taste-lint 0.0.4 → 0.0.5

package/README.md

@@ -4,7 +4,7 @@
 
 **Catch AI slop before you ship.**
 
-Scan your project with local checks and [Jev by TypeSafe AI](https://docs.typesafe.ai/introduction).
+Scan your project with [Jev by TypeSafe AI](https://docs.typesafe.ai/introduction).
 
 <p align="center">
   <a href="https://www.npmjs.com/package/taste-lint"><img alt="npm version" src="https://img.shields.io/npm/v/taste-lint?style=flat&colorA=000000&colorB=000000" /></a>
@@ -19,7 +19,7 @@ Scan your project with local checks and [Jev by TypeSafe AI](https://docs.typesa
 npx taste-lint@latest init
 ```
 
-Requires Node 24.11 or later. Run from your project directory to install locally and add check scripts.
+Requires Node 24.11 or later. Run from your project directory to install locally and add a scan script.
 
 ## Quickstart
 
@@ -32,7 +32,7 @@ npm run taste
 
 No account or config for taste-lint. AI checks send selected text and rule context to Vercel AI Gateway, billed to your account. Answers are cached for repeat runs.
 
-Run `npm run check:taste` for local checks without a key. Use your package manager in place of npm. Add `--agent` to init for agent instructions, or `--dry-run` to preview setup.
+Use your package manager in place of npm. Add `--agent` to init for agent instructions, or `--dry-run` to preview setup.
 
 ## What it checks
 
@@ -44,12 +44,11 @@ Rules draw on [Agent Skills](https://github.com/mblode/agent-skills) and [Taste
 
 ## Useful options
 
-| Option              | What it does                                         |
-| ------------------- | ---------------------------------------------------- |
-| `--dry-run`         | Preview scope and estimated cost without model calls |
-| `--mechanical-only` | Run local checks without an API key                  |
-| `--output json`     | Save findings for scripts and agents                 |
-| `--output sarif`    | Export findings for code review tools                |
+| Option           | What it does                                         |
+| ---------------- | ---------------------------------------------------- |
+| `--dry-run`      | Preview scope and estimated cost without model calls |
+| `--output json`  | Save findings for scripts and agents                 |
+| `--output sarif` | Export findings for code review tools                |
 
 Run `taste-lint scan --help` for all options. See the [scan guide](https://github.com/mblode/taste-lint/blob/main/docs/SCANS.md), [usage reference](https://github.com/mblode/taste-lint/blob/main/docs/USAGE.md), and [changelog](https://github.com/mblode/taste-lint/blob/main/CHANGELOG.md) for more.
 

package/dist/cli.js

@@ -16,7 +16,7 @@ import { mdxjs } from "micromark-extension-mdxjs";
 import { styleText } from "node:util";
 import os from "node:os";
 //#region package.json
-var version = "0.0.4";
+var version = "0.0.5";
 //#endregion
 //#region src/lib/stats.ts
 const makePRNG = (seed) => {
@@ -1211,7 +1211,7 @@ const GATEWAY_BASE_URL = "https://ai-gateway.vercel.sh/v4/ai";
 const DEFAULT_MODEL = "jev-latest";
 /** The gateway's id for Jev; a `--model` with a slash in it is passed through. */
 const GATEWAY_MODEL = "typesafe-ai/jev";
-const KEY_HINT = "Set AI_GATEWAY_API_KEY to your Vercel AI Gateway key, then rerun. Create a key at https://vercel.com/docs/ai-gateway/authentication-and-byok/api-keys. Use --mechanical-only for lint/scan without a key.";
+const KEY_HINT = "Set AI_GATEWAY_API_KEY to your Vercel AI Gateway key, then rerun. Create a key at https://vercel.com/docs/ai-gateway/authentication-and-byok/api-keys.";
 const MAX_RETRY_AFTER_MS = 3e4;
 var ProviderError = class extends Error {
 	category;
@@ -2003,13 +2003,8 @@ const planRequests = (units, rules, config) => {
 //#endregion
 //#region src/map/judge.ts
 const prepareJudgement = (units, rules, options) => {
-	const plan = planRequests(units, options.mechanicalOnly ? rules.filter((r) => r.tier === "mechanical") : rules, options.config);
-	if (options.mechanicalOnly) for (const unit of units) {
-		const skipped = plan.skipped.get(unit.id) ?? {};
-		for (const rule of rules) if (rule.tier !== "mechanical") skipped[rule.id] = "mechanical_only";
-		plan.skipped.set(unit.id, skipped);
-	}
-	let jobs = options.mechanicalOnly ? [] : plan.jobs;
+	const plan = planRequests(units, rules, options.config);
+	let jobs = plan.jobs;
 	if (options.jobFilter) jobs = jobs.map((job) => options.jobFilter?.(job) ?? null).filter((job) => job !== null);
 	const prepared = prepareRequests(jobs, options.cache, options.model);
 	const pending = prepared.filter((p) => Object.keys(p.questions).length > 0);
@@ -4571,8 +4566,7 @@ const marker = "<!-- taste-lint -->";
 const agentText = `${marker}
 ## Taste Lint
 
-Run the local check with the project's check:taste script after editing copy or UI.
