ci: release packages

[github-actions]

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

@moonshot-ai/kimi-code@0.24.0

Minor Changes

• #1441 ceb158d Thanks @sailist! - Add v2 session export support for packaging diagnostic zip archives.

• #1591 83e1753 Thanks @liruifengv! - Move foreground Bash commands that hit their timeout to the background instead of killing them, so long-running commands survive the timeout and report back on completion. Set bash_auto_background_on_timeout = false under [background] in config.toml to restore the kill-on-timeout behavior.

• #1617 4ec2e7f Thanks @sailist! - Run the local server (kimi server run / kimi web) on the agent-core-v2 engine by default — the KIMI_CODE_EXPERIMENTAL_FLAG opt-in is no longer needed, and the legacy v1 server package has been removed.

• #1441 ceb158d Thanks @sailist! - Port progressive tool disclosure to the new agent engine: MCP tool schemas stay out of the top-level tool list, and the model loads them by name on demand through the announcements plus the select_tools tool, keeping the prompt cache stable. Off by default; set KIMI_CODE_EXPERIMENTAL_TOOL_SELECT=1 to enable.

• #1646 5eb6217 Thanks @wbxl2000! - web: Add session diagnostic export to download a session and bounded metadata-only troubleshooting logs as a ZIP. Run /export or pick Export session from a session's more menu. Web downloads are limited to 64 MiB.

Patch Changes

• #1638 7c889f3 Thanks @RealKai42! - In auto permission mode, plan exits are now marked as auto-approved (not user-reviewed) in both the tool result and the transcript, so the agent no longer treats automatic plan approval as a user signal to start executing.

• #1598 4feca6b Thanks @kermanx! - web: Recover transient subagent rate limits without surfacing them as session errors.

• #1635 e49b3b8 Thanks @sailist! - Request task-owned work to stop on session close, honoring background.keep_alive_on_exit for independent processes and background.kill_grace_period_ms before attempting force-stop.

• #1629 0527ca2 Thanks @sailist! - Fix session fork losing everything except the conversation log: forked sessions now carry over media attachments, plan files, background task output, and cron tasks, and a failed fork no longer leaves a broken half-copy behind.

• #1627 28e9dd4 Thanks @chengluyu! - web: Continue blocked goals after the user resumes them from the goal controls.

• #1631 2d874fb Thanks @sailist! - Fix a race where a heartbeat write in flight during server shutdown could recreate the instance file right after it was removed.

• #1663 1294a0e Thanks @7Sageer! - Fix OAuth login hanging after browser authorization when the provider configuration changes during sign-in.

• #1657 32a89c3 Thanks @RealKai42! - Prevent oversized image reads from poisoning sessions and recover existing request-too-large failures by removing unsafe media from provider requests.

• #1635 e49b3b8 Thanks @sailist! - Store background task records per agent again, so tasks written by older versions are found on resume and one agent's restore no longer marks another agent's tasks as lost.

• #1632 a4aae87 Thanks @sailist! - Fix providers without a configured base_url being rejected: anthropic/openai and other protocol providers now fall back to their official default endpoints again, as before.

• #1588 2061590 Thanks @liruifengv! - Fix pasted media being dropped from /skill and plugin command arguments.

• #1588 2061590 Thanks @liruifengv! - Fix pasted images being dropped when steering with Ctrl-S.

• #1629 0527ca2 Thanks @sailist! - Fix the v2 engine never activating tool-call deduplication: identical tool calls issued in the same step no longer execute multiple times, and repeated identical calls across steps receive escalating reminders again.

• #1441 ceb158d Thanks @sailist! - Fix a race in the experimental v2 config service that could drop a just-written setting from the config response.

• #1614 3c0e368 Thanks @chengluyu! - Fix a server crash when the first goal-mode prompt is submitted while the v2 agent is still starting.

• #1631 2d874fb Thanks @sailist! - Surface the provider's actual rejection message instead of a misleading re-login prompt when an OAuth-managed model keeps returning 401 after a token refresh.

• #1631 2d874fb Thanks @sailist! - Rewrite repeated-tool-call reminders to redirect the agent toward a different action instead of prohibiting the call, and treat a dismissed question prompt as no answer rather than the recommended option.

