@planu/cli 0.45.5 → 0.47.0

package/dist/config/tool-groups.json

@@ -109,6 +109,7 @@
         "suggest_tooling",
         "suggest_stack",
         "suggest_mcps",
+        "suggest_mcp_server",
         "plan_upgrade",
         "check_versions",
         "check_config_health",
@@ -127,6 +128,7 @@
       "tools": [
         "security_check",
         "data_governance",
+        "legal_compliance_report",
         "manage_scope",
         "manage_context",
         "context_budget",

package/dist/engine/detectors/mcp-candidate-detector.d.ts

@@ -0,0 +1,13 @@
+import type { ProjectKnowledge } from '../../types/index.js';
+import type { McpCandidateScore, McpAppDomain } from '../../types/mcp-recommendation.js';
+/**
+ * Detect which application domains apply to a project based on its knowledge.
+ * Returns matching domains excluding 'generic'.
+ */
+export declare function detectAppDomains(knowledge: ProjectKnowledge): McpAppDomain[];
+/**
+ * Score whether a project is a good candidate for an MCP server layer.
+ * Examines API contracts, stack, external services, app types, and detected domains.
+ */
+export declare function scoreMcpCandidate(knowledge: ProjectKnowledge): McpCandidateScore;
+//# sourceMappingURL=mcp-candidate-detector.d.ts.map

package/dist/engine/detectors/mcp-candidate-detector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-candidate-detector.d.ts","sourceRoot":"","sources":["../../../src/engine/detectors/mcp-candidate-detector.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,KAAK,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AA2KzF;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,gBAAgB,GAAG,YAAY,EAAE,CAc5E;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,gBAAgB,GAAG,iBAAiB,CAuEhF"}

