create-snipara 2.0.11 → 2.0.13

package/README.md

@@ -25,7 +25,7 @@ behind the scenes.
 
 Use it for:
 
-- Hosted MCP onboarding for Claude Code, Cursor, Windsurf, Codex, Gemini, Mistral, VS Code/Copilot, Continue, ChatGPT Desktop, Orca-style MCP clients, LM Studio-backed local stacks, and similar clients
+- Hosted MCP onboarding for Claude Code, Cursor, Kimi Code CLI, Codex, Gemini, Mistral, VS Code/Copilot, Continue, ChatGPT Desktop, Orca-style MCP clients, LM Studio-backed local stacks, and similar clients
 - free account signup with reviewed Context + Memory
 - local project wiring, `doctor`, `repair`, and `upgrade`
 - local source activation without GitHub, plus optional GitHub repository sync and PR Answer Packs approval when the current folder is a GitHub repo
@@ -86,7 +86,7 @@ Free onboarding is now **Context + Memory**, not Context-only:
 
 - Context Free: three projects and 1,000 context queries/month
 - Memory Free: reviewed hosted memories for continuity across sessions
-- Hosted MCP: direct connection for Claude Code, Cursor, Windsurf, Codex, Gemini, Mistral, VS Code/Copilot, Continue, ChatGPT Desktop, Orca-style MCP clients, LM Studio-backed local stacks, and other MCP clients
+- Hosted MCP: direct connection for Claude Code, Cursor, Kimi Code CLI, Codex, Gemini, Mistral, VS Code/Copilot, Continue, ChatGPT Desktop, Orca-style MCP clients, LM Studio-backed local stacks, and other MCP clients
 
 The CLI opens a browser device-flow login when the user does not already have a key, auto-provisions the free Context + Memory account when needed, then writes the returned API key into the local MCP config.
 
@@ -413,10 +413,26 @@ companion add workflow ergonomics:
 - choose `hosted-only` or `--skip-companion` only in locked-down environments
 - use local `snipara-mcp` only for stdio compatibility, development, or tests
 
-Claude Code, Cursor, and Windsurf can receive generated automation files when
-that client has a useful local hook surface. Codex, Gemini, VS Code, Continue,
+Claude Code, Cursor, and Kimi Code CLI can receive generated automation files when
+that client has a useful local hook surface. Kimi receives a project-local MCP
+config and a reviewable plugin that must be installed explicitly; its hooks are
+fail-open. Codex, Gemini, VS Code, Continue,
 Mistral, ChatGPT, and custom clients are treated as MCP-first: they get the hosted MCP
 configuration/reference and agent instructions, not invented local hooks.
+
+For Kimi Code CLI:
+
+```bash
+npx -y create-snipara@latest init --client kimi --profile hosted-companion --with-hooks
+npx -y snipara-companion@latest automations install --client kimi
+# Then, in Kimi Code after reviewing the plugin:
+/plugins install .kimi-code/snipara-plugin
+```
+
+Export `SNIPARA_API_KEY` before starting Kimi. The generated
+`.kimi-code/mcp.json` stores only `bearerTokenEnvVar`, never the raw key. Kimi
+installs plugins per user, so the generated handler is project-neutral and
+no-ops outside workspaces carrying a Snipara project or Companion marker.
 For Mistral, request hooks from LangChain are documented as `ChatMistralAI`
 request lifecycle hooks (`beforeRequestHooks`, `requestErrorHooks`, and
 `responseHooks`), not as local agent lifecycle hooks.

