@planu/cli 4.11.2 → 4.11.4

package/dist/tools/update-status/qa-gate.js

@@ -9,6 +9,9 @@ export async function checkQaGate(spec, projectPath, force) {
     if (state?.lastResult?.passed === true) {
         return null;
     }
+    if (await hasPassedExternalQaEvidence(spec, projectPath)) {
+        return null;
+    }
     let effectiveResult = state?.lastResult ?? null;
     if (effectiveResult === null) {
         const { runQaGate } = await import('../../engine/qa-gate.js');
@@ -47,4 +50,27 @@ export async function checkQaGate(spec, projectPath, force) {
         },
     };
 }
+async function hasPassedExternalQaEvidence(spec, projectPath) {
+    try {
+        const { readEvidenceArtifacts } = await import('../../engine/evidence-gates/artifact-reader.js');
+        const artifacts = await readEvidenceArtifacts({
+            spec,
+            projectId: spec.projectId,
+            specId: spec.id,
+            projectPath,
+        });
+        const rows = artifacts.traceabilityMatrix?.rows ?? [];
+        return rows.length > 0 && rows.every((row) => isPassedQaEvidence(row.validationEvidence));
+    }
+    catch {
+        return false;
+    }
+}
+function isPassedQaEvidence(value) {
+    if (!value) {
+        return false;
+    }
+    return (/\b(?:pnpm\s+validate|pnpm\s+test|pnpm\s+typecheck)\b[\s\S]{0,120}\bpass(?:ed|ing)?\b/i.test(value) ||
+        /\bpass(?:ed|ing)?\b[\s\S]{0,120}\b(?:pnpm\s+validate|pnpm\s+test|pnpm\s+typecheck)\b/i.test(value));
+}
 //# sourceMappingURL=qa-gate.js.map

package/dist/tools/update-status/transition-guard.d.ts

@@ -73,10 +73,10 @@ export declare function checkAmbiguityGate(spec: Spec, newStatus: SpecStatus): P
 export declare function checkReadinessGate(spec: Spec, newStatus: SpecStatus, forceApprove: boolean | undefined): Promise<ReadinessGateOutput>;
 /**
  * SPEC-964: Challenge gate — block 'review' if challenge_spec was never run
- * or did not generate enough addressed scenarios.
+ * or does not contain enough explicit resolution evidence.
  *
  * - Requires challengeReport to exist on the spec
- * - Requires at least 3 scenarios addressed
+ * - Requires explicit mitigation/risk-acceptance evidence for up to the first 3 findings
  * - High-risk specs (high/critical) require all 5 focus areas
  */
 export declare function checkChallengeGate(spec: Spec, newStatus: SpecStatus): ToolResult | null;

