@planu/cli 1.9.0 → 1.11.0

package/dist/config/license-plans.json

@@ -155,6 +155,7 @@
     "diff_spec_versions",
     "discover_mcps",
     "discover_registry",
+    "distribution_readiness",
     "ecosystem_status",
     "elicit_requirements",
     "estimate_ai_cost",
@@ -182,11 +183,14 @@
     "generate_diagram",
     "generate_docs_site",
     "generate_ide_config",
+    "generate_cost_estimate",
+    "generate_deployment_diagram",
     "generate_infrastructure",
     "generate_orchestration_plan",
     "generate_orchestration_script",
     "generate_planu_ci",
     "generate_proposal",
+    "generate_runbook",
     "generate_rules",
     "generate_skill",
     "generate_spec_from_api",
@@ -196,6 +200,7 @@
     "hook_status",
     "import_spec",
     "inject_criteria",
+    "inject_quality_gates",
     "integrate_pm",
     "jira_status",
     "knowledge_gap_detector",

package/dist/engine/compliance/evidence-builder.d.ts

@@ -0,0 +1,19 @@
+import type { ComplianceEvidencePackage } from '../../types/index.js';
+import type { ComplianceFramework } from './framework-catalog.js';
+interface SpecInput {
+    id: string;
+    title: string;
+    description?: string;
+    status: string;
+    approvedAt?: string;
+    updatedAt?: string;
+}
+interface AuditEventInput {
+    timestamp: string;
+    action: string;
+    specId: string;
+    actor?: string;
+}
+export declare function buildEvidencePackage(framework: ComplianceFramework, projectId: string, specs: SpecInput[], auditEvents: AuditEventInput[]): ComplianceEvidencePackage;
+export {};
+//# sourceMappingURL=evidence-builder.d.ts.map

package/dist/engine/compliance/evidence-builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence-builder.d.ts","sourceRoot":"","sources":["../../../src/engine/compliance/evidence-builder.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AACtE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAIlE,UAAU,SAAS;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAGD,UAAU,eAAe;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,mBAAmB,EAC9B,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,SAAS,EAAE,EAClB,WAAW,EAAE,eAAe,EAAE,GAC7B,yBAAyB,CAmC3B"}

package/dist/engine/compliance/evidence-builder.js

@@ -0,0 +1,36 @@
+// Planu — Compliance evidence package builder (SPEC-402)
+import { analyzeComplianceGaps } from './gap-analyzer.js';
+export function buildEvidencePackage(framework, projectId, specs, auditEvents) {
+    const gapAnalysis = analyzeComplianceGaps(framework, specs);
+    const doneSpecs = specs.filter((s) => s.status === 'done');
+    const approvalEvents = auditEvents.filter((e) => e.action === 'status:approved');
+    const controlMatrix = gapAnalysis.coverage.map((c) => ({
+        controlId: c.controlId,
+        controlName: c.controlName,
+        status: c.status,
+        specIds: c.coveringSpecIds,
+        evidence: c.coveringSpecIds.length > 0
+            ? `Covered by ${c.coveringSpecIds.length} spec(s): ${c.coveringSpecIds.join(', ')}`
+            : 'No specs found for this control',
+    }));
+    return {
+        framework,
+        projectId,
+        generatedAt: new Date().toISOString(),
+        summary: {
+            totalSpecs: specs.length,
+            doneSpecs: doneSpecs.length,
+            approvalEvents: approvalEvents.length,
+            complianceScore: gapAnalysis.score,
+        },
+        controlMatrix,
+        changeManagementEvidence: approvalEvents.slice(-20).map((e) => ({
+            timestamp: e.timestamp,
+            specId: e.specId,
+            actor: e.actor ?? 'unknown',
+            action: e.action,
+        })),
+        gaps: gapAnalysis.recommendations,
+    };
+}
+//# sourceMappingURL=evidence-builder.js.map

package/dist/engine/compliance/evidence-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence-builder.js","sourceRoot":"","sources":["../../../src/engine/compliance/evidence-builder.ts"],"names":[],"mappings":"AAAA,yDAAyD;AAIzD,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAoB1D,MAAM,UAAU,oBAAoB,CAClC,SAA8B,EAC9B,SAAiB,EACjB,KAAkB,EAClB,WAA8B;IAE9B,MAAM,WAAW,GAAG,qBAAqB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC5D,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IAC3D,MAAM,cAAc,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,iBAAiB,CAAC,CAAC;IAEjF,MAAM,aAAa,GAAG,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACrD,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,OAAO,EAAE,CAAC,CAAC,eAAe;QAC1B,QAAQ,EACN,CAAC,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC;YAC1B,CAAC,CAAC,cAAc,CAAC,CAAC,eAAe,CAAC,MAAM,aAAa,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YACnF,CAAC,CAAC,iCAAiC;KACxC,CAAC,CAAC,CAAC;IAEJ,OAAO;QACL,SAAS;QACT,SAAS;QACT,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,OAAO,EAAE;YACP,UAAU,EAAE,KAAK,CAAC,MAAM;YACxB,SAAS,EAAE,SAAS,CAAC,MAAM;YAC3B,cAAc,EAAE,cAAc,CAAC,MAAM;YACrC,eAAe,EAAE,WAAW,CAAC,KAAK;SACnC;QACD,aAAa;QACb,wBAAwB,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC9D,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,SAAS;YAC3B,MAAM,EAAE,CAAC,CAAC,MAAM;SACjB,CAAC,CAAC;QACH,IAAI,EAAE,WAAW,CAAC,eAAe;KAClC,CAAC;AACJ,CAAC"}

