@deftai/directive-content 0.80.0 → 0.81.0

package/Taskfile.yml

@@ -330,6 +330,9 @@ includes:
   value:
     taskfile: ./tasks/value.yml
     optional: true
+  product-signal:
+    taskfile: ./tasks/product-signal.yml
+    optional: true
   # Pack-slicing surface (#1283 design, #1294 pilot, ADR-001 Layer B). Exposes
   # `task packs:slice` (named-slice API), `task packs:render` (regenerate the
   # meta/lessons.md projection), and `task packs:verify-drift` (the drift gate,

package/UPGRADING.md

@@ -12,6 +12,20 @@ Legend (from RFC2119): !=MUST, ~=SHOULD, ≉=SHOULD NOT, ⊗=MUST NOT, ?=MAY.
 
 ---
 
+## TypeScript 7 side-by-side (pre-7.1) (#2591)
+
+- **Applies when:** a Deft TypeScript project (or agent upgrading its toolchain) needs TypeScript 7 before ~7.1, while `typescript-eslint` and other programmatic consumers still require the TS 6 compiler API. This is **not** a Directive framework-version migration — read [languages/typescript.md](./languages/typescript.md) instead of treating it like a `deft update` step.
+- **Safe to auto-run:** Yes for the alias + Dependabot-ignore edits in the project's own `package.json` / `.github/dependabot.yml` when following the documented pattern.
+- **Restart required:** No. Re-run `task check` / `npm install` (or your package manager equivalent) after changing devDependencies.
+- **Commands:**
+  - Read the full pattern: [languages/typescript.md — TypeScript 7 side-by-side (pre-7.1)](./languages/typescript.md#typescript-7-side-by-side-pre-71)
+  - After edits: `npm install` (or `pnpm install` / `yarn`) then `task check`
+- **References:**
+  - [#2591](https://github.com/deftai/directive/issues/2591) — document side-by-side setup for Deft TypeScript projects.
+  - [deftai/cartograph#111](https://github.com/deftai/cartograph/pull/111) — precedent implementation.
+
+---
+
 ## Helped + health metrics relocation (#2545)
 
 - **Applies when:** any project that upgraded to a release shipping #2545 and still has append logs under `<lifecycle-root>/.eval/results/crud-metrics.jsonl` or `health-history.jsonl` inside the git worktree.

package/docs/product-signal.md

@@ -0,0 +1,50 @@
+# Product signal (optional partner check-in)
+
+Phase 1 consented product-improvement signal under epic #2603 (#2693). Defaults **off**.
+
+## Enable (project)
+
+```bash
+task product-signal:enable -- --confirm
+task policy:show -- --field=productSignal
+```
+
+Capability-cost disclosure prints before `--confirm` applies `plan.policy.productSignal.enabled=true`.
+
+## Consent (install / user)
+
+Consent file: `%APPDATA%\\deft\\product-signal-consent.json` (Windows) or `~/.config/deft/product-signal-consent.json` (Unix).
+
+```bash
+task product-signal:consent -- --grant
+task product-signal:consent -- --revoke
+task product-signal:status
+```
+
+Outbound requires **both** enable and consent.
+
+## Submit (ops / tests)
+
+```bash
+task product-signal:submit -- --surface pulse|portrait [--dry-run] [--json] [--nps 0-10]
+```
+
+## Sink bootstrap (maintainers)
+
+Internal (org) inbox: `deftai/product-signal` (overridable via `plan.policy.productSignal.sinkRepo`). Not public.
+
+```bash
+task product-signal:bootstrap-sink [-- --dry-run]
+```
+
+Creates the repo if needed, sets visibility to **internal**, and bootstraps D20 labels (`surface:*`, `nps:*`, `signal:gap`). Standing threads keyed by `(installId, actorName)`.
+
+## Skill
+
+Agents: `deft-directive-product-signal` — triggers `product check-in`, `product pulse`, `partner feedback`, `product signal`.
+
+## Related
+
+- Public gap escalation: `deft-directive-feedback` / `task feedback:file` (hard confirm)
+- Skill telemetry emit: #829 (optional `skillsSummary` hook only; not required for pulse)
+- HTTP transport: #2697 (Phase 2)

package/languages/typescript.md

@@ -124,6 +124,46 @@ Key settings: `@typescript-eslint/parser`, extends `recommended` + `recommended-
 - ⊗ Empty `catch` blocks or `catch (e) {}` — log or re-throw
 - ⊗ Returning `null`, `undefined`, or a neutral default to mask a thrown error
 
