@deftai/directive 0.69.0 → 0.71.0

package/dist/cli-router/route-argv.js

@@ -71,6 +71,7 @@ export const SUBCOMMAND_ROUTES = {
     "policy:show": ["policy", "show"],
     "policy:enforce-branches": ["policy", "enforce-branches"],
     "policy:allow-direct-commits": ["policy", "allow-direct-commits"],
+    "policy:enable-value-feedback": ["policy", "enable-value-feedback"],
     "vbrief:reconcile-graph": ["vbrief-reconcile", "graph"],
     "vbrief:reconcile-labels": ["vbrief-reconcile", "labels"],
     "vbrief:reconcile-umbrellas": ["vbrief-reconcile", "umbrellas"],

package/dist/dispatch.d.ts

@@ -10,9 +10,9 @@ export interface DispatchIo {
     writeErr: (text: string) => void;
 }
 /** CLI modules in packages/cli/src (excluding parity harnesses and bin/index). */
-export declare const CLI_MODULE_VERBS: readonly ["agents-refresh", "cache", "check", "capacity-backfill", "capacity-show", "codebase-default-extractor", "codebase-map", "codebase-map-fresh", "codebase-projection-registry", "codebase-provider", "doctor", "install-upgrade", "install-uninstall", "migrate-preflight", "migrate-xbrief", "migrate-category-b", "framework-check-updates", "umbrella-current-shape", "changelog-check", "change-init", "commit-lint", "policy", "pr-closing-keywords", "pr-merge-readiness", "pr-monitor", "pr-protected-issues", "pr-wait-mergeable", "pr-watch", "preflight-cache", "preflight-gh", "probe-session", "release", "release-e2e", "release-publish", "release-rollback", "scope-lifecycle", "session-start", "slice", "subagent-monitor", "toolchain-check", "triage-actions", "triage-bootstrap", "triage-bulk", "triage-classify", "triage-help", "triage-queue", "triage-reconcile", "triage-refresh", "triage-scope", "triage-scope-drift", "triage-smoketest", "triage-subscribe", "triage-summary", "triage-welcome", "ts-check-lane", "vbrief-activate", "vbrief-build", "vbrief-preflight", "vbrief-reconcile", "vbrief-validate", "vbrief-validation", "verify-branch", "verify-encoding", "verify-forward-coverage", "verify-hooks-installed", "verify-investigation", "verify-judgment-gates", "verify-no-task-runtime", "validate-links", "validate-strategy-output", "verify-biome-config", "verify-bridge-drift", "verify-capacity", "verify-content-manifest", "verify-contract-drift", "verify-cursor-tier1", "verify-go-freeze", "verify-scm-boundary", "verify-session-ritual", "verify-stubs", "verify-xbrief-drift", "rule-ownership-lint", "verify-story-ready", "verify-tools", "verify-wip-cap", "verify-agents-md-budget", "verify-agents-md-advisory"];
+export declare const CLI_MODULE_VERBS: readonly ["agents-refresh", "cache", "check", "capacity-backfill", "capacity-show", "codebase-default-extractor", "codebase-map", "codebase-map-fresh", "codebase-projection-registry", "codebase-provider", "doctor", "install-upgrade", "install-uninstall", "migrate-preflight", "migrate-xbrief", "migrate-category-b", "framework-check-updates", "umbrella-current-shape", "changelog-check", "change-init", "commit-lint", "policy", "pr-closing-keywords", "pr-merge-readiness", "pr-monitor", "pr-protected-issues", "pr-wait-mergeable", "pr-watch", "preflight-cache", "preflight-gh", "probe-session", "release", "release-e2e", "release-publish", "release-rollback", "scope-lifecycle", "session-start", "slice", "subagent-monitor", "toolchain-check", "triage-actions", "triage-bootstrap", "triage-bulk", "triage-classify", "triage-help", "triage-queue", "triage-reconcile", "triage-refresh", "triage-scope", "triage-scope-drift", "triage-smoketest", "triage-subscribe", "triage-summary", "triage-welcome", "ts-check-lane", "vbrief-activate", "vbrief-build", "vbrief-preflight", "vbrief-reconcile", "vbrief-validate", "vbrief-validation", "verify-branch", "verify-encoding", "verify-forward-coverage", "verify-hooks-installed", "verify-investigation", "verify-judgment-gates", "verify-no-task-runtime", "validate-links", "validate-strategy-output", "verify-biome-config", "verify-bridge-drift", "verify-capacity", "verify-content-manifest", "verify-contract-drift", "verify-cursor-tier1", "verify-go-freeze", "verify-scm-boundary", "verify-session-ritual", "verify-stubs", "verify-xbrief-drift", "rule-ownership-lint", "verify-story-ready", "verify-tools", "verify-wip-cap", "verify-agents-md-budget", "verify-agents-md-advisory", "eval-health", "eval-run", "eval-report"];
 /** Core-only CLI entrypoints without a packages/cli wrapper. */
-export declare const CORE_MODULE_VERBS: readonly ["scm", "github-auth-modes", "github-body", "issue-emit", "issue-ingest", "reconcile-issues", "swarm-launch", "swarm-complete-cohort", "swarm-finalize-cohort", "swarm-readiness", "swarm-routing-verify", "swarm-routing-set", "swarm-verify-review-clean", "swarm-worktrees", "framework-commands", "pack-render", "packs-slice", "prd-render", "export-spec", "project-render", "roadmap-render", "spec-render", "spec-validate", "code-structure-validate", "pack-migrate-skills", "pack-migrate-rules", "pack-migrate-strategies", "pack-migrate-patterns", "pack-migrate-swarm-spec", "policy-set", "setup-ghx", "scope-undo", "scope-demote", "scope-decompose", "changelog-resolve-unreleased", "architecture-preflight-sor"];
+export declare const CORE_MODULE_VERBS: readonly ["scm", "github-auth-modes", "github-body", "issue-emit", "issue-ingest", "reconcile-issues", "swarm-launch", "swarm-complete-cohort", "swarm-finalize-cohort", "swarm-readiness", "swarm-routing-verify", "swarm-routing-set", "swarm-verify-review-clean", "swarm-worktrees", "framework-commands", "pack-render", "packs-slice", "prd-render", "export-spec", "project-render", "roadmap-render", "spec-render", "spec-validate", "code-structure-validate", "pack-migrate-skills", "pack-migrate-rules", "pack-migrate-strategies", "pack-migrate-patterns", "pack-migrate-swarm-spec", "policy-set", "setup-ghx", "scope-undo", "scope-demote", "scope-decompose", "changelog-resolve-unreleased", "architecture-preflight-sor", "feedback-file", "value-readback"];
 /** Colon aliases for triage-actions (mirrors cli-router SUBCOMMAND_ROUTES). */
 export declare const TRIAGE_ACTION_ALIAS_SUBCOMMANDS: Readonly<Record<string, string>>;
 /** Task-style aliases (framework_commands / Taskfile names). */

