feat: Epic 13 (Structured Questions) + Epic 14 (Native STT)

.env.example

@@ -0,0 +1,11 @@
+# TalkTerm Environment Configuration
+# Copy this file to .env and fill in your values
+
+# Required for E2E tests (Claude Agent SDK)
+ANTHROPIC_API_KEY=
+
+# Test environment (local | ci)
+TEST_ENV=local
+
+# Electron user data directory override (for test isolation)
+# ELECTRON_USER_DATA_DIR=

.gitattributes

@@ -0,0 +1,2 @@
+# Normalize line endings to LF on all platforms
+* text=auto eol=lf

.github/dependabot.yml

@@ -1,19 +1,19 @@
 version: 2
 updates:
-  - package-ecosystem: "npm"
-    directory: "/"
+  - package-ecosystem: 'npm'
+    directory: '/'
     schedule:
-      interval: "weekly"
+      interval: 'weekly'
     open-pull-requests-limit: 0
     labels:
-      - "security"
-      - "dependencies"
+      - 'security'
+      - 'dependencies'
 
-  - package-ecosystem: "github-actions"
-    directory: "/"
+  - package-ecosystem: 'github-actions'
+    directory: '/'
     schedule:
-      interval: "weekly"
+      interval: 'weekly'
     open-pull-requests-limit: 10
     labels:
-      - "security"
-      - "dependencies"
+      - 'security'
+      - 'dependencies'

.github/labels.yml

@@ -1,31 +1,31 @@
-# Standard label set for petry-projects repositories.
+# Standard label set for combsmith repositories.
 # Matches the required labels defined in:
-# https://github.com/petry-projects/.github/blob/main/standards/github-settings.md#labels--standard-set
+# https://github.com/combsmith/.github/blob/main/standards/github-settings.md#labels--standard-set
 
 - name: security
-  color: "d93f0b"
+  color: 'd93f0b'
   description: Security-related PRs and issues
 
 - name: dependencies
-  color: "0075ca"
+  color: '0075ca'
   description: Dependency update PRs
 
 - name: scorecard
-  color: "d93f0b"
+  color: 'd93f0b'
   description: OpenSSF Scorecard findings (auto-created)
 
 - name: bug
-  color: "d73a4a"
+  color: 'd73a4a'
   description: Bug reports
 
 - name: enhancement
-  color: "a2eeef"
+  color: 'a2eeef'
   description: Feature requests
 
 - name: documentation
-  color: "0075ca"
+  color: '0075ca'
   description: Documentation changes
 
 - name: in-progress
-  color: "fbca04"
+  color: 'fbca04'
   description: An agent is actively working this issue

.github/workflows/add-to-project.yml

@@ -1,7 +1,7 @@
 # ─────────────────────────────────────────────────────────────────────────────
-# SOURCE OF TRUTH: petry-projects/.github/standards/workflows/add-to-project.yml
-# Standard:        petry-projects/.github/standards/ci-standards.md
-# Reusable:        petry-projects/.github/.github/workflows/add-to-project-reusable.yml
+# SOURCE OF TRUTH: combsmith/.github/standards/workflows/add-to-project.yml
+# Standard:        combsmith/.github/standards/ci-standards.md
+# Reusable:        combsmith/.github/.github/workflows/add-to-project-reusable.yml
 #
 # AGENTS — READ BEFORE EDITING:
 #   • This file is a THIN CALLER STUB. All noise-gate / reconcile logic lives
@@ -18,15 +18,15 @@
 #
 # Track this repo's issues (all, un-gated) and dev-lead-labeled PRs on the
 # org-level Initiatives project
-# (https://github.com/orgs/petry-projects/projects/1). Ideas live in
+# (https://github.com/orgs/combsmith/projects/1). Ideas live in
 # Discussions and are not tracked here.
 #
 # To adopt: copy this file to .github/workflows/add-to-project.yml in your
 # repo. Requires the org secrets INITIATIVES_APP_ID and
 # INITIATIVES_APP_PRIVATE_KEY (the petry-projects-planner GitHub App), and the
-# app installation must include this repo. See petry-projects/.github#387.
+# app installation must include this repo. See combsmith/.github#387.
 #
-# Tracking: petry-projects/.github#387, #415
+# Tracking: combsmith/.github#387, #415
 name: Auto-add to Initiatives project
 
