@humanbased/crosscheck 0.14.0

package/dist/commands/init.js

@@ -0,0 +1,183 @@
+import { execSync } from 'child_process';
+import { existsSync, writeFileSync, readFileSync, mkdirSync } from 'fs';
+import { join } from 'path';
+import { homedir } from 'os';
+import chalk from 'chalk';
+import { checkCodexAuth } from '../reviewers/codex.js';
+import { checkClaudeAuth } from '../reviewers/claude.js';
+import { getWebhookSecret, getWebhookSecretPath, detectGitHubLogin, patchAllowedAuthors, loadConfig, resolveConfigPath } from '../config/loader.js';
+export async function runChecks() {
+    const results = [];
+    let aiCliCount = 0;
+    // Check codex CLI
+    try {
+        const version = execSync('codex --version 2>&1', { encoding: 'utf8' }).trim();
+        const auth = await checkCodexAuth();
+        if (auth.ok)
+            aiCliCount++;
+        results.push({ label: 'codex CLI', ok: auth.ok, detail: `${version} — ${auth.detail}`, fix: auth.ok ? undefined : 'Run: codex login --device-auth' });
+    }
+    catch {
+        results.push({ label: 'codex CLI', ok: false, detail: 'not found', fix: 'Install: npm install -g @openai/codex' });
+    }
+    // Check claude CLI
+    try {
+        const auth = await checkClaudeAuth();
+        if (auth.ok)
+            aiCliCount++;
+        results.push({ label: 'claude CLI', ok: auth.ok, detail: auth.detail, fix: auth.ok ? undefined : 'Run: claude auth login' });
+    }
+    catch {
+        results.push({ label: 'claude CLI', ok: false, detail: 'not found', fix: 'Install: npm install -g @anthropic-ai/claude-code' });
+    }
+    // Check gh CLI — authenticated if stored credentials OR GITHUB_TOKEN env var is set
+    const envToken = process.env.GITHUB_TOKEN ?? process.env.GH_TOKEN;
+    let ghAuthed = false;
+    try {
+        const version = execSync('gh --version 2>&1', { encoding: 'utf8' }).split('\n')[0];
+        // gh auth status exits non-zero when GITHUB_TOKEN env var is set — handle separately
+        let authOutput = '';
+        try {
+            authOutput = execSync('gh auth status 2>&1', { encoding: 'utf8' });
+        }
+        catch { /* GITHUB_TOKEN in use */ }
+        const keyringAuthed = authOutput.includes('Logged in');
+        ghAuthed = keyringAuthed || !!envToken;
+        const detail = !!envToken && !keyringAuthed
+            ? `${version} — authenticated via GITHUB_TOKEN`
+            : version;
+        results.push({ label: 'gh CLI', ok: ghAuthed, detail, fix: ghAuthed ? undefined : 'Run: gh auth login' });
+    }
+    catch {
+        results.push({ label: 'gh CLI', ok: false, detail: 'not found', fix: 'Install: brew install gh && gh auth login' });
+    }
+    // Token is resolvable if env var is set OR if gh keyring has a token (getGithubToken() falls back to `gh auth token`)
+    const tokenResolvable = !!envToken || ghAuthed;
+    const tokenDetail = envToken ? 'set via env' : ghAuthed ? 'via gh auth login' : 'missing';
+    results.push({ label: 'GITHUB_TOKEN', ok: tokenResolvable, detail: tokenDetail, fix: tokenResolvable ? undefined : 'Set GITHUB_TOKEN or run: gh auth login' });
+    // Check admin:org_hook scope — needed for org-level webhook registration in watch/serve
+    if (ghAuthed) {
+        try {
+            const statusOutput = execSync('gh auth status 2>&1', {
+                encoding: 'utf8',
+                env: { ...process.env, GITHUB_TOKEN: undefined, GH_TOKEN: undefined },
+            });
+            const scopeMatch = statusOutput.match(/Token scopes:\s*(.+)/);
+            if (scopeMatch) {
+                const scopes = scopeMatch[1];
+                const hasOrgHook = /admin:org_hook|'admin:org'|"admin:org"/.test(scopes);
+                results.push({
+                    label: 'org webhook scope',
+                    ok: hasOrgHook,
+                    detail: hasOrgHook ? 'admin:org_hook present' : `not granted (scopes: ${scopes.trim()})`,
+                    fix: hasOrgHook ? undefined : 'gh auth refresh -s admin:org_hook  (required for org-level webhooks)',
+                });
+            }
+        }
+        catch { /* gh not available or scope line absent — skip silently */ }
+    }
+    // Check WEBHOOK_SECRET — auto-generated if missing, so always ok
+    const fromEnv = process.env.CROSSCHECK_WEBHOOK_SECRET ?? process.env.GITHUB_WEBHOOK_SECRET;
+    const secretDetail = fromEnv
+        ? 'set via env'
+        : `auto-managed at ${getWebhookSecretPath()}`;
+    getWebhookSecret(); // ensure it's generated/persisted
+    results.push({ label: 'WEBHOOK_SECRET', ok: true, detail: secretDetail });
+    return { results, aiCliCount };
+}
+function printCheck({ label, ok, detail, fix }) {
+    const icon = ok ? chalk.green('✓') : chalk.red('✗');
+    const labelStr = chalk.bold(label.padEnd(20));
+    console.log(`  ${icon} ${labelStr} ${detail}`);
+    if (!ok && fix)
+        console.log(`      ${chalk.dim('→')} ${chalk.yellow(fix)}`);
+}
+export async function runInit(configPath) {
+    console.log(chalk.bold('\ncrosscheck — environment check\n'));
+    const { results: checks, aiCliCount } = await runChecks();
+    for (const check of checks)
+        printCheck(check);
+    // AI CLI checks: only BOTH missing is a hard blocker. One CLI = single-vendor mode (still usable).
