specrails-core 4.11.2 → 4.12.0

package/dist/installer/commands/framework.js

@@ -4,6 +4,7 @@ import { InstallerError } from '../util/errors.js';
 import { ok, step } from '../util/logger.js';
 import { pathExists, readTextFile } from '../util/fs.js';
 import { derivedPaths } from '../phases/provider-detect.js';
+import { assertFrameworkVersionComplete, resolveRequiredFrameworkProviders, } from '../phases/framework-lifecycle.js';
 import { assembleProjectWorkspace, ensureCurrentSymlink } from '../phases/scaffold.js';
 import { ensureFramework } from './init.js';
 function requireString(value, flagName) {
@@ -12,13 +13,47 @@ function requireString(value, flagName) {
     }
     return value;
 }
+const SAFE_FRAMEWORK_VERSION = /^[A-Za-z0-9][A-Za-z0-9._+-]{0,127}$/;
+/**
+ * Framework versions become directory names under the shared framework store.
+ * Keep this deliberately narrower than an arbitrary path segment so a version
+ * accepted on POSIX remains safe when the same registry/store is consumed on
+ * Windows. It accepts normal semver, prerelease, and build identifiers while
+ * rejecting separators, dot segments, controls, and traversal payloads.
+ */
+function parseFrameworkVersion(value) {
+    const version = requireString(value, 'version');
+    if (version === '.' ||
+        version === '..' ||
+        version.includes('\0') ||
+        !SAFE_FRAMEWORK_VERSION.test(version)) {
+        throw new InstallerError(`--version must be a safe framework version identifier, got: ${JSON.stringify(version)}`, 40);
+    }
+    return version;
+}
 function parseProvider(value) {
     const v = requireString(value, 'provider');
-    if (v !== 'claude' && v !== 'codex' && v !== 'gemini') {
-        throw new InstallerError(`--provider value must be 'claude', 'codex', or 'gemini', got: ${v}`, 40);
+    if (v !== 'claude' && v !== 'codex' && v !== 'gemini' && v !== 'kimi') {
+        throw new InstallerError(`--provider value must be 'claude', 'codex', 'gemini', or 'kimi', got: ${v}`, 40);
     }
     return v;
 }
+function parseProviders(value) {
+    if (value === undefined)
+        return [];
+    const raw = requireString(value, 'providers');
+    const providers = [];
+    for (const item of raw.split(',')) {
+        const provider = item.trim();
+        if (provider.length === 0)
+            continue;
+        providers.push(parseProvider(provider));
+    }
+    if (providers.length === 0) {
+        throw new InstallerError('--providers must contain at least one provider', 40);
+    }
+    return [...new Set(providers)];
+}
 /**
  * Resolves the specrails-core package root (where templates/ + commands/ live).
  *   - Published: `<pkg>/dist/installer/commands/framework.js`
@@ -42,7 +77,7 @@ export async function runInstallFramework(flags) {
     const scriptDir = resolveScriptDir();
     const frameworkDir = path.resolve(requireString(flags['framework-dir'], 'framework-dir'));
     const provider = parseProvider(flags.provider);
-    const version = requireString(flags.version, 'version');
+    const version = parseFrameworkVersion(flags.version);
     const { providerDir } = derivedPaths(provider);
     const swapCurrent = flags['no-swap'] !== true;
     step(`Materializing framework ${version} (${provider}) → ${frameworkDir}`);
@@ -70,11 +105,18 @@ export async function runInstallFramework(flags) {
  */
 export async function runSwapCurrent(flags) {
     const frameworkDir = path.resolve(requireString(flags['framework-dir'], 'framework-dir'));
-    const version = requireString(flags.version, 'version');
+    const version = parseFrameworkVersion(flags.version);
+    const requested = parseProviders(flags.providers);
+    const required = resolveRequiredFrameworkProviders({
+        frameworkDir,
+        requested,
+        registryHome: process.env.SPECRAILS_REGISTRY_HOME,
+    });
     step(`Swapping framework current → ${version} (${frameworkDir})`);
+    const providers = assertFrameworkVersionComplete(frameworkDir, version, required);
     ensureCurrentSymlink(frameworkDir, version);
-    ok(`current → ${version}`);
-    return { frameworkDir, version };
+    ok(`current → ${version} (${providers.join(', ')})`);
+    return { frameworkDir, version, providers };
 }
 /**
  * `specrails-core assemble` — SYMLINK the materialized framework subtrees into a
@@ -86,7 +128,7 @@ export async function runAssemble(flags) {
     const workspace = path.resolve(requireString(flags.workspace, 'workspace'));
     const frameworkDir = path.resolve(requireString(flags['framework-dir'], 'framework-dir'));
     const provider = parseProvider(flags.provider);
-    const version = requireString(flags.version, 'version');
+    const version = parseFrameworkVersion(flags.version);