package/dist/dispatch.js

@@ -111,6 +111,9 @@ export const CLI_MODULE_VERBS = [
     "verify-wip-cap",
     "verify-agents-md-budget",
     "verify-agents-md-advisory",
+    "eval-health",
+    "eval-run",
+    "eval-report",
 ];
 /** Core-only CLI entrypoints without a packages/cli wrapper. */
 export const CORE_MODULE_VERBS = [
@@ -150,6 +153,8 @@ export const CORE_MODULE_VERBS = [
     "scope-decompose",
     "changelog-resolve-unreleased",
     "architecture-preflight-sor",
+    "feedback-file",
+    "value-readback",
 ];
 /** Colon aliases for triage-actions (mirrors cli-router SUBCOMMAND_ROUTES). */
 export const TRIAGE_ACTION_ALIAS_SUBCOMMANDS = {
@@ -222,6 +227,12 @@ export const VERB_ALIASES = {
     "project:render": "project-render",
     "project:export-spec": "export-spec",
     doctor: "doctor",
+    "eval:health": "eval-health",
+    "feedback:file": "feedback-file",
+    "value:show": "value-readback",
+    "triage:metrics": "value-readback",
+    "eval:run": "eval-run",
+    "eval:report": "eval-report",
     build: "framework-commands",
     "setup:ghx": "setup-ghx",
 };
@@ -2282,6 +2293,14 @@ async function loadCoreModuleHandler(verb, io) {
             const { architecturePreflightSorMain } = await import("@deftai/directive-core/dist/architecture/sor-preflight.js");
             return architecturePreflightSorMain;
         }
+        case "feedback-file": {
+            const { mainEntry } = await import("@deftai/directive-core/dist/value/feedback-file.js");
+            return mainEntry;
+        }
+        case "value-readback": {
+            const { mainEntry } = await import("@deftai/directive-core/dist/value/readback.js");
+            return mainEntry;
+        }
         default:
             throw new Error(`unknown core verb: ${verb}`);
     }

