altimate-code 0.5.9 → 0.5.11

package/CHANGELOG.md

@@ -5,6 +5,37 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.5.11] - 2026-03-25
+
+### Fixed
+
+- **README changelog gap** — updated README to reflect releases v0.5.1 through v0.5.11; previous README only listed up to v0.5.0
+- **npm publish transient 404s** — added retry logic (3 attempts with backoff) to `publish.ts` for concurrent scoped package publishes that hit npm registry race conditions
+
+## [0.5.10] - 2026-03-24
+
+### Added
+
+- **`altimate-code check` CLI command** — deterministic SQL checks (linting, formatting, style) that run without an LLM, suitable for CI pipelines and pre-commit hooks (#453)
+- **Data-viz skill improvements** — lazy initialization, data-code separation, color contrast rules, icon semantics, field validation, and pre-delivery checklist (#434)
+
+### Fixed
+
+- **Snowflake Cortex not visible before authentication** — provider now appears in the provider list even when not yet authenticated (#447)
+- **New user detection race condition** — first-run welcome flow and telemetry events could fire out of order or be skipped entirely (#445)
+- **52 CI test failures from `mock.module` leaking across files** — test isolation fix for the new `check` command e2e tests (#460)
+- **Missing `altimate_change` marker** — added required upstream marker on `isStatelessCommand` guard to pass Marker Guard CI (#457)
+
+### Changed
+
+- **Rename Recap back to Trace** — reverted the Recap branding to Trace across 29 files for better AI model comprehension of session recording concepts (#443)
+
+### Testing
+
+- Consolidated 12 hourly test PRs into single batch: slugify, hints sort, skill formatting, batch tools, filesystem utilities, wildcard matching — 1,680 new test lines (#439)
+- `altimate-code check` unit + e2e test suites (1,687 lines) (#453)
+- Snowflake Cortex provider visibility tests (#447)
+
 ## [0.5.9] - 2026-03-23
 
 ### Fixed
@@ -32,7 +63,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Added
 
-- **Recap (renamed from Tracer)** — session recap with loop detection and enhanced viewer (#381)
+- **Trace (session recording)** — session trace with loop detection and enhanced viewer (#381)
 - **ESM bundling regression tests** — 9 e2e tests verifying Node can load `altimate-dbt` via symlink, wrapper, and direct invocation paths
 
 ### Testing

package/README.md

@@ -131,8 +131,8 @@ Manifest parsing, test generation, model scaffolding, incremental model detectio
 ### Data Visualization
 Interactive charts and dashboards from SQL results. The data-viz skill generates publication-ready visualizations with automatic chart type selection based on your data.
 
-### Local-First Recap
-Built-in observability for AI interactions — recap tool calls, token usage, and session activity locally. No external services required. View recaps with `altimate recap`. Features include loop detection, post-session summary, and shareable HTML exports.
+### Local-First Tracing
+Built-in observability for AI interactions — trace tool calls, token usage, and session activity locally. No external services required. View session recordings with `altimate trace`. Features include loop detection, post-session summary, and shareable HTML exports.
 
 ### AI Teammate Training
 Teach your AI teammate project-specific patterns, naming conventions, and best practices. The training system learns from examples and applies rules automatically across sessions.
@@ -178,11 +178,14 @@ Contributions welcome — docs, SQL rules, warehouse connectors, and TUI improve
 
 ## Changelog
 
-- **v0.5.0** (March 2026) — smooth streaming mode, builtin skills via postinstall, `/configure-claude` and `/configure-codex` commands, warehouse auth hardening
-- **v0.4.9** (March 2026) — Snowflake auth overhaul (all auth methods), dbt tool regression fixes, parallel CI builds
-- **v0.4.2** (March 2026) — yolo mode, Python engine elimination (all-native TypeScript), tool consolidation, path sandboxing hardening, altimate-dbt CLI, unscoped npm package
-- **v0.4.0** (March 2026) — data visualization skill, 100+ tools, training system
-- **v0.3.x** — [See full changelog →](CHANGELOG.md)
+- **v0.5.11** (March 2026) — `altimate-code check` CLI command, data-viz improvements, Codespaces support, session tracing, 52 CI test fix
+- **v0.5.7** (March 2026) — impact analysis tool, training import, CI check command, `--max-turns` budget, LM Studio provider
+- **v0.5.6** (March 2026) — skill CLI & TUI management, GitHub skill install, Snowflake Cortex provider
+- **v0.5.5** (March 2026) — auto-discover MCP servers from VS Code, Cursor, Claude Code, Copilot configs
+- **v0.5.3** (March 2026) — bundle skills/dbt-tools in npm binary, marker guard CI
+- **v0.5.1** (March 2026) — simplified 3-mode agents (builder/analyst/plan), SQL write access control
+- **v0.5.0** (March 2026) — smooth streaming mode, builtin skills, `/configure-claude` and `/configure-codex` commands
+- **v0.4.x and earlier** — [See full changelog →](CHANGELOG.md)
 
