secufusion-mcp 2.4.1 → 2.5.1

package/.claude-plugin/plugin.json

@@ -1,10 +1,10 @@
 {
   "name": "secufusion-mcp",
   "description": "SecuFusion MSSP platform dev agent — project-level spec driven, tenant-isolation enforced, zero-trust guardrails. 5 Core Slash Commands: /sfn-init (dynamic DNA + architecture diagram + watcher), /sfn-plan (philosophy check + intent WHY + classify + plan), /sfn-code (spec-driven implementation), /sfn-review (zero-tolerance 3-tier PR gate), /sfn-explore (on-demand service graph or blast-radius analysis).",
-  "version": "2.4.1",
+  "version": "2.5.1",
   "author": {
     "name": "Motivity Labs"
   },
   "homepage": "https://github.com/MLMCPS/secufusion-mcp",
   "license": "ISC"
-}
+}

package/agents/AGENTS.md

@@ -45,15 +45,15 @@ Call `philosophy_check` AFTER DNA is loaded — never before. The engine us
 - Which Kafka topics fan out to how many consumers
 - Whether your description violates any golden rules
 
-**This check is completely invisible to the user.** You do not announce it. You do not show scores, verdicts, or "philosophy" terminology. You surface a concern to the user only if the verdict is FAIL or BLOCKED — and you translate it into plain developer language.
+**This check is completely invisible to the user.** You do not announce it. You do not show verdicts or "philosophy" terminology. You surface a concern to the user only if the architectural risk is high or the intent is missing — and you translate it into plain developer language.
 
-For `bug` and `hotfix`: philosophy check **fully runs** — no skip. The scoring engine applies relaxed thresholds: WHY gets a +20 head-start (something is broken = implicit justification), WHO gets a +15 head-start (reporter = implicit authority), and `NO_JUSTIFICATION` is not a blocking verdict. However, ADVISORY and FAIL still fire normally — a high-risk bug fix (auth regression, data-loss, multi-tenant blast) will still be challenged.
+For `bug` and `hotfix`: philosophy check **fully runs** — no skip. The agent acts as the reasoning engine against the Project DNA. Bugs inherently have a "WHY" (something is broken) and an implicit authority (the reporter), but the engine evaluates the **blast radius and architectural risk**. A high-risk bug fix (auth regression, data-loss, multi-tenant blast) will still be challenged if the rollback plan or scope isn't clear.
 
 **Verdicts:**
-- `PHILOSOPHY_PASS` → Silent. Proceed immediately.
-- `PHILOSOPHY_ADVISORY` → Note concerns in `decisions.json`. Tell the user briefly what to watch out for. Continue.
-- `PHILOSOPHY_FAIL` → STOP. Ask the user what is missing (no jargon). Wait for answers. Re-run philosophy_check.
-- `PHILOSOPHY_BLOCKED` → STOP completely. Tell the user the risk and who must sign off. Do not plan. Do not code.
+- **Silent Pass** → Bug is isolated or safe. Proceed immediately.
+- **Advisory** → Note concerns in `decisions.json`. Tell the user briefly what to watch out for. Continue.
+- **Fail** → STOP. Ask the user what is missing (no jargon). Wait for answers. Re-run philosophy_check.
+- **Blocked** → STOP completely. Tell the user the risk and who must sign off. Do not plan. Do not code.
 
 ---
 
@@ -323,4 +323,4 @@ Java Microservices (all behind gateway):
 Services WITHOUT migrations: `sfn-auth-api`, `sfn-eureka-api`, `sfn-gateway-api`, `sfn-policy-api`, `sfn-web-ui`, `snf-browser-extn`
 
 NEVER guess migration version numbers. Always read `.secufusion-migrations.json` first.
