Open Source · MIT License

Meet Kōan

An autonomous AI agent that works while you sleep.

Turns idle Claude Max quota into code reviews, bug fixes, and strategic insights — right inside your GitHub workflow. No babysitting required.

View on GitHub
3+LLM Providers
15+Built-in Skills
100%Open Source
Kōan
Claude Max
Auto Rebase
Security Scan
Docker Ready
Claude (Anthropic) GitHub Copilot 🦙 OpenLLaMA Docker Native Telegram Slack Security Scanner Auto Rebase Deep Search Auto Fix Claude (Anthropic) GitHub Copilot 🦙 OpenLLaMA Docker Native Telegram Slack Security Scanner Auto Rebase Deep Search Auto Fix

Works While You Sleep

Deploy once. Kōan monitors your repos 24/7, autonomously handling PRs, CI failures, and code reviews overnight.

Zero Wasted Quota

Your Claude Max subscription runs at full capacity. Every idle token becomes a code fix, review, or architectural insight.

A Soul of Its Own

Give your bot a name, avatar, and personality. Kōan isn't just a tool — it's a teammate with a distinct voice.

Free. Open. Forever.

MIT licensed and community-driven. Fork it, extend it, make it yours.

Multiple LLM Support

Switch between Claude, GitHub Copilot, and OpenLLaMA. Choose the right model for each task — speed, accuracy, or cost.

Auto Fix & Plan

Kōan automatically proposes fixes, generates action plans, and commits them directly to your PRs without lifting a finger.

GitHub Integration

Trigger workflows with natural language: @koan fix, @koan review, @koan rebase — right inside your PR.

Deep Search Mode

Investigates your entire codebase to pinpoint real bugs. AI-driven, context-aware, multi-hop reasoning across files.

Docker First

Full containerization support. Deploy anywhere with a single command — local, cloud, or CI/CD pipelines out of the box.

Extensible Skills

Drop in skill modules to add capabilities. 15+ built-in, or write your own with a simple, documented Skills API.

Telegram & Slack

Real-time notifications and command triggers through your team's Telegram or Slack channels.

Easy Configuration

A single YAML file defines everything — LLM provider, API keys, skills, and notifications. Up in under 5 minutes.

Personal Identity & Soul

Set a name, avatar, and personality tone. Kōan adapts its communication style — a teammate, not just a script.

github-pr-comment · PR #247
@koan
rebase REBASE
Rebases branch onto main and resolves simple conflicts automatically
@koan
fix FIX
Analyzes failing tests & CI errors, patches the code, pushes a commit
@koan
review REVIEW
Deep review: logic, security, performance, style — with inline comments
@koan
plan PLAN
Breaks down the issue into a step-by-step implementation plan
@koan
search "memory leak in worker pool" DEEP SEARCH
Crawls codebase to find root cause and related code paths
@koan
investigate --security INVESTIGATE
Full security audit: SQL injection, auth bypasses, exposed secrets

How it works

1
Comment on a PR or Issue

Drop any @koan <command> in GitHub. No app to install, no UI to open.

2
Kōan picks it up instantly

The webhook fires, your chosen LLM analyzes the full context — code, history, CI logs, and intent.

3
Action committed, result posted

Changes are committed directly to the branch. Results are posted as a structured GitHub comment.

Security

OWASP Security Audit
Secrets Scanner
SQL Injection Detector
Auth Flow Reviewer

Code Quality

Deep Code Review
Performance Analyzer
SQL Query Reviewer
PR Checklist Generator

Testing

Test Generator
Coverage Analyzer
Regression Finder
Mock Generator

Git & Workflow

Auto Rebase
Commit Message Writer
Dependency Updater
Changelog Generator

Documentation

Docs Writer
Architecture Diagram
API Docs Generator
README Updater

Custom Skills

Simple Skills API
Composable & chainable
Typed config schema
Community registry

GitHub

Native PR comments, issue tracking, webhook events, and Actions pipeline integration

Telegram

Command your bot and receive real-time alerts through Telegram bot API

Slack

Channel notifications, slash commands, approval workflows and interactive messages

Docker

Full containerization — deploy anywhere with docker run koan/koan

Find the bugs
humans miss

Multi-step reasoning across your codebase — tracing call graphs, following data flows, surfacing vulnerabilities static analyzers can't detect.

  • Cross-file dependency tracing
  • Security vulnerability detection (OWASP Top 10)
  • Automatic patch generation with explanation
  • Context-aware false-positive filtering
Scanning src/ (1,247 files) · deep mode
CRITICAL
SQL injection in UserRepository.php:142
Unsanitized user input passed to raw query
HIGH
Memory leak in WorkerPool.js:89
Event listener never removed on worker exit
MEDIUM
Missing rate limit on POST /api/auth/login
Brute force attack surface exposed
LOW
Deprecated API in utils/crypto.ts:34
MD5 hashing should be replaced with SHA-256
Analysis complete · 4 issues · Fix plan ready
# koan.yaml — complete configuration
[bot] name = "Kōan" avatar = "https://yourbot.dev/avatar.png" persona = "precise, insightful, quietly witty"
[llm] provider = "claude" # claude | copilot | openllama model = "claude-opus-4-5" api_key = "$ANTHROPIC_API_KEY"
[skills] enabled = ["security","review","test-gen","docs"] custom_path = "./my-skills"
[integrations] telegram = true telegram_token = "$TELEGRAM_TOKEN" slack = true slack_webhook = "$SLACK_WEBHOOK_URL"
[docker] image = "ghcr.io/yourorg/koan:latest"
[github] webhook_secret = "$GH_WEBHOOK_SECRET" token = "$GITHUB_TOKEN"