- Claude Code's own search is a setting. Otōto keeps Claude Code to its tools by refusing Claude's own search (its Grep and Glob, and
grep,rg,findorgit grepin Bash). How far it goes is now thesearchsetting in~/.config/ototo/config.toml:offas before (the default);nudgelets Claude's search run, with a note of the Otōto call that does the same;onleaves Claude's tools and Bash alone. It is read on every call, so a session (OTOTO_SEARCH=on claude) or a project ("env": { "OTOTO_SEARCH": "on" }in its.claude/settings.local.json) can have its own, and an organisation can enforce one. With search off, the refusal now names the call to make instead (ototo searchwith the same pattern and glob, orototo outlinewith the same glob), and agrepthat filters another command's output (git log | grep fix) runs. The update takes out the deny rules earlier releases wrote in Claude Code'ssettings.json;ototo doctorsays which level applies and where it is set. --keep-searchlasts. The nextototo updateset Otōto up again without it, and Claude's own search was off again. It now writessearch = "on"in Otōto's settings, which updates keep. If you installed with--keep-search, setsearch = "on"once (or runototo init --keep-search).- Reminders that follow your settings. Otōto's reminders to Claude (on each prompt, and for each agent it starts) are worked out as they are given, so they follow your settings as they are then;
hide_model_toolsno longer needsototo initrun after it is set. - The dashboard names the endpoint. Its By model card has a row for each endpoint and the model it answered with, so the same model on two servers is no longer counted as one.
- Rebuilding a macOS release finds its Xcode.
dist/reproduce.shreads the linker and SDK a package was built with and, where your Mac's Xcode has others, rebuilds with the Command Line Tools or another installed Xcode that has them, and says which. - Security: rmcp and rustix are updated. rmcp, the MCP library, moves to 3.9.0 for RUSTSEC-2026-0457, 0461 and 0462. None of them reaches Otōto, which serves MCP over stdio only, while they are in rmcp's OAuth client and HTTP transports; a scanner would list them all the same. rustix, a system-call library under the plugin runtime, moves to 1.1.6 for RUSTSEC-2026-0486, an unsound read of extended file attributes.
- Upgrading from 2026.21.2:
ototo update.
source & further reading
ototo.dev — original article
Otōto 2026.21.2
Otōto 2026.21.1
Otōto 2026.21