     const codeRoot = path.resolve(requireString(flags['code-root'], 'code-root'));
     const { providerDir } = derivedPaths(provider);
     // Defence-in-depth: the framework must be materialized + `current` pointed at

package/dist/installer/commands/framework.js.map

@@ -1 +1 @@
-{"version":3,"file":"framework.js","sourceRoot":"","sources":["../../../src/installer/commands/framework.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAExC,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAClD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAA;AAC5C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAGxD,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAA;AAC3D,OAAO,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAA;AACtF,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAiE3C,SAAS,aAAa,CAAC,KAAmC,EAAE,QAAgB;IAC1E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,cAAc,CAAC,KAAK,QAAQ,cAAc,EAAE,EAAE,CAAC,CAAA;IAC3D,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,aAAa,CAAC,KAAmC;IACxD,MAAM,CAAC,GAAG,aAAa,CAAC,KAAK,EAAE,UAAU,CAAC,CAAA;IAC1C,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;QACtD,MAAM,IAAI,cAAc,CAAC,iEAAiE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;IACpG,CAAC;IACD,OAAO,CAAC,CAAA;AACV,CAAC;AAED;;;;;;GAMG;AACH,SAAS,gBAAgB;IACvB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAA;IACtD,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;IAClE,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;IACzD,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;AAC7C,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAA4B;IAE5B,MAAM,SAAS,GAAG,gBAAgB,EAAE,CAAA;IACpC,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,eAAe,CAAC,CAAC,CAAA;IACzF,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;IAC9C,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;IACvD,MAAM,EAAE,WAAW,EAAE,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAA;IAE9C,MAAM,WAAW,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,IAAI,CAAA;IAC7C,IAAI,CAAC,2BAA2B,OAAO,KAAK,QAAQ,OAAO,YAAY,EAAE,CAAC,CAAA;IAC1E,eAAe,CAAC;QACd,SAAS;QACT,YAAY;QACZ,QAAQ;QACR,WAAW;QACX,OAAO;QACP,WAAW;KACZ,CAAC,CAAA;IACF,IAAI,WAAW,EAAE,CAAC;QAChB,EAAE,CAAC,aAAa,OAAO,WAAW,WAAW,iBAAiB,OAAO,EAAE,CAAC,CAAA;IAC1E,CAAC;SAAM,CAAC;QACN,EAAE,CAAC,aAAa,OAAO,WAAW,WAAW,qCAAqC,CAAC,CAAA;IACrF,CAAC;IAED,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,CAAA;AAC/E,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAAuB;IAC1D,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,eAAe,CAAC,CAAC,CAAA;IACzF,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;IACvD,IAAI,CAAC,gCAAgC,OAAO,KAAK,YAAY,GAAG,CAAC,CAAA;IACjE,oBAAoB,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;IAC3C,EAAE,CAAC,aAAa,OAAO,EAAE,CAAC,CAAA;IAC1B,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,CAAA;AAClC,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,KAAoB;IACpD,MAAM,SAAS,GAAG,gBAAgB,EAAE,CAAA;IACpC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAA;IAC3E,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,eAAe,CAAC,CAAC,CAAA;IACzF,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;IAC9C,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;IACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC,CAAC,CAAA;IAC7E,MAAM,EAAE,WAAW,EAAE,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAA;IAE9C,8EAA8E;IAC9E,6EAA6E;IAC7E,6EAA6E;IAC7E,qBAAqB;IACrB,MAAM,kBAAkB,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,SAAS,EAAE,WAAW,CAAC,CAAA;IAC1E,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,cAAc,CACtB,+BAA+B,kBAAkB,2CAA2C,EAC5F,EAAE,CACH,CAAA;IACH,CAAC;IAED,MAAM,kBAAkB,GAAG,KAAK,CAAC,iBAAiB,CAAC,CAAA;IACnD,MAAM,cAAc,GAClB,OAAO,kBAAkB,KAAK,QAAQ,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC;QACrE,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;QAChF,CAAC,CAAC,SAAS,CAAA;IAEf,IAAI,CAAC,wBAAwB,SAAS,gBAAgB,OAAO,KAAK,QAAQ,GAAG,CAAC,CAAA;IAC9E,wBAAwB,CAAC;QACvB,SAAS;QACT,YAAY;QACZ,QAAQ;QACR,WAAW;QACX,OAAO;QACP,QAAQ;QACR,SAAS;QACT,cAAc;KACf,CAAC,CAAA;IACF,EAAE,CAAC,UAAU,WAAW,oBAAoB,OAAO,yBAAyB,CAAC,CAAA;IAE7E,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAA;AAC9E,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,kBAAkB,CAAC,SAAkB;IACnD,MAAM,GAAG,GAAG,SAAS,IAAI,gBAAgB,EAAE,CAAA;IAC3C,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAA;IACxC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,SAAS,CAAA;IACpC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAyB,CAAA;QAC/D,OAAO,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,SAAS,CAAA;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC"}
