@taskless/cli 0.11.1 → 0.11.2

package/dist/rules/capabilities.d.ts

@@ -38,7 +38,7 @@
  * Pinned against the binary by `test/ast-grep-vendor-contract.test.ts`
  * ("engine capabilities" → "reports the pinned version").
  */
-export declare const AST_GREP_VERSION = "0.45.2";
+export declare const AST_GREP_VERSION = "0.45.3";
 /**
  * Every language ast-grep can parse, verbatim from
  * `sg run -h` → `Supported languages are: [...]` at
@@ -137,7 +137,7 @@ export declare const AST_GREP_TSX_SPLIT: Readonly<Partial<Record<AstGrepLanguage
  * Pinned against the binary by `test/vale-vendor-contract.test.ts`
  * ("engine capabilities" → "reports the pinned version").
  */
-export declare const VALE_VERSION = "3.20.0";
+export declare const VALE_VERSION = "3.21.0";
 /**
  * Which tier Vale routes an extension to.
  *
@@ -194,6 +194,23 @@ export type ValeFormatTier =
  * plain text today, but the moment Vale routes it to a converter the same
  * omission is a crash that takes down every Vale rule in the run.
  *
+ * 3.20.0 → 3.21.0 LEARNED ONE FORMAT, AND THE SOURCE CHECK IS WHAT FOUND IT.
+ * Every existing row was re-probed against the 3.21.0 binary and none moved.
+ * The v3.20.0...v3.21.0 tree adds `internal/lint/notebook.go` and routes
+ * `.ipynb` to it from `lintFile`'s markup switch, so Jupyter notebooks left
+ * the unnamed plaintext fallback for `markup` and are a new row below. The
+ * benign direction again, and a narrowing: on 3.20.0 a notebook was linted as
+ * the JSON it is, so a rule matching `[*.ipynb]` fired on cell source, on
+ * outputs, and on metadata alike. On 3.21.0 a Markdown cell is read as
+ * Markdown and a code cell as its kernel's language (comments only); raw
+ * cells and outputs are not read at all, and `Line`/`Span` point into the
+ * notebook file. Findings drop, nothing warns. Measured on the pinned binary,
+ * and pinned in `test/vale-vendor-contract.test.ts`.
+ *
+ * Also in that tree, and not a tier change: `internal/lint/selection.go` (the
+ * `doc(...)` scope, see `src/schemas/vale-rule.ts`), and `html.go` now applies
+ * `BlockIgnores`/`TokenIgnores` to `.html`, where 3.20.0 ignored both keys.
+ *
  * NOTHING MOVED ACROSS 3.19.0 → 3.20.0, AND THE SECOND HALF OF THAT CLAIM IS
  * THE ONE THAT COST SOMETHING. Every row below was re-probed against the
  * 3.20.0 binary and none of them moved, which this table can report. It cannot

package/dist/schemas/feedback.d.ts

@@ -0,0 +1,19 @@
+import { z } from "zod";
+/**
+ * Input schema for `taskless feedback send --from` JSON file.
+ *
+ * Human keys only. The map to the survey's question identifiers lives in
+ * `src/survey/constants.ts`, and a payload never carries a `$survey_*` key.
+ */
+export declare const inputSchema: z.ZodObject<{
+    verbatim: z.ZodString;
+    goal: z.ZodString;
+    completed: z.ZodEnum<{
+        Yes: "Yes";
+        No: "No";
+        Unknown: "Unknown";
+    }>;
+    workedWell: z.ZodOptional<z.ZodString>;
+    needsImprovement: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type FeedbackInput = z.infer<typeof inputSchema>;

package/dist/schemas/index.d.ts

@@ -69,7 +69,20 @@ export {
  */
 outputSchema as verifyTestOutputSchema, } from "./verify-test.js";
 export { 
-/** `taskless rule verify <id> --json`, for an ast-grep rule. */
+/**
+ * The layered detail behind one ast-grep rule's verification — schema
+ * validation, Taskless requirement checks, and `sg test`, kept separate
+ * rather than flattened into `verifyTestOutputSchema`'s single envelope.
+ *
+ * Not what `taskless verify --json` or `taskless test --json` print. Both
+ * commands compute this internally via `verifyRule()` and then flatten it
+ * before printing anything, so there is no current CLI invocation that
+ * emits this shape verbatim. A command that did — `taskless rule verify
+ * <id> --json` — existed once and was removed when rule addressing moved
+ * from id to path, because an id can name a rule under two engines and a
+ * path cannot (see `resolve-path.ts`). This schema describes the pre-
+ * flattening detail that command used to print, unchanged since.
+ */
 verifyOutputSchema, 
 /** The same, for a Vale rule — a different shape, discriminated on `engine`. */
 valeVerifyOutputSchema, } from "./rules-verify.js";

