chutes-build 1.2.4 → 1.3.1

package/CHANGELOG.md

@@ -4,6 +4,35 @@ All notable changes to Chutes Build will be documented in this file. The format
 is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this
 project follows [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.3.1] - 2026-08-30
+
+### Changed
+
+- **The heavy tool schemas are compact by default.** `browser`, `spawn_subagent`, and `workflow` now export schemas without their parameter-by-parameter prose descriptions; names, types, enum values, and required fields are unchanged, and call validation still uses the canonical schema. This drops the per-turn tool-catalog fixed cost from ~11,170 to ~9,880 estimated tokens.
+
+### Fixed
+
+- **Generated shell completions no longer leak the upstream binary name.** The zsh generator embeds subcommand doc comments, and an MCP argument comment still said `grok`; all four generators now produce scripts with zero upstream-name occurrences.
+- **The encrypted agent prompt matches the current prompt templates again.** The 1.0.8 session port reverted `prompt_encrypted.rs` to stale ciphertext; the fork's template encryption generator is restored, so the staleness gate is reproducible instead of hand-patched.
+- **Windows session bookkeeping no longer reports phantom flush failures.** The durable summary sync reopened `summary.json` read-only, and Windows refuses `FlushFileBuffers` on a write-less handle, so cwd-switch and rewind bookkeeping failed even after the append had committed.
+
+## [1.3.0] - 2026-08-25
+
+### Added
+
+- **Opt-in model switching around plan mode.** `[models] plan_model` switches to a stronger model when plan mode engages and `[models] build_model` back to a cheaper one when it exits; each direction fires only when its key is set, a key that resolves to nothing logs a warning and keeps the current model, and the mode change itself never fails because of it. Client-driven transitions (Shift+Tab, `/plan`, the toggle ext method) are covered; approving an `exit_plan_mode` proposal keeps the current model.
+
+### Changed
+
+- **The runtime is synced to upstream `1.0.8` (`07b2f714`).** Ported by hand per area: MCP elicitation, shared HTTP client reuse, task-tool capability modes, kitty keyboard protocol, NFS fast-worktree backend, scheduled-task management, worktree detach/salvage, a new `xai-grok-status-line` crate, session-events, auth-manager bounded refresh, and the restructured agent tool registration.
+- **The advisor subagent is removed.** The always-registered read-only reviewer (and its `/advisor` command writing untyped config tables) was an upstream concept this fork had no Chutes reason to keep; removing it shrinks the task-tool catalogue advertised to every model. Historical mentions in past changelog entries are records of past states.
+- **Telemetry deadening verified end-to-end.** The external OTEL stream stays compile-time inert — `init` is a no-op, `is_active()` is constantly false, no exporter is ever constructed, and the silence tests pass regardless of environment or remote settings.
+
+### Fixed
+
+- **A fresh install is never sent through xAI's OAuth device flow.** The ported auth default constructed a hardcoded provider with the upstream issuer, so an unconfigured install opened `https://accounts.x.ai/oauth2/device` even with `CHUTES_API_KEY` present; the default now creates a provider only from explicit configuration, and the API-key scope constant returned to its Chutes value.
+- **Tool calls a model emits as text are recovered again.** The upstream session port silently dropped the recovery shipped in 1.2.x — the module stayed in the tree unreferenced, compiling to nothing; the declaration, implementation, and call site are restored, and a new checker makes that failure mode impossible to miss.
+
 ## [1.2.4] - 2026-08-24
 
 ### Fixed

package/PRIVACY.md

@@ -4,6 +4,11 @@ Chutes Build is privacy-first: it collects no product analytics, emits no
 telemetry, performs no remote error reporting, and does not upload traces or
 sessions. There is no hidden opt-in or installation identifier.
 
+The external OTEL telemetry stream is **deadened at compile time**: `init` is
+a no-op, `is_active()` is always `false`, and no OTLP exporter is ever
+constructed. No data can leave the process via this path regardless of any
+environment variable or remote setting.
+
 ## Local data
 
 The CLI may store configuration, an encrypted or OS-protected credential entry

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "chutes-build",
-  "version": "1.2.4",
+  "version": "1.3.1",
   "description": "Privacy-first, open-source coding agent for the Chutes ecosystem",
   "license": "Apache-2.0",
   "author": "Michael Gasperini (Mikesoft)",
@@ -37,12 +37,12 @@
     "check": "npm test && npm run verify:release && npm pack --dry-run"
   },
   "optionalDependencies": {
-    "chutes-build-darwin-arm64": "1.2.4",
-    "chutes-build-darwin-x64": "1.2.4",
-    "chutes-build-linux-arm64-gnu": "1.2.4",
-    "chutes-build-linux-x64-gnu": "1.2.4",
-    "chutes-build-win32-arm64": "1.2.4",
-    "chutes-build-win32-x64": "1.2.4"
+    "chutes-build-darwin-arm64": "1.3.1",
+    "chutes-build-darwin-x64": "1.3.1",
+    "chutes-build-linux-arm64-gnu": "1.3.1",
+    "chutes-build-linux-x64-gnu": "1.3.1",
+    "chutes-build-win32-arm64": "1.3.1",
+    "chutes-build-win32-x64": "1.3.1"
   },
   "keywords": [
     "ai",