codemuster 0.2.8 → 0.3.0

package/CHANGELOG.md

@@ -0,0 +1,43 @@
+# Changelog
+
+User-visible changes by released version. Add upcoming changes under Unreleased;
+move them to a dated version heading before publishing. Historical entries below
+start with 0.2.8.
+
+## 0.3.0 - 2026-09-19
+
+- Show the intervening release notes after `codemuster update`.
+- Check for a newer version on every normal command and report the result without
+  changing command output or stopping work when the registry is unavailable.
+- Include this changelog in the launcher and every platform package.
+- Preview the worker limit, provider, model and thinking level before `run`, `verify`
+  or `fix`. Interactive terminals wait ten seconds; Enter starts immediately and
+  Escape or Ctrl+C cancels. CI and redirected commands start without waiting.
+- Add `intelligent-config` to inspect repository context with an AI agent and apply
+  validated exclusions, scoped lenses and detected test setup. Preserve existing
+  custom settings and keep an exact backup before replacing the config.
+
+Upgrade from 0.2.9 or earlier with `npm install -g codemuster@0.3.0` to
+install the new launcher. Older launchers update only the native binary, so their
+`codemuster update` cannot add release-note or per-command update notices.
+
+## 0.2.9 - 2026-09-19
+
+- Exclude non-code documents, data, configuration and database files from AI review,
+  including Markdown, text, JSON, YAML, XML, CSV, Office documents and SQLite files.
+  Mapper metadata and ecosystem dependency audits retain their required inputs.
+- Mark oversized packs as skipped once and continue other work. Skips retain a
+  reason, consume no agent attempts or retries, and never count as reviewed.
+- Show skipped work in status and reports. Rescan or use `run --force` to retry it.
+- Upgrade the ledger to schema 7 while preserving audit history. Older CLIs cannot
+  open this schema. Run `codemuster scan` after upgrading to refresh exclusions.
+
+## 0.2.8 - 2026-09-15
+
+- Add settings-driven proactive plugin workflows for Claude and Codex, with shared
+  setup, skills and hooks.
+- Isolate fix workers, enforce repair scope, preserve dirty work through explicit
+  stash handling, and validate fixes before recording success.
+- Add opt-in static usage assessments and browser-backed user-experience reviews.
+- Prevent dead-code scans from failing on wall-clock regex timeouts.
+- Support exact CLI version pins and separate update caches by OS and architecture.

package/README.md

@@ -78,6 +78,23 @@ With the CLI installed, run `codemuster skill install --for codex`. The installe
 `claude`, `codex`, `gemini`, and `opencode`; add `--global` for all repositories. Use either
 the plugin or a standalone skill copy in a given agent scope to avoid duplicate entries.
 
+## Tailor the configuration with AI
+
+After `init`, run:
+
+```sh
+codemuster intelligent-config
+# Or choose the agent and model:
+codemuster intelligent-config --agent codex --model <model-id> --effort high
+```
+
+The command uses one read-only AI call to inspect tracked paths, manifest samples and source
+samples. It applies validated exclusions and focused lenses for particular file types, and
+selects a detected .NET solution or npm test command when none is configured. Existing custom
+settings and test commands are preserved. It reports each applied change and keeps the exact
+previous config in `.codemuster/config.backup-*.json`. Run `codemuster scan` afterward.
+It does not run the configured tests, install dependencies, or start an audit or repair.
+
 ## Drive an audit yourself
 
 ```sh
@@ -88,6 +105,12 @@ codemuster status
 codemuster report --out audit.md
 ```
 
+Before `run`, `verify`, `fix`, or `intelligent-config` starts agents, a preview shows the worker limit, provider,
+model and thinking level. Interactive terminals wait ten seconds: press Enter to start now,
+or Escape/Ctrl+C to cancel and change your options. CI and redirected commands do not wait.
+Unset model/effort values are labeled provider defaults; pass `--model` and `--effort` to
+choose them explicitly.
+
 `scan` maps entry-point call paths and unreached code by default. Use `scan --mode file` for one
 unit per included file. `estimate` approximates pending input tokens. `run` analyzes pending
 units and processes verification work when enabled. Repeat `run` to resume unfinished work.
@@ -149,10 +172,15 @@ codemuster --version
 - [Decisions](https://github.com/TSCarterJr/CodeMuster/blob/main/DECISIONS.md) and [implementation checklist](https://github.com/TSCarterJr/CodeMuster/blob/main/MVP-Checklist.md).
 
