snipara-companion 3.5.1 → 3.5.3

package/CHANGELOG.md

@@ -2,6 +2,24 @@
 
 Release notes for `snipara-companion`, newest first.
 
+## New In 3.5.3
+
+- Propagates the configured Companion `sessionId` as
+  `X-Snipara-Session-Id` on Hosted MCP calls.
+- Labels supported retrieval calls as `snipara-companion` while preserving an
+  explicit caller-provided client label and correlation context.
+- Keeps correlation telemetry-only and project-scoped; authentication and
+  ranking promotion remain separate contracts.
+
+## New In 3.5.2
+
+- Replaces the retired Windsurf preset with Kimi Code CLI across setup,
+  automation, readiness, handoff, and help surfaces.
+- Adds merge-safe `.kimi-code/mcp.json` installation plus a reviewable Kimi
+  plugin bundle for Companion lifecycle hooks, skills, and commands.
+- Keeps the Kimi adapter fail-open and requires explicit plugin installation;
+  risky tool approval and Hosted MCP tenant boundaries remain authoritative.
+
 ## New In 3.5.1
 
 - Adds Context Control V1 hosted diff/apply commands for declarative

package/README.md

@@ -60,6 +60,10 @@ same value as `correlation_context.session_id` on retrieval tools.
 
 The identifier is opaque, project-scoped telemetry. It does not grant access or
 change authorization, and explicit per-call correlation remains authoritative.
+Companion also forwards its configured `sessionId` automatically on every
+Hosted MCP call and labels supported retrieval traffic as
+`snipara-companion`, unless the caller supplied an explicit client label. This
+improves join coverage without inventing a second server-side identity.
 
 Example output excerpt:
 

package/dist/index.d.ts

@@ -2396,7 +2396,7 @@ declare function memoryLocalCommand(options: LocalMemoryCommandOptions): Promise
 declare function evalExportCommand(options: EvalExportOptions): Promise<void>;
 declare function evalRunCommand(options: EvalRunOptions): Promise<void>;
 
-type AgentReadinessTarget = "codex" | "claude-code" | "cursor" | "orca" | "windsurf" | "custom";
+type AgentReadinessTarget = "codex" | "claude-code" | "cursor" | "orca" | "kimi" | "custom";
 type AgentReadinessCheckStatus = "pass" | "warning" | "fail" | "manual";
 type AgentReadinessGapSeverity = "low" | "medium" | "high" | "blocker";
 type AgentReadinessScoreBand = "ready" | "mostly_ready" | "needs_hardening" | "blocked";
@@ -3546,7 +3546,7 @@ interface TeamSyncSweepExplanation {
     remainingStaleCount: number;
     message: string;
 }
-type AgenticHandoffAdapterTarget = "codex" | "claude-code" | "cursor" | "orca" | "windsurf" | "custom";
+type AgenticHandoffAdapterTarget = "codex" | "claude-code" | "cursor" | "orca" | "kimi" | "custom";
 type AgenticHandoffConflictPosture = "continue" | "wait" | "split_work" | "review_only" | "handoff";
 interface AgenticHandoffAdapterPack {
     version: "snipara.ade_adapter_pack.v1";

package/dist/index.js

@@ -273,7 +273,7 @@ var WORKSPACE_MARKERS = [
   ".snipara",
   ".claude",
   ".cursor",
-  ".windsurf",
+  ".kimi-code",
   ".vibe",
   "package.json",
   "pnpm-workspace.yaml",
@@ -522,6 +522,27 @@ function readGitRemote(cwd) {
 }
 
