@planu/cli 4.12.3 → 4.14.1

package/dist/config/crash-shield-framework-rules.json

@@ -0,0 +1,93 @@
+{
+  "schemaVersion": 1,
+  "rules": [
+    {
+      "id": "nextjs-gsp-no-try",
+      "framework": "Next.js",
+      "fileExtensions": [".tsx", ".jsx"],
+      "contentAny": ["next/", "from ['\"]next"],
+      "activationMode": "file-or-content",
+      "finding": "export\\s+(?:const|async\\s+function|function)\\s+getServerSideProps",
+      "guard": { "scope": "file", "patterns": ["\\btry\\s*\\{"] },
+      "pattern": "NEXTJS_GSP_NO_TRY",
+      "severity": "HIGH",
+      "description": "getServerSideProps without try/catch. Any uncaught error will crash the entire page render.",
+      "suggestedFix": "Wrap the body of getServerSideProps in try/catch and return { notFound: true } or redirect on error."
+    },
+    {
+      "id": "express-async-route-no-error-handler",
+      "framework": "Express",
+      "fileExtensions": [".ts", ".js"],
+      "contentAny": ["from ['\"]express['\"]", "require\\(['\"]express['\"]\\)"],
+      "activationMode": "content",
+      "finding": "(?:app|router)\\.\\w+\\s*\\([^,)]+,\\s*async\\s*(?:\\([^)]*\\)|[a-z]+)\\s*=>",
+      "guard": { "scope": "file", "patterns": ["\\.catch\\s*\\(", "next\\s*\\(\\s*(?:err|error)", "\\btry\\s*\\{"] },
+      "pattern": "EXPRESS_ASYNC_ROUTE_NO_ERROR_HANDLER",
+      "severity": "HIGH",
+      "description": "Async Express route handler without .catch() or next(err). Unhandled promise rejections crash the server in Node.js.",
+      "suggestedFix": "Add .catch(next), wrap in try/catch and call next(err), or use a verified async wrapper."
+    },
+    {
+      "id": "prisma-find-no-null-check",
+      "framework": "Prisma",
+      "fileExtensions": [".ts", ".js"],
+      "contentAny": ["@prisma/client", "PrismaClient"],
+      "activationMode": "content",
+      "finding": "await\\s+\\w+\\.\\w+\\.(?:findUnique|findFirst)\\s*\\(",
+      "guard": {
+        "scope": "window",
+        "before": 1,
+        "after": 5,
+        "patterns": ["if\\s*\\(\\s*!\\s*\\w+", "if\\s*\\(\\s*\\w+\\s*(?:===|!==)\\s*null", "\\?\\?"]
+      },
+      "pattern": "PRISMA_FIND_NO_NULL_CHECK",
+      "severity": "HIGH",
+      "description": "A nullable Prisma lookup is used without a nearby null check.",
+      "suggestedFix": "Check for null or use the provider's verified throwing lookup."
+    },
+    {
+      "id": "django-get-no-does-not-exist",
+      "framework": "Django",
+      "fileExtensions": [".py"],
+      "contentAny": ["from django", "import django"],
+      "activationMode": "file-and-content",
+      "finding": "\\w+\\.objects\\.get\\s*\\(",
+      "guard": { "scope": "file", "patterns": ["DoesNotExist"] },
+      "pattern": "DJANGO_GET_NO_DOES_NOT_EXIST",
+      "severity": "HIGH",
+      "description": "Model.objects.get() can raise DoesNotExist without a handler.",
+      "suggestedFix": "Handle DoesNotExist or use a verified not-found helper."
+    },
+    {
+      "id": "gin-bind-error-ignored",
+      "framework": "Gin",
+      "fileExtensions": [".go"],
+      "contentAny": ["github.com/gin-gonic/gin"],
+      "activationMode": "content",
+      "finding": "\\.ShouldBindJSON\\s*\\(&?\\w+\\)",
+      "guard": {
+        "scope": "window",
+        "before": 1,
+        "after": 3,
+        "patterns": ["if\\s+err\\s*!=\\s*nil", "if\\s+\\w+\\s*:?=\\s*.*ShouldBind"]
+      },
+      "pattern": "GIN_BIND_ERROR_IGNORED",
+      "severity": "HIGH",
+      "description": "A request-binding error is ignored and can leave an invalid zero-value input.",
+      "suggestedFix": "Check the binding error and return a typed client error."
+    },
+    {
+      "id": "actix-unwrap-in-handler",
+      "framework": "Actix",
+      "fileExtensions": [".rs"],
+      "contentAny": ["actix_web", "use actix_web"],
+      "contentAll": ["async\\s+fn\\s+\\w+\\s*\\([^)]*(?:HttpRequest|web::Data|web::Json|web::Path)[^)]*\\)"],
+      "activationMode": "file-and-content",
+      "finding": "\\.unwrap\\(\\)",
+      "pattern": "ACTIX_UNWRAP_IN_HANDLER",
+      "severity": "CRITICAL",
+      "description": "unwrap() in a request handler can panic the worker thread.",
+      "suggestedFix": "Propagate a typed response error instead of unwrapping."
+    }
+  ]
+}

