1081 Commits
Author SHA1 Message Date
kilo-maintainer[bot] a476e19a88 release: v7.2.7 2026-04-15 17:05:20 +00:00
Catriel Müller 6b04c0fb93 fix: fix prettier version 2026-04-14 19:33:07 -03:00
Catriel Müller c79ecad635 refactor: bun lock update 2026-04-14 17:06:09 -03:00
Imanol Maiztegui 4e115bf884 Merge branch 'main' into imanolmaiztegui/kilo-opencode-v1.4.0 2026-04-14 18:25:59 +02:00
kilo-maintainer[bot] 4c038b17d2 release: v7.2.6 2026-04-14 15:19:03 +00:00
Imanol Maiztegui cc2a03b2a0 refactor: align codebase with v1.4.0 upstream and update SDK schema
Remove stale ai-sdk patched dependencies, reformat code style
across i18n files, docs markdown tables, and TypeScript sources.
Update OpenAPI schema to rename FileDiff to SnapshotFileDiff,
replace before/after fields with patch, rebrand SDK code samples
from opencode to kilo, and add --dangerously-skip-permissions
CLI flag. Regenerate models snapshot.
2026-04-14 16:05:22 +02:00
Imanol Maiztegui a1bd03d773 Merge pull request #8893 from Kilo-Org/imanolmaiztegui/kilo-opencode-v1.3.17
OpenCode v1.3.17
2026-04-14 12:16:22 +02:00
Imanol Maiztegui cd79db8a8d refactor: update sdk imports and fix type signatures for v1.3.17 compat
- Update `@kilocode/sdk` imports to use `@kilocode/sdk/v2` path
- Replace `@opencode-ai/sdk/v2` import with `@kilocode/sdk/v2`
- Change theme color types from `string` to `RGBA` in renderApiDescription
- Fix `build` return type in KiloToolRegistry to `Effect.Effect<T, never, any>`
2026-04-14 10:52:25 +02:00
kiloconnect[bot] 5816eeac42 chore(deps): update @openrouter/ai-sdk-provider to 2.5.1 in kilo-gateway and opencode
update @openrouter/ai-sdk-provider to 2.5.1 in kilo-gateway
and opencode package to keep dependencies in sync
2026-04-14 08:29:57 +00:00
Catriel Müller 8983b31194 refactor: update bun 2026-04-14 00:00:07 -03:00
Catriel Müller a8607965b5 Merge branch 'main' into imanolmaiztegui/kilo-opencode-v1.3.14 2026-04-13 23:59:46 -03:00
kilo-maintainer[bot] ad74e9bf81 release: v7.2.5 2026-04-13 22:33:12 +00:00
Catriel Müller 3ce74d2e7b fix: bun lock 2026-04-13 16:16:48 -03:00
Catriel Müller bfec6b7945 Merge branch 'main' into imanolmaiztegui/kilo-opencode-v1.3.14 2026-04-13 15:44:28 -03:00
Imanol Maiztegui 7fb55e45f1 refactor: align kilo codebase with opencode v1.3.14 upstream
Resolve merge conflicts across e2e tests, UI components, and core
packages. Clean up conflict markers in test specs by adopting the
upstream `project` fixture pattern over the legacy `withProject`
approach. Alphabetically sort package.json dependencies, apply
consistent code formatting across i18n files, flag declarations,
and TSX components. Update internal API calls to use current
signatures (Permission.defaultLayer, MessageV2.parts, Git.run).

Key changes:
- Remove Windows-specific test.skip guards and conflict markers
- Replace deprecated `git` util import with `Git.run` in worktree-family
- Drop unused SDK type import from share-next
- Add lib entries to kilo-gateway and kilo-telemetry tsconfigs
- Regenerate models-snapshot.js and SDK types with reordered events
- Fix SDK openapi.json code sample to reference @kilocode/sdk
- Add onCleanup import to popover component
2026-04-13 20:20:47 +02:00
Mark IJbema c5115afd29 fix: update bun.lock and add lockfile refresh to changeset:version script 2026-04-13 17:17:59 +02:00
Johnny Amancio 32e244bb05 resolve merge conflicts 2026-04-13 11:46:32 +02:00
Catriel Müller 18385577e1 refactor: update bun locl 2026-04-12 15:31:08 -03:00
Catriel Müller 97d26a3fa0 refactor: add python to local env 2026-04-12 14:28:24 -03:00
+13 90e86a5e3d OpenCode v1.3.4 (#8798)
* tweak: use theme tokens for debug bar surface

* chore: update nix node_modules hashes

* feat(tui): add heap snapshot functionality for TUI and server (#19028)

* ci

* change model for changelog

* release: v1.3.2

* fix(opencode): skip typechecking generated models snapshot (#19018)

* Revert "fix(app): more startup efficiency (#18985)"

This reverts commit 98b3340cee.

