@cmetech/otto 1.0.7 → 1.0.9

package/dist/cli-args.d.ts

@@ -11,6 +11,8 @@ export interface CliFlags {
     appendSystemPrompt?: string;
     tools?: string[];
     messages: string[];
+    withDefaults?: boolean;
+    noSeedDefaults?: boolean;
     /** Set by `otto sessions` when the user picks a specific session to resume */
     _selectedSessionPath?: string;
 }

package/dist/cli-args.js

@@ -45,6 +45,12 @@ export function parseCliArgs(argv) {
         else if (arg === '--discover') {
             flags.discover = true;
         }
+        else if (arg === '--with-defaults') {
+            flags.withDefaults = true;
+        }
+        else if (arg === '--no-seed-defaults') {
+            flags.noSeedDefaults = true;
+        }
         else if (!arg.startsWith('--') && !arg.startsWith('-')) {
             flags.messages.push(arg);
         }

package/dist/cli.js

@@ -15,6 +15,7 @@ import { shouldBypassManagedResourceMismatchGate } from './cli-policy.js';
 import { shouldRedirectAutoToHeadless } from './cli-auto-routing.js';
 import { printHelp, printSubcommandHelp } from './help-text.js';
 import { applySecurityOverrides } from './security-overrides.js';
+import { maybeSeedDefaultPackages } from './seed-defaults.js';
 import { validateConfiguredModel } from './startup-model-validation.js';
 import { migrateAnthropicDefaultToClaudeCode } from './provider-migrations.js';
 import { buildHeadlessAutoArgs, parseCliArgs, migrateLegacyFlatSessions, } from './cli-args.js';
@@ -293,6 +294,12 @@ if (cliFlags.messages[0] === 'graph') {
     process.exit(0);
 }
 exitIfManagedResourcesAreNewer(agentDir);
+// Seed OTTO's "out of the box" packages into settings.json so the package
+// resolver picks them up on this same launch. Precedence:
+//   --no-seed-defaults > --with-defaults > OTTO_NO_SEED_DEFAULTS env >
+//   OTTO_SEED_DEFAULTS env > settings.seedDefaultsOnLaunch > off.
+// Idempotent; tracks attempts in settings.seededDefaults so `otto remove` sticks.
+await maybeSeedDefaultPackages({ withDefaults: cliFlags.withDefaults, noSeedDefaults: cliFlags.noSeedDefaults }, agentDir);
 // Early TTY check — must come before heavy initialization to avoid dangling
 // handles that prevent process.exit() from completing promptly.
 // Subcommands exempt from the early non-TTY guard.
@@ -307,6 +314,7 @@ const subcommandsExemptFromEarlyTtyCheck = new Set([
     'headless',
     'install',
     'list',
+    'onboarding',
     'package',
     'remove',
     'sessions',
@@ -406,6 +414,25 @@ if (cliFlags.messages[0] === 'config') {
     }
     process.exit(0);
 }
+// `otto onboarding` — explicitly (re)run the first-run wizard. Bypasses the
+// shouldRunOnboarding gate so users can revisit choices (LLM provider, web
+// search, remote questions, tool keys, recommended packages) any time.
+// Exits after the wizard finishes — does NOT fall through into the TUI,
+// because messages[0] is the subcommand string and would be consumed as a
+// user message. Run `otto` to start a session.
+if (cliFlags.messages[0] === 'onboarding') {
+    if (!process.stdin.isTTY) {
+        process.stderr.write(`[${COMMAND_NAMESPACE}] \`${COMMAND_NAMESPACE} onboarding\` requires an interactive terminal.\n`);
+        process.exit(1);
+    }
+    const { AuthStorage } = await loadPiCodingAgentModule();
+    const authStorage = AuthStorage.create(authFilePath);
+    loadStoredEnvKeys(authStorage);
+    await runOnboarding(authStorage, {
+        outroMessage: `Setup updated — run \`${COMMAND_NAMESPACE}\` to start.`,
+    });
+    process.exit(0);
+}
 // `gsd sessions` — list past sessions and pick one to resume
 if (cliFlags.messages[0] === 'sessions') {
     const { SessionManager } = await loadPiCodingAgentModule();

