github-search-cli 9.7.0 → 9.8.0

package/CHANGELOG.md

@@ -6,6 +6,69 @@ Format follows [Keep a Changelog](https://keepachangelog.com/en/1.0.0/). Publish
 
 ---
 
+## [9.8.0] — 2026-09-22 (released)
+
+### Added
+
+- **README viewer now renders full markdown, including inline images.** The
+  viewer used to approximate markdown with box-drawing text; it now drives
+  OpenTUI's `MarkdownRenderable` with a theme-derived syntax style, so
+  headings, emphasis, links, lists, blockquotes, boxed tables, and fenced
+  code blocks render as markdown rather than as decorated plain text.
+- **Images in READMEs render in the terminal.** Relative and root-relative
+  paths resolve against the branch the README was loaded from,
+  `github.com/.../blob/...` links are rewritten to raw content, and downloads
+  are cached and capped by size. SVG and badge-service images are skipped
+  (they carry text that survives rasterising poorly), and anything that fails
+  to load falls back to an `🖼 alt text` caption. Images are drawn with
+  truecolor half blocks, so they work on any truecolor terminal with no image
+  protocol support; press `i` in the viewer to toggle them off. The pipeline
+  lives in `src/png.ts` (PNG decoder), `src/image-render.ts`
+  (image → cells), `src/image-loader.ts` (URL resolution + fetch cache),
+  `src/markdown-images.ts` (token helpers) and `src/markdown-view.ts` (the
+  renderable), and degrades to captions on runtimes without `Bun.Image`.
+
+### Changed
+
+- **The update modal's release notes render as markdown too.** The in-app
+  update panel reused the same text approximation as the README viewer; it
+  now shares `MarkdownRenderable` via the new view, so release notes show
+  real headings, lists, inline code, and boxed tables. Inline images stay
+  off there (the panel is narrow and notes are prose).
+- With both surfaces migrated, the plain-text markdown renderer
+  (`src/markdown-render.ts`) is no longer used and has been removed.
+
+---
+
+## [9.7.1] — 2026-09-20 (released)
+
+### Fixed
+
+- **In-app update installed to the wrong location when running under Bun** —
+  `performUpdate()` ran `bun install -g github-search-cli`, which targets
+  Bun's own global dir (`~/.bun`), not the npm prefix the running copy and
+  its `ghfind` shim live in. The command exited 0 while the running install
+  never changed. The updater now detects which package manager owns the
+  running tree (`detectInstallLocation`: npm global vs `~/.bun` global) and
+  shells out to `npm install -g --prefix <prefix>` for npm-owned installs,
+  so the update lands exactly where the running install is.
+- **Node fallback could not launch npm on Windows** — `child_process.spawn`
+  without a shell cannot execute `npm.cmd` (and recent Node rejects it with
+  `EINVAL`). The update spawn now goes through `node:child_process` on every
+  runtime with `shell: true` on win32 and properly quoted arguments, so the
+  Node fallback path actually works on Windows.
+- **Compiled binaries / dev checkouts no longer fake an update** — when the
+  running install has no `node_modules` ancestor, self-update is refused
+  with a debug hint instead of npm-installing a copy the user isn't running.
+- **Windows: URLs with query params were truncated at the first `&`** when opened via `cmd /c start` (every pre-filled crash-report/issue link lost its body and labels). Both openers now use `explorer.exe` on Windows, which receives the URL as a single argument.
+- **`open-url.ts` crashed under Node** (`Bun.spawn` unconditional); now runtime-agnostic with a detached `child_process.spawn` fallback.
+- **`--doctor` now detects stale/PATH-shadowing global installs** — multiple `ghfind` copies resolving to different versions are flagged with their prefixes and the exact uninstall command. This is the "updater said OK but nothing changed" trap.
+- Lint gate was permanently broken: `package.json` pinned `biome@2.5.13` (package never existed on npm); now uses `@biomejs/biome` ^2.5.14 with a migrated `biome.json`.
+- First clean lint baseline: 198 diagnostics triaged (auto-fixes + hand-fixes, incl. a dead `|| true` gate in `tui.ts` startup tips and an unsafe-autofix regression in `TrendingAdapter`); `tests/**` lint overrides for mocks/assertions; `tests/fixtures/**` excluded. CI now runs lint + typecheck on every push/PR (previously excluded as known-broken).
+- `mcp-server.ts`: assignment-in-expression violations; `trending-parser.ts`: stateful `RegExp.exec` loop replaced with `matchAll` (lastIndex reuse hazard); `themes.ts`: documented ANSI control-char regex.
+
+---
+
 ## [9.7.0] — 2026-09-19 (released)
 
