kiro-agent-team 1.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.kiro/README.md +228 -0
- package/.kiro/agents/backend-engineer.json +6 -0
- package/.kiro/agents/backend-engineer.md +643 -0
- package/.kiro/agents/database-specialist.json +6 -0
- package/.kiro/agents/database-specialist.md +390 -0
- package/.kiro/agents/development-logger.json +6 -0
- package/.kiro/agents/development-logger.md +265 -0
- package/.kiro/agents/devops-engineer.json +6 -0
- package/.kiro/agents/devops-engineer.md +287 -0
- package/.kiro/agents/frontend-architect.json +6 -0
- package/.kiro/agents/frontend-architect.md +1032 -0
- package/.kiro/agents/hooks/backend-engineer-hooks.yaml +540 -0
- package/.kiro/agents/hooks/database-specialist-hooks.yaml +488 -0
- package/.kiro/agents/hooks/development-logger-hooks.yaml +361 -0
- package/.kiro/agents/hooks/devops-engineer-hooks.yaml +345 -0
- package/.kiro/agents/hooks/frontend-architect-hooks.yaml +521 -0
- package/.kiro/agents/hooks/project-manager-hooks.yaml +513 -0
- package/.kiro/agents/hooks/security-specialist-hooks.yaml +358 -0
- package/.kiro/agents/hooks/test-orchestrator-hooks.yaml +380 -0
- package/.kiro/agents/hooks/ui-ux-designer-hooks.yaml +353 -0
- package/.kiro/agents/project-manager.json +6 -0
- package/.kiro/agents/project-manager.md +344 -0
- package/.kiro/agents/prompts/backend-engineer-system.md +815 -0
- package/.kiro/agents/prompts/database-specialist-system.md +332 -0
- package/.kiro/agents/prompts/development-logger-system.md +232 -0
- package/.kiro/agents/prompts/devops-engineer-system.md +260 -0
- package/.kiro/agents/prompts/frontend-architect-system.md +305 -0
- package/.kiro/agents/prompts/project-manager-system.md +285 -0
- package/.kiro/agents/prompts/security-specialist-system.md +231 -0
- package/.kiro/agents/prompts/test-orchestrator-system.md +214 -0
- package/.kiro/agents/prompts/ui-ux-designer-system.md +270 -0
- package/.kiro/agents/security-specialist.json +6 -0
- package/.kiro/agents/security-specialist.md +277 -0
- package/.kiro/agents/test-orchestrator.json +6 -0
- package/.kiro/agents/test-orchestrator.md +266 -0
- package/.kiro/agents/ui-ux-designer.json +6 -0
- package/.kiro/agents/ui-ux-designer.md +284 -0
- package/.kiro/devlog/00-START-HERE.md +444 -0
- package/.kiro/devlog/COMPLETE-WORKFLOW.md +553 -0
- package/.kiro/devlog/DEVLOG-INTEGRATION.md +413 -0
- package/.kiro/devlog/DEVLOG-PROCESS-FLOWS.md +484 -0
- package/.kiro/devlog/DEVLOG-QUICK-REF.md +299 -0
- package/.kiro/devlog/DEVLOG.md +22 -0
- package/.kiro/devlog/IMPLEMENTATION-COMPLETE.txt +434 -0
- package/.kiro/devlog/IMPLEMENTATION-SUMMARY.md +358 -0
- package/.kiro/devlog/README.md +363 -0
- package/.kiro/devlog/devlog-update.bat +136 -0
- package/.kiro/devlog/devlog-update.sh +275 -0
- package/.kiro/devlog/feature-completion-hook.bat +78 -0
- package/.kiro/devlog/feature-completion-hook.sh +84 -0
- package/.kiro/documentation/cli.md +31 -0
- package/.kiro/documentation/docs_cli.md +41 -0
- package/.kiro/documentation/docs_cli_authentication.md +43 -0
- package/.kiro/documentation/docs_cli_autocomplete.md +132 -0
- package/.kiro/documentation/docs_cli_billing.md +31 -0
- package/.kiro/documentation/docs_cli_billing_contact-support.md +43 -0
- package/.kiro/documentation/docs_cli_billing_managing-taxes.md +67 -0
- package/.kiro/documentation/docs_cli_billing_related-questions.md +49 -0
- package/.kiro/documentation/docs_cli_billing_subscription-portal.md +31 -0
- package/.kiro/documentation/docs_cli_chat.md +84 -0
- package/.kiro/documentation/docs_cli_chat_configuration.md +40 -0
- package/.kiro/documentation/docs_cli_chat_context.md +258 -0
- package/.kiro/documentation/docs_cli_chat_git-aware-selection.md +41 -0
- package/.kiro/documentation/docs_cli_chat_images.md +53 -0
- package/.kiro/documentation/docs_cli_chat_manage-prompts.md +216 -0
- package/.kiro/documentation/docs_cli_chat_model-selection.md +153 -0
- package/.kiro/documentation/docs_cli_chat_permissions.md +68 -0
- package/.kiro/documentation/docs_cli_chat_planning-agent.md +230 -0
- package/.kiro/documentation/docs_cli_chat_responding.md +123 -0
- package/.kiro/documentation/docs_cli_chat_security.md +87 -0
- package/.kiro/documentation/docs_cli_chat_subagents.md +77 -0
- package/.kiro/documentation/docs_cli_code-intelligence.md +251 -0
- package/.kiro/documentation/docs_cli_custom-agents.md +37 -0
- package/.kiro/documentation/docs_cli_custom-agents_configuration-reference.md +941 -0
- package/.kiro/documentation/docs_cli_custom-agents_creating.md +93 -0
- package/.kiro/documentation/docs_cli_custom-agents_examples.md +360 -0
- package/.kiro/documentation/docs_cli_custom-agents_troubleshooting.md +180 -0
- package/.kiro/documentation/docs_cli_enterprise_billing.md +33 -0
- package/.kiro/documentation/docs_cli_enterprise_concepts.md +34 -0
- package/.kiro/documentation/docs_cli_enterprise_getting-started.md +19 -0
- package/.kiro/documentation/docs_cli_enterprise_iam.md +251 -0
- package/.kiro/documentation/docs_cli_enterprise_monitor-and-track.md +15 -0
- package/.kiro/documentation/docs_cli_enterprise_monitor-and-track_dashboard.md +62 -0
- package/.kiro/documentation/docs_cli_enterprise_monitor-and-track_prompt-logging.md +165 -0
- package/.kiro/documentation/docs_cli_enterprise_monitor-and-track_user-activity.md +123 -0
- package/.kiro/documentation/docs_cli_enterprise_settings.md +15 -0
- package/.kiro/documentation/docs_cli_enterprise_subscribe.md +36 -0
- package/.kiro/documentation/docs_cli_enterprise_subscription-management.md +55 -0
- package/.kiro/documentation/docs_cli_enterprise_supported-regions.md +39 -0
- package/.kiro/documentation/docs_cli_experimental.md +282 -0
- package/.kiro/documentation/docs_cli_experimental_checkpointing.md +439 -0
- package/.kiro/documentation/docs_cli_experimental_delegate.md +422 -0
- package/.kiro/documentation/docs_cli_experimental_knowledge-management.md +449 -0
- package/.kiro/documentation/docs_cli_experimental_tangent-mode.md +357 -0
- package/.kiro/documentation/docs_cli_experimental_thinking.md +331 -0
- package/.kiro/documentation/docs_cli_experimental_todo-lists.md +385 -0
