chutes-build 1.5.0 → 1.5.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/CHANGELOG.md +31 -0
  2. package/package.json +7 -7
package/CHANGELOG.md CHANGED
@@ -4,6 +4,37 @@ All notable changes to Chutes Build will be documented in this file. The format
4
4
  is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this
5
5
  project follows [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
6
6
 
7
+ ## [1.5.1] - 2026-10-15
8
+
9
+ ### Fixed
10
+
11
+ - **Authentication is API-key-only: no login screen, ever.** Starting without
12
+ a key showed a `Login with Chutes Build` option that could only fail with
13
+ `No OAuth2 configuration available. Run 'chutes-build login'`. The Chutes
14
+ distribution now withholds account login end to end: no login method is
15
+ advertised, no session (inline env or `auth.json`) is served or honored,
16
+ the blocked screen names the one credential (`CHUTES_API_KEY`) instead of
17
+ a dead login option, and `chutes-build login` / `logout` explain the
18
+ setup instead of starting an OAuth flow. All headless, ACP, and sampling
19
+ auth errors point at the API key too.
20
+ - **Terminal tab no longer says `grok`.** The TUI title string is now
21
+ `chutes-build` (or `<title> - chutes-build`), still within the 80-column
22
+ guarantee.
23
+
24
+ ### Tests
25
+
26
+ - New pins: API-key-only method advertising (with and without a key, across
27
+ all `preferred_method` pins), ignored legacy session env, ignored session
28
+ in the `models` banner precedence, and the blocked-screen API-key setup
29
+ text with no login option.
30
+ - Known limitation: the `xai-grok-login` session-store machinery tests
31
+ (~106: manager refresh/recovery, OIDC refresher, device code) fail in
32
+ this build because the login store they exercise is intentionally absent
33
+ — reads find nothing and writes are refused by the pre-existing
34
+ distribution gate. They are not run by CI; the injected-distribution
35
+ storage tests pin both sides (STOCK reads/writes, withheld finds
36
+ nothing and refuses writes).
37
+
7
38
  ## [1.5.0] - 2026-10-15
8
39
 
9
40
  ### Changed
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "chutes-build",
3
- "version": "1.5.0",
3
+ "version": "1.5.1",
4
4
  "description": "Privacy-first, open-source coding agent for the Chutes ecosystem",
5
5
  "license": "Apache-2.0",
6
6
  "author": "Michael Gasperini (Mikesoft)",
@@ -37,12 +37,12 @@
37
37
  "check": "npm test && npm run verify:release && npm pack --dry-run"
38
38
  },
39
39
  "optionalDependencies": {
40
- "chutes-build-darwin-arm64": "1.5.0",
41
- "chutes-build-darwin-x64": "1.5.0",
42
- "chutes-build-linux-arm64-gnu": "1.5.0",
43
- "chutes-build-linux-x64-gnu": "1.5.0",
44
- "chutes-build-win32-arm64": "1.5.0",
45
- "chutes-build-win32-x64": "1.5.0"
40
+ "chutes-build-darwin-arm64": "1.5.1",
41
+ "chutes-build-darwin-x64": "1.5.1",
42
+ "chutes-build-linux-arm64-gnu": "1.5.1",
43
+ "chutes-build-linux-x64-gnu": "1.5.1",
44
+ "chutes-build-win32-arm64": "1.5.1",
45
+ "chutes-build-win32-x64": "1.5.1"
46
46
  },
47
47
  "keywords": [
48
48
  "ai",