autark-cli 0.5.0 → 0.5.2

package/autark.mjs

@@ -515,10 +515,8 @@ async function refreshRuntimeFiles() {
 }
 
 async function refreshSkills() {
-  for (const name of SKILL_NAMES) {
-    const res = await spawnSync('pnpm', ['dlx', '--silent', 'skills', 'add', `kiluazen/skills@${name}`, '-y', '-g'])
-    if (res.status !== 0) throw new Error(`skill ${name} install failed`)
-  }
+  const res = await spawnSync('pnpm', ['dlx', '--silent', 'skills', 'add', 'kiluazen/kstack', '-s', SKILL_NAMES.join(','), '-y', '-g'])
+  if (res.status !== 0) throw new Error(`kstack skills install failed`)
 }
 
 async function reloadLaunchd() {
@@ -831,48 +829,52 @@ async function mailLint(rest) {
     'the key insight', 'what this means is', 'the answer is', 'the trick is',
     'that\'s exactly', 'that\'s precisely', 'that\'s the whole point',
   ]
+  const WHY = {
+    'structure-word':     'AI-fingerprint vocabulary. Humans don\'t write "structurally different" or "fundamentally" in cold email; LLMs reach for them when hedging or sounding profound. Describe the thing directly instead.',
+    'em-dash':            'Em-dashes in cold outreach are a strong AI tell. Real people use commas, periods, or a new line break.',
+    'body-url':           'URLs mid-paragraph read like an A/B test variant or a campaign send. The product link belongs in the signature anchor; if it\'s anywhere else, the recipient classifies the email as automated.',
+    'too-many-questions': 'Asking >1 question is hedging. Pick the one question that, if answered, gives you the most signal. The rest can wait.',
+    'compound-question':  'Compound a/b questions ("are you X or Y...") read as AI hedging across alternatives. Humans ask one specific thing. Drop the "or" and pick the more specific half.',
+    'too-long':           'Cold outreach over 400 chars (~4-6 short lines) reads as a pitch deck, not a peer note. If you wrote more, you\'re explaining instead of asking. Cut to the single sharpest sentence.',
+    'no-anchor-sig':      'Without a clickable name in the signature, the recipient has to type your name into Google to figure out who you are. The HTML <a href> / markdown [name](url) sig is the single biggest "who is this person?" mitigator. Plain "Kushal" alone is a tell.',
+  }
 
   const violations = []
   const lower = body.toLowerCase()
 
-  // 1. structure-words
   for (const w of STRUCTURE_WORDS) {
-    if (lower.includes(w)) violations.push({ rule: 'structure-word', detail: w })
+    if (lower.includes(w)) violations.push({ rule: 'structure-word', detail: w, why: WHY['structure-word'] })
   }
-  // 2. em-dash
-  if (/—/.test(body)) violations.push({ rule: 'em-dash', detail: 'use a period or comma instead' })
-  // 3. URLs in body (allow only inside markdown anchor [text](url) or HTML <a href>)
+  if (/—/.test(body)) violations.push({ rule: 'em-dash', detail: 'em-dash detected', why: WHY['em-dash'] })
   const urlMatches = body.match(/https?:\/\/[^\s<>"')]+/g) || []
   for (const u of urlMatches) {
     const idx = body.indexOf(u)
     const before = body.slice(Math.max(0, idx - 40), idx)
-    const after = body.slice(idx + u.length, idx + u.length + 10)
     const insideMdAnchor = /\]\(\s*$/.test(before)
     const insideHtmlAnchor = /href\s*=\s*["'][^"']*$/.test(before) || /<a\b[^>]*$/.test(before)
-    if (!insideMdAnchor && !insideHtmlAnchor) violations.push({ rule: 'body-url', detail: u })
+    if (!insideMdAnchor && !insideHtmlAnchor) violations.push({ rule: 'body-url', detail: u, why: WHY['body-url'] })
   }
-  // 4. multiple question marks (more than one ? in the body)
   const qmarks = (body.match(/\?/g) || []).length
-  if (qmarks > 1) violations.push({ rule: 'too-many-questions', detail: `${qmarks} question marks; cold outreach gets one max` })
-  // 5. compound question with "or" connecting clauses
+  if (qmarks > 1) violations.push({ rule: 'too-many-questions', detail: `${qmarks} question marks`, why: WHY['too-many-questions'] })
   const compoundQ = /\b(are|is|do|does|did|will|would|can|could|should|have|has)\b[^?]{0,200}\bor\b[^?]{0,200}\?/i
-  if (compoundQ.test(body)) violations.push({ rule: 'compound-question', detail: 'a/b question with "or" splits attention; ask one thing' })
-  // 6. body length (excluding signature heuristically)
+  if (compoundQ.test(body)) violations.push({ rule: 'compound-question', detail: 'a/b question with "or"', why: WHY['compound-question'] })
   const sigSplit = body.split(/\n\s*\n(?:best|thanks|cheers|—|-)[\s,]*\n/i)[0] || body
   const len = sigSplit.trim().length
-  if (len > 400) violations.push({ rule: 'too-long', detail: `${len} chars of body; cold outreach should fit in ~400` })
-  // 7. signature presence: should have `- <name>` and an anchor (md or html)
+  if (len > 400) violations.push({ rule: 'too-long', detail: `${len} chars`, why: WHY['too-long'] })
   const hasMdAnchor = /\[[^\]]+\]\(https?:\/\/[^)]+\)/.test(body)
   const hasHtmlAnchor = /<a\b[^>]*href\s*=\s*["']https?:\/\/[^"']+["'][^>]*>[^<]+<\/a>/i.test(body)
-  if (!hasMdAnchor && !hasHtmlAnchor) {
-    violations.push({ rule: 'no-anchor-sig', detail: 'signature must include a clickable link via [name](url) or <a href="url">name</a>' })
-  }
+  if (!hasMdAnchor && !hasHtmlAnchor) violations.push({ rule: 'no-anchor-sig', detail: 'no clickable name in signature', why: WHY['no-anchor-sig'] })
 
