@warnyin/sdlc 0.13.0 → 0.14.1

package/CHANGELOG.md

@@ -1,5 +1,32 @@
 # Changelog
 
+## 0.14.1 (2026-09-19)
+
+- **Fix (init)**: adding a tool to a project that already has `sdlc/` no longer loses it on the
+  next update. `init --tool <newtool>` installed the tool's files but never recorded it in
+  `sdlc/config.yaml`'s `tools:` line, so the next plain `update` read that stale list and
+  **silently pruned the files it had just installed**. `init` now records what it installs,
+  added to whatever was already listed — never removing an entry, because `init` has no prune
+  capability and this does not give it one. Only `update --tool <list>` still replaces the list
+  wholesale and prunes what is left out. The install summary says `(recorded <tools>)` when the
+  list actually grew, and only then. A `config.yaml` carrying no `tools:` line at all is still
+  left alone, exactly as `update` already leaves it.
+- **Fix (config)**: the `tools:` line rewrite — now shared by `init` and `update` instead of
+  living inline in one of them — passes its replacement as a function rather than a string, so
+  a tool name containing `$&`, `` $` `` or `$'` in a hand-edited config is written literally
+  instead of being interpreted by `String.replace` and mangling the surrounding file.
+
+## 0.14.0 (2026-09-19)
+
+- **Feature (init)**: `kimi` (Kimi Code CLI) is now a supported tool. Selecting or detecting it
+  installs a dedicated `.kimi-code/AGENTS.md` — the shared rules-card plus a pointer to
+  `sdlc/.playbook/` — the same lite-tier treatment every non-Claude tool gets: no hooks, no
+  skills, no agents, just the rules-card and the validator as the enforcement floor. Detection
+  looks for an existing `.kimi-code/` directory, mirroring `claude`/`cursor`/`windsurf`; its
+  absence never blocks picking `kimi` explicitly with `--tool kimi` or `--tool all`. The file
+  is manifest-owned like `.cursor/rules/sdlc.mdc`: a hand-written file at that path is left
+  untouched and never claimed, and it is correctly pruned if a project later deselects the tool.
+
 ## 0.13.0 (2026-09-19)
 
 - **Feature (update notice)**: the notice that a newer version exists now **asks** instead of

package/bin/cli.mjs

@@ -34,7 +34,7 @@ const MARKER = '<!-- sdlc:start -->';
 const OWN_PACKAGE_NAME = '@warnyin/sdlc';
 
 export const TOOLS = Object.freeze([
-  'claude', 'cursor', 'windsurf', 'copilot', 'cline', 'gemini', 'agents-md',
+  'claude', 'cursor', 'windsurf', 'copilot', 'cline', 'gemini', 'agents-md', 'kimi',
 ]);
 
 const TEXT_EXT = new Set(['.md', '.mdc', '.mjs', '.json', '.yaml', '.yml', '.txt']);
@@ -203,6 +203,9 @@ function installToolAdapters(projectRoot, tools, ctx) {
   if (tools.includes('agents-md')) {
     appendWithMarker(projectRoot, 'AGENTS.md', renderAdapter('adapters/agents-md.md'));
   }
+  if (tools.includes('kimi')) {
+    installFile(projectRoot, path.join('.kimi-code', 'AGENTS.md'), renderAdapter('adapters/kimi.md'), ctx);
+  }
 }
 
 // ---------- scaffold ----------
@@ -309,7 +312,7 @@ export async function resolveTools(args, {
   return picked;
 }
 
-function printInitSummary(tools, ctx, style, symbols, { configExisted }) {
+function printInitSummary(tools, ctx, style, symbols, { configExisted, toolsAdded }) {
   const s = summarizeInstall(ctx.manifest.keys(), tools);
   const stats = ctx.stats;
   const line = (text) => console.log(`  ${text}`);
@@ -326,7 +329,10 @@ function printInitSummary(tools, ctx, style, symbols, { configExisted }) {
   }
   line(`${s.hooks} hooks in sdlc/.hooks/`);
   line(`Playbook: sdlc/.playbook/ (${s.playbook} stages + ${s.templates} templates)`);
-  line(`Config: sdlc/config.yaml${configExisted ? ' (kept)' : ''}`);
+  const configNote = toolsAdded?.length
+    ? ` (recorded ${toolsAdded.map(toolName).join(', ')})`
+    : configExisted ? ' (kept)' : '';
+  line(`Config: sdlc/config.yaml${configNote}`);
   line(style.dim(`Files: ${stats.written} written · ${stats.current} unchanged · ${stats.updated} refreshed · ${stats.kept} kept (yours)`));
   console.log('');
   console.log(`  ${style.bold('Getting started:')}`);
@@ -338,7 +344,26 @@ export async function cmdInit(projectRoot, args) {
   const style = createStyle(colorEnabled());
   const symbols = symbolsFor();
   const tools = await resolveTools(args, { projectRoot, style });
-  const configExisted = fs.existsSync(path.join(projectRoot, 'sdlc', 'config.yaml'));
+  const configPath = path.join(projectRoot, 'sdlc', 'config.yaml');
+  const configExisted = fs.existsSync(configPath);
+
+  // config.yaml is a seed — written once, never rewritten wholesale. But its `tools:` line
+  // is the one field this command promises to keep current ("filled by `warnyin-sdlc init`"
+  // in the template), so a second init adding a tool must not leave it stale: union what's
+  // already recorded with what this run installs, never removing an entry (init has no prune
+  // capability, and this doesn't give it one — only `update --tool <list>` can shrink the set).
+  let toolsAdded = [];
+  if (configExisted) {
+    const recorded = parseConfig(fs.readFileSync(configPath, 'utf8')).tools;
+    const newlySelected = tools.filter((t) => !recorded.includes(t));
+    // Only claim "recorded" in the summary when a write actually happened — a config
+    // predating the `tools:` key makes persistToolsLine a no-op, and the message must not
+    // say otherwise.
+    if (newlySelected.length && persistToolsLine(configPath, [...recorded, ...newlySelected])) {
+      toolsAdded = newlySelected;
+    }
+  }
+
   const ctx = {
     mode: 'install',
     manifest: new Map(),
@@ -351,7 +376,7 @@ export async function cmdInit(projectRoot, args) {
   writeManifestFile(projectRoot, ctx.manifest);
   ensureGitignore(projectRoot);
   for (const w of ctx.warnings) console.warn(`  ${style.yellow(symbols.warn)} ${w}`);
-  printInitSummary(tools, ctx, style, symbols, { configExisted });
+  printInitSummary(tools, ctx, style, symbols, { configExisted, toolsAdded });
   return { tools };
 }
 