package/dist/eval-health.d.ts

@@ -0,0 +1,13 @@
+#!/usr/bin/env node
+interface ParsedArgs {
+    projectRoot: string;
+    json: boolean;
+    noPersist: boolean;
+    error?: string;
+}
+/** Parse eval-health CLI args. */
+export declare function parseArgs(argv: string[]): ParsedArgs;
+/** Run eval:health and return the process exit code. */
+export declare function run(argv: string[]): number;
+export {};
+//# sourceMappingURL=eval-health.d.ts.map

package/dist/eval-health.js

@@ -0,0 +1,63 @@
+#!/usr/bin/env node
+import { resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+import { evaluateHealth } from "@deftai/directive-core/eval";
+/** Parse eval-health CLI args. */
+export function parseArgs(argv) {
+    const parsed = {
+        projectRoot: ".",
+        json: false,
+        noPersist: false,
+    };
+    for (let i = 0; i < argv.length; i += 1) {
+        const arg = argv[i];
+        if (arg === "--json") {
+            parsed.json = true;
+        }
+        else if (arg === "--no-persist") {
+            parsed.noPersist = true;
+        }
+        else if (arg === "--project-root") {
+            const value = argv[i + 1];
+            if (value === undefined) {
+                return { ...parsed, error: "argument --project-root: expected one argument" };
+            }
+            parsed.projectRoot = value;
+            i += 1;
+        }
+        else if (arg?.startsWith("--project-root=")) {
+            parsed.projectRoot = arg.slice("--project-root=".length);
+        }
+        else {
+            return { ...parsed, error: `unrecognized argument: ${arg}` };
+        }
+    }
+    return parsed;
+}
+/** Run eval:health and return the process exit code. */
+export function run(argv) {
+    const args = parseArgs(argv);
+    if (args.error !== undefined) {
+        process.stderr.write(`eval:health: ${args.error}\n`);
+        return 2;
+    }
+    const result = evaluateHealth({
+        projectRoot: resolve(args.projectRoot),
+        persist: !args.noPersist,
+    });
+    if (result.report === null) {
+        process.stderr.write(`${result.message}\n`);
+        return result.code;
+    }
+    if (args.json) {
+        process.stdout.write(`${JSON.stringify(result.report, null, 2)}\n`);
+    }
+    else {
+        process.stdout.write(`${result.message}\n`);
+    }
+    return result.code;
+}
+if (process.argv[1] !== undefined && fileURLToPath(import.meta.url) === process.argv[1]) {
+    process.exit(run(process.argv.slice(2)));
+}
+//# sourceMappingURL=eval-health.js.map

package/dist/eval-report.d.ts

@@ -0,0 +1,15 @@
+#!/usr/bin/env node
+interface ParsedArgs {
+    projectRoot: string;
+    championVersion: string;
+    challengerVersion: string;
+    model: string;
+    json: boolean;
+    error?: string;
+}
+/** Parse eval-report CLI args. */
+export declare function parseArgs(argv: string[]): ParsedArgs;
+/** Run eval:report and return the process exit code. */
+export declare function run(argv: string[]): number;
+export {};
+//# sourceMappingURL=eval-report.d.ts.map

