claudemd-cli 0.24.1 → 0.25.1

package/CHANGELOG.md

@@ -8,6 +8,45 @@ All notable changes to the `claudemd` plugin. This changelog tracks plugin artif
 - **Canonical spec version source**: `spec/CLAUDE.md` top-line title (`# AI-CODING-SPEC vX.Y.Z — Core`) + `spec/CLAUDE-changelog.md` top `##` entry.
 - **Plugin semver vs spec semver** are independent: plugin patch (0.2.0 → 0.2.1) may ship when spec is unchanged (this release); plugin minor (0.1.9 → 0.2.0) ships when spec minor updates (v0.2.0 shipped spec v6.10.0).
 
+## [0.25.1] - 2026-07-06
+
+**Patch — post-release review hardening of the v0.25.0 statusLine detector: a present-but-unrecognised `statusLine` slot is now treated as `foreign` (never overwritten by the empty-slot install), closing a latent hole in the never-clobber invariant.** No behavior change for any valid Claude Code config; spec unchanged (stays v6.14.1).
+
+- **`detect()` presence check (`scripts/lib/statusline.js`):** classification now keys on slot *presence*, not command-parseability. Any present slot that isn't claudemd's `{command:"…claudemd-statusline.sh"}` — a bare string, `{}`, `{command:""}`, `{command:123}`, or an alternate `type` — reads as `foreign`, so the empty-slot install skips it instead of collapsing it to `absent` and clobbering it. Only a missing / `null` / `""` slot is `absent`. CC's real slot is `{type:"command",command:"<string>"}` (already classified `foreign` and skipped), so no confirmed valid config reached the old path: this is defense-in-depth on the #1 "never touch a foreign slot" invariant, not a fix to observed data loss.
+- **Stale prev cleanup:** a plain empty-slot `set` now clears any leftover `statusline-prev.json` from an earlier `--force` undone out-of-band, so a later `remove` empties the slot instead of resurrecting the stale foreign command.
+- **Tests (+4 → 574 Node tests):** `statusline-adopt.test.js` locks the foreign-shape classification (bare string / `{}` / empty / numeric / alt-`type` all skip untouched), the absent boundary (`null` / `""` / missing still adopt), and the stale-prev case; `uninstall.test.js` now ships a renderer fixture so `beforeEach` exercises a real install-time statusLine set, and asserts the no-manifest uninstall still un-wires a claudemd slot and deletes the renderer (constraint-#5 no-manifest sub-case, previously unasserted).
+
+Provenance: `superpowers:requesting-code-review` whole-feature audit of `60312c8..cce65ee` — 0 Critical, 1 Important (the detector hole above), 5 Minor; verdict "Ready to merge: Yes" for v0.25.0 with this patch recommended. Minors M2 (renderer newline-strip) and M5 (`--json` / `--dry-run` UX) deferred to `tasks/statusline-v0251-deferred.md`.
+
+## [0.25.0] - 2026-07-05
+
+**Minor — statusLine auto-registration: a new PS1-style statusLine — `user@host:/path (branch) Model [ctx:N%]` — with a semantic context-pressure color (`[ctx:N%]` green <50%, yellow 50–79%, red ≥80%).** Spec content unchanged (stays v6.14.1).
+
+- **Auto (install):** a fresh install wires the statusLine into `~/.claude/settings.json` **only when the `statusLine` slot is empty**. An existing statusline (any other provider) is left untouched; a statusline error never fails the install.
+- **Command:** `/claudemd-statusline` (adopt) · `check` (report the current owner, no writes) · `remove` (restore the prior statusline or clear the slot; delete the renderer) · `--force` (take over a foreign slot, saving its command so `remove` can restore it). Always shows the diff and asks before writing (`~/.claude/settings.json` is a §5 hard-AUTH path).
+- **Opt-out:** set `CLAUDEMD_NO_STATUSLINE=1` before install to skip the statusLine write entirely.
+- **Revert:** `/claudemd-statusline remove` restores the prior statusline (or clears the slot) and deletes `~/.claude/claudemd-statusline.sh`.
+
+Migration: existing users with a statusline already configured see no change (empty-slot-only install). To adopt claudemd's line, run `/claudemd-statusline` (`--force` to replace another provider's).
+
+### Added — `scripts/lib/statusline.js` + `scripts/statusline-adopt.js` (CLI: detect/adopt/remove) + `scripts/statusline.sh` (renderer)
+
+- `detect` reports `absent | claudemd | foreign` plus whether `~/.claude/claudemd-statusline.sh` matches the shipped renderer. `adopt` writes the stable-path command `bash "$HOME/.claude/claudemd-statusline.sh"` and copies the renderer (`--empty-only` install-time guard, `--force` foreign-slot takeover with prior-command save, `--dry-run` preview). `remove` restores the saved prior command (or clears the slot) and deletes the copied renderer; no-op if claudemd doesn't own the slot.
+- `scripts/statusline.sh`: single NUL-delimited `jq` read so an embedded newline in a field can't misalign cwd/model/context; `[ctx:N%]` from `.context_window.used_percentage`, threshold-colored (green/yellow/red at 50/80).
+
+### Added — `/claudemd-statusline` (agent contract)
+
+- `commands/claudemd-statusline.md`: detect → consent gate (always, binds under `AUTONOMY_LEVEL: aggressive`) → adopt/remove → re-verify and cite `verdict: claudemd` as completion evidence.
+
+### Changed — `install.js` / `uninstall.js`
+
+- Install: best-effort empty-slot-only statusLine adopt runs after the spec/hook/manifest steps; `CLAUDEMD_NO_STATUSLINE=1` skips it entirely.
+- Uninstall: un-wires a claudemd-owned statusLine entry and deletes `~/.claude/claudemd-statusline.sh`; a foreign statusline is left untouched.
+
+### Tests
+
+- `tests/scripts/statusline.test.js`, `statusline-adopt.test.js`, `statusline-cli.test.js`; install/uninstall coverage in `install.test.js` (#200-202: empty-slot set, foreign no-clobber, `CLAUDEMD_NO_STATUSLINE` opt-out) and `uninstall.test.js` (#546-547: cleanup + foreign-untouched). Full suite: 570 Node tests + 22 shell hook suites + 2 integration suites (`full-lifecycle`, `upgrade-lifecycle`) all pass; `upgrade-lifecycle` explicitly asserts `manifest.version upgraded to 0.25.0`.
+
 ## [0.24.1] - 2026-07-05
 