package/dist/engine/detectors/mcp-candidate-detector.js

@@ -0,0 +1,245 @@
+// Planu — MCP Candidate Detector
+// Scores whether a project should create an MCP server layer based on
+// its ProjectKnowledge (API contracts, stack, external services, etc.).
+// ---------------------------------------------------------------------------
+// Keyword dictionaries
+// ---------------------------------------------------------------------------
+const APP_DOMAIN_KEYWORDS = {
+    crm: [
+        'salesforce',
+        'hubspot',
+        'contact',
+        'customer',
+        'lead',
+        'account',
+        'deal',
+        'pipeline',
+        'opportunity',
+        'crm',
+    ],
+    billing: [
+        'invoice',
+        'billing',
+        'subscription',
+        'payment',
+        'refund',
+        'chargeback',
+        'pricing',
+        'plan',
+        'coupon',
+    ],
+    inventory: [
+        'stock',
+        'warehouse',
+        'sku',
+        'shipment',
+        'order',
+        'fulfillment',
+        'inventory',
+        'supply-chain',
+    ],
+    healthcare: [
+        'patient',
+        'medical',
+        'health',
+        'clinic',
+        'hospital',
+        'appointment',
+        'ehr',
+        'fhir',
+        'hipaa',
+    ],
+    ecommerce: [
+        'product',
+        'cart',
+        'catalog',
+        'storefront',
+        'marketplace',
+        'shopify',
+        'woocommerce',
+        'checkout',
+    ],
+    'project-mgmt': [
+        'jira',
+        'asana',
+        'sprint',
+        'task',
+        'issue',
+        'backlog',
+        'kanban',
+        'agile',
+        'ticket',
+    ],
+    social: [
+        'chat',
+        'messaging',
+        'feed',
+        'timeline',
+        'friend',
+        'follower',
+        'community',
+        'post',
+        'comment',
+    ],
+    gaming: ['game', 'player', 'leaderboard', 'match', 'lobby', 'multiplayer', 'score', 'level'],
+    iot: ['mqtt', 'sensor', 'device', 'firmware', 'telemetry', 'smart-home', 'zigbee'],
+    hr: ['employee', 'payroll', 'recruitment', 'hiring', 'onboarding', 'timesheet', 'leave'],
+    logistics: [
+        'logistics',
+        'shipping',
+        'delivery',
+        'warehouse',
+        'tracking',
+        'fleet',
+        'route',
+        'freight',
+    ],
+    media: ['content', 'publishing', 'editorial', 'streaming', 'video', 'podcast', 'cms', 'drm'],
+    government: ['government', 'citizen', 'municipal', 'permit', 'license', 'e-gov', 'fedramp'],
+    generic: [],
+};
+const API_FRAMEWORK_KEYWORDS = [
+    'express',
+    'fastify',
+    'nestjs',
+    'koa',
+    'hapi',
+    'django',
+    'flask',
+    'fastapi',
+    'rails',
+    'spring',
+    'gin',
+    'fiber',
+    'echo',
+    'actix',
+    'rocket',
+];
+const BACKEND_APP_TYPES = ['backend', 'api', 'server', 'worker'];
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+/** Normalize a string for keyword matching (lowercase, trim). */
+function normalize(s) {
+    return s.toLowerCase().trim();
+}
+/**
+ * Build a flat searchable corpus from ProjectKnowledge.
+ * Defensive against partial data — callers may pass incomplete objects (e.g., tests with `as never`).
+ */
+function buildCorpus(knowledge) {
+    /* eslint-disable @typescript-eslint/no-unnecessary-condition */
+    const parts = [
+        knowledge.language ?? '',
+        knowledge.framework ?? '',
+        knowledge.orm ?? '',
+        knowledge.database ?? '',
+        knowledge.packageManager ?? '',
+        ...(knowledge.stack ?? []),
+        ...(knowledge.externalServices ?? []),
+        ...(knowledge.layers ?? []),
+        ...Object.keys(knowledge.conventions ?? {}),
+        ...Object.values(knowledge.conventions ?? {}),
+        ...Object.keys(knowledge.tooling ?? {}),
+        ...Object.values(knowledge.tooling ?? {}),
+        ...(knowledge.apiContracts ?? []).map((c) => `${c.type} ${c.endpoints.join(' ')}`),
+        ...(knowledge.apps ?? []).flatMap((a) => [
+            a.name,
+            a.type,
+            a.language,
+            a.framework ?? '',
+            a.orm ?? '',
+        ]),
+    ];
+    /* eslint-enable @typescript-eslint/no-unnecessary-condition */
+    return normalize(parts.join(' '));
+}
+/** Check if corpus contains any keyword from list. */
+function matchesAny(corpus, keywords) {
+    return keywords.some((kw) => corpus.includes(normalize(kw)));
+}
+// ---------------------------------------------------------------------------
+// Public API
+// ---------------------------------------------------------------------------
+/**
+ * Detect which application domains apply to a project based on its knowledge.
+ * Returns matching domains excluding 'generic'.
+ */
+export function detectAppDomains(knowledge) {
+    const corpus = buildCorpus(knowledge);
+    const domains = [];
+    for (const [domain, keywords] of Object.entries(APP_DOMAIN_KEYWORDS)) {
+        if (domain === 'generic') {
+            continue;
+        }
+        if (matchesAny(corpus, keywords)) {
+            domains.push(domain);
+        }
+    }
+    return domains;
+}
+/**
+ * Score whether a project is a good candidate for an MCP server layer.
+ * Examines API contracts, stack, external services, app types, and detected domains.
+ */
+export function scoreMcpCandidate(knowledge) {
+    /* eslint-disable @typescript-eslint/no-unnecessary-condition */
+    let score = 0;
+    const reasons = [];
+    // API contracts defined → +3
+    const contracts = knowledge.apiContracts ?? [];
+    if (contracts.length > 0) {
+        score += 3;
+        reasons.push(`Project has ${contracts.length} API contracts defined`);
+    }
+    // ORM + known database → +3
+    const orm = knowledge.orm ?? null;
+    const db = knowledge.database ?? 'unknown';
+    if (orm && db !== 'unknown') {
+        score += 3;
+        reasons.push(`Project uses ${orm} with ${db}`);
+    }
+    // Backend/API/server/worker apps → +2
+    const apps = knowledge.apps ?? [];
+    const hasBackendApp = apps.some((a) => BACKEND_APP_TYPES.some((t) => a.type.toLowerCase().includes(t)));
+    if (hasBackendApp) {
+        score += 2;
+        reasons.push('Project has backend/API applications');
+    }
+    // External services → +2
+    const services = knowledge.externalServices ?? [];
+    if (services.length > 0) {
+        score += 2;
+        reasons.push(`Project integrates ${services.length} external services`);
+    }
+    // API framework in stack → +2
+    const stack = knowledge.stack ?? [];
+    const framework = knowledge.framework ?? '';
+    const allStackItems = [...stack, framework].map((s) => normalize(s));
+    const matchedFramework = API_FRAMEWORK_KEYWORDS.find((fw) => allStackItems.some((item) => item.includes(fw)));
+    if (matchedFramework) {
+        score += 2;
+        reasons.push(`Project uses ${matchedFramework} (API framework)`);
+    }
+    // Detected app domains → +2
+    const detectedDomains = detectAppDomains(knowledge);
+    if (detectedDomains.length > 0) {
+        score += 2;
+        reasons.push(`Detected domains: ${detectedDomains.join(', ')}`);
+    }
+    // Already uses MCP ecosystem → +1
+    const mcps = knowledge.availableMcps ?? [];
+    if (mcps.length > 0) {
+        score += 1;
+        reasons.push('Project already uses MCP ecosystem');
+    }
+    /* eslint-enable @typescript-eslint/no-unnecessary-condition */
+    return {
+        score,
+        reasons,
+        detectedDomains,
+        isStrongCandidate: score >= 5,
+        isSoftCandidate: score >= 3 && score < 5,
+    };
+}
+//# sourceMappingURL=mcp-candidate-detector.js.map

