chutes-build 2.0.3 → 2.0.5

package/CHANGELOG.md

@@ -4,6 +4,73 @@ All notable changes to Chutes Build will be documented in this file. The format
 is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this
 project follows [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.0.5] - 2026-10-25
+
+### Fixed
+
+- **External-provider 402s no longer masquerade as the weekly limit.** New
+  non-TEE catalog entries such as `deepseek-ai/DeepSeek-V4-Pro-0813` and
+  `Qwen/Qwen3.8-Max-0902` run on external providers and require a positive PAYG
+  balance; Chutes answers `402 A positive balance is required for external
+  provider execution`. The pager treated every 402 as a credit-limit denial and
+  opened "You hit your weekly limit" even when the subscription window was
+  nearly empty. Now that specific 402 is shown with the provider's message, and
+  non-TEE models carry a `PAYG` warning notice in the model picker. The
+  subscription/weekly quota is not involved.
+
+## [2.0.4] - 2026-10-25
+
+### Added
+
+- **A native `chutes-build-harness` skill explains the CLI to the model.** It
+  covers the tool inventory, permission modes, slash commands, configuration
+  and session locations, diagnostic commands, and a troubleshooting matrix for
+  missing tools, denied calls, 401/403/429, chute-id and media payload errors,
+  document/media capacity failures, missing skills, npm updates, output limits,
+  and loops. The system prompt points at it only when a tool, command,
+  permission, session, or capability fails, or when harness detail is needed.
+
+### Changed
+
+- **New sessions default to Chutes Auto in API-key builds.** The live catalog
+  replaces the bundled model list, which dropped the compiled Auto entry, so the
+  default silently fell back to the first listed model. Chutes Build now rebuilds
+  Auto from the visible chat models as a latency-routed inline pool
+  (`modelA,modelB,...:latency`), because the saved `default` alias needs a
+  dashboard pool that API-key-only accounts do not have. The pool includes every
+  visible chat model that explicitly advertises tool support in
+  `supported_features` and has at least a 32k context, so Auto cannot route an
+  agent turn to a model that cannot call the harness tools. Entries that omit the
+  feature list are excluded rather than assumed capable.
+  `models` and the picker show `model-router` / Chutes Auto again, and a concrete
+  model still bypasses routing.
+
+### Fixed
+
+- **`update --check` follows the npm registry, and self-update explains the npm
+  path.** This fork ships through npm and GitHub releases, so the upstream GCS
+  release-channel pointer is absent and the old check failed with HTTP 404 (or a
+  missing npm executable on Windows). `--check` now reads the `latest` dist-tag
+  over the registry HTTPS API and prints the npm update command; a non-check
+  `update` reports that self-update is disabled in this build and points at
+  `npm install -g chutes-build@latest`. The upstream installer path remains behind
+  the maintainer-only `CHUTES_BUILD_LEGACY_SELF_UPDATE` escape hatch.
+- **`ocr_page` is advertised again.** The tool was registered but never added to
+  the ecosystem toolsets, so models could not call it even though the guide
+  documented it. Every toolset that offers `extract_document` now offers it too.
+- **Document, embedding, and speech tools resolve public slugs to chute ids.**
+  `extract_document`, `embed_texts`, and `transcribe_audio` passed the catalog
+  slug to the account describe API, which only accepts the chute id, so they
+  failed with "Chute not found" even when the model was live. They now resolve
+  through the live catalog first, like `generate_media`.
+- **Media calls place the prompt inside v2 `args` wrappers.** Cords whose schema
+  requires a single `args`/`input_args` object without resolvable nested
+  properties now receive `{args: {prompt}}` instead of failing with "nothing to
+  send". Published schemas that reference missing definitions no longer block
+  the call: local validation is best-effort and the server stays authoritative.
+- **The tool catalog budget reflects the restored `ocr_page` schema** (30 tools,
+  10,517 estimated tokens, ceiling 10,600).
+
 ## [2.0.3] - 2026-10-24
 
 ### Added

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "chutes-build",
-  "version": "2.0.3",
+  "version": "2.0.5",
   "description": "Privacy-first, open-source coding agent for the Chutes ecosystem",
   "license": "Apache-2.0",
   "author": { "name": "Michael Gasperini", "email": "michael@mikesoft.it", "url": "https://mikesoft.it" },
@@ -37,12 +37,12 @@
     "check": "npm test && npm run verify:release && npm pack --dry-run"
   },
   "optionalDependencies": {
-    "chutes-build-darwin-arm64": "2.0.3",
-    "chutes-build-darwin-x64": "2.0.3",
-    "chutes-build-linux-arm64-gnu": "2.0.3",
-    "chutes-build-linux-x64-gnu": "2.0.3",
-    "chutes-build-win32-arm64": "2.0.3",
-    "chutes-build-win32-x64": "2.0.3"
+    "chutes-build-darwin-arm64": "2.0.5",
+    "chutes-build-darwin-x64": "2.0.5",
+    "chutes-build-linux-arm64-gnu": "2.0.5",
+    "chutes-build-linux-x64-gnu": "2.0.5",
+    "chutes-build-win32-arm64": "2.0.5",
+    "chutes-build-win32-x64": "2.0.5"
   },
   "keywords": [
     "ai",