package/dist/index.js

@@ -13,7 +13,7 @@ import { homedir } from "os";
 // package.json
 var package_default = {
   name: "create-snipara",
-  version: "2.0.11",
+  version: "2.0.13",
   description: "Onboard Snipara Hosted MCP Context + Memory with auth, companion workflows, and optional Snipara Sandbox",
   main: "dist/index.js",
   type: "module",
@@ -45,7 +45,7 @@ var package_default = {
     "chatgpt",
     "openai",
     "cursor",
-    "windsurf",
+    "kimi",
     "gemini",
     "mistral",
     "orca",
@@ -107,6 +107,8 @@ var DEVICE_CLIENT_ID = "create-snipara";
 var DAY_ZERO_CORPUS_MAX_FILES = 8;
 var DAY_ZERO_CORPUS_MAX_FILE_CHARS = 12e3;
 var DAY_ZERO_CORPUS_MAX_TOTAL_CHARS = 5e4;
+var ACTIVATION_MANIFEST_SCHEMA_VERSION = "snipara.activation.manifest.v1";
+var ACTIVATION_CONSUMER_CONTRACT_VERSION = "snipara.editor.activation.v1";
 var EXPERIENCE_GOAL_SECTION = `## Experience Goal
 
 The target experience is outcome-first agent work across supported clients:
@@ -140,15 +142,23 @@ function getActivationDir() {
 function getActivationManifestPath() {
   return path.join(getActivationDir(), "manifest.json");
 }
+function getStableActivationManifestPath() {
+  return path.join(getActivationDir(), "activation-manifest.json");
+}
 function getActivationHandoffPath() {
   return path.join(getActivationDir(), "handoff.md");
 }
+function getFirstWorkBriefPath() {
+  return path.join(getActivationDir(), "first-brief.md");
+}
 function getMemoryCandidatesPath() {
   return path.join(getActivationDir(), "memory-candidates.json");
 }
 function writeActivationManifest(manifest) {
   fs.mkdirSync(getActivationDir(), { recursive: true });
-  fs.writeFileSync(getActivationManifestPath(), JSON.stringify(manifest, null, 2) + "\n", "utf8");
+  const payload = JSON.stringify(manifest, null, 2) + "\n";
+  fs.writeFileSync(getActivationManifestPath(), payload, "utf8");
+  fs.writeFileSync(getStableActivationManifestPath(), payload, "utf8");
 }
 function updateActivationManifest(manifest) {
   manifest.updatedAt = (/* @__PURE__ */ new Date()).toISOString();
@@ -451,6 +461,24 @@ function writeInitialHandoff(answers, manifest) {
   ];
   fs.writeFileSync(getActivationHandoffPath(), lines.join("\n"), "utf8");
 }
+function writeFirstWorkBrief(manifest) {
+  fs.mkdirSync(getActivationDir(), { recursive: true });
+  const lines = [
+    `# ${manifest.firstBrief.title}`,
+    "",
+    `Status: ${manifest.firstBrief.status}`,
+    `Activation: ${manifest.activationId}`,
+    `Client: ${getClientDisplayName(manifest.aiClient)}`,
+    "",
+    ...manifest.firstBrief.sections.flatMap((section) => [
+      `## ${section.title}`,
+      "",
+      ...section.lines.map((line) => `- ${line}`),
+      ""
+    ])
+  ];
+  fs.writeFileSync(getFirstWorkBriefPath(), lines.join("\n"), "utf8");
+}
 function detectLocalActivationScan(detection) {
   const cwd = process.cwd();
   const exists = (relativePath) => fs.existsSync(path.join(cwd, relativePath));
@@ -624,9 +652,11 @@ function createActivationManifest(answers, detection, mode = "default", scan) {
   const surfaceContract = buildActivationSurfaceContract(answers.aiClient);
   return {
     version: "create-snipara-activation-v1",
+    schemaVersion: ACTIVATION_MANIFEST_SCHEMA_VERSION,
     activationId: buildActivationId(),
     mode,
     surfaceContract,
+    consumerContract: buildEditorActivationConsumerContract(answers.aiClient),
     activationMetric: {
       name: "time_to_how_did_it_know_that",
       targetMinutes: 5,
@@ -694,9 +724,13 @@ function createActivationManifest(answers, detection, mode = "default", scan) {
       )
     },
     artifacts: {
+      activationManifestPath: path.relative(process.cwd(), getStableActivationManifestPath()),
+      legacyManifestPath: path.relative(process.cwd(), getActivationManifestPath()),
+      firstBriefPath: null,
       handoffPath: null,
       memoryCandidatesPath: null
     },
+    nextActions: buildActivationNextActions(surfaceContract, answers),
     firstBrief: createInitialFirstWorkBrief(answers, detection, localScan),
     createdAt: now,
     updatedAt: now
@@ -899,10 +933,12 @@ function createActivationArtifacts(answers, manifest) {
