@planu/cli 4.1.0 → 4.1.2

package/CHANGELOG.md

@@ -1,3 +1,24 @@
+## [4.1.2] - 2026-05-21
+
+### Bug Fixes
+- Remove unused legacy Planu files from the runtime surface and keep license tool registration strict.
+- Restore missing OAuth MCP registrations for `start_oauth_flow`, `oauth_status`, and `configure_oauth`.
+- Harden generated Git hooks so changed-file JSON generation avoids awk portability failures and integer parsing warnings.
+
+### Tests
+- Add hook-generation coverage for portable post-commit changed-file handling.
+
+
+## [4.1.1] - 2026-05-21
+
+### Features
+- Enforce dependency freshness as a blocking pre-push gate for lockfile drift, high/critical vulnerabilities, and outdated direct dependencies.
+- Add the same pnpm dependency freshness guard to Planu-generated pre-push hooks.
+
+### Tests
+- Add coverage for the dependency freshness script and generated hook contents.
+
+
 ## [4.1.0] - 2026-05-21
 
 ### Features

package/dist/config/license-plans.json

@@ -18,510 +18,214 @@
     }
   },
   "freeTools": [
-    "add_comment",
-    "analyze_performance_impact",
-    "analyze_spec_size",
-    "approval_status",
-    "capture_idea",
-    "check_config_health",
-    "check_parallel_safety",
-    "check_spec_lock",
-    "check_versions",
-    "clarify_requirements",
-    "configure_figma",
-    "configure_telemetry",
-    "consult_docs",
-    "create_rule",
-    "create_skill",
-    "create_spec",
-    "delete_decision",
-    "delete_pattern",
-    "delete_project",
-    "delete_spec",
-    "detect_drift",
-    "discard_idea",
-    "estimate",
-    "export_specs_markdown",
-    "facilitate",
-    "filesystem_hooks_status",
-    "generate_docs",
-    "generate_execution_plan",
-    "generate_spec_dashboard",
-    "generate_tests",
-    "heal_spec_docs",
-    "init_constitution",
-    "init_project",
-    "learn_pattern",
-    "list_backlog",
-    "list_comments",
-    "list_lessons",
-    "list_locks",
-    "list_registered_projects",
-    "list_specs",
-    "list_templates",
-    "lock_spec",
-    "log_lesson",
-    "manage_git",
-    "manage_trash",
-    "planu_status",
-    "pr_status",
-    "promote_idea",
-    "record_actual",
-    "register_project_path",
-    "registry_install",
-    "registry_search",
-    "search_specs",
-    "search_suggestions",
-    "session_checkpoint",
-    "session_handoff",
-    "set_locale",
-    "set_work_mode",
-    "skill_install",
-    "skill_search",
-    "slack_status",
-    "submit_feedback",
-    "suggest_criteria",
-    "suggest_stack",
-    "summarize_spec",
-    "analytics_report",
-    "bump_spec_version",
-    "observatory_insights",
-    "manage_drift",
-    "tdd_scaffold",
-    "token_usage",
-    "tokens",
-    "triage_request",
-    "unlock_spec",
-    "unregister_project_path",
-    "update_status",
-    "update_status_batch",
-    "validate",
-    "worker_status",
-    "security_scan",
-    "set_context_profile",
-    "get_context_profile",
-    "list_context_profiles",
-    "detect_project_dna",
-    "preview_hooks",
-    "configure_sentry",
-    "sentry_status",
-    "generate_pr_description",
-    "configure_supabase",
-    "supabase_status",
-    "preview_release_notes",
-    "discover_skills_from_registries",
-    "start_oauth_flow",
-    "oauth_status",
-    "scan_crash_risks",
-    "compliance_gate_status",
-    "audit_schema_type_parity",
-    "check_update_status",
-    "enable_auto_update",
-    "configure_tdd_policy",
-    "generate_edge_tests",
-    "tdd_status",
-    "autopilot_audit",
