@planu/cli 0.28.0 → 0.30.0

package/dist/engine/spec-templates/catalog-industry.js

@@ -0,0 +1,19 @@
+// engine/spec-templates/catalog-industry.ts — Industry vertical templates (AC-04).
+// Re-exports all industry templates from their dedicated files.
+import { FINTECH_KYC_TEMPLATE, FINTECH_TRANSACTIONS_TEMPLATE, FINTECH_COMPLIANCE_TEMPLATE, } from './templates-industry-fintech.js';
+import { HEALTHTECH_PATIENT_RECORDS_TEMPLATE, HEALTHTECH_APPOINTMENTS_TEMPLATE, ECOMMERCE_CART_CHECKOUT_TEMPLATE, ECOMMERCE_INVENTORY_TEMPLATE, } from './templates-industry-health-ecom.js';
+import { SAAS_MULTI_TENANT_TEMPLATE, SAAS_BILLING_TEMPLATE, SAAS_ROLES_TEMPLATE, } from './templates-industry-saas.js';
+/** All industry vertical templates. */
+export const INDUSTRY_TEMPLATES = [
+    FINTECH_KYC_TEMPLATE,
+    FINTECH_TRANSACTIONS_TEMPLATE,
+    FINTECH_COMPLIANCE_TEMPLATE,
+    HEALTHTECH_PATIENT_RECORDS_TEMPLATE,
+    HEALTHTECH_APPOINTMENTS_TEMPLATE,
+    ECOMMERCE_CART_CHECKOUT_TEMPLATE,
+    ECOMMERCE_INVENTORY_TEMPLATE,
+    SAAS_MULTI_TENANT_TEMPLATE,
+    SAAS_BILLING_TEMPLATE,
+    SAAS_ROLES_TEMPLATE,
+];
+//# sourceMappingURL=catalog-industry.js.map

package/dist/engine/spec-templates/catalog-industry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog-industry.js","sourceRoot":"","sources":["../../../src/engine/spec-templates/catalog-industry.ts"],"names":[],"mappings":"AAAA,mFAAmF;AACnF,gEAAgE;AAGhE,OAAO,EACL,oBAAoB,EACpB,6BAA6B,EAC7B,2BAA2B,GAC5B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,mCAAmC,EACnC,gCAAgC,EAChC,gCAAgC,EAChC,4BAA4B,GAC7B,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,0BAA0B,EAC1B,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,8BAA8B,CAAC;AAEtC,uCAAuC;AACvC,MAAM,CAAC,MAAM,kBAAkB,GAAwB;IACrD,oBAAoB;IACpB,6BAA6B;IAC7B,2BAA2B;IAC3B,mCAAmC;IACnC,gCAAgC;IAChC,gCAAgC;IAChC,4BAA4B;IAC5B,0BAA0B;IAC1B,qBAAqB;IACrB,mBAAmB;CACpB,CAAC"}

package/dist/engine/spec-templates/catalog.d.ts

@@ -1,4 +1,4 @@
 import type { SpecTemplateEntry } from '../../types/spec-templates.js';
-/** Full catalog of built-in spec templates (core + extra). */
+/** Full catalog of built-in spec templates (core + extra + industry). */
 export declare const BUILT_IN_TEMPLATES: SpecTemplateEntry[];
 //# sourceMappingURL=catalog.d.ts.map

package/dist/engine/spec-templates/catalog.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"catalog.d.ts","sourceRoot":"","sources":["../../../src/engine/spec-templates/catalog.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AA+XvE,8DAA8D;AAC9D,eAAO,MAAM,kBAAkB,EAAE,iBAAiB,EAA4C,CAAC"}
+{"version":3,"file":"catalog.d.ts","sourceRoot":"","sources":["../../../src/engine/spec-templates/catalog.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAMvE,yEAAyE;AACzE,eAAO,MAAM,kBAAkB,EAAE,iBAAiB,EAOjD,CAAC"}