package/dist/survey/constants.d.ts

@@ -0,0 +1,50 @@
+/**
+ * The PostHog survey the CLI answers on the user's behalf, and the map from
+ * the payload's human keys to its question identifiers.
+ *
+ * This is the ONLY place the survey's identifiers live. The agent never sees a
+ * question UUID: it writes `verbatim`, `goal`, and so on, and `feedback send`
+ * translates. A mangled UUID would be a silently missing answer; a mangled
+ * human key is a validation error with a message.
+ *
+ * The identifiers are PostHog's. `survey shown`, `survey dismissed`, and
+ * `survey sent` are its event literals for a custom survey, `$survey_id` and
+ * `$survey_response_<question id>` are its property contract, and the CLI
+ * adds no survey-specific property of its own. Everything else on the event
+ * is the standard set the telemetry client stamps on every capture.
+ *
+ * `survey shown` means SERVED. The CLI knows it appended the invite to a
+ * recipe; it cannot know the agent put the question to a person. The funnel
+ * reads shown ≫ sent by design, and nothing here pretends otherwise.
+ *
+ * A question's id changes when its type changes in PostHog. Q3 became single
+ * choice on 2026-09-17 and took a new id; the one below is current.
+ */
+export declare const SURVEY_ID = "01a0b1a0-80fb-0000-5dc1-baa4ec44e619";
+/** The payload keys, in question order. */
+export type FeedbackKey = "verbatim" | "goal" | "completed" | "workedWell" | "needsImprovement";
+export interface SurveyQuestion {
+    key: FeedbackKey;
+    id: string;
+    question: string;
+}
+export declare const SURVEY_QUESTIONS: readonly SurveyQuestion[];
+/** The choices PostHog holds for `completed`, in its own casing. */
+export declare const COMPLETED_CHOICES: readonly ["Yes", "No", "Unknown"];
+/**
+ * The recipes that carry the invite. Used by the gate alone; the events do not
+ * name the recipe, because the survey contract has no slot for it.
+ */
+export declare const SURVEYED_TOPICS: ReadonlySet<string>;
+/**
+ * How long serving an invite holds the next one off. Ten days, because the
+ * surveyed recipes are rule generation, which is the touchiest part of the
+ * agent experience, and a long quiet gap is a gap in feedback.
+ */
+export declare const SHOWN_INTERVAL_MS: number;
+/**
+ * How long an explicit answer holds the next invite off. Twenty days for both
+ * a dismissal and a sent response: either is a terminal action the user took,
+ * and only silence earns the shorter gap.
+ */
+export declare const ANSWERED_INTERVAL_MS: number;

package/dist/util/invocation.d.ts

@@ -21,6 +21,24 @@ export declare const PROD_INVOCATION = "npx @taskless/cli";
 export declare function isProductionInvocation(): boolean;
 /** This build's invocation, whatever the target. */
 export declare function buildInvocation(): string;
+/** The token skill and command sources spell the CLI invocation with. */
+export declare const INVOCATION_PLACEHOLDER = "%(TASKLESS_CLI)s";
+/**
+ * Render {@link INVOCATION_PLACEHOLDER} in an installed skill or command body
+ * to this build's invocation.
+ *
+ * The same token the recipes use, so a reader of either source sees one
+ * spelling. It is substituted as an exact token rather than rendered through
+ * sprintf: the sources are prose with no other placeholders, and sprintf
+ * would make a literal `%` in a markdown body a render error.
+ *
+ * This replaces searching the prose for the literal `npx @taskless/cli`
+ * ({@link applyCliInvocation}), which is whitespace-sensitive: a wrapped line
+ * or a doubled space left the literal in place, and a nightly install then
+ * carried a skill telling its agent to run the release package. A token
+ * either matches exactly or a test on the source notices it is missing.
+ */
+export declare function renderInvocationPlaceholder(content: string): string;
 /**
  * Rewrite the canonical `npx @taskless/cli` invocation to the build-target
  * invocation (`__TASKLESS_CLI__`).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@taskless/cli",
-  "version": "0.11.1",
+  "version": "0.11.2",
   "license": "MIT",
   "repository": {
     "type": "git",
@@ -69,7 +69,7 @@
     "zod": "^4.3.6"
   },
   "devDependencies": {
-    "@ast-grep/cli": "0.45.2",
+    "@ast-grep/cli": "0.45.3",
     "@types/sprintf-js": "^1.1.4",
     "openapi-typescript": "^7.13.0",
     "prettier": "^3.8.1",
@@ -82,18 +82,18 @@
     "taskless": "./dist/index.js"
   },
   "optionalDependencies": {
-    "@ast-grep/cli-darwin-arm64": "0.45.2",
-    "@ast-grep/cli-darwin-x64": "0.45.2",
-    "@ast-grep/cli-linux-arm64-gnu": "0.45.2",
-    "@ast-grep/cli-linux-x64-gnu": "0.45.2",
-    "@ast-grep/cli-win32-arm64-msvc": "0.45.2",
-    "@ast-grep/cli-win32-ia32-msvc": "0.45.2",
-    "@ast-grep/cli-win32-x64-msvc": "0.45.2",
-    "@taskless/vale-darwin-arm64": "3.20.0-20260907164938",
-    "@taskless/vale-darwin-x64": "3.20.0-20260907164938",
-    "@taskless/vale-linux-arm64": "3.20.0-20260907164938",
-    "@taskless/vale-linux-x64": "3.20.0-20260907164938",
-    "@taskless/vale-win32-arm64": "3.20.0-20260907164938",
-    "@taskless/vale-win32-x64": "3.20.0-20260907164938"
+    "@ast-grep/cli-darwin-arm64": "0.45.3",
+    "@ast-grep/cli-darwin-x64": "0.45.3",
+    "@ast-grep/cli-linux-arm64-gnu": "0.45.3",
+    "@ast-grep/cli-linux-x64-gnu": "0.45.3",
+    "@ast-grep/cli-win32-arm64-msvc": "0.45.3",
+    "@ast-grep/cli-win32-ia32-msvc": "0.45.3",
+    "@ast-grep/cli-win32-x64-msvc": "0.45.3",
+    "@taskless/vale-darwin-arm64": "3.21.0-20260915061224",
+    "@taskless/vale-darwin-x64": "3.21.0-20260915061224",
+    "@taskless/vale-linux-arm64": "3.21.0-20260915061224",
+    "@taskless/vale-linux-x64": "3.21.0-20260915061224",
+    "@taskless/vale-win32-arm64": "3.21.0-20260915061224",
+    "@taskless/vale-win32-x64": "3.21.0-20260915061224"
   }
 }

