ultra-builder-pro-cli 0.8.1 → 0.10.0

package/CHANGELOG.md

@@ -7,6 +7,83 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.10.0] — 2026-07-18
+
+### Added
+
+- Added Context Manifest v2 and a DB-derived Context Spine across planning,
+  implementation, checking, review, convergence, and recovery. Context snapshots
+  now carry role, gate, readiness blockers, bounded references and digests,
+  fresh-context budgets, a public seam, an exact verification command, and one
+  deterministic next action.
+- Added `change.breadcrumb`, `change.learning_propose`, and
+  `change.learning_resolve`, advancing the live MCP contract to 32 tools and
+  `.ultra/state.db` to schema 10.0 with 16 tables.
+- Added approval-gated specification-learning candidates. Proposed or approved
+  discoveries block convergence until rejected or applied to a declared baseline
+  target, and `change.get` exposes their authoritative state.
+- Added independent `spec_fidelity` and `engineering_standards` review evidence,
+  plus public-seam and exact red/green signal fields for convergence.
+
+### Changed
+
+- Rebuilt the daily harness around one status router, one highest-value alignment
+  question, fresh-context tracer bullets, explicit expand contracts, independent
+  check/review contexts, and convergence before release.
+- Reduced the seven core execution workflow prompts from 1,922 to 758 lines and
+  added a 220-line ceiling for every public Ultra skill so host prompts cannot
+  silently accumulate duplicated procedure. All twelve public workflows are now
+  explicitly user-invocable; four rule skills remain agent-only.
+- Session-start, pre-edit, and recovery hooks now share one read-only
+  `context_spine.py` helper and inject only the compact DB breadcrumb. Intent,
+  transcript, memory-provider, and graph-provider payloads never enter hook context.
+- OpenCode now consumes the DB-generated Context Manifest v2 projection, strips
+  provider/intent content, and fails context readiness when its compiled HEAD
+  differs from the current repository.
+- Updated Claude Code, Codex, OpenCode, and Kimi Code native renderings, managed
+  handbook blocks, MCP mapping, architecture, and compatibility documentation.
+
+### Fixed
+
+- Prevented plan-role task context from becoming ready without an execution
+  contract, public seam, and verification command.
+- Prevented breadcrumbs from reusing a snapshot after task state or git HEAD
+  changed, and made an explicitly missing change id fail closed.
+- Added auditable 9.1 → 10.0 migration history while preserving existing runtime
+  rows, references, projections, and foreign-key integrity.
+- Corrected hook conformance to package `context_spine.py` as an imported helper
+  without registering it as a duplicate lifecycle hook.
+
+## [0.9.0] — 2026-07-17
+
+### Added
+
+- Added Kimi Code 0.26+ as a fourth native plugin host with namespaced commands,
+  twenty allowlisted skills including its session bootstrap, lifecycle hooks,
+  bundled review-worker prompt templates, native plugin registration, and
+  read-only install diagnostics.
+- Added packed-package and live MCP conformance coverage for the Kimi-managed
+  plugin layout while preserving unrelated registry entries and `config.toml`.
+
+### Changed
+
+- Advanced `.ultra/state.db` to schema `9.1` so Kimi is a valid runtime for
+  events and sessions. Existing databases rebuild only the constrained tables
+  transactionally while preserving rows, foreign keys, telemetry, incidents,
+  and migration history.
+- Extended CLI, handbook, orchestrator runtime selection, package metadata, and
+  runtime compatibility documentation to include Kimi without reintroducing
+  Ultra-owned memory, graph, browser, deployment, or framework capabilities.
+
+### Fixed
+
+- Made the Kimi MCP launcher recover the active project from the inherited
+  working-directory contract even though Kimi starts plugin MCP processes from
+  the managed plugin root. It fails closed instead of creating `.ultra` inside
+  the installed plugin.
+- Avoided Kimi's embedded Node native-module ABI mismatch by launching the
+  bundled MCP with the installer-compatible Node executable from `PATH`.
+
 ## [0.8.1] — 2026-07-17
 
 ### Fixed
@@ -332,7 +409,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
   skill manifest, CLI protocol + mapping table; 5 spec validators.
 - **Phase 0 — skeleton**: multi-runtime installer scaffolding.
 