+    const aiChecks = checks.filter(c => c.label === 'codex CLI' || c.label === 'claude CLI');
+    const nonAiFailures = checks.filter(c => !aiChecks.includes(c) && !c.ok && c.fix);
+    if (aiCliCount === 0) {
+        // Neither AI CLI is authenticated — hard failure
+        const total = nonAiFailures.length + 1; // +1 for "no AI CLI" pseudo-failure
+        console.log(chalk.red(`\nAt least one AI CLI (codex or claude) must be authenticated before crosscheck can run.\n`));
+        if (nonAiFailures.length > 0) {
+            console.log(chalk.yellow(`${nonAiFailures.length} other issue(s) also need attention.\n`));
+        }
+    }
+    else if (nonAiFailures.length > 0) {
+        console.log(chalk.yellow(`\n${nonAiFailures.length} issue(s) need attention before crosscheck can run fully.\n`));
+        if (aiCliCount === 1) {
+            const missing = aiChecks.find(c => !c.ok)?.label ?? 'one AI CLI';
+            console.log(chalk.dim(`Note: ${missing} is not available — running in single-vendor mode (cross-vendor review disabled).\n`));
+        }
+    }
+    else {
+        if (aiCliCount === 1) {
+            const missing = aiChecks.find(c => !c.ok)?.label ?? 'one AI CLI';
+            console.log(chalk.yellow(`\nNote: ${missing} is not available — running in single-vendor mode (cross-vendor review disabled).\n`));
+        }
+        else {
+            console.log(chalk.green('\nAll checks passed.\n'));
+        }
+    }
+    // Write config if none exists, pre-filling allowed_authors with the detected GitHub login.
+    // Prefer the active config (local project file or explicit path) before falling back to
+    // the global default, so `crosscheck init` patches the same file that `watch` reads.
+    const dest = configPath ?? resolveConfigPath() ?? join(homedir(), '.crosscheck', 'config.yml');
+    mkdirSync(join(homedir(), '.crosscheck'), { recursive: true });
+    if (!existsSync(dest)) {
+        const examplePath = new URL('../../crosscheck.config.example.yml', import.meta.url).pathname;
+        if (existsSync(examplePath)) {
+            let content = readFileSync(examplePath, 'utf8');
+            const login = detectGitHubLogin();
+            if (login) {
+                // Uncomment allowed_authors placeholder
+                content = content.replace(/  # allowed_authors:\n(  #[^\n]*\n)+/, `  allowed_authors:\n    - ${login}  # auto-detected from gh auth\n`);
+                // author_routes is intentionally left commented out. In cross-vendor mode with
+                // both vendors enabled (the default), routes for an author who uses both
+                // agents are structurally wrong — attribution detection + fallback_reviewer
+                // are the correct path. `crosscheck onboard` writes the route only when the
+                // user picks a single authorVendor.
+            }
+            writeFileSync(dest, content);
+            const hint = login ? `allowed_authors set to ${chalk.cyan(login)}` : 'edit to customize';
+            console.log(chalk.dim(`Config written to ${dest} — ${hint}.\n`));
+        }
+    }
+    else {
+        // Config exists — patch allowed_authors if still empty.
+        // author_routes is intentionally not auto-patched: `crosscheck onboard` writes it
+        // only when the user picks a single authorVendor, since cross-vendor + both
+        // enabled bypasses the route (see detector.ts).
+        const existing = loadConfig(resolveConfigPath(configPath) ?? dest);
+        const login = detectGitHubLogin();
+        let patched = false;
+        if (login) {
+            if (existing.routing.allowed_authors.length === 0) {
+                patched = patchAllowedAuthors(dest, login) || patched;
+            }
+        }
+        if (patched) {
+            console.log(chalk.green(`  ✓ routing updated for ${chalk.cyan(login ?? 'unknown')} in ${dest}\n`));
+        }
+        else {
+            console.log(chalk.dim(`Config already exists at ${dest}\n`));
+        }
+    }
+    // Smee-client is optional but improves watch mode reliability.
+    // Check if it's installed and show a one-line tip if not.
