@planu/cli 4.1.1 → 4.1.2

package/CHANGELOG.md

@@ -1,3 +1,14 @@
+## [4.1.2] - 2026-05-21
+
+### Bug Fixes
+- Remove unused legacy Planu files from the runtime surface and keep license tool registration strict.
+- Restore missing OAuth MCP registrations for `start_oauth_flow`, `oauth_status`, and `configure_oauth`.
+- Harden generated Git hooks so changed-file JSON generation avoids awk portability failures and integer parsing warnings.
+
+### Tests
+- Add hook-generation coverage for portable post-commit changed-file handling.
+
+
 ## [4.1.1] - 2026-05-21
 
 ### Features

package/dist/config/license-plans.json

@@ -18,510 +18,214 @@
     }
   },
   "freeTools": [
-    "add_comment",
-    "analyze_performance_impact",
-    "analyze_spec_size",
-    "approval_status",
-    "capture_idea",
-    "check_config_health",
-    "check_parallel_safety",
-    "check_spec_lock",
-    "check_versions",
-    "clarify_requirements",
-    "configure_figma",
-    "configure_telemetry",
-    "consult_docs",
-    "create_rule",
-    "create_skill",
-    "create_spec",
-    "delete_decision",
-    "delete_pattern",
-    "delete_project",
-    "delete_spec",
-    "detect_drift",
-    "discard_idea",
-    "estimate",
-    "export_specs_markdown",
-    "facilitate",
-    "filesystem_hooks_status",
-    "generate_docs",
-    "generate_execution_plan",
-    "generate_spec_dashboard",
-    "generate_tests",
-    "heal_spec_docs",
-    "init_constitution",
-    "init_project",
-    "learn_pattern",
-    "list_backlog",
-    "list_comments",
-    "list_lessons",
-    "list_locks",
-    "list_registered_projects",
-    "list_specs",
-    "list_templates",
-    "lock_spec",
-    "log_lesson",
-    "manage_git",
-    "manage_trash",
-    "planu_status",
-    "pr_status",
-    "promote_idea",
-    "record_actual",
-    "register_project_path",
-    "registry_install",
-    "registry_search",
-    "search_specs",
-    "search_suggestions",
-    "session_checkpoint",
-    "session_handoff",
-    "set_locale",
-    "set_work_mode",
-    "skill_install",
-    "skill_search",
-    "slack_status",
-    "submit_feedback",
-    "suggest_criteria",
-    "suggest_stack",
-    "summarize_spec",
-    "analytics_report",
-    "bump_spec_version",
-    "observatory_insights",
-    "manage_drift",
-    "tdd_scaffold",
-    "token_usage",
-    "tokens",
-    "triage_request",
-    "unlock_spec",
-    "unregister_project_path",
-    "update_status",
-    "update_status_batch",
-    "validate",
-    "worker_status",
-    "security_scan",
-    "set_context_profile",
-    "get_context_profile",
-    "list_context_profiles",
-    "detect_project_dna",
-    "preview_hooks",
-    "configure_sentry",
-    "sentry_status",
-    "generate_pr_description",
-    "configure_supabase",
-    "supabase_status",
-    "preview_release_notes",
-    "discover_skills_from_registries",
-    "start_oauth_flow",
-    "oauth_status",
-    "scan_crash_risks",
-    "compliance_gate_status",
-    "audit_schema_type_parity",
-    "check_update_status",
-    "enable_auto_update",
-    "configure_tdd_policy",
-    "generate_edge_tests",
-    "tdd_status",
-    "autopilot_audit",
-    "configure_permissions",
-    "install_plugins"
-  ],
-  "proTools": [
     "activate_group",
-    "add_figma_file",
     "agent_run_history",
-    "agent_swarm_status",
-    "analyze_breaking_changes",
-    "analyze_code_impact",
-    "analyze_figma_flows",
