@planu/cli 4.13.0 → 4.14.1

package/dist/engine/infrastructure/docker-compose-generator.js

@@ -1,6 +1,4 @@
-// SPEC-597-EXEMPT: canonical mapping (npm-package↔framework, keyword catalogue)
-// — must enumerate framework names by design; no detection logic to migrate.
-// engine/infrastructure/docker-compose-generator.ts — Docker Compose generator (SPEC-171)
+import { technologyValue } from '../technology-registry.js';
 import { getDockerTag } from '../../config/version-defaults.js';
 function renderHeader() {
     return `# docker-compose.yml — Generated by Planu generate_infrastructure (SPEC-171)
@@ -78,7 +76,7 @@ function renderDatabase(component) {
 }
 function renderRedis(component) {
     return `  ${component.name}:
-    image: redis:${getDockerTag('redis')}
+    image: redis:${getDockerTag(technologyValue('technology-redis-34fb46'))}
     restart: unless-stopped
     ports:
       - "6379:6379"
@@ -138,7 +136,7 @@ function renderVolumes(components) {
     const volumeKinds = [
         'rds',
         'generic-database',
-        'redis',
+        technologyValue('technology-redis-34fb46'),
         'generic-cache',
         'sqs',
         'generic-queue',
@@ -156,9 +154,9 @@ function renderService(component) {
     switch (component.kind) {
         case 'rds':
         case 'generic-database':
-        case 'supabase':
+        case technologyValue('technology-supabase-4d7594'):
             return renderDatabase(component);
-        case 'redis':
+        case technologyValue('technology-redis-34fb46'):
         case 'generic-cache':
             return renderRedis(component);
         case 'generic-queue':
@@ -183,8 +181,8 @@ function renderService(component) {
 export function generateDockerCompose(components) {
     const localComponents = components.filter((c) => [
         'rds',
-        'supabase',
-        'redis',
+        technologyValue('technology-supabase-4d7594'),
+        technologyValue('technology-redis-34fb46'),
         'sqs',
         's3',
         'generic-database',
@@ -196,7 +194,7 @@ export function generateDockerCompose(components) {
     const volumes = renderVolumes(localComponents);
     const content = renderHeader() + services + volumes;
     return {
-        format: 'docker-compose',
+        format: technologyValue('technology-docker-compose-b0a828'),
         filename: 'docker-compose.yml',
         content,
     };

package/dist/engine/infrastructure/index.js

@@ -1,4 +1,4 @@
-// engine/infrastructure/index.ts — Main orchestrator for generate_infrastructure (SPEC-171)
+import { technologyValue } from '../technology-registry.js';
 import { detectInfraSignals } from './signal-detector.js';
 import { mapSignalsToComponents } from './component-mapper.js';
 import { estimateCosts } from './cost-estimator.js';
@@ -14,10 +14,13 @@ export { generateTerraform } from './terraform-generator.js';
 export { generateDockerCompose } from './docker-compose-generator.js';
 export { generateKubernetes } from './kubernetes-generator.js';
 export { generateRailway } from './railway-generator.js';
-const DEFAULT_FORMATS = ['terraform', 'docker-compose'];
+const DEFAULT_FORMATS = [
+    technologyValue('technology-terraform-94dc3e'),
+    technologyValue('technology-docker-compose-b0a828'),
+];
 const FORMAT_GENERATORS = {
     terraform: generateTerraform,
-    'docker-compose': generateDockerCompose,
+    [technologyValue('technology-docker-compose-b0a828')]: generateDockerCompose,
     kubernetes: generateKubernetes,
     railway: generateRailway,
 };

package/dist/engine/infrastructure/kubernetes-generator.js

@@ -1,4 +1,4 @@
-// engine/infrastructure/kubernetes-generator.ts — Kubernetes manifest generator (SPEC-171)
+import { technologyValue } from '../technology-registry.js';
 function renderDeployment(component, env) {
     const replicas = env === 'prod' ? 3 : 1;
     return `apiVersion: apps/v1
@@ -133,7 +133,7 @@ export function generateKubernetes(components, env) {
         manifests.push(renderIngress(component, env));
     }
     return {
-        format: 'kubernetes',
+        format: technologyValue('technology-kubernetes-94abcb'),
         filename: `k8s-${env}.yaml`,
         content: manifests.join('\n'),
     };

