mirror of
https://github.com/Kilo-Org/kilocode.git
synced 2026-08-31 01:37:28 +08:00
Yury Zialionka
2aa10017c0
Closes #12996. Part of #12986. - websearch resolves KILO_WEBSEARCH_PROVIDER, EXA_API_KEY and PARALLEL_API_KEY through Env.Service in the tool body and threads them into the pure helpers; selectWebSearchProvider takes the override as a parameter. - mcp-websearch no longer snapshots EXA_API_KEY into a module-level URL at import time; exaUrl(key) derives it per call, so BYOK keys set or cleared after startup are honored. - Tool registry provides Env.node. - kilo-tool-process-env allowlist is now empty; check:architecture drops from 15 to 9 classified ratchet sites. - Transform/model tests confirmed running in-process via plain bun test (455 tests, <1s), the other half of #12996. warpgrep.ts, the third file in the original ratchet, was already removed on main.
31 lines
2.5 KiB
JSON
31 lines
2.5 KiB
JSON
{
|
|
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
|
"title": "Kilo Architecture Ratchet Allowlist",
|
|
"description": "Baseline exception list for Kilo-owned domain architecture boundaries and state ratchets. Upstream-owned shared opencode files are exempt to prevent upstream merge conflicts. As Kilo legacy sites are refactored into clean Effect layers, decrement counts or remove entries to lock in progress.",
|
|
"rules": {
|
|
"kilo-instance-state-singletons": {
|
|
"description": "Legacy InstanceState.make usages in Kilo-owned code (packages/opencode/src/kilocode/**, packages/opencode/src/kilo-*/**). Target: encapsulate in scoped Effect Services in packages/core.",
|
|
"allowed": {
|
|
"packages/opencode/src/kilo-sessions/kilo-sessions.ts": { "count": 1, "owner": "session-runtime", "reason": "Kilo session coordination state" },
|
|
"packages/opencode/src/kilocode/agent-manager/service.ts": { "count": 1, "owner": "agent-manager", "reason": "Agent Manager multi-project worktree state" },
|
|
"packages/opencode/src/kilocode/background-process/index.ts": { "count": 1, "owner": "process-runtime", "reason": "Directory-keyed background process registry" },
|
|
"packages/opencode/src/kilocode/interactive-terminal/index.ts": { "count": 1, "owner": "terminal-runtime", "reason": "Interactive terminal manager state" },
|
|
"packages/opencode/src/kilocode/notebook/service.ts": { "count": 1, "owner": "notebook-runtime", "reason": "Notebook cell execution service state" },
|
|
"packages/opencode/src/kilocode/project-id.ts": { "count": 1, "owner": "project-runtime", "reason": "Cached project identifier resolution" },
|
|
"packages/opencode/src/kilocode/watcher.ts": { "count": 1, "owner": "watcher-runtime", "reason": "Eager location watcher subscription" }
|
|
}
|
|
},
|
|
"kilo-database-constructors": {
|
|
"description": "Direct new Database() / new DatabaseSync() instantiations in Kilo-owned code. Target: all persistence routes through core Database.Service.",
|
|
"allowed": {
|
|
"packages/opencode/src/kilocode/session-export/sequence.ts": { "count": 1, "owner": "export-runtime", "reason": "Read-only offline export database reader" },
|
|
"packages/opencode/src/kilocode/session-export/worker/storage.ts": { "count": 1, "owner": "export-runtime", "reason": "Worker-thread offline export database handle" }
|
|
}
|
|
},
|
|
"kilo-tool-process-env": {
|
|
"description": "Direct process.env reads in Kilo-owned tools. Target: pass configuration explicitly via Tool.Context or Env.Service.",
|
|
"allowed": {}
|
|
}
|
|
}
|
|
}
|