 on:
@@ -47,10 +47,10 @@ jobs:
   add-to-project:
     permissions:
       contents: read
-    uses: petry-projects/.github/.github/workflows/add-to-project-reusable.yml@add-to-project/v1-stable  # NOSONAR(githubactions:S7637) first-party channel ref
+    uses: combsmith/.github/.github/workflows/add-to-project-reusable.yml@add-to-project/v1-stable # NOSONAR(githubactions:S7637) first-party channel ref
     with:
       project_id: PVT_kwDOD2inqs4BZq3-
-      project_url: https://github.com/orgs/petry-projects/projects/1
+      project_url: https://github.com/orgs/combsmith/projects/1
       agent_ref: add-to-project/v1-stable
     # Pass only the secrets the reusable declares (least privilege; avoids
     # `secrets: inherit` handing the reusable every org secret).

.github/workflows/agent-shield.yml

@@ -1,7 +1,7 @@
 # ─────────────────────────────────────────────────────────────────────────────
-# SOURCE OF TRUTH: petry-projects/.github/standards/workflows/agent-shield.yml
-# Standard:        petry-projects/.github/standards/agent-standards.md
-# Reusable:        petry-projects/.github/.github/workflows/agent-shield-reusable.yml
+# SOURCE OF TRUTH: combsmith/.github/standards/workflows/agent-shield.yml
+# Standard:        combsmith/.github/standards/agent-standards.md
+# Reusable:        combsmith/.github/.github/workflows/agent-shield-reusable.yml
 #
 # AGENTS — READ BEFORE EDITING:
 #   • This file is a THIN CALLER STUB. The AgentShield CLI scan and the
@@ -30,4 +30,4 @@ permissions:
 
 jobs:
   agent-shield:
-    uses: petry-projects/.github/.github/workflows/agent-shield-reusable.yml@agent-shield/v2-ring1  # NOSONAR(githubactions:S7637) first-party channel ref
+    uses: combsmith/.github/.github/workflows/agent-shield-reusable.yml@agent-shield/v2-ring1 # NOSONAR(githubactions:S7637) first-party channel ref

.github/workflows/auto-rebase.yml

@@ -1,7 +1,7 @@
 # ─────────────────────────────────────────────────────────────────────────────
-# SOURCE OF TRUTH: petry-projects/.github/standards/workflows/auto-rebase.yml
-# Standard:        petry-projects/.github/standards/ci-standards.md
-# Reusable:        petry-projects/.github/.github/workflows/auto-rebase-reusable.yml
+# SOURCE OF TRUTH: combsmith/.github/standards/workflows/auto-rebase.yml
+# Standard:        combsmith/.github/standards/ci-standards.md
+# Reusable:        combsmith/.github/.github/workflows/auto-rebase-reusable.yml
 #
 # AGENTS — READ BEFORE EDITING:
 #   • This file is a THIN CALLER STUB. All branch-update logic lives in the
@@ -48,7 +48,7 @@ permissions: {}
 jobs:
   auto-rebase:
     permissions:
-      contents: write      # update-branch via GITHUB_TOKEN (may touch .github/workflows/)
+      contents: write # update-branch via GITHUB_TOKEN (may touch .github/workflows/)
       pull-requests: write # post comments on PRs
-    uses: petry-projects/.github/.github/workflows/auto-rebase-reusable.yml@auto-rebase/v2-ring1  # NOSONAR(githubactions:S7637) first-party channel ref
-    secrets: inherit  # NOSONAR(githubactions:S7635) first-party trusted reusable
+    uses: combsmith/.github/.github/workflows/auto-rebase-reusable.yml@auto-rebase/v2-ring1 # NOSONAR(githubactions:S7637) first-party channel ref
+    secrets: inherit # NOSONAR(githubactions:S7635) first-party trusted reusable

.github/workflows/ci-failure-analyst.yml

@@ -4,7 +4,7 @@
 #   CI check failure. Identifies the failing step, classifies the root cause,
 #   and suggests a concrete fix action.
 #
-# All analysis logic lives in petry-projects/.github-private — this stub is
+# All analysis logic lives in combsmith/.github-private — this stub is
 # intentionally minimal and never needs modification after initial deployment.
 #
 # Requirements:
@@ -15,24 +15,24 @@
 #   dev-lead        — diagnoses and attempts to fix CI failures (writes commits)
 #   ci-failure-analyst — diagnoses only, always posts a fast diagnostic comment
 #
-# Docs: https://github.com/petry-projects/.github-private/blob/main/docs/aw/ci-failure-analyst.md
+# Docs: https://github.com/combsmith/.github-private/blob/main/docs/aw/ci-failure-analyst.md
 # ─────────────────────────────────────────────────────────────────────────────
 