package/dist/help-text.js

@@ -17,6 +17,20 @@ const SUBCOMMAND_HELP = {
         'For detailed provider setup instructions (OpenRouter, Ollama, LM Studio, vLLM,',
         'and other OpenAI-compatible endpoints), see docs/providers.md.',
     ].join('\n'),
+    onboarding: [
+        `Usage: ${CMD} onboarding`,
+        '',
+        `Explicitly (re)run the first-run wizard. Useful when you want to revisit any`,
+        'of these without waiting for the auto-trigger:',
+        '  - LLM provider selection',
+        '  - Web search provider',
+        '  - Remote questions (Discord, Slack, Telegram)',
+        '  - Tool API keys',
+        '  - Recommended packages (categorical picker — Developer, Productivity, etc.)',
+        '',
+        'Existing choices are surfaced as "keep current" so you only change what you want.',
+        'Requires an interactive terminal.',
+    ].join('\n'),
     update: [
         `Usage: ${CMD} update`,
         '',
@@ -198,6 +212,7 @@ export function printHelp(version) {
     process.stdout.write('  --help, -h               Print this help and exit\n');
     process.stdout.write('\nSubcommands:\n');
     process.stdout.write('  config [subject]         Configure services: gateway, langflow, llm, all (or interactive menu)\n');
+    process.stdout.write('  onboarding               Re-run the first-run wizard (LLM, search, recommended packages, etc.)\n');
     process.stdout.write('  install <source>         Install a package/extension source\n');
     process.stdout.write('  remove <source>          Remove an installed package source\n');
     process.stdout.write('  list                     List installed package sources\n');

package/dist/onboarding.d.ts

@@ -23,6 +23,12 @@ type PicoModule = {
 interface RunOnboardingOptions {
     /** Show logo + intro banner. Disable when onboarding is launched inside an active TUI session. */
     showIntro?: boolean;
+    /**
+     * Final clack outro line. Defaults to "Launching OTTO..." for the first-run
+     * path which continues into the main agent loop. Callers that exit after the
+     * wizard (e.g. `otto onboarding`) should pass an honest message.
+     */
+    outroMessage?: string;
 }
 export declare const OTHER_PROVIDERS: ({
     value: string;
@@ -64,5 +70,18 @@ export declare function runOnboarding(authStorage: AuthStorage, opts?: RunOnboar
 export declare function runLlmStep(p: ClackModule, pc: PicoModule, authStorage: AuthStorage): Promise<boolean>;
 export declare function runWebSearchStep(p: ClackModule, pc: PicoModule, authStorage: AuthStorage, isAnthropicAuth: boolean): Promise<string | null>;
 export declare function runToolKeysStep(p: ClackModule, pc: PicoModule, authStorage: AuthStorage): Promise<number>;
+/**
+ * Categorical "recommended packages" step.
+ *
+ * Flow:
+ *   1. If multiple personas exist, multiselect which categories apply (pre-checked = all).
+ *   2. For each chosen category, multiselect which packages to install
+ *      (pre-checked = all; each shown with its description as a hint).
+ *   3. Persist the resulting union to settings.enabledDefaultPackages and
+ *      settings.seedDefaultsOnLaunch.
+ *
+ * Returns the count of selected packages (0 if declined/skipped).
+ */
+export declare function runSeedDefaultsStep(p: ClackModule, pc: PicoModule): Promise<number>;
 export declare function runRemoteQuestionsStep(p: ClackModule, pc: PicoModule, authStorage: AuthStorage): Promise<string | null>;
 export {};

