@mutmutco/kilo-plugin 3.125.0 → 3.126.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/kilo-plugin",
-  "version": "3.125.0",
+  "version": "3.126.0",
   "description": "MMI workflow skills and org gates delivery.",
   "author": {
     "name": "MMI Future",

package/scripts/hook-run.mjs

@@ -343,7 +343,7 @@ export async function runPolicyGate({ surface, gate: gateId, input = Buffer.allo
   hookSurface(surface);
   const root = pluginRoot(surface, env, here);
   const target = join(root, 'scripts', gate.script);
-  const normalizedInput = normalizeInput(surface, gateId, input);
+  const normalizedInput = normalizeInput(surface, gateId, stripUtf8Bom(input));
   const effectiveEnv = childEnv(surface, normalizedInput, env);
   let result;
 
@@ -395,6 +395,16 @@ export async function runPolicyGate({ surface, gate: gateId, input = Buffer.allo
   };
 }
 
+/** #4878: Cursor's Windows payload transport pipes the hook payload through PowerShell with
+ *  `$OutputEncoding = [System.Text.Encoding]::UTF8` — the BOM-EMITTING encoder — so the JSON arrives
+ *  prefixed with EF BB BF. JSON.parse refuses a BOM, every parse in this chain (normalizeInput,
+ *  payloadMeta, the gate scripts) came back empty, and the fail-open no-payload arm (#2992) silently
+ *  waved the call through. Stripped once at the gate entry so every consumer parses the same bytes. */
+function stripUtf8Bom(input) {
+  const buffer = Buffer.from(input);
+  return buffer[0] === 0xef && buffer[1] === 0xbb && buffer[2] === 0xbf ? buffer.subarray(3) : buffer;
+}
+
 function readStdin() {
   try {
     return readFileSync(0);