Merge pull request #59 from savvides/release/v3.3.0.2

v3.3.0.2 — apostrophe search returned wrong results

Author: savvides

.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "idstack",
-  "version": "3.3.0.1",
+  "version": "3.3.0.2",
   "description": "Evidence-based instructional design pipeline. 11 skills backed by peer-reviewed research across 11 domains. Analyze, design, build, review, and export courses with every recommendation citing its evidence tier.",
   "author": {
     "name": "Philippos Savvides",

CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## v3.3.0.2 (2026-08-06)
+
+To get these fixes: `cd` into your idstack clone, then `git pull && ./setup`. Restart Claude Code afterward — plugins load at session start.
+
+### Fixed — learnings search returned wrong results for apostrophes
+
+- **Searching your learnings for a term with an apostrophe returned the wrong answer, silently.** `bin/idstack-learnings-search` spliced `$SOURCES`, `$TYPE`, `$KEYWORD` and `$LIMIT` straight into Python source. A search for `Bloom's` or `learner's` made that source a SyntaxError, `2>/dev/null` swallowed it, and the script fell through to a `grep` fallback that has no `--type` filter — so it answered with a record of the wrong type rather than failing. In a tool for instructional designers, those are ordinary search terms. The values now travel as `sys.argv` arguments, and a non-numeric `--limit` falls back to 3 instead of reaching `tail -"abc"`. This is the same defect class v3.3.0.0 fixed in `bin/idstack-status`; that pass missed this file. Thanks to the Jules bot run that flagged it (#33).
+- **A malformed payload could corrupt the manifest.** `bin/idstack-manifest-merge` validated that the *manifest* root was a JSON object but never checked the *payload* root, so a bare JSON array merged in cleanly and surfaced much later as `AttributeError: 'list' object has no attribute 'get'` inside `bin/idstack-status --readiness`. It now rejects a non-object payload with exit 1 (#48).
+
+### For contributors
+
+- `test/test-manifest-merge.sh` covers non-object payload roots (list and string): 21 → 23 assertions.
+- Closed 15 stale bot PRs from May/June that the v3.3.0.0 audit had already superseded, that duplicated a better sibling, or that were incorrect (deleting live migration code, converting a clean exit into a traceback, a benchmark that does not reproduce, and one whose pty assertion deadlocks `smoke-test.sh` under CI).
+
 ## v3.3.0.1 (2026-08-05)
 
 To get this fix: `cd` into your idstack clone, then `git pull && ./setup`. Restart Claude Code afterward — plugins load at session start.

VERSION

@@ -1 +1 @@
-3.3.0.1
+3.3.0.2

docs/index.html

@@ -44,7 +44,7 @@
     "operatingSystem": "macOS, Linux, Windows",
     "softwareVersion": "3.3.0",
     "datePublished": "2026-04-20",
-    "dateModified": "2026-08-05",
+    "dateModified": "2026-08-06",
     "offers": {
       "@type": "Offer",
       "price": "0",
@@ -926,7 +926,7 @@
           <span class="dot" aria-hidden="true"></span>
           <span>MIT</span>
           <span class="dot" aria-hidden="true"></span>
-          <span>v3.3.0.1 — Course memory fixed</span>
+          <span>v3.3.0.2 — Course memory fixed</span>
         </p>
         <h1 id="hero-title">Evidence-based instructional design, transparently cited.</h1>
         <p class="lede">108 peer-reviewed studies across 11 research domains. Every recommendation tagged with its evidence tier — <span class="tier tier-1">T1</span> meta-analyses and RCTs through <span class="tier tier-5">T5</span> expert opinion. Runs in Claude Code, OpenAI Codex CLI, and (soon) Gemini.</p>
@@ -1176,11 +1176,12 @@ <h2 id="whatsnew-title">v3.3.0.0 — Course memory that actually remembers.</h2>
       </header>
 
       <article class="release-card">
-        <p class="release-meta">August 4, 2026 · v3.3.0.0 · patched by v3.3.0.1</p>
+        <p class="release-meta">August 4, 2026 · v3.3.0.0 · patched by v3.3.0.2</p>
         <h3>Welcome-back messages work on stock macOS now.</h3>
         <p>On any Python older than 3.12 — including the 3.9 that macOS ships — the session-memory code inside every skill hit a silent syntax error. No welcome-back summary, no quality-score trend, no suggested next step. Fixed, and now exercised on Python 3.9 in CI so it stays fixed.</p>
         <p>Also in this release: <code>/idstack:pipeline</code> invokes its child skills correctly in Claude Code, skills notice previous runs again ("update the results or start fresh?"), imported courses get a proper next-step suggestion, and a course name with an apostrophe no longer blanks the status dashboard. To update: <code>cd</code> into your idstack clone, then <code>git pull &amp;&amp; ./setup</code>.</p>
         <p>Patched in v3.3.0.1 (August 5): skills no longer point you at commands that don't exist. Welcome-back and next-step messages now name the runnable <code>/idstack:&lt;skill&gt;</code> form.</p>
+        <p>Patched in v3.3.0.2 (August 6): searching your learnings for a term with an apostrophe — <code>Bloom's</code>, <code>learner's</code> — returned a wrong-typed result instead of the right one. Fixed.</p>
         <p><a href="https://github.com/savvides/idstack/releases" rel="noopener">→ All releases on GitHub</a></p>
       </article>