kibi-cursor 2.7.5 → 2.8.0

package/.cursor-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "kibi-cursor",
   "displayName": "Kibi",
-  "version": "2.7.5",
+  "version": "2.8.0",
   "description": "Optional Cursor adapter for Kibi. Requires project-local kibi-cli, kibi-mcp, and kibi-core (SWI-Prolog is bundled on Linux and macOS) before the bundled MCP server can start.",
   "license": "AGPL-3.0-or-later",
   "author": {

package/CHANGELOG.md

@@ -1,5 +1,28 @@
 # kibi-cursor
 
+## 2.8.0
+
+### Minor Changes
+
+- 00d2871: The Codex, Cursor and ZCode hooks now act on recorded decisions while the work happens, as the Claude Code hooks do.
+  - **Firm requirements before the edit.** When an edit changes code that implements a current firm requirement, the pre-edit hook tells the agent to ask the person before an edit that breaks that rule, naming the rule; once per requirement per session. These hosts cannot put the question to the person from a hook (Codex has no "ask", Cursor does not enforce one, and the ZCode adapter stays advisory), so this is a notice to the agent. Set `KIBI_CONFIRM_FIRM_EDITS=0` to turn it off.
+  - **Stated rules are captured.** A prompt that reads as a rule ("must", "never", "from now on") gets the note that recording it with `kb_upsert` is part of the change: through a new `UserPromptSubmit` hook in Codex and ZCode, and in Cursor through a new `beforeSubmitPrompt` hook whose note arrives with the next pre-edit message. When a session changed source files and wrote nothing with `kb_upsert`, the stop hook asks once for the decision to be recorded (Codex continues the turn with it; Cursor adds it to the stop follow-up; ZCode adds it to the Stop context).
+  - **Codex unlinked-file candidates** are ranked by the latest prompt's words as well as the path's.
+
+  `kibi-agent-core`: new `kibi-agent-core/decision-guard` entry with the host-neutral pieces (`firmRequirementsTouched`, `firmEditNotice`, `confirmFirmEdits`, the prompt and stop notes, and per-session markers). `kibi-claude` now imports its firm-edit and capture texts from it; behavior is unchanged.
+
+### Patch Changes
+
+- Updated dependencies [00d2871]
+  - kibi-agent-core@0.8.0
+
+## 2.7.6
+
+### Patch Changes
+
+- Updated dependencies [b9ec91d]
+  - kibi-agent-core@0.7.0
+
 ## 2.7.5
 
 ### Patch Changes

package/README.md

@@ -122,11 +122,12 @@ agent-plugin/
 Hooks are warning-only and never replace MCP/CLI behavior:
 
 - **sessionStart**: bootstrap reminder when `.kb/manifest.json` is missing.
-- **preToolUse**: warns on explicit direct `.kb/**` edits without blocking. Before the first edit of a file whose symbols implement a requirement, it adds the shared Kibi snippet (from `kibi-agent-core/snippets`, the same builder the Claude Code plugin uses): the requirements and their implementing symbols, what the lead requirement must keep true and the decision behind it, the covering tests, and the symbol the edit lands in. A superseded or retired lead requirement gets no "must keep true" or "Decision" line. Once per path per session.
+- **preToolUse**: warns on explicit direct `.kb/**` edits without blocking. Before the first edit of a file whose symbols implement a requirement, it adds the shared Kibi snippet (from `kibi-agent-core/snippets`, the same builder the Claude Code plugin uses): the requirements and their implementing symbols, what the lead requirement must keep true and the decision behind it, the covering tests, and the symbol the edit lands in. A superseded or retired lead requirement gets no "must keep true" or "Decision" line. Once per path per session. When the edited code implements a firm requirement (a rule the person set), the message first tells the agent to ask the person before an edit that breaks it, once per requirement per conversation (Cursor does not enforce a hook's "ask"; `KIBI_CONFIRM_FIRM_EDITS=0` turns this off).
+- **beforeSubmitPrompt**: never blocks a prompt. A prompt that states a rule ("must not", "from now on") leaves a note, delivered with the next pre-edit message, to record that rule with `kb_upsert` as part of the change.
 - **beforeReadFile** and **postToolUse (Read)**: inject source-linked lookup guidance once per path per session, with the same snippet minus the "must keep true" and "Decision" lines.
 - **postToolUse** (opt-in telemetry): with `KIBI_DIAGNOSTIC_MODE=1`, appends `interface: "hook"` rows with `host: "cursor"` to `.kb/usage.log` for `kb_*` lookups (MCP or `kibi <route>` in Shell) and for edited files with the requirements they implement, keyed by `conversation_id`. `kibi usage-metrics` reads them for the `lookup_before_first_edit` metric. Nothing is written without the variable.
 - **postToolUse (Write/Edit)**: inject traceability and freshness guidance once per path per session, including `kb_check({sourceFiles:[...], includeImpactDiagnostics:true, includeWorkingTreeDiff:true})` for meaningful source edits.
-- **stop**: emits a single freshness or impact-check follow-up when meaningful paths were **edited** during the turn (reads and search do not count). Plan delivery (`CreatePlan`) stays silent unless that same turn also edited source or mutated the KB.
+- **stop**: emits a single freshness or impact-check follow-up when meaningful paths were **edited** during the turn (reads and search do not count). Plan delivery (`CreatePlan`) stays silent unless that same turn also edited source or mutated the KB. When the conversation changed source files and recorded nothing with `kb_upsert`, the follow-up also asks, once, for the decision behind the change to be recorded.
 