+    try {
+        execSync('smee --version', { stdio: 'ignore' });
+    }
+    catch {
+        console.log(chalk.dim('Tip: install smee-client for reliable webhook delivery (events queued while offline):'));
+        console.log(chalk.dim('  npm install -g smee-client'));
+        console.log(chalk.dim('  Then set tunnel: backend: smee in your config.\n'));
+    }
+    console.log(chalk.dim('  Run  crosscheck onboard  to configure scope and persona.\n'));
+}
+//# sourceMappingURL=init.js.map

package/dist/commands/init.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AACxC,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,IAAI,CAAA;AACvE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAA;AAC5B,OAAO,KAAK,MAAM,OAAO,CAAA;AACzB,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AACxD,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AASnJ,MAAM,CAAC,KAAK,UAAU,SAAS;IAC7B,MAAM,OAAO,GAAkB,EAAE,CAAA;IACjC,IAAI,UAAU,GAAG,CAAC,CAAA;IAElB,kBAAkB;IAClB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,QAAQ,CAAC,sBAAsB,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;QAC7E,MAAM,IAAI,GAAG,MAAM,cAAc,EAAE,CAAA;QACnC,IAAI,IAAI,CAAC,EAAE;YAAE,UAAU,EAAE,CAAA;QACzB,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,OAAO,MAAM,IAAI,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gCAAgC,EAAE,CAAC,CAAA;IACvJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,uCAAuC,EAAE,CAAC,CAAA;IACpH,CAAC;IAED,mBAAmB;IACnB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,eAAe,EAAE,CAAA;QACpC,IAAI,IAAI,CAAC,EAAE;YAAE,UAAU,EAAE,CAAA;QACzB,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,wBAAwB,EAAE,CAAC,CAAA;IAC9H,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,mDAAmD,EAAE,CAAC,CAAA;IACjI,CAAC;IAED,oFAAoF;IACpF,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAA;IACjE,IAAI,QAAQ,GAAG,KAAK,CAAA;IACpB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,QAAQ,CAAC,mBAAmB,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;QAClF,qFAAqF;QACrF,IAAI,UAAU,GAAG,EAAE,CAAA;QACnB,IAAI,CAAC;YAAC,UAAU,GAAG,QAAQ,CAAC,qBAAqB,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,yBAAyB,CAAC,CAAC;QAC9G,MAAM,aAAa,GAAG,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;QACtD,QAAQ,GAAG,aAAa,IAAI,CAAC,CAAC,QAAQ,CAAA;QACtC,MAAM,MAAM,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,aAAa;YACzC,CAAC,CAAC,GAAG,OAAO,mCAAmC;YAC/C,CAAC,CAAC,OAAO,CAAA;QACX,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,oBAAoB,EAAE,CAAC,CAAA;IAC3G,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,2CAA2C,EAAE,CAAC,CAAA;IACrH,CAAC;IACD,sHAAsH;IACtH,MAAM,eAAe,GAAG,CAAC,CAAC,QAAQ,IAAI,QAAQ,CAAA;IAC9C,MAAM,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAA;IACzF,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,EAAE,eAAe,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,wCAAwC,EAAE,CAAC,CAAA;IAE9J,wFAAwF;IACxF,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,QAAQ,CAAC,qBAAqB,EAAE;gBACnD,QAAQ,EAAE,MAAM;gBAChB,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE;aACtE,CAAC,CAAA;YACF,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAA;YAC7D,IAAI,UAAU,EAAE,CAAC;gBACf,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,CAAA;gBAC5B,MAAM,UAAU,GAAG,wCAAwC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;gBACxE,OAAO,CAAC,IAAI,CAAC;oBACX,KAAK,EAAE,mBAAmB;oBAC1B,EAAE,EAAE,UAAU;oBACd,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,wBAAwB,MAAM,CAAC,IAAI,EAAE,GAAG;oBACxF,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,sEAAsE;iBACrG,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,2DAA2D,CAAC,CAAC;IACzE,CAAC;IAED,iEAAiE;IACjE,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAA;IAC1F,MAAM,YAAY,GAAG,OAAO;QAC1B,CAAC,CAAC,aAAa;QACf,CAAC,CAAC,mBAAmB,oBAAoB,EAAE,EAAE,CAAA;IAC/C,gBAAgB,EAAE,CAAA,CAAC,kCAAkC;IACrD,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAA;IAEzE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,CAAA;AAChC,CAAC;AAED,SAAS,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAe;IACzD,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IACnD,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAA;IAC7C,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,QAAQ,IAAI,MAAM,EAAE,CAAC,CAAA;IAC9C,IAAI,CAAC,EAAE,IAAI,GAAG;QAAE,OAAO,CAAC,GAAG,CAAC,SAAS,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;AAC7E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,UAAmB;IAC/C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC,CAAA;IAE7D,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,SAAS,EAAE,CAAA;IACzD,KAAK,MAAM,KAAK,IAAI,MAAM;QAAE,UAAU,CAAC,KAAK,CAAC,CAAA;IAE7C,mGAAmG;IACnG,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,WAAW,IAAI,CAAC,CAAC,KAAK,KAAK,YAAY,CAAC,CAAA;IACxF,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,CAAA;IAEjF,IAAI,UAAU,KAAK,CAAC,EAAE,CAAC;QACrB,iDAAiD;QACjD,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,GAAG,CAAC,CAAA,CAAC,oCAAoC;QAC3E,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,4FAA4F,CAAC,CAAC,CAAA;QACpH,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,aAAa,CAAC,MAAM,wCAAwC,CAAC,CAAC,CAAA;QAC5F,CAAC;IACH,CAAC;SAAM,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,aAAa,CAAC,MAAM,6DAA6D,CAAC,CAAC,CAAA;QACjH,IAAI,UAAU,KAAK,CAAC,EAAE,CAAC;YACrB,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,IAAI,YAAY,CAAA;YAChE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,OAAO,qFAAqF,CAAC,CAAC,CAAA;QAC/H,CAAC;IACH,CAAC;SAAM,CAAC;QACN,IAAI,UAAU,KAAK,CAAC,EAAE,CAAC;YACrB,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,IAAI,YAAY,CAAA;YAChE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,OAAO,qFAAqF,CAAC,CAAC,CAAA;QACpI,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAA;QACpD,CAAC;IACH,CAAC;IAED,2FAA2F;IAC3F,wFAAwF;IACxF,qFAAqF;IACrF,MAAM,IAAI,GAAG,UAAU,IAAI,iBAAiB,EAAE,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,YAAY,CAAC,CAAA;IAC9F,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,aAAa,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC9D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,qCAAqC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAA;QAC5F,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAC5B,IAAI,OAAO,GAAG,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;YAC/C,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAA;YACjC,IAAI,KAAK,EAAE,CAAC;gBACV,wCAAwC;gBACxC,OAAO,GAAG,OAAO,CAAC,OAAO,CACvB,sCAAsC,EACtC,6BAA6B,KAAK,kCAAkC,CACrE,CAAA;gBACD,+EAA+E;gBAC/E,yEAAyE;gBACzE,4EAA4E;gBAC5E,4EAA4E;gBAC5E,oCAAoC;YACtC,CAAC;YACD,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;YAC5B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,0BAA0B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,mBAAmB,CAAA;YACxF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,qBAAqB,IAAI,MAAM,IAAI,KAAK,CAAC,CAAC,CAAA;QAClE,CAAC;IACH,CAAC;SAAM,CAAC;QACN,wDAAwD;QACxD,kFAAkF;QAClF,4EAA4E;QAC5E,gDAAgD;QAChD,MAAM,QAAQ,GAAG,UAAU,CAAC,iBAAiB,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,CAAA;QAClE,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAA;QACjC,IAAI,OAAO,GAAG,KAAK,CAAA;QACnB,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,QAAQ,CAAC,OAAO,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAClD,OAAO,GAAG,mBAAmB,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,OAAO,CAAA;YACvD,CAAC;QACH,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,2BAA2B,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,SAAS,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC,CAAA;QACpG,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,4BAA4B,IAAI,IAAI,CAAC,CAAC,CAAA;QAC9D,CAAC;IACH,CAAC;IAED,+DAA+D;IAC/D,0DAA0D;IAC1D,IAAI,CAAC;QACH,QAAQ,CAAC,gBAAgB,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAA;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,uFAAuF,CAAC,CAAC,CAAA;QAC/G,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC,CAAA;QACtD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC,CAAA;IAC9E,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,8DAA8D,CAAC,CAAC,CAAA;AACxF,CAAC"}

package/dist/commands/issue.d.ts

@@ -0,0 +1,25 @@
+export interface QuestionAnswers {
+    reproducibility: string;
+    trigger: string;
+    impact: string;
+}
+export declare function parseDraft(output: string): {
+    title: string;
+    body: string;
+    labels?: string[];
+} | null;
+export declare function buildIssueContent(draft: {
+    title: string;
+    body: string;
+}, answers: QuestionAnswers): {
+    title: string;
+    body: string;
+};
+export declare function runIssue(opts: {
+    since?: string;
+    dryRun?: boolean;
+    yes?: boolean;
+    config?: string;
+    opportunities?: boolean;
+}): Promise<void>;
+//# sourceMappingURL=issue.d.ts.map

package/dist/commands/issue.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"issue.d.ts","sourceRoot":"","sources":["../../src/commands/issue.ts"],"names":[],"mappings":"AAwDA,MAAM,WAAW,eAAe;IAC9B,eAAe,EAAE,MAAM,CAAA;IACvB,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;CACf;AAED,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG,IAAI,CAuBpG;AAED,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EACtC,OAAO,EAAE,eAAe,GACvB;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAUjC;AAgKD,wBAAsB,QAAQ,CAAC,IAAI,EAAE;IACnC,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,GAAG,CAAC,EAAE,OAAO,CAAA;IACb,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,aAAa,CAAC,EAAE,OAAO,CAAA;CACxB,GAAG,OAAO,CAAC,IAAI,CAAC,CA2OhB"}