-[Unreleased]: https://github.com/rocky2431/ultra-builder-pro-cli/compare/v0.8.1...HEAD
+[Unreleased]: https://github.com/rocky2431/ultra-builder-pro-cli/compare/v0.9.0...HEAD
+[0.9.0]: https://github.com/rocky2431/ultra-builder-pro-cli/compare/v0.8.1...v0.9.0
 [0.8.1]: https://github.com/rocky2431/ultra-builder-pro-cli/compare/v0.8.0...v0.8.1
 [0.8.0]: https://github.com/rocky2431/ultra-builder-pro-cli/compare/v0.7.0...v0.8.0
 [0.7.0]: https://github.com/rocky2431/ultra-builder-pro-cli/compare/v0.6.0...v0.7.0

package/README.md

@@ -2,13 +2,13 @@
 
 Multi-runtime plugin suite + autonomous coding factory for the Ultra Builder Pro
 agent engineering system. It ships native plugins for **Claude Code · OpenCode ·
-Codex** and orchestrates PRD →
+Codex · Kimi Code** and orchestrates PRD →
 dependency graph → parallel session execution → auto-merge with a single
 authoritative `.ultra/state.db`.
 
 <div align="center">
 
-[![Version](https://img.shields.io/badge/version-0.8.1-blue)](./CHANGELOG.md)
+[![Version](https://img.shields.io/badge/version-0.10.0-blue)](./CHANGELOG.md)
 [![Tests](https://img.shields.io/badge/tests-passing-brightgreen)](#verification)
 [![License: MIT](https://img.shields.io/badge/license-MIT-green)](./LICENSE)
 [![Node](https://img.shields.io/badge/node-%E2%89%A522-informational)](./package.json)
@@ -21,8 +21,9 @@ authoritative `.ultra/state.db`.
 
 ## What it does
 
-- **Builds host-native plugins from one allowlist.** Claude Code, OpenCode, and
-  Codex receive their own command/skill, agent, hook, and MCP representation.
+- **Builds host-native plugins from one allowlist.** Claude Code, OpenCode,
+  Codex, and Kimi Code receive their own command/skill, agent, hook, and MCP
+  representation.
   Install and uninstall are symmetric on every supported host; `ubp --doctor`
   verifies the installed asset hashes and host entry points without mutation.
 - **Shares state across runtimes.** `.ultra/state.db` (SQLite + WAL) is the
@@ -35,8 +36,10 @@ authoritative `.ultra/state.db`.
 - **Runs real PRDs end-to-end.** `task.parse_prd` → `lib/topo.cjs` waves →
   `.ultra/execution-plan.json` → parallel worktree sessions → auto-merge back.
 - **Keeps daily work convergent.** `/ultra-change` creates a bounded delta and
-  context manifest; `/ultra-deliver` requires docs/test/review evidence and
-  baseline reconciliation before archive. `/ultra-doctor` reports incidents,
+  Context Manifest v2; the Context Spine assigns a role/gate, verifies required
+  references and fresh-context budget, exposes one DB-derived breadcrumb, and
+  routes a single next action. `/ultra-deliver` requires applied specification
+  learning plus docs/test/two-axis review evidence before archive. `/ultra-doctor` reports incidents,
   projection lag, orphan sessions, and backup-first mechanical recovery.
   Incident changes additionally require a five-section `diagnosis.md` covering
   reproduction, hypotheses, root cause, regression test, and recovery.
@@ -51,12 +54,14 @@ authoritative `.ultra/state.db`.
 npx ultra-builder-pro-cli --claude   --local
 npx ultra-builder-pro-cli --opencode --local
 npx ultra-builder-pro-cli --codex    --local
+npx ultra-builder-pro-cli --kimi     --local
 
 # Or blanket-install to every supported runtime you have
 npx ultra-builder-pro-cli --all --local
 
 # Global (into the runtime's ~/.config-style dir)
 npx ultra-builder-pro-cli --claude --global
+npx ultra-builder-pro-cli --kimi   --global
 
