codeep 2.8.0 → 2.10.0

package/README.md

@@ -50,7 +50,7 @@ custom slash commands, lifecycle hooks, checkpoints, `/cost`,
 ### Multi-Provider Support
 - **Z.AI (ZhipuAI)** — GLM models (Coding Plan & pay-per-use API, international & China)
 - **OpenAI** — GPT models (flagship, Mini, Nano)
-- **Anthropic** — Claude models (Opus, Sonnet, Haiku)
+- **Anthropic** — Claude models (Fable, Opus, Sonnet, Haiku)
 - **DeepSeek** — DeepSeek models (Pro, Flash)
 - **Google AI** — Gemini models (Pro, Flash)
 - **MiniMax** — MiniMax models (Coding Plan & pay-per-use API, international & China)

package/dist/acp/commands.js

@@ -2,7 +2,7 @@
 // Slash command handler for ACP sessions.
 // Mirrors CLI commands from renderer/commands.ts but returns plain text
 // responses (no TUI) suitable for streaming back via session/update.
-import { config, getCurrentProvider, getModelsForCurrentProvider, setProvider, setApiKey, isConfigured, listSessionsWithInfo, startNewSession, loadSession, saveSession, initializeAsProject, isManuallyInitializedProject, setProjectPermission, hasWritePermission, hasReadPermission, isTelemetryEnabled, telemetryForcedOffByEnv, } from '../config/index.js';
+import { config, getCurrentProvider, getModelsForCurrentProvider, setProvider, setApiKey, isConfigured, listSessionsWithInfo, startNewSession, loadSession, saveSession, initializeAsProject, isManuallyInitializedProject, setProjectPermission, hasWritePermission, hasReadPermission, isTelemetryEnabled, telemetryForcedOffByEnv, isKeySyncEnabled, keySyncForcedOffByEnv, } from '../config/index.js';
 import { getProviderList, getProvider } from '../config/providers.js';
 import { getProjectContext } from '../utils/project.js';
 import { loadCustomCommands } from '../utils/customCommands.js';
@@ -237,6 +237,34 @@ export async function handleCommand(input, session, onChunk, abortSignal) {
             lines.push('', 'Toggle with `/telemetry on` | `/telemetry off`. Controls automatic uploads of usage stats, session transcripts, progress, and memory notes.');
             return { handled: true, response: lines.join('\n') };
         }
+        case 'keysync': {
+            const sub = args[0]?.toLowerCase();
+            const envOff = keySyncForcedOffByEnv();
+            if (sub === 'on' || sub === 'off') {
+                if (envOff) {
+                    return { handled: true, response: 'Cloud key sync is forced **off** by the `CODEEP_NO_KEY_SYNC` env var — unset it to change this. The config flag can\'t override an env var.' };
+                }
+                config.set('syncKeysToCloud', sub === 'on');
+                return {
+                    handled: true,
+                    response: sub === 'on'
+                        ? 'Cloud key sync **on** — `codeep account push`/`sync` will now upload/download API keys. Note: synced keys are stored server-readable on codeep.dev.'
+                        : 'Cloud key sync **off** — API keys stay in your OS keychain only. (`codeep account purge-keys` wipes any keys already on the server.)',
+                };
+            }
+            if (sub && sub !== 'status') {
+                return { handled: true, response: 'Usage: `/keysync` · `/keysync on` · `/keysync off`' };
+            }
+            const flag = config.get('syncKeysToCloud') === true;
+            const lines = [
+                `**Cloud key sync:** ${isKeySyncEnabled() ? 'on' : 'off'}`,
+                `- Config flag \`syncKeysToCloud\`: ${flag}`,
+            ];
+            if (envOff)
+                lines.push('- Forced **off** by `CODEEP_NO_KEY_SYNC` (env overrides the flag).');
+            lines.push('', 'OFF by default — API keys live only in your OS keychain unless enabled. When on, `codeep account push`/`sync` move keys, stored **server-readable** on codeep.dev.');
+            return { handled: true, response: lines.join('\n') };
+        }
         case 'login': {
             const [providerId, apiKey] = args;
             if (!providerId || !apiKey) {

