@modelstatus/cli 0.1.80 → 0.1.81

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@modelstatus/cli",
-  "version": "0.1.80",
+  "version": "0.1.81",
   "description": "Track which AI models you use, where, and never get surprised by a retirement. Free offline model-health for any repo (mm status), browser sign-in for cloud inventory + alerts.",
   "keywords": [
     "llm",

package/src/changelog-data.js

@@ -0,0 +1,214 @@
+/* GENERATED by scripts/gen-changelog.mjs from apps/web/lib/changelog.json — do not edit.
+ * Release notes baked into the binary (in-TUI + the on-load what's-new card). */
+export const CHANGELOG = [
+  {
+    "version": "0.1.81",
+    "date": "2026-06-12",
+    "title": "Release notes, in the app",
+    "items": [
+      "After an update, the first launch shows that version's release notes — once, dismissed with any key. Fresh installs aren't interrupted.",
+      "What's New gains a Releases section: every release with its highlights, right in the TUI. Full history at llmstatus.ai/changelog."
+    ]
+  },
+  {
+    "version": "0.1.80",
+    "date": "2026-06-12",
+    "title": "Feedback is one keypress away",
+    "items": [
+      "`! feedback` now shows on every tab's keybar — score mm 1–5 (1 = hot garbage, 5 = best thing since sliced bread) and leave a comment; it lands directly with the humans who build this."
+    ]
+  },
+  {
+    "version": "0.1.79",
+    "date": "2026-06-11",
+    "title": "mm config",
+    "items": [
+      "New `mm config` — view and change settings in one place (analytics, channel, config path). `mm config analytics on|off` controls anonymous usage stats."
+    ]
+  },
+  {
+    "version": "0.1.78",
+    "date": "2026-06-11",
+    "title": "Quieter scans",
+    "items": [
+      "The first-run analytics notice no longer interrupts `mm status` output. The setting (and exactly what's sent: event counts only, never code or paths) lives in `mm config` and on the Account tab.",
+      "Analytics opt-out is now persistent — no env var needed."
+    ]
+  },
+  {
+    "version": "0.1.77",
+    "date": "2026-06-11",
+    "title": "In-TUI feedback",
+    "items": [
+      "Rate mm without leaving the terminal: a quiet prompt appears after you've used it a bit, and the card takes a 1–5 score plus an optional comment. Asked at most once per 30 days; never again after you answer."
+    ]
+  },
+  {
+    "version": "0.1.76",
+    "date": "2026-06-10",
+    "title": "Scan precision",
+    "items": [
+      "Fixed a double-count where one reference (e.g. a Bedrock ARN like `anthropic.claude-3-sonnet-20240229-v1:0`) showed up both as its resolved model and as a phantom “custom” id. One line, one finding.",
+      "Fine-tune-style variants (`ft:gpt-4:…`) now report under their base model — the base carries the lifecycle that matters."
+    ]
+  },
+  {
+    "version": "0.1.75",
+    "date": "2026-06-10",
+    "title": "Docs catch-up",
+    "items": [
+      "README and docs now cover `mm fix`, Homebrew install, the GitHub App, and the supply-chain posture — and state the analytics policy plainly."
+    ]
+  },
+  {
+    "version": "0.1.74",
+    "date": "2026-06-10",
+    "title": "Signed releases on every platform",
+    "items": [
+      "Every release manifest is now Ed25519-signed and verified — at install and on every self-update — against a public key embedded in the installer itself, not fetched from the CDN. Linux and Windows downloads get a real authenticity check, not just a same-origin checksum."
+    ]
+  },
+  {
+    "version": "0.1.73",
+    "date": "2026-06-10",
+    "title": "Fail-closed installs",
+    "items": [
+      "The installer now refuses to proceed if the checksum manifest can't be fetched or verification can't run — no more silent 'installing unverified' fallback.",
+      "The self-updater verifies the new binary's Developer ID signature before swapping it in.",
+      "Releases can't ship un-notarized: the pipeline blocks any macOS binary Apple hasn't accepted."
+    ]
+  },
+  {
+    "version": "0.1.71",
+    "date": "2026-06-10",
+    "title": "Homebrew + tighter sandbox",
+    "items": [
+      "`brew install randomartifact/tap/modelstatus-cli` — mm is on Homebrew (macOS + Linux). Brew owns updates there; the self-updater steps aside.",
+      "macOS hardened-runtime entitlements trimmed to the single flag Bun's JS engine needs (allow-jit) — nothing else.",
+      "The installer cryptographically verifies the binary is signed by Random Artifact LLC before installing."