package/dist/engine/compliance/framework-catalog.d.ts

@@ -0,0 +1,15 @@
+import type { EnterpriseComplianceFramework } from '../../types/index.js';
+/** Local alias for the enterprise compliance framework union type. */
+export type ComplianceFramework = EnterpriseComplianceFramework;
+export interface ComplianceControl {
+    id: string;
+    framework: ComplianceFramework;
+    name: string;
+    description: string;
+    specPatterns: string[];
+    requiredCriteria: string[];
+}
+export declare const COMPLIANCE_CATALOG: ComplianceControl[];
+export declare function getControlsForFramework(framework: ComplianceFramework): ComplianceControl[];
+export declare function findMatchingControls(framework: ComplianceFramework, specTitle: string, specDescription: string): ComplianceControl[];
+//# sourceMappingURL=framework-catalog.d.ts.map

package/dist/engine/compliance/framework-catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"framework-catalog.d.ts","sourceRoot":"","sources":["../../../src/engine/compliance/framework-catalog.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,sBAAsB,CAAC;AAE1E,sEAAsE;AAEtE,MAAM,MAAM,mBAAmB,GAAG,6BAA6B,CAAC;AAGhE,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,mBAAmB,CAAC;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED,eAAO,MAAM,kBAAkB,EAAE,iBAAiB,EA6HjD,CAAC;AAEF,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,mBAAmB,GAAG,iBAAiB,EAAE,CAE3F;AAED,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,mBAAmB,EAC9B,SAAS,EAAE,MAAM,EACjB,eAAe,EAAE,MAAM,GACtB,iBAAiB,EAAE,CAKrB"}

package/dist/engine/compliance/framework-catalog.js

@@ -0,0 +1,134 @@
+// Planu — Compliance framework catalog (SPEC-402)
+export const COMPLIANCE_CATALOG = [
+    // SOC2 Type II controls
+    {
+        id: 'SOC2-CC6.1',
+        framework: 'soc2-type2',
+        name: 'Logical Access Controls',
+        description: 'The entity implements logical access security software, infrastructure, and architectures',
+        specPatterns: ['auth', 'login', 'access control', 'rbac', 'permission', 'role'],
+        requiredCriteria: [
+            'Role-based access control implemented',
+            'Principle of least privilege enforced',
+            'Access logs maintained',
+        ],
+    },
+    {
+        id: 'SOC2-CC6.2',
+        framework: 'soc2-type2',
+        name: 'User Registration & Authorization',
+        description: 'Prior to issuing system credentials, entity registers authorized users',
+        specPatterns: ['user registration', 'signup', 'onboarding', 'invite'],
+        requiredCriteria: [
+            'Email verification required',
+            'Account approval workflow defined',
+            'Deactivation process documented',
+        ],
+    },
+    {
+        id: 'SOC2-CC6.6',
+        framework: 'soc2-type2',
+        name: 'Logical Access Restrictions',
+        description: 'The entity implements controls to prevent or detect unauthorized access',
+        specPatterns: ['authentication', 'mfa', 'multi-factor', 'password', 'session'],
+        requiredCriteria: [
+            'MFA available for all users',
+            'Session timeout configured',
+            'Password complexity requirements enforced',
+        ],
+    },
+    {
+        id: 'SOC2-CC7.1',
+        framework: 'soc2-type2',
+        name: 'System Monitoring',
+        description: 'The entity uses detection and monitoring procedures',
+        specPatterns: ['monitoring', 'logging', 'alerting', 'observability', 'metrics'],
+        requiredCriteria: [
+            'All system events logged',
+            'Alerting configured for anomalies',
+            'Log retention ≥90 days',
+        ],
+    },
+    {
+        id: 'SOC2-CC8.1',
+        framework: 'soc2-type2',
+        name: 'Change Management',
+        description: 'The entity authorizes, designs, develops or acquires system changes',
+        specPatterns: ['deployment', 'release', 'change', 'migration', 'upgrade'],
+        requiredCriteria: [
+            'Change reviewed and approved before deployment',
+            'Rollback plan documented',
+            'Testing required before production',
+        ],
+    },
+    // GDPR controls
+    {
+        id: 'GDPR-Art5',
+        framework: 'gdpr',
+        name: 'Data Processing Principles',
+        description: 'Personal data shall be processed lawfully, fairly and transparently',
+        specPatterns: ['user data', 'personal data', 'pii', 'privacy', 'profile'],
+        requiredCriteria: [
+            'Legal basis for data processing documented',
+            'Data minimization applied',
+            'Retention period defined',
+        ],
+    },
+    {
+        id: 'GDPR-Art17',
+        framework: 'gdpr',
+        name: 'Right to Erasure',
+        description: 'Data subjects have the right to obtain erasure of personal data',
+        specPatterns: ['delete account', 'data deletion', 'erasure', 'forget me', 'gdpr'],
+        requiredCriteria: [
+            'Account deletion removes all PII',
+            'Deletion confirmed within 30 days',
+            'Cascading deletion across all data stores',
+        ],
+    },
+    {
+        id: 'GDPR-Art32',
+        framework: 'gdpr',
+        name: 'Security of Processing',
+        description: 'Appropriate technical and organisational measures to ensure data security',
+        specPatterns: ['encryption', 'security', 'data protection'],
+        requiredCriteria: [
+            'PII encrypted at rest',
+            'PII encrypted in transit (TLS 1.2+)',
+            'Access to PII logged and audited',
+        ],
+    },
+    // HIPAA controls
+    {
+        id: 'HIPAA-164.312a',
+        framework: 'hipaa',
+        name: 'Access Control',
+        description: 'Implement technical policies and procedures for accessing ePHI',
+        specPatterns: ['patient', 'health', 'phi', 'medical', 'clinical', 'hipaa'],
+        requiredCriteria: [
+            'Unique user ID required',
+            'Automatic logoff after inactivity',
+            'PHI access logged with user ID and timestamp',
+        ],
+    },
+    {
+        id: 'HIPAA-164.312b',
+        framework: 'hipaa',
+        name: 'Audit Controls',
+        description: 'Implement hardware, software, and procedural mechanisms to record access to ePHI',
+        specPatterns: ['audit', 'logging', 'access log', 'hipaa'],
+        requiredCriteria: [
+            'All PHI access events recorded',
+            'Audit logs tamper-evident',
+            'Log retention ≥6 years',
+        ],
+    },
+];
+export function getControlsForFramework(framework) {
+    return COMPLIANCE_CATALOG.filter((c) => c.framework === framework);
+}
+export function findMatchingControls(framework, specTitle, specDescription) {
+    const text = (specTitle + ' ' + specDescription).toLowerCase();
+    return COMPLIANCE_CATALOG.filter((c) => c.framework === framework).filter((c) => c.specPatterns.some((p) => text.includes(p)));
+}
+//# sourceMappingURL=framework-catalog.js.map

