Files
kandev/apps/cli
João Salavisa ed33c7ea3f fix(deps): patch critical Dependabot advisories (#1915)
* fix(deps): patch critical Dependabot advisories

Resolve all open critical-severity Dependabot alerts:

- golang.org/x/crypto 0.51.0 -> 0.52.0 (CVE-2026-39830/39831/39832/
  39833/39834/42508/46595, GHSA ssh agent/key-constraint bypass, DoS)
- vitest ^1.6.0 -> ^4.1.10 in apps/cli (CVE-2026-47429; aligns with
  apps/web, dedupes the lockfile to a single vitest 4.1.10)
- tar ^7.5.11 -> ^7.5.19 in apps/cli (CVE-2026-59873 parse DoS;
  resolves to 7.5.21)

Backend builds and vets clean; all 280 apps/cli tests pass on vitest 4.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix(cli): bump esbuild to a Vite-8-supported range

The vitest 4 bump pulls vite@8, whose esbuild peer is ^0.27||^0.28,
but the CLI still pinned esbuild ^0.24.0 — pnpm resolved an
unsupported vite/esbuild pair (esbuild@0.24.2) for the CLI test
stack. Bump to ^0.27.0 so vite@8 resolves against esbuild@0.27.2 and
the peer warning clears. CLI tests still pass (280/280).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Kandev Agent <agent@kandev.dev>
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-07-24 13:03:31 +01:00
..

Kandev

Manage tasks. Orchestrate agents. Review changes. Ship value.

Quick Start

Homebrew

brew install kdlbs/kandev/kandev
kandev

NPX (requires npm 7+)

npx kandev@latest

Either install path resolves a platform-matched runtime (Go backend, agentctl, and static Vite web assets), launches the backend, and opens your browser. Data (worktrees, SQLite DB) is stored in ~/.kandev by default.

Version and Updates

The package manager owns the runtime version. kandev@X.Y.Z ships with the matching runtime.

  • Update via Homebrew: brew upgrade kandev
  • Update via npm/npx: npx kandev@latest or npm install -g kandev@latest
  • Print CLI version: kandev --version

Run as a Service

Install kandev as a systemd (Linux) or launchd (macOS) service so it auto-starts and stays running across reboots:

kandev service install                   # user mode (laptop, single-user)
sudo kandev service install --system     # system mode (VPS, shared host)

See docs/run-as-a-service.md for the full guide — user vs system mode comparison, update workflow, troubleshooting.

What You Get

  • Multi-agent support - Claude Code, Codex, GitHub Copilot, Gemini CLI, Amp, Auggie, OpenCode
  • Integrated workspace - Terminal, code editor with LSP, git changes, browser preview, and chat
  • Kanban & pipeline views - Organize tasks with opinionated workflows and gates
  • CLI passthrough - Drop into raw agent TUI mode for full terminal access
  • Workspace isolation - Git worktrees prevent concurrent agents from conflicting
  • Session management - Resume and review agent conversations

Supported Agents

Agent Default Model Protocol
Claude Code Sonnet 4.5 stream-json
Codex GPT-5.2 Codex Codex
GitHub Copilot GPT-4.1 Copilot SDK
Gemini CLI Gemini 3 Flash ACP
Amp Smart Mode stream-json
Auggie Sonnet 4.5 ACP
OpenCode GPT-5 Nano REST/SSE

Beta - Under active development. Expect rough edges and breaking changes.

Requirements

  • Node.js (only for npx / npm-based installs and development tooling)
  • Git
  • Docker (optional - needed for container runtimes)

Platforms

  • macOS (Intel + Apple Silicon)
  • Linux (x64)
  • Windows (x64, WSL)

Learn More

Open source, multi-provider, no telemetry, not tied to any cloud.

See the GitHub repository for architecture, vision, development setup, and contributing guidelines.

License

AGPL-3.0