package/dist/config/environment-schema.json

@@ -0,0 +1,149 @@
+{
+  "schemaVersion": 1,
+  "variables": [
+    {
+      "name": "PLANU_ANTHROPIC_API_KEY",
+      "type": "string",
+      "scope": "runtime",
+      "sensitivity": "secret",
+      "default": null
+    },
+    { "name": "PLANU_AUTO_DRIFT", "type": "boolean", "scope": "runtime", "sensitivity": "public", "default": null },
+    { "name": "PLANU_COMMENT", "type": "string", "scope": "runtime", "sensitivity": "public", "default": null },
+    { "name": "PLANU_DISABLE_HOOKS", "type": "boolean", "scope": "runtime", "sensitivity": "public", "default": null },
+    { "name": "PLANU_DRIFT_THRESHOLD", "type": "number", "scope": "runtime", "sensitivity": "public", "default": null },
+    {
+      "name": "PLANU_ENABLE_AUTOCOMMIT",
+      "type": "boolean",
+      "scope": "runtime",
+      "sensitivity": "public",
+      "default": null
+    },
+    {
+      "name": "PLANU_FEEDBACK_ENDPOINT",
+      "type": "string",
+      "scope": "runtime",
+      "sensitivity": "public",
+      "default": null
+    },
+    { "name": "PLANU_FIGMA_CLIENT_ID", "type": "string", "scope": "runtime", "sensitivity": "public", "default": null },
+    {
+      "name": "PLANU_FIGMA_CLIENT_SECRET",
+      "type": "string",
+      "scope": "runtime",
+      "sensitivity": "secret",
+      "default": null
+    },
+    {
+      "name": "PLANU_GITHUB_CLIENT_ID",
+      "type": "string",
+      "scope": "runtime",
+      "sensitivity": "public",
+      "default": null
+    },
+    {
+      "name": "PLANU_GITHUB_CLIENT_SECRET",
+      "type": "string",
+      "scope": "runtime",
+      "sensitivity": "secret",
+      "default": null
+    },
+    {
+      "name": "PLANU_GLOBAL_DATA_DIR",
+      "type": "string",
+      "scope": "runtime",
+      "sensitivity": "private",
+      "default": null
+    },
+    { "name": "PLANU_HOST", "type": "string", "scope": "runtime", "sensitivity": "public", "default": null },
+    {
+      "name": "PLANU_MAX_PARALLEL_AGENTS",
+      "type": "number",
+      "scope": "runtime",
+      "sensitivity": "public",
+      "default": null
+    },
+    { "name": "PLANU_MAX_TS_WATCHERS", "type": "number", "scope": "runtime", "sensitivity": "public", "default": null },
+    {
+      "name": "PLANU_MONTHLY_BUDGET_USD",
+      "type": "number",
+      "scope": "runtime",
+      "sensitivity": "private",
+      "default": null
+    },
+    { "name": "PLANU_NATIVE_PATH", "type": "string", "scope": "runtime", "sensitivity": "private", "default": null },
+    {
+      "name": "PLANU_NETWORK_CONSENT",
+      "type": "string",
+      "scope": "runtime",
+      "sensitivity": "private",
+      "default": null
+    },
+    { "name": "PLANU_OFFLINE", "type": "boolean", "scope": "runtime", "sensitivity": "public", "default": null },