package/dist/engine/detectors/mcp-candidate-detector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-candidate-detector.js","sourceRoot":"","sources":["../../../src/engine/detectors/mcp-candidate-detector.ts"],"names":[],"mappings":"AAAA,iCAAiC;AACjC,sEAAsE;AACtE,wEAAwE;AAKxE,8EAA8E;AAC9E,uBAAuB;AACvB,8EAA8E;AAE9E,MAAM,mBAAmB,GAAmC;IAC1D,GAAG,EAAE;QACH,YAAY;QACZ,SAAS;QACT,SAAS;QACT,UAAU;QACV,MAAM;QACN,SAAS;QACT,MAAM;QACN,UAAU;QACV,aAAa;QACb,KAAK;KACN;IACD,OAAO,EAAE;QACP,SAAS;QACT,SAAS;QACT,cAAc;QACd,SAAS;QACT,QAAQ;QACR,YAAY;QACZ,SAAS;QACT,MAAM;QACN,QAAQ;KACT;IACD,SAAS,EAAE;QACT,OAAO;QACP,WAAW;QACX,KAAK;QACL,UAAU;QACV,OAAO;QACP,aAAa;QACb,WAAW;QACX,cAAc;KACf;IACD,UAAU,EAAE;QACV,SAAS;QACT,SAAS;QACT,QAAQ;QACR,QAAQ;QACR,UAAU;QACV,aAAa;QACb,KAAK;QACL,MAAM;QACN,OAAO;KACR;IACD,SAAS,EAAE;QACT,SAAS;QACT,MAAM;QACN,SAAS;QACT,YAAY;QACZ,aAAa;QACb,SAAS;QACT,aAAa;QACb,UAAU;KACX;IACD,cAAc,EAAE;QACd,MAAM;QACN,OAAO;QACP,QAAQ;QACR,MAAM;QACN,OAAO;QACP,SAAS;QACT,QAAQ;QACR,OAAO;QACP,QAAQ;KACT;IACD,MAAM,EAAE;QACN,MAAM;QACN,WAAW;QACX,MAAM;QACN,UAAU;QACV,QAAQ;QACR,UAAU;QACV,WAAW;QACX,MAAM;QACN,SAAS;KACV;IACD,MAAM,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,OAAO,CAAC;IAC5F,GAAG,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,CAAC;IAClF,EAAE,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,OAAO,CAAC;IACxF,SAAS,EAAE;QACT,WAAW;QACX,UAAU;QACV,UAAU;QACV,WAAW;QACX,UAAU;QACV,OAAO;QACP,OAAO;QACP,SAAS;KACV;IACD,KAAK,EAAE,CAAC,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC;IAC5F,UAAU,EAAE,CAAC,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC;IAC3F,OAAO,EAAE,EAAE;CACZ,CAAC;AAEF,MAAM,sBAAsB,GAAG;IAC7B,SAAS;IACT,SAAS;IACT,QAAQ;IACR,KAAK;IACL,MAAM;IACN,QAAQ;IACR,OAAO;IACP,SAAS;IACT,OAAO;IACP,QAAQ;IACR,KAAK;IACL,OAAO;IACP,MAAM;IACN,OAAO;IACP,QAAQ;CACT,CAAC;AAEF,MAAM,iBAAiB,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;AAEjE,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,iEAAiE;AACjE,SAAS,SAAS,CAAC,CAAS;IAC1B,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;AAChC,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAAC,SAA2B;IAC9C,gEAAgE;IAChE,MAAM,KAAK,GAAa;QACtB,SAAS,CAAC,QAAQ,IAAI,EAAE;QACxB,SAAS,CAAC,SAAS,IAAI,EAAE;QACzB,SAAS,CAAC,GAAG,IAAI,EAAE;QACnB,SAAS,CAAC,QAAQ,IAAI,EAAE;QACxB,SAAS,CAAC,cAAc,IAAI,EAAE;QAC9B,GAAG,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC;QAC1B,GAAG,CAAC,SAAS,CAAC,gBAAgB,IAAI,EAAE,CAAC;QACrC,GAAG,CAAC,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC;QAC3B,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,IAAI,EAAE,CAAC;QAC3C,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,IAAI,EAAE,CAAC;QAC7C,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,IAAI,EAAE,CAAC;QACvC,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,IAAI,EAAE,CAAC;QACzC,GAAG,CAAC,SAAS,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAClF,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YACvC,