-
+

package/mcp/dist/server.js

@@ -1547,40 +1547,6 @@ server.tool("philosophy_check", "MANDATORY PHASE -1 STEP — runs BEFORE classif
     client_confirmed: z.boolean().optional().describe("Has the decision maker explicitly confirmed this is needed?"),
 }, async ({ work_item_id, title, description, task_type, reported_by, client_confirmed }) => {
     const inputChars = JSON.stringify({ work_item_id, title, description, task_type }).length;
-    // Bugs and hotfixes run through the full philosophy engine with relaxed scoring:
-    //   WHY  → +20 head-start (defects have an inherent "WHY": something is broken)
-    //   WHO  → +15 head-start (reporter is implicit authority for a defect)
-    //   RISK → NO_JUSTIFICATION block exempted for bug/hotfix (see Pass 5)
-    // This ensures high-risk bug fixes (auth regressions, data-loss fixes, multi-tenant
-    // defects) still surface ADVISORY or FAIL when the blast radius warrants it.
-    // Check cache
-    const philosophyDir = resolve(".secufusion/philosophy");
-    const philosophyFile = path.join(philosophyDir, `${work_item_id}.json`);
-    let cached = null;
-    if (fs.existsSync(philosophyFile)) {
-        try {
-            cached = JSON.parse(readFileSafe(philosophyFile) || "null");
-            if (cached && (cached.philosophy_verdict === "PHILOSOPHY_PASS" || cached.philosophy_verdict === "PHILOSOPHY_ADVISORY")) {
-                return appendTelemetry({ content: [{ type: "text", text: `[PHILOSOPHY CACHED] ${work_item_id} — verdict: ${cached.philosophy_verdict}\n\n${cached.developer_message}` }] }, inputChars);
-            }
-        }
-        catch { }
-    }
-    // Mandatory interview for ALL work items (features, bugs, chores, etc.)
-    if (!cached || !cached.interview_completed) {
-        const interviewText = `[PHILOSOPHY FAIL] ${work_item_id}\n\nBefore I help you build this, talk to me.\n\nWhat problem is this solving?\nWalk me through what the user is experiencing today\nwithout this feature. What's broken? What's painful?\nWhat happens if we don't build this at all?\n\nWho will actually use this and how often?\nIs this solving a problem for 1 client or all tenants?\n\nI see you said WHO: CONFIRMED —\nbut confirmed by whom exactly?\nIs that a verbal yes in a meeting or\na written requirement from the client?\nThose are very different things.\n\nDo NOT call classify_task. Re-run philosophy_check after resolving.`;
-        if (!fs.existsSync(philosophyDir))
-            fs.mkdirSync(philosophyDir, { recursive: true });
-        try {
-            writeFile(philosophyFile, JSON.stringify({
-                work_item_id,
-                philosophy_verdict: "PHILOSOPHY_FAIL",
-                interview_completed: true
-            }, null, 2));
-        }
-        catch { }
-        return appendTelemetry({ content: [{ type: "text", text: interviewText }] }, inputChars);
-    }
     const wsRoot = getWorkspaceRoot();
     let rejectedPatterns = [];
     const rejRaw = readFileSafe(resolve(REJECTED_FILE));
@@ -1590,12 +1556,8 @@ server.tool("philosophy_check", "MANDATORY PHASE -1 STEP — runs BEFORE classif
         }
         catch { }
     }
-    // ── Load Architecture DNA (MANDATORY for intelligent risk scoring) ──────
-    // philosophy_check reasons against real architecture — not just keywords.
-    // DNA provides: DB entities, Kafka topics, services, extension, auth model.