 # Uninstall (symmetric)
 npx ultra-builder-pro-cli --all --local --uninstall
@@ -70,7 +75,10 @@ After install, start a new host session/task and point it at the project.
 Claude Code and OpenCode expose native command forms. Codex exposes the same workflows as namespaced plugin
 skills such as `$ultra-builder-pro:ultra-init`, `$ultra-builder-pro:ultra-plan`,
 and `$ultra-builder-pro:ultra-dev`; `command-map.json` records the eleven legacy
-command mappings (`ultra-review` remains a directly invocable skill).
+command mappings (`ultra-review` remains a directly invocable skill). Kimi Code
+uses native namespaced commands such as `/ultra-builder-pro:ultra-init` and
+`/ultra-builder-pro:ultra-plan`; run `/reload` or start a new Kimi session after
+install or update.
 See [`docs/RUNTIME-COMPAT-MATRIX.md`](./docs/RUNTIME-COMPAT-MATRIX.md)
 for per-runtime capabilities.
 
@@ -85,26 +93,27 @@ for per-runtime capabilities.
 The layers share one `.ultra/state.db`, but the CLI is not a mirror of every MCP
 tool: continuous change mutations are MCP-only and fail closed. See
 [`docs/ARCHITECTURE.md`](./docs/ARCHITECTURE.md) for the full contract and
-[`spec/cli-protocol.md`](./spec/cli-protocol.md) for the 29 live contracts.
+[`spec/cli-protocol.md`](./spec/cli-protocol.md) for the 32 live contracts.
 Review, impact discovery, skill resolution, and user interaction stay on each
 Host's native surfaces; the generated Codex capability map documents those
 replacements without advertising non-existent MCP tools.
 
 The package boundary is deliberate: twelve public Ultra workflow skills, four
-internal review-rule skills, and host-specific collaboration companions. Browser,
-deployment, skill-discovery, and framework guidance belong to their original plugins.
+internal review-rule skills, host-specific collaboration companions, and the
+minimal host bootstrap required by Kimi. Browser, deployment, skill-discovery,
+and framework guidance belong to their original plugins.
 
 ## Runtime capability matrix
 
-| Feature                      | Claude Code | OpenCode | Codex CLI |
-|------------------------------|:-----------:|:--------:|:---------:|
-| Custom commands              | ✅          | ✅       | ✅        |
-| Skill loader                 | ✅          | ✅       | ✅ (personal plugin) |
-| MCP server (stdio)           | ✅          | ✅       | ✅ (plugin `.mcp.json`) |
-| Workflow hooks               | ✅ (native plugin) | ✅ (native JS plugin) | ✅ (native plugin) |
-| Sub-agents                   | ✅          | ✅       | ✅ (9 native TOML agents) |
-| Session worktree isolation   | ✅ (driven by `orchestrator/session-runner.cjs`) | ✅ | ✅ |
-| Parallel dispatch + auto-merge | ✅ (`ubp-orchestrator run`) | ✅ | ✅ |
+| Feature                      | Claude Code | OpenCode | Codex CLI | Kimi Code 0.26+ |
+|------------------------------|:-----------:|:--------:|:---------:|:---------------:|
+| Custom commands              | ✅          | ✅       | ✅        | ✅ (namespaced) |
+| Skill loader                 | ✅          | ✅       | ✅ (personal plugin) | ✅ (native plugin) |
+| MCP server (stdio)           | ✅          | ✅       | ✅ (plugin `.mcp.json`) | ✅ (`mcpServers`) |
+| Workflow hooks               | ✅ (native plugin) | ✅ (native JS plugin) | ✅ (native plugin) | ✅ with documented compact limitation |
+| Sub-agents                   | ✅          | ✅       | ✅ (9 native TOML agents) | ✅ via `Agent` / `AgentSwarm` prompt templates |
+| Session worktree isolation   | ✅ (driven by `orchestrator/session-runner.cjs`) | ✅ | ✅ | ✅ |
+| Parallel dispatch + auto-merge | ✅ (`ubp-orchestrator run`) | ✅ | ✅ | ✅ |
 
 Full details in [`docs/RUNTIME-COMPAT-MATRIX.md`](./docs/RUNTIME-COMPAT-MATRIX.md)
 (10 sections, with per-runtime deviations called out).
@@ -130,15 +139,19 @@ ultra-tools system doctor
 