-    "configure_permissions",
-    "install_plugins"
-  ],
-  "proTools": [
     "activate_group",
-    "add_figma_file",
     "agent_run_history",
-    "agent_swarm_status",
-    "analyze_breaking_changes",
-    "analyze_code_impact",
-    "analyze_figma_flows",
+    "analyze_performance_impact",
     "analyze_spec_dependencies",
-    "apply_domain_bundle",
-    "apply_merge",
-    "apply_migration_cleanup",
-    "apply_template",
-    "approve_checkpoint",
+    "approval_status",
     "approve_spec",
-    "approve_testimonial",
     "architecture_lint",
-    "archive_spec_context",
     "assess_merge_risk",
     "assign_role",
-    "audit",
     "audit_claude_config",
     "audit_log_export",
+    "audit_schema_type_parity",
     "audit_specs_drift",
-    "audit_stack",
     "audit_trail",
-    "auto_fix_health",
-    "auto_fix_validation",
-    "auto_reconcile",
-    "auto_remediate_compliance",
-    "bootstrap_project_intelligence",
-    "bootstrap_skills",
-    "branch_spec",
-    "bulk_import",
-    "bulk_project_operations",
-    "calibrate_estimates",
-    "capture_learning",
+    "bump_spec_version",
     "challenge_spec",
-    "characterize_legacy_code",
-    "check_api_compatibility",
-    "check_auto_promotion",
     "check_compliance",
-    "check_figma_design_drift",
+    "check_config_health",
+    "check_parallel_safety",
     "check_readiness",
     "check_spec_accuracy",
-    "code_change_compliance",
-    "code_graph_status",
+    "check_update_status",
+    "check_versions",
+    "clarify_requirements",
     "compliance_coverage_report",
     "compliance_gap_analysis",
+    "compliance_gate_status",
     "compliance_score_report",
-    "compress_spec_history",
     "config_health",
     "configure_approval_policy",
-    "configure_auto_promotion",
-    "configure_autopilot",
-    "configure_checkpoint_policy",
-    "configure_code_graph",
     "configure_compliance",
-    "configure_crash_rules",
     "configure_deploy_target",
-    "configure_drift_monitoring",
-    "configure_figma_webhook",
-    "configure_filesystem_hooks",
-    "configure_hooks",
-    "configure_llm_providers",
     "configure_memory",
     "configure_oauth",
     "configure_observability",
-    "configure_release_notes",
     "configure_roles",
-    "configure_skill_registries",
-    "configure_slack",
-    "configure_spec_hooks",
     "configure_squad",
+    "configure_tdd_policy",
+    "configure_telemetry",
     "configure_webhook",
     "configure_workers",
+    "consult_docs",
     "context_budget",
-    "context_budget_config",
-    "context_window_status",
-    "contribute_context",
     "convert_to_bdd",
-    "cookbook_apply",
-    "cookbook_contribute",
-    "cookbook_get",
-    "cookbook_list",
-    "cookbook_search",
     "coverage_gap_analyzer",
-    "create_pr_from_spec",
-    "create_release",
-    "critical_path_analyzer",
+    "create_rule",
+    "create_skill",
+    "create_spec",
     "data_governance",
     "data_retention_policy",
-    "debt_forecast",
     "decompose_spec",
     "define_spec_lint_rule",
     "define_ui_contract",
     "delete_spec_lint_rule",
-    "dependency_health",
-    "dependency_impact_report",
     "deploy_spec",
     "deploy_status",
-    "design_schema",
     "detect_agent",
-    "detect_contradictions",
-    "detect_deprecations",
-    "detect_duplication",
-    "detect_hyrum_risks",
-    "diff_spec_versions",
-    "disable_spec_hook",
+    "detect_drift",
     "discover_docs_url",
     "discover_mcps",
     "discover_registry",