+    { "name": "PLANU_PLUGINS_DIR", "type": "string", "scope": "runtime", "sensitivity": "private", "default": null },
+    {
+      "name": "PLANU_PROJECT_DATA_DIR",
+      "type": "string",
+      "scope": "runtime",
+      "sensitivity": "private",
+      "default": null
+    },
+    { "name": "PLANU_PROJECT_PATH", "type": "string", "scope": "runtime", "sensitivity": "private", "default": null },
+    {
+      "name": "PLANU_QA_CHECK_TIMEOUT_MS",
+      "type": "number",
+      "scope": "runtime",
+      "sensitivity": "public",
+      "default": null
+    },
+    { "name": "PLANU_RECORD_CASSETTES", "type": "boolean", "scope": "test", "sensitivity": "public", "default": null },
+    { "name": "PLANU_REGISTRY_URL", "type": "string", "scope": "runtime", "sensitivity": "public", "default": null },
+    { "name": "PLANU_SAGA_CHAOS", "type": "string", "scope": "test", "sensitivity": "public", "default": null },
+    { "name": "PLANU_SESSION_BUDGET", "type": "number", "scope": "runtime", "sensitivity": "private", "default": null },
+    { "name": "PLANU_SESSION_ID", "type": "string", "scope": "runtime", "sensitivity": "private", "default": null },
+    { "name": "PLANU_SKIP_TRIAL", "type": "boolean", "scope": "runtime", "sensitivity": "public", "default": null },
+    { "name": "PLANU_SUPABASE_KEY", "type": "string", "scope": "runtime", "sensitivity": "secret", "default": null },
+    { "name": "PLANU_SUPABASE_URL", "type": "string", "scope": "runtime", "sensitivity": "public", "default": null },
+    {
+      "name": "PLANU_SUPPRESS_AUTOCOMMIT",
+      "type": "boolean",
+      "scope": "runtime",
+      "sensitivity": "public",
+      "default": null
+    },
+    { "name": "PLANU_TELEMETRY", "type": "string", "scope": "runtime", "sensitivity": "public", "default": null },
+    {
+      "name": "PLANU_TELEMETRY_CONSENT_VERSION",
+      "type": "string",
+      "scope": "runtime",
+      "sensitivity": "private",
+      "default": null
+    },
+    {
+      "name": "PLANU_TELEMETRY_ENDPOINT",
+      "type": "string",
+      "scope": "runtime",
+      "sensitivity": "public",
+      "default": null
+    },
+    { "name": "PLANU_TIMING", "type": "boolean", "scope": "runtime", "sensitivity": "public", "default": null },
+    { "name": "PLANU_TOOL_TIMEOUT_MS", "type": "number", "scope": "runtime", "sensitivity": "public", "default": null },
+    {
+      "name": "PLANU_VALIDATE_LINT_TIMEOUT_MS",
+      "type": "number",
+      "scope": "runtime",
+      "sensitivity": "public",
+      "default": null
+    },
+    { "name": "PLANU_VERBOSE_OUTPUT", "type": "boolean", "scope": "runtime", "sensitivity": "public", "default": null }
+  ],
+  "dynamicPatterns": [
+    {
+      "pattern": "^PLANU_WORKER_[A-Z0-9_]+_(ENABLED|COOLDOWNMS|PRIORITY|TIER)$",
+      "type": "string",
+      "scope": "runtime",
+      "sensitivity": "public",
+      "owner": "worker-config-loader"
+    }
+  ]
+}