package/dist/commands/issue.js

@@ -0,0 +1,445 @@
+import { existsSync, mkdtempSync, writeFileSync, rmSync, readFileSync, readdirSync } from 'fs';
+import { fileURLToPath } from 'url';
+import { dirname, join, resolve } from 'path';
+import { homedir, platform, tmpdir } from 'os';
+import { createInterface } from 'readline';
+import chalk from 'chalk';
+import { execa } from 'execa';
+import { loadConfig } from '../config/loader.js';
+import { buildDiagnoseReport } from './diagnose.js';
+import { selectOptimizeAgent } from './optimize.js';
+import { sanitizeEntry, loadErrorEntriesForPattern, sanitizeDraftContent } from '../lib/log-analysis.js';
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = dirname(__filename);
+const PACKAGE_ROOT = resolve(__dirname, '..', '..');
+const LOG_DIR = join(homedir(), '.crosscheck', 'logs');
+const ISSUE_REPO = 'humanbased-ai/crosscheck';
+function loadIssueHarness(cwd) {
+    const candidates = [
+        join(cwd, 'ISSUE.md'),
+        join(cwd, '.crosscheck', 'ISSUE.md'),
+        join(PACKAGE_ROOT, 'ISSUE.md'),
+    ];
+    for (const p of candidates) {
+        if (existsSync(p))
+            return readFileSync(p, 'utf8');
+    }
+    return '';
+}
+function loadRawLogEntries(since) {
+    if (!existsSync(LOG_DIR))
+        return [];
+    const sinceMs = new Date(since).getTime();
+    const entries = [];
+    for (const f of readdirSync(LOG_DIR).sort()) {
+        if (!f.endsWith('.ndjson'))
+            continue;
+        const fileDate = f.replace('.ndjson', '');
+        if (fileDate < since.slice(0, 10))
+            continue;
+        const lines = readFileSync(join(LOG_DIR, f), 'utf8').split('\n');
+        for (const line of lines) {
+            const trimmed = line.trim();
+            if (!trimmed)
+                continue;
+            try {
+                const entry = JSON.parse(trimmed);
+                if (new Date(entry.ts).getTime() >= sinceMs)
+                    entries.push(entry);
+            }
+            catch { /* skip malformed lines */ }
+        }
+    }
+    return entries;
+}
+const { version: PKG_VERSION } = JSON.parse(readFileSync(join(PACKAGE_ROOT, 'package.json'), 'utf8'));
+export function parseDraft(output) {
+    const lines = output.split('\n');
+    const titleIdx = lines.findIndex(l => l.startsWith('TITLE:'));
+    if (titleIdx === -1)
+        return null;
+    const title = lines[titleIdx].replace(/^TITLE:\s*/, '').trim();
+    if (!title)
+        return null;
+    let sepIdx = -1;
+    for (let i = titleIdx + 1; i < lines.length; i++) {
+        if (lines[i].trim() === '---') {
+            sepIdx = i;
+            break;
+        }
+    }
+    if (sepIdx === -1)
+        return null;
+    const body = lines.slice(sepIdx + 1).join('\n').trim();
+    if (!body)
+        return null;
+    const labelsLine = lines.slice(titleIdx + 1, sepIdx).find(l => l.startsWith('LABELS:'));
+    const labels = labelsLine
+        ? labelsLine.replace(/^LABELS:\s*/, '').split(',').map(l => l.trim()).filter(Boolean)
+        : undefined;
+    return { title, body, labels };
+}
+export function buildIssueContent(draft, answers) {
+    const context = [
+        '',
+        '## User Context',
+        '',
+        `- **Reproducibility:** ${answers.reproducibility}`,
+        `- **Trigger command:** ${answers.trigger}`,
+        `- **Impact:** ${answers.impact}`,
+    ].join('\n');
+    return { title: draft.title, body: draft.body + context };
+}
+function defaultSince() {
+    const d = new Date();
+    d.setDate(d.getDate() - 3);
+    return d.toISOString().split('T')[0];
+}
+function daysBetween(since) {
+    return Math.max(1, Math.ceil((Date.now() - new Date(since).getTime()) / 86_400_000));
+}
+async function ask(question) {
+    const rl = createInterface({ input: process.stdin, output: process.stdout });
+    return new Promise(resolve => {
+        rl.question(question, answer => { rl.close(); resolve(answer.trim()); });
+    });
+}
+async function pickOne(label, choices) {
+    console.log(`\n  ${label}`);
+    choices.forEach((c, i) => console.log(`  [${i + 1}] ${c}`));
+    while (true) {
+        const raw = await ask('  > ');
+        const n = parseInt(raw, 10);
+        if (Number.isInteger(n) && n >= 1 && n <= choices.length)
+            return n - 1;
+        console.log(chalk.dim(`  Enter a number from 1 to ${choices.length}`));
+    }
+}
+function buildAgentPrompt(errorPattern, errorCount, daysSince, reviewer, entries, mode) {
+    const entriesFormatted = entries.map(e => JSON.stringify(sanitizeEntry(e))).join('\n');
+    return [
+        'You are drafting a GitHub issue for the crosscheck project (a cross-vendor AI code review CLI tool).',