+    ]
+  },
+  {
+    "version": "0.1.70",
+    "date": "2026-06-10",
+    "title": "Notarized by Apple",
+    "items": [
+      "macOS binaries are Developer ID signed and Apple-notarized. The installer no longer touches com.apple.quarantine — Gatekeeper passes it legitimately."
+    ]
+  },
+  {
+    "version": "0.1.69",
+    "date": "2026-06-09",
+    "title": "macOS signature fix",
+    "items": [
+      "Fixed invalid code signatures on macOS binaries (stricter Macs killed them on launch — credit: an external security review). The installer also sha256-verifies every download before installing."
+    ]
+  },
+  {
+    "version": "0.1.68",
+    "date": "2026-06-09",
+    "title": "mm <dir>",
+    "items": [
+      "`mm ~/path/to/project` opens the TUI scoped to that folder — the thing everyone tried first now just works. Everything runs locally."
+    ]
+  },
+  {
+    "version": "0.1.67",
+    "date": "2026-06-09",
+    "title": "First-run polish",
+    "items": [
+      "A failed sign-in is no longer a dead end — `g` retries, and tabs 1–2 work with no account.",
+      "Running mm in a folder with no AI calls now says what to do next."
+    ]
+  },
+  {
+    "version": "0.1.66",
+    "date": "2026-06-09",
+    "title": "Here first",
+    "items": [
+      "Everyone lands on the Here tab (the live local scan) — signed in or not. Inventory is one keypress away (3)."
+    ]
+  },
+  {
+    "version": "0.1.65",
+    "date": "2026-06-09",
+    "title": "Fix history with diffs",
+    "items": [
+      "What's New → Fixes now shows the exact red/green diff of every fix you've applied, with `o` to open the file at that line."
+    ]
+  },
+  {
+    "version": "0.1.64",
+    "date": "2026-06-09",
+    "title": "See the diff before it writes",
+    "items": [
+      "Pressing `f` now opens a diff preview — old line red, new line green, per file:line — and nothing is written until you press y."
+    ]
+  },
+  {
+    "version": "0.1.63",
+    "date": "2026-06-09",
+    "title": "Smarter fixes",
+    "items": [
+      "Replacement chains: if a model's replacement is itself dying (davinci → gpt-3.5 → gpt-4o-mini), `mm fix` follows the chain to the first live model — in the CLI, the TUI, and the GitHub App's fix PRs.",
+      "Every applied fix is recorded; a new Fixes section on What's New lists them.",
+      "`mm fix --json` emits pure JSON for tooling."
+    ]
+  },
+  {
+    "version": "0.1.62",
+    "date": "2026-06-09",
+    "title": "In-place fixes",
+    "items": [
+      "Applying a fix updates the list instantly instead of kicking off a full rescan of the workspace."
+    ]
+  },
+  {
+    "version": "0.1.61",
+    "date": "2026-06-09",
+    "title": "mm fix",
+    "items": [
+      "New `mm fix` (and `f` in the TUI): rewrites deprecated/retiring model ids to their registry replacement, in place. Boundary-safe — `gpt-4` never rewrites inside `gpt-4o` — and style-preserving. `--dry-run` previews."
+    ]
+  },
+  {
+    "version": "0.1.60",
+    "date": "2026-06-09",
+    "title": "Ergonomics pass",
+    "items": [
+      "30+ fixes across all 8 tabs: every failed fetch now says how to recover (g retries), keybars never hide their most important keys, offline no longer renders as Pro, and the Here header leads with the verdict."
+    ]
+  },
+  {
+    "version": "0.1.58",
+    "date": "2026-06-08",
+    "title": "Warp, finally",
+    "items": [
+      "The long tale of the clipped top row in Warp ends: the TUI renders full-screen correctly in Warp, before and after the game."
+    ]
+  },
+  {
+    "version": "0.1.53",
+    "date": "2026-06-08",
+    "title": "mm update",
+    "items": [
+      "`mm update` updates the binary in place and relaunches — one run lands on the latest version. (The background self-updater still applies updates on next launch.)"
+    ]
+  },
+  {
+    "version": "0.1.48",
+    "date": "2026-06-07",
+    "title": "Alternate screen",
+    "items": [
+      "The TUI runs in the terminal's alternate screen buffer — quitting restores your scrollback cleanly."
+    ]
+  },
+  {
+    "version": "0.1.0 – 0.1.47",
+    "date": "2026-06-03",
+    "title": "Early days",
+    "items": [
+      "Everything that made mm, mm: the scanner and lifecycle registry (signed snapshots, offline cache), the TUI with its 8 tabs, cloud inventory and alerts, the CI gate, secret-aware scan sources (env, AWS, k8s, helm, SQL), inventory search, npm + curl installers, the self-updater — and Donkey Kong (press P)."
+    ]
+  }
+];