     let dna = null;
     let spec = null;
-    // Load project spec (golden rules, service map, security model)
     const specCands2 = [
         path.resolve(path.dirname(new URL(import.meta.url).pathname.replace(/^\/([A-Z]:)/, "$1")), ".secufusion-project-spec.json"),
         path.resolve(wsRoot, ".secufusion-project-spec.json"),
@@ -1609,7 +1571,6 @@ server.tool("philosophy_check", "MANDATORY PHASE -1 STEP — runs BEFORE classif
             catch { }
         }
     }
-    // Load DNA — full architecture graph
     const dnaCandidates = [
         path.resolve(wsRoot, ".secufusion", "dna.json"),
         path.resolve(path.dirname(new URL(import.meta.url).pathname.replace(/^\/([A-Z]:)/, "$1")), ".secufusion", "dna.json"),
@@ -1623,327 +1584,26 @@ server.tool("philosophy_check", "MANDATORY PHASE -1 STEP — runs BEFORE classif
             catch { }
         }
     }
-    // Extract architectural context
     const dnaServices = dna?.services?.map((s) => (s.name || "").toLowerCase()).filter((s) => s.length > 4) || [];
     const dnaEntities = dna?.db_entities?.map((e) => (e.name || e.table || "").toLowerCase()).filter((e) => e.length > 3) || [];
     const dnaTopics = dna?.kafka_topics || dna?.events || [];
     const dnaExtension = dna?.chrome_extension || dna?.extension || dna?.["snf-browser-extn"] || null;
     const dnaSecurity = dna?.security_context || spec?.security || null;
-    const dnaGoldenRules = spec?.golden_rules || [];
-    // DNA-aware risk bonus (stacks on top of keyword risk scores)
-    let dna_risk_bonus = 0;
-    const dnaRiskNotes = [];
-    const text = `${title} ${description}`.toLowerCase();
-    const wordCount = description.trim().split(/\s+/).length;
-    const mentionedServices = dnaServices.filter((s) => text.includes(s));
-    // [DNA-1] DB entities mentioned in story — each known entity = real schema blast
-    const mentionedEntities = dnaEntities.filter((e) => text.includes(e));
-    if (mentionedEntities.length > 0) {
-        const entityRisk = Math.min(mentionedEntities.length * 10, 40);
-        dna_risk_bonus += entityRisk;
-        dnaRiskNotes.push(`DB entities: ${mentionedEntities.join(", ")} (+${entityRisk})`);
-    }
-    // [DNA-1b] Migration Spec Check
-    if (mentionedEntities.length > 0 || /\bmigration\b/i.test(text) || /\btable\b/i.test(text) || /\bcolumn\b/i.test(text)) {
-        const migSpec = loadMigrationSpec(wsRoot);
-        if (migSpec && mentionedServices.length > 0) {
-            mentionedServices.forEach((s) => {
-                const ctx = getMigrationContextForService(migSpec, s);
-                if (ctx && ctx.has_migrations) {
-                    dna_risk_bonus += 15;
-                    dnaRiskNotes.push(`[MIGRATION SPEC] Manual migration script required for ${s} (Next: ${ctx.next_suggested}) (+15)`);
-                }
-            });
-        }
-        else if (migSpec && mentionedEntities.length > 0) {
-            // If service isn't mentioned by name but entities are, we still want to warn globally
-            dna_risk_bonus += 10;
-            dnaRiskNotes.push(`[MIGRATION SPEC] DB touched. Ensure manual migration scripts are applied to PostgreSQL before deploy. (+10)`);
-        }
-    }
-    // [DNA-2] Kafka topics — fan-out cascades to all consumers
-    const mentionedTopics = dnaTopics.filter((t) => {
-        const tn = (t.name || t.topic || "").toLowerCase();
-        return tn.length > 3 && text.includes(tn);
-    });
-    if (mentionedTopics.length > 0) {
-        const topicConsumers = mentionedTopics.reduce((sum, t) => sum + (t.consumers?.length || t.consumer_count || 0), 0);
-        const topicRisk = Math.min(mentionedTopics.length * 15 + topicConsumers * 5, 35);
-        dna_risk_bonus += topicRisk;
-        dnaRiskNotes.push(`Kafka topics: ${mentionedTopics.map((t) => t.name || t.topic).join(", ")} (${topicConsumers} consumers) (+${topicRisk})`);
