autark-cli 0.5.4 → 0.5.6

package/autark.mjs

@@ -517,7 +517,9 @@ async function refreshRuntimeFiles() {
 }
 
 async function refreshSkills() {
-  const res = await spawnSync('pnpm', ['dlx', '--silent', 'skills', 'add', 'kiluazen/kstack', '-s', SKILL_NAMES.join(','), '-y', '-g'])
+  // skills CLI switched from `-s name,name` to positional `name name`.
+  // The old comma-separated form silently matches nothing.
+  const res = await spawnSync('pnpm', ['dlx', '--silent', 'skills', 'add', 'kiluazen/kstack', ...SKILL_NAMES, '-y', '-g'])
   if (res.status !== 0) throw new Error(`kstack skills install failed`)
 }
 
@@ -862,7 +864,6 @@ async function mailLint(rest) {
     'compound-question':  'Compound a/b questions ("are you X or Y...") read as AI hedging across alternatives. Humans ask one specific thing. Drop the "or" and pick the more specific half.',
     'too-long':           'Cold outreach over 400 chars (~4-6 short lines) reads as a pitch deck, not a peer note. If you wrote more, you\'re explaining instead of asking. Cut to the single sharpest sentence.',
     'no-anchor-sig':      'Without a clickable name in the signature, the recipient has to type your name into Google to figure out who you are. The HTML <a href> / markdown [name](url) sig is the single biggest "who is this person?" mitigator. Plain "Kushal" alone is a tell.',
-    'html-in-text':       'Layout HTML tags (<div>, <p>, <br>, <span>) in the body get sent through `autark mail send --text` as text/plain — the recipient sees the literal markup in their Gmail / Outlook (we have screenshots of this happening). For paragraph breaks use a blank line. For the signature link, the single <a href="...">name</a> is allowed (recipients see "name" rendered if the inbox does any html-detection, or the raw href if not — both fine).',
   }
 
   const violations = []
@@ -890,14 +891,6 @@ async function mailLint(rest) {
   const hasMdAnchor = /\[[^\]]+\]\(https?:\/\/[^)]+\)/.test(body)
   const hasHtmlAnchor = /<a\b[^>]*href\s*=\s*["']https?:\/\/[^"']+["'][^>]*>[^<]+<\/a>/i.test(body)
   if (!hasMdAnchor && !hasHtmlAnchor) violations.push({ rule: 'no-anchor-sig', detail: 'no clickable name in signature', why: WHY['no-anchor-sig'] })
-  // Layout HTML tags in the body. Catches the autark-2026-05-28 footgun where
-  // an agent wrote <div>...</div><br> markup, passed it to `mail send --text`,
-  // and 6 recipients saw raw markup in their Gmail. The <a href> signature
-  // tag is whitelisted because no-anchor-sig depends on it.
-  const layoutTagMatch = body.match(/<\s*\/?\s*(div|p|br|span|hr|table|tr|td|th|font|b|i|u|strong|em)\b[^>]*>/gi) || []
-  for (const tag of layoutTagMatch) {
-    violations.push({ rule: 'html-in-text', detail: tag, why: WHY['html-in-text'] })
-  }
 
   if (violations.length === 0) {
     console.log(JSON.stringify({ clean: true, length: len }, null, 2))
@@ -1438,10 +1431,10 @@ function mailUsage() {
   console.log(`autark mail
 
   setup       --prefix <name> [--force]
-  send        --to <email[,email]> --subject <s> --text @body.txt [--run-id <id>] [--dry-run]
-  reply       --message-id <id> --text @reply.txt [--run-id <id>]
-  reply-all   --message-id <id> --text @reply.txt [--run-id <id>]
-  forward     --message-id <id> --to <email> [--text @body.txt] [--run-id <id>]
+  send        --to <email[,email]> --subject <s> [--text @body.txt] [--html @body.html] [--cc <e>] [--bcc <e>] [--reply-to <e>] [--label <l>] [--attachment <a>] [--run-id <id>] [--dry-run]
+  reply       --message-id <id> [--text @reply.txt] [--html @reply.html] [--run-id <id>]
+  reply-all   --message-id <id> [--text @reply.txt] [--html @reply.html] [--run-id <id>]
+  forward     --message-id <id> --to <email> [--text @body.txt] [--html @body.html] [--run-id <id>]
   threads     [--limit N]
   thread      <thread_id>
   messages    [--limit N]
@@ -1449,11 +1442,19 @@ function mailUsage() {
   raw         <message_id>
   attachment  --message-id <id> --attachment-id <id> [--out file]
   request     <METHOD> <path> [--body @json] [--raw]
-  lint        --body @draft.txt | <stdin>     grade a draft for AI-tells; exit 1 on violations
+  lint        --body @draft.txt | <stdin>     content-quality check (AI-tells, slop); exit 1 on violations
+
+Body flags — matches AgentMail CLI + REST and the wider convention
+(Mailgun / SendGrid / Resend / Postmark all use the same text vs html split):
+
+  --text @file   Plain text body, ships as text/plain MIME part.
+  --html @file   HTML body, ships as text/html MIME part.
+  Both           Ships as multipart/alternative (text fallback + html).
 
 Mail uses the inbox-scoped token in ~/.autark/credentials.json. --dry-run
-prints the payload without hitting SES. lint is fully local — runs the
-outreach skill's hard-fail checks against a draft.`)
+prints the payload without hitting SES. lint is fully local and only
+inspects content quality (slop / AI-tells) — markup correctness is a
+CLI/convention concern, not a slop concern.`)
 }
 
 function usage() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "autark-cli",
-  "version": "0.5.4",
+  "version": "0.5.6",
   "description": "CLI for autark \u2014 hypothesis-driven product runbooks. Track products, hypotheses, runs, and actions from the terminal.",
   "type": "module",
   "license": "MIT",