@planu/cli 0.28.0 → 0.30.0

package/dist/engine/spec-templates/templates-industry-saas.js

@@ -0,0 +1,323 @@
+// engine/spec-templates/templates-industry-saas.ts — SaaS industry templates.
+// AC-04: Templates by industry — SaaS vertical (multi-tenant, billing, RBAC).
+/** SaaS multi-tenant template. */
+export const SAAS_MULTI_TENANT_TEMPLATE = {
+    id: 'saas-multi-tenant',
+    name: 'Arquitectura multi-tenant',
+    category: 'industry',
+    subcategory: 'saas',
+    description: 'Aislamiento de datos por tenant, subdominios y configuracion por tenant.',
+    tags: ['saas', 'multi-tenant', 'isolation', 'tenancy'],
+    complexityScore: 'XL',
+    estimationBase: {
+        hoursMin: 80,
+        hoursMax: 160,
+        notes: 'Arquitectura fundamental que impacta todas las capas',
+    },
+    criteria: [
+        { id: 'AC-1', title: 'Aislamiento de datos', required: true },
+        { id: 'AC-2', title: 'Resolucion de tenant', required: true },
+        { id: 'AC-3', title: 'Configuracion por tenant', required: true },
+        { id: 'AC-4', title: 'Onboarding de tenant', required: true },
+        { id: 'AC-5', title: 'Limites por tenant', required: true },
+        { id: 'AC-6', title: 'Operaciones cross-tenant', required: false },
+    ],
+    variables: [
+        {
+            key: 'PlatformName',
+            label: 'Nombre de la plataforma',
+            description: 'Nombre de la plataforma SaaS',
+            example: 'CloudApp',
+            required: true,
+        },
+    ],
+    huTemplate: `# HU: Multi-Tenant — {{PlatformName}}
+
+## Historia de Usuario
+Como operador de {{PlatformName}}, quiero que cada tenant tenga sus datos aislados y su configuracion independiente para ofrecer un servicio seguro y personalizable.
+
+## Criterios de Aceptacion
+
+### AC-1: Aislamiento de datos
+- [ ] Los datos de cada tenant son inaccesibles para otros tenants
+- [ ] Las consultas a base de datos filtran por tenant automaticamente
+- [ ] No existe ruta de acceso que permita cross-tenant sin autorizacion explicita
+- [ ] Las pruebas verifican que el aislamiento funciona correctamente
+
+### AC-2: Resolucion de tenant
+- [ ] El tenant se resuelve desde subdominio, header o token segun la estrategia elegida
+- [ ] La resolucion es transparente para el codigo de negocio
+- [ ] Solicitudes sin tenant valido son rechazadas con error claro
+
+### AC-3: Configuracion por tenant
+- [ ] Cada tenant puede personalizar branding (logo, colores, nombre)
+- [ ] Las configuraciones de funcionalidad son independientes por tenant
+- [ ] Los valores por defecto se heredan de la configuracion global
+
+### AC-4: Onboarding de tenant
+- [ ] El alta de un nuevo tenant es automatizada (no requiere intervencion manual)
+- [ ] Se provisionan los recursos necesarios (schema/namespace/bucket)
+- [ ] El administrador del tenant recibe credenciales de acceso
+
+### AC-5: Limites por tenant
+- [ ] Cada tenant tiene limites de uso configurables (usuarios, storage, API calls)
+- [ ] Se notifica al tenant cuando se acerca a sus limites
+- [ ] Exceder limites bloquea operaciones nuevas (no las existentes)
+
+### AC-6: Operaciones cross-tenant (solo para superadmin)
+- [ ] El superadmin puede consultar metricas agregadas de todos los tenants
+- [ ] Las operaciones de mantenimiento pueden ejecutarse por tenant o globalmente
+`,
+    fichaTecnicaTemplate: `# FICHA TÉCNICA: Multi-Tenant — {{PlatformName}}
+
+## Archivos Afectados
+- tenancy/resolver
+- tenancy/isolation-middleware
+- tenancy/config-manager
+- tenancy/onboarding
+- tenancy/limits
+
+## Tipos / Entidades
+- \`Tenant\`: id, name, slug, config, limits, createdAt
+- \`TenantConfig\`: branding, features, defaults
+- \`TenantLimit\`: type, maxValue, currentValue
+
+## Riesgos
+- Fuga de datos entre tenants → filtrado automatico + tests de aislamiento
+- Onboarding lento → provisionamiento asincronico con status tracking