 ### Added

package/README.md

@@ -207,7 +207,7 @@ Actions shown depend on current mode (search vs trending) and selection:
 | Refresh         | Re-run current search (or reload trending)              |
 | Toggle trending | Switch between search and trending views                |
 | Deep-dive       | Show languages, contributors, README excerpt            |
-| Readme          | Full README viewer                                      |
+| Readme          | Full markdown README viewer (inline images included)    |
 | Activity graph  | Toggle commit chart fullscreen                          |
 | Bookmark        | Save / unsave selected repo                             |
 | Compare         | Add/remove repo to comparison set                       |
@@ -233,6 +233,7 @@ Actions shown depend on current mode (search vs trending) and selection:
 | `d`                              | History / Bookmarks / Saved searches / Notifications | Delete current entry                        |
 | `Ctrl+X`                         | History                                              | Clear all history                           |
 | `Ctrl+C`                         | Notifications                                        | Dismiss all notifications                   |
+| `i`                              | README viewer                                        | Toggle inline images on/off                 |
 | `Y` / `N` / `L`                  | Update modal                                         | Yes (install) / No (skip) / Later (dismiss) |
 | `↑` / `↓` — `j` / `k`            | Update modal                                         | Scroll release notes                        |
 | `PgUp` / `PgDn` / `Home` / `End` | Update modal                                         | Jump through release notes                  |
@@ -284,14 +285,14 @@ cd ghfind
 # With Bun (recommended for TUI)
 bun install
 bun start        # TUI
-bun test         # 355 tests
+bun test         # 414 tests
 bun run check    # format check + tests — the green gate
 bun run build    # build dist/
 
 # Or with npm
 npm install
 npm start        # TUI (requires Node 20+)
-npm test         # 355 tests
+npm test         # 414 tests
 npm run build    # build dist/
 
 > Want to contribute? See [CONTRIBUTING.md](CONTRIBUTING.md) for commands,
@@ -304,6 +305,19 @@ npm run build    # build dist/
 
 Recent releases (full history in [CHANGELOG.md](CHANGELOG.md)):
 
+### v9.8.0
+
+- **README viewer renders real markdown** — headings, emphasis, links, lists, blockquotes, boxed tables, and fenced code now come from OpenTUI's markdown renderable with a theme-derived syntax style instead of a box-drawing text approximation
+- **Images render inline** — relative and `/`-rooted paths resolve against the README's branch, `github.com/.../blob/...` links are rewritten to raw content, downloads are cached and size-capped, SVG and badge-service images are skipped, and anything unloadable falls back to an `🖼 alt` caption; press `i` in the viewer to toggle images
+- **No new dependencies** — the PNG decoder, image-to-cells rasteriser, and fetch cache are plain TypeScript, and images draw with truecolor half blocks, so they work on any truecolor terminal without image-protocol support
+
+### v9.7.1
+
+- **In-app update actually works now** — it used to `bun install -g` into `~/.bun` while your running copy lives in an npm prefix, reporting success while nothing changed; it now detects which package manager owns the running install and updates it in place
+- **New `ghfind --doctor` check** — flags stale/PATH-shadowing global installs (multiple `ghfind` copies with different versions) and prints the exact uninstall command
+- **Windows URL fix** — links with query params were truncated at the first `&` by `cmd /c start`; every pre-filled crash-report/issue link now opens complete
+- Fixed `open-url` crashing under Node; CI now enforces lint + typecheck gates (first green Biome baseline)
+
 ### v9.7.0
 
 - **CLI parity with the MCP tools** — `ghfind deep-dive <owner/repo>` (languages, contributors, README excerpt, `--json`), `ghfind --compare` with `--json|--csv|--markdown`, and a trending language filter (`ghfind trending rust`, `--trending <lang>`)
@@ -311,19 +325,6 @@ Recent releases (full history in [CHANGELOG.md](CHANGELOG.md)):
 - Fixed `ghfind mcp` failing to typecheck (JSON-RPC id narrowing; runtime behavior unchanged)
 - The MCP server and CLI now share repo-ref parsing, language validation, and the deep-dive pipeline
 
-### v9.6.0
-
-- **MCP server (beta)** — `ghfind mcp` turns ghfind into a tool server: Claude Code, Cursor, Codex, and any MCP client can call GitHub search over stdio (nine tools, no new dependencies)
-- **Agent skill (beta)** — `ghfind skill` gives coding agents a token-efficient usage guide; `ghfind trending` accepts a language filter (`ghfind trending rust`)
-- **curl installer** — `curl -fsSL https://raw.githubusercontent.com/codersdfs/search-cli/main/scripts/install.sh | sh` downloads the standalone binary and verifies it against the release's `SHA256SUMS.txt`
-- **`NO_COLOR` support** — `ghfind --doctor` drops ANSI colors when `NO_COLOR` is set or stdout isn't a TTY
-- Fixed the stale `scripts/brew.rb` formula (wrong repo, version, and asset names)
-
-### v9.5.1
-
-- Fixed landing-screen keys leaking into the main view — `/`, `Space`, `t`, `c`, `?`, `q` all double-fired; `b` on the landing screen now opens Bookmarks
-- Fixed the update panel clipping the changelog — release notes are now scrollable (`↑↓`/`j`/`k`, `PgUp`/`PgDn`, `Home`/`End`) in a taller panel
-
 ---
 
 ## License

package/bin/ghfind.js

@@ -9,11 +9,11 @@
  * Strategy 2: Fall back to the bundled dist/cli.js with Node.js (works for
  *   non-interactive modes).
  */
-import { existsSync } from "fs";
-import { spawnSync } from "child_process";
-import { join, dirname } from "path";
-import { fileURLToPath, pathToFileURL } from "url";
-import { platform } from "os";
+import { existsSync } from "node:fs";
+import { spawnSync } from "node:child_process";
+import { join, dirname } from "node:path";
+import { fileURLToPath, pathToFileURL } from "node:url";
+import { platform } from "node:os";
 const __dirname = dirname(fileURLToPath(import.meta.url));
 const PKG_DIR = join(__dirname, "..");