package/dist/engine/infrastructure/railway-generator.js

@@ -1,9 +1,11 @@
-// SPEC-597-EXEMPT: canonical mapping (npm-package↔framework, keyword catalogue)
-// — must enumerate framework names by design; no detection logic to migrate.
-// engine/infrastructure/railway-generator.ts — railway.toml generator (SPEC-171)
+import { technologyValue } from '../technology-registry.js';
 function renderRailwayService(component, env) {
-    const isDatabase = ['rds', 'supabase', 'generic-database'].includes(component.kind);
-    const isCache = ['redis', 'generic-cache'].includes(component.kind);
+    const isDatabase = [
+        'rds',
+        technologyValue('technology-supabase-4d7594'),
+        'generic-database',
+    ].includes(component.kind);
+    const isCache = [technologyValue('technology-redis-34fb46'), 'generic-cache'].includes(component.kind);
     if (isDatabase) {
         return `
 [services.${component.name.replace(/-/g, '_')}]
@@ -65,8 +67,8 @@ export function generateRailway(components, env) {
         .filter((c) => [
         'railway-service',
         'rds',
-        'supabase',
-        'redis',
+        technologyValue('technology-supabase-4d7594'),
+        technologyValue('technology-redis-34fb46'),
         'generic-database',
         'generic-cache',
         'api',
@@ -81,7 +83,7 @@ export function generateRailway(components, env) {
         renderEnvironments(env) +
         (serviceBlocks || '# No additional services detected\n');
     return {
-        format: 'railway',
+        format: technologyValue('technology-railway-e34d1c'),
         filename: 'railway.toml',
         content,
     };

package/dist/engine/infrastructure/signal-detector.js

@@ -1,11 +1,9 @@
-// SPEC-597-EXEMPT: canonical mapping (npm-package↔framework, keyword catalogue)
-// — must enumerate framework names by design; no detection logic to migrate.
-// engine/infrastructure/signal-detector.ts — Detect IaC signals in spec text (SPEC-171)
+import { technologyValue } from '../technology-registry.js';
 const SIGNAL_PATTERNS = [
     // Databases — specific technologies first to avoid false positives from generic patterns
     {
         type: 'database',
-        technology: 'supabase',
+        technology: technologyValue('technology-supabase-4d7594'),
         // supabase is its own BaaS platform, not just postgres — must be listed before postgres
         patterns: [/supabase/i],
         confidence: 'high',
@@ -44,7 +42,7 @@ const SIGNAL_PATTERNS = [
     // Cache — 'redis' and 'memcached' are specific; \bcache\b alone is generic
     {
         type: 'cache',
-        technology: 'redis',
+        technology: technologyValue('technology-redis-34fb46'),
         patterns: [/redis/i, /memcached/i],
         confidence: 'high',
     },
@@ -115,15 +113,15 @@ const SIGNAL_PATTERNS = [
     },
     // Kubernetes
     {
-        type: 'kubernetes',
+        type: technologyValue('technology-kubernetes-94abcb'),
         technology: 'k8s',
         patterns: [/kubernetes/i, /\bk8s\b/i, /kubectl/i, /helm\b/i, /\bpod\b/i],
         confidence: 'high',
     },
     // Railway
     {
-        type: 'railway',
-        technology: 'railway',
+        type: technologyValue('technology-railway-e34d1c'),
+        technology: technologyValue('technology-railway-e34d1c'),
         patterns: [/railway\.app/i, /railway\s+deploy/i, /railway\.toml/i],
         confidence: 'high',
     },