+    "analyze_performance_impact",
     "analyze_spec_dependencies",
-    "apply_domain_bundle",
-    "apply_merge",
-    "apply_migration_cleanup",
-    "apply_template",
-    "approve_checkpoint",
+    "approval_status",
     "approve_spec",
-    "approve_testimonial",
     "architecture_lint",
-    "archive_spec_context",
     "assess_merge_risk",
     "assign_role",
-    "audit",
     "audit_claude_config",
     "audit_log_export",
+    "audit_schema_type_parity",
     "audit_specs_drift",
-    "audit_stack",
     "audit_trail",
-    "auto_fix_health",
-    "auto_fix_validation",
-    "auto_reconcile",
-    "auto_remediate_compliance",
-    "bootstrap_project_intelligence",
-    "bootstrap_skills",
-    "branch_spec",
-    "bulk_import",
-    "bulk_project_operations",
-    "calibrate_estimates",
-    "capture_learning",
+    "bump_spec_version",
     "challenge_spec",
-    "characterize_legacy_code",
-    "check_api_compatibility",
-    "check_auto_promotion",
     "check_compliance",
-    "check_figma_design_drift",
+    "check_config_health",
+    "check_parallel_safety",
     "check_readiness",
     "check_spec_accuracy",
-    "code_change_compliance",
-    "code_graph_status",
+    "check_update_status",
+    "check_versions",
+    "clarify_requirements",
     "compliance_coverage_report",
     "compliance_gap_analysis",
+    "compliance_gate_status",
     "compliance_score_report",
-    "compress_spec_history",
     "config_health",
     "configure_approval_policy",
-    "configure_auto_promotion",
-    "configure_autopilot",
-    "configure_checkpoint_policy",
-    "configure_code_graph",
     "configure_compliance",
-    "configure_crash_rules",
     "configure_deploy_target",
-    "configure_drift_monitoring",
-    "configure_figma_webhook",
-    "configure_filesystem_hooks",
-    "configure_hooks",
-    "configure_llm_providers",
     "configure_memory",
     "configure_oauth",
     "configure_observability",
-    "configure_release_notes",
     "configure_roles",
-    "configure_skill_registries",
-    "configure_slack",
-    "configure_spec_hooks",
     "configure_squad",
+    "configure_tdd_policy",
+    "configure_telemetry",
     "configure_webhook",
     "configure_workers",
+    "consult_docs",
     "context_budget",
-    "context_budget_config",
-    "context_window_status",
-    "contribute_context",
     "convert_to_bdd",
-    "cookbook_apply",
-    "cookbook_contribute",
-    "cookbook_get",
-    "cookbook_list",
-    "cookbook_search",
     "coverage_gap_analyzer",
-    "create_pr_from_spec",
-    "create_release",
-    "critical_path_analyzer",
+    "create_rule",
+    "create_skill",
+    "create_spec",
     "data_governance",
     "data_retention_policy",
-    "debt_forecast",
     "decompose_spec",
     "define_spec_lint_rule",
     "define_ui_contract",
     "delete_spec_lint_rule",
-    "dependency_health",
-    "dependency_impact_report",
     "deploy_spec",
     "deploy_status",
-    "design_schema",
     "detect_agent",
-    "detect_contradictions",
-    "detect_deprecations",
-    "detect_duplication",
-    "detect_hyrum_risks",
-    "diff_spec_versions",
-    "disable_spec_hook",
+    "detect_drift",
     "discover_docs_url",
     "discover_mcps",
     "discover_registry",
-    "doc_compliance_report",
-    "drift_alert_rules",
-    "drift_summary_report",
-    "e2e_test_status",
     "ears_lint",
     "ecosystem_status",