     "Initial local handoff created.",
     manifest.artifacts.handoffPath
   );
+  writeFirstWorkBrief(manifest);
+  manifest.artifacts.firstBriefPath = path.relative(process.cwd(), getFirstWorkBriefPath());
   manifest.lanes.firstBrief = createActivationLane(
     "ready",
     "First Work Brief generated from local setup and scan signals.",
-    path.relative(process.cwd(), getActivationManifestPath())
+    manifest.artifacts.firstBriefPath
   );
   updateActivationManifest(manifest);
 }
@@ -920,9 +956,9 @@ var AI_CLIENT_CHOICES = [
     description: "Hosted MCP plus Cursor rules and automation bundles"
   },
   {
-    title: "Windsurf",
-    value: "windsurf",
-    description: "Hosted MCP plus Windsurf automation bundles"
+    title: "Kimi Code CLI",
+    value: "kimi",
+    description: "Project MCP plus a reviewable Snipara Companion plugin"
   },
   {
     title: "OpenAI Codex",
@@ -965,7 +1001,7 @@ function getCompanionInitClientFlag(aiClient) {
   const supportedClientMap = {
     "claude-code": "claude-code",
     cursor: "cursor",
-    windsurf: "windsurf",
+    kimi: "kimi",
     codex: "codex",
     gemini: "gemini",
     mistral: "mistral",
@@ -991,11 +1027,11 @@ function buildProgram() {
   program.name("create-snipara").description("Scaffold hosted Snipara MCP config; advanced flags add local helpers").version(VERSION);
   program.command("init").description("Install and configure Snipara for this project").option("--api-key <key>", "Snipara API key").option("--slug <slug>", "Project slug").option("--project-id <id>", "Project ID").option(
     "--client <client>",
-    "AI client: claude-code, cursor, windsurf, codex, gemini, mistral, chatgpt, vscode, continue, claude-desktop, other"
+    "AI client: claude-code, cursor, kimi, codex, gemini, mistral, chatgpt, vscode, continue, claude-desktop, other"
   ).option("--advanced", "Show advanced profile, project id, hooks, GitHub, and sandbox prompts").option(
     "--profile <profile>",
     "Install profile: hosted-only, hosted-companion, full-stack, runtime-only"
-  ).option("--skip-companion", "Skip local companion CLI installation").option("--skip-mcp", "Skip local snipara-mcp package installation").option("--skip-runtime", "Skip snipara-sandbox installation").option("--skip-hooks", "Skip hook generation").option("--skip-test", "Skip hosted connection test").option("--with-orchestrator", "Install optional snipara-orchestrator package").option("--github", "Open GitHub repository automation setup when a git remote is detected").option("--skip-github", "Skip the GitHub automation prompt").option("--github-path <path>", "Optional GitHub path filter for the initial repository sync").option("--starter", "Mark this run as a starter activation and print dashboard-first guidance").option("--runtime-only", "Install only Snipara Sandbox").addOption(new Option("--full", "Legacy alias for --profile full-stack").hideHelp()).option("-y, --yes", "Accept defaults without prompting").action(async (options) => {
+  ).option("--skip-companion", "Skip local companion CLI installation").option("--skip-mcp", "Skip local snipara-mcp package installation").option("--skip-runtime", "Skip snipara-sandbox installation").option("--skip-hooks", "Skip hook generation").option("--skip-test", "Skip hosted connection test").option("--with-orchestrator", "Install optional snipara-orchestrator package").option("--github", "Open GitHub repository automation setup when a git remote is detected").option("--skip-github", "Skip the GitHub automation prompt").option("--github-path <path>", "Optional GitHub path filter for the initial repository sync").option("--starter", "Mark this run as a starter activation and print dashboard-first guidance").option("--json", "Print a machine-readable activation summary after setup").option("--runtime-only", "Install only Snipara Sandbox").addOption(new Option("--full", "Legacy alias for --profile full-stack").hideHelp()).option("-y, --yes", "Accept defaults without prompting").action(async (options) => {
     printBanner();
     await runInit(options);
   });
@@ -1032,11 +1068,11 @@ function buildProgram() {
 function addSharedRootOptions(program) {
