@deftai/directive-core 0.79.4 → 0.81.0

package/dist/product-signal/payload.js

@@ -0,0 +1,124 @@
+import { existsSync, readFileSync } from "node:fs";
+import { join, resolve } from "node:path";
+export const PRODUCT_SIGNAL_PAYLOAD_SCHEMA_VERSION = 1;
+export const LOCAL_SIGNAL_SUMMARY_SCHEMA_VERSION = 1;
+export const SKILLS_SUMMARY_SCHEMA_VERSION = 1;
+export const MAX_PAYLOAD_JSON_BYTES = 64_000;
+export const MAX_HUMAN_ANSWERS = 3;
+export const MAX_ANSWER_LENGTH = 2_000;
+export const MAX_FREE_TEXT_LENGTH = 4_000;
+export const MAX_AGENT_NOTES_LENGTH = 2_000;
+const SECRET_PATTERNS = [
+    /\bghp_[A-Za-z0-9]{20,}\b/,
+    /\bgithub_pat_[A-Za-z0-9_]{20,}\b/,
+    /\bAKIA[0-9A-Z]{16}\b/,
+    /\bsk-[A-Za-z0-9]{20,}\b/,
+    /\bBearer\s+[A-Za-z0-9._-]{20,}\b/i,
+    /\bBEGIN (?:RSA |EC )?PRIVATE KEY\b/,
+    /\b\.env\b/,
+];
+function containsSecretHygieneViolation(text) {
+    for (const pattern of SECRET_PATTERNS) {
+        if (pattern.test(text)) {
+            return true;
+        }
+    }
+    return false;
+}
+function isValidNps(value) {
+    if (value === null) {
+        return true;
+    }
+    return typeof value === "number" && Number.isInteger(value) && value >= 0 && value <= 10;
+}
+/** Client-side payload validation before submit (#2693 D7). */
+export function validateProductSignalPayload(payload) {
+    const errors = [];
+    if (payload.schemaVersion !== PRODUCT_SIGNAL_PAYLOAD_SCHEMA_VERSION) {
+        errors.push(`schemaVersion must be ${PRODUCT_SIGNAL_PAYLOAD_SCHEMA_VERSION}`);
+    }
+    if (payload.surface !== "pulse" && payload.surface !== "portrait") {
+        errors.push("surface must be pulse or portrait");
+    }
+    if (payload.installId.trim().length === 0) {
+        errors.push("installId is required");
+    }
+    if (payload.actorName.trim().length === 0) {
+        errors.push("actorName is required");
+    }
+    if (!isValidNps(payload.human.nps)) {
+        errors.push("human.nps must be null or integer 0-10");
+    }
+    if (payload.human.answers.length > MAX_HUMAN_ANSWERS) {
+        errors.push(`human.answers exceeds max ${MAX_HUMAN_ANSWERS}`);
+    }
+    for (const answer of payload.human.answers) {
+        if (answer.q.length === 0 || answer.a.length === 0) {
+            errors.push("human.answers entries require non-empty q and a");
+        }
+        if (answer.a.length > MAX_ANSWER_LENGTH) {
+            errors.push(`human answer exceeds max length ${MAX_ANSWER_LENGTH}`);
+        }
+    }
+    if (payload.human.freeText !== null && payload.human.freeText.length > MAX_FREE_TEXT_LENGTH) {
+        errors.push(`human.freeText exceeds max length ${MAX_FREE_TEXT_LENGTH}`);
+    }
+    if (payload.agentNotes !== null && payload.agentNotes.length > MAX_AGENT_NOTES_LENGTH) {
+        errors.push(`agentNotes exceeds max length ${MAX_AGENT_NOTES_LENGTH}`);
+    }
+    const serialized = JSON.stringify(payload);
+    if (Buffer.byteLength(serialized, "utf8") > MAX_PAYLOAD_JSON_BYTES) {
+        errors.push(`payload exceeds max size ${MAX_PAYLOAD_JSON_BYTES} bytes`);
+    }
+    if (containsSecretHygieneViolation(serialized)) {
+        errors.push("payload failed secret-hygiene scan");
+    }
+    return errors;
+}
+/** Optional #829 sidecar path (read-only attach; emit not implemented here). */
+export const SKILLS_TELEMETRY_SIDECAR_REL = join(".deft-cache", "skills-telemetry.json");
+/** Read minimized skillsSummary when local sidecar exists (#2693 D14). */
+export function readSkillsSummarySidecar(projectRoot) {
+    const path = resolve(projectRoot, SKILLS_TELEMETRY_SIDECAR_REL);
+    if (!existsSync(path)) {
+        return null;
+    }
+    try {
+        const parsed = JSON.parse(readFileSync(path, "utf8"));
+        if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
+            return null;
+        }
+        const rec = parsed;
+        const topRaw = rec.top;
+        if (!Array.isArray(topRaw)) {
+            return null;
+        }
+        const top = [];
+        for (const item of topRaw.slice(0, 10)) {
+            if (item === null || typeof item !== "object" || Array.isArray(item)) {
+                continue;
+            }
+            const row = item;
+            const skill = typeof row.skill === "string" ? row.skill.trim() : "";
+            if (skill.length === 0) {
+                continue;
+            }
+            top.push({
+                skill,
+                useCount: typeof row.useCount === "number" ? row.useCount : 0,
+                viewCount: typeof row.viewCount === "number" ? row.viewCount : 0,
+                lastUsed: typeof row.lastUsed === "string" ? row.lastUsed : null,
+            });
+        }
+        const skillCount = typeof rec.skillCount === "number" ? rec.skillCount : top.length;
+        return {
+            schemaVersion: SKILLS_SUMMARY_SCHEMA_VERSION,
+            top,
+            skillCount,
+        };
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=payload.js.map

