@luanpdd/kit-mcp 1.30.0 → 1.30.1

package/kit/file-manifest.json

@@ -1,6 +1,6 @@
 {
-  "version": "1.30.0",
-  "timestamp": "2026-05-13T09:16:42.372Z",
+  "version": "1.30.1",
+  "timestamp": "2026-05-14T07:27:25.436Z",
   "files": {
     "COMANDOS.md": "d24ec61a6ec35db314cc5f2ae287bfb927b794789c8f1d558c55862f5e6534b2",
     "COMPATIBILITY.md": "794e336a87045cdf0161785b9a7a0975a49abbd80bdd816b8852251fcc8126ca",
@@ -297,6 +297,7 @@
     "framework/workflows/verify-work.md": "219b2e45782b0b9ef042b69f02c92232947b8144ac4f472a6f5a6577f21de8df",
     "hooks/check-update.js": "927bb6394259b8547aad508580872c92d508f5886b29e9b3ae9603076baa2a5c",
     "hooks/context-monitor.js": "8ff9295c6ab769ca766e3e612c39d72d171a97bb082bde590bdf328d557249b9",
+    "hooks/kit-attribution-reminder.cjs": "7d0994c63714295c522158e0e4123429ffe65cae497d003de570c5d5e2deb6f4",
     "hooks/post-apply-migration.js": "cd67f24ca9ba0a064087b9abeacee094ae24baad0cdc06f776d7a2f8ccad9685",
     "hooks/prompt-guard.js": "426f0240e3ee383571a48e062e6819d8fc3df456171fbc7e2aafb17889a9a389",
     "hooks/sidecar-tool-publisher.js": "b8357ae80e82bfc875acb6c616cf82a943a2d77cf2ceba2f23a50b7d1f335f2d",

package/kit/hooks/kit-attribution-reminder.cjs

@@ -0,0 +1,98 @@
+#!/usr/bin/env node
+// hook-version: 1.30.1
+// kit-mcp · Kit Attribution Reminder (UserPromptSubmit)
+//
+// Injeta `additionalContext` no envelope do prompt do usuário com diretiva
+// canônica v1.30.1: sempre que Claude usar comandos/agents/skills do kit-mcp
+// no turno corrente, deve abrir o sidecar (auto-spawn já cuida disso na 1ª
+// tool call) e listar os recursos usados em bloco final do output.
+//
+// Objetivo: dar feedback visual + textual de uso real do kit-mcp para o
+// usuário detectar bugs no fluxo precocemente.
+//
+// Pipeline: UserPromptSubmit hook → reads stdin envelope → writes JSON com
+// `{ continue: true, hookSpecificOutput: { hookEventName: "UserPromptSubmit",
+//    additionalContext: "<diretiva>" } }` → exit 0.
+//
+// SOFT failure: qualquer erro → exit 0 sem bloquear. Skip se
+// KIT_MCP_NO_ATTRIBUTION=1.
+//
+// Module format: CommonJS (.cjs) — compatível com qualquer setup Node.
+//
+// Enable em settings.json (project ou user):
+//   {
+//     "hooks": {
+//       "UserPromptSubmit": [{
+//         "matcher": "*",
+//         "hooks": [{
+//           "type": "command",
+//           "command": "node /abs/path/to/kit-attribution-reminder.cjs"
+//         }]
+//       }]
+//     }
+//   }
+
+'use strict';
+
+// Opt-out via env var
+if (process.env.KIT_MCP_NO_ATTRIBUTION === '1' || process.env.KIT_MCP_NO_ATTRIBUTION === 'true') {
+  process.exit(0);
+}
+
+const DIRECTIVE = [
+  '🔧 KIT-MCP ATTRIBUTION — directive ativa neste turno (v1.30.1):',
+  '',
+  'Se ao responder este turno você usar QUALQUER recurso do kit-mcp (qualquer',
+  'subagent_type listado em /agents kit-mcp, qualquer skill cujo nome começa',
+  'com supabase-/legacy-/cascading-/etc. do kit, ou qualquer /slash-command',
+  'do kit), SEMPRE faça duas coisas:',
+  '',
+  '1. **Sidecar visual:** o kit-mcp abre o sidecar automaticamente na primeira',
+  '   tool call do MCP server (browser tab em 127.0.0.1:<porta>). Você NÃO',
+  '   precisa abrir manualmente — é fire-and-forget no MCP. Apenas confirme',
+  '   que foi disparado e mencione se o usuário precisar conferir.',
+  '',
+  '2. **Bloco de atribuição no final do output** — adicione ao final da sua',
+  '   resposta um bloco markdown listando TODOS os recursos kit-mcp usados:',
+  '',
+  '   ```',
+  '   ---',
+  '   🔧 **Kit-mcp resources usados neste turno:**',
+  '   - Commands: /<command> (motivo: ...)',
+  '   - Agents: <agent-name> (via Task — motivo: ...)',
+  '   - Skills: <skill-name> (auto-trigger / consultada — motivo: ...)',
+  '   - Sidecar: http://127.0.0.1:<porta>/ (opened on first MCP tool call)',
+  '   ```',
+  '',
+  '   Omita seções vazias. Se NÃO usou nenhum recurso kit-mcp neste turno,',
+  '   **não adicione o bloco** — silêncio é melhor que ruído.',
+  '',
+  'Disable temporário: env KIT_MCP_NO_ATTRIBUTION=1.',
+  '',
+].join('\n');
+
+let input = '';
+const stdinTimeout = setTimeout(() => process.exit(0), 3000);
+process.stdin.setEncoding('utf8');
+process.stdin.on('data', (chunk) => { input += chunk; });
+process.stdin.on('end', () => {
+  clearTimeout(stdinTimeout);
+  try {
+    // Aceita envelope vazio; só precisamos retornar o JSON com additionalContext.
+    JSON.parse(input || '{}');
+  } catch {
+    // Envelope inválido — não bloquear; sair sem inject.
+    process.exit(0);
+  }
+  const payload = JSON.stringify({
+    continue: true,
+    hookSpecificOutput: {
+      hookEventName: 'UserPromptSubmit',
+      additionalContext: DIRECTIVE,
+    },
+  });
+  // SEC-13-05 (category A): flush antes de exit
+  process.stdout.write(payload, () => process.exit(0));
+});
+
+process.stdin.on('error', () => process.exit(0));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@luanpdd/kit-mcp",
-  "version": "1.30.0",
+  "version": "1.30.1",
   "description": "Generic infrastructure to ship YOUR personal kit of agents/commands/skills as an MCP server, with cross-IDE sync (Claude Code, Cursor, Codex, Gemini, Windsurf, Antigravity, Copilot, Trae).",
   "type": "module",
   "bin": {

