@bridge-ds/cli 0.6.0 → 0.8.0

package/dist/index.js

@@ -3,7 +3,7 @@
 // src/index.ts
 import { existsSync as existsSync6 } from "node:fs";
 import { readFile as readFile7, writeFile as writeFile5 } from "node:fs/promises";
-import { isAbsolute, join as join6, relative as relative4, resolve as resolve4 } from "node:path";
+import { isAbsolute, join as join6, relative as relative4, resolve as resolve5 } from "node:path";
 
 // ../core/src/audit/types.ts
 var AUDIT_SCHEMA_VERSION = 1;
@@ -2424,6 +2424,8 @@ function productProblems(raw) {
 
 // ../core/src/config.ts
 var CONFIG_FILE = "bridge.config.json";
+var CHANGES_MODES = ["suggest", "direct"];
+var DEFAULT_CHANGES_MODE = "suggest";
 var DEFAULT_OVERRIDE = { allowed: [], requireReason: true, minReasonLength: 20 };
 var DEFAULT_TOKEN_PATHS = {
   root: "tokens",
@@ -2563,6 +2565,8 @@ function defineConfig(input) {
       ...g.rights ? { rights: normalizeRights(g.rights) } : {}
     },
     products: input.products?.length ? input.products.map((p) => ({ ...p })) : DEFAULT_PRODUCTS.map((p) => ({ ...p })),
+    changes: input.changes === "direct" ? "direct" : DEFAULT_CHANGES_MODE,
+    ...input.storybook?.url ? { storybook: { url: input.storybook.url.trim().replace(/\/+$/, "") } } : {},
     ...input.audit ? { audit: { ...input.audit } } : {},
     ...input.visualImpact ? { visualImpact: { mode: input.visualImpact.mode === "on-demand" ? "on-demand" : "auto" } } : {},
     ...input.integrations ? { integrations: { ...input.integrations } } : {},
@@ -2685,6 +2689,13 @@ function loadConfig(source) {
     }
   }
   problems.push(...visualImpactProblems(d.visualImpact));
+  if (d.changes !== void 0 && !CHANGES_MODES.includes(d.changes)) problems.push(`"changes" must be "suggest" or "direct" (got ${JSON.stringify(d.changes)})`);
+  const sb = d.storybook;
+  if (sb !== void 0) {
+    if (!isObj(sb) || !isStr(sb.url)) problems.push('"storybook" must be { "url" } with the deployed Storybook address');
+    else if (!/^https:\/\/[^\s/]+/.test(sb.url.trim())) problems.push('"storybook.url" must start with https://, for example https://storybook.example.com');
+    else for (const k of Object.keys(sb)) if (k !== "url") problems.push(`"storybook.${k}" is not a known key`);
+  }
   problems.push(...productProblems(d.products));
   const audit2 = d.audit;
   if (audit2 !== void 0) {
@@ -2739,10 +2750,10 @@ function assertSafeBranch(branch, rules = {}) {
 
 // ../core/src/node/git-local.ts
 function git(root, args, opts = {}) {
-  return new Promise((resolve5, reject) => {
+  return new Promise((resolve6, reject) => {
     const child = execFile("git", args, { cwd: root, env: { ...process.env, ...opts.env }, maxBuffer: 32 * 1024 * 1024 }, (err, stdout, stderr) => {
       if (err) reject(new Error(`git ${args.join(" ")}: ${stderr || err.message}`.trim()));
-      else resolve5(stdout);
+      else resolve6(stdout);
     });
     if (opts.input !== void 0) child.stdin.end(opts.input);
   });
@@ -2958,93 +2969,6 @@ function parseComponentSpecs(text) {
   return f;
 }
 
-// src/index.ts
-import { fileURLToPath } from "node:url";
-
-// ../visual/src/run.ts
-import { existsSync as existsSync4 } from "node:fs";
-import { mkdir as mkdir3, readFile as readFile3, rm as rm2, unlink, writeFile as writeFile3 } from "node:fs/promises";
-import { tmpdir } from "node:os";
-import { join as join4, relative as relative3, resolve as resolve2 } from "node:path";
-
-// ../core/src/protection.ts
-var PROTECTION_PARTS = ["review", "checks", "history", "deletion"];
-var protectionRulesetName = (defaultBranch) => `Protect the library (${defaultBranch})`;
-function refPattern(pattern) {
-  const src = pattern.replace(/[.+^${}()|[\]\\]/g, "\\$&").replace(/\*\*/g, "\0").replace(/\*/g, "[^/]*").replace(/\?/g, "[^/]").replace(/\u0000/g, ".*");
-  return new RegExp(`^${src}$`);
-}
-function rulesetTargetsDefault(ruleset, defaultBranch) {
-  if (ruleset.target && ruleset.target !== "branch") return false;
-  const ref = `refs/heads/${defaultBranch}`;
-  const hit = (p) => p === "~ALL" || p === "~DEFAULT_BRANCH" || p === ref || p === defaultBranch || refPattern(p.startsWith("refs/") ? p : `refs/heads/${p}`).test(ref);
-  const cond = ruleset.conditions?.ref_name;
-  if (!cond) return false;
-  if ((cond.exclude ?? []).some(hit)) return false;
-  return (cond.include ?? []).some(hit);
-}
-var count = (v) => typeof v === "number" ? v : 0;
-function rulesetParts(ruleset) {
-  const parts = /* @__PURE__ */ new Set();
-  if (ruleset.enforcement !== "active") return parts;
-  for (const rule of ruleset.rules ?? []) {
-    if (rule.type === "deletion") parts.add("deletion");
-    if (rule.type === "non_fast_forward") parts.add("history");
-    if (rule.type === "pull_request" && count(rule.parameters?.required_approving_review_count) >= 1) parts.add("review");
-    if (rule.type === "required_status_checks" && Array.isArray(rule.parameters?.required_status_checks) && rule.parameters.required_status_checks.length > 0) parts.add("checks");
-  }
-  return parts;
-}
-function classicParts(p) {
-  const parts = /* @__PURE__ */ new Set();
-  if (count(p.required_pull_request_reviews?.required_approving_review_count) >= 1) parts.add("review");
-  if (((p.required_status_checks?.contexts?.length ?? 0) || (p.required_status_checks?.checks?.length ?? 0)) > 0) parts.add("checks");
-  if (!p.allow_force_pushes?.enabled) parts.add("history");
-  if (!p.allow_deletions?.enabled) parts.add("deletion");
-  return parts;
-}
-var rulesetUrl = (r) => r.html_url ?? r._links?.html?.href;
-function protectionState(rulesets, branchProtection, defaultBranch) {
-  const bridge = rulesets?.find((r) => r.name === protectionRulesetName(defaultBranch));
-  const extra = bridge?.id !== void 0 ? { bridgeRulesetId: bridge.id } : {};
-  const covered = /* @__PURE__ */ new Set();
-  let url;
-  for (const r of rulesets ?? []) {
-    if (!rulesetTargetsDefault(r, defaultBranch)) continue;
-    const parts = rulesetParts(r);
-    if (parts.size && !url) url = rulesetUrl(r);
-    parts.forEach((p) => covered.add(p));
-  }
-  if (branchProtection) classicParts(branchProtection).forEach((p) => covered.add(p));
-  const missing = PROTECTION_PARTS.filter((p) => !covered.has(p));
-  const withUrl = url ? { url } : {};
-  if (!missing.length) return { kind: "protected", missing, ...extra, ...withUrl };
-  const unreadable = rulesets == null || branchProtection === void 0;
-  if (covered.size === 0) return { kind: unreadable ? "unknown" : "unprotected", missing, ...extra };
-  return { kind: "partial", missing, ...extra, ...withUrl };
-}
-var PROTECTION_PART_PHRASE = {
-  review: "changes can skip review",
-  checks: "checks do not have to pass",
-  history: "past changes can be rewritten",
-  deletion: "the library can be deleted"
-};
-var joinAnd = (xs) => xs.length <= 1 ? xs[0] ?? "" : `${xs.slice(0, -1).join(", ")} and ${xs[xs.length - 1]}`;
-function protectionSentence(state) {
-  switch (state.kind) {
-    case "protected":
-      return "Protected: every change goes through review.";
-    case "unprotected":
-      return "Your library can be changed without review.";
-    case "partial": {
-      const s = joinAnd(state.missing.map((p) => PROTECTION_PART_PHRASE[p]));
-      return `Partly protected: ${s}.`;
-    }
-    default:
-      return "Protection status unknown: GitHub did not let this token read it.";
-  }
-}
-
 // ../core/src/github-client.ts
 var GitHubError = class extends Error {
   constructor(status, message, detail, info = {}) {
@@ -3412,21 +3336,27 @@ var GitHubClient = class _GitHubClient {
     return pr ? { number: pr.number, url: pr.html_url, title: pr.title, draft: !!pr.draft, headRef: pr.head.ref } : void 0;
   }
   /** Best effort: labels need the repo to allow it; failure is not fatal. */
-  async addLabels(issueNumber2, labels) {
+  async addLabels(issueNumber3, labels) {
     try {
-      await this.request("POST", `${this.repoPath}/issues/${issueNumber2}/labels`, { labels });
+      await this.request("POST", `${this.repoPath}/issues/${issueNumber3}/labels`, { labels });
       return true;
     } catch {
       return false;
     }
   }
-  async addComment(issueNumber2, body) {
-    await this.request("POST", `${this.repoPath}/issues/${issueNumber2}/comments`, { body });
+  async addComment(issueNumber3, body) {
+    await this.request("POST", `${this.repoPath}/issues/${issueNumber3}/comments`, { body });
   }
-  /** Comments on an issue or pull request, oldest first (first 100: the sticky preview comment is posted early). */
-  async listIssueComments(issueNumber2) {
-    const r = await this.request("GET", `${this.repoPath}/issues/${issueNumber2}/comments?per_page=100`);
-    return r.map((c) => ({ id: c.id, body: c.body ?? "", author: c.user?.login ?? "unknown", updatedAt: c.updated_at }));
+  /**
+   * Comments on an issue or pull request, oldest first (first 100: the sticky preview comment is posted early).
+   * `authorAssociation` is GitHub's OWNER, MEMBER, COLLABORATOR, CONTRIBUTOR, NONE... (suggestion approvals read it).
+   */
+  async listIssueComments(issueNumber3) {
+    const r = await this.request(
+      "GET",
+      `${this.repoPath}/issues/${issueNumber3}/comments?per_page=100`
+    );
+    return r.map((c) => ({ id: c.id, body: c.body ?? "", author: c.user?.login ?? "unknown", updatedAt: c.updated_at, createdAt: c.created_at ?? c.updated_at, authorAssociation: c.author_association ?? "NONE" }));
   }
   // --- Issues (component change requests) ---------------------------------------------------
   async createIssue(input) {
@@ -3741,8 +3671,8 @@ var GitHubClient = class _GitHubClient {
     });
     return { id: r.id, name: r.name, status: r.status, conclusion: r.conclusion, url: r.html_url };
   }
-  async removeLabel(issueNumber2, label) {
-    await this.request("DELETE", `${this.repoPath}/issues/${issueNumber2}/labels/${encodeURIComponent(label)}`);
+  async removeLabel(issueNumber3, label) {
+    await this.request("DELETE", `${this.repoPath}/issues/${issueNumber3}/labels/${encodeURIComponent(label)}`);
   }
   // --- branch actions shared by Studio, the MCP server and the CLI (branch-actions.ts) ---
   /** The account the token belongs to (GET /user). Needs a token. */
@@ -3916,6 +3846,169 @@ function toIssue(r) {
   };
 }
 
