chutes-build 0.3.0 → 0.4.0

package/PRIVACY.md

@@ -8,13 +8,18 @@ sessions. There is no hidden opt-in or installation identifier.
 
 The CLI may store configuration, an encrypted or OS-protected credential entry
 where supported, sessions, logs, local exports, and user memory under
-`~/.chutes-build` (or `CHUTES_BUILD_HOME`). Project memory is maintained in
-`memories.md`. Known secret formats are filtered before memory writes, but users
-should still avoid entering secrets into prompts.
+`~/.chutes-build` (or `CHUTES_BUILD_HOME`). Plugins, user roles/personas, and
+managed bundled-agent definitions use that same root; setting
+`CHUTES_BUILD_HOME` does not fall back to those resources in the default home.
+Project memory is maintained in `memories.md`. Known secret formats are filtered
+before memory writes, but users should still avoid entering secrets into
+prompts.
 
 `chutes-build trace` always creates a local archive. Remote session sharing and
-upstream managed configuration commands are disabled. Automatic update checks
-are disabled.
+search, remote workspace exposure, upstream managed configuration commands, and
+automatic update checks are disabled. Session storage is forced to local mode
+even if inherited write-back settings are present. Updates are installed
+manually.
 
 Sampling diagnostics are disabled by default. When explicitly enabled with
 `--log-sampling` or `CHUTES_BUILD_LOG_SAMPLING=1`, the local
@@ -34,22 +39,38 @@ remote preview, thumbnail, codec, waveform, or playback service is used.
 
 ## Outbound connections
 
-Connections occur only when required by an explicit feature:
+Connections occur when required by startup model/account discovery or an
+explicit hosted feature:
 
 | Destination | Purpose | Data sent |
 | --- | --- | --- |
-| `model-router-ten.vercel.app` | default Chutes-compatible model routing | prompts, selected tool schemas, model responses, Chutes API credential |
-| `llm.chutes.ai` | Chutes inference and model catalog | prompts/model requests and Chutes API credential |
-| `api.chutes.ai` | Chutes account and media APIs | requested media parameters/assets and Chutes API credential |
+| `model-router-ten.vercel.app` | default Chutes-compatible model routing | prompts, selected context/tool schemas, model inputs, Chutes API credential |
+| `llm.chutes.ai` | Chutes inference, model catalog, semantic memory, voice transcription, OCR, and vision | model requests and the selected inputs: prompts/context, memory chunks, audio, images, PDF pages, or sampled video frames; Chutes API credential |
+| `api.chutes.ai` | Chutes account and media APIs | account requests, media parameters and user-selected media assets; Chutes API credential |
+| `api.chutes.ai/idp` | OAuth sign-in and refresh | authorization code or refresh token, PKCE verifier, public/custom client ID, and a custom client secret only when configured |
 | `chutes.ai/docs`, `chutes.ai/news` | mandatory primary-source verification for Chutes topics | requested official page URLs; no Chutes API credential |
 | `context7.com` | current library documentation | library names and documentation queries; credentials and known secrets are rejected |
 | DuckDuckGo or Brave Search | web search | search query; Brave receives only its dedicated key |
 | User-selected web pages | web fetch/browser automation | normal HTTP/browser traffic required by the requested action |
 | User-configured MCP servers/plugins | external tools | data required by the selected tool and its own configuration |
 
-The Chutes API credential is accepted only for allowlisted Chutes and router
-hosts. It is never reused for web search, Context7, arbitrary websites, MCP
-servers, or browser automation.
+The ambient Chutes API credential and cached Chutes session token are accepted
+only for allowlisted HTTPS Chutes and router hosts. They are never reused for a
+custom endpoint, web search, Context7, arbitrary websites, MCP servers, or
+browser automation. Custom inference models must declare a dedicated
+`api_key`/`env_key`; a custom model-catalog endpoint uses
+`CHUTES_MODELS_API_KEY`.
+
+Model catalog and account usage requests may run during startup after
+authentication. Prompts and repository content are not sent by those discovery
+requests. They leave the machine only in a model/tool request that needs them.
+
+Semantic memory is local at rest, but hybrid recall uses a Chutes-hosted
+embedding model and therefore sends the selected memory text chunks to Chutes.
+Use `--no-memory` to disable both memory recall and writes for that session.
+Voice capture is manual and sends the recorded audio only after activation.
+OCR, vision, video analysis, and media generation send only the inputs selected
+for that operation.
 
 For Chutes research, the agent prefers direct official pages and indexes over a
 broad search query. Search and page requests must not include credentials,
@@ -67,6 +88,12 @@ Browser actions can still disclose data to websites the user asks the agent to
 visit. Review navigation, form submissions, uploads, and authenticated actions
 before approval.
 