-    "elicit_requirements",
-    "enable_spec_hook",
-    "enrich_specs_from_figma",
+    "enable_auto_update",
+    "estimate",
     "estimate_ai_cost",
-    "estimation_accuracy_report",
     "eval_rule",
     "eval_skill",
-    "event_contracts",
     "export_audit_trail",
-    "export_gherkin",
-    "export_session",
     "export_spec",
-    "export_spec_bundle",
-    "export_specs_csv",
     "expose_spec_as_prompt",
-    "extract_figma_design_tokens",
-    "extract_lessons_from_text",
-    "figma_status",
-    "figma_visual_diff_report",
-    "fix_crash_risks",
-    "flag_spec_gap",
-    "force_status_analytics",
+    "facilitate",
     "gc_data_projects",
-    "generate_adr",
-    "generate_annotations",
     "generate_api_client",
     "generate_attestation",
     "generate_automation_guide",
     "generate_batch_script",
-    "generate_changelog",
     "generate_checklist",
-    "generate_ci",
     "generate_compliance_report",
     "generate_compliance_tests",
     "generate_diagram",
+    "generate_docs",
     "generate_docs_site",
-    "generate_e2e_tests",
-    "generate_figma_e2e_tests",
-    "generate_figma_rules_file",
-    "generate_hooks_for_stack",
+    "generate_edge_tests",
+    "generate_execution_plan",
     "generate_ide_config",
-    "generate_infrastructure",
     "generate_orchestration_script",
-    "generate_planu_ci",
     "generate_proposal",
-    "generate_release_notes",
-    "generate_rls_spec",
     "generate_rules",
     "generate_skill",
-    "generate_spec_from_api",
-    "generate_spec_from_commit_range",
-    "generate_spec_from_design",
-    "generate_spec_from_diff",
+    "generate_spec_dashboard",
     "generate_spec_from_issue",
-    "generate_spec_from_pr",
-    "generate_specs_from_figma_file",
-    "generate_steering_file",
     "generate_sub_agent",
-    "generate_teammate_prompt",
+    "generate_tests",
     "generate_validation_schema",
-    "get_figma_context_for_spec",
-    "git_diff_to_spec_impact",
-    "global_rules_status",
     "graph_specs",
     "guided_tour",
-    "heal_planu_root",
-    "health_check_all",
-    "hook_status",
-    "housekeeping_sweep",
-    "import_figma_project",
-    "import_gherkin",
-    "import_spec",
-    "import_spec_bundle",
-    "inject_component_context",
-    "inject_criteria",
-    "inject_quality_gates",
+    "heal_spec_docs",
+    "init_constitution",
+    "init_project",
     "integrate_pm",
     "issue_reviewer_token",
-    "knowledge_gap_detector",
-    "knowledge_summary",
+    "learn_pattern",
     "legal_compliance_report",
-    "link_pr_to_spec",
-    "list_domain_bundles",
-    "list_figma_files",
-    "list_figma_frames",
-    "list_figma_responsive_frames",
     "list_groups",
-    "list_pending_checkpoints",
-    "list_sessions",
-    "list_spec_bindings",
-    "list_spec_hooks",
+    "list_registered_projects",
     "list_spec_lint_rules",
     "list_spec_prompts",
-    "list_spec_prs",
-    "list_steering_files",
-    "list_storybook_components",
-    "list_tech_debt",
-    "list_testimonials",
+    "list_specs",
     "living_reconcile_spec",
-    "living_spec_coverage",
-    "living_spec_status",
-    "living_spec_watch",
-    "llm_provider_status",
-    "log_decision",
     "manage_context",
-    "manage_global_rules",
-    "manage_hooks",
+    "manage_git",
     "manage_plugins",
-    "manage_scope",
-    "mark_as_spec_source",
     "memory_status",
-    "merge_hooks",