package/dist/onboarding.js

@@ -135,6 +135,40 @@ function persistDefaultProvider(providerId) {
         // Non-fatal: startup fallback logic will still run.
     }
 }
+/**
+ * Persist seedDefaultsOnLaunch flag to settings.json.
+ *
+ * When true, ship-with-OTTO default packages are added to settings.packages on
+ * launch (layer 5 of the seed-defaults precedence resolver). See seed-defaults.ts.
+ */
+function persistSeedDefaultsOnLaunch(enabled) {
+    const settingsPath = join(agentDir, 'settings.json');
+    try {
+        const raw = existsSync(settingsPath) ? JSON.parse(readFileSync(settingsPath, 'utf-8')) : {};
+        raw.seedDefaultsOnLaunch = enabled;
+        mkdirSync(dirname(settingsPath), { recursive: true });
+        writeFileSync(settingsPath, JSON.stringify(raw, null, 2), 'utf-8');
+    }
+    catch {
+        // Non-fatal: startup fallback logic will still run.
+    }
+}
+/**
+ * Persist enabledDefaultPackages to settings.json. Filter applied by the
+ * seed-defaults resolver: undefined = all (back-compat), [] = none, [...] = subset.
+ */
+function persistEnabledDefaultPackages(sources) {
+    const settingsPath = join(agentDir, 'settings.json');
+    try {
+        const raw = existsSync(settingsPath) ? JSON.parse(readFileSync(settingsPath, 'utf-8')) : {};
+        raw.enabledDefaultPackages = sources;
+        mkdirSync(dirname(settingsPath), { recursive: true });
+        writeFileSync(settingsPath, JSON.stringify(raw, null, 2), 'utf-8');
+    }
+    catch {
+        // Non-fatal.
+    }
+}
 /**
  * Persist the selected default model to settings.json.
  */
@@ -299,6 +333,18 @@ export async function runOnboarding(authStorage, opts = {}) {
     else {
         markStepSkipped('tool-keys');
     }
+    // ── Recommended Packages ──────────────────────────────────────────────────
+    const seedResult = await runStep(p, 'Recommended packages setup failed', () => runSeedDefaultsStep(p, pc));
+    if (seedResult === STEP_CANCELLED)
+        return;
+    const seedSelectedCount = seedResult ?? 0;
+    if (seedSelectedCount > 0) {
+        markStepCompleted('seed-defaults');
+        completedSteps.push('seed-defaults');
+    }
+    else {
+        markStepSkipped('seed-defaults');
+    }
     // ── Summary ───────────────────────────────────────────────────────────────
     const summaryLines = [];
     if (llmConfigured) {
@@ -333,6 +379,12 @@ export async function runOnboarding(authStorage, opts = {}) {
     else {
         summaryLines.push(`${pc.dim('↷')} Tool keys: none configured`);
     }
+    if (seedSelectedCount > 0) {
+        summaryLines.push(`${pc.green('✓')} Recommended packages: ${seedSelectedCount} selected — install on launch`);
+    }
+    else {
+        summaryLines.push(`${pc.dim('↷')} Recommended packages: skipped — re-run onboarding or set --with-defaults to enable`);
+    }
     // Persist completion record so re-entry, web boot probe, and shouldRunOnboarding
     // all agree the wizard finished. Required steps drive the "complete" semantics
     // in onboarding-state.ts; here we mark wizard-level completion regardless.
@@ -340,7 +392,7 @@ export async function runOnboarding(authStorage, opts = {}) {
     summaryLines.push('');
     summaryLines.push(`${pc.dim('Tip:')} re-run anytime with ${pc.cyan(`/${COMMAND_NAMESPACE} onboarding`)}`);
     p.note(summaryLines.join('\n'), 'Setup complete');
-    p.outro(pc.dim(`Launching ${BRAND_NAME}...`));
+    p.outro(pc.dim(opts.outroMessage ?? `Launching ${BRAND_NAME}...`));
 }
 // ─── LLM Authentication Step ──────────────────────────────────────────────────
 export async function runLlmStep(p, pc, authStorage) {
@@ -751,6 +803,86 @@ export async function runToolKeysStep(p, pc, authStorage) {
     }
     return savedCount;
 }
+// ─── Seed Defaults Step ───────────────────────────────────────────────────────