 **Patch — fix the macOS CI red on v0.24.0: `design-detect.js`'s "run as main" guard now realpaths both sides so a symlinked invocation path resolves.** Spec unchanged.

package/README.md

@@ -58,9 +58,10 @@ Verify in one command (Linux): `node --version && jq --version && gh --version &
 | Layer | Contents |
 |---|---|
 | 16 shell hooks | `banned-vocab-check` · `pre-bash-safety-check` · `ship-baseline-check` · `residue-audit` · `memory-read-check` · `memory-prompt-hint` · `mid-spine-yield-scan` · `sandbox-disposal-check` · `session-start-check` · `session-extended-read` · `session-summary` · `session-end-check` · `transcript-vocab-scan` · `transcript-structure-scan` · `version-sync` · `mem-audit` |
-| 14 slash commands | `/claudemd-install` · `/claudemd-status` · `/claudemd-update` · `/claudemd-audit` · `/claudemd-toggle` · `/claudemd-doctor` · `/claudemd-analyze` · `/claudemd-uninstall` · `/claudemd-rules` · `/claudemd-clean-residue` · `/claudemd-sparkline` · `/claudemd-sampling-audit` · `/claudemd-bypass-audit` · `/claudemd-design-adopt` |
+| 15 slash commands | `/claudemd-install` · `/claudemd-status` · `/claudemd-update` · `/claudemd-audit` · `/claudemd-toggle` · `/claudemd-doctor` · `/claudemd-analyze` · `/claudemd-uninstall` · `/claudemd-rules` · `/claudemd-clean-residue` · `/claudemd-sparkline` · `/claudemd-sampling-audit` · `/claudemd-bypass-audit` · `/claudemd-design-adopt` · `/claudemd-statusline` |
 | 1 standalone CLI | `claudemd-cli lint` · `claudemd-cli audit` ([npm: `claudemd-cli`](https://www.npmjs.com/package/claudemd-cli)) |
 | Spec v6.14 | `~/.claude/CLAUDE.md` · `CLAUDE-extended.md` · `CLAUDE-changelog.md` · `OPERATOR.md` (backup-before-overwrite) |
+| StatusLine (opt-out) | PS1-style line — `user@host:/path (branch) Model [ctx:N%]` — wired into `~/.claude/settings.json` on install **only when the slot is empty**; an existing statusline is left untouched. Skip entirely with `CLAUDEMD_NO_STATUSLINE=1`. Manage via `/claudemd-statusline`. |
 
 Install moves any existing `~/.claude/CLAUDE*.md` to `~/.claude/backup-<ISO>/` (last 5 kept automatically). Uninstall offers `keep / restore / delete`; `delete` requires an extra confirmation.
 
@@ -114,6 +115,7 @@ Per-hook timeout (3-5s in `hooks.json`); timeout = treated as exit 0 (pass) per
 | `/claudemd-sparkline [--days=A,B,C]` | v0.8.4+ R-N9 — per-`spec_section` cumulative counts of signal events across 3 windows (default 30/60/90d). Trend arrow compares per-period rate; `(newly active)` / `(silenced)` annotations flag activation/deactivation transitions. Markdown block suitable for CHANGELOG header pre-release. |
 | `/claudemd-clean-residue [--apply]` | Dry-run-by-default cleanup of stale `claudemd-sync-*` sentinels and historical `claudemd-(mockgh\|work).*` test sandboxes. |
 | `/claudemd-design-adopt [check\|remove]` | v0.24.0 — for a UI project, generate a thin, fact-based `DESIGN.md` from its real design-token sources (deterministic detector `scripts/design-detect.js`; evidence-gated rules menu; never invents values) and wire a sentinel block into project CLAUDE.md. `check` verifies pointers resolve; `remove` unwires. Always shows the diff and asks before writing. Manual/opt-in — no SessionStart hook, nothing auto-fires. |
+| `/claudemd-statusline [check\|remove] [--force]` | v0.25.0 — register claudemd's PS1-style statusLine into `~/.claude/settings.json`. Default adopts into an empty slot; `check` reports the current owner with no writes; `remove` restores the prior statusline (or clears the slot) and deletes `~/.claude/claudemd-statusline.sh`; `--force` takes over another provider's slot, saving its command so `remove` can restore it. Always shows the diff and asks before writing. Install-time auto-adopt is empty-slot-only (opt-out: `CLAUDEMD_NO_STATUSLINE=1`). |
 | `/claudemd-uninstall` | Pre-uninstall cleanup: clears manifest + state + log + legacy `settings.json` hook entries. Run BEFORE `/plugin uninstall claudemd@claudemd` (see [Uninstall](#uninstall)). |
 
 ---

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claudemd-cli",
-  "version": "0.24.1",
+  "version": "0.25.1",
   "description": "Standalone CLI for §10-V banned-vocab + transcript scanning. Companion to the claudemd Claude Code plugin (github.com/sdsrss/claudemd) for use in git pre-commit hooks, GitHub Actions, and other agents.",
   "type": "module",
   "bin": {