Kimi Code Updates & Release Notes

Minor Changes

• #1822 a5c568d Thanks @liruifengv! - Add the /copy slash command to copy the last assistant message to the clipboard.
• #1824 bfecd01 Thanks @liruifengv! - Using an API key for Kimi coding models now also fetches the latest model list automatically.

Patch Changes

• #1811 cec15e2 Thanks @liruifengv! - Fix Esc and Ctrl+C cancelling compaction instead of closing an open /btw panel.
• #1806 9b49694 Thanks @sailist! - Mount the dev-only /api/v1/debug RPC surface behind the --debug-endpoints flag, exposing every scoped service for local debugging on loopback binds. Pass --debug-endpoints to kimi server run to enable it.
• #1788 365ba00 Thanks @RealKai42! - Fix /export-debug-zip and kimi export overwriting the previous ZIP archive when run repeatedly on the same session; the default export filename now includes a timestamp.
• #1840 fa7e4ba Thanks @7Sageer! - Fix AGENTS.md files installed as symbolic links being ignored by the web backend.
• #1829 1b907b0 Thanks @RealKai42! - Fix whitespace-only thinking content rendering as a blank bullet line in the transcript, both while streaming and when replaying session history.
• #1809 56a321d Thanks @sailist! - web: Fix duplicate workspace groups on Windows when the same folder is opened with different path spellings, such as a different drive-letter casing; all of the folder's sessions now list under the single merged group.
• #1847 56ba8e0 Thanks @wbxl2000! - web: Fix LaTeX formulas rendering as garbled overlapping text when the web UI is accessed over the network; the server's content security policy now allows the inline styles that math and code highlighting rely on, while scripts remain strictly restricted.
• #1816 44f3341 Thanks @sailist! - Harden the embedded key-value engine's durability: WAL compaction now always terminates under sustained write storms instead of chasing the tail forever, a committed write can no longer slip through a compaction rotation undetected, torn WAL tails no longer misplace later disk-mode value pointers, read-only opens never create or modify database files or compact under a live writer, corrupt index-definition files no longer force a full rebuild, stale compaction temp files are cleaned on open, and the process lock can no longer be taken over by several processes at once.
• #1816 44f3341 Thanks @sailist! - Speed up the embedded key-value engine under stress: queries with skip/limit now stream candidates instead of decoding every match first, LRU eviction picks victims in O(1) instead of scanning every key, bursts of simultaneously expired TTL keys are drained within seconds, existence checks and size counting no longer read values when they only need metadata, and one oversized token can no longer poison the full-text index.
• #1816 44f3341 Thanks @sailist! - Cluster readers of the embedded key-value engine now catch up incrementally by replaying only newly appended WAL frames after another process writes, instead of fully reopening the shard on every read; cross-process read latency drops by orders of magnitude at larger shard sizes, and readers still fall back to a full reopen after WAL rotation or truncation.
• #1816 44f3341 Thanks @sailist! - Keep the embedded key-value engine writable when a WAL compaction rotation fails mid-way instead of wedging it until reopen, stop a rolled-back write from erasing a concurrently committed value for the same key, let the RESP server survive aborted connections, recover after oversized requests, and answer each pipelined command independently, and keep the previous full-text index intact when a postings rebuild fails.
• #1808 b53e00d Thanks @wbxl2000! - Include the underlying network cause (DNS failure, refused connection, TLS or timeout errors) in OAuth connection error messages instead of a bare "fetch failed".
• #1790 373abb0 Thanks @RealKai42! - Fix repeated request rejections after an interrupted model response by recording tool calls that never ran and closing them with an interrupted result.
• #1791 3144972 Thanks @sailist! - Fix the built-in URL fetch tool's network safeguards: crafted domains and redirect chains can no longer reach loopback or internal network services.
• #1787 319001a Thanks @sailist! - web: Remove per-workspace git repo badges and branch labels; branch, PR, and diff status remain shown for the active session.
• #1838 9e12484 Thanks @wbxl2000! - web: Remember the thinking level per model, fixing an empty and unresponsive thinking picker when the active model does not support a previously stored level.
• #1833 03021b6 Thanks @wbxl2000! - web: Fix queued messages silently re-sending previously uploaded files when a session is reopened.

Features

• Add the /copy slash command to copy the last assistant message to the clipboard.
• Using an API key for Kimi coding models now also fetches the latest model list automatically.

Polish

• OAuth connection errors now include the underlying network cause (DNS, refused connection, TLS, or timeout) instead of a bare "fetch failed".