 These documents describe the repository source; an older installed release may have fewer
-options. The npm launcher checks for updates at most once a day and uses a downloaded update on
-a later invocation. Set `CI` or `CODEMUSTER_NO_UPDATE` to disable automatic checks.
+options. The npm launcher checks availability on every normal command and prints the result to
+stderr, with a two-second timeout. Registry failures do not stop your command. Available updates
+still install in the background at most daily and take effect on a later invocation. Set `CI`,
+`CODEMUSTER_NO_UPDATE`, or an exact version pin to disable automatic checks and installation.
 `codemuster update --check` checks availability without installing; `codemuster update` installs
-an available update. The 0.2.7 launcher supports `CODEMUSTER_VERSION=0.2.0` to select that exact binary, including when a newer build is cached. Unset the variable to resume normal selection; explicit updates are refused while pinned. Install the current launcher first to obtain pin support. Run `skill install` again to refresh an installed skill copy. See the user guide for rollback and ledger precautions.
+an available update and displays all intervening entries from the packaged changelog. Version
+history is maintained in [CHANGELOG.md](https://github.com/TSCarterJr/CodeMuster/blob/main/CHANGELOG.md).
+Use `npm install -g codemuster` to upgrade the launcher itself and obtain these new notices;
+`codemuster update` upgrades the platform binary. The 0.2.7 launcher supports `CODEMUSTER_VERSION=0.2.0` to select that exact binary, including when a newer build is cached. Unset the variable to resume normal selection; explicit updates are refused while pinned. Install the current launcher first to obtain pin support. Run `skill install` again to refresh an installed skill copy. See the user guide for rollback and ledger precautions.
 
 ## License
 

package/lib/changelog.js

@@ -0,0 +1,10 @@
+'use strict';
+
+function releases(text) {
+  return text.replace(/\r\n/g, '\n').split(/^## /m).slice(1).flatMap((section) => {
+    const match = /^(\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?)(?: - [^\n]+)?\n([\s\S]*)$/.exec(section);
+    return match && match[2].trim() ? [{ version: match[1], body: match[2].trim() }] : [];
+  });
+}
+
+module.exports = { releases };

package/lib/launcher.js

@@ -5,6 +5,7 @@ const crypto = require('node:crypto');
 const fs = require('node:fs');
 const os = require('node:os');
 const path = require('node:path');
+const { releases } = require('./changelog');
 
 const REGISTRY = 'https://registry.npmjs.org';
 const DAY = 24 * 60 * 60 * 1000;
@@ -112,8 +113,8 @@ function tar(args) {
   childProcess.execFileSync(command, args, { stdio: 'pipe' });
 }
 
-async function getJson(url) {
-  const response = await fetch(url, { signal: AbortSignal.timeout(60000), headers: { accept: 'application/vnd.npm.install-v1+json; q=1.0, application/json; q=0.8' } });
+async function getJson(url, timeoutMs = 60000) {
+  const response = await fetch(url, { signal: AbortSignal.timeout(timeoutMs), headers: { accept: 'application/vnd.npm.install-v1+json; q=1.0, application/json; q=0.8' } });
   if (!response.ok) {
     throw new Error(`GET ${url} returned ${response.status}`);
   }
@@ -121,6 +122,42 @@ async function getJson(url) {
   return response.json();
 }
 
+async function checkForUpdate({ currentVersion, registry = REGISTRY, timeoutMs = 2000, out = process.stderr }) {
+  try {
+    const packument = await getJson(`${registry}/codemuster`, timeoutMs);
+    const latest = packument['dist-tags']?.latest;
+    if (typeof latest !== 'string' || !VERSION.test(latest)) throw new Error('the registry named no valid latest version');
+    const comparison = compareVersions(latest, currentVersion);
+    if (comparison > 0) {
+      out.write(`codemuster ${latest} is available; running ${currentVersion}. Run codemuster update to install it.\n`);
+    } else if (comparison === 0) {
+      out.write(`codemuster ${currentVersion} is up to date\n`);
+    } else {
+      out.write(`codemuster ${currentVersion} is newer than the latest published version (${latest})\n`);
+    }
+    return latest;
+  } catch {
+    out.write(`codemuster: update check unavailable; continuing with ${currentVersion}\n`);
+    return null;
+  }
+}
+
+function showChanges(dir, currentVersion, latest, out) {
+  let entries = [];
+  try {
+    entries = releases(fs.readFileSync(path.join(dir, 'CHANGELOG.md'), 'utf8'))
+      .filter((entry) => compareVersions(entry.version, currentVersion) > 0 && compareVersions(entry.version, latest) <= 0)
+      .sort((a, b) => compareVersions(b.version, a.version));
+  } catch {
+  }
+  if (entries.length === 0) {
+    out.write('Release notes were not included in this package.\n');
+    return;
+  }
+  out.write(`\nWhat's changed since ${currentVersion}:\n\n`);
+  for (const entry of entries) out.write(`${entry.version}\n${entry.body}\n\n`);
+}
+
 async function installVersion({ registry, version, versionsDir, platform, arch }) {
   if (!VERSION.test(version)) throw new Error(`invalid version: ${version}`);
   const pkg = platformPackage(platform, arch);
@@ -250,8 +287,9 @@ async function updateNow({ args, stateDir, platform, arch, currentVersion, regis
 
