@cmetech/otto 1.0.8 → 1.0.9

package/packages/pi-tui/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@otto/pi-tui",
-  "version": "1.0.8",
+  "version": "1.0.9",
   "description": "Terminal User Interface library (vendored from pi-mono)",
   "type": "module",
   "otto": {

package/packages/rpc-client/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@otto-build/rpc-client",
-  "version": "1.0.8",
+  "version": "1.0.9",
   "description": "Standalone RPC client SDK for OTTO — zero internal dependencies",
   "license": "MIT",
   "otto": {
@@ -34,7 +34,7 @@
     "test": "node --test dist/rpc-client.test.js"
   },
   "dependencies": {
-    "@otto-build/contracts": "^1.0.8"
+    "@otto-build/contracts": "^1.0.9"
   },
   "engines": {
     "node": ">=22.0.0"

package/pkg/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@loop24/client",
-  "version": "1.0.8",
+  "version": "1.0.9",
   "piConfig": {
     "_comment": "AUTO-SYNCED from root package.json by scripts/sync-piconfig.mjs (runs on prebuild). Do not edit this block directly — edit root package.json and re-run `npm run build` or `npm run sync-piconfig`.",
     "name": "otto",

package/src/resources/extensions/otto/commands/release-notes/_data.ts

@@ -0,0 +1,171 @@
+// AUTO-GENERATED — DO NOT EDIT.
+// Source: CHANGELOG.md  (regenerated by scripts/sync-release-notes.mjs on prebuild)
+//
+// To add or correct release notes, edit CHANGELOG.md and rebuild. Editing this
+// file directly will be clobbered on the next build.
+
+export interface ReleaseNote {
+	version: string;
+	date: string;
+	headline?: string;
+	added?: string[];
+	fixed?: string[];
+	changed?: string[];
+	notes?: string[];
+}
+
+export const RELEASE_NOTES: ReleaseNote[] = [
+	{
+		version: '1.0.9',
+		date: '2026-05-29',
+		headline: 'Recommended packages, /release-notes, and quieter startup.',
+		added: [
+			'New `otto onboarding` subcommand — re-run the first-run wizard at any time to revisit LLM provider, web search, remote questions, tool keys, or recommended packages.',
+			'New `/release-notes` slash command — browse what\'s new across releases. Type `/release-notes` for the interactive selector, `/release-notes <version>` for a specific release, `/release-notes list` for the index, or `/release-notes latest`.',
+			'Onboarding now offers a categorical "Recommended packages" step (Developer + Productivity personas) — see what each package does, untick anything you don\'t want, and OTTO installs them on launch.',
+			'Opt-in flags for recommended packages without re-running onboarding: `otto --with-defaults` (one launch), `OTTO_SEED_DEFAULTS=1` (env), or `seedDefaultsOnLaunch: true` in settings.json.',
+			'Opt-out controls with matching precedence: `otto --no-seed-defaults`, `OTTO_NO_SEED_DEFAULTS=1`, or `seedDefaultsOnLaunch: false`.',
+			'New `quietExtensions: string[]` setting — case-insensitive substring patterns matched against extension paths. Matching extensions have their `ui.notify` AND `console.log/warn/error/info` calls suppressed while their handlers are on the stack. Use to mute noisy session_start banners from extensions like piolium (`ui.notify`) or pi-notion (`console.log`). Concurrent non-quiet extensions are unaffected — suppression is scoped via AsyncLocalStorage to the quiet handler\'s own async context.',
+			'Known-noisy default packages are now silenced automatically: when onboarding seeds pi-notion (and any future curated package with a `quietPattern`), the pattern is added to `quietExtensions` on the same launch. Tracked via a new `seededQuietPatterns` settings key — if you remove a pattern from `quietExtensions`, OTTO will not re-add it.',
+			'New `OTTO_LOG_BLOCKED_COMMANDS=1` env to opt back into the `[resolve-config-value]` warning when actively debugging credential resolution.',
+		],
+		fixed: [
+			'Doubled OTTO header on first launch is gone: auto-resolve npm install no longer corrupts the TUI\'s alt-screen because install stdio is now captured instead of inherited. Explicit `otto install <pkg>` still streams live progress.',
+			'A bad source in `settings.packages` (typo, 404, dead git host) no longer crashes startup — the resolver now warns-and-continues per source with the underlying npm/git error attached to the message.',
+			'`/release-notes` content renders inside a chat response card via the session\'s custom-message stream instead of being interleaved with live TUI redraws.',
+			'`[resolve-config-value] Blocked disallowed command: "sh"` warning is suppressed by default; it was unactionable noise from extensions that intentionally register `!sh -lc ...` apiKey expressions.',
+		],
+		changed: [
+			'`CHANGELOG.md` is now the single source of truth for `/release-notes` data. `src/resources/extensions/otto/commands/release-notes/_data.ts` is regenerated by `scripts/sync-release-notes.mjs` on every prebuild.',
