v1.2.152

What's new

Security

• Fixed unauthenticated access to /api/tasks — now requires x-sync-token header
• Added rate limiting to all API endpoints (stats, tasks, progress, sync, keys, cleanup)

New features

• Token budget warning — agent warns at 80% and 95% of model's context window, using accurate per-model context sizes
• /sync command — sync learning preferences and profiles across machines
• Auto-sync on startup — learning preferences are automatically pulled from cloud if newer than local

Reliability

• Retry logic for all cloud sync calls (exponential backoff, up to 2 retries on network errors and 5xx)

Developer experience

• Debug logging now writes to ~/.codeep/logs/ — use CODEEP_DEBUG=1 to enable, tail -f to follow without breaking the UI
• Updated TypeScript 5.3 → 6.0 and minimum Node.js 18 → 20

Data & accuracy

• Fixed model context window sizes (Claude Opus/Sonnet: 200k → 1M, DeepSeek: 64k → 128k, MiniMax corrected)
• Updated model pricing across all providers

Bug fixes

• Fixed 23 failing tests

v1.2.135

What's new

OpenAI GPT-5.4 support

• Added GPT-5.4, GPT-5.4 Mini, and GPT-5.4 Nano models
• Fixed max_completion_tokens compatibility (GPT-5.4+ requirement)

Updated provider model lists

• Z.AI — GLM-5.1 (default), GLM-5 Turbo, GLM-5
• MiniMax — MiniMax M2.7
• OpenAI — GPT-5.4 (default), GPT-5.4 Mini, GPT-5.4 Nano
• Anthropic — Claude Opus (default), Claude Sonnet, Claude Haiku
• Google — Gemini 3.1 Pro (default), Gemini 3 Flash

Higher default limits

• Agent iterations: raised to 10,000 (was 100)
• Agent duration: raised to 480 min / 8h (was 20 min)
• Max tokens: raised to 32,768 (was 8,192) — better for Opus and large responses
• Progress bar no longer capped at 500 iterations

Bug fixes

• API error messages now show actual error details instead of generic "API error"
• Fixed project type detection (PHP/HTML projects no longer show "Unknown")

v1.2.130

Fix project type detection using scanned file extensions

- Run extension fallback for both Unknown and generic types
- Skip non-code extensions (svg, png, etc.) when finding dominant type
- Add HTML/CSS, TypeScript, JavaScript to extension type map

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

v1.2.129

Use scanned file extensions as fallback for project type detection

If config-file detection returns Unknown, count file extensions from
the directory scan (depth 3) and use the dominant extension to determine type.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

v1.2.128

Fix PHP project not recognized by isProjectDirectory

v1.2.127

Detect PHP projects by scanning subdirectories too

v1.2.126

Add PHP and other project types to type detection

Also added Python (pyproject.toml), Elixir, Dart/Flutter, C/C++.
PHP fallback: scan root dir for .php files if no composer.json.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

v1.2.125

Make context compression silent

v1.2.124

Reduce context compression noise

- Raise threshold 80K→200K chars (~50K tokens) so compression fires less often
- Suppress repeated compression notifications — only show after 20K+ new chars added

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

v1.2.123

Stop app after agent finishes, not before