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,SAAS,IAAI,EAAE;YACjB,CAAC,CAAC,GAAG,IAAI,EAAE;SACZ,CAAC;KACH,CAAC;IACF,+DAA+D;IAC/D,OAAO,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACpC,CAAC;AAED,sDAAsD;AACtD,SAAS,UAAU,CAAC,MAAc,EAAE,QAAkB;IACpD,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,SAA2B;IAC1D,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;IACtC,MAAM,OAAO,GAAmB,EAAE,CAAC;IAEnC,KAAK,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACrE,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,SAAS;QACX,CAAC;QACD,IAAI,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;YACjC,OAAO,CAAC,IAAI,CAAC,MAAsB,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,SAA2B;IAC3D,gEAAgE;IAChE,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,6BAA6B;IAC7B,MAAM,SAAS,GAAG,SAAS,CAAC,YAAY,IAAI,EAAE,CAAC;IAC/C,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,KAAK,IAAI,CAAC,CAAC;QACX,OAAO,CAAC,IAAI,CAAC,eAAe,SAAS,CAAC,MAAM,wBAAwB,CAAC,CAAC;IACxE,CAAC;IAED,4BAA4B;IAC5B,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,IAAI,IAAI,CAAC;IAClC,MAAM,EAAE,GAAG,SAAS,CAAC,QAAQ,IAAI,SAAS,CAAC;IAC3C,IAAI,GAAG,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;QAC5B,KAAK,IAAI,CAAC,CAAC;QACX,OAAO,CAAC,IAAI,CAAC,gBAAgB,GAAG,SAAS,EAAE,EAAE,CAAC,CAAC;IACjD,CAAC;IAED,sCAAsC;IACtC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC;IAClC,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CACpC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAChE,CAAC;IACF,IAAI,aAAa,EAAE,CAAC;QAClB,KAAK,IAAI,CAAC,CAAC;QACX,OAAO,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;IACvD,CAAC;IAED,yBAAyB;IACzB,MAAM,QAAQ,GAAG,SAAS,CAAC,gBAAgB,IAAI,EAAE,CAAC;IAClD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,KAAK,IAAI,CAAC,CAAC;QACX,OAAO,CAAC,IAAI,CAAC,sBAAsB,QAAQ,CAAC,MAAM,oBAAoB,CAAC,CAAC;IAC1E,CAAC;IAED,8BAA8B;IAC9B,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC;IACpC,MAAM,SAAS,GAAG,SAAS,CAAC,SAAS,IAAI,EAAE,CAAC;IAC5C,MAAM,aAAa,GAAG,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IACrE,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAC1D,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAChD,CAAC;IACF,IAAI,gBAAgB,EAAE,CAAC;QACrB,KAAK,IAAI,CAAC,CAAC;QACX,OAAO,CAAC,IAAI,CAAC,gBAAgB,gBAAgB,kBAAkB,CAAC,CAAC;IACnE,CAAC;IAED,4BAA4B;IAC5B,MAAM,eAAe,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IACpD,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,KAAK,IAAI,CAAC,CAAC;QACX,OAAO,CAAC,IAAI,CAAC,qBAAqB,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClE,CAAC;IAED,kCAAkC;IAClC,MAAM,IAAI,GAAG,SAAS,CAAC,aAAa,IAAI,EAAE,CAAC;IAC3C,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpB,KAAK,IAAI,CAAC,CAAC;QACX,OAAO,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;IACrD,CAAC;IACD,+DAA+D;IAE/D,OAAO;QACL,KAAK;QACL,OAAO;QACP,eAAe;QACf,iBAAiB,EAAE,KAAK,IAAI,CAAC;QAC7B,eAAe,EAAE,KAAK,IAAI,CAAC,IAAI,KAAK,GAAG,CAAC;KACzC,CAAC;AACJ,CAAC"}

