codeep 2.20.0 → 2.22.0

package/dist/acp/server.js

@@ -869,13 +869,17 @@ export function startAcpServer() {
             transport.error(msg.id, -32602, `Unknown sessionId: ${params.sessionId}`);
             return;
         }
-        const updated = await pullPersonalities();
-        if (updated === null) {
-            transport.error(msg.id, -32001, 'Personality sync failed or this device is not linked to codeep.dev.');
+        const { describeSyncFailure } = await import('../utils/codeepCloud.js');
+        const sync = await pullPersonalities();
+        if (!sync.ok) {
+            // The old contract collapsed every failure into one message that also
+            // covered "not linked", so a client could not tell an expired session
+            // from an unreachable server. Say which.
+            transport.error(msg.id, -32001, `Personality sync failed — ${describeSyncFailure(sync.reason)}.`);
             return;
         }
         const list = personalityListResult(params.sessionId);
-        const result = { updated, ...list };
+        const result = { updated: sync.count, ...list };
         transport.respond(msg.id, result);
     }
     // ── session/prompt ──────────────────────────────────────────────────────────

package/dist/api/index.js

@@ -1,6 +1,6 @@
 import * as http from 'node:http';
 import * as https from 'node:https';
-import { config, getApiKey, resolveBaseUrl } from '../config/index.js';
+import { config, getApiKey, resolveBaseUrl, describeUnsendableKey } from '../config/index.js';
 import { withRetry, isNetworkError } from '../utils/retry.js';
 import { checkApiRateLimit } from '../utils/ratelimit.js';
 import { getProvider, getProviderBaseUrl, getProviderAuthHeader, usesMaxCompletionTokens, requiresDefaultTemperature, modelRejectsSamplingParams, reasoningParamsFor } from '../config/providers.js';
@@ -147,6 +147,28 @@ function parseApiError(status, body) {
     const truncated = body.length > 200 ? body.slice(0, 200) + '...' : body;
     return `${status} - ${truncated}`;
 }
+/**
+ * Put the key in the right header, refusing early if it cannot be sent.
+ *
+ * `fetch` throws "Cannot convert argument to a ByteString because the character
+ * at index N…" for a header value outside Latin-1, counting from the start of
+ * `Bearer <key>` — so the index points four characters left of where anyone
+ * would look, and the message never mentions the key at all. Worse, the caller
+ * treats it as a transient API error and retries twice more, which cannot
+ * possibly help.
+ */
+function applyAuthHeader(headers, apiKey, authHeader) {
+    const problem = describeUnsendableKey(apiKey);
+    if (problem) {
+        throw new ApiError(`This API key cannot be used: ${problem}. Re-copy it and run /login to set it again.`, 400);
+    }
+    if (authHeader === 'Bearer') {
+        headers['Authorization'] = `Bearer ${apiKey}`;
+    }
+    else {
+        headers['x-api-key'] = apiKey;
+    }
+}
 export async function chat(message, history = [], onChunk, onRetry, projectContext, abortSignal) {
     // Update project context if provided
     if (projectContext !== undefined) {
@@ -377,12 +399,7 @@ async function chatOpenAI(message, history, model, apiKey, onChunk, abortSignal)
     const headers = {
         'Content-Type': 'application/json',
     };
-    if (authHeader === 'Bearer') {
-        headers['Authorization'] = `Bearer ${apiKey}`;
-    }
-    else {
-        headers['x-api-key'] = apiKey;
-    }
+    applyAuthHeader(headers, apiKey, authHeader);
     // OpenRouter: branding headers + opt in to `usage.cost` so the
     // chat path reports authoritative per-call cost just like agentChat
     // does. Kept identical to the agentChat block so the two paths stay
@@ -650,12 +667,7 @@ async function chatAnthropic(message, history, model, apiKey, onChunk, abortSign
         'Content-Type': 'application/json',
         'anthropic-version': '2023-06-01',
     };
-    if (authHeader === 'Bearer') {
-        headers['Authorization'] = `Bearer ${apiKey}`;
-    }
-    else {
-        headers['x-api-key'] = apiKey;
-    }
+    applyAuthHeader(headers, apiKey, authHeader);
     try {
         // Anthropic prompt caching: wrap system as an array with a
         // `cache_control` marker so the static system prompt (typically large
@@ -797,12 +809,7 @@ export async function validateApiKey(apiKey, providerId) {
     const headers = {
         'Content-Type': 'application/json',
     };
-    if (authHeader === 'Bearer') {
-        headers['Authorization'] = `Bearer ${apiKey}`;
-    }
-    else {
-        headers['x-api-key'] = apiKey;
-    }
+    applyAuthHeader(headers, apiKey, authHeader);
     if (protocol === 'anthropic') {
         headers['anthropic-version'] = '2023-06-01';
     }