-    "doc_compliance_report",
-    "drift_alert_rules",
-    "drift_summary_report",
-    "e2e_test_status",
     "ears_lint",
     "ecosystem_status",
-    "elicit_requirements",
-    "enable_spec_hook",
-    "enrich_specs_from_figma",
+    "enable_auto_update",
+    "estimate",
     "estimate_ai_cost",
-    "estimation_accuracy_report",
     "eval_rule",
     "eval_skill",
-    "event_contracts",
     "export_audit_trail",
-    "export_gherkin",
-    "export_session",
     "export_spec",
-    "export_spec_bundle",
-    "export_specs_csv",
     "expose_spec_as_prompt",
-    "extract_figma_design_tokens",
-    "extract_lessons_from_text",
-    "figma_status",
-    "figma_visual_diff_report",
-    "fix_crash_risks",
-    "flag_spec_gap",
-    "force_status_analytics",
+    "facilitate",
     "gc_data_projects",
-    "generate_adr",
-    "generate_annotations",
     "generate_api_client",
     "generate_attestation",
     "generate_automation_guide",
     "generate_batch_script",
-    "generate_changelog",
     "generate_checklist",
-    "generate_ci",
     "generate_compliance_report",
     "generate_compliance_tests",
     "generate_diagram",
+    "generate_docs",
     "generate_docs_site",
-    "generate_e2e_tests",
-    "generate_figma_e2e_tests",
-    "generate_figma_rules_file",
-    "generate_hooks_for_stack",
+    "generate_edge_tests",
+    "generate_execution_plan",
     "generate_ide_config",
-    "generate_infrastructure",
     "generate_orchestration_script",
-    "generate_planu_ci",
     "generate_proposal",
-    "generate_release_notes",
-    "generate_rls_spec",
     "generate_rules",
     "generate_skill",
-    "generate_spec_from_api",
-    "generate_spec_from_commit_range",
-    "generate_spec_from_design",
-    "generate_spec_from_diff",
+    "generate_spec_dashboard",
     "generate_spec_from_issue",
-    "generate_spec_from_pr",
-    "generate_specs_from_figma_file",
-    "generate_steering_file",
     "generate_sub_agent",
-    "generate_teammate_prompt",
+    "generate_tests",
     "generate_validation_schema",
-    "get_figma_context_for_spec",
-    "git_diff_to_spec_impact",
-    "global_rules_status",
     "graph_specs",
     "guided_tour",
-    "heal_planu_root",
-    "health_check_all",
-    "hook_status",
-    "housekeeping_sweep",
-    "import_figma_project",
-    "import_gherkin",
-    "import_spec",
-    "import_spec_bundle",
-    "inject_component_context",
-    "inject_criteria",
-    "inject_quality_gates",
+    "heal_spec_docs",
+    "init_constitution",
+    "init_project",
     "integrate_pm",
     "issue_reviewer_token",
-    "knowledge_gap_detector",
-    "knowledge_summary",
+    "learn_pattern",
     "legal_compliance_report",
-    "link_pr_to_spec",
-    "list_domain_bundles",
-    "list_figma_files",
-    "list_figma_frames",
-    "list_figma_responsive_frames",
     "list_groups",
-    "list_pending_checkpoints",
-    "list_sessions",
-    "list_spec_bindings",
-    "list_spec_hooks",
+    "list_registered_projects",
     "list_spec_lint_rules",
     "list_spec_prompts",
-    "list_spec_prs",
-    "list_steering_files",
-    "list_storybook_components",
-    "list_tech_debt",
-    "list_testimonials",
+    "list_specs",
     "living_reconcile_spec",
-    "living_spec_coverage",
-    "living_spec_status",
-    "living_spec_watch",
-    "llm_provider_status",
-    "log_decision",
     "manage_context",
-    "manage_global_rules",
-    "manage_hooks",
+    "manage_git",
     "manage_plugins",
-    "manage_scope",