 ### What the plugin does not do
 

package/agent-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
   "name": "kibi",
-  "version": "2.7.5",
+  "version": "2.8.0",
   "description": "Repo-local, per-branch, queryable knowledge base. Portable Agent Plugin packaging Kibi's Agent Skills and MCP server.",
   "author": { "name": "Kibi" },
   "homepage": "https://looted.github.io/kibi/",

package/dist/.cursor-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "kibi-cursor",
   "displayName": "Kibi",
-  "version": "2.7.5",
+  "version": "2.8.0",
   "description": "Optional Cursor adapter for Kibi. Requires project-local kibi-cli, kibi-mcp, and kibi-core (SWI-Prolog is bundled on Linux and macOS) before the bundled MCP server can start.",
   "license": "AGPL-3.0-or-later",
   "author": {

package/dist/hook-input.d.ts

@@ -1,4 +1,4 @@
-export type HookEvent = "sessionStart" | "preToolUse" | "postToolUse" | "beforeReadFile" | "stop";
+export type HookEvent = "sessionStart" | "preToolUse" | "postToolUse" | "beforeReadFile" | "beforeSubmitPrompt" | "stop";
 export type HookStopStatus = "completed" | "aborted" | "error";
 export type HookInput = {
     event: string;
@@ -9,6 +9,8 @@ export type HookInput = {
     conversationId?: string;
     filePath?: string;
     status?: HookStopStatus;
+    /** beforeSubmitPrompt: the submitted prompt. */
+    prompt?: string;
 };
 export declare function parseHookInput(input: unknown): HookInput;
 export declare function readStdin(): Promise<string>;

package/dist/hook-input.js

@@ -68,6 +68,7 @@ export function parseHookInput(input) {
     ]);
     const filePath = readString(input, ["file_path", "filePath", "path"]);
     const status = parseStopStatus(readString(input, ["status"]));
+    const prompt = readString(input, ["prompt"]);
     const parsed = { event };
     if (cwd !== undefined) {
         parsed.cwd = cwd;
@@ -87,6 +88,9 @@ export function parseHookInput(input) {
     if (filePath !== undefined) {
         parsed.filePath = filePath;
     }
+    if (prompt !== undefined) {
+        parsed.prompt = prompt;
+    }
     if (status !== undefined) {
         parsed.status = status;
     }

package/dist/hook-runner.d.ts

@@ -1,5 +1,7 @@
 #!/usr/bin/env node
 export type CursorHookResult = {
+    /** beforeSubmitPrompt only: whether the prompt goes through. */
+    continue?: boolean;
     additional_context?: string;
     permission?: "allow" | "deny";
     user_message?: string;

