kilo-maintainer[bot]
a5aaef74a8
release: v7.4.21
2026-08-11 03:07:28 +00:00
dcf9c5a0be
fix(config): expand MCP header env refs without wiping MCP set ( #12554 )
...
* fix(config): expand MCP header env refs without wiping MCP set
Project kilo.jsonc with {env:…} in MCP headers caused the whole config
load to fail since 7.4.5, silently removing every MCP. Leave {env:} literal
during untrusted text substitution, expand only remote MCP headers after
parse, and drop individual MCPs with blocked env refs instead of the full set.
Fixes #12319
* fix(config): ban {file:} during MCP header env expansion
Post-parse header expand used trusted substitute without fileScope, so a
decoy in-repo {file:} plus any {env:} could read arbitrary paths into
remote MCP headers. Expand only {env:} and reject residual {file:}.
* fix(config): ban env secret expansion in project MCP headers
Untrusted project MCP headers must not read process.env or authEnv.
Reject {env:} and {file:} per entry with a warning so sibling MCPs still load.
* fix(config): drop global MCP headers on project URL retarget
When a project config overrides a same-named global remote MCP with a
new URL and does not restate headers, do not inherit expanded secret
headers from the global entry. Also fix MCP union narrowing in tests
and stop saying "header env expansion failed" when only validating.
* fix(config): do not mutate caller's patch in mergeConfig
Shallow-copy patch before delete p.mcp so probe-then-write
updateProjectConfig paths keep mcp on the original object.
* fix(config): secure project MCP header loading
* Update packages/opencode/src/config/config.ts
Co-authored-by: kilo-code-bot[bot] <240665456+kilo-code-bot[bot]@users.noreply.github.com>
* fix(config): secure layered MCP transitions
---------
Co-authored-by: arimu1 <19286898+arimu1@users.noreply.github.com >
Co-authored-by: Johnny Eric Amancio <johnnyeric@gmail.com >
Co-authored-by: kilo-code-bot[bot] <240665456+kilo-code-bot[bot]@users.noreply.github.com>
2026-08-10 19:45:45 +02:00
Christiaan Arnoldus
2debcd243c
Merge branch 'main' into feat/exclude-chatgpt-from-prompt-cache-breakpoint
2026-08-10 15:12:31 +02:00
chrarnoldus and kiloconnect[bot]
9b820d2f9d
refactor(cli): simplify ChatGPT subscription detection to zero-cost heuristic
...
Co-authored-by: kiloconnect[bot] <240665456+kiloconnect[bot]@users.noreply.github.com>
2026-08-10 13:04:02 +00:00
Johnny Eric Amancio
77c9782739
Merge pull request #12958 from Kilo-Org/johnnyeric/investigate-memory-model-timeout
...
fix(memory): quiet transient capture timeouts and stop same-turn retries
2026-08-10 14:52:09 +02:00
chrarnoldus
2e5199a40d
feat(cli): exclude ChatGPT subscriptions from explicit prompt cache breakpoints
2026-08-10 12:49:48 +00:00
Johnny Eric Amancio
fdc46654c5
fix(memory): quiet transient capture timeouts and stop same-turn retries
2026-08-10 14:12:21 +02:00
Christiaan Arnoldus
bc1f1b483d
Merge branch 'main' into fix/gateway-negative-prices
2026-08-10 13:45:34 +02:00
Igor Šćekić
73844ae68d
feat(cli): answer sessionless model catalog requests ( #13014 )
...
* feat(cli): answer sessionless model catalog requests
* feat(cli): add sessionless catalog changeset
* chore(cli): format remote sender files
* test(cli): simplify sessionless catalog coverage
* fix(test): extend config overlay timeout
The legacy overlay test can exceed 30 seconds on a cold Windows runner while its assertions remain valid.
2026-08-10 13:15:30 +02:00
chrarnoldus and kiloconnect[bot]
08f8c5fc59
fix(ui): hide pricing section for unpriced models
...
