@planu/cli 4.11.9 → 4.12.2

package/CHANGELOG.md

@@ -1,3 +1,110 @@
+## [4.12.2] - 2026-07-27
+
+### Bug Fixes
+- fix: restore dark language menu contrast
+
+
+## [4.12.1] - 2026-07-27
+
+### Bug Fixes
+- fix: prevent personal metadata exposure (#62)
+
+
+## [4.12.0] - 2026-07-27
+
+### Features
+- feat(website): add multichain donations (#61)
+
+
+## [4.11.20] - 2026-07-27
+
+### Bug Fixes
+- fix(website): align desktop landing controls (#60)
+- fix(release): bind reproducibility to annotated tags (#59)
+
+### Chores
+- chore(planu): close SPEC-1155 lifecycle
+
+
+## [4.11.19] - 2026-07-27
+
+### Bug Fixes
+- fix(website): repair responsive visual system (#58)
+- fix(website): close production delivery gaps (#57)
+
+### Refactoring
+- refactor(website): simplify landing around real evidence (#55)
+
+### Chores
+- chore(planu): close SPEC-1153
+- chore(planu): close SPEC-1151 lifecycle
+
+
+## [4.11.18] - 2026-07-26
+
+### Bug Fixes
+- fix(security): remove exposed receipt from website
+
+
+## [4.11.17] - 2026-07-26
+
+### Bug Fixes
+- fix: clear released specs from pending ledger
+
+
+## [4.11.16] - 2026-07-26
+
+### Bug Fixes
+- fix: restore trustworthy maintenance audit gates
+
+
+## [4.11.15] - 2026-07-26
+
+### Bug Fixes
+- fix: stabilize project graph freshness (#51)
+
+
+## [4.11.14] - 2026-07-25
+
+### Bug Fixes
+- fix: parse canonical active spec status (#50)
+
+
+## [4.11.13] - 2026-07-25
+
+### Chores
+- chore(deps): update ESLint to 10.8.0 (#49)
+
+
+## [4.11.12] - 2026-07-25
+
+### Bug Fixes
+- fix(deps): remediate brace-expansion advisory
+
+### Chores
+- chore(planu): close SPEC-1142 lifecycle
+- chore(planu): close SPEC-1141 lifecycle
+
+
+## [4.11.11] - 2026-07-24
+
+### Bug Fixes
+- fix: finalize release state reconciliation
+- fix: preserve pnpm policy in Docker builds
+
+### Chores
+- chore(deps): refresh routine dependencies
+
+
+## [4.11.10] - 2026-07-24
+
+### Bug Fixes
+- fix: preserve verified release artifacts
+
+### Chores
+- chore: harden release and state reconciliation
+
+
 ## [4.11.9] - 2026-07-20
 
 ### Bug Fixes
@@ -4124,54 +4231,54 @@ Total: 275 tools (72 free + 192 pro + 11 always-on)
 
 * add website tsconfig.json to avoid ES2024 esbuild error ([8184375](https://github.com/planu-dev/planu/commit/818437593775eac2ec56dd863f895c3390254783))
 
-## [0.15.1](https://github.com/ikevin92/specforge-mcp/compare/v0.15.0...v0.15.1) (2026-03-02)
+## [0.15.1](https://github.com/imaintainer92/specforge-mcp/compare/v0.15.0...v0.15.1) (2026-03-02)
 
 
 ### Bug Fixes
 
-* **npm:** publish under [@specforge-tools](https://github.com/specforge-tools) org to replace personal account ([adadff0](https://github.com/ikevin92/specforge-mcp/commit/adadff0dbeabd5b15386715a4c26e26cdfff1593))
+* **npm:** publish under [@specforge-tools](https://github.com/specforge-tools) org to replace personal account ([adadff0](https://github.com/imaintainer92/specforge-mcp/commit/adadff0dbeabd5b15386715a4c26e26cdfff1593))
 
-# [0.15.0](https://github.com/ikevin92/specforge-mcp/compare/v0.14.1...v0.15.0) (2026-03-02)
+# [0.15.0](https://github.com/imaintainer92/specforge-mcp/compare/v0.14.1...v0.15.0) (2026-03-02)
 
