@luanpdd/kit-mcp 1.30.0 → 1.30.2

package/kit/file-manifest.json

@@ -1,6 +1,6 @@
 {
-  "version": "1.30.0",
-  "timestamp": "2026-05-13T09:16:42.372Z",
+  "version": "1.30.2",
+  "timestamp": "2026-05-14T09:25:36.145Z",
   "files": {
     "COMANDOS.md": "d24ec61a6ec35db314cc5f2ae287bfb927b794789c8f1d558c55862f5e6534b2",
     "COMPATIBILITY.md": "794e336a87045cdf0161785b9a7a0975a49abbd80bdd816b8852251fcc8126ca",
@@ -297,6 +297,7 @@
     "framework/workflows/verify-work.md": "219b2e45782b0b9ef042b69f02c92232947b8144ac4f472a6f5a6577f21de8df",
     "hooks/check-update.js": "927bb6394259b8547aad508580872c92d508f5886b29e9b3ae9603076baa2a5c",
     "hooks/context-monitor.js": "8ff9295c6ab769ca766e3e612c39d72d171a97bb082bde590bdf328d557249b9",
+    "hooks/kit-attribution-reminder.cjs": "155e3d53d7e6120f5a147f4c3db8c468b9d85b039d0ce324184fd62516ffac11",
     "hooks/post-apply-migration.js": "cd67f24ca9ba0a064087b9abeacee094ae24baad0cdc06f776d7a2f8ccad9685",
     "hooks/prompt-guard.js": "426f0240e3ee383571a48e062e6819d8fc3df456171fbc7e2aafb17889a9a389",
     "hooks/sidecar-tool-publisher.js": "b8357ae80e82bfc875acb6c616cf82a943a2d77cf2ceba2f23a50b7d1f335f2d",

