@honcho-ai/kilo-honcho
Advanced tools
Honcho memory plugin for Kilo Code: persistent memory across sessions in the Kilo CLI, VS Code and JetBrains.
Add AI-native memory to Kilo Code
This plugin gives Kilo Code long-term memory that survives context wipes, session restarts and fresh chats. Honcho remembers what you work on, your durable preferences and prior context across projects. The plugin runs inside kilo serve, so it works in the Kilo CLI, the VS Code extension and the JetBrains plugin.
kilo plugin @honcho-ai/kilo-honcho --global
kilo plugin installs the package and adds it to the plugin list of Kilo's global config (the server half) and ~/.config/kilo/tui.json (the /honcho:* commands). It still uses Kilo's older opencode.json name for the server entry; Kilo reads kilo.jsonc, kilo.json and opencode.json alike. To update an existing install, add --force. To add it by hand, put "@honcho-ai/kilo-honcho" in the plugin array of ~/.config/kilo/kilo.jsonc and ~/.config/kilo/tui.json.
For the Kilo desktop app or the VS Code and JetBrains extensions, install Honcho from the Kilo Marketplace, then type /honcho in the chat. The agent asks what name Honcho should call you and opens a window on your screen for your API key. You can skip Step 3.
Until Honcho is listed in the Kilo Marketplace, add "@honcho-ai/kilo-honcho" to the plugin array of ~/.config/kilo/kilo.jsonc yourself, creating the file if it does not exist. Restart Kilo, then type /honcho.
/honcho:setupHoncho Cloud option unless you want a self-hosted or local endpointpeerName your other Honcho tools use, or your OS user name./honcho:status to check the runtimehoncho-memory skill is installed into Kilo's skills directory, so the agent knows when to pull and save memory on its own.observationMode, agentObserveMe)./honcho:recall shows the exact text.Configuration lives in the shared file ~/.honcho/config.json, which other Honcho plugins also read. Kilo-specific settings live under hosts.kilo.
{
"apiKey": "hch-...",
"peerName": "user",
"baseUrl": "https://api.honcho.dev",
"hosts": {
"kilo": {
"workspace": "kilo",
"aiPeer": "kilo",
"recallMode": "hybrid",
"observationMode": "unified",
"agentObserveMe": false,
"autoConclusions": false,
"sessionStrategy": "per-directory",
"apiKey": "hch-..." // optional; overrides the root apiKey for Kilo
}
}
}
Set KILO_HONCHO_CONFIG_PATH to read and write a different file.
For Honcho Cloud, apiKey is required and baseUrl stays https://api.honcho.dev.
For self-hosted or local Honcho, point baseUrl at your deployment, for example http://127.0.0.1:8000. apiKey is needed only if that deployment requires authentication. If Kilo runs in Docker or on another machine, localhost may not be your machine; the baseUrl must be reachable from where kilo serve runs.
| Strategy | Behavior | Best for |
|---|---|---|
per-directory | One session per working directory | Default project memory |
per-repo | One session per repository | Repos with several entry directories |
git-branch | Session changes with the current branch | Branch-specific work |
per-session | New session for each Kilo session id | Short-lived isolated work |
chat-instance | Session follows the current chat instance | Very short-lived use |
global | One session for everything | Shared memory across all work |
This decides which Honcho collection honcho_chat, honcho_create_conclusion and per-prompt recall use for the user.
| Mode | Collection | Best for |
|---|---|---|
unified (default) | The user's own collection (observer=user, observed=user) | Several agents sharing what they learn about you |
directional | This agent's view of the user (observer=aiPeer, observed=user) | Memory kept separate per agent |
In unified mode the agent peer does not observe the user, so Honcho derives each message once. If you switch to directional, the agent's view of you starts from the messages saved after the switch.