package/dist/eval-report.js

@@ -0,0 +1,97 @@
+#!/usr/bin/env node
+import { resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+import { reportGoldenEval } from "@deftai/directive-core/eval/report";
+/** Parse eval-report CLI args. */
+export function parseArgs(argv) {
+    const parsed = {
+        projectRoot: ".",
+        championVersion: "",
+        challengerVersion: "",
+        model: "",
+        json: false,
+    };
+    for (let i = 0; i < argv.length; i += 1) {
+        const arg = argv[i];
+        if (arg === "--json") {
+            parsed.json = true;
+        }
+        else if (arg === "--champion") {
+            const value = argv[i + 1];
+            if (value === undefined) {
+                return { ...parsed, error: "argument --champion: expected one argument" };
+            }
+            parsed.championVersion = value;
+            i += 1;
+        }
+        else if (arg?.startsWith("--champion=")) {
+            parsed.championVersion = arg.slice("--champion=".length);
+        }
+        else if (arg === "--challenger") {
+            const value = argv[i + 1];
+            if (value === undefined) {
+                return { ...parsed, error: "argument --challenger: expected one argument" };
+            }
+            parsed.challengerVersion = value;
+            i += 1;
+        }
+        else if (arg?.startsWith("--challenger=")) {
+            parsed.challengerVersion = arg.slice("--challenger=".length);
+        }
+        else if (arg === "--model") {
+            const value = argv[i + 1];
+            if (value === undefined) {
+                return { ...parsed, error: "argument --model: expected one argument" };
+            }
+            parsed.model = value;
+            i += 1;
+        }
+        else if (arg?.startsWith("--model=")) {
+            parsed.model = arg.slice("--model=".length);
+        }
+        else if (arg === "--project-root") {
+            const value = argv[i + 1];
+            if (value === undefined) {
+                return { ...parsed, error: "argument --project-root: expected one argument" };
+            }
+            parsed.projectRoot = value;
+            i += 1;
+        }
+        else if (arg?.startsWith("--project-root=")) {
+            parsed.projectRoot = arg.slice("--project-root=".length);
+        }
+        else {
+            return { ...parsed, error: `unrecognized argument: ${arg}` };
+        }
+    }
+    return parsed;
+}
+/** Run eval:report and return the process exit code. */
+export function run(argv) {
+    const args = parseArgs(argv);
+    if (args.error !== undefined) {
+        process.stderr.write(`eval:report: ${args.error}\n`);
+        return 2;
+    }
+    const result = reportGoldenEval({
+        projectRoot: resolve(args.projectRoot),
+        championVersion: args.championVersion,
+        challengerVersion: args.challengerVersion,
+        model: args.model,
+    });
+    if (result.report === null) {
+        process.stderr.write(`${result.message}\n`);
+        return result.code;
+    }
+    if (args.json) {
+        process.stdout.write(`${JSON.stringify(result.report, null, 2)}\n`);
+    }
+    else {
+        process.stdout.write(`${result.message}\n`);
+    }
+    return result.code;
+}
+if (process.argv[1] !== undefined && fileURLToPath(import.meta.url) === process.argv[1]) {
+    process.exit(run(process.argv.slice(2)));
+}
+//# sourceMappingURL=eval-report.js.map

package/dist/eval-run.d.ts

@@ -0,0 +1,17 @@
+#!/usr/bin/env node
+interface ParsedArgs {
+    projectRoot: string;
+    model: string;
+    seeds: number[];
+    directiveVersion?: string;
+    harness?: string;
+    json: boolean;
+    noPersist: boolean;
+    error?: string;
+}
+/** Parse eval-run CLI args. */
+export declare function parseArgs(argv: string[]): ParsedArgs;
+/** Run eval:run and return the process exit code. */
+export declare function run(argv: string[]): number;
+export {};
+//# sourceMappingURL=eval-run.d.ts.map