+{"version":3,"file":"framework.js","sourceRoot":"","sources":["../../../src/installer/commands/framework.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAExC,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAClD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAA;AAC5C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAGxD,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAA;AAC3D,OAAO,EACL,8BAA8B,EAC9B,iCAAiC,GAClC,MAAM,kCAAkC,CAAA;AACzC,OAAO,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAA;AACtF,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAwE3C,SAAS,aAAa,CAAC,KAAmC,EAAE,QAAgB;IAC1E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,cAAc,CAAC,KAAK,QAAQ,cAAc,EAAE,EAAE,CAAC,CAAA;IAC3D,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,sBAAsB,GAAG,qCAAqC,CAAA;AAEpE;;;;;;GAMG;AACH,SAAS,qBAAqB,CAAC,KAAmC;IAChE,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,EAAE,SAAS,CAAC,CAAA;IAC/C,IACE,OAAO,KAAK,GAAG;QACf,OAAO,KAAK,IAAI;QAChB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;QACtB,CAAC,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,EACrC,CAAC;QACD,MAAM,IAAI,cAAc,CACtB,+DAA+D,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,EACxF,EAAE,CACH,CAAA;IACH,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,SAAS,aAAa,CAAC,KAAmC;IACxD,MAAM,CAAC,GAAG,aAAa,CAAC,KAAK,EAAE,UAAU,CAAC,CAAA;IAC1C,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,MAAM,EAAE,CAAC;QACtE,MAAM,IAAI,cAAc,CACtB,yEAAyE,CAAC,EAAE,EAC5E,EAAE,CACH,CAAA;IACH,CAAC;IACD,OAAO,CAAC,CAAA;AACV,CAAC;AAED,SAAS,cAAc,CAAC,KAAmC;IACzD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAA;IAClC,MAAM,GAAG,GAAG,aAAa,CAAC,KAAK,EAAE,WAAW,CAAC,CAAA;IAC7C,MAAM,SAAS,GAAe,EAAE,CAAA;IAChC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;QAC5B,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,SAAQ;QACnC,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAA;IACzC,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,cAAc,CAAC,gDAAgD,EAAE,EAAE,CAAC,CAAA;IAChF,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,CAAA;AAChC,CAAC;AAED;;;;;;GAMG;AACH,SAAS,gBAAgB;IACvB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAA;IACtD,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;IAClE,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;IACzD,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;AAC7C,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAA4B;IAE5B,MAAM,SAAS,GAAG,gBAAgB,EAAE,CAAA;IACpC,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,eAAe,CAAC,CAAC,CAAA;IACzF,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;IAC9C,MAAM,OAAO,GAAG,qBAAqB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IACpD,MAAM,EAAE,WAAW,EAAE,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAA;IAE9C,MAAM,WAAW,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,IAAI,CAAA;IAC7C,IAAI,CAAC,2BAA2B,OAAO,KAAK,QAAQ,OAAO,YAAY,EAAE,CAAC,CAAA;IAC1E,eAAe,CAAC;QACd,SAAS;QACT,YAAY;QACZ,QAAQ;QACR,WAAW;QACX,OAAO;QACP,WAAW;KACZ,CAAC,CAAA;IACF,IAAI,WAAW,EAAE,CAAC;QAChB,EAAE,CAAC,aAAa,OAAO,WAAW,WAAW,iBAAiB,OAAO,EAAE,CAAC,CAAA;IAC1E,CAAC;SAAM,CAAC;QACN,EAAE,CAAC,aAAa,OAAO,WAAW,WAAW,qCAAqC,CAAC,CAAA;IACrF,CAAC;IAED,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,CAAA;AAC/E,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAAuB;IAC1D,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,eAAe,CAAC,CAAC,CAAA;IACzF,MAAM,OAAO,GAAG,qBAAqB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IACpD,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;IACjD,MAAM,QAAQ,GAAG,iCAAiC,CAAC;QACjD,YAAY;QACZ,SAAS;QACT,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,uBAAuB;KAClD,CAAC,CAAA;IACF,IAAI,CAAC,gCAAgC,OAAO,KAAK,YAAY,GAAG,CAAC,CAAA;IACjE,MAAM,SAAS,GAAG,8BAA8B,CAAC,YAAY,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAA;IACjF,oBAAoB,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;IAC3C,EAAE,CAAC,aAAa,OAAO,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACpD,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,CAAA;AAC7C,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,KAAoB;IACpD,MAAM,SAAS,GAAG,gBAAgB,EAAE,CAAA;IACpC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAA;IAC3E,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,eAAe,CAAC,CAAC,CAAA;IACzF,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;IAC9C,MAAM,OAAO,GAAG,qBAAqB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC,CAAC,CAAA;IAC7E,MAAM,EAAE,WAAW,EAAE,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAA;IAE9C,8EAA8E;IAC9E,6EAA6E;IAC7E,6EAA6E;IAC7E,qBAAqB;IACrB,MAAM,kBAAkB,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,SAAS,EAAE,WAAW,CAAC,CAAA;IAC1E,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,cAAc,CACtB,+BAA+B,kBAAkB,2CAA2C,EAC5F,EAAE,CACH,CAAA;IACH,CAAC;IAED,MAAM,kBAAkB,GAAG,KAAK,CAAC,iBAAiB,CAAC,CAAA;IACnD,MAAM,cAAc,GAClB,OAAO,kBAAkB,KAAK,QAAQ,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC;QACrE,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;QAChF,CAAC,CAAC,SAAS,CAAA;IAEf,IAAI,CAAC,wBAAwB,SAAS,gBAAgB,OAAO,KAAK,QAAQ,GAAG,CAAC,CAAA;IAC9E,wBAAwB,CAAC;QACvB,SAAS;QACT,YAAY;QACZ,QAAQ;QACR,WAAW;QACX,OAAO;QACP,QAAQ;QACR,SAAS;QACT,cAAc;KACf,CAAC,CAAA;IACF,EAAE,CAAC,UAAU,WAAW,oBAAoB,OAAO,yBAAyB,CAAC,CAAA;IAE7E,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAA;AAC9E,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,kBAAkB,CAAC,SAAkB;IACnD,MAAM,GAAG,GAAG,SAAS,IAAI,gBAAgB,EAAE,CAAA;IAC3C,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAA;IACxC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,SAAS,CAAA;IACpC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAyB,CAAA;QAC/D,OAAO,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,SAAS,CAAA;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC"}

package/dist/installer/commands/init.js

@@ -1,14 +1,102 @@
+import { copyFileSync, lstatSync, mkdirSync, mkdtempSync, readdirSync, realpathSync, renameSync, rmSync, } from 'node:fs';
+import os from 'node:os';
 import path from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { InstallerError } from '../util/errors.js';
 import { runCommand } from '../util/exec.js';
 import { info, ok, step } from '../util/logger.js';
-import { readTextFile, pathExists } from '../util/fs.js';
+import { isDir, isSymlink, listDir, pathExists, readTextFile, removePath, writeFileLf, } from '../util/fs.js';
 import { loadInstallConfig, resolveConfigPath, } from '../phases/install-config.js';
 import { checkPrerequisites } from '../phases/prereqs.js';
 import { derivedPaths } from '../phases/provider-detect.js';
-import { assembleProjectWorkspace, ensureCurrentSymlink, installFramework, } from '../phases/scaffold.js';
+import { materializeFrameworkVersion } from '../phases/framework-lifecycle.js';
+import { assembleProjectWorkspace, installFramework, } from '../phases/scaffold.js';
 import { frameworkRoot, resolveArtifacts } from '../util/registry.js';
+const WORKSPACE_PROVIDER_ORDER = [
+    'claude',
+    'codex',
+    'gemini',
+    'kimi',
+];
+/**
+ * Snapshot the provider/role inventory exposed by one live workspace before a
+ * global framework version swap. This matters on Windows: directory junctions
+ * resolve their target when they are created, so a workspace link made through
+ * `framework/current` must be recreated after `current` moves. Keeping the
+ * exact visible `sr-*` set also avoids widening or narrowing a project's
+ * optional role selection during that refresh.
+ */
+export function snapshotWorkspaceProviderSelections(workspace) {
+    const selections = {};
+    for (const provider of WORKSPACE_PROVIDER_ORDER) {
+        const { providerDir } = derivedPaths(provider);
+        const providerRoot = path.join(workspace, providerDir);
+        if (!pathExists(providerRoot) ||
+            !workspaceHasManagedProviderLink(providerRoot, provider)) {
+            continue;
+        }
+        const roleRoot = provider === 'codex'
+            ? path.join(workspace, providerDir, 'skills', 'rails')
+            : provider === 'kimi'
+                ? path.join(workspace, providerDir, 'skills')
+                : path.join(workspace, providerDir, 'agents');
+        const ids = listDir(roleRoot)
+            .filter((entry) => provider === 'claude' || provider === 'gemini'
+            ? path.basename(entry).endsWith('.md')
+            : isDir(entry))
+            .map((entry) => {
+            const name = path.basename(entry);
+            return name.endsWith('.md') ? name.slice(0, -3) : name;
+        })
+            .filter((id) => /^sr-[a-z0-9-]+$/.test(id));
+        selections[provider] = [...new Set(ids)].sort();
+    }
+    return selections;
+}
+function workspaceHasManagedProviderLink(providerRoot, provider) {
+    const directoryLinks = provider === 'claude'
+        ? ['commands', 'skills', 'rules']
+        : provider === 'codex'
+            ? ['skills']
+            : provider === 'gemini'
+                ? ['commands']
+                : ['rules', 'specrails'];
+    if (directoryLinks.some((relative) => isSymlink(path.join(providerRoot, relative)))) {
+        return true;
+    }
+    const granularRoot = provider === 'kimi'
+        ? path.join(providerRoot, 'skills')
+        : path.join(providerRoot, 'agents');
+    return listDir(granularRoot).some((entry) => isSymlink(entry));
+}
+/**
+ * Refresh every provider already represented in the project plus the provider
+ * selected by the current operation. POSIX symlinks continue to follow
+ * `framework/current`; Windows junctions do not reliably preserve that
+ * indirection, so rebuilding all live links is required for true
+ * multi-provider version parity.