-    "merge_preview",
-    "merge_spec_branch",
-    "migrate_tech",
     "multi_agent_review",
     "onboarding_checklist",
     "onboarding_progress",
-    "optimize_context",
-    "opencode_host_adapter",
-    "optimize_spec_scheduling",
     "orchestrate",
-    "orchestrate_agents",
-    "orchestrate_runtime",
+    "oauth_status",
     "outbound_webhook_status",
     "package_handoff",
     "paradigm_report",
-    "parallel_efficiency_score",
-    "plan_mode",
-    "plan_team_distribution",
-    "plan_upgrade",
-    "planu_session_checkpoint",
+    "planu_status",
     "publish_registry",
     "quick_start",
-    "reality_check",
     "recommend_model",
     "reconcile_hooks",
-    "reconcile_interactive_question_hooks",
     "reconcile_rules",
     "reconcile_skills",
     "reconcile_spec",
     "reconcile_universal_rules",
     "red_team",
-    "refactor_with_safety_net",
-    "register_api_surface",
+    "register_project_path",
+    "registry_install",
     "registry_login",
     "registry_logout",
     "registry_publish",
+    "registry_search",
     "registry_whoami",
-    "reject_checkpoint",
-    "remove_figma_file",
-    "remove_figma_webhook",
-    "remove_slack",
     "remove_webhook",
     "render_spec_for_provider",
     "repair_frontmatter_drift",
-    "reply_comment",
     "request_changes",
-    "request_context",
-    "require_checkpoint",
-    "resolve_comment",
-    "resolve_drift_violations",
-    "resolve_feedback",
-    "resolve_sync_conflict",
-    "resolve_tech_debt",
-    "restore_archived_context",
-    "restore_session",
     "reverse_engineer",
-    "reverse_engineer_tests",
-    "review_pr",
     "rewrite_criteria_ears",
-    "rollback_release",
     "run_mutation_hints",
     "run_spec_lint",
-    "run_validation_loop",
     "scaffold_plugin",
     "scan_orphan_spec_refs",
     "scan_project",
-    "seams_detector",
     "search_all_projects",
-    "security_check",
     "security_report",
-    "security_scan_pro",
-    "semantic_decision_search",
-    "semantic_search",
-    "sentry_error_to_spec",
-    "sentry_errors_report",
-    "similar_problems_finder",
-    "simplicity_metric",
-    "simulate_parallel_execution",
-    "slack_notify",
+    "set_locale",
+    "set_work_mode",
+    "skill_install",
+    "skill_search",
     "solid_check",
-    "spec_obesity_healer",
-    "smart_merge_conflict_resolver",
-    "snapshot_spec_hashes",
     "spec_coverage",
-    "spec_diff",
-    "spec_effectiveness_score",
-    "spec_health_check",
-    "spec_history",
-    "spec_quality_score",
-    "spec_usage_report",
-    "spec_version_history",
-    "split_spec",
+    "spec_obesity_healer",
     "squad_status",
-    "start_hooks",
+    "ssr_back_migration",
+    "start_oauth_flow",
     "start_onboarding",
-    "stop_hooks",
-    "suggest_deletions",
     "suggest_mcp_server",
     "suggest_mcps",
-    "suggest_spec_update",
+    "suggest_stack",
     "suggest_token_optimizer",
     "suggest_tooling",
-    "sustainability_score",
+    "summarize_spec",
     "sync_ai_configs",
-    "sync_code_to_spec",
-    "sync_figma_changes",
-    "sync_figma_code_connect",
-    "sync_figma_tokens_to_code",
-    "sync_spec_from_code",
     "sync_spec_state",
-    "sync_spec_to_code",
-    "sync_storybook_components",
-    "sync_supabase_schema",
-    "team_analytics",
-    "tech_debt_budget",
-    "tech_debt_report",
+    "tdd_scaffold",
+    "tdd_status",
