v2.0.1

v2.0.1

Potpie v2.0.1 strengthens the local-first Potpie architecture with a unified Context Engine runtime, cleaner CLI and daemon boundaries, a public context-graph runtime, and more reliable local agent workflows.

This release also publishes potpie-context-engine v0.2.0, consolidating the Context Engine under the potpie_context_engine namespace and introducing typed contracts for local and daemon execution.

Highlights

Unified Context Engine runtime

Potpie now uses one importable Context Engine, one Potpie-owned resource manager, and matching typed contracts for in-process and daemon execution. The daemon lifecycle has been consolidated around the canonical python -m potpie.daemon runtime, replacing the older reflective host and RPC architecture.

Public context graph and reconciliation

This release introduces the public graph runtime and asynchronous reconciliation flow, alongside improvements to graph reads, views, ranking, entity re-typing, semantic search, and the graph workbench command surface.

CLI and integration improvements

The CLI and daemon now live within the root potpie package. The release adds GitLab and GitBucket integration support, improves structured JSON errors and exit codes, clarifies repository and pot resolution, and removes unsupported legacy service and ingestion commands.

Packaging and security

Potpie v2.0.1 supports Python 3.12, 3.13, and 3.14. The exact release artifacts were built once, smoke-tested on macOS and Linux, published to PyPI, and verified by filename and SHA-256 hash.

The release also includes dependency and security hardening across aiohttp, cryptography, GitPython, MCP, Pillow, postcss, pydantic-ai-slim, pyasn1, setuptools, torch, and related dependency metadata.

Install

uv tool install potpie==2.0.1

Or with pip:

python3 -m pip install --user potpie==2.0.1

Migration notes

• The standalone potpie-context-core package has been removed.
• Context Engine library imports now use the potpie_context_engine namespace.
• Legacy reflective host/RPC surfaces have been removed.
• Unsupported potpie service commands and pot-level Jira/Linear ingestion commands have been removed.
• Destructive graph import and repair operations now require confirmation; automated usage can pass --yes.