Bug Fixes

• Fix repeated request rejections after an interrupted model response.
• Fix the built-in URL fetch tool's network safeguards: crafted domains and redirect chains can no longer reach loopback or internal network services.
• web: Fix LaTeX formulas rendering as garbled overlapping text when the web UI is accessed over the network.
• web: Fix queued messages silently re-sending previously uploaded files when a session is reopened.
• web: Remember the thinking level per model, fixing an empty, unresponsive thinking picker when the model doesn't support the stored level.
• web: Fix duplicate workspace groups on Windows when the same folder is opened with different path spellings; its sessions now list under one merged group.
• Fix AGENTS.md files installed as symbolic links being ignored by the web backend.
• Fix Esc and Ctrl+C cancelling compaction instead of closing an open /btw panel.
• Fix whitespace-only thinking content rendering as a blank line in the transcript.
• Fix /export-debug-zip and kimi export overwriting the previous ZIP on repeated runs for the same session; the default filename now includes a timestamp.

/copy for the last reply

New /copy slash command copies the last assistant message to the clipboard — no more manually selecting long answers. →

Auto-refresh of the model list for API key users

When calling Kimi coding models with an API key, Kimi Code now automatically fetches the latest model list, so new models are usable without manual config changes. →

Also in this release:

OAuth connection failures now show the underlying network cause (DNS, refused connection, TLS, timeout) instead of a bare fetch failed; the built-in URL fetch tool's network safeguards are hardened so crafted domains and redirect chains can no longer reach loopback or internal network services.

Minor Changes

• #1776 ffaf0b9 Thanks @sailist! - Expand the coder subagent tool set to include background tasks, todo lists, plan mode, skill invocation, and nested agents, mirroring the main agent's capabilities; a subagent run also waits for its background tasks to settle before reporting completion. Applies automatically to coder subagents launched through the Agent tool.

Patch Changes

• #1771 b513975 Thanks @liruifengv! - Optimize the unit formatting of the context usage display.
• #1765 d531398 Thanks @RealKai42! - Fix Kimi-provider models routed through the Anthropic protocol incorrectly showing reasoning effort options. Effort choices now come only from the model's declared metadata, and the inferred fallback profile applies solely to non-Kimi Anthropic-compatible providers.
• #1774 3d5d630 Thanks @RealKai42! - Honor an explicit thinking "off" on OpenAI-compatible (chat completions) providers: it used to be indistinguishable from "never configured", so the history-based auto reasoning_effort injection kept the model reasoning (and could leak the field to models that reject it). The provider now also reports the actual current thinking effort ("on"/"off") instead of recording "off" for both.
• #1766 7042af3 Thanks @kermanx! - web: Fix the sidebar resize handle being covered by the chat composer background.
• #1769 d1ca65e Thanks @wbxl2000! - Keep legacy migrations idempotent across multiple Kimi homes and report damaged or unmapped sessions instead of silently skipping them.
• #1763 81414b6 Thanks @liruifengv! - Warn in the /model and /effort pickers that switching invalidates the existing prompt cache, and hint to use /new to avoid extra token costs.
• #1773 1169a6d Thanks @RealKai42! - Replay empty thinking content verbatim instead of substituting a placeholder space on Anthropic-compatible and Kimi preserved-thinking endpoints.
• #1781 09e8554 Thanks @kermanx! - Report when users stop tasks and preserve other stop reasons in model context.
• #1784 d465591 Thanks @sailist! - Fix a resumed session being marked as just updated and jumping to the top of the session list without any new activity.
• #1759 9e3e670 Thanks @sailist! - Fix a race where resuming a background subagent right after it was manually stopped could fail with an "already running" error.
• #1782 072eed4 Thanks @sailist! - Fix the context size indicator under-reporting the model's actual context usage.
• #1769 d1ca65e Thanks @wbxl2000! - Support in-process editor hosts with session lifecycle, context, MCP configuration, and cross-platform session storage APIs.
• #1772 78967e2 Thanks @sailist! - web: Refresh the model catalog for all providers when opening the model picker, so newly available models always show up.

Minor Changes

• #1731 0b790cd Thanks @sailist! - web: Allow attaching any file type in chat; files the model cannot consume inline (documents, SVG images, archives, …) are uploaded to the server and given to the model as a file path it can read on demand.