 
 ### Features
 
-* **licensing:** implement Lemon Squeezy license enforcement system ([bcd99d9](https://github.com/ikevin92/specforge-mcp/commit/bcd99d9c2331335874dccd5a8a08bae358a87486))
+* **licensing:** implement Lemon Squeezy license enforcement system ([bcd99d9](https://github.com/imaintainer92/specforge-mcp/commit/bcd99d9c2331335874dccd5a8a08bae358a87486))
 
-## [0.14.1](https://github.com/ikevin92/specforge-mcp/compare/v0.14.0...v0.14.1) (2026-03-02)
+## [0.14.1](https://github.com/imaintainer92/specforge-mcp/compare/v0.14.0...v0.14.1) (2026-03-02)
 
 
 ### Bug Fixes
 
-* **website:** disable empty aside sidebar on pricing pages ([440dfb2](https://github.com/ikevin92/specforge-mcp/commit/440dfb2dbcc60aa9393ea9954dfccb03d2515617))
+* **website:** disable empty aside sidebar on pricing pages ([440dfb2](https://github.com/imaintainer92/specforge-mcp/commit/440dfb2dbcc60aa9393ea9954dfccb03d2515617))
 
-# [0.14.0](https://github.com/ikevin92/specforge-mcp/compare/v0.13.4...v0.14.0) (2026-03-02)
+# [0.14.0](https://github.com/imaintainer92/specforge-mcp/compare/v0.13.4...v0.14.0) (2026-03-02)
 
 
 ### Features
 
-* **website:** redesign homepage sections, pricing cards, and fix broken links ([cc802d9](https://github.com/ikevin92/specforge-mcp/commit/cc802d911c499341b4f6c54b6d708bd2a0c891ec))
+* **website:** redesign homepage sections, pricing cards, and fix broken links ([cc802d9](https://github.com/imaintainer92/specforge-mcp/commit/cc802d911c499341b4f6c54b6d708bd2a0c891ec))
 
-## [0.13.4](https://github.com/ikevin92/specforge-mcp/compare/v0.13.3...v0.13.4) (2026-03-02)
+## [0.13.4](https://github.com/imaintainer92/specforge-mcp/compare/v0.13.3...v0.13.4) (2026-03-02)
 
 
 ### Bug Fixes
 
-* **website:** add vercel.json with cleanUrls for proper URL routing ([13878b5](https://github.com/ikevin92/specforge-mcp/commit/13878b563c64fa24f11a0e7feda034e2dec807c8))
+* **website:** add vercel.json with cleanUrls for proper URL routing ([13878b5](https://github.com/imaintainer92/specforge-mcp/commit/13878b563c64fa24f11a0e7feda034e2dec807c8))
 
-## [0.13.3](https://github.com/ikevin92/specforge-mcp/compare/v0.13.2...v0.13.3) (2026-03-02)
+## [0.13.3](https://github.com/imaintainer92/specforge-mcp/compare/v0.13.2...v0.13.3) (2026-03-02)
 
 
 ### Bug Fixes
 
-* **website:** enable cleanUrls to fix 11 empty pages on Vercel ([6714a52](https://github.com/ikevin92/specforge-mcp/commit/6714a5252cb358af7b2e95c980e873836efd4544))
+* **website:** enable cleanUrls to fix 11 empty pages on Vercel ([6714a52](https://github.com/imaintainer92/specforge-mcp/commit/6714a5252cb358af7b2e95c980e873836efd4544))
 
-## [0.13.2](https://github.com/ikevin92/specforge-mcp/compare/v0.13.1...v0.13.2) (2026-03-02)
+## [0.13.2](https://github.com/imaintainer92/specforge-mcp/compare/v0.13.1...v0.13.2) (2026-03-02)
 
 
 ### Bug Fixes
 
-* **ci:** add @semantic-release/changelog to auto-update CHANGELOG.md ([92834a3](https://github.com/ikevin92/specforge-mcp/commit/92834a32440df8e7b3c62c7b0ad03c29ed99089d))
+* **ci:** add @semantic-release/changelog to auto-update CHANGELOG.md ([92834a3](https://github.com/imaintainer92/specforge-mcp/commit/92834a32440df8e7b3c62c7b0ad03c29ed99089d))
 