package/dist/engine/legal-compliance/criteria-injector.d.ts

@@ -0,0 +1,18 @@
+import type { LegalProfile } from '../../types/index.js';
+/**
+ * Checks whether a legal profile warrants injection of legal content.
+ * Returns true if the profile has domains beyond 'universal' or has countries specified.
+ */
+export declare function shouldInjectLegal(profile: LegalProfile | null | undefined): boolean;
+/**
+ * Generates an array of acceptance criteria strings to add to spec.md.
+ * These are meta-criteria that remind the implementer to check legal requirements.
+ * Returns 3-6 criteria based on detected domains.
+ */
+export declare function generateLegalCriteria(profile: LegalProfile, _specDescription: string): string[];
+/**
+ * Generates a markdown section to append to technical.md with legal compliance research instructions.
+ * Since the MCP server has no LLM access, this generates prompts/instructions for the calling LLM.
+ */
+export declare function generateLegalSection(profile: LegalProfile, specDescription: string): string;
+//# sourceMappingURL=criteria-injector.d.ts.map

package/dist/engine/legal-compliance/criteria-injector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"criteria-injector.d.ts","sourceRoot":"","sources":["../../../src/engine/legal-compliance/criteria-injector.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAe,MAAM,sBAAsB,CAAC;AA+DtE;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,YAAY,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CASnF;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,GAAG,MAAM,EAAE,CAoC/F;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,GAAG,MAAM,CA0E3F"}