- package/.kiro/documentation/docs_cli_hooks.md +207 -0
- package/.kiro/documentation/docs_cli_installation.md +235 -0
- package/.kiro/documentation/docs_cli_mcp.md +106 -0
- package/.kiro/documentation/docs_cli_mcp_configuration.md +294 -0
- package/.kiro/documentation/docs_cli_mcp_examples.md +273 -0
- package/.kiro/documentation/docs_cli_mcp_governance.md +436 -0
- package/.kiro/documentation/docs_cli_mcp_security.md +77 -0
- package/.kiro/documentation/docs_cli_migrating-from-q.md +129 -0
- package/.kiro/documentation/docs_cli_privacy-and-security.md +83 -0
- package/.kiro/documentation/docs_cli_privacy-and-security_compliance-validation.md +17 -0
- package/.kiro/documentation/docs_cli_privacy-and-security_data-protection.md +104 -0
- package/.kiro/documentation/docs_cli_privacy-and-security_firewalls.md +26 -0
- package/.kiro/documentation/docs_cli_privacy-and-security_infrastructure-security.md +10 -0
- package/.kiro/documentation/docs_cli_privacy-and-security_vpc-endpoints.md +41 -0
- package/.kiro/documentation/docs_cli_reference_built-in-tools.md +624 -0
- package/.kiro/documentation/docs_cli_reference_cli-commands.md +689 -0
- package/.kiro/documentation/docs_cli_reference_settings.md +294 -0
- package/.kiro/documentation/docs_cli_reference_slash-commands.md +559 -0
- package/.kiro/documentation/docs_cli_steering.md +84 -0
- package/.kiro/guides/AGENT_WORKFLOW_GUIDE.md +294 -0
- package/.kiro/guides/DEVLOG.md +882 -0
- package/.kiro/guides/IMPLEMENTATION_EXAMPLES.md +611 -0
- package/.kiro/guides/PIV Loop.md +122 -0
- package/.kiro/guides/PIV Loop.png +0 -0
- package/.kiro/guides/PIVLoop.png +0 -0
- package/.kiro/guides/QUICK_REFERENCE.md +202 -0
- package/.kiro/guides/README.md +149 -0
- package/.kiro/guides/advanced-patterns.md +514 -0
- package/.kiro/guides/agent-coordination.md +434 -0
- package/.kiro/guides/core-workflows.md +409 -0
- package/.kiro/guides/emergency-procedures.md +414 -0
- package/.kiro/guides/project-evaluation.md +534 -0
- package/.kiro/guides/quality-assurance.md +431 -0
- package/.kiro/guides/quick-start.md +235 -0
- package/.kiro/guides/troubleshooting.md +575 -0
- package/.kiro/guides/walkthroughs.md +711 -0
- package/.kiro/prompts/add-to-devlog.md +263 -0
- package/.kiro/prompts/code-review-fix.md +18 -0
- package/.kiro/prompts/code-review-hackathon.md +167 -0
- package/.kiro/prompts/code-review-security.md +454 -0
- package/.kiro/prompts/code-review.md +113 -0
- package/.kiro/prompts/create-prd.md +151 -0
- package/.kiro/prompts/execute-backend.md +257 -0
- package/.kiro/prompts/execute-frontend.md +438 -0
- package/.kiro/prompts/execute-logging.md +491 -0
- package/.kiro/prompts/execute-security.md +482 -0
- package/.kiro/prompts/execute-testing.md +528 -0
- package/.kiro/prompts/execute.md +101 -0
- package/.kiro/prompts/execution-report.md +72 -0
- package/.kiro/prompts/implement-fix.md +228 -0
- package/.kiro/prompts/plan-feature.md +433 -0
- package/.kiro/prompts/prime.md +73 -0
- package/.kiro/prompts/quality-metrics.md +622 -0
- package/.kiro/prompts/quickstart.md +318 -0
- package/.kiro/prompts/rca.md +220 -0
- package/.kiro/prompts/system-review.md +189 -0
- package/README.md +32 -0
- package/bin/cli.js +97 -0
- package/package.json +33 -0
|
@@ -0,0 +1,153 @@
|
|
|
1
|
+
# Model selection
|
|
2
|
+
Kiro provides multiple powerful AI agent options to handle your development tasks: **Auto** , **Claude Sonnet 4.0** , **Claude Sonnet 4.5** , **Claude Haiku 4.5** , and **Claude Opus 4.5**. Each offers distinct advantages depending on your needs and usage patterns.
|
|
3
|
+
## Available models[](https://kiro.dev/docs/cli/chat/model-selection/#available-models)
|
|
4
|
+
### Auto (recommended)[](https://kiro.dev/docs/cli/chat/model-selection/#auto-recommended)
|
|
5
|
+
Auto is Kiro's default intelligent model router that combines multiple frontier models with advanced optimization techniques.
|
|
6
|
+
**Key benefits:**
|
|
7
|
+
* **Cost-effective** – Approximately 23% less expensive than direct Sonnet 4 usage
|
|
8
|
+
* **Smart routing** – Automatically chooses the optimal model for each task
|
|
9
|
+
* **Consistent quality** – Delivers Sonnet 4-level results across different task types
|
|
10
|
+
* **Plan efficiency** – Makes your usage limits go further
|
|
11
|
+
|
|
12
|
+
|
|
13
|
+
#### What model does Auto use?[](https://kiro.dev/docs/cli/chat/model-selection/#what-model-does-auto-use)
|
|
14
|
+
Auto uses best in class LLM models (Claude Sonnet 4 and alike) to provide you the best quality for the type of tasks assigned to the agent. We maintain a very high bar to ensure that the quality of what is offered under Auto compares to or exceeds the quality of separate models made available to our users.
|
|
15
|
+
### Claude Sonnet 4.0[](https://kiro.dev/docs/cli/chat/model-selection/#claude-sonnet-40)
|
|
16
|
+
Direct access to Anthropic's Claude Sonnet 4.0 model for users who prefer consistent model selection or have specific requirements for using this particular model.
|
|
17
|
+
**Key benefits:**
|
|
18
|
+
* **Predictable behavior** – Same model for all interactions
|
|
19
|
+
* **Direct access** – No routing or optimization layers
|
|
20
|
+
* **Full control** – Complete transparency in model selection
|
|
21
|
+
|
|
22
|
+
|
|
23
|
+
### Claude Sonnet 4.5[](https://kiro.dev/docs/cli/chat/model-selection/#claude-sonnet-45)
|
|
24
|
+
Anthropic's best model for complex agents and coding, with the highest intelligence across most tasks.
|
|
25
|
+
**Key benefits:**
|
|
26
|
+
* **Coding excellence** – Advanced state-of-the-art on SWE-bench Verified
|
|
27
|
+
* **Agent capabilities** – Extended autonomous operation for hours with effective tool usage
|
|
28
|
+
* **Enhanced reasoning** – Improved planning, system design, and security engineering
|
|
29
|
+
|
|
30
|
+
|
|
31
|
+
### Claude Opus 4.5[](https://kiro.dev/docs/cli/chat/model-selection/#claude-opus-45)
|
|
32
|
+
Anthropic's most intelligent model combining maximum capability with practical performance. Ideal for complex specialized tasks, professional software engineering, and advanced agents.