package/kit/hooks/kit-attribution-reminder.cjs

@@ -0,0 +1,113 @@
+#!/usr/bin/env node
+// hook-version: 1.30.2
+// kit-mcp · Kit Attribution Reminder (UserPromptSubmit)
+//
+// Injeta `additionalContext` no envelope do prompt do usuário com diretiva
+// canônica v1.30.1: sempre que Claude usar comandos/agents/skills do kit-mcp
+// no turno corrente, deve abrir o sidecar (auto-spawn já cuida disso na 1ª
+// tool call) e listar os recursos usados em bloco final do output.
+//
+// Objetivo: dar feedback visual + textual de uso real do kit-mcp para o
+// usuário detectar bugs no fluxo precocemente.
+//
+// Pipeline: UserPromptSubmit hook → reads stdin envelope → writes JSON com
+// `{ continue: true, hookSpecificOutput: { hookEventName: "UserPromptSubmit",
+//    additionalContext: "<diretiva>" } }` → exit 0.
+//
+// SOFT failure: qualquer erro → exit 0 sem bloquear. Skip se
+// KIT_MCP_NO_ATTRIBUTION=1.
+//
+// Module format: CommonJS (.cjs) — compatível com qualquer setup Node.
+//
+// Enable em settings.json (project ou user):
+//   {
+//     "hooks": {
+//       "UserPromptSubmit": [{
+//         "matcher": "*",
+//         "hooks": [{
+//           "type": "command",
+//           "command": "node /abs/path/to/kit-attribution-reminder.cjs"
+//         }]
+//       }]
+//     }
+//   }
+
+'use strict';
+
+// Opt-out via env var
+if (process.env.KIT_MCP_NO_ATTRIBUTION === '1' || process.env.KIT_MCP_NO_ATTRIBUTION === 'true') {
+  process.exit(0);
+}
+
+const DIRECTIVE = [
+  '🔧 KIT-MCP ATTRIBUTION — directive ativa neste turno (v1.30.2):',
+  '',
+  'SEMPRE termine sua resposta com um bloco de atribuição kit-mcp.',
+  'Sem exceção. O usuário precisa de confirmação POSITIVA em TODO turno',
+  'sobre se kit-mcp foi usado ou não — silêncio é ambíguo (não dá pra',
+  'distinguir "não usei" de "esqueci de citar").',
+  '',
+  '**Caso A — Você USOU recursos kit-mcp neste turno:**',
+  '',
+  '   ```',
+  '   ---',
+  '   🔧 **Kit-mcp resources usados neste turno:**',
+  '   - Commands: /<command> (motivo: ...)',
+  '   - Agents: <agent-name> (via Task — motivo: ...)',
+  '   - Skills: <skill-name> (auto-trigger / consultada — motivo: ...)',
+  '   - MCP tools: mcp__kit__<tool> (motivo: ...)',
+  '   - Sidecar: http://127.0.0.1:<porta>/ (opened on first MCP tool call)',
+  '   ```',
+  '',
+  '   Omita LINHAS vazias dentro do bloco. Inclua apenas categorias usadas.',
+  '',
+  '**Caso B — Você NÃO usou nenhum recurso kit-mcp neste turno:**',
+  '',
+  '   ```',
+  '   ---',
+  '   🔧 **Kit-mcp neste turno:** nenhum recurso usado (resposta puramente',
+  '   inline / Bash / Edit / Read / Write / Grep / Glob direto sem',
+  '   delegar para agents, skills ou commands do kit).',
+  '   ```',
+  '',
+  'O que conta como "recurso kit-mcp":',
+  '- subagent_types listados em /agents kit-mcp (delegação via Task)',
+  '- skills cujo description começa com "Use ao..." e nome casa um do kit',
+  '  (supabase-*, legacy-*, cascading-*, multi-tenant-*, etc.)',
+  '- /slash-commands do kit (/supabase, /legacy, /multi-tenant, etc.)',
+  '- MCP tools mcp__kit__* invocadas',
+  '',
+  'O que NÃO conta:',
+  '- Tools nativos do Claude Code (Bash, Edit, Read, Write, Grep, Glob, Task',
+  '  com general-purpose, etc.) sem ser instrução de um kit resource',
+  '- Skills genéricas da Anthropic (anthropic-skills:*, engineering:*, etc.)',
+  '',
+  'Disable: env KIT_MCP_NO_ATTRIBUTION=1.',
+  '',
+].join('\n');
+
+let input = '';
+const stdinTimeout = setTimeout(() => process.exit(0), 3000);
+process.stdin.setEncoding('utf8');
+process.stdin.on('data', (chunk) => { input += chunk; });
+process.stdin.on('end', () => {
+  clearTimeout(stdinTimeout);
+  try {
+    // Aceita envelope vazio; só precisamos retornar o JSON com additionalContext.
+    JSON.parse(input || '{}');
+  } catch {
+    // Envelope inválido — não bloquear; sair sem inject.
+    process.exit(0);
+  }
+  const payload = JSON.stringify({
+    continue: true,
+    hookSpecificOutput: {
+      hookEventName: 'UserPromptSubmit',
+      additionalContext: DIRECTIVE,
+    },
+  });
+  // SEC-13-05 (category A): flush antes de exit
+  process.stdout.write(payload, () => process.exit(0));
+});
+
+process.stdin.on('error', () => process.exit(0));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@luanpdd/kit-mcp",
-  "version": "1.30.0",
+  "version": "1.30.2",
   "description": "Generic infrastructure to ship YOUR personal kit of agents/commands/skills as an MCP server, with cross-IDE sync (Claude Code, Cursor, Codex, Gemini, Windsurf, Antigravity, Copilot, Trae).",
   "type": "module",
   "bin": {

package/src/mcp-server/index.js

@@ -444,6 +444,37 @@ async function handleAutoInstall(args) {
     process.stderr.write(`[kit-mcp] auto-install marker write failed: ${e.message}\n`);
   }
 
