Files
Kigi-CLI/crates/codegen/kigi-shell/Cargo.toml
T
ZacharyZhang-NY ea0ce9d15f F3: Kimi inference pipeline + full grok cloud-surface excision
Sampler / inference (PRD F3):
- kimi_compat.rs: single adaptation point for the Kimi chat/completions
  dialect (thinking-field mapping, model_id stripping, empty-content
  tool-call message fix, stream_options.include_usage), with kimi-cli
  source citations
- Rate-limit handling reworked for Kimi/Moonshot semantics; UA kigi/{version}
- /models replaces the xAI models-v2 endpoint everywhere; idle model
  refresh carries X-Msh-* device headers only (X-XAI-Token-Auth and
  x-grok-client-mode/CLIENT_MODE_HEADER machinery deleted)

Cloud-surface excision (PRD §5, zero-egress):
- remote/ conversations lane, cli-chat-proxy-types crate, prod/ dir,
  share command, credit bar: deleted (single local session lane;
  paginate() replaces merge_and_paginate)
- Subscription/tier gate stack deleted end-to-end: AppView
  gate/tier/team/ZDR fields, app/subscription.rs watch loop,
  dispatch/billing.rs paywall + SuperGrok upsell, free-usage-exhausted
  chain, tier-restricted commands, GateInfo, RemoteSettings gate fields,
  SettingsUpdateNotification gate fields
- /privacy + coding-data-sharing setting deleted (backed by a dead xAI
  RPC; Kigi is zero-egress — nothing to share or retain remotely)

Auth UX correctness (user-reported):
- Device-flow fixtures now mirror the live Kimi payload shape
  (https://www.kimi.com/code/authorize_device?user_code=..., verified
  against auth.kimi.com); the fabricated auth.kimi.com/device?code=...
  URLs are gone
- open_browser_detached is a no-op under cfg(test): unit tests drove
  wiremock fixture URLs into the real browser (root cause of the
  "garbage mock link" ABCD-1234 tabs)
- Welcome/pager-minimal rebrand: Grok Build -> Kigi, grok.com ->
  kimi.com, "Sign in to Grok" -> "Sign in to Kimi"
2026-07-17 16:05:51 -04:00