* Revert "fix(app): startup efficiency (#18854)"

This reverts commit 546748a461.

* effectify Worktree service (#18679)

* fix: increase operations-per-run to 1000 and pin stale action to v10.2.0

The stale-issues workflow was hitting the default 30 operations limit,
preventing it from processing all 2900+ issues/PRs. Increased to 1000
to handle the full backlog. Also pinned to exact v10.2.0 for reproducibility.

* Add close-issues script and GitHub Action

- Create script/github/close-issues.ts to close stale issues after 60 days
- Add GitHub Action workflow to run daily at 2 AM
- Remove old stale-issues workflow to avoid conflicts

* Fix close-issues workflow permissions

- Add contents: read permission for checkout
- Use github.token instead of secrets.GITHUB_TOKEN

* Process issues sequentially to avoid rate limits

* Change issue close reason from not_planned to completed

* fix(opencode): avoid snapshotting files over 2MB (#19043)

* fix: provide merge context to beta conflict resolver (#19055)

* tweak: only spawn lsp servers for files in current instance (or cwd if instance is global) (#19058)

* fix: beta resolver typecheck + build smoke check (#19060)

* fix: unblock beta conflict recovery (#19068)

* electron: add createDirectory to open directory picker (#19071)

* electron: remove file extension from electron-store wrapper (#19082)

* app: pre-warm project globalSync state when navigate project via keybind (#19088)

* fix(app): move message navigation off cmd+arrow (#18728)

* Reapply "fix(app): startup efficiency (#18854)"

This reverts commit a379eb3867.

* Reapply "fix(app): more startup efficiency (#18985)"

This reverts commit cbe1337f24.

* fix(app): hash inline script for csp

* Revert "fix(app): startup efficiency"

* Reapply "fix(app): startup efficiency"

This reverts commit 898456a25c.

* fix(app): opencode web server url

* chore(app): markdown playground in storyboard

* chore(app): markdown playground in storyboard

* feat(core): initial implementation of syncing (#17814)

* chore: generate

* chore: bump modelcontextprotocol/sdk to 1.27.1 (#19064)

* chore: storybook tweaks

* feat: restore git-backed review modes with effectful git service (#18900)

* chore: generate

* chore: update nix node_modules hashes

* chore: cleanup

* chore: remove dead code for todoread tool (#19128)

* chore: storybook tweaks

* fix(opencode): classify ZlibError from Bun fetch as retryable instead of unknown (#19104)

Co-authored-by: Aiden Cline <63023139+rekram1-node@users.noreply.github.com>

* fix(task): respect agent permission config for todowrite tool (#19125)

* fix(app): agent normalization (#19169)

* fix: Windows e2e stability (CrossSpawnSpawner, snapshot isolation, session race guards) (#19163)

* fix+refactor(mcp): lifecycle tests, cancelPending fix, Effect migration (#19042)

* effectify Bus service: migrate to Effect PubSub + InstanceState (#18579)

* file: use Effect.cached for scan deduplication (#19164)

* ignore: update disavowed list (#19184)

* skill: use Effect.cached for load deduplication (#19165)

* chore: generate

* fix: bump gitlab-ai-provider to 5.3.3 for DWS tool approval support (#19185)

* test: restore 5 workers on Windows e2e (#19188)

* fix(opencode): image paste on Windows Terminal 1.25+ with kitty keyboard (#17674)

* chore: update nix node_modules hashes

* wip: zen

* wip: zen

* go: do not respect disabled zen models

* fix: ensure enterprise url is set properly during auth flow (#19212)

* revert: roll back git-backed review modes (#19295)