-    }
-    // [DNA-3] Chrome extension changes require store deployment
-    if (dnaExtension && (text.includes("extension") || text.includes("chrome") || text.includes("background script") || text.includes("content script") || text.includes("popup"))) {
-        dna_risk_bonus += 20;
-        dnaRiskNotes.push("snf-browser-extn affected — manual store publish (+20)");
-    }
-    // [DNA-4] Shared multi-tenant auth service — changes blast all tenants
-    const isSharedAuth = dnaSecurity && (dnaSecurity.type === "shared" || dnaSecurity.multi_tenant === true || dnaSecurity.multi_tenant === "true");
-    if (isSharedAuth && (text.includes("auth") || text.includes("login") || text.includes("permission") || text.includes("role") || text.includes("tenant") || text.includes("token"))) {
-        dna_risk_bonus += 25;
-        dnaRiskNotes.push("Shared multi-tenant auth — cross-tenant blast (+25)");
-    }
-    // [DNA-5] Polyglot service coordination — 3+ services = integration risk
-    if (mentionedServices.length >= 3) {
-        dna_risk_bonus += 15;
-        dnaRiskNotes.push(`Multi-service: ${mentionedServices.slice(0, 4).join(", ")} (+15)`);
-    }
-    // [DNA-6] Golden rule violation signals
-    const antiPatterns = ["bypass", "skip migration", "no migration", "hardcode", "raw sql", "direct db", "without migration"];
-    const hitAntipatterns = antiPatterns.filter(ap => text.includes(ap));
-    if (hitAntipatterns.length > 0) {
-        dna_risk_bonus += 20;
-        dnaRiskNotes.push(`Antipattern signal: ${hitAntipatterns.join(", ")} (+20)`);
-    }
-    const dnaAvailable = dna !== null;
-    const dnaWarning = dnaAvailable ? "" : "\n[NOTE] DNA not loaded — risk is keyword-only. Run /sfn-init for architecture-aware scoring.";
-    // PASS 1 - WHY CHECK
-    let why_score = 0;
-    if (task_type === "bug" || task_type === "hotfix") {
-        why_score += 20; // Relaxed WHY sensing for defects
-    }
-    const STRONG_WHY = ["users spend", "current process causes", "compliance requires", "audit requires", "production issue", "users are reporting", "data shows", "confirmed by", "ticket from client", "business requirement", "regulatory", "security risk", "revenue impact"];
-    const WEAK_WHY = [
-        "would be nice", "nice feature", "nice addition", "could be useful", "other platforms have",
-        "other saas", "other products have", "similar products", "competitors have",
-        "client might want", "we should probably", "nice to have", "maybe useful",
-        "might improve", "could improve", "would improve", "would be helpful",
-        "suggestion", "idea", "asked for it"
-    ];
-    for (const s of STRONG_WHY)
-        if (text.includes(s))
-            why_score += 10;
-    for (const s of WEAK_WHY)
-        if (text.includes(s))
-            why_score -= 10;
-    if (text.includes("client asked") && !text.includes("because") && !text.includes("so that"))
-        why_score -= 10;
-    // Penalize descriptions under 30 words with no strong why — they can't justify themselves
-    if (wordCount < 30 && why_score <= 0)
-        why_score -= 10;
-    let purpose_stated = false;
-    let purpose_text = "";
-    for (const m of ["so that", "in order to", "because", "which means", "this allows"]) {
-        const idx = description.toLowerCase().indexOf(m);
-        if (idx !== -1) {
-            purpose_stated = true;
-            purpose_text = description.substring(idx, idx + 120).trim();
-            break;
-        }
-    }
-    const why_verdict = why_score >= 10 ? "STRONG" : why_score >= 0 ? "ACCEPTABLE" : why_score >= -19 ? "WEAK" : "NO_JUSTIFICATION";
-    // PASS 2 - WHO CHECK
-    let who_score = 0;
-    if (task_type === "bug" || task_type === "hotfix") {
-        who_score += 15; // Relaxed WHO sensing for defects
-    }