package/dist/engine/compliance/framework-catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"framework-catalog.js","sourceRoot":"","sources":["../../../src/engine/compliance/framework-catalog.ts"],"names":[],"mappings":"AAAA,kDAAkD;AAkBlD,MAAM,CAAC,MAAM,kBAAkB,GAAwB;IACrD,wBAAwB;IACxB;QACE,EAAE,EAAE,YAAY;QAChB,SAAS,EAAE,YAAY;QACvB,IAAI,EAAE,yBAAyB;QAC/B,WAAW,EACT,2FAA2F;QAC7F,YAAY,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC;QAC/E,gBAAgB,EAAE;YAChB,uCAAuC;YACvC,uCAAuC;YACvC,wBAAwB;SACzB;KACF;IACD;QACE,EAAE,EAAE,YAAY;QAChB,SAAS,EAAE,YAAY;QACvB,IAAI,EAAE,mCAAmC;QACzC,WAAW,EAAE,wEAAwE;QACrF,YAAY,EAAE,CAAC,mBAAmB,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,CAAC;QACrE,gBAAgB,EAAE;YAChB,6BAA6B;YAC7B,mCAAmC;YACnC,iCAAiC;SAClC;KACF;IACD;QACE,EAAE,EAAE,YAAY;QAChB,SAAS,EAAE,YAAY;QACvB,IAAI,EAAE,6BAA6B;QACnC,WAAW,EAAE,yEAAyE;QACtF,YAAY,EAAE,CAAC,gBAAgB,EAAE,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,CAAC;QAC9E,gBAAgB,EAAE;YAChB,6BAA6B;YAC7B,4BAA4B;YAC5B,2CAA2C;SAC5C;KACF;IACD;QACE,EAAE,EAAE,YAAY;QAChB,SAAS,EAAE,YAAY;QACvB,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,qDAAqD;QAClE,YAAY,EAAE,CAAC,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,eAAe,EAAE,SAAS,CAAC;QAC/E,gBAAgB,EAAE;YAChB,0BAA0B;YAC1B,mCAAmC;YACnC,wBAAwB;SACzB;KACF;IACD;QACE,EAAE,EAAE,YAAY;QAChB,SAAS,EAAE,YAAY;QACvB,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,qEAAqE;QAClF,YAAY,EAAE,CAAC,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,CAAC;QACzE,gBAAgB,EAAE;YAChB,gDAAgD;YAChD,0BAA0B;YAC1B,oCAAoC;SACrC;KACF;IACD,gBAAgB;IAChB;QACE,EAAE,EAAE,WAAW;QACf,SAAS,EAAE,MAAM;QACjB,IAAI,EAAE,4BAA4B;QAClC,WAAW,EAAE,qEAAqE;QAClF,YAAY,EAAE,CAAC,WAAW,EAAE,eAAe,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC;QACzE,gBAAgB,EAAE;YAChB,4CAA4C;YAC5C,2BAA2B;YAC3B,0BAA0B;SAC3B;KACF;IACD;QACE,EAAE,EAAE,YAAY;QAChB,SAAS,EAAE,MAAM;QACjB,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,iEAAiE;QAC9E,YAAY,EAAE,CAAC,gBAAgB,EAAE,eAAe,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,CAAC;QACjF,gBAAgB,EAAE;YAChB,kCAAkC;YAClC,mCAAmC;YACnC,2CAA2C;SAC5C;KACF;IACD;QACE,EAAE,EAAE,YAAY;QAChB,SAAS,EAAE,MAAM;QACjB,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EAAE,2EAA2E;QACxF,YAAY,EAAE,CAAC,YAAY,EAAE,UAAU,EAAE,iBAAiB,CAAC;QAC3D,gBAAgB,EAAE;YAChB,uBAAuB;YACvB,qCAAqC;YACrC,kCAAkC;SACnC;KACF;IACD,iBAAiB;IACjB;QACE,EAAE,EAAE,gBAAgB;QACpB,SAAS,EAAE,OAAO;QAClB,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,gEAAgE;QAC7E,YAAY,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC;QAC1E,gBAAgB,EAAE;YAChB,yBAAyB;YACzB,mCAAmC;YACnC,8CAA8C;SAC/C;KACF;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,SAAS,EAAE,OAAO;QAClB,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,kFAAkF;QAC/F,YAAY,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,OAAO,CAAC;QACzD,gBAAgB,EAAE;YAChB,gCAAgC;YAChC,2BAA2B;YAC3B,wBAAwB;SACzB;KACF;CACF,CAAC;AAEF,MAAM,UAAU,uBAAuB,CAAC,SAA8B;IACpE,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,SAA8B,EAC9B,SAAiB,EACjB,eAAuB;IAEvB,MAAM,IAAI,GAAG,CAAC,SAAS,GAAG,GAAG,GAAG,eAAe,CAAC,CAAC,WAAW,EAAE,CAAC;IAC/D,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAC9E,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAC7C,CAAC;AACJ,CAAC"}