Your peer is your peerName, unchanged, so Kilo uses the same peer as your other Honcho tools. Kilo reads HONCHO_PEER_NAME, then peerName in ~/.honcho/config.json, then your OS user name ($USER). Characters Honcho does not allow in ids become -. The plugin writes ~/.honcho/config.json only when you run setup or change a setting.
A peer belongs to one workspace. Kilo uses its own kilo workspace by default, so it starts with no memory of you. To share memory with another Honcho tool, choose that tool's workspace in /honcho:setup, or set hosts.kilo.workspace to it. This changes nothing for the other tool.
peerName and aiPeer must differ. If they match, Honcho calls fail with an error in the sidebar until you change one.
The agent peer is created with observeMe: false, so Honcho models you, not the assistant. Set agentObserveMe: true to give the agent its own representation.
Honcho derives conclusions from every saved message. With autoConclusions: true, the plugin also saves a prompt verbatim as a conclusion when it contains phrases such as "I prefer", "always", "never" or "remember that". The conclusion is available on the next prompt, before Honcho's deriver runs. It is off by default because it also saves prompts like "never mind, revert that".
Every Kilo client starts its own local Kilo server, and the plugin runs inside it. Recall, saving, the honcho_* tools and the /honcho command work in all of them. The sidebar section and the /honcho:* commands come from the terminal UI half, which only the Kilo CLI loads.
| Kilo CLI | Desktop app, VS Code, JetBrains | |
|---|---|---|
| Setup | /honcho:setup, or Set up now on first load | /honcho, or yes to the agent's offer |
/honcho | Yes | Yes |
Honcho sidebar section and /honcho:* commands | Yes | No |
| Check that Honcho is working | Sidebar, /honcho:status, /honcho:recall | /honcho |
Outside the CLI:
HONCHO_API_KEY. Save the key with setup.honcho_search only searches the current session.~/.config/kilo and ~/.honcho/config.json as the CLI.Kilo's sidebar shows Memory • Disabled when Kilo's own memory feature is off. The plugin adds a Honcho section directly below it:
Honcho
• Active
Peer: alice
Session: View in Honcho ↗
/honcho:recall
On Honcho Cloud, clicking View in Honcho opens the session in the Honcho dashboard, where you can read the saved messages and the conclusions. Any other Honcho server has no known dashboard address, so the sidebar shows the session name, shortened in the middle to fit. Clicking /honcho:recall opens the recall view. The section shows Not set up before /honcho:setup, and Error with the reason when a Honcho request fails.
/honcho:recall opens the exact text the model received. Kilo does not save this text in its session history.
The server half writes this record to ~/.honcho/kilo/sessions/<session id>.json with mode 600, and the TUI reads it. The sidebar and the /honcho:* commands belong to the Kilo CLI's terminal UI. The desktop app and the VS Code and JetBrains extensions do not load TUI plugins, so they show neither. When Honcho has no API key, the agent offers setup once per session.
| Command | Description |
|---|---|
/honcho | Set up Honcho from the chat, or show your peer, workspace, session link and latest recall. Every Kilo client lists it. |
/honcho:setup | First-time setup for cloud or local Honcho |
/honcho:status | Effective Honcho status for the current project |
/honcho:recall | The exact memory text Honcho added to the current session |
/honcho:settings | Effective config values and config paths |
/honcho:config | Edit shared Honcho fields in ~/.honcho/config.json |
/honcho:import | Preview or import local Kilo session history into Honcho |
The /honcho:* commands are part of the Kilo CLI only. /honcho is a prompt to the agent, so it uses a model call.