+## TypeScript 7 side-by-side (pre-7.1)
+
+TypeScript 7.0 ships without a stable programmatic compiler API. A direct `typescript` major bump to 7 breaks `typescript-eslint` (for example `ModuleKind.Cjs` is undefined). Until ~7.1, ! run TS 7 side-by-side with a TS 6 alias for tooling that still needs the compiler API — the same pattern as [deftai/cartograph#111](https://github.com/deftai/cartograph/pull/111).
+
+### package.json aliases
+
+Keep `typescript` on the TS 6 API for ESLint, `tsc --noEmit`, and other programmatic consumers. Install TS 7 under `@typescript/native`:
+
+```json
+{
+  "devDependencies": {
+    "@typescript/native": "npm:typescript@^7.0.2",
+    "typescript": "npm:@typescript/typescript6@^6.0.2"
+  }
+}
+```
+
+Use `@typescript/native` (or `pnpm exec tsgo`) for TS 7-native typechecking when you opt in; keep existing `typescript` / `tsc` scripts on the alias until typescript-eslint and your toolchain support TS 7's programmatic surface.
+
+### Dependabot
+
+Because `typescript` is aliased to `@typescript/typescript6`, ! ignore Dependabot major bumps on the `typescript` dependency name until you intentionally migrate off the side-by-side layout:
+
+```yaml
+ignore:
+  - dependency-name: "typescript"
+    update-types: ["version-update:semver-major"]
+```
+
+### Scaffold and doctor coverage
+
+**Scaffold bake — deferred (#2591):** Directive does not ship a Deft-owned TypeScript `package.json` scaffold to mutate. New TypeScript projects copy the alias snippet from this section into their own `package.json`.
+
+**Doctor hint — shipped (#2591):** `deft doctor` warns (advisory, exit-exempt) when `package.json` declares typescript-eslint (`typescript-eslint` or `@typescript-eslint/*`) and `eslint`, and `typescript` resolves to 7.x without the `@typescript/typescript6` alias — pointing here and at the Cartograph alias pattern above. Scaffold bake remains deferred.
+
+### References
+
+- [Announcing TypeScript 7.0 — side-by-side install](https://devblogs.microsoft.com/typescript/announcing-typescript-7-0/#side-by-side-installation) — official TS 7 side-by-side guidance.
+- [typescript-eslint#12518](https://github.com/typescript-eslint/typescript-eslint/issues/12518) — typescript-eslint TS 7 / compiler API tracking.
+
 ## Compliance Checklist
 
 - ! Include TSDoc comments for all exported APIs

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@deftai/directive-content",
-  "version": "0.80.0",
+  "version": "0.81.0",
   "description": "Shippable Directive framework content in the consumer .deft/core/ layout (C1 flatten), plus the engine surfaces (.githooks/, Taskfile.yml, tasks/) the deposit wires. Python-free per #2022 Phase 3. Refs #11, #1669, #1967.",
   "type": "module",
   "files": [