package/dist/engine/compliance/gap-analyzer.d.ts

@@ -0,0 +1,11 @@
+import type { ComplianceGapResult } from '../../types/index.js';
+import { type ComplianceFramework } from './framework-catalog.js';
+interface SpecInput {
+    id: string;
+    title: string;
+    description?: string;
+    status: string;
+}
+export declare function analyzeComplianceGaps(framework: ComplianceFramework, specs: SpecInput[]): ComplianceGapResult;
+export {};
+//# sourceMappingURL=gap-analyzer.d.ts.map

package/dist/engine/compliance/gap-analyzer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gap-analyzer.d.ts","sourceRoot":"","sources":["../../../src/engine/compliance/gap-analyzer.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,mBAAmB,EAAmB,MAAM,sBAAsB,CAAC;AACjF,OAAO,EACL,KAAK,mBAAmB,EAGzB,MAAM,wBAAwB,CAAC;AAGhC,UAAU,SAAS;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,qBAAqB,CACnC,SAAS,EAAE,mBAAmB,EAC9B,KAAK,EAAE,SAAS,EAAE,GACjB,mBAAmB,CAyCrB"}

package/dist/engine/compliance/gap-analyzer.js

@@ -0,0 +1,39 @@
+// Planu — Compliance gap analyzer (SPEC-402)
+import { getControlsForFramework, findMatchingControls, } from './framework-catalog.js';
+export function analyzeComplianceGaps(framework, specs) {
+    const controls = getControlsForFramework(framework);
+    const coverageMap = [];
+    for (const control of controls) {
+        const matchingSpecs = specs.filter((s) => {
+            const matches = findMatchingControls(framework, s.title, s.description ?? '');
+            return matches.some((m) => m.id === control.id);
+        });
+        const status = matchingSpecs.length === 0
+            ? 'missing'
+            : matchingSpecs.some((s) => s.status === 'done')
+                ? 'passing'
+                : 'partial';
+        coverageMap.push({
+            controlId: control.id,
+            controlName: control.name,
+            status,
+            coveringSpecIds: matchingSpecs.map((s) => s.id),
+            requiredCriteria: control.requiredCriteria,
+        });
+    }
+    const passing = coverageMap.filter((c) => c.status === 'passing').length;
+    const score = controls.length === 0 ? 100 : Math.round((passing / controls.length) * 100);
+    return {
+        framework,
+        score,
+        totalControls: controls.length,
+        passing,
+        partial: coverageMap.filter((c) => c.status === 'partial').length,
+        missing: coverageMap.filter((c) => c.status === 'missing').length,
+        coverage: coverageMap,
+        recommendations: coverageMap
+            .filter((c) => c.status === 'missing')
+            .map((c) => `Create spec addressing: ${c.controlName} (${c.controlId})`),
+    };
+}
+//# sourceMappingURL=gap-analyzer.js.map

package/dist/engine/compliance/gap-analyzer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gap-analyzer.js","sourceRoot":"","sources":["../../../src/engine/compliance/gap-analyzer.ts"],"names":[],"mappings":"AAAA,6CAA6C;AAG7C,OAAO,EAEL,uBAAuB,EACvB,oBAAoB,GACrB,MAAM,wBAAwB,CAAC;AAUhC,MAAM,UAAU,qBAAqB,CACnC,SAA8B,EAC9B,KAAkB;IAElB,MAAM,QAAQ,GAAG,uBAAuB,CAAC,SAAS,CAAC,CAAC;IACpD,MAAM,WAAW,GAAsB,EAAE,CAAC;IAE1C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YACvC,MAAM,OAAO,GAAG,oBAAoB,CAAC,SAAS,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;YAC9E,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;QAEH,MAAM,MAAM,GACV,aAAa,CAAC,MAAM,KAAK,CAAC;YACxB,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC;gBAC9C,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,SAAS,CAAC;QAElB,WAAW,CAAC,IAAI,CAAC;YACf,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,WAAW,EAAE,OAAO,CAAC,IAAI;YACzB,MAAM;YACN,eAAe,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/C,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;SAC3C,CAAC,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;IACzE,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC;IAE1F,OAAO;QACL,SAAS;QACT,KAAK;QACL,aAAa,EAAE,QAAQ,CAAC,MAAM;QAC9B,OAAO;QACP,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,MAAM;QACjE,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,MAAM;QACjE,QAAQ,EAAE,WAAW;QACrB,eAAe,EAAE,WAAW;aACzB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC;aACrC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,2BAA2B,CAAC,CAAC,WAAW,KAAK,CAAC,CAAC,SAAS,GAAG,CAAC;KAC3E,CAAC;AACJ,CAAC"}