+ */
+export function reassembleWorkspaceProviders(input) {
+    const providers = WORKSPACE_PROVIDER_ORDER.filter((provider) => provider === input.selectedProvider ||
+        Object.prototype.hasOwnProperty.call(input.previousSelections, provider));
+    for (const provider of providers) {
+        const { providerDir } = derivedPaths(provider);
+        assembleProjectWorkspace({
+            workspace: input.workspace,
+            frameworkDir: input.frameworkDir,
+            provider,
+            providerDir,
+            version: input.version,
+            codeRoot: input.codeRoot,
+            scriptDir: input.scriptDir,
+            selectedAgents: provider === input.selectedProvider
+                ? input.selectedAgents ?? input.previousSelections[provider]
+                : input.previousSelections[provider],
+            copyStatics: input.copyStatics,
+        });
+    }
+    return providers;
+}
 /**
  * Entry called by cli.ts. Returns a {@link InitResult} on success;
  * throws a typed error (translated to an exit code by the outer CLI)
@@ -18,11 +106,25 @@ export async function runInit(flags) {
     const scriptDir = resolveScriptDir();
     const version = readVersion(scriptDir);
     const repoRoot = path.resolve(typeof flags['root-dir'] === 'string' ? flags['root-dir'] : process.cwd());
-    const autoYes = flags.yes === true;
+    const autoYes = flags.yes === true || flags.y === true;
     const skipPrereqs = process.env.SPECRAILS_SKIP_PREREQS === '1';
+    // Validate an explicit provider before consulting --from-config. The TUI
+    // intentionally re-enters init with BOTH flags; accepting that flow is safe
+    // only when the generated config agrees with the original explicit choice.
+    let explicitProvider;
+    if (flags.provider !== undefined) {
+        if (typeof flags.provider !== 'string' ||
+            (flags.provider !== 'claude' &&
+                flags.provider !== 'codex' &&
+                flags.provider !== 'gemini' &&
+                flags.provider !== 'kimi')) {
+            throw new InstallerError(`--provider value must be 'claude', 'codex', 'gemini', or 'kimi', got: ${String(flags.provider)}`, 40);
+        }
+        explicitProvider = flags.provider;
+    }
     // --from-config: read provider + tier from yaml.
     const fromConfigFlag = flags['from-config'];
-    let providerHint;
+    let providerHint = explicitProvider;
     let tierHint;
     let selectedAgentsHint;
     if (fromConfigFlag !== undefined) {
@@ -30,21 +132,18 @@ export async function runInit(flags) {
         const resolved = resolveConfigPath(repoRoot, explicitPath);
         const config = loadInstallConfig(resolved);
         if (config) {
+            if (explicitProvider && explicitProvider !== config.provider) {
+                throw new InstallerError(`--provider '${explicitProvider}' conflicts with provider '${config.provider}' in ${resolved}`, 40);
+            }
             providerHint = config.provider;
             tierHint = config.tier;
             selectedAgentsHint = config.agents.selected;
             info(`Loaded install config from ${resolved}`);
         }
         else {
-            info(`install-config.yaml not found at ${resolved} — falling back to auto-detection`);
+            info(`install-config.yaml not found at ${resolved} — falling back to ${explicitProvider ? `explicit provider '${explicitProvider}'` : 'auto-detection'}`);
         }
     }
-    else if (typeof flags.provider === 'string') {
-        if (flags.provider !== 'claude' && flags.provider !== 'codex' && flags.provider !== 'gemini') {
-            throw new InstallerError(`--provider value must be 'claude', 'codex', or 'gemini', got: ${flags.provider}`, 40);
-        }
-        providerHint = flags.provider;
-    }
     if (flags.quick === true) {
         tierHint = 'quick';
     }
@@ -75,8 +174,21 @@ export async function runInit(flags) {
         providers: [prereqs.provider],
         coreVersion: version,
     });
+    // An existing Core-owned relocated entry is also the durable provider
+    // inventory. Merge this install's provider without reallocating legacy
+    // in-repo installs; Desktop-owned entries remain read-only in the resolver.
+    if (artifactRoot !== codeRoot) {
+        resolveArtifacts(repoRoot, {
+            allocate: true,
+            allocator: 'core-standalone',
+            home: process.env.SPECRAILS_REGISTRY_HOME,
+            providers: [prereqs.provider],
+            coreVersion: version,
+        });
+    }
     // In-repo when the resolution did NOT relocate the artifacts out of the repo.
     const inRepo = artifactRoot === codeRoot;
+    const previousSelections = snapshotWorkspaceProviderSelections(artifactRoot);
     // ─── Phase 2 + 3 ──────────────────────────────────────────────────────
     // Bundled-framework flow: materialize the provider-INVARIANT framework ONCE
     // under `<home>/.specrails/framework/<version>/<providerDir>/`, point `current`
@@ -94,15 +206,15 @@ export async function runInit(flags) {
         version,
         selectedAgents: selectedAgentsHint,
     });
-    assembleProjectWorkspace({
+    reassembleWorkspaceProviders({
         workspace: artifactRoot,
         frameworkDir: fwDir,
-        provider: prereqs.provider,
-        providerDir,
         version,
         codeRoot,
         scriptDir,
+        selectedProvider: prereqs.provider,
         selectedAgents: selectedAgentsHint,
+        previousSelections,
         // In-repo: COPY the framework statics as real, committable files. Relocated:
         // symlink from the framework store (O(1) update on a version swap).
         copyStatics: inRepo,
@@ -114,11 +226,12 @@ export async function runInit(flags) {
         ok(`Linked ${providerDir}/ from framework ${version} + seeded project layer`);
     }
     // openspec STAYS in the repo (codeRoot) — unchanged behaviour.
