release: FixMap v0.8.3

Author: aryamthecodebreaker

CHANGELOG.md

@@ -6,6 +6,27 @@ Accuracy figures inside a released entry are the numbers measured **at that rele
 left as written. The current numbers live on the [evidence page](https://usefixmap.vercel.app/evidence),
 which is generated from the recorded results rather than transcribed by hand.
 
+## 0.8.3 - 2026-08-02
+
+### Fixed
+
+- `fixmap_compare` over MCP now rejects a truncated `{ "contextFiles": [] }` object instead of returning a successful unchanged comparison. Complete FixMap reports that legitimately contain zero matches remain valid, and optional rank, score, and confidence fields are type-checked when present (#398).
+
+### Evidence
+
+- Reproduced the failure with a real stdio MCP client against the published `@aryam/fixmap@0.8.2` package before changing source.
+- The MCP regression suite, all 414 workspace tests, typechecking, lint, production builds, Action bundle parity, smoke tests, held-out/external/adversarial gates, scanner benchmark, and production audit pass. Ranking inputs and recorded hit rates are unchanged.
+
+### Installation
+
+```bash
+npm install --global @aryam/fixmap@0.8.3
+fixmap doctor
+fixmap --version
+```
+
+The package, MCP Registry entry, GitHub tag/release, Action tag, and production site must all resolve to 0.8.3 before the release is considered complete.
+
 ## 0.8.2 - 2026-08-02
 
 Closes the audit sweep filed against v0.8.1.

README.md

@@ -73,7 +73,7 @@ npx -y @aryam/fixmap@latest doctor
 Remove the stale copy with `npm uninstall -g @aryam/fixmap`, or use the unambiguous form:
 
 ```bash
-npm exec --yes --package=@aryam/fixmap@0.8.2 -- fixmap --version
+npm exec --yes --package=@aryam/fixmap@0.8.3 -- fixmap --version
 ```
 
 | Command | Answers |
@@ -274,8 +274,8 @@ npx -y @aryam/fixmap@latest doctor
 ```text
 # FixMap Doctor
 
-- ok  Running version: 0.8.2
-- PROBLEM  Global install: 0.3.1 (this process is 0.8.2)
+- ok  Running version: 0.8.3
+- PROBLEM  Global install: 0.3.1 (this process is 0.8.3)
     A globally installed fixmap shadows the version npx was asked for. Run
     `npm uninstall -g @aryam/fixmap`, or invoke the exact version with
     `npm exec --package=@aryam/fixmap@<version> -- fixmap <command>`.
@@ -284,7 +284,7 @@ npx -y @aryam/fixmap@latest doctor
 
 It exits non-zero when it finds a shadow, so a CI step fails rather than reading on.
 
-Doctor can compare the running package, the first `fixmap` shim on `PATH`, and npm's global package. It cannot infer a version you intended in some other shell command or inspect every historical npm-exec cache entry; when reproducibility matters, use `npm exec --yes --package=@aryam/fixmap@0.8.2 -- fixmap --version` and confirm the printed version before continuing.
+Doctor can compare the running package, the first `fixmap` shim on `PATH`, and npm's global package. It cannot infer a version you intended in some other shell command or inspect every historical npm-exec cache entry; when reproducibility matters, use `npm exec --yes --package=@aryam/fixmap@0.8.3 -- fixmap --version` and confirm the printed version before continuing.
 
 ### MCP server
 
@@ -358,7 +358,7 @@ jobs:
         with:
           fetch-depth: 0
       - id: fixmap
-        uses: aryamthecodebreaker/FixMap@v0.8.2
+        uses: aryamthecodebreaker/FixMap@v0.8.3
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
 ```
@@ -369,7 +369,7 @@ To close the plan→edit→verify loop without leaving GitHub, save the plan as
 
 ```yaml
       - id: plan
-        uses: aryamthecodebreaker/FixMap@v0.8.2
+        uses: aryamthecodebreaker/FixMap@v0.8.3
         with:
           format: json
       - run: echo '${{ steps.plan.outputs.report }}' > fixmap-plan.json
@@ -379,7 +379,7 @@ To close the plan→edit→verify loop without leaving GitHub, save the plan as
           path: fixmap-plan.json
 
       # In a later run, after the fix is pushed:
-      - uses: aryamthecodebreaker/FixMap@v0.8.2
+      - uses: aryamthecodebreaker/FixMap@v0.8.3
         with:
           mode: verify
           report-path: fixmap-plan.json
@@ -462,6 +462,10 @@ Read the full [benchmark methodology and scanner measurements](docs/BENCHMARKS.m
 npm run evaluate:heldout
 ```
 