package/dist/engine/distribution/cost-estimator.d.ts

@@ -0,0 +1,8 @@
+import type { CloudProvider, InfraResourceType, ResourceCostEntry, DistributionCostEstimate } from '../../types/index.js';
+export type { CloudProvider };
+export type ResourceType = InfraResourceType;
+export type ResourceCost = ResourceCostEntry;
+export type CostEstimate = DistributionCostEstimate;
+export declare function estimateCost(provider: CloudProvider, resources: ResourceType[]): CostEstimate;
+export declare function detectProvider(stack?: string, framework?: string): CloudProvider;
+//# sourceMappingURL=cost-estimator.d.ts.map

package/dist/engine/distribution/cost-estimator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cost-estimator.d.ts","sourceRoot":"","sources":["../../../src/engine/distribution/cost-estimator.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,aAAa,EACb,iBAAiB,EACjB,iBAAiB,EACjB,wBAAwB,EACzB,MAAM,sBAAsB,CAAC;AAE9B,YAAY,EAAE,aAAa,EAAE,CAAC;AAE9B,MAAM,MAAM,YAAY,GAAG,iBAAiB,CAAC;AAE7C,MAAM,MAAM,YAAY,GAAG,iBAAiB,CAAC;AAE7C,MAAM,MAAM,YAAY,GAAG,wBAAwB,CAAC;AAqEpD,wBAAgB,YAAY,CAAC,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,YAAY,EAAE,GAAG,YAAY,CA8B7F;AAED,wBAAgB,cAAc,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,aAAa,CAmBhF"}

package/dist/engine/distribution/cost-estimator.js

@@ -0,0 +1,113 @@
+// Monthly cost table (approximate 2026 prices)
+const COST_TABLE = {
+    aws: {
+        compute: { tier: 'ECS Fargate (0.5 vCPU, 1GB)', monthlyUsd: 15, notes: '~720 hours/month' },
+        database: {
+            tier: 'RDS PostgreSQL t3.micro',
+            monthlyUsd: 25,
+            notes: 'Single-AZ, 20GB storage',
+        },
+        cache: { tier: 'ElastiCache t3.micro', monthlyUsd: 18, notes: 'Single node' },
+        cdn: { tier: 'CloudFront', monthlyUsd: 5, notes: '10GB transfer included' },
+        storage: { tier: 'S3 Standard', monthlyUsd: 3, notes: '100GB storage' },
+        monitoring: { tier: 'CloudWatch', monthlyUsd: 10, notes: 'Basic metrics + logs' },
+    },
+    gcp: {
+        compute: { tier: 'Cloud Run (min 1 instance)', monthlyUsd: 12, notes: '1 vCPU, 512MB' },
+        database: { tier: 'Cloud SQL PostgreSQL', monthlyUsd: 30, notes: 'db-f1-micro, 10GB' },
+        cache: { tier: 'Memorystore Redis', monthlyUsd: 20, notes: '1GB basic tier' },
+        cdn: { tier: 'Cloud CDN', monthlyUsd: 4, notes: '10GB egress included' },
+        storage: { tier: 'Cloud Storage', monthlyUsd: 2, notes: '100GB standard' },
+        monitoring: { tier: 'Cloud Monitoring', monthlyUsd: 8, notes: 'Basic ops suite' },
+    },
+    railway: {
+        compute: { tier: 'Railway Hobby', monthlyUsd: 5, notes: 'Included in hobby plan' },
+        database: { tier: 'Railway PostgreSQL', monthlyUsd: 5, notes: '1GB included' },
+        cache: { tier: 'Railway Redis', monthlyUsd: 5, notes: 'Shared instance' },
+        cdn: { tier: 'N/A', monthlyUsd: 0, notes: 'Not offered' },
+        storage: { tier: 'Volume', monthlyUsd: 2, notes: '1GB volume' },
+        monitoring: { tier: 'Built-in metrics', monthlyUsd: 0, notes: 'Included' },
+    },
+    vercel: {
+        compute: {
+            tier: 'Vercel Pro Functions',
+            monthlyUsd: 20,
+            notes: 'Fluid compute, included in Pro',
+        },
+        database: {
+            tier: 'Vercel Marketplace DB',
+            monthlyUsd: 15,
+            notes: 'Neon/PlanetScale starter',
+        },
+        cache: { tier: 'Vercel KV (Upstash)', monthlyUsd: 5, notes: '100MB included' },
+        cdn: { tier: 'Vercel Edge Network', monthlyUsd: 0, notes: 'Included in Pro' },
+        storage: { tier: 'Vercel Blob', monthlyUsd: 5, notes: '5GB included' },
+        monitoring: { tier: 'Vercel Analytics', monthlyUsd: 10, notes: 'Web Analytics Pro' },
+    },
+    fly: {
+        compute: { tier: 'Fly.io shared-cpu-1x', monthlyUsd: 3, notes: '256MB RAM' },
+        database: { tier: 'Fly Postgres', monthlyUsd: 5, notes: 'Single node' },
+        cache: { tier: 'Fly Redis (Upstash)', monthlyUsd: 5, notes: '10K commands/day free' },
+        cdn: { tier: 'N/A', monthlyUsd: 0, notes: 'Not offered' },
+        storage: { tier: 'Fly Volumes', monthlyUsd: 2, notes: '1GB volume' },
+        monitoring: { tier: 'Fly Metrics', monthlyUsd: 0, notes: 'Included' },
+    },
+    generic: {
+        compute: { tier: 'VPS equivalent', monthlyUsd: 10, notes: 'Generic estimate' },
+        database: { tier: 'Managed DB', monthlyUsd: 20, notes: 'Generic estimate' },
+        cache: { tier: 'Redis managed', monthlyUsd: 15, notes: 'Generic estimate' },
+        cdn: { tier: 'CDN basic', monthlyUsd: 5, notes: 'Generic estimate' },
+        storage: { tier: 'Object storage', monthlyUsd: 3, notes: 'Generic estimate' },
+        monitoring: { tier: 'Monitoring basic', monthlyUsd: 8, notes: 'Generic estimate' },
+    },
+};
+export function estimateCost(provider, resources) {
+    const table = COST_TABLE[provider];
+    const resourceCosts = resources
+        .map((r) => {
+        const entry = table[r];
+        if (!entry) {
+            return null;
+        }
+        return {
+            resource: r,
+            provider,
+            tier: entry.tier,
+            monthlyUsd: entry.monthlyUsd,
+            notes: entry.notes,
+        };
+    })
+        .filter((r) => r !== null);
+    const total = resourceCosts.reduce((sum, r) => sum + r.monthlyUsd, 0);
+    const breakdown = resourceCosts
+        .map((r) => `  ${r.resource}: $${r.monthlyUsd}/mo (${r.tier})`)
+        .join('\n');
+    return {
+        provider,
+        resources: resourceCosts,
+        totalMonthlyUsd: total,
+        totalYearlyUsd: total * 12,
+        breakdown: `Provider: ${provider}\n${breakdown}\n  Total: $${total}/month ($${total * 12}/year)`,
+    };
+}
+export function detectProvider(stack, framework) {
+    const s = (stack ?? '').toLowerCase();
+    const f = (framework ?? '').toLowerCase();
+    if (s.includes('vercel') || f.includes('next') || f.includes('vercel')) {
+        return 'vercel';
+    }
+    if (s.includes('railway')) {
+        return 'railway';
+    }
+    if (s.includes('fly')) {
+        return 'fly';
+    }
+    if (s.includes('gcp') || s.includes('google')) {
+        return 'gcp';
+    }
+    if (s.includes('aws') || s.includes('amazon')) {
+        return 'aws';
+    }
+    return 'generic';
+}
+//# sourceMappingURL=cost-estimator.js.map

