v0.11.0

0.11.0 (2026-10-16)

Features

• api: what a person wants kept goes in a recall function, not the agent's own notes (#219) (27e84ba)
• connections: an org keeps the connections its people add, through an agent (#218) (47a6ae3)
• definitions: a refusal of input speaks in the field's own words, from the schema alone (#226) (2b221fa)
• global: a definition declares the shape of its output, and the runtime owns the shapes (#212) (53f93fc)
• ledger: secrets kept sealed in the ledger's database under a key that rotates (#210) (4dfcd43)
• prediction: a prediction function answers the path, as a series (#222) (2251d75)
• reasoning: the model listing marks every alias, including one that resolves to a Bedrock ARN (#224) (a5a24f5)
• reasoning: the model listing says whether the operator's allow list narrows it (#221) (3b9d71b)
• reasoning: the overview of a function that names tools draws its model and its tools (#213) (650cd27)
• server: an agent adds Auto with one MCP entry, which starts and controls the local runtime (#208) (14d0806)

Bug Fixes

• interaction: the playbook's own message is no reply, so a quiet thread reads as nothing found (#217) (23f21b9)
• prediction: a build nobody could win is refused before it asks a trainer (#223) (87fabd0)
• prediction: the modules the tests generate find their files beside themselves (#229) (af5780f)
• prediction: the suites run at a moment they own, and a rest holds only while its cause does (#216) (e47d45f)
• tool-servers: one set of secrets per tool access, where a minted token replaces the last (#207) (16d6ff7)

v0.10.0

0.10.0 (2026-10-15)

⚠ BREAKING CHANGES

• server: LOCAL_MODE is gone. A runtime on a laptop, listening on a loopback address with neither PUBLIC_URL nor API_KEYS set, runs in local mode; PUBLIC_URL turns sign-in on and has no default; a server reachable beyond its computer needs PUBLIC_URL or API_KEYS to start.

Features

• definitions: every definition carries an overview, the definition in plain words (#191) (e0727e1)
• global: a runtime on a laptop runs in local mode until PUBLIC_URL signs people in (#202) (b7d384f)
• global: the overview ends with the definitions that use the definition (#198) (fd6dd4e)
• global: the overview of interaction and recall functions (#196) (7649f8a)
• global: the overview of prediction functions and workflows (#197) (ede7c12)
• identity: a page at an allowed origin sends the session the identity service gave it (#194) (0fcddb0)
• identity: a person signs in through the Auto identity service and is named on the facts (#176) (ca5365c)
• identity: a signed-in person's permissions are the scopes their token was granted (#192) (eb6f602)
• server: a person signs in by default, wherever the runtime runs (#190) (ce8a0a3)
• server: the OpenAPI document of each release is kept in the repository (#187) (6e6210f)
• server: traces, metrics and logs over OpenTelemetry, beside the ledger (#183) (e51fd53)
• tool-servers: a tool server is an MCP server or an HTTP API with an OpenAPI document (#177) (b03554d)
• tool-servers: search, introspect, validate, dry_run and execute over the tool servers (#180) (e94dbd8)

Bug Fixes

• api: a page may read the challenge of a refusal across origins (#193) (6c59e85)
• api: a sign-in asks the identity service for the organization scope (#189) (9453526)
• definitions: the overview reads a condition or a loop written within a line as a phrase of it (#204) (abcb304)
• global: four scans of outside text run in linear time (#195) (3fdcbf2)
• identity: a session's organization is read from the claim the identity service puts it in (#201) (7cca14b)

v0.9.1

0.9.1 (2026-10-13)

Bug Fixes

• server: the image states the two scanner findings that do not apply to it (#179) (01dc4da)

v0.9.0

0.9.0 (2026-10-13)

Features

• api: the runtime serves its OpenAPI document and its guides over HTTP (#175) (739f231)
• prediction: builds answered by a trainer, scored, shadowed, activated and asked (#161) (b4e085a)

Bug Fixes

• ledger: a read looks up other databases' writes before it takes its snapshot (#162) (6f7b527)
• server: build the image on node:26.11.1-slim and leave npm out of it (#178) (f9fbcab)

v0.8.0

0.8.0 (2026-10-13)

