codeep 2.15.0 → 2.16.0

package/README.md

@@ -89,15 +89,19 @@ When started in a project directory, Codeep automatically:
 - Press Enter to send, Escape to cancel
 - Works reliably in all terminals (no Ctrl+V issues)
 
-### File Context (`/add`, `/drop`)
+### File Context (`/add`, `/drop`, `@mentions`)
 Explicitly add files to the conversation context:
 
 - **`/add <path>`** - Add one or more files to context
 - **`/add`** (no args) - Show currently added files
 - **`/drop <path>`** - Remove a specific file from context
 - **`/drop`** (no args) - Remove all files from context
+- **`@path/to/file`** - Inline mention: type `@` followed by a file path anywhere in your message and its contents are attached for that message only. Supports relative paths (`@src/index.ts`), absolute (`@/etc/hosts`), home (`@~/.codeep/profile.md`), and quoted paths with spaces (`@"my file.ts"`). In the CLI, typing `@` opens an autocomplete file picker — ↑↓ to navigate, Tab to insert.
+- **`@folder <path>`** (alias `@dir`) - Attach an entire directory: type `@folder src/components` and every source file under it is loaded recursively. Skips `node_modules`, `.git`, `dist`, binary extensions (images, archives, lockfiles), and files over the per-file size cap. Stops at a 200 KB total cap per mention (with a notification when it hits the limit). Quoted paths supported: `@folder "my components"`.
+- **`@web <url>`** - Inline web fetch: type `@web https://example.com/docs` (or `@web example.com/docs`) and the page is fetched, converted to readable text, and attached to the message. HTML is stripped; plain text and JSON pass through as-is. Capped at 32 KB, 12 s timeout. Successful fetches are cached for 30 min (per session, up to 50 entries) so repeated `@web` for the same URL is instant and free; use `/web-cache clear` to reset.
+- **`@git <ref>`** - Inline git context: type `@git diff`, `@git diff --staged`, `@git HEAD`, `@git <sha>`, `@git main:src/x.ts`, or `@git diff a..b` to inject that diff / commit / file-at-ref into the message as a `[Git ref]` block. Capped at 64 KB per mention (truncated with a marker). Unknown refs surface a friendly failure note.
 
-Added files are automatically attached to every message (both chat and agent mode) until dropped. Useful for giving the AI specific files to work with.
+Added files (via `/add`) are automatically attached to every message (both chat and agent mode) until dropped. `@mentions` are per-message — handy for one-off references without polluting the persistent context.
 
 ```
 > /add src/utils/api.ts src/types/index.ts
@@ -106,6 +110,10 @@ Added 2 file(s) to context (2 total)
 > refactor the API client to use async/await
 # AI sees both files attached to your message
 
+> review @src/auth/login.ts for security issues
+Loaded 1 file(s) from @mentions
+# AI sees login.ts attached for this message only
+
 > /drop
 Dropped all 2 file(s) from context
 ```
@@ -1043,7 +1051,8 @@ After installation, `codeep` is available globally in your terminal. Simply run
 
 | Command | Description |
 |---------|-------------|
-| `/apply` | Apply file changes from AI response |
+| `/apply` | Apply file changes from AI response (shows hunk counts; `--only file.ts:0,1` for selective apply, `--interactive`/`-i` for per-hunk review) |
+| `/web-cache` | Show `@web` fetch cache stats (alias `/web-cache clear` to reset) |
 | `/copy [n]` | Copy code block to clipboard (n = block number, -1 = last) |
 | `/paste` | Paste content from clipboard into chat |
 | `/add <path>` | Add file(s) to conversation context |