package/dist/tools/update-status/transition-guard.js

@@ -9,6 +9,7 @@ import { validateEnglishOnlySpecText } from '../../engine/spec-language/english-
 import { checkGroundedSpecContract } from '../../engine/spec-grounding/contract.js';
 import { checkGenericSpecOutput } from '../../engine/spec-quality/generic-output-gate.js';
 import { formatKeyValue } from '../output-formatter.js';
+import { getResolvedChallengeEvidence, requiredResolvedChallenges, } from '../challenge-spec/challenge-report.js';
 /**
  * Valid state transitions for spec lifecycle.
  * draft -> review -> approved -> implementing -> done
@@ -432,10 +433,10 @@ export async function checkReadinessGate(spec, newStatus, forceApprove) {
 }
 /**
  * SPEC-964: Challenge gate — block 'review' if challenge_spec was never run
- * or did not generate enough addressed scenarios.
+ * or does not contain enough explicit resolution evidence.
  *
  * - Requires challengeReport to exist on the spec
- * - Requires at least 3 scenarios addressed
+ * - Requires explicit mitigation/risk-acceptance evidence for up to the first 3 findings
  * - High-risk specs (high/critical) require all 5 focus areas
  */
 export function checkChallengeGate(spec, newStatus) {
@@ -459,21 +460,27 @@ export function checkChallengeGate(spec, newStatus) {
             },
         };
     }
-    if (report.addressedCount < 3) {
+    const resolutionEvidence = getResolvedChallengeEvidence(report);
+    const addressedCount = resolutionEvidence.length;
+    const findingsCount = Array.isArray(report.findings)
+        ? report.findings.length
+        : report.totalScenarios;
+    const requiredCount = requiredResolvedChallenges(findingsCount);
+    if (addressedCount < requiredCount) {
         return {
             content: [
                 {
                     type: 'text',
-                    text: `Challenge gate blocked: only ${String(report.addressedCount)} scenario(s) addressed (minimum 3 required). Re-run challenge_spec(specId="${spec.id}") with broader focus areas.`,
+                    text: `Challenge gate blocked: only ${String(addressedCount)} scenario(s) have explicit resolution evidence (minimum ${String(requiredCount)} required). Record mitigation or accepted-risk evidence for discovered findings before retrying.`,
                 },
             ],
             isError: true,
             structuredContent: {
                 error: 'CHALLENGE_GATE_BLOCKED',
                 code: 'INSUFFICIENT_CHALLENGES',
-                addressedCount: report.addressedCount,
-                requiredCount: 3,
-                fixHint: `Run challenge_spec(specId="${spec.id}") to generate more failure scenarios.`,
+                addressedCount,
+                requiredCount,
+                fixHint: `Resolve challenge_spec findings with concrete evidence, then retry update_status(specId="${spec.id}", status="review").`,
             },
         };
     }

package/dist/tools/validate-lint.d.ts

@@ -3,6 +3,6 @@ interface LintCheckContext {
     projectId?: string;
     specId?: string;
 }
-export declare function runLintCheck(projectPath: string, lintCommand: string | null, _context?: LintCheckContext): LintCheckResult;
+export declare function runLintCheck(projectPath: string, lintCommand: string | null, context?: LintCheckContext): LintCheckResult;
 export {};
 //# sourceMappingURL=validate-lint.d.ts.map

package/dist/tools/validate-lint.js

@@ -3,6 +3,7 @@ import { execFileSync } from 'node:child_process';
 import { createHash } from 'node:crypto';
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
 import { dirname, join } from 'node:path';
+import { projectDataDir } from '../storage/base-store.js';
 import { formatLintFailureDiagnostics, resolveProjectCommandPlan, runProjectCommandPlan, } from './validate-runtime.js';
 /** Allowlist: alphanumerics, spaces, and safe shell chars. Rejects ; | $ ` & < > */
 const SAFE_COMMAND_RE = /^[\w\s./:@~=-]+$/;
@@ -39,7 +40,7 @@ function parseLintIssueCount(output) {
     }
     return output.split('\n').filter((l) => l.trim().length > 0).length;
 }
-export function runLintCheck(projectPath, lintCommand, _context = {}) {
+export function runLintCheck(projectPath, lintCommand, context = {}) {
     if (lintCommand !== null && !isSafeCommand(lintCommand)) {
         console.warn(`[Planu] validate: lintCommand contains unsafe characters — skipping execution`);
         return {
@@ -50,6 +51,10 @@ export function runLintCheck(projectPath, lintCommand, _context = {}) {
         };
     }
     const command = lintCommand ?? 'pnpm lint';
+    const externalEvidence = readExternalPassedLintEvidence(context, command);
+    if (externalEvidence !== null) {
+        return externalEvidence;
+    }
     const plan = resolveProjectCommandPlan(projectPath, command);
     const fingerprint = calculateLintFingerprint(projectPath);
     const cached = readPassedLintCache(projectPath, command, fingerprint);
@@ -77,6 +82,39 @@ export function runLintCheck(projectPath, lintCommand, _context = {}) {
         return { passed: false, command, issueCount, output };
     }
 }
+function readExternalPassedLintEvidence(context, command) {
+    if (!context.projectId || !context.specId) {
+        return null;
+    }
+    try {
+        const path = join(projectDataDir(context.projectId), 'handoffs', context.specId, 'traceability-matrix.json');
+        if (!existsSync(path)) {
+            return null;
+        }
+        const parsed = JSON.parse(readFileSync(path, 'utf-8'));
+        const rows = Array.isArray(parsed.rows) ? parsed.rows : [];
+        if (rows.length === 0 ||
+            !rows.every((row) => isPassedFullValidationEvidence(row.validationEvidence))) {
+            return null;
+        }
+        return {
+            passed: true,
+            command,
+            issueCount: 0,
+            output: `(reused external validation evidence from handoffs/${context.specId}/traceability-matrix.json)`,
+        };
+    }
+    catch {
+        return null;
+    }
+}
+function isPassedFullValidationEvidence(value) {
+    if (typeof value !== 'string') {
+        return false;
+    }
+    return (/\bpnpm\s+validate\b[\s\S]{0,160}\bpass(?:ed|ing)?\b/i.test(value) ||
+        /\bpass(?:ed|ing)?\b[\s\S]{0,160}\bpnpm\s+validate\b/i.test(value));
+}
 function lintCheckTimeoutMs() {
     const raw = process.env.PLANU_VALIDATE_LINT_TIMEOUT_MS;
     if (raw === undefined || raw.trim() === '') {