-    await installOpenSpecProject(codeRoot, prereqs.provider);
+    await installOpenSpecProject(codeRoot, prereqs.provider, artifactRoot);
     const tier = tierHint ?? 'full';
     if (tier === 'full') {
         step('Next steps');
-        info('Run `/specrails:enrich` inside Claude Code to complete your setup.');
+        const enrichCommand = prereqs.provider === 'kimi' ? '/skill:specrails-enrich' : '/specrails:enrich';
+        info(`Run \`${enrichCommand}\` inside your selected provider to complete your setup.`);
     }
     else {
         step('Installation complete');
@@ -148,17 +261,28 @@ export async function runInit(flags) {
  *   ensureCurrentSymlink(frameworkDir, version) // single atomic swap at the end
  */
 export function ensureFramework(input) {
-    installFramework({
+    if (input.swapCurrent === false) {
+        installFramework({
+            scriptDir: input.scriptDir,
+            frameworkDir: input.frameworkDir,
+            provider: input.provider,
+            providerDir: input.providerDir,
+            version: input.version,
+            selectedAgents: input.selectedAgents,
+        });
+        return;
+    }
+    // `current` is global, not scoped to this project/provider. Carry forward the
+    // requested provider, every globally registered provider, and every provider
+    // represented by the old current version; materialize all without swapping,
+    // validate the complete destination, then move the pointer exactly once.
+    materializeFrameworkVersion({
         scriptDir: input.scriptDir,
         frameworkDir: input.frameworkDir,
-        provider: input.provider,
-        providerDir: input.providerDir,
         version: input.version,
-        selectedAgents: input.selectedAgents,
+        requested: [input.provider, ...(input.requiredProviders ?? [])],
+        registryHome: input.registryHome,
     });
-    if (input.swapCurrent !== false) {
-        ensureCurrentSymlink(input.frameworkDir, input.version);
-    }
 }
 /**
  * Resolves the package root (where VERSION, templates/, commands/ live).
@@ -225,7 +349,9 @@ function readPinnedVersion(scriptDir, key, fallback) {
 export function buildOpenSpecInvocation(repoRoot, provider, env = process.env, pinnedVersion = readPinnedVersion(resolveScriptDir(), 'openspec', '1.4.1')) {
     const bin = env.SPECRAILS_OPENSPEC_BIN;
     const node = env.SPECRAILS_OPENSPEC_NODE;
-    const initArgs = ['init', '--tools', provider, repoRoot];
+    const initArgs = provider === 'kimi'
+        ? ['init', '--tools', provider, '--profile', 'custom', repoRoot]
+        : ['init', '--tools', provider, repoRoot];
     if (bin && node) {
         // Form 1: bundled offline — run the node CLI through the given node exe.
         return { bin: node, args: [bin, ...initArgs] };
@@ -247,22 +373,294 @@ export function buildOpenSpecInvocation(repoRoot, provider, env = process.env, p
         ],
     };
 }
-async function installOpenSpecProject(repoRoot, provider) {
+export const KIMI_REQUIRED_OPENSPEC_SKILLS = [
+    'openspec-propose',
+    'openspec-explore',
+    'openspec-new-change',
+    'openspec-continue-change',
+    'openspec-apply-change',
+    'openspec-ff-change',
+    'openspec-sync-specs',
+    'openspec-archive-change',
+    'openspec-bulk-archive-change',
+    'openspec-verify-change',
+    'openspec-onboard',
+];
+const OPENSPEC_ALL_WORKFLOWS = [
+    'propose',
+    'explore',
+    'new',
+    'continue',
+    'apply',
+    'ff',
+    'sync',
+    'archive',
+    'bulk-archive',
+    'verify',
+    'onboard',
+];
+/**
+ * Move only OpenSpec-owned Kimi workflow directories from either upstream
+ * location into the artifact workspace. Every destination is copied to a
+ * sibling temporary directory and renamed, so readers never observe a partial
+ * skill. A distinct newly generated source refreshes the managed destination;
+ * an in-place corrected destination is retained as-is.
+ */
+export function normalizeKimiOpenSpecSkills(repoRoot, artifactRoot) {
+    const canonicalRepoRoot = realpathSync(repoRoot);
+    const canonicalArtifactRoot = ensureRealDirectoryPath(artifactRoot);
+    const destinationRoot = ensureRealDirectoryPath(path.join(canonicalArtifactRoot, '.kimi-code', 'skills'));
+    const correctedSourceRoot = path.join(canonicalRepoRoot, '.kimi-code', 'skills');
+    const legacySourceRoot = path.join(canonicalRepoRoot, '.kimi', 'skills');
+    const correctedIsDestination = path.resolve(correctedSourceRoot) === path.resolve(destinationRoot);
+    const installed = [];
+    const sources = new Map();
+    // Validate the full inventory before mutating either tree.