+- Limites no respetados → middleware de verificacion en cada request
+
+## Estimacion
+- Dev: 80–160 horas
+- Review: 16–32 horas
+- Dificultad: 5/5
+`,
+    progressTemplate: `# PROGRESS: Multi-Tenant — {{PlatformName}}
+
+## Estado: borrador
+
+## Criterios
+- [ ] AC-1: Aislamiento de datos
+- [ ] AC-2: Resolucion de tenant
+- [ ] AC-3: Configuracion por tenant
+- [ ] AC-4: Onboarding de tenant
+- [ ] AC-5: Limites por tenant
+- [ ] AC-6: Operaciones cross-tenant
+`,
+};
+/** SaaS billing and subscriptions template. */
+export const SAAS_BILLING_TEMPLATE = {
+    id: 'saas-billing',
+    name: 'Facturacion y suscripciones',
+    category: 'industry',
+    subcategory: 'saas',
+    description: 'Planes de suscripcion, upgrades, facturacion PDF y webhooks de pago.',
+    tags: ['saas', 'billing', 'subscriptions', 'invoices', 'payments'],
+    complexityScore: 'L',
+    estimationBase: {
+        hoursMin: 40,
+        hoursMax: 80,
+        notes: 'Incluye integracion con pasarela de pago y generacion de facturas',
+    },
+    criteria: [
+        { id: 'AC-1', title: 'Planes de suscripcion', required: true },
+        { id: 'AC-2', title: 'Upgrades y downgrades', required: true },
+        { id: 'AC-3', title: 'Facturacion', required: true },
+        { id: 'AC-4', title: 'Webhooks de pago', required: true },
+        { id: 'AC-5', title: 'Periodo de prueba', required: false },
+        { id: 'AC-6', title: 'Metricas de revenue', required: false },
+    ],
+    variables: [
+        {
+            key: 'PlatformName',
+            label: 'Nombre de la plataforma',
+            description: 'Nombre de la plataforma SaaS',
+            example: 'CloudApp',
+            required: true,
+        },
+    ],
+    huTemplate: `# HU: Facturacion y Suscripciones — {{PlatformName}}
+
+## Historia de Usuario
+Como usuario de {{PlatformName}}, quiero gestionar mi suscripcion y recibir facturas para mantener mi cuenta al dia.
+
+## Criterios de Aceptacion
+
+### AC-1: Planes de suscripcion
+- [ ] El sistema define planes con nombre, precio, ciclo de facturacion y features incluidas
+- [ ] Los planes son configurables sin despliegue (admin dashboard o config)
+- [ ] Se soportan planes mensuales y anuales como minimo
+- [ ] Los precios soportan multiples monedas
+
+### AC-2: Upgrades y downgrades
+- [ ] El usuario puede cambiar de plan en cualquier momento
+- [ ] Los upgrades se aplican inmediatamente con prorrateo
+- [ ] Los downgrades se aplican al final del periodo de facturacion actual
+- [ ] Se notifica al usuario del impacto del cambio antes de confirmar
+
+### AC-3: Facturacion
+- [ ] Se genera factura automatica en cada ciclo de facturacion
+- [ ] La factura es descargable en PDF con datos fiscales
+- [ ] El historial de facturas es accesible para el usuario
+- [ ] Los pagos fallidos generan reintentos con notificacion al usuario
+
+### AC-4: Webhooks de pago
+- [ ] Los eventos de pago del proveedor se reciben y procesan via webhook
+- [ ] Los webhooks validan firma/autenticidad antes de procesar
+- [ ] El procesamiento es idempotente (replay-safe)
+- [ ] Los eventos fallidos se reintentan con backoff
+
+### AC-5: Periodo de prueba
+- [ ] Los nuevos usuarios pueden acceder a un periodo de prueba configurable
+- [ ] Se notifica antes del fin del trial con opcion de convertir
+- [ ] Al expirar el trial, se limita el acceso sin perder datos
+
+### AC-6: Metricas de revenue
+- [ ] MRR (Monthly Recurring Revenue) calculado automaticamente
+- [ ] Churn rate visible en dashboard de admin
+- [ ] Cohort analysis por mes de registro
+`,
+    fichaTecnicaTemplate: `# FICHA TÉCNICA: Facturacion — {{PlatformName}}
+
+## Archivos Afectados
+- billing/plans
+- billing/subscriptions
+- billing/invoices
+- billing/webhook-handler
+- billing/trial
+
+## Tipos / Entidades
+- \`Plan\`: id, name, price, currency, interval, features[]
+- \`Subscription\`: userId, planId, status, startedAt, expiresAt