Co-authored-by: kiloconnect[bot] <240665456+kiloconnect[bot]@users.noreply.github.com>
2026-08-10 09:28:01 +00:00
Christiaan Arnoldus
c0734d1135
Merge branch 'main' into pentagonal-storm
2026-08-10 11:22:47 +02:00
chrarnoldus and kiloconnect[bot]
48c4a4af22
fix(gateway): ignore negative prices in model catalog
...
Co-authored-by: kiloconnect[bot] <240665456+kiloconnect[bot]@users.noreply.github.com>
2026-08-10 09:20:37 +00:00
Christiaan Arnoldus
a4e5d34bd0
Merge pull request #13022 from Kilo-Org/feat/openai-explicit-prompt-cache-breakpoints
...
feat(cli): set prompt cache breakpoints on stable prefix and user query before environment details
2026-08-10 10:54:34 +02:00
Christiaan Arnoldus
d1ff6eb13c
Merge branch 'main' into pentagonal-storm
2026-08-08 21:56:42 +02:00
chrarnoldus and kiloconnect[bot]
71abd522b1
fix(cli): use typed loop and narrow kilocode_change block in applyCaching
...
Co-authored-by: kiloconnect[bot] <240665456+kiloconnect[bot]@users.noreply.github.com>
2026-08-08 19:06:53 +00:00
chrarnoldus and kiloconnect[bot]
d3548d179b
refactor(cli): remove part.synthetic and any-cast from applyCaching
...
Co-authored-by: kiloconnect[bot] <240665456+kiloconnect[bot]@users.noreply.github.com>
2026-08-08 18:52:47 +00:00
chrarnoldus and kiloconnect[bot]
7c7c11e334
fix(cli): include modified alibaba line in kilocode_change block
...
Co-authored-by: kiloconnect[bot] <240665456+kiloconnect[bot]@users.noreply.github.com>
2026-08-08 18:34:00 +00:00
chrarnoldus and kiloconnect[bot]
bca4598324
refactor(cli): simplify provider checks and narrow kilocode_change markers in transform.ts
...
Co-authored-by: kiloconnect[bot] <240665456+kiloconnect[bot]@users.noreply.github.com>
2026-08-08 18:28:46 +00:00
chrarnoldus and kiloconnect[bot]
1b0f94ec74
feat(cli): enable explicit prompt cache options for OpenAI models on Kilo Gateway
...
Co-authored-by: kiloconnect[bot] <240665456+kiloconnect[bot]@users.noreply.github.com>
2026-08-08 18:25:29 +00:00
chrarnoldus and kiloconnect[bot]
2f72a8b72d
refactor(cli): limit explicit prompt cache breakpoint changes to Vercel AI SDK path
...
Co-authored-by: kiloconnect[bot] <240665456+kiloconnect[bot]@users.noreply.github.com>
2026-08-08 18:22:35 +00:00
chrarnoldus and kiloconnect[bot]
944ab18304
fix(llm): place prompt cache breakpoint before trailing environment details
...
Co-authored-by: kiloconnect[bot] <240665456+kiloconnect[bot]@users.noreply.github.com>
2026-08-08 18:17:49 +00:00
chrarnoldus and kiloconnect[bot]
435c029f8c
refactor(llm): extract shared supportsPromptCacheBreakpoint and restrict inline hints to native openai routes
...
Co-authored-by: kiloconnect[bot] <240665456+kiloconnect[bot]@users.noreply.github.com>
2026-08-08 17:39:22 +00:00
chrarnoldus
9dbf276ade
feat(llm): set explicit prompt cache breakpoints on stable prefix for GPT-5.6+
2026-08-08 17:26:07 +00:00
Christiaan Arnoldus
dd173f236d
Merge branch 'main' into fix/disable-suggest-in-non-interactive-runs
2026-08-07 19:52:45 +02:00
Bruno Agatao
166fc1defa
Merge remote-tracking branch 'origin/main' into feat/show-approval-reason-outside-workspace-reads-and-writes
2026-08-07 19:29:19 +02:00
Christiaan Arnoldus
82be537f18
test(cli): verify suggestion auto-dismissal in attached run session
2026-08-07 17:07:31 +02:00
Christiaan Arnoldus
910f0f24d2
fix(cli): disable suggest tool in non-interactive runs
2026-08-07 16:45:50 +02:00
Christiaan Arnoldus
7fe82d3469
Merge branch 'main' into pentagonal-storm
2026-08-07 16:12:24 +02:00
Bruno Agatao
9c36685c0f
fix(vscode): show filename inline in outside-workspace approval note
2026-08-07 15:10:28 +02:00
Bruno Agatao
4add8d9c4b
Merge remote-tracking branch 'origin/main' into feat-show-approval-reason-outside-workspace-reads
...