package/dist/acp/server.js

@@ -67,6 +67,9 @@ const AVAILABLE_COMMANDS = [
     { name: 'learn', description: 'Learn coding preferences from project files' },
     { name: 'memory', description: 'Project memory notes — add / list / remove / clear', input: { hint: '<note> | list | remove <n> | clear' } },
     { name: 'profile', description: 'Save / load / delete provider+model presets', input: { hint: 'save | load | delete | list | <name>' } },
+    // Privacy toggles
+    { name: 'telemetry', description: 'Show or toggle automatic cloud telemetry', input: { hint: '[on|off]' } },
+    { name: 'keysync', description: 'Show or toggle syncing API keys to codeep.dev (off by default)', input: { hint: '[on|off]' } },
     // Skills + custom commands
     { name: 'skills', description: 'List/create/share skill bundles. Subcommands: bundles, create-bundle, show, publish, install, browse, unpublish', input: { hint: '[query] | bundles | create-bundle <name> | show <name> | publish <slug> [--public] | install <owner>/<slug> | browse [q] | unpublish <owner>/<slug>' } },
     { name: 'commands', description: 'List user-authored commands from .codeep/commands/*.md' },

package/dist/api/index.js

@@ -2,7 +2,7 @@ import * as http from 'node:http';
 import * as https from 'node:https';
 import { config, getApiKey, resolveBaseUrl } from '../config/index.js';
 import { withRetry, isNetworkError } from '../utils/retry.js';
-import { getProvider, getProviderBaseUrl, getProviderAuthHeader, usesMaxCompletionTokens, requiresDefaultTemperature } from '../config/providers.js';
+import { getProvider, getProviderBaseUrl, getProviderAuthHeader, usesMaxCompletionTokens, requiresDefaultTemperature, modelRejectsSamplingParams } from '../config/providers.js';
 import { logApiRequest, logApiResponse } from '../utils/logger.js';
 import { loadProjectIntelligence, generateContextFromIntelligence } from '../utils/projectIntelligence.js';
 import { loadProjectRules } from '../utils/agent.js';
@@ -655,7 +655,9 @@ async function chatAnthropic(message, history, model, apiKey, onChunk, abortSign
                 model,
                 messages,
                 max_tokens: maxTokens,
-                temperature,
+                // Fable 5 / Opus 4.7+ reject temperature with a 400 — omit it there
+                // (omission means API default on every Claude model).
+                ...(modelRejectsSamplingParams(model) ? {} : { temperature }),
                 stream,
                 ...cachedSystem,
             }),

package/dist/config/providers.d.ts

@@ -68,6 +68,7 @@ export declare function usesMaxCompletionTokens(providerId: string): boolean;
  * (e.g. OpenAI GPT-5+ only accepts the default of 1).
  */
 export declare function requiresDefaultTemperature(providerId: string): boolean;
+export declare function modelRejectsSamplingParams(model: string): boolean;
 /**
  * Returns the effective max output tokens for a provider, capped by the provider's limit.
  * Falls back to the requested value if no provider limit is set.

package/dist/config/providers.js

@@ -243,9 +243,8 @@ export const PROVIDERS = {
             },
         },
         models: [
-            { id: 'claude-opus-4-8', name: 'Claude Opus 4.8', description: 'Most capable Claude model' },
-            { id: 'claude-opus-4-7', name: 'Claude Opus 4.7', description: 'Previous generation Opus' },
-            { id: 'claude-opus-4-6', name: 'Claude Opus 4.6', description: 'Older generation Opus' },
+            { id: 'claude-fable-5', name: 'Claude Fable 5', description: 'Most powerful — new tier above Opus' },
+            { id: 'claude-opus-4-8', name: 'Claude Opus 4.8', description: 'Most capable Opus model' },
             { id: 'claude-sonnet-4-6', name: 'Claude Sonnet', description: 'Best balance of speed and intelligence' },
             { id: 'claude-haiku-4-5-20251001', name: 'Claude Haiku', description: 'Fastest and most affordable' },
         ],
@@ -448,6 +447,17 @@ export function usesMaxCompletionTokens(providerId) {
 export function requiresDefaultTemperature(providerId) {
     return PROVIDERS[providerId]?.requiresDefaultTemperature ?? false;
 }
+/**
+ * Models that reject sampling parameters (temperature/top_p/top_k) with a 400.
+ * Anthropic removed them on Fable 5 and Opus 4.7+; older Claude models still
+ * accept them, so this must be a MODEL-level check, not a provider-level one
+ * (requiresDefaultTemperature can't express it). Omitting the field is always
+ * safe — the API treats omission as default.
+ */
+const SAMPLING_PARAMS_REJECTED = ['claude-fable-5', 'claude-opus-4-8', 'claude-opus-4-7'];
+export function modelRejectsSamplingParams(model) {
+    return SAMPLING_PARAMS_REJECTED.some(id => model === id || model.startsWith(`${id}-`));
+}
 /**
  * Returns the effective max output tokens for a provider, capped by the provider's limit.
  * Falls back to the requested value if no provider limit is set.

