codeep 2.14.0 → 2.15.0

package/README.md

@@ -23,27 +23,14 @@
   <a href="https://github.com/VladoIvankovic/Codeep"><img src="https://img.shields.io/github/stars/VladoIvankovic/Codeep?style=social" alt="GitHub stars"></a>
 </p>
 
-## Upgrading from 1.x to 2.0
+## Upgrading
 
-Most users **do not need to do anything** — `npm install -g codeep@latest`
-picks up the new version and everything carries over (config, saved
-profiles, project memory, MCP servers, skill bundles).
-
-Two breaking changes only affect a small audience:
-
-1. **MCP `clientInfo` version bumped from `1.4.0` → `2.0.0`.** If you
-   maintain a custom MCP server that allowlists Codeep by version
-   string, update your check.
-2. **`McpServer` protocol shape** in ACP now has `command?`, `args?`,
-   `url?`, `headers?` (transport-agnostic for stdio + Streamable HTTP).
-   The old required-`command` shape is still accepted — parser handles
-   both — but new clients should emit the optional shape.
-
-See [CHANGELOG.md](CHANGELOG.md#200--2026-05-18) for the full list of
-additions (full MCP support, OpenRouter provider with authoritative
-per-call cost, Claude-Code-compatible skill bundles + web marketplace,
-custom slash commands, lifecycle hooks, checkpoints, `/cost`,
-`/compact`, and more).
+Running `npm install -g codeep@latest` picks up the new version — config,
+saved profiles, project memory, MCP servers, and skill bundles all carry
+over. Breaking changes (if any) are listed at the top of each release in
+[CHANGELOG.md](CHANGELOG.md); the last breaking change was
+[2.0.0](CHANGELOG.md#200--2026-05-18) (MCP `clientInfo` version bump,
+transport-agnostic `McpServer` shape).
 
 ## Features
 
@@ -77,6 +64,7 @@ When started in a project directory, Codeep automatically:
 - **AI session titles** - Sessions auto-title themselves with an LLM one-liner ("OAuth2 migration for auth module") instead of a truncated first message. This makes one small background API call per session; turn it off with the `autoSessionTitle` setting (`/settings`) if you prefer zero unsolicited calls
 - **Search current session** - Find text in the open conversation with `/search`
 - **Cross-session recall** - `/recall <query>` searches across **all** saved sessions, ranked by relevance + recency. Add `--resume` to load the top match, or `--summarize` for an LLM recap of what you accomplished across matches
+- **Cross-device resume (`/cloud`)** - Sessions you run on one device (CLI, Mac app, VS Code) sync to `codeep.dev`. `/cloud` lists them and pulls the selected one back locally, so you can start a session on your desktop and continue on your laptop. Run `codeep account` once to link your devices; scoped to the current project when one is open.
 - **Export** - Save to Markdown, JSON, or plain text
 - `/cost` - Per-session token usage and estimated cost (per provider/model)
 - `/compact [keepN]` - AI-summarize older messages to free up context (keeps last N, default 4)
@@ -358,10 +346,11 @@ You write safe, reversible DB migrations…
 **Guaranteed review:** enable **Agent Auto-Review** in `/settings` (`agentAutoReview`) and after any run that changes files, Codeep automatically delegates to the `reviewer` and appends its findings — a review stage that always happens. Off by default.
 
 ### Project Rules
-Define project-specific instructions that the AI always follows. Create a rules file in your project root:
+Define project-specific instructions that the AI always follows. Create a rules file in your project root (first non-empty file wins):
 
 - **`.codeep/rules.md`** - Primary location (inside `.codeep/` folder)
 - **`CODEEP.md`** - Alternative location (project root, similar to `CLAUDE.md` or `.cursorrules`)
+- **`AGENTS.md`** - Cross-tool standard (works with Claude Code, Cursor, Kilo Code — no duplication needed)
 
 The rules file content is automatically included in every system prompt — both chat and agent mode. Use it to define:
 
@@ -469,11 +458,12 @@ Full spec coverage in 2.0.0 — stdio and Streamable HTTP transports,
 tools / resources / prompts / sampling, capability negotiation with
 `roots`, auto-restart on crash, mid-run catalog refresh.
 