+        '',
+        `Error pattern: ${errorPattern}`,
+        `Frequency: ${errorCount} occurrence${errorCount !== 1 ? 's' : ''} in the last ${daysSince} day${daysSince !== 1 ? 's' : ''}`,
+        reviewer ? `Reviewer at time of failure: ${reviewer}` : '',
+        '',
+        'Sanitized log entries (up to 5 most recent):',
+        entriesFormatted || '(none available)',
+        '',
+        `Environment: crosscheck ${PKG_VERSION} · ${platform()} · mode: ${mode}`,
+        '',
+        'Write a GitHub issue for this failure. Output exactly:',
+        'TITLE: <concise title under 80 characters>',
+        '---',
+        '<issue body in GitHub-flavored markdown>',
+        '',
+        'The body must contain: ## Description, ## Steps to Reproduce, ## Log Excerpt, ## Environment',
+        'In Log Excerpt, show the sanitized log entries as a json code block.',
+        'Do not invent details not present in the provided context.',
+    ].filter(Boolean).join('\n');
+}
+function buildOpportunityPrompt(harness, entries, daysSince, mode) {
+    const sample = entries
+        .filter(e => ['session_start', 'session_end', 'tunnel_opened', 'tunnel_closed',
+        'tunnel_error', 'webhook_registered', 'webhook_error', 'pr_received',
+        'review_complete', 'verdict_parse_failed', 'error'].includes(e.event))
+        .map(e => JSON.stringify(sanitizeEntry(e)))
+        .join('\n');
+    return [
+        harness,
+        '',
+        '---',
+        '',
+        `## Log data to analyze (last ${daysSince} day${daysSince !== 1 ? 's' : ''})`,
+        '',
+        `Environment: crosscheck ${PKG_VERSION} · ${platform()} · mode: ${mode}`,
+        `Total events loaded: ${entries.length}`,
+        '',
+        'Filtered events (session lifecycle, tunnel, webhook, review):',
+        '```',
+        sample || '(no matching events in range)',
+        '```',
+        '',
+        'Apply the analysis framework above. Identify the highest-priority issue or',
+        'improvement opportunity present in this data. Output exactly:',
+        'TITLE: <concise title under 80 characters>',
+        'LABELS: <comma-separated labels>',
+        '---',
+        '<issue body per the Output format section above>',
+        '',
+        'Report one issue only — the highest priority finding.',
+    ].join('\n');
+}
+// eslint-disable-next-line no-control-regex
+const ANSI_RE = /[\x1B\x9B][[()#;?]*(?:[0-9]{1,4}(?:;[0-9]{0,4})*)?[0-9A-ORZcf-nqry=><~]/g;
+async function runWithClaude(prompt) {
+    let result;
+    try {
+        result = await execa('claude', ['--print', prompt], {
+            timeout: 120_000,
+            stdin: 'ignore',
+            env: { ...process.env },
+        });
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        if (/not logged in|please run \/login|run \/login|403|request not allowed|failed to authenticate/i.test(msg)) {
+            throw new Error('claude is not authenticated — run: claude /login');
+        }
+        throw err;
+    }
+    return (result.stdout ?? result.stderr ?? '').replace(ANSI_RE, '').trim();
+}
+async function runWithCodex(prompt) {
+    const tmpDir = mkdtempSync(join(tmpdir(), 'crosscheck-issue-'));
+    try {
+        writeFileSync(join(tmpDir, 'ISSUE_PROMPT.md'), prompt);
+        const result = await execa('codex', [
+            'exec',
+            '--skip-git-repo-check',
+            'Read ISSUE_PROMPT.md and produce a GitHub issue draft. ' +
+                'Output exactly: TITLE: line, then ---, then the markdown body.',
+        ], {
+            cwd: tmpDir,
+            timeout: 180_000,
+            env: { ...process.env },
+        });
+        return (result.stdout ?? '').trim();
+    }
+    finally {
+        rmSync(tmpDir, { recursive: true, force: true });
+    }
+}
+function printDraft(title, body) {
+    const width = Math.min(process.stdout.columns ?? 80, 80);
+    const bar = '─'.repeat(width);
+    console.log('\n' + chalk.dim(bar));
+    console.log(chalk.bold(`  TITLE: ${title}`));
+    console.log(chalk.dim(bar));
+    for (const line of body.split('\n')) {
+        console.log(`  ${line}`);
+    }
+    console.log(chalk.dim(bar) + '\n');
+}
+function errorLabel(e) {
+    if (e.pattern === 'command_not_found')
+        return `command not found: ${e.command}`;
+    if (e.pattern === 'base_branch_missing')
+        return `base branch missing: ${e.branch}`;
+    return e.pattern;
+}
+export async function runIssue(opts) {
+    const since = opts.since ?? defaultSince();
+    if (!existsSync(LOG_DIR)) {
+        console.error(chalk.yellow('No logs found. Run `crosscheck watch` or `crosscheck serve` first.'));