+// ../core/src/explorations.ts
+var EXPLORATION_USE_CASES = [
+  { value: "user-test", label: "Prototype for a user test", hint: "A coded prototype on a product staging branch, with the real components and tokens." },
+  { value: "stakeholder-demo", label: "Stakeholder demo", hint: "Show an idea on real screens before anyone commits to it." },
+  { value: "ab-idea", label: "A/B idea", hint: "Ship a variant to a staging or experiment branch and compare it with what is live." },
+  { value: "terminal", label: "Exploring with Claude Code", hint: "A designer works from the terminal with Claude and the Bridge MCP server on this branch, never on main." },
+  { value: "other", label: "Other", hint: "Anything else worth trying before it becomes a change." }
+];
+var EXPLORATION_STATUS_LABEL = { active: "Running", promoted: "Promoted to review", closed: "Closed" };
+
+// ../core/src/requests.ts
+var REQUEST_KINDS = [
+  { value: "new-component", label: "New component", hint: "A component the design system does not have yet." },
+  { value: "new-variant", label: "New variant", hint: "A size, tone or state the component does not have yet." },
+  { value: "prop-change", label: "Option change (prop)", hint: "Add, rename or change an option (a prop in code) or its default." },
+  { value: "structure", label: "Structure change", hint: "A part was added, removed or moved." },
+  { value: "visual", label: "Visual change", hint: "Spacing, radius, layout or icon placement." },
+  { value: "token-binding", label: "Token change", hint: "The component should paint with another token." },
+  { value: "bug", label: "Bug", hint: "It looks or behaves differently from the guidance." },
+  { value: "other", label: "Other", hint: "Anything else." }
+];
+var REQUEST_LABEL = "component-change";
+function requestIssueTitle(r) {
+  const t = r.title.trim().replace(/\.$/, "");
+  return `${r.component}: ${t.charAt(0).toLowerCase()}${t.slice(1)}`;
+}
+var REQUEST_STATUS_LABEL = { requested: "Requested", "in-progress": "In progress", done: "Done", declined: "Declined" };
+function validateIntegrations(i) {
+  const out = [];
+  if (!i?.jira) return out;
+  if (!/^https:\/\/[^/]+/.test(i.jira.baseUrl ?? "")) out.push("Jira site must start with https://, for example https://acme.atlassian.net.");
+  if (!/^[A-Z][A-Z0-9_]{1,9}$/.test(i.jira.project ?? "")) out.push("Jira project key is 2 to 10 capital letters or digits, like DS.");
+  return out;
+}
+function jiraIssueFields(r, jira, issueUrl) {
+  const text = (t) => ({ type: "text", text: t });
+  const para = (...c) => ({ type: "paragraph", content: c });
+  return {
+    project: { key: jira.project },
+    issuetype: { name: jira.issueType ?? "Task" },
+    summary: requestIssueTitle(r),
+    labels: [.../* @__PURE__ */ new Set(["bridge", REQUEST_LABEL, ...jira.labels ?? []])].map((l) => l.replace(/\s+/g, "-")),
+    description: {
+      type: "doc",
+      version: 1,
+      content: [
+        para(text(r.summary.trim() || r.title)),
+        ...r.line?.trim() ? [para(text(r.line.trim()))] : [],
+        ...r.changes.map((c) => para(text(`${c.field}: ${c.before ?? "(none)"} -> ${c.after ?? "(removed)"}`))),
+        para({ type: "text", text: "GitHub request", marks: [{ type: "link", attrs: { href: issueUrl } }] })
+      ]
+    }
+  };
+}
+
+// ../core/src/suggestions.ts
+var SUGGESTION_STATUS_LABEL = {
+  "needs-review": "Needs review",
+  "changes-requested": "Changes requested",
+  approved: "Approved, ready to apply",
+  applying: "Being applied",
+  applied: "Applied",
+  declined: "Declined",
+  outdated: "Outdated"
+};
+
+// ../core/src/suggestion-apply.ts
+var SUGGESTION_APPLY_EXIT = {
+  ready: 0,
+  "already-applied": 0,
+  conflict: 3,
+  "not-approved": 1,
+  blocked: 1,
+  refused: 1
+};
+
+// src/index.ts
+import { fileURLToPath } from "node:url";
+
+// ../visual/src/run.ts
+import { existsSync as existsSync4 } from "node:fs";
+import { mkdir as mkdir3, readFile as readFile3, rm as rm2, unlink, writeFile as writeFile3 } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join as join4, relative as relative3, resolve as resolve2 } from "node:path";
+
+// ../core/src/protection.ts
+var PROTECTION_PARTS = ["review", "checks", "history", "deletion"];
+var protectionRulesetName = (defaultBranch) => `Protect the library (${defaultBranch})`;
+function refPattern(pattern) {
+  const src = pattern.replace(/[.+^${}()|[\]\\]/g, "\\$&").replace(/\*\*/g, "\0").replace(/\*/g, "[^/]*").replace(/\?/g, "[^/]").replace(/\u0000/g, ".*");
+  return new RegExp(`^${src}$`);
+}
+function rulesetTargetsDefault(ruleset, defaultBranch) {
+  if (ruleset.target && ruleset.target !== "branch") return false;
+  const ref = `refs/heads/${defaultBranch}`;
+  const hit = (p) => p === "~ALL" || p === "~DEFAULT_BRANCH" || p === ref || p === defaultBranch || refPattern(p.startsWith("refs/") ? p : `refs/heads/${p}`).test(ref);
+  const cond = ruleset.conditions?.ref_name;
+  if (!cond) return false;
+  if ((cond.exclude ?? []).some(hit)) return false;
+  return (cond.include ?? []).some(hit);
+}
+var count = (v) => typeof v === "number" ? v : 0;
+function rulesetParts(ruleset) {
+  const parts = /* @__PURE__ */ new Set();
+  if (ruleset.enforcement !== "active") return parts;
+  for (const rule of ruleset.rules ?? []) {
+    if (rule.type === "deletion") parts.add("deletion");
+    if (rule.type === "non_fast_forward") parts.add("history");
+    if (rule.type === "pull_request" && count(rule.parameters?.required_approving_review_count) >= 1) parts.add("review");
+    if (rule.type === "required_status_checks" && Array.isArray(rule.parameters?.required_status_checks) && rule.parameters.required_status_checks.length > 0) parts.add("checks");
+  }
+  return parts;
+}
+function classicParts(p) {
+  const parts = /* @__PURE__ */ new Set();
+  if (count(p.required_pull_request_reviews?.required_approving_review_count) >= 1) parts.add("review");
+  if (((p.required_status_checks?.contexts?.length ?? 0) || (p.required_status_checks?.checks?.length ?? 0)) > 0) parts.add("checks");
+  if (!p.allow_force_pushes?.enabled) parts.add("history");
+  if (!p.allow_deletions?.enabled) parts.add("deletion");
+  return parts;
+}
+var rulesetUrl = (r) => r.html_url ?? r._links?.html?.href;
+function protectionState(rulesets, branchProtection, defaultBranch) {
+  const bridge = rulesets?.find((r) => r.name === protectionRulesetName(defaultBranch));
+  const extra = bridge?.id !== void 0 ? { bridgeRulesetId: bridge.id } : {};
+  const covered = /* @__PURE__ */ new Set();
+  let url;
+  for (const r of rulesets ?? []) {
+    if (!rulesetTargetsDefault(r, defaultBranch)) continue;
+    const parts = rulesetParts(r);
+    if (parts.size && !url) url = rulesetUrl(r);
+    parts.forEach((p) => covered.add(p));
+  }
+  if (branchProtection) classicParts(branchProtection).forEach((p) => covered.add(p));
+  const missing = PROTECTION_PARTS.filter((p) => !covered.has(p));
+  const withUrl = url ? { url } : {};
+  if (!missing.length) return { kind: "protected", missing, ...extra, ...withUrl };
+  const unreadable = rulesets == null || branchProtection === void 0;
+  if (covered.size === 0) return { kind: unreadable ? "unknown" : "unprotected", missing, ...extra };
+  return { kind: "partial", missing, ...extra, ...withUrl };
+}
+var PROTECTION_PART_PHRASE = {
+  review: "changes can skip review",
+  checks: "checks do not have to pass",
+  history: "past changes can be rewritten",
+  deletion: "the library can be deleted"
+};
+var joinAnd = (xs) => xs.length <= 1 ? xs[0] ?? "" : `${xs.slice(0, -1).join(", ")} and ${xs[xs.length - 1]}`;
+function protectionSentence(state) {
+  switch (state.kind) {
+    case "protected":
+      return "Protected: every change goes through review.";
+    case "unprotected":
+      return "Your library can be changed without review.";
+    case "partial": {
+      const s = joinAnd(state.missing.map((p) => PROTECTION_PART_PHRASE[p]));
+      return `Partly protected: ${s}.`;
+    }
+    default:
+      return "Protection status unknown: GitHub did not let this token read it.";
+  }
+}
+
 // ../core/src/protection-github.ts
 async function loadProtection(client, defaultBranch) {
   const rulesets = await client.listRulesets().then((list2) => Promise.all(list2.map((r) => r.enforcement === "disabled" || r.id === void 0 ? r : client.getRuleset(r.id)))).catch(() => null);
@@ -4032,61 +4125,6 @@ function impactedModules(index, input) {
   return { modules, globalHits };
 }
 