• #1636 8027fe2 Thanks @sailist! - Make file tools able to reach skill directories outside the working directory in the v2 engine (experimental), and honor --skillsDir in v2 print mode and the server's skillDirs option.

• #1630 0303b82 Thanks @sailist! - Fix ReadMediaFile results losing their image rendering after a session reload or resume on the v2 server backend.

• #1441 ceb158d Thanks @sailist! - Fix a storage race in the experimental v2 engine that could fail value reads when writes overlap with compaction.

• #1601 dc309a7 Thanks @kermanx! - web: Fix the context usage indicator dropping to 0 when a session is reopened or the session list reloads (e.g. after a sidebar search) — the cached live usage is now kept instead of the session record's all-zero placeholder.

• #1620 e91a616 Thanks @wbxl2000! - web: Fix duplicate user message bubbles after a session snapshot resync.

• #1672 88629ba Thanks @yicun! - web: Fix uploaded and persisted images failing to display on non-loopback server connections.

• #1609 e223549 Thanks @wbxl2000! - web: Fix a running multi-step turn rendering a duplicated wall of text after the page reconnects or refreshes mid-turn.

• #1611 32cbd0c Thanks @chengluyu! - web: Fix the workspace picker menu sizing too narrowly for its content.

• #1635 e49b3b8 Thanks @sailist! - Fix possible record loss when resuming sessions whose wire log needs migration, and reject session logs missing the version envelope instead of silently misreading them.

• #1441 ceb158d Thanks @sailist! - Fix MCP tools being unavailable on the first turn after session startup.

• #1580 83370f1 Thanks @wszqkzqk! - Fix bash auto-detection on Windows failing when git comes from a native MSYS2 toolchain (ucrt64/clang64/clangarm64).

• #1676 d1820ff Thanks @RealKai42! - Preserve empty model reasoning blocks across providers so multi-step tool calls can continue.

• #1669 490303d Thanks @chengluyu! - web: Refine goal mode controls with animated strip interactions, budget-aware progress, and design-system cancellation confirmation.

• #1597 d601847 Thanks @7Sageer! - Send the kimi-code-cli User-Agent on provider registry (api.json) and model catalog fetches, so registries can identify the client version.

• #1441 ceb158d Thanks @sailist! - Fix approval and question prompts not appearing in real time for web clients connected to the v2 server; they previously only showed up after a page refresh.

• #1441 ceb158d Thanks @sailist! - Log a warning when a skill fails to parse instead of silently dropping it, and fix the skill catalog so scanned skill roots and policy-skipped skills are actually reported.

• #1589 f338fcd Thanks @wbxl2000! - web: Fix the AgentSwarm member list disappearing after a page refresh while subagents are still running.

• #1591 83e1753 Thanks @liruifengv! - Optimize the TaskOutput tool prompts to discourage blocking waits on background tasks.

• #1441 ceb158d Thanks @sailist! - Enforce a typed registry for v2 engine telemetry events and redact URLs, tokens, and file paths from outgoing telemetry properties.

• #1624 3215129 Thanks @kermanx! - Fix the experimental v2 engine crashing when the first prompt is sent right after a new conversation is created (for example sending /goal on the web's new-conversation page): agent creation now joins the in-flight bootstrap instead of failing, and the v2 agent lifecycle is split into focused existence, sub-agent, and session MCP domains.

• #1637 0e0a6e9 Thanks @sailist! - Support caller-supplied MCP server configs on session create in the v2 engine (experimental), merged over the file config and under plugin servers.

• #1626 1c85f94 Thanks @sailist! - v2 engine: expose the prompt scheduler over /api/v2 for native clients, and add an experimental fault-injection service (KIMI_CODE_EXPERIMENTAL_FAULT_INJECTION) that arms a one-shot provider failure so the media-degraded / media-stripped recovery resends can be exercised end-to-end.

• #1441 ceb158d Thanks @sailist! - Introduce a graded error taxonomy for the v2 engine's filesystem, storage, and wire layers, translating raw OS and parse failures into specific error codes instead of generic internal errors.

• #1626 1c85f94 Thanks @sailist! - v2 engine: block unsupported image formats (AVIF, HEIC, BMP, TIFF, ICO) at every ingestion point so they can no longer poison session history, and auto-recover provider image-format rejections with a media-stripped resend.