+/**
+ * Categorical "recommended packages" step.
+ *
+ * Flow:
+ *   1. If multiple personas exist, multiselect which categories apply (pre-checked = all).
+ *   2. For each chosen category, multiselect which packages to install
+ *      (pre-checked = all; each shown with its description as a hint).
+ *   3. Persist the resulting union to settings.enabledDefaultPackages and
+ *      settings.seedDefaultsOnLaunch.
+ *
+ * Returns the count of selected packages (0 if declined/skipped).
+ */
+export async function runSeedDefaultsStep(p, pc) {
+    const { getOnboardableCategories } = await import('./seed-defaults.js');
+    const categories = getOnboardableCategories();
+    if (categories.length === 0) {
+        p.log.info(pc.dim('No recommended packages curated yet — skipping.'));
+        persistSeedDefaultsOnLaunch(false);
+        return 0;
+    }
+    // ── Step 1: pick categories ────────────────────────────────────────────────
+    let chosenCategories = categories;
+    if (categories.length > 1) {
+        const selection = await p.multiselect({
+            message: 'Which personas describe how you use OTTO? (space to toggle, enter to confirm)',
+            options: categories.map(c => ({ value: c.id, label: c.label, hint: c.description })),
+            initialValues: categories.map(c => c.id),
+            required: false,
+        });
+        if (p.isCancel(selection)) {
+            persistEnabledDefaultPackages([]);
+            persistSeedDefaultsOnLaunch(false);
+            p.log.info(pc.dim('Cancelled — recommended packages disabled. Enable later with --with-defaults or settings.seedDefaultsOnLaunch.'));
+            return 0;
+        }
+        const chosenIds = new Set(selection);
+        chosenCategories = categories.filter(c => chosenIds.has(c.id));
+    }
+    else {
+        const only = categories[0];
+        p.log.info(`Recommended persona: ${pc.cyan(only.label)} — ${pc.dim(only.description)}`);
+    }
+    if (chosenCategories.length === 0) {
+        persistEnabledDefaultPackages([]);
+        persistSeedDefaultsOnLaunch(false);
+        p.log.info(pc.dim('No personas selected — recommended packages disabled.'));
+        return 0;
+    }
+    // ── Step 2: pick packages per category ────────────────────────────────────
+    const enabledSources = [];
+    for (const cat of chosenCategories) {
+        const selection = await p.multiselect({
+            message: `${cat.label} packages — untick anything you don't want:`,
+            options: cat.packages.map(pkg => ({
+                value: pkg.source,
+                label: pkg.name,
+                hint: pkg.description,
+            })),
+            initialValues: cat.packages.map(pkg => pkg.source),
+            required: false,
+        });
+        if (p.isCancel(selection)) {
+            // Cancelling on a per-category list means "skip this one," not "abort the wizard."
+            p.log.info(pc.dim(`Skipped ${cat.label} packages.`));
+            continue;
+        }
+        enabledSources.push(...selection);
+    }
+    const unique = Array.from(new Set(enabledSources));
+    persistEnabledDefaultPackages(unique);
+    if (unique.length === 0) {
+        persistSeedDefaultsOnLaunch(false);
+        p.log.info(pc.dim('No packages selected — recommended packages disabled.'));
+        return 0;
+    }
+    persistSeedDefaultsOnLaunch(true);
+    p.log.success(`Recommended packages: ${pc.green(`${unique.length} selected`)} — will install on next launch`);
+    return unique.length;
+}
 // ─── Remote Questions Step ────────────────────────────────────────────────────
 export async function runRemoteQuestionsStep(p, pc, authStorage) {
     // Check existing config — use getCredentialsForProvider to skip empty-key entries