package/dist/product-signal/sink-bootstrap.d.ts

@@ -0,0 +1,29 @@
+import { type GhRestSeams } from "../scm/gh-rest.js";
+/** D20 minimum label bootstrap set (#2693). */
+export declare const PRODUCT_SIGNAL_BOOTSTRAP_LABELS: readonly {
+    readonly name: string;
+    readonly color: string;
+    readonly description: string;
+}[];
+export declare const PRODUCT_SIGNAL_SINK_README = "# deftai/product-signal\n\nInternal (org) operator inbox for consented Directive product-improvement signal (Phase 1 under epic #2603).\n\n## Standing threads\n\n- Thread key: `(installId, actorName)` \u2014 see issue body marker `<!-- deft:product-signal v1 ... -->`\n- **Portrait**: one open issue per key; body upserted in place (`surface:portrait`)\n- **Pulse**: dated comments appended on standing issue (`surface:pulse`)\n- **Gap notes**: `Gap:` comments on the pulse thread (`signal:gap` label when present)\n\n## Labels (bootstrapped)\n\n- `surface:pulse`, `surface:portrait`\n- `nps:promoter`, `nps:passive`, `nps:detractor`, `nps:none`\n- `signal:gap`\n- `directive:<major.minor>` \u2014 created on first use per directive version\n\nThis repo is an operator-readable inbox, not the long-term analytics warehouse (#2603).\n";
+export interface BootstrapSinkResult {
+    readonly exitCode: 0 | 1 | 2;
+    readonly stdout: string;
+    readonly repo: string;
+}
+/** Bootstrap D20 labels (idempotent — ignores existing label 422). */
+export declare function bootstrapProductSignalLabels(repo?: string, seams?: GhRestSeams): {
+    created: number;
+    skipped: number;
+    errors: string[];
+};
+/**
+ * Create sink repo + labels via gh CLI (#2693 D6/D20).
+ * Creates as private then sets visibility to **internal** (org-visible, not public).
+ */
+export declare function bootstrapProductSignalSink(options?: {
+    repo?: string;
+    dryRun?: boolean;
+    seams?: GhRestSeams;
+}): BootstrapSinkResult;
+//# sourceMappingURL=sink-bootstrap.d.ts.map