     "telemetry_health",
-    "test_spec_hook",
-    "three_way_merge",
-    "token_intelligence",
     "token_optimizer_status",
-    "token_savings_report",
-    "track_tech_debt",
-    "type_safety_gate",
     "transform_code",
-    "triage_feedback",
-    "update_project_dna",
+    "triage_request",
+    "type_safety_gate",
+    "unregister_project_path",
     "update_registry",
-    "validate_annotations",
+    "update_status",
+    "update_status_batch",
+    "validate",
     "validate_api_contract",
     "validate_browser",
     "validate_criteria_quality",
     "validate_docs_registry",
-    "validate_team_results",
-    "validate_token_consistency",
     "validate_workflow",
-    "velocity_report",
-    "velocity_trend",
-    "verify_spec_compliance",
-    "version_spec",
     "verify_integrations",
-    "visual_spec_diff",
-    "watch_spec_drift",
-    "workload_distribution",
-    "workspace_alerts",
-    "workspace_health",
-    "workspace_overview",
-    "workspace_report",
-    "workspace_search",
-    "project_overview",
-    "reconcile_status_json",
-    "ssr_back_migration"
+    "verify_spec_compliance",
+    "worker_status"
   ],
+  "proTools": ["audit", "design_schema", "generate_adr", "security_check"],
   "alwaysAllowed": [
     "activate_license",
+    "configure_compliance_gate",
     "deactivate_license",
+    "fix_schema_type_parity",
     "license_status",
-    "usage_stats",
-    "usage_report",
-    "tool_usage_report",
+    "pin_version",
     "start_dashboard",
-    "stop_dashboard",
     "start_webhook",
+    "stop_dashboard",
     "stop_webhook",
-    "webhook_status",
-    "configure_compliance_gate",
-    "fix_schema_type_parity",
-    "pin_version"
+    "tool_usage_report",
+    "usage_report",
+    "usage_stats",
+    "webhook_status"
   ],
   "variantMapping": {
     "Planu Pro": "pro",

package/dist/tools/git/hook-ops.js

@@ -219,19 +219,33 @@ function buildPostCommitDriftScript() {
         '[ -z "$CHANGED" ] && exit 0',
         '',
         '# Build JSON array of file paths',
-        'FILES_JSON=$(echo "$CHANGED" | awk \'',
-        '  BEGIN { printf "[" }',
-        '  NR > 1 { printf "," }',
-        // eslint-disable-next-line no-useless-escape
-        '  { gsub(/"/, "\\\\\""); printf "\\"%s\\"", $0 }',
-        '  END { printf "]" }',
-        "')",
+        'FILES_JSON="["',
+        'FIRST=1',
+        'while IFS= read -r FILE_PATH; do',
+        '  ESCAPED=$(printf \'%s\' "$FILE_PATH" | sed \'s/\\\\/\\\\\\\\/g; s/"/\\\\"/g\')',
+        '  if [ "$FIRST" -eq 0 ]; then',
+        '    FILES_JSON="$FILES_JSON,"',
+        '  fi',
+        '  FILES_JSON="$FILES_JSON\\"$ESCAPED\\""',
+        '  FIRST=0',
+        'done <<PLANU_CHANGED_FILES',
+        '$CHANGED',
+        'PLANU_CHANGED_FILES',
+        'FILES_JSON="$FILES_JSON]"',
         '',
         "TS=$(date -u '+%Y-%m-%dT%H:%M:%SZ' 2>/dev/null || date -u)",
         '',
         '# Check for drift-worthy files (dep manifests or uncommon extensions)',
-        'HAS_DEP=$(echo "$CHANGED" | grep -cE \'(^|/)(package\\.json|go\\.mod|requirements\\.txt|Cargo\\.toml|pom\\.xml|build\\.gradle|pyproject\\.toml|Gemfile|composer\\.json)$\' 2>/dev/null || echo 0)',
-        "HAS_EXT=$(echo \"$CHANGED\" | grep -oE '\\.[a-zA-Z]+$' | grep -cvE '\\.(ts|tsx|js|jsx|mjs|cjs|json|md|mdx|sh|bash|txt|yaml|yml|toml|lock|sum|mod|py|go|rs|java|kt|rb|php|cs|dart|swift|html|css|scss|vue|svelte|env|sql|xml|csv)$' 2>/dev/null || echo 0)",
