altimate-code 0.10.0 → 0.11.0-beta.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md CHANGED
@@ -5,6 +5,47 @@ All notable changes to this project will be documented in this file.
5
5
  The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
6
6
  and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
7
7
 
8
+ ## [0.11.0-beta.3] - 2026-09-08
9
+
10
+ > **Beta channel release.** Publishes to the npm `beta` dist-tag; `latest` (0.10.0) is unaffected. Install: `npm i -g @altimateai/altimate-code@beta`.
11
+
12
+ ### Fixed
13
+
14
+ - **Altimate Base "request too large" errors are legible again.** When an oversized request is rejected at the gateway edge with a raw HTML `413` (rather than a JSON error), the CLI now surfaces the friendly "request too large — start a new session or shorten it" guidance on any `413` regardless of body shape, instead of a generic fallback. (#1256)
15
+ - **`altimate-free` now sets a client-side header timeout** (matching the `openai` provider's default), so a hung gateway can no longer hang the CLI indefinitely. (#1256)
16
+ - **Clear error on non-JSON API responses.** The SDK client no longer crashes when an API returns a non-JSON body (e.g. an HTML error page); it surfaces a clear, actionable error instead. (#1093)
17
+
18
+ ## [0.11.0-beta.1] - 2026-09-07
19
+
20
+ > **Beta channel release.** Publishes to the npm `beta` dist-tag; `latest` (0.10.0) is unaffected. Install: `npm i -g @altimateai/altimate-code@beta`.
21
+
22
+ ### Added
23
+
24
+ - **Altimate Base — a free, no-signup, no-API-key hosted model.** Choose it from the first-run picker, `/connect`, or `/model`. Rate limited; requests and responses are logged and may be used to improve Altimate's products, linked to a persistent per-installation identifier (**pseudonymous, not anonymous**) — avoid sending secrets or confidential code. The consent dialog defaults to **No**; nothing is sent until you accept. `ALTIMATE_BASE_GATEWAY_URL` lets operators point it at a self-hosted gateway (HTTPS required, no embedded credentials). (#1199)
25
+ - **Five deterministic completion-gate validators** (`dbt-build-green`, `dbt-nothing-built`, `dbt-deliverable-names`, `dbt-incremental-config`, `dbt-dialect-guard`) that refuse to terminate a session on a broken, vacuous, or misnamed dbt result. **Opt-in, shadow-mode only** for now (`ALTIMATE_VALIDATORS_SHADOW=1`); off by default. (#1175)
26
+
27
+ ### Changed
28
+
29
+ - **Big Pickle retired** as a new-user option. Existing users are detected on launch and offered Altimate Base through the consent gate (not silently migrated); declining routes to the model picker. (#1199)
30
+ - **Agent `data-qa` renamed to `analyst`**, now the documented "ask questions about your data" agent. Existing `default_agent: "data-qa"` configs keep working — they fall back to `analyst` with a one-time notice. (#1239)
31
+ - Builder prompt split into an invariant core plus named packs (byte-identical assembly), with an opt-in data-qa profile. (#1217)
32
+
33
+ ### Breaking Changes
34
+
35
+ - **DuckDB and SQLite connections now require an explicit `path`.** A missing `path` used to silently default to an in-memory store — which could read a populated on-disk store as empty — and now errors. Set `"path": ":memory:"` if you want in-memory behavior. See [warehouses.md](docs/docs/configure/warehouses.md). (#1204)
36
+
37
+ ### Fixed
38
+
39
+ - **Ledger redaction** — a `curl -u user:pass` in tool output could leak unredacted into the compaction ledger after #1117's path-masking ate the `curl` token; redaction now derives curl context from the pre-mask string independently. (#1246)
40
+ - **Telemetry error text** now masks filesystem paths (home directories, cloud URIs, Windows/UNC). (#1117)
41
+ - **Safety threat messages** no longer echo raw non-SQL content that could resurrect a redacted secret. (#1111)
42
+ - `--dir` no longer reads a populated warehouse store as empty. (#1204)
43
+ - Drivers: load from the location the failing runtime named; concurrency-safe installs; a 2s deadline no longer fails healthy DuckDB stores; a broken client now says so. (#1201, #1198)
44
+ - Recovered driver-e2e review debt — false-skip, `file:` URI checks, Windows paths, telemetry, docs. (#1238)
45
+ - `auth login` accepts a provider id and diagnoses plan/account on a Codex 400. (#1181)
46
+ - Skills no longer walk the whole tree to answer "does any file match". (#1213)
47
+ - Main CI `dbt-tools E2E` job un-broken — restored the missing `--version` fallback that killed the setup script under `set -euo pipefail`. (#1252)
48
+
8
49
  ## [0.10.0] - 2026-09-02
9
50
 
