From eef28c008fae2b31b1fa642a1fcaf3e0bf9cc7ca Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Tue, 14 Jul 2026 05:06:21 +0000 Subject: [PATCH] chore: version packages --- .changeset/org-identity-forward-compat.md | 32 ----------------------- .claude-plugin/plugin.json | 2 +- package.json | 2 +- packages/cli/CHANGELOG.md | 32 +++++++++++++++++++++++ packages/cli/package.json | 2 +- skills/taskless/SKILL.md | 2 +- 6 files changed, 36 insertions(+), 36 deletions(-) delete mode 100644 .changeset/org-identity-forward-compat.md diff --git a/.changeset/org-identity-forward-compat.md b/.changeset/org-identity-forward-compat.md deleted file mode 100644 index e8b0e50..0000000 --- a/.changeset/org-identity-forward-compat.md +++ /dev/null @@ -1,32 +0,0 @@ ---- -"@taskless/cli": patch ---- - -Treat the Taskless organization UUID as the one canonical identity, and become -forward-compatible with the server's coming identity cleanup. - -- **Stop consuming `installationId`.** It is dropped from the `WhoamiOrg` type - and from the `taskless rule meta --json` output (it was already optional and - absent for public repos). The CLI never used it and it should not round-trip - through us. -- **Namespace the GitHub org id.** `WhoamiOrg.orgId` is now optional and a new - `githubOrgId?: number` is added, so a consumer reads `githubOrgId ?? orgId` - and keeps working across the server's rename. It is a convenience id, never an - identity. -- **Identify on the canonical id.** `decodeOrgId` validates the token's `id` - claim (a UUID string) and the legacy `orgId` claim (numeric, or a numeric - string) independently: a valid `id` wins, an invalid `id` still lets a valid - `orgId` through, and a non-numeric `orgId` is rejected rather than smuggled in - as an identity. PostHog then groups organizations on that canonical id. Tokens - that don't yet carry an `id` claim fall back to the numeric claim, so grouping - is unchanged until the server starts sending it. -- **Always have a known org id.** When neither a matched org nor a token claim - resolves, the canonical id falls back to the nil UUID - (`00000000-0000-0000-0000-000000000000`) instead of being absent — so the org - subject and telemetry group are always a stable, known value and unattributed - usage lands in one bucket. As a result, a write from a token missing org info - now sends the nil-UUID subject rather than failing with a re-authenticate - error. -- **Tolerate `number | string` on the legacy path.** The canonical `id` stays a - UUID `string`, but `decodeOrgId` accepts either type since we can't promise - what a legacy claim carries. diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json index b114c7c..5469ae6 100644 --- a/.claude-plugin/plugin.json +++ b/.claude-plugin/plugin.json @@ -1,7 +1,7 @@ { "name": "taskless", "description": "Taskless skills for code quality rules, authentication, and project management", - "version": "0.10.1", + "version": "0.10.2", "author": { "name": "Taskless" }, diff --git a/package.json b/package.json index 6760997..f452931 100644 --- a/package.json +++ b/package.json @@ -1,7 +1,7 @@ { "private": true, "name": "@taskless/skills", - "version": "0.10.1", + "version": "0.10.2", "license": "MIT", "repository": "taskless/skills.git", "scripts": { diff --git a/packages/cli/CHANGELOG.md b/packages/cli/CHANGELOG.md index 3b67425..ec08440 100644 --- a/packages/cli/CHANGELOG.md +++ b/packages/cli/CHANGELOG.md @@ -1,5 +1,37 @@ # @taskless/cli +## 0.10.2 + +### Patch Changes + +- 1cd0f89: Treat the Taskless organization UUID as the one canonical identity, and become + forward-compatible with the server's coming identity cleanup. + - **Stop consuming `installationId`.** It is dropped from the `WhoamiOrg` type + and from the `taskless rule meta --json` output (it was already optional and + absent for public repos). The CLI never used it and it should not round-trip + through us. + - **Namespace the GitHub org id.** `WhoamiOrg.orgId` is now optional and a new + `githubOrgId?: number` is added, so a consumer reads `githubOrgId ?? orgId` + and keeps working across the server's rename. It is a convenience id, never an + identity. + - **Identify on the canonical id.** `decodeOrgId` validates the token's `id` + claim (a UUID string) and the legacy `orgId` claim (numeric, or a numeric + string) independently: a valid `id` wins, an invalid `id` still lets a valid + `orgId` through, and a non-numeric `orgId` is rejected rather than smuggled in + as an identity. PostHog then groups organizations on that canonical id. Tokens + that don't yet carry an `id` claim fall back to the numeric claim, so grouping + is unchanged until the server starts sending it. + - **Always have a known org id.** When neither a matched org nor a token claim + resolves, the canonical id falls back to the nil UUID + (`00000000-0000-0000-0000-000000000000`) instead of being absent — so the org + subject and telemetry group are always a stable, known value and unattributed + usage lands in one bucket. As a result, a write from a token missing org info + now sends the nil-UUID subject rather than failing with a re-authenticate + error. + - **Tolerate `number | string` on the legacy path.** The canonical `id` stays a + UUID `string`, but `decodeOrgId` accepts either type since we can't promise + what a legacy claim carries. + ## 0.10.1 ### Patch Changes diff --git a/packages/cli/package.json b/packages/cli/package.json index b7c7d48..be2b783 100644 --- a/packages/cli/package.json +++ b/packages/cli/package.json @@ -1,6 +1,6 @@ { "name": "@taskless/cli", - "version": "0.10.1", + "version": "0.10.2", "license": "MIT", "repository": { "type": "git", diff --git a/skills/taskless/SKILL.md b/skills/taskless/SKILL.md index 19b6a83..1a32ef1 100644 --- a/skills/taskless/SKILL.md +++ b/skills/taskless/SKILL.md @@ -20,7 +20,7 @@ description: | `taskless help route`; it does NOT suppress the skill. metadata: author: taskless - version: 0.10.1 + version: 0.10.2 commandName: tskl compatibility: Designed for Agents implementing the Agent Skills specification. ---