kolega-code 0.12.0__tar.gz → 0.14.0__tar.gz

{kolega_code-0.12.0 → kolega_code-0.14.0}/.gitignore

@@ -14,3 +14,4 @@ build/
 .coverage
 coverage.xml
 htmlcov/
+docs/kolega_reskin_project/

{kolega_code-0.12.0 → kolega_code-0.14.0}/.pre-commit-config.yaml

@@ -15,3 +15,13 @@ repos:
       - id: check-yaml
       - id: debug-statements
       - id: detect-private-key
+
+  - repo: local
+    hooks:
+      - id: pyright
+        name: pyright type checker
+        entry: uv run pyright
+        language: system
+        types: [python]
+        pass_filenames: false
+        require_serial: true

{kolega_code-0.12.0 → kolega_code-0.14.0}/CHANGELOG.md

@@ -6,6 +6,57 @@ This project uses GitHub Releases for detailed generated release notes. This fil
 
 ## Unreleased
 
+## 0.14.0 - 2026-07-03
+
+### Added
+
+- Adopted Pyright static type checking (basic mode) across the codebase.
+  Pyright runs in pre-commit and CI, catching type errors before runtime. The
+  `[tool.pyright]` configuration lives in `pyproject.toml`. Run locally with
+  `uv run pyright`.
+- Added support for Anthropic Claude Fable 5 (`claude-fable-5`) and Claude Sonnet 5
+  (`claude-sonnet-5`): 1M-token context, 128K max output, vision input, and
+  adaptive thinking with `low`/`medium`/`high`/`xhigh`/`max` effort levels. Both
+  are selectable in the Settings UI, `/model` picker, CLI flags, and env vars.
+- Added a `/goal` slash command that sets an autonomous completion condition the
+  agent works toward. After each turn, a read-only investigation sub-agent
+  verifies whether the goal is met; if not, the agent is nudged to continue
+  automatically until the goal is met, a turn cap is hit, or the user
+  pauses/cancels. Also available as `kolega-code ask --goal <condition>` for
+  run-to-completion from the CLI. Goal state persists with the session.
+
+### Fixed
+
+- Handled CRLF line endings in the edit, multi_edit, and write tools so diffs
+  and patches apply correctly on Windows-originated files.
+- Showed full diffs on the session changes screen instead of a capped preview.
+- Kept the turn worker alive during goal verification so the agent does not
+  stall while checking autonomous goal conditions.
+
+## 0.13.0 - 2026-07-02
+
+### Added
+
+- Added first-class MCP (Model Context Protocol) support in the CLI and TUI,
+  including server settings management.
+- Persisted plan artifacts so they survive across CLI invocations.
+
+### Changed
+
+- Made session diff refreshes incremental and asynchronous for smoother TUI
+  performance.
+
+### Fixed
+
+- Hid queued follow-up messages from the transcript view.
+- Polished status card spacing and made the context-full note generic.
+- Avoided tool dispatcher input name collisions and excluded internal tool
+  collection methods from dispatch.
+- Hardened MCP credential handling, status logging, config output, and server
+  settings reliability.
+- Preserved gigacode enabled state across session resume.
+- Corrected the GPT-5.5 context window to 272K on the Codex backend.
+
 ## 0.12.0 - 2026-06-30
 
 ### Added

{kolega_code-0.12.0 → kolega_code-0.14.0}/CONTRIBUTING.md

@@ -57,12 +57,13 @@ to `.githooks`:
 uv run pre-commit run --all-files --show-diff-on-failure
 ```
 
-CI runs Ruff through pre-commit. You can also run Ruff directly for one-off linting and
-formatting checks:
+CI runs Ruff and Pyright through pre-commit. You can also run them directly for
+one-off checks:
 
 ```bash
 uv run ruff check .
 uv run ruff format --check .
+uv run pyright
 ```
 
 To apply formatting locally:
@@ -71,6 +72,27 @@ To apply formatting locally:
 uv run ruff format .
 ```
 