package/dist/config/hardcode-exceptions.json

@@ -0,0 +1,4 @@
+{
+  "schemaVersion": 1,
+  "exceptions": []
+}

package/dist/config/license-plans.json

@@ -33,6 +33,7 @@
     "audit_specs_drift",
     "audit_trail",
     "bump_spec_version",
+    "cancel_job",
     "challenge_spec",
     "check_compliance",
     "check_config_health",
@@ -118,6 +119,7 @@
     "generate_tests",
     "generate_validation_schema",
     "graph_specs",
+    "get_job",
     "guided_tour",
     "heal_spec_docs",
     "init_constitution",
@@ -166,6 +168,7 @@
     "repair_frontmatter_drift",
     "request_changes",
     "resolve_feedback",
+    "restart_job",
     "reverse_engineer",
     "rewrite_criteria_ears",
     "run_mutation_hints",
@@ -186,6 +189,9 @@
     "ssr_back_migration",
     "start_oauth_flow",
     "start_onboarding",
+    "storage_export",
+    "storage_import",
+    "storage_paths",
     "suggest_mcp_server",
     "suggest_mcps",
     "suggest_stack",
@@ -216,6 +222,7 @@
     "validate_workflow",
     "verify_integrations",
     "verify_spec_compliance",
+    "watch_job",
     "worker_status"
   ],
   "proTools": ["audit", "design_schema", "generate_adr", "security_check"],

package/dist/config/native-release-public-key.pem

@@ -0,0 +1,3 @@
+-----BEGIN PUBLIC KEY-----
+MCowBQYDK2VwAyEAxEphEcoGPysItgE7nFfqo8pDvXOlNcKKt0KkJ3wiqz4=
+-----END PUBLIC KEY-----

package/dist/config/native-targets.json

@@ -0,0 +1,87 @@
+{
+  "schemaVersion": 1,
+  "binaryName": "planu-core",
+  "packageScope": "@planu/core",
+  "targets": [
+    {
+      "directory": "darwin-arm64",
+      "package": "@planu/core-darwin-arm64",
+      "rustTarget": "aarch64-apple-darwin",
+      "runtimeTarget": "darwin-arm64",
+      "platform": "darwin",
+      "arch": "arm64",
+      "libc": null,
+      "runner": "macos-15"
+    },
+    {
+      "directory": "darwin-x64",
+      "package": "@planu/core-darwin-x64",
+      "rustTarget": "x86_64-apple-darwin",
+      "runtimeTarget": "darwin-x64",
+      "platform": "darwin",
+      "arch": "x64",
+      "libc": null,
+      "runner": "macos-15-intel"
+    },
+    {
+      "directory": "linux-arm64-gnu",
+      "package": "@planu/core-linux-arm64-gnu",
+      "rustTarget": "aarch64-unknown-linux-gnu",
+      "runtimeTarget": "linux-arm64-glibc",
+      "platform": "linux",
+      "arch": "arm64",
+      "libc": "glibc",
+      "runner": "ubuntu-24.04-arm"
+    },
+    {
+      "directory": "linux-arm64-musl",
+      "package": "@planu/core-linux-arm64-musl",
+      "rustTarget": "aarch64-unknown-linux-musl",
+      "runtimeTarget": "linux-arm64-musl",
+      "platform": "linux",
+      "arch": "arm64",
+      "libc": "musl",
+      "runner": "ubuntu-24.04-arm"
+    },
+    {
+      "directory": "linux-x64-gnu",
+      "package": "@planu/core-linux-x64-gnu",
+      "rustTarget": "x86_64-unknown-linux-gnu",
+      "runtimeTarget": "linux-x64-glibc",
+      "platform": "linux",
+      "arch": "x64",
+      "libc": "glibc",
+      "runner": "ubuntu-24.04"
+    },
+    {
+      "directory": "linux-x64-musl",
+      "package": "@planu/core-linux-x64-musl",
+      "rustTarget": "x86_64-unknown-linux-musl",
+      "runtimeTarget": "linux-x64-musl",
+      "platform": "linux",
+      "arch": "x64",
+      "libc": "musl",
+      "runner": "ubuntu-24.04"
+    },
+    {
+      "directory": "win32-arm64-msvc",
+      "package": "@planu/core-win32-arm64-msvc",
+      "rustTarget": "aarch64-pc-windows-msvc",
+      "runtimeTarget": "win32-arm64",
+      "platform": "win32",
+      "arch": "arm64",
+      "libc": null,
+      "runner": "windows-11-arm"
+    },
+    {
+      "directory": "win32-x64-msvc",
+      "package": "@planu/core-win32-x64-msvc",
+      "rustTarget": "x86_64-pc-windows-msvc",
+      "runtimeTarget": "win32-x64",
+      "platform": "win32",
+      "arch": "x64",
+      "libc": null,
+      "runner": "windows-2025"
+    }
+  ]
+}

