feat: port vendor-neutral upstream updates with manifest

[Pidbid]

Summary

Ports the full vendor-neutral update set reviewed on 2026-07-31 into KKM.

Upstream-merged PRs

• fix(agent-core-v2): treat cache entries missing required fields as cold misses MoonshotAI/kimi-code#2395 — rebuild malformed session-cache entries
• fix(agent-core-v2): write refresh results in one atomic config transition MoonshotAI/kimi-code#2410 — atomic provider/model refresh
• fix(web): upgrade markstream-vue to 1.0.9-beta.1 and enable Monaco code highlighting MoonshotAI/kimi-code#2415 + fix(web): restore chat code block styling after the markstream upgrade MoonshotAI/kimi-code#2459 — Monaco Web code highlighting and follow-up styling fix
• fix(web): unify permission mode order and risk colors across settings surfaces MoonshotAI/kimi-code#2125 — permission-mode ordering and risk colors
• fix(agent-core): strip the no-op subagent model parameter while the secondary-model experiment is off MoonshotAI/kimi-code#2449 — hide inactive subagent model parameters
• fix(tui): reduce frequent full-screen redraws MoonshotAI/kimi-code#2442 — reduce destructive TUI redraws
• fix(cli): fall back to built-in models.dev catalog when fetch fails MoonshotAI/kimi-code#2416 — built-in models.dev catalog fallback

Pinned open PRs adopted by KKM

• fix(agent-core-v2): surface a warning when a skill fails to load MoonshotAI/kimi-code#1987 — warn when Skills fail to load
• perf: stream wire.jsonl reads to reduce peak memory consumption MoonshotAI/kimi-code#2137 — stream wire.jsonl reads
• fix: stop empty-payload images from poisoning sessions MoonshotAI/kimi-code#2249 — prevent empty image payloads from poisoning sessions
• feat(cli): add /context slash command with context usage breakdown MoonshotAI/kimi-code#2306 — add /context usage breakdown
• fix(plugin): validate installed.json records instead of casting them MoonshotAI/kimi-code#2307 — validate installed plugin records (already present; pinned and changeset ownership corrected)
• fix(anthropic): omit incompatible tool schemas MoonshotAI/kimi-code#2338 — omit Anthropic-incompatible tool schemas (already present; pinned and verified without overwriting KKM's baseline)
• fix: filter disabled MCP tools in registerMcpServer + fix agent timeout description MoonshotAI/kimi-code#2423 — filter disabled MCP tools
• fix: time out stalled LLM streams MoonshotAI/kimi-code#2446 — time out stalled LLM streams

Every open PR is pinned to the exact head SHA used during the port.

Traceability

Adds UPSTREAM_PORTS.md as the authoritative, long-lived manifest for:

• included upstream PRs
• fixed source SHAs
• upstream status at adoption
• conflict-integration notes
• deliberately deferred or vendor-specific PRs
• validation and release records

Both READMEs link to the manifest.

Scope exclusions

Kimi account/sign-in, quota, feedback, managed profile, title, telemetry identity, and large v2-only architectural rewrites remain excluded.

Validation

Final validation on the single clean commit 8dbf70545548ae5b9fe37ffd46229d3ff09d53e8:

• CI run 30633784326: lint, typecheck, build, all 5 test shards, and pi-tui passed; the conditional Windows job was skipped.
• Nix Build run 30633784202: workspace sync and nix build .#kimi-code passed.

UPSTREAM_PORTS.md also retains the equivalent pre-squash validation run for audit continuity.

The same results and exact upstream source SHAs are recorded in UPSTREAM_PORTS.md.

[github-actions]