+## What changed in v0.8.3
+
+v0.8.3 corrects MCP comparison validation after an independent audit reproduced #398 against the published v0.8.2 package. `fixmap_compare` now rejects a truncated `{ "contextFiles": [] }` object, validates optional rank, score, and confidence fields when present, and still accepts complete reports that legitimately found zero context files. No ranking behavior or evaluation result changed.
+
 ## What changed in v0.8.2
 
 v0.8.2 closes an audit sweep filed against v0.8.1. Windows path handling works throughout — exclusions, symlinks, and manifests saved with a byte order mark. `.vue`, `.svelte`, `.java`, `.php`, `.rb`, `.cs`, `.mts` and `.cts` rank, having previously been scanned but never treated as source. The URLs people actually paste are accepted, and an unresolvable `--diff` now exits non-zero instead of reporting success on a plan that was never diff-aware. New diagnostics name what the report used to leave silent, most importantly a file whose contents were never read but which still ranked on its path. Hit rates are unchanged; confidence is more conservative and better calibrated. Two proposed ranking changes were measured, found not to help, and rejected — the numbers are in the CHANGELOG.

apps/web/package.json

@@ -15,7 +15,7 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@aryam/fixmap-core": "0.8.2",
+    "@aryam/fixmap-core": "0.8.3",
     "@phosphor-icons/react": "^2.1.10",
     "next": "16.2.11",
     "react": "19.2.7",

package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "fixmap-workspace",
-  "version": "0.8.2",
+  "version": "0.8.3",
   "private": true,
   "description": "Local-first repo context for coding agents: paste a GitHub issue URL to get ranked files, test routes, and risks.",
   "license": "MIT",

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fixmap/action",
-  "version": "0.8.2",
+  "version": "0.8.3",
   "description": "GitHub Action wrapper for FixMap pull request reports.",
   "private": true,
   "license": "MIT",
@@ -11,6 +11,6 @@
     "typecheck": "tsc -p tsconfig.json --noEmit"
   },
   "dependencies": {
-    "@aryam/fixmap-core": "0.8.2"
+    "@aryam/fixmap-core": "0.8.3"
   }
 }

packages/action/package.json

@@ -40,7 +40,7 @@ npx @aryam/fixmap plan --base main --head HEAD --format json --output fixmap-rep
 
 Public GitHub issue, pull request, and repository URL modes are available in the CLI and MCP server for issue-only analysis. FixMap fetches task context anonymously, shallow-clones the default branch into an isolated temporary directory, disables credentials and repository execution surfaces, and removes the checkout before returning. Clone locally to use `--diff`, `--base`, `--head`, or working-tree inputs.
 
-For long task text, use `--issue-file task.md`, `--issue @task.md`, or pipe text to `--issue -`. If a stale global installation shadows a pinned npx package on Windows, run `fixmap doctor`, remove the stale install with `npm uninstall -g @aryam/fixmap`, or use `npm exec --yes --package=@aryam/fixmap@0.8.2 -- fixmap ...`.
+For long task text, use `--issue-file task.md`, `--issue @task.md`, or pipe text to `--issue -`. If a stale global installation shadows a pinned npx package on Windows, run `fixmap doctor`, remove the stale install with `npm uninstall -g @aryam/fixmap`, or use `npm exec --yes --package=@aryam/fixmap@0.8.3 -- fixmap ...`.
 
 ## MCP server
 

packages/cli/README.md

@@ -1,6 +1,6 @@
 {
   "name": "@aryam/fixmap",
-  "version": "0.8.2",
+  "version": "0.8.3",
   "mcpName": "io.github.aryamthecodebreaker/fixmap",
   "description": "Local-first CLI and MCP server mapping GitHub issue URLs, tasks, and diffs to ranked files, tests, and risks.",
   "license": "MIT",
@@ -46,7 +46,7 @@
     "typecheck": "tsc -p tsconfig.json --noEmit"
   },
   "dependencies": {
-    "@aryam/fixmap-core": "0.8.2",
+    "@aryam/fixmap-core": "0.8.3",
     "@modelcontextprotocol/sdk": "1.30.0"
   },
   "engines": {

packages/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aryam/fixmap-core",
-  "version": "0.8.2",
+  "version": "0.8.3",
   "description": "Deterministic local-first repository scanner, context ranker, and report renderer for coding agents.",
   "license": "MIT",
   "repository": {

packages/core/package.json

@@ -6,12 +6,12 @@
     "url": "https://github.com/aryamthecodebreaker/FixMap",
     "source": "github"
   },
-  "version": "0.8.2",
+  "version": "0.8.3",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "@aryam/fixmap",
-      "version": "0.8.2",
+      "version": "0.8.3",
       "transport": {
         "type": "stdio"
       },