package/packs/skills/skills-pack-0.1.json

@@ -91,6 +91,20 @@
       "body": "# Deft Directive Feedback -- gap escalation to upstream\n\nConversational batched flow for filing framework gaps discovered during consumer sessions. Mirrors the confirmation gate from `deft-directive-article-review` -- the agent drafts and dedups; the operator approves before any upstream issue is created.\n\nLegend (from RFC2119): !=MUST, ~=SHOULD, ≉=SHOULD NOT, ⊗=MUST NOT, ?=MAY.\n\n## When to Use\n\n- Session end when `friction:*` ledger signals or operator reports a directive shortfall\n- Operator says \"file this upstream\", \"report a framework gap\", or \"directive feedback\"\n- After enabling `plan.policy.valueFeedback.upstreamPrompt` during onboarding\n\n## Preconditions\n\n- ! Run only from a **consumer project** -- the filing path no-ops inside the directive maintainer repo\n- ! `plan.policy.valueFeedback.upstreamPrompt` MUST be ON (`task policy:show --field=valueFeedback`)\n- ⊗ File upstream issues without explicit operator confirmation\n- ⊗ Invoke when `valueFeedback.enabled` is OFF\n\n## Phase 1 -- Collect (batched)\n\n- ! Gather concrete gap reports from the session: what was expected, what happened, and minimal reproduction context\n- ! Batch multiple friction items into one upstream issue when they share a root cause; otherwise prepare separate drafts\n- ~ Prefer attributed phrasing (\"encoding gate blocked a valid file\") over vague quality claims\n\n## Phase 2 -- Draft + dedup\n\n- ! For each candidate report, run a dry draft:\n\n```bash\ntask feedback:file -- --summary \"<one-line summary>\" --context \"<session context>\" --expected \"<expected>\" --actual \"<actual>\" --notes \"<optional>\"\n```\n\n- ! Read the printed draft title/body with the operator before proceeding\n- ! If the command reports a duplicate open issue, STOP and link the existing issue instead of filing again\n- ⊗ Proceed past a duplicate-detection block without operator override\n\n## Phase 3 -- Confirm + file\n\n- ! Present the final draft and ask for explicit yes/no confirmation\n- ! Only after approval, re-run with `--confirm`:\n\n```bash\ntask feedback:file -- --summary \"<one-line summary>\" --context \"<session context>\" --expected \"<expected>\" --actual \"<actual>\" --confirm\n```\n\n- ! Print the filed issue URL to the operator\n- ⊗ Use `Closes`/`Fixes`/`Resolves` in the upstream body -- use `Refs #1709` only\n\n## Phase 4 -- Handoff\n\n- ~ Record the upstream issue URL in the session handoff or continue checkpoint if the operator tracks follow-ups locally\n- ~ Return to the prior workflow; gap escalation does not block story completion\n\n## Anti-Patterns\n\n- ⊗ Filing from the maintainer framework repo (consumer-only guard)\n- ⊗ Skipping dedup review when the command reports an existing open issue\n- ⊗ Treating `--confirm` as implicit from broad session approval -- require an explicit filing confirmation step\n",
       "frontmatter_extra": null
     },
+    {
+      "id": "deft-directive-product-signal",
+      "description": "Consented agent-driven product check-in (pulse + portrait) with enable and consent gates, minimized local ledger attach, and private GitHub sink submit. Defaults off.",
+      "triggers": [
+        "product check-in",
+        "product pulse",
+        "partner feedback",
+        "product signal"
+      ],
+      "path": "skills/deft-directive-product-signal/SKILL.md",
+      "version": "0.1",
+      "body": "# Deft Directive Product Signal — consented check-in (#2693)\n\nAgent-driven qualitative product-improvement signal for partner/trial installs. Lightweight interview, minimized local summaries (value/health/helped), optional skillsSummary hook — submits to private `deftai/product-signal` when enable + consent gates pass.\n\nLegend (from RFC2119): !=MUST, ~=SHOULD, ≉=SHOULD NOT, ⊗=MUST NOT, ?=MAY.\n\n## When to Use\n\n- Operator says `product check-in`, `product pulse`, `partner feedback`, or `product signal`\n- Partner onboarding after ops enables `plan.policy.productSignal`\n- ⊗ Do NOT invoke from session:start or ambient rituals when disabled (#2693 D3)\n\n## Preconditions\n\n- ! `plan.policy.productSignal.enabled` MUST be true (`task policy:show --field=productSignal`)\n- ! Install-level consent MUST be recorded before outbound submit (`task product-signal:status`)\n- ⊗ Prompt or submit when `enabled` is false\n- ⊗ Block story work on sink errors — fail open (#2693 D16/D18)\n\n## Phase 1 — Gate\n\n```bash\ntask product-signal:status\ntask policy:show -- --field=productSignal\n```\n\n- ! If disabled: soft-skip with one line; exit skill\n- ! If headless/CI: fail open — no consent/interview prompts (#2693 D16)\n\n## Phase 2 — First-time consent (interactive only, D17)\n\nWhen enabled, interactive, and consent missing/revoked, ask:\n\n> May we collect usage metrics and related session signal from this install to improve Directive? This can include a short check-in plus minimized local summaries (value/health and related ledgers). Nothing is sent while this path is off or without your consent.\n>\n> If you are unsure, please check with your company before saying no — they are a Directive partner and may already expect this signal to be shared.\n>\n> Reply **yes** to consent, or **no** to decline.\n\n- **yes** → `task product-signal:consent -- --grant`; continue\n- **no** → soft-skip; do not badger every turn\n\n## Phase 3 — Interview (≤3 answers + optional NPS)\n\n- ! Ask at most three short questions plus optional NPS (0–10)\n- ~ Target ≤30s human time beyond first-time consent\n- ⊗ Paste secrets, paths, raw logs, or full USER.md into answers\n\n## Phase 4 — Assemble + validate + submit\n\n```bash\ntask product-signal:submit -- --surface pulse --dry-run\ntask product-signal:submit -- --surface pulse --nps 9\n```\n\n- ! On validation failure: show reason; no partial write\n- ! On sink ACL/network errors: soft-skip with hint; do not fail caller (#2693 D18)\n- ! Report issue URL on success\n\n## Private gaps (D19)\n\n- ! Record bugs/gaps as `Gap:` comments on the standing **pulse** thread (enable+consent sufficient)\n- ! Public promote to `deftai/directive` remains hard-confirm via `deft-directive-feedback` / `task feedback:file`\n\n## Revoke\n\n```bash\ntask product-signal:consent -- --revoke\n# and/or disable: set plan.policy.productSignal.enabled false\n```\n\n## Anti-Patterns\n\n- ⊗ Ambient consent nag when disabled\n- ⊗ Fail-closed headless behavior\n- ⊗ Sticky forever-fail when sink is down\n- ⊗ Auto-file public framework-gap issues from pulses\n\n## Exit\n\ndeft-directive-product-signal complete — exiting skill.\n",
+      "frontmatter_extra": null
+    },
     {
       "id": "deft-directive-gh-arch",
       "description": "Explore a codebase for architectural improvement opportunities -- deepen shallow modules, generate competing interface designs in parallel via sub- agents, and file a refactor RFC as a GitHub Issue. Use when improving architecture, finding refactoring opportunities, or making a codebase more testable and AI-navigable. Requires the GitHub CLI (gh).",

