Skip to content

v2.7.0

Choose a tag to compare

View all tags
@RvVeen RvVeen released this 07 Oct 19:25
· 32 commits to master since this release
v2.7.0
This tag was signed with the committer’s verified signature.
RvVeen R. van Veen
GPG key ID: 8F778675B19F810D
Verified
Learn about vigilant mode.
f53afd9
This commit was signed with the committer’s verified signature.
RvVeen R. van Veen
GPG key ID: 8F778675B19F810D
Verified
Learn about vigilant mode.

First community contribution — big thanks to @manueltusset (Manuel Ristoff Tusset) for building the Kiro API key sign-in (#3) and the Sonnet 5.5 / Opus 5.5 fixes (#2). 🎉

Added

  • API key sign-in (opt-in). KIRO_API_KEY (or api_key in kiro.json; the env var wins) is a first-class configuration source, not only an interactive paste. The sign-in prompt prefills from it with a masked hint (ksk_…1234) and the full key never appears; a typed-but-invalid value is still rejected on its own. Per Kiro's own documentation the API key is meant for CI and headless use.
  • Headless auto-register. With a key configured, the plugin registers the account on startup — no interactive login, no browser. The region comes from the key's own profile ARN, so you never set one.
  • v2: KIRO_API_KEY as an env integration method. The host connects from the variable itself, with no sign-in step, and keeps env methods out of the picker — so there is a single "Kiro API key" row, not two.

Fixed

  • Sonnet 5.5 output limit corrected to the 128K the catalog reports (was defaulting to 64K). The off thinking variant is no longer offered on Sonnet 5.5 or Opus 5.5 — the Kiro endpoint rejects it today, so neither model shows it until the service accepts it. (#2)
  • An API key now supersedes a same-profile IDC login on the first start, not the next, so one subscription does not run as a two-account pool. The removal is logged.
  • Duplicate API-key accounts are collapsed on startup, folding on the key fingerprint.
  • kiro.db is locked to 0600 and ksk_ keys are redacted from logs.
Assets 2
Loading