package/dist/config/product-public.d.ts

@@ -0,0 +1,89 @@
+import { z } from 'zod';
+import type { ProductPublicManifest } from '../types/product-public.js';
+export declare const productPublicSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    website: z.ZodObject<{
+        baseUrl: z.ZodURL;
+        defaultLocale: z.ZodString;
+        theme: z.ZodObject<{
+            defaultAppearance: z.ZodLiteral<"system">;
+            allowUserToggle: z.ZodBoolean;
+        }, z.core.$strict>;
+        disabledRouteSegments: z.ZodArray<z.ZodString>;
+        locales: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            contentLocale: z.ZodEnum<{
+                de: "de";
+                en: "en";
+                es: "es";
+                fr: "fr";
+                pt: "pt";
+                zh: "zh";
+            }>;
+            label: z.ZodString;
+            lang: z.ZodString;
+            hreflang: z.ZodString;
+            ogLocale: z.ZodString;
+            nav: z.ZodArray<z.ZodObject<{
+                text: z.ZodString;
+                path: z.ZodString;
+            }, z.core.$strict>>;
+            chrome: z.ZodObject<{
+                footerLead: z.ZodString;
+                support: z.ZodString;
+                changelog: z.ZodString;
+                reportBug: z.ZodString;
+                appearance: z.ZodString;
+                lightTheme: z.ZodString;
+                darkTheme: z.ZodString;
+                sidebar: z.ZodString;
+                top: z.ZodString;
+                language: z.ZodString;
+                skip: z.ZodString;
+                outline: z.ZodString;
+                previous: z.ZodString;
+                next: z.ZodString;
+                search: z.ZodString;
+                noResults: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>>;
+        newsletter: z.ZodObject<{
+            enabled: z.ZodBoolean;
+            provider: z.ZodEnum<{
+                none: "none";
+            }>;
+            signupUrl: z.ZodNullable<z.ZodURL>;
+        }, z.core.$strict>;
+        sponsors: z.ZodObject<{
+            enabled: z.ZodBoolean;
+            pagePath: z.ZodString;
+            githubUrl: z.ZodURL;
+            contactEmail: z.ZodEmail;
+        }, z.core.$strict>;
+    }, z.core.$strict>;
+    donations: z.ZodArray<z.ZodObject<{
+        id: z.ZodEnum<{
+            btc: "btc";
+            eth: "eth";
+            sol: "sol";
+        }>;
+        symbol: z.ZodString;
+        network: z.ZodString;
+        address: z.ZodString;
+        qrPath: z.ZodString;
+        walletUri: z.ZodNullable<z.ZodURL>;
+    }, z.core.$strict>>;
+    claims: z.ZodObject<{
+        installCommand: z.ZodString;
+        publicToolInventory: z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodString]>>;
+        registryReadmeBaseline: z.ZodObject<{
+            package: z.ZodLiteral<"@planu/cli">;
+            version: z.ZodString;
+            sha256: z.ZodString;
+        }, z.core.$strict>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export declare function parseProductPublicManifest(input: unknown): ProductPublicManifest;
+export declare function getProductPublicManifest(): ProductPublicManifest;
+export declare const productPublic: ProductPublicManifest;
+//# sourceMappingURL=product-public.d.ts.map