+- \`Invoice\`: id, subscriptionId, amount, currency, paidAt, pdfUrl
+
+## Riesgos
+- Doble cobro → idempotencia en webhook processing
+- Factura incorrecta → validacion cruzada con proveedor
+- Trial abuse → limitar a un trial por usuario/email
+
+## Estimacion
+- Dev: 40–80 horas
+- Review: 8–16 horas
+- Dificultad: 4/5
+`,
+    progressTemplate: `# PROGRESS: Facturacion — {{PlatformName}}
+
+## Estado: borrador
+
+## Criterios
+- [ ] AC-1: Planes de suscripcion
+- [ ] AC-2: Upgrades y downgrades
+- [ ] AC-3: Facturacion
+- [ ] AC-4: Webhooks de pago
+- [ ] AC-5: Periodo de prueba
+- [ ] AC-6: Metricas de revenue
+`,
+};
+/** SaaS RBAC template. */
+export const SAAS_ROLES_TEMPLATE = {
+    id: 'saas-roles',
+    name: 'Control de acceso basado en roles (RBAC)',
+    category: 'industry',
+    subcategory: 'saas',
+    description: 'Permisos granulares, herencia de roles y auditoria de acceso.',
+    tags: ['saas', 'rbac', 'permissions', 'roles', 'access-control'],
+    complexityScore: 'M',
+    estimationBase: {
+        hoursMin: 24,
+        hoursMax: 48,
+        notes: 'Incluye herencia de roles y auditoria de acceso',
+    },
+    criteria: [
+        { id: 'AC-1', title: 'Definicion de roles', required: true },
+        { id: 'AC-2', title: 'Permisos granulares', required: true },
+        { id: 'AC-3', title: 'Herencia de roles', required: false },
+        { id: 'AC-4', title: 'Asignacion de roles', required: true },
+        { id: 'AC-5', title: 'Verificacion de permisos', required: true },
+        { id: 'AC-6', title: 'Auditoria de acceso', required: true },
+    ],
+    variables: [
+        {
+            key: 'PlatformName',
+            label: 'Nombre de la plataforma',
+            description: 'Nombre de la plataforma SaaS',
+            example: 'CloudApp',
+            required: true,
+        },
+    ],
+    huTemplate: `# HU: RBAC — {{PlatformName}}
+
+## Historia de Usuario
+Como administrador de {{PlatformName}}, quiero asignar roles y permisos a los usuarios para controlar que acciones puede realizar cada uno.
+
+## Criterios de Aceptacion
+
+### AC-1: Definicion de roles
+- [ ] Los roles se definen con nombre, descripcion y conjunto de permisos
+- [ ] Existen roles predefinidos (admin, editor, viewer) configurables
+- [ ] Se pueden crear roles personalizados
+- [ ] Los roles se gestionan por tenant (no globales)
+
+### AC-2: Permisos granulares
+- [ ] Los permisos se definen como pares recurso:accion (e.g. "users:create")
+- [ ] Se soportan wildcards (e.g. "users:*" para todas las acciones sobre usuarios)
+- [ ] Los permisos nuevos se agregan sin redeploy (configuracion)
+
+### AC-3: Herencia de roles
+- [ ] Un rol puede heredar permisos de otro rol padre
+- [ ] La herencia es transitiva (admin hereda de editor que hereda de viewer)
+- [ ] Los permisos heredados pueden ser revocados explicitamente
+
+### AC-4: Asignacion de roles
+- [ ] Los administradores pueden asignar/revocar roles a usuarios
+- [ ] Un usuario puede tener multiples roles (los permisos se combinan)
+- [ ] Los cambios de rol se aplican inmediatamente (sin requerir re-login)
+
+### AC-5: Verificacion de permisos
+- [ ] Toda ruta/accion verifica permisos antes de ejecutar
+- [ ] La verificacion es eficiente (cache en memoria, no DB por request)
+- [ ] Los permisos denegados retornan 403 con mensaje claro
+
+### AC-6: Auditoria de acceso
+- [ ] Los cambios de roles y permisos se registran con timestamp y actor
+- [ ] Los accesos denegados se registran para analisis de seguridad
+- [ ] El registro de auditoria es consultable por admin
+`,
+    fichaTecnicaTemplate: `# FICHA TÉCNICA: RBAC — {{PlatformName}}
+
+## Archivos Afectados
+- rbac/roles
+- rbac/permissions
+- rbac/assignment
+- rbac/middleware (permission check)
+- rbac/audit-log
+
+## Tipos / Entidades
+- \`Role\`: id, name, permissions[], parentRoleId
+- \`Permission\`: resource, action, granted
+- \`RoleAssignment\`: userId, roleId, assignedBy, assignedAt
