v0.2.4

Koder v0.2.4

A big release: bring your history over from other coding agents, a full security-hardening pass, optional OS-keychain credential storage, and a wave of app and performance improvements.

Highlights

• 📥 Import your sessions from other tools. New koder import brings conversation history into Koder from opencode, Claude Code, and Cursor — run koder import to pick a source interactively, or koder import <source>. Re-running is idempotent (no duplicates), each source's store is read read-only, and it works under both the CLI and the desktop runtime on macOS, Linux, and Windows.
• 🔐 Optional OS-keychain credential storage. Store your API credentials in the macOS Keychain / Windows Credential Manager / Linux libsecret instead of a file (opt-in; file remains the default). Token columns in the local account database can additionally be encrypted with a keychain-held key.
• 🛡️ Security-hardening pass. A broad set of fixes closing SSRF, credential-leak, and world-readable-storage gaps, plus opt-in server limits (see below).
• ✨ App improvements. A "Session changes" review mode, a Stop button for individual subagents, per-message fork, show/hide toggles for API-key inputs, and clearer error surfacing.

New features

• koder import — import sessions from opencode, Claude Code, and Cursor (interactive picker + per-source subcommands, --dry-run, --yes).
• OS-keychain credential storage — opt-in backend for the credential store, with a config.json alias and an honest migration log.
• Encrypted token columns — AES-256-GCM at rest for the account database's access/refresh tokens, keyed from the OS keychain (opt-in, best-effort).
• "Session changes" review mode in the app.
• Stop a single subagent without stopping the whole turn.
• Per-message fork icon next to revert.
• Show/hide toggle for API-key inputs.
• Opt-in server limits — request rate limit, concurrent-request cap, request body-size limit, and an MCP tool-call timeout.

Security & privacy

• Stop OAuth tokens being left in a world-readable database.
• Pin webfetch to the address the SSRF guard validated.
• Require HTTPS + explicit consent for remote-fetched code paths.
• Stop the caller's credentials leaking to proxied upstreams.
• Close risky-command classification gaps.
• Gate write redirects that escape the workspace.
• Give the served UI's CSP a real exfiltration backstop.
• Default-on stream-liveness guard so stalled streams fail fast.

Performance

• Index the session list on time_updated to drop a full-table scan.
• Compute system instructions once per turn instead of once per step.

Fixes & polish

• Show the provider name as aiXplain (not "aiXplain Zen").
• Label displayed cost as an estimate and stop showing $0.00 for no-usage turns.
• Refetch bootstrap on provider connect so the first request isn't rejected.
• Load the Ghostty terminal wasm from a real asset URL so the terminal works in dev.
• Stop the context-usage toggle from activating Review.
• Surface session errors in-app instead of only as OS notifications; render an inline error row for turns that die before any message.
• Stop the disconnect toast claiming success while the provider stays connected.
• Stop a re-expanded review file rendering an empty placeholder.
• Guard remaining text-nesting sites against renderable children.
• Restore PRAGMA synchronous after the JSON→SQLite migration.

Under the hood

• Make the keychain work in the compiled binary via Bun.secrets.
• Stop the nightly cron from failing the ci-required gate; make the needs-guard non-vacuous.
• Add a sign-macos-test workflow to build a signed CLI for local testing.
• Cap every dependency override at its currently-resolved major.

Install

curl -fsSL https://github.com/aixplain/koder/releases/latest/download/install | bash

Already on Koder? koder upgrade.

Platforms: macOS (arm64 · x64), Linux (x64 · arm64), Windows (x64). macOS builds are signed with aiXplain's Developer ID and notarized by Apple.

Koder v0.2.3

Command-line release for macOS, Linux and Windows.

Install

curl -fsSL https://github.com/aixplain/koder/releases/latest/download/install | bash

Open a new terminal afterwards and run koder.

macOS binaries are Developer ID signed and notarized by aiXplain, so they run without a Gatekeeper prompt.

The previous command name, aixplain-code, continues to work.

Checksums

Verify a download with shasum -a 256 <file> and compare against the values below.