package/dist/hook-runner.js

@@ -3,6 +3,7 @@
 import fs from "node:fs";
 import path from "node:path";
 import { fileURLToPath, pathToFileURL } from "node:url";
+import { captureReminder, claimCaptureReminder, confirmFirmEdits, firmEditNotice, firmRequirementsTouched, hasDecisionFlag, holdRuleNote, markDecisionFlag, recordRequest, settleFirmRequirements, settledFirmRequirements, takeRuleNote, } from "kibi-agent-core/decision-guard";
 import { appendHookUsageRows, editTraces, hookTelemetryEnabled, kbUsageTrace, readPackageVersion, } from "kibi-agent-core/hook-usage-log";
 import { stampKibiWorkspace } from "kibi-agent-core/kb-mcp-tools";
 import { createEntitySummarizer, editFocus, fileKnowledgeSnippet, implementedRequirementIds, } from "kibi-agent-core/snippets";
@@ -11,7 +12,7 @@ import { parseHookInput, parseStdinJson, readStdin } from "./hook-input.js";
 import { addDirtyPaths, clearSessionHookState, hasGuidedPath, loadHookState, recordKbMcpTool, recordPlanDelivered, rememberGuidedPath, resolveStateDir, } from "./hook-state.js";
 import { extractKbMcpToolCall } from "./kb-mcp-tools.js";
 import { BOOTSTRAP_REMINDER, DIRECT_KB_EDIT_WARNING, interfaceAdvisory, stopFollowupMessage, } from "./messages.js";
-import { extractExplicitPathFields, isDirectKbPath, isKbFreshnessRelevantPath, isMeaningfulTrackedPath, toRepoRelativePath, } from "./path-policy.js";
+import { extractExplicitPathFields, isDirectKbPath, isKbFreshnessRelevantPath, isMeaningfulTrackedPath, isSourceImpactRelevantPath, toRepoRelativePath, } from "./path-policy.js";
 import { getSourceLinkedSymbols, } from "./source-linked-requirements.js";
 const MAX_LINKED_REQUIREMENTS = 3;
 /**
@@ -31,6 +32,28 @@ function knowledgeFor(workspaceRoot, linked, surface, focus) {
         summarize: createEntitySummarizer(workspaceRoot),
     });
 }
+// implements REQ-agent-hosts-decision-guard
+/**
+ * Cursor does not enforce a hook's "ask", so an edit of code that implements
+ * a firm requirement gets a notice telling the agent to ask the person first,
+ * once per requirement per conversation.
+ */
+function firmNotice(workspaceRoot, linked, focus, session, env) {
+    if (!confirmFirmEdits(env))
+        return undefined;
+    const summarize = createEntitySummarizer(workspaceRoot);
+    const { ids, symbol } = firmRequirementsTouched({
+        symbols: linked.symbols,
+        focus,
+        wholeFile: focus === undefined,
+        summarize,
+        confirmed: settledFirmRequirements(session),
+    });
+    if (ids.length === 0)
+        return undefined;
+    settleFirmRequirements(session, ids);
+    return firmEditNotice(symbol ? `${symbol.title} in ${linked.relativePath}` : linked.relativePath, ids.map(summarize));
+}
 let cachedPackageVersion;
 function packageVersion() {
     // dist/hook-runner.js sits one level below the package root.
@@ -140,6 +163,10 @@ export async function runHook(rawInput, environment = {}) {
     const kibiReady = hasKibiConfig(cwd);
     const workspaceTrusted = environment.workspaceTrusted === true;
     const initialState = loadHookState(stateDir);
+    const session = {
+        stateDir,
+        sessionId: input.conversationId,
+    };
     switch (input.event) {
         case "sessionStart":
             if (!kibiReady) {
@@ -177,23 +204,38 @@ export async function runHook(rawInput, environment = {}) {
             }
             const relativePath = toRepoRelativePath(primaryPath, cwd);
             const state = loadHookState(stateDir);
-            if (hasGuidedPath(state, "pre-edit", relativePath)) {
-                return emptyResult();
-            }
             const linked = getSourceLinkedSymbols(cwd, primaryPath, stateDir);
-            const guidance = preEditGuidance(primaryPath, {
-                cwd,
-                hasKibi: kibiReady,
-                mcpState: state.mcpState,
-                workspaceTrusted,
-                linkedRequirementIds: implementedRequirementIds(linked.symbols).slice(0, MAX_LINKED_REQUIREMENTS),
-                knowledge: knowledgeFor(cwd, linked, "edit", editFocus(path.resolve(cwd, primaryPath), input.toolInput)),
-            });
-            if (!guidance) {
-                return emptyResult();
+            const focus = editFocus(path.resolve(cwd, primaryPath), input.toolInput);
+            const ruleNote = takeRuleNote(session);