-**Three ways to wire MCP servers** (all merge; project > global > ACP wins last):
+**Four ways to wire MCP servers** (all merge; project > `.mcp.json` > global > ACP wins last):
 
 1. **Project config** — `.codeep/mcp_servers.json` (committed with the repo)
-2. **Global config** — `~/.codeep/mcp_servers.json` (per machine)
-3. **ACP client config** — Zed / Claude Desktop pass `mcpServers` on `session/new`
+2. **`.mcp.json`** — cross-tool standard at the workspace root (works with Claude Code, Cursor, Kilo Code — point everyone at the same file)
+3. **Global config** — `~/.codeep/mcp_servers.json` (per machine)
+4. **ACP client config** — Zed / Claude Desktop pass `mcpServers` on `session/new`
 
 Two transports per entry, mutually exclusive:
 
@@ -573,6 +563,26 @@ cloned repo's hooks are **not** run until you approve the workspace. Run
 own projects just need a one-time `/hooks trust`. Global `~/.codeep/hooks/` are
 never run for the same reason.
 
+#### Windows notes
+
+Lifecycle hooks are POSIX shell (`.sh`) scripts:
+
+- **macOS / Linux** — run directly (via the script's shebang). No setup.
+- **Windows** — a `.sh` needs a POSIX `sh`. Install [Git for Windows](https://git-scm.com/download/win)
+  (it ships `sh.exe`) and Codeep runs `.sh` hooks through it automatically — no
+  PATH tweaking needed if Git is installed to its default location. **Without a
+  POSIX shell**, `/hooks` and the welcome banner report an explicit
+  *"cannot run on this system"* state and hooks are skipped — they never block a
+  tool call or commit, and the rest of Codeep is unaffected. (`.ps1`/`.cmd` hooks
+  are not executed; keep hook logic in `.sh`.)
+
+Everything else is **Node-native and shell-independent on Windows**: project
+rules (`AGENTS.md` / `CODEEP.md` / `.codeep/rules.md`), custom slash commands
+(`.codeep/commands/*.md`), and skill bundles (`.codeep/skills/`) are Markdown;
+MCP config (`.mcp.json` / `.codeep/mcp_servers.json`) is JSON. MCP servers spawn
+via their configured `command` — `npx` resolves through `npx.cmd`, and a custom
+`command` like `python` just needs to be on your PATH.
+
 ### Skill Bundles (new in 2.0)
 Beyond the built-in skills and custom slash commands, Codeep now supports
 **structured skill bundles** — directory-based capability packs the agent
@@ -1024,6 +1034,7 @@ After installation, `codeep` is available globally in your terminal. Simply run
 |---------|-------------|
 | `/sessions` | List and load saved sessions |
 | `/sessions delete <name>` | Delete a specific session |
+| `/cloud` | List and resume sessions synced from other devices |
 | `/rename <name>` | Rename current session |
 | `/search <term>` | Search through chat history |
 | `/export` | Export chat to MD/JSON/TXT format |

package/dist/acp/commands.js

@@ -1023,8 +1023,29 @@ Anything else the agent should know — edge cases, gotchas, things to double-ch
         }
         case 'mcp': {
             const sub = args[0]?.toLowerCase();
-            const { addProjectMcpServer, removeProjectMcpServer, loadMcpServerConfig } = await import('../utils/mcpConfig.js');
+            const { addProjectMcpServer, removeProjectMcpServer, loadMcpServerConfig, loadMcpServerConfigSplit, isWorkspaceMcpTrusted, trustWorkspaceMcp, untrustWorkspaceMcp } = await import('../utils/mcpConfig.js');
             const { registerSessionServers } = await import('../utils/mcpRegistry.js');
+            if (sub === 'trust') {
+                if (isWorkspaceMcpTrusted(session.workspaceRoot)) {
+                    return { handled: true, response: '_Workspace MCP servers are already trusted here._' };
+                }
+                trustWorkspaceMcp(session.workspaceRoot);
+                const { workspace } = loadMcpServerConfigSplit(session.workspaceRoot);
+                if (workspace.length === 0) {
+                    return { handled: true, response: '_Workspace trusted — no workspace MCP servers defined yet._' };
+                }
+                onChunk(`_Workspace trusted. Spawning ${workspace.length} MCP server(s)…_\n\n`);
+                const merged = loadMcpServerConfig(session.workspaceRoot);
+                const { registered, errors } = await registerSessionServers(session.sessionId, merged, { workspaceRoot: session.workspaceRoot });
+                const lines = [`Trusted workspace MCP servers (${registered.length} tool(s) available).`];
+                for (const e of errors)
+                    lines.push(`- \`${e.server}\` failed: ${e.error}`);
+                return { handled: true, response: lines.join('\n') };
+            }
+            if (sub === 'untrust') {
+                untrustWorkspaceMcp(session.workspaceRoot);
+                return { handled: true, response: '_Workspace MCP trust revoked — workspace servers won\'t spawn for new sessions._' };
+            }
             if (sub === 'add') {
                 // /mcp add <name> <command> [args...]
                 const name = args[1];