 // src/api/client.ts
+var CORRELATED_RETRIEVAL_TOOL_NAMES = /* @__PURE__ */ new Set([
+  "snipara_context_query",
+  "snipara_ask",
+  "snipara_search",
+  "snipara_recall",
+  "snipara_get_chunk",
+  "rlm_context_query",
+  "rlm_ask",
+  "rlm_search",
+  "rlm_recall",
+  "rlm_get_chunk"
+]);
+function withCompanionRetrievalClient(toolName, args) {
+  if (!CORRELATED_RETRIEVAL_TOOL_NAMES.has(toolName) || args.client !== void 0) {
+    return args;
+  }
+  return {
+    ...args,
+    client: "snipara-companion"
+  };
+}
 function getSniparaTokenStorePath() {
   return path3.join(os2.homedir(), ".snipara", "tokens.json");
 }
@@ -743,7 +764,7 @@ var RLMClient = class {
       method: "tools/call",
       params: {
         name: toolName,
-        arguments: args
+        arguments: withCompanionRetrievalClient(toolName, args)
       }
     };
     const controller = new AbortController();
@@ -754,7 +775,8 @@ var RLMClient = class {
         {
           method: "POST",
           headers: {
-            "Content-Type": "application/json"
+            "Content-Type": "application/json",
+            ...this.config.sessionId ? { "X-Snipara-Session-Id": this.config.sessionId } : {}
           },
           body: JSON.stringify(payload),
           signal: controller.signal
@@ -1729,7 +1751,7 @@ var SUPPORTED_CLIENTS = /* @__PURE__ */ new Set([
   "claude-code",
   "cursor",
   "continue",
-  "windsurf",
+  "kimi",
   "gemini",
   "mistral",
   "chatgpt",
@@ -1752,18 +1774,11 @@ var MERGEABLE_JSON_CONFIG_FILES = /* @__PURE__ */ new Set([
   ".cursor/hooks.json",
   ".cursor/mcp.json",
   ".gemini/settings.json",
+  ".kimi-code/mcp.json",
   ".vscode/mcp.json",
-  ".windsurf/cascade-hooks.json",
-  ".windsurf/mcp.json",
   "mcp.json"
 ]);
-var NATIVE_HOOK_CAPABLE_CLIENTS = /* @__PURE__ */ new Set([
-  "claude-code",
-  "cursor",
-  "windsurf",
-  "gemini",
-  "codex"
-]);
+var NATIVE_HOOK_CAPABLE_CLIENTS = /* @__PURE__ */ new Set(["claude-code", "cursor", "kimi", "gemini", "codex"]);
 var LOCAL_API_KEY_LOADER = `API_KEY=""
 if command -v node >/dev/null 2>&1; then
   SNIPARA_CONFIG_ROOT="\${PROJECT_DIR:-$(pwd)}"
@@ -1831,7 +1846,8 @@ function ensureSupportedClient(client) {
 }
 function configuredAutomationClient(projectDir) {
   const config = loadConfig({ cwd: projectDir });
-  return config.client && SUPPORTED_CLIENTS.has(config.client) ? config.client : void 0;
+  const client = config.client === "windsurf" ? "custom" : config.client;
+  return client && SUPPORTED_CLIENTS.has(client) ? client : void 0;
 }
 function resolveAutomationClient(args) {
   const configuredClient = configuredAutomationClient(args.projectDir);
@@ -1997,7 +2013,7 @@ function withLocalApiKeyLoader(file) {
 }
 function isNativeHookFilePath(filePath) {
   const normalized = normalizeRelativePath(filePath);
-  return normalized.startsWith(".claude/hooks/") || normalized.startsWith(".cursor/hooks/") || normalized === ".cursor/hooks.json" || normalized.startsWith(".windsurf/hooks/") || normalized === ".windsurf/cascade-hooks.json" || normalized.startsWith(".gemini/hooks/") || normalized.startsWith(".codex/hooks/") || normalized === ".codex/hooks.json" || normalized.startsWith(".vscode/hooks/");
+  return normalized.startsWith(".claude/hooks/") || normalized.startsWith(".cursor/hooks/") || normalized === ".cursor/hooks.json" || normalized.startsWith(".kimi-code/snipara-plugin/") || normalized.startsWith(".gemini/hooks/") || normalized.startsWith(".codex/hooks/") || normalized === ".codex/hooks.json" || normalized.startsWith(".vscode/hooks/");
 }
 function assertBundleCompatibleWithClient(client, bundle) {
   if (canInstallNativeHookBundle(client)) {
@@ -5501,7 +5517,7 @@ function appendDeviceFlowHints(url, hints) {
 }
 function setupClientToDeviceClientId(client) {
   const normalized = typeof client === "string" ? client.trim().toLowerCase() : void 0;
-  if (normalized === "claude-code" || normalized === "cursor" || normalized === "windsurf" || normalized === "gemini" || normalized === "codex" || normalized === "mistral" || normalized === "continue") {