package/dist/engine/spec-templates/catalog.js

@@ -1,386 +1,17 @@
 // engine/spec-templates/catalog.ts — Built-in template catalog (language-agnostic).
 // Each template is framework/language agnostic: no TypeScript-specific terms.
-// Templates 6-8 (data, security, performance) live in catalog-extra.ts to keep file size ≤500L.
+// Templates are defined in dedicated files and assembled here.
+import { AUTH_JWT_TEMPLATE, CRUD_ENTITY_TEMPLATE } from './templates-auth-crud.js';
+import { REST_API_ENDPOINT_TEMPLATE, UI_FORM_TEMPLATE } from './templates-api-ui.js';
 import { EXTRA_TEMPLATES } from './catalog-extra.js';
-/** Full catalog of built-in spec templates (core entries — templates 1–5). */
-const CORE_TEMPLATES = [
-    {
-        id: 'auth-jwt',
-        name: 'JWT Authentication',
-        category: 'auth',
-        description: 'User authentication flow with JWT tokens: login, logout, refresh, and guards.',
-        tags: ['auth', 'jwt', 'security', 'session'],
-        variables: [
-            {
-                key: 'EntityName',
-                label: 'Entity name',
-                description: 'The name of the authenticated entity (User, Admin, Member…)',
-                example: 'User',
-                required: true,
-            },
-            {
-                key: 'TokenExpiry',
-                label: 'Token expiry',
-                description: 'JWT access token expiry duration',
-                example: '15 minutes',
-                required: false,
-                defaultValue: '15 minutes',
-            },
-        ],
-        huTemplate: `# HU: JWT Authentication for {{EntityName}}
-
-## User Story
-As a {{EntityName}}, I want to securely authenticate with JWT tokens so that my session is stateless and protected.
-
-## Acceptance Criteria
-
-### AC-1: Login endpoint
-- [ ] POST /auth/login accepts credentials and returns access + refresh tokens
-- [ ] Access token expires after {{TokenExpiry}}
-- [ ] Refresh token stored server-side and rotated on each use
-- [ ] Failed login returns 401 with no sensitive detail
-
-### AC-2: Protected route guard
-- [ ] Every protected endpoint validates the Bearer token
-- [ ] Expired or invalid tokens return 401
-- [ ] Tampered tokens are rejected and logged
-
-### AC-3: Token refresh
-- [ ] POST /auth/refresh issues new access token given a valid refresh token
-- [ ] Refresh token is single-use (rotation strategy)
-
-### AC-4: Logout
-- [ ] POST /auth/logout invalidates the refresh token server-side
-- [ ] Client-side storage is cleared by the caller
-
-### AC-5: Security requirements
-- [ ] Passwords stored as salted hash (bcrypt or Argon2 equivalent)
-- [ ] HTTPS enforced in production
-- [ ] Rate limiting on /auth/login (max 5 requests/minute per IP)
-- [ ] Brute-force protection with account lockout after N failures
-
-## Out of Scope
-- OAuth2 / SSO providers (create separate spec)
-- Multi-factor authentication (create separate spec)
-`,
-        fichaTecnicaTemplate: `# FICHA TÉCNICA: JWT Authentication for {{EntityName}}
-
-## Affected Files
-- auth/login handler
-- auth/refresh handler
-- auth/logout handler
-- auth/middleware (token guard)
-- storage/token-store (refresh token persistence)
-- config/auth-config (token secrets, expiry settings)
-
-## Types / Entities
-- \`{{EntityName}}\`: id, email, passwordHash, createdAt
-- \`AuthTokenPair\`: accessToken, refreshToken, expiresIn
-- \`RefreshTokenRecord\`: token, entityId, expiresAt, usedAt
-
-## Risks
-- Token secret exposure → rotate secrets without downtime (risk: high)
-- Refresh token replay attack → single-use rotation required
-- Brute force on login → rate limiting + lockout required
-
-## Estimation (rough)
-- Dev: 8–16 hours
-- Review: 2–4 hours
-- Difficulty: 3/5
-`,
-        progressTemplate: `# PROGRESS: JWT Authentication for {{EntityName}}
-
-## Status: draft
-
-## Criteria
-- [ ] AC-1: Login endpoint
-- [ ] AC-2: Protected route guard
-- [ ] AC-3: Token refresh
-- [ ] AC-4: Logout
-- [ ] AC-5: Security requirements
-`,
-    },
-    {
-        id: 'crud-entity',
-        name: 'CRUD Entity',
-        category: 'crud',
-        description: 'Full Create/Read/Update/Delete lifecycle for any data entity.',
-        tags: ['crud', 'rest', 'api', 'database'],
-        variables: [
-            {
-                key: 'EntityName',
-                label: 'Entity name',
-                description: 'Name of the entity (singular, PascalCase)',
-                example: 'Product',
-                required: true,
-            },
-            {
-                key: 'EntityPlural',
-                label: 'Entity plural',