package/dist/types/spec/core.d.ts

@@ -112,6 +112,26 @@ export interface ChallengeReport {
     overallRisk: 'low' | 'medium' | 'high' | 'critical';
     /** Whether the challenge passed the mandatory gate. */
     passed: boolean;
+    /** Findings discovered by the challenge run and their evidence-derived state. */
+    findings?: ChallengeFinding[];
+    /** Explicit mitigation or risk-acceptance evidence for resolved findings. */
+    resolutionEvidence?: ChallengeResolutionEvidence[];
+}
+export interface ChallengeFinding {
+    /** Exact scenario text emitted by challenge_spec. */
+    scenario: string;
+    /** Derived from matching explicit resolution evidence; discovery alone is never resolution. */
+    resolved: boolean;
+}
+export interface ChallengeResolutionEvidence {
+    /** Exact scenario text being resolved. */
+    scenario: string;
+    /** Whether the scenario was mitigated or explicitly accepted as a known risk. */
+    resolution: 'mitigated' | 'accepted';
+    /** Concrete proof or rationale supporting the resolution. */
+    evidence: string;
+    /** When the resolution was recorded. */
+    resolvedAt: string;
 }
 /** SPEC-630: Model and token budget derived from spec difficulty and devHours. */
 export interface ModelBudget {

package/dist/types/spec/inputs.d.ts

@@ -21,7 +21,7 @@ export interface CreateSpecInput {
      * Required when the previous response contained interactiveQuestions[].
      */
     clarificationAnswers?: Record<string, string>;
-    /** SPEC-612: Explicit out-of-scope items. If omitted, Planu auto-suggests based on the description. */
+    /** Explicit user-confirmed out-of-scope items. Omitted values are not inferred. */
     outOfScope?: string[];
     /** SPEC-697: Spec ID for agent team findings synthesis path. Required with agentTeamFindings. */
     specId?: string;