package/src/tui/app.js

@@ -5,6 +5,7 @@ import { createClient } from "../api.js";
 import { track } from "../telemetry.js";
 import { BUILD_VERSION } from "../version.js";
 import { feedbackEligible, recordFeedbackShown, recordFeedbackSubmitted, submitFeedback, FeedbackStrip, FeedbackCard, ACTION_THRESHOLD } from "./feedback.js";
+import { releaseNotesToShow, ReleaseNotesCard } from "./release-notes.js";
 import {
   h, C, GLYPH, useAsync, Window, TrafficLights, TabStrip, StatusBar, legendSegments,
   KeyBar, EmptyCard,
@@ -163,6 +164,8 @@ export function App({ apiBase, apiKey, dir, initialView, onSignedIn, fresh }) {
   const [feedback, setFeedback] = React.useState(null);
   const actionsRef = React.useRef(0);
   const fbEligibleRef = React.useRef(feedbackEligible());
+  // First launch on a new version → that version's release notes, once.
+  const [releaseNotes, setReleaseNotes] = React.useState(() => releaseNotesToShow());
   const me = useAsync(async () => (apiKey ? client.me() : null), [apiKey]);
 
   const { outer, termRows } = useTermDims();
@@ -201,6 +204,14 @@ export function App({ apiBase, apiKey, dir, initialView, onSignedIn, fresh }) {
   const handlesBackRef = React.useRef(false);
   const setHandlesBack = React.useCallback((v) => { handlesBackRef.current = !!v; }, []);
 
+  useInput(
+    (input, key) => {
+      if (key.ctrl && input === "c") return exit();
+      setReleaseNotes(null); // any key clears the what's-new card
+      return undefined;
+    },
+    { isActive: !!releaseNotes },
+  );
   useInput(
     (input, key) => {
       if (key.ctrl && input === "c") return exit();
@@ -251,7 +262,7 @@ export function App({ apiBase, apiKey, dir, initialView, onSignedIn, fresh }) {
       }
       if (input === "q") return exit();
     },
-    { isActive: !prompt && !capturing && feedback?.stage !== "card" },
+    { isActive: !prompt && !capturing && feedback?.stage !== "card" && !releaseNotes },
   );
   // Feedback card is modal: digits score it (until a comment starts), printable
   // chars build the comment, ←→ nudges the score, ↵ sends, esc closes.
@@ -319,13 +330,17 @@ export function App({ apiBase, apiKey, dir, initialView, onSignedIn, fresh }) {
     });
     keys = GATE_KEYS;
   } else {
-    body = h(View, { client, me: account, refreshMe: me.reload, dir, apiBase, ui, width: W, height: bodyRows, active: !prompt && feedback?.stage !== "card", fresh });
+    body = h(View, { client, me: account, refreshMe: me.reload, dir, apiBase, ui, width: W, height: bodyRows, active: !prompt && feedback?.stage !== "card" && !releaseNotes, fresh });
     keys = dynKeys || (current2.meta && current2.meta.keys) || [];
   }
   if (feedback?.stage === "card") {
     body = h(FeedbackCard, { score: feedback.score, comment: feedback.comment, sending: feedback.sending, width: W });
     keys = [{ k: "1-5", label: "score" }, { k: "↵", label: "send" }, { k: "esc", label: "close" }];
   }
+  if (releaseNotes) {
+    body = h(ReleaseNotesCard, { entry: releaseNotes, width: W });
+    keys = [{ k: "any key", label: "continue" }];
+  }
 
