Inspectrum 0.2.3

Highlights

• Detect active Claude Code plugin/package version drift in inspectrum doctor.
• Align npm, Claude plugin, Codex plugin, MCP Registry, and bundled MCP configuration on 0.2.3.
• Reposition Inspectrum as an independent pre-flight checkpoint while keeping reliability gain, code review, pull-request review, pair programming, and moat claims explicitly unproven or out of scope.

Install

npx -y inspectrum@0.2.3 doctor

Claude Desktop users can install the attached inspectrum-0.2.3.mcpb bundle.

Verified artifacts

• npm tarball SHA-1: 241b5533c92aba7f678948bc5dba398ac4791e3d
• npm candidate SHA-256: 22a0fa7d65cb42afcfc4c564b16cb5b84b5008099fb932f98fcd84eae48a0bc7
• MCPB SHA-256: b0234abb7c6825b49090001123d48886d215c5de8892b3559ed7c8725b21b1c0

Release commit: 5845940332cffb6607c5fb35934aa02a4c55ef44.

Inspectrum v0.2.2

Inspectrum 0.2.2

Inspectrum turns ad-hoc second opinions into a repeatable plan-review checkpoint
between coding agents. Reviews stay attributed, failures remain visible, and the
user keeps final approval.

Highlights

• Review Codex plans with Claude and Claude Code plans with Codex.
• Accept structured reviewer envelopes and expose correct MCP tool annotations.
• Add the MCP Registry manifest and a Codex Git marketplace plugin.
• Add the installable Claude Desktop MCPB bundle.
• Harden GitHub releases and introduce trusted, staged npm publishing.
• Update production dependencies; the release lockfile has no known npm audit
  vulnerability.

This release remains focused on plan review. It does not claim to replace tests,
human approval, or established pull-request review.

Install

npx -y inspectrum@0.2.2 doctor

Claude Desktop users can download inspectrum-0.2.2.mcpb from the assets below.

Validation

• Release candidate: commit c46c45fdb5c3ad7513400babc22976ff3469357f
• GitHub release workflow: https://github.com/yannmenec/inspectrum/actions/runs/30569158987
• npm staging workflow: https://github.com/yannmenec/inspectrum/actions/runs/30569327798

v0.2.1 — hardening: fail-open plan gate, doctor compat, working MCPB

A hardening release closing the deferred findings from the pre-0.2.0 Codex GPT-5.6 review, each re-verified by an independent multi-LLM review pass before merge. No new features; the review_plan tool and the ExitPlanMode plan gate are unchanged in behavior — they're now harder to break.

Plan gate (#27, closes #21 / #22)

• The Claude Code plugin shim now runs only the exact package version paired with the plugin — no global binary, no mutable @latest tag on the ExitPlanMode critical path.
• Every operational failure (offline npx, missing node/npx, unset HOME, malformed output, timeout) fails open: emits { "systemMessage": "… Plan proceeds unreviewed." } and exits 0. A plan is never blocked by an inspectrum error.
• Untrusted hook input is bounded: stdin is capped at 128 KB during streaming; planFilePath is confined to the Claude plans directory with lstat + realpath + O_NOFOLLOW + dev/ino TOCTOU recheck + owner check, and read through a 64 KB cap. FIFOs, devices, symlinks, and oversized files are rejected — fail-open.

Doctor (#30, closes #24)

• Codex CLI compatibility gate: requires >= 0.99.0 with a semver-correct per-component compare (0.100.0 > 0.99.0), prereleases handled per semver.
• Aliased Codex reviewers (e.g. [reviewers.codex-high] backend = "codex") now resolve to the backend binary for the health probe, matching the review path — inspectrum doctor no longer reports a false "not found" for a working reviewer.
• Version parsing tolerates ANSI colour, wrapper banners, npm update notices, and +build metadata around the version line.
• The Claude plugin hook check is optional — absent/disabled/unreadable degrades to a warning, never a hard failure.
• Removed the dead limits.plan_max_chars config key; existing configs that still carry it continue to load.

Distribution (#29, closes #23)

• Repaired the Claude Desktop MCPB. The v0.2.0 bundle was incomplete and would not run; the v0.2.1 bundle is autonomous — it ships dist/, the generated manifest.json, and the full production node_modules, and runs under node ${__dirname}/dist/cli.js with zero runtime install. Verified by speaking MCP (initialize + tools/list) to it with no npm/npx on PATH.
• Deterministic builds: two fresh builds (CI on Linux, local on macOS) produce a byte-identical archive.
• MCPB manifest version is generated from package.json; a contract test gates version consistency across package.json, package-lock.json, .claude-plugin/plugin.json.
• macOS-only (compatibility.platforms: ["darwin"], node >= 20). Release CI validates the bundle with the official @anthropic-ai/mcpb tooling, inspects the ZIP, and runs an MCP smoke before attaching it.