package/src/mcp-server/index.js

@@ -572,9 +572,31 @@ export async function createServer() {
 
   server.setRequestHandler(ListToolsRequestSchema, async () => ({ tools: TOOLS }));
 
+  // v1.30.1: open browser tab on FIRST kit-mcp tool invocation (not on boot —
+  // would spam tabs on IDE start). Provides visual feedback that kit-mcp is
+  // actively being used. Escape hatch: KIT_MCP_NO_UI=1 (same as auto-spawn) or
+  // KIT_MCP_NO_BROWSER=1 (sidecar runs but no browser open).
+  let kitFirstToolBrowserOpened = false;
   server.setRequestHandler(CallToolRequestSchema, async (req) => {
     const { name, arguments: args } = req.params;
     const handler = HANDLERS[name];
+
+    // v1.30.1: first-tool browser open — fire-and-forget; never blocks handler.
+    // Suppressed in same conditions as boot-time sidecar (test/CI/no-ui).
+    if (!kitFirstToolBrowserOpened) {
+      kitFirstToolBrowserOpened = true;
+      const noUi = process.env.KIT_MCP_NO_UI === '1' || process.env.KIT_MCP_NO_UI === 'true';
+      const noBrowser = process.env.KIT_MCP_NO_BROWSER === '1' || process.env.KIT_MCP_NO_BROWSER === 'true';
+      const isTestRun = (process.execArgv || []).some(
+        (a) => a === '--test' || a === '--experimental-test-coverage',
+      ) || process.env.NODE_TEST_CONTEXT !== undefined;
+      const isCi = process.env.CI === 'true' || process.env.CI === '1';
+      if (!noUi && !noBrowser && !isTestRun && !isCi) {
+        const projectRoot = args?.projectRoot || process.cwd();
+        ensureSidecar({ projectRoot, openBrowserOnSpawn: true }).catch(() => {});
+      }
+    }
+
     if (!handler) {
       // OBS-18 (Phase 94.01): unknown-tool path counts as an error against
       // the unknown name itself — useful signal if a client is mis-spelling