230 lines
8.1 KiB
TOML

[package]
license = "Apache-2.0"
name = "kigi-shell"
version.workspace = true
edition.workspace = true
[features]
default = []
unstable = []
default-bazel = [
]
[dependencies]
dunce = { workspace = true }
tonic-prost = { workspace = true, optional = true }
agent-client-protocol = { workspace = true }
anyhow = { workspace = true }
kigi-prompt-queue = { workspace = true }
kigi-version = { workspace = true }
async-openai = { workspace = true }
async-trait = { workspace = true }
blake3 = { workspace = true }
bm25 = "2.3"
bytes = { workspace = true }
chrono = { workspace = true }
indexmap = { workspace = true, features = ["serde"] }
ignore = { workspace = true }
jsonschema = { workspace = true }
futures = { workspace = true }
glob = { workspace = true }
globset = { workspace = true }
kanal = "0.1"
regex = { workspace = true }
# rmcp 2.1 + reqwest 0.13 are quarantined inside `kigi-mcp`. The remaining
# MCP code in this crate (extensions/mcp.rs, mcp_doctor.rs) reaches rmcp model
# types via `kigi_mcp::rmcp::model::*`. reqwest 0.13 is a private impl
# detail of kigi-mcp::servers; shell never sees it. Every HTTP call site
# in this crate uses workspace reqwest 0.12.
kigi-mcp = { workspace = true }
reqwest = { workspace = true, features = ["stream", "blocking"] }
reqwest-middleware = { workspace = true }
# rusqlite 0.37 + bundled = self-contained SQLite (>= 3.50.2) with FTS5.
# Bumped from 0.32 to resolve CVE-2025-29087, CVE-2025-3277, CVE-2025-6965.
# sqlite-vec is C ABI, not Rust-version dependent — any rusqlite with `bundled` works.
rusqlite = { version = "0.37", features = ["bundled"] }
serde = { workspace = true }
serde_ignored = "0.1"
serde_json = { workspace = true, features = ["preserve_order"] }
similar = { workspace = true }
thiserror = { workspace = true }
clap = { workspace = true }
dirs = "6"
tokio-stream = { workspace = true }
tower-http = { workspace = true, features = ["cors"] }
toml = { workspace = true, features = ["preserve_order"] }
toml_edit = { workspace = true }
tokio = { workspace = true, features = [
"io-std",
"process",
"rt",
"macros",
"rt-multi-thread",
"net",
"sync",
] }
tracing = { workspace = true }
tracing-subscriber = { workspace = true, features = [
"env-filter",
"fmt",
"json",
"time",
] }
obfstr = { workspace = true }
tokio-util = { workspace = true, features = ["compat"] }
tokio-retry = { workspace = true }
uuid = { workspace = true, features = ["v4", "v5", "v7"] }
kigi-acp-lib = { workspace = true }
axum = { workspace = true, features = ["ws", "multipart"] }
backon = { workspace = true }
webbrowser = { workspace = true }
tokio-tungstenite = { workspace = true, features = ["rustls-tls-native-roots"] }
tokio-rustls = { version = "0.26", default-features = false, features = [
"ring",
"logging",
"tls12",
] }
rustls = { version = "0.23", default-features = false, features = [
"ring",
"logging",
"std",
"tls12",
] }
rustls-native-certs = "0.8"
futures-util = { workspace = true }
urlencoding = { workspace = true }
gethostname = { workspace = true }
git2 = { workspace = true }
notify = { workspace = true }
notify-debouncer-mini = { workspace = true }
nucleo = { workspace = true }
arc-swap = { workspace = true }
infer = "0.15"
image = { workspace = true, features = ["png", "jpeg", "gif", "webp"] }
moka = { workspace = true, features = ["future"] }
base64 = { workspace = true }
jsonwebtoken = { version = "10", features = ["rust_crypto"] }
sha2 = { workspace = true }
rand = { workspace = true }
shlex = { workspace = true }
strum = { workspace = true }
kigi-fast-worktree = { path = "../kigi-fast-worktree", features = ["metadata"] }
tonic = { workspace = true, optional = true }
prost = { workspace = true, optional = true }
kigi-paths = { path = "../kigi-paths" }
kigi-shell-base = { workspace = true }
kigi-env = { workspace = true }
kigi-shell-session-support = { workspace = true }
kigi-shared = { workspace = true }
kigi-tracing-macros = { path = "../kigi-tracing-macros" }
kigi-fsnotify = { path = "../kigi-fsnotify" }
kigi-codebase-graph = { path = "../kigi-codebase-graph" }
kigi-hunk-tracker = { path = "../kigi-hunk-tracker" }
kigi-agent-lifecycle = { workspace = true }
kigi-interjection-core = { workspace = true }
kigi-sandbox = { path = "../kigi-sandbox", default-features = false }
kigi-chat-state = { path = "../kigi-chat-state" }
kigi-compaction = { path = "../../common/kigi-compaction" }
kigi-sampler = { path = "../kigi-sampler" }
kigi-sqlite-journal = { workspace = true }
kigi-token-estimation = { workspace = true }
kigi-sampling-types = { path = "../kigi-sampling-types" }
kigi-tools = { path = "../kigi-tools" }
kigi-tty-utils = { workspace = true }
kigi-system-power = { workspace = true }
kigi-workspace = { workspace = true }
kigi-subagent-resolution = { path = "../kigi-subagent-resolution" }
kigi-agent = { path = "../kigi-agent" }
kigi-config = { workspace = true }
kigi-config-types = { workspace = true }
kigi-memory = { workspace = true }
kigi-hooks = { path = "../kigi-hooks" }
kigi-hooks-plugins-types = { path = "../kigi-hooks-plugins-types" }
kigi-file-utils = { path = "../kigi-file-utils" }
kigi-auth = { workspace = true, features = ["middleware"] }
kigi-log = { workspace = true }
kigi-http = { workspace = true }
kigi-models = { workspace = true }
flate2 = { workspace = true }
fs2 = { workspace = true }
zstd = { workspace = true }
tar = { workspace = true }
url = { workspace = true }
walkdir = { workspace = true }
tdigests = "1.0"
semver = { workspace = true }
process-wrap = { version = "9.0.0", features = ["tokio1", "job-object", "creation-flags"] }
portable-pty = "0.9"
parking_lot.workspace = true
dashmap.workspace = true
# Used by acp_session.rs and mcp_servers.rs for the unified
# kigi_tool_runtime::Tool dispatch model and the computer-hub MCP adapter.
kigi-computer-hub-sdk = { workspace = true }
kigi-tool-runtime = { workspace = true }
kigi-tool-protocol = { workspace = true }
kigi-tool-types = { workspace = true }
[target.'cfg(unix)'.dependencies]
libc = { workspace = true }
nix = { workspace = true }
[target.'cfg(target_os = "macos")'.dependencies]
# System-keyring credential storage for the Kimi Code OAuth session (PRD F1).
keyring = { workspace = true, features = ["apple-native"] }
[target.'cfg(windows)'.dependencies]
siphasher = { workspace = true }
windows = { workspace = true }
# System-keyring credential storage for the Kimi Code OAuth session (PRD F1).
keyring = { workspace = true, features = ["windows-native"] }
[dev-dependencies]
criterion = { workspace = true }
wiremock = { workspace = true }
filetime = { workspace = true }
tempfile = { workspace = true }
kigi-memory = { workspace = true, features = [] }
kigi-workspace = { workspace = true, features = ["test-support"] }
# Feature-unification applies the signing seam to the lib when building tests, so
# integration tests can inject a throwaway trusted key; production builds exclude
# dev-deps and compile the seam out.
kigi-config = { workspace = true, features = ["test-support"] }
# Ed25519 signing for the managed-config signature tests.
ring = { workspace = true }
tar = { workspace = true }
flate2 = { workspace = true }
rsa = { workspace = true }
semver = { workspace = true }
serial_test = { workspace = true }
# Test-only builds expose `env::EnvVarGuard` and the cpu_profile test seams to
# this crate's test targets.
kigi-shell-base = { workspace = true, features = [] }
kigi-test-support = { workspace = true, features = [] }
kigi-test-utils = { workspace = true }
# `test-util` enables `#[tokio::test(start_paused = true)]` (paused virtual
# clock with auto-advance) so interval-driven loop tests in `auth::refresh`
# can assert exact tick counts deterministically without real-time sleep.
tokio = { workspace = true, features = ["test-util"] }
[dependencies.tempfile]
workspace = true
[[bench]]
name = "session_list"
harness = false
[lints]
workspace = true
[build-dependencies]
# build.rs only downloads ripgrep — no rmcp involvement. Workspace reqwest
# (0.12) is plenty.
reqwest = { workspace = true, features = ["blocking"] }
flate2 = { workspace = true }
tar = { workspace = true }
[[bin]]
name = "chat-history-downgrade"
path = "src/bin/chat-history-downgrade.rs"