-    const AUTH_SIG = ["client confirmed", "client approved", "stakeholder sign-off", "decision made by", "approved by", "confirmed in meeting", "email from client", "client requirement", "explicit request from", "signed off"];
-    const UNCERT_SIG = [
-        "assumed", "we think", "probably", "should want", "might need", "could need",
-        "i think the client", "i think clients", "pm suggestion", "internal idea", "we decided",
-        "i think", "don't think", "shouldn't need", "won't need"
-    ];
-    for (const s of AUTH_SIG)
-        if (text.includes(s))
-            who_score += 10;
-    for (const s of UNCERT_SIG)
-        if (text.includes(s))
-            who_score -= 10;
-    if (reported_by) {
-        const rb = reported_by.toLowerCase();
-        if (rb === "client")
-            who_score += 15;
-        else if (rb === "pm")
-            who_score += 5;
-        else if (rb === "developer")
-            who_score -= 5;
-    }
-    if (client_confirmed === true)
-        who_score += 20;
-    else if (client_confirmed === false)
-        who_score -= 20;
-    const who_verdict = who_score >= 15 ? "CONFIRMED" : who_score >= 0 ? "PROBABLE" : who_score >= -14 ? "UNCERTAIN" : "UNCONFIRMED";
-    // PASS 3 - WHAT CHECK
-    let what_score = 0;
-    if (text.includes("acceptance criteria"))
-        what_score += 20;
-    const hasGWT = text.includes("given") && text.includes("when") && text.includes("then");
-    if (hasGWT)
-        what_score += 15;
-    const numberedACs = (description.match(/\b(ac-?\d+|\d+\.\s+(?:given|when|then|the user|the system))/gi) || []).length;
-    if (numberedACs >= 2)
-        what_score += 10;
-    if ((description.match(/\bmust\b/gi) || []).length >= 1)
-        what_score += 5;
-    if (text.includes("as discussed"))
-        what_score -= 15;
-    if (text.includes("as agreed"))
-        what_score -= 15;
-    if (text.includes("tbd"))
-        what_score -= 20;
-    if (text.includes("to be defined"))
-        what_score -= 20;
-    if (wordCount < 50)
-        what_score -= 10;
-    if (!/\b(\d+%|within \d+|less than \d+|at least \d+)\b/.test(description) && wordCount < 80)
-        what_score -= 10;
-    const hasOutOfScope = text.includes("out of scope") || text.includes("not included");
-    if (hasOutOfScope)
-        what_score += 10;
-    if (text.includes("edge cases"))
-        what_score += 10;
-    if (text.includes("error handling"))
-        what_score += 5;
-    const what_verdict = what_score >= 20 ? "CLEAR" : what_score >= 0 ? "ACCEPTABLE" : what_score >= -19 ? "VAGUE" : "UNDEFINED";
-    const ac_count = Math.max(numberedACs, (description.match(/\b(ac-?\d+|given\b)/gi) || []).length);
-    // PASS 4 - RISK CHECK
-    let risk_score = 0;
-    const high_risk_factors = [];
-    const riskSignals = [
-        ["db migration", 20, "DB migration"], ["database migration", 20, "DB migration"],
-        ["drop column", 30, "Drop column"], ["rename column", 30, "Rename column"],
-        ["authentication change", 25, "Auth change"], ["auth change", 25, "Auth change"],
-        ["authorization change", 20, "Authz change"], ["permission change", 20, "Permission change"],
-        ["all tenants", 20, "Affects all tenants"], ["kafka schema", 25, "Kafka schema change"],
-        ["chrome extension", 15, "Chrome extension"], ["irreversible", 30, "Irreversible"],
-        ["data migration", 20, "Data migration"], ["api contract", 25, "API contract change"],
-        ["breaking change", 25, "Breaking change"], ["affects existing", 15, "Affects existing"],
-    ];
-    for (const [kw, score, label] of riskSignals) {
-        if (text.includes(kw)) {
-            risk_score += score;
-            if (!high_risk_factors.includes(label))
-                high_risk_factors.push(label);
-        }
-    }
-    // Regex-based: catch "drop the old X columns", "Drop legacy device columns", etc.
-    // Use 'text' (title+desc combined) since title often has key verb, description has the noun.
