From 9e4a957241f8740f68a9db69ca4fd85c49d9bf71 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Fri, 10 Jul 2026 20:46:46 +0000
Subject: [PATCH] chore: version packages

---
 .changeset/cli-version-header.md     |  5 -----
 .changeset/org-subject-send.md       |  9 ---------
 .changeset/runtime-rule-execution.md |  7 -------
 .claude-plugin/plugin.json           |  2 +-
 package.json                         |  2 +-
 packages/cli/CHANGELOG.md            | 15 +++++++++++++++
 packages/cli/package.json            |  2 +-
 skills/taskless/SKILL.md             |  2 +-
 8 files changed, 19 insertions(+), 25 deletions(-)
 delete mode 100644 .changeset/cli-version-header.md
 delete mode 100644 .changeset/org-subject-send.md
 delete mode 100644 .changeset/runtime-rule-execution.md

diff --git a/.changeset/cli-version-header.md b/.changeset/cli-version-header.md
deleted file mode 100644
index 9a7c569..0000000
--- a/.changeset/cli-version-header.md
+++ /dev/null
@@ -1,5 +0,0 @@
----
-"@taskless/cli": minor
----
-
-Send an `x-taskless-cli-version` header on every request to the Taskless service (rule generation, reconcile, `whoami`, and the device-auth flow) declaring the CLI's version. The service uses this to gate capability-dependent responses — notably runtime rules — on the CLI being new enough to handle them; a request without the header is treated as a pre-runtime CLI. The version is also emitted with the CLI's telemetry so usage is recorded client-side rather than inferred server-side.
diff --git a/.changeset/org-subject-send.md b/.changeset/org-subject-send.md
deleted file mode 100644
index 974fa25..0000000
--- a/.changeset/org-subject-send.md
+++ /dev/null
@@ -1,9 +0,0 @@
----
-"@taskless/cli": minor
----
-
-Send the acting organization's identity on every write request. The CLI now resolves which Taskless org owns the current repository by matching the repo's git remotes (`origin` → `upstream` → rest) against the canonical owner URLs returned by `whoami`, and sends that org's Taskless UUID as the subject on rule generation, iterate, and reconcile calls. This fixes multi-org users being routed to whichever org their token happened to pin; the server authorizes the chosen org per request. When no remote matches a known org, the CLI falls back to the token's numeric `orgId` claim, so single-org behavior is unchanged.
-
-The client-side owner-URL canonicalizer is a verbatim port of the server's shared implementation, so both sides compare by exact string equality across SSH, `ssh://`/`git://`, port, and `www.` remote forms.
-
-`rule create`/`rule improve` now handle two additional generation states: `classifying` (a transient pre-build phase) and `unsupported`, a terminal state emitted when the request needs a capability the organization's plan doesn't include (for example, runtime rules) — surfaced with a clear message and the new `RULE_UNSUPPORTED` error code. When the server can't act on a repository for the selected org (its GitHub App installation doesn't cover the repo, or membership changed), the CLI now explains the coverage cause rather than only suggesting re-authentication.
diff --git a/.changeset/runtime-rule-execution.md b/.changeset/runtime-rule-execution.md
deleted file mode 100644
index 961f806..0000000
--- a/.changeset/runtime-rule-execution.md
+++ /dev/null
@@ -1,7 +0,0 @@
----
-"@taskless/cli": minor
----
-
-Add server-owned rule reconciliation and runtime rules to `taskless check`. Authenticated runs reconcile the repo's rules against the Taskless service and execute only the server-blessed set. A new class of **runtime rules** (`.taskless/runtime-rules/` — one or more ast-grep capture rules plus a `check.ts` assertion) runs through a local harness: the capture rules narrow with ast-grep, and only on a match is `check.ts` invoked via a bundled `tsx`. Because `check.ts` is arbitrary code, it runs only when its signature is validated by the server; otherwise it is skipped and reported. Adds the `--dangerously-run-scripts` (run runtime rules unverified) and `--timeout` flags.
-
-(Backfills the changeset that was missed when this work landed across #47, #49, and #50.)
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index da51950..2770ca1 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,7 +1,7 @@
 {
   "name": "taskless",
   "description": "Taskless skills for code quality rules, authentication, and project management",
-  "version": "0.9.0",
+  "version": "0.10.0",
   "author": {
     "name": "Taskless"
   },
diff --git a/package.json b/package.json
index e707f6b..2188762 100644
--- a/package.json
+++ b/package.json
@@ -1,7 +1,7 @@
 {
   "private": true,
   "name": "@taskless/skills",
-  "version": "0.9.0",
+  "version": "0.10.0",
   "license": "MIT",
   "repository": "taskless/skills.git",
   "scripts": {
diff --git a/packages/cli/CHANGELOG.md b/packages/cli/CHANGELOG.md
index 9774754..f113e69 100644
--- a/packages/cli/CHANGELOG.md
+++ b/packages/cli/CHANGELOG.md
@@ -1,5 +1,20 @@
 # @taskless/cli
 