Patch Changes

• #1746 918c135 Thanks @RealKai42! - Honor adaptive_thinking = false on Anthropic-compatible models by limiting thinking efforts to the legacy budget set and omitting the effort parameter from requests.
• #1746 918c135 Thanks @RealKai42! - Apply official Anthropic effort profiles and a 128k output fallback for unknown models. Preserve compatible-provider thinking history across session resumes and model switches, normalize incomplete stream events, and warn on unlisted efforts.
• #1746 918c135 Thanks @RealKai42! - Fix custom-named models on Anthropic-compatible providers starting new sessions with thinking effort off instead of the model default, and not showing the thinking control in ACP clients.
• #1757 f0c8a10 Thanks @RealKai42! - Fix the diagnostic log missing the actual error when the CLI exits unexpectedly.
• #1731 0b790cd Thanks @sailist! - Fix the Content-Security-Policy on non-loopback server binds blocking the web UI's theme bootstrap script and bundled fonts, and tighten the policy with explicit form-action, base-uri, and frame-ancestors directives.
• #1758 1d7c205 Thanks @RealKai42! - Fix the CLI exiting unexpectedly when reading an image from the clipboard fails; it now falls back to pasting text.
• #1753 d8ddabb Thanks @sailist! - Fix the web server bearer-token check being bypassed by percent-encoded API paths (e.g. /%61pi/v1/…), which allowed unauthenticated access to every API route.
• #1758 1d7c205 Thanks @RealKai42! - Report crash telemetry for unhandled promise rejections, so exits they cause are no longer invisible.
• #1753 d8ddabb Thanks @sailist! - Fix the session filesystem API following symlinks that point outside the workspace, which allowed reading, listing, creating, and downloading host files beyond the session directory through a planted symlink.
• #1753 d8ddabb Thanks @sailist! - Fix sessions failing to be created when the workspace directory is given through a symlink, which the v2 engine rejected as "not a directory".
• #1754 1186686 Thanks @wbxl2000! - web: Fix completed background subagents losing their final output after a session reload, and retry the output backfill when a transient fetch failure occurs.
• #1755 4f99114 Thanks @kermanx! - Move the server's v1 wire schema definitions into the engine domains and the server package, removing the shared schema package from the v2 server stack with no behavior change.
• #1731 0b790cd Thanks @sailist! - web: Show every attachment a user sends — files, images, and videos — as chips in the message bubble, and let files be attached by dropping them anywhere in the window.
• #1744 b89d385 Thanks @wbxl2000! - web: Fix Enter not confirming modal confirmation dialogs in dev builds, and keep the dialog open with a loading state until the confirmed action (such as archiving a session) completes.
• #1756 e885aec Thanks @wbxl2000! - web: Show full diagnostics for model request failures — a semantic title, the provider's raw message, and expandable details (error code, HTTP status, request ID) with copy support — instead of a bare "Connection error" toast.
• #1751 df75a0f Thanks @kermanx! - web: Keep session activity indicators in sync with agent work, prevent duplicate streamed content after session activation races or LLM retries, and flush durable session events promptly.
• #1754 1186686 Thanks @wbxl2000! - web: Fix a background subagent showing up as two identical rows in the agents dock panel during streaming.

Polish

• Expand the coder subagent tool set to include background tasks, todo lists, plan mode, skill invocation, and nested agents, mirroring the main agent's capabilities.
• Warn in the /model and /effort pickers that switching invalidates the existing prompt cache, and hint to use /new to avoid extra token costs.
• web: Refresh the model catalog for all providers when opening the model picker, so newly available models always show up.
• Optimize the unit formatting of the context usage display.

Bug Fixes

• Fix a resumed session being marked as just updated and jumping to the top of the session list without any new activity.
• Fix the context size indicator under-reporting the model's actual context usage.
• Fix Kimi-provider models routed through the Anthropic protocol incorrectly showing reasoning effort options.
• Honor an explicit thinking "off" on OpenAI-compatible (chat completions) providers.
• Report when users stop tasks and preserve other stop reasons in model context.
• Fix a race where resuming a background subagent right after it was manually stopped could fail with an "already running" error.
• Replay empty thinking content verbatim instead of substituting a placeholder space on Anthropic-compatible and Kimi preserved-thinking endpoints.
• Keep legacy migrations idempotent across multiple Kimi homes and report damaged or unmapped sessions instead of silently skipping them.
• web: Fix the sidebar resize handle being covered by the chat composer background.

Features

• web: Attach any file type in chat — files can be dropped anywhere in the window, and sent files, images, and videos show as chips in the message bubble.

Polish

• web: Show full diagnostics for model request failures.
• Apply official Anthropic effort profiles and a 128k output fallback for unknown models.

Bug Fixes

• Fix the web server bearer-token check being bypassed by percent-encoded API paths, which allowed unauthenticated access to every API route.
• Fix the session filesystem API following symlinks that point outside the workspace, which allowed accessing host files beyond the session directory.
• web: Keep session activity indicators in sync with agent work and prevent duplicate streamed content after session activation races or LLM retries.
• Fix custom-named models on Anthropic-compatible providers starting new sessions with thinking effort off and not showing the thinking control in ACP clients.
• Honor adaptive_thinking = false on Anthropic-compatible models by omitting the effort parameter from requests.
• web: Fix the Content-Security-Policy on non-loopback server binds blocking the web UI's theme bootstrap script and bundled fonts.
• Fix sessions failing to be created when the workspace directory is given through a symlink.
• Fix the CLI exiting unexpectedly when reading an image from the clipboard fails; it now falls back to pasting text.
• web: Fix completed background subagents losing their final output after a session reload.
• web: Fix Enter not confirming modal confirmation dialogs in dev builds.
• web: Fix a background subagent showing up as two identical rows in the agents dock panel during streaming.
• Fix the diagnostic log missing the actual error when the CLI exits unexpectedly.

