0.26

website-builder 0.26 — the checks in your download work again, and a half-finished review owns up 🧰

As always: your favorite AI assistant takes you by the hand — just ask it, in your own words, and it does the work.

What's new:

• ✅ The checks inside your download work again. The zip was missing one of the files make check needs, so the checks stopped part-way through with an error. Fixed — and the check that scans your download for stray personal data now stops with a clear failure instead of quietly passing over a file that isn't there.
• 🔍 A review with a missing reviewer no longer passes for a complete one. If you use the review helper, one of its two independent reviewers dropping out — a rate limit, a signed-out tool — used to leave no trace: you saw one review and assumed that was all there was. Now every reviewer that was tried appears, a failed one is shown with its error (a recognised quota refusal says "wait or add credits"; anything else shows the error to read), and the run ends with one line naming who actually reviewed. One known gap remains: a reviewer that refuses in the shape of findings can still be counted.
• 📌 Installing from a git clone? Re-installing now keeps a skill you pinned to another worktree, and tells you it kept it; --force relinks everything as before. From a downloaded zip there is no git information to check, so pins are not kept there — the run says so and names every link it moved.
• 🗣️ The installer says what it moves. Every link it repoints away from another location is named on screen, and a mistyped or extra option stops the run instead of being silently ignored.
• 🧹 Housekeeping. The security policy now ships in your download, so you can see where to report a problem. Clearer install instructions in the README and the Codex guide, and two new automated test suites — 73 checks each — covering the installers and the review helper.
• 🔁 Already have a site? Nothing changes on its own. If you keep the toolkit as a git clone, ask your assistant: "check if my site needs any updates from the latest website-builder version" — it lists what changed and helps you apply it; a few template pieces still need a hand.

New here? How to start: download website-builder.zip below, unzip it, and paste the starter prompt from the README into your AI assistant — it takes you by the hand from there. Works on macOS, Linux, WSL, and Git Bash on Windows.

---

For the technically curious:

• Both installers (scripts/install.sh, scripts/install-codex.sh) keep a symlink resolving into a linked worktree of this repo at the same skill, and report it; --force relinks. Resolved links moved from elsewhere are announced; where the check cannot run — no git, a git without rev-parse --path-format, or a copy that is not a repo, including the released zip — one note says so alongside those relinks. Unknown and trailing flags exit 2 — PR #105.
• scripts/package.sh ships scripts/test_install_pin.sh, scripts/check_template_coverage.sh and SECURITY.md; the coverage script was missing, so a packaged make check stopped at exit 127 — PR #105, PR #107.
• check_clean.sh fails on a missing scan target instead of naming it in the OK line, and treats a grep exit > 1 as a scan error rather than "no hits" — PR #107.
• independent-review: every attempted tier leaves a stdout section — its review, or a FAILED one quoting the error with terminal control codes stripped — a closing reviewers: line names each outcome, recognised quota refusals are told apart from other failures, and a round with fewer than two counted reviewers says so. Exit codes unchanged. Also fixes a pre-existing case where an unrecognised escape truncated an ollama review that still counted; the refusal validator's known gaps are tracked, not fixed — PR #104.
• Two new CI jobs, review-reporting and install-pin, run those suites on ubuntu-latest; both suites were also run locally on macOS (bash 3.2) and in a Debian container. Windows is untested — PR #104, PR #105.