+## 0.10.0
+
+### Minor Changes
+
+- da74920: Send an `x-taskless-cli-version` header on every request to the Taskless service (rule generation, reconcile, `whoami`, and the device-auth flow) declaring the CLI's version. The service uses this to gate capability-dependent responses — notably runtime rules — on the CLI being new enough to handle them; a request without the header is treated as a pre-runtime CLI. The version is also emitted with the CLI's telemetry so usage is recorded client-side rather than inferred server-side.
+- 19f4327: Send the acting organization's identity on every write request. The CLI now resolves which Taskless org owns the current repository by matching the repo's git remotes (`origin` → `upstream` → rest) against the canonical owner URLs returned by `whoami`, and sends that org's Taskless UUID as the subject on rule generation, iterate, and reconcile calls. This fixes multi-org users being routed to whichever org their token happened to pin; the server authorizes the chosen org per request. When no remote matches a known org, the CLI falls back to the token's numeric `orgId` claim, so single-org behavior is unchanged.
+
+  The client-side owner-URL canonicalizer is a verbatim port of the server's shared implementation, so both sides compare by exact string equality across SSH, `ssh://`/`git://`, port, and `www.` remote forms.
+
+  `rule create`/`rule improve` now handle two additional generation states: `classifying` (a transient pre-build phase) and `unsupported`, a terminal state emitted when the request needs a capability the organization's plan doesn't include (for example, runtime rules) — surfaced with a clear message and the new `RULE_UNSUPPORTED` error code. When the server can't act on a repository for the selected org (its GitHub App installation doesn't cover the repo, or membership changed), the CLI now explains the coverage cause rather than only suggesting re-authentication.
+
+- f392880: Add server-owned rule reconciliation and runtime rules to `taskless check`. Authenticated runs reconcile the repo's rules against the Taskless service and execute only the server-blessed set. A new class of **runtime rules** (`.taskless/runtime-rules/` — one or more ast-grep capture rules plus a `check.ts` assertion) runs through a local harness: the capture rules narrow with ast-grep, and only on a match is `check.ts` invoked via a bundled `tsx`. Because `check.ts` is arbitrary code, it runs only when its signature is validated by the server; otherwise it is skipped and reported. Adds the `--dangerously-run-scripts` (run runtime rules unverified) and `--timeout` flags.
+
+  (Backfills the changeset that was missed when this work landed across #47, #49, and #50.)
+
 ## 0.9.0
 
 ### Minor Changes
diff --git a/packages/cli/package.json b/packages/cli/package.json
index e54dd4a..b2c8f67 100644
--- a/packages/cli/package.json
+++ b/packages/cli/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@taskless/cli",
-  "version": "0.9.0",
+  "version": "0.10.0",
   "license": "MIT",
   "repository": {
     "type": "git",
diff --git a/skills/taskless/SKILL.md b/skills/taskless/SKILL.md
index cca426a..935a65e 100644
--- a/skills/taskless/SKILL.md
+++ b/skills/taskless/SKILL.md
@@ -20,7 +20,7 @@ description: |
   `taskless help route`; it does NOT suppress the skill.
 metadata:
   author: taskless
-  version: 0.9.0
+  version: 0.10.0
   commandName: tskl
 compatibility: Designed for Agents implementing the Agent Skills specification.
 ---