-    if (/\bdrop\b.{0,60}\bcolumns?/i.test(text) && !high_risk_factors.includes("Drop column")) {
-        risk_score += 30;
-        high_risk_factors.push("Drop column (pattern)");
-    }
-    if (/\bdelete\b.{0,30}\bcolumns?/i.test(text) && !high_risk_factors.includes("Drop column")) {
-        risk_score += 30;
-        high_risk_factors.push("Delete column (pattern)");
-    }
-    if (text.includes("delete") && (text.includes(" data") || text.includes("record"))) {
-        risk_score += 25;
-        high_risk_factors.push("Data deletion");
-    }
-    if (text.includes("new endpoint"))
-        risk_score += 10;
-    if (text.includes("new table"))
-        risk_score += 10;
-    if (text.includes("new kafka topic"))
-        risk_score += 15;
-    if (text.includes("new service"))
-        risk_score += 20;
-    if (text.includes("read only") || text.includes("display only"))
-        risk_score -= 10;
-    if (text.includes("no db change") || text.includes("no migration"))
-        risk_score -= 15;
-    if (text.includes("isolated change"))
-        risk_score -= 10;
-    if (text.includes("config change only"))
-        risk_score -= 10;
-    let rejected_pattern_risk = false;
-    for (const rp of rejectedPatterns) {
-        const rpKeywords = rp.keywords || (rp.pattern ? [rp.pattern] : []);
-        for (const kw of rpKeywords) {
-            if (kw && text.includes(kw.toLowerCase())) {
-                rejected_pattern_risk = true;
-                risk_score += 20;
-                high_risk_factors.push(`Rejected pattern: ${rp.id || rp.name}`);
-                break;
-            }
-        }
-    }
-    // ── Apply DNA-aware risk bonus ──────────────────────────────────────
-    // Keyword scoring is blind to actual architecture. DNA bonus reflects real blast radius.
-    risk_score += Math.min(dna_risk_bonus, 50); // cap at 50 to prevent double-stacking
-    for (const note of dnaRiskNotes) {
-        if (!high_risk_factors.includes(note))
-            high_risk_factors.push(`[DNA] ${note}`);
-    }
-    const risk_verdict = risk_score <= 10 ? "LOW" : risk_score <= 30 ? "MEDIUM" : risk_score <= 50 ? "HIGH" : "CRITICAL";
-    const reversibility = risk_score <= 20 ? "REVERSIBLE" : risk_score <= 40 ? "REVERSIBLE_WITH_EFFORT" : "DIFFICULT_TO_REVERSE";
-    // PASS 5 - PHILOSOPHY VERDICT
-    let philosophy_verdict = "PHILOSOPHY_PASS";
-    const blocking_questions = [];
-    const advisory_notes = [];
-    if ((who_verdict === "UNCONFIRMED" && risk_verdict === "CRITICAL") ||
-        (who_verdict === "UNCONFIRMED" && risk_verdict === "HIGH" && reversibility === "DIFFICULT_TO_REVERSE") ||
-        (why_verdict === "NO_JUSTIFICATION" && (task_type === "feature" || task_type === "user_story")) ||
-        (rejected_pattern_risk && risk_verdict === "CRITICAL")) {
-        philosophy_verdict = "PHILOSOPHY_BLOCKED";
-    }
-    else if (who_verdict === "UNCONFIRMED" ||
-        why_verdict === "NO_JUSTIFICATION" ||
-        what_verdict === "UNDEFINED" ||
-        (risk_verdict === "CRITICAL" && reversibility === "DIFFICULT_TO_REVERSE")) {
-        philosophy_verdict = "PHILOSOPHY_FAIL";
-    }
-    else if (who_verdict === "UNCERTAIN" || why_verdict === "WEAK" || what_verdict === "VAGUE" || risk_verdict === "HIGH") {
-        philosophy_verdict = "PHILOSOPHY_ADVISORY";
-    }
-    const allowed_next_action = philosophy_verdict === "PHILOSOPHY_PASS" ? "PROCEED" :
-        philosophy_verdict === "PHILOSOPHY_ADVISORY" ? "ADVISORY_PROCEED" :
-            philosophy_verdict === "PHILOSOPHY_FAIL" ? "STOP" : "ESCALATE";