* chore: generate

* tui: bypass local SSE event streaming in worker (#19183)

* feat: embed WebUI in binary with proxy flags (#19299)

Co-authored-by: BlankParticle <blankparticle@gmail.com>

* release: v1.3.3

* chore: generate

* changelog ci tweaks

* refactor(lsp): effectify LSP service with InstanceState (#19150)

* chore: generate

* feat: add gpt prompt so non codex gpt models have their own system prompt modeled after codex cli (#19220)

* feat(core): remove workspace server, WorkspaceContext, start work towards better routing (#19316)

* effectify Config service (#19139)

* chore: generate

* refactor(config): use cachedInvalidateWithTTL, bump effect to beta.37 (#19322)

* fix(mcp): close transport on failed/timed-out connections (#19200)

* fix(app): more startup perf (#19288)

* chore: generate

* chore: update nix node_modules hashes

* fix(app): don't bundle fonts (#19329)

* chore: generate

* fix(app): default shell tool to collapsed

* fix(app): remove fork session button

* fix(ui): reduce markdown jank while responses stream (#19304)

* fix: web ui bundle build on windows (#19337)

* refactor(effect): yield services instead of promise facades (#19325)

* chore: generate

* refactor(vcs): replace async git() with ChildProcessSpawner (#19361)

* fix(opencode): ignore generated models snapshot files (#19362)

* fix(ui): keep partial markdown readable while responses stream (#19403)

* chore: update nix node_modules hashes

* fix(app): persist queued followups across project switches (#19421)

* refactor(tool-registry): yield Config/Plugin services, use Effect.forEach (#19363)

* chore: generate

* tui plugins (#19347)

* chore: generate

* effectify Skill service internals (#19364)

* chore: update nix node_modules hashes

* effectify Plugin service internals (#19365)

* refactor(core): split out instance and route through workspaces (#19335)

* chore(app): more spacing controls

* fix(ui): make streamed markdown feel more continuous (#19404)

* fix(app): resize layout viewport when mobile keyboard appears (#15841)

* fix(desktop-electron): match dev dock icon inset on macOS (#19429)

* fix(app): default file tree to closed with minimum width (#19426)

* fix flaky plugin tests (no mock.module for bun) (#19445)

* tweak: add additional overflow error patterns (#19446)

* no theme override in dev (#19456)

* feat: AI SDK v6 support (#18433)

* refactor(session): effectify Session service (#19449)

* refactor(core): move more responsibility to workspace routing (#19455)

* chore: update nix node_modules hashes

* refactor(format): use ChildProcessSpawner instead of Process.spawn (#19457)

* chore: generate

* Single target plugin entrypoints (#19467)

* refactor(session): effectify SessionCompaction service (#19459)

* feat(ci): use Azure Artifact Signing for Windows releases (#15201)

* fix(app): more startup efficiency (#19454)

* update effect to 4.0.0-beta.42 (#19484)

* chore: update nix node_modules hashes

* tweak: adjust bash tool description to increase cache hit rates between projects (#19487)

* refactor(session): move context into prompt footer (#19486)

* refactor(prompt): remove variant cycle display from footer (#19489)

* feat: add model variant selection dialog (#19488)

* fix: restore subagent footer and fix style guide violations (#19491)

* tweak(session): add top spacing and remove obsolete docs prompt

* upgrade opentui to 0.1.91 (#19440)

* refactor(file): use AppFileSystem instead of raw Filesystem (#19458)

* chore: generate

* chore: update nix node_modules hashes

* kv theme before default fallback (#19523)

* feat: open dialog for model variant selection instead of cycling (#19534)

* refactor(session): effectify session processor (#19485)

* feat: dialog variant menu and subagent improvements (#19537)

* use theme color for prompt placeholder (#19535)

* fix: update opencode-gitlab-auth to 2.0.1 (#19552)

* chore: update nix node_modules hashes

* prompt slot (#19563)

* fix: respect semver build identifiers for nix (#11915)

* fix: nix embedded web-ui support (#19561)

* ignore: kill todo (#19566)

* chore: update nix node_modules hashes

* wip: zen

* wip: zen

* zen: ZDR policy

* ci: cancel stale nix-hashes runs (#19571)

* release: v1.3.4

* refactor: kilo compat for v1.3.4

* fix: migration types

* refactor: upgrade kilo-gateway to ai sdk v6

* refactor: improve upstream merge script

* fix: fix some tests

* style(kilo-vscode): adjust indentation and formatting in parts-util and PopupSelector

Normalize boolean expression indentation in isCompletionResult to use
consistent 4-space alignment and reformat PopupSelectorProps generic
interface declaration to split the Omit type across multiple lines.