   // Status bar segments.
   const live = status && status.forKey === current2.key ? status : null;
@@ -351,7 +366,7 @@ export function App({ apiBase, apiKey, dir, initialView, onSignedIn, fresh }) {
     feedback?.stage === "strip" ? h(FeedbackStrip, null) : h(Text, {}, ""),
     toast ? h(Text, { color: toast.color }, ` ${toast.msg}`) : h(Text, {}, ""),
     h(StatusBar, { segsLeft, segsRight, width: W }),
-    h(KeyBar, { keys: feedback?.stage === "card" ? keys : withGlobalKeys(keys), width: W }),
+    h(KeyBar, { keys: feedback?.stage === "card" || releaseNotes ? keys : withGlobalKeys(keys), width: W }),
   );
 }
 

package/src/tui/release-notes.js

@@ -0,0 +1,59 @@
+/* On-load "what's new" — Claude Code style: the first launch on a NEW version
+ * shows that version's release notes once, then never again. A brand-new
+ * install shows nothing (don't interrupt the first run); we just record the
+ * version. Data is baked into the binary (changelog-data.js), so the card the
+ * user sees always matches the version they just landed on. */
+import React from "react";
+import { Box, Text } from "ink";
+import { h, C } from "./ui.js";
+import { loadConfig, setConfigValue } from "../config.js";
+import { BUILD_VERSION } from "../version.js";
+import { CHANGELOG } from "../changelog-data.js";
+
+const ver = () => (typeof BUILD_VERSION === "string" ? BUILD_VERSION.replace(/^v/, "") : "");
+
+/** The entry to show on this launch, or null. Records lastSeenVersion either
+ * way so the card shows at most once per version. */
+export function releaseNotesToShow(cfg = loadConfig()) {
+  const v = ver();
+  if (!v) return null;
+  const last = cfg.lastSeenVersion;
+  if (last === v) return null;
+  try { setConfigValue("lastSeenVersion", v); } catch { /* best effort */ }
+  if (!last) return null; // fresh install — set silently, don't interrupt the first run
+  return CHANGELOG.find((e) => e.version === v) ?? null;
+}
+
+/** Modal card body. Dismissed by app.js on any key. */
+export function ReleaseNotesCard({ entry, width = 78 }) {
+  const lineW = Math.max(24, width - 6);
+  const wrap = (text) => {
+    const words = String(text).split(" ");
+    const lines = [];
+    let cur = "";
+    for (const w of words) {
+      if ((cur + " " + w).trim().length > lineW) { lines.push(cur.trim()); cur = w; }
+      else cur += " " + w;
+    }
+    if (cur.trim()) lines.push(cur.trim());
+    return lines;
+  };
+  return h(
+    Box,
+    { flexDirection: "column", paddingX: 1 },
+    h(Text, {},
+      h(Text, { color: C.ACCENT, bold: true }, ` ✦ what's new in v${entry.version} `),
+      h(Text, { color: C.FG_DIM }, `— ${entry.date}`),
+    ),
+    h(Text, {}, ""),
+    h(Text, { color: C.FG, bold: true }, `  ${entry.title}`),
+    h(Text, {}, ""),
+    ...entry.items.flatMap((it, i) =>
+      wrap(it).map((line, j) =>
+        h(Text, { key: `i${i}.${j}`, color: C.FG }, j === 0 ? `  • ${line}` : `    ${line}`),
+      ),
+    ),
+    h(Text, {}, ""),
+    h(Text, { color: C.FG_DIM }, "  full history: llmstatus.ai/changelog · press any key to continue"),
+  );
+}

package/src/tui/views/whatsnew.js

@@ -11,10 +11,11 @@ import {
 import { collectFrom } from "../../sources/index.js";
 import { loadConfig, setConfigValue } from "../../config.js";
 import { readFixes } from "../../fix.js";
+import { CHANGELOG } from "../../changelog-data.js";
 import { openLocation } from "../../openUrl.js";
 import path from "node:path";
 