• #1626 1c85f94 Thanks @sailist! - v2 engine: recover image-heavy sessions from provider request-size rejections (HTTP 413) by resending with older media degraded to text markers, re-encode oversized WebP images instead of passing them through, and keep downscaled PNGs readable by switching to JPEG below 1000px.

• #1613 b2daa40 Thanks @7Sageer! - Support the services.moonshot_search api-key config for WebSearch in the v2 engine, matching v1: the tool is now available without an OAuth login, and explicit config takes precedence over the OAuth-derived provider.

• #1590 8a4ee05 Thanks @sailist! - Fix bash auto-detection on Windows in the experimental v2 engine when git comes from a native MSYS2 toolchain (ucrt64/clang64/clangarm64).

• #1441 ceb158d Thanks @sailist! - Send the CLI identity headers (User-Agent and device identity) with outbound requests from the experimental v2 server, matching direct CLI runs.

• #1593 2185237 Thanks @kermanx! - Declare v2 engine wire op payloads with required zod schemas and derive their types from the schemas, with ops declared on their models and every op type registered for replay classification.

• #1441 ceb158d Thanks @sailist! - Keep sessions from the new agent engine compatible with existing transcript replay.

• #1592 924d5c9 Thanks @wbxl2000! - web: Show the connected backend engine (v1 / v2) in Settings, and add a dev-mode backend pill next to the sidebar brand that can switch the dev proxy between the two engines at runtime.

• #1606 2da45fc Thanks @liruifengv! - web: Fix the goal card disappearing after a page refresh while a session goal is active.

• #1587 49a8c84 Thanks @wbxl2000! - web: Let wide Markdown tables in the desktop chat grow up to 1040px with each column capped at 700px so long cell content wraps, temporarily hiding the conversation outline while a table passes under it; anything wider still scrolls inside the table.

@moonshot-ai/agent-core-v2@0.1.0

Minor Changes

• #1441 ceb158d Thanks @sailist! - Track the agent's live phase (idle, running, streaming, tool call, retrying, awaiting approval, interrupted, ended) as a single model field driven by the existing turn events, and carry it on the status update channel for downstream consumers.

• #1441 ceb158d Thanks @sailist! - Persist v2 wire records natively in the v1 record vocabulary and remove the persist-time rewrite layer: ops now write v1-shaped records directly (todo updates persist as tools.update_store, turn.prompt carries only input/origin, usage.record drops request context, plan_mode.enter carries only the plan id), live-only state (runtime phase, task/cron registries, context size, skill activations, runtime permission rules) is declared persist: false instead of being stripped at write time, and the swarm-mode exit reminder removal replays from the swarm_mode.exit record itself. This fixes resumed sessions losing the todo list, drifting turn counters after retries, and removed reminders reappearing after resume.

Patch Changes

• #1441 ceb158d Thanks @sailist! - Fix the v2 AskUserQuestion flow: answers now come back keyed by question text with option labels as values, aborting a turn or stopping a background question dismisses the pending question instead of leaking it, and duplicate question texts or option labels are rejected before the question is shown. The pending-question wire shape no longer carries a synthetic expires_at field.

• #1638 7c889f3 Thanks @RealKai42! - In auto permission mode, plan exits are now marked as auto-approved (not user-reviewed) in both the tool result and the transcript, so the agent no longer treats automatic plan approval as a user signal to start executing.

• #1441 ceb158d Thanks @sailist! - Fix the production build by resolving internal module imports directly instead of through directory re-exports.

• #1441 ceb158d Thanks @sailist! - Reorganize the agent execution environment into separate filesystem, process and tool domains.

• #1629 0527ca2 Thanks @sailist! - Fix session fork losing everything except the conversation log: forked sessions now carry over media attachments, plan files, background task output, and cron tasks, and a failed fork no longer leaves a broken half-copy behind.

• #1663 1294a0e Thanks @7Sageer! - Fix OAuth login hanging after browser authorization when the provider configuration changes during sign-in.

• #1632 a4aae87 Thanks @sailist! - Fix providers without a configured base_url being rejected: anthropic/openai and other protocol providers now fall back to their official default endpoints again, as before.

