Kiro Plugin · FSL-1.1

Test first. Not because you remembered.

Zensu keeps your product — features, specs, security, release state — in one record outside the chat. This plugin lets Kiro implement against that record test-first: on the CLI that lock is a hard gate, and five reviewers run before the agent can say done. Same plugin for the IDE and the CLI.

5
reviewers per change
conventions · bugs · architecture · tests · security
0
lines before a failing test
blocked on the CLI, steered in the IDE
1
feature record — spec to release
your team shapes it in Zensu, your agent implements against it
Why

Discipline you don’t have to maintain.

Kiro writes code fast. Whether the test comes first, whether anyone checks the result, and where your product lives afterwards — that normally comes down to you remembering.

On its own

  • Tests come after the code, if they come at all.
  • The spec lives in the chat scrollback. Next session it is gone.
  • It says “done”. You are the only one who ever checks.
  • The board gets updated by hand, after the fact — when someone remembers.

With Zensu installed

  • No production code gets written until a test has failed first — on the CLI it is denied outright.
  • The spec is a feature record — journeys, acceptance criteria, security classification — and the agent implements against it.
  • It cannot finish until five reviewers have run and their findings are fixed.
  • Source files, tests and docs link themselves to the record as the work happens.
What you get

Three things change on day one.

There is no new workflow to learn. You keep prompting the way you already do — the difference is where your product lives and what happens after you stop typing.

The test comes first, always

Start a task and the agent is locked into red before green: write a test, watch it fail, and only then touch production code. On the Kiro CLI that lock is a real gate — a write that skips the failing test is denied outright and the reason goes straight back to the model. In the IDE the same discipline runs as steering.

It implements the record, not the prompt

Features start life in Zensu — drafted from a vision doc, imported from an existing repo, or shaped in the browser by whoever owns the product. You say “implement ZEN-42”; the agent pulls the spec behind it — user journeys, acceptance criteria, security classification — and builds against the record instead of guessing from the prompt.

The ticket updates itself

As the agent works, source files, tests and docs get linked to the feature, status moves along the lifecycle, and release readiness recomputes. Your PO watches it move on app.zensu.dev without asking — and there is no status update left for you to write.

All three run on a typed zensu command line the agents drive in their own context windows — so none of it eats the session you are working in.

Two hosts

One plugin. Both Kiro hosts.

Kiro ships as an IDE and as a CLI, and Zensu installs into both from one repo. They do not enforce the same way, though — and that difference is worth knowing before you pick.

Kiro CLI

Rules are enforced

blocks
  • A write that skips the failing test is denied outright
  • The agent cannot end its turn before the review chain has run
  • One script install, then set zensu as your default agent
Kiro IDE

Rules are advised

steers
  • The same disciplines run as strong steering, not hard blocks
  • Same skills, same agents, same commands as the CLI
  • Installs from the Powers panel — add power from GitHub

Want the guarantees to actually hold? Use the CLI. Want to stay in the editor? Use the IDE and treat the disciplines as strong defaults rather than locks. Both share the same settings, so you can run one repo through either.

Install

Pick your host. Same plugin.

Skills, agents and hooks register themselves, and everything runs standalone right away. The first command that needs a workspace opens a browser — no API key, no config file to write.

Enforced

Kiro CLI

Install the script, then make zensu the default agent so the gates are armed for every session.

# Clone, install, arm the agent
git clone https://github.com/MKITConsulting/zensu-kiro
cd zensu-kiro && bash install.sh
kiro-cli agent set-default zensu

Kiro IDE

Powers panel → Add power from GitHub. One onboarding run wires the skills and agents in.

# From the Power checkout directory
bash install.sh --scope user --no-default

Re-running the installer is safe — it never overwrites a file you edited. For CI, headless runs and updating, see theREADME.

Under the hood

For when you want the details.

The short version is everything above. This is what is actually in the box — the README carries the full reference.

4 agents, 12 skills, 13 hooks

Every stage of the lifecycle has a typed entry point, from /zensu-bootstrap on an existing repo to /zensu-pr-team-review on a pull request. In practice you will use two or three of them — the hooks chain the rest.

Nothing loaded into your session

The agents drive a typed zensu command line from their own context windows rather than loading a tool surface into yours. Feature tracking, security analysis, journeys, tiers, roadmaps, wiki pages and ghost scans all run there.

The same plugin as Claude Code

Same disciplines, same review chain, same config schema, same CLI as the Claude Code port, so a team can run both without learning two systems. The honest difference: there the hard gates hold on every session, here they hold on the CLI and steer in the IDE.

Yours to run

Source-available under FSL-1.1-Apache-2.0, and each release turns Apache 2.0 after two years. Point it at your own endpoint, or run it with no account at all — connect a workspace later and artifacts start linking themselves. The activity journal records tool usage and feature context — never your code.

Install the plugin. Ship the feature.

FSL-1.1-Apache-2.0, source-available. Runs on both Kiro hosts, standalone today — connect a Zensu workspace and the whole loop lights up. Workspaces are in closed beta.