Sampler / inference (PRD F3):
- kimi_compat.rs: single adaptation point for the Kimi chat/completions
dialect (thinking-field mapping, model_id stripping, empty-content
tool-call message fix, stream_options.include_usage), with kimi-cli
source citations
- Rate-limit handling reworked for Kimi/Moonshot semantics; UA kigi/{version}
- /models replaces the xAI models-v2 endpoint everywhere; idle model
refresh carries X-Msh-* device headers only (X-XAI-Token-Auth and
x-grok-client-mode/CLIENT_MODE_HEADER machinery deleted)
Cloud-surface excision (PRD §5, zero-egress):
- remote/ conversations lane, cli-chat-proxy-types crate, prod/ dir,
share command, credit bar: deleted (single local session lane;
paginate() replaces merge_and_paginate)
- Subscription/tier gate stack deleted end-to-end: AppView
gate/tier/team/ZDR fields, app/subscription.rs watch loop,
dispatch/billing.rs paywall + SuperGrok upsell, free-usage-exhausted
chain, tier-restricted commands, GateInfo, RemoteSettings gate fields,
SettingsUpdateNotification gate fields
- /privacy + coding-data-sharing setting deleted (backed by a dead xAI
RPC; Kigi is zero-egress — nothing to share or retain remotely)
Auth UX correctness (user-reported):
- Device-flow fixtures now mirror the live Kimi payload shape
(https://www.kimi.com/code/authorize_device?user_code=..., verified
against auth.kimi.com); the fabricated auth.kimi.com/device?code=...
URLs are gone
- open_browser_detached is a no-op under cfg(test): unit tests drove
wiremock fixture URLs into the real browser (root cause of the
"garbage mock link" ABCD-1234 tabs)
- Welcome/pager-minimal rebrand: Grok Build -> Kigi, grok.com ->
kimi.com, "Sign in to Grok" -> "Sign in to Kimi"
230 lines
8.1 KiB
TOML
230 lines
8.1 KiB
TOML
[package]
|
|
license = "Apache-2.0"
|
|
name = "kigi-shell"
|
|
version.workspace = true
|
|
edition.workspace = true
|
|
|
|
[features]
|
|
default = []
|
|
unstable = []
|
|
default-bazel = [
|
|
]
|
|
|
|
[dependencies]
|
|
dunce = { workspace = true }
|
|
tonic-prost = { workspace = true, optional = true }
|
|
agent-client-protocol = { workspace = true }
|
|
anyhow = { workspace = true }
|
|
kigi-prompt-queue = { workspace = true }
|
|
kigi-version = { workspace = true }
|
|
|
|
async-openai = { workspace = true }
|
|
async-trait = { workspace = true }
|
|
blake3 = { workspace = true }
|
|
bm25 = "2.3"
|
|
bytes = { workspace = true }
|
|
chrono = { workspace = true }
|
|
indexmap = { workspace = true, features = ["serde"] }
|
|
ignore = { workspace = true }
|
|
jsonschema = { workspace = true }
|
|
futures = { workspace = true }
|
|
glob = { workspace = true }
|
|
globset = { workspace = true }
|
|
kanal = "0.1"