-// ../core/src/explorations.ts
-var EXPLORATION_USE_CASES = [
-  { value: "user-test", label: "Prototype for a user test", hint: "A coded prototype on a product staging branch, with the real components and tokens." },
-  { value: "stakeholder-demo", label: "Stakeholder demo", hint: "Show an idea on real screens before anyone commits to it." },
-  { value: "ab-idea", label: "A/B idea", hint: "Ship a variant to a staging or experiment branch and compare it with what is live." },
-  { value: "terminal", label: "Exploring with Claude Code", hint: "A designer works from the terminal with Claude and the Bridge MCP server on this branch, never on main." },
-  { value: "other", label: "Other", hint: "Anything else worth trying before it becomes a change." }
-];
-var EXPLORATION_STATUS_LABEL = { active: "Running", promoted: "Promoted to review", closed: "Closed" };
-
-// ../core/src/requests.ts
-var REQUEST_KINDS = [
-  { value: "new-component", label: "New component", hint: "A component the design system does not have yet." },
-  { value: "new-variant", label: "New variant", hint: "A size, tone or state the component does not have yet." },
-  { value: "prop-change", label: "Option change (prop)", hint: "Add, rename or change an option (a prop in code) or its default." },
-  { value: "structure", label: "Structure change", hint: "A part was added, removed or moved." },
-  { value: "visual", label: "Visual change", hint: "Spacing, radius, layout or icon placement." },
-  { value: "token-binding", label: "Token change", hint: "The component should paint with another token." },
-  { value: "bug", label: "Bug", hint: "It looks or behaves differently from the guidance." },
-  { value: "other", label: "Other", hint: "Anything else." }
-];
-var REQUEST_LABEL = "component-change";
-function requestIssueTitle(r) {
-  const t = r.title.trim().replace(/\.$/, "");
-  return `${r.component}: ${t.charAt(0).toLowerCase()}${t.slice(1)}`;
-}
-var REQUEST_STATUS_LABEL = { requested: "Requested", "in-progress": "In progress", done: "Done", declined: "Declined" };
-function validateIntegrations(i) {
-  const out = [];
-  if (!i?.jira) return out;
-  if (!/^https:\/\/[^/]+/.test(i.jira.baseUrl ?? "")) out.push("Jira site must start with https://, for example https://acme.atlassian.net.");
-  if (!/^[A-Z][A-Z0-9_]{1,9}$/.test(i.jira.project ?? "")) out.push("Jira project key is 2 to 10 capital letters or digits, like DS.");
-  return out;
-}
-function jiraIssueFields(r, jira, issueUrl) {
-  const text = (t) => ({ type: "text", text: t });
-  const para = (...c) => ({ type: "paragraph", content: c });
-  return {
-    project: { key: jira.project },
-    issuetype: { name: jira.issueType ?? "Task" },
-    summary: requestIssueTitle(r),
-    labels: [.../* @__PURE__ */ new Set(["bridge", REQUEST_LABEL, ...jira.labels ?? []])].map((l) => l.replace(/\s+/g, "-")),
-    description: {
-      type: "doc",
-      version: 1,
-      content: [
-        para(text(r.summary.trim() || r.title)),
-        ...r.line?.trim() ? [para(text(r.line.trim()))] : [],
-        ...r.changes.map((c) => para(text(`${c.field}: ${c.before ?? "(none)"} -> ${c.after ?? "(removed)"}`))),
-        para({ type: "text", text: "GitHub request", marks: [{ type: "link", attrs: { href: issueUrl } }] })
-      ]
-    }
-  };
-}
-
 // ../core/src/fidelity-references.ts
 var FIGMA_REFERENCES_DIR = "figma-references";
 var FIGMA_REFERENCES_MANIFEST = `${FIGMA_REFERENCES_DIR}/manifest.json`;
@@ -4310,15 +4348,15 @@ async function shoot(page, r) {
 }
 async function switchStory(page, storyId2) {
   const ok = await page.evaluate(
-    (id) => new Promise((resolve5) => {
+    (id) => new Promise((resolve6) => {
       const ch = window.__STORYBOOK_ADDONS_CHANNEL__;
-      if (!ch) return resolve5(false);
+      if (!ch) return resolve6(false);
       const events = ["storyRendered", "storyErrored", "storyThrewException", "storyMissing", "playFunctionThrewException"];
       const timer = setTimeout(() => done(), 15e3);
       function done() {
         clearTimeout(timer);
         for (const e of events) ch.off(e, done);
-        resolve5(true);
+        resolve6(true);
       }
       for (const e of events) ch.on(e, done);
       window.scrollTo(0, 0);
@@ -4731,12 +4769,12 @@ function serveDir(dir) {
     res.writeHead(200, { "content-type": TYPES[extname(file)] ?? "application/octet-stream", "cache-control": "no-store" });
     createReadStream(file).pipe(res);
   });
-  return new Promise((resolve5, reject) => {
+  return new Promise((resolve6, reject) => {
     server.once("error", reject);
     server.listen(0, "127.0.0.1", () => {
       const addr = server.address();
       const port = typeof addr === "object" && addr ? addr.port : 0;
-      resolve5({ url: `http://127.0.0.1:${port}`, close: () => new Promise((r) => server.close(() => r())) });
+      resolve6({ url: `http://127.0.0.1:${port}`, close: () => new Promise((r) => server.close(() => r())) });
     });
   });
 }
@@ -4808,7 +4846,7 @@ async function removeWorktree(repo, dir) {
   await git(repo, ["worktree", "prune"]).catch(() => void 0);
 }
 function run(cmd, args, cwd, log, root = cwd, env = {}) {
-  return new Promise((resolve5, reject) => {
+  return new Promise((resolve6, reject) => {
     const bin = [.../* @__PURE__ */ new Set([join3(cwd, "node_modules", ".bin"), join3(root, "node_modules", ".bin")])].join(":");
     const child = spawn(cmd, args, {
       cwd,
@@ -4821,7 +4859,7 @@ function run(cmd, args, cwd, log, root = cwd, env = {}) {
     child.stderr.on("data", keep);
     child.on("error", reject);
     child.on("close", (code) => {
-      if (code === 0) resolve5();
+      if (code === 0) resolve6();
       else {
         log(tail);
         reject(new Error(`${cmd} ${args.join(" ")} failed in ${cwd} (exit ${code})`));
@@ -5232,12 +5270,12 @@ async function captureFigmaReferences(o) {
       }
       const plan = JSON.stringify(j.plan.render);
       await page.evaluate(
-        ({ id, plan: plan2 }) => new Promise((resolve5) => {
+        ({ id, plan: plan2 }) => new Promise((resolve6) => {
           const ch = window.__STORYBOOK_ADDONS_CHANNEL__;
           const done = () => {
             clearTimeout(timer);
             ch.off("storyRendered", done);
-            resolve5();
+            resolve6();
           };
           const timer = setTimeout(done, 1e4);
           ch.on("storyRendered", done);
@@ -5526,7 +5564,7 @@ Claude Code is not installed (no \`claude\` on PATH). Install it (npm install -g
       if (!REQUEST_KINDS.some((k) => k.value === kind)) throw new RequestUsageError(`--kind takes ${REQUEST_KINDS.map((k) => k.value).join(", ")}, got "${kind}"`);
       const dryRun = has(a, "dry-run");
       const ctx = await context(root, io, !dryRun);
-      const figma = flag(a, "figma");
+      const figma2 = flag(a, "figma");
       const exploration = flag(a, "exploration");
       const r = await requests2.createRequest(ctx, {
         component,
@@ -5534,7 +5572,7 @@ Claude Code is not installed (no \`claude\` on PATH). Install it (npm install -g
         title,
         summary,
         changes: (a.flags.change ?? []).map(parseChange),
-        ...figma ? { figmaUrl: figma } : {},
+        ...figma2 ? { figmaUrl: figma2 } : {},
         ...exploration ? { exploration } : {},
         ...flag(a, "product") ? { product: flag(a, "product") } : {},
         source: "cli",
@@ -5693,7 +5731,195 @@ ${EXPLORE_HELP}`);
 // src/branch.ts
 import { readFile as readFile6 } from "node:fs/promises";
 import { resolve as resolve3 } from "node:path";
-import { BridgeContext as BridgeContext4, branches, studio } from "@bridge-ds/mcp";
+import { BridgeContext as BridgeContext5, branches, studio } from "@bridge-ds/mcp";
+
+// src/suggest.ts
+import { BridgeContext as BridgeContext4, suggestions } from "@bridge-ds/mcp";
+var SuggestUsageError = class extends Error {
+};
+var SUGGESTIONS_HELP = `bridge suggestions: changes filed as GitHub issues (label bridge-suggestion), applied by a developer
+
+Usage:
+  bridge suggestions [list] [--status needs-review|changes-requested|approved|applying|applied|declined|outdated|all]
+                     [--kind token-change|docs|component-spec|brand|revert|config] [--json]
+  bridge suggestions show <n> [--json]
+                     the change, the checks, its version, who approved it and what is missing
+  bridge suggestions link <n> --pr <m> | --branch <name>
+                     record the pull request that applies it (it must say "Closes #<n>")
+  bridge apply <n> [--write | --patch] [--dry-run] [--accept-edited] [--force-unapproved] [--branch name] [--json]
+                     apply it on today's code: a new local branch by default (working tree untouched, nothing
+                     pushed), --write into the working tree, --patch prints a patch for git am. --dry-run shows
+                     the plan and the diff and writes nothing
+  bridge review <n> --approve | --request-changes --message "..." | --decline --message "..." [--version <sha>]
+                     as the owner your GitHub token belongs to; counts only for owners in bridge.config.json
+
+GitHub token: GITHUB_TOKEN or BRIDGE_GITHUB_TOKEN, else \`gh auth token\`. Reading a public repo works without one.
+Exit codes (apply): 0 applied, already applied or a clean dry run; 1 not approved, blocked by a check or refused;
+2 usage or setup error; 3 conflict with today's code.`;
+var flag3 = (a, k) => a.flags[k]?.[a.flags[k].length - 1];
+var has3 = (a, k) => Boolean(a.flags[k]);
+function changesFlag(a) {
+  if (has3(a, "suggest") && has3(a, "direct")) throw new SuggestUsageError("Pass --suggest or --direct, not both.");
+  return has3(a, "direct") ? "direct" : has3(a, "suggest") ? "suggest" : void 0;
+}
+function tokenFrom2(io) {
+  return io.env.BRIDGE_GITHUB_TOKEN || io.env.GITHUB_TOKEN || io.ghToken();
+}
+async function context3(root, io) {
+  const token = tokenFrom2(io);
+  return BridgeContext4.create({ root, ...token ? { token } : {}, ...io.fetch ? { fetch: io.fetch } : {} });
+}
+function issueNumber2(raw, usage) {
+  const n = Number((raw ?? "").replace(/^#/, ""));
+  if (!raw || !Number.isInteger(n) || n <= 0) throw new SuggestUsageError(`Usage: ${usage}`);
+  return n;
+}
+var STATUSES = ["needs-review", "changes-requested", "approved", "applying", "applied", "declined", "outdated", "all"];
+var KINDS = ["token-change", "docs", "component-spec", "brand", "revert", "config"];
+async function runSuggestions(a, root, io = defaultIO()) {
+  const sub = a._[1] ?? "list";
+  if (sub === "help" || has3(a, "help")) return io.print(SUGGESTIONS_HELP), 0;
+  switch (sub) {
+    case "list": {
+      const status = flag3(a, "status") ?? "all";
+      if (!STATUSES.includes(status)) throw new SuggestUsageError(`--status takes ${STATUSES.join(", ")}, got "${status}"`);
+      const kind = flag3(a, "kind");
+      if (kind && !KINDS.includes(kind)) throw new SuggestUsageError(`--kind takes ${KINDS.join(", ")}, got "${kind}"`);
+      const ctx = await context3(root, io);
+      const r = await suggestions.listSuggestionsOp(ctx, { status, ...kind ? { kind } : {} });
+      if (has3(a, "json")) return io.print(JSON.stringify(r, null, 2)), 0;
+      if (!r.suggestions.length) return io.print(`No ${status === "all" ? "open " : `${status} `}suggestion in ${r.repo}.`), 0;
+      for (const x of r.suggestions) {
+        const prs = x.linkedPrs.length ? `  PR ${x.linkedPrs.map((p) => `#${p.number}${p.merged ? " merged" : ` ${p.state}`}`).join(", ")}` : "";
+        io.print(`#${String(x.number).padEnd(5)} ${x.said.padEnd(25)} ${(x.kind ?? "").padEnd(14)} ${x.tier ? `tier ${x.tier}` : "      "}  ${x.title}${prs}`);
+      }
+      io.print(`
+${r.next}`);
+      return 0;
+    }
+    case "show": {
+      const n = issueNumber2(a._[2], "bridge suggestions show <number>");
+      const ctx = await context3(root, io);
+      const r = await suggestions.getSuggestionOp(ctx, { number: n });
+      if (has3(a, "json")) return io.print(JSON.stringify(r, null, 2)), 0;
+      io.print(`#${r.number} ${r.title}`);
+      io.print(`${r.said}${r.kind ? `, ${r.kind}` : ""}${r.tier ? `, tier ${r.tier} (${r.bump})` : ""}${r.source ? `, from ${r.source}` : ""}${r.suggestedBy ? ` by @${r.suggestedBy}` : ""}`);
+      io.print(r.url);
+      if (r.problem) {
+        io.print(`
+${r.problem}`);
+        return 1;
+      }
+      if (r.summary) io.print(`
+${r.summary}`);
+      const c = r.change ?? {};
+      if (c.tokens?.length) {
+        io.print("\nTokens:");
+        for (const t of c.tokens) io.print(`  ${t.kind ?? t.op} ${t.path}${t.before !== void 0 || t.after !== void 0 ? `: ${fmt(t.before)} -> ${fmt(t.after)}` : ""}`);
+      }
+      for (const d of c.docs ?? []) io.print(`Docs: ${d.component} (${d.path})`);
+      if (c.componentSpec) io.print(`Component spec: ${c.componentSpec.component} (${c.componentSpec.specPath})`);
+      for (const f of c.files ?? []) io.print(`File: ${f.change} ${f.path}`);
+      io.print(`
+Version ${r.version}${r.edited ? ` (${r.edited})` : ""}`);
+      io.print(`Approved by: ${r.approvals.approvedBy.map((l) => `@${l}`).join(", ") || "nobody yet"}`);
+      if (r.approvals.missing.length) io.print(`Missing: ${r.approvals.missing.join(" and ")}`);
+      if (r.approvals.changesRequestedBy.length) io.print(`Changes requested by: ${r.approvals.changesRequestedBy.map((l) => `@${l}`).join(", ")}`);
+      for (const p of r.linkedPrs ?? []) io.print(`Pull request: #${p.number} ${p.merged ? "merged" : p.state}  ${p.url}`);
+      io.print(`
+Next: ${r.next}`);
+      return 0;
+    }
+    case "link": {
+      const n = issueNumber2(a._[2], "bridge suggestions link <number> --pr <m>");
+      const prRaw = flag3(a, "pr");
+      const pr = prRaw ? issueNumber2(prRaw, "bridge suggestions link <number> --pr <m>") : void 0;
+      const branch = flag3(a, "branch");
+      if (!pr && !branch) throw new SuggestUsageError("Usage: bridge suggestions link <number> --pr <m> (or --branch <name>)");
+      const ctx = await context3(root, io);
+      const r = await suggestions.linkSuggestionOp(ctx, { number: n, ...pr ? { pr } : {}, ...branch ? { branch } : {} });
+      if (has3(a, "json")) return io.print(JSON.stringify(r, null, 2)), 0;
+      io.print(`#${n} is being applied${pr ? ` in #${pr}` : branch ? ` on ${branch}` : ""}.`);
+      for (const w of r.warnings ?? []) io.error(`warning: ${w}`);
+      return 0;
+    }
+    default:
+      throw new SuggestUsageError(`Unknown suggestions command "${sub}".
+
+${SUGGESTIONS_HELP}`);
+  }
+}
+var fmt = (v) => v === void 0 ? "(none)" : typeof v === "string" ? v : JSON.stringify(v);
+async function runApply(a, root, io = defaultIO()) {
+  if (has3(a, "help") || a._[1] === "help") return io.print(SUGGESTIONS_HELP), 0;
+  const n = issueNumber2(a._[1], "bridge apply <number> [--write | --patch] [--dry-run]");
+  if (has3(a, "write") && has3(a, "patch")) throw new SuggestUsageError("Pass --write or --patch, not both.");
+  const mode2 = has3(a, "write") ? "write" : has3(a, "patch") ? "patch" : "branch";
+  const ctx = await context3(root, io);
+  if (ctx.mode !== "local" || !ctx.isGit) throw new SuggestUsageError("bridge apply runs in a git checkout of the design system: cd into it, or pass --root.");
+  const branch = flag3(a, "branch");
+  const r = await suggestions.applySuggestionOp(ctx, {
+    number: n,
+    mode: has3(a, "dry-run") ? "dry-run" : mode2,
+    acceptEdited: has3(a, "accept-edited"),
+    forceUnapproved: has3(a, "force-unapproved"),
+    ...branch ? { branch } : {}
+  });
+  const code = typeof r.exitCode === "number" ? r.exitCode : SUGGESTION_APPLY_EXIT[r.outcome] ?? 1;
+  if (has3(a, "json")) return io.print(JSON.stringify(r, null, 2)), code;
+  if (mode2 === "patch" && r.patch && !has3(a, "dry-run")) {
+    io.print(r.patch.trimEnd());
+    io.error(r.message);
+    for (const w of r.warnings ?? []) io.error(`warning: ${w}`);
+    return code;
+  }
+  io.print(`#${n}: ${r.message}`);
+  if (r.table) io.print(`
+${r.table}`);
+  for (const p of r.problems ?? []) io.print(`  ${p}`);
+  for (const note of r.notes ?? []) io.print(`  note: ${note}`);
+  if (r.diff) io.print(`
+${r.diff.trimEnd()}`);
+  if (r.brief) io.print(`
+Brief to implement it:
+${r.brief}`);
+  if (r.branch) io.print(`
+branch: ${r.branch}${r.commit ? ` (${String(r.commit).slice(0, 7)})` : ""}`);
+  for (const w of r.warnings ?? []) io.error(`warning: ${w}`);
+  if (r.next && r.next !== r.message) io.print(`
+Next: ${r.next}`);
+  return code;
+}
+async function runReview(a, root, io = defaultIO()) {
+  if (has3(a, "help") || a._[1] === "help") return io.print(SUGGESTIONS_HELP), 0;
+  const usage = 'bridge review <number> --approve | --request-changes --message "..." | --decline --message "..."';
+  const n = issueNumber2(a._[1], usage);
+  const events = ["approve", "request-changes", "decline", "comment"].filter((e) => has3(a, e));
+  if (events.length !== 1) throw new SuggestUsageError(`Usage: ${usage}`);
+  const event = events[0];
+  const inline = flag3(a, event);
+  const message = flag3(a, "message") ?? (inline && inline !== "true" ? inline : void 0);
+  if ((event === "request-changes" || event === "decline" || event === "comment") && !message?.trim()) throw new SuggestUsageError(`--${event} needs --message "..." (the author reads it).`);
+  const role = flag3(a, "role");
+  if (role && !["design", "tech", "approval"].includes(role)) throw new SuggestUsageError(`--role takes design, tech or approval, got "${role}"`);
+  const ctx = await context3(root, io);
+  const version = flag3(a, "version");
+  const r = await suggestions.reviewSuggestionOp(ctx, {
+    number: n,
+    event,
+    ...message ? { message } : {},
+    ...role ? { role } : {},
+    ...version ? { payloadSha: version } : {}
+  });
+  if (has3(a, "json")) return io.print(JSON.stringify(r, null, 2)), 0;
+  const done = event === "approve" ? "Approved" : event === "request-changes" ? "Changes requested on" : event === "decline" ? "Declined" : "Commented on";
+  io.print(`${done} #${n}${r.version ? ` (version ${r.version})` : ""}. Now: ${SUGGESTION_STATUS_LABEL[r.status] ?? r.status}.`);
+  for (const w of r.warnings ?? []) io.error(`warning: ${w}`);
+  if (r.next) io.print(`Next: ${r.next}`);
+  return r.counts === false ? 1 : 0;
+}
+
+// src/branch.ts
 var BRANCH_HELP = `bridge branch: branches in review, the same actions as Bridge Studio
 