-                description: 'Plural form of the entity name',
-                example: 'Products',
-                required: true,
-            },
-        ],
-        huTemplate: `# HU: CRUD for {{EntityName}}
-
-## User Story
-As a user, I want to create, view, update and delete {{EntityPlural}} so that I can manage them effectively.
-
-## Acceptance Criteria
-
-### AC-1: Create {{EntityName}}
-- [ ] POST /{{EntityPlural}} accepts valid payload and persists the entity
-- [ ] Duplicate detection where applicable
-- [ ] Returns the created entity with generated ID and timestamps
-
-### AC-2: List {{EntityPlural}}
-- [ ] GET /{{EntityPlural}} returns paginated list
-- [ ] Supports filtering and sorting by key fields
-- [ ] Empty list returns 200 with empty array (not 404)
-
-### AC-3: Get single {{EntityName}}
-- [ ] GET /{{EntityPlural}}/:id returns the entity or 404
-- [ ] Soft-deleted entities return 404
-
-### AC-4: Update {{EntityName}}
-- [ ] PATCH /{{EntityPlural}}/:id applies partial update
-- [ ] PUT /{{EntityPlural}}/:id replaces the full entity
-- [ ] Returns updated entity on success
-
-### AC-5: Delete {{EntityName}}
-- [ ] DELETE /{{EntityPlural}}/:id performs soft delete by default
-- [ ] Hard delete available as a privileged action
-- [ ] Returns 204 No Content on success
-
-### AC-6: Validation
-- [ ] All inputs validated at the API boundary
-- [ ] Invalid fields return 422 with per-field error messages
-`,
-        fichaTecnicaTemplate: `# FICHA TÉCNICA: CRUD for {{EntityName}}
-
-## Affected Files
-- handlers/{{EntityPlural}}/create
-- handlers/{{EntityPlural}}/list
-- handlers/{{EntityPlural}}/get
-- handlers/{{EntityPlural}}/update
-- handlers/{{EntityPlural}}/delete
-- storage/{{EntityPlural}}-repository
-- types/{{EntityName}}
-
-## Types / Entities
-- \`{{EntityName}}\`: id, createdAt, updatedAt, deletedAt (nullable)
-- \`Create{{EntityName}}Input\`: entity fields (validated)
-- \`Update{{EntityName}}Input\`: partial entity fields
-- \`List{{EntityPlural}}Query\`: page, limit, sortBy, order, filters
-
-## Risks
-- Missing soft-delete → data loss risk
-- Unbounded list without pagination → performance risk
-- Missing input validation → injection risk
-
-## Estimation (rough)
-- Dev: 6–12 hours
-- Review: 1–3 hours
-- Difficulty: 2/5
-`,
-        progressTemplate: `# PROGRESS: CRUD for {{EntityName}}
-
-## Status: draft
-
-## Criteria
-- [ ] AC-1: Create {{EntityName}}
-- [ ] AC-2: List {{EntityPlural}}
-- [ ] AC-3: Get single {{EntityName}}
-- [ ] AC-4: Update {{EntityName}}
-- [ ] AC-5: Delete {{EntityName}}
-- [ ] AC-6: Validation
-`,
-    },
-    {
-        id: 'rest-api-endpoint',
-        name: 'REST API Endpoint',
-        category: 'api',
-        description: 'A single REST endpoint with validation, error handling, and documentation.',
-        tags: ['api', 'rest', 'endpoint', 'openapi'],
-        variables: [
-            {
-                key: 'EndpointName',
-                label: 'Endpoint name',
-                description: 'Short descriptive name for this endpoint',
-                example: 'Submit Order',
-                required: true,
-            },
-            {
-                key: 'HttpMethod',
-                label: 'HTTP Method',
-                description: 'HTTP method: GET, POST, PUT, PATCH, DELETE',
-                example: 'POST',
-                required: true,
-            },
-            {
-                key: 'Path',
-                label: 'URL path',
-                description: 'The URL path for this endpoint',
-                example: '/orders/submit',
-                required: true,
-            },
-        ],
-        huTemplate: `# HU: REST API Endpoint — {{EndpointName}}
-
-## User Story
-As an API consumer, I want a reliable {{HttpMethod}} {{Path}} endpoint so that I can {{EndpointName}} without client-side workarounds.
-
-## Acceptance Criteria
-
-### AC-1: Request validation
-- [ ] Input schema validated at the boundary
-- [ ] Invalid requests return 422 with structured error messages
-- [ ] Content-Type header checked when applicable
-
-### AC-2: Core business logic
-- [ ] {{EndpointName}} logic is encapsulated in a dedicated use-case function
-- [ ] Side effects (emails, notifications, jobs) are isolated and testable
-
-### AC-3: Response contract
-- [ ] Success response follows the API response envelope convention
-- [ ] HTTP status codes match the operation semantics
-- [ ] Response schema is documented (OpenAPI or equivalent)
-
-### AC-4: Error handling
-- [ ] All error paths return structured JSON (not stack traces)