-    "mark_as_spec_source",
     "memory_status",
-    "merge_hooks",
-    "merge_preview",
-    "merge_spec_branch",
-    "migrate_tech",
     "multi_agent_review",
     "onboarding_checklist",
     "onboarding_progress",
-    "optimize_context",
-    "opencode_host_adapter",
-    "optimize_spec_scheduling",
     "orchestrate",
-    "orchestrate_agents",
-    "orchestrate_runtime",
+    "oauth_status",
     "outbound_webhook_status",
     "package_handoff",
     "paradigm_report",
-    "parallel_efficiency_score",
-    "plan_mode",
-    "plan_team_distribution",
-    "plan_upgrade",
-    "planu_session_checkpoint",
+    "planu_status",
     "publish_registry",
     "quick_start",
-    "reality_check",
     "recommend_model",
     "reconcile_hooks",
-    "reconcile_interactive_question_hooks",
     "reconcile_rules",
     "reconcile_skills",
     "reconcile_spec",
     "reconcile_universal_rules",
     "red_team",
-    "refactor_with_safety_net",
-    "register_api_surface",
+    "register_project_path",
+    "registry_install",
     "registry_login",
     "registry_logout",
     "registry_publish",
+    "registry_search",
     "registry_whoami",
-    "reject_checkpoint",
-    "remove_figma_file",
-    "remove_figma_webhook",
-    "remove_slack",
     "remove_webhook",
     "render_spec_for_provider",
     "repair_frontmatter_drift",
-    "reply_comment",
     "request_changes",
-    "request_context",
-    "require_checkpoint",
-    "resolve_comment",
-    "resolve_drift_violations",
-    "resolve_feedback",
-    "resolve_sync_conflict",
-    "resolve_tech_debt",
-    "restore_archived_context",
-    "restore_session",
     "reverse_engineer",
-    "reverse_engineer_tests",
-    "review_pr",
     "rewrite_criteria_ears",
-    "rollback_release",
     "run_mutation_hints",
     "run_spec_lint",
-    "run_validation_loop",
     "scaffold_plugin",
     "scan_orphan_spec_refs",
     "scan_project",
-    "seams_detector",
     "search_all_projects",
-    "security_check",
     "security_report",
-    "security_scan_pro",
-    "semantic_decision_search",
-    "semantic_search",
-    "sentry_error_to_spec",
-    "sentry_errors_report",
-    "similar_problems_finder",
-    "simplicity_metric",
-    "simulate_parallel_execution",
-    "slack_notify",
+    "set_locale",
+    "set_work_mode",
+    "skill_install",
+    "skill_search",
     "solid_check",
-    "spec_obesity_healer",
-    "smart_merge_conflict_resolver",
-    "snapshot_spec_hashes",
     "spec_coverage",
-    "spec_diff",
-    "spec_effectiveness_score",
-    "spec_health_check",
-    "spec_history",
-    "spec_quality_score",
-    "spec_usage_report",
-    "spec_version_history",
-    "split_spec",
+    "spec_obesity_healer",
     "squad_status",
-    "start_hooks",
+    "ssr_back_migration",
+    "start_oauth_flow",
     "start_onboarding",
-    "stop_hooks",
-    "suggest_deletions",
     "suggest_mcp_server",
     "suggest_mcps",
-    "suggest_spec_update",
+    "suggest_stack",
     "suggest_token_optimizer",
     "suggest_tooling",
-    "sustainability_score",
+    "summarize_spec",
     "sync_ai_configs",
-    "sync_code_to_spec",
-    "sync_figma_changes",
-    "sync_figma_code_connect",
-    "sync_figma_tokens_to_code",
-    "sync_spec_from_code",
     "sync_spec_state",
-    "sync_spec_to_code",
-    "sync_storybook_components",
-    "sync_supabase_schema",
-    "team_analytics",
-    "tech_debt_budget",
-    "tech_debt_report",
+    "tdd_scaffold",
+    "tdd_status",
     "telemetry_health",
-    "test_spec_hook",