+  if (normalized === "claude-code" || normalized === "cursor" || normalized === "kimi" || normalized === "gemini" || normalized === "codex" || normalized === "mistral" || normalized === "continue") {
     return normalized;
   }
   return PROJECT_DEVICE_CLIENT_ID;
@@ -5600,7 +5616,7 @@ async function runProjectDeviceAuthorization(args) {
 var SETUP_CLIENTS = /* @__PURE__ */ new Set([
   "claude-code",
   "cursor",
-  "windsurf",
+  "kimi",
   "codex",
   "gemini",
   "mistral",
@@ -5616,13 +5632,13 @@ function maybeNormalizeClient(input) {
   return SETUP_CLIENTS.has(input) ? input : void 0;
 }
 function isHookClient(client) {
-  return client === "claude-code" || client === "cursor" || client === "windsurf" || client === "gemini" || client === "codex";
+  return client === "claude-code" || client === "cursor" || client === "kimi" || client === "gemini" || client === "codex";
 }
 function canInstallNativeHookClient(client) {
-  return client === "claude-code" || client === "cursor" || client === "windsurf" || client === "gemini" || client === "codex";
+  return client === "claude-code" || client === "cursor" || client === "kimi" || client === "gemini" || client === "codex";
 }
 function canUseLegacyHookFallback(client) {
-  return client === "claude-code" || client === "cursor" || client === "windsurf";
+  return client === "claude-code" || client === "cursor";
 }
 function getNativeHookBlockReason(client) {
   if (canInstallNativeHookClient(client)) {
@@ -5641,7 +5657,7 @@ function formatClientName(client) {
   const names = {
     "claude-code": "Claude Code",
     cursor: "Cursor",
-    windsurf: "Windsurf",
+    kimi: "Kimi Code CLI",
     codex: "OpenAI Codex",
     gemini: "Gemini",
     mistral: "Mistral Le Chat / Vibe",
@@ -5964,6 +5980,21 @@ env_http_headers = { "X-Snipara-Session-Id" = "SNIPARA_SESSION_ID" }
 `;
 }
 function generateGenericMcpReferenceString(client, projectSlug) {
+  if (client === "kimi") {
+    return `${JSON.stringify(
+      {
+        mcpServers: {
+          snipara: {
+            url: `https://api.snipara.com/mcp/${projectSlug}`,
+            bearerTokenEnvVar: "SNIPARA_API_KEY"
+          }
+        }
+      },
+      null,
+      2
+    )}
+`;
+  }
   if (client === "chatgpt") {
     return `${JSON.stringify(
       {
@@ -6112,10 +6143,16 @@ function generateHookConfigString(client, projectSlug = "YOUR_PROJECT_SLUG") {
   if (client === "cursor") {
     return JSON.stringify(generateCursorHookConfig(), null, 2);
   }
+  if (client === "kimi") {
+    return generateGenericMcpReferenceString(client, projectSlug);
+  }
   if (!canInstallNativeHookClient(client)) {
     return generateGenericMcpReferenceString(client, projectSlug);
   }
-  const config = client === "windsurf" ? generateWindsurfHookConfig() : generateClaudeHookConfig({ preserveOnCompaction: true, restoreOnSessionStart: true });
+  const config = generateClaudeHookConfig({
+    preserveOnCompaction: true,
+    restoreOnSessionStart: true
+  });
   return JSON.stringify(config, null, 2);
 }
 function generateClaudeHookPreamble(description) {
@@ -6352,51 +6389,6 @@ else
 fi
 `;
 }
-function generateWindsurfHookConfig() {
-  return {
-    hooks: {
-      pre_read_code: { command: ".windsurf/hooks/pre-read.sh", timeout: 10 },
-      post_read_code: { command: ".windsurf/hooks/post-read.sh", timeout: 5 },
-      post_write_code: { command: ".windsurf/hooks/post-write.sh", timeout: 5 }
-    }
-  };
-}
-function generateWindsurfPreReadScript() {
-  return `#!/bin/bash
-# Windsurf pre_read_code Hook for Snipara Context Injection
-
-INPUT=$(cat)
-if [ -z "$INPUT" ]; then
-  exit 0
-fi
-
-snipara-companion pre-tool "$INPUT" || true
-`;
-}
-function generateWindsurfPostReadScript() {
-  return `#!/bin/bash
-# Windsurf post_read_code Hook for Snipara File Tracking
-
-INPUT=$(cat)
-if [ -z "$INPUT" ]; then
-  exit 0
-fi
-
-snipara-companion post-tool "$INPUT" || true
-`;
-}
-function generateWindsurfPostWriteScript() {
-  return `#!/bin/bash
-# Windsurf post_write_code Hook for Snipara File Tracking
