feat(ide-sync): add Kimi Code as supported IDE target (#683)

Adds Kimi Code as a skills-first IDE sync target and hardens generated Kimi skill output after review. Validated locally with lint, typecheck, sync checks, manifest validation, targeted IDE-sync tests, schema test, and full Jest suite; GitHub CI checks passed on the final head commit before admin merge.

Author: rafaelscosta

.aiox-core/core-config.yaml

@@ -334,6 +334,12 @@ ideSync:
       enabled: true
       path: .antigravity/rules/agents
       format: cursor-style
+    kimi:
+      enabled: true
+      path: .kimi/skills
+      format: kimi-skill
+      fallbackSources:
+        - .codex/agents
   redirects: {}
   validation:
     strictMode: true

.aiox-core/core/config/schemas/framework-config.schema.json

@@ -117,7 +117,15 @@
               "enabled": { "type": "boolean" },
               "path": { "type": "string" },
               "skillsPath": { "type": "string" },
-              "format": { "type": "string", "enum": ["full-markdown-yaml", "condensed-rules", "cursor-style"] }
+              "fallbackSources": {
+                "type": "array",
+                "items": { "type": "string" },
+                "description": "Fallback source directories used when the primary IDE sync source has no matching definitions"
+              },
+              "format": {
+                "type": "string",
+                "enum": ["full-markdown-yaml", "condensed-rules", "cursor-style", "kimi-skill"]
+              }
             },
             "additionalProperties": false
           }

.aiox-core/framework-config.yaml

@@ -144,6 +144,12 @@ ide_sync_system:
       enabled: true
       path: ".antigravity/rules/agents"
       format: "cursor-style"
+    kimi:
+      enabled: true
+      path: ".kimi/skills"
+      format: "kimi-skill"
+      fallbackSources:
+        - ".codex/agents"
   redirects: {}
   validation:
     strict_mode: true

.aiox-core/infrastructure/scripts/ide-sync/README.md

@@ -140,6 +140,7 @@ Each IDE has a specific format for agent files:
 | GitHub Copilot | Full markdown with YAML | `.md`   |
 | Cursor      | Condensed MDC rules     | `.mdc`    |
 | Antigravity | Cursor-style            | `.md`     |
+| Kimi        | Skill directory         | `SKILL.md` |
 
 Platform-specific checks:
 
@@ -181,7 +182,9 @@ alwaysApply: false
 └── transformers/
     ├── claude-code.js       # Claude Code format
     ├── cursor.js            # Cursor format
-    └── antigravity.js       # Antigravity format
+    ├── antigravity.js       # Antigravity format
+    ├── github-copilot.js    # GitHub Copilot format
+    └── kimi.js              # Kimi skill format
 ```
 
 ## Performance

.aiox-core/infrastructure/scripts/ide-sync/index.js

@@ -31,6 +31,7 @@ const claudeCodeTransformer = require('./transformers/claude-code');
 const cursorTransformer = require('./transformers/cursor');
 const antigravityTransformer = require('./transformers/antigravity');
 const githubCopilotTransformer = require('./transformers/github-copilot');
+const kimiTransformer = require(path.resolve(__dirname, 'transformers', 'kimi'));
 
 // ANSI colors for output
 const colors = {
@@ -88,6 +89,12 @@ function loadConfig(projectRoot) {
         path: '.antigravity/rules/agents',
         format: 'cursor-style',
       },
+      kimi: {
+        enabled: true,
+        path: '.kimi/skills',
+        format: 'kimi-skill',
+        fallbackSources: ['.codex/agents'],
+      },
     },
     redirects: {
       'aiox-developer': 'aiox-master',
@@ -129,6 +136,7 @@ function getTransformer(format) {
     'condensed-rules': cursorTransformer,
     'cursor-style': antigravityTransformer,
     'github-copilot': githubCopilotTransformer,
+    'kimi-skill': kimiTransformer,
   };
 
   return transformers[format] || claudeCodeTransformer;
@@ -142,6 +150,14 @@ function transformPrimaryContent(transformer, agent, ideName) {
   return transformer.transform(agent);
 }
 
+function isPathInside(rootDir, candidatePath) {
+  const relativePath = path.relative(rootDir, candidatePath);
+  return relativePath !== '' &&
+    relativePath !== '..' &&
+    !relativePath.startsWith(`..${path.sep}`) &&
+    !path.isAbsolute(relativePath);
+}
+
 /**
  * Sync agents to a specific IDE
  * @param {object[]} agents - Parsed agent data
@@ -194,7 +210,25 @@ function syncIde(agents, ideConfig, ideName, projectRoot, options) {
     try {
       const content = transformPrimaryContent(transformer, agent, ideName);
       const filename = transformer.getFilename(agent);
-      const targetPath = path.join(result.targetDir, filename);
+
+      // Kimi format uses subdirectories per skill: <skill-id>/SKILL.md
+      let targetPath;
+      if (ideConfig.format === 'kimi-skill' && transformer.getDirname) {
+        const targetRoot = path.resolve(result.targetDir);
+        const dirname = transformer.getDirname(agent);
+        const skillDir = path.resolve(targetRoot, dirname);
+        targetPath = path.resolve(skillDir, filename);
+
+        if (!isPathInside(targetRoot, skillDir) || !isPathInside(targetRoot, targetPath)) {
+          throw new Error(`Unsafe Kimi output path for agent '${agent.id}'`);
+        }
+
+        if (!options.dryRun) {
+          fs.ensureDirSync(skillDir);
+        }
+      } else {
+        targetPath = path.join(result.targetDir, filename);
+      }
 
       if (!options.dryRun) {
         fs.writeFileSync(targetPath, content, 'utf8');
@@ -409,7 +443,11 @@ async function commandValidate(options) {
       try {
         const content = transformPrimaryContent(transformer, agent, ideName);
         const filename = transformer.getFilename(agent);
-        expectedFiles.push({ filename, content });
+        // Kimi format stores each skill in <skill-id>/SKILL.md — record nested path
+        const relPath = ideConfig.format === 'kimi-skill' && transformer.getDirname
+          ? path.join(transformer.getDirname(agent), filename)
+          : filename;
+        expectedFiles.push({ filename: relPath, content });
       } catch (error) {
         // Skip agents that fail to transform
       }