+### Type checking
+
+The project uses [Pyright](https://github.com/microsoft/pyright) in basic mode to
+catch type errors before runtime. The configuration lives in `[tool.pyright]` in
+`pyproject.toml`.
+
+Run the type checker locally:
+
+```bash
+uv run pyright
+```
+
+Guidelines for type annotations:
+
+- All new code should have type annotations on function signatures and class
+  attributes.
+- Use `# pyright: ignore[<rule>]` sparingly and only for third-party stub
+  limitations — never to silence errors in first-party code.
+- Prefer narrowing `Optional` values with `assert` or `if` guards over ignoring
+  the error.
+
 Run the fast test suite before opening a pull request:
 
 ```bash

{kolega_code-0.12.0 → kolega_code-0.14.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: kolega-code
-Version: 0.12.0
+Version: 0.14.0
 Summary: Multi-agent coding in the terminal
 Project-URL: Homepage, https://kolega-ai.github.io/kolega-code/
 Project-URL: Documentation, https://kolega-ai.github.io/kolega-code/
@@ -235,6 +235,7 @@ Requires-Dist: httpx==0.28.1
 Requires-Dist: jinja2==3.1.6
 Requires-Dist: langfuse==3.14.5
 Requires-Dist: lxml-html-clean==0.4.4
+Requires-Dist: mcp>=1.21.2
 Requires-Dist: nest-asyncio==1.6.0
 Requires-Dist: openai==1.109.1
 Requires-Dist: packaging==25.0
@@ -254,6 +255,7 @@ Provides-Extra: cli
 Provides-Extra: dev
 Requires-Dist: genbadge[coverage]==1.1.3; extra == 'dev'
 Requires-Dist: pre-commit==4.6.0; extra == 'dev'
+Requires-Dist: pyright==1.1.411; extra == 'dev'
 Requires-Dist: pytest-asyncio==1.3.0; extra == 'dev'
 Requires-Dist: pytest-cov==7.0.0; extra == 'dev'
 Requires-Dist: pytest==9.0.3; extra == 'dev'
@@ -323,6 +325,8 @@ enough that one serial agent pass would be the bottleneck.
 - **Web search and browsing:** DuckDuckGo works by default with no key; Firecrawl,
   Tavily, and SearXNG are configurable search backends. Kolega Code can also fetch URLs
   directly and use a Playwright-powered browser agent for interactive sites.
+- **MCP servers:** connect verified `streamable_http`, `sse`, and `stdio` MCP servers
+  (including OAuth-enabled HTTP servers) as permission-gated tools.
 - **Model routing:** choose provider/model combinations, set thinking effort, split
   long-context/fast/thinking roles, and override models per agent role.
 - **Interactive or scriptable:** use the Textual TUI, queue follow-up prompts

{kolega_code-0.12.0 → kolega_code-0.14.0}/README.md

@@ -60,6 +60,8 @@ enough that one serial agent pass would be the bottleneck.
 - **Web search and browsing:** DuckDuckGo works by default with no key; Firecrawl,
   Tavily, and SearXNG are configurable search backends. Kolega Code can also fetch URLs
   directly and use a Playwright-powered browser agent for interactive sites.
+- **MCP servers:** connect verified `streamable_http`, `sse`, and `stdio` MCP servers
+  (including OAuth-enabled HTTP servers) as permission-gated tools.
 - **Model routing:** choose provider/model combinations, set thinking effort, split
   long-context/fast/thinking roles, and override models per agent role.
 - **Interactive or scriptable:** use the Textual TUI, queue follow-up prompts

{kolega_code-0.12.0 → kolega_code-0.14.0}/docs/astro.config.mjs

@@ -23,8 +23,8 @@ export default defineConfig({
       // Brand fonts (Geist) + the Kolega Code theme. Order matters: fonts first
       // so the brand stylesheet can reference their family names.
       customCss: [
-        "@fontsource-variable/geist/index.css",
-        "@fontsource-variable/geist-mono/index.css",
+        "@fontsource-variable/ibm-plex-sans/index.css",
+        "@fontsource-variable/jetbrains-mono/index.css",
         "./src/styles/brand.css",
       ],
       social: [
@@ -64,6 +64,10 @@ export default defineConfig({
               label: "Settings & API Keys",
               slug: "configuration/settings-and-api-keys",