   program.option("--api-key <key>", "Snipara API key").option("--slug <slug>", "Project slug").option("--project-id <id>", "Project ID").option(
     "--client <client>",
-    "AI client: claude-code, cursor, windsurf, codex, gemini, mistral, chatgpt, vscode, continue, claude-desktop, other"
+    "AI client: claude-code, cursor, kimi, codex, gemini, mistral, chatgpt, vscode, continue, claude-desktop, other"
   ).option("--advanced", "Show advanced profile, project id, hooks, GitHub, and sandbox prompts").option(
     "--profile <profile>",
     "Install profile: hosted-only, hosted-companion, full-stack, runtime-only"
-  ).option("--skip-companion", "Skip local companion CLI installation").option("--skip-mcp", "Skip local snipara-mcp package installation").option("--skip-runtime", "Skip snipara-sandbox installation").option("--skip-hooks", "Skip hook generation").option("--skip-test", "Skip hosted connection test").option("--with-orchestrator", "Install optional snipara-orchestrator package").option("--github", "Open GitHub repository automation setup when a git remote is detected").option("--skip-github", "Skip the GitHub automation prompt").option("--github-path <path>", "Optional GitHub path filter for the initial repository sync").option("--starter", "Mark this run as a starter activation and print dashboard-first guidance").option("--runtime-only", "Install only Snipara Sandbox").addOption(new Option("--full", "Legacy alias for --profile full-stack").hideHelp()).option("-y, --yes", "Accept defaults without prompting");
+  ).option("--skip-companion", "Skip local companion CLI installation").option("--skip-mcp", "Skip local snipara-mcp package installation").option("--skip-runtime", "Skip snipara-sandbox installation").option("--skip-hooks", "Skip hook generation").option("--skip-test", "Skip hosted connection test").option("--with-orchestrator", "Install optional snipara-orchestrator package").option("--github", "Open GitHub repository automation setup when a git remote is detected").option("--skip-github", "Skip the GitHub automation prompt").option("--github-path <path>", "Optional GitHub path filter for the initial repository sync").option("--starter", "Mark this run as a starter activation and print dashboard-first guidance").option("--json", "Print a machine-readable activation summary after setup").option("--runtime-only", "Install only Snipara Sandbox").addOption(new Option("--full", "Legacy alias for --profile full-stack").hideHelp()).option("-y, --yes", "Accept defaults without prompting");
 }
 async function main() {
   const program = buildProgram();
@@ -1136,6 +1172,7 @@ function parseInitOptionsFromArgv(args) {
     "--github": "github",
     "--skip-github": "skipGithub",
     "--starter": "starter",
+    "--json": "json",
     "--yes": "yes",
     "-y": "yes"
   };
@@ -1200,6 +1237,11 @@ async function runInit(options) {
   runLocalSourceActivation(answers, activationManifest);
   createActivationArtifacts(answers, activationManifest);
   printSuccess(answers, validationReport, activationManifest);
+  if (normalizedOptions.json) {
+    console.log(
+      JSON.stringify(buildActivationJsonSummary(activationManifest, validationReport), null, 2)
+    );
+  }
   if (answers.configureGitHub && answers.githubRepo) {
     await openGitHubAutomation(answers);
   }
@@ -1207,6 +1249,35 @@ async function runInit(options) {
     await runSandboxInit();
   }
 }
+function buildActivationJsonSummary(manifest, validation) {
+  const laneEntries = Object.entries(manifest.lanes);
+  const failedLanes = laneEntries.filter(([, lane]) => lane.status === "failed").map(([name]) => name);
+  const pendingLanes = laneEntries.filter(([, lane]) => lane.status === "queued" || lane.status === "indexing").map(([name]) => name);
+  const activationStatus = failedLanes.length > 0 ? "partial" : pendingLanes.length > 0 ? "partial" : "complete";
+  return {
+    ok: true,
+    activationStatus,
+    activationId: manifest.activationId,
+    schemaVersion: manifest.schemaVersion,
+    consumerContractVersion: manifest.consumerContract.version,
+    projectSlug: manifest.projectSlug,
+    aiClient: manifest.aiClient,
+    profile: validation.profile,
+    artifacts: manifest.artifacts,