Install

# Claude Code plugin
claude plugin marketplace add yannmenec/inspectrum
claude plugin install inspectrum@inspectrum

# MCP server (any host)
npx -y inspectrum@0.2.1

Claude Desktop (macOS): download inspectrum-0.2.1.mcpb below, open it, confirm. The earlier v0.2.0 bundle was incomplete — use the v0.2.1 asset.

Full changelog: v0.2.0...v0.2.1

v0.2.0 — Codex plan gate for Claude Code

Summary

Inspectrum 0.2.0 adds a Claude Code plan gate backed by Codex: plans are reviewed before Claude's normal approval dialog, actionable findings can send the plan back for revision, and the user always retains the final approval. The release also adds on-demand review, reviewer diagnostics, and real CLI/E2E smoke harnesses.

Install or upgrade

Prerequisites:

• Node.js 20 or newer.
• Codex CLI 0.99.0 or newer, authenticated with ChatGPT or OPENAI_API_KEY. Version 0.99.0 is the first tagged Codex release containing every option used by 0.2.0, including --ephemeral.
• Claude Code with PreToolUse / ExitPlanMode hook support. The exact Claude Code version used for the merged v0.2.0 E2E was not recorded, so this release does not claim a more specific minimum.

Install the automatic gate:

claude plugin marketplace add yannmenec/inspectrum
claude plugin install inspectrum@inspectrum

Upgrade an existing plugin installation, then restart Claude Code:

claude plugin update inspectrum@inspectrum

For the on-demand /inspectrum:review command, also register the MCP server:

claude mcp add --transport stdio --scope user inspectrum -- npx -y inspectrum@0.2.0

The same npm/stdio command is the supported manual MCP path for other hosts.

What's new

• Automatic plan gate: inspectrum plan-gate handles Claude Code ExitPlanMode, reviews with Codex, caches unchanged plans, and allows up to two revision rounds before returning control to the user (#13, #14).
• Claude Code plugin and on-demand review: marketplace metadata, the automatic hook, and /inspectrum:review ship together (#15).
• Codex as the default reviewer: five-minute default timeout, explicit read-only sandbox, configurable model/reasoning effort, and safer argument handling (#12, #25).
• Doctor improvements: authentication checks plus resolved Codex model/effort diagnostics, including Codex versions that print login state on stderr (#12, #19, #25).
• Real smoke coverage: an opt-in real Codex test and a headless Claude plan → deny → revise → approve harness (#16, #25).
• Versioned server metadata and release preparation: runtime version reporting, 0.2.0 alignment, and version-derived archive naming (#11, #18, #20).

Security and behavior guarantees present in 0.2.0

• Codex runs with --ephemeral, --skip-git-repo-check, and -s read-only from a private temporary working directory.
• Sandbox/approval bypasses, cwd overrides, and --add-dir supplied through reviewer configuration are stripped before execution.
• The core gate, once invoked, converts parse, reviewer, timeout, and state errors into a visible fail-open message and exits cleanly.
• A successful review never auto-approves a plan: Claude's normal user approval dialog still appears.
• Reviewer-controlled findings are bounded and delimited before being returned to Claude. Session/state files are local; the reviewer remains read-only with respect to the audited project.

Known limitations

Do not install either v0.2.0 MCPB asset. inspectrum-0.2.0.mcpb and inspectrum.mcpb are incomplete 420-byte archives containing only manifest.json; the declared entry point is absent. They are not autonomous or runnable in a clean Claude Desktop environment. Use the npm/stdio installation above.

• The plugin bootstrap and untrusted hook-input hardening tracked in #21 and #22 are not part of v0.2.0. In particular, the core fail-open guarantee above does not repair every bootstrap failure in the shipped shim.
• MCPB/version drift and doctor/dead-config follow-ups are tracked in #23 and #24; their later fixes are not attributed to this release.
• The headless Claude E2E requires a CLI-authenticated claude -p session and otherwise exits with a documented skip status.
• Windows support remains out of scope for this release.

Included pull requests

#11 · #12 · #13 · #14 · #15 · #16 · #17 · #18 · #19 · #20 · #25 · #26

Full commit range: v0.1.5...v0.2.0.

v0.1.1

v0.1.1 - non-Terminal install (MCPB + Cursor + Codex app)