 # Changelog
 
@@ -4192,30 +4299,30 @@ Format: [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) · Versioning:
 - Duplicate `Architecture` row appearing outside the metadata table in FICHA-TECNICA.md
 - Structured multi-paragraph descriptions no longer wrapped in "As a user, I want..." in HU.md
 
-## [0.13.1](https://github.com/ikevin92/specforge-mcp/compare/v0.13.0...v0.13.1) — 2026-03-01
+## [0.13.1](https://github.com/imaintainer92/specforge-mcp/compare/v0.13.0...v0.13.1) — 2026-03-01
 
 ### Fixed
 - **website:** Redesign PricingCards and clarify technical terms in copy
 
-## [0.13.0](https://github.com/ikevin92/specforge-mcp/compare/v0.12.1...v0.13.0) — 2026-03-01
+## [0.13.0](https://github.com/imaintainer92/specforge-mcp/compare/v0.12.1...v0.13.0) — 2026-03-01
 
 ### Added
 - **website:** Replace donation system with pricing page and visual components
 - Auto-sync script for tool count across website and smoke test
 - Documentation updated to reflect 60 tools after context_budget addition
 
-## [0.12.1](https://github.com/ikevin92/specforge-mcp/compare/v0.12.0...v0.12.1) — 2026-02-28
+## [0.12.1](https://github.com/imaintainer92/specforge-mcp/compare/v0.12.0...v0.12.1) — 2026-02-28
 
 ### Fixed
 - **tests:** Update smoke test tool count to 60 after context_budget addition
 
-## [0.12.0](https://github.com/ikevin92/specforge-mcp/compare/v0.11.1...v0.12.0) — 2026-02-27
+## [0.12.0](https://github.com/imaintainer92/specforge-mcp/compare/v0.11.1...v0.12.0) — 2026-02-27
 
 ### Added
 - **tools:** `context_budget` tool for context window optimization (SPEC-063)
 - 60 MCP tools total
 
-## [0.11.1](https://github.com/ikevin92/specforge-mcp/compare/v0.11.0...v0.11.1) — 2026-02-27
+## [0.11.1](https://github.com/imaintainer92/specforge-mcp/compare/v0.11.0...v0.11.1) — 2026-02-27
 
 ### Fixed
 - **ux:** Improve `summarize_spec` and `generate_docs` tool descriptions to prevent LLM bypass
@@ -4223,7 +4330,7 @@ Format: [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) · Versioning:
 ### Changed
 - Refactor: split 5 files near 400L limit into subdirectories
 
-## [0.11.0](https://github.com/ikevin92/specforge-mcp/compare/v0.10.0...v0.11.0) — 2026-02-27
+## [0.11.0](https://github.com/imaintainer92/specforge-mcp/compare/v0.10.0...v0.11.0) — 2026-02-27
 
 ### Added
 - **engine:** Executive summary HTML export (SPEC-060)
@@ -4231,13 +4338,13 @@ Format: [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) · Versioning:
 - **engine:** Structured risk, complexity and trade-off documentation (SPEC-062)
 - 213 new tests across 54 files (+5,618 lines)
 
-## [0.10.0](https://github.com/ikevin92/specforge-mcp/compare/v0.9.0...v0.10.0) — 2026-02-27
+## [0.10.0](https://github.com/imaintainer92/specforge-mcp/compare/v0.9.0...v0.10.0) — 2026-02-27
 
 ### Added
 - **ux:** Git branch suggestions in MCP workflow (e.g., `feat/SPEC-XXX-name` after creating specs)
 - **ux:** Git Flow enforcement — remind users to work in dedicated branches
 
-## [0.9.0](https://github.com/ikevin92/specforge-mcp/compare/v0.8.0...v0.9.0) — 2026-02-26
+## [0.9.0](https://github.com/imaintainer92/specforge-mcp/compare/v0.8.0...v0.9.0) — 2026-02-26
 
