claudemd-cli 0.27.0 → 0.28.0

package/CHANGELOG.md

@@ -8,6 +8,18 @@ All notable changes to the `claudemd` plugin. This changelog tracks plugin artif
 - **Canonical spec version source**: `spec/CLAUDE.md` top-line title (`# AI-CODING-SPEC vX.Y.Z — Core`) + `spec/CLAUDE-changelog.md` top `##` entry.
 - **Plugin semver vs spec semver** are independent: plugin patch (0.2.0 → 0.2.1) may ship when spec is unchanged (this release); plugin minor (0.1.9 → 0.2.0) ships when spec minor updates (v0.2.0 shipped spec v6.10.0).
 
+## [0.28.0] - 2026-07-10
+
+**Minor — sampling-audit detector expansion 4 → 8, opportunity denominators, self/external stratification, pre-registered calibration gate.** Second implementation tranche of `docs/spec-optimization-plan-2026-07-10.md` (P1 items A2–A5).
+
+- **4 new sequence/claim detectors** (`scripts/sampling-audit.js`): `§11-turn-yield` (typed continuation-nudge — `继续`/`next`/`怎么停了`/`why did you stop` — after a tool-active turn; the spec's own confirmed-yield tell), `§7-bugfix-anchor` (`Done: fixed …` line without a prior-failing token in the same line), `§11-post-compaction` (compaction event — `compact_boundary` system line or `isCompactSummary` user line, deduped as one event — with no plan/spec re-read within the next 10 main-line assistant events), `§5-hard-auth` (hard-class op — settings.json/.env/migrations write, prod `npm install <pkg>`, `git push --force`, `DROP TABLE` — with no `[AUTH REQUIRED` marker in the previous 10 assistant texts; pre-declared FP-heavy, advisory collection only). Sequence detectors walk the full event stream (tool_use / typed-user / compaction) and exclude subagent sidechains (`isSidechain:true`).
+- **A2 metric contract**: every rule now reports `violations` WITH its `opportunities` denominator (Done lines examined / substantive Uncertain lines / typed-after-tool-turn messages / compaction events / hard-class ops); `§10-V` splits `violations` (turns with ≥1 match, rate stays ≤1) from `hits` (raw per-pattern matches, kept for A1-baseline comparability). `metricContract` string rides in the JSON and the report header.
+- **Stratification**: `--global` now returns `byClass` (`self`/`external`/`unknown` via the shared `classifyProject` — trailing `-claudemd` segment = self) and the markdown report gains a per-class `viol/opps` table; `samplingAuditGlobal({projectsRoot})` exported and parameterized for tests.
+- **A4 calibration gate (pre-registered)**: `PRECISION_GATE = 0.8` exported; every detector starts `precision: null, status: 'collecting'`. Uncalibrated ratios are collection data, not compliance evidence.
+- **A5 dashboard**: `scripts/audit.js` gains a `selfCompliance` section (embeds the transcript scan of the current project, same window) — per rule `opportunities/violations/rate/precision/status`, with **`rate` withheld (null) until hand-labeled precision ≥ 0.8**. `/claudemd-audit` command doc instructs reporting denominators verbatim and never presenting `collecting` ratios as rates.
+- **Tests**: sampling-audit 9 → 17 cases (4 new real-shape fixtures: `turn-yield` / `bugfix-anchor` / `post-compaction` / `hard-auth`, incl. sidechain-exclusion, boundary+summary dedup, and lookback-window coverage shapes), audit 21 → 22 (`selfCompliance` shape + rate-withheld gate). Fixture shapes byte-verified against a real 2026-07-10 transcript (string-content typed prompts, `compact_boundary` + `compactMetadata`, tool_use blocks).
+- **CLI report format**: stdout summary now prints `violations/opportunities (rate, status)` per rule; markdown table adds Opportunities/Rate/Precision/Status columns. Command doc warns that same-day re-runs overwrite `tasks/sampling-audit-<date>.md` (use `--json` to protect hand-written analysis).
+
 ## [0.27.0] - 2026-07-10
 
 **Minor — post-compaction §11 re-read reminder (new SessionStart behavior) + spec v6.14.2 wording patch.** First implementation tranche of `docs/spec-optimization-plan-2026-07-10.md` (P6 items F1–F4).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claudemd-cli",
-  "version": "0.27.0",
+  "version": "0.28.0",
   "description": "Standalone CLI for §10-V banned-vocab + transcript scanning. Companion to the claudemd Claude Code plugin (github.com/sdsrss/claudemd) for use in git pre-commit hooks, GitHub Actions, and other agents.",
   "type": "module",
   "bin": {