package/dist/config/index.d.ts

@@ -37,6 +37,12 @@ export interface ConfigSchema {
      *  user (reply language, style, stack, preferences). Default true; set false
      *  to keep the profile files but stop injecting them. Managed via `/me`. */
     userProfile: boolean;
+    /** Append a record of what each agent run touched to `.codeep/audit/`.
+     *  Reads and refusals included — `history.ts` records neither, because it
+     *  exists to undo writes rather than to say what happened. On unless set
+     *  false: a record you must remember to enable is not one you can rely on
+     *  having when you need it. */
+    auditLog: boolean;
     /** Auto-learn: at session save, run one LLM pass to extract durable facts /
      *  preferences about the user and merge them into `~/.codeep/profile.learned.md`
      *  (injected alongside the hand-written profile). OFF by default — opt in via
@@ -318,3 +324,17 @@ export declare function loadProfile(name: string): Profile | null;
 export declare function applyProfile(profile: Profile): void;
 export declare function listProfiles(): string[];
 export declare function deleteProfile(name: string): boolean;
+/**
+ * Whether a key can survive being put in an HTTP header.
+ *
+ * `fetch` encodes header values as Latin-1 and throws "Cannot convert argument
+ * to a ByteString" on anything outside it. A key pasted from a web page or a
+ * chat message can pick up a non-breaking space, a zero-width character or a
+ * curly quote, and the resulting failure names neither the key nor the
+ * character — only "the character at index N", counted across the whole header
+ * value with `Bearer ` included, which is not where anyone would look.
+ *
+ * Returns null when the key is fine, or a description that locates the problem
+ * without ever reproducing the key itself.
+ */
+export declare function describeUnsendableKey(apiKey: string): string | null;

package/dist/config/index.js

@@ -175,6 +175,7 @@ function createConfig() {
         autoSessionTitle: true,
         autoSummarizeHistory: true,
         userProfile: true,
+        auditLog: true,
         autoLearnProfile: false,
         trustedHookProjects: [],
         currentSessionId: '',
@@ -1264,3 +1265,34 @@ export function deleteProfile(name) {
         return false;
     }
 }
+/**
+ * Whether a key can survive being put in an HTTP header.
+ *
+ * `fetch` encodes header values as Latin-1 and throws "Cannot convert argument
+ * to a ByteString" on anything outside it. A key pasted from a web page or a
+ * chat message can pick up a non-breaking space, a zero-width character or a
+ * curly quote, and the resulting failure names neither the key nor the
+ * character — only "the character at index N", counted across the whole header
+ * value with `Bearer ` included, which is not where anyone would look.
+ *
+ * Returns null when the key is fine, or a description that locates the problem
+ * without ever reproducing the key itself.
+ */
+export function describeUnsendableKey(apiKey) {
+    for (let i = 0; i < apiKey.length; i++) {
+        const code = apiKey.charCodeAt(i);
+        if (code > 0xFF) {
+            const name = code === 0x200B ? 'a zero-width space'
+                : code === 0x2018 || code === 0x2019 ? 'a curly quote'
+                    : code === 0x201C || code === 0x201D ? 'a curly double quote'
+                        : `U+${code.toString(16).toUpperCase().padStart(4, '0')}`;
+            return `character ${i + 1} of the key is ${name}, which cannot be sent in an HTTP header`;
+        }
+        // 0xA0 is inside Latin-1 and technically sendable, but a non-breaking space
+        // in a key is never intentional and produces a 401 that reads as a bad key.
+        if (code === 0xA0) {
+            return `character ${i + 1} of the key is a non-breaking space — probably picked up when copying`;
+        }
+    }
+    return null;
+}

package/dist/renderer/App.js

@@ -1393,7 +1393,6 @@ export class App {
             mentionItemCount: this.mention.items.length,
         });
         const layout = chatLayout(height, panelHeight);
-        const mainHeight = layout.mainHeight;
         const headerHeight = width >= 60 && height >= 16 ? 2 : 0;
         const messagesStart = Math.min(layout.messagesEnd, headerHeight);
         const messagesEnd = layout.messagesEnd;

package/dist/renderer/Input.d.ts

@@ -13,7 +13,6 @@ export interface KeyEvent {
 export type KeyHandler = (event: KeyEvent) => void;
 export declare class Input {
     private handlers;
-    private rl;
     private dataHandler;
     /**
      * Start listening for input