package/dist/config/product-public.js

@@ -0,0 +1,140 @@
+import { z } from 'zod';
+import rawProductPublic from './product-public.json' with { type: 'json' };
+const nonBlank = z.string().trim().min(1).max(512);
+const pathSegment = z.string().regex(/^[A-Za-z0-9-]+$/u);
+const navItemSchema = z.object({ text: nonBlank, path: nonBlank }).strict();
+const chromeSchema = z
+    .object({
+    footerLead: nonBlank,
+    support: nonBlank,
+    changelog: nonBlank,
+    reportBug: nonBlank,
+    appearance: nonBlank,
+    lightTheme: nonBlank,
+    darkTheme: nonBlank,
+    sidebar: nonBlank,
+    top: nonBlank,
+    language: nonBlank,
+    skip: nonBlank,
+    outline: nonBlank,
+    previous: nonBlank,
+    next: nonBlank,
+    search: nonBlank,
+    noResults: nonBlank,
+})
+    .strict();
+const localeSchema = z
+    .object({
+    id: pathSegment,
+    contentLocale: z.enum(['en', 'es', 'pt', 'fr', 'de', 'zh']),
+    label: nonBlank,
+    lang: nonBlank,
+    hreflang: nonBlank,
+    ogLocale: nonBlank,
+    nav: z.array(navItemSchema).length(4),
+    chrome: chromeSchema,
+})
+    .strict();
+const donationSchema = z
+    .object({
+    id: z.enum(['btc', 'eth', 'sol']),
+    symbol: nonBlank,
+    network: nonBlank,
+    address: nonBlank,
+    qrPath: z.string().regex(/^\/donations\/[a-z0-9-]+\.svg$/u),
+    walletUri: z.url().nullable(),
+})
+    .strict();
+export const productPublicSchema = z
+    .object({
+    schemaVersion: z.literal(1),
+    website: z
+        .object({
+        baseUrl: z.url(),
+        defaultLocale: pathSegment,
+        theme: z
+            .object({
+            defaultAppearance: z.literal('system'),
+            allowUserToggle: z.boolean(),
+        })
+            .strict(),
+        disabledRouteSegments: z.array(pathSegment).min(1),
+        locales: z.array(localeSchema).min(2),
+        newsletter: z
+            .object({
+            enabled: z.boolean(),
+            provider: z.enum(['none']),
+            signupUrl: z.url().nullable(),
+        })
+            .strict(),
+        sponsors: z
+            .object({
+            enabled: z.boolean(),
+            pagePath: z.string().startsWith('/'),
+            githubUrl: z.url(),
+            contactEmail: z.email(),
+        })
+            .strict(),
+    })
+        .strict(),
+    donations: z.array(donationSchema).length(3),
+    claims: z
+        .object({
+        installCommand: nonBlank,
+        publicToolInventory: z.array(pathSegment.or(z.string().regex(/^[a-z][a-z0-9_]+$/u))).min(1),
+        registryReadmeBaseline: z
+            .object({
+            package: z.literal('@planu/cli'),
+            version: z.string().regex(/^\d+\.\d+\.\d+$/u),
+            sha256: z.string().regex(/^[a-f0-9]{64}$/u),
+        })
+            .strict(),
+    })
+        .strict(),
+})
+    .strict()
+    .superRefine((value, context) => {
+    const localeIds = value.website.locales.map(({ id }) => id);
+    const donationIds = value.donations.map(({ id }) => id);
+    const tools = value.claims.publicToolInventory;
+    for (const [items, path] of [
+        [localeIds, ['website', 'locales']],
+        [donationIds, ['donations']],
+        [tools, ['claims', 'publicToolInventory']],
+    ]) {
+        if (new Set(items).size !== items.length) {
+            context.addIssue({ code: 'custom', message: 'Entries must be unique', path });
+        }
+    }
+    if (!localeIds.includes(value.website.defaultLocale)) {
+        context.addIssue({
+            code: 'custom',
+            message: 'Default locale must reference a declared locale',
+            path: ['website', 'defaultLocale'],
+        });
+    }
+    if (value.website.newsletter.enabled || value.website.newsletter.signupUrl !== null) {
+        context.addIssue({
+            code: 'custom',
+            message: 'Newsletter provider must be configured before enabling subscriptions',
+            path: ['website', 'newsletter'],
+        });
+    }
+});
+let cachedManifest;
+export function parseProductPublicManifest(input) {
+    const result = productPublicSchema.safeParse(input);
+    if (!result.success) {
+        const issue = result.error.issues[0];
+        const issuePath = issue?.path.join('.');
+        const location = issuePath?.length ? issuePath : 'root';
+        throw new Error(`[Planu] Invalid public product manifest at ${location}: ${issue?.message ?? 'unknown error'}`);
+    }
+    return result.data;
+}
+export function getProductPublicManifest() {
+    cachedManifest ??= parseProductPublicManifest(rawProductPublic);
+    return cachedManifest;
+}
+export const productPublic = getProductPublicManifest();
+//# sourceMappingURL=product-public.js.map