             },
+            {
+              label: "MCP Servers",
+              slug: "configuration/mcp",
+            },
             {
               label: "Environment Variables",
               slug: "configuration/environment-variables",
@@ -101,6 +105,10 @@ export default defineConfig({
           label: "Gigacode",
           items: [{ label: "Workflow Orchestration", slug: "gigacode" }],
         },
+        {
+          label: "Autonomous Goals",
+          items: [{ label: "Goal-Conditioned Work", slug: "goal" }],
+        },
         {
           label: "Troubleshooting",
           items: [

{kolega_code-0.12.0 → kolega_code-0.14.0}/docs/package-lock.json

@@ -10,8 +10,8 @@
       "license": "Apache-2.0",
       "dependencies": {
         "@astrojs/starlight": "^0.40.0",
-        "@fontsource-variable/geist": "^5.2.9",
-        "@fontsource-variable/geist-mono": "^5.2.8",
+        "@fontsource-variable/ibm-plex-sans": "^5.2.8",
+        "@fontsource-variable/jetbrains-mono": "^5.2.8",
         "astro": "^6.4.7",
         "sharp": "^0.34.0"
       }
@@ -747,19 +747,19 @@
         "@expressive-code/core": "^0.43.1"
       }
     },
-    "node_modules/@fontsource-variable/geist": {
-      "version": "5.2.9",
-      "resolved": "https://registry.npmjs.org/@fontsource-variable/geist/-/geist-5.2.9.tgz",
-      "integrity": "sha512-TP+QSBG3wxKGPE33CbMy/L0Nu3qvJ6Fy81Yc4LnQ95xH+i+cfEp8fyU8/kfV14YwszxIFPhnoMTbjL71waVpyQ==",
+    "node_modules/@fontsource-variable/ibm-plex-sans": {
+      "version": "5.2.8",
+      "resolved": "https://registry.npmjs.org/@fontsource-variable/ibm-plex-sans/-/ibm-plex-sans-5.2.8.tgz",
+      "integrity": "sha512-n5PF2iFa0CZT0QYTPzxvZ39opC9LnU0zdoRccoADbs+Dtsd+lbXOZF7RNuIPHcQX1dKjF63sxnRImQIB5eD0Ag==",
       "license": "OFL-1.1",
       "funding": {
         "url": "https://github.com/sponsors/ayuhito"
       }
     },
-    "node_modules/@fontsource-variable/geist-mono": {
+    "node_modules/@fontsource-variable/jetbrains-mono": {
       "version": "5.2.8",
-      "resolved": "https://registry.npmjs.org/@fontsource-variable/geist-mono/-/geist-mono-5.2.8.tgz",
-      "integrity": "sha512-KI5bj+hkkRiHttYHmccotUZ80ZuZyai+RwI1d7UId0clkx/jXxlo8qYK8j54WzmpBjtMoEMPyllV7faDcj+6RA==",
+      "resolved": "https://registry.npmjs.org/@fontsource-variable/jetbrains-mono/-/jetbrains-mono-5.2.8.tgz",
+      "integrity": "sha512-WBA9elru6Jdp5df2mES55wuOO0WIrn3kpXnI4+W2ek5u3ZgLS9XS4gmIlcQhiZOWEKl95meYdvK7xI+ETLCq/Q==",
       "license": "OFL-1.1",
       "funding": {
         "url": "https://github.com/sponsors/ayuhito"

{kolega_code-0.12.0 → kolega_code-0.14.0}/docs/package.json

@@ -13,8 +13,8 @@
   },
   "dependencies": {
     "@astrojs/starlight": "^0.40.0",
-    "@fontsource-variable/geist": "^5.2.9",
-    "@fontsource-variable/geist-mono": "^5.2.8",
+    "@fontsource-variable/ibm-plex-sans": "^5.2.8",
+    "@fontsource-variable/jetbrains-mono": "^5.2.8",
     "astro": "^6.4.7",
     "sharp": "^0.34.0"
   },

{kolega_code-0.12.0 → kolega_code-0.14.0}/docs/public/favicon.svg

@@ -1,5 +1,5 @@
 <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24">
-  <rect width="24" height="24" rx="5" ry="5" fill="#c5ee21"/>
+  <rect width="24" height="24" rx="5" ry="5" fill="#39c5cf"/>
   <path d="M7 8L3 12L7 16" stroke="#000000" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" fill="none"/>
   <path d="M17 8L21 12L17 16" stroke="#000000" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" fill="none"/>
   <path d="M10 20L14 4" stroke="#000000" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" fill="none"/>

{kolega_code-0.12.0 → kolega_code-0.14.0}/docs/src/assets/coverage.svg

@@ -1 +1 @@