 Usage:
@@ -5723,11 +5949,11 @@ Usage:
 
 Start work for a product: bridge propose|explore start|request create ... --product <key> [--jira DS-42].
 GitHub token: GITHUB_TOKEN or BRIDGE_GITHUB_TOKEN, else \`gh auth token\`. Exit codes: 0 ok, 2 usage or setup error.`;
-var flag3 = (a, k) => a.flags[k]?.[a.flags[k].length - 1];
-var has3 = (a, k) => Boolean(a.flags[k]);
-async function context3(root, io) {
+var flag4 = (a, k) => a.flags[k]?.[a.flags[k].length - 1];
+var has4 = (a, k) => Boolean(a.flags[k]);
+async function context4(root, io) {
   const token = io.env.BRIDGE_GITHUB_TOKEN || io.env.GITHUB_TOKEN || io.ghToken();
-  return BridgeContext4.create({ root, ...token ? { token } : {}, ...io.fetch ? { fetch: io.fetch } : {} });
+  return BridgeContext5.create({ root, ...token ? { token } : {}, ...io.fetch ? { fetch: io.fetch } : {} });
 }
 function number(a, at, usage) {
   const raw = a._[at];
@@ -5746,16 +5972,16 @@ function pairs(list2, what) {
 var said = (r) => String(r.said ?? r.summary ?? r.status ?? "Done.");
 async function runBranch(a, root, io = defaultIO()) {
   const sub = a._[1];
-  if (!sub || sub === "help" || has3(a, "help")) {
+  if (!sub || sub === "help" || has4(a, "help")) {
     io.print(BRANCH_HELP);
-    return sub || has3(a, "help") ? 0 : 2;
+    return sub || has4(a, "help") ? 0 : 2;
   }
-  const json = has3(a, "json");
-  const ctx = await context3(root, io);
+  const json = has4(a, "json");
+  const ctx = await context4(root, io);
   const out = (r, text) => (json ? io.print(JSON.stringify(r, null, 2)) : text(), 0);
   switch (sub) {
     case "list": {
-      const limit = flag3(a, "limit");
+      const limit = flag4(a, "limit");
       const r = await branches.whatNeedsMe(ctx, limit ? { limit: Number(limit) } : {});
       return out(r, () => {
         io.print(r.summary);
@@ -5789,28 +6015,28 @@ async function runBranch(a, root, io = defaultIO()) {
     }
     case "review": {
       const n = number(a, 2, 'bridge branch review <n> --approve | --request-changes "..." | --comment "..."');
-      const decision = has3(a, "approve") ? "approve" : has3(a, "request-changes") ? "request_changes" : has3(a, "comment") ? "comment" : null;
+      const decision = has4(a, "approve") ? "approve" : has4(a, "request-changes") ? "request_changes" : has4(a, "comment") ? "comment" : null;
       if (!decision) throw new RequestUsageError('Say what you decide: --approve, --request-changes "what to change" or --comment "text".');
-      const body = decision === "approve" ? flag3(a, "body") : flag3(a, decision === "request_changes" ? "request-changes" : "comment");
+      const body = decision === "approve" ? flag4(a, "body") : flag4(a, decision === "request_changes" ? "request-changes" : "comment");
       const r = await branches.reviewBranch(ctx, { pr: n, decision, ...body && body !== "true" ? { body } : {} });
       return out(r, () => io.print(r.said));
     }
     case "ask": {
-      const r = await branches.askSomeoneElse(ctx, { pr: number(a, 2, "bridge branch ask <n>"), dryRun: has3(a, "dry-run") });
+      const r = await branches.askSomeoneElse(ctx, { pr: number(a, 2, "bridge branch ask <n>"), dryRun: has4(a, "dry-run") });
       return out(r, () => io.print(r.said));
     }
     case "comment": {
       const n = number(a, 2, 'bridge branch comment <n> "text"');
-      const body = a._.slice(3).join(" ") || flag3(a, "body");
+      const body = a._.slice(3).join(" ") || flag4(a, "body");
       if (!body) throw new RequestUsageError('Usage: bridge branch comment <n> "text" [--reply-to <id>]');
-      const reply = flag3(a, "reply-to");
+      const reply = flag4(a, "reply-to");
       const r = await branches.commentOnBranch(ctx, { pr: n, body, ...reply ? { replyTo: Number(reply) } : {} });
       return out(r, () => io.print(r.said));
     }
     case "merge": {
       const n = number(a, 2, 'bridge branch merge <n> [--override "reason"] [--dry-run]');
-      const reason = flag3(a, "override");
-      const r = await branches.mergeBranch(ctx, { pr: n, ...reason ? { overrideReason: reason } : {}, dryRun: has3(a, "dry-run") });
+      const reason = flag4(a, "override");
+      const r = await branches.mergeBranch(ctx, { pr: n, ...reason ? { overrideReason: reason } : {}, dryRun: has4(a, "dry-run") });
       return out(r, () => io.print(r.said));
     }
     case "close": {
@@ -5825,7 +6051,7 @@ async function runBranch(a, root, io = defaultIO()) {
       const n = number(a, 2, "bridge branch update <n> [--choice key=mine|theirs] [--dry-run]");
       const choices = pairs(a.flags.choice, "choice");
       for (const [k, v] of Object.entries(choices)) if (v !== "mine" && v !== "theirs") throw new RequestUsageError(`--choice ${k}= takes mine or theirs, got "${v}".`);
-      const r = await branches.updateFromMain(ctx, { pr: n, ...Object.keys(choices).length ? { choices } : {}, dryRun: has3(a, "dry-run") });
+      const r = await branches.updateFromMain(ctx, { pr: n, ...Object.keys(choices).length ? { choices } : {}, dryRun: has4(a, "dry-run") });
       return out(r, () => {
         io.print(said(r));
         for (const c of r.conflicts ?? []) io.print(`  ${c.key}  (${c.token}, default ${c.default ?? "none: pick one"})`);
@@ -5857,8 +6083,8 @@ ${BRANCH_HELP}`);
   }
 }
 async function runStudioRead(cmd, a, root, io = defaultIO()) {
-  const ctx = await context3(root, io);
-  const json = has3(a, "json");
+  const ctx = await context4(root, io);
+  const json = has4(a, "json");
   if (cmd === "products") {
     const r2 = await branches.listProducts(ctx);
     if (json) return io.print(JSON.stringify(r2, null, 2)), 0;
@@ -5887,7 +6113,7 @@ This folder: ${r2.current.name}. Pick another with --product <key>.`);
 }
 async function runDocsSave(a, root, io = defaultIO()) {
   const component = a._[2];
-  const file = flag3(a, "file");
+  const file = flag4(a, "file");
   if (!component || !file) throw new RequestUsageError('Usage: bridge docs save <Component> --file docs.json [--pr <n>] [--title "..."] [--jira DS-42] [--product admin] [--dry-run]');
   let docs;
   try {
@@ -5895,28 +6121,32 @@ async function runDocsSave(a, root, io = defaultIO()) {
   } catch (e) {
     throw new RequestUsageError(`${file} is not a readable JSON file: ${e.message}`);
   }
-  const ctx = await context3(root, io);
-  const pr = flag3(a, "pr");
+  const ctx = await context4(root, io);
+  const pr = flag4(a, "pr");
+  const changes = changesFlag(a);
   const r = await studio.saveDocs(ctx, {
     component,
     docs,
     ...pr ? { pr } : {},
-    ...flag3(a, "title") ? { title: flag3(a, "title") } : {},
-    ...flag3(a, "notes") ? { notes: flag3(a, "notes") } : {},
-    ...flag3(a, "jira") ? { jira: flag3(a, "jira") } : {},
-    ...flag3(a, "product") ? { product: flag3(a, "product") } : {},
-    dryRun: has3(a, "dry-run")
+    ...flag4(a, "title") ? { title: flag4(a, "title") } : {},
+    ...flag4(a, "notes") ? { notes: flag4(a, "notes") } : {},
+    ...flag4(a, "jira") ? { jira: flag4(a, "jira") } : {},
+    ...flag4(a, "product") ? { product: flag4(a, "product") } : {},
+    ...changes ? { changes } : {},
+    source: "cli",
+    dryRun: has4(a, "dry-run")
   });
-  if (has3(a, "json")) io.print(JSON.stringify(r, null, 2));
+  if (has4(a, "json")) io.print(JSON.stringify(r, null, 2));
   else io.print(r.status === "dry-run" || r.status === "preview" ? `${r.said ?? "Dry run, nothing written."}
 