package/dist/product-signal/sink-bootstrap.js

@@ -0,0 +1,108 @@
+import { spawnSync } from "node:child_process";
+import { DEFAULT_PRODUCT_SIGNAL_SINK_REPO } from "../policy/product-signal.js";
+import { GhRestError, restCreateLabel } from "../scm/gh-rest.js";
+/** D20 minimum label bootstrap set (#2693). */
+export const PRODUCT_SIGNAL_BOOTSTRAP_LABELS = [
+    { name: "surface:pulse", color: "1D76DB", description: "Standing pulse thread" },
+    { name: "surface:portrait", color: "5319E7", description: "Standing portrait thread" },
+    { name: "nps:promoter", color: "0E8A16", description: "NPS 9-10" },
+    { name: "nps:passive", color: "FBCA04", description: "NPS 7-8" },
+    { name: "nps:detractor", color: "D93F0B", description: "NPS 0-6" },
+    { name: "nps:none", color: "C5DEF5", description: "No NPS score" },
+    { name: "signal:gap", color: "B60205", description: "Gap comment on pulse thread" },
+];
+export const PRODUCT_SIGNAL_SINK_README = `# deftai/product-signal
+
+Internal (org) operator inbox for consented Directive product-improvement signal (Phase 1 under epic #2603).
+
+## Standing threads
+
+- Thread key: \`(installId, actorName)\` — see issue body marker \`<!-- deft:product-signal v1 ... -->\`
+- **Portrait**: one open issue per key; body upserted in place (\`surface:portrait\`)
+- **Pulse**: dated comments appended on standing issue (\`surface:pulse\`)
+- **Gap notes**: \`Gap:\` comments on the pulse thread (\`signal:gap\` label when present)
+
+## Labels (bootstrapped)
+
+- \`surface:pulse\`, \`surface:portrait\`
+- \`nps:promoter\`, \`nps:passive\`, \`nps:detractor\`, \`nps:none\`
+- \`signal:gap\`
+- \`directive:<major.minor>\` — created on first use per directive version
+
+This repo is an operator-readable inbox, not the long-term analytics warehouse (#2603).
+`;
+/** Bootstrap D20 labels (idempotent — ignores existing label 422). */
+export function bootstrapProductSignalLabels(repo = DEFAULT_PRODUCT_SIGNAL_SINK_REPO, seams = {}) {
+    let created = 0;
+    let skipped = 0;
+    const errors = [];
+    for (const label of PRODUCT_SIGNAL_BOOTSTRAP_LABELS) {
+        try {
+            restCreateLabel(repo, label.name, label.color, label.description, seams);
+            created += 1;
+        }
+        catch (err) {
+            if (err instanceof GhRestError) {
+                if (err.stderr.toLowerCase().includes("already_exists") || err.exitCode === 422) {
+                    skipped += 1;
+                    continue;
+                }
+                errors.push(`${label.name}: ${err.stderr || err.message}`);
+            }
+            else {
+                errors.push(`${label.name}: ${String(err)}`);
+            }
+        }
+    }
+    return { created, skipped, errors };
+}
+/**
+ * Create sink repo + labels via gh CLI (#2693 D6/D20).
+ * Creates as private then sets visibility to **internal** (org-visible, not public).
+ */
+export function bootstrapProductSignalSink(options = {}) {
+    const repo = options.repo ?? DEFAULT_PRODUCT_SIGNAL_SINK_REPO;
+    if (options.dryRun) {
+        return {
+            exitCode: 0,
+            stdout: `[dry-run] would bootstrap internal sink ${repo} with README + ${PRODUCT_SIGNAL_BOOTSTRAP_LABELS.length} labels\n`,
+            repo,
+        };
+    }
+    const create = spawnSync("gh", [
+        "repo",
+        "create",
+        repo,
+        "--private",
+        "--description",
+        "Internal product-improvement signal inbox for Directive partners (Refs #2693)",
+        "--add-readme",
+    ], { encoding: "utf8" });
+    if (create.status !== 0 && !String(create.stderr).toLowerCase().includes("already exists")) {
+        return {
+            exitCode: 2,
+            stdout: `sink bootstrap failed: ${create.stderr || create.stdout}\n`,
+            repo,
+        };
+    }
+    // Org "internal" visibility: gh create has no --internal; set after create.
+    const visibility = spawnSync("gh", ["repo", "edit", repo, "--visibility", "internal", "--accept-visibility-change-consequences"], { encoding: "utf8" });
+    if (visibility.status !== 0) {
+        return {
+            exitCode: 2,
+            stdout: `sink repo created but failed to set visibility=internal: ${visibility.stderr || visibility.stdout}\n`,
+            repo,
+        };
+    }
+    const labelResult = bootstrapProductSignalLabels(repo, options.seams);
+    const lines = [
+        `product-signal sink ${repo} ready (visibility=internal).`,
+        `labels: created=${labelResult.created} skipped=${labelResult.skipped}`,
+    ];
+    if (labelResult.errors.length > 0) {
+        lines.push(`label warnings: ${labelResult.errors.join("; ")}`);
+    }
+    lines.push("", "Update repo README with standing-thread conventions if empty.");
+    return { exitCode: 0, stdout: `${lines.join("\n")}\n`, repo };
+}
+//# sourceMappingURL=sink-bootstrap.js.map