   out.write(`updating codemuster ${currentVersion} to ${latest}\n`);
   const versionsDir = versionsDirectory(stateDir, platform, arch);
+  let installedDir;
   try {
-    await installVersion({ registry, version: latest, versionsDir, platform, arch });
+    installedDir = await installVersion({ registry, version: latest, versionsDir, platform, arch });
   } catch (error) {
     out.write(`codemuster: ${latest} could not be installed: ${error.message}\n`);
     return 1;
@@ -260,13 +298,14 @@ async function updateNow({ args, stateDir, platform, arch, currentVersion, regis
   fs.mkdirSync(stateDir, { recursive: true });
   fs.writeFileSync(path.join(stateDir, 'last-update-check'), String(Date.now()));
   out.write(`codemuster ${latest} is ready; the next command uses it\n`);
+  showChanges(installedDir, currentVersion, latest, out);
   return 0;
 }
 
 async function main(args, env = process.env) {
   if ((args[0] === 'update' && args.slice(1).some((arg) => arg === '--help' || arg === '-h'))
       || (args.length === 2 && args[0] === 'help' && args[1] === 'update')) {
-    process.stdout.write('usage: codemuster update [--check]\n\nUpdate CodeMuster itself through the npm launcher.\n  --check   Show the available version without installing it\n\nAutomatic background checks can be disabled with CI or CODEMUSTER_NO_UPDATE.\n');
+    process.stdout.write('usage: codemuster update [--check]\n\nUpdate CodeMuster itself and show the intervening release notes.\n  --check   Show the available version without installing it\n\nNormal commands check availability with a two-second timeout.\nAutomatic checks and background updates can be disabled with CI or CODEMUSTER_NO_UPDATE.\n');
     return 0;
   }
 
@@ -292,10 +331,18 @@ async function main(args, env = process.env) {
     return updateNow({ args: args.slice(1), stateDir, platform, arch, currentVersion: build.version });
   }
 
-  if (shouldCheckForUpdate({ env, now: Date.now(), lastCheck: readLastCheck(stateDir) })) {
-    childProcess
-      .spawn(process.execPath, [path.join(__dirname, 'update.js'), stateDir, build.version], { detached: true, stdio: 'ignore', windowsHide: true })
-      .unref();
+  if (!env.CI && !env.CODEMUSTER_NO_UPDATE && !pinnedVersion) {
+    const latest = await checkForUpdate({ currentVersion: build.version });
+    if (latest && compareVersions(latest, build.version) > 0
+        && shouldCheckForUpdate({ env, now: Date.now(), lastCheck: readLastCheck(stateDir) })) {
+      try {
+        childProcess
+          .spawn(process.execPath, [path.join(__dirname, 'update.js'), stateDir, build.version], { detached: true, stdio: 'ignore', windowsHide: true })
+          .on('error', () => {})
+          .unref();
+      } catch {
+      }
+    }
   }
 
   return runBuild(build.binary, args);
@@ -306,6 +353,7 @@ module.exports = {
   versionsDirectory,
   binaryName,
   compareVersions,
+  checkForUpdate,
   installVersion,
   main,
   newestBuild,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codemuster",
-  "version": "0.2.8",
+  "version": "0.3.0",
   "description": "CodeMuster: full-coverage codebase audits with a coverage number, driven by your coding agent through one skill.",
   "license": "SEE LICENSE IN LICENSE",
   "author": "Tim Carter",
@@ -27,7 +27,8 @@
   "files": [
     "bin",
     "lib",
-    "README.md"
+    "README.md",
+    "CHANGELOG.md"
   ],
   "engines": {
     "node": ">=22"
@@ -36,11 +37,11 @@
     "test": "node --test test/launcher.test.js test/plugin.test.js test/release.test.js"
   },
   "optionalDependencies": {
-    "@codemuster/darwin-arm64": "0.2.8",
-    "@codemuster/darwin-x64": "0.2.8",
-    "@codemuster/linux-arm64": "0.2.8",
-    "@codemuster/linux-x64": "0.2.8",
-    "@codemuster/win32-arm64": "0.2.8",
-    "@codemuster/win32-x64": "0.2.8"
+    "@codemuster/darwin-arm64": "0.3.0",
+    "@codemuster/darwin-x64": "0.3.0",
+    "@codemuster/linux-arm64": "0.3.0",
+    "@codemuster/linux-x64": "0.3.0",
+    "@codemuster/win32-arm64": "0.3.0",
+    "@codemuster/win32-x64": "0.3.0"
   }
 }