+    lanes: Object.fromEntries(
+      laneEntries.map(([name, lane]) => [
+        name,
+        {
+          status: lane.status,
+          detail: lane.detail,
+          command: lane.command
+        }
+      ])
+    ),
+    nextActions: manifest.nextActions,
+    exitCode: activationStatus === "complete" ? 0 : manifest.consumerContract.exitCodes.activation_partial
+  };
+}
 async function runDoctor(options) {
   const normalizedOptions = normalizeMaintenanceOptions(options);
   const requestedClient = normalizeClientOption(normalizedOptions.client);
@@ -1290,11 +1361,12 @@ async function runUpgrade(options) {
   printDoctorReport(detectEnvironment(), report);
 }
 async function runPrintConfig(options) {
+  const normalizedOptions = normalizeMaintenanceOptions(options);
   const detection = detectEnvironment();
-  const answers = loadExistingAnswers(options);
+  const answers = loadExistingAnswers(normalizedOptions);
   const githubRepo = detectGitRepository();
   const githubAnswerPacks = githubRepo ? `${githubRepo.fullName} can be connected with npx create-snipara --github` : "requires a GitHub-backed git remote";
-  if (options.json) {
+  if (normalizedOptions.json) {
     console.log(
       JSON.stringify(
         {
@@ -1610,7 +1682,7 @@ function normalizeClientOption(value) {
     "claude-desktop": "claude-desktop",
     claude_desktop: "claude-desktop",
     cursor: "cursor",
-    windsurf: "windsurf",
+    kimi: "kimi",
     codex: "codex",
     gemini: "gemini",
     mistral: "mistral",
@@ -1628,7 +1700,7 @@ function normalizeClientOption(value) {
   const client = aliases[normalized];
   if (!client) {
     throw new Error(
-      `Unknown client '${value}'. Use claude, claude-code, cursor, codex, mistral, or other.`
+      `Unknown client '${value}'. Use claude, claude-code, cursor, kimi, codex, mistral, or other.`
     );
   }
   return client;
@@ -2090,10 +2162,34 @@ async function createMcpConfig(answers) {
   }
   console.log(chalk.green("   \u2713 Created .mcp.json"));
   ensureGitignoreEntry(".mcp.json", "# Snipara MCP config (contains API key)");
+  if (answers.aiClient === "kimi" && answers.profile !== "runtime-only") {
+    createKimiMcpConfig(answers);
+  }
   if (answers.aiClient === "claude-desktop") {
     await createClaudeDesktopConfig(answers);
   }
 }
+function createKimiMcpConfig(answers) {
+  const kimiDir = path.join(process.cwd(), ".kimi-code");
+  const configPath = path.join(kimiDir, "mcp.json");
+  const existing = asObjectRecord(readJsonFile(configPath));
+  const existingServers = asObjectRecord(existing.mcpServers);
+  const config = {
+    ...existing,
+    mcpServers: {
+      ...existingServers,
+      snipara: {
+        url: buildHostedMcpEndpoint(answers),
+        bearerTokenEnvVar: "SNIPARA_API_KEY"
+      }
+    }
+  };
+  fs.mkdirSync(kimiDir, { recursive: true });
+  fs.writeFileSync(configPath, JSON.stringify(config, null, 2) + "\n");
+  console.log(
+    chalk.green("   \u2713 Created .kimi-code/mcp.json") + chalk.dim(" - SNIPARA_API_KEY stays in the launch environment")
+  );
+}
 function buildHostedMcpServer(answers) {
   return {
     type: "http",
@@ -3377,6 +3473,14 @@ function buildActivationSurfaceContract(client) {
       nextSurfaceAction: "Start a new Claude Code session and validate Snipara tools before enabling hooks or managed workflows."
     };
   }
+  if (client === "kimi") {
+    return {
+      ...shared,
+      entryPoint: "Kimi Code project MCP plus an explicitly installed Snipara plugin",
+      clientRole: "Agent-first CLI surface: load .kimi-code/mcp.json for Hosted MCP and install the generated Companion plugin only after review.",
+      nextSurfaceAction: "Start Kimi Code with SNIPARA_API_KEY exported, verify /mcp, then install .kimi-code/snipara-plugin when lifecycle automation is desired."
+    };
+  }
   return {
     ...shared,
     entryPoint: `${getClientDisplayName(client)} setup generated by create-snipara`,
@@ -3384,6 +3488,81 @@ function buildActivationSurfaceContract(client) {
     nextSurfaceAction: "Restart or reload the client, verify Snipara tools, then ask the first grounded project question from the generated First Work Brief."