|
|
regex = { workspace = true }
|
|
# rmcp 2.1 + reqwest 0.13 are quarantined inside `kigi-mcp`. The remaining
|
|
# MCP code in this crate (extensions/mcp.rs, mcp_doctor.rs) reaches rmcp model
|
|
# types via `kigi_mcp::rmcp::model::*`. reqwest 0.13 is a private impl
|
|
# detail of kigi-mcp::servers; shell never sees it. Every HTTP call site
|
|
# in this crate uses workspace reqwest 0.12.
|
|
kigi-mcp = { workspace = true }
|
|
reqwest = { workspace = true, features = ["stream", "blocking"] }
|
|
reqwest-middleware = { workspace = true }
|
|
# rusqlite 0.37 + bundled = self-contained SQLite (>= 3.50.2) with FTS5.
|
|
# Bumped from 0.32 to resolve CVE-2025-29087, CVE-2025-3277, CVE-2025-6965.
|
|
# sqlite-vec is C ABI, not Rust-version dependent — any rusqlite with `bundled` works.
|
|
rusqlite = { version = "0.37", features = ["bundled"] }
|
|
serde = { workspace = true }
|
|
serde_ignored = "0.1"
|
|
serde_json = { workspace = true, features = ["preserve_order"] }
|
|
similar = { workspace = true }
|
|
thiserror = { workspace = true }
|
|
clap = { workspace = true }
|
|
dirs = "6"
|
|
tokio-stream = { workspace = true }
|
|
tower-http = { workspace = true, features = ["cors"] }
|
|
toml = { workspace = true, features = ["preserve_order"] }
|
|
toml_edit = { workspace = true }
|
|
tokio = { workspace = true, features = [
|
|
"io-std",
|
|
"process",
|
|
"rt",
|
|
"macros",
|
|
"rt-multi-thread",
|
|
"net",
|
|
"sync",
|
|
] }
|
|
tracing = { workspace = true }
|
|
tracing-subscriber = { workspace = true, features = [
|
|
"env-filter",
|
|
"fmt",
|
|
"json",
|
|
"time",
|
|
] }
|
|
obfstr = { workspace = true }
|
|
tokio-util = { workspace = true, features = ["compat"] }
|
|
tokio-retry = { workspace = true }
|
|
uuid = { workspace = true, features = ["v4", "v5", "v7"] }
|
|
kigi-acp-lib = { workspace = true }
|
|
axum = { workspace = true, features = ["ws", "multipart"] }
|
|
backon = { workspace = true }
|
|
webbrowser = { workspace = true }
|
|
tokio-tungstenite = { workspace = true, features = ["rustls-tls-native-roots"] }
|
|
tokio-rustls = { version = "0.26", default-features = false, features = [
|
|
"ring",
|
|
"logging",
|
|
"tls12",
|
|
] }
|
|
rustls = { version = "0.23", default-features = false, features = [
|
|
"ring",
|
|
"logging",
|
|
"std",
|
|
"tls12",
|
|
] }
|
|
rustls-native-certs = "0.8"
|
|
futures-util = { workspace = true }
|
|
urlencoding = { workspace = true }
|
|
gethostname = { workspace = true }
|
|
git2 = { workspace = true }
|
|
notify = { workspace = true }
|
|
notify-debouncer-mini = { workspace = true }
|
|
nucleo = { workspace = true }
|
|
arc-swap = { workspace = true }
|
|
infer = "0.15"
|
|
image = { workspace = true, features = ["png", "jpeg", "gif", "webp"] }
|
|
moka = { workspace = true, features = ["future"] }
|
|
base64 = { workspace = true }
|
|
jsonwebtoken = { version = "10", features = ["rust_crypto"] }
|
|
sha2 = { workspace = true }
|
|
rand = { workspace = true }
|
|
shlex = { workspace = true }
|
|
strum = { workspace = true }
|
|
kigi-fast-worktree = { path = "../kigi-fast-worktree", features = ["metadata"] }
|
|
|
|
tonic = { workspace = true, optional = true }
|
|
prost = { workspace = true, optional = true }
|
|
kigi-paths = { path = "../kigi-paths" }
|
|
kigi-shell-base = { workspace = true }
|
|
kigi-env = { workspace = true }
|
|
kigi-shell-session-support = { workspace = true }
|
|
kigi-shared = { workspace = true }
|
|
kigi-tracing-macros = { path = "../kigi-tracing-macros" }
|
|
kigi-fsnotify = { path = "../kigi-fsnotify" }
|
|
kigi-codebase-graph = { path = "../kigi-codebase-graph" }
|
|
kigi-hunk-tracker = { path = "../kigi-hunk-tracker" }
|
|
kigi-agent-lifecycle = { workspace = true }
|
|
kigi-interjection-core = { workspace = true }
|
|
kigi-sandbox = { path = "../kigi-sandbox", default-features = false }
|
|
kigi-chat-state = { path = "../kigi-chat-state" }
|
|
kigi-compaction = { path = "../../common/kigi-compaction" }
|
|
kigi-sampler = { path = "../kigi-sampler" }
|
|
kigi-sqlite-journal = { workspace = true }
|
|
kigi-token-estimation = { workspace = true }
|
|
kigi-sampling-types = { path = "../kigi-sampling-types" }
|
|
kigi-tools = { path = "../kigi-tools" }
|
|
kigi-tty-utils = { workspace = true }
|
|
kigi-system-power = { workspace = true }
|
|
kigi-workspace = { workspace = true }
|
|
kigi-subagent-resolution = { path = "../kigi-subagent-resolution" }
|
|
kigi-agent = { path = "../kigi-agent" }
|
|
kigi-config = { workspace = true }
|
|
kigi-config-types = { workspace = true }
|
|
kigi-memory = { workspace = true }
|
|
kigi-hooks = { path = "../kigi-hooks" }
|
|
kigi-hooks-plugins-types = { path = "../kigi-hooks-plugins-types" }
|
|
kigi-file-utils = { path = "../kigi-file-utils" }
|
|
kigi-auth = { workspace = true, features = ["middleware"] }
|
|
kigi-log = { workspace = true }
|
|
kigi-http = { workspace = true }
|
|
kigi-models = { workspace = true }
|
|
flate2 = { workspace = true }
|
|
fs2 = { workspace = true }
|
|
zstd = { workspace = true }
|
|
tar = { workspace = true }
|
|
url = { workspace = true }
|
|
walkdir = { workspace = true }
|
|
tdigests = "1.0"
|
|
semver = { workspace = true }
|
|
process-wrap = { version = "9.0.0", features = ["tokio1", "job-object", "creation-flags"] }
|
|
portable-pty = "0.9"