package/dist/resources/.managed-resources-content-hash

@@ -1 +1 @@
-cbfa8a800a367232
+0d13c40fc565ba9c

package/dist/resources/extensions/otto/commands/release-notes/_data.js

@@ -0,0 +1,155 @@
+// AUTO-GENERATED — DO NOT EDIT.
+// Source: CHANGELOG.md  (regenerated by scripts/sync-release-notes.mjs on prebuild)
+//
+// To add or correct release notes, edit CHANGELOG.md and rebuild. Editing this
+// file directly will be clobbered on the next build.
+export const RELEASE_NOTES = [
+    {
+        version: '1.0.9',
+        date: '2026-05-29',
+        headline: 'Recommended packages, /release-notes, and quieter startup.',
+        added: [
+            'New `otto onboarding` subcommand — re-run the first-run wizard at any time to revisit LLM provider, web search, remote questions, tool keys, or recommended packages.',
+            'New `/release-notes` slash command — browse what\'s new across releases. Type `/release-notes` for the interactive selector, `/release-notes <version>` for a specific release, `/release-notes list` for the index, or `/release-notes latest`.',
+            'Onboarding now offers a categorical "Recommended packages" step (Developer + Productivity personas) — see what each package does, untick anything you don\'t want, and OTTO installs them on launch.',
+            'Opt-in flags for recommended packages without re-running onboarding: `otto --with-defaults` (one launch), `OTTO_SEED_DEFAULTS=1` (env), or `seedDefaultsOnLaunch: true` in settings.json.',
+            'Opt-out controls with matching precedence: `otto --no-seed-defaults`, `OTTO_NO_SEED_DEFAULTS=1`, or `seedDefaultsOnLaunch: false`.',
+            'New `quietExtensions: string[]` setting — case-insensitive substring patterns matched against extension paths. Matching extensions have their `ui.notify` AND `console.log/warn/error/info` calls suppressed while their handlers are on the stack. Use to mute noisy session_start banners from extensions like piolium (`ui.notify`) or pi-notion (`console.log`). Concurrent non-quiet extensions are unaffected — suppression is scoped via AsyncLocalStorage to the quiet handler\'s own async context.',
+            'Known-noisy default packages are now silenced automatically: when onboarding seeds pi-notion (and any future curated package with a `quietPattern`), the pattern is added to `quietExtensions` on the same launch. Tracked via a new `seededQuietPatterns` settings key — if you remove a pattern from `quietExtensions`, OTTO will not re-add it.',
+            'New `OTTO_LOG_BLOCKED_COMMANDS=1` env to opt back into the `[resolve-config-value]` warning when actively debugging credential resolution.',
+        ],
+        fixed: [
+            'Doubled OTTO header on first launch is gone: auto-resolve npm install no longer corrupts the TUI\'s alt-screen because install stdio is now captured instead of inherited. Explicit `otto install <pkg>` still streams live progress.',
+            'A bad source in `settings.packages` (typo, 404, dead git host) no longer crashes startup — the resolver now warns-and-continues per source with the underlying npm/git error attached to the message.',
+            '`/release-notes` content renders inside a chat response card via the session\'s custom-message stream instead of being interleaved with live TUI redraws.',
+            '`[resolve-config-value] Blocked disallowed command: "sh"` warning is suppressed by default; it was unactionable noise from extensions that intentionally register `!sh -lc ...` apiKey expressions.',
+        ],
+        changed: [
+            '`CHANGELOG.md` is now the single source of truth for `/release-notes` data. `src/resources/extensions/otto/commands/release-notes/_data.ts` is regenerated by `scripts/sync-release-notes.mjs` on every prebuild.',
+            'Piolium dropped from the default Recommended Packages list. Existing installs are left alone; the zombie-resurrection guard prevents reseeding. `otto remove npm:@vigolium/piolium` to drop it.',
+        ],
+        notes: [
+            'New `~/.otto/agent/settings.json` keys this release: `seedDefaultsOnLaunch`, `seededDefaults`, `enabledDefaultPackages`, `quietExtensions`. All optional; omit to inherit the defaults documented in `/release-notes`.',
+        ],
+    },
+    {
+        version: '1.0.8',
+        date: '2026-05-28',
+        headline: 'Bundled-tools path fix.',
+        fixed: [
+            'Bundled ripgrep/fd now land in the correct destination so OTTO\'s managed tools resolve on fresh installs.',
+        ],
+    },
+    {
+        version: '1.0.7',
+        date: '2026-05-28',
+        headline: 'OTTO brand cutover + bundled ripgrep & fd.',
+        added: [
