Codeep

v1.2.152 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 2mo AI Agents & Assistants

✓ No known CVEs patched

This release patches 1 known CVE

Topics

ai ai-agent ai-agents ai-tools cli-app

Affected surfaces

auth

Summary

AI summary

Updates What's new, New features, and Developer experience across a mixed release.

Full changelog

Fixed unauthenticated access to /api/tasks — now requires x-sync-token header
Added rate limiting to all API endpoints (stats, tasks, progress, sync, keys, cleanup)

Token budget warning — agent warns at 80% and 95% of model's context window, using accurate per-model context sizes
/sync command — sync learning preferences and profiles across machines
Auto-sync on startup — learning preferences are automatically pulled from cloud if newer than local

Retry logic for all cloud sync calls (exponential backoff, up to 2 retries on network errors and 5xx)

Debug logging now writes to ~/.codeep/logs/ — use CODEEP_DEBUG=1 to enable, tail -f to follow without breaking the UI
Updated TypeScript 5.3 → 6.0 and minimum Node.js 18 → 20

Fixed model context window sizes (Claude Opus/Sonnet: 200k → 1M, DeepSeek: 64k → 128k, MiniMax corrected)
Updated model pricing across all providers

Fixed unauthenticated access to `/api/tasks`; now requires `x-sync-token` header

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Codeep

Get notified when new releases ship.

About Codeep

v2.4.1 MiniMax M3 replaces MiniMax-M2.7 as default model across all providers.
v2.0.0 McpServer protocol now optional fields `command`, `args`, plus new `url` and `headers`; version bumped to 2.0.0.