|
|
33
|
+
**Key benefits:**
|
|
34
|
+
* **Maximum intelligence** – Step-change improvements in reasoning, coding, and problem-solving
|
|
35
|
+
* **Practical performance** – More accessible price point than previous Opus models
|
|
36
|
+
* **Complex reasoning** – Better balance of tradeoffs and ambiguity across multiple systems
|
|
37
|
+
|
|
38
|
+
|
|
39
|
+
### Claude Haiku 4.5[](https://kiro.dev/docs/cli/chat/model-selection/#claude-haiku-45)
|
|
40
|
+
Anthropic's fastest and most intelligent Haiku model with near-frontier performance. Delivers intelligence matching Sonnet 4 at significantly lower cost and faster speed.
|
|
41
|
+
**Key benefits:**
|
|
42
|
+
* **Near-frontier intelligence** – Matches Sonnet 4 performance across reasoning and coding
|
|
43
|
+
* **Blazing speed** – More than twice the speed of Sonnet 4
|
|
44
|
+
* **Cost-effective** – Near-frontier intelligence at one-third the cost
|
|
45
|
+
* **Extended thinking** – First Haiku model with advanced reasoning capabilities
|
|
46
|
+
|
|
47
|
+
|
|
48
|
+
## Cost comparison[](https://kiro.dev/docs/cli/chat/model-selection/#cost-comparison)
|
|
49
|
+
Understanding the credit consumption differences:
|
|
50
|
+
Model | Credit Usage | Example Task Cost
|
|
51
|
+
---|---|---
|
|
52
|
+
**Claude Haiku 4.5** | 0.4x | 4 credits
|
|
53
|
+
**Auto** | 1.0x | 10 credits
|
|
54
|
+
**Claude Sonnet 4.0** | 1.3x | 13 credits
|
|
55
|
+
**Claude Sonnet 4.5** | 1.3x | 13 credits
|
|
56
|
+
**Claude Opus 4.5** | 2.2x | 22 credits
|
|
57
|
+
## Choosing the right model[](https://kiro.dev/docs/cli/chat/model-selection/#choosing-the-right-model)
|
|
58
|
+
### Claude Haiku 4.5[](https://kiro.dev/docs/cli/chat/model-selection/#claude-haiku-45-1)
|
|
59
|
+
Consider using Haiku 4.5 when:
|
|
60
|
+
* **Speed is critical** – You need fast responses for interactive experiences
|
|
61
|
+
* **Cost efficiency matters** – Near-frontier intelligence at one-third the cost
|
|
62
|
+
* **High-volume processing** – Cost-effective intelligence for large-scale deployments
|
|
63
|
+
* **Real-time applications** – Fast turnaround for user-facing features
|
|
64
|
+
|
|
65
|
+
|
|
66
|
+
### Auto[](https://kiro.dev/docs/cli/chat/model-selection/#auto)
|
|
67
|
+
Consider using Auto when:
|
|
68
|
+
* **Cost efficiency matters** – You want to maximize your plan's value
|
|
69
|
+
* **General development work** – Most coding, debugging, and planning tasks
|
|
70
|
+
* **Variable task types** – Working on diverse projects with different requirements
|
|
71
|
+
* **Plan optimization** – You want your limits to stretch further
|
|
72
|
+
|
|
73
|
+
|
|
74
|
+
### Sonnet 4.0 & Sonnet 4.5[](https://kiro.dev/docs/cli/chat/model-selection/#sonnet-40--sonnet-45)
|
|
75
|
+
Consider using Sonnet 4.0 or Sonnet 4.5 when:
|
|
76
|
+
* **Consistency is critical** – You need predictable model behavior
|
|
77
|
+
* **Specific requirements** – Your workflow depends on Sonnet 4's particular capabilities
|
|
78
|
+
* **Model transparency** – You prefer knowing exactly which model handles each request
|
|
79
|
+
* **Budget flexibility** – Higher costs aren't a primary concern
|
|
80
|
+
|
|
81
|
+
|
|
82
|
+
### Claude Opus 4.5[](https://kiro.dev/docs/cli/chat/model-selection/#claude-opus-45-1)
|
|
83
|
+
Consider using Opus 4.5 when:
|
|
84
|
+
* **Maximum intelligence needed** – Most complex specialized tasks requiring top-tier reasoning
|
|
85
|
+
* **Professional software engineering** – Sophisticated production development challenges
|
|
86
|
+
* **Advanced agents** – Long-running autonomous tasks with complex decision-making
|
|
87
|
+
* **Critical implementations** – High-stakes features where quality is paramount
|
|
88
|
+
|
|
89
|
+
|
|
90
|
+
## How to switch models[](https://kiro.dev/docs/cli/chat/model-selection/#how-to-switch-models)
|
|
91
|
+
### In the chat interface[](https://kiro.dev/docs/cli/chat/model-selection/#in-the-chat-interface)
|
|
92
|
+

|
|
93
|
+
### Kiro CLI setting[](https://kiro.dev/docs/cli/chat/model-selection/#kiro-cli-setting)
|
|
94
|
+
bash
|
|
95
|
+
```
|
|
96
|
+
|
|
97
|
+
kiro-cli settings chat.defaultModel claude-sonnet4
|
|
98
|
+
|
|
99
|
+
|
|
100
|
+
```
|
|
101
|
+
|
|
102
|
+
### Persisting your model selection[](https://kiro.dev/docs/cli/chat/model-selection/#persisting-your-model-selection)
|
|
103
|
+
To save your current model as the default for all future sessions:
|
|
104
|
+
bash
|
|
105
|
+
```
|
|
106
|
+
|
|
107
|
+
> /model set-current-as-default
|
|
108
|
+
|
|
109
|
+
|
|
110
|
+
```
|
|
111
|
+
|
|
112
|
+
This stores your preference in `~/.kiro/settings/cli.json`. New sessions will automatically use this model.