package/dist/product-signal/submit-adapter.d.ts

@@ -0,0 +1,14 @@
+import type { ProductSignalOutcome } from "./gates.js";
+import type { ProductSignalPayload } from "./payload.js";
+export interface SubmitResult {
+    readonly outcome: ProductSignalOutcome;
+    readonly issueUrl?: string | null;
+    readonly issueNumber?: number | null;
+    readonly message: string;
+}
+/** Transport-pluggable submit seam (#2693 D5). */
+export interface SubmitAdapter {
+    readonly id: string;
+    submit(payload: ProductSignalPayload): Promise<SubmitResult>;
+}
+//# sourceMappingURL=submit-adapter.d.ts.map

package/dist/product-signal/submit-adapter.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=submit-adapter.js.map

package/dist/product-signal/submit.d.ts

@@ -0,0 +1,54 @@
+import { type ProductSignalOutcome } from "./gates.js";
+import { type ProductSignalHuman, type ProductSignalPayload, type ProductSignalSurface } from "./payload.js";
+export declare const PRODUCT_SIGNAL_LAST_SUBMIT_REL: string;
+export interface ProductSignalSubmitInput {
+    readonly surface: ProductSignalSurface;
+    readonly human?: Partial<ProductSignalHuman>;
+    readonly agentNotes?: string | null;
+    readonly gapText?: string | null;
+}
+export interface ProductSignalSubmitOptions extends ProductSignalSubmitInput {
+    readonly projectRoot?: string | null;
+    readonly dryRun?: boolean;
+    readonly json?: boolean;
+    readonly skipGates?: boolean;
+}
+export interface ProductSignalSubmitResult {
+    readonly outcome: ProductSignalOutcome;
+    readonly exitCode: 0 | 1 | 2;
+    readonly message: string;
+    readonly issueUrl?: string | null;
+    readonly payload?: ProductSignalPayload;
+}
+/** Assemble a versioned product-signal payload (#2693 D7). */
+export declare function assembleProductSignalPayload(projectRoot: string, input: ProductSignalSubmitInput): ProductSignalPayload;
+/** Submit product-signal through gates + adapter (#2693). */
+export declare function submitProductSignal(options: ProductSignalSubmitOptions): Promise<ProductSignalSubmitResult>;
+export declare function runProductSignalStatus(projectRoot: string | null): {
+    exitCode: 0;
+    text: string;
+};
+export declare function runProductSignalEnable(projectRoot: string | null, confirm: boolean): {
+    exitCode: 0 | 1 | 2;
+    text: string;
+};
+export declare function runProductSignalConsent(action: "grant" | "revoke"): {
+    exitCode: 0 | 1;
+    text: string;
+};
+export declare function runProductSignalBootstrapSink(dryRun: boolean): {
+    exitCode: 0 | 1 | 2;
+    text: string;
+};
+export declare function parseProductSignalSubmitArgs(argv: string[]): {
+    surface: ProductSignalSurface;
+    dryRun: boolean;
+    json: boolean;
+    projectRoot: string;
+    nps: number | null;
+    error?: string;
+};
+/** CLI module entrypoint for dispatch (#2693). */
+export declare function productSignalMain(argv?: string[]): Promise<number>;
+export declare function mainEntry(argv?: string[]): Promise<number>;
+//# sourceMappingURL=submit.d.ts.map