Kimi K3, our most capable model to date, is now released and open-sourced, and available in Kimi Code.

Model scale & architecture

2.8 trillion parameters, built on KDA hybrid linear attention and Attention Residuals — the first open-source model at the 3-trillion-parameter scale.

Long context & multimodal

Native visual understanding with up to 1M-token context, handling large codebases and extended coherent reasoning.

Coding & agent strengths

Excels at long-horizon programming, game dev / 3D, and knowledge work; sustains long engineering tasks with minimal human supervision across kernel optimization, GPU compilers, chip design, and scientific computing.

Benchmark positioning

A top-tier model that outperforms Opus 4.8, GPT 5.5, and other mainstream models; on challenging coding tasks such as kernel optimization, it performs close to the strongest proprietary models.

Membership

Moderato members and above can use Kimi K3; Allegretto members and above unlock the 1M context window. K3 now supports low / high / max thinking effort levels, so you can pick the right intensity for each task. →

Usage tip

Switching models invalidates the existing context cache, so consumption is higher right after switching; start a new session before using Kimi K3 for better results and lower consumption.

Coder sub-agent capabilities aligned with the main agent

The coder sub-agent now supports background tasks, todo lists, plan mode, skill invocation, and nested agents, so it can handle more complex coding workflows on its own. →

Cache-invalidation hints in /model and /effort

Switching the model or effort now warns that the existing prompt cache will be invalidated, and suggests using /new to avoid extra token costs. →

Also in this release: the context-size indicator no longer under-reports the model's actual context usage; a resumed session without new activity is no longer incorrectly marked as just updated.

Attach any file in web chat

The built-in web UI now supports attaching files of any type in chat: drop a file anywhere on the window to send it, and files, images, and videos are shown as attachment tags in the message bubble. →

Aligned Anthropic effort configuration

Anthropic-compatible providers now apply the official effort configuration, with unknown models falling back to a 128k output limit and custom-named models getting correct thinking-strength controls for new sessions. →

Also in this release: model request failures now show full diagnostics; two security issues were fixed — the web server's bearer-token check could be bypassed via percent-encoded API paths, and the session filesystem API could follow symlinks outside the workspace and access host files.