|
|
113
|
+
## Best practices[](https://kiro.dev/docs/cli/chat/model-selection/#best-practices)
|
|
114
|
+
### Maximizing efficiency[](https://kiro.dev/docs/cli/chat/model-selection/#maximizing-efficiency)
|
|
115
|
+
* **Start with Auto** – Use it as your default for most tasks
|
|
116
|
+
* **Use Haiku for speed** – Near-frontier intelligence with fast responses and lower cost
|
|
117
|
+
* **Use Sonnet for agents** – Best for complex coding and autonomous workflows
|
|
118
|
+
* **Reserve Opus for maximum intelligence** – Use for the most complex specialized tasks
|
|
119
|
+
* **Monitor usage** – Track how different models affect your plan consumption
|
|
120
|
+
* **Experiment** – Try different models for similar tasks to compare results
|
|
121
|
+
|
|
122
|
+
|
|
123
|
+
### Cost management[](https://kiro.dev/docs/cli/chat/model-selection/#cost-management)
|
|
124
|
+
* **Plan accordingly** – Factor model choice into your tier selection
|
|
125
|
+
* **Track patterns** – Understand which tasks benefit most from each model
|
|
126
|
+
* **Optimize workflows** – Adjust development practices based on model strengths
|
|
127
|
+
* **Consider overages** – Enable if you need flexibility beyond plan limits
|
|
128
|
+
|
|
129
|
+
|
|
130
|
+
Page updated: December 19, 2025
|
|
131
|
+
[Chat](https://kiro.dev/docs/cli/chat/)
|
|
132
|
+
[Subagents](https://kiro.dev/docs/cli/chat/subagents/)
|
|
133
|
+
On this page
|
|
134
|
+
* [Available models](https://kiro.dev/docs/cli/chat/model-selection/#available-models)
|
|
135
|
+
* [Auto (recommended)](https://kiro.dev/docs/cli/chat/model-selection/#auto-recommended)
|
|
136
|
+
* [What model does Auto use?](https://kiro.dev/docs/cli/chat/model-selection/#what-model-does-auto-use)
|
|
137
|
+
* [Claude Sonnet 4.0](https://kiro.dev/docs/cli/chat/model-selection/#claude-sonnet-40)
|
|
138
|
+
* [Claude Sonnet 4.5](https://kiro.dev/docs/cli/chat/model-selection/#claude-sonnet-45)
|
|
139
|
+
* [Claude Opus 4.5](https://kiro.dev/docs/cli/chat/model-selection/#claude-opus-45)
|
|
140
|
+
* [Claude Haiku 4.5](https://kiro.dev/docs/cli/chat/model-selection/#claude-haiku-45)
|
|
141
|
+
* [Cost comparison](https://kiro.dev/docs/cli/chat/model-selection/#cost-comparison)
|
|
142
|
+
* [Choosing the right model](https://kiro.dev/docs/cli/chat/model-selection/#choosing-the-right-model)
|
|
143
|
+
* [Claude Haiku 4.5](https://kiro.dev/docs/cli/chat/model-selection/#claude-haiku-45-1)
|
|
144
|
+
* [Auto](https://kiro.dev/docs/cli/chat/model-selection/#auto)
|
|
145
|
+
* [Sonnet 4.0 & Sonnet 4.5](https://kiro.dev/docs/cli/chat/model-selection/#sonnet-40--sonnet-45)
|
|
146
|
+
* [Claude Opus 4.5](https://kiro.dev/docs/cli/chat/model-selection/#claude-opus-45-1)
|
|
147
|
+
* [How to switch models](https://kiro.dev/docs/cli/chat/model-selection/#how-to-switch-models)
|
|
148
|
+
* [In the chat interface](https://kiro.dev/docs/cli/chat/model-selection/#in-the-chat-interface)
|
|
149
|
+
* [Kiro CLI setting](https://kiro.dev/docs/cli/chat/model-selection/#kiro-cli-setting)
|
|
150
|
+
* [Persisting your model selection](https://kiro.dev/docs/cli/chat/model-selection/#persisting-your-model-selection)
|
|
151
|
+
* [Best practices](https://kiro.dev/docs/cli/chat/model-selection/#best-practices)
|
|
152
|
+
* [Maximizing efficiency](https://kiro.dev/docs/cli/chat/model-selection/#maximizing-efficiency)
|
|
153
|
+
* [Cost management](https://kiro.dev/docs/cli/chat/model-selection/#cost-management)
|
|
@@ -0,0 +1,68 @@
|
|
|
1
|
+
# Managing tool permissions
|
|
2
|
+
You can use the `/tools` command to manage permissions for tools that Kiro uses to perform actions on your system. This provides granular control over what actions Kiro can perform.
|
|
3
|
+
Tools commands
|
|
4
|
+
Command | Description
|
|
5
|
+
---|---
|
|
6
|
+
`help` | Shows help related to tools.
|
|
7
|
+
`trust` | Trusts a specific tool for the session.
|
|
8
|
+
`untrust` | Reverts a tool to per-request confirmation.
|
|
9
|
+
`trust-all` | Trusts all tools (equivalent to deprecated /acceptall).
|
|
10
|
+
`reset` | Resets all tools to default permission levels.
|
|
11
|
+
To view the current permission settings for all tools:
|
|
12
|
+
```
|
|
13
|
+
|
|
14
|
+
$ kiro-cli chat
|
|
15
|
+
Kiro> /tools
|
|
16
|
+
|
|
17
|
+
|
|
18
|
+
```
|
|
19
|
+
|
|
20
|
+
This displays a list of all available tools and their current permission status (trusted or per-request).
|
|
21
|
+
Tool permissions have two possible states:
|
|
22
|
+
* _Trusted_ : Kiro can use the tool without asking for confirmation each time.
|
|
23
|
+
* _Per-request_ : Kiro must ask for your confirmation each time before using the tool.
|
|
24
|
+
|
|
25
|
+
|
|
26
|
+
To trust or untrust a specific tool for the current session:
|
|
27
|
+
```
|
|
28
|
+
|
|
29
|
+
Kiro> /tools trust read
|
|
30
|
+
Kiro> /tools untrust shell
|
|
31
|
+
|
|
32
|
+
|
|
33
|
+
```
|
|
34
|
+
|
|
35
|
+
You can also trust all tools at once with `/tools trust-all`(equivalent to the deprecated `/acceptall` command):
|
|
36
|
+
```
|
|
37
|
+
|
|
38
|
+
Kiro> /tools trust-all
|
|
39
|
+
|
|
40
|
+
|
|
41
|
+
```
|
|
42
|
+
|
|
43
|
+
###### Warning[](https://kiro.dev/docs/cli/chat/permissions/#warning)
|
|
44
|
+
Using `/tools trust-all` carries risks. For more information, see [Understanding security risks](https://kiro.dev/docs/cli/chat/permissions/command-line-chat-security.html#command-line-chat-security-risks "./command-line-chat-security.html#command-line-chat-security-risks") .
|
|
45
|
+
The following image shows the status of the CLI tools when they are all in their default trust status.
|
|
46
|
+
The following tools are natively available for Kiro to use:
|
|
47
|
+
Available tools
|
|
48
|
+
Tool | Description
|
|
49
|
+
---|---
|
|
50
|
+
`read` | Reads files and directories on your system.
|
|
51
|
+
`write` | Creates and modifies files on your system.
|
|
52
|
+
`shell` | Executes bash commands on your system.
|
|
53
|
+
`aws` | Makes AWS CLI calls to interact with AWS services.
|
|
54
|
+
`report` | Opens a browser to report an issue with the chat to AWS.
|
|
55
|
+
When Kiro attempts to use a tool that doesn't have explicit permission, it will ask for your approval before proceeding. You can choose to allow or deny the action, or trust the tool for the remainder of your session.
|
|
56
|
+
Each tool has a default trust behavior. `read` is the only tool that is trusted by default.
|
|
57
|
+
Here are some examples of when to use different permission levels:
|
|
58
|
+
* _Trust fs_read_ : When you want Kiro to read files without confirmation, such as when exploring a codebase.
|
|
59
|
+
* _Trust fs_write_ : When you're actively working on a project and want Kiro to help you create or modify files.
|
|
60
|
+
* _Untrust execute_bash_ : When working in sensitive environments where you want to review all commands before execution.
|
|
61
|
+
* _Untrust use_aws_ : When working with production AWS resources to prevent unintended changes.
|
|
62
|
+
|
|
63
|
+
|
|
64
|
+
When Kiro uses a tool, it shows you the trust permission being used.
|
|
65
|
+
You can also specify trust permissions as part of starting a `kiro-cli chat` session.