package/dist/eval-run.js

@@ -0,0 +1,122 @@
+#!/usr/bin/env node
+import { resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+import { runGoldenEval } from "@deftai/directive-core/eval/run";
+/** Parse eval-run CLI args. */
+export function parseArgs(argv) {
+    const parsed = {
+        projectRoot: ".",
+        model: "",
+        seeds: [],
+        json: false,
+        noPersist: false,
+    };
+    for (let i = 0; i < argv.length; i += 1) {
+        const arg = argv[i];
+        if (arg === "--json") {
+            parsed.json = true;
+        }
+        else if (arg === "--no-persist") {
+            parsed.noPersist = true;
+        }
+        else if (arg === "--model") {
+            const value = argv[i + 1];
+            if (value === undefined) {
+                return { ...parsed, error: "argument --model: expected one argument" };
+            }
+            parsed.model = value;
+            i += 1;
+        }
+        else if (arg?.startsWith("--model=")) {
+            parsed.model = arg.slice("--model=".length);
+        }
+        else if (arg === "--seed") {
+            const value = argv[i + 1];
+            if (value === undefined) {
+                return { ...parsed, error: "argument --seed: expected one argument" };
+            }
+            const seedNum = Number(value);
+            if (!Number.isFinite(seedNum)) {
+                return { ...parsed, error: `argument --seed: expected an integer, got: ${value}` };
+            }
+            parsed.seeds.push(seedNum);
+            i += 1;
+        }
+        else if (arg?.startsWith("--seed=")) {
+            const rawSeed = arg.slice("--seed=".length);
+            const seedNum = Number(rawSeed);
+            if (!Number.isFinite(seedNum)) {
+                return { ...parsed, error: `argument --seed: expected an integer, got: ${rawSeed}` };
+            }
+            parsed.seeds.push(seedNum);
+        }
+        else if (arg === "--directive-version") {
+            const value = argv[i + 1];
+            if (value === undefined) {
+                return { ...parsed, error: "argument --directive-version: expected one argument" };
+            }
+            parsed.directiveVersion = value;
+            i += 1;
+        }
+        else if (arg?.startsWith("--directive-version=")) {
+            parsed.directiveVersion = arg.slice("--directive-version=".length);
+        }
+        else if (arg === "--harness") {
+            const value = argv[i + 1];
+            if (value === undefined) {
+                return { ...parsed, error: "argument --harness: expected one argument" };
+            }
+            parsed.harness = value;
+            i += 1;
+        }
+        else if (arg?.startsWith("--harness=")) {
+            parsed.harness = arg.slice("--harness=".length);
+        }
+        else if (arg === "--project-root") {
+            const value = argv[i + 1];
+            if (value === undefined) {
+                return { ...parsed, error: "argument --project-root: expected one argument" };
+            }
+            parsed.projectRoot = value;
+            i += 1;
+        }
+        else if (arg?.startsWith("--project-root=")) {
+            parsed.projectRoot = arg.slice("--project-root=".length);
+        }
+        else {
+            return { ...parsed, error: `unrecognized argument: ${arg}` };
+        }
+    }
+    return parsed;
+}
+/** Run eval:run and return the process exit code. */
+export function run(argv) {
+    const args = parseArgs(argv);
+    if (args.error !== undefined) {
+        process.stderr.write(`eval:run: ${args.error}\n`);
+        return 2;
+    }
+    const result = runGoldenEval({
+        projectRoot: resolve(args.projectRoot),
+        model: args.model,
+        seeds: args.seeds.length > 0 ? args.seeds : undefined,
+        directiveVersion: args.directiveVersion,
+        harness: args.harness,
+        persist: !args.noPersist,
+    });
+    if (result.record === null) {
+        process.stderr.write(`${result.message}\n`);
+        return result.code;
+    }
+    if (args.json) {
+        process.stdout.write(`${JSON.stringify(result.record, null, 2)}\n`);
+    }
+    else {
+        process.stdout.write(`${result.message}\n`);
+    }
+    return result.code;
+}
+if (process.argv[1] !== undefined && fileURLToPath(import.meta.url) === process.argv[1]) {
+    process.exit(run(process.argv.slice(2)));
+}
+//# sourceMappingURL=eval-run.js.map

package/dist/policy.d.ts

@@ -7,7 +7,7 @@ interface ShowArgs {
     error?: string;
 }
 interface SetArgs {
-    cmd: "show" | "enforce-branches" | "allow-direct-commits" | "resolve";
+    cmd: "show" | "enforce-branches" | "allow-direct-commits" | "enable-value-feedback" | "resolve";
     confirm: boolean;
     actor: string;
     note: string;