package/skills/deft-directive-product-signal/SKILL.md

@@ -0,0 +1,94 @@
+---
+name: deft-directive-product-signal
+description: >-
+  Consented agent-driven product check-in (pulse + portrait) with enable and
+  consent gates, minimized local ledger attach, and private GitHub sink
+  submit. Defaults off.
+---
+<!-- AUTO-GENERATED by task packs:render -- DO NOT EDIT MANUALLY -->
+<!-- Purpose: rendered skill -->
+<!-- Source of truth: packs/skills/skills-pack-0.1.json -->
+<!-- Regenerate with: task packs:render -->
+<!-- Edit the source, not this file. Slice instead of loading every SKILL.md: task packs:slice skills by-trigger --trigger <kw> (or list) -->
+
+# Deft Directive Product Signal — consented check-in (#2693)
+
+Agent-driven qualitative product-improvement signal for partner/trial installs. Lightweight interview, minimized local summaries (value/health/helped), optional skillsSummary hook — submits to private `deftai/product-signal` when enable + consent gates pass.
+
+Legend (from RFC2119): !=MUST, ~=SHOULD, ≉=SHOULD NOT, ⊗=MUST NOT, ?=MAY.
+
+## When to Use
+
+- Operator says `product check-in`, `product pulse`, `partner feedback`, or `product signal`
+- Partner onboarding after ops enables `plan.policy.productSignal`
+- ⊗ Do NOT invoke from session:start or ambient rituals when disabled (#2693 D3)
+
+## Preconditions
+
+- ! `plan.policy.productSignal.enabled` MUST be true (`task policy:show --field=productSignal`)
+- ! Install-level consent MUST be recorded before outbound submit (`task product-signal:status`)
+- ⊗ Prompt or submit when `enabled` is false
+- ⊗ Block story work on sink errors — fail open (#2693 D16/D18)
+
+## Phase 1 — Gate
+
+```bash
+task product-signal:status
+task policy:show -- --field=productSignal
+```
+
+- ! If disabled: soft-skip with one line; exit skill
+- ! If headless/CI: fail open — no consent/interview prompts (#2693 D16)
+
+## Phase 2 — First-time consent (interactive only, D17)
+
+When enabled, interactive, and consent missing/revoked, ask:
+
+> May we collect usage metrics and related session signal from this install to improve Directive? This can include a short check-in plus minimized local summaries (value/health and related ledgers). Nothing is sent while this path is off or without your consent.
+>
+> If you are unsure, please check with your company before saying no — they are a Directive partner and may already expect this signal to be shared.
+>
+> Reply **yes** to consent, or **no** to decline.
+
+- **yes** → `task product-signal:consent -- --grant`; continue
+- **no** → soft-skip; do not badger every turn
+
+## Phase 3 — Interview (≤3 answers + optional NPS)
+
+- ! Ask at most three short questions plus optional NPS (0–10)
+- ~ Target ≤30s human time beyond first-time consent
+- ⊗ Paste secrets, paths, raw logs, or full USER.md into answers
+
+## Phase 4 — Assemble + validate + submit
+
+```bash
+task product-signal:submit -- --surface pulse --dry-run
+task product-signal:submit -- --surface pulse --nps 9
+```
+
+- ! On validation failure: show reason; no partial write
+- ! On sink ACL/network errors: soft-skip with hint; do not fail caller (#2693 D18)
+- ! Report issue URL on success
+
+## Private gaps (D19)
+
+- ! Record bugs/gaps as `Gap:` comments on the standing **pulse** thread (enable+consent sufficient)
+- ! Public promote to `deftai/directive` remains hard-confirm via `deft-directive-feedback` / `task feedback:file`
+
+## Revoke
+
+```bash
+task product-signal:consent -- --revoke
+# and/or disable: set plan.policy.productSignal.enabled false
+```
+
+## Anti-Patterns
+
+- ⊗ Ambient consent nag when disabled
+- ⊗ Fail-closed headless behavior
+- ⊗ Sticky forever-fail when sink is down
+- ⊗ Auto-file public framework-gap issues from pulses
+
+## Exit
+
+deft-directive-product-signal complete — exiting skill.