Features

• server: a compact startup screen for npx @on.auto/runtime, with Studio the one link to follow (#167) (20fd114)

v0.7.0

0.7.0 (2026-10-13)

Features

• server: npx @on.auto/runtime opens with the Auto logo, links and one clean stop (#165) (81975aa)

v0.6.0

0.6.0 (2026-10-12)

⚠ BREAKING CHANGES

• server: npx @on.auto/runtime starts the runtime, on port 5555 by default (#163)
• global: the runtime is @on.auto/runtime and every package is under @on.auto (#155)
• global: the runtime is named auto-runtime (#153)
• global: playbooks are the one name in storage, configuration and code (#151)
• global: align runtime APIs and documentation around playbooks

Features

• api: a browser opening the server finds a page that opens the console (#92) (7dc46cb)
• api: authenticate callers and serve the brain operations over HTTP (#66) (4d744b0)
• api: instructions, tool descriptions, guides and prompts for agents over MCP (#126) (f4a7d7f)
• api: lead MCP tool results and errors with plain words (#83) (1021942)
• api: serve every operation on one MCP endpoint (#74) (7b1d79f)
• api: serve operations as MCP tools (#69) (266df06)
• brains: add the brain operations and the ledger that stores them (#64) (3d0cfe5)
• computation: a brain computes with a program, exactly and the same way every time (#106) (99b59df)
• definitions: one answer fact, facts composed from every capability, an input-aware contract (#147) (db609dc)
• global: add README quickstart and Studio invite links (#95) (68b0f3b)
• global: align runtime APIs and documentation around playbooks (4e57fe2)
• global: rebuild the runtime as a Node 26 TypeScript monorepo (#46) (405d04b)
• inference: call what a brain does by its functions (#84) (7eaf4dc)
• inference: execute prompts as specs (#71) (fda92e7)
• inference: list the models a server can call (#87) (90f3cde)
• inference: tell callers which model providers a server has (#79) (4d522f6)
• interaction: a brain asks a person or a system and takes the answer later (#123) (b4512c0)
• interaction: an interaction function calls a tool and answers with its result (#139) (d6998f1)
• interaction: an interaction function names the tool it sends through and reads its replies (#135) (af87111)
• interaction: an open request lists the shape its answer takes (#129) (04201ab)
• ledger: content kept as streamed bytes, and operations served over HTTP alone (#146) (f78ab74)
• ledger: keep the ledger in PostgreSQL (#86) (cbf6c4a)
• ledger: named facts, a context typed by each fact, and content kept whole under its digest (#143) (12f5816)
• ledger: open the ledger on any Emmett SQLite driver, without sqlite3 (#82) (a4c766a)
• ledger: read what a brain recorded, bound to the brain (#89) (618517a)
• mcp: a server's tools are allowed and marked testable on its own entry (#134) (9203df9)
• mcp: an agent tests a tool call through the brain before writing a function (#131) (498219d)
• mcp: list the tool servers a brain may use, with the tools each offers (#119) (d71c0cd)
• mcp: reason functions use tools from the MCP servers the operator configures (#98) (f86bd00)
• object-storage: content kept on an S3 object store behind CONTENT_STORE_URL (#150) (a400df9)
• operations: add the application layer (#61) (c8c4a4a)
• orchestration: a workflow starts on a schedule and on events, with up to three triggers (#130) (a06e969)
• orchestration: a workflow waits for runs that finish later, with deadlines and cancel (#115) (48d90dd)
• orchestration: run workflow specs on Temporal (#70) (b0faa0f)
• prediction: the prediction function's document, its schemas and its dataset from history (#157) (4f4c3b3)
• recollection: a brain keeps views of its own history and answers from them (#112) (bd334af)
• server: npx @on.auto/runtime starts the runtime, on port 5555 by default (#163) (0205f63)
• server: read structured settings from a YAML configuration file (#80) (1460def)
• server: readable start-up and a quick start for AI assistants (#77) (a9fcb65)
• server: run a local Temporal with pnpm dev (#75) (be0b02a)
• server: serve workflows (#72) (aecb3f9)
• server: the database password signed from the cloud identity under DATABASE_CREDENTIALS (#160) ([...