-<svg xmlns="http://www.w3.org/2000/svg" width="114" height="20" role="img" aria-label="coverage: 81.04%"><title>coverage: 81.04%</title><filter id="blur"><feGaussianBlur stdDeviation="16"/></filter><linearGradient id="s" x2="0" y2="100%"><stop offset="0" stop-color="#bbb" stop-opacity=".1"/><stop offset="1" stop-opacity=".1"/></linearGradient><clipPath id="r"><rect width="114" height="20" rx="3"/></clipPath><g clip-path="url(#r)"><rect width="61" height="20" fill="#555"/><rect x="61" width="53" height="20" fill="#67ac09"/><rect width="114" height="20" fill="url(#s)"/></g><g fill="#fff" text-anchor="middle" font-family="Verdana,Geneva,DejaVu Sans,sans-serif" text-rendering="geometricPrecision" font-size="110"><g transform="scale(.1)"><g aria-hidden="true" fill="#010101"><text x="315" y="150" fill-opacity=".8" filter="url(#blur)" textLength="510">coverage</text><text x="315" y="150" fill-opacity=".3" textLength="510">coverage</text></g><text x="315" y="140" textLength="510">coverage</text></g><g transform="scale(.1)"><g aria-hidden="true" fill="#010101"><text x="865" y="150" fill-opacity=".8" filter="url(#blur)" textLength="430">81.04%</text><text x="865" y="150" fill-opacity=".3" textLength="430">81.04%</text></g><text x="865" y="140" textLength="430">81.04%</text></g></g></svg>
+<svg xmlns="http://www.w3.org/2000/svg" width="114" height="20" role="img" aria-label="coverage: 80.35%"><title>coverage: 80.35%</title><filter id="blur"><feGaussianBlur stdDeviation="16"/></filter><linearGradient id="s" x2="0" y2="100%"><stop offset="0" stop-color="#bbb" stop-opacity=".1"/><stop offset="1" stop-opacity=".1"/></linearGradient><clipPath id="r"><rect width="114" height="20" rx="3"/></clipPath><g clip-path="url(#r)"><rect width="61" height="20" fill="#555"/><rect x="61" width="53" height="20" fill="#67ac09"/><rect width="114" height="20" fill="url(#s)"/></g><g fill="#fff" text-anchor="middle" font-family="Verdana,Geneva,DejaVu Sans,sans-serif" text-rendering="geometricPrecision" font-size="110"><g transform="scale(.1)"><g aria-hidden="true" fill="#010101"><text x="315" y="150" fill-opacity=".8" filter="url(#blur)" textLength="510">coverage</text><text x="315" y="150" fill-opacity=".3" textLength="510">coverage</text></g><text x="315" y="140" textLength="510">coverage</text></g><g transform="scale(.1)"><g aria-hidden="true" fill="#010101"><text x="865" y="150" fill-opacity=".8" filter="url(#blur)" textLength="430">80.35%</text><text x="865" y="150" fill-opacity=".3" textLength="430">80.35%</text></g><text x="865" y="140" textLength="430">80.35%</text></g></g></svg>

kolega_code-0.14.0/docs/src/assets/kolega-dark.svg

@@ -0,0 +1,15 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 290 30" width="290" height="30">
+  <defs>
+    <linearGradient id="g" x1="0" y1="0" x2="1" y2="0">
+      <stop offset="0%" stop-color="#39C5CF"/>
+      <stop offset="100%" stop-color="#9B7DD4"/>
+    </linearGradient>
+  </defs>
+  <text x="0" y="5" font-family="'JetBrains Mono','Cascadia Code','Fira Code',Menlo,Consolas,monospace" font-size="5" fill="url(#g)" font-weight="700" xml:space="preserve">
+    <tspan x="0" dy="0"> ██  ██   ██████  ██      ███████  ██████   █████    ██████  ██████  ██████  ███████</tspan>
+    <tspan x="0" dy="5.5"> ██ ██   ██    ██ ██      ██      ██       ██   ██  ██      ██    ██ ██   ██ ██</tspan>
+    <tspan x="0" dy="5.5"> ████    ██    ██ ██      █████   ██   ███ ███████  ██      ██    ██ ██   ██ █████</tspan>
+    <tspan x="0" dy="5.5"> ██ ██   ██    ██ ██      ██      ██    ██ ██   ██  ██      ██    ██ ██   ██ ██</tspan>
+    <tspan x="0" dy="5.5"> ██  ██   ██████  ███████ ███████  ██████  ██   ██   ██████  ██████  ██████  ███████</tspan>
+  </text>
+</svg>

kolega_code-0.14.0/docs/src/assets/kolega-light.svg

@@ -0,0 +1,15 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 290 30" width="290" height="30">
+  <defs>
+    <linearGradient id="g" x1="0" y1="0" x2="1" y2="0">
+      <stop offset="0%" stop-color="#0d7377"/>