package/dist/renderer/Input.js

@@ -4,7 +4,6 @@
  */
 export class Input {
     handlers = [];
-    rl = null;
     dataHandler = null;
     /**
      * Start listening for input

package/dist/renderer/commands/registry.js

@@ -205,6 +205,7 @@ export const COMMANDS = [
         usage: ['init [project]', 'learn [on|off]', 'sync', 'off', 'forget'],
     },
     { name: 'agents', description: 'List sub-agents the agent can delegate to (researcher / reviewer / tester / your own)', category: 'settings' },
+    { name: 'audit', description: 'What agents did in this project — runs, tools used, and anything the boundary refused', category: 'settings', usage: ['on', 'off'] },
     { name: 'insights', description: 'Activity summary — runs, files, tools, projects over the last N days (default 7)', category: 'settings', usage: ['--days N'] },
     { name: 'openrouter', description: 'OpenRouter routing prefs (prefer/ignore providers, fallbacks, privacy)', category: 'settings' },
     // ── extensions & mcp ───────────────────────────────────────────────────────

package/dist/renderer/commands.js

@@ -445,6 +445,23 @@ export async function handleCommand(command, args, ctx) {
             });
             break;
         }
+        case 'audit': {
+            const { formatAuditLog } = await import('../utils/auditLog.js');
+            const sub = args[0]?.toLowerCase();
+            if (sub === 'on' || sub === 'off') {
+                config.set('auditLog', sub === 'on');
+                ctx.app.notify(sub === 'on'
+                    ? 'Audit recording on — runs are recorded to .codeep/audit/.'
+                    : 'Audit recording off. Records already written are kept.');
+                break;
+            }
+            if (sub) {
+                ctx.app.notify(`Unknown audit subcommand: ${sub}. Use /audit, /audit on, or /audit off`);
+                break;
+            }
+            ctx.app.addMessage({ role: 'system', content: formatAuditLog(ctx.projectPath) });
+            break;
+        }
         case 'agents': {
             // List sub-agents the agent can `delegate` to (built-in + .codeep/agents/).
             const { formatAgentList } = await import('../utils/agents.js');
@@ -2102,7 +2119,6 @@ Describe what this skill does. The agent reads this body verbatim when it invoke
         }
         case 'profile': {
             const subCmd = args[0]?.toLowerCase();
-            const profileName = args[1] || args[0]; // /profile save name OR /profile name
             if (!subCmd || subCmd === 'list') {
                 const profiles = listProfiles();
                 if (profiles.length === 0) {
@@ -2165,9 +2181,9 @@ Describe what this skill does. The agent reads this body verbatim when it invoke
         }
         case 'sync': {
             const subCmd = args[0]?.toLowerCase() || 'all';
-            const { pushLearning, pullLearning, pushProfiles, pullProfiles } = await import('../utils/codeepCloud.js');
+            const { pushLearning, pushProfiles, pullProfiles } = await import('../utils/codeepCloud.js');
             const { getSyncToken } = await import('../config/index.js');
-            const { loadGlobalPreferences, saveGlobalPreferences } = await import('../utils/learning.js');
+            const { loadGlobalPreferences } = await import('../utils/learning.js');
             if (!getSyncToken()) {
                 ctx.app.notify('Not linked to codeep.dev. Run: codeep account');
                 break;

package/dist/renderer/components/Export.js

@@ -2,8 +2,6 @@
  * Export panel component
  */
 import { fg, style } from '../ansi.js';
-// Primary color: #f02a30 (Codeep red)
-const PRIMARY_COLOR = fg.rgb(240, 42, 48);
 const FORMATS = [
     { id: 'md', name: 'Markdown', desc: 'Formatted with headers and separators' },
     { id: 'json', name: 'JSON', desc: 'Structured data format' },

package/dist/renderer/components/Login.d.ts

@@ -15,7 +15,6 @@ export interface LoginOptions {
  */
 export declare class LoginScreen {
     private screen;
-    private input;
     private editor;
     private options;
     private showKey;

package/dist/renderer/components/Login.js

@@ -14,13 +14,11 @@ const PRIMARY_BRIGHT = fg.rgb(255, 80, 85);
  */
 export class LoginScreen {
     screen;
-    input;
     editor;
     options;
     showKey = false;
     constructor(screen, input, options) {
         this.screen = screen;
-        this.input = input;
         this.editor = new LineEditor();
         this.options = options;
     }