-- [ ] 404 returned for missing resources
-- [ ] 409 returned for conflicts
-- [ ] 500 never leaks internal details
-
-### AC-5: Idempotency (if applicable)
-- [ ] Idempotency key header supported for non-idempotent operations
-- [ ] Duplicate requests handled gracefully
-
-### AC-6: Observability
-- [ ] Endpoint logged with method, path, status, latency
-- [ ] Errors reported to the monitoring system
-`,
-        fichaTecnicaTemplate: `# FICHA TÉCNICA: REST API Endpoint — {{EndpointName}}
-
-## Affected Files
-- handlers/{{Path}} (route handler)
-- use-cases/{{EndpointName}} (business logic)
-- validators/{{EndpointName}}-input
-- openapi/paths/{{Path}} (documentation)
-
-## Types / Entities
-- \`{{EndpointName}}Input\`: validated request payload
-- \`{{EndpointName}}Output\`: response body shape
-- \`ApiError\`: code, message, details[]
-
-## Risks
-- Missing idempotency for mutation → duplicate side effects
-- Unbounded response size → add pagination or field projection
-- Missing auth guard → unauthorized access
-
-## Estimation (rough)
-- Dev: 4–8 hours
-- Review: 1–2 hours
-- Difficulty: 2/5
-`,
-        progressTemplate: `# PROGRESS: REST API Endpoint — {{EndpointName}}
-
-## Status: draft
-
-## Criteria
-- [ ] AC-1: Request validation
-- [ ] AC-2: Core business logic
-- [ ] AC-3: Response contract
-- [ ] AC-4: Error handling
-- [ ] AC-5: Idempotency
-- [ ] AC-6: Observability
-`,
-    },
-    {
-        id: 'ui-form',
-        name: 'UI Form',
-        category: 'ui',
-        description: 'Interactive form with validation, error display, and accessibility.',
-        tags: ['ui', 'form', 'ux', 'accessibility', 'validation'],
-        variables: [
-            {
-                key: 'FormName',
-                label: 'Form name',
-                description: 'Name of the form (e.g. Registration, Checkout, Contact)',
-                example: 'Registration',
-                required: true,
-            },
-        ],
-        huTemplate: `# HU: {{FormName}} Form
-
-## User Story
-As a user, I want to fill out the {{FormName}} form with clear guidance so that I can complete the action without confusion.
-
-## Acceptance Criteria
-
-### AC-1: Field validation
-- [ ] Required fields marked visually
-- [ ] Validation runs on blur and on submit
-- [ ] Error messages appear adjacent to invalid fields
-- [ ] Valid fields show positive feedback
-
-### AC-2: Submit behavior
-- [ ] Form is disabled (loading state) during submission
-- [ ] Success state shown after successful submission
-- [ ] Errors from the API are displayed inline
-
-### AC-3: Accessibility
-- [ ] All inputs have visible labels
-- [ ] Error messages linked via aria-describedby
-- [ ] Form navigable via keyboard (Tab, Enter, Escape)
-- [ ] Screen reader announces validation errors
-
-### AC-4: Responsive design
-- [ ] Form renders correctly on mobile, tablet, and desktop
-- [ ] Touch targets meet minimum size (44×44 px)
-
-### AC-5: Reset and cancel
-- [ ] Reset clears all fields and removes error state
-- [ ] Cancel navigates away without data loss warning if form is pristine
-- [ ] Cancel shows confirmation dialog if form has unsaved changes
-`,
-        fichaTecnicaTemplate: `# FICHA TÉCNICA: {{FormName}} Form
-
-## Affected Files
-- components/{{FormName}}Form
-- hooks/use{{FormName}}Form (form state, validation)
-- api/{{FormName}}-client (submission)
-- i18n/{{FormName}}-form.json (strings)
-
-## Types / Entities
-- \`{{FormName}}FormValues\`: all field values
-- \`{{FormName}}FormErrors\`: per-field error messages
-- \`{{FormName}}FormState\`: idle | submitting | success | error
-
-## Risks
-- Missing server-side validation mirror → inconsistent UX
-- Missing loading state → double submissions
-- Missing ARIA attributes → accessibility failures
-
-## Estimation (rough)
-- Dev: 4–10 hours
-- Review: 1–2 hours
-- Difficulty: 2/5
-`,
-        progressTemplate: `# PROGRESS: {{FormName}} Form
-
-## Status: draft
-
-## Criteria
-- [ ] AC-1: Field validation
-- [ ] AC-2: Submit behavior
-- [ ] AC-3: Accessibility
-- [ ] AC-4: Responsive design
-- [ ] AC-5: Reset and cancel
-`,
-    },
+import { INDUSTRY_TEMPLATES } from './catalog-industry.js';
+/** Full catalog of built-in spec templates (core + extra + industry). */
+export const BUILT_IN_TEMPLATES = [
+    AUTH_JWT_TEMPLATE,
+    CRUD_ENTITY_TEMPLATE,
+    REST_API_ENDPOINT_TEMPLATE,
+    UI_FORM_TEMPLATE,
+    ...EXTRA_TEMPLATES,
+    ...INDUSTRY_TEMPLATES,
 ];
-/** Full catalog of built-in spec templates (core + extra). */
-export const BUILT_IN_TEMPLATES = [...CORE_TEMPLATES, ...EXTRA_TEMPLATES];
 //# sourceMappingURL=catalog.js.map