package/dist/binary-DSACXL6n.js

@@ -1,107 +0,0 @@
-import { spawnSync as v } from "node:child_process";
-import { existsSync as u } from "node:fs";
-import { createRequire as g } from "node:module";
-import { resolve as i, dirname as c } from "node:path";
-import { fileURLToPath as y } from "node:url";
-const R = {
-  label: "ast-grep",
-  packagePrefix: "@ast-grep/cli",
-  toolchainSuffix: !0,
-  binaryNames: ["ast-grep", "sg"],
-  identity: /ast-grep/i
-};
-function m(e) {
-  const r = [process.platform, process.arch];
-  return e.toolchainSuffix && (process.platform === "linux" ? r.push("gnu") : process.platform === "win32" && r.push("msvc")), `${e.packagePrefix}-${r.join("-")}`;
-}
-function o(e) {
-  return process.platform === "win32" ? `${e}.exe` : e;
-}
-function p(e) {
-  return e.binaryNames.toReversed();
-}
-function b(e) {
-  return o(p(e)[0] ?? e.label);
-}
-function P(e, r) {
-  try {
-    const a = g(import.meta.url).resolve(
-      `${m(e)}/package.json`
-    );
-    return i(c(a), r);
-  } catch {
-    return;
-  }
-}
-function h(e) {
-  const r = process.platform === "win32" ? ";" : ":";
-  for (const t of (process.env.PATH ?? "").split(r)) {
-    if (t === "") continue;
-    const a = i(t, e);
-    if (u(a)) return a;
-  }
-}
-function k(e, r) {
-  if (!u(r)) return !1;
-  const t = v(r, ["--version"], {
-    encoding: "utf8",
-    timeout: 5e3
-  });
-  return t.error !== void 0 || t.status !== 0 ? !1 : e.identity.test(`${t.stdout ?? ""}${t.stderr ?? ""}`);
-}
-function x(e) {
-  const r = i(
-    c(y(import.meta.url)),
-    "..",
-    "node_modules",
-    ".bin"
-  ), t = p(e), a = [
-    [
-      "platform-package",
-      m(e),
-      P(
-        e,
-        o(e.binaryNames[0] ?? e.label)
-      )
-    ],
-    ...t.map(
-      (n) => [
-        "node_modules/.bin",
-        "node_modules/.bin",
-        i(r, o(n))
-      ]
-    ),
-    ...t.map(
-      (n) => ["PATH", "PATH", h(o(n))]
-    )
-  ], l = [...new Set(a.map(([, n]) => n))];
-  for (const [n, , s] of a)
-    if (s !== void 0 && k(e, s))
-      return { path: s, source: n, tried: l };
-  return { path: void 0, source: void 0, tried: l };
-}
-const d = {
-  label: "vale",
-  packagePrefix: "@taskless/vale",
-  toolchainSuffix: !1,
-  binaryNames: ["vale"],
-  identity: /vale/i
-};
-let f;
-function T() {
-  return f ??= x(d), f;
-}
-function _(e) {
-  return `Vale binary not found. Looked in: ${e.join(", ")}. Install a supported platform build, or put \`${b(d)}\` on your PATH. Other engines still ran.`;
-}
-export {
-  R as A,
-  d as V,
-  m as a,
-  T as b,
-  h as f,
-  k as i,
-  b as p,
-  x as r,
-  _ as v
-};