commitshow 0.2.1 → 0.2.4

package/README.md

@@ -17,16 +17,16 @@ The npm package + command is `commitshow` (no dot — npm doesn't allow it in
 package names). Everything else uses the brand `commit.show`.
 
 ```bash
-npx commitshow audit
+npx commitshow@latest audit
 # or audit any public project by URL — no cd required
-npx commitshow audit github.com/owner/repo
+npx commitshow@latest audit github.com/owner/repo
 ```
 
 ## Install
 
 ```bash
 # one-shot
-npx commitshow audit <target>
+npx commitshow@latest audit <target>
 
 # or global
 npm i -g commitshow
@@ -59,7 +59,7 @@ Node 20+.
 | Shorthand | `commitshow audit owner/repo` |
 
 Remote-URL mode works from any directory, which makes one-line X posts
-(`npx commitshow audit <their-url>`) trivial.
+(`npx commitshow@latest audit <their-url>`) trivial.
 
 ## The AI-coding loop
 

package/dist/commands/audit.js

@@ -27,7 +27,14 @@ export async function audit(args) {
     // already have the snapshot. Covers all full-audition projects.
     // --refresh / --force skips this entirely and goes straight to audit-preview
     // with force=true (counts against IP + URL + global rate limits).
-    const project = force ? null : await findProjectByGithubUrl(target.github_url);
+    //
+    // We always look up `existing` (even on --force) so that we can capture the
+    // pre-refresh `last_analysis_at` baseline and poll for a *newer* snapshot.
+    // Without that baseline, polling sees the stale snapshot's timestamp as
+    // "ready" and returns it immediately.
+    const existing = await findProjectByGithubUrl(target.github_url);
+    const project = force ? null : existing;
+    const refreshBaseline = force ? (existing?.last_analysis_at ?? null) : null;
     if (project) {
         const [snapshot, standing] = await Promise.all([
             fetchLatestSnapshot(project.id),
@@ -128,7 +135,7 @@ export async function audit(args) {
         const pending = result;
         if (!asJson)
             console.log(c.dim('  This runs the full Claude audit · ~60-90 seconds. Hang tight.'));
-        const waited = await waitForPreviewSnapshot(pending.project_id);
+        const waited = await waitForPreviewSnapshot(pending.project_id, refreshBaseline);
         if (!waited) {
             emitError(asJson, 'timeout', 'Preview audit is taking longer than expected. Try `commitshow status <repo>` in a minute.', target.github_url);
             return 1;

package/dist/lib/api.js

@@ -77,20 +77,34 @@ export async function runPreviewAudit(githubUrl, liveUrl, opts = {}) {
         return body;
     return body;
 }
-/** Poll a preview job until the snapshot lands or we time out. */
-export async function waitForPreviewSnapshot(projectId, timeoutMs = 180_000, intervalMs = 4_000) {
+/** Poll a preview job until the snapshot lands or we time out.
+ *
+ *  `since` (ISO timestamp) is the baseline we wait past. For an INITIAL audit
+ *  on a brand-new project, leave it undefined — any snapshot wins. For a
+ *  REFRESH (force=true) on an existing project, pass the project's previous
+ *  `last_analysis_at` so we keep polling until a *new* snapshot lands.
+ *  Without this guard, a force-refresh against an already-analyzed project
+ *  returns the stale snapshot immediately because `last_analysis_at` is
+ *  already truthy. (Bug seen in 0.2.1 and earlier.) */
+export async function waitForPreviewSnapshot(projectId, since, timeoutMs = 180_000, intervalMs = 4_000) {
+    const sinceMs = since ? new Date(since).getTime() : 0;
     const deadline = Date.now() + timeoutMs;
     while (Date.now() < deadline) {
         const project = await findProjectById(projectId);
         if (project && project.last_analysis_at) {
-            const snapshot = await fetchLatestSnapshot(projectId);
-            return {
-                project,
-                snapshot,
-                standing: null,
-                is_preview: project.status === 'preview',
-                cache_hit: false,
-            };
+            const lastMs = new Date(project.last_analysis_at).getTime();
+            // sinceMs === 0 → first ever audit, accept any snapshot.
+            // Otherwise require last_analysis_at to have advanced.
+            if (sinceMs === 0 || lastMs > sinceMs) {
+                const snapshot = await fetchLatestSnapshot(projectId);
+                return {
+                    project,
+                    snapshot,
+                    standing: null,
+                    is_preview: project.status === 'preview',
+                    cache_hit: false,
+                };
+            }
         }
         await new Promise(r => setTimeout(r, intervalMs));
     }

package/dist/lib/render.js

@@ -39,14 +39,19 @@ const BIG_DIGITS = {
     '/': ['    █', '   ▄▀', '  ▄▀ ', ' ▄▀  ', '█    '],
     ' ': ['     ', '     ', '     ', '     ', '     '],
 };
-/** Render a string ("68", "100", "82/100") as 5 rows of big ASCII. */
+/** Render a string ("68", "100", "82/100") as 5 rows of big ASCII.
+ *  Uses 2-space gutters between glyphs (was 1) so adjacent block-char
+ *  digits don't visually fuse — terminals render block runes at a width
+ *  that often makes the 1-char gap collapse, especially for digits like
+ *  '5' / '0' / '8' whose outer column is full block. */
 function bigText(text) {
     const rows = ['', '', '', '', ''];
+    const GAP = '  '; // 2-space gutter between digits
     for (let i = 0; i < text.length; i++) {
         const ch = text[i];
         const glyph = BIG_DIGITS[ch] ?? BIG_DIGITS[' '];
         for (let r = 0; r < 5; r++)
-            rows[r] += glyph[r] + (i < text.length - 1 ? ' ' : '');
+            rows[r] += glyph[r] + (i < text.length - 1 ? GAP : '');
     }
     return rows;
 }
@@ -117,7 +122,7 @@ export function renderAudit(view) {
     // computed and exposed in JSON as `walk_on_audit_normalized` for agents
     // that want a deterministic floor, but the user-facing big-digit uses
     // the calibrated total.
-    const WALK_ON_AUDIT_MAX = 47;
+    const WALK_ON_AUDIT_MAX = 50;
     const isWalkOn = p.status === 'preview';
     const total = p.score_total ?? 0;
     // Header
@@ -323,7 +328,7 @@ export function toAgentShape(view) {
     // Walk-on context fields. The user-facing score is Claude's calibrated
     // total (score_total). `walk_on_audit_normalized` is the deterministic
     // pillar-only fallback (Brief slot excluded · base /45).
-    const WALK_ON_AUDIT_MAX = 47;
+    const WALK_ON_AUDIT_MAX = 50;
     const isWalkOn = p.status === 'preview';
     const walkOnTotal = isWalkOn ? (p.score_total ?? 0) : null;
     const walkOnAuditNormalized = isWalkOn

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "commitshow",
-  "version": "0.2.1",
+  "version": "0.2.4",
   "description": "commit.show CLI — audit any vibe-coded project from your terminal.",
   "type": "module",
   "bin": {