 ${r.path}:
-${r.content}` : String(r.said));
+${r.content}` : `${String(r.said)}${r.next ? `
+${String(r.next)}` : ""}`);
   return 0;
 }
 
 // src/pieces.ts
-import { BridgeContext as BridgeContext5, branches as branches2, pieces } from "@bridge-ds/mcp";
+import { BridgeContext as BridgeContext6, branches as branches2, pieces } from "@bridge-ds/mcp";
 var PIECES_HELP = `bridge pieces: a product branch and the library
 
 Usage:
@@ -5931,10 +6161,10 @@ Usage:
   bridge pieces switch <n>                       once the library shipped: main into the product branch
 
 GitHub token: GITHUB_TOKEN or BRIDGE_GITHUB_TOKEN, else \`gh auth token\`. Exit codes: 0 ok, 2 usage or setup error.`;
-var has4 = (a, k) => Boolean(a.flags[k]);
-async function context4(root, io) {
+var has5 = (a, k) => Boolean(a.flags[k]);
+async function context5(root, io) {
   const token = io.env.BRIDGE_GITHUB_TOKEN || io.env.GITHUB_TOKEN || io.ghToken();
-  return BridgeContext5.create({ root, ...token ? { token } : {}, ...io.fetch ? { fetch: io.fetch } : {} });
+  return BridgeContext6.create({ root, ...token ? { token } : {}, ...io.fetch ? { fetch: io.fetch } : {} });
 }
 function number2(a, at, usage) {
   const raw = a._[at];
@@ -5948,12 +6178,12 @@ function piece(a, at, usage) {
 }
 async function runPieces(a, root, io = defaultIO()) {
   const sub = a._[1];
-  if (!sub || sub === "help" || has4(a, "help")) {
+  if (!sub || sub === "help" || has5(a, "help")) {
     io.print(PIECES_HELP);
-    return sub || has4(a, "help") ? 0 : 2;
+    return sub || has5(a, "help") ? 0 : 2;
   }
-  const json = has4(a, "json");
-  const ctx = await context4(root, io);
+  const json = has5(a, "json");
+  const ctx = await context5(root, io);
   const out = (r, text) => (json ? io.print(JSON.stringify(r, null, 2)) : text(), 0);
   switch (sub) {
     case "status": {
@@ -5968,9 +6198,10 @@ async function runPieces(a, root, io = defaultIO()) {
     }
     case "open": {
       const usage = "bridge pieces open <n> <piece>";
-      const r = await pieces.openLibraryBranchOp(ctx, { pr: number2(a, 2, usage), piece: piece(a, 3, usage), usePreview: !has4(a, "no-preview"), dryRun: has4(a, "dry-run"), source: "cli" });
+      const changes = changesFlag(a);
+      const r = await pieces.openLibraryBranchOp(ctx, { pr: number2(a, 2, usage), piece: piece(a, 3, usage), usePreview: !has5(a, "no-preview"), dryRun: has5(a, "dry-run"), source: "cli", ...changes ? { changes } : {} });
       return out(r, () => {
-        io.print(`${r.status === "dry-run" ? "Would open" : r.status === "already-linked" ? "Already linked" : "Opened"} a ${r.opens}: ${r.title}, needed by ${r.neededBy}.`);
+        io.print(`${r.status === "dry-run" ? "Would open" : r.status === "already-linked" ? "Already linked" : r.status === "suggested" ? "Suggested" : "Opened"} a ${r.opens}: ${r.title}, needed by ${r.neededBy}.`);
         if (r.library) io.print(`  #${r.library.number} ${r.library.url}`);
         if (r.preview) io.print(`  ${r.preview.said}`);
         for (const w of r.warnings ?? []) io.print(`  ${w}`);
@@ -5987,7 +6218,7 @@ async function runPieces(a, root, io = defaultIO()) {
       return out(r, () => io.print(r.said));
     }
     default: {
-      const r = await pieces.missingPiecesOp(ctx, { pr: number2(a, 1, "bridge pieces <n> [--record]"), record: has4(a, "record") });
+      const r = await pieces.missingPiecesOp(ctx, { pr: number2(a, 1, "bridge pieces <n> [--record]"), record: has5(a, "record") });
       return out(r, () => {
         io.print(`#${r.pr} ${r.branch} (${r.product}): ${r.pieces.length ? `${r.pieces.length} ${r.pieces.length === 1 ? "piece is" : "pieces are"} missing from the library` : "nothing is missing from the library"}, ${r.files} files read.`);
         for (const p of r.pieces) io.print(`  ${p.id}  ${p.title}: ${p.summary} Opens ${p.opens}.${"linked" in p ? ` Linked: #${p.linked}.` : ""}`);
@@ -6000,6 +6231,94 @@ ${r.fixes.sample.map((s) => `  ${s}`).join("\n")}`);
   }
 }
 
+// src/figma.ts
+import { readFileSync as readFileSync2 } from "node:fs";
+import { resolve as resolve4 } from "node:path";
+import { BridgeContext as BridgeContext7, branches as branches3, figma } from "@bridge-ds/mcp";
+var FIGMA_HELP = `bridge figma: component changes sent from Figma
+
+Usage:
+  bridge figma [--all] [--json]                  the library branches the DS Bridge plugin opened for components
+                                                 changed in Figma, and where each stands
+  bridge figma show <n> [--draft] [--json]       one of them: its spec and the brief to draft the code; --draft
+                                                 runs Claude Code on the brief (\`claude\` on PATH)
+  bridge figma drafted <n> [--json]              the code is pushed: label it drafted by Claude AI for review
+  bridge figma push <diff.json> [--dry-run] [--json]
+                                                 send a structured component diff like the plugin does: an exact
+                                                 token change, or a branch with the spec for Claude AI
+
+GitHub token: GITHUB_TOKEN or BRIDGE_GITHUB_TOKEN, else \`gh auth token\`. Exit codes: 0 ok, 2 usage or setup error.`;
+var has6 = (a, k) => Boolean(a.flags[k]);
+async function context6(root, io) {
+  const token = io.env.BRIDGE_GITHUB_TOKEN || io.env.GITHUB_TOKEN || io.ghToken();
+  return BridgeContext7.create({ root, ...token ? { token } : {}, ...io.fetch ? { fetch: io.fetch } : {} });
+}
+function number3(a, usage) {
+  const raw = a._[2];
+  if (!raw) throw new RequestUsageError(`Usage: ${usage}`);
+  return branches3.branchNumber(raw);
+}
+async function runFigma(a, root, io = defaultIO()) {
+  const sub = a._[1];
+  if (sub === "help" || has6(a, "help")) {
+    io.print(FIGMA_HELP);
+    return 0;
+  }
+  const json = has6(a, "json");
+  const ctx = await context6(root, io);
+  const out = (r, text) => (json ? io.print(JSON.stringify(r, null, 2)) : text(), 0);
+  switch (sub) {
+    case void 0:
+    case "list": {
+      const r = await figma.figmaChangesOp(ctx, { state: has6(a, "all") ? "all" : "open" });
+      return out(r, () => {
+        for (const c of r.changes) io.print(`#${c.pr} ${c.title} (${c.route}): ${c.status}. ${c.said}`);
+        io.print(`Next: ${r.next}`);
+      });
+    }
+    case "show": {
+      const r = await figma.getFigmaChangeOp(ctx, { pr: number3(a, "bridge figma show <n>") });
+      if (has6(a, "draft")) {
+        if (!r.brief) throw new RequestUsageError(`#${r.pr} is an exact token change: there is no code to draft.`);
+        if (!io.hasClaude()) throw new RequestUsageError("`claude` is not on PATH: install Claude Code, or paste the brief from `bridge figma show <n>` into Claude.");
+        return io.runClaude(r.brief, root);
+      }
+      return out(r, () => {
+        io.print(`#${r.pr} ${r.title} (${r.route}): ${r.status}. ${r.said}`);
+        io.print(`  ${r.url}`);
+        if (r.brief) io.print(`
+${r.brief}`);
+      });
+    }
+    case "drafted": {
+      const r = await figma.markFigmaDraftedOp(ctx, { pr: number3(a, "bridge figma drafted <n>") });
+      return out(r, () => io.print(`#${r.pr}: ${r.status}. ${r.said}`));
+    }
+    case "push": {
+      const file = a._[2];
+      if (!file) throw new RequestUsageError("Usage: bridge figma push <diff.json> [--dry-run]");
+      let diff2;
+      try {
+        diff2 = JSON.parse(readFileSync2(resolve4(root, file), "utf8"));
+      } catch (err) {
+        throw new RequestUsageError(`${file} could not be read as JSON: ${err.message}`);
+      }
+      const changes = changesFlag(a);
+      const r = await figma.pushFigmaComponentOp(ctx, { diff: diff2, dryRun: has6(a, "dry-run"), source: "cli", ...changes ? { changes } : {} });
+      return out(r, () => {
+        io.print(`${r.component}: ${r.route}. ${r.said}`);
+        for (const x of r.reasons ?? []) io.print(`  ${x}`);
+        for (const x of r.fixInFigma ?? []) io.print(`  Fix in Figma: ${x.what} ${x.todo}`);
+        if (r.library) io.print(`  #${r.library.number} ${r.library.url}`);
+        if (r.suggestion) io.print(`  suggestion #${r.suggestion.number} ${r.suggestion.url}`);
+        io.print(`Next: ${r.next}`);
+      });
+    }
+    default:
+      throw new RequestUsageError(`Unknown subcommand "${sub}". ${FIGMA_HELP}`);
+  }
+}
+
 // src/protection.ts
 var UNKNOWN = { kind: "unknown", missing: ["review", "checks", "history", "deletion"] };
 async function protectionReport(opts) {
@@ -6032,7 +6351,7 @@ async function rolesReport(opts) {
 }
 