❌ Nix build failed

    kkm> ℹ Build start
    kkm> ERROR  Error: Build failed with 1 error:
    kkm> 
    kkm> [PARSE_ERROR] Unexpected token
    kkm>      ╭─[ ../../packages/kap-server/src/services/snapshot/snapshotReader.ts:294:2 ]
    kkm>      │
    kkm>  294 │  * Parse a `wire.jsonl` file. Streams the file line-by-line (chunk-buffered,
    kkm>      │  ┬
    kkm>      │  ╰──
    kkm> ─────╯
    kkm> 
    kkm>     at aggregateBindingErrorsIntoJsError (file:///build/source/node_modules/.pnpm/rolldown@1.0.1/node_modules/rolldown/dist/shared/error-CkdMJ9ps.mjs:48:18)
    kkm>     at unwrapBindingResult (file:///build/source/node_modules/.pnpm/rolldown@1.0.1/node_modules/rolldown/dist/shared/error-CkdMJ9ps.mjs:18:128)
    kkm>     at #build (file:///build/source/node_modules/.pnpm/rolldown@1.0.1/node_modules/rolldown/dist/shared/rolldown-build-BVD3dIdE.mjs:3275:34)
    kkm>     at async build (file:///build/source/node_modules/.pnpm/rolldown@1.0.1/node_modules/rolldown/dist/index.mjs:42:22)
    kkm>     at async Promise.all (index 0)
    kkm>     at async buildSingle (file:///build/source/node_modules/.pnpm/tsdown@0.22.0_@arethetypeswrong+core@0.18.2_publint@0.3.18_tsx@4.21.0_typescript@6.0.2__e3c4b77bdbb7c42f8dbfce92959948a8/node_modules/tsdown/dist/build-5FURNVr0.mjs:765:19)
    kkm>     at async Promise.all (index 0)
    kkm>     at async buildWithConfigs (file:///build/source/node_modules/.pnpm/tsdown@0.22.0_@arethetypeswrong+core@0.18.2_publint@0.3.18_tsx@4.21.0_typescript@6.0.2__e3c4b77bdbb7c42f8dbfce92959948a8/node_modules/tsdown/dist/build-5FURNVr0.mjs:721:18)
    kkm>     at async CAC.<anonymous> (file:///build/source/node_modules/.pnpm/tsdown@0.22.0_@arethetypeswrong+core@0.18.2_publint@0.3.18_tsx@4.21.0_typescript@6.0.2__e3c4b77bdbb7c42f8dbfce92959948a8/node_modules/tsdown/dist/run.mjs:22:2)
    kkm>     at async runCLI (file:///build/source/node_modules/.pnpm/tsdown@0.22.0_@arethetypeswrong+core@0.18.2_publint@0.3.18_tsx@4.21.0_typescript@6.0.2__e3c4b77bdbb7c42f8dbfce92959948a8/node_modules/tsdown/dist/run.mjs:46:3)
    kkm> Command failed: /nix/store/chsxa1iw7s3m51v4kj43yd1nw26xvi21-nodejs-24.15.0/bin/node /build/source/node_modules/.pnpm/tsdown@0.22.0_@arethetypeswrong+core@0.18.2_publint@0.3.18_tsx@4.21.0_typescript@6.0.2__e3c4b77bdbb7c42f8dbfce92959948a8/node_modules/tsdown/dist/run.mjs --config tsdown.native.config.ts
    kkm> 
    kkm>  ERROR  Error: Build failed with 1 error:
    kkm> 
    kkm> [PARSE_ERROR] Unexpected token
    kkm>      ╭─[ ../../packages/kap-server/src/services/snapshot/snapshotReader.ts:294:2 ]
    kkm>      │
    kkm>  294 │  * Parse a `wire.jsonl` file. Streams the file line-by-line (chunk-buffered,
    kkm>      │  ┬
    kkm>      │  ╰──
    kkm> ─────╯
    kkm> 
    kkm>     at aggregateBindingErrorsIntoJsError (file:///build/source/node_modules/.pnpm/rolldown@1.0.1/node_modules/rolldown/dist/shared/error-CkdMJ9ps.mjs:48:18)
    kkm>     at unwrapBindingResult (file:///build/source/node_modules/.pnpm/rolldown@1.0.1/node_modules/rolldown/dist/shared/error-CkdMJ9ps.mjs:18:128)
    kkm>     at #build (file:///build/source/node_modules/.pnpm/rolldown@1.0.1/node_modules/rolldown/dist/shared/rolldown-build-BVD3dIdE.mjs:3275:34)
    kkm>     at async build (file:///build/source/node_modules/.pnpm/rolldown@1.0.1/node_modules/rolldown/dist/index.mjs:42:22)
    kkm>     at async Promise.all (index 0)
    kkm>     at async buildSingle (file:///build/source/node_modules/.pnpm/tsdown@0.22.0_@arethetypeswrong+core@0.18.2_publint@0.3.18_tsx@4.21.0_typescript@6.0.2__e3c4b77bdbb7c42f8dbfce92959948a8/node_modules/tsdown/dist/build-5FURNVr0.mjs:765:19)
    kkm>     at async Promise.all (index 0)