+    for (const skillName of KIMI_REQUIRED_OPENSPEC_SKILLS) {
+        const destination = path.join(destinationRoot, skillName);
+        const correctedSource = path.join(correctedSourceRoot, skillName);
+        const legacySource = path.join(legacySourceRoot, skillName);
+        const sourceCandidate = !correctedIsDestination && pathExists(path.join(correctedSource, 'SKILL.md'))
+            ? correctedSource
+            : pathExists(path.join(legacySource, 'SKILL.md'))
+                ? legacySource
+                : null;
+        const source = sourceCandidate === null
+            ? null
+            : validateSafeSkillTree(sourceCandidate, skillName);
+        sources.set(skillName, source);
+        if (source) {
+            validateReplaceableDestination(destination, skillName);
+            continue;
+        }
+        if (lstatExists(destination)) {
+            validateSafeSkillTree(destination, skillName);
+            continue;
+        }
+        if (pathExists(destination)) {
+            throw new InstallerError(`Kimi OpenSpec skill ${skillName} exists without SKILL.md; refusing to overwrite it`, 50);
+        }
+        throw new InstallerError(`OpenSpec did not generate required Kimi skill ${skillName}; ` +
+            'retry `npx specrails-core update --provider kimi`', 50);
+    }
+    for (const skillName of KIMI_REQUIRED_OPENSPEC_SKILLS) {
+        const destination = path.join(destinationRoot, skillName);
+        const source = sources.get(skillName) ?? null;
+        if (source) {
+            const temporary = mkdtempSync(path.join(destinationRoot, `.${skillName}.specrails-tmp-`));
+            const backupContainer = mkdtempSync(path.join(destinationRoot, `.${skillName}.specrails-backup-`));
+            const backup = path.join(backupContainer, 'previous');
+            copyValidatedSkillTree(source, temporary);
+            try {
+                validateSafeSkillTree(temporary, skillName);
+            }
+            catch (error) {
+                removePath(temporary);
+                removePath(backupContainer);
+                throw error;
+            }
+            const hadDestination = lstatExists(destination);
+            try {
+                if (hadDestination)
+                    renameSync(destination, backup);
+                renameSync(temporary, destination);
+                removePath(backupContainer);
+            }
+            catch (err) {
+                removePath(temporary);
+                if (!lstatExists(destination) && lstatExists(backup)) {
+                    renameSync(backup, destination);
+                }
+                removePath(backupContainer);
+                throw err;
+            }
+        }
+        installed.push(skillName);
+    }
+    // Remove only the generated, known workflow directories after every
+    // destination has been validated. Unknown/user content keeps both trees.
+    for (const skillName of KIMI_REQUIRED_OPENSPEC_SKILLS) {
+        const legacy = path.join(legacySourceRoot, skillName);
+        if (path.resolve(legacy) !== path.resolve(path.join(destinationRoot, skillName))) {
+            removePath(legacy);
+        }
+        if (path.resolve(correctedSourceRoot) !== path.resolve(destinationRoot)) {
+            removePath(path.join(correctedSourceRoot, skillName));
+        }
+    }
+    removeDirectoryIfEmpty(legacySourceRoot);
+    removeDirectoryIfEmpty(path.dirname(legacySourceRoot));
+    if (path.resolve(correctedSourceRoot) !== path.resolve(destinationRoot)) {
+        removeDirectoryIfEmpty(correctedSourceRoot);
+        removeDirectoryIfEmpty(path.dirname(correctedSourceRoot));
+    }
+    return installed;
+}
+function lstatExists(target) {
+    try {
+        lstatSync(target);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Create a directory tree without ever traversing a caller-controlled symlink.
+ * Existing ancestor aliases (for example macOS `/var` → `/private/var`) are
+ * canonicalized once; every newly appended component must then be a real dir.
+ */
+function ensureRealDirectoryPath(directory) {
+    const absolute = path.resolve(directory);
+    const missing = [];
+    let anchor = absolute;
+    while (!lstatExists(anchor)) {
+        const parent = path.dirname(anchor);
+        if (parent === anchor) {
+            throw new InstallerError(`cannot resolve directory root for ${absolute}`, 50);
+        }
+        missing.unshift(path.basename(anchor));
+        anchor = parent;
+    }
+    const anchorMetadata = lstatSync(anchor);
+    if (!anchorMetadata.isDirectory() ||
+        anchorMetadata.isSymbolicLink()) {
+        throw new InstallerError(`Kimi OpenSpec destination must be a real directory: ${absolute}`, 50);
+    }
+    let cursor = realpathSync(anchor);
+    for (const component of missing) {
+        cursor = path.join(cursor, component);
+        if (!lstatExists(cursor))
+            mkdirSync(cursor, { mode: 0o700 });
+        const metadata = lstatSync(cursor);
+        if (!metadata.isDirectory() || metadata.isSymbolicLink()) {
+            throw new InstallerError(`Kimi OpenSpec destination parent must not be a symlink: ${cursor}`, 50);
+        }
+    }