 ### Added
 - **ux:** Global server instructions with plain-language glossary for all technical terms

package/dist/engine/abortable-process-runner.d.ts

@@ -0,0 +1,8 @@
+import type { AbortableProcessOptions, AbortableProcessResult } from '../types/abortable-process.js';
+/**
+ * Runs a validation command in its own process group. Cancellation and timeouts
+ * terminate the complete group and settle only after the child has closed, so a
+ * cancelled gate cannot keep writing output or publish late evidence.
+ */
+export declare function runAbortableProcess(command: string, args: string[], options: AbortableProcessOptions): Promise<AbortableProcessResult>;
+//# sourceMappingURL=abortable-process-runner.d.ts.map

package/dist/engine/abortable-process-runner.js

@@ -0,0 +1,107 @@
+import { execFileSync, spawn } from 'node:child_process';
+/**
+ * Runs a validation command in its own process group. Cancellation and timeouts
+ * terminate the complete group and settle only after the child has closed, so a
+ * cancelled gate cannot keep writing output or publish late evidence.
+ */
+export function runAbortableProcess(command, args, options) {
+    return new Promise((resolve) => {
+        if (options.signal?.aborted === true) {
+            resolve({
+                stdout: '',
+                stderr: '',
+                status: null,
+                signal: null,
+                error: abortError(options.signal.reason),
+                timedOut: false,
+                aborted: true,
+            });
+            return;
+        }
+        const child = spawn(command, args, {
+            cwd: options.cwd,
+            detached: process.platform !== 'win32',
+            stdio: ['ignore', 'pipe', 'pipe'],
+        });
+        let stdout = '';
+        let stderr = '';
+        let settled = false;
+        let timedOut = false;
+        let aborted = false;
+        let processError;
+        let hardStop;
+        const append = (current, chunk) => `${current}${chunk.toString('utf8')}`.slice(-options.maxBufferBytes);
+        child.stdout.on('data', (chunk) => {
+            stdout = append(stdout, chunk);
+        });
+        child.stderr.on('data', (chunk) => {
+            stderr = append(stderr, chunk);
+        });
+        const terminateTree = () => {
+            if (child.pid === undefined) {
+                return;
+            }
+            if (process.platform === 'win32') {
+                try {
+                    execFileSync('taskkill', ['/pid', String(child.pid), '/T', '/F'], { stdio: 'ignore' });
+                }
+                catch {
+                    child.kill('SIGKILL');
+                }
+                return;
+            }
+            try {
+                process.kill(-child.pid, 'SIGTERM');
+            }
+            catch {
+                child.kill('SIGTERM');
+            }
+            hardStop = setTimeout(() => {
+                try {
+                    process.kill(-(child.pid ?? 0), 'SIGKILL');
+                }
+                catch {
+                    child.kill('SIGKILL');
+                }
+            }, 250);
+            hardStop.unref();
+        };
+        const onAbort = () => {
+            aborted = true;
+            processError = abortError(options.signal?.reason);
+            terminateTree();
+        };
+        options.signal?.addEventListener('abort', onAbort, { once: true });
+        const timer = setTimeout(() => {
+            timedOut = true;
+            processError = new Error(`Process timed out after ${String(options.timeoutMs)}ms`);
+            terminateTree();
+        }, options.timeoutMs);
+        const finish = (status, closeSignal) => {
+            if (settled) {
+                return;
+            }
+            settled = true;
+            clearTimeout(timer);
+            clearTimeout(hardStop);
+            options.signal?.removeEventListener('abort', onAbort);
+            resolve({
+                stdout,
+                stderr,
+                status,
+                signal: closeSignal,
+                ...(processError ? { error: processError } : {}),
+                timedOut,
+                aborted,
+            });
+        };
+        child.on('error', (error) => {
+            processError = error;
+        });
+        child.on('close', finish);
+    });
+}
+function abortError(reason) {
+    return reason instanceof Error ? reason : new Error('Validation process aborted');
+}
+//# sourceMappingURL=abortable-process-runner.js.map