+            'Ship ripgrep and fd with the OTTO binary — no separate install required for fast search and file discovery.',
+        ],
+        changed: [
+            'README rebrand from prior identity to OTTO — clearer messaging for the v1.x line.',
+        ],
+    },
+    {
+        version: '1.0.6',
+        date: '2026-05-27',
+        headline: 'uuid deprecation warning silenced.',
+        fixed: [
+            'Pin the uuid package override so Node no longer prints deprecation warnings during startup.',
+            'Native package repository.url corrected to cmetech/otto-cli for provenance verification.',
+        ],
+        changed: [
+            'INSTALL.md expanded with macOS and Linux instructions.',
+        ],
+    },
+    {
+        version: '1.0.5',
+        date: '2026-05-26',
+        headline: 'npm provenance enabled.',
+        added: [
+            'Publish with npm provenance — installs can now verify OTTO and engine packages came from this repo\'s CI.',
+        ],
+        changed: [
+            'Native and main publish workflows split for trusted-publishing compatibility.',
+        ],
+    },
+    {
+        version: '1.0.4',
+        date: '2026-05-24',
+        headline: 'Trusted publishing + gateway model discovery.',
+        added: [
+            'Gateway: discover available models exposed through `OTTO_GATEWAY_URL` so `/model` lists them out of the box.',
+            'Footer: GW status color decoupled from the routing label so health is glanceable.',
+        ],
+        fixed: [
+            'LangFlow: surface timeouts on id lookups instead of hanging silently.',
+            'LangFlow: fail fast on auth failures with a clear actionable message.',
+        ],
+        changed: [
+            'Release pipeline switched to npm trusted publishing by default.',
+            'Bumped CI npm-registry propagation retry budgets to reduce flaky publishes.',
+        ],
+    },
+    {
+        version: '1.0.3',
+        date: '2026-05-23',
+        headline: 'TUI hardening + workflow command cleanup.',
+        fixed: [
+            'Hardened interactive TUI behavior across edge cases (resize, focus, paste).',
+            'Streamlined workflow command handling so dispatching is more predictable.',
+            'OTTO startup no longer requires you to be inside a project directory.',
+            'Workflow context no longer attempts to load from the home directory.',
+        ],
+        changed: [
+            'Tightened gateway remote-tool handling.',
+            'Hardened npm publish and install tooling.',
+        ],
+    },
+    {
+        version: '1.0.2',
+        date: '2026-05-23',
+        headline: 'Hard-fork runtime complete + LangFlow control plane.',
+        added: [
+            'LangFlow control plane: register, validate, smoke-test, and import flows from inside OTTO.',
+            'Codebase excavation workflows for spelunking unfamiliar repos.',
+            'Improved OTTO package management — install, remove, list, and update with provenance-aware paths.',
+            'Lazy `/gsd init` — OTTO is now bootable from any directory, no preflight required.',
+            '`requireProject` guard so gsd commands fail with a clear message when run outside a project.',
+        ],
+        fixed: [
+            'RTK opt-in is now read from user settings before project preferences (correct precedence).',
+            '`loadProjectGSDPreferences` returns null outside projects instead of throwing.',
+        ],
+        notes: [
+            'This release completes the hard-fork rebrand to OTTO: workspace scope, config dirs, brand colors, and patches now flow from `piConfig` as the single source of truth.',
+        ],
+    },
+    {
+        version: '1.0.0',
+        date: '2026-05-22',
+        headline: 'Project baseline.',
+        changed: [
+            'Started the `open-gsd/gsd-pi` development baseline.',
+            'Reset first-party package versions to `1.0.0`.',
+            'Cleaned public README and changelog history for the new project ownership.',
+        ],
+        notes: [
+            'Historical release notes are archived outside the active changelog.',
+            'New release notes should be added above this entry under `Unreleased`.',
+        ],
+    },
+];
+export function getLatestRelease() {
+    return RELEASE_NOTES[0];
+}
+export function findReleaseByVersion(version) {
+    const normalized = version.trim().replace(/^v/, "");
+    return RELEASE_NOTES.find((r) => r.version === normalized);
+}
+export function countItems(release) {
+    return ((release.added?.length ?? 0) +
+        (release.fixed?.length ?? 0) +
+        (release.changed?.length ?? 0) +
+        (release.notes?.length ?? 0));
+}