-    "three_way_merge",
-    "token_intelligence",
     "token_optimizer_status",
-    "token_savings_report",
-    "track_tech_debt",
-    "type_safety_gate",
     "transform_code",
-    "triage_feedback",
-    "update_project_dna",
+    "triage_request",
+    "type_safety_gate",
+    "unregister_project_path",
     "update_registry",
-    "validate_annotations",
+    "update_status",
+    "update_status_batch",
+    "validate",
     "validate_api_contract",
     "validate_browser",
     "validate_criteria_quality",
     "validate_docs_registry",
-    "validate_team_results",
-    "validate_token_consistency",
     "validate_workflow",
-    "velocity_report",
-    "velocity_trend",
-    "verify_spec_compliance",
-    "version_spec",
     "verify_integrations",
-    "visual_spec_diff",
-    "watch_spec_drift",
-    "workload_distribution",
-    "workspace_alerts",
-    "workspace_health",
-    "workspace_overview",
-    "workspace_report",
-    "workspace_search",
-    "project_overview",
-    "reconcile_status_json",
-    "ssr_back_migration"
+    "verify_spec_compliance",
+    "worker_status"
   ],
+  "proTools": ["audit", "design_schema", "generate_adr", "security_check"],
   "alwaysAllowed": [
     "activate_license",
+    "configure_compliance_gate",
     "deactivate_license",
+    "fix_schema_type_parity",
     "license_status",
-    "usage_stats",
-    "usage_report",
-    "tool_usage_report",
+    "pin_version",
     "start_dashboard",
-    "stop_dashboard",
     "start_webhook",
+    "stop_dashboard",
     "stop_webhook",
-    "webhook_status",
-    "configure_compliance_gate",
-    "fix_schema_type_parity",
-    "pin_version"
+    "tool_usage_report",
+    "usage_report",
+    "usage_stats",
+    "webhook_status"
   ],
   "variantMapping": {
     "Planu Pro": "pro",

package/dist/engine/hooks/git-hook-generator.js

@@ -66,6 +66,37 @@ if command -v planu >/dev/null 2>&1; then
   planu detect-drift --project-id "${projectId}" --mode quick 2>/dev/null || true
 fi
 
+if command -v pnpm >/dev/null 2>&1 && [ -f "package.json" ] && [ -f "pnpm-lock.yaml" ]; then
+  echo "[Planu] Checking dependency freshness..."
+  pnpm install --frozen-lockfile --ignore-scripts >/dev/null || {
+    echo "ERROR: package.json and pnpm-lock.yaml are not synchronized."
+    echo "Run: pnpm install --lockfile-only --ignore-scripts"
+    exit 1
+  }
+  pnpm audit --audit-level=high || {
+    echo "ERROR: High or critical dependency vulnerabilities found."
+    echo "Run: pnpm audit and update the affected packages before pushing."
+    exit 1
+  }
+  OUTDATED_JSON="$(mktemp)"
+  OUTDATED_ERR="$(mktemp)"
+  set +e
+  pnpm outdated --format=json >"\${OUTDATED_JSON}" 2>"\${OUTDATED_ERR}"
+  OUTDATED_STATUS=$?
+  set -e
+  if [ "\${OUTDATED_STATUS}" -gt 1 ]; then
+    echo "ERROR: Failed to query dependency freshness from the registry."
+    cat "\${OUTDATED_ERR}"
+    rm -f "\${OUTDATED_JSON}" "\${OUTDATED_ERR}"
+    exit 1
+  fi
+  node -e "const fs=require('fs');const raw=fs.readFileSync(process.argv[1],'utf8').trim();const data=raw?JSON.parse(raw):{};const count=Array.isArray(data)?data.length:Object.keys(data).length;if(count>0){console.error('ERROR: Outdated dependencies found. Run: bash scripts/check-updates.sh --apply, pnpm update, or update intentionally before pushing.');process.exit(1)}" "\${OUTDATED_JSON}" || {
+    rm -f "\${OUTDATED_JSON}" "\${OUTDATED_ERR}"
+    exit 1
+  }
+  rm -f "\${OUTDATED_JSON}" "\${OUTDATED_ERR}"
+fi
+
 echo "[Planu] Pre-push checks complete."
 `;
 }