chutes-build 1.5.0 → 1.6.0

package/CHANGELOG.md

@@ -4,6 +4,72 @@ All notable changes to Chutes Build will be documented in this file. The format
 is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this
 project follows [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.6.0] - 2026-10-16
+
+### Added
+
+- **Account dashboard from the API key alone.** `chutes-build account` (human
+  or `--json`) and the TUI `/account` command show the key's Chutes plan,
+  quotas, usage windows, and PAYG credit, normalized from the account
+  endpoints. No key, no network, or an API error reports honestly instead of
+  rendering fake zeros.
+- **Inference speed after every turn.** Completed turns report output tokens
+  per API second next to the elapsed time (`Worked for 12.4s · 38.2 tok/s`),
+  the session usage totals gain a Speed row (per model when several were
+  used), and API timing persists in the usage file. Missing timing renders
+  no speed, never `0`.
+
+### Fixed
+
+- The re-authentication banner no longer points at `/login` (which this
+  build refuses): it names the rejected credential and the API key.
+- **Docs describe shipped behavior again** (spec §5.1): the opt-in browser
+  OAuth section, the `login --api-key-stdin` flag, and the login/logout
+  command rows — none of which can run in this build — are replaced with
+  the API-key-only truth, and `/account` is documented everywhere `/usage`
+  is.
+
+### Tests
+
+- New pins: account CLI dashboard (full and degraded), `/account` slash
+  dispatch plus the fetch/render/honest-error pipeline, the re-auth text
+  contract, and the `tok/s` footer plus Speed-row snapshots.
+- Known pre-existing: `manual_meta_false_clears_display_name` and
+  `manual_meta_false_empty_summary_keeps_leftover_auto_title` fail
+  identically on the clean tree (verified by stash comparison); unrelated
+  to this release.
+
+## [1.5.1] - 2026-10-15
+
+### Fixed
+
+- **Authentication is API-key-only: no login screen, ever.** Starting without
+  a key showed a `Login with Chutes Build` option that could only fail with
+  `No OAuth2 configuration available. Run 'chutes-build login'`. The Chutes
+  distribution now withholds account login end to end: no login method is
+  advertised, no session (inline env or `auth.json`) is served or honored,
+  the blocked screen names the one credential (`CHUTES_API_KEY`) instead of
+  a dead login option, and `chutes-build login` / `logout` explain the
+  setup instead of starting an OAuth flow. All headless, ACP, and sampling
+  auth errors point at the API key too.
+- **Terminal tab no longer says `grok`.** The TUI title string is now
+  `chutes-build` (or `<title> - chutes-build`), still within the 80-column
+  guarantee.
+
+### Tests
+
+- New pins: API-key-only method advertising (with and without a key, across
+  all `preferred_method` pins), ignored legacy session env, ignored session
+  in the `models` banner precedence, and the blocked-screen API-key setup
+  text with no login option.
+- Known limitation: the `xai-grok-login` session-store machinery tests
+  (~106: manager refresh/recovery, OIDC refresher, device code) fail in
+  this build because the login store they exercise is intentionally absent
+  — reads find nothing and writes are refused by the pre-existing
+  distribution gate. They are not run by CI; the injected-distribution
+  storage tests pin both sides (STOCK reads/writes, withheld finds
+  nothing and refuses writes).
+
 ## [1.5.0] - 2026-10-15
 
 ### Changed

package/README.md

@@ -109,10 +109,10 @@ cargo check --workspace                # fast validation
 ```
 
 The binary artifact is named `xai-grok-pager`; official installs ship it as
-`chutes-build`. On first launch it asks for a Chutes API key — the primary
-credential, created at [chutes.ai/app/api](https://chutes.ai/app/api) and also
-readable from `CHUTES_API_KEY`. Browser login is opt-in and needs an OAuth app you
-register yourself; see the
+`chutes-build`. The only credential is a Chutes API key, created at
+[chutes.ai/app/api](https://chutes.ai/app/api) and read from `CHUTES_API_KEY`.
+There is no browser login: `chutes-build login` only prints the API-key setup
+guidance; see the
 [authentication guide](crates/codegen/xai-grok-pager/docs/user-guide/02-authentication.md).
 
 ## Documentation

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "chutes-build",
-  "version": "1.5.0",
+  "version": "1.6.0",
   "description": "Privacy-first, open-source coding agent for the Chutes ecosystem",
   "license": "Apache-2.0",
   "author": "Michael Gasperini (Mikesoft)",
@@ -37,12 +37,12 @@
     "check": "npm test && npm run verify:release && npm pack --dry-run"
   },
   "optionalDependencies": {
-    "chutes-build-darwin-arm64": "1.5.0",
-    "chutes-build-darwin-x64": "1.5.0",
-    "chutes-build-linux-arm64-gnu": "1.5.0",
-    "chutes-build-linux-x64-gnu": "1.5.0",
-    "chutes-build-win32-arm64": "1.5.0",
-    "chutes-build-win32-x64": "1.5.0"
+    "chutes-build-darwin-arm64": "1.6.0",
+    "chutes-build-darwin-x64": "1.6.0",
+    "chutes-build-linux-arm64-gnu": "1.6.0",
+    "chutes-build-linux-x64-gnu": "1.6.0",
+    "chutes-build-win32-arm64": "1.6.0",
+    "chutes-build-win32-x64": "1.6.0"
   },
   "keywords": [
     "ai",