-
-INPUT=$(cat)
-if [ -z "$INPUT" ]; then
-  exit 0
-fi
-
-snipara-companion post-tool "$INPUT" || true
-`;
-}
 function installHooks(projectDir, projectId, _apiKey, client) {
   try {
     if (client === "cursor") {
@@ -6424,28 +6416,6 @@ function installHooks(projectDir, projectId, _apiKey, client) {
       fs8.writeFileSync(hooksPath, JSON.stringify(generateCursorHookConfig(), null, 2));
       return { success: true };
     }
-    if (client === "windsurf") {
-      const windsurfDir = path8.join(projectDir, ".windsurf");
-      const hooksDir2 = path8.join(windsurfDir, "hooks");
-      const hooksPath = path8.join(windsurfDir, "cascade-hooks.json");
-      if (!fs8.existsSync(windsurfDir)) {
-        fs8.mkdirSync(windsurfDir, { recursive: true });
-      }
-      if (!fs8.existsSync(hooksDir2)) {
-        fs8.mkdirSync(hooksDir2, { recursive: true });
-      }
-      const preReadPath = path8.join(hooksDir2, "pre-read.sh");
-      fs8.writeFileSync(preReadPath, generateWindsurfPreReadScript());
-      fs8.chmodSync(preReadPath, "755");
-      const postReadPath = path8.join(hooksDir2, "post-read.sh");
-      fs8.writeFileSync(postReadPath, generateWindsurfPostReadScript());
-      fs8.chmodSync(postReadPath, "755");
-      const postWritePath = path8.join(hooksDir2, "post-write.sh");
-      fs8.writeFileSync(postWritePath, generateWindsurfPostWriteScript());
-      fs8.chmodSync(postWritePath, "755");
-      fs8.writeFileSync(hooksPath, JSON.stringify(generateWindsurfHookConfig(), null, 2));
-      return { success: true };
-    }
     const claudeDir = path8.join(projectDir, ".claude");
     const hooksDir = path8.join(claudeDir, "hooks");
     const settingsPath = path8.join(claudeDir, "settings.json");
@@ -6704,9 +6674,11 @@ async function initCommand(options) {
       console.log(
         "Add this to .cursor/hooks.json, or rerun with --with-hooks to install the full bundle:\n"
       );
-    } else if (hookClient === "windsurf") {
-      console.log("\n\u{1F4DD} Windsurf Hook Configuration\n");
-      console.log("Add this to your .windsurf/cascade-hooks.json:\n");
+    } else if (hookClient === "kimi") {
+      console.log("\n\u{1F4DD} Kimi Code CLI MCP Configuration\n");
+      console.log(
+        "Save this as .kimi-code/mcp.json, or rerun with --with-hooks for the plugin bundle:\n"
+      );
     } else if (hookClient === "codex") {
       console.log("\n\u{1F4DD} OpenAI Codex MCP Configuration\n");
       console.log("Merge this into ~/.codex/config.toml or project .codex/config.toml:\n");
@@ -6751,9 +6723,10 @@ async function initCommand(options) {
     if (hookClient === "cursor") {
       console.log("  1. Restart Cursor to load the new MCP, rules, and hooks");
       console.log("  2. Verify with: cursor mcp list");
-    } else if (hookClient === "windsurf") {
-      console.log("  1. Restart Windsurf to load the new hooks");
-      console.log("  2. Verify your cascade hooks are enabled");
+    } else if (hookClient === "kimi") {
+      console.log("  1. Review and install .kimi-code/snipara-plugin with /plugins install");
+      console.log("  2. Run /reload or start a new Kimi Code CLI session");
+      console.log("  3. Run /mcp and verify the Snipara Hosted MCP tools");
     } else if (hookClient === "codex") {
       console.log("  1. Restart Codex to load the MCP config and hooks");
       console.log("  2. Verify the snipara MCP tools and /hooks are available in Codex");
@@ -6779,9 +6752,9 @@ async function initCommand(options) {
     if (hookClient === "cursor") {
       console.log("  2. Add it to .cursor/hooks.json in your project");
       console.log("  3. Restart Cursor");
-    } else if (hookClient === "windsurf") {
-      console.log("  2. Add it to .windsurf/cascade-hooks.json in your project");
-      console.log("  3. Restart Windsurf");
+    } else if (hookClient === "kimi") {
+      console.log("  2. Save it as .kimi-code/mcp.json in your project");
+      console.log("  3. Restart Kimi Code CLI and run /mcp");
     } else if (hookClient === "codex") {