* docs(kilo-docs): update auto-generated source links

Remove outdated URLs and add new bug report issue link pointing to
anomalyco/opencode repository. Drop references to kilocode bug report
template and config precedence order docs, reducing total unique URLs
from 262 to 261.

* fix(kilo-ui): remove unused NerdFonts story and MONO_NERD_FONTS import

Drop the NerdFonts story from font.stories.tsx along with the unused
MONO_NERD_FONTS import, as the exported constant is no longer available
from the @opencode-ai/ui/font module.

* chore: update visual regression baselines

* fix(opencode): move Show conditional wrapper outside box in home onboarding

Relocate the Show component to wrap the box element instead of being
nested inside it, preventing the empty box from rendering when the
onboarding tip is not visible.

---------

Co-authored-by: Jay V <air@live.ca>
Co-authored-by: opencode-agent[bot] <opencode-agent[bot]@users.noreply.github.com>
Co-authored-by: Dax <mail@thdxr.com>
Co-authored-by: Dax Raad <d@ironbay.co>
Co-authored-by: opencode <opencode@sst.dev>
Co-authored-by: Kit Langton <kit.langton@gmail.com>
Co-authored-by: Adam <2363879+adamdotdevin@users.noreply.github.com>
Co-authored-by: Luke Parker <10430890+Hona@users.noreply.github.com>
Co-authored-by: Aiden Cline <63023139+rekram1-node@users.noreply.github.com>
Co-authored-by: Brendan Allan <brendonovich@outlook.com>
Co-authored-by: Shoubhit Dash <shoubhit2005@gmail.com>
Co-authored-by: James Long <longster@gmail.com>
Co-authored-by: André Cruz <acruz@cloudflare.com>
Co-authored-by: Ariane Emory <97994360+ariane-emory@users.noreply.github.com>
Co-authored-by: Vladimir Glafirov <vglafirov@gitlab.com>
Co-authored-by: Frank <frank@anoma.ly>
Co-authored-by: BlankParticle <blankparticle@gmail.com>
Co-authored-by: Sebastian <hasta84@gmail.com>
Co-authored-by: Burak Yigit Kaya <byk@sentry.io>
Co-authored-by: Caleb Norton <n0603919@outlook.com>
Co-authored-by: Imanol Maiztegui <imanol.mzd@gmail.com>
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
2026-04-12 13:36:08 +02:00
Catriel Müller d9b2fc7ffd resolve merge conflicts 2026-04-11 12:27:42 -03:00
Johnny Amancio 4970764688 chore: Regenerate sdk and types 2026-04-11 15:03:02 +02:00
Johnny Amancio 49cb356d23 refactor: fix type errors after v1.3.0 merge
- Rename PermissionNext → Permission across all remaining src/test files
    (drain.ts, routes.ts, remote-sender.ts, task.ts, and 5 test files)
  - Fix Effect Layer type resolution for makeRunPromise by accepting
    Layer<I, E, any> (Effect 4.x beta type inference limitation)
  - Add missing imports: Bus/BusEvent in server.ts, useToast in sync.tsx
  - Fix OPENCODE_ → KILO_ flag renames missed by merge transforms
    (DISABLE_EXTERNAL_SKILLS in skill/index.ts)
  - Fix isCodex → isOpenaiOauth rename in session/llm.ts
  - Fix PasteEvent.bytes decoding (decodePasteBytes removed from @opentui/core)
  - Fix ProviderID branded type indexing with ProviderID.kilo
  - Remove redundant windowsHide from pr.ts (handled by Process.spawn)
  - Update Skill import paths after skill.ts → index.ts rename
  - Restore Skill.remove and Skill.BUILTIN_LOCATION lost during merge
2026-04-11 14:49:11 +02:00
Johnny Amancio b1811147e2 merge: upstream v1.3.0 2026-04-11 14:06:52 +02:00
kilo-maintainer[bot] 3bbd842e2b release: v7.2.4 2026-04-10 19:21:31 +00:00
kilo-maintainer[bot] 4bdcb8bd38 release: v7.2.1 2026-04-10 18:13:51 +00:00
Johnny Amancio 9ee30c3e15 Merge remote-tracking branch 'origin/main' into johnnyamancio/kilo-opencode-v1.2.25 2026-04-10 10:55:06 +02:00
kilo-maintainer[bot] 10bb4d11ee release: v7.2.3 2026-04-10 04:24:44 +00:00
Johnny Amancio 3c65d939c1 Merge remote-tracking branch 'origin/main' into johnnyamancio/kilo-opencode-v1.2.25 2026-04-09 21:11:42 +02:00
Marius 17380f130f feat(agent-manager): add per-file revert buttons to diff views (#7455)
* feat(vscode): add per-file revert buttons to diff views