+      <stop offset="100%" stop-color="#5a3d7a"/>
+    </linearGradient>
+  </defs>
+  <text x="0" y="5" font-family="'JetBrains Mono','Cascadia Code','Fira Code',Menlo,Consolas,monospace" font-size="5" fill="url(#g)" font-weight="700" xml:space="preserve">
+    <tspan x="0" dy="0"> ██  ██   ██████  ██      ███████  ██████   █████    ██████  ██████  ██████  ███████</tspan>
+    <tspan x="0" dy="5.5"> ██ ██   ██    ██ ██      ██      ██       ██   ██  ██      ██    ██ ██   ██ ██</tspan>
+    <tspan x="0" dy="5.5"> ████    ██    ██ ██      █████   ██   ███ ███████  ██      ██    ██ ██   ██ █████</tspan>
+    <tspan x="0" dy="5.5"> ██ ██   ██    ██ ██      ██      ██    ██ ██   ██  ██      ██    ██ ██   ██ ██</tspan>
+    <tspan x="0" dy="5.5"> ██  ██   ██████  ███████ ███████  ██████  ██   ██   ██████  ██████  ██████  ███████</tspan>
+  </text>
+</svg>

{kolega_code-0.12.0 → kolega_code-0.14.0}/docs/src/content/docs/cli/ask.md

@@ -15,8 +15,10 @@ kolega-code ask "<prompt>" [options]
 
 | Argument / option | Description |
 | --- | --- |
-| `prompt` | The prompt to send (required, positional) |
+| `prompt` | The prompt to send (optional when `--goal` is given; otherwise required) |
 | `--project <PATH>` | Project directory to work in (default `.`) |
+| `--goal <condition>` | Set an autonomous completion goal and loop until it is met or capped (no prompt required) |
+| `--goal-max-turns <N>` | Maximum evaluation turns before an unmet goal gives up (default 50) |
 | `--save` | Persist the session after the prompt completes |
 | `--json` | Emit response chunks and events as JSON |
 | `--browser-visible` | Launch visible Playwright browser windows |
@@ -77,6 +79,22 @@ it against the project's [Agent Skills](../../skills/):
 - `kolega-code ask "/my-skill do the thing"` activates the skill and runs the
   remaining prompt.
 
+## Goal mode
+
+Pass `--goal "<condition>"` to set an autonomous completion goal. The agent works
+toward the goal, and after each turn a read-only verifier checks whether it's met.
+The loop continues until the goal is met or the turn cap (default 50, override
+with `--goal-max-turns`) is reached. The positional `prompt` is optional with
+`--goal` — the CLI synthesizes the first work-turn message from the condition:
+
+```bash
+kolega-code ask --goal "all tests pass and ruff is clean" --project .
+kolega-code ask "start by fixing the parser" --goal "all tests pass" --project .
+```
+
+See [Goal-Conditioned Work](../../goal/) for the loop behavior, safety model, and
+JSON event details.
+
 ## JSON output
 
 With `--json`, the command streams newline-delimited JSON objects, each tagged with
@@ -93,6 +111,8 @@ The stream includes:
 | `chunk` | A streamed piece of the response |
 | `event` | An agent event (sub-agent activity, tool calls, terminal output) |
 | `skill` | Skill activation metadata |
+| `goal_eval` | Emitted after each goal evaluation (with `--goal`): `met`, `turns`, `reason` |
+| `goal_result` | Final goal outcome (with `--goal`): `met`, `turns`, `reason` |
 | `summary` | A final object with the chunk count and `session_id` |
 
 In plain (non-JSON) mode, the answer is written to **stdout** while sub-agent and
@@ -105,3 +125,12 @@ answer.
 confirmations. If you pass `--permission-mode ask`, shell commands and file edits
 prompt on stderr when stdin is interactive. Persisted allow rules are stored in
 the project at `.kolega/permissions.json`.
+
+## Exit codes
+
+| Code | Meaning |
+| --- | --- |
+| `0` | Success (or: the goal was met when using `--goal`) |
+| `1` | With `--goal`: the turn cap was reached without meeting the goal |
+| `2` | Configuration / usage error (e.g. invalid provider, missing API key) |
+| `130` | Interrupted (`Ctrl+C`) |

{kolega_code-0.12.0 → kolega_code-0.14.0}/docs/src/content/docs/cli/overview.md

@@ -78,5 +78,6 @@ in [Settings & API Keys](../../configuration/settings-and-api-keys/).