 Or let the skills drive it. In Codex, invoke
 `$ultra-builder-pro:ultra-plan` → `$ultra-builder-pro:ultra-dev` →
-`$ultra-builder-pro:ultra-status`; after the baseline is delivered, daily work
-starts with `$ultra-builder-pro:ultra-change`. Other runtimes retain their
-native command form.
+`$ultra-builder-pro:ultra-test` → `$ultra-builder-pro:ultra-review` →
+`$ultra-builder-pro:ultra-deliver`; after the baseline is delivered, daily work
+starts with `$ultra-builder-pro:ultra-change`, while
+`$ultra-builder-pro:ultra-status` reads the compact authoritative breadcrumb.
+Kimi uses the corresponding
+`/ultra-builder-pro:ultra-*` namespace. Other runtimes retain their native
+command form.
 
 ## CLI surface
 
 | Binary | Purpose |
 |--------|---------|
-| `ultra-builder-pro-cli` / `ubp` | Installer — `--claude / --opencode / --codex / --all`, `--local / --global`, `--uninstall`; read-only install checks via `--doctor [--json]` |
+| `ultra-builder-pro-cli` / `ubp` | Installer — `--claude / --opencode / --codex / --kimi / --all`, `--local / --global`, `--uninstall`; read-only install checks via `--doctor [--json]` |
 | `ubp-orchestrator` | Session dispatch daemon — `run`, `start`, `stop`, `status` |
 | `ultra-tools` | State-layer CLI — `task`, `session`, `status`, `db`, `migrate`; explicit `legacy-memory` archive/prune migration |
 | `ubp-handbook` | Preview/apply the managed Ultra contract in `CLAUDE.md` / `AGENTS.md`, with backup |
@@ -168,10 +181,16 @@ Individual suites: `test:state`, `test:orch`, `test:spec`, `test:rest`.
   and `node -e "require('./orchestrator/worktree-manager.cjs').releaseAll(process.cwd())"`
   cleans them up.
 - **Installed commands don't show up**: check the runtime's actual config
-  dir (`ultra-builder-pro-cli --<runtime> --local` only writes to `./.claude`
-  or `./.opencode` etc.; `--global` writes to the user-level dir). The
+  dir (`ultra-builder-pro-cli --<runtime> --local` writes to the host-specific
+  project dir such as `./.claude`, `./.opencode`, or `./.kimi-code`;
+  `--global` writes to the user-level dir). The
   install log prints the exact target path. Restart Claude Code/OpenCode or
-  start a new Codex task after changing an installed plugin.
+  start a new Codex task after changing an installed plugin. In Kimi Code,
+  run `/reload` or start a new session.
+- **Kimi MCP reports a native-module ABI error**: Kimi 0.26/0.27 embeds a different
+  Node ABI from the package installer. The generated plugin intentionally runs
+  the MCP with `env node`; keep a Node.js `>=22` executable on `PATH` when
+  starting Kimi.
 - **Installed hook/MCP path is missing or stale**: run
   `npx ultra-builder-pro-cli --<runtime> --local --doctor` first. It compares
   the recorded install provenance with current asset hashes and validates the

package/adapters/_shared/codex-assets.cjs

@@ -467,6 +467,16 @@ and does not require an interactive MCP or legacy CLI menu.
   }
 
   if (skillName === 'ultra-review') {
+    text = text.replace(
+      '# $ultra-builder-pro:ultra-review - Ultra Review System',
+      `# $ultra-builder-pro:ultra-review - Ultra Review System
+
+## Codex native worker contract
+
+Use the installed native Codex custom agents as bounded review workers. Dispatch independent
+workers concurrently, keep the current Codex task primary, and treat their JSON artifacts—not
+their conversational transcripts—as review evidence.`,
+    );
     text = text.replaceAll('### Phase 3: Background Execution', '### Phase 3: Parallel Native Agent Execution');
     text = text.replaceAll('**Step 4b: Launch coordinator in background:**', '**Step 4b: Delegate coordination:**');
     text = text.replaceAll('in **background mode** (`native parallel execution`)', 'concurrently with native Codex subagent orchestration');
@@ -802,11 +812,39 @@ function buildMcpRuntime(repoRoot, pluginRoot, { runtime = 'codex' } = {}) {
     removeTree(cliBuildRoot);
   }
 