+`chutes-build mcp list --json` intentionally reports configuration structure,
+not credential material: environment/header values and URL credentials, query,
+and fragment components are redacted. MCP servers and plugins still receive
+the data required by tools the user enables, so their own privacy policies
+apply.
+
 ## Disabling stateful features
 
 - Start with `--no-memory` to disable agent memory for a session.

package/README.md

@@ -11,7 +11,7 @@
 One CLI, no compromises: an interactive terminal UI, a full coding agent
 runtime, native Chutes model routing, parallel subagents, multimodal
 generation, web research, browser automation, and local memory — with
-telemetry, remote trace upload, and phone-home update checks off by default.
+telemetry, remote trace upload, and phone-home update checks disabled.
 
 ![Chutes Build terminal UI](assets/chutes/screenshot/chutes-build.png)
 
@@ -24,6 +24,7 @@ telemetry, remote trace upload, and phone-home update checks off by default.
 - [Quick start](#quick-start)
 - [Features](#features)
 - [Configuration](#configuration)
+- [CLI reference](#cli-reference)
 - [Privacy & security](#privacy--security)
 - [Project](#project)
 
@@ -31,7 +32,7 @@ telemetry, remote trace upload, and phone-home update checks off by default.
 
 - 🔒 **Privacy by construction** — telemetry, remote error reporting, automatic
   update checks, remote trace upload, and upstream session sharing are all
-  disabled by default.
+  disabled at the product-policy level.
 - ⚡ **Chutes-native inference** — live model discovery, `Auto (Chutes Router)`
   as the default, and automatic fallback when a model is temporarily
   unavailable.
@@ -111,7 +112,7 @@ chutes-build
 `Auto (Chutes Router)` is the first entry in the model picker and the default
 when no preference has been saved. Select a concrete model with `/model` or
 `chutes-build --model <model-id>`. Inspect the resolved catalog with
-`chutes-build models`.
+`chutes-build models` or machine-readable `chutes-build models --json`.
 
 ## Features
 
@@ -120,6 +121,10 @@ when no preference has been saved. Select a concrete model with `/model` or
 - **Coding agent runtime:** repository inspection, edits, shell commands,
   planning, goals, MCP servers, skills, sessions, worktrees, and permission
   controls inherited from the mature upstream runtime.
+- **Local session lifecycle:** list, search, resume, fork, export, trace, and
+  delete sessions without a remote registry. Machine-readable list/search
+  output is available with `--json`; destructive commands require confirmation
+  unless `--yes` is supplied.
 - **Advisor:** a read-only, on-demand reasoning agent that reviews plans,
   difficult decisions, blockers, and completion claims without taking over the
   executor loop. Reasons at maximum effort by default. `/advisor on|off`
@@ -165,14 +170,17 @@ when no preference has been saved. Select a concrete model with `/model` or
   treating directly relevant official pages as primary authority.
 - **Research and browser tools:** native web search (DuckDuckGo by default,
   optionally Brave) plus agentic Chrome/Edge control through a local DevTools
-  connection and an isolated temporary browser profile.
+  connection and an isolated temporary browser profile. Browser actions accept
+  either CSS selectors or the numeric element indices shown by snapshots.
 
 ### Memory & voice
 
 - **Local memory:** Chutes Build maintains a secret-filtered `memories.md` file
   and can be launched with `--no-memory` when a stateless session is preferred.
   Recall is hybrid by default — full-text search combined with semantic vector
-  search against a built-in Chutes-hosted embedding model.
+  search against a built-in Chutes-hosted embedding model. Semantic recall
+  sends the selected memory chunks to that Chutes embedding endpoint; use
+  `--no-memory` when this is not appropriate.
 - **Voice input:** hold-to-record dictation transcribes speech into the prompt
   box. Enabled by default; activation is always manual (mic icon, `/voice`, or
   Ctrl+Space) — Chutes Build never records without an explicit press.
@@ -182,11 +190,23 @@ when no preference has been saved. Select a concrete model with `/model` or
 ### Privacy by construction
 
 Telemetry, remote error reporting, automatic update checks, remote trace
-upload, and upstream session sharing are disabled. See
+upload, upstream session sharing, and remote workspace exposure are disabled.
+Updates are installed manually from npm or a release artifact. See
 [Privacy & security](#privacy--security) below for the full data boundary.
 