package/dist/acp/session.js

@@ -87,11 +87,32 @@ export function buildRawOutput(toolName, params, toolResult) {
 }
 export async function runAgentSession(opts) {
     const projectContext = buildProjectContext(opts.workspaceRoot);
+    // Expand `@folder`/`@file`/`@git` mentions in the user prompt, the
+    // same way the TUI does (see src/renderer/main.ts). ACP clients
+    // (VS Code / Zed) get the same inline-context UX. `@web` is async
+    // and fetched here too.
+    let enrichedPrompt = opts.prompt;
+    try {
+        const { expandFileAndFolderMentions, expandGitMentions } = await import('../utils/mentions.js');
+        const { expandWebMentions } = await import('../utils/webFetch.js');
+        const fileResult = expandFileAndFolderMentions(enrichedPrompt, { root: opts.workspaceRoot });
+        const gitResult = await expandGitMentions(fileResult.enrichedPrompt, { root: opts.workspaceRoot });
+        const webResult = await expandWebMentions(gitResult.enrichedPrompt);
+        enrichedPrompt = webResult.enrichedPrompt;
+        // Surface failures as thoughts so the editor shows them.
+        const allFailures = [...fileResult.failures, ...gitResult.failures, ...webResult.failures];
+        if (allFailures.length > 0 && opts.onThought) {
+            opts.onThought(allFailures.map((f) => `${f.mention}: ${f.reason}`).join(' · '));
+        }
+    }
+    catch {
+        // Mention expansion is best-effort — never block the agent run.
+    }
     let toolCallCounter = 0;
     // Maps tool call key → ACP toolCallId so onToolResult can emit finished/error status
     const toolCallIdMap = new Map();
     let chunksEmitted = 0;
-    const result = await runAgent(opts.prompt, projectContext, {
+    const result = await runAgent(enrichedPrompt, projectContext, {
         abortSignal: opts.abortSignal,
         onChunk: (text) => { chunksEmitted++; opts.onChunk(text); },
         onIteration: (_iteration, message) => {

