podojo-cli 1.26.0__tar.gz → 1.27.0__tar.gz

{podojo_cli-1.26.0 → podojo_cli-1.27.0}/CHANGELOG.md

@@ -5,6 +5,24 @@ All notable changes to the Podojo CLI will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com),
 and this project adheres to [Semantic Versioning](https://semver.org).
 
+## [1.27.0] - 2026-10-27
+
+### Added
+- User test steps support a new screen variant, `ai-question`: an AI voice
+  interviewer asks the step's `text` and up to `max_follow_ups` follow-ups
+  (default 2) aimed at `probe_for`. `podojo usertests validate` checks that
+  `text` is set and rejects `probe_for` / `max_follow_ups` on other steps.
+  `podojo usertests example` shows one.
+
+## [1.26.1] - 2026-10-25
+
+### Security
+- Updated certifi to 2026.10.23, which removes the eMudhra/emSign root
+  certificates compromised in October 2026. certifi is the CA bundle httpx
+  uses for every API call to Podojo; without this update a man-in-the-middle
+  with a fraudulently issued certificate could impersonate the Podojo API to
+  the CLI.
+
 ## [1.26.0] - 2026-10-08
 
 ### Changed

{podojo_cli-1.26.0 → podojo_cli-1.27.0}/CLAUDE.md

@@ -32,7 +32,7 @@ podojo usertests validate usertest.yaml # validate without creating
 User test configs are YAML files. Run `podojo usertests example` for the full template.
 Required fields: `usertest_id`, `title`, `prototype_url`, `steps`. `logo` is optional —
 the test app falls back to the account's logo (group mapping in unmoderated-usertests).
-Each step needs `type` ("screen" or "prototype") and `title`. Screen steps should have `variant` ("question", "task", or "instruction" — instruction screens render a "Continue" button instead of "Done with Step", useful as a briefing before a prototype step).
+Each step needs `type` ("screen" or "prototype") and `title`. Screen steps should have `variant` ("question", "task", "instruction" or "ai-question" — instruction screens render a "Continue" button instead of "Done with Step", useful as a briefing before a prototype step; ai-question has an AI voice interviewer ask `text` plus follow-ups, with optional `probe_for` and `max_follow_ups`, default 2).
 
 ## Synthetic User Tests (experimental)
 

{podojo_cli-1.26.0 → podojo_cli-1.27.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: podojo-cli
-Version: 1.26.0
+Version: 1.27.0
 Summary: CLI for the Podojo user research platform
 Project-URL: Homepage, https://github.com/podojo/cli-podojo
 Project-URL: Source, https://github.com/podojo/cli-podojo

{podojo_cli-1.26.0 → podojo_cli-1.27.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "podojo-cli"
-version = "1.26.0"
+version = "1.27.0"
 description = "CLI for the Podojo user research platform"
 readme = "README.md"
 license = "MIT"

{podojo_cli-1.26.0 → podojo_cli-1.27.0}/src/podojo_cli/commands/usertests.py

@@ -14,7 +14,7 @@ err_console = Console(stderr=True, soft_wrap=True)
 
 REQUIRED_FIELDS = ["usertest_id", "title", "prototype_url", "steps"]
 VALID_STEP_TYPES = {"screen", "prototype"}
-VALID_STEP_VARIANTS = {"question", "task", "instruction"}
+VALID_STEP_VARIANTS = {"question", "task", "instruction", "ai-question"}
 REQUIRED_STEP_FIELDS = ["type", "title"]
 
 # The rrweb.record() call lives in recorder.js rather than an inline <script>:
@@ -153,7 +153,10 @@ rejection_message: >
 # Steps define what participants see and do
 # Each step requires: type ("screen" or "prototype") and title
 # Screen steps should have a variant: "question" (open-ended), "task" (action-based),
-# or "instruction" (briefing screen shown before a prototype step — uses a "Continue" button)
+# "instruction" (briefing screen shown before a prototype step — uses a "Continue" button),
+# or "ai-question" (an AI voice interviewer asks `text` and up to max_follow_ups follow-ups;
+# `text` is required, optional probe_for says what the follow-ups should dig into,
+# max_follow_ups defaults to 2)
 # Optional per step: text (markdown), and either:
 #   image:      a URL to an externally-hosted image, or
 #   image_file: a path to a local image (uploaded to Podojo storage on create/update;
@@ -184,6 +187,13 @@ steps:
       Think aloud as you go through each step.
     # url: https://figma.com/proto/abc123?state=basic-active
 