package/dist/engine/infrastructure/terraform-generator.js

@@ -1,6 +1,4 @@
-// SPEC-597-EXEMPT: canonical mapping (npm-package↔framework, keyword catalogue)
-// — must enumerate framework names by design; no detection logic to migrate.
-// engine/infrastructure/terraform-generator.ts — Terraform HCL generator (SPEC-171)
+import { technologyValue } from '../technology-registry.js';
 import { getTerraformVersion } from '../../config/version-defaults.js';
 function renderProvider(env) {
     return `terraform {
@@ -183,9 +181,9 @@ function renderComponent(component, env, emitCallerIdentity) {
         case 'rds':
         case 'generic-database':
             return renderRds(component, env);
-        case 'supabase':
+        case technologyValue('technology-supabase-4d7594'):
             return `\n# Supabase is a managed service — provision via Supabase dashboard or Terraform provider.\n# See: https://registry.terraform.io/providers/supabase/supabase/latest\n`;
-        case 'redis':
+        case technologyValue('technology-redis-34fb46'):
         case 'generic-cache':
             return renderRedis(component, env);
         case 'sqs':
@@ -212,8 +210,8 @@ function renderComponent(component, env, emitCallerIdentity) {
 export function generateTerraform(components, env) {
     const terraformComponents = components.filter((c) => [
         'rds',
-        'supabase',
-        'redis',
+        technologyValue('technology-supabase-4d7594'),
+        technologyValue('technology-redis-34fb46'),
         'sqs',
         's3',
         'ecs',
@@ -236,7 +234,7 @@ export function generateTerraform(components, env) {
         .join('\n');
     const content = renderProvider(env) + blocks;
     return {
-        format: 'terraform',
+        format: technologyValue('technology-terraform-94dc3e'),
         filename: 'main.tf',
         content,
     };

package/dist/engine/legal-compliance/detector.js

@@ -1,9 +1,10 @@
+import { technologyValue } from '../technology-registry.js';
 // ---------------------------------------------------------------------------
 // Keyword dictionaries
 // ---------------------------------------------------------------------------
 const DOMAIN_KEYWORDS = {
     fintech: [
-        'stripe',
+        technologyValue('technology-stripe-2bed20'),
         'paypal',
         'braintree',
         'square',
@@ -293,7 +294,7 @@ const AUTH_KEYWORDS = [
     'passport',
     'next-auth',
     'clerk',
-    'supabase',
+    technologyValue('technology-supabase-4d7594'),
     'firebase',
 ];
 // ---------------------------------------------------------------------------

package/dist/engine/local-first/storage-advisor.js

@@ -1,7 +1,4 @@
-// SPEC-597-EXEMPT: canonical mapping (npm-package↔framework, keyword catalogue)
-// — must enumerate framework names by design; no detection logic to migrate.
-// engine/local-first/storage-advisor.ts — SPEC-047
-// Generates offline storage recommendations and schema evolution criteria.
+import { technologyValue } from '../technology-registry.js';
 /** Detect the target platform from framework and stack information. */
 export function detectTargetPlatform(framework, stack) {
     const stackLower = stack.map((s) => s.toLowerCase()).join(' ');
@@ -9,13 +6,15 @@ export function detectTargetPlatform(framework, stack) {
     if (fw.includes('react-native') || fw.includes('expo') || stackLower.includes('react-native')) {
         return 'mobile-rn';
     }
-    if (fw.includes('flutter') || stackLower.includes('flutter')) {
+    if (fw.includes(technologyValue('technology-flutter-be1396')) ||
+        stackLower.includes(technologyValue('technology-flutter-be1396'))) {
         return 'mobile-flutter';
     }
     if (fw.includes('tauri') || stackLower.includes('tauri')) {
         return 'desktop-tauri';
     }
-    if (fw.includes('electron') || stackLower.includes('electron')) {
+    if (fw.includes(technologyValue('technology-electron-88b1de')) ||
+        stackLower.includes(technologyValue('technology-electron-88b1de'))) {
         return 'desktop-electron';
     }
     return 'web';

package/dist/engine/macos-keychain-native-port.d.ts

@@ -0,0 +1,5 @@
+import type { PlanuCore } from '../types/core-bridge.js';
+import type { MacOSKeychainNativePort } from '../types/security.js';
+/** Build the privileged main-thread port only from a canonical, verified native module. */
+export declare function createMacOSKeychainNativePort(platform: NodeJS.Platform, overrideDefined: boolean, disabled: boolean, nativeModule: PlanuCore | null, origin: 'override' | 'local' | 'package' | undefined, capabilities: readonly string[] | undefined): MacOSKeychainNativePort;
+//# sourceMappingURL=macos-keychain-native-port.d.ts.map