package/dist/engine/spec-templates/catalog.js.map

@@ -1 +1 @@
-{"version":3,"file":"catalog.js","sourceRoot":"","sources":["../../../src/engine/spec-templates/catalog.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,8EAA8E;AAC9E,gGAAgG;AAGhG,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,8EAA8E;AAC9E,MAAM,cAAc,GAAwB;IAC1C;QACE,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,oBAAoB;QAC1B,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,+EAA+E;QAC5F,IAAI,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,CAAC;QAC5C,SAAS,EAAE;YACT;gBACE,GAAG,EAAE,YAAY;gBACjB,KAAK,EAAE,aAAa;gBACpB,WAAW,EAAE,6DAA6D;gBAC1E,OAAO,EAAE,MAAM;gBACf,QAAQ,EAAE,IAAI;aACf;YACD;gBACE,GAAG,EAAE,aAAa;gBAClB,KAAK,EAAE,cAAc;gBACrB,WAAW,EAAE,kCAAkC;gBAC/C,OAAO,EAAE,YAAY;gBACrB,QAAQ,EAAE,KAAK;gBACf,YAAY,EAAE,YAAY;aAC3B;SACF;QACD,UAAU,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmCf;QACG,oBAAoB,EAAE;;;;;;;;;;;;;;;;;;;;;;;;CAwBzB;QACG,gBAAgB,EAAE;;;;;;;;;;CAUrB;KACE;IACD;QACE,EAAE,EAAE,aAAa;QACjB,IAAI,EAAE,aAAa;QACnB,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,+DAA+D;QAC5E,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC;QACzC,SAAS,EAAE;YACT;gBACE,GAAG,EAAE,YAAY;gBACjB,KAAK,EAAE,aAAa;gBACpB,WAAW,EAAE,2CAA2C;gBACxD,OAAO,EAAE,SAAS;gBAClB,QAAQ,EAAE,IAAI;aACf;YACD;gBACE,GAAG,EAAE,cAAc;gBACnB,KAAK,EAAE,eAAe;gBACtB,WAAW,EAAE,gCAAgC;gBAC7C,OAAO,EAAE,UAAU;gBACnB,QAAQ,EAAE,IAAI;aACf;SACF;QACD,UAAU,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkCf;QACG,oBAAoB,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;CA0BzB;QACG,gBAAgB,EAAE;;;;;;;;;;;CAWrB;KACE;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,IAAI,EAAE,mBAAmB;QACzB,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,4EAA4E;QACzF,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,CAAC;QAC5C,SAAS,EAAE;YACT;gBACE,GAAG,EAAE,cAAc;gBACnB,KAAK,EAAE,eAAe;gBACtB,WAAW,EAAE,0CAA0C;gBACvD,OAAO,EAAE,cAAc;gBACvB,QAAQ,EAAE,IAAI;aACf;YACD;gBACE,GAAG,EAAE,YAAY;gBACjB,KAAK,EAAE,aAAa;gBACpB,WAAW,EAAE,4CAA4C;gBACzD,OAAO,EAAE,MAAM;gBACf,QAAQ,EAAE,IAAI;aACf;YACD;gBACE,GAAG,EAAE,MAAM;gBACX,KAAK,EAAE,UAAU;gBACjB,WAAW,EAAE,gCAAgC;gBAC7C,OAAO,EAAE,gBAAgB;gBACzB,QAAQ,EAAE,IAAI;aACf;SACF;QACD,UAAU,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkCf;QACG,oBAAoB,EAAE;;;;;;;;;;;;;;;;;;;;;;CAsBzB;QACG,gBAAgB,EAAE;;;;;;;;;;;CAWrB;KACE;IACD;QACE,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,qEAAqE;QAClF,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,YAAY,CAAC;QACzD,SAAS,EAAE;YACT;gBACE,GAAG,EAAE,UAAU;gBACf,KAAK,EAAE,WAAW;gBAClB,WAAW,EAAE,yDAAyD;gBACtE,OAAO,EAAE,cAAc;gBACvB,QAAQ,EAAE,IAAI;aACf;SACF;QACD,UAAU,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgCf;QACG,oBAAoB,EAAE;;;;;;;;;;;;;;;;;;;;;;CAsBzB;QACG,gBAAgB,EAAE;;;;;;;;;;CAUrB;KACE;CACF,CAAC;AAEF,8DAA8D;AAC9D,MAAM,CAAC,MAAM,kBAAkB,GAAwB,CAAC,GAAG,cAAc,EAAE,GAAG,eAAe,CAAC,CAAC"}
+{"version":3,"file":"catalog.js","sourceRoot":"","sources":["../../../src/engine/spec-templates/catalog.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,8EAA8E;AAC9E,+DAA+D;AAG/D,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AACnF,OAAO,EAAE,0BAA0B,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACrF,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAE3D,yEAAyE;AACzE,MAAM,CAAC,MAAM,kBAAkB,GAAwB;IACrD,iBAAiB;IACjB,oBAAoB;IACpB,0BAA0B;IAC1B,gBAAgB;IAChB,GAAG,eAAe;IAClB,GAAG,kBAAkB;CACtB,CAAC"}