+  - type: screen
+    variant: ai-question
+    title: About buying the pass
+    text: How did buying the pass go for you?
+    probe_for: What they expected after paying; whether the price was clear
+    max_follow_ups: 2
+
   - type: screen
     variant: task
     title: Find the Return Policy
@@ -243,6 +253,30 @@ def validate_usertest_data(data: dict) -> list[str]:
                     )
                 if "url" in step and not (isinstance(step["url"], str) and step["url"]):
                     errors.append(f"Step {i}: 'url' must be a non-empty string")
+                is_ai_question = step_type == "screen" and variant == "ai-question"
+                if is_ai_question:
+                    text = step.get("text")
+                    if not (isinstance(text, str) and text.strip()):
+                        errors.append(
+                            f"Step {i}: ai-question steps need a non-empty 'text' (the question)"
+                        )
+                    max_follow_ups = step.get("max_follow_ups")
+                    if max_follow_ups is not None and (
+                        isinstance(max_follow_ups, bool)
+                        or not isinstance(max_follow_ups, int)
+                        or max_follow_ups < 0
+                    ):
+                        errors.append(f"Step {i}: 'max_follow_ups' must be a non-negative integer")
+                    probe_for = step.get("probe_for")
+                    if probe_for is not None and not isinstance(probe_for, str):
+                        errors.append(f"Step {i}: 'probe_for' must be a string")
+                else:
+                    # `usertests get` prints them as null on every step; only values count.
+                    for field in ("probe_for", "max_follow_ups"):
+                        if step.get(field) is not None:
+                            errors.append(
+                                f"Step {i}: '{field}' is only allowed on screen steps with variant 'ai-question'"
+                            )
 
     screening_questions = data.get("screening_questions")
     if screening_questions is not None:

