflow tooling for SecuFusion, MCP server - developer workflow tooling with guardrails",
   "main": "mcp/dist/server.js",