Patch Changes

• #1704 38a2363 Thanks @sailist! - Align the print-mode run lifecycle across engines: print_background_mode and print_max_turns now take effect for kimi -p on the experimental engine, with the same exit / drain / steer semantics and defaults as the default engine, and kimi -p "/goal ..." now stays alive until the goal reaches a terminal state instead of exiting after the first turn.
• #1704 38a2363 Thanks @sailist! - Align the subagent timeout across engines: a fixed 2-hour default, overridable with [subagent] timeout_ms in config.toml or the KIMI_SUBAGENT_TIMEOUT_MS environment variable.
• #1727 286d3e7 Thanks @liruifengv! - Add a builtin check-kimi-code-docs skill that answers Kimi Code product questions (CLI usage, configuration, membership, error codes) against the official documentation with source links. It triggers automatically on product questions, or run /check-kimi-code-docs.
• #1707 8490c3e Thanks @sailist! - Add the number of messages dropped during compaction retries to the session wire log's LLM request traces.
• #1740 a74ab44 Thanks @sailist! - Increase the default per-step LLM retry budget from 3 to 10 attempts, so transient provider failures (429 / overload) are retried with exponential backoff for a few minutes before the turn fails. Tune with loop_control.max_retries_per_step in config.toml.
• #1707 8490c3e Thanks @sailist! - Rename the dynamic tool loading model capability from select_tools to dynamically_loaded_tools, matching the model catalog vocabulary; the select_tools tool and the tool-select flag are unchanged.
• #1698 722694a Thanks @chengluyu! - Enforce goal wall-clock budgets while model or tool work is still running.
• #1730 72f425e Thanks @wbxl2000! - Fix tool call id collisions across turns for Gemini-protocol models, which merged separate swarm runs into a single card in the web UI.
• #1695 5c0f17c Thanks @chengluyu! - Preserve active goal elapsed time across crash recovery.
• #1743 481b28b Thanks @chengluyu! - Correct the guidance text shown when a goal cannot be paused or resumed.
• #1692 e53cd79 Thanks @chengluyu! - Allow goals to use every configured turn before the turn budget stops further work.
• #1719 b24a347 Thanks @wbxl2000! - web: Restore the AgentSwarm member list after a page refresh on the v2 backend.
• #1704 38a2363 Thanks @sailist! - Fix sessions created by newer builds failing to open in older CLI builds on the same machine; new sessions are written in a compatible layout, and existing sessions are healed on first open.
• #1708 ddfdfb0 Thanks @wbxl2000! - Fix sub-agent completions being signaled as session turn completions, which fired premature completion notifications, sounds, and unread markers while the main turn was still running.
• #1714 20b6972 Thanks @wbxl2000! - web: Fix code block copy buttons when the web UI is served over plain HTTP.
• #1643 d8d4e8c Thanks @wbxl2000! - web: Prevent long streaming responses from stalling after a tab is backgrounded.
• #1715 de493ae Thanks @wbxl2000! - web: Use an upward chevron for the expand button on minimized plan review and question cards so the icon matches the direction the cards open.
• #1641 b6ae0a1 Thanks @wbxl2000! - web: Show session list loading failures without discarding sessions that are still available.
• #1719 b24a347 Thanks @wbxl2000! - web: Expand the AgentSwarm card by default while its subagents are still running.
• #1693 7de218a Thanks @chengluyu! - web: Resume paused goals when you select Resume.
• #1700 3107f96 Thanks @chengluyu! - Prevent late activity from replaced goals from changing or consuming the budget of replacement goals.
• #1459 6eb8e13 Thanks @wbxl2000! - web: Fix mobile safe-area handling, including the composer floating above the on-screen keyboard on iOS, doubled landscape insets, the PWA top bar under the notch, and toasts overlapping the composer as it grows.
• #1696 b781e8c Thanks @chengluyu! - Preserve final status messages when automatic goal continuations reach a budget or report a blocker.
• #1722 3703d03 Thanks @sailist! - In print mode (kimi -p), keep the run alive by default while background tasks are pending and feed each completion back to the main agent as a new turn, with an effectively unbounded wait ceiling and turn cap and a 72-hour subagent timeout. Set print_background_mode = "exit" (or "drain") to restore the previous exit-after-one-turn behavior.
• #1737 5d6ff02 Thanks @sailist! - In print mode (kimi -p), background Bash tasks and subagents no longer have a timeout by default — they run until they finish or the model stops them, and a foreground Bash command that times out is moved to the background without a new deadline. Interactive defaults are unchanged; tune per mode with bash_task_timeout_s under [background] or timeout_ms under [subagent] (0 = no timeout).
• #1697 2bf009f Thanks @chengluyu! - Reject subagent goal requests consistently instead of starting goals they cannot finish.
• #1711 9eff230 Thanks @wbxl2000! - Log failed requests, WebSocket auth rejections, shutdowns, and key operations (abort, cancel, approvals, config changes) in the web UI server so daemon problems can be diagnosed from its logs.
• #1704 38a2363 Thanks @sailist! - Fix kimi server reporting the internal server package version instead of the CLI version in its metadata; the web UI settings now show the CLI version.
• #1741 8a3f1ff Thanks @chengluyu! - web: Fix the session title not being generated when the first message is a skill slash command.
• #1694 513f374 Thanks @chengluyu! - Reject malformed persisted goal records during session recovery.
• #1704 38a2363 Thanks @sailist! - web: Show each message's actual send time in chat history after reloading a session, instead of the session creation time.
• #1711 9eff230 Thanks @wbxl2000! - web: Surface server error details when actions such as stopping a session, archiving, or toggling modes fail, instead of failing silently, and log every operation failure to the console and the exported web log.
• #1701 07c3632 Thanks @sailist! - Keep the workspace catalog complete and durable: creating a session registers its directory as a workspace, the server backfills missing workspaces from session history at startup, and a removed workspace no longer reappears after a restart.

Features

• Add a builtin /check-kimi-code-docs skill that automatically answers Kimi Code product questions with official-docs sources.

Polish

• Align kimi -p behavior across engines: print_background_mode and print_max_turns now apply, and /goal runs stay alive until the goal finishes.
• kimi -p now stays alive by default while background tasks are pending, with no effective wait or turn limit, and feeds each completion back to the agent. Set print_background_mode = "exit" or "drain" to restore the old exit-after-one-turn behavior.
• kimi -p background tasks and subagents no longer time out by default (interactive mode is unchanged); restore limits with [background] bash_task_timeout_s or [subagent] timeout_ms.
• Subagent timeout now defaults to 2 hours everywhere; override with [subagent] timeout_ms or KIMI_SUBAGENT_TIMEOUT_MS.
• The per-step LLM retry limit is raised from 3 to 10 attempts, so transient provider failures (429 / overload) are retried before a turn fails; tune with loop_control.max_retries_per_step.
• Workspaces now stay in sync: new sessions register automatically, missing workspaces are restored at startup, and removed ones stay removed.
• kimi web now logs failed requests and key operations so daemon issues are easier to diagnose.
• web: AgentSwarm cards now stay expanded while subagents are still running.
• web: Minimized plan review and question cards now use an upward chevron for expand.