+        return;
+    }
+    const config = loadConfig(opts.config);
+    const days = daysBetween(since);
+    // --- Opportunity analysis mode (--opportunities) ---
+    if (opts.opportunities) {
+        const harness = loadIssueHarness(process.cwd());
+        if (!harness) {
+            console.error(chalk.red('✗ ISSUE.md harness not found — expected at project root or .crosscheck/ISSUE.md'));
+            process.exit(1);
+        }
+        console.log(chalk.dim('  loading logs for opportunity analysis...'));
+        const allEntries = loadRawLogEntries(since);
+        if (allEntries.length === 0) {
+            console.log('  No log entries found in range — nothing to analyze');
+            return;
+        }
+        console.log(chalk.dim(`  ${allEntries.length} events across ${days} day${days !== 1 ? 's' : ''}`));
+        const prompt = buildOpportunityPrompt(harness, allEntries, days, config.mode);
+        const candidates = [];
+        try {
+            const sel = selectOptimizeAgent(config, buildDiagnoseReport(since, LOG_DIR));
+            candidates.push(sel.agent);
+        }
+        catch {
+            candidates.push('claude');
+        }
+        const fallback = ['claude', 'codex'].find(v => !candidates.includes(v) && config.vendors[v].enabled);
+        if (fallback)
+            candidates.push(fallback);
+        let agentOutput;
+        for (let i = 0; i < candidates.length; i++) {
+            const agent = candidates[i];
+            const reason = i === 0 ? 'selected by optimize logic' : `fallback — ${candidates[i - 1]} failed`;
+            console.log(chalk.dim(`  analyzing with ${agent} (${reason})...`));
+            try {
+                agentOutput = agent === 'claude'
+                    ? await runWithClaude(prompt)
+                    : await runWithCodex(prompt);
+                break;
+            }
+            catch (err) {
+                const msg = err instanceof Error ? err.message : String(err);
+                const hasNext = i < candidates.length - 1;
+                console.error(chalk.yellow(`  ✗ ${agent} failed: ${msg}${hasNext ? ' — trying next agent...' : ''}`));
+            }
+        }
+        if (agentOutput === undefined) {
+            console.error(chalk.red('✗ all configured agents failed'));
+            process.exit(1);
+        }
+        const draftParsed = parseDraft(agentOutput);
+        if (!draftParsed) {
+            console.error(chalk.red('✗ Agent returned unexpected output format'));
+            console.error(chalk.dim('  Expected: TITLE: line, then ---, then body'));
+            process.exit(1);
+        }
+        const cleanDraft = sanitizeDraftContent(draftParsed.title, draftParsed.body);
+        printDraft(cleanDraft.title, cleanDraft.body);
+        if (opts.dryRun) {
+            console.log(chalk.dim('  (dry run — not submitting)'));
+            return;
+        }
+        if (!opts.yes) {
+            const confirmed = await ask(`  Submit to ${ISSUE_REPO}? [y/N]: `);
+            if (!/^y(es)?$/i.test(confirmed)) {
+                console.log('  Cancelled.');
+                return;
+            }
+        }
+        await submitIssue(cleanDraft.title, cleanDraft.body, draftParsed.labels ?? ['improvement']);
+        return;
+    }
+    // --- Default mode: error-pattern bug report ---
+    // 1. Scan logs for error patterns
+    console.log(chalk.dim('  scanning logs...'));
+    const report = buildDiagnoseReport(since, LOG_DIR);
+    if (report.errors.length === 0) {
+        console.log('  No errors found in recent logs — nothing to report');
+        return;
+    }
+    // 2. Select which error to report
+    let errorIdx = 0;
+    if (report.errors.length > 1 && !opts.yes) {
+        console.log(chalk.bold(`\n  Found ${report.errors.length} error patterns in the last ${days} day${days !== 1 ? 's' : ''}:\n`));
+        report.errors.forEach((e, i) => {
+            const label = errorLabel(e).padEnd(44);
+            const rev = e.reviewer ? chalk.dim(` ${e.reviewer}`) : '';
+            console.log(`  [${i + 1}] ${label} ×${e.count}${rev}`);
+        });
+        errorIdx = await pickOne('Which issue do you want to report?', report.errors.map((_, i) => String(i + 1)));
+    }
+    const selected = report.errors[errorIdx];
+    if (!selected) {
+        console.error(chalk.red('✗ Invalid selection'));
+        process.exit(1);
+    }
+    // 3. Load representative log entries for this pattern
+    const rawEntries = loadErrorEntriesForPattern(selected.pattern, selected.command, since);
+    // 4. Select agents — primary first, then other enabled vendor as fallback
+    const candidates = [];