-    if (why_verdict === "NO_JUSTIFICATION" || why_verdict === "WEAK")
-        blocking_questions.push({ category: "WHY", question: `What specific problem does "${title}" solve?`, impact: "Without a clear problem statement, the solution may be wrong.", action: "Add a problem statement with data, user pain, or regulatory requirement." });
-    if (who_verdict === "UNCONFIRMED" || who_verdict === "UNCERTAIN")
-        blocking_questions.push({ category: "WHO", question: "Who has explicitly confirmed this is needed?", impact: "Building unconfirmed features wastes sprint capacity.", action: "Get written confirmation from client or PM." });
-    if (what_verdict === "UNDEFINED" || what_verdict === "VAGUE")
-        blocking_questions.push({ category: "WHAT", question: "What are the acceptance criteria?", impact: "Vague stories produce vague software.", action: "Add Given/When/Then ACs." });
-    if (risk_verdict === "CRITICAL" && reversibility === "DIFFICULT_TO_REVERSE")
-        blocking_questions.push({ category: "RISK", question: `CRITICAL risk: ${high_risk_factors.join(", ")}. What is the rollback plan?`, impact: "This change may be impossible to revert.", action: "Define rollback plan and get explicit sign-off." });
-    if (who_verdict === "UNCERTAIN")
-        advisory_notes.push({ category: "WHO", note: "Decision maker not fully confirmed", suggestion: "Confirm with client or PM." });
-    if (why_verdict === "WEAK")
-        advisory_notes.push({ category: "WHY", note: "Weak justification", suggestion: "Strengthen with data or regulatory context." });
-    if (what_verdict === "VAGUE")
-        advisory_notes.push({ category: "WHAT", note: "ACs incomplete or vague", suggestion: "Add measurable ACs before coding." });
-    if (risk_verdict === "HIGH")
-        advisory_notes.push({ category: "RISK", note: `High risk: ${high_risk_factors.join(", ") || "multiple signals"}`, suggestion: "Review blast radius. Consider staged rollout." });
-    let developer_message = "";
-    const scoresSummary = `\nScores | WHY:${why_score} WHO:${who_score} WHAT:${what_score} RISK:${risk_score}${dna_risk_bonus > 0 ? ` (DNA+${dna_risk_bonus})` : ""}${dnaWarning}`;
-    if (philosophy_verdict === "PHILOSOPHY_PASS") {
-        developer_message = `[PHILOSOPHY PASS] ${work_item_id}\n\nWHY  : ${why_verdict}${purpose_text ? " - " + purpose_text : ""}\nWHO  : ${who_verdict}\nWHAT : ${what_verdict} — ${ac_count} AC(s)\nRISK : ${risk_verdict} (${reversibility})${high_risk_factors.length > 0 ? "\nRisk factors: " + high_risk_factors.join(", ") : ""}\n\nProceed to classify_task.${scoresSummary}`;
-    }
-    else if (philosophy_verdict === "PHILOSOPHY_ADVISORY") {
-        developer_message = `[PHILOSOPHY ADVISORY] ${work_item_id}\n\nStory may proceed with caution. Note these concerns:\n\n` +
-            advisory_notes.map((n) => `  [${n.category}] ${n.note}\n  Suggestion: ${n.suggestion}`).join("\n\n") +
-            `\n\nWHY:${why_verdict} | WHO:${who_verdict} | WHAT:${what_verdict} | RISK:${risk_verdict}\nProceed to classify_task. Record advisory notes in decisions.json.${scoresSummary}`;
-    }
-    else if (philosophy_verdict === "PHILOSOPHY_FAIL") {
-        developer_message = `[PHILOSOPHY FAIL] ${work_item_id}\n\nImplementation BLOCKED. The following must be resolved before planning can begin:\n\n` +
-            blocking_questions.map((q) => `  [${q.category}] ${q.question}\n  Why: ${q.impact}\n  Action: ${q.action}`).join("\n\n") +
-            `\n\nDo NOT call classify_task. Re-run philosophy_check after resolving.${scoresSummary}`;