   };
 }
+function buildEditorActivationConsumerContract(client) {
+  const secretRule = client === "vscode" ? "Use VS Code SecretStorage for SNIPARA_API_KEY and pass it to create-snipara through the child-process environment; never write raw secrets into extension settings or logs." : "Pass SNIPARA_API_KEY through the process environment or client secret store; never parse, log, or persist raw secrets from terminal output.";
+  return {
+    version: ACTIVATION_CONSUMER_CONTRACT_VERSION,
+    audience: "editor_extension",
+    stableFiles: {
+      activationManifest: ".snipara/activation/activation-manifest.json",
+      firstBrief: ".snipara/activation/first-brief.md",
+      handoff: ".snipara/activation/handoff.md",
+      memoryCandidates: ".snipara/activation/memory-candidates.json"
+    },
+    requiredManifestFields: [
+      "schemaVersion",
+      "consumerContract.version",
+      "surfaceContract",
+      "artifacts.activationManifestPath",
+      "artifacts.firstBriefPath",
+      "artifacts.handoffPath",
+      "lanes.connection.status",
+      "lanes.firstBrief.status",
+      "nextActions"
+    ],
+    laneStatuses: ["ready", "indexing", "queued", "needs_review", "skipped", "failed"],
+    exitCodes: {
+      success: 0,
+      activation_partial: 10,
+      auth_required: 20,
+      missing_api_key: 21,
+      missing_node_or_npm: 30,
+      activation_failed: 40
+    },
+    parseRule: "Read .snipara/activation/activation-manifest.json as the source of truth. If --json is used, parse the last JSON object from stdout as a summary pointer, not as the full durable state.",
+    secretRule
+  };
+}
+function buildActivationNextActions(surfaceContract, answers) {
+  const actions = [
+    {
+      id: "open_first_work_brief",
+      label: "Open First Work Brief",
+      target: "editor",
+      when: "artifacts.firstBriefPath is present and lanes.firstBrief.status is ready"
+    },
+    {
+      id: "handoff_to_agent",
+      label: "Hand off to the coding agent",
+      target: "agent",
+      when: "lanes.connection.status is ready and First Work Brief has been shown"
+    },
+    {
+      id: "review_memory_candidates",
+      label: "Review memory candidates",
+      target: "editor",
+      when: "lanes.memoryCandidates.status is needs_review"
+    }
+  ];
+  if (answers.aiClient === "vscode") {
+    actions.unshift({
+      id: "vscode_activate_workspace",
+      label: "Snipara: Activate Workspace",
+      command: "Snipara: Activate Workspace",
+      target: "editor",
+      when: "VS Code extension command is available"
+    });
+  } else {
+    actions.unshift({
+      id: "verify_surface_activation",
+      label: "Verify activation surface",
+      command: surfaceContract.nextSurfaceAction,
+      target: "agent",
+      when: "editor-specific command is unavailable"
+    });
+  }
+  return actions;
+}
 function getClientGuidance(client) {
   if (client === "claude-code") {
     return [
@@ -3398,10 +3577,11 @@ function getClientGuidance(client) {
       "Use the companion CLI only for explicit upload, planning, chunk lookup, doctor, and task commit workflows outside the editor UI."
     ];
   }
-  if (client === "windsurf") {
+  if (client === "kimi") {
     return [
-      "Windsurf should use the hosted MCP surface plus generated Windsurf automation bundles when available.",
-      "Use npx -y snipara-companion@latest automations install --client windsurf when you want dashboard-managed hook files in the local project."
+      "Kimi Code CLI reads the project-local .kimi-code/mcp.json and resolves SNIPARA_API_KEY from the launch environment.",
+      "Use npx -y snipara-companion@latest automations install --client kimi to download the reviewable plugin bundle, then install it explicitly inside Kimi with /plugins install .kimi-code/snipara-plugin.",
+      "Kimi hooks are fail-open. Keep risky tool approvals enabled and use Hosted MCP tenant checks plus Companion guards as the authoritative boundary."