package/dist/engine/cascade-hooks/core/append-releases.d.ts

@@ -1,4 +1,5 @@
 import type { CascadeContext, CoreActionResult, PendingReleaseEntry } from '../../../types/cascade-hooks.js';
 export declare function normalizePendingReleaseEntries(value: unknown, now?: Date): PendingReleaseEntry[];
+export declare function reconcilePublishedPendingEntries(entries: readonly PendingReleaseEntry[], latestPublishedAt: string | null): PendingReleaseEntry[];
 export declare function appendReleasesPending(ctx: CascadeContext): Promise<CoreActionResult>;
 //# sourceMappingURL=append-releases.d.ts.map

package/dist/engine/cascade-hooks/core/append-releases.js

@@ -2,10 +2,14 @@
 // Appends spec to releases/pending.json within a 2-second AbortController budget.
 // Logic extracted verbatim from src/tools/update-status-actions.ts (SPEC-649/SPEC-660 block).
 import { join } from 'node:path';
-import { readFile, writeFile, mkdir } from 'node:fs/promises';
+import { readFile, mkdir } from 'node:fs/promises';
+import { execFile as execFileCallback } from 'node:child_process';
+import { promisify } from 'node:util';
 import { specStore } from '../../../storage/index.js';
+import { withPendingReleaseLock, writePendingReleaseLedger, } from '../../../../scripts/lib/pending-release-file.mjs';
 const CORE_ACTION_BUDGET_MS = 2000;
 const PENDING_ENTRY_MAX_AGE_DAYS = 30;
+const execFile = promisify(execFileCallback);
 function isValidPendingReleaseEntry(value) {
     return (typeof value === 'object' &&
         value !== null &&
@@ -34,6 +38,35 @@ export function normalizePendingReleaseEntries(value, now = new Date()) {
     }
     return [...deduped.values()];
 }
+export function reconcilePublishedPendingEntries(entries, latestPublishedAt) {
+    if (!latestPublishedAt || !/^\d{4}-\d{2}-\d{2}/.test(latestPublishedAt)) {
+        return [...entries];
+    }
+    const releaseDay = latestPublishedAt.slice(0, 10);
+    // Date-only completion metadata cannot prove ordering within the release day.
+    // Preserve same-day entries fail-closed; a later release can reconcile them safely.
+    return entries.filter((entry) => entry.completedAt.slice(0, 10) >= releaseDay);
+}
+async function readLatestPublishedReleaseDate(projectPath) {
+    try {
+        const manifest = JSON.parse(await readFile(join(projectPath, 'package.json'), 'utf-8'));
+        if (typeof manifest.version !== 'string' ||
+            !/^\d+\.\d+\.\d+(?:[-+].*)?$/.test(manifest.version)) {
+            return null;
+        }
+        const tag = `v${manifest.version}`;
+        const { stdout } = await execFile('git', ['show', '-s', '--format=%cI', tag], {
+            cwd: projectPath,
+            timeout: 1_000,
+            maxBuffer: 16 * 1024,
+        });
+        const publishedAt = stdout.trim();
+        return Number.isNaN(Date.parse(publishedAt)) ? null : publishedAt;
+    }
+    catch {
+        return null;
+    }
+}
 async function actuallyAppendReleasesPending(ctx, opts) {
     const { projectPath, projectId, specId } = ctx;
     if (!projectPath || ctx.newStatus !== 'done') {
@@ -51,19 +84,23 @@ async function actuallyAppendReleasesPending(ctx, opts) {
         (async () => {
             await mkdir(releasesDir, { recursive: true });
             const spec = await specStore.getSpec(projectId, specId);
-            let pendingList = [];
-            try {
-                const raw = await readFile(pendingPath, 'utf-8');
-                const parsed = JSON.parse(raw);
-                pendingList = normalizePendingReleaseEntries(parsed);
-            }
-            catch {
-                /* file doesn't exist yet — start fresh */
-            }
-            const completedAt = new Date().toISOString().substring(0, 10);
-            pendingList = pendingList.filter((entry) => entry.specId !== specId);
-            pendingList.push({ specId, title: spec?.title ?? specId, completedAt });
-            await writeFile(pendingPath, JSON.stringify(pendingList, null, 2), 'utf-8');
+            const latestPublishedAt = await readLatestPublishedReleaseDate(projectPath);
+            await withPendingReleaseLock(pendingPath, { timeoutMs: 1_500, signal: opts.signal }, async () => {
+                let pendingList = [];
+                try {
+                    const raw = await readFile(pendingPath, 'utf-8');
+                    const parsed = JSON.parse(raw);
+                    pendingList = normalizePendingReleaseEntries(parsed);
+                }
+                catch {
+                    /* file doesn't exist yet — start fresh */
+                }
+                pendingList = reconcilePublishedPendingEntries(pendingList, latestPublishedAt);
+                const completedAt = new Date().toISOString().substring(0, 10);
+                pendingList = pendingList.filter((entry) => entry.specId !== specId);
+                pendingList.push({ specId, title: spec?.title ?? specId, completedAt });
+                await writePendingReleaseLedger(pendingPath, pendingList);
+            });
             // Auto-commit planu/ changes so pending.json is never left unstaged
             void (async () => {
                 try {