# Conflicts:
# packages/kilo-ui/src/components/message-part.tsx
2026-08-07 14:33:46 +02:00
Marius
6b1494e578
Merge pull request #12993 from Kilo-Org/fix-agent-manager-multi-project-id
...
fix(agent-manager): route tool requests by project directory and handle busy sessions
2026-08-07 14:31:27 +02:00
Marius
5815d3f8d6
Merge pull request #12987 from Kilo-Org/optimize-cli-extension-compile-times
...
perf(build): optimize cli and extension compile and test times
2026-08-07 14:27:28 +02:00
Bruno Agatao
d047224302
fix(vscode): show approval reason for outside-workspace reads and writes
2026-08-07 14:24:16 +02:00
Marius
7a3955f639
Merge pull request #12989 from Kilo-Org/fix-xterm-terminal-alignment-on-narrow-width
...
fix(vscode): align xterm terminal on narrow sidebar width
2026-08-07 14:16:41 +02:00
marius-kilocode
c09fc1ff05
fix(deps): declare build dependencies and clean stale test-cli symlinks
2026-08-07 14:09:00 +02:00
marius-kilocode
3b2686af84
chore(annotations): wrap upstream changes with kilocode_change markers
2026-08-07 14:08:59 +02:00
marius-kilocode
df40369de8
refactor(test): dynamically discover workspace packages in test-cli fingerprint
2026-08-07 14:08:59 +02:00
marius-kilocode
3f05a2a536
fix(cli): make models snapshot cache write and read fault-tolerant
2026-08-07 14:08:59 +02:00
marius-kilocode
cb2bd4df5e
chore: remove test artifact
2026-08-07 14:08:59 +02:00
marius-kilocode
3c713bea8d
fix(build): harden cache invalidation and check subprocess results
2026-08-07 14:08:59 +02:00
marius-kilocode
dc3af535bb
perf(build): optimize cli and extension compile and test times
2026-08-07 14:08:54 +02:00
marius-kilocode
d990c943eb
Merge remote-tracking branch 'origin/main' into fix-agent-manager-multi-project-id
...
# Conflicts:
# packages/opencode/src/kilocode/sandbox/policy.ts
2026-08-07 13:45:12 +02:00
Marius
4e36297668
fix(cli): apply saved sandbox settings to existing sessions ( #12600 )
...
* fix(cli): apply saved sandbox settings to existing sessions
* fix(cli): emit config update event on global overlay saves
* fix(cli): scope live sandbox policy refresh
* fix(cli): refresh project sandbox policies
* test(cli): use external path for sandbox overlay
2026-08-07 13:37:06 +02:00
marius-kilocode
134acb3e32
Merge branch 'main' into optimize-review-slash-commands
2026-08-07 13:13:11 +02:00
marius-kilocode
039c8e4888
test(pty): revert fast-exiting socket test in httpapi-pty
2026-08-07 13:08:12 +02:00
marius-kilocode
d3c50e6212
fix(agent-manager): route tool requests by project directory and handle busy sessions
2026-08-07 13:03:30 +02:00
marius-kilocode
db47401365
test(pty): add end-to-end spawn dimension test and clarify docstrings
2026-08-07 12:59:23 +02:00
marius-kilocode
2b92036fca
fix(review): address review feedback for scopes, fallback, and deep mode
2026-08-07 12:59:05 +02:00
marius-kilocode
0e1f11bed6
feat(review): add nested suggestions and subcommands for review
2026-08-07 12:48:24 +02:00
marius-kilocode
e3e2327803
fix(vscode): align xterm terminal on narrow sidebar width
2026-08-07 12:41:05 +02:00
kilo-maintainer[bot]