package/dist/engine/distribution/cost-estimator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cost-estimator.js","sourceRoot":"","sources":["../../../src/engine/distribution/cost-estimator.ts"],"names":[],"mappings":"AAgBA,+CAA+C;AAC/C,MAAM,UAAU,GAGZ;IACF,GAAG,EAAE;QACH,OAAO,EAAE,EAAE,IAAI,EAAE,6BAA6B,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE;QAC3F,QAAQ,EAAE;YACR,IAAI,EAAE,yBAAyB;YAC/B,UAAU,EAAE,EAAE;YACd,KAAK,EAAE,yBAAyB;SACjC;QACD,KAAK,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE;QAC7E,GAAG,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE;QAC3E,OAAO,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE;QACvE,UAAU,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE;KAClF;IACD,GAAG,EAAE;QACH,OAAO,EAAE,EAAE,IAAI,EAAE,4BAA4B,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE;QACvF,QAAQ,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE;QACtF,KAAK,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE;QAC7E,GAAG,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE;QACxE,OAAO,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE;QAC1E,UAAU,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE;KAClF;IACD,OAAO,EAAE;QACP,OAAO,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE;QAClF,QAAQ,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE;QAC9E,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE;QACzE,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE;QACzD,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE;QAC/D,UAAU,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE;KAC3E;IACD,MAAM,EAAE;QACN,OAAO,EAAE;YACP,IAAI,EAAE,sBAAsB;YAC5B,UAAU,EAAE,EAAE;YACd,KAAK,EAAE,gCAAgC;SACxC;QACD,QAAQ,EAAE;YACR,IAAI,EAAE,uBAAuB;YAC7B,UAAU,EAAE,EAAE;YACd,KAAK,EAAE,0BAA0B;SAClC;QACD,KAAK,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE;QAC9E,GAAG,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE;QAC7E,OAAO,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE;QACtE,UAAU,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE;KACrF;IACD,GAAG,EAAE;QACH,OAAO,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE;QAC5E,QAAQ,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE;QACvE,KAAK,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE;QACrF,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE;QACzD,OAAO,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE;QACpE,UAAU,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE;KACtE;IACD,OAAO,EAAE;QACP,OAAO,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE;QAC9E,QAAQ,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE;QAC3E,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE;QAC3E,GAAG,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE;QACpE,OAAO,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE;QAC7E,UAAU,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE;KACnF;CACF,CAAC;AAEF,MAAM,UAAU,YAAY,CAAC,QAAuB,EAAE,SAAyB;IAC7E,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,aAAa,GAAmB,SAAS;SAC5C,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACT,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACvB,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO;YACL,QAAQ,EAAE,CAAC;YACX,QAAQ;YACR,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,KAAK,EAAE,KAAK,CAAC,KAAK;SACnB,CAAC;IACJ,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,CAAC,EAAqB,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;IAEhD,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IACtE,MAAM,SAAS,GAAG,aAAa;SAC5B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,QAAQ,MAAM,CAAC,CAAC,UAAU,QAAQ,CAAC,CAAC,IAAI,GAAG,CAAC;SAC9D,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,OAAO;QACL,QAAQ;QACR,SAAS,EAAE,aAAa;QACxB,eAAe,EAAE,KAAK;QACtB,cAAc,EAAE,KAAK,GAAG,EAAE;QAC1B,SAAS,EAAE,aAAa,QAAQ,KAAK,SAAS,eAAe,KAAK,YAAY,KAAK,GAAG,EAAE,QAAQ;KACjG,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAc,EAAE,SAAkB;IAC/D,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACtC,MAAM,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1C,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvE,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9C,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9C,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/engine/distribution/diagram-generator.d.ts