package/dist/engine/spec-templates/custom-loader.d.ts

@@ -0,0 +1,12 @@
+import type { SpecTemplateEntry, CustomTemplateLoadResult } from '../../types/spec-templates.js';
+/**
+ * Loads custom templates from a directory. Each .json file is validated.
+ * Malformed files generate warnings but do not block loading of other templates.
+ */
+export declare function loadCustomTemplates(baseDir?: string): Promise<CustomTemplateLoadResult>;
+/**
+ * Merges custom templates with built-in templates.
+ * Custom templates override built-in templates with the same ID.
+ */
+export declare function mergeTemplates(builtIn: SpecTemplateEntry[], custom: SpecTemplateEntry[]): SpecTemplateEntry[];
+//# sourceMappingURL=custom-loader.d.ts.map

package/dist/engine/spec-templates/custom-loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"custom-loader.d.ts","sourceRoot":"","sources":["../../../src/engine/spec-templates/custom-loader.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACV,iBAAiB,EACjB,wBAAwB,EAEzB,MAAM,+BAA+B,CAAC;AA6DvC;;;GAGG;AACH,wBAAsB,mBAAmB,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,CAAC,CA6B7F;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,iBAAiB,EAAE,EAC5B,MAAM,EAAE,iBAAiB,EAAE,GAC1B,iBAAiB,EAAE,CAIrB"}

package/dist/engine/spec-templates/custom-loader.js

@@ -0,0 +1,99 @@
+// engine/spec-templates/custom-loader.ts — Loads custom user templates from data/global/.
+// AC-06: Custom templates from data/global/spec-templates/custom/.
+// AC-11: Validates with Zod, reports malformed templates as warnings.
+import { readdir, readFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { z } from 'zod';
+/** Zod schema for validating custom template JSON files. */
+const templateVariableSchema = z.object({
+    key: z.string().min(1),
+    label: z.string().min(1),
+    description: z.string().min(1),
+    example: z.string().min(1),
+    required: z.boolean(),
+    defaultValue: z.string().optional(),
+});
+const templateCriterionSchema = z.object({
+    id: z.string().min(1),
+    title: z.string().min(1),
+    required: z.boolean(),
+});
+const complexityScoreSchema = z.enum(['S', 'M', 'L', 'XL']);
+const estimationBaseSchema = z.object({
+    hoursMin: z.number().nonnegative(),
+    hoursMax: z.number().nonnegative(),
+    notes: z.string(),
+});
+const templateCategorySchema = z.enum([
+    'auth',
+    'crud',
+    'api',
+    'ui',
+    'infra',
+    'testing',
+    'integration',
+    'data',
+    'security',
+    'performance',
+    'industry',
+]);
+const industrySubcategorySchema = z.enum(['fintech', 'healthtech', 'ecommerce', 'saas']);
+const customTemplateSchema = z.object({
+    id: z.string().min(1),
+    name: z.string().min(1),
+    category: templateCategorySchema,
+    subcategory: industrySubcategorySchema.optional(),
+    description: z.string().min(1),
+    tags: z.array(z.string()),
+    complexityScore: complexityScoreSchema,
+    estimationBase: estimationBaseSchema,
+    criteria: z.array(templateCriterionSchema),
+    variables: z.array(templateVariableSchema),
+    huTemplate: z.string().min(1),
+    fichaTecnicaTemplate: z.string().min(1),
+    progressTemplate: z.string().min(1),
+});
+/** Default directory for custom user templates. */
+const CUSTOM_TEMPLATES_DIR = 'data/global/spec-templates/custom';
+/**
+ * Loads custom templates from a directory. Each .json file is validated.
+ * Malformed files generate warnings but do not block loading of other templates.
+ */
+export async function loadCustomTemplates(baseDir) {
+    const dir = baseDir ?? CUSTOM_TEMPLATES_DIR;
+    const templates = [];
+    const warnings = [];
+    let files;
+    try {
+        files = await readdir(dir);
+    }
+    catch {
+        // Directory does not exist — not an error, just no custom templates
+        return { templates, warnings };
+    }
+    const jsonFiles = files.filter((f) => f.endsWith('.json'));
+    for (const file of jsonFiles) {
+        const filePath = join(dir, file);
+        try {
+            const content = await readFile(filePath, 'utf-8');
+            const parsed = JSON.parse(content);
+            const validated = customTemplateSchema.parse(parsed);
+            templates.push(validated);
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            warnings.push({ file: filePath, error: message });
+        }
+    }
+    return { templates, warnings };
+}
+/**
+ * Merges custom templates with built-in templates.
+ * Custom templates override built-in templates with the same ID.
+ */
+export function mergeTemplates(builtIn, custom) {
+    const customIds = new Set(custom.map((t) => t.id));
+    const filtered = builtIn.filter((t) => !customIds.has(t.id));
+    return [...filtered, ...custom];
+}
+//# sourceMappingURL=custom-loader.js.map