package/dist/acp/server.js

@@ -8,7 +8,7 @@ import { StdioTransport } from './transport.js';
 import { runAgentSession } from './session.js';
 import { loadCustomCommands } from '../utils/customCommands.js';
 import { registerSessionServers, disposeAllSessions as disposeAllMcpSessions } from '../utils/mcpRegistry.js';
-import { loadMcpServerConfig, mergeMcpServers } from '../utils/mcpConfig.js';
+import { loadMcpServerConfigSplit, isWorkspaceMcpTrusted, mergeMcpServers } from '../utils/mcpConfig.js';
 import { handleMcpSamplingRequest } from '../utils/mcpSamplingBridge.js';
 import { executeCommandAsync } from '../utils/shell.js';
 import { initWorkspace, loadWorkspace, handleCommand } from './commands.js';
@@ -539,7 +539,18 @@ export function startAcpServer() {
      * in-flight registration so tool calls don't race the startup.
      */
     function spawnMcpServersForSession(acpSessionId, cwd, acpServers, label) {
-        const fromConfig = loadMcpServerConfig(cwd);
+        // Workspace-sourced servers (.codeep/mcp_servers.json, .mcp.json) travel
+        // with the repo, so they spawn only for workspaces the user has trusted
+        // (same gate the TUI prompts for at startup). ACP-provided servers are
+        // the editor's own config and global ~/.codeep entries are the user's —
+        // both spawn unconditionally.
+        const { global: globalServers, workspace: workspaceServers } = loadMcpServerConfigSplit(cwd);
+        const workspaceTrusted = isWorkspaceMcpTrusted(cwd);
+        if (workspaceServers.length > 0 && !workspaceTrusted) {
+            process.stderr.write(`[codeep-acp] MCP (${label}): skipped ${workspaceServers.length} workspace server(s) — untrusted workspace. ` +
+                `Run /mcp trust (or \`codeep\` in the repo once) to enable.\n`);
+        }
+        const fromConfig = workspaceTrusted ? [...globalServers, ...workspaceServers] : globalServers;
         const merged = mergeMcpServers(fromConfig, acpServers);
         if (merged.length === 0)
             return;

package/dist/config/index.d.ts

@@ -140,6 +140,16 @@ export interface ConfigSchema {
 }
 export type { AgentMode };
 export type { LanguageCode };
+/**
+ * Get sessions directory - local .codeep/sessions/ if in project, otherwise global
+ */
+export declare function getSessionsDir(projectPath?: string): string;
+/**
+ * Check if directory is a project
+ * Looks for common project indicators: package.json, pyproject.toml, Cargo.toml, go.mod, composer.json, etc.
+ * Also checks if user has manually initialized this folder as a project (.codeep/project.json)
+ */
+export declare function isProjectDirectory(path: string): boolean;
 /**
  * Check if directory has standard project markers (not manually initialized)
  */

package/dist/config/index.js

@@ -9,7 +9,7 @@ import { createSecureStorage } from '../utils/keychain.js';
 /**
  * Get sessions directory - local .codeep/sessions/ if in project, otherwise global
  */
-function getSessionsDir(projectPath) {
+export function getSessionsDir(projectPath) {
     if (projectPath && isProjectDirectory(projectPath)) {
         const localDir = join(projectPath, '.codeep', 'sessions');
         if (!existsSync(localDir)) {
@@ -36,7 +36,7 @@ function getLocalConfigPath(projectPath) {
  * Looks for common project indicators: package.json, pyproject.toml, Cargo.toml, go.mod, composer.json, etc.
  * Also checks if user has manually initialized this folder as a project (.codeep/project.json)
  */
-function isProjectDirectory(path) {
+export function isProjectDirectory(path) {
     // Check if user has manually initialized this as a project
     const manualProjectMarker = join(path, '.codeep', 'project.json');
     if (existsSync(manualProjectMarker)) {