       console.log("  2. Add it to ~/.codex/config.toml or project .codex/config.toml");
       console.log("  3. Restart Codex");
@@ -18402,10 +18375,10 @@ var ADAPTER_TARGETS = {
     profile: "External ADE worker using portable MCP and receipt echo",
     instruction: "Use the portable MCP plus companion handoff path, echo the receipt fields, and do not assume native hooks."
   },
-  windsurf: {
-    label: "Windsurf",
-    profile: "IDE coding assistant with portable context and proof gates",
-    instruction: "Use portable context, file scope, and proof gates around the IDE workflow; return evidence through companion handoff."
+  kimi: {
+    label: "Kimi Code CLI",
+    profile: "CLI coding agent with project MCP and an explicit Companion plugin",
+    instruction: "Load the project MCP config, install the generated Snipara plugin, keep hook failures fail-open, and return evidence through companion handoff."
   },
   custom: {
     label: "Custom worker",
@@ -30757,9 +30730,9 @@ var TARGETS = {
     label: "Orca",
     posture: "Use MCP plus companion handoffs; avoid assuming native Snipara task control."
   },
-  windsurf: {
-    label: "Windsurf",
-    posture: "Use portable context, proof, and resume artifacts around the IDE workflow."
+  kimi: {
+    label: "Kimi Code CLI",
+    posture: "Use project-local MCP plus the explicit Snipara plugin for fail-open hooks, resume state, and proof gates."
   },
   custom: {
     label: "Custom worker",
@@ -31246,7 +31219,7 @@ var TARGET_LABELS = {
   "claude-code": "Claude Code",
   cursor: "Cursor",
   orca: "Orca",
-  windsurf: "Windsurf",
+  kimi: "Kimi Code CLI",
   custom: "Custom worker"
 };
 function normalizeTarget2(target) {
@@ -38080,7 +38053,7 @@ program.command("login").description("Authenticate this workspace through the Sn
 });
 program.command("init").description("Initialize Snipara companion configuration").option("-k, --api-key <key>", "API key").option("-p, --project <project>", "Project slug or ID").option("--project-id <id>", "Project slug or ID (deprecated alias)").option(
   "-c, --client <client>",
-  "Client type (claude-code|cursor|windsurf|codex|gemini|mistral|chatgpt|vscode|continue|custom)"
+  "Client type (claude-code|cursor|kimi|codex|gemini|mistral|chatgpt|vscode|continue|custom)"
 ).option("-f, --force", "Force overwrite existing configuration").option("-w, --with-hooks", "Install hooks automatically").option("-d, --dir <directory>", "Project directory for hooks (default: current)").action(async (options) => {
   await initCommand({
     ...options,
@@ -38106,7 +38079,7 @@ program.command("timeline").description("Show recent workflow phase commits, che
 });
 program.command("handoff").description("Create an agent-ready handoff artifact and persist Team Sync continuity").option("--summary <summary>", "What changed in this session").option("--next <next>", "Recommended next action").option("--files <files...>", "Relevant files").option("--attention <attention>", "Attention level (note|watch|review|proof)").option("--risk <risk>", "Compatibility alias for --attention").option("--actor <actor>", "Actor or agent name").option("--adapter-pack", "Attach an ADE Adapter Pack V1 to the handoff artifact").option(
   "--target <target>",
-  "ADE adapter-pack target (codex|claude-code|cursor|orca|windsurf|custom)"
+  "ADE adapter-pack target (codex|claude-code|cursor|orca|kimi|custom)"
 ).option("--context <refs...>", "Context references for the adapter pack").option("--proof <proof...>", "Proof gates expected from the receiving agent").option("--acceptance <criteria...>", "Acceptance criteria for the receiving agent").option(
   "--conflict-posture <posture>",
   "Conflict posture (continue|wait|split_work|review_only|handoff)"
@@ -38147,7 +38120,7 @@ program.command("agent-readiness").description("Audit whether a repo/task is rea
     "Create a local readiness report with proof gaps and a service-pack recommendation"
   ).option(
     "--target <target>",
-    "Target agent or ADE (codex|claude-code|cursor|orca|windsurf|custom)"