 | Code | Meaning |
 | --- | --- |
 | `0` | Success |
+| `1` | Goal not met: `ask --goal` reached the turn cap without completing the goal |
 | `2` | Configuration / usage error (e.g. invalid provider, missing API key, project path not found, Textual not installed) |
 | `130` | Interrupted (`Ctrl+C`) |

kolega_code-0.14.0/docs/src/content/docs/configuration/mcp.md

@@ -0,0 +1,209 @@
+---
+title: MCP servers
+description: Configure Model Context Protocol servers for Kolega Code tools.
+---
+
+Kolega Code can expose verified [Model Context Protocol (MCP)](https://modelcontextprotocol.io/) server tools as first-class agent tools.
+
+MCP support is local-first and opt-in:
+
+- Global servers are read from `<state_dir>/mcp_servers.json`.
+- Project servers are read from `<project>/.kolega/mcp_servers.json` only after the project is trusted for MCP.
+- Agent startup never opens a browser and never starts an OAuth flow. OAuth is only started by an explicit `kolega-code mcp verify` command or the TUI **Verify** button.
+- MCP tools are not propagated to sub-agents.
+- In `ask` permission mode, every MCP tool call prompts unless you save an exact-tool or whole-server allow rule.
+
+## Config locations
+
+| Scope | Path | Enabled when |
+| --- | --- | --- |
+| Global | `<state_dir>/mcp_servers.json` | Always loaded |
+| Project | `<project>/.kolega/mcp_servers.json` | Project is trusted with `--trust-mcp` or from the TUI |
+
+`<state_dir>` is the Kolega Code state directory. You can override it with `--state-dir` for CLI management commands.
+
+Project MCP config is intentionally gated because it can point at local executables or remote services controlled by the repository. Trust a project only after reviewing `.kolega/mcp_servers.json`.
+
+## Config format
+
+```json
+{
+  "schema_version": 1,
+  "servers": [
+    {
+      "id": "docs",
+      "name": "Docs search",
+      "transport": "streamable_http",
+      "url": "https://mcp.example.com/mcp",
+      "headers": {
+        "Authorization": "Bearer ..."
+      },
+      "enabled": true
+    }
+  ]
+}
+```
+
+`servers` may be an array, or an object keyed by server ID. Server IDs may contain letters, numbers, `_`, and `-`.
+
+### `streamable_http`
+
+```json
+{
+  "id": "remote-http",
+  "transport": "streamable_http",
+  "url": "https://mcp.example.com/mcp",
+  "headers": {
+    "Authorization": "Bearer ..."
+  }
+}
+```
+
+### `sse`
+
+```json
+{
+  "id": "remote-sse",
+  "transport": "sse",
+  "url": "https://mcp.example.com/sse",
+  "headers": {
+    "Authorization": "Bearer ..."
+  },
+  "sse_read_timeout_seconds": 300
+}
+```
+
+### `stdio`
+
+```json
+{
+  "id": "local-server",
+  "transport": "stdio",
+  "command": "npx",
+  "args": ["-y", "@vendor/mcp-server"],
+  "env": {
+    "TOKEN": "..."
+  },
+  "cwd": "."
+}
+```
+
+`stdio` servers execute a local command. `kolega-code mcp verify` refuses to start `stdio` commands in non-interactive mode unless you pass `--yes`.
+
+## OAuth
+
+Enable OAuth for HTTP transports with the `oauth` object:
+
+```json
+{
+  "id": "oauth-server",
+  "transport": "streamable_http",
+  "url": "https://mcp.example.com/mcp",
+  "oauth": {
+    "enabled": true,
+    "scope": "read write"
+  }
+}
+```
+
+Run verification to start the OAuth flow:
+
+```bash
+kolega-code mcp verify oauth-server --project .
+```
+
+Use `--no-browser` to print the authorization URL instead of opening a browser. Tokens and dynamic client registration data are stored locally in `<state_dir>/mcp_oauth_tokens.json`. Kolega Code writes this file with owner-only permissions where the platform supports POSIX modes, redacts those values from diagnostics, and does not encrypt the file beyond the protection provided by the OS and filesystem permissions.
+
+## CLI management
+
+List servers and status:
+
+```bash
