kolega-code 0.44.0__tar.gz → 0.45.1__tar.gz

{kolega_code-0.44.0 → kolega_code-0.45.1}/CHANGELOG.md

@@ -6,6 +6,79 @@ This project uses GitHub Releases for detailed generated release notes. This fil
 
 ## Unreleased
 
+## 0.45.1 - 2026-10-23
+
+### Fixed
+
+- Healthy pauses in model responses now show "Waiting for response…" instead
+  of incorrectly reporting a connection issue. The waiting notice clears when
+  activity resumes without overwriting newer activity such as "Thinking…".
+- Retry notices distinguish actual response timeouts from other transient
+  failures, with detailed errors retained in diagnostics.
+
+### Security
+
+- Updated OpenTelemetry's API to 1.45.1, fixing excessive CPU use when parsing
+  malicious trace-state headers (CVE-2026-114603), and refreshed its companion
+  packages.
+
+## 0.45.0 - 2026-10-22
+
+### Added
+
+- **First-party MiniMax support.** Select `minimax` with `MINIMAX_API_KEY`
+  or a key saved in Settings. Includes MiniMax M3.1 Flash (the default), M3,
+  and the M2 family, with streaming, tool calling, usage reporting, image
+  input on M3 models, and adjustable adaptive thinking on M3.1 Flash.
+- **Mistral model refresh.** `kolega-code models refresh --provider mistral`
+  caches Mistral's live, account-visible model list so models published after a
+  release resolve without upgrading. The endpoint is authenticated, so the
+  command uses `MISTRAL_API_KEY` or a key saved in Settings. A refresh only adds
+  models Kolega does not already know and never overrides a bundled spec.
+
+### Changed
+
+- Reduced session-recording overhead during long turns by avoiding redundant
+  journal reads while the process exclusively owns the session.
+- Updated the documentation site's image-processing dependency, sharp, to 0.35.5.
+
+### Fixed
+
+- **Completed turns no longer leave the TUI stuck as busy on Python 3.12+.**
+  Ordinary turns, background-agent continuations, and scheduled loops now
+  release their timer and active-turn state correctly.
+- **Stop no longer remains indefinitely on "Stopping…".** A second Stop or
+  five-second grace period restores the UI while unfinished cleanup remains
+  isolated. New turns and session, model, or settings changes wait for that
+  cleanup; late output cannot overwrite the current UI.
+- **Silent model requests are bounded.** Separate first-response and idle
+  deadlines, bounded retries, and bounded stream cleanup prevent long,
+  unexplained waits. Compact connection-status notices keep the next action
+  visible even in narrow terminals; detailed errors remain in diagnostics.
+- Slow session writes no longer indefinitely hide finished plans or prevent
+  turn finalization. Writes continue in the background with warnings and
+  diagnostics, and older delayed saves cannot overwrite newer state.
+- Worktree switches committed before cancellation are completed or recovered
+  safely before queued work resumes.
+- Quit now uses bounded waits and a final process-exit watchdog for stuck
+  cleanup or worker threads. The watchdog is disarmed when shutdown returns
+  normally.
+- **Mistral catalog drift.** Large 4's context window is 1,048,576 tokens (was
+  524,288), Mistral Large 3 (`mistral-large-2512`) and its `latest` alias are now
+  catalogued, and `mistral-code-latest` resolves to Codestral. Large 4 is no
+  longer labelled a preview.
+- **ACP model picker honours exported credentials.** Editor sessions now list
+  providers whose API key comes from the environment, matching the CLI, instead
+  of only providers saved through onboarding.
+
+### Security
+
+- Updated aiohttp to 3.14.5 for three parser/timeout advisories, with its
+  required yarl update to 1.25.1.
+- Updated Pillow to 13.0.0 in the application and standalone eval bundle for
+  eight security advisories.
+- Updated certifi to 2026.10.19, removing compromised emSign roots.
+
 ## 0.44.0 - 2026-10-19
 