package/dist/engine/legal-compliance/criteria-injector.js

@@ -0,0 +1,176 @@
+// criteria-injector — Generates legal compliance content for spec injection
+import { getQuestionsForDomains, buildLegalPrompt } from './question-framework.js';
+/** Domain-to-criteria templates: each domain yields focused meta-criteria */
+const DOMAIN_CRITERIA_TEMPLATES = {
+    billing: [
+        'Validate invoice format against local tax authority requirements',
+        'Implement mandatory tax calculation and reporting per applicable jurisdiction',
+    ],
+    health: [
+        'Ensure health data handling complies with applicable medical privacy laws (e.g., HIPAA, local equivalents)',
+        'Implement audit logging for all access to protected health information',
+    ],
+    fintech: [
+        'Verify compliance with financial regulation and anti-money laundering requirements',
+        'Implement transaction record retention per applicable financial laws',
+    ],
+    education: [
+        'Verify compliance with student data privacy laws (e.g., FERPA, local equivalents)',
+        'Implement parental consent mechanisms where student age requires it',
+    ],
+    ecommerce: [
+        'Implement mandatory consumer protection disclosures per target market',
+        'Ensure refund and cancellation policies meet local consumer law requirements',
+    ],
+    social: [
+        'Implement content moderation mechanisms as required by applicable platform regulation',
+        'Verify compliance with user data portability and deletion rights',
+    ],
+    gaming: [
+        'Verify compliance with age rating and content classification requirements',
+        'Implement loot box / in-app purchase disclosures per applicable gaming regulation',
+    ],
+    'ai-ml': [
+        'Implement transparency disclosures for AI-generated content per applicable AI regulation',
+        'Verify compliance with algorithmic bias and fairness requirements',
+    ],
+    iot: [
+        'Ensure device data collection complies with applicable IoT privacy regulation',
+        'Implement mandatory security update mechanisms per connected device laws',
+    ],
+    hr: [
+        'Verify employee data handling complies with applicable labor and privacy laws',
+        'Implement mandatory data retention and deletion schedules for personnel records',
+    ],
+    'real-estate': [
+        'Verify compliance with fair housing and anti-discrimination laws in property listings',
+        'Implement mandatory property disclosure requirements per jurisdiction',
+    ],
+    logistics: [
+        'Verify compliance with customs and cross-border data transfer regulations',
+        'Implement shipment tracking data retention per applicable transport law',
+    ],
+    media: [
+        'Verify compliance with copyright and intellectual property laws for content distribution',
+        'Implement mandatory content licensing and attribution mechanisms',
+    ],
+    government: [
+        'Ensure compliance with public sector accessibility standards (e.g., WCAG, Section 508)',
+        'Implement mandatory data sovereignty and residency requirements for government data',
+    ],
+};
+/**
+ * Checks whether a legal profile warrants injection of legal content.
+ * Returns true if the profile has domains beyond 'universal' or has countries specified.
+ */
+export function shouldInjectLegal(profile) {
+    if (profile === null || profile === undefined) {
+        return false;
+    }
+    const hasNonUniversalDomains = profile.domains.some((d) => d !== 'universal');
+    const hasCountries = profile.countries.length > 0;
+    return hasNonUniversalDomains || hasCountries;
+}
+/**
+ * Generates an array of acceptance criteria strings to add to spec.md.
+ * These are meta-criteria that remind the implementer to check legal requirements.
+ * Returns 3-6 criteria based on detected domains.
+ */
+export function generateLegalCriteria(profile, _specDescription) {
+    const criteria = [];
+    // Always add data protection criterion if countries are specified
+    if (profile.countries.length > 0) {
+        const countryList = profile.countries.join(', ');
+        criteria.push(`Verify compliance with data protection laws for target countries: [${countryList}]`);
+    }
+    // Add domain-specific criteria
+    for (const domain of profile.domains) {
+        if (domain === 'universal') {
+            continue;
+        }
+        const templates = DOMAIN_CRITERIA_TEMPLATES[domain];
+        for (const template of templates) {
+            criteria.push(template);
+        }
+    }
+    // Add consent criterion if handling PII or personal data
+    const personalDataTypes = ['pii', 'biometric', 'health', 'children'];
+    const hasPersonalData = profile.dataTypes.some((dt) => personalDataTypes.includes(dt));
+    if (hasPersonalData) {
+        criteria.push('Implement mandatory consent mechanism per applicable privacy regulation');
+    }
+    // Add minor protection if applicable
+    if (profile.audience.includesMinors) {
+        criteria.push('Implement age verification and parental consent per child protection laws');
+    }
+    // Cap at 6 criteria to avoid overwhelming the spec
+    return criteria.slice(0, 6);
+}
+/**
+ * Generates a markdown section to append to technical.md with legal compliance research instructions.
+ * Since the MCP server has no LLM access, this generates prompts/instructions for the calling LLM.
+ */
+export function generateLegalSection(profile, specDescription) {
+    const questions = getQuestionsForDomains(profile.domains);
+    const prompt = buildLegalPrompt(questions, profile.countries, specDescription);
+    const lines = [];
+    lines.push('## Legal Compliance');
+    lines.push('');
+    lines.push('> **Disclaimer**: This section provides guidance for legal compliance research.');
+    lines.push('> It does NOT constitute legal advice. Consult qualified legal professionals');
+    lines.push('> for authoritative guidance on regulatory requirements.');
+    lines.push('');
+    // Detected profile summary
+    lines.push('### Detected Profile');
+    lines.push('');
+    const nonUniversalDomains = profile.domains.filter((d) => d !== 'universal');
+    if (nonUniversalDomains.length > 0) {
+        lines.push(`- **Domains**: ${nonUniversalDomains.join(', ')}`);
+    }
+    if (profile.countries.length > 0) {
+        lines.push(`- **Countries**: ${profile.countries.join(', ')}`);
+    }
+    if (profile.dataTypes.length > 0) {
+        lines.push(`- **Sensitive data types**: ${profile.dataTypes.join(', ')}`);
+    }
+    const audienceTraits = [];
+    if (profile.audience.includesMinors) {
+        audienceTraits.push('minors');
+    }
+    if (profile.audience.includesPatients) {
+        audienceTraits.push('patients');
+    }
+    if (profile.audience.includesEmployees) {
+        audienceTraits.push('employees');
+    }
+    if (profile.audience.isB2B) {
+        audienceTraits.push('B2B');
+    }
+    if (profile.audience.isB2C) {
+        audienceTraits.push('B2C');
+    }
+    if (audienceTraits.length > 0) {
+        lines.push(`- **Audience**: ${audienceTraits.join(', ')}`);
+    }
+    lines.push('');
+    // Legal compliance research section
+    lines.push('### Legal Compliance Research');
+    lines.push('');
+    lines.push('The following questions should be investigated to determine concrete legal requirements:');
+    lines.push('');
+    for (const q of questions) {
+        lines.push(`#### ${q.domain}: ${q.id}`);
+        lines.push('');
+        lines.push(`**Question**: ${q.question}`);
+        lines.push('');
+        lines.push(`**Rationale**: ${q.rationale}`);
+        lines.push('');
+    }
+    // LLM investigation instructions
+    lines.push('### Investigation Instructions');
+    lines.push('');
+    lines.push(prompt);
+    lines.push('');
+    return lines.join('\n');
+}
+//# sourceMappingURL=criteria-injector.js.map

