Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
70 commits
Select commit Hold shift + click to select a range
cb749c8
feat(auth): add Enterprise SSO - Microsoft 365 (Entra ID / Azure AD) …
zsecducna Jun 18, 2026
145d54e
feat(auth): auto-detect Kiro profile region for Azure SSO (eu-central-1)
zsecducna Jun 26, 2026
e50614c
Merge origin/main into feat/azure-tenant-sso
zsecducna Jun 26, 2026
0263a2b
feat(auth): drop region prompt from Enterprise SSO login
zsecducna Jun 26, 2026
075df7a
docs(spec): add design for external_idp credential JSON adapter
ngh1105 Jun 27, 2026
0f226ae
docs(plan): add task-by-task plan for external_idp credential adapter
ngh1105 Jun 27, 2026
e75e4e6
feat(auth): export ValidateExternalIdpEndpoint + test seam
ngh1105 Jun 27, 2026
04362e8
feat(proxy): add normalizeImportAuthMethod helper
ngh1105 Jun 27, 2026
a7f69a5
feat(auth): import external_idp credentials via Add credential JSON
ngh1105 Jun 27, 2026
7e87ef6
feat(auth): preserve id/email/profileArn when importing full records
ngh1105 Jun 27, 2026
7743b80
feat(ui): import external_idp credentials from Add credential JSON
ngh1105 Jun 27, 2026
1b4865e
feat(ui): legacy parity for external_idp credential import
ngh1105 Jun 27, 2026
85fc858
feat(auth): derive external IdP endpoints from userId for Kiro exports
ngh1105 Jun 27, 2026
9ff8fd1
feat(ui): pass userId for endpoint derivation in credential import
ngh1105 Jun 27, 2026
05366bd
feat(auth): detect external_idp from access token JWT issuer
ngh1105 Jun 27, 2026
6720f15
feat(auth): trust-on-import external_idp credentials from access toke…
ngh1105 Jun 27, 2026
f3992b3
fix(ui): carry accessToken through the Kiro-export map for trust-on-i…
ngh1105 Jun 27, 2026
a2b2c4d
harden(auth): gate external_idp refresh at POST boundary + import DoS…
zsecducna Jul 1, 2026
de8b5f6
docs(plan): add cache improvements plan (C1/C2/C3)
ngh1105 Jun 27, 2026
386ca59
fix(cache): cross-account prompt-cache sharing (C1)
ngh1105 Jun 27, 2026
228b7a1
feat(cache): configurable cache-read cap (C2)
ngh1105 Jun 27, 2026
3e8e72b
feat(cache): persist prompt-cache entries to disk (C3)
ngh1105 Jun 27, 2026
45cb843
feat(cache): proportional split anchored to real total + bounded LRU
ngh1105 Jun 27, 2026
0176063
fix(cache): clamp message_start breakdown to creation (preserve 5m+1h…
ngh1105 Jun 29, 2026
830581d
fix(cache): harden cache_tracker Stop (idempotent) + Compute marks di…
ngh1105 Jun 29, 2026
d58b63c
test(cache): guard empty-cache breakdown clamp for below-min input
ngh1105 Jun 30, 2026
1df9a59
docs(spec): cache capacity, O(1) LRU, and metrics design
ngh1105 Jul 2, 2026
e4180e8
docs(plan): cache capacity, O(1) LRU, and metrics implementation plan
ngh1105 Jul 2, 2026
85a9d06
feat(config): add PromptCacheMaxEntries (default 131072)
ngh1105 Jul 2, 2026
36a0799
refactor(cache): O(1) LRU via container/list + 131072 default capacity
ngh1105 Jul 2, 2026
56ebf97
test(cache): regression guard for prefix churn at low capacity
ngh1105 Jul 2, 2026
216c65b
feat(cache): hit/miss/eviction metrics + Stats()
ngh1105 Jul 2, 2026
333a802
feat(handler): expose prompt-cache stats in /v1/stats
ngh1105 Jul 2, 2026
d5ee19b
test(cache): hit-rate simulation (realistic 99.4% / cold 0% / single …
ngh1105 Jul 2, 2026
2cc319a
chore(handler): strip dispatch-only RecordLatency for cache-only main
ngh1105 Jul 2, 2026
13380d4
Merge remote-tracking branch 'origin/main'
ngh1105 Jul 2, 2026
3608524
fix: session isolation, data races, SSO callback paste, auto-restore
ngh1105 Jul 2, 2026
6176db6
fix: generic error for ownership denial + add ownership tests
ngh1105 Jul 2, 2026
f5ae72c
feat: allow idc (enterprise SSO) accounts to fallback probe eu-central-1
ngh1105 Jul 7, 2026
5b7f681
docs: add Telegram contact to README
ngh1105 Jul 9, 2026
a882d87
feat(cache): atomic persist + cache_control fast-path + refresh-token…
ngh1105 Jul 9, 2026
ec05589
@
ngh1105 Jul 10, 2026
4f079f4
@
ngh1105 Jul 10, 2026
0c4949d
feat(dispatch): typed upstream permanent errors (P1 from kiro-tutu)
ngh1105 Jul 11, 2026
5eb78de
feat(cache): Opus min-cacheable threshold 4096->1024 (P1 from kiro-tutu)
