kibi-cursor 2.7.3 → 2.7.4

package/.cursor-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "kibi-cursor",
   "displayName": "Kibi",
-  "version": "2.7.3",
+  "version": "2.7.4",
   "description": "Optional Cursor adapter for Kibi. Requires project-local kibi-cli, kibi-mcp, and kibi-core (SWI-Prolog is bundled on Linux and macOS) before the bundled MCP server can start.",
   "license": "AGPL-3.0-or-later",
   "author": {

package/CHANGELOG.md

@@ -1,5 +1,15 @@
 # kibi-cursor
 
+## 2.7.4
+
+### Patch Changes
+
+- a26ba8c: A firm requirement or ADR can no longer be reworded in place by an agent. `kb_upsert` refuses to change its title, statement or ADR body, or to lower its firmness, unless the write cites new words from the person who owns the rule, and `kb_check` reports the same change made directly to the file. Context sections, tags, status and links stay editable, and superseding with a new firm decision still works as before.
+  - `kb_upsert` (dryRun and `kb_apply_plan` steps included) rejects an in-place claim change of a current firm decision without a new `origin.ref` (or `approval_ref` on a requirement): `Entity validation failed: <ID> is a firm decision, so kb_upsert does not change its <fields> in place`.
+  - New canonical `kb_check` rule `decision-firm-edited` compares current firm decisions with `HEAD` and blocks a changed claim that cites no new human words; it reports nothing outside a Git checkout or before the first commit.
+  - A requirement's claim is its title, its `semantic_text` (or the statement its body derives); an ADR's claim is its title and body. Lowering firmness or replacing the origin with an agent's counts as a change.
+  - `kibi-usage` skill 2.18.0 tells agents not to edit firm decisions in place; the `firmness` input schema description now states the origin-derived default and the edit rule.
+
 ## 2.7.3
 
 ### Patch Changes

package/agent-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
   "name": "kibi",
-  "version": "2.7.3",
+  "version": "2.7.4",
   "description": "Repo-local, per-branch, queryable knowledge base. Portable Agent Plugin packaging Kibi's Agent Skills and MCP server.",
   "author": { "name": "Kibi" },
   "homepage": "https://looted.github.io/kibi/",

package/agent-plugin/skills/kibi-usage/SKILL.md

@@ -2,7 +2,7 @@
 id: kibi-usage
 name: Kibi Usage
 description: Use Kibi's source-first, exact-Git, migration-aware, proof-aware operations safely across MCP or the trusted local CLI, including partial completion repair.
-version: 2.17.0
+version: 2.18.0
 kibiCompatibility: ">=1.0.0"
 tags:
   - kibi
@@ -368,7 +368,11 @@ Search answers, `kb_query` rows and hook snippets show it (snippets label only
   wrote it (`origin.kind: agent`): rules people wrote, imported or carried
   over from before origins existed are theirs. `kb_check` blocks an explicit
   `firmness: firm` without `origin.ref` to their words, and a replacement of
-  a firm decision that is not itself firm.
+  a firm decision that is not itself firm. Never edit a firm decision's
+  title, statement or (ADR) body in place, by `kb_upsert` or on disk:
+  `kb_upsert` refuses it and `kb_check` reports `decision-firm-edited`
+  unless the edit cites new human words in `origin.ref`. Context sections,
+  tags, status and links stay editable.
 - `default`: a delegated or agent choice (`firmness: default`, or an
   agent-written decision without `firmness`). Follow it; supersede it only on
   evidence that it is wrong (a failing test, a measured cost, a constraint it
@@ -381,7 +385,8 @@ conflict a person has to decide. Name the rule (id and what it requires) and
 ask whether to change it; do not implement the request and do not supersede
 the rule. Go ahead only when the person has said to change that rule, in this
 task or in reply: then supersede it with `firmness: firm` and `origin.ref` to
-their words, and say in the final answer which rule changed.
+their words (or, for a correction they asked for in place, update it with
+`origin.ref` to those words), and say in the final answer which rule changed.
 
 Set `firmness` from what a human actually said: only their stated rule is
 `firm` (with `origin.ref`); "do whatever" or your own pick is `default`; a

package/dist/.cursor-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "kibi-cursor",
   "displayName": "Kibi",
-  "version": "2.7.3",
+  "version": "2.7.4",
   "description": "Optional Cursor adapter for Kibi. Requires project-local kibi-cli, kibi-mcp, and kibi-core (SWI-Prolog is bundled on Linux and macOS) before the bundled MCP server can start.",
   "license": "AGPL-3.0-or-later",
   "author": {

package/dist/skills/.canon-hash.json

@@ -13,7 +13,7 @@
   "kibi-traceability/resources/operation-access.md": "39f7972ab7f4ae7479e78f7072bb50e8e6c4cdf4f857425f69d2522d37db437c",
   "kibi-traceability/resources/source-authoring.md": "408c6ee2bef1b84e0194c0538ef929c26a0a617e631b2234247388140dbbdd08",
   "kibi-traceability/resources/traceability.md": "38c290a0bc71bd1692e115f22694743946e2f69630e134acfd43cee5f613fb88",
-  "kibi-usage/SKILL.md": "7db765e0b5a2861809e18a74b15ad64a8049260c1a5a61d467092f419957ffa8",
+  "kibi-usage/SKILL.md": "7c1b469c7bf8332f74196b6a7f40fe5e7ae82d97e36bb8c50cbac2047b8b420c",
   "kibi-usage/resources/branch-lifecycle.md": "f1bf359e9826e83c548f3cd0287f8175a62456527b0132b06b3f9f74aa59b7d6",
   "kibi-usage/resources/fact-lanes.md": "899218f90396aa469b6e34aeb5f7ea1f38bf11bb326102319f376c213859fb33",
   "kibi-usage/resources/kb-improvement.md": "a8408fce27342bdce6415a6718599e53fe00bb33aa1fd3dc42353ec6f61adcd7",