package/dist/product-signal/submit.js

@@ -0,0 +1,290 @@
+import { appendFileSync, existsSync, mkdirSync, readFileSync } from "node:fs";
+import { join, resolve } from "node:path";
+import { enableProductSignal, formatProductSignalStatusLine, resolveProductSignal, } from "../policy/product-signal.js";
+import { resolveProjectRoot } from "../scope/project-context.js";
+import { resolveActorName } from "./actor-name.js";
+import { grantProductSignalConsent, isProductSignalConsented, readProductSignalConsent, revokeProductSignalConsent, } from "./consent.js";
+import { evaluateProductSignalGates } from "./gates.js";
+import { GitHubPrivateSinkAdapter } from "./github-private-sink-adapter.js";
+import { collectInstallContext } from "./install-context.js";
+import { assembleLocalSignalSummary } from "./local-signal-summary.js";
+import { PRODUCT_SIGNAL_PAYLOAD_SCHEMA_VERSION, readSkillsSummarySidecar, validateProductSignalPayload, } from "./payload.js";
+import { bootstrapProductSignalSink } from "./sink-bootstrap.js";
+export const PRODUCT_SIGNAL_LAST_SUBMIT_REL = join(".deft-cache", "product-signal-last-submit.json");
+function recordLastSubmit(projectRoot, outcome, url) {
+    const path = resolve(projectRoot, PRODUCT_SIGNAL_LAST_SUBMIT_REL);
+    try {
+        mkdirSync(join(path, ".."), { recursive: true });
+        appendFileSync(path, `${JSON.stringify({
+            outcome,
+            issueUrl: url,
+            at: new Date().toISOString().replace(/\.\d{3}Z$/, "Z"),
+        })}\n`, "utf8");
+    }
+    catch {
+        // observability only
+    }
+}
+function readLastSubmitSummary(projectRoot) {
+    const path = resolve(projectRoot, PRODUCT_SIGNAL_LAST_SUBMIT_REL);
+    if (!existsSync(path)) {
+        return null;
+    }
+    try {
+        const lines = readFileSync(path, "utf8")
+            .split("\n")
+            .filter((l) => l.trim());
+        const last = lines[lines.length - 1];
+        if (!last) {
+            return null;
+        }
+        const rec = JSON.parse(last);
+        if (rec !== null && typeof rec === "object" && !Array.isArray(rec)) {
+            const at = rec.at;
+            const outcome = rec.outcome;
+            const url = rec.issueUrl;
+            return `last=${String(outcome)} at=${String(at)} url=${String(url ?? "none")}`;
+        }
+    }
+    catch {
+        return null;
+    }
+    return null;
+}
+/** Assemble a versioned product-signal payload (#2693 D7). */
+export function assembleProductSignalPayload(projectRoot, input) {
+    const ctx = collectInstallContext(projectRoot);
+    const actor = resolveActorName({ projectRoot });
+    const consent = readProductSignalConsent();
+    const human = {
+        nps: input.human?.nps ?? null,
+        answers: input.human?.answers ?? [],
+        freeText: input.human?.freeText ?? null,
+    };
+    return {
+        schemaVersion: PRODUCT_SIGNAL_PAYLOAD_SCHEMA_VERSION,
+        surface: input.surface,
+        installId: ctx.installId,
+        actorName: actor.displayName,
+        actorNameSource: actor.actorNameSource,
+        directiveVersion: ctx.directiveVersion,
+        os: ctx.os,
+        osVersion: ctx.osVersion,
+        shell: ctx.shell,
+        harness: ctx.harness,
+        harnessVersion: ctx.harnessVersion,
+        consentTier: consent?.tier ?? "none",
+        consentSource: "user",
+        consentVersion: consent ? String(consent.consentVersion) : "0",
+        human,
+        agentNotes: input.agentNotes ?? null,
+        localSignalSummary: assembleLocalSignalSummary(projectRoot),
+        skillsSummary: readSkillsSummarySidecar(projectRoot),
+        collectedAt: new Date().toISOString().replace(/\.\d{3}Z$/, "Z"),
+    };
+}
+/** Submit product-signal through gates + adapter (#2693). */
+export async function submitProductSignal(options) {
+    const root = resolveProjectRoot(options.projectRoot ?? undefined);
+    if (root === null) {
