feat: Epic 13 (Structured Questions) + Epic 14 (Native STT)

.env.example

@@ -0,0 +1,11 @@
+# TalkTerm Environment Configuration
+# Copy this file to .env and fill in your values
+
+# Required for E2E tests (Claude Agent SDK)
+ANTHROPIC_API_KEY=
+
+# Test environment (local | ci)
+TEST_ENV=local
+
+# Electron user data directory override (for test isolation)
+# ELECTRON_USER_DATA_DIR=

.gitattributes

@@ -0,0 +1,2 @@
+# Normalize line endings to LF on all platforms
+* text=auto eol=lf

.github/workflows/ci.yml

@@ -33,6 +33,74 @@ concurrency:
   cancel-in-progress: true
 
 jobs:
+  quality:
+    runs-on: ${{ matrix.os }}
+    timeout-minutes: 30
+    permissions:
+      contents: read
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-latest, macos-latest, windows-latest]
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
+        with:
+          node-version: 24
+          cache: npm
+      - run: npm ci --legacy-peer-deps --ignore-scripts
+      - run: npm rebuild better-sqlite3
+      - run: npm run typecheck
+      - run: npm run lint
+      - run: npm run format:check
+      - run: npm test
+      - run: npm run test:coverage
+
+  mutation:
+    needs: quality
+    runs-on: ubuntu-latest
+    timeout-minutes: 60
+    permissions:
+      contents: read
+    continue-on-error: true
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
+        with:
+          node-version: 24
+          cache: npm
+      - run: npm ci --legacy-peer-deps --ignore-scripts
+      - run: npm rebuild better-sqlite3
+      - run: npm run test:mutate
+
+  e2e:
+    needs: quality
+    runs-on: macos-latest
+    timeout-minutes: 30
+    permissions:
+      contents: read
+    continue-on-error: true
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
+        with:
+          node-version: 24
+          cache: npm
+      - run: npm ci --legacy-peer-deps # NOSONAR - Electron binary download and native module compilation require lifecycle scripts
+      - run: npm run make
+      - run: npm run playwright:install
+      - run: npm run test:e2e:electron
+        env:
+          CI: 'true'
+      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        if: failure()
+        with:
+          name: e2e-artifacts
+          path: |
+            test-results/
+            playwright-report/
+          retention-days: 30
+
   secret-scan:
     name: Secret scan (gitleaks)
     runs-on: ubuntu-latest

.github/workflows/release.yml

@@ -0,0 +1,41 @@
+name: Release
+
+on:
+  push:
+    tags: ['v*']
+
+permissions: {}
+
+jobs:
+  build:
+    runs-on: ${{ matrix.os }}
+    permissions:
+      contents: read
+    strategy:
+      matrix:
+        os: [macos-latest, windows-latest]
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
+        with:
+          node-version: 24
+          cache: npm
+      - run: npm ci --legacy-peer-deps # NOSONAR - Electron binary download and native module compilation require lifecycle scripts
+      - run: npm run make
+      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        with:
+          name: talkterm-${{ matrix.os }}
+          path: out/make/**/*
+
+  release:
+    needs: build
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    steps:
+      - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
+        with:
+          path: artifacts
+      - uses: softprops/action-gh-release@c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda # v2
+        with:
+          files: artifacts/**/*

.github/workflows/sonarcloud.yml

@@ -57,6 +57,17 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 0
+      - name: Set up Node.js
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
+        with:
+          node-version: 24
+          cache: npm
+      - name: Install dependencies
+        run: npm ci --legacy-peer-deps --ignore-scripts
+      - name: Rebuild native modules
+        run: npm rebuild better-sqlite3
+      - name: Run tests with coverage
+        run: npm run test:coverage
       - name: Set up JDK 21
         id: setup_java
         uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6.1.0

.gitignore

@@ -425,6 +425,7 @@ coverage/
 .nyc_output/
 reports/
 stryker-tmp/
+test-results/
 
 # OS cruft
 .DS_Store

.gitleaksignore

@@ -284,3 +284,14 @@ fdbb5983697cf867bf3a08d1483322f2a9476c28:_bmad/_config/files-manifest.csv:generi
 fdbb5983697cf867bf3a08d1483322f2a9476c28:_bmad/_config/files-manifest.csv:generic-api-key:409
 fdbb5983697cf867bf3a08d1483322f2a9476c28:_bmad/_config/files-manifest.csv:generic-api-key:433
 fdbb5983697cf867bf3a08d1483322f2a9476c28:_bmad/tea/testarch/knowledge/api-testing-patterns.md:generic-api-key:681
+
+# Commit a7a24535: same _bmad/_config/files-manifest.csv CSV rows as above
+# (SHA256 content checksums of BMAD skill files). Same false-positive rationale;
+# file content checksums in CSV, not API keys. Discovered during full-history scan
+# in PR #8 — pattern is identical to all prior entries.
+a7a24535a6a70b141ef3f23de6648869d86c5a25:_bmad/_config/files-manifest.csv:generic-api-key:281
+a7a24535a6a70b141ef3f23de6648869d86c5a25:_bmad/_config/files-manifest.csv:generic-api-key:282
+a7a24535a6a70b141ef3f23de6648869d86c5a25:_bmad/_config/files-manifest.csv:generic-api-key:284
+a7a24535a6a70b141ef3f23de6648869d86c5a25:_bmad/_config/files-manifest.csv:generic-api-key:300
+a7a24535a6a70b141ef3f23de6648869d86c5a25:_bmad/_config/files-manifest.csv:generic-api-key:409
+a7a24535a6a70b141ef3f23de6648869d86c5a25:_bmad/_config/files-manifest.csv:generic-api-key:433

.husky/pre-commit

@@ -0,0 +1 @@
+npx lint-staged && npx tsc --noEmit && npx vitest related --run

.nvmrc

@@ -0,0 +1 @@
+24

.prettierignore

@@ -0,0 +1,11 @@
+node_modules
+.vite
+out
+dist
+*.md
+_bmad
+_bmad-output
+.claude/skills
+.github
+test-results
+.coderabbit.yaml

.prettierrc

@@ -0,0 +1,8 @@
+{
+  "semi": true,
+  "singleQuote": true,
+  "trailingComma": "all",
+  "printWidth": 100,
+  "tabWidth": 2,
+  "endOfLine": "lf"
+}