+    "Target agent or ADE (codex|claude-code|cursor|orca|kimi|custom)"
   ).option("--task <task>", "Delegated task summary").option("--changed-files <files...>", "Changed or relevant files").option("--context <refs...>", "Context references, decisions, docs, or source facts").option("--proof <proof...>", "Required proof gates or verification evidence").option("--acceptance <criteria...>", "Acceptance criteria for the delegated work").option("--risk <risks...>", "Known risks or caveats").option("-d, --dir <directory>", "Project directory (default: current)").option("-o, --output <file>", "Write Markdown or JSON report").option("--json", "Print raw JSON").action(async (options) => {
     await agentReadinessAuditCommand({
       target: options.target,
@@ -38203,10 +38176,7 @@ program.command("outcome-capture").description("Extract review-pending why/outco
     });
   })
 );
-program.command("lead-plan").description("Create a fail-closed Companion Engineering Lead Plan").option("--task <task>", "Current task or work package summary").option(
-  "--target <target>",
-  "Target agent or ADE (codex|claude-code|cursor|orca|windsurf|custom)"
-).option("--changed-files <files...>", "Changed or relevant files").option("--context <refs...>", "Context references, decisions, docs, or source facts").option("--proof <proof...>", "Required proof gates or verification evidence").option("--acceptance <criteria...>", "Acceptance criteria for the delegated work").option("--risk <risks...>", "Known risks or caveats").option("--from-cockpit <file>", "Read a Project Health cockpit JSON export").option("--from-plan <file>", "Read a Companion or Project Health Engineering Lead Plan JSON").option("--reconcile", "Reconcile an imported lead plan against current local Companion signals").option("-d, --dir <directory>", "Project directory (default: current)").option("-o, --output <file>", "Write Markdown or JSON report").option("--out <file>", "Alias for --output").option("--json", "Print raw JSON").action(async (options) => {
+program.command("lead-plan").description("Create a fail-closed Companion Engineering Lead Plan").option("--task <task>", "Current task or work package summary").option("--target <target>", "Target agent or ADE (codex|claude-code|cursor|orca|kimi|custom)").option("--changed-files <files...>", "Changed or relevant files").option("--context <refs...>", "Context references, decisions, docs, or source facts").option("--proof <proof...>", "Required proof gates or verification evidence").option("--acceptance <criteria...>", "Acceptance criteria for the delegated work").option("--risk <risks...>", "Known risks or caveats").option("--from-cockpit <file>", "Read a Project Health cockpit JSON export").option("--from-plan <file>", "Read a Companion or Project Health Engineering Lead Plan JSON").option("--reconcile", "Reconcile an imported lead plan against current local Companion signals").option("-d, --dir <directory>", "Project directory (default: current)").option("-o, --output <file>", "Write Markdown or JSON report").option("--out <file>", "Alias for --output").option("--json", "Print raw JSON").action(async (options) => {
   await leadPlanCommand({
     task: options.task,
     target: options.target,
@@ -38370,7 +38340,7 @@ program.command("htask").description(
 program.command("automations").description("Install and inspect dashboard-generated automation hook bundles").addCommand(
   new import_commander.Command("install").description("Fetch and install the project automation bundle").option(
     "-c, --client <client>",
-    "Client type (claude-code|cursor|windsurf|codex|gemini|mistral|chatgpt|vscode|continue|custom)"
+    "Client type (claude-code|cursor|kimi|codex|gemini|mistral|chatgpt|vscode|continue|custom)"
   ).option("-d, --dir <directory>", "Project directory (default: current)").option("-f, --force", "Overwrite local files even when they differ").option("--dry-run", "Preview writes without changing files").action(async (options) => {
     await automationsInstallCommand({
       client: options.client,