package/dist/types/stack/index.d.ts

@@ -1,4 +1,4 @@
-export type { StackRecommendation, SuggestStackResult, PackageRegistry, DependencyStatus, CheckVersionsResult, SkillFile, GenerateSkillResult, AgentConfig, SubAgentDefinition, GenerateSubAgentResult, GenerateRulesResult, SuggestStackInput, CheckVersionsInput, GenerateSkillInput, GenerateSubAgentInput, GenerateRulesInput, DetectAgentInput, DetectAgentResult, GenerateOrchestrationScriptInput, PlatformConfig, PlatformsConfig, RuleSection, LanguageSignature, FrameworkSignature, PackageManagerSignature, DatabaseSignature, StackSignatures, ArchPatternConfig, ArchPatternsFile, FrameworkConfig, AgentPlatformsConfig, } from './recommend.js';
+export type { StackRecommendation, StackAdviceGrounding, SuggestStackResult, PackageRegistry, DependencyStatus, CheckVersionsResult, SkillFile, GenerateSkillResult, AgentConfig, SubAgentDefinition, GenerateSubAgentResult, GenerateRulesResult, SuggestStackInput, CheckVersionsInput, GenerateSkillInput, GenerateSubAgentInput, GenerateRulesInput, DetectAgentInput, DetectAgentResult, GenerateOrchestrationScriptInput, PlatformConfig, PlatformsConfig, RuleSection, LanguageSignature, FrameworkSignature, PackageManagerSignature, DatabaseSignature, StackSignatures, ArchPatternConfig, ArchPatternsFile, FrameworkConfig, AgentPlatformsConfig, } from './recommend.js';
 export type { DependencyStatusCode, DepSeverity, AuditedDependency, StackHealthScore, StackAuditResult, RuntimeVersionStatus, StackAuditDelta, UpgradeRiskLevel, UpgradeBreakingChange, UpgradePlan, StackAuditConfig, ManifestData, AuditStackOptions, AuditStackInput, PlanUpgradeInput, VulnerableRange, KnownVulnerablePackage, } from './audit.js';
 export type { DeprecationSeverity, DeprecationFinding, DeprecationReport, DeprecationPattern, DetectDeprecationsInput, } from './deprecation.js';
 export type { HypermediaFramework, RenderingMode, TurboSubtype, HypermediaDetectionResult, TemplateEngineSignal, } from './hypermedia.js';

package/dist/types/stack/recommend.d.ts

@@ -26,6 +26,16 @@ export interface SuggestStackResult {
     lastChecked: string;
     confidence?: 'high' | 'medium' | 'low';
 }
+export interface StackAdviceGrounding {
+    selectionStatus: 'unconfirmed' | 'partially-confirmed';
+    detectedEvidence: string[];
+    confirmedChoices: {
+        field: string;
+        value: string;
+        source: 'user_confirmation';
+    }[];
+    candidateNotice: string;
+}
 export type PackageRegistry = 'npm' | 'pypi' | 'crates' | 'go' | 'packagist' | 'pub' | 'nuget' | 'rubygems';
 export interface DependencyStatus {
     name: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@planu/cli",
-  "version": "4.11.2",
+  "version": "4.11.4",
   "description": "Planu — MCP Server for Spec Driven Development with native Rust acceleration for hot paths. Cross-platform (Linux/macOS/Windows, x64/arm64, glibc/musl).",
   "type": "module",
   "main": "dist/index.js",
@@ -34,14 +34,14 @@
     "packageName": "@planu/core"
   },
   "optionalDependencies": {
-    "@planu/core-darwin-arm64": "4.11.2",
-    "@planu/core-darwin-x64": "4.11.2",
-    "@planu/core-linux-arm64-gnu": "4.11.2",
-    "@planu/core-linux-arm64-musl": "4.11.2",
-    "@planu/core-linux-x64-gnu": "4.11.2",
-    "@planu/core-linux-x64-musl": "4.11.2",
-    "@planu/core-win32-arm64-msvc": "4.11.2",
-    "@planu/core-win32-x64-msvc": "4.11.2"
+    "@planu/core-darwin-arm64": "4.11.4",
+    "@planu/core-darwin-x64": "4.11.4",
+    "@planu/core-linux-arm64-gnu": "4.11.4",
+    "@planu/core-linux-arm64-musl": "4.11.4",
+    "@planu/core-linux-x64-gnu": "4.11.4",
+    "@planu/core-linux-x64-musl": "4.11.4",
+    "@planu/core-win32-arm64-msvc": "4.11.4",
+    "@planu/core-win32-x64-msvc": "4.11.4"
   },
   "engines": {
     "node": ">=24.0.0"

package/planu-native.json

@@ -1,7 +1,7 @@
 {
   "name": "dev.planu.native",
   "displayName": "Planu Native Lightweight Surface",
-  "version": "4.11.2",
+  "version": "4.11.4",
   "packageName": "@planu/cli",
   "modes": {
     "lightweight": {

package/planu-plugin.json

@@ -2,7 +2,7 @@
   "name": "dev.planu.cli",
   "displayName": "Planu — Spec Driven Development",
   "description": "Manage software specs, estimations, and autonomous SDD workflows. Language-agnostic MCP server for Claude Code.",
-  "version": "4.11.2",
+  "version": "4.11.4",
   "icon": "assets/plugin/icon.svg",
   "command": [
     "npx",