+  const runtimeBootstrap = runtime === 'kimi' ? `
+const fs = require('node:fs');
+const pluginRoot = path.resolve(__dirname, '..');
+
+function usableProjectRoot(value) {
+  if (typeof value !== 'string' || !value.trim()) return null;
+  const candidate = path.resolve(value);
+  if (candidate === pluginRoot || candidate.startsWith(pluginRoot + path.sep)) return null;
+  try {
+    return fs.statSync(candidate).isDirectory() ? candidate : null;
+  } catch (_) {
+    return null;
+  }
+}
+
+if (!process.env.UBP_ROOT_DIR) {
+  const rootDir = usableProjectRoot(process.cwd()) || usableProjectRoot(process.env.PWD);
+  if (!rootDir) {
+    throw new Error('Kimi Ultra MCP could not resolve the active project root; start Kimi from the project directory');
+  }
+  process.env.UBP_ROOT_DIR = rootDir;
+}
+if (!process.env.UBP_DB_PATH) {
+  process.env.UBP_DB_PATH = path.join(process.env.UBP_ROOT_DIR, '.ultra', 'state.db');
+}
+` : '';
+
   const launcher = `'use strict';
 
 const path = require('node:path');
 
 process.env.UBP_RUNTIME_ROOT = path.resolve(__dirname, '..');
+${runtimeBootstrap}
 
 const { main } = require('./index.cjs');
 

package/adapters/_shared/handbook.cjs

@@ -32,6 +32,13 @@ const HOSTS = Object.freeze({
     collaboration: '`/cc-collab` and `/codex-collab` are explicitly requested read-only advisors',
     coordination: 'OpenCode session coordination does not replace Ultra task state',
   }),
+  kimi: Object.freeze({
+    name: 'Kimi Code',
+    handbook: ['.kimi-code', 'AGENTS.md'],
+    invocation: '`/ultra-builder-pro:ultra-init`, `/ultra-builder-pro:ultra-research`, `/ultra-builder-pro:ultra-plan`, `/ultra-builder-pro:ultra-change`, `/ultra-builder-pro:ultra-dev`, `/ultra-builder-pro:ultra-test`, `/ultra-builder-pro:ultra-review`, and `/ultra-builder-pro:ultra-deliver`; diagnostics use `/ultra-builder-pro:ultra-status`, `/ultra-builder-pro:ultra-think`, and `/ultra-builder-pro:ultra-doctor`',
+    collaboration: '`/skill:cc-collab` and `/skill:codex-collab` are explicitly requested read-only advisors',
+    coordination: 'Kimi `TodoList` and `Agent` / `AgentSwarm` are host coordination; they do not replace Ultra task state',
+  }),
 });
 
 function host(runtime) {
@@ -53,11 +60,13 @@ function renderHandbook(runtime) {
     `- Collaboration boundary: ${value.collaboration}. The current host remains primary and owns final verification.`,
     `- Coordination boundary: ${value.coordination}.`,
     '- Authority: `.ultra/state.db` is the only durable Ultra authority for changes, tasks, sessions, events, incidents, projection state, telemetry, and review evidence. Generated JSON and Markdown are projections or workflow artifacts.',
+    '- Context Spine boundary: `change.context` compiles role/gate readiness, bounded references, fresh-context budget, public seam, verification command, and one next action. Hooks inject only the DB-derived `change.breadcrumb`; stale or blocked context must be recompiled.',
+    '- Specification learning boundary: stable implementation discoveries use approval-gated propose/approve-or-reject/apply transitions. Unresolved learning blocks convergence; review requires independent specification-fidelity and engineering-standards evidence.',
     '- Memory and graph boundary: Ultra Builder Pro does not capture prompts, transcripts, observations, summaries, cross-session memory, or code-graph content. Separately installed providers own that data; Ultra may store only their metadata references in a change context manifest.',
     '- Hook boundary: Ultra hooks observe workflow/change lifecycle only. Health/context may run when `.ultra/state.db` exists; projection protection is always authoritative, while edit/compact/stop/subagent enforcement remains active-workflow scoped. Generic command blocking and post-edit policy stay in user or repository governance.',
     '- Installation boundary: `ubp --doctor` is the read-only authority for installed asset provenance, content hashes, and host entry-point wiring; `system.doctor` remains scoped to project state and workflow recovery.',
     '- Agent boundary: the bundled review and debugging agents are bounded workers. They use the current checkout and parent-supplied context, do not own private persistent state, and never replace the primary agent.',
-    '- Package boundary: only the twelve Ultra workflows, four internal review-rule skills, and host-specific collaboration companions belong to this plugin. General browser, deployment, discovery, and framework skills must be installed from their owners.',
+    '- Package boundary: only the twelve Ultra workflows, four internal review-rule skills, host-specific collaboration companions, and the minimal host bootstrap belong to this plugin. General browser, deployment, discovery, and framework skills must be installed from their owners.',
     END_MARKER,
   ].join('\n');
 }