package/docs/FULL_REFERENCE.md

@@ -703,7 +703,7 @@ Output includes:
 ## Agent Readiness Audits
 
 Use `agent-readiness audit` when a team wants to know whether a task can be
-delegated safely to Codex, Claude Code, Cursor, Orca, Windsurf, or a custom
+delegated safely to Codex, Claude Code, Cursor, Orca, Kimi Code CLI, or a custom
 worker:
 
 ```bash
@@ -783,7 +783,7 @@ Project Policy.
 ## ADE Adapter Pack Handoffs
 
 Use `handoff --adapter-pack` when the receiving execution cockpit is Codex,
-Claude Code, Cursor, Orca, Windsurf, or a custom worker:
+Claude Code, Cursor, Orca, Kimi Code CLI, or a custom worker:
 
 ```bash
 snipara-companion handoff \
@@ -813,7 +813,7 @@ The built-in `init` and `automations` flows share these client names:
 
 - `claude-code`
 - `cursor`
-- `windsurf`
+- `kimi`
 - `codex`
 - `gemini`
 - `mistral`
@@ -822,7 +822,7 @@ The built-in `init` and `automations` flows share these client names:
 - `continue`
 - `custom`
 
-Claude Code, Cursor, Windsurf, Codex, and Gemini have native or generated hook
+Claude Code, Cursor, Kimi Code CLI, Codex, and Gemini have native or generated hook
 surfaces. Mistral, ChatGPT, VS Code, Continue, and custom clients are MCP-first presets: companion
 prints the hosted MCP config/reference and installs dashboard-generated
 automation files only when the hosted project exposes a bundle for that client.
@@ -841,12 +841,21 @@ npx -y snipara-companion@latest init --with-hooks --client claude-code
 npx -y snipara-companion@latest init --with-hooks --client cursor
 ```
 
-### Windsurf
+### Kimi Code CLI
 
