release: 0.11.0

.editorconfig

@@ -0,0 +1,12 @@
+root = true
+
+[*]
+charset = utf-8
+end_of_line = lf
+indent_style = space
+indent_size = 2
+insert_final_newline = true
+trim_trailing_whitespace = true
+
+[*.md]
+trim_trailing_whitespace = false

.github/workflows/publish.yml

@@ -3,7 +3,7 @@ name: Publish to npm
 on:
   push:
     tags:
-      - "v*"
+      - 'v*'
 
 permissions:
   id-token: write

.github/workflows/quality.yml

@@ -0,0 +1,35 @@
+name: Quality
+
+on:
+  pull_request:
+  push:
+    branches:
+      - main
+      - develop
+
+permissions:
+  contents: read
+
+jobs:
+  quality:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: oven-sh/setup-bun@v2
+
+      - run: bun install --frozen-lockfile
+
+      - run: bun run lint
+
+      - run: bun run format:check
+
+      - run: bun run typecheck
+
+      - run: bun run build
+
+      - run: bun run test
+
+      - run: bunx publint packages/cli
+
+      - run: bunx publint packages/contract

.oxlintrc.json

@@ -0,0 +1,65 @@
+{
+  "$schema": "./node_modules/oxlint/configuration_schema.json",
+  "categories": {
+    "correctness": "error",
+    "perf": "error",
+    "suspicious": "error"
+  },
+  "rules": {
+    "complexity": ["warn", 10],
+    "curly": ["error", "all"],
+    "eqeqeq": ["error", "always", { "null": "ignore" }],
+    "max-depth": ["warn", 3],
+    "max-lines": ["warn", { "max": 400, "skipBlankLines": true, "skipComments": true }],
+    "max-lines-per-function": ["warn", { "max": 60, "skipBlankLines": true, "skipComments": true }],
+    "max-nested-callbacks": ["warn", 3],
+    "max-params": ["error", { "max": 4 }],
+    "no-await-in-loop": "off",
+    "no-else-return": ["error", { "allowElseIf": false }],
+    "no-lonely-if": "error",
+    "no-param-reassign": "error",
+    "no-underscore-dangle": [
+      "error",
+      { "allow": ["__CODESEMA_VERSION__", "__CODESEMA_LOCALE__", "__CODESEMA_FIX_TOKEN__"] }
+    ],
+    "oxc/no-map-spread": "off",
+    "typescript/consistent-type-definitions": ["error", "type"],
+    "typescript/no-explicit-any": "error",
+    "typescript/no-non-null-assertion": "error",
+    "typescript/no-require-imports": "error",
+    "unicorn/consistent-function-scoping": "warn",
+    "unicorn/filename-case": ["error", { "case": "kebabCase" }],
+    "unicorn/prefer-node-protocol": "error"
+  },
+  "overrides": [
+    {
+      "files": ["**/*.test.ts"],
+      "rules": {
+        "max-lines": "off",
+        "max-lines-per-function": "off",
+        "max-nested-callbacks": ["warn", 5],
+        "typescript/no-non-null-assertion": "off"
+      }
+    },
+    {
+      "files": ["**/*.vue"],
+      "rules": {
+        "unicorn/filename-case": ["error", { "case": "pascalCase" }]
+      }
+    },
+    {
+      "files": ["packages/web/src/composables/**"],
+      "rules": {
+        "unicorn/filename-case": ["error", { "case": "camelCase" }]
+      }
+    },
+    {
+      "files": ["**/*.d.ts"],
+      "rules": {
+        "typescript/consistent-type-definitions": "off",
+        "unicorn/require-module-specifiers": "off"
+      }
+    }
+  ],
+  "ignorePatterns": ["node_modules", "dist", "web-dist", "coverage"]
+}

.prettierignore

@@ -0,0 +1,6 @@
+node_modules
+dist
+web-dist
+coverage
+bun.lock
+CHANGELOG.md

CHANGELOG.md

@@ -3,6 +3,13 @@
 All notable changes to `codesema` (the npm package in `packages/cli`) are documented here.
 Format: [Keep a Changelog](https://keepachangelog.com/en/1.1.0/). Versioning: [SemVer](https://semver.org).
 
+## [0.11.0] - 2026-08-02
+
+### Added
+
+- Server context download: `codesema review` fetches `GET /api/cli/context` (conventions, learned rules, facts, last-scan freshness) for the current repo and hands it to the agent alongside the diff. The origin remote (`git remote get-url origin`) is sent as the `remote_url` query param the route requires to resolve the repo. Strictly best-effort and never blocking, same contract as auto-sync: no stored workspace credentials, no origin remote, offline, an unlinked workspace (403) or any malformed response all silently degrade to no server context, and the local review runs unchanged. `.codesema/RULES.md` stays local and always takes precedence.
+- Staleness warning: when the server's last scan commit is not an ancestor of the current `HEAD`, the context is prefixed with an explicit warning naming the scan date, so the agent treats the conventions, learned rules and facts as advisory rather than ground truth about the current diff.
+
 ## [0.10.0] - 2026-07-29
 
 ### Added

README.md

@@ -71,9 +71,9 @@ npx -y codesema config
 
 Interactive: language → agent → model → effort, then where to save. Two levels, field by field:
 
-| Level  | File                             | When                                   |
-| ------ | -------------------------------- | -------------------------------------- |
-| Global | `~/.config/codesema/config.json` | Your default, every repo (onboarding)  |
+| Level  | File                             | When                                    |
+| ------ | -------------------------------- | --------------------------------------- |
+| Global | `~/.config/codesema/config.json` | Your default, every repo (onboarding)   |
 | Repo   | `.codesema/config.json`          | Team/project override, wins over global |
 