* fix(vscode): use discard icon for revert buttons and always show them

* fix(agent-manager): address code review — skip reset for deleted files, guard getClient()

* fix(agent-manager): only unstage for known modified files to handle unknown status safely
2026-04-09 15:27:48 +02:00
Mark IJbema bf75b3e834 Merge pull request #7041 from shantoislamdev/fix-docs-theme-toggle-icons-15391880175080747059
Fix docs theme toggle icons
2026-04-09 11:31:55 +02:00
Johnny Amancio a1a50cd2be Merge branch 'main' into johnnyamancio/kilo-opencode-v1.2.25 2026-04-08 20:12:58 +02:00
kilo-maintainer[bot] 31e1981361 release: v7.2.1 2026-04-08 16:32:13 +00:00
Johnny Amancio 957a5916a6 Merge branch 'main' into johnnyamancio/kilo-opencode-v1.2.25 2026-04-08 12:24:07 +02:00
kilo-maintainer[bot] 760f24608e release: v7.2.0 2026-04-07 19:11:12 +00:00
Johnny Amancio 68636c5bcd Merge branch 'main' into johnnyamancio/kilo-opencode-v1.2.25 2026-04-07 19:57:57 +02:00
Johnny Amancio b942fd444c Merge branch 'main' into johnnyamancio/kilo-opencode-v1.2.25 2026-04-07 19:48:00 +02:00
kilo-maintainer[bot] 5650850aa6 release: v7.1.23 2026-04-07 16:19:27 +00:00
Jean du Plessis de8d2b1008 fix: update vite and electron for dev tooling security
- vite: catalog 7.1.4 → 7.3.1 (already used in kilo-vscode/kilo-ui;
  fixes path traversal, fs.deny bypass, WebSocket read:
  GHSA-4w7w-66w2-5vf9, GHSA-v2wj-q39q-566r, GHSA-p9ff-h696-f583)
- electron: 40.4.1 → 40.8.5 in desktop-electron (fixes context
  isolation bypass, use-after-free, command injection)
2026-04-07 12:05:20 +02:00
Jean du Plessis 8793b8e61c fix: add diff override to eliminate transitive diff@8.0.2 from @opentui/core 2026-04-07 11:22:22 +02:00
Jean du Plessis 35b409c7ba fix: resolve remaining dompurify and seroval vulnerabilities
- Add dompurify override (3.3.3) to force mermaid's transitive dep away from 3.3.1
- Switch kilo-gateway solid-js from pinned 1.9.10 to catalog (1.9.12) to eliminate seroval@1.3.2
2026-04-07 11:06:33 +02:00
Jean du Plessis 1a5c73c0dc fix: update diff, dompurify, yaml, and solid-js for security patches
- diff: catalog 8.0.2 → 8.0.4, kilo-vscode ^7.0.0 → 8.0.4
  (DoS in parsePatch/applyPatch: GHSA-73rr-hh4g-fpgx)
- dompurify: catalog + packages/ui 3.3.1 → 3.3.3
  (mutation-XSS, XSS, URI bypass: GHSA-h8r8-wccr-v5f2, GHSA-v2wj-7wpq-c8vv,
  GHSA-cjmm-f4jc-qw8r, GHSA-cj63-jhhr-wcxv)
- yaml: kilo-vscode 2.8.2 → 2.8.3
  (stack overflow via nested collections: GHSA-48c2-rrv3-qjmp)
- solid-js: catalog 1.9.10 → 1.9.12
  (fixes seroval transitively: DoS, RCE, prototype pollution)
2026-04-07 10:57:51 +02:00
Jean du Plessis 168e1b9f90 fix(cli): update minimatch, @modelcontextprotocol/sdk, and @aws-sdk (#8466)
- minimatch 10.0.3 → 10.2.5 (fixes 3 ReDoS: GHSA-3ppc-4f35-3m26,
  GHSA-7r86-cg39-jmmj, GHSA-23c5-xmqv-rm74)
- @modelcontextprotocol/sdk 1.25.2 → 1.29.0 (fixes ReDoS, data leak,
  DNS rebinding: GHSA-8r9q-7v3j-jr4g, GHSA-345p-7cg4-v4c7,
  GHSA-w48q-cv73-mx4w)
- @aws-sdk/credential-providers 3.993.0 → 3.1025.0 (resolves critical
  fast-xml-parser transitively)
- @aws-sdk/client-s3 3.933.0 → 3.1025.0 (same fast-xml-parser fix)
2026-04-07 10:40:02 +02:00
Jean du Plessis ae05148df7 fix: add safe overrides for transitive dependency vulnerabilities (#8467)
Add semver-verified compatible overrides for 8 transitive dependencies:
- path-to-regexp >=8.4.0 (2 ReDoS: GHSA-j3q9-mxjg-w52f, GHSA-37ch-88jc-xwx2)
- picomatch >=2.3.2 (ReDoS + method injection: GHSA-c2c7-rcm5-vvqj, GHSA-3v7f-55p6-f55p)
- defu 6.1.6 (prototype pollution: GHSA-737v-mqg7-c878)
- lodash 4.18.1 (code injection + prototype pollution: GHSA-r5fr-rjxr-66jc, GHSA-f23m-r3pf-42rh)
- @xmldom/xmldom >=0.8.12 (XML injection: GHSA-wh4c-j3r5-mjhp)
- smol-toml >=1.6.1 (DoS: GHSA-v3rj-xjv7-4jmq)
- fastify >=5.8.3 (protocol spoofing: GHSA-444r-cwp2-x5xf)
- happy-dom >=20.8.9 (cookie leak + RCE: GHSA-w4gp-fjgq-3q4g, GHSA-6q6h-j7hj-3r64)