package/dist/renderer/components/Logout.js

@@ -2,8 +2,6 @@
  * Logout panel component
  */
 import { fg, style } from '../ansi.js';
-// Primary color: #f02a30 (Codeep red)
-const PRIMARY_COLOR = fg.rgb(240, 42, 48);
 /**
  * Render inline logout picker
  */

package/dist/renderer/components/Settings.d.ts

@@ -24,6 +24,9 @@ export interface SettingsState {
     editing: boolean;
     editValue: string;
 }
+/**
+ * Format value for display
+ */
 /**
  * Handle settings key
  * Returns: { handled: boolean, close: boolean, notify?: string }

package/dist/renderer/components/Settings.js

@@ -1,12 +1,8 @@
 /**
  * Settings screen component
  */
-import { fg } from '../ansi.js';
 import { config } from '../../config/index.js';
 import { updateRateLimits } from '../../utils/ratelimit.js';
-// Primary color: #f02a30 (Codeep red)
-const PRIMARY_COLOR = fg.rgb(240, 42, 48);
-const PRIMARY_BRIGHT = fg.rgb(255, 80, 85);
 /**
  * Write a value to the config for a given setting.
  *
@@ -295,14 +291,6 @@ export const SETTINGS = [
 /**
  * Format value for display
  */
-function formatValue(setting) {
-    const value = setting.getValue();
-    if (setting.type === 'select' && setting.options) {
-        const option = setting.options.find(o => o.value === value);
-        return option ? option.label : String(value);
-    }
-    return String(value);
-}
 /**
  * Handle settings key
  * Returns: { handled: boolean, close: boolean, notify?: string }