Bug Fixes

• Prevent oversized image reads from poisoning sessions; sessions that already failed with request-too-large errors now recover automatically.
• Fix session fork losing everything except the conversation log: forked sessions now carry over media attachments, plan files, background task output, and cron tasks, and a failed fork no longer leaves a broken copy behind.
• web: Fix several session rendering glitches when reopening, reconnecting, or resyncing a session, including the context usage indicator dropping to 0, duplicate user message bubbles, and duplicated text in multi-step turns.
• web: Fix uploaded images failing to display when connecting to the server over a non-localhost address.
• web: Continue blocked goals after the user resumes them from the goal controls.
• web: Fix the AgentSwarm member list disappearing after a page refresh while subagents are still running.
• web: Fix the goal card disappearing after a page refresh while a session goal is active.
• web: Fix the workspace picker menu sizing too narrowly for its content.
• web: Recover transient subagent rate limits without surfacing them as session errors.
• Fix Bash auto-detection on Windows failing when git comes from a native MSYS2 toolchain (ucrt64/clang64/clangarm64).
• Fix OAuth login hanging after browser authorization when the provider configuration changes during sign-in.
• Show the provider's actual rejection message instead of a misleading re-login prompt when an OAuth-managed model keeps returning 401 after a token refresh.
• Fix providers without a configured base_url being rejected: anthropic/openai and other protocol providers now fall back to their official default endpoints again.
• Fix MCP tools being unavailable on the first turn after session startup.
• Fix pasted media and images being dropped from /skill and plugin command arguments, and when steering with Ctrl-S.
• Fix empty reasoning blocks being dropped across providers, which broke multi-step tool calls.
• In auto permission mode, plan exits are now marked as auto-approved instead of user-reviewed, so the agent no longer mistakes the approval for a user signal to start executing.
• Fix background tasks being lost or wrongly marked as lost when resuming sessions.
• Fix server shutdown sometimes leaving a stale instance file behind.

Built-in docs Q&A skill

A new built-in /check-kimi-code-docs answers Kimi Code product questions (CLI usage, configuration, membership, error codes) straight from the official docs, citing source links in its answers — so you no longer have to leave the terminal to look something up. →

Also in this release: the per-step LLM retry cap has been raised from 3 to 10, so transient provider-side failures (429 / overload) are retried automatically before the whole turn fails; and print mode (kimi -p) no longer exits after a single turn — as long as background tasks are pending it stays alive and feeds each result back to the main agent (print_background_mode now defaults to steer), and background tasks and subagents no longer time out by default).

Patch Changes

• #1678 ec1c974 Thanks @chengluyu! - Preserve goal completion summaries and show untyped LLM errors without an internal error-code prefix in step interruption events.
• #1688 94c0ef8 Thanks @sailist! - Fix built-in tools being unavailable when the model provider becomes ready after the session starts.
• #1684 e417ee7 Thanks @RealKai42! - Fix Kimi sessions getting stuck when preserved-thinking history contains an empty reasoning step.
• #1673 0f64b4d Thanks @wbxl2000! - web: Align thinking-level handling with the CLI: submit the selected level verbatim instead of silently downgrading it, pin the model's catalog default when nothing was chosen, pre-select the target model's default on model switches, and persist explicit picks as the daemon-wide default so new sessions inherit them.
• #1689 ab22a2a Thanks @wbxl2000! - web: Show just the level name (e.g. Max) in the model pill instead of "thinking: max".
• #1625 d158e0a Thanks @RealKai42! - Fix Thinking effort routing so non-Kimi providers preserve configured values for upstream validation, while Kimi models validate runtime selections, fall back safely during model resolution, and synchronize the effective effort back to clients.

Minor Changes

• #1441 ceb158d Thanks @sailist! - Add v2 session export support for packaging diagnostic zip archives.
• #1591 83e1753 Thanks @liruifengv! - Move foreground Bash commands that hit their timeout to the background instead of killing them, so long-running commands survive the timeout and report back on completion. Set bash_auto_background_on_timeout = false under [background] in config.toml to restore the kill-on-timeout behavior.
• #1617 4ec2e7f Thanks @sailist! - Run the local server (kimi server run / kimi web) on the agent-core-v2 engine by default — the KIMI_CODE_EXPERIMENTAL_FLAG opt-in is no longer needed, and the legacy v1 server package has been removed.
• #1441 ceb158d Thanks @sailist! - Port progressive tool disclosure to the new agent engine: MCP tool schemas stay out of the top-level tool list, and the model loads them by name on demand through the announcements plus the select_tools tool, keeping the prompt cache stable. Off by default; set KIMI_CODE_EXPERIMENTAL_TOOL_SELECT=1 to enable.
• #1646 5eb6217 Thanks @wbxl2000! - web: Add session diagnostic export to download a session and bounded metadata-only troubleshooting logs as a ZIP. Run /export or pick Export session from a session's more menu. Web downloads are limited to 64 MiB.