package/dist/resources/extensions/otto/commands/release-notes/command.js

@@ -0,0 +1,114 @@
+/**
+ * /release-notes — browse OTTO's "what's new" history.
+ *
+ * Usage:
+ *   /release-notes               → interactive selector across all versions
+ *   /release-notes <version>     → show that version directly (e.g. 1.0.7 or v1.0.7)
+ *   /release-notes latest        → alias for the newest version
+ *   /release-notes list          → non-interactive index (one line per version)
+ *
+ * UX modelled after Claude Code's /release-notes: a top-level list with a
+ * count badge per entry, then full detail on selection. Output is written
+ * to stdout so it lands in the chat transcript.
+ */
+import { RELEASE_NOTES, countItems, findReleaseByVersion, getLatestRelease, } from "./_data.js";
+const USAGE = `Usage:
+  /release-notes               Browse all releases interactively
+  /release-notes <version>     Show a specific release (e.g. 1.0.7)
+  /release-notes latest        Show the newest release
+  /release-notes list          Print a one-line index of every release`;
+function formatSelectorLabel(release) {
+    const total = countItems(release);
+    const headline = release.headline ? ` — ${release.headline}` : "";
+    const badge = total === 1 ? "1 item" : `${total} items`;
+    return `v${release.version}  (${release.date}, ${badge})${headline}`;
+}
+function renderSection(title, items) {
+    if (!items || items.length === 0)
+        return "";
+    const bulleted = items.map((line) => `- ${line}`).join("\n");
+    return `\n### ${title}\n${bulleted}\n`;
+}
+function renderRelease(release) {
+    const header = `# OTTO v${release.version} — ${release.date}`;
+    const headline = release.headline ? `\n_${release.headline}_\n` : "";
+    const body = [
+        renderSection("Added", release.added),
+        renderSection("Fixed", release.fixed),
+        renderSection("Changed", release.changed),
+        renderSection("Notes", release.notes),
+    ].join("");
+    const tail = `\n---\n${RELEASE_NOTES.length} releases tracked. Use \`/release-notes\` to browse, \`/release-notes <version>\` for any other release.`;
+    return `${header}${headline}${body}${tail}\n`;
+}
+function renderIndex() {
+    const rows = RELEASE_NOTES.map((r) => {
+        const total = countItems(r);
+        const badge = total === 1 ? "1 item" : `${total} items`;
+        const headline = r.headline ? ` — ${r.headline}` : "";
+        return `- v${r.version}  (${r.date}, ${badge})${headline}`;
+    }).join("\n");
+    return `# OTTO release index\n\n${rows}\n\nView any release with \`/release-notes <version>\`.\n`;
+}
+function findByVersionToken(token) {
+    if (token === "latest")
+        return getLatestRelease();
+    return findReleaseByVersion(token);
+}
+const CUSTOM_TYPE = "otto-release-notes";
+function postToChat(pi, content) {
+    // Routes through the session's custom-message stream so the content lands
+    // inside a chat response card instead of stdout (which the TUI redraws on
+    // top of, producing the interleaved-text bug from the first cut).
+    pi.sendMessage({ customType: CUSTOM_TYPE, content, display: true });
+}
+export function registerReleaseNotesCommand(pi) {
+    pi.registerCommand("release-notes", {
+        description: "Browse OTTO release notes — what's new, fixed, and changed",
+        handler: async (args, ctx) => {
+            const trimmed = args.trim();
+            // ── Direct version / latest ──────────────────────────────────
+            if (trimmed && trimmed !== "list") {
+                const match = findByVersionToken(trimmed);
+                if (!match) {
+                    postToChat(pi, `**No release found for \`${trimmed}\`**\n\nKnown versions: ${RELEASE_NOTES.map((r) => `v${r.version}`).join(", ")}`);
+                    return;
+                }
+                postToChat(pi, renderRelease(match));
+                return;
+            }
+            // ── Index dump ───────────────────────────────────────────────
+            if (trimmed === "list") {
+                postToChat(pi, renderIndex());
+                return;
+            }
+            // ── Interactive selector ─────────────────────────────────────
+            if (!ctx.hasUI || typeof ctx.ui?.select !== "function") {
+                // Headless / piped: print to stdout (no TUI to corrupt) so the
+                // content is still recoverable in scripted / mcp / rpc modes.
+                process.stdout.write(renderRelease(getLatestRelease()));
+                process.stdout.write("\n" + renderIndex());
+                return;
+            }
+            const options = RELEASE_NOTES.map(formatSelectorLabel);
+            let pick;
+            try {
+                pick = await ctx.ui.select(`OTTO release notes — ${RELEASE_NOTES.length} versions available`, options);
+            }
+            catch (err) {
+                postToChat(pi, `**release-notes error:** ${err.message}\n\n${USAGE}`);
+                return;
+            }
+            if (!pick)
+                return; // user cancelled — nothing to do
+            const picked = Array.isArray(pick) ? pick[0] : pick;
+            const index = options.indexOf(picked);
+            const release = index >= 0 ? RELEASE_NOTES[index] : undefined;
+            if (!release) {
+                postToChat(pi, `**No match for** \`${picked}\``);
+                return;
+            }
+            postToChat(pi, renderRelease(release));
+        },
+    });
+}

