dcf9c5a0be
fix(config): expand MCP header env refs without wiping MCP set ( #12554 )
...
* fix(config): expand MCP header env refs without wiping MCP set
Project kilo.jsonc with {env:…} in MCP headers caused the whole config
load to fail since 7.4.5, silently removing every MCP. Leave {env:} literal
during untrusted text substitution, expand only remote MCP headers after
parse, and drop individual MCPs with blocked env refs instead of the full set.
Fixes #12319
* fix(config): ban {file:} during MCP header env expansion
Post-parse header expand used trusted substitute without fileScope, so a
decoy in-repo {file:} plus any {env:} could read arbitrary paths into
remote MCP headers. Expand only {env:} and reject residual {file:}.
* fix(config): ban env secret expansion in project MCP headers
Untrusted project MCP headers must not read process.env or authEnv.
Reject {env:} and {file:} per entry with a warning so sibling MCPs still load.
* fix(config): drop global MCP headers on project URL retarget
When a project config overrides a same-named global remote MCP with a
new URL and does not restate headers, do not inherit expanded secret
headers from the global entry. Also fix MCP union narrowing in tests
and stop saying "header env expansion failed" when only validating.
* fix(config): do not mutate caller's patch in mergeConfig
Shallow-copy patch before delete p.mcp so probe-then-write
updateProjectConfig paths keep mcp on the original object.
* fix(config): secure project MCP header loading
* Update packages/opencode/src/config/config.ts
Co-authored-by: kilo-code-bot[bot] <240665456+kilo-code-bot[bot]@users.noreply.github.com>
* fix(config): secure layered MCP transitions
---------
Co-authored-by: arimu1 <19286898+arimu1@users.noreply.github.com >
Co-authored-by: Johnny Eric Amancio <johnnyeric@gmail.com >
Co-authored-by: kilo-code-bot[bot] <240665456+kilo-code-bot[bot]@users.noreply.github.com>
2026-08-10 19:45:45 +02:00
Christiaan Arnoldus
2debcd243c
Merge branch 'main' into feat/exclude-chatgpt-from-prompt-cache-breakpoint
2026-08-10 15:12:31 +02:00
chrarnoldus and kiloconnect[bot]
9b820d2f9d
refactor(cli): simplify ChatGPT subscription detection to zero-cost heuristic
...
Co-authored-by: kiloconnect[bot] <240665456+kiloconnect[bot]@users.noreply.github.com>
2026-08-10 13:04:02 +00:00
Johnny Eric Amancio
77c9782739
Merge pull request #12958 from Kilo-Org/johnnyeric/investigate-memory-model-timeout
...
fix(memory): quiet transient capture timeouts and stop same-turn retries
2026-08-10 14:52:09 +02:00
chrarnoldus
2e5199a40d
feat(cli): exclude ChatGPT subscriptions from explicit prompt cache breakpoints
2026-08-10 12:49:48 +00:00
Johnny Eric Amancio
fdc46654c5
fix(memory): quiet transient capture timeouts and stop same-turn retries
2026-08-10 14:12:21 +02:00
Christiaan Arnoldus
bc1f1b483d
Merge branch 'main' into fix/gateway-negative-prices
2026-08-10 13:45:34 +02:00
Igor Šćekić
73844ae68d
feat(cli): answer sessionless model catalog requests ( #13014 )
...
* feat(cli): answer sessionless model catalog requests
* feat(cli): add sessionless catalog changeset
* chore(cli): format remote sender files
* test(cli): simplify sessionless catalog coverage
* fix(test): extend config overlay timeout
The legacy overlay test can exceed 30 seconds on a cold Windows runner while its assertions remain valid.
2026-08-10 13:15:30 +02:00
Christiaan Arnoldus
c0734d1135
Merge branch 'main' into pentagonal-storm
2026-08-10 11:22:47 +02:00
chrarnoldus and kiloconnect[bot]
48c4a4af22
fix(gateway): ignore negative prices in model catalog
...
Co-authored-by: kiloconnect[bot] <240665456+kiloconnect[bot]@users.noreply.github.com>
2026-08-10 09:20:37 +00:00
Christiaan Arnoldus
a4e5d34bd0
Merge pull request #13022 from Kilo-Org/feat/openai-explicit-prompt-cache-breakpoints
...
feat(cli): set prompt cache breakpoints on stable prefix and user query before environment details
2026-08-10 10:54:34 +02:00
Christiaan Arnoldus
d1ff6eb13c
Merge branch 'main' into pentagonal-storm
2026-08-08 21:56:42 +02:00
chrarnoldus and kiloconnect[bot]
1b0f94ec74
feat(cli): enable explicit prompt cache options for OpenAI models on Kilo Gateway
...
Co-authored-by: kiloconnect[bot] <240665456+kiloconnect[bot]@users.noreply.github.com>
2026-08-08 18:25:29 +00:00
chrarnoldus and kiloconnect[bot]
944ab18304
fix(llm): place prompt cache breakpoint before trailing environment details
...