@@ -0,0 +1,12 @@
+export interface DiagramSpec {
+    services: {
+        name: string;
+        type: string;
+    }[];
+    databases: string[];
+    caches: string[];
+    external: string[];
+}
+export declare function generateC4Diagram(input: DiagramSpec): string;
+export declare function specTodiagramInput(specTitles: string[], stack?: string): DiagramSpec;
+//# sourceMappingURL=diagram-generator.d.ts.map

package/dist/engine/distribution/diagram-generator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagram-generator.d.ts","sourceRoot":"","sources":["../../../src/engine/distribution/diagram-generator.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC3C,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,WAAW,GAAG,MAAM,CAoC5D;AAED,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,WAAW,CA4BpF"}

package/dist/engine/distribution/diagram-generator.js

@@ -0,0 +1,59 @@
+export function generateC4Diagram(input) {
+    const lines = ['```mermaid', 'graph TB'];
+    if (input.services.length > 0) {
+        lines.push('  subgraph Services');
+        for (const s of input.services) {
+            lines.push(`    ${s.name.replace(/\s+/g, '_')}["${s.name}\n[${s.type}]"]`);
+        }
+        lines.push('  end');
+    }
+    if (input.databases.length > 0) {
+        lines.push('  subgraph Data');
+        for (const db of input.databases) {
+            lines.push(`    ${db.replace(/\s+/g, '_')}[("${db}")]`);
+        }
+        lines.push('  end');
+    }
+    if (input.caches.length > 0) {
+        for (const cache of input.caches) {
+            lines.push(`  ${cache.replace(/\s+/g, '_')}(("${cache}"))`);
+        }
+    }
+    if (input.external.length > 0) {
+        lines.push('  subgraph External');
+        for (const ext of input.external) {
+            lines.push(`    ${ext.replace(/\s+/g, '_')}["${ext}"]:::external`);
+        }
+        lines.push('  end');
+    }
+    lines.push('  classDef external fill:#f9f,stroke:#333,stroke-dasharray: 5 5');
+    lines.push('```');
+    return lines.join('\n');
+}
+export function specTodiagramInput(specTitles, stack) {
+    const services = [{ name: 'API Server', type: 'Service' }];
+    const databases = [];
+    const caches = [];
+    const external = [];
+    const allText = specTitles.join(' ').toLowerCase();
+    if (allText.includes('postgres') || allText.includes('database') || allText.includes('sql')) {
+        databases.push('PostgreSQL');
+    }
+    if (allText.includes('redis') || allText.includes('cache')) {
+        caches.push('Redis Cache');
+    }
+    if (allText.includes('auth') || allText.includes('oauth')) {
+        external.push('Auth Provider');
+    }
+    if (allText.includes('email') || allText.includes('notification')) {
+        external.push('Email Service');
+    }
+    if (allText.includes('payment') || allText.includes('billing') || allText.includes('stripe')) {
+        external.push('Payment Gateway');
+    }
+    if ((stack ?? '').toLowerCase().includes('next') || allText.includes('frontend')) {
+        services.push({ name: 'Frontend', type: 'Web App' });
+    }
+    return { services, databases, caches, external };
+}
+//# sourceMappingURL=diagram-generator.js.map

package/dist/engine/distribution/diagram-generator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagram-generator.js","sourceRoot":"","sources":["../../../src/engine/distribution/diagram-generator.ts"],"names":[],"mappings":"AASA,MAAM,UAAU,iBAAiB,CAAC,KAAkB;IAClD,MAAM,KAAK,GAAa,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IAEnD,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QAClC,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YAC/B,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC;QAC7E,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACtB,CAAC;IAED,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC9B,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;YACjC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC1D,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACtB,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACjC,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QAClC,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACjC,KAAK,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,GAAG,eAAe,CAAC,CAAC;QACrE,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,iEAAiE,CAAC,CAAC;IAC9E,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,UAAoB,EAAE,KAAc;IACrE,MAAM,QAAQ,GAAqC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IAC7F,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IAEnD,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5F,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3D,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC7B,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1D,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QAClE,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7F,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACnC,CAAC;IACD,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACjF,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AACnD,CAAC"}

package/dist/engine/distribution/readiness-analyzer.d.ts

@@ -0,0 +1,4 @@
+import type { DistributionReadiness } from '../../types/index.js';
+export type DistributionReadinessResult = DistributionReadiness;
+export declare function analyzeDistributionReadiness(specTitles: string[]): DistributionReadinessResult;
+//# sourceMappingURL=readiness-analyzer.d.ts.map