 ### Added

{kolega_code-0.44.0 → kolega_code-0.45.1}/CONTRIBUTING.md

@@ -120,6 +120,18 @@ You can pass additional pytest arguments through the wrapper:
 ./run_tests.sh tests/test_git_env.py -ra
 ```
 
+## Comments
+
+Comments are rare here. Write one only where the code cannot say it: a non-obvious
+constraint, a failure mode, or a probed vendor behaviour.
+
+- Don't restate a self-explanatory constant or boolean in prose above it.
+- Don't write a docstring that rewords the signature, or one longer than the body it
+  documents.
+- Don't transcribe research (probe logs, vendor quirks) into a source-file banner —
+  that belongs in `docs/`, `CHANGELOG.md`, or the test that pins the behaviour.
+- Explain a subtle decision once, at the place it is made, not at every call site.
+
 ## Updating bundled skills
 
 Kolega Code vendors a reviewed, tagged snapshot from

{kolega_code-0.44.0 → kolega_code-0.45.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: kolega-code
-Version: 0.44.0
+Version: 0.45.1
 Summary: Multi-agent coding in the terminal
 Project-URL: Homepage, https://kolega-ai.github.io/kolega-code/
 Project-URL: Documentation, https://kolega-ai.github.io/kolega-code/
@@ -50,9 +50,10 @@ Requires-Dist: nest-asyncio==1.6.0
 Requires-Dist: onnxruntime==1.19.2; sys_platform == 'darwin' and platform_machine == 'x86_64' and python_version < '3.13'
 Requires-Dist: onnxruntime==1.27.0; python_version >= '3.14' and sys_platform != 'win32'
 Requires-Dist: openai==2.46.0
+Requires-Dist: opentelemetry-api==1.45.1
 Requires-Dist: packaging==25.0
 Requires-Dist: pathspec==1.1.1
-Requires-Dist: pillow==12.3.0
+Requires-Dist: pillow==13.0.0
 Requires-Dist: playwright==1.59.0
 Requires-Dist: psutil==7.2.2
 Requires-Dist: pydantic==2.13.4
@@ -271,6 +272,7 @@ Supported model providers:
 - DashScope / Qwen
 - OpenRouter (gateway to 250+ tool-capable models)
 - Moonshot / Kimi
+- MiniMax
 - DeepSeek
 - Z.AI / GLM Coding Plan
 - Kimi Coding Plan
@@ -314,20 +316,27 @@ kolega-code . --provider mistral --model mistral-medium-3-5
 ```
 
 The picker defaults to Mistral Medium 3.5 and includes Mistral Small 4
-(`mistral-small-2603`), Mistral Large 4 **preview** (`mistral-large-4`),
-Ministral 3 (3B/8B/14B), Codestral, and eligible native aliases. Large 4 access
-depends on the account/subscription; a catalog entry does not guarantee access.
-Aliases, especially `latest`, can change their target and capabilities.
+(`mistral-small-2603`), Mistral Large 4 (`mistral-large-4`), Mistral Large 3
+(`mistral-large-2512`), Ministral 3 (3B/8B/14B), Codestral, and eligible native
+aliases. Windows and capabilities mirror Mistral's authenticated model list; a
+catalog entry does not guarantee access, because subscription tiers and
+organization policies still apply. Aliases, especially `latest`, can change
+their target and capabilities.
 
 Medium 3.5, Small 4, Large 4, and Ministral 3 support image input; Codestral is
-text-only. Medium/Small/Large expose `none` (default) or `high` thinking, with
-same-provider reasoning replayed in Mistral's native format. Token counting is
+text-only. Medium 3.5, Small 4 and Large 4 expose `none` (default) or `high`
+thinking, with same-provider reasoning replayed in Mistral's native format;
+Large 3, Ministral 3 and Codestral expose no thinking control. Token counting is
 a conservative local estimate with a safety margin, not an exact Mistral
 tokenizer. The catalog's 32,768-token output reservation is Kolega's budgeting
 policy, not a verified native maximum-output ceiling. Kolega Code runs the local
 function-tool loop; Mistral-hosted server tools are not enabled. Native Mistral
 keys and model IDs are separate from gateway credentials and routes.
 
+Mistral publishes models between releases; `kolega-code models refresh --provider mistral`
+caches the live list locally. It adds only models Kolega does not already ship
+and never overrides a bundled spec.
+
 ## Requirements
 