+			'Piolium dropped from the default Recommended Packages list. Existing installs are left alone; the zombie-resurrection guard prevents reseeding. `otto remove npm:@vigolium/piolium` to drop it.',
+		],
+		notes: [
+			'New `~/.otto/agent/settings.json` keys this release: `seedDefaultsOnLaunch`, `seededDefaults`, `enabledDefaultPackages`, `quietExtensions`. All optional; omit to inherit the defaults documented in `/release-notes`.',
+		],
+	},
+	{
+		version: '1.0.8',
+		date: '2026-05-28',
+		headline: 'Bundled-tools path fix.',
+		fixed: [
+			'Bundled ripgrep/fd now land in the correct destination so OTTO\'s managed tools resolve on fresh installs.',
+		],
+	},
+	{
+		version: '1.0.7',
+		date: '2026-05-28',
+		headline: 'OTTO brand cutover + bundled ripgrep & fd.',
+		added: [
+			'Ship ripgrep and fd with the OTTO binary — no separate install required for fast search and file discovery.',
+		],
+		changed: [
+			'README rebrand from prior identity to OTTO — clearer messaging for the v1.x line.',
+		],
+	},
+	{
+		version: '1.0.6',
+		date: '2026-05-27',
+		headline: 'uuid deprecation warning silenced.',
+		fixed: [
+			'Pin the uuid package override so Node no longer prints deprecation warnings during startup.',
+			'Native package repository.url corrected to cmetech/otto-cli for provenance verification.',
+		],
+		changed: [
+			'INSTALL.md expanded with macOS and Linux instructions.',
+		],
+	},
+	{
+		version: '1.0.5',
+		date: '2026-05-26',
+		headline: 'npm provenance enabled.',
+		added: [
+			'Publish with npm provenance — installs can now verify OTTO and engine packages came from this repo\'s CI.',
+		],
+		changed: [
+			'Native and main publish workflows split for trusted-publishing compatibility.',
+		],
+	},
+	{
+		version: '1.0.4',
+		date: '2026-05-24',
+		headline: 'Trusted publishing + gateway model discovery.',
+		added: [
+			'Gateway: discover available models exposed through `OTTO_GATEWAY_URL` so `/model` lists them out of the box.',
+			'Footer: GW status color decoupled from the routing label so health is glanceable.',
+		],
+		fixed: [
+			'LangFlow: surface timeouts on id lookups instead of hanging silently.',
+			'LangFlow: fail fast on auth failures with a clear actionable message.',
+		],
+		changed: [
+			'Release pipeline switched to npm trusted publishing by default.',
+			'Bumped CI npm-registry propagation retry budgets to reduce flaky publishes.',
+		],
+	},
+	{
+		version: '1.0.3',
+		date: '2026-05-23',
+		headline: 'TUI hardening + workflow command cleanup.',
+		fixed: [
+			'Hardened interactive TUI behavior across edge cases (resize, focus, paste).',
+			'Streamlined workflow command handling so dispatching is more predictable.',
+			'OTTO startup no longer requires you to be inside a project directory.',
+			'Workflow context no longer attempts to load from the home directory.',
+		],
+		changed: [
+			'Tightened gateway remote-tool handling.',
+			'Hardened npm publish and install tooling.',
+		],
+	},
+	{
+		version: '1.0.2',
+		date: '2026-05-23',
+		headline: 'Hard-fork runtime complete + LangFlow control plane.',
+		added: [
+			'LangFlow control plane: register, validate, smoke-test, and import flows from inside OTTO.',
+			'Codebase excavation workflows for spelunking unfamiliar repos.',
+			'Improved OTTO package management — install, remove, list, and update with provenance-aware paths.',
+			'Lazy `/gsd init` — OTTO is now bootable from any directory, no preflight required.',
+			'`requireProject` guard so gsd commands fail with a clear message when run outside a project.',
+		],
+		fixed: [
+			'RTK opt-in is now read from user settings before project preferences (correct precedence).',
+			'`loadProjectGSDPreferences` returns null outside projects instead of throwing.',
+		],
+		notes: [
+			'This release completes the hard-fork rebrand to OTTO: workspace scope, config dirs, brand colors, and patches now flow from `piConfig` as the single source of truth.',
+		],
+	},
+	{
+		version: '1.0.0',
+		date: '2026-05-22',
+		headline: 'Project baseline.',
+		changed: [
+			'Started the `open-gsd/gsd-pi` development baseline.',
+			'Reset first-party package versions to `1.0.0`.',
+			'Cleaned public README and changelog history for the new project ownership.',
+		],
+		notes: [
+			'Historical release notes are archived outside the active changelog.',
+			'New release notes should be added above this entry under `Unreleased`.',
+		],
+	},
+];
+
+export function getLatestRelease(): ReleaseNote {
+	return RELEASE_NOTES[0];
+}
+
+export function findReleaseByVersion(version: string): ReleaseNote | undefined {
+	const normalized = version.trim().replace(/^v/, "");
+	return RELEASE_NOTES.find((r) => r.version === normalized);
+}
+
+export function countItems(release: ReleaseNote): number {
+	return (
+		(release.added?.length ?? 0) +
+		(release.fixed?.length ?? 0) +
+		(release.changed?.length ?? 0) +
+		(release.notes?.length ?? 0)
+	);
+}