+    return cursor;
+}
+function validateReplaceableDestination(destination, skillName) {
+    if (!lstatExists(destination))
+        return;
+    const metadata = lstatSync(destination);
+    if (!metadata.isDirectory() || metadata.isSymbolicLink()) {
+        throw new InstallerError(`Kimi OpenSpec destination ${skillName} must be a real directory`, 50);
+    }
+}
+function validateSafeSkillTree(source, skillName) {
+    let canonicalRoot;
+    try {
+        const rootMetadata = lstatSync(source);
+        if (!rootMetadata.isDirectory() || rootMetadata.isSymbolicLink()) {
+            throw new Error('skill root is not a real directory');
+        }
+        canonicalRoot = realpathSync(source);
+    }
+    catch (error) {
+        throw new InstallerError(`unsafe Kimi OpenSpec skill ${skillName}: ${error.message}`, 50);
+    }
+    const walk = (directory) => {
+        for (const name of readdirSync(directory)) {
+            const entry = path.join(directory, name);
+            const metadata = lstatSync(entry);
+            if (metadata.isSymbolicLink()) {
+                throw new InstallerError(`unsafe Kimi OpenSpec skill ${skillName}: symlink ${entry}`, 50);
+            }
+            const relative = path.relative(canonicalRoot, realpathSync(entry));
+            if (relative === '..' ||
+                relative.startsWith(`..${path.sep}`) ||
+                path.isAbsolute(relative)) {
+                throw new InstallerError(`unsafe Kimi OpenSpec skill ${skillName}: path escapes source`, 50);
+            }
+            if (metadata.isDirectory()) {
+                walk(entry);
+            }
+            else if (!metadata.isFile()) {
+                throw new InstallerError(`unsafe Kimi OpenSpec skill ${skillName}: unsupported file type ${entry}`, 50);
+            }
+        }
+    };
+    walk(canonicalRoot);
+    const skillFile = path.join(canonicalRoot, 'SKILL.md');
+    if (!lstatExists(skillFile)) {
+        throw new InstallerError(`generated Kimi skill ${skillName} is missing SKILL.md`, 50);
+    }
+    const skillMetadata = lstatSync(skillFile);
+    if (!skillMetadata.isFile() || skillMetadata.isSymbolicLink()) {
+        throw new InstallerError(`generated Kimi skill ${skillName} has unsafe SKILL.md`, 50);
+    }
+    return canonicalRoot;
+}
+function copyValidatedSkillTree(source, destination) {
+    for (const name of readdirSync(source)) {
+        const from = path.join(source, name);
+        const to = path.join(destination, name);
+        const metadata = lstatSync(from);
+        if (metadata.isSymbolicLink()) {
+            throw new InstallerError(`refusing to copy Kimi OpenSpec symlink ${from}`, 50);
+        }
+        if (metadata.isDirectory()) {
+            mkdirSync(to, { mode: 0o700 });
+            copyValidatedSkillTree(from, to);
+        }
+        else if (metadata.isFile()) {
+            copyFileSync(from, to);
+        }
+        else {
+            throw new InstallerError(`refusing to copy unsupported Kimi OpenSpec file ${from}`, 50);
+        }
+    }
+}
+function removeDirectoryIfEmpty(dir) {
+    if (isDir(dir) && listDir(dir).length === 0)
+        removePath(dir);
+}
+export async function installOpenSpecProject(repoRoot, provider, artifactRoot = repoRoot) {
     if (process.env.SPECRAILS_SKIP_OPENSPEC_INIT === '1') {
+        if (provider === 'kimi') {
+            const generatedRoots = [
+                path.join(repoRoot, '.kimi', 'skills'),
+                path.join(repoRoot, '.kimi-code', 'skills'),
+            ];
+            const hasGeneratedOutput = generatedRoots.some((root) => listDir(root).some((entry) => isDir(entry) && path.basename(entry).startsWith('openspec-')));
+            if (hasGeneratedOutput)
+                normalizeKimiOpenSpecSkills(repoRoot, artifactRoot);
+        }
         info('Skipping OpenSpec project init (SPECRAILS_SKIP_OPENSPEC_INIT=1)');
         return;
     }
     const { bin, args } = buildOpenSpecInvocation(repoRoot, provider);
+    let temporaryConfigHome = null;
+    let commandEnv;
+    if (provider === 'kimi') {
+        temporaryConfigHome = mkdtempSync(path.join(os.tmpdir(), 'specrails-openspec-kimi-'));
+        writeFileLf(path.join(temporaryConfigHome, 'openspec', 'config.json'), `${JSON.stringify({
+            profile: 'custom',
+            delivery: 'skills',
+            workflows: OPENSPEC_ALL_WORKFLOWS,
+            featureFlags: {},
+        }, null, 2)}\n`);
+        commandEnv = { ...process.env, XDG_CONFIG_HOME: temporaryConfigHome };
+    }
     step('Phase 3c: Installing OpenSpec');
     try {
         await runCommand(bin, args, {
             cwd: repoRoot,
             timeoutMs: 180000,
+            env: commandEnv,
         });
+        if (provider === 'kimi') {
+            normalizeKimiOpenSpecSkills(repoRoot, artifactRoot);
+        }
         ok(`OpenSpec project files installed (${provider})`);
     }
     catch (err) {
         throw new InstallerError(`OpenSpec init failed: ${err.message}`, 50);
     }
+    finally {
+        if (temporaryConfigHome) {
+            rmSync(temporaryConfigHome, { recursive: true, force: true });
+        }
+    }
 }
 //# sourceMappingURL=init.js.map