v1.8.32 — close the auto-update opt-out gaps (#123, fully)
Completes the #123 fix that 1.8.31 only half-delivered. The documented opt-outs (COZEMPIC_NO_AUTO_UPDATE, COZEMPIC_PIN) are now honored across the update paths cozempic controls, surfaced by two rounds of adversarial QA.
- Hook + Python updater — gated (1.8.31).
- npm installer — now honors both opt-outs: any non-empty
COZEMPIC_PIN(even malformed/whitespace) drops--upgradefor parity with the hook; a version-shaped pin installs exactly that version (no arg injection). Decision logic extracted to a pure, behaviorally-tested function. - MCP/plugin launcher —
uv run --with cozempicalways provisions the latest published cozempic and cannot read cozempic's env vars; this is documented behavior, not claimed as gated. Pinners should install cozempic explicitly. COZEMPIC_PIN— a unicode-digit or malformed pin no longer prints an un-runnable reconcile command; whitespace-only pins disable auto-update consistently on every path.
Docs corrected to state exactly which paths honor the opt-outs. Two adversarial QA-fleet passes (find → verify → completeness critic) gated this release.