    kkm>     at async buildWithConfigs (file:///build/source/node_modules/.pnpm/tsdown@0.22.0_@arethetypeswrong+core@0.18.2_publint@0.3.18_tsx@4.21.0_typescript@6.0.2__e3c4b77bdbb7c42f8dbfce92959948a8/node_modules/tsdown/dist/build-5FURNVr0.mjs:721:18)
    kkm>     at async CAC.<anonymous> (file:///build/source/node_modules/.pnpm/tsdown@0.22.0_@arethetypeswrong+core@0.18.2_publint@0.3.18_tsx@4.21.0_typescript@6.0.2__e3c4b77bdbb7c42f8dbfce92959948a8/node_modules/tsdown/dist/run.mjs:22:2)
    kkm>     at async runCLI (file:///build/source/node_modules/.pnpm/tsdown@0.22.0_@arethetypeswrong+core@0.18.2_publint@0.3.18_tsx@4.21.0_typescript@6.0.2__e3c4b77bdbb7c42f8dbfce92959948a8/node_modules/tsdown/dist/run.mjs:46:3)
    kkm> 
    kkm> 
    kkm> /build/source/apps/kimi-code:
    kkm>  ERR_PNPM_RECURSIVE_RUN_FIRST_FAIL  @moonshot-ai/kimi-code@0.30.0-kkm.1 build:native:sea: `node scripts/native/build.mjs --profile=local`
    kkm> Exit status 1
    error: Cannot build '/nix/store/l2r2byfgjfd1n30iqbrni1sj8vdaf6dx-kkm-0.30.0-kkm.1.drv'.
           Reason: builder failed with exit code 1.
           Output paths:
             /nix/store/s2pz5jn26mq0xqwpbl5c8c5n5k4jqqz6-kkm-0.30.0-kkm.1
           Last 25 log lines:
           >  ERROR  Error: Build failed with 1 error:
           >
           > [PARSE_ERROR] Unexpected token
           >      ╭─[ ../../packages/kap-server/src/services/snapshot/snapshotReader.ts:294:2 ]
           >      │
           >  294 │  * Parse a `wire.jsonl` file. Streams the file line-by-line (chunk-buffered,
           >      │  ┬
           >      │  ╰──
           > ─────╯
           >
           >     at aggregateBindingErrorsIntoJsError (file:///build/source/node_modules/.pnpm/rolldown@1.0.1/node_modules/rolldown/dist/shared/error-CkdMJ9ps.mjs:48:18)
           >     at unwrapBindingResult (file:///build/source/node_modules/.pnpm/rolldown@1.0.1/node_modules/rolldown/dist/shared/error-CkdMJ9ps.mjs:18:128)
           >     at #build (file:///build/source/node_modules/.pnpm/rolldown@1.0.1/node_modules/rolldown/dist/shared/rolldown-build-BVD3dIdE.mjs:3275:34)
           >     at async build (file:///build/source/node_modules/.pnpm/rolldown@1.0.1/node_modules/rolldown/dist/index.mjs:42:22)
           >     at async Promise.all (index 0)
           >     at async buildSingle (file:///build/source/node_modules/.pnpm/tsdown@0.22.0_@arethetypeswrong+core@0.18.2_publint@0.3.18_tsx@4.21.0_typescript@6.0.2__e3c4b77bdbb7c42f8dbfce92959948a8/node_modules/tsdown/dist/build-5FURNVr0.mjs:765:19)
           >     at async Promise.all (index 0)
           >     at async buildWithConfigs (file:///build/source/node_modules/.pnpm/tsdown@0.22.0_@arethetypeswrong+core@0.18.2_publint@0.3.18_tsx@4.21.0_typescript@6.0.2__e3c4b77bdbb7c42f8dbfce92959948a8/node_modules/tsdown/dist/build-5FURNVr0.mjs:721:18)
           >     at async CAC.<anonymous> (file:///build/source/node_modules/.pnpm/tsdown@0.22.0_@arethetypeswrong+core@0.18.2_publint@0.3.18_tsx@4.21.0_typescript@6.0.2__e3c4b77bdbb7c42f8dbfce92959948a8/node_modules/tsdown/dist/run.mjs:22:2)
           >     at async runCLI (file:///build/source/node_modules/.pnpm/tsdown@0.22.0_@arethetypeswrong+core@0.18.2_publint@0.3.18_tsx@4.21.0_typescript@6.0.2__e3c4b77bdbb7c42f8dbfce92959948a8/node_modules/tsdown/dist/run.mjs:46:3)
           >
           >
           > /build/source/apps/kimi-code:
           >  ERR_PNPM_RECURSIVE_RUN_FIRST_FAIL  @moonshot-ai/kimi-code@0.30.0-kkm.1 build:native:sea: `node scripts/native/build.mjs --profile=local`
           > Exit status 1
           For full logs, run:
             nix log /nix/store/l2r2byfgjfd1n30iqbrni1sj8vdaf6dx-kkm-0.30.0-kkm.1.drv