+        return { outcome: "error-config", exitCode: 2, message: "project root not found\n" };
+    }
+    if (!options.skipGates) {
+        const gates = evaluateProductSignalGates({ projectRoot: root });
+        if (!gates.allowed) {
+            return { outcome: gates.outcome, exitCode: 0, message: `${gates.message}\n` };
+        }
+    }
+    const payload = assembleProductSignalPayload(root, options);
+    const validationErrors = validateProductSignalPayload(payload);
+    if (validationErrors.length > 0) {
+        return {
+            outcome: "validation",
+            exitCode: 1,
+            message: `validation failed: ${validationErrors.join("; ")}\n`,
+            payload,
+        };
+    }
+    if (options.dryRun) {
+        return {
+            outcome: "dry-run",
+            exitCode: 0,
+            message: `[dry-run] payload valid for ${payload.surface}\n`,
+            payload,
+        };
+    }
+    const policy = resolveProductSignal(root);
+    const adapter = new GitHubPrivateSinkAdapter({ sinkRepo: policy.sinkRepo });
+    const result = await adapter.submit(payload, { gapText: options.gapText });
+    if (result.outcome === "submitted") {
+        recordLastSubmit(root, result.outcome, result.issueUrl ?? null);
+    }
+    const urlLine = result.issueUrl ? ` url=${result.issueUrl}` : "";
+    return {
+        outcome: result.outcome,
+        exitCode: 0,
+        message: `${result.message}${urlLine}\n`,
+        issueUrl: result.issueUrl,
+        payload,
+    };
+}
+export function runProductSignalStatus(projectRoot) {
+    const root = resolveProjectRoot(projectRoot ?? undefined) ?? process.cwd();
+    const policy = resolveProductSignal(root);
+    const consented = isProductSignalConsented();
+    const last = readLastSubmitSummary(root);
+    const lines = [
+        formatProductSignalStatusLine(policy),
+        `[deft product-signal] consented=${String(consented)}`,
+        last ? `[deft product-signal] ${last}` : "[deft product-signal] last submit: none",
+    ];
+    return { exitCode: 0, text: `${lines.join("\n")}\n` };
+}
+export function runProductSignalEnable(projectRoot, confirm) {
+    const root = resolveProjectRoot(projectRoot ?? undefined);
+    if (root === null) {
+        return { exitCode: 2, text: "project root not found\n" };
+    }
+    const result = enableProductSignal(root, { confirm });
+    return { exitCode: result.exitCode, text: result.stdout };
+}
+export function runProductSignalConsent(action) {
+    if (action === "grant") {
+        const record = grantProductSignalConsent();
+        return {
+            exitCode: 0,
+            text: `product-signal consent granted (tier=${record.tier}, version=${record.consentVersion}).\n`,
+        };
+    }
+    const ok = revokeProductSignalConsent();
+    if (!ok) {
+        return { exitCode: 1, text: "no consent file to revoke\n" };
+    }
+    return { exitCode: 0, text: "product-signal consent revoked\n" };
+}
+export function runProductSignalBootstrapSink(dryRun) {
+    const result = bootstrapProductSignalSink({ dryRun });
+    return { exitCode: result.exitCode, text: result.stdout };
+}
+export function parseProductSignalSubmitArgs(argv) {
+    let surface = "pulse";
+    let dryRun = false;
+    let json = false;
+    let projectRoot = ".";
+    let nps = null;
+    for (let i = 0; i < argv.length; i += 1) {
+        const arg = argv[i];
+        if (arg === "--surface") {
+            const v = argv[i + 1];
+            if (v !== "pulse" && v !== "portrait") {
+                return { surface, dryRun, json, projectRoot, nps, error: "invalid --surface" };
+            }
+            surface = v;
+            i += 1;
+        }
+        else if (arg?.startsWith("--surface=")) {
+            const v = arg.slice("--surface=".length);
+            if (v !== "pulse" && v !== "portrait") {
+                return { surface, dryRun, json, projectRoot, nps, error: "invalid --surface" };