 ## License
 

package/package.json

@@ -14,24 +14,24 @@
   "scripts": {
     "postinstall": "bun ./postinstall.mjs || node ./postinstall.mjs"
   },
-  "version": "0.5.9",
+  "version": "0.5.11",
   "license": "MIT",
   "dependencies": {
     "@altimateai/altimate-core": "^0.2.5"
   },
   "optionalDependencies": {
-    "@altimateai/altimate-code-linux-x64": "0.5.9",
-    "@altimateai/altimate-code-windows-arm64": "0.5.9",
-    "@altimateai/altimate-code-linux-arm64-musl": "0.5.9",
-    "@altimateai/altimate-code-darwin-x64": "0.5.9",
-    "@altimateai/altimate-code-windows-x64": "0.5.9",
-    "@altimateai/altimate-code-linux-x64-musl": "0.5.9",
-    "@altimateai/altimate-code-darwin-x64-baseline": "0.5.9",
-    "@altimateai/altimate-code-linux-x64-baseline-musl": "0.5.9",
-    "@altimateai/altimate-code-linux-x64-baseline": "0.5.9",
-    "@altimateai/altimate-code-linux-arm64": "0.5.9",
-    "@altimateai/altimate-code-darwin-arm64": "0.5.9",
-    "@altimateai/altimate-code-windows-x64-baseline": "0.5.9"
+    "@altimateai/altimate-code-linux-arm64": "0.5.11",
+    "@altimateai/altimate-code-windows-x64": "0.5.11",
+    "@altimateai/altimate-code-windows-x64-baseline": "0.5.11",
+    "@altimateai/altimate-code-darwin-x64": "0.5.11",
+    "@altimateai/altimate-code-windows-arm64": "0.5.11",
+    "@altimateai/altimate-code-linux-x64-baseline": "0.5.11",
+    "@altimateai/altimate-code-linux-arm64-musl": "0.5.11",
+    "@altimateai/altimate-code-linux-x64-musl": "0.5.11",
+    "@altimateai/altimate-code-linux-x64": "0.5.11",
+    "@altimateai/altimate-code-darwin-x64-baseline": "0.5.11",
+    "@altimateai/altimate-code-linux-x64-baseline-musl": "0.5.11",
+    "@altimateai/altimate-code-darwin-arm64": "0.5.11"
   },
   "peerDependencies": {
     "pg": ">=8",

package/skills/data-viz/SKILL.md

@@ -100,6 +100,8 @@ A single insight might just be one chart with a headline and annotation. Scale c
 - **Responsive**: `min-h-[VALUE]` on all charts. Grid stacks on mobile
 - **Animation**: Entry transitions only, `duration-300` to `duration-500`. Never continuous
 - **Accessibility**: `aria-label` on charts, WCAG AA contrast, don't rely on color alone
+- **Dynamic color safety**: When colors come from external sources (brand palettes, category maps, API data, user config), never apply them directly as text color without a contrast check. Dark colors are invisible on dark card backgrounds. Safe pattern: use the external color only for non-text elements (left border, dot, underline); always use the standard text color (white / `var(--text)`) for the label itself. If color-coded text is required, apply a minimum lightness floor: `color: hsl(from brandColor h s max(l, 60%))`
+- **Icon semantics**: Verify every icon matches its label's actual meaning, not just its visual shape. Common traps: using a rising-trend icon (📈) for metrics where lower is better (latency, error rate, cost); using achievement icons (🏆) for plain counts. When in doubt, use a neutral descriptive icon over a thematic one that could mislead
 