|
|
66
|
+
Page updated: November 18, 2025
|
|
67
|
+
[Responding to messages](https://kiro.dev/docs/cli/chat/responding/)
|
|
68
|
+
[Working with Git](https://kiro.dev/docs/cli/chat/git-aware-selection/)
|
|
@@ -0,0 +1,230 @@
|
|
|
1
|
+
# Plan agent
|
|
2
|
+
The Plan agent is a specialized built-in agent that helps transform ideas into structured implementation plans. It guides you through requirements gathering, research, and creates detailed task breakdowns before switching to execution mode.
|
|
3
|
+
## Getting started[](https://kiro.dev/docs/cli/chat/planning-agent/#getting-started)
|
|
4
|
+
### Keyboard shortcut[](https://kiro.dev/docs/cli/chat/planning-agent/#keyboard-shortcut)
|
|
5
|
+
Press `Shift + Tab` to toggle between plan and execution modes.
|
|
6
|
+
### Slash command[](https://kiro.dev/docs/cli/chat/planning-agent/#slash-command)
|
|
7
|
+
bash
|
|
8
|
+
```
|
|
9
|
+
|
|
10
|
+
> /plan
|
|
11
|
+
|
|
12
|
+
Switched to the Kiro [plan] agent. Transform any idea into fully working code.
|
|
13
|
+
What do you want to build today?
|
|
14
|
+
|
|
15
|
+
[plan] >
|
|
16
|
+
|
|
17
|
+
|
|
18
|
+
```
|
|
19
|
+
|
|
20
|
+
### With immediate prompt[](https://kiro.dev/docs/cli/chat/planning-agent/#with-immediate-prompt)
|
|
21
|
+
bash
|
|
22
|
+
```
|
|
23
|
+
|
|
24
|
+
> /plan Build a REST API for user authentication
|
|
25
|
+
|
|
26
|
+
|
|
27
|
+
```
|
|
28
|
+
|
|
29
|
+
When active, you'll see:
|
|
30
|
+
* `[plan]` indicator in your prompt
|
|
31
|
+
* Welcome message when switching modes
|
|
32
|
+
|
|
33
|
+
|
|
34
|
+
## Plan workflow[](https://kiro.dev/docs/cli/chat/planning-agent/#plan-workflow)
|
|
35
|
+
### 1. Requirements gathering[](https://kiro.dev/docs/cli/chat/planning-agent/#1-requirements-gathering)
|
|
36
|
+
The planner guides you through structured questions to refine your initial idea.
|
|
37
|
+
bash
|
|
38
|
+
```
|
|
39
|
+
|
|
40
|
+
[plan] > I want to build a todo app
|
|
41
|
+
|
|
42
|
+
I understand you want to build a todo app. Let me help you plan this
|
|
43
|
+
implementation.
|
|
44
|
+
|
|
45
|
+
**My Understanding:** You want to create a todo application for managing tasks.
|
|
46
|
+
|
|
47
|
+
Let me gather some requirements to create a detailed plan:
|
|
48
|
+
|
|
49
|
+
[1]: What platform should this todo app target?
|
|
50
|
+
a. **Web Application** - Browser-based with HTML/CSS/JavaScript
|
|
51
|
+
b. **Mobile App** - Native iOS/Android or cross-platform
|
|
52
|
+
c. **Desktop App** - Electron, Tauri, or native desktop
|
|
53
|
+
d. **CLI Tool** - Command-line interface
|
|
54
|
+
e. **Other** - Provide your own answer
|
|
55
|
+
|
|
56
|
+
[2]: What's the primary use case for this todo app?
|
|
57
|
+
a. **Personal Task Management** - Individual productivity
|
|
58
|
+
b. **Team Collaboration** - Shared tasks and assignments
|
|
59
|
+
c. **Project Management** - Complex workflows with dependencies
|
|
60
|
+
d. **Other** - Describe your specific needs
|
|
61
|
+
|
|
62
|
+
(Use the chat to answer any subset: eg., "1=a, 2=b" or provide your own answers)
|
|
63
|
+
|
|
64
|
+
|
|
65
|
+
```
|
|
66
|
+
|
|
67
|
+
Feature | Description
|
|
68
|
+
---|---
|
|
69
|
+
Structured questions | Clear, numbered questions with multiple choice options
|
|
70
|
+
Flexible responses | Answer individual questions or provide custom responses
|
|
71
|
+
Iterative process | Builds understanding through multiple rounds of questions
|
|
72
|
+
Context awareness | Adapts follow-up questions based on your answers
|
|
73
|
+
### 2. Research and analysis[](https://kiro.dev/docs/cli/chat/planning-agent/#2-research-and-analysis)
|
|
74
|
+
The planner explores your codebase and researches relevant technologies.
|
|
75
|
+
Capability | Description
|
|
76
|
+
---|---
|
|
77
|
+
Code exploration | Uses code, grep, and glob tools to understand existing code
|
|
78
|
+
Technology research | Identifies relevant frameworks, libraries, and patterns
|
|
79
|
+
Architecture analysis | Reviews existing project structure and conventions
|
|
80
|
+
### 3. Implementation plan[](https://kiro.dev/docs/cli/chat/planning-agent/#3-implementation-plan)
|
|
81
|
+
Creates a detailed, step-by-step implementation plan with clear objectives.
|
|
82
|
+
bash
|
|
83
|
+
```
|
|
84
|
+
|
|
85
|
+
**Implementation Plan - Todo CLI Command**
|
|
86
|
+
|
|
87
|
+
**Problem Statement:** Add todo management to existing Kiro CLI for task tracking.
|
|
88
|
+
|
|
89
|
+
**Requirements:**
|
|
90
|
+
- CLI commands for CRUD operations
|
|
91
|
+
- Local SQLite storage
|
|
92
|
+
- Priority and due date support
|
|
93
|
+
|
|
94
|
+
**Task Breakdown:**
|
|
95
|
+
|
|
96
|
+
Task 1: Create database schema and models
|
|
97
|
+
- Define Todo struct with required fields
|
|
98
|
+
- Create database migration for todos table
|
|
99
|
+
- Demo: Can create and query todos in database
|
|
100
|
+
|
|
101
|
+
Task 2: Implement CLI command structure
|
|
102
|
+
- Add todo subcommand with add/list/complete operations
|
|
103
|
+
- Demo: CLI accepts todo commands and shows help
|
|
104
|
+
|
|
105
|
+
Task 3: Add advanced features
|
|
106
|
+
- Implement due dates and priority sorting
|
|
107
|
+
- Demo: Complete todo system with all features
|
|
108
|
+
|
|
109
|
+
|
|
110
|
+
```
|
|
111
|
+
|
|
112
|
+
Each task includes:
|
|
113
|
+
* **Clear objectives** - Specific, measurable goals
|
|
114
|
+
* **Implementation guidance** - General approach and key considerations
|
|
115
|
+
* **Demo description** - Working functionality that can be demonstrated
|
|
116
|
+
|
|
117
|
+
|
|
118
|
+
### 4. Plan approval and handoff[](https://kiro.dev/docs/cli/chat/planning-agent/#4-plan-approval-and-handoff)
|
|
119
|
+
Before switching to execution, the planner seeks your approval.
|
|
120
|
+
bash
|
|
121
|
+
```
|
|
122
|
+
|
|
123
|
+
[plan] > Does this plan look good, or would you like me to adjust anything?
|
|
124
|
+
|
|
125
|
+
> The plan looks great! Let's implement it.
