Feed real changelog into the updater notes and show them in-app

The in-app "a new version is available" prompt showed only a version number,
and latest.json's `notes` carried the workflow's generic install template —
the actual changelog only ever appeared on the GitHub release page, edited in
by hand after the fact.

Now CHANGELOG.md is the single source of truth. The release workflow extracts
the section matching the tag (portable awk, so it runs on the macOS and Windows
runners too) and passes it as tauri-action's releaseBody, which is also what
lands in latest.json's `notes`. The update banner renders update.body, so the
prompt says what changed. Download links and Gatekeeper/SmartScreen help stay
out of the changelog — they're appended to the GitHub page after publishing, so
they never clutter the in-app notes. RELEASING.md documents the new flow.

Takes effect on the next tagged release; nothing about the published v0.10.1
changes.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Author: sparkly-quasar

.github/workflows/release.yml

@@ -35,6 +35,39 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
+      - name: Extract release notes for this tag
+        # The single source of truth for "what changed" is CHANGELOG.md. We pull
+        # out the section whose heading matches the tag and hand it to
+        # tauri-action as the release body — which is also what tauri-action
+        # writes into latest.json's `notes`, i.e. what the in-app updater shows.
+        # Runs on every matrix platform (bash is available on all three runners)
+        # so each job produces an identical body and latest.json stays consistent.
+        id: notes
+        shell: bash
+        run: |
+          ver="${GITHUB_REF_NAME}"
+          # Print the lines under `## <tag>` up to the next `## ` heading, with
+          # leading and trailing blank lines trimmed but internal ones kept.
+          # Done inside awk so it needs nothing beyond POSIX (no tac/GNU sed) —
+          # this step also runs on the macOS and Windows runners.
+          body="$(awk -v head="## $ver" '
+            $0 == head { grab=1; next }
+            grab && /^## / { exit }
+            grab {
+              if ($0 ~ /[^[:space:]]/) { while (pending-- > 0) print ""; pending=0; print; started=1 }
+              else if (started) { pending++ }
+            }
+          ' CHANGELOG.md)"
+          if [ -z "$body" ]; then
+            echo "::warning::no CHANGELOG.md section for $ver — using a fallback line"
+            body="See the release page for what's new in ${ver}."
+          fi
+          {
+            echo "body<<__NOTES_EOF__"
+            echo "$body"
+            echo "__NOTES_EOF__"
+          } >> "$GITHUB_OUTPUT"
+
       - name: Install Linux system dependencies
         if: matrix.platform == 'ubuntu-22.04'
         run: |
@@ -93,26 +126,13 @@ jobs:
         with:
           tagName: ${{ github.ref_name }}
           releaseName: "Field Notes ${{ github.ref_name }}"
-          releaseBody: |
-            Download an installer for your platform below.
-
-            **macOS:** not yet notarized — on first launch, **right-click the app and
-            choose Open** to get past Gatekeeper.
-
-            If you still have a problem opening it, use the **"Open Anyway"** setting:
-            1. Try to open the app and dismiss the warning dialog.
-            2. Open the **Apple menu** and select **System Settings**.
-            3. Click **Privacy & Security** in the left sidebar.
-            4. Scroll to the **Security** section — you'll see a message that the app was blocked.
-            5. Click **Open Anyway**, enter your Mac's login password, and click **OK**.
-
-            **Windows:** download the `-setup.exe` installer. It isn't code-signed yet, so
-            SmartScreen may warn on first launch — click **More info → Run anyway**.
-
-            **Linux:** use the .AppImage (portable), or the .deb / .rpm for your distro.
-
-            The Companion and text-import features run a model locally — the app guides
-            you through installing Ollama and downloading one on first use.
+          # The changelog section for this tag, from the step above. This is the
+          # release body AND `latest.json`'s `notes`, so the in-app updater prompt
+          # now shows what actually changed. Download links and Gatekeeper /
+          # SmartScreen help are deliberately NOT here — they'd be noise in the
+          # app; they're added to the GitHub release page after publishing
+          # (see RELEASING.md).
+          releaseBody: ${{ steps.notes.outputs.body }}
           releaseDraft: true
           # The updater reads /releases/latest/download/latest.json, and GitHub's
           # "latest" excludes prereleases. So marking a v*-beta / v*-rc tag as a