-const TABS = ["Registry", "Alerts", "Drift", "Fixes"];
+const TABS = ["Registry", "Alerts", "Drift", "Fixes", "Releases"];
 
 // Per-section keybars — the active actions differ by tab (Registry: mark seen ·
 // Notifications: mark read · Drift: rescan + archive). Published via ui.setKeys()
@@ -24,6 +25,7 @@ const TAB_KEYS = [
   [{ k: "←→", label: "section" }, { k: "↑↓", label: "nav" }, { k: "o", label: "mark read" }, { k: "g", label: "refresh" }],
   [{ k: "←→", label: "section" }, { k: "↑↓", label: "nav" }, { k: "r", label: "rescan" }, { k: "a", label: "archive" }],
   [{ k: "←→", label: "section" }, { k: "↑↓", label: "nav" }, { k: "o", label: "open in editor" }, { k: "g", label: "refresh" }],
+  [{ k: "←→", label: "section" }, { k: "↑↓", label: "nav" }],
 ];
 
 // The static fallback must match the default (Registry) section exactly —
@@ -145,6 +147,7 @@ export function WhatsNewView({ client, dir, ui, active, width = 78, height = 14
     if (tab === 0) context = reg.error ? "offline" : `${reg.data?.events.length || 0} changes`;
     else if (tab === 1) context = notif.error ? "offline" : `${(notif.data || []).length} alerts`;
     else if (tab === 3) context = `${fixes.length} fix${fixes.length === 1 ? "" : "es"}`;
+    else if (tab === 4) context = `${CHANGELOG.length} releases · llmstatus.ai/changelog`;
     else context = drift && !drift.loading && !drift.error ? `+${drift.added.length} / -${drift.gone.length}` : "drift";
     ui?.reportStatus?.({ context });
   }, [tab, reg.data, reg.error, notif.data, notif.error, drift, fixes, ui]);
@@ -247,6 +250,28 @@ export function WhatsNewView({ client, dir, ui, active, width = 78, height = 14
         })(),
       );
     }
+  } else if (tab === 4) {
+    const RROWS = Math.max(3, ROWS - 5); // reserve rows for the selected entry's bullets
+    const cur = clampCursor(cursor, CHANGELOG.length);
+    const start = Math.max(0, Math.min(cur - RROWS + 1, CHANGELOG.length - RROWS));
+    const sel = CHANGELOG[cur];
+    body = h(
+      Box,
+      { flexDirection: "column" },
+      ...CHANGELOG.slice(start, start + RROWS).map((e, i) => {
+        const cells = [
+          { text: cellE(`v${e.version}`, 16), color: C.ACCENT },
+          { text: cellE(e.date, 12), color: C.FG_FAINT },
+          { text: cellE(e.title, Math.max(16, width - 34)), color: C.FG },
+        ];
+        return h(ListRow, { key: `r${start + i}`, active: start + i === cur, cells, width });
+      }),
+      h(Text, { key: "rsp" }, ""),
+      ...(sel
+        ? sel.items.slice(0, 4).map((it, i) =>
+            h(Text, { key: `rb${i}`, color: C.FG_DIM }, cellE(`  • ${it.replace(/\`/g, "")}`, Math.max(24, width - 2))))
+        : []),
+    );
   } else {
     if (!drift) body = h(Text, { color: C.FG_DIM }, `  Press r to scan ${dir} and compare against tracked usages.`);
     else if (drift.loading) body = h(StateLine, { kind: "loading", spin, text: "scanning for drift…" });