package/dist/engine/cascade-hooks/hooks/orchestration-plan.hook.js

@@ -1,37 +1,32 @@
 async function handler(ctx) {
-    const { projectPath, allSpecs, specId } = ctx;
+    const { projectPath, projectId } = ctx;
     if (!projectPath) {
         return;
     }
-    const approvedCount = allSpecs.filter((s) => s.status === 'approved' || s.id === specId).length;
-    if (approvedCount >= 2) {
-        // Scenario 12: N≥2 approved → resolve orchestration plan
-        try {
+    try {
+        const { specStore } = await import('../../../storage/index.js');
+        await specStore.withFreshSpecsLock(projectId, async (freshSpecs) => {
+            const approvedCount = freshSpecs.filter((spec) => spec.status === 'approved').length;
+            if (approvedCount < 2) {
+                const { writeOrchestrationPlan } = await import('../../../engine/next-spec-resolver/session-writer.js');
+                await writeOrchestrationPlan(projectPath, null);
+                return;
+            }
             const { resolveOrchestrationPlan } = await import('../../../engine/next-spec-resolver/orchestration-planner.js');
             const { writeOrchestrationPlan } = await import('../../../engine/next-spec-resolver/session-writer.js');
-            const plan = await resolveOrchestrationPlan(projectPath, allSpecs);
+            const plan = await resolveOrchestrationPlan(projectPath, freshSpecs);
             await writeOrchestrationPlan(projectPath, plan);
-        }
-        catch {
-            /* best-effort — never throw */
-        }
+        });
     }
-    else {
-        // Scenario 15: < 2 approved → clear orchestration plan
-        try {
-            const { writeOrchestrationPlan } = await import('../../../engine/next-spec-resolver/session-writer.js');
-            await writeOrchestrationPlan(projectPath, null);
-        }
-        catch {
-            /* best-effort — never throw */
-        }
+    catch {
+        /* best-effort — never throw */
     }
 }
 export const orchestrationPlanHook = {
     id: 'orchestration-plan',
-    triggers: ['approved'],
+    triggers: ['approved', 'done'],
     requiresProjectPath: true,
-    label: 'Auto-generate/clear orchestration plan on approved (SPEC-686, Scenarios 12 & 15)',
+    label: 'Auto-generate/clear orchestration plan on approved or done',
     handler,
 };
 //# sourceMappingURL=orchestration-plan.hook.js.map

package/dist/engine/ci-generator/yaml-builder.js

@@ -123,7 +123,11 @@ function buildNodeSetupSteps(ctx) {
     const version = ctx.nodeVersion ?? '20';
     const steps = [checkoutStep()];
     if (ctx.packageManager === 'pnpm') {
-        steps.push({ name: 'Setup pnpm', uses: 'pnpm/action-setup@v4', with: { version: 'latest' } });
+        steps.push({
+            name: 'Setup pnpm',
+            uses: 'pnpm/action-setup@v4.4.0',
+            with: { version: 'latest' },
+        });
     }
     steps.push({
         name: 'Setup Node.js',

