Kilo-Org shipped open-source coding agent platform Kilo Code v7.8.1 (includes 7.8.0) on 2026-09-25. 7.8.0 brings a high-resolution streamed Agent Manager browser for public HTTPS pages and CDN assets in localhost previews, with install/retry/settings guidance, native cross-origin checks, ordered clipboard, and stalled-session cleanup; plus close-task commands and a stoppable session-cleanup pass. 7.8.1 publishes CycloneDX SBOMs for every CLI archive, npm package, container image, VS Code extension, and JetBrains plugin—SHA-256 bound and GitHub-attestation signed. Azure Entra ID accepts resource name or full endpoint URL.

Key Takeaways

  • ✓Shipped: v7.8.1 / @kilocode/[email protected]
  • ✓7.8.0: Agent Manager browser for public HTTPS/CDN; close-task cmds; stoppable session cleanup
  • ✓7.8.1: CycloneDX SBOM + SHA-256 + GitHub attestation on every artifact
  • ✓Azure Entra ID: resource name or full endpoint; block nested var refs in project MCP headers
  • ✓Install: VS Code Marketplace / CLI / JetBrains; docs at kilo.ai/docs
🔗

Project Links & Resources

Direct Access
Direct access to official project resources and documentation
🐙
GitHub Release Kilo Code v7.8.1
github.com/Kilo-Org/kilocode/releases/tag/v7.8.1
↗
🐙
Kilo Code repository
github.com/Kilo-Org/kilocode
↗
📖
npm @kilocode/cli
www.npmjs.com/package/@kilocode/cli
↗
🚀
VS Code Marketplace — Kilo Code
marketplace.visualstudio.com/items?itemName=kilocode.Kilo-Code
↗
📖
Kilo docs
kilo.ai/docs
↗
📝
kilo.ai
kilo.ai/
↗
📝
Kilo blog
blog.kilo.ai
↗
🐙
#13804
github.com/Kilo-Org/kilocode/pull/13804
↗
🐙
#14513
github.com/Kilo-Org/kilocode/pull/14513
↗
🔬

In-Depth Technical Analysis

Core Background & Industry Pain Points

Coding agents spanning VS Code, JetBrains, and CLI often fail localhost preview when the app pulls public HTTPS/CDN assets, and enterprises stall without per-artifact SBOMs/attestations across extension, CLI, container, and IDE plugins. Kilo Code is an open agent platform (500+ models at provider rates); preview + supply-chain gaps still block Agent Manager and compliance.

Architecture Highlights & Internals

v7.8.1 bundles 7.8.0+7.8.1. Agent Manager gains a high-res streamed browser for public HTTPS/CDN in localhost previews, with install/retry/settings UX, ordered clipboard, stalled-session cleanup, and native cross-origin checks. Close current/all task tabs; stoppable session cleanup reclaims DB space. Every CLI archive, npm package, container image, VS Code extension, and JetBrains plugin ships CycloneDX SBOM bound to SHA-256 with GitHub attestation. Azure Entra ID accepts resource name or full endpoint; nested var refs in project MCP headers are blocked.

Authoritative Benchmarks & Measured Scores

No public SWE-bench numbers. Verify CycloneDX+attestation on each artifact and HTTPS/CDN preview under real CORS. Diff SBOMs in CI; exercise Stop on session cleanup.

Developer Hands-on Guide

Install the VS Code extension or npm i -g @kilocode/[email protected]. Docs: kilo.ai/docs, kilo.ai, release notes.