package/dist/skills/kibi-usage/SKILL.md

@@ -2,7 +2,7 @@
 id: kibi-usage
 name: Kibi Usage
 description: Use Kibi's source-first, exact-Git, migration-aware, proof-aware operations safely across MCP or the trusted local CLI, including partial completion repair.
-version: 2.17.0
+version: 2.18.0
 kibiCompatibility: ">=1.0.0"
 tags:
   - kibi
@@ -368,7 +368,11 @@ Search answers, `kb_query` rows and hook snippets show it (snippets label only
   wrote it (`origin.kind: agent`): rules people wrote, imported or carried
   over from before origins existed are theirs. `kb_check` blocks an explicit
   `firmness: firm` without `origin.ref` to their words, and a replacement of
-  a firm decision that is not itself firm.
+  a firm decision that is not itself firm. Never edit a firm decision's
+  title, statement or (ADR) body in place, by `kb_upsert` or on disk:
+  `kb_upsert` refuses it and `kb_check` reports `decision-firm-edited`
+  unless the edit cites new human words in `origin.ref`. Context sections,
+  tags, status and links stay editable.
 - `default`: a delegated or agent choice (`firmness: default`, or an
   agent-written decision without `firmness`). Follow it; supersede it only on
   evidence that it is wrong (a failing test, a measured cost, a constraint it
@@ -381,7 +385,8 @@ conflict a person has to decide. Name the rule (id and what it requires) and
 ask whether to change it; do not implement the request and do not supersede
 the rule. Go ahead only when the person has said to change that rule, in this
 task or in reply: then supersede it with `firmness: firm` and `origin.ref` to
-their words, and say in the final answer which rule changed.
+their words (or, for a correction they asked for in place, update it with
+`origin.ref` to those words), and say in the final answer which rule changed.
 
 Set `firmness` from what a human actually said: only their stated rule is
 `firm` (with `origin.ref`); "do whatever" or your own pick is `default`; a

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kibi-cursor",
-  "version": "2.7.3",
+  "version": "2.7.4",
   "description": "Kibi Cursor plugin - thin adapter for Cursor MCP integration and editor hooks",
   "type": "module",
   "main": "dist/index.js",

package/skills/.canon-hash.json

@@ -13,7 +13,7 @@
   "kibi-traceability/resources/operation-access.md": "39f7972ab7f4ae7479e78f7072bb50e8e6c4cdf4f857425f69d2522d37db437c",
   "kibi-traceability/resources/source-authoring.md": "408c6ee2bef1b84e0194c0538ef929c26a0a617e631b2234247388140dbbdd08",
   "kibi-traceability/resources/traceability.md": "38c290a0bc71bd1692e115f22694743946e2f69630e134acfd43cee5f613fb88",
-  "kibi-usage/SKILL.md": "7db765e0b5a2861809e18a74b15ad64a8049260c1a5a61d467092f419957ffa8",
+  "kibi-usage/SKILL.md": "7c1b469c7bf8332f74196b6a7f40fe5e7ae82d97e36bb8c50cbac2047b8b420c",
   "kibi-usage/resources/branch-lifecycle.md": "f1bf359e9826e83c548f3cd0287f8175a62456527b0132b06b3f9f74aa59b7d6",
   "kibi-usage/resources/fact-lanes.md": "899218f90396aa469b6e34aeb5f7ea1f38bf11bb326102319f376c213859fb33",
   "kibi-usage/resources/kb-improvement.md": "a8408fce27342bdce6415a6718599e53fe00bb33aa1fd3dc42353ec6f61adcd7",

package/skills/kibi-usage/SKILL.md

@@ -2,7 +2,7 @@
 id: kibi-usage
 name: Kibi Usage
 description: Use Kibi's source-first, exact-Git, migration-aware, proof-aware operations safely across MCP or the trusted local CLI, including partial completion repair.
-version: 2.17.0
+version: 2.18.0
 kibiCompatibility: ">=1.0.0"
 tags:
   - kibi
@@ -368,7 +368,11 @@ Search answers, `kb_query` rows and hook snippets show it (snippets label only
   wrote it (`origin.kind: agent`): rules people wrote, imported or carried
   over from before origins existed are theirs. `kb_check` blocks an explicit
   `firmness: firm` without `origin.ref` to their words, and a replacement of
-  a firm decision that is not itself firm.
+  a firm decision that is not itself firm. Never edit a firm decision's
+  title, statement or (ADR) body in place, by `kb_upsert` or on disk:
+  `kb_upsert` refuses it and `kb_check` reports `decision-firm-edited`
+  unless the edit cites new human words in `origin.ref`. Context sections,
+  tags, status and links stay editable.
 - `default`: a delegated or agent choice (`firmness: default`, or an
   agent-written decision without `firmness`). Follow it; supersede it only on
   evidence that it is wrong (a failing test, a measured cost, a constraint it
@@ -381,7 +385,8 @@ conflict a person has to decide. Name the rule (id and what it requires) and
 ask whether to change it; do not implement the request and do not supersede
 the rule. Go ahead only when the person has said to change that rule, in this
 task or in reply: then supersede it with `firmness: firm` and `origin.ref` to
-their words, and say in the final answer which rule changed.
+their words (or, for a correction they asked for in place, update it with
+`origin.ref` to those words), and say in the final answer which rule changed.
 
 Set `firmness` from what a human actually said: only their stated rule is
 `firm` (with `origin.ref`); "do whatever" or your own pick is `default`; a