package/adapters/_shared/path-rewrite.cjs

@@ -14,6 +14,7 @@ const RUNTIME_SKILL_ROOT = {
   claude: '.claude/skills',
   opencode: '.config/opencode/skills',
   codex: '.agents/skills',
+  kimi: '.kimi-code/skills',
 };
 
 function parseSkillRef(ref) {
@@ -51,6 +52,7 @@ function runtimeRoot(runtime) {
     case 'claude': return '.claude';
     case 'opencode': return '.config/opencode';
     case 'codex': return '.agents';
+    case 'kimi': return '.kimi-code';
     default: throw new Error(`unknown runtime: ${runtime}`);
   }
 }
@@ -60,6 +62,7 @@ function localRoot(runtime) {
     case 'claude': return '.claude';
     case 'opencode': return '.opencode';
     case 'codex': return '.agents';
+    case 'kimi': return '.kimi-code';
     default: throw new Error(`unknown runtime: ${runtime}`);
   }
 }

package/adapters/_shared/runtime-assets.cjs

@@ -29,12 +29,13 @@ const INTERNAL_AGENT_SKILLS = Object.freeze([
   'testing-rules',
 ]);
 
-const SUPPORTED_RUNTIMES = Object.freeze(['claude', 'opencode', 'codex']);
+const SUPPORTED_RUNTIMES = Object.freeze(['claude', 'opencode', 'codex', 'kimi']);
 
 const COLLAB_SKILLS_BY_RUNTIME = Object.freeze({
   claude: Object.freeze(['codex-collab', 'ultra-verify']),
   codex: Object.freeze(['cc-collab', 'ultra-verify']),
   opencode: Object.freeze(['cc-collab', 'codex-collab', 'ultra-verify']),
+  kimi: Object.freeze(['cc-collab', 'codex-collab', 'ultra-verify']),
 });
 
 const RETIRED_SKILLS = Object.freeze([
@@ -49,6 +50,7 @@ const RETIRED_SKILLS = Object.freeze([
 
 const WORKFLOW_HOOK_FILES = Object.freeze([
   'active_task_context.py',
+  'context_spine.py',
   'health_check.py',
   'pre_stop_check.py',
   'subagent_tracker.py',

package/adapters/_shared/tests/handbook.test.cjs

@@ -19,16 +19,23 @@ test('renders one common contract with host-native invocation syntax', () => {
   const claude = renderHandbook('claude');
   const codex = renderHandbook('codex');
   const opencode = renderHandbook('opencode');
+  const kimi = renderHandbook('kimi');
 
   assert.match(claude, /\/ultra-plan/);
   assert.match(codex, /\$ultra-builder-pro:ultra-plan/);
   assert.match(opencode, /\/ultra-plan/);
-  for (const rendered of [claude, codex, opencode]) {
+  assert.match(kimi, /\/ultra-builder-pro:ultra-plan/);
+  assert.match(kimi, /Kimi Code/);
+  assert.match(kimi, /AgentSwarm/);
+  for (const rendered of [claude, codex, opencode, kimi]) {
     assert.match(rendered, /\.ultra\/state\.db/);
     assert.match(rendered, /Separately installed providers/);
     assert.match(rendered, /ultra-change/);
     assert.match(rendered, /ultra-doctor/);
     assert.match(rendered, /metadata references/);
+    assert.match(rendered, /Context Spine boundary/);
+    assert.match(rendered, /change\.breadcrumb/);
+    assert.match(rendered, /Specification learning boundary/);
     assert.doesNotMatch(rendered, /\.ultra\/memory|memory\.retain|memory\.recall/);
     assert.match(rendered, new RegExp(BEGIN_MARKER.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')));
     assert.match(rendered, new RegExp(END_MARKER.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')));
@@ -86,4 +93,5 @@ test('default handbook paths are host-specific', () => {
   assert.equal(resolveHandbookFile('claude', { homeDir }), path.join(homeDir, '.claude', 'CLAUDE.md'));
   assert.equal(resolveHandbookFile('codex', { homeDir }), path.join(homeDir, '.codex', 'AGENTS.md'));
   assert.equal(resolveHandbookFile('opencode', { homeDir }), path.join(homeDir, '.config', 'opencode', 'AGENTS.md'));
+  assert.equal(resolveHandbookFile('kimi', { homeDir }), path.join(homeDir, '.kimi-code', 'AGENTS.md'));
 });