CHANGELOG.md

@@ -0,0 +1,38 @@
+<!-- SPDX-License-Identifier: LicenseRef-PolyForm-Noncommercial-1.0.0 -->
+# Changelog
+
+User-facing notes, one section per released version. The release workflow reads
+the section whose heading matches the tag (`## vX.Y.Z`) and uses it as the
+release body — which is also what lands in `latest.json` and what the in-app
+"a new version is available" prompt shows. So: write for the person who will
+read it inside the app, keep it to what changed, and don't put download links
+or Gatekeeper/SmartScreen help here (those are added to the GitHub release page
+after publishing — see RELEASING.md).
+
+The heading must be exactly `## vX.Y.Z`, matching the tag. Newest on top.
+
+## v0.10.1
+
+- **You can see when your phone has paired.** Setting up phone access used to
+  give no feedback — you showed the QR code, scanned it, and then guessed. Now a
+  green "Paired successfully" light appears the moment your phone first connects.
+  It confirms a phone has paired since you turned phone access on (not that one
+  is connected this second), and resets when you turn phone access off. Phone
+  access is unchanged otherwise: off by default, tailnet-only, code on every
+  request.
+
+## v0.10.0
+
+- **The Companion stays responsive.** It no longer locks the window while it
+  thinks (worst on the first message, when the model loads), and the model
+  pre-loads when you open the Companion so the first reply comes back at normal
+  speed. Same fix for Import from text.
+- **It's honest about your hardware.** The app checks whether your machine can
+  run the model you picked and says so plainly — before a multi-gigabyte
+  download, and again using real reply speed once you've chatted.
+- **Import from text actually works now.** It reads any format, pulls out every
+  dose, and uses each substance's standard name so the interaction checker
+  recognises it. The screen shows everything it found for review.
+- **A first-run choice for the Companion**, asked once on a fresh install.
+- **Send feedback in one click** — a Settings card opens a prefilled GitHub
+  issue in your browser. Nothing is sent from the app itself.

RELEASING.md

@@ -33,6 +33,18 @@ npm install --package-lock-only                        # syncs package-lock.json
 Also update `ROADMAP.md` (mark shipped items with the version) and `README.md`
 (the feature list) if features shipped.
 
+## 2a. Write the changelog section (before tagging)
+
+Add a `## vX.Y.Z` section to the top of **`CHANGELOG.md`** with the user-facing
+"what's new", written for the person reading it **inside the app**. The release
+workflow extracts this exact section and uses it as the release body — which is
+also what goes into `latest.json` and what the in-app "a new version is
+available" prompt now shows. So keep it to what changed; **no** download links
+or Gatekeeper/SmartScreen help here (those go on the GitHub page in step 4).
+
+The heading must be exactly `## vX.Y.Z`, matching the tag, or the build falls
+back to a generic one-liner (and logs a warning).
+
 ## 3. Tag
 
 Work lands on `main` first (merge feature branches, make sure CI-relevant
@@ -49,19 +61,23 @@ git push origin main vX.Y.Z
   **prerelease**, which keeps it away from `/releases/latest` and therefore away
   from everyone's auto-updater. Plain tags become the update everyone is offered.
 
-## 4. Write the release notes
+## 4. Round out the GitHub release page
 
-The workflow fills the draft with a generic install-instructions template — CI
-can't know what changed. Replace it before (or right after) publishing:
+The workflow already fills the draft body with the `CHANGELOG.md` section from
+step 2a — that part is done, and it's what `latest.json` and the in-app prompt
+carry. What the changelog deliberately leaves out is the web-page furniture, so
+**append** it to the draft body (don't replace what's there):
 
-1. **What's new** — the actual changes, written for end users.
-2. **Downloads table** — direct links to the five files a human wants
+1. **Downloads table** — direct links to the files a human wants
    (`_x64-setup.exe`, `.msi`, `_universal.dmg`, `.AppImage`, `.deb`, `.rpm`).
    Asset URLs follow the pattern:
    `https://github.com/sparkly-quasar/field-notes/releases/download/vX.Y.Z/<asset-name>`
-3. **First-launch notes** — SmartScreen (Windows) and Gatekeeper (macOS)
+2. **First-launch notes** — SmartScreen (Windows) and Gatekeeper (macOS)
    workarounds, since installers are unsigned.
 