 ## Configuration
 
+### State root
+
+User state defaults to `~/.chutes-build`. Set `CHUTES_BUILD_HOME` to relocate
+the complete state tree, including configuration, credentials, sessions, logs,
+trace exports, plugins, user roles/personas, and the managed bundled-agent
+cache. Chutes Build does not combine roles or bundle data from the default home
+with a custom state root.
+
+Project-scoped `.chutes-build` directories remain inside their repositories and
+continue to take precedence over user and bundled agent definitions.
+
 ### Model selection, reasoning, and routing
 
 Auto sends `model-router` requests to the Chutes router endpoint, allowing the
@@ -216,6 +236,12 @@ Fallback happens only for transient availability/capability responses and only
 before response streaming begins. Chutes Build does not redirect requests or
 credentials to a non-Chutes inference endpoint.
 
+Ambient Chutes credentials are attached only to official Chutes/router
+endpoints. Custom inference models must declare their own `api_key` or
+`env_key`; a custom model-catalog endpoint uses the dedicated
+`CHUTES_MODELS_API_KEY`. Neither receives `CHUTES_API_KEY` or a cached Chutes
+session token implicitly.
+
 The inference client shares pooled HTTP connections, enables TCP no-delay, and
 forwards parsed SSE events without an application-level streaming buffer. Cold
 starts and model-side generation can still dominate latency. Auto is the
@@ -235,6 +261,25 @@ run `/usage` for every active window, percentage, and reset time. If aggregate
 quota usage is unavailable, the client falls back concurrently to the
 documented per-chute quota endpoints.
 
+### OAuth login (Sign in with Chutes)
+
+Pressing `l` at the welcome screen (or `/login`) runs a standard OAuth 2.0 +
+PKCE flow against Chutes' own identity provider. The built-in app is a public
+client and does not bundle or require a client secret. Custom confidential
+clients can be configured under
+[Chutes' developer settings](https://chutes.ai/app/api):
+
+```powershell
+$env:CHUTES_BUILD_OAUTH2_CLIENT_ID = "cid_..."
+$env:CHUTES_BUILD_OAUTH2_CLIENT_SECRET = "csc_..."   # only if your app has one
+chutes-build
+```
+
+Both variables are read from the environment and are never written to
+`config.toml` or any other file on disk. The custom secret is included in both
+the initial token exchange and refresh requests. `k` / `/apikey` (pasting a
+Chutes API key directly) needs no app registration.
+
 ### Optional web and browser configuration
 
 Web search uses DuckDuckGo without a dedicated key. For Brave Search:
@@ -267,14 +312,24 @@ limited to 512 MiB by default (`CHUTES_MAX_MEDIA_BYTES`, hard ceiling 2 GiB),
 while workspace inputs are limited to 64 MiB by default
 (`CHUTES_MAX_INPUT_ASSET_BYTES`, hard ceiling 512 MiB).
 
+## CLI reference
+
+The complete command and option reference is in
+[docs/cli-reference.md](docs/cli-reference.md). Interactive slash commands are
+documented in [docs/slash-commands.md](docs/slash-commands.md). Installed
+binaries remain authoritative for the exact version: use
+`chutes-build --help` and `chutes-build <command> --help`.
+
 ## Privacy & security
 
 ### Local data
 
 User-level state defaults to `~/.chutes-build` or the directory set in
 `CHUTES_BUILD_HOME`. Project memory is stored in `memories.md`. Configuration,
-sessions, logs, exports, and credentials remain local unless a tool action
-explicitly calls an external service.
+sessions, logs, exports, credentials, plugins, user roles/personas, and bundled
+agent definitions remain local. Prompts, selected repository content, memory
+embeddings, voice recordings, OCR/media inputs, and browser traffic leave the
+machine only when their corresponding hosted feature is invoked.
 
 See [PRIVACY.md](PRIVACY.md) for the exact network and data boundaries.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "chutes-build",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "Privacy-first coding agent optimized for the Chutes ecosystem",
   "license": "Apache-2.0",
   "author": "Michael Gasperini (Mikesoft)",
@@ -34,12 +34,12 @@
     "verify:release": "node npm/scripts/verify-release.mjs"
   },
   "optionalDependencies": {
-    "chutes-build-darwin-arm64": "0.3.0",
-    "chutes-build-darwin-x64": "0.3.0",
-    "chutes-build-linux-arm64-gnu": "0.3.0",
-    "chutes-build-linux-x64-gnu": "0.3.0",
-    "chutes-build-win32-arm64": "0.3.0",
-    "chutes-build-win32-x64": "0.3.0"
+    "chutes-build-darwin-arm64": "0.4.0",
+    "chutes-build-darwin-x64": "0.4.0",
+    "chutes-build-linux-arm64-gnu": "0.4.0",
+    "chutes-build-linux-x64-gnu": "0.4.0",
+    "chutes-build-win32-arm64": "0.4.0",
+    "chutes-build-win32-x64": "0.4.0"
   },
   "keywords": [
     "ai",