package/dist/config/providers.js

@@ -276,8 +276,9 @@ export const PROVIDERS = {
             openai: { baseUrl: 'https://api.x.ai/v1', authHeader: 'Bearer', supportsNativeTools: true },
         },
         models: [
+            { id: 'grok-4.5', name: 'Grok 4.5', description: 'Flagship reasoning model — highest quality, 500K context' },
             { id: 'grok-build-0.1', name: 'Grok Build 0.1', description: 'Agentic coding model — fast, 256K context' },
-            { id: 'grok-4.3', name: 'Grok 4.3', description: 'Flagship — highest quality, 1M context' },
+            { id: 'grok-4.3', name: 'Grok 4.3', description: 'Previous flagship, 1M context' },
             { id: 'grok-code-fast-1', name: 'Grok Code Fast 1', description: 'Low-cost speed-first coder (alias of Build 0.1)' },
             { id: 'grok-4-fast-reasoning', name: 'Grok 4 Fast (reasoning)', description: 'Cheap reasoning model, very large context' },
         ],
@@ -302,7 +303,7 @@ export const PROVIDERS = {
         models: [
             { id: 'qwen3-coder-plus', name: 'Qwen3-Coder Plus', description: 'Flagship coding model — best quality' },
             { id: 'qwen3-coder-next', name: 'Qwen3-Coder Next', description: 'Balanced quality/speed/cost' },
-            { id: 'qwen3-max', name: 'Qwen3-Max', description: 'Flagship general model (code + reasoning)' },
+            { id: 'qwen3.7-max', name: 'Qwen3.7-Max', description: 'Flagship general model (code + reasoning)' },
         ],
         defaultModel: 'qwen3-coder-plus',
         defaultProtocol: 'openai',
@@ -323,7 +324,7 @@ export const PROVIDERS = {
             { id: 'qwen3-coder-plus', name: 'Qwen3-Coder Plus', description: 'Flagship coding model (256K, up to 1M)' },
             { id: 'qwen3-coder-next', name: 'Qwen3-Coder Next', description: 'Balanced quality/speed/cost' },
             { id: 'qwen3-coder-flash', name: 'Qwen3-Coder Flash', description: 'Fast/cheap coder' },
-            { id: 'qwen3-max', name: 'Qwen3-Max', description: 'Flagship general model' },
+            { id: 'qwen3.7-max', name: 'Qwen3.7-Max', description: 'Flagship general model' },
         ],
         defaultModel: 'qwen3-coder-plus',
         defaultProtocol: 'openai',
@@ -343,7 +344,7 @@ export const PROVIDERS = {
         models: [
             { id: 'qwen3-coder-plus', name: 'Qwen3-Coder Plus', description: 'Flagship coding model — best quality' },
             { id: 'qwen3-coder-next', name: 'Qwen3-Coder Next', description: 'Balanced quality/speed/cost' },
-            { id: 'qwen3-max', name: 'Qwen3-Max', description: 'Flagship general model' },
+            { id: 'qwen3.7-max', name: 'Qwen3.7-Max', description: 'Flagship general model' },
         ],
         defaultModel: 'qwen3-coder-plus',
         defaultProtocol: 'openai',
@@ -364,7 +365,7 @@ export const PROVIDERS = {
             { id: 'qwen3-coder-plus', name: 'Qwen3-Coder Plus', description: 'Flagship coding model' },
             { id: 'qwen3-coder-next', name: 'Qwen3-Coder Next', description: 'Balanced quality/speed/cost' },
             { id: 'qwen3-coder-flash', name: 'Qwen3-Coder Flash', description: 'Fast/cheap coder' },
-            { id: 'qwen3-max', name: 'Qwen3-Max', description: 'Flagship general model' },
+            { id: 'qwen3.7-max', name: 'Qwen3.7-Max', description: 'Flagship general model' },
         ],
         defaultModel: 'qwen3-coder-plus',
         defaultProtocol: 'openai',
@@ -404,11 +405,14 @@ export const PROVIDERS = {
             },
         },
         models: [
-            { id: 'gpt-5.5', name: 'GPT-5.5', description: 'Latest GPT model — best for coding' },
-            { id: 'gpt-5.4', name: 'GPT-5.4', description: 'Previous generation GPT' },
+            { id: 'gpt-5.6-sol', name: 'GPT-5.6 Sol', description: 'Most capable GPT — best for coding & agentic work' },
+            { id: 'gpt-5.6-terra', name: 'GPT-5.6 Terra', description: 'Balanced — GPT-5.5 quality at about half the price' },