+  // v1.30.2: register kit-attribution-reminder UserPromptSubmit hook in
+  // .claude/settings.local.json. Idempotent — only adds if not already present.
+  // Without this step, the attribution hook ships but never fires (user has to
+  // edit settings.json manually per-project, which was the v1.30.1 friction).
+  try {
+    const settingsPath = path.join(projectRoot, '.claude', 'settings.local.json');
+    const hookCmd = `node ${path.join(projectRoot, '.claude', 'hooks', 'kit-attribution-reminder.cjs').replace(/\\/g, '/')}`;
+    let settings = {};
+    try {
+      const raw = await fs.readFile(settingsPath, 'utf8');
+      settings = JSON.parse(raw);
+    } catch { /* file may not exist yet */ }
+    settings.hooks = settings.hooks || {};
+    settings.hooks.UserPromptSubmit = settings.hooks.UserPromptSubmit || [];
+    // Check if already registered (idempotent)
+    const alreadyRegistered = settings.hooks.UserPromptSubmit.some((entry) => {
+      if (!entry || !Array.isArray(entry.hooks)) return false;
+      return entry.hooks.some((h) => typeof h?.command === 'string' && h.command.includes('kit-attribution-reminder'));
+    });
+    if (!alreadyRegistered) {
+      settings.hooks.UserPromptSubmit.push({
+        matcher: '*',
+        hooks: [{ type: 'command', command: hookCmd }],
+      });
+      await fs.mkdir(path.dirname(settingsPath), { recursive: true });
+      await fs.writeFile(settingsPath, JSON.stringify(settings, null, 2) + '\n', 'utf8');
+    }
+  } catch (e) {
+    process.stderr.write(`[kit-mcp] attribution hook registration failed (non-fatal): ${e.message}\n`);
+  }
+
   // Phase 168 (v1.29): write .kit-mcp-restart-required so doctor/host can detect
   // pending restart even if the user closes/reopens kit-mcp without restarting IDE.
   try {
@@ -572,9 +603,31 @@ export async function createServer() {
 
   server.setRequestHandler(ListToolsRequestSchema, async () => ({ tools: TOOLS }));
 
+  // v1.30.1: open browser tab on FIRST kit-mcp tool invocation (not on boot —
+  // would spam tabs on IDE start). Provides visual feedback that kit-mcp is
+  // actively being used. Escape hatch: KIT_MCP_NO_UI=1 (same as auto-spawn) or
+  // KIT_MCP_NO_BROWSER=1 (sidecar runs but no browser open).
+  let kitFirstToolBrowserOpened = false;
   server.setRequestHandler(CallToolRequestSchema, async (req) => {
     const { name, arguments: args } = req.params;
     const handler = HANDLERS[name];
+
+    // v1.30.1: first-tool browser open — fire-and-forget; never blocks handler.
+    // Suppressed in same conditions as boot-time sidecar (test/CI/no-ui).
+    if (!kitFirstToolBrowserOpened) {
+      kitFirstToolBrowserOpened = true;
+      const noUi = process.env.KIT_MCP_NO_UI === '1' || process.env.KIT_MCP_NO_UI === 'true';
+      const noBrowser = process.env.KIT_MCP_NO_BROWSER === '1' || process.env.KIT_MCP_NO_BROWSER === 'true';
+      const isTestRun = (process.execArgv || []).some(
+        (a) => a === '--test' || a === '--experimental-test-coverage',
+      ) || process.env.NODE_TEST_CONTEXT !== undefined;
+      const isCi = process.env.CI === 'true' || process.env.CI === '1';
+      if (!noUi && !noBrowser && !isTestRun && !isCi) {
+        const projectRoot = args?.projectRoot || process.cwd();
+        ensureSidecar({ projectRoot, openBrowserOnSpawn: true }).catch(() => {});
+      }
+    }
+
     if (!handler) {
       // OBS-18 (Phase 94.01): unknown-tool path counts as an error against
       // the unknown name itself — useful signal if a client is mis-spelling