/honcho:import reads history through the Kilo SDK client, maps sessions with the same sessionStrategy as live capture, and uploads user and assistant text with the original timestamps. The first run is a dry run. Imported sessions are recorded in ~/.honcho/kilo-import-state.json and skipped next time.
| Tool | Description |
|---|---|
honcho_setup | Save the peer name and workspace, and ask for the API key in a window on the user's screen. A key never passes through the chat, and the saved key is never sent to a new server. |
honcho_status | Show effective runtime status |
honcho_get_config | Read effective and persisted settings |
honcho_set_config | Update a persisted shared setting. apiKey and baseUrl can only be changed by the user. |
honcho_search | Search the messages in the current Honcho session only |
honcho_chat | Ask Honcho a question answered by reasoning over memory |
honcho_create_conclusion | Save a durable fact about the user |
The agent cannot read Honcho's config. The plugin refuses any Kilo tool call that names ~/.honcho, the config file in use, or the session activity folder, and tells the agent to call honcho_status instead. It checks file paths and command text, so it stops an agent that means well, but not one that hides the path on purpose.
| Purpose | Kilo hook |
|---|---|
| Record your prompt, fetch prompt-specific recall | chat.message |
| Attach recall to the request without saving it to Kilo's history | experimental.chat.messages.transform |
| Memory instructions and a stable snapshot | experimental.chat.system.transform |
| Continuity block during compaction | experimental.session.compacting |
| Refuse tool calls that name Honcho's config | tool.execute.before |
| Record significant tool activity | tool.execute.after |
HONCHO_URL and HONCHO_WORKSPACE_ID for shell tools (never the API key) | shell.env |
honcho_* tools | tool |
The /honcho command in every client | config |
| Session start, assistant capture, cleanup | event |
| Honcho sidebar section (TUI) | sidebar_content slot |
The packaged honcho-memory skill is copied to ~/.config/kilo/skills/honcho-memory ($XDG_CONFIG_HOME/kilo/skills/honcho-memory when that is set), which every Kilo client reads.
The plugin runs wherever Kilo's server runs, and reads ~/.honcho/config.json on that machine. When no window can open on your screen, finish setup on that machine in one of two ways:
Run /honcho:setup in the Kilo CLI there, if that machine has it.
Write ~/.honcho/config.json yourself with at least apiKey and peerName (see Configuration), then run chmod 600 ~/.honcho/config.json.
VS Code Remote SSH, dev containers, Codespaces. Kilo's server runs on the remote machine, so it reads the remote's ~/.honcho/config.json, not your laptop's. Set Honcho up on the remote.
Key window over SSH. On macOS and Windows, honcho_setup does not open the key window in an SSH session, because it would appear on that machine's own screen. The agent tells you to finish setup one of the two ways above instead. On Linux it opens only when a display is available, including through X forwarding. An unanswered window closes after 2 minutes.
CI and scripts. When the CI variable is set, the agent does not offer setup. Set HONCHO_API_KEY to use Honcho in CI, or KILO_PURE=1 to turn off every plugin.
bun install
bun run check
bun run test
bun run build compiles the sidebar's JSX with @opentui/solid's Bun plugin. solid-js and @opentui/* stay external: Kilo rewrites those imports to its own copies when it loads the plugin, so the sidebar shares Kilo's Solid runtime.
To load a local build in Kilo, build it and point the plugin array at the server entry by file path. The exported plugin id makes a file-path entry valid:
{
"plugin": ["file:///absolute/path/to/kilo-honcho/dist/server.js"]
}
Plugin logs appear in Kilo's log under service=kilo-honcho; run kilo run --print-logs to see them on stderr.
FAQs
Honcho memory plugin for Kilo Code: persistent memory across sessions in the Kilo CLI, VS Code and JetBrains.
The npm package @honcho-ai/kilo-honcho receives a total of 14 weekly downloads. As such, @honcho-ai/kilo-honcho popularity was classified as not popular.
We found that @honcho-ai/kilo-honcho demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Threat Research
Malicious Firefox extensions mimic Phantom, Jupiter, and Bitget wallets to steal recovery phrases and private keys, with one fetching its payload remotely.
Product
Socket Threat Intel now shows which malware campaigns were blocked or detected in your organization, with links to scans and Firewall events.
Security News
Fixes for eMudhra and Brotli are out. Getting them everywhere they’re needed means tracking down bundled libraries, runtimes, and certificate stores.