package/dist/config/providers.js

@@ -232,18 +232,21 @@ export const PROVIDERS = {
             openai: { baseUrl: 'https://api.moonshot.ai/v1', authHeader: 'Bearer', supportsNativeTools: true },
         },
         models: [
-            { id: 'kimi-k2.7-code', name: 'Kimi K2.7 Code', description: 'Flagship agentic coding model (256K context)' },
+            { id: 'kimi-k3-code', name: 'Kimi K3 Code', description: 'Newest flagship agentic coding model (1M context, deep reasoning)' },
+            { id: 'kimi-k3-code-highspeed', name: 'Kimi K3 Code (High-Speed)', description: 'Throughput-tuned K3 Code for latency-sensitive loops' },
+            { id: 'kimi-k3-thinking', name: 'Kimi K3 Thinking', description: 'K3 with explicit reasoning traces (highest quality, slower)' },
+            { id: 'kimi-k2.7-code', name: 'Kimi K2.7 Code', description: 'Previous-gen flagship agentic coding model (256K context)' },
             { id: 'kimi-k2.7-code-highspeed', name: 'Kimi K2.7 Code (High-Speed)', description: 'Throughput-tuned K2.7 Code for latency-sensitive loops' },
             { id: 'kimi-k2.6', name: 'Kimi K2.6', description: 'Previous-gen multimodal reasoning model' },
             { id: 'kimi-k2.5', name: 'Kimi K2.5', description: 'Older general-purpose model (cheaper)' },
         ],
-        defaultModel: 'kimi-k2.7-code',
+        defaultModel: 'kimi-k3-code',
         defaultProtocol: 'openai',
-        maxOutputTokens: 32_768,
+        maxOutputTokens: 65_536,
         envKey: 'MOONSHOT_API_KEY',
         subscribeUrl: 'https://platform.kimi.ai/console/api-keys',
         groupLabel: 'Kimi — API (pay-per-use)',
-        hint: 'Pay-per-use via Moonshot API key (platform.kimi.ai).',
+        hint: 'Pay-per-use via Moonshot API key (platform.kimi.ai). K3 models support 1M context and explicit reasoning.',
     },
     'kimi-cn': {
         name: 'Kimi China (Moonshot)',
@@ -252,18 +255,21 @@ export const PROVIDERS = {
             openai: { baseUrl: 'https://api.moonshot.cn/v1', authHeader: 'Bearer', supportsNativeTools: true },
         },
         models: [
-            { id: 'kimi-k2.7-code', name: 'Kimi K2.7 Code', description: 'Flagship agentic coding model (256K context)' },
+            { id: 'kimi-k3-code', name: 'Kimi K3 Code', description: 'Newest flagship agentic coding model (1M context, deep reasoning)' },
+            { id: 'kimi-k3-code-highspeed', name: 'Kimi K3 Code (High-Speed)', description: 'Throughput-tuned K3 Code' },
+            { id: 'kimi-k3-thinking', name: 'Kimi K3 Thinking', description: 'K3 with explicit reasoning traces' },
+            { id: 'kimi-k2.7-code', name: 'Kimi K2.7 Code', description: 'Previous-gen flagship agentic coding model (256K context)' },
             { id: 'kimi-k2.7-code-highspeed', name: 'Kimi K2.7 Code (High-Speed)', description: 'Throughput-tuned K2.7 Code' },
             { id: 'kimi-k2.6', name: 'Kimi K2.6', description: 'Previous-gen multimodal reasoning model' },
             { id: 'kimi-k2.5', name: 'Kimi K2.5', description: 'Older general-purpose model' },
         ],
-        defaultModel: 'kimi-k2.7-code',
+        defaultModel: 'kimi-k3-code',
         defaultProtocol: 'openai',
-        maxOutputTokens: 32_768,
+        maxOutputTokens: 65_536,
         envKey: 'MOONSHOT_CN_API_KEY',
         subscribeUrl: 'https://platform.moonshot.cn/console/api-keys',
         groupLabel: 'Kimi China — API (pay-per-use)',
-        hint: 'Pay-per-use via Moonshot China API key (platform.moonshot.cn).',
+        hint: 'Pay-per-use via Moonshot China API key (platform.moonshot.cn). K3 models support 1M context.',
     },
     // ── Grok (xAI) ────────────────────────────────────────────────────
     // Pay-per-use today (console.x.ai key). The SuperGrok / X Premium+
@@ -433,11 +439,11 @@ export const PROVIDERS = {
         },
         models: [
             { id: 'claude-fable-5', name: 'Claude Fable 5', description: 'Most capable — hardest reasoning & long-horizon agentic work' },
-            { id: 'claude-opus-4-8', name: 'Claude Opus 4.8', description: 'Most capable Opus model' },
+            { id: 'claude-opus-5', name: 'Claude Opus 5', description: 'Complex agentic coding & deep reasoning — the Opus workhorse' },
             { id: 'claude-sonnet-5', name: 'Claude Sonnet 5', description: 'Best balance of speed and intelligence' },
             { id: 'claude-haiku-4-5-20251001', name: 'Claude Haiku', description: 'Fastest and most affordable' },
         ],
-        defaultModel: 'claude-opus-4-8',
+        defaultModel: 'claude-opus-5',
         defaultProtocol: 'anthropic',
         envKey: 'ANTHROPIC_API_KEY',
         groupLabel: 'Anthropic',
@@ -666,8 +672,8 @@ export function providerNoStreamWithTools(providerId) {
  * internally and 400 on any custom value, so they're here too.
  */
 const SAMPLING_PARAMS_REJECTED = [
-    'claude-fable-5', 'claude-opus-4-8', 'claude-opus-4-7', 'claude-sonnet-5',
-    'kimi-k2.7-code', 'kimi-for-coding',
+    'claude-fable-5', 'claude-opus-5', 'claude-opus-4-8', 'claude-opus-4-7', 'claude-sonnet-5',
+    'kimi-k3-code', 'kimi-k3-thinking', 'kimi-k2.7-code', 'kimi-for-coding',
 ];
 export function modelRejectsSamplingParams(model) {
     return SAMPLING_PARAMS_REJECTED.some(id => model === id || model.startsWith(`${id}-`));
@@ -709,10 +715,10 @@ export function modelSupportsReasoningEffort(providerId, model) {
     const id = canonicalModelId(model);
     switch (providerId) {
         case 'anthropic':
-            // Effort is GA on Opus 4.5+, Sonnet 4.6/5, Fable 5 — NOT Haiku or Sonnet 4.5.
+            // Effort is GA on Opus 5, Opus 4.5+, Sonnet 4.6/5, Fable 5 — NOT Haiku or Sonnet 4.5.
             if (idMatches(id, 'claude-haiku-4-5') || idMatches(id, 'claude-sonnet-4-5'))
                 return false;
-            return /^claude-(opus-4-([5-9]|\d\d)|sonnet-(4-6|5)|fable-5)/.test(id);
+            return /^claude-(opus-5|opus-4-([5-9]|\d\d)|sonnet-(4-6|5)|fable-5)/.test(id);
         case 'openai':
             // GPT-5.x are reasoning models — reasoning_effort across the family (incl. mini).
             return id.startsWith('gpt-5');