@@ -392,6 +417,25 @@ export function forceNeedsAPerson(args, env = process.env, stdin = process.stdin
     + ' Run it yourself, or set WARNYIN_SDLC_FORCE=1 if this really is automation that meant it.';
 }
 
+// Rewrites just the `tools:` line of `config.yaml` in place, leaving every other line
+// untouched — a no-op when the file carries no `tools:` line at all (a config predating the
+// key; matched, not fixed). Shared by `cmdInit` and `cmdUpdate` so the two paths can't drift.
+// Reproduces the existing behavior exactly, trailing inline comment included: the line is
+// replaced wholesale, so a hand-added comment after `tools: [...]` does not survive a rewrite.
+// Returns whether it actually wrote — callers that report "recorded X" to the user must not
+// claim it when this was a no-op (no `tools:` line to rewrite).
+export function persistToolsLine(configPath, tools) {
+  const raw = fs.readFileSync(configPath, 'utf8');
+  if (!/^tools:/m.test(raw)) return false;
+  // A replacer FUNCTION, not a string: `recorded` (unioned in by cmdInit) is free text read
+  // back from the project's own config.yaml, not validated against the TOOLS registry the way
+  // CLI-sourced tool names are — a string replacement would let `$&`/`$'`/`` $` `` in a
+  // hand-edited or corrupted config get interpreted as replacement patterns instead of literal
+  // text, silently duplicating or mangling the surrounding file.
+  fs.writeFileSync(configPath, raw.replace(/^tools:.*$/m, () => `tools: [${tools.join(', ')}]`));
+  return true;
+}
+
 export function cmdUpdate(projectRoot, args) {
   const refusal = refuseSelfUpdate(projectRoot, PKG_ROOT);
   if (refusal) throw new Error(refusal);
@@ -411,9 +455,7 @@ export function cmdUpdate(projectRoot, args) {
   // Persist an explicit --tool override so declared and installed state never
   // diverge (otherwise pruning tool-specific files leaves config.yaml stale).
   if (args.toolProvided) {
-    const configPath = path.join(sdlcRoot, 'config.yaml');
-    const raw = fs.readFileSync(configPath, 'utf8');
-    fs.writeFileSync(configPath, raw.replace(/^tools:.*$/m, `tools: [${tools.join(', ')}]`));
+    persistToolsLine(path.join(sdlcRoot, 'config.yaml'), tools);
   }
 
   // Read before scaffolding: recordPayloadVersion overwrites version.json with our own.

package/bin/detect.mjs

@@ -15,6 +15,7 @@ export const ADAPTER_PATHS = Object.freeze({
   cline: '.clinerules',
   gemini: 'GEMINI.md',
   'agents-md': 'AGENTS.md',
+  kimi: '.kimi-code/AGENTS.md',
 });
 
 export const TOOL_NAMES = Object.freeze({
@@ -25,6 +26,7 @@ export const TOOL_NAMES = Object.freeze({
   cline: 'Cline',
   gemini: 'Gemini CLI',
   'agents-md': 'AGENTS.md',
+  kimi: 'Kimi Code',
 });
 
 // A tool counts as present when the project already carries its home directory
@@ -38,6 +40,7 @@ const MARKERS = Object.freeze({
   cline: ['.clinerules'],
   gemini: ['GEMINI.md', '.gemini'],
   'agents-md': ['AGENTS.md'],
+  kimi: ['.kimi-code'],
 });
 
 export function detectTools(projectRoot) {

package/lib/manifest.mjs

@@ -19,6 +19,7 @@ const SKILL_ALLOW_RE = /^\.claude\/skills\/(delta-spec-format|contract-writing|s
 const ADAPTER_ALLOW = new Set([
   '.cursor/rules/sdlc.mdc',
   '.windsurf/rules/sdlc.md',
+  '.kimi-code/AGENTS.md',
 ]);
 
 export function parseManifest(text) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@warnyin/sdlc",
-  "version": "0.13.0",
+  "version": "0.14.1",
   "description": "Spec-driven, AI-driven SDLC framework — token-lean specs, contract-first changes, autonomous pipeline with managed hooks. Operationalizes the Day-1 'New SDLC with Vibe Coding' work process.",
   "type": "module",
   "bin": {

package/payload/adapters/kimi.md

@@ -0,0 +1,4 @@
+# Warnyin SDLC workflow rules
+Stage playbooks: `sdlc/.playbook/` (start at README.md) — read the stage playbook before acting.
+
+{{RULES_CARD}}