package/dist/resources/extensions/otto/extension-manifest.json

@@ -16,6 +16,6 @@
       "otto__import_flow",
       "otto__smoke_test_flow"
     ],
-    "commands": ["langflow", "build-flow", "prompt-engineer"]
+    "commands": ["langflow", "build-flow", "prompt-engineer", "release-notes"]
   }
 }

package/dist/resources/extensions/otto/index.js

@@ -19,6 +19,7 @@ import { registerOttoTools } from "./tools/_loader.js";
 import { executeLangFlowTool } from "./tools/langflow.js";
 import { registerBuildFlowCommand } from "./commands/build-flow/command.js";
 import { registerPromptEngineerCommand } from "./commands/prompt-engineer/command.js";
+import { registerReleaseNotesCommand } from "./commands/release-notes/command.js";
 import { parseLangFlowNaturalLanguage } from "./commands/langflow/natural-language.js";
 const _here = dirname(fileURLToPath(import.meta.url));
 const FLOW_TRIGGERS_DIR = join(_here, "commands", "flow-triggers");
@@ -182,6 +183,8 @@ export default function Otto(pi) {
     registerBuildFlowCommand(pi);
     // ── Register /otto prompt-engineer slash command (Phase 5) ──
     registerPromptEngineerCommand(pi);
+    // ── Register /release-notes slash command ──
+    registerReleaseNotesCommand(pi);
     // ── Load and register flow-trigger slash commands ──
     // Fire-and-forget. Pi's command registry is dynamic; late registrations work.
     loadFlowTriggers(FLOW_TRIGGERS_DIR)

package/dist/seed-defaults.d.ts

@@ -0,0 +1,50 @@
+export interface DefaultPackage {
+    /** Install source as parsed by package-manager (npm:..., git:..., ./...). */
+    source: string;
+    /** Short display name shown in onboarding (without the npm: prefix). */
+    name: string;
+    /** One-line blurb shown as a hint in onboarding's checkbox UI. */
+    description: string;
+    /**
+     * When set, this substring is appended to settings.quietExtensions on first
+     * seed so the package's session_start banner is silenced by default. Tracked
+     * in settings.seededQuietPatterns so a user who removes the pattern from
+     * quietExtensions is not overridden on subsequent launches.
+     *
+     * Use for packages whose maintainers emit unactionable startup chatter
+     * (e.g. pi-notion's `[notion] MCP config found …`).
+     */
+    quietPattern?: string;
+}
+export interface DefaultPackageCategory {
+    /** Stable id stored in settings.json:enabledDefaultCategories (future). */
+    id: string;
+    /** Display label shown in the category multiselect. */
+    label: string;
+    /** One-line description shown as a hint on the category multiselect. */
+    description: string;
+    /** Packages included in this category. May be empty for placeholder personas. */
+    packages: DefaultPackage[];
+}
+export declare const OTTO_DEFAULT_PACKAGE_CATEGORIES: readonly DefaultPackageCategory[];
+/**
+ * Flat, deduplicated list of every default source across all categories. Used
+ * as the back-compat seeding set when no `enabledDefaultPackages` filter is
+ * stored (the flag/env users who never went through the categorical
+ * onboarding). The `Set` dedupes when the same source legitimately appears in
+ * multiple categories (e.g. a productivity tool that's also useful for devs).
+ */
+export declare const OTTO_DEFAULT_PACKAGES: readonly string[];
+/** Categories with at least one package — the only ones worth showing in UI. */
+export declare function getOnboardableCategories(): DefaultPackageCategory[];
+export interface SeedFlags {
+    withDefaults?: boolean;
+    noSeedDefaults?: boolean;
+}
+export declare function shouldSeedDefaults(flags: SeedFlags, settingValue: boolean | undefined, env?: NodeJS.ProcessEnv): boolean;
+/**
+ * Resolves the effective set of sources to seed given the user's enabledDefaultPackages
+ * preference. See the file header for semantics of undefined / [] / [...].
+ */
+export declare function resolveEnabledDefaults(enabled: string[] | undefined, all?: readonly string[]): string[];
+export declare function maybeSeedDefaultPackages(flags: SeedFlags, agentDirPath: string): Promise<void>;