package/src/resources/extensions/otto/commands/release-notes/command.ts

@@ -0,0 +1,141 @@
+/**
+ * /release-notes — browse OTTO's "what's new" history.
+ *
+ * Usage:
+ *   /release-notes               → interactive selector across all versions
+ *   /release-notes <version>     → show that version directly (e.g. 1.0.7 or v1.0.7)
+ *   /release-notes latest        → alias for the newest version
+ *   /release-notes list          → non-interactive index (one line per version)
+ *
+ * UX modelled after Claude Code's /release-notes: a top-level list with a
+ * count badge per entry, then full detail on selection. Output is written
+ * to stdout so it lands in the chat transcript.
+ */
+
+import type { ExtensionAPI, ExtensionCommandContext } from "@otto/pi-coding-agent";
+import {
+	RELEASE_NOTES,
+	countItems,
+	findReleaseByVersion,
+	getLatestRelease,
+	type ReleaseNote,
+} from "./_data.js";
+
+const USAGE = `Usage:
+  /release-notes               Browse all releases interactively
+  /release-notes <version>     Show a specific release (e.g. 1.0.7)
+  /release-notes latest        Show the newest release
+  /release-notes list          Print a one-line index of every release`;
+
+function formatSelectorLabel(release: ReleaseNote): string {
+	const total = countItems(release);
+	const headline = release.headline ? ` — ${release.headline}` : "";
+	const badge = total === 1 ? "1 item" : `${total} items`;
+	return `v${release.version}  (${release.date}, ${badge})${headline}`;
+}
+
+function renderSection(title: string, items: string[] | undefined): string {
+	if (!items || items.length === 0) return "";
+	const bulleted = items.map((line) => `- ${line}`).join("\n");
+	return `\n### ${title}\n${bulleted}\n`;
+}
+
+function renderRelease(release: ReleaseNote): string {
+	const header = `# OTTO v${release.version} — ${release.date}`;
+	const headline = release.headline ? `\n_${release.headline}_\n` : "";
+	const body = [
+		renderSection("Added", release.added),
+		renderSection("Fixed", release.fixed),
+		renderSection("Changed", release.changed),
+		renderSection("Notes", release.notes),
+	].join("");
+	const tail = `\n---\n${RELEASE_NOTES.length} releases tracked. Use \`/release-notes\` to browse, \`/release-notes <version>\` for any other release.`;
+	return `${header}${headline}${body}${tail}\n`;
+}
+
+function renderIndex(): string {
+	const rows = RELEASE_NOTES.map((r) => {
+		const total = countItems(r);
+		const badge = total === 1 ? "1 item" : `${total} items`;
+		const headline = r.headline ? ` — ${r.headline}` : "";
+		return `- v${r.version}  (${r.date}, ${badge})${headline}`;
+	}).join("\n");
+	return `# OTTO release index\n\n${rows}\n\nView any release with \`/release-notes <version>\`.\n`;
+}
+
+function findByVersionToken(token: string): ReleaseNote | undefined {
+	if (token === "latest") return getLatestRelease();
+	return findReleaseByVersion(token);
+}
+
+const CUSTOM_TYPE = "otto-release-notes";
+
+function postToChat(pi: ExtensionAPI, content: string): void {
+	// Routes through the session's custom-message stream so the content lands
+	// inside a chat response card instead of stdout (which the TUI redraws on
+	// top of, producing the interleaved-text bug from the first cut).
+	pi.sendMessage({ customType: CUSTOM_TYPE, content, display: true });
+}
+
