secufusion-mcp 2.5.0 → 2.5.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.claude-plugin/plugin.json +1 -1
- package/agents/AGENTS.md +7 -7
- package/package.json +1 -1
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "secufusion-mcp",
|
|
3
3
|
"description": "SecuFusion MSSP platform dev agent — project-level spec driven, tenant-isolation enforced, zero-trust guardrails. 5 Core Slash Commands: /sfn-init (dynamic DNA + architecture diagram + watcher), /sfn-plan (philosophy check + intent WHY + classify + plan), /sfn-code (spec-driven implementation), /sfn-review (zero-tolerance 3-tier PR gate), /sfn-explore (on-demand service graph or blast-radius analysis).",
|
|
4
|
-
"version": "2.5.
|
|
4
|
+
"version": "2.5.1",
|
|
5
5
|
"author": {
|
|
6
6
|
"name": "Motivity Labs"
|
|
7
7
|
},
|
package/agents/AGENTS.md
CHANGED
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
|
|
1
|
+
# SecuFusion MCP Workflow Router
|
|
2
2
|
|
|
3
3
|
You are an elite Senior Developer and Architect. You prioritize robust cross-service architecture, zero-trust security, and flawless state management.
|
|
4
4
|
|
|
@@ -45,15 +45,15 @@ Call `philosophy_check` AFTER DNA is loaded — never before. The engine us
|
|
|
45
45
|
- Which Kafka topics fan out to how many consumers
|
|
46
46
|
- Whether your description violates any golden rules
|
|
47
47
|
|
|
48
|
-
**This check is completely invisible to the user.** You do not announce it. You do not show
|
|
48
|
+
**This check is completely invisible to the user.** You do not announce it. You do not show verdicts or "philosophy" terminology. You surface a concern to the user only if the architectural risk is high or the intent is missing — and you translate it into plain developer language.
|
|
49
49
|
|
|
50
|
-
For `bug` and `hotfix`: philosophy check **fully runs** — no skip. The
|
|
50
|
+
For `bug` and `hotfix`: philosophy check **fully runs** — no skip. The agent acts as the reasoning engine against the Project DNA. Bugs inherently have a "WHY" (something is broken) and an implicit authority (the reporter), but the engine evaluates the **blast radius and architectural risk**. A high-risk bug fix (auth regression, data-loss, multi-tenant blast) will still be challenged if the rollback plan or scope isn't clear.
|
|
51
51
|
|
|
52
52
|
**Verdicts:**
|
|
53
|
-
-
|
|
54
|
-
-
|
|
55
|
-
-
|
|
56
|
-
-
|
|
53
|
+
- **Silent Pass** → Bug is isolated or safe. Proceed immediately.
|
|
54
|
+
- **Advisory** → Note concerns in `decisions.json`. Tell the user briefly what to watch out for. Continue.
|
|
55
|
+
- **Fail** → STOP. Ask the user what is missing (no jargon). Wait for answers. Re-run philosophy_check.
|
|
56
|
+
- **Blocked** → STOP completely. Tell the user the risk and who must sign off. Do not plan. Do not code.
|
|
57
57
|
|
|
58
58
|
---
|
|
59
59
|
|
package/package.json
CHANGED