+Keep this download/first-launch furniture **out of `latest.json`** — it lives
+only on the web page. That's why it's appended here rather than in `CHANGELOG.md`.
+
 Constraints worth knowing:
 
 - **Assets cannot be grouped, reordered, or renamed.** GitHub shows a flat

src/routes/+page.svelte

@@ -1555,14 +1555,22 @@
   <main>
     {#if update && !updateDismissed}
       <div class="update-banner">
-        <span>A new version <strong>v{update.version}</strong> of Field Notes is available.</span>
-        {#if updateBusy}
-          <span class="muted small">{updateMsg}</span>
-        {:else}
-          <span class="row-actions">
-            <button class="primary small-btn" onclick={installUpdate}>Install &amp; restart</button>
-            <button class="ghost small-btn" onclick={() => (updateDismissed = true)}>Later</button>
-          </span>
+        <div class="update-head">
+          <span>A new version <strong>v{update.version}</strong> of Field Notes is available.</span>
+          {#if updateBusy}
+            <span class="muted small">{updateMsg}</span>
+          {:else}
+            <span class="row-actions">
+              <button class="primary small-btn" onclick={installUpdate}>Install &amp; restart</button>
+              <button class="ghost small-btn" onclick={() => (updateDismissed = true)}>Later</button>
+            </span>
+          {/if}
+        </div>
+        {#if update.body?.trim()}
+          <!-- The changelog section for this version, straight from latest.json.
+               Shown as plain text (not rendered as markdown) — it's short and the
+               Markdown-ish dashes read fine as-is. -->
+          <p class="update-body">{update.body.trim()}</p>
         {/if}
       </div>
     {/if}
@@ -2885,7 +2893,9 @@ Peak was intense and connected; gentle comedown by 1am. Drank lots of water, no
   .dose-class.caution { color: var(--caution); }
   .dose-class.danger { color: var(--danger); font-weight: 600; }
   .dose-class.muted { color: var(--muted); }
-  .update-banner { display: flex; flex-wrap: wrap; align-items: center; gap: 0.8rem; justify-content: space-between; border: 1px solid var(--accent); background: color-mix(in srgb, var(--accent) 12%, transparent); border-radius: 10px; padding: 0.6rem 0.9rem; margin-bottom: 1rem; font-size: 0.9rem; }
+  .update-banner { border: 1px solid var(--accent); background: color-mix(in srgb, var(--accent) 12%, transparent); border-radius: 10px; padding: 0.6rem 0.9rem; margin-bottom: 1rem; font-size: 0.9rem; }
+  .update-head { display: flex; flex-wrap: wrap; align-items: center; gap: 0.8rem; justify-content: space-between; }
+  .update-body { margin: 0.6rem 0 0.1rem; padding-top: 0.5rem; border-top: 1px solid color-mix(in srgb, var(--accent) 30%, transparent); color: var(--muted); font-size: 0.83rem; line-height: 1.5; white-space: pre-wrap; max-height: 11rem; overflow-y: auto; }
   .ai-log { max-height: 150px; overflow: auto; background: color-mix(in srgb, var(--ink) 6%, transparent); border-radius: 8px; padding: 0.6rem; font-size: 0.75rem; line-height: 1.4; white-space: pre-wrap; word-break: break-word; color: var(--muted); margin: 0.2rem 0 0; }
   .import-panel { border: 1px solid var(--line); border-radius: 12px; padding: 1rem; margin: 0.6rem 0 1rem; display: flex; flex-direction: column; gap: 0.6rem; }
   .import-text { font: inherit; background: var(--bg); color: var(--ink); border: 1px solid var(--line); border-radius: 8px; padding: 0.6rem 0.7rem; resize: vertical; width: 100%; box-sizing: border-box; }