10
51
  Workspaces grow from a memory-only pilot into a working surface: a bound workspace now supplies its custom skills, attaches its own engine, and routes warehouse tools through it. Alongside that, a run no longer dies when one oversized tool result overflows the window, and the ChatGPT-subscription model picker was rebuilt against what the backend actually serves. Everything workspace-related stays behind `ALTIMATE_WORKSPACE=1` and is invisible to anyone not opted in — but the harness-reliability changes are the largest part of this release and apply to **every** session, opted in or not.
package/README.md CHANGED
@@ -52,12 +52,16 @@ installing it in your own repository.
52
52
 
53
53
  Then — in order:
54
54
 
55
- **Step 1: Configure your LLM provider** (required before anything works):
55
+ **Step 1: Choose an LLM provider** (required before anything works):
56
56
  ```bash
57
57
  altimate # Launch the TUI
58
- /connect # Interactive setup — choose your provider and enter your API key
58
+ /connect # Interactive setup — choose Altimate Base, sign in, or bring an API key
59
59
  ```
60
60
 
61
+ Altimate Base is the free, no-signup option. It is rate limited, and its requests and responses
62
+ are logged and may be used to improve Altimate products and services; do not send secrets or
63
+ confidential code. The setup dialog shows this disclosure and defaults to **No** before registering.
64
+
61
65
  Or set an environment variable directly:
62
66
  ```bash
63
67
  export ANTHROPIC_API_KEY=your_key # Anthropic Claude
package/package.json CHANGED
@@ -14,20 +14,20 @@
14
14
  "scripts": {
15
15
  "postinstall": "bun ./postinstall.mjs || node ./postinstall.mjs"
16
16
  },
17
- "version": "0.10.0",
17
+ "version": "0.11.0-beta.3",
18
18
  "license": "MIT",
19
19
  "dependencies": {
20
20
  "@altimateai/altimate-core": "0.7.0"
21
21
  },
22
22
  "optionalDependencies": {
23
- "@altimateai/altimate-code-windows-x64-baseline": "0.10.0",
24
- "@altimateai/altimate-code-linux-arm64": "0.10.0",
25
- "@altimateai/altimate-code-darwin-x64": "0.10.0",
26
- "@altimateai/altimate-code-linux-x64-baseline": "0.10.0",
27
- "@altimateai/altimate-code-darwin-arm64": "0.10.0",
28
- "@altimateai/altimate-code-linux-x64": "0.10.0",
29
- "@altimateai/altimate-code-darwin-x64-baseline": "0.10.0",
30
- "@altimateai/altimate-code-windows-x64": "0.10.0"
23
+ "@altimateai/altimate-code-darwin-x64-baseline": "0.11.0-beta.3",
24
+ "@altimateai/altimate-code-linux-x64-baseline": "0.11.0-beta.3",
25
+ "@altimateai/altimate-code-linux-arm64": "0.11.0-beta.3",
26
+ "@altimateai/altimate-code-windows-x64-baseline": "0.11.0-beta.3",
27
+ "@altimateai/altimate-code-darwin-arm64": "0.11.0-beta.3",
28
+ "@altimateai/altimate-code-darwin-x64": "0.11.0-beta.3",
29
+ "@altimateai/altimate-code-windows-x64": "0.11.0-beta.3",
30
+ "@altimateai/altimate-code-linux-x64": "0.11.0-beta.3"
31
31
  },
32
32
  "peerDependencies": {
33
33
  "pg": ">=8",