ngh1105 Jul 11, 2026
7370842
feat(observability): rate limiting + Prometheus metrics + token warmu…
ngh1105 Jul 11, 2026
c59ef41
feat(dispatch): health-scoring + inFlight tracking + concurrency cap …
ngh1105 Jul 11, 2026
a2ddc08
feat(audit): durable JSONL audit store + /debug/audit-log (zero-dep P2)
ngh1105 Jul 11, 2026
1cc1843
docs(metrics): reconcile stale comments with merged audit + health-sc…
ngh1105 Jul 11, 2026
b27686c
feat(translator): tool-definition compression (prevents upstream "Imp…
ngh1105 Jul 11, 2026
1add9bb
feat(cache): windowed dispatch metrics + hit-rate safety valve (zero-…
ngh1105 Jul 11, 2026
ae07ac0
feat(stream): SSE keepalive heartbeat during upstream stalls (zero-de…
ngh1105 Jul 11, 2026
fe7cb52
fix(auth): constant-time compare for legacy single API key
ngh1105 Jul 11, 2026
be43c7f
feat(headers): derive stable MachineId fallback (anti-fingerprint, ze…
ngh1105 Jul 11, 2026
771a748
feat(headers): per-account client profile, never Linux (anti-fingerpr…
ngh1105 Jul 11, 2026
8cb1c37
feat(errors): translate opaque "Improperly formed request" to client …
ngh1105 Jul 11, 2026
93c79e5
fix(translator): preserve explicit temperature:0 via *float64
ngh1105 Jul 12, 2026
6213fb9
chore(gitignore): ignore local scratch with live API key + editor bac…
ngh1105 Jul 12, 2026
f04e8b1
feat(cache): structural system-skip + auto-prefix breakpoints (Rust→G…
ngh1105 Jul 13, 2026
18e834d
feat(config): api_key account fields, region getters, MaxPayloadBytes
ngh1105 Jul 13, 2026
851add7
refactor(translator): runtime-configurable MaxPayloadBytes cap
ngh1105 Jul 13, 2026
2013b1c
feat(headers): api_key bearer + tokentype API_KEY branch
ngh1105 Jul 13, 2026
594df21
feat(kiro_api): skip profile-ARN resolution for api_key accounts
ngh1105 Jul 13, 2026
896211c
feat(kiro): region rebuild for api_key accounts in CallKiroAPI
ngh1105 Jul 13, 2026
fd30390
feat(handler): api_key add-account branch, model gate, maxPayloadByte…
ngh1105 Jul 13, 2026
cb6de92
feat(handler): api_key credential import branch
ngh1105 Jul 13, 2026
4def18f
feat(apikey_batch): bulk API-key import + /auth/apikeys-batch route
ngh1105 Jul 13, 2026
baa91c8
test(apikey): characterize no-refresh invariant on handler path
ngh1105 Jul 13, 2026
ade1621
feat(web): API-key + bulk import modals and maxPayloadBytes setting
ngh1105 Jul 13, 2026
086dc6e
fix(apikey): unify region, guard ban-on-refresh, mask key in logs
ngh1105 Jul 13, 2026
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 6 additions & 0 deletions .gitignore
Original file line number Diff line number Diff line change
Expand Up @@ -22,3 +22,9 @@ Thumbs.db
# Local backups / scratch
backup*/
PR-*.md
# /test.py: local scratch script holding a live API key (never commit)
/test.py
# editor backup files (e.g. kiro-go.exe~)
*~
# local smoke-test output (dispatch runs, cached prompts, r-*.out)
.smoke/
2 changes: 2 additions & 0 deletions Dockerfile
Original file line number Diff line number Diff line change
Expand Up @@ -23,6 +23,8 @@ COPY --from=builder /app/web ./web
RUN mkdir -p /app/data

EXPOSE 8080
# Enterprise SSO (Microsoft 365) loopback callback port — see docker-compose.yml.
EXPOSE 3128
VOLUME /app/data

CMD ["./kiro-go"]
4 changes: 4 additions & 0 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -117,6 +117,10 @@ The setting takes effect immediately without restarting.

Friendly discussion is welcome. If you run into issues, try asking Claude Code, Codex, or similar tools for help first — most problems can be solved that way. PRs are even better.

## Contact

Telegram: [@tutua16888](https://t.me/tutua16888)

## Friend Links

- [LINUX DO](https://linux.do)
Expand Down
4 changes: 4 additions & 0 deletions README_CN.md
Original file line number Diff line number Diff line change
Expand Up @@ -117,6 +117,10 @@ curl http://localhost:8080/v1/chat/completions \

欢迎友好交流。遇到问题时,建议先让 Claude Code、Codex 等工具帮忙排查一下,大部分问题都能自己解决。如果能直接提个 PR 就更好了。

## 联系方式

Telegram:[@tutua16888](https://t.me/tutua16888)

## 友情链接

- [LINUX DO](https://linux.do)
Expand Down
Loading