+        'if echo "$CHANGED" | grep -qE \'(^|/)(package\\.json|go\\.mod|requirements\\.txt|Cargo\\.toml|pom\\.xml|build\\.gradle|pyproject\\.toml|Gemfile|composer\\.json)$\' 2>/dev/null; then',
+        '  HAS_DEP=1',
+        'else',
+        '  HAS_DEP=0',
+        'fi',
+        "if echo \"$CHANGED\" | grep -oE '\\.[a-zA-Z]+$' | grep -qvE '\\.(ts|tsx|js|jsx|mjs|cjs|json|md|mdx|sh|bash|txt|yaml|yml|toml|lock|sum|mod|py|go|rs|java|kt|rb|php|cs|dart|swift|html|css|scss|vue|svelte|env|sql|xml|csv)$' 2>/dev/null; then",
+        '  HAS_EXT=1',
+        'else',
+        '  HAS_EXT=0',
+        'fi',
         '',
         '# Only write if there is something worth processing',
         'if [ "$HAS_DEP" -gt 0 ] || [ "$HAS_EXT" -gt 0 ]; then',

package/dist/tools/tool-registry/group-infra.js

@@ -14,6 +14,9 @@ import { safe, safeLicensed, safeTracked } from '../safe-handler.js';
 import { handleActivateLicense, handleDeactivateLicense } from '../activate-license.js';
 import { handleLicenseStatus } from '../license-status.js';
 import { LicenseStatusOutputSchema } from '../schemas/index.js';
+// ── OAuth tools (register-oauth-tools.ts / register-configure-oauth-tool.ts) ─
+import { handleStartOAuthFlow, handleOAuthStatus, StartOAuthFlowInputSchema, OAuthStatusInputSchema, } from '../oauth-handler.js';
+import { handleConfigureOAuth } from '../configure-oauth-handler.js';
 // ── Usage tools (register-usage-tools.ts) ────────────────────────────────────
 import { handleUsageStats } from '../usage-stats.js';
 import { handleUsageReport } from '../usage-report.js';
@@ -126,6 +129,25 @@ export function registerInfraGroupTools(server) {
         outputSchema: LicenseStatusOutputSchema,
         annotations: { title: 'License Status', readOnlyHint: true },
     }, safe(async (args) => handleLicenseStatus(args)));
+    // ── OAuth tools ────────────────────────────────────────────────────────────
+    server.registerTool('start_oauth_flow', {
+        description: 'Start guided OAuth setup for supported integrations such as Figma, GitHub, Sentry, or Supabase.',
+        inputSchema: StartOAuthFlowInputSchema,
+        annotations: { title: 'Start OAuth Flow', readOnlyHint: false },
+    }, safeLicensed('start_oauth_flow', async (args) => handleStartOAuthFlow(args)));
+    server.registerTool('oauth_status', {
+        description: 'Show which OAuth-backed integrations are connected for this project.',
+        inputSchema: OAuthStatusInputSchema,
+        annotations: { title: 'OAuth Status', readOnlyHint: true },
+    }, safeLicensed('oauth_status', async (args) => handleOAuthStatus(args)));
+    server.registerTool('configure_oauth', {
+        description: 'Inspect Planu MCP OAuth/API-key auth status or test a bearer token without exposing secrets.',
+        inputSchema: {
+            action: z.enum(['status', 'test']).describe('Action: status | test'),
+            token: z.string().max(4096).optional().describe('Bearer token to test when action=test'),
+        },
+        annotations: { title: 'Configure OAuth', readOnlyHint: true },
+    }, safe(async (args) => handleConfigureOAuth(args)));
     // ── Usage tools ────────────────────────────────────────────────────────────
     server.registerTool('usage_stats', {
         description: 'View your Planu usage statistics — tool calls, top tools, remaining daily calls. ' +