🦋 New version release

[brentrager]

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and publish to npm yourself or setup this action to publish automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

@smooai/smooth@0.23.0

Minor Changes

• 053f0c1: Big Smooth is now the chat-first daemon on the smooth-operator LocalServer engine
  (th-7225f9 / epic th-c89c2a) — a showcase of ../smooth-operator.

  • Chat-first UI: crates/smooth-web swapped from the multi-page dashboard to
    the chat-first SPA (App.tsx + BigSmoothFace, same-origin token injection).
    th daemon run launches it; th up now boots the same chat-first daemon
    (via SMOOTH_ADDR) instead of the old in-process server.
  • Engine migration b43c04fe → d03fa10 (0.16.0): the whole workspace pins
    the core rev that smooth-operator-server/svc @ 487d10bc are built on, so
    the daemon links the canonical LocalServer + SEP extension host (env-gated by
    SMOOTH_EXTENSIONS_ALLOW, discovered from ~/.smooth/extensions, installed
    via th ext). All engine deps are git-revs (CI-buildable) — no path-deps.
  • New crates: smooth-daemon (the daemon), smooth-tools (sandboxed
    fs/grep/bash tools), smooth-goalie.
  • Dropped old cast: smooth-bigsmooth, smooth-narc, smooth-scribe,
    smooth-archivist, smooth-operative, smooth-bench, smooth-tunnel — the
    microVM-era Big Smooth and its old-signature engine hooks. th bench and
    th tunnel are removed with their backing crates.
  • The narc LLM-judge and auto-mode permission cards (previously in the dropped
    crates / the th code TUI) re-home onto the new engine's NarcHook /
    ToolHook seam in a follow-up (th-3119e3). Every other th CLI feature
    (crm, agents, knowledge, crawl, search, files, widgets, booking, …) is
    unchanged.

• cc43483: Big Smooth gains an intelligent th tool + re-homed auto-mode & narc-judge safety
  hooks on the smooth-operator engine (th-3119e3 / th-1f694a / th-515a13).

  • Engine: bumped to core 0.16.2 (crates.io) + smooth-operator-server/svc
    @ the new .tool_hooks(…) builder seam on LocalServer (th-1f694a upstream).
  • Intelligent th tool (smooth-tools): a native agent tool that teaches Big
    Smooth its own CLI surface — web search, knowledge retrieval, crawl, th api …,
    pearls — so it uses th deliberately instead of blind bash. Resolves the th
    binary, runs it with structured argv (no shell interpolation), caps output.
  • auto-mode ToolHook (smooth-daemon): permission gate via the in-tree
    smooth_policy::auto_mode rule engine (allow/deny/ask). SMOOTH_AUTO_MODE
    selects posture; the daemon defaults to bypass (usable out of the box, narc
    still guards) until the interactive approval queue lands (th-1f7fd7).
  • narc ToolHook (smooth-daemon): tool-call surveillance — secret/dangerous-
    CLI/prompt-injection detectors (recovered from the old smooth-narc crate) with an
    LLM-judge escalation via the daemon gateway (FAST_MODEL), fail-closed on
    block/timeout, and post_call secret redaction through the &mut ToolResult
    seam. Degrades to regex-only + redaction when no gateway key is configured.
  • Both hooks install via .tool_hooks([auto_mode, narc]) — auto-mode first
    (permission), narc second (surveillance) — gating every tool call, including
    SEP extension tools.

• 6437a06: Big Smooth: promote the demo-critical th capabilities to first-class named
  tools so the model reaches for them reliably (it selects tools by name + schema,
  not buried prose).

  • web_search { query, answer? } → th search — open-web search.
  • knowledge_search { query } → th knowledge search — the org's own KB.
  • crawl { url } → th crawl scrape — read a specific page as markdown.

  Each is a thin typed wrapper over the shared th resolver (argv only, no shell)
  — they reach nothing new, they're just findable. The general th tool stays as
  the catch-all for the long tail (th api …, th pearls …, config).