package/dist/engine/spec-templates/custom-loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"custom-loader.js","sourceRoot":"","sources":["../../../src/engine/spec-templates/custom-loader.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAC1F,mEAAmE;AACnE,sEAAsE;AAEtE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB,4DAA4D;AAC5D,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACpC,CAAC,CAAC;AAEH,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;CACtB,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;AAE5D,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE;IAClC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE;IAClC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;CAClB,CAAC,CAAC;AAEH,MAAM,sBAAsB,GAAG,CAAC,CAAC,IAAI,CAAC;IACpC,MAAM;IACN,MAAM;IACN,KAAK;IACL,IAAI;IACJ,OAAO;IACP,SAAS;IACT,aAAa;IACb,MAAM;IACN,UAAU;IACV,aAAa;IACb,UAAU;CACX,CAAC,CAAC;AAEH,MAAM,yBAAyB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;AAEzF,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,QAAQ,EAAE,sBAAsB;IAChC,WAAW,EAAE,yBAAyB,CAAC,QAAQ,EAAE;IACjD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACzB,eAAe,EAAE,qBAAqB;IACtC,cAAc,EAAE,oBAAoB;IACpC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC;IAC1C,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC;IAC1C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACpC,CAAC,CAAC;AAEH,mDAAmD;AACnD,MAAM,oBAAoB,GAAG,mCAAmC,CAAC;AAEjE;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,OAAgB;IACxD,MAAM,GAAG,GAAG,OAAO,IAAI,oBAAoB,CAAC;IAC5C,MAAM,SAAS,GAAwB,EAAE,CAAC;IAC1C,MAAM,QAAQ,GAA4B,EAAE,CAAC;IAE7C,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,oEAAoE;QACpE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;IACjC,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IAE3D,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAClD,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC5C,MAAM,SAAS,GAAG,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACrD,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;AACjC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAC5B,OAA4B,EAC5B,MAA2B;IAE3B,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7D,OAAO,CAAC,GAAG,QAAQ,EAAE,GAAG,MAAM,CAAC,CAAC;AAClC,CAAC"}

package/dist/engine/spec-templates/index.d.ts

@@ -1,4 +1,6 @@
 export { BUILT_IN_TEMPLATES } from './catalog.js';
-export { listTemplates, findTemplate, getAvailableCategories } from './query.js';
-export { renderTemplate, interpolate, findMissingRequired } from './renderer.js';
+export { INDUSTRY_TEMPLATES } from './catalog-industry.js';
+export { listTemplates, findTemplate, findTemplateWithCustom, getAvailableCategories, } from './query.js';
+export { renderTemplate, interpolate, findMissingRequired, resolveCriteria, filterHuByCriteria, filterProgressByCriteria, buildEstimationSection, } from './renderer.js';
+export { loadCustomTemplates, mergeTemplates } from './custom-loader.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/engine/spec-templates/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/engine/spec-templates/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AACjF,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/engine/spec-templates/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EACL,aAAa,EACb,YAAY,EACZ,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,cAAc,EACd,WAAW,EACX,mBAAmB,EACnB,eAAe,EACf,kBAAkB,EAClB,wBAAwB,EACxB,sBAAsB,GACvB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/engine/spec-templates/index.js

