v0.20.1 — pure latest + 0.20.1-botiverse.0

Mirror of upstream @moonshot-ai/kimi-code@0.20.1. Published 2026-06-27 (OIDC pipeline, dry-run then real each variant).

• 0.20.1 → npm latest (pure mirror); 0.20.1-botiverse.0 → botiverse tag (LocalKaos+Kaos surface extension).
• node-sdk public interface vs 0.20.0: ADDITIVE — new KimiAuth feedback-upload surface. auth.ts (+89) + index.ts (+6 re-exports), 0 deletions. New exported types (KimiAuthCreateFeedbackUploadUrlInput/Ok/Result, KimiAuthCompleteFeedbackUploadInput/Part, KimiAuthFeedbackUploadPart, re-exported FetchCompleteFeedbackUploadResult/FetchFeedbackUploadError) + new KimiAuth methods createFeedbackUploadUrl/completeFeedbackUpload. exports/bin/deps/types/engines byte-identical to 0.20.0; no breaking changes (purely additive).
• Slock impact: drop-in additive. Daemon driver pins 0.20.0-botiverse.0; can bump to 0.20.1-botiverse.0 when convenient (new surface opt-in).
• See RELEASES.md for details.

v0.20.0 — pure latest + 0.20.0-botiverse.0 (backfill)

Mirror of upstream @moonshot-ai/kimi-code@0.20.0. Published 2026-06-26 (npm); release backfilled 2026-06-27.

• 0.20.0 → npm latest (pure mirror); 0.20.0-botiverse.0 → botiverse tag (LocalKaos+Kaos surface extension).
• node-sdk public interface: NO surface change vs 0.19.2 — exports/bin/deps/types + src export surface identical; impl/bundle refresh only.
• Manual sync (auto-sync hit SYNC_PAT workflow-scope gap when upstream changed its own ci.yml). Daemon driver bumped to 0.20.0-botiverse.0 (PR #3420).
• See RELEASES.md for details.

v0.19.2 — pure latest + 0.19.2-botiverse.0

Mirror of upstream @moonshot-ai/kimi-code@0.19.2. Published 2026-06-24.

• @botiverse/kimi-code-sdk@0.19.2 → npm latest (pure mirror, upstream surface verbatim)
• @botiverse/kimi-code-sdk@0.19.2-botiverse.0 → npm botiverse tag (adds LocalKaos + Kaos re-export)

node-sdk public interface unchanged vs 0.18.0 (exports/bin/deps/types identical; implementation/bundle refresh). 0.19.0/0.19.1 mirrored but superseded by 0.19.2. See RELEASES.md for the interface delta + versioning policy. repackage script gained pure-mode (419e034).

Mirror: @moonshot-ai/kimi-code@0.18.0 (npm @botiverse/kimi-code-sdk@0.18.0)

Immutable mirror tag for upstream @moonshot-ai/kimi-code@0.18.0 (commit 2ae7b3063fa257f31063ec5cf940f7b8b6d916a3).

npm: @botiverse/kimi-code-sdk@0.18.0 published 2026-06-19 via OIDC trusted publishing.

node-sdk public interface: ADDITIVE. New optional sessionStartedProperties?: TelemetryProperties field on KimiHarnessOptions / CreateSessionOptions / ResumeSessionInput, merged into session_started telemetry events with canonical fields always winning. node-sdk package.json stays at 0.9.4.

App / CLI features (don't affect SDK consumers): web session search + lazy-load + paginated session list, guided goal authoring, redesigned OAuth login dialog, server reports host kimi-code CLI version in /meta, agent-core AgentSwarm concurrency env knob.

Slock consumer impact: drop-in additive minor from 0.17.1. Existing daemon code keeps working.

See RELEASES.md for full interface notes.

Mirror: @moonshot-ai/kimi-code@0.17.1 (npm @botiverse/kimi-code-sdk@0.17.1)

Upstream tag: @moonshot-ai/kimi-code@0.17.1

node-sdk public interface: NO change. node-sdk package.json stays at 0.9.4 (bumped in 0.17.0); src/index.ts exports unchanged.

App / CLI patches (not consumed by SDK hosts directly):

• Prevent web login dialog from closing when clicking the backdrop (#861).
• Stop the background local server from locking the directory it was started in (#860).
• Fix the local server failing to start in the background on the native binary (#860).
• Group the default model dropdown in web settings by provider (#861).

Slock consumer: drop-in patch from 0.17.0. No daemon code change required. Published to npm as @botiverse/kimi-code-sdk@0.17.1 via OIDC trusted-publishing.

Mirror: @moonshot-ai/kimi-code@0.17.0 (npm @botiverse/kimi-code-sdk@0.17.0)

Upstream tag: @moonshot-ai/kimi-code@0.17.0

node-sdk public interface: ADDITIVE. node-sdk package.json bumped 0.9.3 → 0.9.4 (first internal version change since 0.9.3). New public exports from src/index.ts:

• loadRuntimeConfigSafe — host-side safe config reader (returns parsed KimiConfig + diagnostics, doesn't throw on bad config).
• resolveConfigPath — sync helper for the canonical <kimiHome>/config.toml path.

Major upstream feature: server-hosted web UI (#625):

• New CLI commands kimi server (start/stop/manage local server) + kimi web (open server-hosted web UI).
• Server REST + WebSocket APIs for the web client (packages/protocol events.ts +725 / ws-control.ts +386 / new REST surfaces snapshot/terminal/skill/modelCatalog/config/connection).