All override versions fall within their parent's declared semver range.
2026-04-07 10:39:26 +02:00
Jean du Plessis ea549f1e65 fix(cli): update hono to fix auth bypass and server vulnerabilities (#8465)
Update hono catalog version from 4.10.7 to 4.12.12 to fix 14 advisories
including JWT algorithm confusion (GHSA-f67f-6cw9-8mq4, GHSA-3vhc-576x-3qv4),
CORS bypass, body limit bypass, XSS, cookie injection, SSE injection,
path traversal, and prototype pollution.

Add null guard for ptyID param in pty.ts to satisfy hono 4.12's stricter
return type for c.req.param().
2026-04-07 10:38:14 +02:00
Jean du Plessis 9cf235a568 fix(cli): update simple-git to fix critical RCE (#8464)
Update simple-git from 3.31.1 to 3.35.2 in both packages/opencode and
packages/kilo-vscode to fix GHSA-r275-fr43-pm7q (blockUnsafeOperationsPlugin
bypass via case-insensitive protocol.allow config key enables RCE).
2026-04-07 10:37:29 +02:00
kilo-maintainer[bot] fc014b1205 release: v7.1.22 2026-04-06 16:10:12 +00:00
Johnny Amancio 6bd50bcf3d Merge branch 'main' into johnnyamancio/kilo-opencode-v1.2.25 2026-04-06 13:48:11 +02:00
kilo-maintainer[bot] e10324aa7f release: v7.1.21 2026-04-05 15:48:18 +00:00
Kirill Kalishev 452e46d712 Merge pull request #8214 from Kilo-Org/kirillk/jetbrains-1
feat(jetbrains): add JetBrains plugin with split mode infra and CLI binary bundling
2026-04-02 14:17:48 -04:00