commitshow 0.2.1 → 0.2.2

package/dist/commands/audit.js

@@ -27,7 +27,14 @@ export async function audit(args) {
     // already have the snapshot. Covers all full-audition projects.
     // --refresh / --force skips this entirely and goes straight to audit-preview
     // with force=true (counts against IP + URL + global rate limits).
-    const project = force ? null : await findProjectByGithubUrl(target.github_url);
+    //
+    // We always look up `existing` (even on --force) so that we can capture the
+    // pre-refresh `last_analysis_at` baseline and poll for a *newer* snapshot.
+    // Without that baseline, polling sees the stale snapshot's timestamp as
+    // "ready" and returns it immediately.
+    const existing = await findProjectByGithubUrl(target.github_url);
+    const project = force ? null : existing;
+    const refreshBaseline = force ? (existing?.last_analysis_at ?? null) : null;
     if (project) {
         const [snapshot, standing] = await Promise.all([
             fetchLatestSnapshot(project.id),
@@ -128,7 +135,7 @@ export async function audit(args) {
         const pending = result;
         if (!asJson)
             console.log(c.dim('  This runs the full Claude audit · ~60-90 seconds. Hang tight.'));
-        const waited = await waitForPreviewSnapshot(pending.project_id);
+        const waited = await waitForPreviewSnapshot(pending.project_id, refreshBaseline);
         if (!waited) {
             emitError(asJson, 'timeout', 'Preview audit is taking longer than expected. Try `commitshow status <repo>` in a minute.', target.github_url);
             return 1;

package/dist/lib/api.js

@@ -77,20 +77,34 @@ export async function runPreviewAudit(githubUrl, liveUrl, opts = {}) {
         return body;
     return body;
 }
-/** Poll a preview job until the snapshot lands or we time out. */
-export async function waitForPreviewSnapshot(projectId, timeoutMs = 180_000, intervalMs = 4_000) {
+/** Poll a preview job until the snapshot lands or we time out.
+ *
+ *  `since` (ISO timestamp) is the baseline we wait past. For an INITIAL audit
+ *  on a brand-new project, leave it undefined — any snapshot wins. For a
+ *  REFRESH (force=true) on an existing project, pass the project's previous
+ *  `last_analysis_at` so we keep polling until a *new* snapshot lands.
+ *  Without this guard, a force-refresh against an already-analyzed project
+ *  returns the stale snapshot immediately because `last_analysis_at` is
+ *  already truthy. (Bug seen in 0.2.1 and earlier.) */
+export async function waitForPreviewSnapshot(projectId, since, timeoutMs = 180_000, intervalMs = 4_000) {
+    const sinceMs = since ? new Date(since).getTime() : 0;
     const deadline = Date.now() + timeoutMs;
     while (Date.now() < deadline) {
         const project = await findProjectById(projectId);
         if (project && project.last_analysis_at) {
-            const snapshot = await fetchLatestSnapshot(projectId);
-            return {
-                project,
-                snapshot,
-                standing: null,
-                is_preview: project.status === 'preview',
-                cache_hit: false,
-            };
+            const lastMs = new Date(project.last_analysis_at).getTime();
+            // sinceMs === 0 → first ever audit, accept any snapshot.
+            // Otherwise require last_analysis_at to have advanced.
+            if (sinceMs === 0 || lastMs > sinceMs) {
+                const snapshot = await fetchLatestSnapshot(projectId);
+                return {
+                    project,
+                    snapshot,
+                    standing: null,
+                    is_preview: project.status === 'preview',
+                    cache_hit: false,
+                };
+            }
         }
         await new Promise(r => setTimeout(r, intervalMs));
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "commitshow",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "description": "commit.show CLI — audit any vibe-coded project from your terminal.",
   "type": "module",
   "bin": {