+
+## Riesgos
+- Escalacion de privilegios → tests de aislamiento de permisos
+- Cache de permisos desactualizado → invalidacion al cambiar roles
+- Herencia circular → validacion al definir roles padre
+
+## Estimacion
+- Dev: 24–48 horas
+- Review: 4–8 horas
+- Dificultad: 3/5
+`,
+    progressTemplate: `# PROGRESS: RBAC — {{PlatformName}}
+
+## Estado: borrador
+
+## Criterios
+- [ ] AC-1: Definicion de roles
+- [ ] AC-2: Permisos granulares
+- [ ] AC-3: Herencia de roles
+- [ ] AC-4: Asignacion de roles
+- [ ] AC-5: Verificacion de permisos
+- [ ] AC-6: Auditoria de acceso
+`,
+};
+//# sourceMappingURL=templates-industry-saas.js.map

package/dist/engine/spec-templates/templates-industry-saas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"templates-industry-saas.js","sourceRoot":"","sources":["../../../src/engine/spec-templates/templates-industry-saas.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,8EAA8E;AAI9E,kCAAkC;AAClC,MAAM,CAAC,MAAM,0BAA0B,GAAsB;IAC3D,EAAE,EAAE,mBAAmB;IACvB,IAAI,EAAE,2BAA2B;IACjC,QAAQ,EAAE,UAAU;IACpB,WAAW,EAAE,MAAM;IACnB,WAAW,EAAE,0EAA0E;IACvF,IAAI,EAAE,CAAC,MAAM,EAAE,cAAc,EAAE,WAAW,EAAE,SAAS,CAAC;IACtD,eAAe,EAAE,IAAI;IACrB,cAAc,EAAE;QACd,QAAQ,EAAE,EAAE;QACZ,QAAQ,EAAE,GAAG;QACb,KAAK,EAAE,sDAAsD;KAC9D;IACD,QAAQ,EAAE;QACR,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,sBAAsB,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC7D,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,sBAAsB,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC7D,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,0BAA0B,EAAE,QAAQ,EAAE,IAAI,EAAE;QACjE,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,sBAAsB,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC7D,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,oBAAoB,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC3D,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,0BAA0B,EAAE,QAAQ,EAAE,KAAK,EAAE;KACnE;IACD,SAAS,EAAE;QACT;YACE,GAAG,EAAE,cAAc;YACnB,KAAK,EAAE,yBAAyB;YAChC,WAAW,EAAE,8BAA8B;YAC3C,OAAO,EAAE,UAAU;YACnB,QAAQ,EAAE,IAAI;SACf;KACF;IACD,UAAU,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoCb;IACC,oBAAoB,EAAE;;;;;;;;;;;;;;;;;;;;;;;CAuBvB;IACC,gBAAgB,EAAE;;;;;;;;;;;CAWnB;CACA,CAAC;AAEF,+CAA+C;AAC/C,MAAM,CAAC,MAAM,qBAAqB,GAAsB;IACtD,EAAE,EAAE,cAAc;IAClB,IAAI,EAAE,6BAA6B;IACnC,QAAQ,EAAE,UAAU;IACpB,WAAW,EAAE,MAAM;IACnB,WAAW,EAAE,sEAAsE;IACnF,IAAI,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,eAAe,EAAE,UAAU,EAAE,UAAU,CAAC;IAClE,eAAe,EAAE,GAAG;IACpB,cAAc,EAAE;QACd,QAAQ,EAAE,EAAE;QACZ,QAAQ,EAAE,EAAE;QACZ,KAAK,EAAE,mEAAmE;KAC3E;IACD,QAAQ,EAAE;QACR,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,uBAAuB,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC9D,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,uBAAuB,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC9D,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,IAAI,EAAE;QACpD,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB,EAAE,QAAQ,EAAE,IAAI,EAAE;QACzD,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,mBAAmB,EAAE,QAAQ,EAAE,KAAK,EAAE;QAC3D,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,qBAAqB,EAAE,QAAQ,EAAE,KAAK,EAAE;KAC9D;IACD,SAAS,EAAE;QACT;YACE,GAAG,EAAE,cAAc;YACnB,KAAK,EAAE,yBAAyB;YAChC,WAAW,EAAE,8BAA8B;YAC3C,OAAO,EAAE,UAAU;YACnB,QAAQ,EAAE,IAAI;SACf;KACF;IACD,UAAU,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAwCb;IACC,oBAAoB,EAAE;;;;;;;;;;;;;;;;;;;;;;;CAuBvB;IACC,gBAAgB,EAAE;;;;;;;;;;;CAWnB;CACA,CAAC;AAEF,0BAA0B;AAC1B,MAAM,CAAC,MAAM,mBAAmB,GAAsB;IACpD,EAAE,EAAE,YAAY;IAChB,IAAI,EAAE,0CAA0C;IAChD,QAAQ,EAAE,UAAU;IACpB,WAAW,EAAE,MAAM;IACnB,WAAW,EAAE,+DAA+D;IAC5E,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,gBAAgB,CAAC;IAChE,eAAe,EAAE,GAAG;IACpB,cAAc,EAAE;QACd,QAAQ,EAAE,EAAE;QACZ,QAAQ,EAAE,EAAE;QACZ,KAAK,EAAE,iDAAiD;KACzD;IACD,QAAQ,EAAE;QACR,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,qBAAqB,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC5D,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,qBAAqB,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC5D,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,mBAAmB,EAAE,QAAQ,EAAE,KAAK,EAAE;QAC3D,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,qBAAqB,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC5D,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,0BAA0B,EAAE,QAAQ,EAAE,IAAI,EAAE;QACjE,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,qBAAqB,EAAE,QAAQ,EAAE,IAAI,EAAE;KAC7D;IACD,SAAS,EAAE;QACT;YACE,GAAG,EAAE,cAAc;YACnB,KAAK,EAAE,yBAAyB;YAChC,WAAW,EAAE,8BAA8B;YAC3C,OAAO,EAAE,UAAU;YACnB,QAAQ,EAAE,IAAI;SACf;KACF;IACD,UAAU,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqCb;IACC,oBAAoB,EAAE;;;;;;;;;;;;;;;;;;;;;;;CAuBvB;IACC,gBAAgB,EAAE;;;;;;;;;;;CAWnB;CACA,CAAC"}

package/dist/engine/spec-templates/templates-perf-integration.d.ts

@@ -0,0 +1,6 @@
+import type { SpecTemplateEntry } from '../../types/spec-templates.js';
+/** Performance optimization spec template. */
+export declare const PERFORMANCE_OPTIMIZATION_TEMPLATE: SpecTemplateEntry;
+/** Third-party integration spec template. */
+export declare const THIRD_PARTY_INTEGRATION_TEMPLATE: SpecTemplateEntry;
+//# sourceMappingURL=templates-perf-integration.d.ts.map

package/dist/engine/spec-templates/templates-perf-integration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"templates-perf-integration.d.ts","sourceRoot":"","sources":["../../../src/engine/spec-templates/templates-perf-integration.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAEvE,8CAA8C;AAC9C,eAAO,MAAM,iCAAiC,EAAE,iBA+G/C,CAAC;AAEF,6CAA6C;AAC7C,eAAO,MAAM,gCAAgC,EAAE,iBA4G9C,CAAC"}

package/dist/engine/spec-templates/templates-perf-integration.js

@@ -0,0 +1,226 @@
+// engine/spec-templates/templates-perf-integration.ts — Performance + third-party integration templates.
+// Extracted from catalog-extra.ts to keep file sizes within limits.
+/** Performance optimization spec template. */
+export const PERFORMANCE_OPTIMIZATION_TEMPLATE = {
+    id: 'performance-optimization',
+    name: 'Performance Optimization',
+    category: 'performance',
+    description: 'Measurable performance improvements with before/after benchmarks.',
+    tags: ['performance', 'optimization', 'caching', 'benchmarks'],
+    complexityScore: 'L',
+    estimationBase: {
+        hoursMin: 16,
+        hoursMax: 60,
+        notes: 'Highly variable by root cause; includes benchmarking setup',
+    },
+    criteria: [
+        { id: 'AC-1', title: 'Baseline measurement', required: true },
+        { id: 'AC-2', title: 'Optimization implementation', required: true },
+        { id: 'AC-3', title: 'Cache strategy', required: false },
+        { id: 'AC-4', title: 'Validation', required: true },
+        { id: 'AC-5', title: 'Observability', required: false },
+    ],
+    variables: [
+        {
+            key: 'TargetArea',
+            label: 'Target area',
+            description: 'The specific area to optimize (e.g. API response time, DB queries)',
+            example: 'API response time',
+            required: true,
+        },
+        {
+            key: 'CurrentBaseline',
+            label: 'Current baseline',
+            description: 'Current measured performance metric',
+            example: 'P95 latency: 800ms',
+            required: false,
+            defaultValue: 'TBD — measure before starting',
+        },
+        {
+            key: 'TargetGoal',
+            label: 'Target goal',
+            description: 'Desired performance metric after optimization',
+            example: 'P95 latency: < 200ms',
+            required: false,
+            defaultValue: 'TBD — define after baseline measurement',
+        },
+    ],
+    huTemplate: `# HU: Performance Optimization — {{TargetArea}}
+
+## User Story
+As a user, I want {{TargetArea}} to be faster so that the application feels responsive.