Slock consumer: drop-in bump from 0.16.0 — public SDK API stays compatible (additive only). The new server/web feature surface is not on the Slock kimi-sdk runtime path (we drive KimiHarness / Session directly; agent face is Slock, not the bundled web). loadRuntimeConfigSafe could simplify our daemon's detectKimiSdkModels regex scan as an optional follow-up. Published to npm as @botiverse/kimi-code-sdk@0.17.0 via OIDC trusted-publishing.

Mirror: @moonshot-ai/kimi-code@0.16.0 (npm @botiverse/kimi-code-sdk@0.16.0)

Upstream tag: @moonshot-ai/kimi-code@0.16.0

node-sdk public interface: NO change. node-sdk's package.json stays at 0.9.3; no diff under packages/node-sdk/. Existing imports keep working.

Bundled-implementation siblings (tsdown inlined into dist):

• agent-core@0.13.1 — compaction repeat-over-threshold fix (#813); project session replay ranges over rendered records (#805); prevent session shutdown from resuming the agent during background-task stop (#804); LLM-log plumbing cleanup (#823).
• kosong@0.4.6 — stop Anthropic-compatible providers from reading ambient Anthropic shell credentials / custom headers (#790).
• kaos@0.1.6 — close wrapped output streams when buffered readers are destroyed (#807).

Slock consumer: drop-in bump from 0.15.0. Pick this up to get the compaction-loop / replay-range / shutdown-resume fixes (relevant to long sessions and Slock's daemon.runtime.turn lifecycle), the kosong host-shell-credential isolation, and the kaos stream-close fix. Published to npm as @botiverse/kimi-code-sdk@0.16.0 via OIDC trusted-publishing on main.

kimi-code 0.15.0 (mirror)

Mirror of upstream @moonshot-ai/kimi-code@0.15.0. Interface-focused note; diff basis is packages/node-sdk public surface vs 0.14.3.

node-sdk interface — NO change

• src/index.ts exports unchanged.
• packages/node-sdk/package.json version stays at 0.9.3 (the only packages/node-sdk/ file change is a test, session-skills.test.ts).

Bundled-implementation refresh (siblings tsdown inlines into dist)

• agent-core: same-language reasoning (#787), refined + polished system prompt context (#777, #780), decoupled agent skill registry (#784), static-table model capability lookup (#776), MCP-over-SSE support (#744).
• agent-core fix: close interrupted tool calls on resume (#768).
• agent-core / kosong: surface skill directory in loaded-skill context block (#785).
• kosong fix: repair mismatched schema types from Xcode 26.5 MCP (#343).

Slock consumer impact

No public SDK action. Existing @botiverse/kimi-code-sdk@0.9.3 npm pin keeps working — its API is unchanged. Consumers who want the newer bundled-implementation behaviour (improved system-prompt context, MCP-over-SSE, resume fixes) should pin the mirror tag github:botiverse/kimi-code-sdk#@moonshot-ai/kimi-code@0.15.0 and rebuild, or wait for upstream to bump node-sdk's package.json version (which would let us cut a fresh 0.9.4 to npm).

See RELEASES.md for the full running log.

kimi-code 0.14.3 (mirror)

Mirror of upstream @moonshot-ai/kimi-code@0.14.3. Interface-focused note (upstream is private / no public release notes). Diff basis: packages/node-sdk public surface vs 0.14.2.

node-sdk interface — NO change

• Diff scope: only apps/kimi-code/ and docs/ changed.
• Zero changes to packages/node-sdk/ or any bundled sibling (agent-core, kosong, kaos, oauth, protocol, acp-adapter, telemetry).
• node-sdk package.json version unchanged at 0.9.3.
• Single CLI feature: feat(kimi-code): refresh OAuth provider models before opening model picker (#713).

Slock consumer impact

No action needed. Consumers pinning either @botiverse/kimi-code-sdk@0.9.3 (npm) or @moonshot-ai/kimi-code@0.14.2 (mirror) can stay — no SDK interface delta. No new npm publish; the existing @botiverse/kimi-code-sdk@0.9.3 already covers this upstream release.

Pin: github:botiverse/kimi-code-sdk#@moonshot-ai/kimi-code@0.14.3 if you specifically want this CLI/TUI release. See RELEASES.md for the running log.

@botiverse/kimi-code-sdk@0.9.3 (npm) — first publish

First npm publish of the repackaged, dist-only SDK as @botiverse/kimi-code-sdk@0.9.3.

• Built from upstream mirror tag @moonshot-ai/kimi-code@0.14.2 (node-sdk's own internal version is 0.9.3, independent of the CLI tag).
• Bundled by tsdown: dist + 4 light runtime deps (@antfu/utils, smol-toml, yazl, zod); upstream sibling packages (agent-core, kosong, kaos, oauth) inlined.
• MIT — upstream LICENSE (Moonshot AI) preserved + NOTICE.md adds Botiverse mirror attribution.
• Published manually for the bootstrap (npm requires a package to exist before configuring trusted publishing); subsequent versions ship via the OIDC tag-triggered publish-sdk.yml workflow.

Interface notes: see the @moonshot-ai/kimi-code@0.14.2 release for the SDK-interface delta vs 0.14.1 (additive — KimiHarness.getConfigDiagnostics() + ConfigDiagnostics type; safe to bump the pin).