 CLI flags always win over both. `target`, `port`, `timeout` and `language` can also be set in either file.
@@ -121,7 +121,7 @@ Then, in any repo, on your feature branch, ask your agent: `/codesema`. It uses
 ## Customize
 
 - `.codesema/PROMPT.md`: your team's review instructions, merged into the agent prompt.
-- `.codesema/RULES.md`: your team's review rules, one per line, hunted first by the reviewer. Put the highest-yield rules on top; each line may extend the rule with optional `|`-separated segments the reviewer knows how to use: `(category) rule | Scope: where in the repo it applies | Where to look: files, imports or code shapes to inspect | Bad: literal rejected form | Good: literal expected form | Exceptions: tolerated legacy, never flagged`. Rules are cited as `[C1]`, `[C2]`, ... (file order) in convention findings. Telling the reviewer *where to look* is what makes a rule catch violations.
+- `.codesema/RULES.md`: your team's review rules, one per line, hunted first by the reviewer. Put the highest-yield rules on top; each line may extend the rule with optional `|`-separated segments the reviewer knows how to use: `(category) rule | Scope: where in the repo it applies | Where to look: files, imports or code shapes to inspect | Bad: literal rejected form | Good: literal expected form | Exceptions: tolerated legacy, never flagged`. Rules are cited as `[C1]`, `[C2]`, ... (file order) in convention findings. Telling the reviewer _where to look_ is what makes a rule catch violations.
 - `.codesema-ignore`: glob patterns excluded from the diff (lockfiles, minified files and sourcemaps are excluded by default).
 
 ## Troubleshooting
@@ -135,33 +135,33 @@ Then, in any repo, on your feature branch, ask your agent: `/codesema`. It uses
 
 ## Environment variables
 
-| Variable                   | Effect                                                                            |
-| -------------------------- | --------------------------------------------------------------------------------- |
-| `CODESEMA_CONFIG_DIR`      | Override the global config directory (default `~/.config/codesema`).               |
-| `CODESEMA_NO_UPDATE_CHECK` | Set to `1` to skip the startup npm version check (also skipped when not a TTY).    |
-| `CODESEMA_SYNC_URL`        | Point `sync`/`link` at a different codesema.com host (self-hosted or staging).     |
+| Variable                   | Effect                                                                          |
+| -------------------------- | ------------------------------------------------------------------------------- |
+| `CODESEMA_CONFIG_DIR`      | Override the global config directory (default `~/.config/codesema`).            |
+| `CODESEMA_NO_UPDATE_CHECK` | Set to `1` to skip the startup npm version check (also skipped when not a TTY). |
+| `CODESEMA_SYNC_URL`        | Point `sync`/`link` at a different codesema.com host (self-hosted or staging).  |
 
 ## Files
 
-| Path                              | Contents                                                                     |
-| --------------------------------- | ---------------------------------------------------------------------------- |
-| `~/.config/codesema/config.json`  | Global config (language, agent, model, effort, sync credentials), mode `0600`. |
-| `.codesema/config.json`           | Repo config, overrides the global one.                                       |
-| `.codesema/input.json`            | The prepared MR diff handed to the agent (`prep`).                           |
-| `.codesema/review.json`           | The latest review written by the agent.                                     |
-| `.codesema/reviews/`              | Archived reviews (5 kept per branch, used for incremental re-review).         |
-| `.codesema/PROMPT.md`             | Your team's extra review instructions, merged into the prompt.               |
-| `.codesema/RULES.md`              | Your team's review rules (one `[Cn]` grid line each), hunted first.          |
-| `.codesema-ignore`                | Glob patterns excluded from the diff.                                        |
+| Path                             | Contents                                                                       |
+| -------------------------------- | ------------------------------------------------------------------------------ |
+| `~/.config/codesema/config.json` | Global config (language, agent, model, effort, sync credentials), mode `0600`. |
+| `.codesema/config.json`          | Repo config, overrides the global one.                                         |
+| `.codesema/input.json`           | The prepared MR diff handed to the agent (`prep`).                             |
+| `.codesema/review.json`          | The latest review written by the agent.                                        |
+| `.codesema/reviews/`             | Archived reviews (5 kept per branch, used for incremental re-review).          |
+| `.codesema/PROMPT.md`            | Your team's extra review instructions, merged into the prompt.                 |
+| `.codesema/RULES.md`             | Your team's review rules (one `[Cn]` grid line each), hunted first.            |
+| `.codesema-ignore`               | Glob patterns excluded from the diff.                                          |
 
 ## Exit codes
 
-| Code  | Meaning                                                                                        |
-| ----- | ---------------------------------------------------------------------------------------------- |
-| `0`   | Success (review completed; with `--fail-on`, nothing tripped the gate).                        |
-| `1`   | Error (bad invocation, agent failure, unusable output, or a blocked secret sync).              |
+| Code  | Meaning                                                                                          |
+| ----- | ------------------------------------------------------------------------------------------------ |
+| `0`   | Success (review completed; with `--fail-on`, nothing tripped the gate).                          |
+| `1`   | Error (bad invocation, agent failure, unusable output, or a blocked secret sync).                |
 | `2`   | `review --fail-on <level>` gate tripped (a finding at or above the level, or changes requested). |
-| `130` | Interrupted with Ctrl-C.                                                                        |
+| `130` | Interrupted with Ctrl-C.                                                                         |
 
 ## Development