package/dist/engine/elicitation/non-interactive-defaults.d.ts

@@ -1,9 +0,0 @@
-import type { ElicitRequirementsInput } from '../../types/spec-elicitation.js';
-/** A flat map of question-id -> answer string, matching the shape of parseAnswers() output. */
-export type ParsedAnswers = Record<string, string>;
-/**
- * Build default answers for an elicitation session without any user interaction.
- * Called when mode === 'non-interactive' and answers is empty.
- */
-export declare function buildDefaultAnswers(input: ElicitRequirementsInput): ParsedAnswers;
-//# sourceMappingURL=non-interactive-defaults.d.ts.map

package/dist/engine/elicitation/non-interactive-defaults.js

@@ -1,28 +0,0 @@
-// engine/elicitation/non-interactive-defaults.ts — SPEC-724: Default answers for non-interactive mode.
-// Synthesises a complete ParsedAnswers deterministically from ElicitRequirementsInput,
-// reusing the hasDatabase / isApi heuristics already present in elicit-requirements-handler.ts.
-/**
- * Build default answers for an elicitation session without any user interaction.
- * Called when mode === 'non-interactive' and answers is empty.
- */
-export function buildDefaultAnswers(input) {
-    const desc = input.description.toLowerCase();
-    const title = input.title;
-    const hasDatabase = desc.includes('data') || desc.includes('store') || desc.includes('database');
-    const isApi = desc.includes('api') || desc.includes('endpoint');
-    const answers = {
-        users: `End users of the ${title} feature`,
-        success: `The ${title} feature works correctly and meets the described requirements`,
-        scope: input.description,
-        edge_cases: 'Handle empty states, invalid input, and network errors gracefully',
-        performance: 'Response time under 2 seconds for typical operations',
-    };
-    if (hasDatabase) {
-        answers.data = `Data for ${title} is persisted reliably with proper validation and error handling`;
-    }
-    if (isApi) {
-        answers.api_contract = `API endpoints for ${title} follow RESTful conventions with proper status codes`;
-    }
-    return answers;
-}
-//# sourceMappingURL=non-interactive-defaults.js.map

package/dist/tools/clarify-requirements/interview-mode.d.ts

@@ -1,42 +0,0 @@
-export type InterviewDimension = 'technical' | 'ux' | 'edge-cases' | 'tradeoffs' | 'security' | 'performance' | 'integration';
-export interface CoverageMap {
-    technical: boolean;
-    ux: boolean;
-    'edge-cases': boolean;
-    tradeoffs: boolean;
-    security: boolean;
-    performance: boolean;
-    integration: boolean;
-}
-export interface InterviewState {
-    sessionId: string;
-    coverageMap: CoverageMap;
-    completionPercent: number;
-    accumulatedAnswers: Record<string, string>;
-    nextDimension: InterviewDimension | null;
-    ready: boolean;
-}
-/**
- * Analyzes answers to update which dimensions are covered.
- * Merges with an existing coverage map if provided.
- */
-export declare function updateCoverageFromAnswers(answers: Record<string, string>, existing?: CoverageMap): CoverageMap;
-/**
- * Returns the lowest-priority uncovered dimension, or null if all are covered.
- */
-export declare function pickNextDimension(coverage: CoverageMap): InterviewDimension | null;
-/**
- * Generates a targeted follow-up question for a specific dimension.
- * Takes existing answers into account to avoid repeating covered ground.
- */
-export declare function generateDimensionQuestion(dimension: InterviewDimension, topic: string, answers: Record<string, string>): string;
-/**
- * Computes completion percentage based on how many dimensions are covered (0–100).
- */
-export declare function computeCompletion(coverage: CoverageMap): number;
-/**
- * Returns true if the topic is too simple for interview mode.
- * Delegates to isShortTopic from questions.ts.
- */
-export declare function shouldSkipInterview(topic: string): boolean;
-//# sourceMappingURL=interview-mode.d.ts.map