AWS Control, Session Tabs, and Agent Coordination

This version gives your AWS account a control room, lets administrators publish one security policy across a fleet, and makes parallel work easier to manage with persistent session tabs. Local dictation works without a separate speech-to-text install, agents can coordinate work across sessions, and script-installed copies can update themselves atomically.

A few changes need your attention before updating:

• Local dictation now uses one local provider. The whisper, mlx, parakeet, and faster speech-to-text providers are retired. Saved settings fall back to local, which downloads its model on first use. The new default is the 148 MB base model; a stored turbo setting still works but downloads 1.6 GB. Live text is on by default for new installs, and kirocrew doctor reports stored defaults that an earlier build materialized so you can decide which to adopt.
• Snapshot backup to S3 is retired. kirocrew snapshot --to s3://..., --aws-profile, and the s3:// fetch path are removed. Use the AWS Control app for cloud backup. Snapshot restore now supports replacing or merging live state, with a rollback ledger.
• Installed apps may ask for one-time re-consent. App trust is now tied to the repository you approved. A legacy grant that cannot be matched to a repository asks again rather than applying to different code.
• Some commands may ask for approval again. Looking like a help or version check no longer counts as approval, and durable always-allow grants no longer cover structured non-shell tools.
• Kiro CLI bundle overrides are removed. Kiro Crew now uses Kiro CLI's published relay, so custom bundle-path environment overrides from earlier releases are no longer read.
• Knowledge moves into Agent Capabilities. The standalone Knowledge page leaves the sidebar. Its content moves to Agent Capabilities > Knowledge & instructions, and old /knowledge links redirect there.
• Auto-Triage Pipeline moves into Issue Radar. The standalone app and its saved repository are retired. Its boards become a fourth Issue Radar board that follows the repository you select.
• Disconnecting a connection revokes its local OAuth grant. Reconnecting requires sign-in again unless another agent or scope still shares the endpoint.
• Governance configuration fails closed. A misspelled security-policy sandbox key now fails validation, and a malformed publish section denies publishing instead of dropping its restriction.

The new AWS Control app brings connected AWS accounts into one surface. Review account health, browse a private and versioned S3-backed drive, manage access, inspect billing, and run cloud backups. Changes require consent and appear in the audit log. Restore a snapshot into the running install by replacing or merging selected components, with a rollback ledger if you need to undo it. Learn more ->

Administrators can publish one security_policy.json at a URL and have every host fetch, cache, and refresh it without a restart. If the source is unavailable, hosts keep using the cached policy; an invalid document is rejected rather than lowering the current ceiling. Enterprise Kiro accounts also honor administrator-managed MCP registry controls, including version pins. Learn more ->

Keep several sessions open as tabs above the transcript. Middle-click or modifier-click a sidebar row to open one, see live status on each tab, and keep the same set of tabs per surface. Dormant sessions fold behind an expander after a threshold you choose, while pinned, running, and unread sessions stay visible. The + New menu also adds Ephemeral chats: Incognito reads memory but writes none, while Temporary neither reads nor writes memory. Learn more ->

When several tool calls wait on you, approve or reject all of them at once, or reject one call and continue reviewing the rest. Long shell commands show a readable summary with the full command available on hover. kirocrew chat now displays permission prompts and lets you answer them instead of waiting silently. Learn more ->

Agents can send a message into another session as its next turn, and the built-in conductor can divide a larger goal into work items, start a session for each one, check results, and decide the next round. Workflows can be promoted into a versioned global library and invoked with /workflow, while pull request watchers wake on comments, reviews, and verdicts instead of checking only build results. Learn more ->

A single in-process local speech-to-text provider downloads its own model on first use and keeps it ready, so dictation works without installing an external binary. Live text appears as you speak, silence hallucinations and caption boilerplate are filtered out, and settings that require a Gateway restart offer the restart action in the same panel. Learn more ->

kirocrew update installs a new version into a fresh, signature-verified tree and switches to it atomically. Windows Restart & Update now shows installer progress, updates the existing install, updates retained shortcuts, and relaunches the new build. The About page reports when updates were checked and names the version actually running. Learn more ->