+
+## Baseline
+- Current: {{CurrentBaseline}}
+- Target: {{TargetGoal}}
+
+## Acceptance Criteria
+
+### AC-1: Baseline measurement
+- [ ] Benchmark suite established before any changes
+- [ ] Metrics captured: P50, P95, P99 latency, throughput, error rate
+- [ ] Benchmark results stored for comparison
+
+### AC-2: Optimization implementation
+- [ ] Root cause of performance issue identified and documented
+- [ ] Optimization applied at the correct layer
+- [ ] No correctness regression introduced by optimization
+
+### AC-3: Cache strategy (if applicable)
+- [ ] Cache invalidation strategy defined
+- [ ] Cache hit rate monitored
+- [ ] Cache warm-up procedure documented
+
+### AC-4: Validation
+- [ ] Post-optimization benchmark shows improvement vs baseline
+- [ ] Target goal reached or documented with explanation if not
+- [ ] Load test confirms improvement holds under concurrent traffic
+
+### AC-5: Observability
+- [ ] Performance metrics added to dashboard
+- [ ] Regression alert configured (auto-detect if P95 degrades)
+`,
+    fichaTecnicaTemplate: `# FICHA TÉCNICA: Performance Optimization — {{TargetArea}}
+
+## Affected Files
+- (determined during root-cause analysis)
+- monitoring/dashboards/{{TargetArea}}
+- benchmarks/{{TargetArea}}
+
+## Types / Entities
+- \`BenchmarkResult\`: timestamp, p50, p95, p99, throughput, errorRate
+- \`CacheEntry\` (if caching): key, value, ttl, hitCount
+
+## Risks
+- Optimization that breaks correctness → benchmark must include correctness tests
+- Cache inconsistency → strong consistency tests required
+- Performance regression after unrelated change → regression alert required
+
+## Estimation (rough)
+- Dev: 4–20 hours (highly variable by root cause)
+- Review: 2–4 hours
+- Difficulty: 3–4/5
+`,
+    progressTemplate: `# PROGRESS: Performance Optimization — {{TargetArea}}
+
+## Status: draft
+
+## Criteria
+- [ ] AC-1: Baseline measurement
+- [ ] AC-2: Optimization implementation
+- [ ] AC-3: Cache strategy
+- [ ] AC-4: Validation
+- [ ] AC-5: Observability
+`,
+};
+/** Third-party integration spec template. */
+export const THIRD_PARTY_INTEGRATION_TEMPLATE = {
+    id: 'third-party-integration',
+    name: 'Third-Party Integration',
+    category: 'integration',
+    description: 'Integrating with an external service (payment, email, SMS, CRM, etc.).',
+    tags: ['integration', 'external', 'api', 'webhook'],
+    complexityScore: 'M',
+    estimationBase: {
+        hoursMin: 16,
+        hoursMax: 40,
+        notes: 'Includes webhook handling and circuit breaker setup',
+    },
+    criteria: [
+        { id: 'AC-1', title: 'Credentials management', required: true },
+        { id: 'AC-2', title: 'Core integration', required: true },
+        { id: 'AC-3', title: 'Error handling', required: true },
+        { id: 'AC-4', title: 'Webhooks', required: false },
+        { id: 'AC-5', title: 'Observability', required: false },
+        { id: 'AC-6', title: 'Testing', required: true },
+    ],
+    variables: [
+        {
+            key: 'ServiceName',
+            label: 'Service name',
+            description: 'Name of the external service to integrate',
+            example: 'Stripe',
+            required: true,
+        },
+        {
+            key: 'IntegrationPurpose',
+            label: 'Purpose',
+            description: 'What the integration enables',
+            example: 'payment processing',
+            required: true,
+        },
+    ],
+    huTemplate: `# HU: {{ServiceName}} Integration
+
+## User Story
+As a developer, I want to integrate {{ServiceName}} so that the platform can handle {{IntegrationPurpose}} reliably.