package/dist/policy.js

@@ -4,9 +4,9 @@
  * mirroring scripts/_policy_show_cli.py and scripts/policy_set.py.
  */
 import { existsSync } from "node:fs";
-import { join, resolve as pathResolve } from "node:path";
+import { resolve as pathResolve, relative } from "node:path";
 import { fileURLToPath } from "node:url";
-import { disclosureLine, inspectAllPolicies, inspectOnePolicy, PROJECT_DEFINITION_REL_PATH, pythonListRepr, pythonStringRepr, registeredPolicyNames, renderJson, renderText, resolvePolicy, setPolicy, } from "@deftai/directive-core/policy";
+import { describeShadowedPlanExtension, detectShadowedPlanExtensions, disclosureLine, enableValueFeedback, FIELD_VALUE_FEEDBACK, FIELD_VALUE_FEEDBACK_CLI_ALIAS, formatValueFeedbackStatusLine, inspectAllPolicies, inspectOnePolicy, loadProjectDefinition, projectDefinitionPath, pythonListRepr, pythonStringRepr, registeredPolicyNames, renderJson, renderText, resolvePolicy, resolveValueFeedback, setPolicy, } from "@deftai/directive-core/policy";
 const CAPABILITY_COST_DISCLOSURE = "\u26a0 Capability-cost disclosure -- enabling direct commits to the default " +
     "branch turns OFF the deft branch-protection policy.\n" +
     "  \u2022 Pre-commit + pre-push hooks will no longer block default-branch " +
@@ -112,7 +112,8 @@ export function parseShowArgs(argv) {
 /** Parse argv for the policy CLI (show + set subcommands). */
 export function parseArgs(argv) {
     if (argv.length === 0) {
-        return makeSetError("usage: policy [show|enforce-branches|allow-direct-commits|resolve] ...");
+        const usage = "usage: policy [show|enforce-branches|allow-direct-commits|enable-value-feedback|resolve] ...";
+        return makeSetError(usage);
     }
     const cmd = argv[0];
     if (cmd === "show") {
@@ -143,11 +144,15 @@ export function parseArgs(argv) {
             error: root.error,
         };
     }
-    if (cmd === "enforce-branches" || cmd === "allow-direct-commits") {
+    if (cmd === "enforce-branches" ||
+        cmd === "allow-direct-commits" ||
+        cmd === "enable-value-feedback") {
         let confirm = false;
         let actor = cmd === "enforce-branches"
             ? "task policy:enforce-branches"
-            : "task policy:allow-direct-commits";
+            : cmd === "allow-direct-commits"
+                ? "task policy:allow-direct-commits"
+                : "task policy:enable-value-feedback";
         let note = "";
         let projectRoot = ".";
         for (let i = 1; i < argv.length; i += 1) {
@@ -202,13 +207,33 @@ export function parseArgs(argv) {
     }
     return makeSetError(`unknown subcommand: ${cmd}`);
 }
+/**
+ * Emit a loud warning to stderr for every plan-extension key whose bare block
+ * silently shadows the namespaced form (#2301). Never fails / throws: a missing
+ * or malformed PROJECT-DEFINITION simply yields no warnings.
+ */
+function emitPlanExtensionShadowWarnings(projectRoot) {
+    const [data] = loadProjectDefinition(projectRoot);
+    if (data === null)
+        return;
+    const shadows = detectShadowedPlanExtensions(data.plan);
+    for (const shadow of shadows) {
+        process.stderr.write(`[policy:show] WARNING: ${describeShadowedPlanExtension(shadow)}\n`);
+    }
+}
+function valueFeedbackGateSummary(projectRoot) {
+    return formatValueFeedbackStatusLine(resolveValueFeedback(projectRoot));
+}
 function runShow(args) {
     const projectRoot = pathResolve(args.projectRoot);
-    const pdPath = join(projectRoot, PROJECT_DEFINITION_REL_PATH);
+    // Layout-aware (#2302): name the resolved PROJECT-DEFINITION path (xbrief on a
+    // migrated tree, else vbrief) instead of the hardcoded vbrief/ literal.
+    const pdPath = projectDefinitionPath(projectRoot);
     if (!existsSync(pdPath)) {
         process.stderr.write(`[policy:show] PROJECT-DEFINITION not found at ${pdPath}; ` +
             "rendering framework defaults.\n");
     }
+    emitPlanExtensionShadowWarnings(projectRoot);
     if (args.field !== null) {
         const field = inspectOnePolicy(args.field, projectRoot);
         if (field === null) {
@@ -222,6 +247,9 @@ function runShow(args) {
         }
         else {
             process.stdout.write(`${renderText([field])}\n`);
+            if (field.name === FIELD_VALUE_FEEDBACK || args.field === FIELD_VALUE_FEEDBACK_CLI_ALIAS) {
+                process.stdout.write(`\n${valueFeedbackGateSummary(projectRoot)}\n`);
+            }
         }
         return 0;
     }
@@ -250,6 +278,15 @@ function runResolve(projectRoot) {
     process.stdout.write(`${disclosureLine(result)}\n`);
     return 0;
 }
+function runEnableValueFeedback(args) {
+    const result = enableValueFeedback(pathResolve(args.projectRoot), {
+        confirm: args.confirm,
+        actor: args.actor,
+        note: args.note,
+    });
+    process.stdout.write(result.stdout);
+    return result.exitCode;
+}
 function runSet(args) {
     const projectRoot = pathResolve(args.projectRoot);
     if (args.cmd === "allow-direct-commits" && !args.confirm) {
@@ -280,7 +317,8 @@ function runSet(args) {
         const message = err instanceof Error ? err.message : String(err);
         if (message.includes("PROJECT-DEFINITION not found")) {
             process.stderr.write(`\u274c ${message}\n`);
-            process.stderr.write("  Recovery: run `task setup` to generate vbrief/PROJECT-DEFINITION.vbrief.json.\n");
+            const pdRel = relative(projectRoot, projectDefinitionPath(projectRoot));
+            process.stderr.write(`  Recovery: run \`task setup\` to generate ${pdRel}.\n`);
             return 2;
         }
         process.stderr.write(`\u274c Config error: ${message}\n`);
@@ -308,6 +346,9 @@ export function run(argv) {
     if (args.cmd === "enforce-branches" || args.cmd === "allow-direct-commits") {
         return runSet(args);
     }
+    if (args.cmd === "enable-value-feedback") {
+        return runEnableValueFeedback(args);
+    }
     return 2;
 }
 if (process.argv[1] !== undefined && fileURLToPath(import.meta.url) === process.argv[1]) {