• #1629 0527ca2 Thanks @sailist! - Fix the v2 engine never activating tool-call deduplication: identical tool calls issued in the same step no longer execute multiple times, and repeated identical calls across steps receive escalating reminders again.

• #1636 8027fe2 Thanks @sailist! - Fix caller-supplied MCP servers being silently dropped when creating a session through the v2 engine (experimental).

• #1636 8027fe2 Thanks @sailist! - Make file tools able to reach skill directories outside the working directory in the v2 engine (experimental), and honor --skillsDir in v2 print mode and the server's skillDirs option.

• #1441 ceb158d Thanks @sailist! - Reroute the blob store backend from the host filesystem to the pluggable storage layer, so server-only deployments no longer require a local filesystem implementation.

• #1637 0e0a6e9 Thanks @sailist! - Support caller-supplied MCP server configs on session create in the v2 engine (experimental), merged over the file config and under plugin servers.

• #1441 ceb158d Thanks @sailist! - Route FetchURL through the managed Kimi fetch service when the Kimi provider is logged in, with automatic fallback to local fetching on failure, and forward the host identity headers with the request.

• #1634 96b8328 Thanks @sailist! - Fix v2 managed OAuth login ignoring KIMI_CODE_BASE_URL / KIMI_CODE_OAUTH_HOST: the login environment is now resolved env-aware (v1 parity), so the credential slot a token is written to always matches the slot the runtime reads — no more "login succeeds but every call 401s" against non-default environments. The provisioned provider entry records the login environment and credential slot explicitly, and logout deletes from the runtime (env-aware) slot.

• #1441 ceb158d Thanks @sailist! - Hide image-compression captions from user-visible history: captions that prompt ingestion places inside a user message are rerouted through hidden system reminders (and stripped from session titles), while the model still receives the full note. ReadMediaFile is now registered in production whenever the bound model supports image or video input, re-registering on model switches.

• #1441 ceb158d Thanks @sailist! - Align v2 media reads with v1: the ReadMediaFile summary moves to the tool result's note side channel so raw <system> markup never renders in UIs, image dimensions are reported in the decoded EXIF-rotated space so portrait photos get correct coordinate guidance, the downscale cap rises from 2000px to 3000px with a gentler byte-budget fallback, and image compression and crop telemetry is reported for media reads.

• #1633 5d1f904 Thanks @sailist! - Fix the v2 messages API serving broken history after resume: restored blobref: media URLs are rehydrated to inline data: URIs from the agent's blob store (matching live emissions), tool results carrying media (e.g. ReadMediaFile) pass their content parts through instead of being flattened to empty text, and created_at uses the wire record time instead of a synthesized session-start offset.

• #1677 003e583 Thanks @sailist! - Fix the v2 model catalog response omitting support_efforts and default_effort, restoring thinking-effort selection for clients connected to the v2 backend.

• #1441 ceb158d Thanks @sailist! - Fix the managed OAuth device-code login getting aborted when an unrelated provider refresh fires during the login flow.

• #1441 ceb158d Thanks @sailist! - Harden plugin management: degrade sessions gracefully when plugin state fails to load, clean up temp dirs and roll back the managed copy on failed installs, restore managed endpoint env for stdio plugin MCP servers, and make update checks concurrent with per-repo failure isolation.

• #1441 ceb158d Thanks @sailist! - Forward the host identity headers (User-Agent and device identity) with WebSearch requests, matching v1.

• #1441 ceb158d Thanks @sailist! - Align v2 engine telemetry with the v1 wire format: rename tool_call_dedupe_detected to tool_call_dedup_detected, carry mode/protocol tags on turn events, emit turn_ended unconditionally with interrupt reasons, add alias/protocol/input token fields to api_error, tag tool_call with dup_type, rename compaction usage fields to input_tokens/output_tokens, and add context_projection_repaired, session_started, and session_load_failed events.

• #1602 09c1c32 Thanks @kermanx! - Align the v2 engine with v1 on several parity gaps: the auto permission mode reminder is re-announced after compaction instead of being lost, goal reminders and the background-task reminder now match v1's exact text, and the goal tools are main-agent-only again.