+            const notice = firmNotice(cwd, linked, focus, session, environment.env ?? process.env);
+            const guidance = hasGuidedPath(state, "pre-edit", relativePath)
+                ? undefined
+                : preEditGuidance(primaryPath, {
+                    cwd,
+                    hasKibi: kibiReady,
+                    mcpState: state.mcpState,
+                    workspaceTrusted,
+                    linkedRequirementIds: implementedRequirementIds(linked.symbols).slice(0, MAX_LINKED_REQUIREMENTS),
+                    knowledge: knowledgeFor(cwd, linked, "edit", focus),
+                });
+            if (guidance) {
+                rememberGuidedPath(stateDir, "pre-edit", relativePath);
+            }
+            const parts = [ruleNote, notice, guidance].filter((part) => part !== undefined);
+            return parts.length > 0
+                ? { permission: "allow", agent_message: parts.join("\n\n") }
+                : emptyResult();
+        }
+        // implements REQ-agent-hosts-decision-guard
+        case "beforeSubmitPrompt": {
+            // Cursor's prompt hook cannot add context: the request's rule note
+            // waits for the next pre-edit message.
+            if (kibiReady && input.prompt) {
+                const rule = recordRequest(session, input.prompt);
+                if (rule !== undefined)
+                    holdRuleNote(session, rule);
             }
-            rememberGuidedPath(stateDir, "pre-edit", relativePath);
-            return { permission: "allow", agent_message: guidance };
+            return { continue: true };
         }
         case "beforeReadFile": {
             const primaryPath = resolvePrimaryPath(input);
@@ -249,6 +291,14 @@ export async function runHook(rawInput, environment = {}) {
                 if (dirtyPaths.length > 0) {
                     addDirtyPaths(stateDir, dirtyPaths);
                 }
+                if (dirtyPaths.some(isSourceImpactRelevantPath)) {
+                    markDecisionFlag(session, "source-edited");
+                }
+            }
+            if (kbToolCall?.toolName === "kb_upsert" ||
+                kbUsageTrace(input.toolName, input.toolInput)?.kbOperation ===
+                    "kb_upsert") {
+                markDecisionFlag(session, "kb-recorded");
             }
             const primaryPath = resolvePrimaryPath(input);
             if (!primaryPath || !kibiReady) {
@@ -307,7 +357,17 @@ export async function runHook(rawInput, environment = {}) {
                 }
                 return emptyResult();
             }
-            const followupMessage = stopFollowupMessage(state);
+            // implements REQ-agent-hosts-decision-guard
+            // Source changed and nothing was recorded: the follow-up asks for the
+            // decision to be recorded, once per conversation.
+            const followupMessage = [
+                claimCaptureReminder(session)
+                    ? captureReminder(hasDecisionFlag(session, "rule-prompt"))
+                    : undefined,
+                stopFollowupMessage(state),
+            ]
+                .filter((part) => part !== undefined)
+                .join("\n");
             if (followupMessage) {
                 clearSessionHookState(stateDir);
                 return { followup_message: followupMessage };

package/dist/hooks/hooks.json

@@ -6,6 +6,11 @@
         "command": "node dist/hook-runner.js"
       }
     ],
+    "beforeSubmitPrompt": [
+      {
+        "command": "node dist/hook-runner.js"
+      }
+    ],
     "preToolUse": [
       {
         "command": "node dist/hook-runner.js"

package/hooks/hooks.json

@@ -6,6 +6,11 @@
         "command": "node dist/hook-runner.js"
       }
     ],
+    "beforeSubmitPrompt": [
+      {
+        "command": "node dist/hook-runner.js"
+      }
+    ],
     "preToolUse": [
       {
         "command": "node dist/hook-runner.js"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kibi-cursor",
-  "version": "2.7.5",
+  "version": "2.8.0",
   "description": "Kibi Cursor plugin - thin adapter for Cursor MCP integration and editor hooks",
   "type": "module",
   "main": "dist/index.js",
@@ -59,7 +59,7 @@
     }
   },
   "dependencies": {
-    "kibi-agent-core": "^0.6.0"
+    "kibi-agent-core": "^0.8.0"
   },
   "devDependencies": {
     "@types/node": "latest",