|
|
126
|
+
|
|
127
|
+
*Planning complete!* Ready to exit [plan] agent to start your implementation? [y/n]:
|
|
128
|
+
|
|
129
|
+
> y
|
|
130
|
+
|
|
131
|
+
|
|
132
|
+
```
|
|
133
|
+
|
|
134
|
+
The handoff process:
|
|
135
|
+
1. You approve the implementation plan
|
|
136
|
+
2. Interactive prompt confirms switching to execution
|
|
137
|
+
3. Automatically transitions back to previous agent
|
|
138
|
+
4. Complete plan is passed to the execution agent
|
|
139
|
+
|
|
140
|
+
|
|
141
|
+
## Read-only design[](https://kiro.dev/docs/cli/chat/planning-agent/#read-only-design)
|
|
142
|
+
The Plan agent operates in read-only mode to keep focus on planning.
|
|
143
|
+
Operation | Status
|
|
144
|
+
---|---
|
|
145
|
+
File reading | ✓ Full access to explore codebase
|
|
146
|
+
Code intelligence | ✓ LSP operations for understanding code structure
|
|
147
|
+
Search (grep, glob) | ✓ Code exploration
|
|
148
|
+
Web search | ✓ Documentation and research access
|
|
149
|
+
File writing | ✗ Cannot create or modify files
|
|
150
|
+
Command execution | ✗ Limited to read-only bash commands
|
|
151
|
+
MCP tools | ✗ Cannot use MCP tools
|
|
152
|
+
## Best practices[](https://kiro.dev/docs/cli/chat/planning-agent/#best-practices)
|
|
153
|
+
1. **Use for complex tasks** - Most valuable for multi-step implementations
|
|
154
|
+
2. **Engage with questions** - Answer structured questions thoughtfully
|
|
155
|
+
3. **Let it explore** - Allow planner to analyze your existing codebase
|
|
156
|
+
4. **Review plans** - Ensure plan matches expectations before handoff
|
|
157
|
+
5. **Iterate as needed** - Continue refining until plan is clear
|
|
158
|
+
|
|
159
|
+
|
|
160
|
+
## Troubleshooting[](https://kiro.dev/docs/cli/chat/planning-agent/#troubleshooting)
|
|
161
|
+
Issue | Solution
|
|
162
|
+
---|---
|
|
163
|
+
How to exit plan agent? | Use `Shift + Tab` to return to your previous agent.
|
|
164
|
+
Planning session interrupted | Use `/plan` to re-enter planning and continue where you left off.
|
|
165
|
+
Plan not transferring to execution agent | Make sure to respond "y" when prompted with "Ready to exit [plan] agent to start your implementation? [y/n]".
|
|
166
|
+
## Example workflow[](https://kiro.dev/docs/cli/chat/planning-agent/#example-workflow)
|
|
167
|
+
bash
|
|
168
|
+
```
|
|
169
|
+
|
|
170
|
+
> /plan Add user authentication to my web app
|
|
171
|
+
|
|
172
|
+
[plan] > I understand you want to add user authentication to your web application.
|
|
173
|
+
|
|
174
|
+
**My Understanding:** You want to implement user authentication functionality
|
|
175
|
+
for an existing web application.
|
|
176
|
+
|
|
177
|
+
[1]: What authentication method do you prefer?
|
|
178
|
+
a. **Email/Password** - Traditional username and password
|
|
179
|
+
b. **OAuth** - Google, GitHub, or other OAuth providers
|
|
180
|
+
c. **Magic Links** - Passwordless email-based authentication
|
|
181
|
+
d. **Multi-factor** - Combination of methods with 2FA
|
|
182
|
+
|
|
183
|
+
> 1=a
|
|
184
|
+
|
|
185
|
+
[plan] > Great! Email/password authentication it is.
|
|
186
|
+
|
|
187
|
+
[2]: What's your current tech stack?
|
|
188
|
+
a. **React + Node.js** - JavaScript full-stack
|
|
189
|
+
b. **Next.js** - React with server-side rendering
|
|
190
|
+
c. **Django/Flask** - Python web framework
|
|
191
|
+
d. **Other** - Please specify
|
|
192
|
+
|
|
193
|
+
> 2=d, I'm using Rust with Axum framework
|
|
194
|
+
|
|
195
|
+
[plan] > Perfect! Rust with Axum is an excellent choice for secure authentication.
|
|
196
|
+
|
|
197
|
+
*Researching Axum authentication patterns...*
|
|
198
|
+
*Exploring your existing codebase structure...*
|
|
199
|
+
|
|
200
|
+
**Implementation Plan - User Authentication System**
|
|
201
|
+
[Detailed plan follows...]
|
|
202
|
+
|
|
203
|
+
Does this plan look good, or would you like me to adjust anything?
|
|
204
|
+
|
|
205
|
+
> Looks perfect!
|
|
206
|
+
|
|
207
|
+
Ready to exit [plan] agent to start your implementation? [y/n]: y
|
|
208
|
+
|
|
209
|
+
[default] > Implement this plan: [Plan content transferred to execution agent]
|
|
210
|
+
|
|
211
|
+
|
|
212
|
+
```
|
|
213
|
+
|
|
214
|
+
Page updated: December 19, 2025
|
|
215
|
+
[Subagents](https://kiro.dev/docs/cli/chat/subagents/)
|
|
216
|
+
[Prompts](https://kiro.dev/docs/cli/chat/manage-prompts/)
|
|
217
|
+
On this page
|
|
218
|
+
* [Getting started](https://kiro.dev/docs/cli/chat/planning-agent/#getting-started)
|
|
219
|
+
* [Keyboard shortcut](https://kiro.dev/docs/cli/chat/planning-agent/#keyboard-shortcut)
|
|
220
|
+
* [Slash command](https://kiro.dev/docs/cli/chat/planning-agent/#slash-command)
|
|
221
|
+
* [With immediate prompt](https://kiro.dev/docs/cli/chat/planning-agent/#with-immediate-prompt)
|
|
222
|
+
* [Plan workflow](https://kiro.dev/docs/cli/chat/planning-agent/#plan-workflow)
|
|
223
|
+
* [1. Requirements gathering](https://kiro.dev/docs/cli/chat/planning-agent/#1-requirements-gathering)
|
|
224
|
+
* [2. Research and analysis](https://kiro.dev/docs/cli/chat/planning-agent/#2-research-and-analysis)
|
|
225
|
+
* [3. Implementation plan](https://kiro.dev/docs/cli/chat/planning-agent/#3-implementation-plan)
|
|
226
|
+
* [4. Plan approval and handoff](https://kiro.dev/docs/cli/chat/planning-agent/#4-plan-approval-and-handoff)
|
|
227
|
+
* [Read-only design](https://kiro.dev/docs/cli/chat/planning-agent/#read-only-design)
|
|
228
|
+
* [Best practices](https://kiro.dev/docs/cli/chat/planning-agent/#best-practices)
|
|
229
|
+
* [Troubleshooting](https://kiro.dev/docs/cli/chat/planning-agent/#troubleshooting)
|
|
230
|
+
* [Example workflow](https://kiro.dev/docs/cli/chat/planning-agent/#example-workflow)
|
|
@@ -0,0 +1,123 @@
|
|
|
1
|
+
# Responding to messages
|
|
2
|
+
## Overview[](https://kiro.dev/docs/cli/chat/responding/#overview)
|
|
3
|
+
Kiro CLI provides a convenient way to respond to specific parts of Kiro's previous message through the `/reply` command. It opens an editor with Kiro's last response quoted with > prefixes, allowing you to easily address individual points or provide structured feedback. The command uses your system's default editor, and falls back to `vi` if no editor is configured
|
|
4
|
+
### How it works[](https://kiro.dev/docs/cli/chat/responding/#how-it-works)
|
|
5
|
+
* **Retrieves last response** : Finds the most recent assistant message from the conversation
|
|
6
|
+
* **Formats with quotes** : Each line is prefixed with > for clear attribution
|
|
7
|
+
* **Opens editor** : Your default editor opens with the quoted content
|
|
8
|
+
* **Edit and respond** : Add your responses below or interspersed with the quoted text
|
|
9
|
+
* **Submit** : When you save and close the editor, your response is submitted
|
|
10
|
+
|
|
11
|
+
|
|
12
|
+
### Editor behavior[](https://kiro.dev/docs/cli/chat/responding/#editor-behavior)
|
|
13
|
+
* Pre-populated content: Editor opens with Kiro's response already quoted
|
|
14
|
+
* Quote format: Each line prefixed with > for clear visual distinction
|
|
15
|
+
* Flexible editing: Add content anywhere - below quotes, between lines, or interspersed
|
|
16
|
+
* Auto-submission: Content is automatically submitted when editor closes successfully
|
|
17
|
+
|
|
18
|
+
|
|
19
|
+
### Use cases[](https://kiro.dev/docs/cli/chat/responding/#use-cases)
|
|
20
|
+
#### Responding to multiple questions[](https://kiro.dev/docs/cli/chat/responding/#responding-to-multiple-questions)
|
|
21
|
+
When Kiro asks several clarifying questions, use `/reply` to address each one:
|
|
22
|
+
```
|
|
23
|
+
|
|
24
|
+
> What programming language are you using?
