ci: release packages

[github-actions]

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

@moonshot-ai/kimi-code@0.20.0

Minor Changes

• #1079 2db5fc2 - Add shell mode for running shell commands.
  Type ! in the input box to enable it.
  The command output is visible to the AI.
  For long-running commands, press Ctrl+B to move them to the background.
  For example, you can run !gh auth login to sign in to the GitHub CLI without opening a new terminal, so Kimi can use gh.

• #1088 0030f76 - Add a confirmation prompt before installing third-party plugins.

• #1066 3554f7e - Show update badges on the /plugins Installed tab, where Enter now installs the available update and I opens plugin details.

• #1025 5ef66dd - Redesign /plugins as a single tabbed panel: Installed (manage installed
  plugins — toggle, remove, MCP, details, reload), Official (Kimi-maintained
  marketplace plugins), Third-party (marketplace plugins from other
  publishers), and Custom (install straight from a GitHub URL, zip URL, or
  local path). Tab / Shift-Tab switch tabs. The Official and Third-party
  catalogs load lazily, so /plugins opens instantly and keeps working offline —
  a marketplace fetch failure is shown inline instead of closing the panel. The
  tab strip is shared with the /model provider tabs via the new renderTabStrip
  helper.

• #1006 60dfb68 - Add server authentication and safe --host exposure. The local server now
  requires a per-start bearer token on all API and WebSocket calls (the CLI reads
  it automatically), enforces Host/Origin checks, and gains --host with a
  public-binding hardening tier: mandatory KIMI_CODE_PASSWORD, TLS (or
  --insecure-no-tls), auth-failure rate limiting, disabled remote
  shutdown/terminals, and security response headers. See packages/server/SECURITY.md.

• #1040 6664038 - Replace silent AGENTS.md truncation with a visible warning in the TUI status bar and web UI.

• #1101 3ea6ac2 - Show the plan body and approach choices in the plan review card when exiting plan mode in the web UI.

• #1103 18f7c34 - Show a line-by-line diff when the agent edits or writes a file in the web chat.

Patch Changes

• #1072 a86bb97 - Improve the image paste hint.

• #1076 500677a - Fix Ctrl-C during compaction so it clears a pending editor draft first instead of cancelling immediately.

• #1067 0e227ba - Fix explore subagents silently losing git context when git commands time out or the directory is not a repository.

• #1075 3aaf1e5 - Fix a startup crash on Linux caused by an unhandled native clipboard error.

• #1094 8ee5c0f - Fix the terminal window repeatedly losing focus on Linux Wayland, which broke IME input.

• #1057 ee69e16 - Fix MCP server working directories when sessions are hosted by the web server.

• #1064 a752a53 - Fix truncated skill descriptions missing an ellipsis in the model's skill listing.

• #903 bbd8a1a - Fix kimi web and /web failing to start the background server daemon on Windows with spawn EFTYPE when the CLI is installed via npm/pnpm or run from source. The official single-binary install script was not affected.

• #1070 ff17715 - Stop auto-dismissing questions in the web UI after 60 seconds so they wait for the user's answer.

• #1097 27ef516 - Add a hint to the per-turn step limit error pointing users to the loop_control.max_steps_per_turn config option.

• #1062 ea6a4bf - Preserve full tool output logs when previews are truncated and link background task completion notifications to saved output.

• #1086 fe667d7 - /reload now refreshes the assistant's view of plugin skills, so plugin changes take effect in the current session instead of requiring a new one.

• #1081 8fc6aa5 - Sync session title changes across all connected clients in server mode.

• #1078 75ca3b2 - Add Ctrl+U and Ctrl+D as page up and page down shortcuts in the task output viewer.

• #1069 d18aa16 - Reduce streaming redraw cost for long assistant messages with code blocks.

• #1112 6a97d0b - Add a copy button to user messages in the web chat.

• #1035 ea03f30 - Render LaTeX display math ($$…$$) in the web chat via KaTeX. Single $ is intentionally left as literal text, so prices, env vars, and shell paths (e.g. $PATH, $5/$10, $HOME/bin) are never swallowed as a formula.

• #1084 d6e5246 - Page the web session list per workspace so the first screen no longer fetches every session up front.

• #1113 6194d3f - Keep the web session sidebar from re-rendering on every streaming token. The
  event reducer now reuses the sessions array reference for events that do not
  change sessions, so the sidebar computeds (sessionsForView / workspaceGroups
  / mergedWorkspaces) are no longer dirtied by unrelated high-frequency events.

• #1087 884b65a - Fix duplicate session snapshot reloads in the bundled web UI during resync.

• #1109 d554f9a - Show the full accumulated progress of a subagent in its detail panel, with concise tool-call summaries instead of raw JSON.

• #1065 4b837d6 - Create missing parent directories automatically when writing a file.

@moonshot-ai/kimi-web@0.1.2

Patch Changes

• #1085 f1fad72 - Fix stuttery streaming in the web chat by coalescing rapid token updates into a single render per frame.

@moonshot-ai/server@0.2.1

Patch Changes

• #1085 f1fad72 - Reduce streaming latency by disabling Nagle's algorithm on WebSocket connections.

• #1081 8fc6aa5 - Sync session title changes across all connected clients in server mode.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: efadd4886c

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

[chatgpt-codex-connector]

Include the SDK package in this release

Publishing #1040 bumps only @moonshot-ai/kimi-code, but that PR also added exported SDK methods SDKRpcClientBase.getSessionWarnings and Session.getSessionWarnings (packages/node-sdk/src/rpc.ts:248, packages/node-sdk/src/session.ts:127). Since .changeset/README.md:45-46 requires SDK-exposed capabilities to select @moonshot-ai/kimi-code-sdk, consuming the changeset here leaves the SDK package at 0.10.0 with no release path for the new session-warnings API until an unrelated changeset is added.

Useful? React with 👍 / 👎.