What's Changed

• fixed all affected CVEs by @shmbhvi101 in #892
• feat(domain): CE domain foundation — contract, write DTOs, read surface, ranking, nudge model, coherence by @nndn in #903
• docs(context-graph): agent-surface skill/template bundles + design docs by @nndn in #904
• chore(context-graph): scrub Graphiti references + tear down dead resolution-service shim by @nndn in #898
• feat: CE v2 envelope + workbench ontology + read-surface contract + setup defaults + global instructions by @nndn in #905
• Fixed High, Medium and low vulnerabilities for this repo by @shmbhvi101 in #908
• fix(cli): post-setup integration login cancel flow + onboarding analytics (cg-01) by @nndn in #907
• feat(ce): CE backends — deps, embedding/claim-query, write DTOs, FalkorDB, mutation pipeline by @nndn in #910
• feat(ce): CE application services — workbench, V2 read surface, record routing, nudge by @nndn in #914
• feat(cli): CE graph workbench command surface by @nndn in #915
• feat: CE detached daemon + daemon runtime by @Dsantra92 in #916
• feat: CE graph explorer UI + repo resolution + benchmarks/docs remnant by @Dsantra92 in #918
• removal: drop scanner-ingest path + dead CE surfaces by @Dsantra92 in #919
• Remove observability package by @Dsantra92 in #920
• Bake Linear and GitHub OAuth client IDs into CLI wheel at build time. by @shmbhvi101 in #876
• Limit potpie package to context engine by @Dsantra92 in #922
• [codex] Disable keyring credential storage by @nndn in #923
• Bake CLI telemetry IDs into the Python wheel by @Dsantra92 in #935
• Preserve existing agent instructions by @Dsantra92 in #931
• [codex] Cap Sentry SDK below 3.0 by @Dsantra92 in #938
• Fix version for packages by @Dsantra92 in #939
• [codex] fix graph telemetry instrumentation by @Dsantra92 in #940
• Fix baked Sentry environment defaults by @Dsantra92 in #942
• fix: wheel creation default environment by @nndn in #944
• README for Context Graph setup (release potpie 2.0 beta 1) by @Dsantra92 in #897
• Hotfix uv tool install potpie by @Dsantra92 in #945
• Embed dotenv build defaults in wheel by @Dsantra92 in #947
• Add root CLI version option by @nndn in #925
• [codex] bump packages to b3 by @nndn in #948
• Add pre-merge CLI journey integration gate by @jdyaberi-pp in #950
• Implement shared runtime env resolution by @Dsantra92 in #952
• Add bounded UI dev port fallback by @Dsantra92 in #970
• Add CLI telemetry controls by @Dsantra92 in #955
• fixed vanta vulnerabilities by @shmbhvi101 in #983
• fix(cli): normalize --json parse-time errors to structured JSON envelope by @shmbhvi101 in #964
• fix(cli): show pot resolution reason in source list output by @shmbhvi101 in #937
• fix(cli): surface uv-tool install facts in doctor and docs by @shmbhvi101 in #941
• Fix pot create --repo . not registering the current repo by @shmbhvi101 in #974
• fix(cli): compact pot default show and structured JSON for cloud groups by @Nih1tGupta in #960
• fix(cli): add config list and no-key get for non-secret config inspection by @Nih1tGupta in #966
• fix(cli): suggest populated pot or ingestion when pot has 0 claims by @shmbhvi101 in #972
• fix(cli): explain missing service logs for embedded graph backends by @shmbhvi101 in #943
• Fix stale CLI skill examples and graph scope validation by @nndn in #958
• Fix graph explorer npm install warnings by @nndn in #984
• [codex] Revert "Add bounded UI dev port fallback (#970)" by @Dsantra92 in #986
• Fix potpie status readiness default by @nndn in #927
• Fix graph CLI required input help by @nndn in #928
• feat(cli): source status no-ID summary and doctor effective repo pot (POT-1763 and POT-1779) by @Nih1tGupta in #929
• Clarify repo pot routing and add linked summary mode by @nndn in #961
• Fix Linear CLI OAuth callback ports by @Dsantra92 in #968
• Improve local semantic search setup by @nndn in #976
• Refresh Context Graph docs by @nndn in #962
• Fix include-family/graph-view vocabulary boundary (POT-1770) by @nndn in #985
• Simplify GitHub issue templates and allow blank issues by @Dsantra92 in #988
• Add pre-commit PR gate by @Dsantra92 in #989
• Remove pot-level Jira/Linear ingest commands from CLI by @BrhKmr23 in #990
• Release potpie 2.0.0 by @Dsantra92 in #991
• fix: remediate Vanta dependency CVEs and bump torch to 2.12.1 by @shmbhvi101 in #1000
• Fix infra topology query-sensitive ranking by @yashkrishan in #999
• Fix graph read filters and make text presentation honor format, detail, and relations by @BrhKmr23 in #995
• fix: remediate POT-1930 high-severity dependency alerts by @shmbhvi101 in #1014
• fix: expose patched floors to GitHub dependency graph by @shmbhvi101 in #1015
• fix: refresh stale dependency graph locks by @shmbhvi101 in #1017
• refactor(cli): move CLI into root package by @Dsantra92 in #1013
• fix(deps): upgrade torch past CVE-2025-3000 by @shmbhvi101 in #1020
• POT-1993: Upgrade Pillow to 12.3.0 by @shmbhvi101 in #1021
• fix: upgrade Pillow to 12.3.0 by @shmbhvi101 in #1022
• fix(deps): remediate GitPython and pyasn1 vulnerabilities by @shmbhvi101 in #1023
• fix(deps): upgrade setuptools for CVE-2026-59890 by @shmbhvi101 in #1024
• Add Gitlab CLI integration by @Nih1tGupta in #998
• feat(cli): Add Gitbucket integration (POT-1722) by @Nih1tGupta in #949
• refactor(daemon): move daemon into root package and remove MCP by @Dsantra92 in #1019
• Fix/root help command order by @Nih1tGupta in #1026
• Move context-engine under the potpie_context_engine namespace and split dependency extras by @Dsantra92 in #1030
• Introduce public graph runtime and async reconciliation by @Dsantra92 in #1031
• docs(cli): point local reinstall at make cli-install and hint uv-tool by @Nih1tGupta in #1028
• Clean up graph resolve feature and infra labels by @Nih1tGupta in #982
• Fix CLI domain failures exiting with code 0 by @Nih1tGupta in #993
• remove unsupported potpie service CLI commands by @Nih1tGupta in #1033
• Remove legacy platform code by @Dsantra92 in #1034
• Prevent stale entity labels during re-type upserts by @rishita2023 in #1032
• fix: bump aiohttp for CVE-2026-59881 and CVE-2026-69243 (POT-2136) by @shmbhvi101 in #1039
• [Vanta] Fix High vulnerabilities in potpie-ai/potpie (CVE-2026-69244) by @shmbhvi101 in #1038
• fix: refresh nested uv.lock aiohttp pins for CVE-2026-59881/69243 (POT-2180) by @shmbhvi101 in #1040
• [Vanta] Fix High vulnerabilities in potpie-ai/potpie (POT-2221) by @shmbhvi101 in #1042
• fix(deps): remediate Medium Vanta vulns for POT-2223 (postcss CVE-2026-69153) by @shmbhvi101 in #1043
• [Vanta] Fix High vulnerabilities in potpie-ai/potpie (POT-2233) by @shmbhvi101 in #1045
• fix(deps): remediate Medium Vanta vulns for POT-2236 (stale potpie-legacy SBOM) by @shmbhvi101 in #1046
• fix(deps): remediate Medium Vanta vulns for POT-2266 (stale legacy/uv.lock + h2) by @shmbhvi101 in #1048
• Revert "fix(deps): clear stale potpie-legacy SBOM for POT-2236 Medium vulns (#1046)" by @shmbhvi101 in #1051
• Revert "fix(deps): clear stale legacy/uv.lock for POT-2266 Medium vulns (#1048)" by @shmbhvi101 in #1052
• fix(deps): bump pydantic-ai-slim past CVE-2026-54249 (POT-2310) by @shmbhvi101 in #1054
• docs: publish user-facing docs from docs/ with a PR-time docs check by @BrhKmr23 in #1058
• Use GitHub App token for Hub docs dispatch by @BrhKmr23 in #1061
• Refactor context engine boundaries and daemon reconciliation by @Dsantra92 in #1057
• Add manual Python release CI with beta support by @Dsantra92 in #936
• Release: bump Potpie to 2.0.1 and Context Engine to 0.2.0 by @Dsantra92 in #1067
• CI: remove Windows from release smoke matrix by @Dsantra92 in #1068
• Fix PyPI Core Metadata 2.5 publishing by @Dsantra92 in #1069

New Contributors

• @rishita2023 made their first contribution in #1032

Full Changelog: v2.0.0...v2.0.1