 ```bash
-npx -y snipara-companion@latest init --with-hooks --client windsurf
+npx -y snipara-companion@latest init --with-hooks --client kimi
+npx -y snipara-companion@latest automations install --client kimi
+# In Kimi Code, after reviewing the generated files:
+/plugins install .kimi-code/snipara-plugin
 ```
 
+Kimi reads `.kimi-code/mcp.json` and resolves `SNIPARA_API_KEY` from the launch
+environment. Its plugin hooks are fail-open, so keep manual approval for risky
+tools and treat Hosted MCP tenant checks plus Companion guards as the hard
+boundary. Kimi installs plugins per user; the generated handler no-ops outside
+workspaces carrying a Snipara project or Companion marker.
+
 ### Codex
 
 ```bash
@@ -871,7 +880,7 @@ bundle generated by Project Automation in the dashboard:
 ```bash
 npx -y snipara-companion@latest automations install --client claude-code
 npx -y snipara-companion@latest automations install --client cursor
-npx -y snipara-companion@latest automations install --client windsurf
+npx -y snipara-companion@latest automations install --client kimi
 npx -y snipara-companion@latest automations install --client codex
 npx -y snipara-companion@latest automations status
 npx -y snipara-companion@latest automations diff
@@ -889,7 +898,7 @@ unless you pass `--force`.
 Agent instruction files are always merged, not replaced. Existing `AGENTS.md`,
 `CLAUDE.md`, `GEMINI.md`, `.cursorrules`, and Copilot instructions keep their
 local content while Snipara adds or refreshes a marked Snipara section. Known
-client JSON configs for Claude, Cursor, Continue.dev, Windsurf, Gemini, VS Code,
+client JSON configs for Claude, Cursor, Continue.dev, Kimi, Gemini, VS Code,
 and root `mcp.json` are deep-merged so existing servers and hooks are preserved.
 Mistral generates MCP-first files (`MISTRAL.md`, Vibe config, Le Chat connector
 reference, and LangChain `ChatMistralAI.bindTools` snippets); Mistral request
@@ -904,6 +913,12 @@ headers, pass the same value as `correlation_context.session_id` on
 `snipara_context_query`, `snipara_recall`, `snipara_search`, `snipara_ask`, and
 `snipara_get_chunk`.
 
+Companion's own Hosted MCP client always forwards the configured workspace
+`sessionId` as `X-Snipara-Session-Id`. For the five correlated retrieval tools,
+it also supplies `client: "snipara-companion"` when the caller did not provide a
+client label. The session value is telemetry-only: it never authenticates the
+request, changes project scope, or overrides explicit per-call correlation.
+
 OpenClaw hooks remain separate:
 
 ```bash
@@ -925,7 +940,7 @@ Options:
 - `--api-key <key>` - Skip prompt for API key
 - `--project <project>` - Skip prompt for project slug or ID
 - `--project-id <id>` - Deprecated alias for `--project`
-- `--client <client>` - `claude-code`, `cursor`, `windsurf`, `codex`, `gemini`, `chatgpt`, `vscode`, `continue`, or `custom`
+- `--client <client>` - `claude-code`, `cursor`, `kimi`, `codex`, `gemini`, `mistral`, `chatgpt`, `vscode`, `continue`, or `custom`
 - `--with-hooks` - Install hooks automatically
 - `--force` - Overwrite existing generated files
 - `--dir <directory>` - Target directory for generated files

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "snipara-companion",
-  "version": "3.5.1",
+  "version": "3.5.3",
   "description": "Local-first CLI that asks your repo what breaks before an AI coding agent edits it.",
   "main": "dist/index.js",
   "bin": {
@@ -31,7 +31,7 @@
     "llm",
     "claude",
     "cursor",
-    "windsurf",
+    "kimi",
     "codex",
     "gemini",
     "mistral",