-    }
-    else {
-        developer_message = `[PHILOSOPHY BLOCKED] ${work_item_id}\n\nESCALATION REQUIRED. ${risk_verdict} risk + ${who_verdict} authority.\n\n` +
-            blocking_questions.map((q) => `  [${q.category}] ${q.question}\n  Risk: ${q.impact}\n  Required: ${q.action}`).join("\n\n") +
-            `\n\nNO implementation or planning until explicit written sign-off from the decision maker.${scoresSummary}`;
-    }
-    const result = {
-        work_item_id, title, task_type, philosophy_verdict, allowed_next_action,
-        dna_assessment: {
-            dna_available: dnaAvailable,
-            dna_risk_bonus,
-            dna_risk_notes: dnaRiskNotes,
-        },
-        passes: {
-            why: { score: why_score, verdict: why_verdict, purpose_stated, purpose_text },
-            who: { score: who_score, verdict: who_verdict },
-            what: { score: what_score, verdict: what_verdict, ac_count, has_given_when_then: hasGWT, has_out_of_scope: hasOutOfScope, word_count: wordCount },
-            risk: { score: risk_score, verdict: risk_verdict, reversibility, rejected_pattern_risk, high_risk_factors }
-        },
-        blocking_questions, advisory_notes, developer_message, scored_at: new Date().toISOString()
-    };
-    try {
-        writeFile(philosophyFile, JSON.stringify(result, null, 2));
-    }
-    catch { }
+    let developer_message = `[PHILOSOPHY CONTEXT GATHERED] ${work_item_id}\n\n` +
+        `INSTRUCTIONS FOR THE AGENT:\n` +
+        `You are now acting as the Philosophy Check Engine defined in your AGENTS.md persona.\n\n` +
+        `1. Review the following gathered Project DNA against the task (${task_type}): "${title}".\n` +
+        `2. Determine if the business intent is clear, if the decision maker is explicit, and if the architectural impact is fully understood.\n` +
+        `3. If clarification is needed, STOP. Do not proceed. Ask the user the hard questions directly (What problem is this solving? Who confirmed this? What breaks if we do not build it?).\n` +
+        `4. If everything is clear and the architectural risk is acceptable, output your "System Impact Analysis" based on this DNA, and then call classify_task.\n\n` +
+        `── PROJECT DNA CONTEXT ──\n` +
+        `Services: ` + (dnaServices.length > 0 ? dnaServices.join(", ") : "None detected") + `\n` +
+        `Entities: ` + (dnaEntities.length > 0 ? dnaEntities.join(", ") : "None detected") + `\n` +
+        `Kafka Topics: ` + (dnaTopics.length > 0 ? dnaTopics.map((t) => t.name || t.topic).join(", ") : "None detected") + `\n` +
+        `Extension: ` + (dnaExtension ? "Present" : "None detected") + `\n` +
+        `Security: ` + (dnaSecurity ? JSON.stringify(dnaSecurity) : "None detected") + `\n` +
+        `Rejected Patterns: ` + (rejectedPatterns.map(p => p.id || p.name).join(", ") || "None") + `\n\n` +
+        `Do not run the old static scoring. Use your LLM reasoning.`;
     return appendTelemetry({ content: [{ type: "text", text: developer_message }] }, inputChars);
 });
 // --- Tool 10: classify_task --------------------------------------------------

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "secufusion-mcp",
-  "version": "2.4.1",
+  "version": "2.5.1",
   "type": "module",
   "description": "Project-level spec driven AI workflow tooling for SecuFusion, MCP server - developer workflow tooling with guardrails",
   "main": "mcp/dist/server.js",
@@ -45,4 +45,4 @@
     "@types/node": "^22.0.0",
     "typescript": "^5.0.0"
   }
-}
+}