* fix(deps): patch critical Dependabot advisories Resolve all open critical-severity Dependabot alerts: - golang.org/x/crypto 0.51.0 -> 0.52.0 (CVE-2026-39830/39831/39832/ 39833/39834/42508/46595, GHSA ssh agent/key-constraint bypass, DoS) - vitest ^1.6.0 -> ^4.1.10 in apps/cli (CVE-2026-47429; aligns with apps/web, dedupes the lockfile to a single vitest 4.1.10) - tar ^7.5.11 -> ^7.5.19 in apps/cli (CVE-2026-59873 parse DoS; resolves to 7.5.21) Backend builds and vets clean; all 280 apps/cli tests pass on vitest 4. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> * fix(cli): bump esbuild to a Vite-8-supported range The vitest 4 bump pulls vite@8, whose esbuild peer is ^0.27||^0.28, but the CLI still pinned esbuild ^0.24.0 — pnpm resolved an unsupported vite/esbuild pair (esbuild@0.24.2) for the CLI test stack. Bump to ^0.27.0 so vite@8 resolves against esbuild@0.27.2 and the peer warning clears. CLI tests still pass (280/280). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> --------- Co-authored-by: Kandev Agent <agent@kandev.dev> Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Kandev
Manage tasks. Orchestrate agents. Review changes. Ship value.
Quick Start
Homebrew
brew install kdlbs/kandev/kandev
kandev
NPX (requires npm 7+)
npx kandev@latest
Either install path resolves a platform-matched runtime (Go backend, agentctl, and static Vite web assets), launches the backend, and opens your browser. Data (worktrees, SQLite DB) is stored in ~/.kandev by default.
Version and Updates
The package manager owns the runtime version. kandev@X.Y.Z ships with the matching runtime.
- Update via Homebrew:
brew upgrade kandev - Update via npm/npx:
npx kandev@latestornpm install -g kandev@latest - Print CLI version:
kandev --version
Run as a Service
Install kandev as a systemd (Linux) or launchd (macOS) service so it auto-starts and stays running across reboots:
kandev service install # user mode (laptop, single-user)
sudo kandev service install --system # system mode (VPS, shared host)
See docs/run-as-a-service.md for the full guide — user vs system mode comparison, update workflow, troubleshooting.
What You Get
- Multi-agent support - Claude Code, Codex, GitHub Copilot, Gemini CLI, Amp, Auggie, OpenCode
- Integrated workspace - Terminal, code editor with LSP, git changes, browser preview, and chat
- Kanban & pipeline views - Organize tasks with opinionated workflows and gates
- CLI passthrough - Drop into raw agent TUI mode for full terminal access
- Workspace isolation - Git worktrees prevent concurrent agents from conflicting
- Session management - Resume and review agent conversations
Supported Agents
| Agent | Default Model | Protocol |
|---|---|---|
| Claude Code | Sonnet 4.5 | stream-json |
| Codex | GPT-5.2 Codex | Codex |
| GitHub Copilot | GPT-4.1 | Copilot SDK |
| Gemini CLI | Gemini 3 Flash | ACP |
| Amp | Smart Mode | stream-json |
| Auggie | Sonnet 4.5 | ACP |
| OpenCode | GPT-5 Nano | REST/SSE |
Beta - Under active development. Expect rough edges and breaking changes.
Requirements
- Node.js (only for
npx/ npm-based installs and development tooling) - Git
- Docker (optional - needed for container runtimes)
Platforms
- macOS (Intel + Apple Silicon)
- Linux (x64)
- Windows (x64, WSL)
Learn More
Open source, multi-provider, no telemetry, not tied to any cloud.
See the GitHub repository for architecture, vision, development setup, and contributing guidelines.