This release adds 2 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+2 more
Summary
AI summaryAdded a Bridge server enabling authenticated HTTP API for editor extensions.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Low |
Adds authenticated localhost HTTP bridge server for editor extensions Adds authenticated localhost HTTP bridge server for editor extensions Source: llm_adapter@2026-06-07 Confidence: high |
— |
| Feature | Low |
Provides `GET /health` endpoint (no auth) returning status, model, version Provides `GET /health` endpoint (no auth) returning status, model, version Source: granite4.1:30b@2026-06-07-audit Confidence: low |
— |
| Feature | Low |
Adds `POST /ask` endpoint for one‑shot LLM answers without affecting history Adds `POST /ask` endpoint for one‑shot LLM answers without affecting history Source: granite4.1:30b@2026-06-07-audit Confidence: low |
— |
| Feature | Low |
Provides `GET /diagnostics?file=PATH` returning LSP diagnostics Provides `GET /diagnostics?file=PATH` returning LSP diagnostics Source: granite4.1:30b@2026-06-07-audit Confidence: low |
— |
| Feature | Low |
Binds bridge server to `127.0.0.1` only with per‑session bearer token authentication Binds bridge server to `127.0.0.1` only with per‑session bearer token authentication Source: granite4.1:30b@2026-06-07-audit Confidence: low |
— |
| Feature | Low |
Allows fixed port selection via `--port` flag for the bridge server Allows fixed port selection via `--port` flag for the bridge server Source: granite4.1:30b@2026-06-07-audit Confidence: low |
— |
| Feature | Low |
Includes minimal reference client implementation in `examples/bridge_client.py` Includes minimal reference client implementation in `examples/bridge_client.py` Source: granite4.1:30b@2026-06-07-audit Confidence: low |
— |
| Other | Low |
Adds `test_bridge.py` covering health, auth enforcement, `/ask`, `/diagnostics`, and 404 handling (471 tests total) Adds `test_bridge.py` covering health, auth enforcement, `/ask`, `/diagnostics`, and 404 handling (471 tests total) Source: granite4.1:30b@2026-06-07-audit Confidence: low |
— |
Full changelog
Connect Kodiqa to your editor.
Added
- Bridge server —
kodiqa --serve(or/servein a session) runs a small authenticated localhost HTTP server that editor extensions (VS Code, Zed, Neovim, …) can call:GET /health(no auth) →{status, model, version}POST /ask {prompt, context?}→{response}— a one-shot, non-streaming answer that doesn't touch conversation history or edit files (safe to call while the CLI is in use)GET /diagnostics?file=PATH→ LSP diagnostics (start an LSP with/lsp)- Binds to
127.0.0.1only with a per-session bearer token;--portsets a fixed port.
- A minimal reference client in
examples/bridge_client.py. Editor extensions are thin clients over this protocol.
Tests
test_bridge.py— real in-process server: health, auth enforcement,/ask(context + validation),/diagnostics, and 404s. 471 total; ruff + CI green.
This release completes the roadmap — the full mcp2cli-inspired suite (lazy MCP, remote MCP, OAuth, TOON, OpenAPI/GraphQL), cross-provider failover, turn-rewind, custom commands, and now the editor bridge.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Kodiqa Agent
All releases →Related context
Related tools
Beta — feedback welcome: [email protected]