+export function registerReleaseNotesCommand(pi: ExtensionAPI): void {
+	pi.registerCommand("release-notes", {
+		description: "Browse OTTO release notes — what's new, fixed, and changed",
+		handler: async (args: string, ctx: ExtensionCommandContext) => {
+			const trimmed = args.trim();
+
+			// ── Direct version / latest ──────────────────────────────────
+			if (trimmed && trimmed !== "list") {
+				const match = findByVersionToken(trimmed);
+				if (!match) {
+					postToChat(
+						pi,
+						`**No release found for \`${trimmed}\`**\n\nKnown versions: ${RELEASE_NOTES.map((r) => `v${r.version}`).join(", ")}`,
+					);
+					return;
+				}
+				postToChat(pi, renderRelease(match));
+				return;
+			}
+
+			// ── Index dump ───────────────────────────────────────────────
+			if (trimmed === "list") {
+				postToChat(pi, renderIndex());
+				return;
+			}
+
+			// ── Interactive selector ─────────────────────────────────────
+			if (!ctx.hasUI || typeof ctx.ui?.select !== "function") {
+				// Headless / piped: print to stdout (no TUI to corrupt) so the
+				// content is still recoverable in scripted / mcp / rpc modes.
+				process.stdout.write(renderRelease(getLatestRelease()));
+				process.stdout.write("\n" + renderIndex());
+				return;
+			}
+
+			const options = RELEASE_NOTES.map(formatSelectorLabel);
+			let pick: string | string[] | undefined;
+			try {
+				pick = await ctx.ui.select(
+					`OTTO release notes — ${RELEASE_NOTES.length} versions available`,
+					options,
+				);
+			} catch (err) {
+				postToChat(
+					pi,
+					`**release-notes error:** ${(err as Error).message}\n\n${USAGE}`,
+				);
+				return;
+			}
+
+			if (!pick) return; // user cancelled — nothing to do
+			const picked = Array.isArray(pick) ? pick[0] : pick;
+			const index = options.indexOf(picked);
+			const release = index >= 0 ? RELEASE_NOTES[index] : undefined;
+			if (!release) {
+				postToChat(pi, `**No match for** \`${picked}\``);
+				return;
+			}
+			postToChat(pi, renderRelease(release));
+		},
+	});
+}

package/src/resources/extensions/otto/extension-manifest.json

@@ -16,6 +16,6 @@
       "otto__import_flow",
       "otto__smoke_test_flow"
     ],
-    "commands": ["langflow", "build-flow", "prompt-engineer"]
+    "commands": ["langflow", "build-flow", "prompt-engineer", "release-notes"]
   }
 }

package/src/resources/extensions/otto/index.ts

@@ -22,6 +22,7 @@ import { registerOttoTools } from "./tools/_loader.js";
 import { executeLangFlowTool } from "./tools/langflow.js";
 import { registerBuildFlowCommand } from "./commands/build-flow/command.js";
 import { registerPromptEngineerCommand } from "./commands/prompt-engineer/command.js";
+import { registerReleaseNotesCommand } from "./commands/release-notes/command.js";
 import { parseLangFlowNaturalLanguage } from "./commands/langflow/natural-language.js";
 
 const _here = dirname(fileURLToPath(import.meta.url));
@@ -186,6 +187,9 @@ export default function Otto(pi: ExtensionAPI): void {
   // ── Register /otto prompt-engineer slash command (Phase 5) ──
   registerPromptEngineerCommand(pi);
 
+  // ── Register /release-notes slash command ──
+  registerReleaseNotesCommand(pi);
+
   // ── Load and register flow-trigger slash commands ──
   // Fire-and-forget. Pi's command registry is dynamic; late registrations work.
   loadFlowTriggers(FLOW_TRIGGERS_DIR)