-name: "CI Failure Analyst"
+name: 'CI Failure Analyst'
 
 on:
   check_run:
     types: [completed]
 
 permissions:
   pull-requests: write
-  issues: write        # post/read PR comments via the Issues comments API
+  issues: write # post/read PR comments via the Issues comments API
   actions: read
   contents: read
   checks: read
 
 concurrency:
-  group: "ci-failure-analyst-${{ github.event.check_run.head_sha }}"
+  group: 'ci-failure-analyst-${{ github.event.check_run.head_sha }}'
   cancel-in-progress: false
 
 jobs:
@@ -41,6 +41,6 @@ jobs:
     if: >-
       github.event.check_run.conclusion == 'failure' &&
       !startsWith(github.event.check_run.name, 'CI Failure Analyst')
-    uses: petry-projects/.github-private/.github/workflows/ci-failure-analyst-reusable.yml@ci-failure-analyst/v1-stable  # NOSONAR(githubactions:S7637) first-party channel ref
+    uses: combsmith/.github-private/.github/workflows/ci-failure-analyst-reusable.yml@ci-failure-analyst/v1-stable # NOSONAR(githubactions:S7637) first-party channel ref
     secrets:
-      CLAUDE_CODE_OAUTH_TOKEN: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
+      CLAUDE_CODE_OAUTH_TOKEN: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}

.github/workflows/ci.yml

@@ -1,5 +1,5 @@
 # ─────────────────────────────────────────────────────────────────────────────
-# Standard: petry-projects/.github/standards/push-protection.md#layer-3
+# Standard: combsmith/.github/standards/push-protection.md#layer-3
 #
 # Primary CI workflow. Runs on every push to main and every pull request.
 # The `secret-scan` job is a required check — it must stay in this file and
@@ -33,6 +33,74 @@ concurrency:
   cancel-in-progress: true
 
 jobs:
+  quality:
+    runs-on: ${{ matrix.os }}
+    timeout-minutes: 30
+    permissions:
+      contents: read
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-latest, macos-latest, windows-latest]
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
+        with:
+          node-version: 24
+          cache: npm
+      - run: npm ci --legacy-peer-deps --ignore-scripts
+      - run: npm rebuild better-sqlite3
+      - run: npm run typecheck
+      - run: npm run lint
+      - run: npm run format:check
+      - run: npm test
+      - run: npm run test:coverage
+
+  mutation:
+    needs: quality
+    runs-on: ubuntu-latest
+    timeout-minutes: 60
+    permissions:
+      contents: read
+    continue-on-error: true
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
+        with:
+          node-version: 24
+          cache: npm
+      - run: npm ci --legacy-peer-deps --ignore-scripts
+      - run: npm rebuild better-sqlite3
+      - run: npm run test:mutate
+
+  e2e:
+    needs: quality
+    runs-on: macos-latest
+    timeout-minutes: 30
+    permissions:
+      contents: read
+    continue-on-error: true
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
+        with:
+          node-version: 24
+          cache: npm
+      - run: npm ci --legacy-peer-deps # NOSONAR - Electron binary download and native module compilation require lifecycle scripts
+      - run: npm run make
+      - run: npm run playwright:install
+      - run: npm run test:e2e:electron
+        env:
+          CI: 'true'
+      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        if: failure()
+        with:
+          name: e2e-artifacts
+          path: |
+            test-results/
+            playwright-report/
+          retention-days: 30
+
   secret-scan:
     name: Secret scan (gitleaks)
     runs-on: ubuntu-latest
@@ -47,7 +115,7 @@ jobs:
     steps:
       - name: Checkout (full history)
         # Pin to SHA per Action Pinning Policy
-        # (petry-projects/.github/standards/ci-standards.md#action-pinning-policy).
+        # (combsmith/.github/standards/ci-standards.md#action-pinning-policy).
         # Refresh: gh api repos/actions/checkout/git/refs/tags/v6.0.2 --jq '.object.sha'
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
@@ -61,7 +129,7 @@ jobs:
       # step below handles redaction for the enforcement scan.
       - name: Run gitleaks (action)
         # Pinned to SHA per Action Pinning Policy
-        # (petry-projects/.github/standards/ci-standards.md#action-pinning-policy).
+        # (combsmith/.github/standards/ci-standards.md#action-pinning-policy).
         # Refresh: gh api repos/gitleaks/gitleaks-action/git/refs/tags/v3.0.0 --jq '.object.sha'
         uses: gitleaks/gitleaks-action@e0c47f4f8be36e29cdc102c57e68cb5cbf0e8d1e # v3.0.0
         continue-on-error: true