|
|
parking_lot.workspace = true
|
|
dashmap.workspace = true
|
|
|
|
# Used by acp_session.rs and mcp_servers.rs for the unified
|
|
# kigi_tool_runtime::Tool dispatch model and the computer-hub MCP adapter.
|
|
kigi-computer-hub-sdk = { workspace = true }
|
|
kigi-tool-runtime = { workspace = true }
|
|
kigi-tool-protocol = { workspace = true }
|
|
kigi-tool-types = { workspace = true }
|
|
|
|
[target.'cfg(unix)'.dependencies]
|
|
libc = { workspace = true }
|
|
nix = { workspace = true }
|
|
|
|
[target.'cfg(target_os = "macos")'.dependencies]
|
|
# System-keyring credential storage for the Kimi Code OAuth session (PRD F1).
|
|
keyring = { workspace = true, features = ["apple-native"] }
|
|
|
|
[target.'cfg(windows)'.dependencies]
|
|
siphasher = { workspace = true }
|
|
windows = { workspace = true }
|
|
# System-keyring credential storage for the Kimi Code OAuth session (PRD F1).
|
|
keyring = { workspace = true, features = ["windows-native"] }
|
|
|
|
[dev-dependencies]
|
|
criterion = { workspace = true }
|
|
wiremock = { workspace = true }
|
|
filetime = { workspace = true }
|
|
tempfile = { workspace = true }
|
|
kigi-memory = { workspace = true, features = [] }
|
|
kigi-workspace = { workspace = true, features = ["test-support"] }
|
|
# Feature-unification applies the signing seam to the lib when building tests, so
|
|
# integration tests can inject a throwaway trusted key; production builds exclude
|
|
# dev-deps and compile the seam out.
|
|
kigi-config = { workspace = true, features = ["test-support"] }
|
|
# Ed25519 signing for the managed-config signature tests.
|
|
ring = { workspace = true }
|
|
tar = { workspace = true }
|
|
flate2 = { workspace = true }
|
|
rsa = { workspace = true }
|
|
semver = { workspace = true }
|
|
serial_test = { workspace = true }
|
|
# Test-only builds expose `env::EnvVarGuard` and the cpu_profile test seams to
|
|
# this crate's test targets.
|
|
kigi-shell-base = { workspace = true, features = [] }
|
|
kigi-test-support = { workspace = true, features = [] }
|
|
kigi-test-utils = { workspace = true }
|
|
# `test-util` enables `#[tokio::test(start_paused = true)]` (paused virtual
|
|
# clock with auto-advance) so interval-driven loop tests in `auth::refresh`
|
|
# can assert exact tick counts deterministically without real-time sleep.
|
|
tokio = { workspace = true, features = ["test-util"] }
|
|
|
|
[dependencies.tempfile]
|
|
workspace = true
|
|
|
|
[[bench]]
|
|
name = "session_list"
|
|
harness = false
|
|
|
|
[lints]
|
|
workspace = true
|
|
[build-dependencies]
|
|
# build.rs only downloads ripgrep — no rmcp involvement. Workspace reqwest
|
|
# (0.12) is plenty.
|
|
reqwest = { workspace = true, features = ["blocking"] }
|
|
flate2 = { workspace = true }
|
|
tar = { workspace = true }
|
|
[[bin]]
|
|
name = "chat-history-downgrade"
|
|
path = "src/bin/chat-history-downgrade.rs"
|