+    let primaryReason = 'default';
+    try {
+        const sel = selectOptimizeAgent(config, report);
+        candidates.push(sel.agent);
+        primaryReason = sel.reason;
+    }
+    catch {
+        candidates.push('claude');
+    }
+    const fallbackVendor = ['claude', 'codex'].find(v => !candidates.includes(v) && config.vendors[v].enabled);
+    if (fallbackVendor)
+        candidates.push(fallbackVendor);
+    // 5. Draft issue via AI agent — try each candidate in order
+    const prompt = buildAgentPrompt(errorLabel(selected), selected.count, days, selected.reviewer, rawEntries, config.mode);
+    let agentOutput;
+    for (let i = 0; i < candidates.length; i++) {
+        const agent = candidates[i];
+        const reason = i === 0 ? primaryReason : `fallback — ${candidates[i - 1]} failed`;
+        console.log(chalk.dim(`  drafting issue with ${agent} (${reason})...`));
+        try {
+            agentOutput = agent === 'claude'
+                ? await runWithClaude(prompt)
+                : await runWithCodex(prompt);
+            break;
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            const hasNext = i < candidates.length - 1;
+            console.error(chalk.yellow(`  ✗ ${agent} failed: ${msg}${hasNext ? ' — trying next agent...' : ''}`));
+        }
+    }
+    if (agentOutput === undefined) {
+        console.error(chalk.red('✗ all configured agents failed to draft the issue'));
+        process.exit(1);
+    }
+    const draftParsed = parseDraft(agentOutput);
+    if (!draftParsed) {
+        console.error(chalk.red('✗ Agent returned unexpected output format'));
+        console.error(chalk.dim('  Expected: TITLE: <title>\\n---\\n<body>'));
+        process.exit(1);
+    }
+    // 6. Ask follow-up questions (skipped when --yes)
+    let answers = {
+        reproducibility: 'Unknown',
+        trigger: 'Unknown',
+        impact: 'Degraded',
+    };
+    if (!opts.yes) {
+        const repIdx = await pickOne('Can you reproduce this consistently?', ['Every time', 'Sometimes', 'Happened once']);
+        answers.reproducibility = ['Every time', 'Sometimes', 'Happened once'][repIdx];
+        const trigIdx = await pickOne('Which command triggered this?', ['watch', 'serve', 'review', 'Unknown']);
+        answers.trigger = ['watch', 'serve', 'review', 'Unknown'][trigIdx];
+        const impactIdx = await pickOne('Is this blocking you from using crosscheck?', ['Blocked', 'Degraded', 'Cosmetic']);
+        answers.impact = ['Blocked', 'Degraded', 'Cosmetic'][impactIdx];
+    }
+    // 7. Build final content and show draft
+    // Sanitize AI output before use — the agent may echo back content it received,
+    // even if inputs were sanitized; this is the last gate before posting.
+    const cleanDraft = sanitizeDraftContent(draftParsed.title, draftParsed.body);
+    const { title, body } = buildIssueContent(cleanDraft, answers);
+    printDraft(title, body);
+    // 8. Submit
+    if (opts.dryRun) {
+        console.log(chalk.dim('  (dry run — not submitting)'));
+        return;
+    }
+    if (!opts.yes) {
+        const confirmed = (await ask(`  Submit to ${ISSUE_REPO}? [y/N]: `));
+        if (!/^y(es)?$/i.test(confirmed)) {
+            console.log('  Cancelled.');
+            return;
+        }
+    }
+    const labels = ['bug'];
+    if (answers.impact === 'Blocked')
+        labels.push('priority:high');
+    await submitIssue(title, body, labels);
+}
+async function submitIssue(title, body, labels) {
+    const ghArgs = [
+        'issue', 'create',
+        '--repo', ISSUE_REPO,
+        '--title', title,
+        '--body', body,
+        ...labels.flatMap(l => ['--label', l]),
+    ];
+    let issueUrl;
+    try {
+        const result = await execa('gh', ghArgs, { timeout: 30_000 });
+        issueUrl = (result.stdout ?? '').trim();
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        if (/not logged in|not authenticated/i.test(msg)) {
+            console.error(chalk.yellow('  gh is not authenticated — run: gh auth login'));
+        }
+        else {
+            console.error(chalk.yellow(`  gh issue create failed: ${msg}`));
+        }
+        const escapedTitle = title.replace(/'/g, "'\\''");
+        const escapedBody = body.replace(/'/g, "'\\''");
+        const labelsStr = labels.map(l => `--label '${l}'`).join(' ');
+        console.log('\n  Run this manually:');
+        console.log(chalk.cyan(`  gh issue create --repo ${ISSUE_REPO} --title '${escapedTitle}' --body '${escapedBody}' ${labelsStr}`));
+        process.exit(2);
+    }
+    console.log(chalk.green(`\n  ✓ issue created → ${issueUrl}`));
+}
+//# sourceMappingURL=issue.js.map