Patch Changes

• #1638 7c889f3 Thanks @RealKai42! - In auto permission mode, plan exits are now marked as auto-approved (not user-reviewed) in both the tool result and the transcript, so the agent no longer treats automatic plan approval as a user signal to start executing.
• #1598 4feca6b Thanks @kermanx! - web: Recover transient subagent rate limits without surfacing them as session errors.
• #1635 e49b3b8 Thanks @sailist! - Request task-owned work to stop on session close, honoring background.keep_alive_on_exit for independent processes and background.kill_grace_period_ms before attempting force-stop.
• #1629 0527ca2 Thanks @sailist! - Fix session fork losing everything except the conversation log: forked sessions now carry over media attachments, plan files, background task output, and cron tasks, and a failed fork no longer leaves a broken half-copy behind.
• #1627 28e9dd4 Thanks @chengluyu! - web: Continue blocked goals after the user resumes them from the goal controls.
• #1631 2d874fb Thanks @sailist! - Fix a race where a heartbeat write in flight during server shutdown could recreate the instance file right after it was removed.
• #1663 1294a0e Thanks @7Sageer! - Fix OAuth login hanging after browser authorization when the provider configuration changes during sign-in.
• #1657 32a89c3 Thanks @RealKai42! - Prevent oversized image reads from poisoning sessions and recover existing request-too-large failures by removing unsafe media from provider requests.
• #1635 e49b3b8 Thanks @sailist! - Store background task records per agent again, so tasks written by older versions are found on resume and one agent's restore no longer marks another agent's tasks as lost.
• #1632 a4aae87 Thanks @sailist! - Fix providers without a configured base_url being rejected: anthropic/openai and other protocol providers now fall back to their official default endpoints again, as before.
• #1588 2061590 Thanks @liruifengv! - Fix pasted media being dropped from /skill and plugin command arguments.
• #1588 2061590 Thanks @liruifengv! - Fix pasted images being dropped when steering with Ctrl-S.
• #1629 0527ca2 Thanks @sailist! - Fix the v2 engine never activating tool-call deduplication: identical tool calls issued in the same step no longer execute multiple times, and repeated identical calls across steps receive escalating reminders again.
• #1441 ceb158d Thanks @sailist! - Fix a race in the experimental v2 config service that could drop a just-written setting from the config response.
• #1614 3c0e368 Thanks @chengluyu! - Fix a server crash when the first goal-mode prompt is submitted while the v2 agent is still starting.
• #1631 2d874fb Thanks @sailist! - Surface the provider's actual rejection message instead of a misleading re-login prompt when an OAuth-managed model keeps returning 401 after a token refresh.
• #1631 2d874fb Thanks @sailist! - Rewrite repeated-tool-call reminders to redirect the agent toward a different action instead of prohibiting the call, and treat a dismissed question prompt as no answer rather than the recommended option.
• #1636 8027fe2 Thanks @sailist! - Make file tools able to reach skill directories outside the working directory in the v2 engine (experimental), and honor --skillsDir in v2 print mode and the server's skillDirs option.
• #1630 0303b82 Thanks @sailist! - Fix ReadMediaFile results losing their image rendering after a session reload or resume on the v2 server backend.
• #1441 ceb158d Thanks @sailist! - Fix a storage race in the experimental v2 engine that could fail value reads when writes overlap with compaction.
• #1601 dc309a7 Thanks @kermanx! - web: Fix the context usage indicator dropping to 0 when a session is reopened or the session list reloads (e.g. after a sidebar search) — the cached live usage is now kept instead of the session record's all-zero placeholder.
• #1620 e91a616 Thanks @wbxl2000! - web: Fix duplicate user message bubbles after a session snapshot resync.
• #1672 88629ba Thanks @yicun! - web: Fix uploaded and persisted images failing to display on non-loopback server connections.
• #1609 e223549 Thanks @wbxl2000! - web: Fix a running multi-step turn rendering a duplicated wall of text after the page reconnects or refreshes mid-turn.
• #1611 32cbd0c Thanks @chengluyu! - web: Fix the workspace picker menu sizing too narrowly for its content.
• #1635 e49b3b8 Thanks @sailist! - Fix possible record loss when resuming sessions whose wire log needs migration, and reject session logs missing the version envelope instead of silently misreading them.
• #1441 ceb158d Thanks @sailist! - Fix MCP tools being unavailable on the first turn after session startup.