|
|
25
|
+
Python
|
|
26
|
+
|
|
27
|
+
> What framework are you working with?
|
|
28
|
+
Django
|
|
29
|
+
|
|
30
|
+
> What specific error are you encountering?
|
|
31
|
+
I'm getting a 404 error when trying to access my API endpoints.
|
|
32
|
+
|
|
33
|
+
|
|
34
|
+
|
|
35
|
+
```
|
|
36
|
+
|
|
37
|
+
#### Addressing specific points[](https://kiro.dev/docs/cli/chat/responding/#addressing-specific-points)
|
|
38
|
+
When Kiro provides a detailed explanation, respond to specific parts:
|
|
39
|
+
```
|
|
40
|
+
|
|
41
|
+
> Here are three approaches you could take:
|
|
42
|
+
> 1. Use a database migration
|
|
43
|
+
> 2. Update the model directly
|
|
44
|
+
> 3. Create a custom management command
|
|
45
|
+
|
|
46
|
+
I'd like to go with option 1. Can you show me how to create the migration?
|
|
47
|
+
|
|
48
|
+
> Make sure to backup your data first.
|
|
49
|
+
Already done - I have a full backup from this morning.
|
|
50
|
+
|
|
51
|
+
|
|
52
|
+
```
|
|
53
|
+
|
|
54
|
+
#### Providing structured feedback[](https://kiro.dev/docs/cli/chat/responding/#providing-structured-feedback)
|
|
55
|
+
When Kiro suggests multiple changes, organize your responses clearly:
|
|
56
|
+
```
|
|
57
|
+
|
|
58
|
+
> I recommend these improvements:
|
|
59
|
+
> - Add error handling for network requests
|
|
60
|
+
> - Implement input validation
|
|
61
|
+
> - Add logging for debugging
|
|
62
|
+
|
|
63
|
+
Agreed on all points. For the error handling:
|
|
64
|
+
- Should I use try/catch blocks or a decorator pattern?
|
|
65
|
+
|
|
66
|
+
For logging:
|
|
67
|
+
- What level of detail do you recommend?
|
|
68
|
+
|
|
69
|
+
|
|
70
|
+
```
|
|
71
|
+
|
|
72
|
+
### Status messages[](https://kiro.dev/docs/cli/chat/responding/#status-messages)
|
|
73
|
+
The command provides clear feedback about its operation:
|
|
74
|
+
* Success: "Content loaded from editor. Submitting prompt..."
|
|
75
|
+
* No changes: "No changes made in editor, not submitting."
|
|
76
|
+
* No message: "No assistant message found to reply to."
|
|
77
|
+
* Editor error: "Error opening editor: [specific error details]"
|
|
78
|
+
|
|
79
|
+
|
|
80
|
+
### Error handling[](https://kiro.dev/docs/cli/chat/responding/#error-handling)
|
|
81
|
+
* No assistant message: Shows warning if no previous Kiro response is found
|
|
82
|
+
* Editor failures: Reports editor process failures with specific error details
|
|
83
|
+
* Empty content: Detects when no changes are made and skips submission
|
|
84
|
+
* Unchanged content: Compares with initial text to avoid submitting unmodified quotes
|
|
85
|
+
|
|
86
|
+
|
|
87
|
+
### Best practices[](https://kiro.dev/docs/cli/chat/responding/#best-practices)
|
|
88
|
+
* Use `/reply` when Kiro's response contains multiple points that need individual attention
|
|
89
|
+
* Keep your responses clear and organized when addressing quoted sections
|
|
90
|
+
* Focus on sections that need clarification rather than responding to every quoted line
|
|
91
|
+
* Use the quote structure to maintain context in longer conversations
|
|
92
|
+
|
|
93
|
+
|
|
94
|
+
**Tip**
|
|
95
|
+
1. You can delete quote lines you don't need to respond to
|
|
96
|
+
2. Add blank lines between your responses for better readability
|
|
97
|
+
3. Use the quoted structure to break down complex topics into manageable parts
|
|
98
|
+
4. The command works best when Q Developer's previous response was substantial and detailed
|
|
99
|
+
|
|
100
|
+
|
|
101
|
+
View related pages
|
|
102
|
+
## Next steps[](https://kiro.dev/docs/cli/chat/responding/#next-steps)
|
|
103
|
+
* Learn about [Context Management](https://kiro.dev/docs/cli/chat/context) for better responses
|
|
104
|
+
* Explore [Slash Commands](https://kiro.dev/docs/cli/reference/slash-commands) for quick actions
|
|
105
|
+
* Check [Conversations](https://kiro.dev/docs/cli/chat/conversations) to save and manage chats
|
|
106
|
+
* Review [Prompts](https://kiro.dev/docs/cli/chat/manage-prompts) for effective questioning
|
|
107
|
+
|
|
108
|
+
|
|
109
|
+
Page updated: November 18, 2025
|
|
110
|
+
[Context management](https://kiro.dev/docs/cli/chat/context/)
|
|
111
|
+
[Permissions](https://kiro.dev/docs/cli/chat/permissions/)
|
|
112
|
+
On this page
|
|
113
|
+
* [Overview](https://kiro.dev/docs/cli/chat/responding/#overview)
|
|
114
|
+
* [How it works](https://kiro.dev/docs/cli/chat/responding/#how-it-works)
|
|
115
|
+
* [Editor behavior](https://kiro.dev/docs/cli/chat/responding/#editor-behavior)
|
|
116
|
+
* [Use cases](https://kiro.dev/docs/cli/chat/responding/#use-cases)
|
|
117
|
+
* [Responding to multiple questions](https://kiro.dev/docs/cli/chat/responding/#responding-to-multiple-questions)
|
|
118
|
+
* [Addressing specific points](https://kiro.dev/docs/cli/chat/responding/#addressing-specific-points)
|
|
119
|
+
* [Providing structured feedback](https://kiro.dev/docs/cli/chat/responding/#providing-structured-feedback)
|
|
120
|
+
* [Status messages](https://kiro.dev/docs/cli/chat/responding/#status-messages)
|
|
121
|
+
* [Error handling](https://kiro.dev/docs/cli/chat/responding/#error-handling)
|
|
122
|
+
* [Best practices](https://kiro.dev/docs/cli/chat/responding/#best-practices)
|
|
123
|
+
* [Next steps](https://kiro.dev/docs/cli/chat/responding/#next-steps)
|
|
@@ -0,0 +1,87 @@
|
|
|
1
|
+
# Security considerations
|
|
2
|
+
Kiro provides powerful capabilities that can modify your system and AWS resources. Understanding security implications and following best practices helps you use these capabilities safely.