+            }
+            surface = v;
+        }
+        else if (arg === "--dry-run") {
+            dryRun = true;
+        }
+        else if (arg === "--json") {
+            json = true;
+        }
+        else if (arg === "--nps") {
+            const v = Number(argv[i + 1]);
+            if (!Number.isInteger(v) || v < 0 || v > 10) {
+                return { surface, dryRun, json, projectRoot, nps, error: "invalid --nps" };
+            }
+            nps = v;
+            i += 1;
+        }
+        else if (arg === "--project-root") {
+            projectRoot = argv[i + 1] ?? ".";
+            i += 1;
+        }
+        else if (arg?.startsWith("--project-root=")) {
+            projectRoot = arg.slice("--project-root=".length);
+        }
+        else {
+            return { surface, dryRun, json, projectRoot, nps, error: `unrecognized argument: ${arg}` };
+        }
+    }
+    return { surface, dryRun, json, projectRoot, nps };
+}
+/** CLI module entrypoint for dispatch (#2693). */
+export async function productSignalMain(argv = process.argv.slice(2)) {
+    const sub = argv[0];
+    if (sub === "status") {
+        const rootIdx = argv.indexOf("--project-root");
+        const root = rootIdx >= 0
+            ? (argv[rootIdx + 1] ?? ".")
+            : (argv.find((a) => a.startsWith("--project-root="))?.split("=")[1] ?? ".");
+        const result = runProductSignalStatus(root);
+        process.stdout.write(result.text);
+        return result.exitCode;
+    }
+    if (sub === "enable") {
+        const confirm = argv.includes("--confirm");
+        const rootIdx = argv.indexOf("--project-root");
+        const root = rootIdx >= 0
+            ? (argv[rootIdx + 1] ?? ".")
+            : (argv.find((a) => a.startsWith("--project-root="))?.split("=")[1] ?? ".");
+        const result = runProductSignalEnable(root, confirm);
+        process.stdout.write(result.text);
+        return result.exitCode;
+    }
+    if (sub === "consent") {
+        const grant = argv.includes("--grant");
+        const revoke = argv.includes("--revoke");
+        if (grant === revoke) {
+            process.stderr.write("usage: product-signal consent -- --grant|--revoke\n");
+            return 1;
+        }
+        const result = runProductSignalConsent(grant ? "grant" : "revoke");
+        process.stdout.write(result.text);
+        return result.exitCode;
+    }
+    if (sub === "bootstrap-sink") {
+        const result = runProductSignalBootstrapSink(argv.includes("--dry-run"));
+        process.stdout.write(result.text);
+        return result.exitCode;
+    }
+    if (sub === "submit") {
+        const parsed = parseProductSignalSubmitArgs(argv.slice(1));
+        if (parsed.error) {
+            process.stderr.write(`${parsed.error}\n`);
+            return 1;
+        }
+        const result = await submitProductSignal({
+            projectRoot: parsed.projectRoot,
+            surface: parsed.surface,
+            dryRun: parsed.dryRun,
+            json: parsed.json,
+            human: parsed.nps !== null ? { nps: parsed.nps, answers: [], freeText: null } : undefined,
+        });
+        if (parsed.json) {
+            process.stdout.write(`${JSON.stringify({
+                outcome: result.outcome,
+                exit_code: result.exitCode,
+                message: result.message.trim(),
+                issue_url: result.issueUrl ?? null,
+                payload: result.payload ?? null,
+            }, null, 2)}\n`);
+        }
+        else {
+            process.stdout.write(result.message);
+        }
+        return result.exitCode;
+    }
+    process.stderr.write("usage: product-signal [status|enable|consent|submit|bootstrap-sink] ...\n");
+    return 1;
+}
+export async function mainEntry(argv = process.argv.slice(2)) {
+    return productSignalMain(argv);
+}
+//# sourceMappingURL=submit.js.map