package/dist/renderer/main.js

@@ -9,7 +9,6 @@ import { App } from './App.js';
 import { Screen } from './Screen.js';
 import { Input } from './Input.js';
 import { LoginScreen, renderProviderSelect } from './components/Login.js';
-import { renderPermissionScreen, getPermissionOptions } from './components/Permission.js';
 import { chat, setProjectContext } from '../api/index.js';
 import { getZaiVisionConfig, getMinimaxMcpConfig, callZaiVisionApi, callMinimaxApi } from '../utils/mcpIntegration.js';
 import { config, loadApiKey, loadAllApiKeys, getCurrentProvider, autoSaveSession, startNewSession, getCurrentSessionId, loadSession, listSessionsWithInfo, deleteSession, hasReadPermission, hasWritePermission, setProjectPermission, initializeAsProject, isManuallyInitializedProject, setApiKey, setProvider, getGithubId, } from '../config/index.js';
@@ -384,49 +383,6 @@ async function showLoginFlow() {
         renderCurrentStep();
     });
 }
-// ─── Permission flow (full-screen, pre-app) ───────────────────────────────────
-async function showPermissionFlow() {
-    return new Promise((resolve) => {
-        const screen = new Screen();
-        const input = new Input();
-        let selectedIndex = 0;
-        const options = getPermissionOptions();
-        const isProject = isProjectDirectory(projectPath);
-        const currentPermission = hasWritePermission(projectPath)
-            ? 'write'
-            : hasReadPermission(projectPath)
-                ? 'read'
-                : 'none';
-        screen.init();
-        input.start();
-        const cleanup = () => { input.stop(); screen.cleanup(); };
-        const render = () => {
-            renderPermissionScreen(screen, {
-                projectPath, isProject, currentPermission,
-                onSelect: () => { }, onCancel: () => { },
-            }, selectedIndex);
-        };
-        input.onKey((event) => {
-            if (event.key === 'up') {
-                selectedIndex = Math.max(0, selectedIndex - 1);
-                render();
-            }
-            else if (event.key === 'down') {
-                selectedIndex = Math.min(options.length - 1, selectedIndex + 1);
-                render();
-            }
-            else if (event.key === 'enter') {
-                cleanup();
-                resolve(options[selectedIndex]);
-            }
-            else if (event.key === 'escape') {
-                cleanup();
-                resolve('none');
-            }
-        });
-        render();
-    });
-}
 // ─── Session picker ───────────────────────────────────────────────────────────
 function showSessionPickerInline() {
     const sessions = listSessionsWithInfo(projectPath);
@@ -544,16 +500,32 @@ Commands (in chat):
             // the user profile. Web-edited personalities replace their local copy
             // after a safety backup; commands/profile retain additive merge rules.
             const { pullPersonalities, pullCommands, pullUserProfile, getLastPersonalityPullBackupCount } = await import('../utils/codeepCloud.js');
-            const pCount = await pullPersonalities();
-            if (typeof pCount === 'number' && pCount > 0) {
-                console.log(`  Pulled ${pCount} personalit${pCount === 1 ? 'y' : 'ies'}.`);
+            // Report all three outcomes, not just the interesting one. Printing only
+            // on count > 0 made a failed sync look identical to a sync with nothing
+            // new — silence meant either, and the user could not tell which.
+            const { describeSyncFailure } = await import('../utils/codeepCloud.js');
+            const personalities = await pullPersonalities();
+            if (!personalities.ok) {
+                console.log(`  Could not pull agents — ${describeSyncFailure(personalities.reason)}.`);
+            }
+            else if (personalities.count > 0) {
+                console.log(`  Pulled ${personalities.count} personalit${personalities.count === 1 ? 'y' : 'ies'}.`);
                 const backups = getLastPersonalityPullBackupCount();
                 if (backups > 0)
                     console.log(`  Backed up ${backups} replaced local cop${backups === 1 ? 'y' : 'ies'} in ~/.codeep/backups/personalities/.`);
             }
-            const cCount = await pullCommands();
-            if (typeof cCount === 'number' && cCount > 0) {
-                console.log(`  Pulled ${cCount} custom command${cCount === 1 ? '' : 's'}.`);
+            else if (personalities.removed === 0) {
+                console.log('  Agents already up to date.');
+            }
+            if (personalities.ok && personalities.removed > 0) {
+                console.log(`  Removed ${personalities.removed} agent${personalities.removed === 1 ? '' : 's'} deleted on codeep.dev (backed up first).`);
+            }
+            const commands = await pullCommands();
+            if (!commands.ok) {
+                console.log(`  Could not pull custom commands — ${describeSyncFailure(commands.reason)}.`);
+            }
+            else if (commands.count > 0) {
+                console.log(`  Pulled ${commands.count} custom command${commands.count === 1 ? '' : 's'}.`);
             }
             const profPulled = await pullUserProfile();
             if (profPulled === 1) {
@@ -597,13 +569,20 @@ Commands (in chat):
             }
             // Also push portable personal config — personalities + commands + profile.
             const { pushPersonalities, pushCommands, pushUserProfile } = await import('../utils/codeepCloud.js');
-            const pCount = await pushPersonalities();
-            if (typeof pCount === 'number' && pCount > 0) {
-                console.log(`  Pushed ${pCount} personalit${pCount === 1 ? 'y' : 'ies'}.`);
+            const { describeSyncFailure } = await import('../utils/codeepCloud.js');
+            const personalities = await pushPersonalities();
+            if (!personalities.ok) {
+                console.log(`  Could not push agents — ${describeSyncFailure(personalities.reason)}.`);
+            }
+            else if (personalities.count > 0) {
+                console.log(`  Pushed ${personalities.count} personalit${personalities.count === 1 ? 'y' : 'ies'}.`);
+            }
+            const commands = await pushCommands();
+            if (!commands.ok) {
+                console.log(`  Could not push custom commands — ${describeSyncFailure(commands.reason)}.`);
             }
-            const cCount = await pushCommands();
-            if (typeof cCount === 'number' && cCount > 0) {
-                console.log(`  Pushed ${cCount} custom command${cCount === 1 ? '' : 's'}.`);
+            else if (commands.count > 0) {
+                console.log(`  Pushed ${commands.count} custom command${commands.count === 1 ? '' : 's'}.`);
             }
             if (await pushUserProfile()) {
                 console.log('  Pushed your profile (about you).');

package/dist/utils/agent.d.ts

@@ -6,6 +6,7 @@
 import { ProjectContext } from './project';
 import { loadProjectRules, loadProgressLog, writeProgressLog, formatChatHistoryForAgent } from './agentChat';
 import type { AgentChatResponse } from './agentChat';
+import { type Personality } from './personalities';
 export { loadProjectRules, loadProgressLog, writeProgressLog, formatChatHistoryForAgent };
 export type { AgentChatResponse };
 import { ToolCall, ToolResult, ActionLog } from './tools';
@@ -83,6 +84,12 @@ export interface AgentOptions {
      *  sub-agent's tool actions still record into the parent's session, so undo
      *  spans delegation. */
     nested?: boolean;
+    /** Run under this capability boundary instead of whatever the user has
+     *  selected. Used by non-interactive callers that must pin the boundary
+     *  themselves — a CI fix, for example, runs files+tests regardless of the
+     *  machine's active bot. Enforced by the same gate as any other bot; this
+     *  chooses which one applies, never whether one does. */
+    personalityOverride?: Personality;
     /** Delegation depth. 0 = top-level orchestrator (gets the `delegate` tool);
      *  sub-agents run at depth 1 and cannot delegate further (v1). */
     depth?: number;