 - **Python 3.11+**

{kolega_code-0.44.0 → kolega_code-0.45.1}/README.md

@@ -180,6 +180,7 @@ Supported model providers:
 - DashScope / Qwen
 - OpenRouter (gateway to 250+ tool-capable models)
 - Moonshot / Kimi
+- MiniMax
 - DeepSeek
 - Z.AI / GLM Coding Plan
 - Kimi Coding Plan
@@ -223,20 +224,27 @@ kolega-code . --provider mistral --model mistral-medium-3-5
 ```
 
 The picker defaults to Mistral Medium 3.5 and includes Mistral Small 4
-(`mistral-small-2603`), Mistral Large 4 **preview** (`mistral-large-4`),
-Ministral 3 (3B/8B/14B), Codestral, and eligible native aliases. Large 4 access
-depends on the account/subscription; a catalog entry does not guarantee access.
-Aliases, especially `latest`, can change their target and capabilities.
+(`mistral-small-2603`), Mistral Large 4 (`mistral-large-4`), Mistral Large 3
+(`mistral-large-2512`), Ministral 3 (3B/8B/14B), Codestral, and eligible native
+aliases. Windows and capabilities mirror Mistral's authenticated model list; a
+catalog entry does not guarantee access, because subscription tiers and
+organization policies still apply. Aliases, especially `latest`, can change
+their target and capabilities.
 
 Medium 3.5, Small 4, Large 4, and Ministral 3 support image input; Codestral is
-text-only. Medium/Small/Large expose `none` (default) or `high` thinking, with
-same-provider reasoning replayed in Mistral's native format. Token counting is
+text-only. Medium 3.5, Small 4 and Large 4 expose `none` (default) or `high`
+thinking, with same-provider reasoning replayed in Mistral's native format;
+Large 3, Ministral 3 and Codestral expose no thinking control. Token counting is
 a conservative local estimate with a safety margin, not an exact Mistral
 tokenizer. The catalog's 32,768-token output reservation is Kolega's budgeting
 policy, not a verified native maximum-output ceiling. Kolega Code runs the local
 function-tool loop; Mistral-hosted server tools are not enabled. Native Mistral
 keys and model IDs are separate from gateway credentials and routes.
 
+Mistral publishes models between releases; `kolega-code models refresh --provider mistral`
+caches the live list locally. It adds only models Kolega does not already ship
+and never overrides a bundled spec.
+
 ## Requirements
 
 - **Python 3.11+**

{kolega_code-0.44.0 → kolega_code-0.45.1}/kolega_code/__init__.py

@@ -174,4 +174,4 @@ __all__ = [
     "parse_git_status_output",
 ]
 
-__version__ = "0.44.0"
+__version__ = "0.45.1"

{kolega_code-0.44.0 → kolega_code-0.45.1}/kolega_code/acp/agent_factory.py

@@ -18,6 +18,7 @@ the process keeps serving.
 from __future__ import annotations
 
 import logging
+import os
 from pathlib import Path
 from typing import Any, Awaitable, Callable, cast
 
@@ -38,7 +39,7 @@ from kolega_code.agent.prompt_provider import AgentMode
 from kolega_code.agent.prompts import BUILD_QUESTION_PROMPT, PLANNING_QUESTION_PROMPT
 from kolega_code.agent.tool_definitions import tool_description_asset
 from kolega_code.agent.volatile_context import VolatileSection
-from kolega_code.cli.config import CliConfigOverrides, build_agent_config, config_summary
+from kolega_code.cli.config import API_KEY_ENV, CliConfigOverrides, build_agent_config, config_summary
 from kolega_code.cli.connection import CliConnectionManager
 from kolega_code.cli.provider_registry import PROVIDER_LABELS, ui_model_options
 from kolega_code.cli.session_event_store import FileArtifactStore, FileSessionEventStore
@@ -247,12 +248,24 @@ class AgentFactory:
             settings_store=self._settings_store,
         )
 
-    def _model_option(self, session: AcpSession) -> SessionConfigOptionSelect:
+    def _configured_providers(self) -> list[str]:
+        """Providers the editor can offer: saved keys plus exported credentials.
+
+        ACP spawns as a child of the editor, which inherits the shell
+        environment. The CLI already treats an exported ``*_API_KEY`` as
+        sufficient, so an env-only provider must not be invisible here just
+        because it was never saved through onboarding.
+        """
         assert self._settings is not None
+        providers = {provider for provider, key in self._settings.api_keys.items() if key}
+        providers.update(
+            provider.value for provider, env_name in API_KEY_ENV.items() if (os.environ.get(env_name) or "").strip()
+        )
+        return sorted(providers)
+
+    def _model_option(self, session: AcpSession) -> SessionConfigOptionSelect:
         groups: list[SessionConfigSelectGroup] = []
-        for provider, key in sorted(self._settings.api_keys.items()):
-            if not key:
-                continue
+        for provider in self._configured_providers():
             options = [
                 SessionConfigSelectOption(value=f"{provider}/{model}", name=label)
                 for label, model in ui_model_options(provider)

{kolega_code-0.44.0 → kolega_code-0.45.1}/kolega_code/agent/__init__.py

@@ -51,4 +51,4 @@ __all__ = [
     "ToolExtension",
 ]
 
-__version__ = "0.44.0"
+__version__ = "0.45.1"