package/dist/triage-bulk.js

@@ -1,5 +1,4 @@
 #!/usr/bin/env node
-import { join, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 import { bulkActionWithDefaults, CacheEmptyError, } from "@deftai/directive-core/dist/triage/bulk/index.js";
 import { interceptHelp } from "@deftai/directive-core/dist/triage/help/index.js";
@@ -125,8 +124,10 @@ export function run(argv) {
         process.stderr.write("triage_bulk: --repo is required\n");
         return 2;
     }
+    // #2279: the bulk path defaults to native TypeScript actions. It no longer
+    // resolves a project/DEFT_ROOT `scripts/` dir, so an attacker-planted
+    // `scripts/triage_actions.py` can never be executed. Pass only projectRoot.
     const projectRoot = process.cwd();
-    const frameworkRoot = resolve(process.env.DEFT_ROOT ?? projectRoot);
     try {
         bulkActionWithDefaults(args.action, args.repo, {
             label: args.label,
@@ -135,8 +136,7 @@ export function run(argv) {
             cluster: args.cluster,
             reason: args.reason,
             reAction: args.reAction,
-            deftRoot: projectRoot,
-            scriptsDir: join(frameworkRoot, "scripts"),
+            projectRoot,
         });
     }
     catch (exc) {

package/dist/triage-queue.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { resolve } from "node:path";
 import { fileURLToPath } from "node:url";
-import { resolveEvalPath } from "@deftai/directive-core/dist/layout/resolve.js";
+import { resolveTriageCachePath } from "@deftai/directive-core/dist/triage/cache-path.js";
 import { activeReferencedIssueNumbers, buildQueue, collectOrphanIssueNumbers, DEFAULT_QUEUE_LIMIT, loadCachedIssues, loadSliceRecords, readAuditEntries, reconcileLiveOpenState, renderQueue, resolveRankingLabels, resolveRepo, } from "@deftai/directive-core/dist/triage/queue/index.js";
 import { resolveScopeIgnores } from "@deftai/directive-core/dist/triage/scope-drift/index.js";
 /** Parse triage-queue CLI args for the queue subcommand. */
@@ -146,12 +146,12 @@ export function run(argv, options = {}) {
     const issuesWithClosed = loadCachedIssues(repo, { projectRoot, includeClosed: true });
     const issuesByNumber = new Map(issuesWithClosed.map((row) => [row.number, row]));
     const auditEntries = readAuditEntries(repo, {
-        auditLogPath: args.auditLog ?? resolveEvalPath(projectRoot, "candidates.jsonl"),
+        auditLogPath: args.auditLog ?? resolveTriageCachePath(projectRoot, "candidates.jsonl"),
     });
     const rankingLabels = resolveRankingLabels(projectRoot);
     const activeRefs = activeReferencedIssueNumbers(projectRoot);
     const sliceRecords = loadSliceRecords({
-        slicesLogPath: args.slicesLog ?? resolveEvalPath(projectRoot, "slices.jsonl"),
+        slicesLogPath: args.slicesLog ?? resolveTriageCachePath(projectRoot, "slices.jsonl"),
     });
     const orphanNumbers = collectOrphanIssueNumbers(sliceRecords, issuesByNumber);
     const limit = args.limit === 0 ? null : Math.max(0, args.limit);

package/dist/triage-summary.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { resolve } from "node:path";
 import { fileURLToPath } from "node:url";
-import { resolveEvalPath } from "@deftai/directive-core/dist/layout/resolve.js";
+import { resolveTriageCachePath } from "@deftai/directive-core/dist/triage/cache-path.js";
 import { appendHistory, computeSummary, formatSummary, pythonStyleStringify, summaryResultToRecord, utcIso, } from "@deftai/directive-core/dist/triage/summary/index.js";
 /** Parse triage-summary CLI args, mirroring the Python argparse surface. */
 export function parseArgs(argv) {
@@ -67,7 +67,7 @@ export function run(argv) {
         process.stdout.write(`${line}\n`);
     }
     if (!args.noHistory) {
-        const historyPath = resolveEvalPath(projectRoot, "summary-history.jsonl");
+        const historyPath = resolveTriageCachePath(projectRoot, "summary-history.jsonl");
         appendHistory(historyPath, result, line, { emittedAt });
     }
     return 0;