+
+## Acceptance Criteria
+
+### AC-1: Credentials management
+- [ ] API keys and secrets stored in environment variables (never hardcoded)
+- [ ] Separate credentials for development, staging, and production
+- [ ] Credential rotation documented in runbook
+
+### AC-2: Core integration
+- [ ] {{ServiceName}} SDK or HTTP client initialized with proper config
+- [ ] All calls wrapped in retry logic with exponential backoff
+- [ ] Timeouts configured (no infinite waits)
+
+### AC-3: Error handling
+- [ ] {{ServiceName}} API errors mapped to internal error types
+- [ ] Network failures do not crash the application
+- [ ] Errors logged with enough context for debugging
+
+### AC-4: Webhooks (if applicable)
+- [ ] Webhook endpoint validates signature before processing
+- [ ] Events processed idempotently (replay-safe)
+- [ ] Failed event processing alerts the on-call team
+
+### AC-5: Observability
+- [ ] All outbound calls logged (method, status, latency)
+- [ ] Circuit breaker implemented for high-traffic paths
+
+### AC-6: Testing
+- [ ] Unit tests mock {{ServiceName}} client
+- [ ] Integration tests use sandbox/test environment
+- [ ] Webhook tests replay recorded payloads
+`,
+    fichaTecnicaTemplate: `# FICHA TÉCNICA: {{ServiceName}} Integration
+
+## Affected Files
+- integrations/{{ServiceName}}/client
+- integrations/{{ServiceName}}/webhook-handler
+- integrations/{{ServiceName}}/error-mapper
+- config/{{ServiceName}}-config
+- tests/integrations/{{ServiceName}}
+
+## Types / Entities
+- \`{{ServiceName}}Config\`: apiKey, baseUrl, timeout, retries
+- \`{{ServiceName}}Error\`: code, message, retryable
+- \`WebhookEvent\`: id, type, payload, receivedAt
+
+## Risks
+- Vendor API changes without notice → pin SDK version, monitor changelogs
+- Rate limits exceeded → implement request queuing
+- Credentials leaked → secrets manager mandatory
+
+## Estimation (rough)
+- Dev: 8–20 hours
+- Review: 2–4 hours
+- Difficulty: 3/5
+`,
+    progressTemplate: `# PROGRESS: {{ServiceName}} Integration
+
+## Status: draft
+
+## Criteria
+- [ ] AC-1: Credentials management
+- [ ] AC-2: Core integration
+- [ ] AC-3: Error handling
+- [ ] AC-4: Webhooks
+- [ ] AC-5: Observability
+- [ ] AC-6: Testing
+`,
+};
+//# sourceMappingURL=templates-perf-integration.js.map

package/dist/engine/spec-templates/templates-perf-integration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"templates-perf-integration.js","sourceRoot":"","sources":["../../../src/engine/spec-templates/templates-perf-integration.ts"],"names":[],"mappings":"AAAA,yGAAyG;AACzG,oEAAoE;AAIpE,8CAA8C;AAC9C,MAAM,CAAC,MAAM,iCAAiC,GAAsB;IAClE,EAAE,EAAE,0BAA0B;IAC9B,IAAI,EAAE,0BAA0B;IAChC,QAAQ,EAAE,aAAa;IACvB,WAAW,EAAE,mEAAmE;IAChF,IAAI,EAAE,CAAC,aAAa,EAAE,cAAc,EAAE,SAAS,EAAE,YAAY,CAAC;IAC9D,eAAe,EAAE,GAAG;IACpB,cAAc,EAAE;QACd,QAAQ,EAAE,EAAE;QACZ,QAAQ,EAAE,EAAE;QACZ,KAAK,EAAE,4DAA4D;KACpE;IACD,QAAQ,EAAE;QACR,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,sBAAsB,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC7D,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,6BAA6B,EAAE,QAAQ,EAAE,IAAI,EAAE;QACpE,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,KAAK,EAAE;QACxD,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE;QACnD,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE,KAAK,EAAE;KACxD;IACD,SAAS,EAAE;QACT;YACE,GAAG,EAAE,YAAY;YACjB,KAAK,EAAE,aAAa;YACpB,WAAW,EAAE,oEAAoE;YACjF,OAAO,EAAE,mBAAmB;YAC5B,QAAQ,EAAE,IAAI;SACf;QACD;YACE,GAAG,EAAE,iBAAiB;YACtB,KAAK,EAAE,kBAAkB;YACzB,WAAW,EAAE,qCAAqC;YAClD,OAAO,EAAE,oBAAoB;YAC7B,QAAQ,EAAE,KAAK;YACf,YAAY,EAAE,+BAA+B;SAC9C;QACD;YACE,GAAG,EAAE,YAAY;YACjB,KAAK,EAAE,aAAa;YACpB,WAAW,EAAE,+CAA+C;YAC5D,OAAO,EAAE,sBAAsB;YAC/B,QAAQ,EAAE,KAAK;YACf,YAAY,EAAE,yCAAyC;SACxD;KACF;IACD,UAAU,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkCb;IACC,oBAAoB,EAAE;;;;;;;;;;;;;;;;;;;;CAoBvB;IACC,gBAAgB,EAAE;;;;;;;;;;CAUnB;CACA,CAAC;AAEF,6CAA6C;AAC7C,MAAM,CAAC,MAAM,gCAAgC,GAAsB;IACjE,EAAE,EAAE,yBAAyB;