-For AI checks, preview the taste script with --dry-run, then run it with a user-supplied AI_GATEWAY_API_KEY.
+Taste Lint uses Jev to judge copy and UI. Preview the taste script with --dry-run, then run it with a user-supplied AI_GATEWAY_API_KEY.
 Fix act findings, review advisory findings in context, and recheck the edited files.
 Never invent a key or treat unknown checks as passes.
 <!-- /taste-lint -->
@@ -4615,22 +4609,33 @@ function initProject(options) {
 	].some((name) => name in dependencies) ? "product" : "writing";
 	const scripts = { ...manifest.scripts };
 	const added = [];
-	for (const [name, command] of Object.entries({
-		"check:taste": `taste-lint scan . --profile ${profile} --mechanical-only`,
-		taste: `taste-lint scan . --profile ${profile}`
-	})) if (!(name in scripts)) {
+	for (const oldProfile of ["product", "writing"]) if (scripts["check:taste"] === `taste-lint scan . --profile ${oldProfile} --mechanical-only`) {
+		scripts["check:taste"] = `taste-lint scan . --profile ${oldProfile}`;
+		added.push("check:taste");
+	}
+	for (const [name, command] of Object.entries({ taste: `taste-lint scan . --profile ${profile}` })) if (!(name in scripts)) {
 		scripts[name] = command;
 		added.push(name);
 	}
 	const agentPath = path.join(root, "AGENTS.md");
 	const previousAgent = options.agent && fs.existsSync(agentPath) ? fs.readFileSync(agentPath, "utf-8") : "";
+	const legacyAgentText = `${marker}
+## Taste Lint
+
+Run the local check with the project's check:taste script after editing copy or UI.
+For AI checks, preview the taste script with --dry-run, then run it with a user-supplied AI_GATEWAY_API_KEY.
+Fix act findings, review advisory findings in context, and recheck the edited files.
+Never invent a key or treat unknown checks as passes.
+<!-- /taste-lint -->
+`;
+	const upgradeAgent = Boolean(options.agent && previousAgent.includes(legacyAgentText));
 	const addAgent = Boolean(options.agent && !previousAgent.includes(marker));
 	const needsDependency = !("taste-lint" in dependencies);
 	const installArgs = pm === "npm" ? ["install", "--save-dev"] : ["add", "--dev"];
 	installArgs.push(`taste-lint@^${version}`);
 	const shouldInstall = needsDependency && options.install !== false;
 	const result = {
-		agentAdded: addAgent,
+		agentAdded: addAgent || upgradeAgent,
 		dryRun: Boolean(options.dryRun),
 		installCommand: shouldInstall ? [pm, ...installArgs] : null,
 		packageManager: pm,
@@ -4656,6 +4661,7 @@ function initProject(options) {
 		manifest.scripts = scripts;
 		fs.writeFileSync(manifestPath, `${JSON.stringify(manifest, null, 2)}\n`);
 	}
+	if (upgradeAgent) fs.writeFileSync(agentPath, previousAgent.replace(legacyAgentText, agentText));
 	if (addAgent) fs.writeFileSync(agentPath, `${previousAgent}${previousAgent ? "\n\n" : ""}${agentText}`);
 	return result;
 }
@@ -4668,7 +4674,7 @@ function registerInitCommand(program) {
 		process.stdout.write(`Scripts added: ${result.scriptsAdded.join(", ") || "none (existing scripts preserved)"}\n`);
 		if (result.installCommand) process.stdout.write(`Install: ${result.installCommand.join(" ")}\n`);
 		if (result.agentAdded) process.stdout.write("Agent instructions: AGENTS.md\n");
-		process.stdout.write(`\nRun ${result.packageManager} run check:taste for local checks.\nSet AI_GATEWAY_API_KEY, then run ${result.packageManager} run taste for AI checks.\n`);
+		process.stdout.write(`\nSet AI_GATEWAY_API_KEY, then run ${result.packageManager} run taste.\n`);
 		if (options.install === false) process.stdout.write("Installation skipped; the scripts require taste-lint to be installed.\n");
 	});
 }
@@ -5190,15 +5196,14 @@ const runLint = async (options, ctx = {}) => {
 	const judgeOptions = {
 		cache,
 		config,
-		mechanicalOnly: options.mechanicalOnly,
 		model
 	};
 	const prepared = prepareJudgement(units, rules, judgeOptions);
 	let evaluate = ctx.evaluate;
 	let recorder;
-	if (!options.dryRun && !options.mechanicalOnly && prepared.pending.length > 0) {
+	if (!options.dryRun && prepared.pending.length > 0) {
 		evaluate ??= evaluateFromEnv(options.apiKey);
-		if (!evaluate) throw new InputError("MISSING_CREDENTIALS", `${KEY_HINT} Or run with --dry-run or --mechanical-only.`);