package/dist/renderer/App.js

@@ -80,7 +80,7 @@ const COMMAND_DESCRIPTIONS = {
     'learn': 'Learn code preferences',
     'cost': 'Show session cost and token usage',
     'profile': 'Save/load settings profiles',
-    'tasks': 'Show pending tasks from codeep.dev dashboard',
+    'tasks': 'List/add/done/delete codeep.dev tasks — add <title> [--bug|--feature]',
     'sync': 'Sync learning preferences and profiles to codeep.dev',
     'telemetry': 'Show or toggle automatic cloud telemetry (on/off)',
     'keysync': 'Show or toggle syncing API keys to codeep.dev (on/off)',
@@ -234,7 +234,7 @@ export class App {
         'multiline', 'memory', 'init',
         'provider', 'model', 'protocol', 'lang', 'grant', 'login', 'logout',
         'context-save', 'context-load', 'context-clear', 'learn',
-        'cost', 'tasks', 'account', 'sync', 'telemetry',
+        'cost', 'tasks', 'account', 'sync', 'keysync', 'telemetry',
         // 2.0 — extensions, checkpoints, MCP, custom commands, OpenRouter prefs.
         // Keep in lockstep with COMMAND_DESCRIPTIONS below and helpCategories.
         'compact', 'commands', 'checkpoint', 'checkpoints', 'rewind',