 ### Step 5: Interactivity & Annotations
 
@@ -133,3 +135,16 @@ A single insight might just be one chart with a headline and annotation. Scale c
 - Pie charts > 5 slices — use horizontal bar
 - Unlabeled dual y-axes — use two separate charts
 - Truncated bar axes — always start at zero
+- Filtering or mapping over a field not confirmed to exist in the data export — an undefined field in `.filter()` or `.map()` produces empty arrays or NaN silently, not an error; always validate the exported schema matches what the chart code consumes
+
+## Pre-Delivery Checklist
+
+Before marking a dashboard complete:
+
+- [ ] Every tab / view activated — all charts render (no blank canvases, no unexpected 0–1 axes)
+- [ ] Every field referenced in chart/filter code confirmed present in the data export
+- [ ] All text readable on its background — check explicitly when colors come from external data
+- [ ] All icons match their label's meaning
+- [ ] Tooltips appear on hover for every chart
+- [ ] No chart silently receives an empty dataset — add a visible empty state or console warning
+- [ ] Mobile: grid stacks correctly, no body-level horizontal overflow

package/skills/data-viz/references/component-guide.md

@@ -392,3 +392,70 @@ const CalloutLabel = ({ viewBox, label, color = "#1e293b" }: { viewBox?: { x: nu
 ```
 
 **Rules:** Never overlap data. Use `position: "insideTopRight"/"insideTopLeft"` on labels. Pair annotations with tooltips — annotation names the event, tooltip shows the value.
+
+---
+
+## Multi-Tab Dashboard — Lazy Chart Initialization
+
+Charts initialized inside a hidden container (`display:none`) render blank. Chart.js, Recharts, and Nivo all read container dimensions at mount time — a hidden container measures as `0×0`.
+
+**Rule: never initialize a chart until its container is visible.**
+
+```js
+// Vanilla JS pattern
+var _inited = {};
+
+function activateTab(name) {
+  // 1. make the tab visible first
+  document.querySelectorAll('.tab').forEach(el => el.classList.remove('active'));
+  document.getElementById('tab-' + name).classList.add('active');
+  // 2. then initialize charts — only on first visit
+  if (!_inited[name]) {
+    _inited[name] = true;
+    initChartsFor(name);
+  }
+}
+
+activateTab('overview'); // init the default visible tab on page load
+```
+
+Library-specific notes:
+- **Chart.js**: canvas reads as `0×0` inside `display:none` — bars/lines never appear
+- **Recharts `ResponsiveContainer`**: reads `clientWidth = 0` — chart collapses to nothing
+- **Nivo `Responsive*`**: uses `ResizeObserver` via `useMeasure`/`useDimensions` in `@nivo/core` — initially measures `0×0` when hidden and skips rendering; re-measures and re-renders correctly when container becomes visible, but the initial blank frame can cause a flash
+- **React conditional rendering**: prefer `visibility:hidden` + `position:absolute` over toggling `display:none` if you want charts to stay mounted and pre-rendered
+
+---
+
+## Programmatic Dashboard Generation — Data-Code Separation
+
+When generating a standalone HTML dashboard from a script (Python, shell, etc.), never embed JSON data inside a template string that also contains JavaScript. Curly-brace collisions in f-strings / template literals cause silent JS parse failures that are hard to debug.
+
+**Wrong** — data and JS logic share one f-string, every `{` in JS must be escaped as `{{`:
+
+```python
+html = f"""
+<script>
+  const data = {json.dumps(data)};          // fine
+  const fn = () => {{ return x; }}           // must escape — easy to miss
+  const obj = {{ key: getValue() }};         // one missed escape = blank page
+</script>
+"""
+```
+
+**Right** — separate data from logic entirely:
+
+```python
+# Step 1: write data to its own file — no template string needed
+with open('data.js', 'w') as f:
+    f.write('const DATA = ' + json.dumps(data) + ';')
+
+# Step 2: HTML loads both files; app.js is static and never needs escaping
+```
+
+```html
+<script src="data.js"></script>   <!-- generated, data only -->
+<script src="app.js"></script>    <!-- static, logic only   -->
+```
+
+Benefits: `app.js` is static and independently testable; `data.js` is regenerated without touching logic; no escaping required in either file.