+		if (!evaluate) throw new InputError("MISSING_CREDENTIALS", `${KEY_HINT} Use --dry-run to preview without calling Jev.`);
 	} else evaluate = void 0;
 	if (options.printRequests) for (const p of prepared.pending) for (const questions of chunkQuestions(p)) {
 		const ordered = Object.fromEntries(Object.keys(questions).toSorted().map((k) => [k, questions[k]]));
@@ -5464,7 +5469,7 @@ const renderTty = (result, options = {}) => {
 //#region src/commands/lint.ts
 const quote = (value) => `'${value.replaceAll("'", "'\"'\"'")}'`;
 function registerLintCommand(program) {
-	program.command("lint").description("Lint files (or a rendered page) against the taste rules").argument("[paths...]", "Files or directories to lint, relative to --root").option("--root <path>", "Project root for globs and config", process.cwd()).option("--rules <path>", "Rules directory (default: packaged data/rules)").option("--only <ids>", "Comma-separated rule ids").option("--exclude <globs>", "Comma-separated globs to skip (added to taste-lint.config.json exclude)").option("--dry-run", "Plan and estimate cost without calling Jev").option("--print-requests", "With --dry-run and --output tty, print request JSONL to stderr").option("--writing-context <file>", "Explicit JSON facts/profile/instructions for personal writing; sent to Jev on live runs").option("--mechanical-only", "Skip every Jev-backed rule").option("--no-cache", "Ignore cached answers (new answers are still recorded)").option("--limit-units <n>", "Only consider the first n units").option("--fail-on <severity>", "Lowest severity that fails the run: major or minor", "minor").option("--fix", "Apply deterministic fixes for act-band findings").option("--output <format>", "tty, json or sarif", "tty").option("--results-dir <path>", "Where logs and cache live", defaultResultsDir()).option("--model <id>", "Jev model id", DEFAULT_MODEL).option("--progress", "Print periodic progress on stderr even when piped").option("--verbose", "Show suppressed findings and unknowns").option("--url <url>", "Lint a rendered page through style-capture").option("--selector <css>", "Root selector for --url", "body").option("--capture <file>", "Lint a saved style-capture CaptureResult JSON").action(async (paths, options) => {
+	program.command("lint").description("Lint files (or a rendered page) against the taste rules").argument("[paths...]", "Files or directories to lint, relative to --root").option("--root <path>", "Project root for globs and config", process.cwd()).option("--rules <path>", "Rules directory (default: packaged data/rules)").option("--only <ids>", "Comma-separated rule ids").option("--exclude <globs>", "Comma-separated globs to skip (added to taste-lint.config.json exclude)").option("--dry-run", "Plan and estimate cost without calling Jev").option("--print-requests", "With --dry-run and --output tty, print request JSONL to stderr").option("--writing-context <file>", "Explicit JSON facts/profile/instructions for personal writing; sent to Jev on live runs").option("--no-cache", "Ignore cached answers (new answers are still recorded)").option("--limit-units <n>", "Only consider the first n units").option("--fail-on <severity>", "Lowest severity that fails the run: major or minor", "minor").option("--fix", "Apply deterministic fixes for act-band findings").option("--output <format>", "tty, json or sarif", "tty").option("--results-dir <path>", "Where logs and cache live", defaultResultsDir()).option("--model <id>", "Jev model id", DEFAULT_MODEL).option("--progress", "Print periodic progress on stderr even when piped").option("--verbose", "Show suppressed findings and unknowns").option("--url <url>", "Lint a rendered page through style-capture").option("--selector <css>", "Root selector for --url", "body").option("--capture <file>", "Lint a saved style-capture CaptureResult JSON").action(async (paths, options) => {
 		if (!["major", "minor"].includes(options.failOn)) throw new InputError("INVALID_ARGUMENT", "--fail-on must be major or minor");
 		if (![
 			"tty",
@@ -5492,7 +5497,6 @@ function registerLintCommand(program) {
 			failOn: options.failOn,
 			fix: options.fix,
 			limitUnits,