IAC7B,IAAI,EAAE,yBAAyB;IAC/B,QAAQ,EAAE,aAAa;IACvB,WAAW,EAAE,wEAAwE;IACrF,IAAI,EAAE,CAAC,aAAa,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,CAAC;IACnD,eAAe,EAAE,GAAG;IACpB,cAAc,EAAE;QACd,QAAQ,EAAE,EAAE;QACZ,QAAQ,EAAE,EAAE;QACZ,KAAK,EAAE,qDAAqD;KAC7D;IACD,QAAQ,EAAE;QACR,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,wBAAwB,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC/D,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB,EAAE,QAAQ,EAAE,IAAI,EAAE;QACzD,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,IAAI,EAAE;QACvD,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE;QAClD,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE,KAAK,EAAE;QACvD,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE;KACjD;IACD,SAAS,EAAE;QACT;YACE,GAAG,EAAE,aAAa;YAClB,KAAK,EAAE,cAAc;YACrB,WAAW,EAAE,2CAA2C;YACxD,OAAO,EAAE,QAAQ;YACjB,QAAQ,EAAE,IAAI;SACf;QACD;YACE,GAAG,EAAE,oBAAoB;YACzB,KAAK,EAAE,SAAS;YAChB,WAAW,EAAE,8BAA8B;YAC3C,OAAO,EAAE,oBAAoB;YAC7B,QAAQ,EAAE,IAAI;SACf;KACF;IACD,UAAU,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmCb;IACC,oBAAoB,EAAE;;;;;;;;;;;;;;;;;;;;;;;CAuBvB;IACC,gBAAgB,EAAE;;;;;;;;;;;CAWnB;CACA,CAAC"}

package/dist/engine/vector-store/hnsw.d.ts

@@ -0,0 +1,37 @@
+import type { HNSWConfig, HNSWSearchCandidate, HNSWSerializedState } from '../../types/index.js';
+/**
+ * HNSW (Hierarchical Navigable Small World) index.
+ * For corpus < flatSearchThreshold, delegates to brute-force flat search.
+ */
+export declare class HNSWIndex {
+    private readonly config;
+    private readonly nodes;
+    private entryPoint;
+    private maxLayer;
+    constructor(config?: Partial<HNSWConfig>);
+    /** Number of indexed vectors. */
+    get size(): number;
+    /** Insert a vector into the index. */
+    insert(id: string, vector: number[]): void;
+    /** Remove a vector from the index. */
+    remove(id: string): boolean;
+    /** Search for the top-K nearest neighbors. Uses flat search for small corpus. */
+    search(query: number[], topK: number): HNSWSearchCandidate[];
+    /** Brute-force flat search -- guaranteed recall = 1.0. */
+    private flatSearch;
+    /** HNSW graph search -- approximate, O(log n). */
+    private hnswSearch;
+    /** Greedy walk to the closest node in a given layer. */
+    private greedyClosest;
+    /** Search a single layer, returning ef closest candidates. */
+    private searchLayer;
+    /** Prune connections to keep at most M neighbors. */
+    private pruneConnections;
+    /** Random level for a new node (geometric distribution). */
+    private randomLevel;
+    /** Export the index for serialization. */
+    exportState(): HNSWSerializedState;
+    /** Import the index from serialized form. */
+    importState(state: HNSWSerializedState): void;
+}
+//# sourceMappingURL=hnsw.d.ts.map

package/dist/engine/vector-store/hnsw.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hnsw.d.ts","sourceRoot":"","sources":["../../../src/engine/vector-store/hnsw.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,UAAU,EAEV,mBAAmB,EACnB,mBAAmB,EACpB,MAAM,sBAAsB,CAAC;AAG9B;;;GAGG;AACH,qBAAa,SAAS;IACpB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAa;IACpC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA+B;IACrD,OAAO,CAAC,UAAU,CAAuB;IACzC,OAAO,CAAC,QAAQ,CAAK;gBAET,MAAM,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC;IASxC,iCAAiC;IACjC,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,sCAAsC;IACtC,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI;IA8D1C,sCAAsC;IACtC,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;IA2C3B,iFAAiF;IACjF,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,mBAAmB,EAAE;IAa5D,0DAA0D;IAC1D,OAAO,CAAC,UAAU;IASlB,kDAAkD;IAClD,OAAO,CAAC,UAAU;IAelB,wDAAwD;IACxD,OAAO,CAAC,aAAa;IA6CrB,8DAA8D;IAC9D,OAAO,CAAC,WAAW;IAuEnB,qDAAqD;IACrD,OAAO,CAAC,gBAAgB;IAexB,4DAA4D;IAC5D,OAAO,CAAC,WAAW;IASnB,0CAA0C;IAC1C,WAAW,IAAI,mBAAmB;IASlC,6CAA6C;IAC7C,WAAW,CAAC,KAAK,EAAE,mBAAmB,GAAG,IAAI;CAS9C"}