package/dist/engine/macos-keychain-native-port.js

@@ -0,0 +1,26 @@
+/** Build the privileged main-thread port only from a canonical, verified native module. */
+export function createMacOSKeychainNativePort(platform, overrideDefined, disabled, nativeModule, origin, capabilities) {
+    if (platform !== 'darwin') {
+        throw new Error('[Planu] macOS Keychain is unavailable on this platform');
+    }
+    if (overrideDefined || origin === 'override') {
+        throw new Error('[Planu] macOS Keychain rejects native path overrides');
+    }
+    if (disabled || !nativeModule) {
+        throw new Error('[Planu] Verified macOS Keychain native capability is unavailable');
+    }
+    if (origin !== 'local' && origin !== 'package') {
+        throw new Error('[Planu] macOS Keychain requires a canonical native artifact origin');
+    }
+    if (!capabilities?.includes('macos-keychain-v1')) {
+        throw new Error('[Planu] Verified native runtime lacks macos-keychain-v1');
+    }
+    const set = nativeModule.macosKeychainSet?.bind(nativeModule);
+    const get = nativeModule.macosKeychainGet?.bind(nativeModule);
+    const remove = nativeModule.macosKeychainDelete?.bind(nativeModule);
+    if (!set || !get || !remove) {
+        throw new Error('[Planu] Verified native runtime has an incomplete macOS Keychain port');
+    }
+    return { set, get, delete: remove };
+}
+//# sourceMappingURL=macos-keychain-native-port.js.map

package/dist/engine/marketplace-fetcher/cache.js

@@ -2,6 +2,8 @@
 // Reads/writes to .planu/skill-cache/{source}/{skillName}.md (NOT planu/ — internal cache).
 import { mkdir, readFile, writeFile } from 'node:fs/promises';
 import { dirname, join } from 'node:path';
+import { hashProjectPath } from '../../storage/base-store.js';
+import { resolveStorageLayout } from '../../storage/storage-layout.js';
 // ---------------------------------------------------------------------------
 // Constants — single exported location (no per-call literals)
 // ---------------------------------------------------------------------------
@@ -11,7 +13,7 @@ export const FETCHED_HEADER_PREFIX = '<!-- fetched:';
 // Helpers
 // ---------------------------------------------------------------------------
 function cachePath(projectPath, source, skillName) {
-    return join(projectPath, '.planu', 'skill-cache', source, `${skillName}.md`);
+    return join(resolveStorageLayout().cache, 'skills', hashProjectPath(projectPath), source, `${skillName}.md`);
 }
 /** Parse the fetchedAt ISO timestamp from the header comment in a cached file. */
 function parseFetchedAt(content) {

package/dist/engine/mcp-config/mcp-config-writer.d.ts

@@ -9,9 +9,9 @@ import type { CheckAndFixResult } from '../../types/mcp-config.js';
  */
 export declare function findMcpConfigPath(projectPath: string): Promise<string>;
 /**
- * Returns true if the config already has a safe `planu` entry pointing to @planu/cli@latest.
+ * Returns true if the config already has a safe, exact-version `planu` entry.
  */
-export declare function isPlanuDirectlyConfigured(configPath: string): Promise<boolean>;
+export declare function isPlanuDirectlyConfigured(configPath: string, expectedVersion?: string): Promise<boolean>;
 /**
  * Merges the direct Planu entry into the config file.
  * Does not overwrite unrelated keys.