• #1441 ceb158d Thanks @sailist! - Report video_upload telemetry for ReadMediaFile video uploads — outcome, byte size, mime type, duration, and model/protocol tags; a failing telemetry sink never affects the upload.

• Updated dependencies [ceb158d, 0303b82]:

  • @moonshot-ai/protocol@0.4.0

@moonshot-ai/protocol@0.4.0

Minor Changes

• #1441 ceb158d Thanks @sailist! - Track the agent's live phase (idle, running, streaming, tool call, retrying, awaiting approval, interrupted, ended) as a single model field driven by the existing turn events, and carry it on the status update channel for downstream consumers.

Patch Changes

• #1630 0303b82 Thanks @sailist! - Make the server_hello heartbeat_ms field optional so spec-compliant clients no longer reject handshakes from servers that do not advertise a heartbeat interval.

@moonshot-ai/agent-core@0.15.4

Patch Changes

• #1638 7c889f3 Thanks @RealKai42! - In auto permission mode, plan exits are now marked as auto-approved (not user-reviewed) in both the tool result and the transcript, so the agent no longer treats automatic plan approval as a user signal to start executing.

• Updated dependencies [ceb158d, 0303b82]:

  • @moonshot-ai/protocol@0.4.0

@moonshot-ai/kap-server@0.0.1

Patch Changes

• #1441 ceb158d Thanks @sailist! - Fix the v2 AskUserQuestion flow: answers now come back keyed by question text with option labels as values, aborting a turn or stopping a background question dismisses the pending question instead of leaking it, and duplicate question texts or option labels are rejected before the question is shown. The pending-question wire shape no longer carries a synthetic expires_at field.

• #1638 7c889f3 Thanks @RealKai42! - In auto permission mode, plan exits are now marked as auto-approved (not user-reviewed) in both the tool result and the transcript, so the agent no longer treats automatic plan approval as a user signal to start executing.

• #1441 ceb158d Thanks @sailist! - Reorganize the agent execution environment into separate filesystem, process and tool domains.

• #1636 8027fe2 Thanks @sailist! - Make file tools able to reach skill directories outside the working directory in the v2 engine (experimental), and honor --skillsDir in v2 print mode and the server's skillDirs option.

• #1601 dc309a7 Thanks @kermanx! - Report the live (measured + estimated) context size in the v2 server's v1-compatible status stream instead of the measured-only count, which read 0 until the first model response of a session completed and could dip mid-turn while the context was being rewritten.

• #1617 4ec2e7f Thanks @sailist! - Run the local server (kimi server run / kimi web) on the agent-core-v2 engine by default — the KIMI_CODE_EXPERIMENTAL_FLAG opt-in is no longer needed, and the legacy v1 server package has been removed.

• #1441 ceb158d Thanks @sailist! - Reroute the blob store backend from the host filesystem to the pluggable storage layer, so server-only deployments no longer require a local filesystem implementation.

• #1441 ceb158d Thanks @sailist! - Fix the managed OAuth device-code login getting aborted when an unrelated provider refresh fires during the login flow.

• Updated dependencies [ceb158d, ceb158d, 7c889f3, ceb158d, ceb158d, 0527ca2, 1294a0e, a4aae87, 0303b82, 0527ca2, 8027fe2, 8027fe2, ceb158d, 0e0a6e9, ceb158d, 96b8328, ceb158d, ceb158d, 5d1f904, 003e583, ceb158d, ceb158d, ceb158d, ceb158d, 09c1c32, ceb158d, ceb158d]:

  • @moonshot-ai/agent-core-v2@0.1.0
  • @moonshot-ai/protocol@0.4.0

@moonshot-ai/klient@0.0.1

Patch Changes

• Updated dependencies [ceb158d, ceb158d, 7c889f3, ceb158d, ceb158d, 0527ca2, 1294a0e, a4aae87, 0527ca2, 8027fe2, 8027fe2, ceb158d, 0e0a6e9, ceb158d, 96b8328, ceb158d, ceb158d, 5d1f904, 003e583, ceb158d, ceb158d, ceb158d, ceb158d, 09c1c32, ceb158d, ceb158d]:
  • @moonshot-ai/agent-core-v2@0.1.0