 // src/index.ts
-import { brand, BridgeContext as BridgeContext6, CONFIG_FILE as CONFIG_FILE2, core, detectConfig, GitRefSource, history as hist, LocalSource, ops, optionsFromArgv, serveStdio, toConfigJson, VERSION } from "@bridge-ds/mcp";
+import { brand, BridgeContext as BridgeContext8, CONFIG_FILE as CONFIG_FILE2, core, detectConfig, GitRefSource, history as hist, LocalSource, ops, optionsFromArgv, serveStdio, toConfigJson, VERSION } from "@bridge-ds/mcp";
 var MCP_PACKAGE = "@bridge-ds/mcp";
 var HELP = `bridge ${VERSION}: design system as code, for you and your Claude
 
@@ -6048,8 +6367,10 @@ Usage:
   bridge diff <base> [--json|--md]    designer-readable token diff: working tree vs <base> (git ref)
   bridge propose --title "..." --set path=value [--set ...] [--file f | --mode theme=dark]
                  [--edits edits.json] [--summary "..."] [--branch explore/<name>] [--pr <n>]
-                 [--product <key>] [--jira DS-42] [--dry-run]
-                                      validate + contrast + new local bridge/* branch (never pushes).
+                 [--product <key>] [--jira DS-42] [--suggest | --direct] [--dry-run]
+                                      validate + contrast, then a suggestion (a GitHub issue a developer
+                                      applies with bridge apply) or, with "changes": "direct" in
+                                      bridge.config.json or --direct, a new local bridge/* branch (never pushes).
                                       --branch: write the edits to the checked-out exploration instead.
                                       --pr: add them to that branch in review (GitHub token).
                                       --product: the product it is for (bridge products); --jira: the
@@ -6057,9 +6378,10 @@ Usage:
   bridge brand list [--json]          brands: slug, name, default, primary action color, theme overrides
   bridge brand create <slug> --from bridge --primary <hex|hue> --neutral <hex|hue>
                  [--name "Acme"] [--accent x] [--link x] [--radius soft|balanced|crisp|i,c,co,o]
-                 [--heading font] [--text font] [--notes "..."] [--dry-run] [--json]
-                                      new brand: generated ramps, contrast gate for every theme,
-                                      new local bridge/brand-<slug> branch (never pushes, never main).
+                 [--heading font] [--text font] [--notes "..."] [--suggest | --direct] [--dry-run] [--json]
+                                      new brand: generated ramps, contrast gate for every theme, then a
+                                      suggestion, or in direct mode a new local bridge/brand-<slug> branch
+                                      (never pushes, never main).
                                       Exit 1 when blocked
   bridge impact [--base main] [--head HEAD] [--out dir] [--only stories|app] [--threshold 0.03]
                  [--plan] [--json] [--image-base url] [--artifact-url url] [--keep-unchanged]
@@ -6073,9 +6395,9 @@ Usage:
                                       Needs Chrome installed
   bridge history [token] [--json] [--limit n] [--author a] [--tier n] [--version v]
                                       token history: versions, merged changes, who, when, why
-  bridge revert <pr|commit|id> [--dry-run] [--restore-conflicts] [--use-before path@file] [--json]
-                                      undo a merged token change against HEAD: conflicts shown,
-                                      new local bridge/* branch (never pushes, never main)
+  bridge revert <pr|commit|id> [--dry-run] [--restore-conflicts] [--use-before path@file] [--suggest | --direct] [--json]
+                                      undo a merged token change against HEAD: conflicts shown, then a
+                                      suggestion, or in direct mode a new local bridge/* branch (never pushes)
   bridge audit <path> [--json [out.json]] [--md [out.md]] [--fail-under 80] [--baseline prev.json]
                [--label "..."] [--ds dir] [--no-regress] [--allowlist known.json]
                                       design system adoption in a product folder: token and component
@@ -6118,6 +6440,20 @@ Usage:
                                       a product branch and the library (\`bridge pieces help\`): what it adds
                                       that the library lacks, the library branch each piece opens (linked
                                       both ways), its preview in the product branch, the published version
+  bridge suggestions [list | show <n> | link <n> --pr <m>] [--status approved] [--json]
+                                      suggestions: changes filed as GitHub issues (label bridge-suggestion)
+                                      that the owners approve and a developer applies (\`bridge suggestions help\`)
+  bridge apply <n> [--write | --patch] [--dry-run] [--accept-edited] [--force-unapproved] [--json]
+                                      apply suggestion #n on today's code: a new local branch (working tree
+                                      untouched, nothing pushed), --write into the working tree, --patch for
+                                      git am. Exit 0 applied or already applied, 1 not approved or blocked,
+                                      2 usage, 3 conflict
+  bridge review <n> --approve | --request-changes --message "..." | --decline --message "..."
+                                      review a suggestion as its owner (counts only for owners in
+                                      bridge.config.json, on the version you saw)
+  bridge figma [show <n> | drafted <n> | push <diff.json>]
+                                      component changes sent from Figma (\`bridge figma help\`): exact token
+                                      changes and branches Claude AI drafts from the spec
   bridge products | bridge settings | bridge coverage [Component]
                                       products (and this folder's), Studio settings safe to read, which
                                       components are in Figma
@@ -6128,8 +6464,11 @@ Usage:
 Options:
   --root <dir>   repo root (default: current directory)
   --ds <dir>     audit: design system repo with bridge.config.json (default: --root, or the nearest one above)
-  GITHUB_TOKEN   env, optional: lets the MCP server open PRs on a remote repo, and bridge request create
-                 file issues (else \`gh auth token\`). Never needed for local token work.
+  GITHUB_TOKEN   env, optional: lets bridge file suggestions and requests (Issues: read and write) and the
+                 MCP server open PRs on a remote repo in direct mode (else \`gh auth token\`). Never needed for
+                 local token work in direct mode.
+  --suggest | --direct   how a change reaches the code for this command (propose, brand create, revert,
+                 docs save, pieces open, figma push). Default: "changes" in bridge.config.json, else suggest.
 `;
 function parse(argv) {
   const out = { _: [], flags: {} };
@@ -6139,23 +6478,32 @@ function parse(argv) {
       const [k, inline] = a.slice(2).split(/=(.*)/s, 2);
       const next = argv[i + 1];
       const fileArg = k === "json" && /\.json$/i.test(next ?? "") || k === "md" && /\.(md|markdown)$/i.test(next ?? "");
-      const takesValue = inline === void 0 && next !== void 0 && !next.startsWith("--") && (fileArg || !["force", "json", "md", "strict", "dry-run", "help", "fix", "write", "no-regress", "plan", "keep-unchanged", "restore-conflicts", "breaking", "claude", "all", "offline", "approve"].includes(k));
+      const takesValue = inline === void 0 && next !== void 0 && !next.startsWith("--") && (fileArg || !["force", "json", "md", "strict", "dry-run", "help", "fix", "write", "no-regress", "plan", "keep-unchanged", "restore-conflicts", "breaking", "claude", "all", "offline", "approve", "patch", "accept-edited", "force-unapproved", "suggest", "direct"].includes(k));
       (out.flags[k] ??= []).push(inline ?? (takesValue ? argv[++i] : "true"));
     } else out._.push(a);
   }
   return out;
 }
-var flag4 = (a, k) => a.flags[k]?.[a.flags[k].length - 1];
-var has5 = (a, k) => Boolean(a.flags[k]);
+var flag5 = (a, k) => a.flags[k]?.[a.flags[k].length - 1];
+var has7 = (a, k) => Boolean(a.flags[k]);
 var print = (s) => process.stdout.write(`${s}
 `);
 var modeArg = (s) => s ? Object.fromEntries(s.split(",").map((kv) => kv.split("="))) : void 0;
+var githubToken = () => process.env.BRIDGE_GITHUB_TOKEN || process.env.GITHUB_TOKEN || defaultIO().ghToken();
+function printSent(r) {
+  if (r.status === "suggested") print(`suggestion: #${r.number} ${r.url}`);
+  if (r.message) print(String(r.message));
+  if (r.branch && r.status !== "suggested") print(`branch: ${r.branch}`);
+  for (const w of r.warnings ?? []) print(`warning: ${w}`);
+  if (r.next) print(String(r.next));
+  if (r.hint) print(String(r.hint));
+}
 async function init(a, root) {
   const cfgPath = join6(root, CONFIG_FILE2);
   let config;
-  if (existsSync6(cfgPath) && !has5(a, "force")) {
+  if (existsSync6(cfgPath) && !has7(a, "force")) {
     print(`${CONFIG_FILE2} exists, keeping it (--force to regenerate).`);
-    config = (await (await BridgeContext6.create({ root })).config()).config;
+    config = (await (await BridgeContext8.create({ root })).config()).config;
   } else {
     const src = new LocalSource(root);
     const files = await src.list("");
@@ -6183,14 +6531,14 @@ async function init(a, root) {
   print(`  claude mcp add bridge -- ${desktop.command} ${desktop.args.join(" ")}`);
 }
 async function check(a, root) {
-  const ctx = await BridgeContext6.create({ root });
+  const ctx = await BridgeContext8.create({ root });
   const v = await ops.validateTokens(ctx, { includeWarnings: true });
   const c = await ops.checkContrast(ctx, {});
   const warnings = "warnings" in v ? v.warnings ?? [] : [];
-  const failed = !v.valid || "failing" in c && (c.failing ?? 0) > 0 || has5(a, "strict") && warnings.length > 0;
+  const failed = !v.valid || "failing" in c && (c.failing ?? 0) > 0 || has7(a, "strict") && warnings.length > 0;
   const protection = await protectionOf(a, root, ctx);
   const roles = await rolesOf(a, root, ctx);
-  if (has5(a, "json")) {
+  if (has7(a, "json")) {
     print(JSON.stringify({ ok: !failed, validation: v, contrast: c, ...protection ? { protection: protection.state } : {}, ...roles?.teams.length ? { teams: roles.teams } : {} }, null, 2));
     return failed ? 1 : 0;
   }
@@ -6209,7 +6557,7 @@ async function check(a, root) {
   return failed ? 1 : 0;
 }
 async function protectionOf(a, root, ctx) {
-  if (has5(a, "offline") || process.env.BRIDGE_OFFLINE === "1") return void 0;
+  if (has7(a, "offline") || process.env.BRIDGE_OFFLINE === "1") return void 0;
   const { config } = await ctx.config();
   const repo = config.repo ? `${config.repo.owner}/${config.repo.name}` : await originRepo(root);
   if (!repo) return void 0;
@@ -6217,7 +6565,7 @@ async function protectionOf(a, root, ctx) {
   return protectionReport({ repo, defaultBranch: config.repo?.defaultBranch ?? "main", token });
 }
 async function rolesOf(a, root, ctx) {
-  if (has5(a, "offline") || process.env.BRIDGE_OFFLINE === "1") return void 0;
+  if (has7(a, "offline") || process.env.BRIDGE_OFFLINE === "1") return void 0;
   const { config } = await ctx.config();
   const repo = config.repo ? `${config.repo.owner}/${config.repo.name}` : await originRepo(root);
   if (!repo) return void 0;
@@ -6227,9 +6575,9 @@ async function rolesOf(a, root, ctx) {
 async function tokens(a, root) {
   const q = a._.slice(1).join(" ");
   if (!q) throw new UsageError("bridge tokens <query>");
-  const ctx = await BridgeContext6.create({ root });
-  const r = await ops.searchTokens(ctx, { query: q, limit: Number(flag4(a, "limit") ?? 20) });
-  if (has5(a, "json")) return print(JSON.stringify(r, null, 2));
+  const ctx = await BridgeContext8.create({ root });
+  const r = await ops.searchTokens(ctx, { query: q, limit: Number(flag5(a, "limit") ?? 20) });
+  if (has7(a, "json")) return print(JSON.stringify(r, null, 2));
   if (!r.results.length) return print(`No token matches "${q}".`);
   const w = Math.max(...r.results.map((x) => x.path.length));
   for (const t of r.results) print(`${t.path.padEnd(w)}  ${String(t.value).padEnd(10)}  ${(t.tier ?? "").padEnd(9)}  ${t.description ?? ""}`);
@@ -6237,7 +6585,7 @@ async function tokens(a, root) {
 async function diff(a, root) {
   const base = a._[1];
   if (!base) throw new UsageError("bridge diff <base>   (a git ref: main, HEAD~1, a sha)");
-  const ctx = await BridgeContext6.create({ root });
+  const ctx = await BridgeContext8.create({ root });
   const { config } = await ctx.config();
   const before = await core.loadTokenSet(new GitRefSource(root, base), config);
   const after = await ctx.tokens();
@@ -6246,11 +6594,11 @@ async function diff(a, root) {
   const delta2 = pairs2.length ? core.contrastDelta(core.runContrast(before, pairs2, config.contrast?.modes), core.runContrast(after, pairs2, config.contrast?.modes)) : [];
   const tier = core.classify(changes, [], config);
   const imp = core.impact(before, after, changes, 30);
-  if (has5(a, "json")) {
+  if (has7(a, "json")) {
     print(JSON.stringify({ base, changes, contrast: delta2, tier, impact: imp }, null, 2));
     return 0;
   }
-  if (has5(a, "md")) {
+  if (has7(a, "md")) {
     print(`## Token changes since \`${base}\`
 