   if (violations.length === 0) {
     console.log(JSON.stringify({ clean: true, length: len }, null, 2))
     return
   }
-  console.error(JSON.stringify({ clean: false, length: len, violations }, null, 2))
+  console.error(JSON.stringify({
+    clean: false,
+    length: len,
+    violations,
+    next: 'Rewrite the draft so each violation\'s "why" is internalized, not just regex-fixed. If you can\'t make it pass after 2 rewrites, abstain — re-read ~/.claude/skills/outreach/SKILL.md AI-tells section and ask whether you should send this at all.',
+  }, null, 2))
   process.exit(1)
 }
 
@@ -1161,6 +1163,16 @@ function printHypothesisContext(result) {
   kv('hypothesis.code', result.hypothesis.code)
   kv('hypothesis.title', result.hypothesis.title)
   kv('hypothesis.status', result.hypothesis.status)
+  // Feedback — operator nudges left on this hypothesis, oldest first. The
+  // worker returns them; previously the CLI silently dropped them, so agents
+  // never saw the operator's running corrections. Now surface them up top
+  // (before runs/actions) so the agent reads them at the start of every run.
+  for (const f of (result.feedback || [])) {
+    const shortF = actionShortId(f.id)
+    kv(`feedback.${shortF}.created_at`, f.created_at)
+    if (f.action_id) kv(`feedback.${shortF}.action_id`, f.action_id)
+    kv(`feedback.${shortF}.text`, f.text)
+  }
   for (const run of (result.runs || [])) {
     const shortRun = actionShortId(run.id)
     kv(`run.${shortRun}.id`, run.id)
@@ -1191,6 +1203,14 @@ function printHypothesisContext(result) {
   // ---- narrative ----
   console.log(`# ${result.product.slug}/${result.hypothesis.code} — ${result.hypothesis.title}\n`)
   console.log(result.hypothesis.hypothesis_md)
+  if ((result.feedback || []).length > 0) {
+    console.log(`\n\n## Feedback (operator nudges, oldest first)\n`)
+    for (const f of result.feedback) {
+      const when = f.created_at || ''
+      const tag = f.action_id ? ` (on action ${f.action_id})` : ''
+      console.log(`- [${when}]${tag} ${f.text}`)
+    }
+  }
   for (const run of (result.runs || [])) {
     console.log(`\n\n## Run ${run.run_number}  (${run.id})`)
     console.log(`started: ${run.started_at}${run.finished_at ? `   finished: ${run.finished_at}` : '   (in progress)'}`)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "autark-cli",
-  "version": "0.5.0",
+  "version": "0.5.2",
   "description": "CLI for autark \u2014 hypothesis-driven product runbooks. Track products, hypotheses, runs, and actions from the terminal.",
   "type": "module",
   "license": "MIT",