package/dist/renderer/commands.js

@@ -1833,11 +1833,40 @@ Describe what this skill does. The agent reads this body verbatim when it invoke
                 }
                 break;
             }
-            // /tasks add <title>  — create a new task on the dashboard
+            // /tasks add <title> [--bug | --feature] [--desc <text>]  — create a task
+            // on the dashboard. Type matches the dashboard picker (task | bug |
+            // feature); a --bug/--feature/--task flag anywhere sets it (default task).
+            // --desc/--description captures the following words (until the next flag)
+            // as the description — the same field the dashboard + macOS app set, and
+            // which the list view and the agent task-context prompt already render.
             if (subCmd === 'add') {
-                const title = args.slice(1).join(' ').trim();
+                const TASK_TYPES = ['task', 'bug', 'feature'];
+                let type = 'task';
+                const titleWords = [];
+                const descWords = [];
+                let capturingDesc = false;
+                for (const w of args.slice(1)) {
+                    const flag = /^--([\w-]+)$/.exec(w);
+                    if (flag) {
+                        const name = flag[1].toLowerCase();
+                        if (name === 'desc' || name === 'description') {
+                            capturingDesc = true;
+                            continue;
+                        }
+                        if (TASK_TYPES.includes(name))
+                            type = name;
+                        capturingDesc = false; // any non-desc flag ends description capture
+                        continue;
+                    }
+                    if (capturingDesc)
+                        descWords.push(w);
+                    else
+                        titleWords.push(w);
+                }
+                const title = titleWords.join(' ').trim();
+                const description = descWords.join(' ').trim();
                 if (!title) {
-                    ctx.app.notify('Usage: /tasks add <title>');
+                    ctx.app.notify('Usage: /tasks add <title> [--bug | --feature] [--desc <text>]');
                     break;
                 }
                 const projectName = ctx.projectContext?.name;
@@ -1852,10 +1881,10 @@ Describe what this skill does. The agent reads this body verbatim when it invoke
                     const res = await fetch('https://codeep.dev/api/tasks', {
                         method: 'POST',
                         headers: { 'Content-Type': 'application/json', 'x-sync-token': syncToken },
-                        body: JSON.stringify({ projectName: projectName || '', projectId: projectId ?? null, title, type: 'task' }),
+                        body: JSON.stringify({ projectName: projectName || '', projectId: projectId ?? null, title, type, ...(description ? { description } : {}) }),
                     });
                     if (res.ok) {
-                        ctx.app.notify(`+ Task added: ${title}`);
+                        ctx.app.notify(`+ ${type[0].toUpperCase()}${type.slice(1)} added: ${title}`);
                     }
                     else {
                         ctx.app.notify('Failed to add task');
@@ -1884,7 +1913,10 @@ Describe what this skill does. The agent reads this body verbatim when it invoke
             const lines = [`## Tasks${projectName ? ` — ${projectName}` : ''}`, ''];
             tasks.forEach((t, i) => {
                 const icon = TYPE_ICON[t.type] ?? '[task]';
-                lines.push(`${i + 1}. ${icon} ${t.title}${t.description ? `\n   ${t.description}` : ''}`);
+                // In a global listing (not scoped to one project) tag each row with its
+                // project so a mixed list is legible — matches the macOS/web task rows.
+                const proj = !projectName && t.project_name ? ` _(${t.project_name})_` : '';
+                lines.push(`${i + 1}. ${icon} ${t.title}${proj}${t.description ? `\n   ${t.description}` : ''}`);
             });
             lines.push('', `*${tasks.length} pending task${tasks.length > 1 ? 's' : ''}. Use /tasks done <n> to mark complete.*`);
             lines.push('*Tasks loaded into agent context — agent will see them in the next message.*');
@@ -2034,9 +2066,12 @@ Describe what this skill does. The agent reads this body verbatim when it invoke
             });
             break;
         }
-        case 'stats':
-        case 'cost': {
-            const { getCostBreakdown, getSessionStats, formatTokenCount, getPricingTable } = await import('../utils/tokenTracker.js');
+        // /stats — detailed session view: per-model breakdown, total, prompt-cache
+        // summary, and the per-1M pricing reference. `/cost` is the concise sibling
+        // (formatCostReport, above); the two are intentionally distinct, so this
+        // case no longer also claims 'cost' (which always hit the handler above).
+        case 'stats': {
+            const { getCostBreakdown, getSessionStats, formatTokenCount, getPricingTable, getCacheStats } = await import('../utils/tokenTracker.js');
             const stats = getSessionStats();
             const lines = ['## Session Cost', ''];
             if (stats.requestCount === 0) {
@@ -2064,6 +2099,19 @@ Describe what this skill does. The agent reads this body verbatim when it invoke
                         lines.push(`**Total: ~$${stats.estimatedCost.toFixed(4)}**`);
                     }
                 }
+                // Prompt caching — parity with /cost (the 2.0.2 caching section was
+                // only wired into formatCostReport). Shown only when caching landed.
+                const cache = getCacheStats();
+                if (cache.cacheReadTokens > 0 || cache.cacheCreationTokens > 0) {
+                    lines.push('', '### Prompt caching');
+                    lines.push(`Cache reads: ${formatTokenCount(cache.cacheReadTokens)} tokens (billed at 0.1× input rate)`);
+                    if (cache.cacheCreationTokens > 0) {
+                        lines.push(`Cache writes: ${formatTokenCount(cache.cacheCreationTokens)} tokens (billed at 1.25× input rate)`);
+                    }
+                    if (cache.estimatedSavingsUsd > 0) {
+                        lines.push(`Estimated savings vs no caching: $${cache.estimatedSavingsUsd.toFixed(4)}`);
+                    }
+                }
                 lines.push('');
             }
             lines.push('### Pricing (per 1M tokens)');