package/dist/engine/legal-compliance/criteria-injector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"criteria-injector.js","sourceRoot":"","sources":["../../../src/engine/legal-compliance/criteria-injector.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAG5E,OAAO,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAEnF,6EAA6E;AAC7E,MAAM,yBAAyB,GAAwD;IACrF,OAAO,EAAE;QACP,kEAAkE;QAClE,+EAA+E;KAChF;IACD,MAAM,EAAE;QACN,4GAA4G;QAC5G,wEAAwE;KACzE;IACD,OAAO,EAAE;QACP,oFAAoF;QACpF,sEAAsE;KACvE;IACD,SAAS,EAAE;QACT,mFAAmF;QACnF,qEAAqE;KACtE;IACD,SAAS,EAAE;QACT,uEAAuE;QACvE,8EAA8E;KAC/E;IACD,MAAM,EAAE;QACN,uFAAuF;QACvF,kEAAkE;KACnE;IACD,MAAM,EAAE;QACN,2EAA2E;QAC3E,mFAAmF;KACpF;IACD,OAAO,EAAE;QACP,0FAA0F;QAC1F,mEAAmE;KACpE;IACD,GAAG,EAAE;QACH,+EAA+E;QAC/E,0EAA0E;KAC3E;IACD,EAAE,EAAE;QACF,+EAA+E;QAC/E,iFAAiF;KAClF;IACD,aAAa,EAAE;QACb,uFAAuF;QACvF,uEAAuE;KACxE;IACD,SAAS,EAAE;QACT,2EAA2E;QAC3E,yEAAyE;KAC1E;IACD,KAAK,EAAE;QACL,0FAA0F;QAC1F,kEAAkE;KACnE;IACD,UAAU,EAAE;QACV,wFAAwF;QACxF,qFAAqF;KACtF;CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAwC;IACxE,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC9C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,sBAAsB,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC;IAC9E,MAAM,YAAY,GAAG,OAAO,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;IAElD,OAAO,sBAAsB,IAAI,YAAY,CAAC;AAChD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAqB,EAAE,gBAAwB;IACnF,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,kEAAkE;IAClE,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,MAAM,WAAW,GAAG,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjD,QAAQ,CAAC,IAAI,CACX,sEAAsE,WAAW,GAAG,CACrF,CAAC;IACJ,CAAC;IAED,+BAA+B;IAC/B,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACrC,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;YAC3B,SAAS;QACX,CAAC;QACD,MAAM,SAAS,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC;QACpD,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,yDAAyD;IACzD,MAAM,iBAAiB,GAAG,CAAC,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;IACrE,MAAM,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,iBAAiB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IACvF,IAAI,eAAe,EAAE,CAAC;QACpB,QAAQ,CAAC,IAAI,CAAC,yEAAyE,CAAC,CAAC;IAC3F,CAAC;IAED,qCAAqC;IACrC,IAAI,OAAO,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;QACpC,QAAQ,CAAC,IAAI,CAAC,2EAA2E,CAAC,CAAC;IAC7F,CAAC;IAED,mDAAmD;IACnD,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC9B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAqB,EAAE,eAAuB;IACjF,MAAM,SAAS,GAAG,sBAAsB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IAE/E,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IAClC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,iFAAiF,CAAC,CAAC;IAC9F,KAAK,CAAC,IAAI,CAAC,8EAA8E,CAAC,CAAC;IAC3F,KAAK,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;IACvE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,2BAA2B;IAC3B,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACnC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,MAAM,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC;IAC7E,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnC,KAAK,CAAC,IAAI,CAAC,kBAAkB,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,oBAAoB,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,+BAA+B,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5E,CAAC;IAED,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,IAAI,OAAO,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;QACpC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,gBAAgB,EAAE,CAAC;QACtC,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAClC,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC;QACvC,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACnC,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QAC3B,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QAC3B,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IACD,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,mBAAmB,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,oCAAoC;IACpC,KAAK,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAC5C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CACR,0FAA0F,CAC3F,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACxC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC1C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QAC5C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,iCAAiC;IACjC,KAAK,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;IAC7C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/engine/legal-compliance/detector.d.ts