package/dist/engine/distribution/readiness-analyzer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"readiness-analyzer.d.ts","sourceRoot":"","sources":["../../../src/engine/distribution/readiness-analyzer.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAGlE,MAAM,MAAM,2BAA2B,GAAG,qBAAqB,CAAC;AA6ChE,wBAAgB,4BAA4B,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,2BAA2B,CAqB9F"}

package/dist/engine/distribution/readiness-analyzer.js

@@ -0,0 +1,61 @@
+const CRITICAL_SPEC_PATTERNS = [
+    {
+        key: 'auth',
+        patterns: ['auth', 'login', 'jwt', 'oauth', 'session', 'token'],
+        label: 'Authentication',
+    },
+    {
+        key: 'error',
+        patterns: ['error handling', 'error boundary', 'exception'],
+        label: 'Error Handling',
+    },
+    {
+        key: 'rate-limit',
+        patterns: ['rate limit', 'throttle', 'quota'],
+        label: 'Rate Limiting',
+    },
+    {
+        key: 'monitoring',
+        patterns: ['monitoring', 'observability', 'logging', 'metrics', 'otel'],
+        label: 'Observability/Monitoring',
+    },
+    {
+        key: 'backup',
+        patterns: ['backup', 'restore', 'disaster recovery', 'data retention'],
+        label: 'Backup & Recovery',
+    },
+    {
+        key: 'cost',
+        patterns: ['cost', 'budget', 'billing', 'spending'],
+        label: 'Cost Management',
+    },
+    {
+        key: 'security',
+        patterns: ['security', 'vulnerability', 'penetration', 'audit'],
+        label: 'Security Audit',
+    },
+    {
+        key: 'ci',
+        patterns: ['ci', 'cd', 'pipeline', 'deploy', 'release'],
+        label: 'CI/CD Pipeline',
+    },
+];
+export function analyzeDistributionReadiness(specTitles) {
+    const titlesLower = specTitles.map((t) => t.toLowerCase());
+    const present = [];
+    const missing = [];
+    for (const critical of CRITICAL_SPEC_PATTERNS) {
+        const found = critical.patterns.some((p) => titlesLower.some((t) => t.includes(p)));
+        if (found) {
+            present.push(critical.label);
+        }
+        else {
+            missing.push(critical.label);
+        }
+    }
+    const score = Math.round((present.length / CRITICAL_SPEC_PATTERNS.length) * 100);
+    const level = score >= 80 ? 'ready' : score >= 50 ? 'partial' : 'not-ready';
+    const recommendations = missing.map((m) => `Create a spec for: ${m}`);
+    return { score, level, present, missing, recommendations };
+}
+//# sourceMappingURL=readiness-analyzer.js.map

package/dist/engine/distribution/readiness-analyzer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"readiness-analyzer.js","sourceRoot":"","sources":["../../../src/engine/distribution/readiness-analyzer.ts"],"names":[],"mappings":"AAMA,MAAM,sBAAsB,GAAG;IAC7B;QACE,GAAG,EAAE,MAAM;QACX,QAAQ,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC;QAC/D,KAAK,EAAE,gBAAgB;KACxB;IACD;QACE,GAAG,EAAE,OAAO;QACZ,QAAQ,EAAE,CAAC,gBAAgB,EAAE,gBAAgB,EAAE,WAAW,CAAC;QAC3D,KAAK,EAAE,gBAAgB;KACxB;IACD;QACE,GAAG,EAAE,YAAY;QACjB,QAAQ,EAAE,CAAC,YAAY,EAAE,UAAU,EAAE,OAAO,CAAC;QAC7C,KAAK,EAAE,eAAe;KACvB;IACD;QACE,GAAG,EAAE,YAAY;QACjB,QAAQ,EAAE,CAAC,YAAY,EAAE,eAAe,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC;QACvE,KAAK,EAAE,0BAA0B;KAClC;IACD;QACE,GAAG,EAAE,QAAQ;QACb,QAAQ,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,mBAAmB,EAAE,gBAAgB,CAAC;QACtE,KAAK,EAAE,mBAAmB;KAC3B;IACD;QACE,GAAG,EAAE,MAAM;QACX,QAAQ,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC;QACnD,KAAK,EAAE,iBAAiB;KACzB;IACD;QACE,GAAG,EAAE,UAAU;QACf,QAAQ,EAAE,CAAC,UAAU,EAAE,eAAe,EAAE,aAAa,EAAE,OAAO,CAAC;QAC/D,KAAK,EAAE,gBAAgB;KACxB;IACD;QACE,GAAG,EAAE,IAAI;QACT,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,CAAC;QACvD,KAAK,EAAE,gBAAgB;KACxB;CACF,CAAC;AAEF,MAAM,UAAU,4BAA4B,CAAC,UAAoB;IAC/D,MAAM,WAAW,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IAC3D,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,KAAK,MAAM,QAAQ,IAAI,sBAAsB,EAAE,CAAC;QAC9C,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpF,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,sBAAsB,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC;IACjF,MAAM,KAAK,GACT,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC;IAEhE,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC;IAEtE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;AAC7D,CAAC"}

package/dist/engine/distribution/runbook-generator.d.ts

@@ -0,0 +1,7 @@
+export interface RunbookInput {
+    projectName: string;
+    provider: string;
+    services: string[];
+}
+export declare function generateRunbook(input: RunbookInput): string;
+//# sourceMappingURL=runbook-generator.d.ts.map

package/dist/engine/distribution/runbook-generator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runbook-generator.d.ts","sourceRoot":"","sources":["../../../src/engine/distribution/runbook-generator.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,YAAY,GAAG,MAAM,CAwC3D"}