package/tasks/product-signal.yml

@@ -0,0 +1,55 @@
+version: '3'
+
+vars:
+  DEFT_ROOT: '{{joinPath .TASKFILE_DIR ".."}}'
+
+tasks:
+  status:
+    desc: "Show product-signal enable/consent/sink status (#2693). -- task product-signal:status"
+    dir: '{{.USER_WORKING_DIR}}'
+    deps:
+      - task: :engine:_ts-build
+    cmds:
+      - task: :engine:invoke
+        vars:
+          ENGINE_CMD: 'product-signal status --project-root "{{.USER_WORKING_DIR}}" {{.CLI_ARGS}}'
+
+  enable:
+    desc: "Enable plan.policy.productSignal after capability-cost disclosure (#2693). -- task product-signal:enable -- [--confirm]"
+    dir: '{{.USER_WORKING_DIR}}'
+    deps:
+      - task: :engine:_ts-build
+    cmds:
+      - task: :engine:invoke
+        vars:
+          ENGINE_CMD: 'product-signal enable --project-root "{{.USER_WORKING_DIR}}" {{.CLI_ARGS}}'
+
+  consent:
+    desc: "Grant or revoke install-level product-signal consent (#2693). -- task product-signal:consent -- --grant|--revoke"
+    dir: '{{.USER_WORKING_DIR}}'
+    deps:
+      - task: :engine:_ts-build
+    cmds:
+      - task: :engine:invoke
+        vars:
+          ENGINE_CMD: 'product-signal consent {{.CLI_ARGS}}'
+
+  submit:
+    desc: "Submit pulse/portrait payload to private sink when gated (#2693). -- task product-signal:submit -- [--surface pulse|portrait] [--dry-run] [--json]"
+    dir: '{{.USER_WORKING_DIR}}'
+    deps:
+      - task: :engine:_ts-build
+    cmds:
+      - task: :engine:invoke
+        vars:
+          ENGINE_CMD: 'product-signal submit --project-root "{{.USER_WORKING_DIR}}" {{.CLI_ARGS}}'
+
+  bootstrap-sink:
+    desc: "Create private deftai/product-signal repo and bootstrap D20 labels (#2693). -- task product-signal:bootstrap-sink [-- --dry-run]"
+    dir: '{{.USER_WORKING_DIR}}'
+    deps:
+      - task: :engine:_ts-build
+    cmds:
+      - task: :engine:invoke
+        vars:
+          ENGINE_CMD: 'product-signal bootstrap-sink {{.CLI_ARGS}}'