package/dist/engine/context-md-generator.js

@@ -73,7 +73,9 @@ function formatBacklog(specs) {
 export async function generateContextMd(projectPath, projectId) {
     try {
         const specs = await specStore.listSpecs(projectId);
-        const implementing = specs.filter((s) => s.status === 'implementing');
+        const implementing = specs
+            .filter((s) => s.status === 'implementing')
+            .sort((a, b) => b.updatedAt.localeCompare(a.updatedAt));
         const backlog = specs
             .filter((s) => s.status === 'draft' || s.status === 'approved')
             .sort((a, b) => b.estimation.devHours - a.estimation.devHours);

package/dist/engine/criterion-identity.d.ts

@@ -0,0 +1,6 @@
+import type { CriterionIdentity, CriterionIdentityOptions } from '../types/criterion-identity.js';
+export type { CriterionIdentity, CriterionIdentityOptions } from '../types/criterion-identity.js';
+export declare function normalizeCriterionText(value: string): string;
+export declare function createCriterionIdentity(value: string, options?: CriterionIdentityOptions): CriterionIdentity;
+export declare function criterionIdentitiesMatch(left: CriterionIdentity, right: CriterionIdentity): boolean;
+//# sourceMappingURL=criterion-identity.d.ts.map

package/dist/engine/criterion-identity.js

@@ -0,0 +1,63 @@
+import { createHash } from 'node:crypto';
+const CRITERION_ID_PREFIX = /^(AC|AB)\s*-?\s*(\d+)\b\s*[:.)-]?\s*/i;
+export function normalizeCriterionText(value) {
+    return value
+        .normalize('NFKC')
+        .replace(/^[-*+]\s*\[[ xX]\]\s*/, '')
+        .replace(CRITERION_ID_PREFIX, '')
+        .replace(/[\p{P}]+/gu, ' ')
+        .replace(/[\s\u00a0]+/g, ' ')
+        .trim()
+        .toLowerCase();
+}
+export function createCriterionIdentity(value, options = {}) {
+    const stripped = value
+        .normalize('NFKC')
+        .replace(/^[-*+]\s*\[[ xX]\]\s*/, '')
+        .trim();
+    const explicit = CRITERION_ID_PREFIX.exec(stripped);
+    const fallbackOrdinal = (options.index ?? 0) + 1;
+    const kind = (explicit?.[1] ?? options.defaultKind ?? 'AC').toUpperCase();
+    const ordinal = String(Number.parseInt(explicit?.[2] ?? String(fallbackOrdinal), 10));
+    const id = `${kind}${ordinal}`;
+    const text = stripped.replace(CRITERION_ID_PREFIX, '').trim();
+    const normalizedText = normalizeCriterionText(text);
+    const aliases = new Set([
+        normalizeCriterionText(value),
+        normalizedText,
+        id.toLowerCase(),
+        `${kind.toLowerCase()}-${ordinal}`,
+    ]);
+    if (!explicit && options.index !== undefined) {
+        aliases.add(`ac${String(options.index + 1)}`);
+        aliases.add(`ac-${String(options.index + 1)}`);
+        aliases.add(`ab${String(options.index + 1)}`);
+        aliases.add(`ab-${String(options.index + 1)}`);
+    }
+    const stableKey = createHash('sha256')
+        .update(id.toLowerCase())
+        .update('\0')
+        .update(normalizedText)
+        .digest('hex')
+        .slice(0, 16);
+    return {
+        id,
+        text,
+        normalizedText,
+        stableKey,
+        aliases: [...aliases].filter(Boolean).sort(),
+    };
+}
+export function criterionIdentitiesMatch(left, right) {
+    if (left.stableKey === right.stableKey) {
+        return true;
+    }
+    if (left.normalizedText.length > 0 &&
+        right.normalizedText.length > 0 &&
+        left.normalizedText !== right.normalizedText) {
+        return false;
+    }
+    const rightAliases = new Set(right.aliases);
+    return left.aliases.some((alias) => rightAliases.has(alias));
+}
+//# sourceMappingURL=criterion-identity.js.map