 ${core.tokenTable(changes)}
@@ -6285,26 +6633,27 @@ ${imp.total} other token(s) change value through aliases:`);
   return delta2.some((d) => d.passBefore && !d.passAfter) ? 1 : 0;
 }
 async function propose(a, root) {
-  const title = flag4(a, "title");
+  const title = flag5(a, "title");
   if (!title) throw new UsageError('bridge propose --title "Darken muted text" --set color.text.muted={palette.neutral.700} --mode theme=light');
   const edits = [];
-  const file = flag4(a, "file");
-  const mode2 = modeArg(flag4(a, "mode"));
+  const file = flag5(a, "file");
+  const mode2 = modeArg(flag5(a, "mode"));
   for (const s of a.flags.set ?? []) {
     const i = s.indexOf("=");
     if (i < 0) throw new UsageError(`--set needs path=value, got "${s}"`);
     edits.push({ op: "set", path: s.slice(0, i), value: s.slice(i + 1), ...file ? { file } : {}, ...mode2 ? { mode: mode2 } : {} });
   }
-  const editsFile = flag4(a, "edits");
-  if (editsFile) edits.push(...JSON.parse(await readFile7(resolve4(editsFile), "utf8")));
+  const editsFile = flag5(a, "edits");
+  if (editsFile) edits.push(...JSON.parse(await readFile7(resolve5(editsFile), "utf8")));
   if (!edits.length) throw new UsageError("Give at least one --set path=value or --edits file.json");
-  const pr = flag4(a, "pr");
-  const token = pr ? process.env.BRIDGE_GITHUB_TOKEN || process.env.GITHUB_TOKEN || defaultIO().ghToken() : void 0;
-  const ctx = await BridgeContext6.create({ root, ...token ? { token } : {} });
-  const summary = flag4(a, "summary");
-  const branch = flag4(a, "branch");
-  const jira = flag4(a, "jira");
-  const product = flag4(a, "product");
+  const pr = flag5(a, "pr");
+  const changes = changesFlag(a);
+  const token = pr || changes !== "direct" ? githubToken() : void 0;
+  const ctx = await BridgeContext8.create({ root, ...token ? { token } : {} });
+  const summary = flag5(a, "summary");
+  const branch = flag5(a, "branch");
+  const jira = flag5(a, "jira");
+  const product = flag5(a, "product");
   const r = await ops.proposeTokenChange(ctx, {
     title,
     edits,
@@ -6313,34 +6662,36 @@ async function propose(a, root) {
     ...pr ? { pr } : {},
     ...jira ? { jira } : {},
     ...product ? { product } : {},
-    dryRun: has5(a, "dry-run")
+    ...changes ? { changes } : {},
+    source: "cli",
+    dryRun: has7(a, "dry-run")
   });
-  if (has5(a, "json")) print(JSON.stringify(r, null, 2));
+  if (has7(a, "json")) print(JSON.stringify(r, null, 2));
   else {
     print(`status: ${r.status}${r.why ? ` (${r.why})` : ""}`);
     if (r.tier) print(`tier ${r.tier}, ${r.bump}`);
     for (const c of r.changes ?? []) print(`  ${c.kind} ${c.path}: ${c.before ?? ""} -> ${c.after ?? ""}`);
-    if (r.branch) print(`branch: ${r.branch}`);
-    if (r.next) print(String(r.next));
-    if (r.hint) print(String(r.hint));
+    printSent(r);
     if (r.status === "dry-run") print(`
-${r.prBody}`);
+${r.suggestion?.body ?? r.prBody}`);
   }
   return r.status === "blocked" ? 1 : 0;
 }
 async function brandCmd(a, root) {
   const sub = a._[1];
-  const ctx = await BridgeContext6.create({ root });
+  const changes = changesFlag(a);
+  const token = sub === "create" && changes !== "direct" ? githubToken() : void 0;
+  const ctx = await BridgeContext8.create({ root, ...token ? { token } : {} });
   if (sub === "list") {
     const r2 = await brand.listBrands(ctx);
-    if (has5(a, "json")) print(JSON.stringify(r2.brands, null, 2));
+    if (has7(a, "json")) print(JSON.stringify(r2.brands, null, 2));
     else for (const b of r2.brands) print(`${b.default ? "*" : " "} ${b.slug.padEnd(14)} ${b.name.padEnd(18)} ${b.primary ?? ""}${b.overrides.length ? `  overrides: ${b.overrides.join(", ")}` : ""}`);
     return 0;
   }
   if (sub !== "create") throw new UsageError('bridge brand list | bridge brand create <slug> --from bridge --primary "#1F5F3A" --neutral "#2A2F2C"');
   const slug = a._[2];
   if (!slug) throw new UsageError('bridge brand create <slug> --from bridge --primary "#1F5F3A" --neutral "#2A2F2C"');
-  const opt = (k) => flag4(a, k);
+  const opt = (k) => flag5(a, k);
   const fonts = { ...opt("heading") ? { heading: opt("heading") } : {}, ...opt("text") ? { text: opt("text") } : {} };
   const r = await brand.proposeBrand(ctx, {
     slug,
@@ -6353,9 +6704,11 @@ async function brandCmd(a, root) {
     ...opt("radius") ? { radius: opt("radius") } : {},
     ...Object.keys(fonts).length ? { fonts } : {},
     ...opt("notes") ? { notes: opt("notes") } : {},
-    dryRun: has5(a, "dry-run")
+    ...changes ? { changes } : {},
+    source: "cli",
+    dryRun: has7(a, "dry-run")
   });
-  if (has5(a, "json")) {
+  if (has7(a, "json")) {
     const { fileContents: _f, ...rest } = r;
     print(JSON.stringify(rest, null, 2));
     return r.status === "blocked" ? 1 : 0;
@@ -6370,13 +6723,11 @@ async function brandCmd(a, root) {
   for (const i of r.issues) print(`  ${i.level}: ${i.message}`);
   print("files:");
   for (const f of r.files) print(`  ${f.action} ${f.path}`);
-  if (r.branch) print(`branch: ${r.branch}`);
-  if (r.next) print(String(r.next));
-  if (r.hint) print(String(r.hint));
+  printSent(r);
   return r.status === "blocked" ? 1 : 0;
 }
 async function figmaReferences(a, root) {
-  let sha = flag4(a, "sha");
+  let sha = flag5(a, "sha");
   if (!sha) {
     try {
       sha = execFileSync2("git", ["rev-parse", "HEAD"], { cwd: root, encoding: "utf8" }).trim();
@@ -6384,49 +6735,49 @@ async function figmaReferences(a, root) {
       sha = "unknown";
     }
   }
-  const only = (flag4(a, "only") ?? "").split(",").filter(Boolean);
+  const only = (flag5(a, "only") ?? "").split(",").filter(Boolean);
   const r = await captureFigmaReferences({
-    storybook: resolve4(root, flag4(a, "storybook") ?? "storybook-static"),
-    specs: resolve4(root, flag4(a, "specs") ?? "packages/react/component-specs.json"),
-    out: resolve4(root, flag4(a, "out") ?? "figma-references"),
+    storybook: resolve5(root, flag5(a, "storybook") ?? "storybook-static"),
+    specs: resolve5(root, flag5(a, "specs") ?? "packages/react/component-specs.json"),
+    out: resolve5(root, flag5(a, "out") ?? "figma-references"),
     sha,
     ...only.length ? { only } : {},
-    log: has5(a, "json") ? void 0 : (line) => print(line)
+    log: has7(a, "json") ? void 0 : (line) => print(line)
   });
-  if (has5(a, "json")) print(JSON.stringify({ manifest: r.manifestPath, captured: r.captured, skipped: r.skipped }, null, 2));
+  if (has7(a, "json")) print(JSON.stringify({ manifest: r.manifestPath, captured: r.captured, skipped: r.skipped }, null, 2));
   return 0;
 }
 async function impact(a, root) {
-  const only = (flag4(a, "only") ?? "").split(",").filter(Boolean);
+  const only = (flag5(a, "only") ?? "").split(",").filter(Boolean);
   for (const x of only) if (x !== "stories" && x !== "app") throw new UsageError(`--only takes stories or app, got "${x}"`);
-  const num2 = (k) => flag4(a, k) !== void 0 ? Number(flag4(a, k)) : void 0;
+  const num2 = (k) => flag5(a, k) !== void 0 ? Number(flag5(a, k)) : void 0;
   const threshold = num2("threshold");
   if (threshold !== void 0 && !(threshold >= 0 && threshold <= 1)) throw new UsageError("--threshold is between 0 and 1 (pixelmatch color distance)");
-  const imageBase = flag4(a, "image-base");
-  const artifactUrl = flag4(a, "artifact-url");
-  const out = flag4(a, "out");
-  const cacheDir = flag4(a, "cache");
+  const imageBase = flag5(a, "image-base");
+  const artifactUrl = flag5(a, "artifact-url");
+  const out = flag5(a, "out");
+  const cacheDir = flag5(a, "cache");
   const maxStories = num2("max-stories");
   const r = await runImpact({
     root,
-    base: flag4(a, "base") ?? "main",
-    head: flag4(a, "head") ?? "HEAD",
-    ...out ? { out: resolve4(out) } : {},
+    base: flag5(a, "base") ?? "main",
+    head: flag5(a, "head") ?? "HEAD",
+    ...out ? { out: resolve5(out) } : {},
     ...only.length ? { only } : {},
     ...threshold !== void 0 ? { threshold } : {},
-    ...cacheDir ? { cacheDir: resolve4(cacheDir) } : {},
+    ...cacheDir ? { cacheDir: resolve5(cacheDir) } : {},
     ...maxStories ? { maxStoriesPerComponent: maxStories } : {},
     ...imageBase !== void 0 ? { imageBase } : {},
     ...artifactUrl ? { artifactUrl } : {},
-    plan: has5(a, "plan"),
-    keepUnchanged: has5(a, "keep-unchanged")
+    plan: has7(a, "plan"),
+    keepUnchanged: has7(a, "keep-unchanged")
   });
-  if (has5(a, "json")) {
+  if (has7(a, "json")) {
     print(JSON.stringify({ summary: r.summary, manifest: r.manifestPath, comment: r.commentPath ?? null, ...r.manifest.summary, selection: r.manifest.selection }, null, 2));
     return 0;
   }
   const sel = r.manifest.selection;
-  if (has5(a, "plan")) {
+  if (has7(a, "plan")) {
     print(`Plan ${r.manifest.base.ref} (${r.manifest.base.sha.slice(0, 7)}) -> ${r.manifest.head.ref} (${r.manifest.head.sha.slice(0, 7)})`);