Co-authored-by: kiloconnect[bot] <240665456+kiloconnect[bot]@users.noreply.github.com>
2026-08-08 18:17:49 +00:00
chrarnoldus
9dbf276ade
feat(llm): set explicit prompt cache breakpoints on stable prefix for GPT-5.6+
2026-08-08 17:26:07 +00:00
Christiaan Arnoldus
dd173f236d
Merge branch 'main' into fix/disable-suggest-in-non-interactive-runs
2026-08-07 19:52:45 +02:00
Bruno Agatao
166fc1defa
Merge remote-tracking branch 'origin/main' into feat/show-approval-reason-outside-workspace-reads-and-writes
2026-08-07 19:29:19 +02:00
Christiaan Arnoldus
82be537f18
test(cli): verify suggestion auto-dismissal in attached run session
2026-08-07 17:07:31 +02:00
Christiaan Arnoldus
910f0f24d2
fix(cli): disable suggest tool in non-interactive runs
2026-08-07 16:45:50 +02:00
Christiaan Arnoldus
7fe82d3469
Merge branch 'main' into pentagonal-storm
2026-08-07 16:12:24 +02:00
Bruno Agatao
9c36685c0f
fix(vscode): show filename inline in outside-workspace approval note
2026-08-07 15:10:28 +02:00
Bruno Agatao
4add8d9c4b
Merge remote-tracking branch 'origin/main' into feat-show-approval-reason-outside-workspace-reads
...
# Conflicts:
# packages/kilo-ui/src/components/message-part.tsx
2026-08-07 14:33:46 +02:00
Marius
6b1494e578
Merge pull request #12993 from Kilo-Org/fix-agent-manager-multi-project-id
...
fix(agent-manager): route tool requests by project directory and handle busy sessions
2026-08-07 14:31:27 +02:00
Bruno Agatao
d047224302
fix(vscode): show approval reason for outside-workspace reads and writes
2026-08-07 14:24:16 +02:00
Marius
7a3955f639
Merge pull request #12989 from Kilo-Org/fix-xterm-terminal-alignment-on-narrow-width
...
fix(vscode): align xterm terminal on narrow sidebar width
2026-08-07 14:16:41 +02:00
marius-kilocode
d990c943eb
Merge remote-tracking branch 'origin/main' into fix-agent-manager-multi-project-id
...
# Conflicts:
# packages/opencode/src/kilocode/sandbox/policy.ts
2026-08-07 13:45:12 +02:00
Marius
4e36297668
fix(cli): apply saved sandbox settings to existing sessions ( #12600 )
...
* fix(cli): apply saved sandbox settings to existing sessions
* fix(cli): emit config update event on global overlay saves
* fix(cli): scope live sandbox policy refresh
* fix(cli): refresh project sandbox policies
* test(cli): use external path for sandbox overlay
2026-08-07 13:37:06 +02:00
marius-kilocode
134acb3e32
Merge branch 'main' into optimize-review-slash-commands
2026-08-07 13:13:11 +02:00
marius-kilocode
039c8e4888
test(pty): revert fast-exiting socket test in httpapi-pty
2026-08-07 13:08:12 +02:00
marius-kilocode
d3c50e6212
fix(agent-manager): route tool requests by project directory and handle busy sessions
2026-08-07 13:03:30 +02:00
marius-kilocode
db47401365
test(pty): add end-to-end spawn dimension test and clarify docstrings
2026-08-07 12:59:23 +02:00
marius-kilocode
0e1f11bed6
feat(review): add nested suggestions and subcommands for review
2026-08-07 12:48:24 +02:00
marius-kilocode
e3e2327803
fix(vscode): align xterm terminal on narrow sidebar width
2026-08-07 12:41:05 +02:00
Christiaan Arnoldus
1406d719e3
fix(cli): remove unsupported kilo web command
2026-08-07 10:24:46 +02:00
Christiaan Arnoldus
d70ebd3191
fix(cli): prefer configured custom variants
2026-08-07 09:47:38 +02:00
Christiaan Arnoldus
863e399e1b
Merge branch 'main' into pentagonal-storm
2026-08-07 09:39:44 +02:00
Kirill Kalishev
978c44f6ba
Merge pull request #12825 from Kilo-Org/rune-polo
...
feat(cli): add command file management parity with skills
2026-08-06 11:52:27 -04:00
Christiaan Arnoldus
cc4500b2dd
Merge remote-tracking branch 'origin/main' into pentagonal-storm
2026-08-06 16:40:09 +02:00
Christiaan Arnoldus
6fef69c6a1
Merge remote-tracking branch 'origin/main' into pentagonal-storm
2026-08-06 16:23:16 +02:00
Marius
1e779b553d
Merge branch 'main' into persist-model-variant-selection
2026-08-06 16:17:06 +02:00
Christiaan Arnoldus
e5ae384ad9
Merge pull request #12946 from Kilo-Org/fix/agent-manager-llamacpp-schema
...
fix(agent-manager): support llama.cpp tool schema
2026-08-06 15:33:32 +02:00
Christiaan Arnoldus
3a5455c333
Merge branch 'main' into fix/agent-manager-llamacpp-schema
2026-08-06 14:46:26 +02:00
Marius
230f15814f
Merge branch 'main' into persist-model-variant-selection
2026-08-06 14:38:38 +02:00
marius-kilocode
40f2c1305b
fix(cli): preserve explicit variant priority
2026-08-06 14:34:55 +02:00
Christiaan Arnoldus
e7a3ca1a3f
fix(agent-manager): retain session ID hint
2026-08-06 14:31:20 +02:00
Johnny Eric Amancio
154b1ae53c
fix(cli): avoid startup database lock crashes
2026-08-06 14:09:04 +02:00
Christiaan Arnoldus
24da90ff57
fix(agent-manager): support llama.cpp tool schema
2026-08-06 14:03:07 +02:00
marius-kilocode
1e17055519
fix(vscode): preserve model variants on switch
2026-08-06 13:54:50 +02:00
Marius
835cebb476
Merge pull request #12937 from Kilo-Org/deadpan-bromine
...
fix(cli): resume subagents after session fork
2026-08-06 13:43:39 +02:00
Marius
157afe4622
Merge pull request #12935 from Kilo-Org/fix-cli-interactive-terminal
...
fix(cli): restore interactive terminal input for workspaces
2026-08-06 13:36:42 +02:00