|
|
3
|
+
## Understanding security risks[](https://kiro.dev/docs/cli/chat/security/#understanding-security-risks)
|
|
4
|
+
When using Kiro, be aware of the following potential security risks:
|
|
5
|
+
* Unintended system changes: Kiro may interpret your requests in unexpected ways, leading to unintended modifications
|
|
6
|
+
* AWS resource modifications: Resources could be created, modified, or deleted, potentially affecting production environments or incurring costs
|
|
7
|
+
* Data loss: Commands that delete or overwrite files could result in data loss
|
|
8
|
+
* Security vulnerabilities: Commands might compromise system security if not properly reviewed
|
|
9
|
+
|
|
10
|
+
|
|
11
|
+
These risks are significantly increased when using /tools trust-all or /acceptall, which bypass confirmation prompts.
|
|
12
|
+
Specific examples of risks include:
|
|
13
|
+
* A request to "clean up old files" might delete important configuration files
|
|
14
|
+
* A request to "optimize my EC2 instances" might terminate running instances
|
|
15
|
+
* A request to "fix security issues" might modify permissions in ways that expose sensitive data
|
|
16
|
+
|
|
17
|
+
|
|
18
|
+
**Warning**
|
|
19
|
+
Don't use `/tools trust-all` or `/acceptall` mode in production environments or when working with sensitive data or resources. You are responsible for all actions performed by Kiro.
|
|
20
|
+
## General security best practices[](https://kiro.dev/docs/cli/chat/security/#general-security-best-practices)
|
|
21
|
+
When using Kiro in any environment, especially those with sensitive files, private keys, tokens, or other confidential information, consider implementing these security measures:
|
|
22
|
+
### Restricting file access[](https://kiro.dev/docs/cli/chat/security/#restricting-file-access)
|
|
23
|
+
By default, Kiro can read files without asking for permission each time (Read is trusted by default). For sensitive environments, you can restrict this behavior:
|
|
24
|
+
bash
|
|
25
|
+
```
|
|
26
|
+
|
|
27
|
+
/tools untrust read
|
|
28
|
+
|
|
29
|
+
|
|
30
|
+
```
|
|
31
|
+
|
|
32
|
+
With this setting, Kiro will ask for your explicit permission before reading any file. This gives you granular control over which files Kiro can access during your session.
|
|
33
|
+
You can also make this setting persistent by adding it to your shell startup script:
|
|
34
|
+
bash
|
|
35
|
+
```
|
|
36
|
+
|
|
37
|
+
echo 'alias kiro-cli="kiro-cli --untrust-fs-read"' >> ~/.bashrc
|
|
38
|
+
|
|
39
|
+
|
|
40
|
+
```
|
|
41
|
+
|
|
42
|
+
This ensures that every new Kiro session starts with Read untrusted, requiring explicit permission for file access.
|
|
43
|
+
### Additional security measures[](https://kiro.dev/docs/cli/chat/security/#additional-security-measures)
|
|
44
|
+
For environments with highly sensitive information, consider these additional measures:
|
|
45
|
+
* Use in a dedicated development environment that doesn't contain sensitive credentials or data
|
|
46
|
+
* Store sensitive files outside your project directories or in locations with restricted permissions
|
|
47
|
+
* Use environment variables for sensitive values instead of hardcoding them in files
|
|
48
|
+
* Consider using `/tools untrust aws` to require explicit permission before making AWS API calls
|
|
49
|
+
* Use steering to define security guidelines and restrictions
|
|
50
|
+
|
|
51
|
+
|
|
52
|
+
### Using /tools trust-all safely[](https://kiro.dev/docs/cli/chat/security/#using-tools-trust-all-safely)
|
|
53
|
+
If you must use `/tools trustall` or `/acceptall` for specific workflows, follow these safety practices to minimize risks:
|
|
54
|
+
* Only use in development or testing environments, never in production
|
|
55
|
+
* Enable `/tools trust-all` only for specific tasks, then immediately disable it using `/tools reset` to return to default permissions
|
|
56
|
+
* Back up important data before enabling `/tools trust-all`
|
|
57
|
+
* Use AWS credentials with minimal permissions when `/tools trust-all` is enabled
|
|
58
|
+
* Carefully monitor all actions Kiro agent takes while `/tools trust-all` is enabled
|
|
59
|
+
|
|
60
|
+
|
|
61
|
+
To return to the default permission settings after using /tools trust-all, use the reset command:
|
|
62
|
+
bash
|
|
63
|
+
```
|
|
64
|
+
|
|
65
|
+
/tools reset
|
|
66
|
+
|
|
67
|
+
|
|
68
|
+
```
|
|
69
|
+
|
|
70
|
+
This reverts all tools to their default permission levels, with only Read trusted by default.
|
|
71
|
+
## Related documentation[](https://kiro.dev/docs/cli/chat/security/#related-documentation)
|
|
72
|
+
* [Permissions](https://kiro.dev/docs/cli/chat/permissions) - Managing access controls
|
|
73
|
+
* [Context Management](https://kiro.dev/docs/cli/chat/context) - Controlling what data is shared
|
|
74
|
+
* [Authentication](https://kiro.dev/docs/cli/authentication) - Secure login methods
|
|
75
|
+
* [Privacy and Security](https://kiro.dev/docs/cli/privacy-and-security) - Overall security practices
|
|
76
|
+
|
|
77
|
+
|
|
78
|
+
Page updated: November 18, 2025
|
|
79
|
+
[Images](https://kiro.dev/docs/cli/chat/images/)
|
|
80
|
+
[Configuration](https://kiro.dev/docs/cli/chat/configuration/)
|
|
81
|
+
On this page
|
|
82
|
+
* [Understanding security risks](https://kiro.dev/docs/cli/chat/security/#understanding-security-risks)
|
|
83
|
+
* [General security best practices](https://kiro.dev/docs/cli/chat/security/#general-security-best-practices)
|
|
84
|
+
* [Restricting file access](https://kiro.dev/docs/cli/chat/security/#restricting-file-access)
|
|
85
|
+
* [Additional security measures](https://kiro.dev/docs/cli/chat/security/#additional-security-measures)
|
|
86
|
+
* [Using /tools trust-all safely](https://kiro.dev/docs/cli/chat/security/#using-tools-trust-all-safely)
|
|
87
|
+
* [Related documentation](https://kiro.dev/docs/cli/chat/security/#related-documentation)
|