package/adapters/_shared/tests/path-rewrite.test.cjs

@@ -26,10 +26,12 @@ test('resolveSkillRef routes to runtime-specific root under homeDir', () => {
   const claude = resolveSkillRef('@skills/ultra-init/SKILL.md', { runtime: 'claude', homeDir: home });
   const opencode = resolveSkillRef('@skills/ultra-init/SKILL.md', { runtime: 'opencode', homeDir: home });
   const codex = resolveSkillRef('@skills/ultra-init/SKILL.md', { runtime: 'codex', homeDir: home });
+  const kimi = resolveSkillRef('@skills/ultra-init/SKILL.md', { runtime: 'kimi', homeDir: home });
 
   assert.equal(claude, path.join(home, '.claude/skills/ultra-init/SKILL.md'));
   assert.equal(opencode, path.join(home, '.config/opencode/skills/ultra-init/SKILL.md'));
   assert.equal(codex, path.join(home, '.agents/skills/ultra-init/SKILL.md'));
+  assert.equal(kimi, path.join(home, '.kimi-code/skills/ultra-init/SKILL.md'));
 
   assert.throws(
     () => resolveSkillRef('@skills/ultra-init/SKILL.md', { runtime: 'unknown', homeDir: home }),
@@ -45,7 +47,7 @@ test('rewriteWorkflowRefInText + resolveAssetTarget give predictable paths', ()
   assert.equal(out, `see ${path.join(home, '.claude/skills/ultra-init/SKILL.md')} for details`);
 
   // Cover every runtime × every scope so runtimeRoot/localRoot branches hit
-  for (const rt of ['claude', 'opencode', 'codex']) {
+  for (const rt of ['claude', 'opencode', 'codex', 'kimi']) {
     const g = resolveAssetTarget('x', { runtime: rt, scope: 'global', homeDir: home, cwd });
     const l = resolveAssetTarget('x', { runtime: rt, scope: 'local', homeDir: home, cwd });
     assert.ok(g.startsWith(home));

package/adapters/_shared/tests/runtime-assets.test.cjs

@@ -62,7 +62,10 @@ test('runtime asset manifest exposes only Ultra-owned core and internal skills',
   assert.deepEqual(COLLAB_SKILLS_BY_RUNTIME.opencode, [
     'cc-collab', 'codex-collab', 'ultra-verify',
   ]);
-  assert.deepEqual(SUPPORTED_RUNTIMES, ['claude', 'opencode', 'codex']);
+  assert.deepEqual(COLLAB_SKILLS_BY_RUNTIME.kimi, [
+    'cc-collab', 'codex-collab', 'ultra-verify',
+  ]);
+  assert.deepEqual(SUPPORTED_RUNTIMES, ['claude', 'opencode', 'codex', 'kimi']);
 
   for (const runtime of SUPPORTED_RUNTIMES) {
     const names = skillsForRuntime(runtime);
@@ -80,6 +83,7 @@ test('code-review-expert and rule skills are internal, never implicitly exposed'
 test('workflow hook allowlist contains no memory, prompt capture, or generic policy hook', () => {
   assert.deepEqual(WORKFLOW_HOOK_FILES, [
     'active_task_context.py',
+    'context_spine.py',
     'health_check.py',
     'pre_stop_check.py',
     'subagent_tracker.py',