package/dist/scm/gh-rest.d.ts

@@ -53,9 +53,11 @@ export interface RestIssueListOptions {
 export declare function restIssueList(repo: string, options?: RestIssueListOptions, seams?: GhRestSeams): Record<string, unknown>[];
 export declare const REST_MAX_PER_PAGE = 100;
 export declare const REST_PAGINATION_MAX_PAGES = 100;
-export declare const PUBLIC_HELPERS: readonly ["restCreateIssue", "restPostComment", "restCloseIssue", "restOpenPr", "restMergePr", "restIssueView", "restPrView", "restIssueList", "restIssueListPaginated"];
+export declare const PUBLIC_HELPERS: readonly ["restCreateIssue", "restPostComment", "restUpdateIssue", "restCreateLabel", "restCloseIssue", "restOpenPr", "restMergePr", "restIssueView", "restPrView", "restIssueList", "restIssueListPaginated"];
 export declare function restCreateIssue(repo: string, title: string, body: string, labels?: readonly string[], seams?: GhRestSeams): Record<string, unknown>;
 export declare function restPostComment(repo: string, n: number, body: string, seams?: GhRestSeams): Record<string, unknown>;
+export declare function restUpdateIssue(repo: string, n: number, patch: Record<string, unknown>, seams?: GhRestSeams): Record<string, unknown>;
+export declare function restCreateLabel(repo: string, name: string, color: string, description: string, seams?: GhRestSeams): Record<string, unknown>;
 export declare function restCloseIssue(repo: string, n: number, reason?: string | null, seams?: GhRestSeams): Record<string, unknown>;
 export declare function restOpenPr(repo: string, head: string, base: string, title: string, body: string, options?: {
     draft?: boolean;

package/dist/scm/gh-rest.js

@@ -171,6 +171,8 @@ export const REST_PAGINATION_MAX_PAGES = 100;
 export const PUBLIC_HELPERS = [
     "restCreateIssue",
     "restPostComment",
+    "restUpdateIssue",
+    "restCreateLabel",
     "restCloseIssue",
     "restOpenPr",
     "restMergePr",
@@ -224,6 +226,26 @@ export function restPostComment(repo, n, body, seams = {}) {
         ...seams,
     });
 }
+export function restUpdateIssue(repo, n, patch, seams = {}) {
+    const [owner, name] = splitRepo(repo);
+    const endpoint = `repos/${owner}/${name}/issues/${n}`;
+    return execMutation([endpoint, "--method", "PATCH"], {
+        endpoint,
+        payload: patch,
+        hint: "verify repo permissions and issue number; check gh auth status",
+        ...seams,
+    });
+}
+export function restCreateLabel(repo, name, color, description, seams = {}) {
+    const [owner, repoName] = splitRepo(repo);
+    const endpoint = `repos/${owner}/${repoName}/labels`;
+    return execMutation([endpoint, "--method", "POST"], {
+        endpoint,
+        payload: { name, color, description },
+        hint: "verify repo permissions; label may already exist (422 is acceptable for idempotent bootstrap)",
+        ...seams,
+    });
+}
 export function restCloseIssue(repo, n, reason = "completed", seams = {}) {
     const [owner, name] = splitRepo(repo);
     const endpoint = `repos/${owner}/${name}/issues/${n}`;