.github/workflows/copilot-setup-steps.yml

@@ -1,6 +1,6 @@
 # ─────────────────────────────────────────────────────────────────────────────
-# SOURCE OF TRUTH: petry-projects/.github/standards/workflows/copilot-setup-steps.yml
-# Standard:        petry-projects/.github/standards/ci-standards.md#11-copilot-cloud-agent-setup
+# SOURCE OF TRUTH: combsmith/.github/standards/workflows/copilot-setup-steps.yml
+# Standard:        combsmith/.github/standards/ci-standards.md#11-copilot-cloud-agent-setup
 #
 # ADOPTING THIS WORKFLOW:
 #   1. Copy this file to .github/workflows/copilot-setup-steps.yml in your repo.
@@ -35,7 +35,7 @@
 # STACK: Node.js / npm (TypeScript + Electron desktop app)
 # ─────────────────────────────────────────────────────────────────────────────
 
-name: "Copilot Setup Steps"
+name: 'Copilot Setup Steps'
 
 on:
   workflow_dispatch:
@@ -62,19 +62,19 @@ jobs:
     steps:
       - name: Checkout code
         # Pin to SHA per Action Pinning Policy
-        # (petry-projects/.github/standards/ci-standards.md#action-pinning-policy).
+        # (combsmith/.github/standards/ci-standards.md#action-pinning-policy).
         # Refresh: gh api repos/actions/checkout/git/refs/tags/v6.0.2 --jq '.object.sha'
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Set up Node.js
         # Pin to SHA per Action Pinning Policy
-        # (petry-projects/.github/standards/ci-standards.md#action-pinning-policy).
+        # (combsmith/.github/standards/ci-standards.md#action-pinning-policy).
         # Refresh: gh api repos/actions/setup-node/git/refs/tags/v6.4.0 --jq '.object.sha'
         # Note: cache: "npm" is intentionally omitted — it requires package-lock.json
         # and would fail until that file is committed. Re-enable once the npm project is initialised.
         uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
-          node-version: "24"
+          node-version: '24'
 
       - name: Install Node.js dependencies
         # npm ci requires a package-lock.json — skip gracefully until one is committed.
@@ -83,7 +83,7 @@ jobs:
 
       - name: Verify environment
         run: |
-          echo "=== petry-projects Copilot cloud agent environment ==="
+          echo "=== combsmith Copilot cloud agent environment ==="
           echo "Repository : ${{ github.repository }}"
           echo "Ref        : ${{ github.ref }}"
           echo "Runner     : ${{ runner.os }} / ${{ runner.arch }}"

.github/workflows/dependabot-automerge.yml

@@ -1,7 +1,7 @@
 # ─────────────────────────────────────────────────────────────────────────────
-# SOURCE OF TRUTH: petry-projects/.github/standards/workflows/dependabot-automerge.yml
-# Standard:        petry-projects/.github/standards/dependabot-policy.md
-# Reusable:        petry-projects/.github/.github/workflows/dependabot-automerge-reusable.yml
+# SOURCE OF TRUTH: combsmith/.github/standards/workflows/dependabot-automerge.yml
+# Standard:        combsmith/.github/standards/dependabot-policy.md
+# Reusable:        combsmith/.github/.github/workflows/dependabot-automerge-reusable.yml
 #
 # AGENTS — READ BEFORE EDITING:
 #   • This file is a THIN CALLER STUB. All eligibility logic and the GitHub
@@ -35,5 +35,5 @@ jobs:
     permissions:
       contents: read
       pull-requests: read
-    uses: petry-projects/.github/.github/workflows/dependabot-automerge-reusable.yml@dependabot-automerge/v2-ring1  # NOSONAR(githubactions:S7637) first-party channel ref
-    secrets: inherit  # NOSONAR(githubactions:S7635) first-party trusted reusable
+    uses: combsmith/.github/.github/workflows/dependabot-automerge-reusable.yml@dependabot-automerge/v2-ring1 # NOSONAR(githubactions:S7637) first-party channel ref
+    secrets: inherit # NOSONAR(githubactions:S7635) first-party trusted reusable