     ];
   }
   if (client === "codex") {
@@ -3618,7 +3798,7 @@ function getClientDisplayName(client) {
   const names = {
     "claude-code": "Claude Code",
     cursor: "Cursor",
-    windsurf: "Windsurf",
+    kimi: "Kimi Code CLI",
     codex: "OpenAI Codex",
     gemini: "Gemini",
     mistral: "Mistral Le Chat / Vibe",
@@ -3634,7 +3814,7 @@ function getClientPackFilename(client) {
   const names = {
     "claude-code": "CLAUDE_CODE.md",
     cursor: "CURSOR.md",
-    windsurf: "WINDSURF.md",
+    kimi: "KIMI.md",
     codex: "CODEX.md",
     gemini: "GEMINI.md",
     mistral: "MISTRAL.md",
@@ -3653,8 +3833,12 @@ function getClientConfigArtifacts(client) {
   if (client === "cursor") {
     return [".mcp.json", ".cursor/rules/snipara.mdc", "dashboard automation bundle when installed"];
   }
-  if (client === "windsurf") {
-    return [".mcp.json", "dashboard automation bundle when installed"];
+  if (client === "kimi") {
+    return [
+      "AGENTS.md",
+      ".kimi-code/mcp.json",
+      ".kimi-code/snipara-plugin when installed through Companion"
+    ];
   }
   if (client === "codex") {
     return ["AGENTS.md", ".codex/config.toml", ".snipara/templates/codex-config.toml"];
@@ -4676,6 +4860,11 @@ function printSuccess(answers, report, activationManifest) {
       chalk.green("   \u2713 Claude Code") + chalk.dim(" - .mcp.json MCP config, .claude/settings.json hooks when enabled")
     );
   }
+  if (answers.aiClient === "kimi" && answers.profile !== "runtime-only") {
+    console.log(
+      chalk.green("   \u2713 Kimi Code CLI") + chalk.dim(" - .kimi-code/mcp.json with environment-backed authentication")
+    );
+  }
   console.log(
     chalk.green("   \u2713 .snipara/companion") + chalk.dim(" - Doctor report and optional command references")
   );
@@ -4712,6 +4901,17 @@ function printSuccess(answers, report, activationManifest) {
       `If Snipara tools are missing, run: ${CREATE_SNIPARA_NPX_COMMAND} doctor --client claude-desktop`
     );
   }
+  if (answers.aiClient === "kimi") {
+    printNextStep(
+      "For Kimi Code CLI, export SNIPARA_API_KEY before launch and run /mcp to verify the project-local server."
+    );
+    printNextStep(
+      `To enable Companion lifecycle hooks, run ${COMPANION_NPX_COMMAND} automations install --client kimi, review .kimi-code/snipara-plugin, then install it in Kimi with /plugins install .kimi-code/snipara-plugin.`
+    );
+    printNextStep(
+      "Keep manual approval for risky tools because Kimi hooks are fail-open and are not a standalone security boundary."
+    );
+  }
   if (answers.aiClient === "codex") {
     printNextStep(
       "For Codex, merge .snipara/templates/codex-config.toml into ~/.codex/config.toml if the app does not read project .codex/config.toml."
@@ -5153,8 +5353,8 @@ function detectAiClient() {
   if (fs.existsSync(path.join(process.cwd(), ".cursor"))) {
     return "cursor";
   }
-  if (fs.existsSync(path.join(process.cwd(), ".windsurf"))) {
-    return "windsurf";
+  if (fs.existsSync(path.join(process.cwd(), ".kimi-code"))) {
+    return "kimi";
   }
   if (fs.existsSync(path.join(process.cwd(), ".gemini"))) {
     return "gemini";
@@ -5174,8 +5374,8 @@ function detectAiClient() {
   if (fs.existsSync(path.join(homedir(), ".cursor")) || process.env.CURSOR_EDITOR) {
     return "cursor";
   }
-  if (fs.existsSync(path.join(homedir(), ".windsurf")) || process.env.WINDSURF_EDITOR) {
-    return "windsurf";
+  if (fs.existsSync(path.join(homedir(), ".kimi-code")) || process.env.KIMI_CODE_HOME) {
+    return "kimi";
   }
   if (fs.existsSync(path.join(homedir(), ".gemini")) || process.env.GEMINI_CLI) {
     return "gemini";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-snipara",
-  "version": "2.0.11",
+  "version": "2.0.13",
   "description": "Onboard Snipara Hosted MCP Context + Memory with auth, companion workflows, and optional Snipara Sandbox",
   "main": "dist/index.js",
   "type": "module",
@@ -32,7 +32,7 @@
     "chatgpt",
     "openai",
     "cursor",
-    "windsurf",
+    "kimi",
     "gemini",
     "mistral",
     "orca",