package/dist/renderer/App.d.ts

@@ -20,6 +20,37 @@ export interface ConfirmOptions {
     onConfirm: () => void;
     onCancel?: () => void;
 }
+/**
+ * One hunk in the interactive `/apply --interactive` picker.
+ * `lines` are already-formatted diff lines (e.g. `+ added`, `- removed`).
+ */
+export interface HunkPickerItem {
+    /** File path this hunk belongs to. */
+    path: string;
+    /** 0-based hunk index within the file diff. */
+    hunkIndex: number;
+    /** Human-readable hunk header, e.g. `@@ -12,3 +12,5 @@`. */
+    header: string;
+    /** Pre-formatted diff lines to display. */
+    lines: string[];
+}
+/**
+ * Options for the interactive hunk picker. The picker walks the user
+ * through `items` one at a time; for each they accept (`y`/Enter) or
+ * skip (`n`). `a` accepts all remaining, `q`/Esc quits.
+ *
+ * `onComplete` fires once with the set of accepted `[path, hunkIndex]`
+ * pairs (possibly empty) so the caller can apply them via
+ * `applyHunksToFiles`.
+ */
+export interface HunkPickerOptions {
+    title: string;
+    items: HunkPickerItem[];
+    onComplete: (accepted: Array<{
+        path: string;
+        hunkIndex: number;
+    }>) => void;
+}
 export interface AppOptions {
     onSubmit: (message: string) => Promise<void>;
     onCommand: (command: string, args: string[]) => void;
@@ -29,6 +60,8 @@ export interface AppOptions {
     getStatus: () => StatusInfo;
     hasWriteAccess?: () => boolean;
     hasProjectContext?: () => boolean;
+    /** Project root for `@mention` autocomplete suggestions. Falls back to cwd. */
+    getProjectRoot?: () => string;
 }
 export declare class App {
     private screen;
@@ -67,9 +100,19 @@ export declare class App {
     private showAutocomplete;
     private autocompleteIndex;
     private autocompleteItems;
+    private showMentionAutocomplete;
+    private mentionIndex;
+    private mentionItems;
+    private mentionAtStart;
+    /** Project root for resolving `suggestMentions`. Cached per update. */
+    private mentionRoot;
     private confirmOpen;
     private confirmOptions;
     private confirmSelection;
+    private hunkPickerOpen;
+    private hunkPickerOptions;
+    private hunkPickerIndex;
+    private hunkPickerAccepted;
     private menuOpen;
     private menuTitle;
     /** Filtered view shown to the user; derived from `menuItemsAll` + `menuFilter`. */
@@ -231,6 +274,11 @@ export declare class App {
      * Show confirmation dialog
      */
     showConfirm(options: ConfirmOptions): void;
+    /**
+     * Show the interactive hunk picker (`/apply --interactive`).
+     * The caller passes pre-built items + an `onComplete` callback.
+     */
+    showHunkPicker(options: HunkPickerOptions): void;
     /**
      * Show permission dialog (inline, below status bar)
      */
@@ -314,6 +362,13 @@ export declare class App {
      * Update autocomplete suggestions
      */
     private updateAutocomplete;
+    /**
+     * Replace the in-progress `@query` (from `mentionAtStart` to the
+     * cursor) with the selected mention's path. Keeps the `@` prefix and
+     * positions the cursor right after the inserted path so the user can
+     * keep typing the rest of the message.
+     */
+    private applyMentionSelection;
     /**
      * Handle inline status keys
      */
@@ -352,6 +407,15 @@ export declare class App {
     private handleInlinePermissionKey;
     private handleInlineSessionPickerKey;
     private handleInlineConfirmKey;
+    /**
+     * Handle keys in the interactive hunk picker.
+     *   y / Enter / →  accept this hunk, advance
+     *   n / ←         skip this hunk, advance
+     *   a             accept this + all remaining, finish
+     *   q / Esc       finish without accepting this hunk
+     *   ↑ / ↓         navigate (preview only — no decision)
+     */
+    private handleHunkPickerKey;
     /**
      * Submit the current input buffer (used by Enter and Escape-in-multiline)
      */
@@ -373,6 +437,11 @@ export declare class App {
      * Render inline confirmation dialog below status bar
      */
     private renderInlineConfirm;
+    /**
+     * Render inline hunk picker (`/apply --interactive`).
+     * Shows the current hunk's diff + the y/n/a/q key legend.
+     */
+    private renderInlineHunkPicker;
     /**
      * Render input line
      */
@@ -394,6 +463,14 @@ export declare class App {
      * Render inline autocomplete below status bar
      */
     private renderInlineAutocomplete;
+    /**
+     * Render inline `@mention` file picker below the status bar.
+     *
+     * Mirrors the layout of `renderInlineAutocomplete` (separator → title →
+     * items → footer) but shows file paths with their parent directory as
+     * the description, and a `@` prefix instead of `/`.
+     */
+    private renderInlineMentionPicker;
     /**
      * Render inline permission dialog
      */