+            { id: 'gpt-5.6-luna', name: 'GPT-5.6 Luna', description: 'Fast and cheap — high-volume workloads' },
+            { id: 'gpt-5.5', name: 'GPT-5.5', description: 'Previous flagship GPT' },
+            { id: 'gpt-5.4', name: 'GPT-5.4', description: 'Older generation GPT' },
             { id: 'gpt-5.4-mini', name: 'GPT-5.4 Mini', description: 'Faster and cheaper GPT-5.4' },
         ],
-        defaultModel: 'gpt-5.5',
+        defaultModel: 'gpt-5.6-sol',
         defaultProtocol: 'openai',
         useMaxCompletionTokens: true,
         requiresDefaultTemperature: true,
@@ -452,6 +456,7 @@ export const PROVIDERS = {
         models: [
             { id: 'gemini-3.1-pro-preview', name: 'Gemini 3.1 Pro', description: 'Most capable Gemini model' },
             { id: 'gemini-3.5-flash', name: 'Gemini 3.5 Flash', description: 'Pro-level intelligence at Flash speed' },
+            { id: 'gemini-3.1-flash-lite', name: 'Gemini 3.1 Flash-Lite', description: 'Low-latency, low-cost workhorse (1M context)' },
         ],
         defaultModel: 'gemini-3.1-pro-preview',
         defaultProtocol: 'openai',
@@ -479,7 +484,7 @@ export const PROVIDERS = {
             { id: 'anthropic/claude-fable-5', name: 'Claude Fable 5', description: 'Anthropic — most capable' },
             { id: 'anthropic/claude-opus-4', name: 'Claude Opus 4', description: 'Anthropic — Opus tier' },
             { id: 'anthropic/claude-sonnet-5', name: 'Claude Sonnet 5', description: 'Anthropic — balanced' },
-            { id: 'openai/gpt-5.5', name: 'GPT-5.5', description: 'OpenAI — flagship' },
+            { id: 'openai/gpt-5.6-sol', name: 'GPT-5.6 Sol', description: 'OpenAI — flagship' },
             { id: 'openai/gpt-5.4-mini', name: 'GPT-5.4 Mini', description: 'OpenAI — fast/cheap' },
             { id: 'google/gemini-3.1-pro', name: 'Gemini 3.1 Pro', description: 'Google — multimodal' },
             { id: 'meta-llama/llama-3.1-405b-instruct', name: 'Llama 3.1 405B', description: 'Meta — open weights, largest' },
@@ -487,7 +492,7 @@ export const PROVIDERS = {
             { id: 'deepseek/deepseek-v4', name: 'DeepSeek V4', description: 'DeepSeek via OpenRouter' },
             { id: 'mistralai/mistral-large', name: 'Mistral Large', description: 'Mistral — flagship' },
             { id: 'qwen/qwen-2.5-coder-32b-instruct', name: 'Qwen 2.5 Coder 32B', description: 'Alibaba — coding-tuned' },
-            { id: 'x-ai/grok-2', name: 'Grok 2', description: 'xAI via OpenRouter' },
+            { id: 'x-ai/grok-4.5', name: 'Grok 4.5', description: 'xAI — flagship reasoning' },
         ],
         defaultModel: 'anthropic/claude-opus-4',
         defaultProtocol: 'openai',

package/dist/renderer/App.d.ts

@@ -413,15 +413,6 @@ export declare class App {
     /**
      * Get color for action type
      */
-    private getActionColor;
-    /**
-     * Format action target for display
-     */
-    private formatActionTarget;
-    /**
-     * Get action label for display
-     */
-    private getActionLabel;
     /**
      * Render status bar
      */
@@ -430,23 +421,6 @@ export declare class App {
      * Get visible messages (including streaming)
      */
     private getVisibleMessages;
-    /**
-     * Format message into lines with syntax highlighting for code blocks
-     */
-    private formatWelcomeMessage;
-    private formatMessage;
-    /**
-     * Apply inline markdown formatting (bold, italic, inline code) to a line
-     */
-    private applyInlineMarkdown;
-    /**
-     * Format plain text lines with markdown support
-     */
-    private formatTextLines;
-    /**
-     * Format code block with syntax highlighting (no border)
-     */
-    private formatCodeBlock;
     /**
      * Render inline search screen
      */
@@ -471,8 +445,4 @@ export declare class App {
      * Get decrypted logo for intro animation
      */
     private getDecryptedLogo;
-    /**
-     * Word wrap
-     */
-    private wordWrap;
 }