[cleverhoods]

0.6.5 — a pinned npx version runs that version, folder exclusions leave out what they name, and a list of the files Claude Code loads

On 0.6.4, npx @reporails/cli@X.Y.Z ran the latest release instead of X.Y.Z, so a CI job could not pin the version it checks with (#47). A folder value with a / in exclude_dirs or --exclude-dirs, such as /docs, docs/* or an absolute path, showed on the Excluded line but left nothing out, and ./docs left out every docs folder at any depth (#46). A first run through npx on a machine without uv stopped and asked you to restart your shell. There was also no way to ask which instruction files Claude Code should load in a project, or why it skips an AGENTS.md (#48). In 0.6.5 a pinned version runs that version, a folder value leaves out the folder it names or stops the run with an error, a first npx run finishes your command, and ails expected-loads lists the files Claude Code loads.

npm and npx

• A pinned npx @reporails/cli@X.Y.Z or npm install -g @reporails/cli@X.Y.Z runs that version. A bare npx @reporails/cli runs the latest release unless a copy is installed globally or in the project.
• A global npm install stays on its version until you update it. ails version shows npm for an install from the npm package (npx included), and ails update prints the command that updates it. A run through the npm package no longer checks the package index for a newer release every time it starts.
• A first run through npx on a machine without uv installs uv and finishes your command. The install messages go to stderr, so the command's own output, such as -f json, stays clean.
• ails install run through npx, pnpm dlx or bunx, or from a project's own dependency, puts ails on your PATH instead of reporting that copy as already installed.

Leaving folders out

• A folder value with a / is a folder path from the project root: /docs, ./docs, docs/. and an absolute path inside the project leave out the root's docs folder. The Excluded line lists it as ./docs. A value without a / is still a folder name at any depth. Folder names holding [ and ], such as [slug], can be left out.
• A folder value holding *, ?, a backslash or a .. step stops the run with an error that names the flag or the config file it came from and points to --exclude-files / exclude_files for file patterns. ails config set exclude_dirs refuses such a value before writing, and the MCP tools answer config_unreadable.
• A folder you leave out is skipped during the scan, by name or by path, so a large left-out folder costs no scan time. The scan does not enter it through a symlink, or on Windows a junction, either, and an agent whose files sit only in a left-out folder is not detected.
• The skill entry-point check no longer reports a skill folder you left out, and ails check --agent <name> no longer checks another agent's file that you named inside a left-out folder.
• On a run that names a file and also checks a folder or a capability listing, the Excluded line keeps a folder or pattern the named file sits in.

Which files Claude Code loads

• ails expected-loads prints, as one JSON object, the instruction files Claude Code should load for a session in a project, and for each AGENTS.md it skips, the CLAUDE.md, .claude/CLAUDE.md or CLAUDE.local.md that made it skip the file. An AGENTS.md that links to a CLAUDE.md, or is a copy of one with exactly the same text, is reported as that file. Your own ~/.claude/CLAUDE.md and ~/.claude/rules/ files are listed, managed-only leaves out exactly the files Claude Code leaves out at launch, and an empty file, or one holding only frontmatter, is not expected to load.
• ails check honours Claude Code's Project instructions setting saved under the plugin ID Claude Code has used since 2.1.285 (cc-plugin-agents-md@builtin), as well as the older agents-md@builtin.
• A rules file in a subdirectory's .claude/rules/ folder is checked as loading on demand, as Claude Code loads it, rather than at session start.
• A project's CLAUDE.md that a subfolder's CLAUDE.md links to is listed and checked as the project's main file, not as that subfolder's file.

MCP

• A new prepare tool maps a project's instruction files without checking them, so the next validate returns sooner. It sees files added or removed since its last call.
• validate tells the agent which messages are announcements from reporails, so it shows them as announcements rather than as account messages.

Other changes

• Event logs in ~/.reporails/xray/ are private to you, removed after 30 days (sooner if Claude Code is set to keep sessions for less), and the folder stays under 100 MB.
• On Windows, ails install no longer counts an ails in the current folder or in uv's cache as installed, and an empty PATHEXT no longer hides an installed ails.
• ails update reports a uv run that cannot start or times out, instead of crashing.
• A space before the address in AILS_SERVER_URL no longer stops ails check from reaching that server.
• With generic_scanning: true, a failure while reading the files your instruction files import or link is logged as a warning instead of silently checking none of them.
• A run with no findings no longer says the score covers the rest of the project, since it shows no score.
• The over-cap message never suggests leaving out a folder that --exclude-dirs would refuse.

Breaking changes

• An exclude_dirs or --exclude-dirs value holding *, ?, a backslash or .. now stops the run instead of being listed while leaving nothing out. Move file patterns to exclude_files / --exclude-files.
• ./docs now leaves out only the root's docs folder. To leave out every docs folder, write docs.
• A global npm install no longer moves to the latest release on its own. Run the command ails update prints.

Closes #46
Closes #47
Closes #48