@@ -0,0 +1,25 @@
+import type { ProjectKnowledge, LegalDomain, LegalProfile, LegalDataType } from '../../types/index.js';
+/**
+ * Detect which legal domains apply to a project based on its knowledge.
+ * Always includes 'universal'.
+ */
+export declare function detectLegalDomains(knowledge: ProjectKnowledge): LegalDomain[];
+/**
+ * Detect target countries from locale, currency, timezone, and i18n hints.
+ * Returns ISO country codes. Empty array if nothing detected.
+ */
+export declare function detectCountries(knowledge: ProjectKnowledge): string[];
+/**
+ * Detect audience characteristics (minors, patients, B2B/B2C, employees).
+ */
+export declare function detectAudience(knowledge: ProjectKnowledge): LegalProfile['audience'];
+/**
+ * Detect types of sensitive data the project likely handles.
+ */
+export declare function detectDataTypes(knowledge: ProjectKnowledge): LegalDataType[];
+/**
+ * Build a complete LegalProfile by combining all detectors.
+ * This is the main entry point called by init_project.
+ */
+export declare function buildLegalProfile(knowledge: ProjectKnowledge): LegalProfile;
+//# sourceMappingURL=detector.d.ts.map

package/dist/engine/legal-compliance/detector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"detector.d.ts","sourceRoot":"","sources":["../../../src/engine/legal-compliance/detector.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,gBAAgB,EAChB,WAAW,EACX,YAAY,EACZ,aAAa,EACd,MAAM,sBAAsB,CAAC;AAkW9B;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,gBAAgB,GAAG,WAAW,EAAE,CAW7E;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAAE,gBAAgB,GAAG,MAAM,EAAE,CAyBrE;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,gBAAgB,GAAG,YAAY,CAAC,UAAU,CAAC,CA4CpF;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAAE,gBAAgB,GAAG,aAAa,EAAE,CAiF5E;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,gBAAgB,GAAG,YAAY,CAU3E"}