+kolega-code mcp --project . list
+```
+
+Add a remote server to global config:
+
+```bash
+kolega-code mcp --project . add docs \
+  --transport streamable_http \
+  --url https://mcp.example.com/mcp \
+  --header 'Authorization=Bearer ...'
+```
+
+Add a project config server:
+
+```bash
+kolega-code mcp --project . add repo-local \
+  --project-config \
+  --transport stdio \
+  --command npx \
+  --arg -y \
+  --arg @vendor/mcp-server
+```
+
+Trust project MCP config:
+
+```bash
+kolega-code . --trust-mcp
+# or for one-shot use:
+kolega-code ask "use repo tools" --project . --trust-mcp
+```
+
+Verify one server or all enabled servers:
+
+```bash
+kolega-code mcp --project . verify docs
+kolega-code mcp --project . verify --all --yes
+```
+
+Enable, disable, or remove servers:
+
+```bash
+kolega-code mcp --project . disable docs
+kolega-code mcp --project . enable docs
+kolega-code mcp --project . remove docs
+```
+
+## TUI management
+
+Open the **Settings** tab and use the **MCP Servers** section to:
+
+- Refresh status.
+- Trust project MCP config.
+- Create, update, delete, enable, and disable global MCP servers.
+- Verify a selected server.
+- Clear stored OAuth tokens for a selected server.
+
+Project servers are shown in the TUI but are read-only there. Edit `.kolega/mcp_servers.json` directly or use `kolega-code mcp ... --project-config`.
+
+## Verification and tool exposure
+
+Verification opens a real MCP session, calls `initialize`, lists all tools (including paginated results), and stores a fingerprinted status in `<state_dir>/mcp_server_status.json`.
+
+A server's tools are exposed only when:
+
+1. the server is enabled,
+2. verification succeeded, and
+3. the saved fingerprint still matches the current server config.
+
+Changing connection details, command args, headers, env, OAuth settings, or URL makes the saved status stale and hides tools until you verify again. Changing only `enabled` does not invalidate verification.
+
+Exposed tools are named:
+
+```text
+mcp__{server_id}__{tool_id}
+```
+
+The server-provided `inputSchema` is preserved verbatim.
+
+## Permissions
+
+MCP tools participate in the same project permission flow as shell and edit tools.
+
+In `ask` mode, the TUI can save:
+
+- an exact-tool allow rule for `mcp__server__tool`, or
+- a whole-server allow rule for all verified tools from one server.
+
+Saved rules live in `<project>/.kolega/permissions.json`.

{kolega_code-0.12.0 → kolega_code-0.14.0}/docs/src/content/docs/configuration/providers-and-models.mdx

@@ -171,6 +171,8 @@ models in the TUI.
 
 | Provider/model | Values | Kolega Code default |
 | --- | --- | --- |
+| Anthropic `claude-fable-5` | `low`, `medium`, `high`, `xhigh`, `max` | `medium` |
+| Anthropic `claude-sonnet-5` | `low`, `medium`, `high`, `xhigh`, `max` | `medium` |
 | Anthropic `claude-opus-4-7` | `low`, `medium`, `high`, `xhigh`, `max` | `medium` |
 | DeepSeek `deepseek-v4-pro` | `none`, `high`, `max` | `high` |
 | Moonshot `kimi-k2.7-code` | `auto` | `auto` |

{kolega_code-0.12.0 → kolega_code-0.14.0}/docs/src/content/docs/gigacode.mdx

@@ -52,9 +52,11 @@ Gigacode is **off by default**. Toggle it with the `/gigacode`
 | `/gigacode on` | Enable workflow orchestration for the session |
 | `/gigacode off` | Disable it |
 
-Once on, it stays on for the session, and the agent decides when a task is worth
-orchestrating. It works in both [Build and Plan modes](../tui/modes/) — see
-[Behavior and safety](#behavior-and-safety) for how each differs.
+Once on, it stays on for that resumable session — if you quit and resume the same
+session, the setting is restored. New sessions still start with Gigacode off. The
+agent decides when a task is worth orchestrating. It works in both
+[Build and Plan modes](../tui/modes/) — see [Behavior and safety](#behavior-and-safety)
+for how each differs.
 
 ## What you'll see