{podojo_cli-1.26.0 → podojo_cli-1.27.0}/tests/test_usertests.py

@@ -699,3 +699,103 @@ def test_snippet(runner):
     assert "rrweb.record" in result.output
     # the recording must start from recorder.js: Boltable refuses inline scripts
     assert "<script>" not in result.output
+
+
+def _validate_steps(runner, tmp_path, steps_yaml):
+    yaml_file = tmp_path / "usertest.yaml"
+    yaml_file.write_text(
+        VALID_USERTEST_YAML.split("steps:")[0] + "steps:\n" + steps_yaml
+    )
+    return runner.invoke(app, ["usertests", "validate", str(yaml_file)])
+
+
+def test_validate_ai_question_valid(runner, tmp_path):
+    result = _validate_steps(
+        runner,
+        tmp_path,
+        "  - type: screen\n    variant: ai-question\n    title: Pass\n"
+        "    text: How did buying the pass go?\n    probe_for: price clarity\n"
+        "    max_follow_ups: 0\n",
+    )
+
+    assert result.exit_code == 0
+
+
+def test_validate_ai_question_follow_up_fields_optional(runner, tmp_path):
+    result = _validate_steps(
+        runner,
+        tmp_path,
+        "  - type: screen\n    variant: ai-question\n    title: Pass\n    text: How was it?\n",
+    )
+
+    assert result.exit_code == 0
+
+
+def test_validate_ai_question_requires_text(runner, tmp_path):
+    result = _validate_steps(
+        runner, tmp_path, "  - type: screen\n    variant: ai-question\n    title: Pass\n"
+    )
+
+    assert result.exit_code == 1
+    assert "non-empty 'text'" in result.output
+
+
+def test_validate_ai_question_max_follow_ups_must_be_non_negative_int(runner, tmp_path):
+    for value in ("-1", "1.5", "two", "true"):
+        result = _validate_steps(
+            runner,
+            tmp_path,
+            "  - type: screen\n    variant: ai-question\n    title: Pass\n"
+            f"    text: How was it?\n    max_follow_ups: {value}\n",
+        )
+
+        assert result.exit_code == 1, value
+        assert "max_follow_ups" in result.output
+
+
+def test_validate_ai_question_probe_for_must_be_string(runner, tmp_path):
+    result = _validate_steps(
+        runner,
+        tmp_path,
+        "  - type: screen\n    variant: ai-question\n    title: Pass\n"
+        "    text: How was it?\n    probe_for: 5\n",
+    )
+
+    assert result.exit_code == 1
+    assert "'probe_for' must be a string" in result.output
+
+
+def test_validate_probe_for_rejected_on_other_steps(runner, tmp_path):
+    result = _validate_steps(
+        runner,
+        tmp_path,
+        "  - type: screen\n    variant: question\n    title: Q\n    text: Hi\n"
+        "    probe_for: x\n    max_follow_ups: 2\n",
+    )
+
+    assert result.exit_code == 1
+    assert "'probe_for' is only allowed" in result.output
+    assert "'max_follow_ups' is only allowed" in result.output
+
+
+def test_validate_null_ai_question_fields_on_other_steps(runner, tmp_path):
+    # `usertests get` prints every stored step with these keys, so a fetched
+    # config must validate again unchanged.
+    result = _validate_steps(
+        runner,
+        tmp_path,
+        "  - type: prototype\n    title: Task\n    probe_for: null\n    max_follow_ups: null\n",
+    )
+
+    assert result.exit_code == 0
+
+
+def test_example_template_validates(runner, tmp_path):
+    example = runner.invoke(app, ["usertests", "example"])
+    yaml_file = tmp_path / "example.yaml"
+    yaml_file.write_text(example.output)
+
+    result = runner.invoke(app, ["usertests", "validate", str(yaml_file)])
+
+    assert "variant: ai-question" in example.output
+    assert result.exit_code == 0

{podojo_cli-1.26.0 → podojo_cli-1.27.0}/uv.lock

@@ -35,11 +35,11 @@ wheels = [
 
 [[package]]
 name = "certifi"
-version = "2026.7.22"
+version = "2026.10.23"
 source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/a3/c2/24167ea9858356b47a87a50d39908bfdb72ceeefe0041586e704e5376b3a/certifi-2026.7.22.tar.gz", hash = "sha256:741e2c3b351ddf169a738da9f2c048608ff7f2c5cc02f1ebc6b118bb090d5d55", size = 138112, upload-time = "2026-07-22T03:35:12.644Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/fd/11/b524cbd9bbdaca58608e4cf4053fd463417549e1959fa8d3aa18319f9555/certifi-2026.10.23.tar.gz", hash = "sha256:a9895e6e2758b371e0545e321a3a8fd1fcfd9829ada8824a936dfb16aaaf36cd", size = 136225, upload-time = "2026-10-23T11:36:16.478Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/0b/a7/71ac2cff56fec219ed242bb11b8efb69fcc4bec75db06fb7bfe35de520e6/certifi-2026.7.22-py3-none-any.whl", hash = "sha256:62f22742b58a1a33014a2b6b706588a8d7e2a88ae7bd1a6ebe8c992928483775", size = 136983, upload-time = "2026-07-22T03:35:11.276Z" },
+    { url = "https://files.pythonhosted.org/packages/32/d1/a3652fe2c19134d0d15922177821d863cbd7e842d53a21bbe7e8e3a1b5ac/certifi-2026.10.23-py3-none-any.whl", hash = "sha256:e9b54de76e530bb6cf0ccd036787103acb58fd42ba930ea8bf948ddbaa2f61d1", size = 135082, upload-time = "2026-10-23T11:36:14.763Z" },
 ]
 
 [[package]]
@@ -438,7 +438,7 @@ wheels = [
 
 [[package]]
 name = "podojo-cli"
-version = "1.26.0"
+version = "1.27.0"
 source = { editable = "." }
 dependencies = [
     { name = "httpx" },