@@ -1,5 +1,7 @@
 // engine/spec-templates/index.ts — Public API barrel for spec-templates engine.
 export { BUILT_IN_TEMPLATES } from './catalog.js';
-export { listTemplates, findTemplate, getAvailableCategories } from './query.js';
-export { renderTemplate, interpolate, findMissingRequired } from './renderer.js';
+export { INDUSTRY_TEMPLATES } from './catalog-industry.js';
+export { listTemplates, findTemplate, findTemplateWithCustom, getAvailableCategories, } from './query.js';
+export { renderTemplate, interpolate, findMissingRequired, resolveCriteria, filterHuByCriteria, filterProgressByCriteria, buildEstimationSection, } from './renderer.js';
+export { loadCustomTemplates, mergeTemplates } from './custom-loader.js';
 //# sourceMappingURL=index.js.map

package/dist/engine/spec-templates/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/engine/spec-templates/index.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAEhF,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AACjF,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/engine/spec-templates/index.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAEhF,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EACL,aAAa,EACb,YAAY,EACZ,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,cAAc,EACd,WAAW,EACX,mBAAmB,EACnB,eAAe,EACf,kBAAkB,EAClB,wBAAwB,EACxB,sBAAsB,GACvB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/engine/spec-templates/query.d.ts

@@ -1,12 +1,20 @@
-import type { SpecTemplateEntry, TemplateCategory, ListTemplatesResult } from '../../types/spec-templates.js';
+import type { SpecTemplateEntry, TemplateCategory, TemplateComplexity, ListTemplatesResult, CustomTemplateWarning } from '../../types/spec-templates.js';
 /**
- * Lists templates from the catalog, optionally filtered by category and/or search term.
+ * Lists templates from the catalog, optionally filtered by category, search, and complexity.
+ * Includes custom user templates from data/global/spec-templates/custom/.
  */
-export declare function listTemplates(category?: TemplateCategory, search?: string): ListTemplatesResult;
+export declare function listTemplates(category?: TemplateCategory, search?: string, complexityScore?: TemplateComplexity, customDir?: string): Promise<{
+    result: ListTemplatesResult;
+    warnings: CustomTemplateWarning[];
+}>;
 /**
- * Returns a single template by ID, or undefined if not found.
+ * Returns a single template by ID (built-in only, sync).
  */
 export declare function findTemplate(templateId: string): SpecTemplateEntry | undefined;
+/**
+ * Returns a single template by ID, searching built-in and custom templates.
+ */
+export declare function findTemplateWithCustom(templateId: string, customDir?: string): Promise<SpecTemplateEntry | undefined>;
 /**
  * Returns all available categories that have at least one template.
  */

package/dist/engine/spec-templates/query.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"query.d.ts","sourceRoot":"","sources":["../../../src/engine/spec-templates/query.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,iBAAiB,EACjB,gBAAgB,EAChB,mBAAmB,EAEpB,MAAM,+BAA+B,CAAC;AAkBvC;;GAEG;AACH,wBAAgB,aAAa,CAAC,QAAQ,CAAC,EAAE,gBAAgB,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,mBAAmB,CA6B/F;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS,CAE9E;AAED;;GAEG;AACH,wBAAgB,sBAAsB,IAAI,gBAAgB,EAAE,CAG3D"}
+{"version":3,"file":"query.d.ts","sourceRoot":"","sources":["../../../src/engine/spec-templates/query.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,iBAAiB,EACjB,gBAAgB,EAChB,kBAAkB,EAClB,mBAAmB,EAEnB,qBAAqB,EACtB,MAAM,+BAA+B,CAAC;AAsBvC;;;GAGG;AACH,wBAAsB,aAAa,CACjC,QAAQ,CAAC,EAAE,gBAAgB,EAC3B,MAAM,CAAC,EAAE,MAAM,EACf,eAAe,CAAC,EAAE,kBAAkB,EACpC,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC;IAAE,MAAM,EAAE,mBAAmB,CAAC;IAAC,QAAQ,EAAE,qBAAqB,EAAE,CAAA;CAAE,CAAC,CAwC7E;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS,CAE9E;AAED;;GAEG;AACH,wBAAsB,sBAAsB,CAC1C,UAAU,EAAE,MAAM,EAClB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC,CAIxC;AAED;;GAEG;AACH,wBAAgB,sBAAsB,IAAI,gBAAgB,EAAE,CAG3D"}