     print(`  tokens changing value: ${sel.tokens.length}${sel.tokens.length ? ` (${sel.tokens.filter((t) => t.kind === "direct").map((t) => t.path).slice(0, 6).join(", ")})` : ""}`);
     print(`  components: ${sel.components.map((c) => c.id).join(", ") || "none"}`);
@@ -6442,12 +6793,12 @@ async function impact(a, root) {
 }
 var day = (iso) => iso.slice(0, 10);
 async function historyCmd(a, root) {
-  const ctx = await BridgeContext6.create({ root });
+  const ctx = await BridgeContext8.create({ root });
   const token = a._[1];
-  const limit = Number(flag4(a, "limit") ?? 20);
+  const limit = Number(flag5(a, "limit") ?? 20);
   if (token) {
     const r2 = await hist.getTokenHistory(ctx, { path: token, limit });
-    if (has5(a, "json")) return print(JSON.stringify(r2, null, 2)), 0;
+    if (has7(a, "json")) return print(JSON.stringify(r2, null, 2)), 0;
     if (!r2.total) return print(`No recorded change of ${r2.path} in ${r2.source}.`), 0;
     print(`${r2.path}: ${r2.total} change(s)  (${r2.source})
 `);
@@ -6458,9 +6809,9 @@ async function historyCmd(a, root) {
     }
     return 0;
   }
-  const tier = flag4(a, "tier");
-  const r = await hist.getHistory(ctx, { limit, ...flag4(a, "author") ? { author: flag4(a, "author") } : {}, ...tier ? { tier: Number(tier) } : {}, ...flag4(a, "version") ? { version: flag4(a, "version") } : {}, ...has5(a, "breaking") ? { breaking: true } : {} });
-  if (has5(a, "json")) return print(JSON.stringify(r, null, 2)), 0;
+  const tier = flag5(a, "tier");
+  const r = await hist.getHistory(ctx, { limit, ...flag5(a, "author") ? { author: flag5(a, "author") } : {}, ...tier ? { tier: Number(tier) } : {}, ...flag5(a, "version") ? { version: flag5(a, "version") } : {}, ...has7(a, "breaking") ? { breaking: true } : {} });
+  if (has7(a, "json")) return print(JSON.stringify(r, null, 2)), 0;
   print(`${r.source}${r.currentVersion ? `, package version ${r.currentVersion}` : ""}`);
   if (!r.total) return print(r.note ?? "No token change matches."), 0;
   for (const v of r.versions) print(`  ${v.version.padEnd(11)} ${day(v.date)}  ${v.entries} change(s), ${v.tokenChanges} token edit(s)${v.breaking ? ", breaking" : ""}`);
@@ -6478,10 +6829,12 @@ ${r.truncated}`);
 async function revertCmd(a, root) {
   const target = a._[1];
   if (!target) throw new UsageError("bridge revert <pr|commit|id> [--dry-run]   (ids from `bridge history`)");
-  const ctx = await BridgeContext6.create({ root });
+  const changes = changesFlag(a);
+  const token = changes !== "direct" ? githubToken() : void 0;
+  const ctx = await BridgeContext8.create({ root, ...token ? { token } : {} });
   const resolutions = Object.fromEntries((a.flags["use-before"] ?? []).map((k) => [k, "use-before"]));
-  const r = await hist.proposeRevert(ctx, { target, resolutions, restoreConflicts: has5(a, "restore-conflicts"), dryRun: has5(a, "dry-run") });
-  if (has5(a, "json")) {
+  const r = await hist.proposeRevert(ctx, { target, resolutions, restoreConflicts: has7(a, "restore-conflicts"), dryRun: has7(a, "dry-run"), ...changes ? { changes } : {}, source: "cli" });
+  if (has7(a, "json")) {
     print(JSON.stringify(r, null, 2));
     return r.status === "blocked" ? 1 : 0;
   }
@@ -6496,35 +6849,34 @@ async function revertCmd(a, root) {
   }
   for (const s of r.skipped ?? []) print(`  skipped   ${s}`);
   if (r.contrast?.moved) print(`contrast: ${r.contrast.moved} pair(s) move, ${r.contrast.newFailures.length} new failure(s)`);
-  if (r.branch) print(`branch: ${r.branch}`);
-  if (r.next) print(String(r.next));
+  printSent(r);
   if (r.status === "dry-run") print(`
-${r.prBody}`);
+${r.suggestion?.body ?? r.prBody}`);
   return r.status === "blocked" ? 1 : 0;
 }
 async function audit(a, root) {
   const target = a._[1];
   if (!target) throw new UsageError("bridge audit <path>   (a product folder or file that uses the design system)");
   if (!existsSync6(target)) throw new UsageError(`No such file or folder: ${target}`);
-  const dsRoot = flag4(a, "ds") ? resolve4(flag4(a, "ds")) : existsSync6(join6(root, CONFIG_FILE2)) ? root : findDesignSystemRoot(root);
+  const dsRoot = flag5(a, "ds") ? resolve5(flag5(a, "ds")) : existsSync6(join6(root, CONFIG_FILE2)) ? root : findDesignSystemRoot(root);
   if (!dsRoot) throw new UsageError(`No ${CONFIG_FILE2} found: run bridge audit from the design system repo or pass --ds <dir>.`);
   const ds = loadDesignSystem(dsRoot);
-  if (has5(a, "fix")) {
-    const write = has5(a, "write");
+  if (has7(a, "fix")) {
+    const write = has7(a, "write");
     const changes = fixCss(target, ds.index, write);
     const n = changes.reduce((acc, c) => acc + c.edits.length, 0);
     for (const c of changes) for (const e of c.edits) print(`${c.file}:${e.line}:${e.column}  ${e.from} -> ${e.to}`);
     print(n ? `${write ? "Replaced" : "Would replace"} ${n} value(s) in ${changes.length} file(s) with exact token matches.${write ? "" : " Run again with --write to apply."}` : "Nothing to fix: no CSS value equals a token exactly.");
     return 0;
   }
-  const baselinePath = flag4(a, "baseline");
+  const baselinePath = flag5(a, "baseline");
   let baseline;
   if (baselinePath) {
     if (!existsSync6(baselinePath)) throw new UsageError(`Baseline not found: ${baselinePath}`);
     baseline = JSON.parse(await readFile7(baselinePath, "utf8"));
   }
-  const label = flag4(a, "label");
-  const allowlistPath = flag4(a, "allowlist");
+  const label = flag5(a, "label");
+  const allowlistPath = flag5(a, "allowlist");
   if (allowlistPath && !existsSync6(allowlistPath)) throw new UsageError(`Allowlist not found: ${allowlistPath}`);
   let allowlist;
   try {
@@ -6534,8 +6886,8 @@ async function audit(a, root) {
   }
   const report = runAudit(target, { ds: dsRoot, version: VERSION, ...label ? { label } : {}, ...baseline ? { baseline } : {}, ...allowlist ? { allowlist } : {} });
   const md = auditMarkdown(report);
-  const jsonOut = flag4(a, "json");
-  const mdOut = flag4(a, "md");
+  const jsonOut = flag5(a, "json");
+  const mdOut = flag5(a, "md");
   if (jsonOut && jsonOut !== "true") await writeFile5(jsonOut, `${JSON.stringify(report, null, 2)}
 `);
   if (mdOut && mdOut !== "true") await writeFile5(mdOut, `${md}
@@ -6575,7 +6927,7 @@ async function audit(a, root) {
   for (const f of report.files) for (const e of f.ignoreErrors ?? []) process.stderr.write(`${report.target.path}/${f.path}:${e.line}: ${e.message}
 `);
   let code = 0;
-  const failUnder = flag4(a, "fail-under");
+  const failUnder = flag5(a, "fail-under");
   if (failUnder !== void 0) {
     const min = Number(failUnder);
     if (!Number.isFinite(min)) throw new UsageError("--fail-under needs a number, e.g. --fail-under 80");
@@ -6586,7 +6938,7 @@ async function audit(a, root) {
       code = 1;
     }
   }
-  if (has5(a, "no-regress") && report.baseline) {
+  if (has7(a, "no-regress") && report.baseline) {
     const b = report.baseline;
     if ((b.tokenAdoption.delta ?? 0) < 0 || (b.componentAdoption.delta ?? 0) < 0 || b.hardcoded.delta > 0) {
       process.stderr.write("bridge audit: adoption regressed since the baseline\n");
@@ -6598,9 +6950,9 @@ async function audit(a, root) {
 async function docsCmd(a, root) {
   const [, sub, name] = a._;
   if (sub !== "draft" || !name) throw new UsageError("Usage: bridge docs draft <Component> [--json]");
-  const ctx = await BridgeContext6.create({ root });
+  const ctx = await BridgeContext8.create({ root });
   const d = await ops.draftDocsOp(ctx, { name });
-  if (has5(a, "json")) {
+  if (has7(a, "json")) {
     print(JSON.stringify({ component: d.component, path: d.path, exists: d.exists, prefill: d.prefill, prompt: d.prompt }, null, 2));
     return 0;
   }
@@ -6631,16 +6983,20 @@ async function main() {
   const argv = process.argv.slice(2);
   const a = parse(argv);
   const cmd = a._[0];
-  const root = resolve4(flag4(a, "root") ?? process.cwd());
+  const root = resolve5(flag5(a, "root") ?? process.cwd());
   if (cmd === "request") return runRequest(a, root);
   if (cmd === "explore") return runExplore(a, root);
   if (cmd === "branch") return runBranch(a, root);
   if (cmd === "pieces") return runPieces(a, root);
+  if (cmd === "figma") return runFigma(a, root);
+  if (cmd === "suggestions" || cmd === "suggest") return runSuggestions(a, root);
+  if (cmd === "apply") return runApply(a, root);
+  if (cmd === "review") return runReview(a, root);
   if (cmd === "products" || cmd === "settings" || cmd === "coverage") return runStudioRead(cmd, a, root);
   if (cmd === "docs" && a._[1] === "save") return runDocsSave(a, root);
-  if (!cmd || has5(a, "help") || cmd === "help") {
+  if (!cmd || has7(a, "help") || cmd === "help") {
     print(HELP);
-    return cmd || has5(a, "help") ? 0 : 2;
+    return cmd || has7(a, "help") ? 0 : 2;
   }
   if (cmd === "--version" || cmd === "version") return print(VERSION), 0;
   switch (cmd) {