package/dist/triage-welcome.d.ts

@@ -4,6 +4,8 @@ interface ParsedArgs {
     onboard: boolean;
     noHistory: boolean;
     taskPrefix: string;
+    preset: string | null;
+    wipCap: number | null;
     error?: string;
 }
 export declare function parseArgs(argv: string[]): ParsedArgs;

package/dist/triage-welcome.js

@@ -2,13 +2,17 @@
 import { statSync } from "node:fs";
 import { resolve } from "node:path";
 import { fileURLToPath } from "node:url";
+import { interceptHelp } from "@deftai/directive-core/dist/triage/help/index.js";
 import { runDefaultMode } from "@deftai/directive-core/dist/triage/welcome/default-mode.js";
+import { runOnboardMode } from "@deftai/directive-core/dist/triage/welcome/onboard.js";
 export function parseArgs(argv) {
     const parsed = {
         projectRoot: process.env.DEFT_PROJECT_ROOT ?? ".",
         onboard: false,
         noHistory: false,
         taskPrefix: process.env.DEFT_TASK_PREFIX ?? "",
+        preset: null,
+        wipCap: null,
     };
     for (let i = 0; i < argv.length; i += 1) {
         const arg = argv[i];
@@ -16,6 +20,36 @@ export function parseArgs(argv) {
             parsed.onboard = true;
         else if (arg === "--no-history")
             parsed.noHistory = true;
+        else if (arg === "--preset") {
+            const value = argv[i + 1];
+            if (value === undefined)
+                return { ...parsed, error: "argument --preset: expected one argument" };
+            parsed.preset = value;
+            i += 1;
+        }
+        else if (arg?.startsWith("--preset=")) {
+            const value = arg.slice("--preset=".length);
+            if (value === "")
+                return { ...parsed, error: "argument --preset: expected one argument" };
+            parsed.preset = value;
+        }
+        else if (arg === "--wip-cap") {
+            const value = argv[i + 1];
+            if (value === undefined)
+                return { ...parsed, error: "argument --wip-cap: expected one argument" };
+            const parsedCap = Number(value);
+            if (!Number.isInteger(parsedCap))
+                return { ...parsed, error: `argument --wip-cap: expected an integer, got ${value}` };
+            parsed.wipCap = parsedCap;
+            i += 1;
+        }
+        else if (arg?.startsWith("--wip-cap=")) {
+            const value = arg.slice("--wip-cap=".length);
+            const parsedCap = Number(value);
+            if (!Number.isInteger(parsedCap))
+                return { ...parsed, error: `argument --wip-cap: expected an integer, got ${value}` };
+            parsed.wipCap = parsedCap;
+        }
         else if (arg === "--project-root") {
             const value = argv[i + 1];
             if (value === undefined)
@@ -46,6 +80,10 @@ export function parseArgs(argv) {
     return parsed;
 }
 export function run(argv) {
+    const helpRc = interceptHelp("triage_welcome", argv);
+    if (helpRc !== null) {
+        return helpRc;
+    }
     const args = parseArgs(argv);
     if (args.error !== undefined) {
         process.stderr.write(`triage:welcome: ${args.error}\n`);
@@ -63,8 +101,13 @@ export function run(argv) {
         return 2;
     }
     if (args.onboard) {
-        process.stderr.write("triage:welcome: --onboard is not implemented in the TypeScript CLI yet.\n");
-        return 2;
+        const onboardOutcome = runOnboardMode(projectRoot, {
+            preset: args.preset,
+            wipCap: args.wipCap,
+            writeHistory: !args.noHistory,
+            taskPrefix: args.taskPrefix || null,
+        });
+        return onboardOutcome.exitCode;
     }
     const outcome = runDefaultMode(projectRoot, {
         writeHistory: !args.noHistory,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@deftai/directive",
-  "version": "0.69.0",
+  "version": "0.71.0",
   "description": "Directive CLI — npm install path for the Deft Directive framework.",
   "type": "module",
   "main": "./dist/index.js",
@@ -31,8 +31,8 @@
     "provenance": true
   },
   "dependencies": {
-    "@deftai/directive-core": "^0.69.0",
-    "@deftai/directive-content": "^0.69.0"
+    "@deftai/directive-core": "^0.71.0",
+    "@deftai/directive-content": "^0.71.0"
   },
   "scripts": {
     "build": "tsc -b"