package/dist/utils/agentChat.js

@@ -17,7 +17,7 @@ import { createHash } from 'crypto';
 import { config, getApiKey, resolveBaseUrl } from '../config/index.js';
 import { loadProjectIntelligence, generateContextFromIntelligence } from './projectIntelligence.js';
 import { syncProgress, generateProjectId } from './codeepCloud.js';
-import { getProviderAuthHeader, supportsNativeTools, getEffectiveMaxTokens, usesMaxCompletionTokens, requiresDefaultTemperature, isNoApiKeyProvider } from '../config/providers.js';
+import { getProviderAuthHeader, supportsNativeTools, getEffectiveMaxTokens, usesMaxCompletionTokens, requiresDefaultTemperature, modelRejectsSamplingParams, isNoApiKeyProvider } from '../config/providers.js';
 import { recordTokenUsage, extractOpenAIUsage, extractAnthropicUsage } from './tokenTracker.js';
 import { parseOpenAIToolCalls, parseAnthropicToolCalls, parseToolCalls } from './toolParsing.js';
 import { formatToolDefinitions, getOpenAITools, getAnthropicTools } from './tools.js';
@@ -357,7 +357,9 @@ additionalTools) {
         let endpoint;
         let body;
         const useStreaming = Boolean(onChunk);
-        const tempParam = requiresDefaultTemperature(providerId) ? {} : { temperature: config.get('temperature') };
+        // Provider-level guard (OpenAI GPT-5+) OR model-level guard — Anthropic's
+        // Fable 5 / Opus 4.7+ reject temperature with a 400; omission is safe.
+        const tempParam = (requiresDefaultTemperature(providerId) || modelRejectsSamplingParams(model)) ? {} : { temperature: config.get('temperature') };
         if (protocol === 'openai') {
             const maxTok = getEffectiveMaxTokens(providerId, Math.max(config.get('maxTokens'), 16384));
             const tokParam = usesMaxCompletionTokens(providerId) ? { max_completion_tokens: maxTok } : { max_tokens: maxTok };
@@ -549,7 +551,9 @@ export async function agentChatFallback(messages, systemPrompt, onChunk, abortSi
     try {
         let endpoint;
         let body;
-        const tempParam = requiresDefaultTemperature(providerId) ? {} : { temperature: config.get('temperature') };
+        // Provider-level guard (OpenAI GPT-5+) OR model-level guard — Anthropic's
+        // Fable 5 / Opus 4.7+ reject temperature with a 400; omission is safe.
+        const tempParam = (requiresDefaultTemperature(providerId) || modelRejectsSamplingParams(model)) ? {} : { temperature: config.get('temperature') };
         if (protocol === 'openai') {
             const maxTok = getEffectiveMaxTokens(providerId, Math.max(config.get('maxTokens'), 16384));
             const tokParam = usesMaxCompletionTokens(providerId) ? { max_completion_tokens: maxTok } : { max_tokens: maxTok };

package/dist/utils/tokenTracker.js

@@ -16,9 +16,8 @@ const MODEL_CONTEXT_WINDOWS = {
     'gpt-5.4-mini': 400_000,
     'gpt-5.4-nano': 400_000,
     // Anthropic
+    'claude-fable-5': 1_000_000,
     'claude-opus-4-8': 1_000_000,
-    'claude-opus-4-7': 1_000_000,
-    'claude-opus-4-6': 1_000_000,
     'claude-sonnet-4-6': 1_000_000,
     'claude-haiku-4-5-20251001': 200_000,
     // DeepSeek
@@ -52,9 +51,8 @@ const MODEL_PRICING = {
     'gpt-5.4-mini': { inputPer1M: 0.75, outputPer1M: 4.50 },
     'gpt-5.4-nano': { inputPer1M: 0.20, outputPer1M: 1.25 },
     // Anthropic
+    'claude-fable-5': { inputPer1M: 10.00, outputPer1M: 50.00 },
     'claude-opus-4-8': { inputPer1M: 5.00, outputPer1M: 25.00 },
-    'claude-opus-4-7': { inputPer1M: 5.00, outputPer1M: 25.00 },
-    'claude-opus-4-6': { inputPer1M: 5.00, outputPer1M: 25.00 },
     'claude-sonnet-4-6': { inputPer1M: 3.00, outputPer1M: 15.00 },
     'claude-haiku-4-5-20251001': { inputPer1M: 1.00, outputPer1M: 5.00 },
     // DeepSeek (cache-miss input pricing)

package/dist/version.d.ts

@@ -1 +1 @@
-export declare const VERSION = "2.8.0";
+export declare const VERSION = "2.10.0";

package/dist/version.js

@@ -1,4 +1,4 @@
 // AUTO-GENERATED by scripts/gen-version.js — do not edit by hand.
 // Baked from package.json at build time so the bun-compiled binary reports
 // the right version (it has no package.json on disk to read at runtime).
-export const VERSION = '2.8.0';
+export const VERSION = '2.10.0';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeep",
-  "version": "2.8.0",
+  "version": "2.10.0",
   "description": "AI-powered coding assistant built for the terminal. Multiple LLM providers, project-aware context, and a seamless development workflow.",
   "type": "module",
   "main": "dist/index.js",
@@ -9,7 +9,7 @@
   },
   "scripts": {
     "dev": "node scripts/gen-version.js && node --import tsx src/renderer/main.ts",
-    "prepack": "node scripts/gen-version.js && tsc; node scripts/fix-imports.js",
+    "prepack": "node scripts/gen-version.js && tsc && node scripts/fix-imports.js",
     "build": "node scripts/gen-version.js && tsc && node scripts/fix-imports.js",
     "start": "node dist/renderer/main.js",
     "demo:renderer": "node --import tsx src/renderer/demo.ts",