• #1580 83370f1 Thanks @wszqkzqk! - Fix bash auto-detection on Windows failing when git comes from a native MSYS2 toolchain (ucrt64/clang64/clangarm64).
• #1676 d1820ff Thanks @RealKai42! - Preserve empty model reasoning blocks across providers so multi-step tool calls can continue.
• #1669 490303d Thanks @chengluyu! - web: Refine goal mode controls with animated strip interactions, budget-aware progress, and design-system cancellation confirmation.
• #1597 d601847 Thanks @7Sageer! - Send the kimi-code-cli User-Agent on provider registry (api.json) and model catalog fetches, so registries can identify the client version.
• #1441 ceb158d Thanks @sailist! - Fix approval and question prompts not appearing in real time for web clients connected to the v2 server; they previously only showed up after a page refresh.
• #1441 ceb158d Thanks @sailist! - Log a warning when a skill fails to parse instead of silently dropping it, and fix the skill catalog so scanned skill roots and policy-skipped skills are actually reported.
• #1589 f338fcd Thanks @wbxl2000! - web: Fix the AgentSwarm member list disappearing after a page refresh while subagents are still running.
• #1591 83e1753 Thanks @liruifengv! - Optimize the TaskOutput tool prompts to discourage blocking waits on background tasks.
• #1441 ceb158d Thanks @sailist! - Enforce a typed registry for v2 engine telemetry events and redact URLs, tokens, and file paths from outgoing telemetry properties.
• #1624 3215129 Thanks @kermanx! - Fix the experimental v2 engine crashing when the first prompt is sent right after a new conversation is created (for example sending /goal on the web's new-conversation page): agent creation now joins the in-flight bootstrap instead of failing, and the v2 agent lifecycle is split into focused existence, sub-agent, and session MCP domains.
• #1637 0e0a6e9 Thanks @sailist! - Support caller-supplied MCP server configs on session create in the v2 engine (experimental), merged over the file config and under plugin servers.
• #1626 1c85f94 Thanks @sailist! - v2 engine: expose the prompt scheduler over /api/v2 for native clients, and add an experimental fault-injection service (KIMI_CODE_EXPERIMENTAL_FAULT_INJECTION) that arms a one-shot provider failure so the media-degraded / media-stripped recovery resends can be exercised end-to-end.
• #1441 ceb158d Thanks @sailist! - Introduce a graded error taxonomy for the v2 engine's filesystem, storage, and wire layers, translating raw OS and parse failures into specific error codes instead of generic internal errors.
• #1626 1c85f94 Thanks @sailist! - v2 engine: block unsupported image formats (AVIF, HEIC, BMP, TIFF, ICO) at every ingestion point so they can no longer poison session history, and auto-recover provider image-format rejections with a media-stripped resend.
• #1626 1c85f94 Thanks @sailist! - v2 engine: recover image-heavy sessions from provider request-size rejections (HTTP 413) by resending with older media degraded to text markers, re-encode oversized WebP images instead of passing them through, and keep downscaled PNGs readable by switching to JPEG below 1000px.
• #1613 b2daa40 Thanks @7Sageer! - Support the services.moonshot_search api-key config for WebSearch in the v2 engine, matching v1: the tool is now available without an OAuth login, and explicit config takes precedence over the OAuth-derived provider.
• #1590 8a4ee05 Thanks @sailist! - Fix bash auto-detection on Windows in the experimental v2 engine when git comes from a native MSYS2 toolchain (ucrt64/clang64/clangarm64).
• #1441 ceb158d Thanks @sailist! - Send the CLI identity headers (User-Agent and device identity) with outbound requests from the experimental v2 server, matching direct CLI runs.
• #1593 2185237 Thanks @kermanx! - Declare v2 engine wire op payloads with required zod schemas and derive their types from the schemas, with ops declared on their models and every op type registered for replay classification.
• #1441 ceb158d Thanks @sailist! - Keep sessions from the new agent engine compatible with existing transcript replay.
• #1592 924d5c9 Thanks @wbxl2000! - web: Show the connected backend engine (v1 / v2) in Settings, and add a dev-mode backend pill next to the sidebar brand that can switch the dev proxy between the two engines at runtime.
• #1606 2da45fc Thanks @liruifengv! - web: Fix the goal card disappearing after a page refresh while a session goal is active.
• #1587 49a8c84 Thanks @wbxl2000! - web: Let wide Markdown tables in the desktop chat grow up to 1040px with each column capped at 700px so long cell content wraps, temporarily hiding the conversation outline while a table passes under it; anything wider still scrolls inside the table.