-			mechanicalOnly: options.mechanicalOnly,
 			model: options.model,
 			noCache: !options.cache,
 			only: options.only?.split(",").map((s) => s.trim()).filter(Boolean),
@@ -6125,7 +6129,6 @@ const runScan = async (options, ctx = {}) => {
 		},
 		exclude,
 		graph: graph?.digest,
-		mechanicalOnly: !!options.mechanicalOnly,
 		model: options.model ?? "jev-latest",
 		profile,
 		root,
@@ -6146,7 +6149,6 @@ const runScan = async (options, ctx = {}) => {
 		docTypes: profile.docTypes,
 		dryRun: options.dryRun,
 		exclude,
-		mechanicalOnly: options.mechanicalOnly,
 		model: options.model,
 		only: rules.map((r) => r.id),
 		resultsDir: options.resultsDir,
@@ -6215,7 +6217,7 @@ const runScan = async (options, ctx = {}) => {
 //#endregion
 //#region src/commands/scan.ts
 const registerScanCommand = (program) => {
-	const scan = program.command("scan").enablePositionalOptions().description("Run a scoped scan with stable findings, baselines, and review exports").argument("[paths...]", "Targets within the root; defaults to .").option("--root <path>", "Repository root", process.cwd()).option("--profile <name>", `Scan objective: ${PROFILE_NAMES.join(", ")}`, "product").option("--rules <path>", "Rules directory").option("--only <ids>", "Comma-separated rule IDs within the selected profile").option("--exclude <globs>", "Additional comma-separated exclusions").option("--dry-run", "Preview scope and cost without provider calls").option("--mechanical-only", "Run deterministic checks only").option("--model <id>", "Evaluation model", "jev-latest").option("--results-dir <path>", "Answer cache and sanitized request records").option("--baseline <file>", "Compare a compatible completed scan").option("--new-only", "Report and gate only new findings against the baseline").option("--since <ref>", "Report changed lines against a Git commit; retain analysis context").option("--decisions <file>", "Apply accepted or dismissed review decisions").option("--dependency-cruiser <file>", "Import dependency-cruiser JSON violations").option("--samples <file>", "Export blind labeling samples, including source text, without predicted scores").option("--save <file>", "Save a scan report; only completed scans can serve as baselines").option("--output <format>", "tty, json, or sarif", "tty").option("--progress", "Print provider progress to stderr").action(async (targets, options) => {
+	const scan = program.command("scan").enablePositionalOptions().description("Run a scoped scan with stable findings, baselines, and review exports").argument("[paths...]", "Targets within the root; defaults to .").option("--root <path>", "Repository root", process.cwd()).option("--profile <name>", `Scan objective: ${PROFILE_NAMES.join(", ")}`, "product").option("--rules <path>", "Rules directory").option("--only <ids>", "Comma-separated rule IDs within the selected profile").option("--exclude <globs>", "Additional comma-separated exclusions").option("--dry-run", "Preview scope and cost without provider calls").option("--model <id>", "Evaluation model", "jev-latest").option("--results-dir <path>", "Answer cache and sanitized request records").option("--baseline <file>", "Compare a compatible completed scan").option("--new-only", "Report and gate only new findings against the baseline").option("--since <ref>", "Report changed lines against a Git commit; retain analysis context").option("--decisions <file>", "Apply accepted or dismissed review decisions").option("--dependency-cruiser <file>", "Import dependency-cruiser JSON violations").option("--samples <file>", "Export blind labeling samples, including source text, without predicted scores").option("--save <file>", "Save a scan report; only completed scans can serve as baselines").option("--output <format>", "tty, json, or sarif", "tty").option("--progress", "Print provider progress to stderr").action(async (targets, options) => {
 		if (![
 			"tty",
 			"json",
@@ -6545,7 +6547,6 @@ Quickstart:
   taste-lint scan .
 
 Preview: taste-lint scan . --dry-run
-Without a key: taste-lint scan . --mechanical-only
 Get a key: https://vercel.com/docs/ai-gateway/authentication-and-byok/api-keys
 `);
 registerLintCommand(program);