test(cli): exempt the two ci.txt lines where a literal invocation is correct

The source guard and the `ci.txt` prose it flags were written on separate
branches and were each correct in isolation. Combined, the guard fires on
two lines that are deliberately literal:

- the enumeration of what `%(PACKAGE_MANAGER_DLX)s` expands to, where
  naming the four complete invocations IS the documentation — substituting
  the variable would define the placeholder in terms of itself
- `pnpm taskless check`, where `taskless` is the binary pnpm resolves from
  the wired repo's own `node_modules/.bin`. It is a foreign binary, not
  this CLI's invocation, and `%(TASKLESS_CLI)s` would render it as
  `pnpm npx @taskless/cli check`

Both are prose *about* invocations rather than an instruction to run one,
which is the distinction the regex cannot draw on its own. They are
exempted by content match with the reason recorded, not by line number, so
an edit above them cannot move the exemption onto a different line.

An allowlist nobody rechecks is how a guard quietly stops guarding, so a
second test fails when an entry no longer matches a line the regex would
otherwise flag. Verified by breaking an entry and watching it fail rather
than by assuming it passes.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Cyga14bww8rmazH2XrF8ms

Author: theCodeDrift

packages/cli/test/recipe-cross-references.test.ts

@@ -77,6 +77,36 @@ const HARDCODED_INVOCATION = new RegExp(
     String.raw`)\b)`
 );
 
+/**
+ * The two places a literal invocation is CORRECT, and why. Both are prose
+ * *about* invocations rather than an instruction to run one, which is the
+ * distinction the regex cannot draw on its own.
+ *
+ * Kept as content matches rather than line numbers so an edit above them does
+ * not silently move the exemption onto a different line. If the prose changes
+ * enough that a snippet stops matching, the staleness test below fails — which
+ * is the intended outcome: a reworded exception deserves to be re-justified,
+ * not silently carried forward.
+ */
+const ALLOWED_HARDCODED: { file: string; snippet: string; why: string }[] = [
+  {
+    file: "ci.txt",
+    snippet: "`npx @taskless/cli`, `pnpm dlx @taskless/cli`,",
+    why: "Enumerates what %(PACKAGE_MANAGER_DLX)s expands to. Naming the four complete invocations IS the documentation; substituting the variable here would define the placeholder in terms of itself.",
+  },
+  {
+    file: "ci.txt",
+    snippet: "`pnpm taskless check`",
+    why: "That `taskless` is the binary pnpm resolves from the WIRED REPO's node_modules/.bin when @taskless/cli is their dev dependency — a foreign binary, not this CLI's invocation. %(TASKLESS_CLI)s would render `pnpm npx @taskless/cli check`.",
+  },
+];
+
+function isAllowed(file: string, line: string): boolean {
+  return ALLOWED_HARDCODED.some(
+    (entry) => entry.file === file && line.includes(entry.snippet)
+  );
+}
+
 async function recipeFiles(): Promise<string[]> {
   const entries = await readdir(recipeDirectory);
   return entries.filter((entry) => entry.endsWith(".txt")).toSorted();
@@ -180,7 +210,7 @@ describe("recipes defer the CLI invocation to the renderer", () => {
     for (const file of await recipeFiles()) {
       const source = await readFile(join(recipeDirectory, file), "utf8");
       for (const [index, line] of source.split("\n").entries()) {
-        if (HARDCODED_INVOCATION.test(line)) {
+        if (HARDCODED_INVOCATION.test(line) && !isAllowed(file, line)) {
           offenders.push(`${file}:${String(index + 1)}: ${line.trim()}`);
         }
       }
@@ -191,6 +221,27 @@ describe("recipes defer the CLI invocation to the renderer", () => {
     expect(offenders).toEqual([]);
   });
 
+  // An allowlist nobody rechecks is how a guard quietly stops guarding. Each
+  // entry must still match a line the regex would otherwise flag: if the prose
+  // was reworded, or the exception removed, the entry is dead and the reason
+  // attached to it no longer describes anything.
+  it("carries no stale entry in the hardcoded-invocation allowlist", async () => {
+    const stale: string[] = [];
+    for (const entry of ALLOWED_HARDCODED) {
+      const source = await readFile(join(recipeDirectory, entry.file), "utf8");
+      const stillNeeded = source
+        .split("\n")
+        .some(
+          (line) =>
+            line.includes(entry.snippet) && HARDCODED_INVOCATION.test(line)
+        );
+      if (!stillNeeded) {
+        stale.push(`${entry.file}: "${entry.snippet}" no longer matches`);
+      }
+    }
+    expect(stale).toEqual([]);
+  });
+
   it("renders a real invocation into every recipe that names the CLI", async () => {
     const rendered = await renderedRecipes();
     // Same build-target reasoning as CLI_NAMES: a prod build with no detected