package/dist/engine/mcp-config/mcp-config-writer.js

@@ -4,12 +4,11 @@
 import { readFile, writeFile } from 'node:fs/promises';
 import { join } from 'node:path';
 import { homedir } from 'node:os';
-import { buildNpxLatestEntry } from '../auto-updater/config-patcher.js';
+import { buildPinnedEntry } from '../auto-updater/config-patcher.js';
 // ---------------------------------------------------------------------------
 // Constants
 // ---------------------------------------------------------------------------
 const PLANU_KEY = 'planu';
-const PLANU_LATEST_ARG = '@planu/cli@latest';
 const MIN_STARTUP_TIMEOUT_SEC = 60;
 // ---------------------------------------------------------------------------
 // Helpers
@@ -62,9 +61,9 @@ export async function findMcpConfigPath(projectPath) {
     return join(projectPath, '.mcp.json');
 }
 /**
- * Returns true if the config already has a safe `planu` entry pointing to @planu/cli@latest.
+ * Returns true if the config already has a safe, exact-version `planu` entry.
  */
-export async function isPlanuDirectlyConfigured(configPath) {
+export async function isPlanuDirectlyConfigured(configPath, expectedVersion) {
     const config = await readJsonFile(configPath);
     const servers = config.mcpServers;
     if (servers === undefined) {
@@ -78,7 +77,10 @@ export async function isPlanuDirectlyConfigured(configPath) {
     if (!Array.isArray(args)) {
         return false;
     }
-    return (args.includes(PLANU_LATEST_ARG) &&
+    const expected = expectedVersion ? `@planu/cli@${expectedVersion}` : undefined;
+    const pinned = args.find((value) => /^@planu\/cli@\d+\.\d+\.\d+(?:[-+][\w.-]+)?$/.test(value));
+    return Boolean(pinned &&
+        (expected === undefined || pinned === expected) &&
         (planuEntry.startup_timeout_sec ?? 0) >= MIN_STARTUP_TIMEOUT_SEC);
 }
 /**
@@ -88,7 +90,7 @@ export async function isPlanuDirectlyConfigured(configPath) {
 export async function injectDirectPlanuEntry(configPath, currentVersion, latestVersion) {
     const existing = await readJsonFile(configPath);
     const mcpServers = existing.mcpServers !== undefined ? { ...existing.mcpServers } : {};
-    mcpServers[PLANU_KEY] = buildNpxLatestEntry();
+    mcpServers[PLANU_KEY] = buildPinnedEntry(latestVersion);
     const updated = {
         ...existing,
         mcpServers,
@@ -110,9 +112,9 @@ export async function injectDirectPlanuEntry(configPath, currentVersion, latestV
  */
 export async function checkAndFixBundledVersion(projectPath, currentVersion, latestVersion) {
     const configPath = await findMcpConfigPath(projectPath);
-    const alreadyConfigured = await isPlanuDirectlyConfigured(configPath);
+    const alreadyConfigured = await isPlanuDirectlyConfigured(configPath, latestVersion);
     if (alreadyConfigured) {
-        return { configured: false, reason: 'already configured with @planu/cli@latest' };
+        return { configured: false, reason: `already configured with @planu/cli@${latestVersion}` };
     }
     await injectDirectPlanuEntry(configPath, currentVersion, latestVersion);
     /* c8 ignore next — `?? configPath` fallback is unreachable (split always produces at least one element) */

package/dist/engine/migration/db-migrator.js

@@ -1,7 +1,4 @@
-// SPEC-597-EXEMPT: canonical mapping (npm-package↔framework, keyword catalogue)
-// — must enumerate framework names by design; no detection logic to migrate.
-// engine/migration/db-migrator.ts — Database migration planning (SPEC-028a)
-// analyze-db, map-db, plan-db actions
+import { technologyValue } from '../technology-registry.js';
 // --- Type mapping knowledge base ---
 const POSTGRES_TO_MONGO = [
     { sourceType: 'TEXT', targetType: 'String', dataLossRisk: false },
@@ -93,7 +90,7 @@ function detectMigrationType(source, target) {
     ]);
     const newSqlEngines = new Set(['cockroachdb', 'spanner', 'tidb', 'alloydb']);
     const cloudManaged = new Set([
-        'supabase',
+        technologyValue('technology-supabase-4d7594'),
         'aurora',
         'neon',
         'planetscale',

package/dist/engine/migration/equivalence-mapper.js

@@ -1,5 +1,4 @@
-// engine/migration/equivalence-mapper.ts — Tech equivalence mapping (SPEC-028a)
-// Maps source stack libs to target stack equivalents
+import { technologyValue } from '../technology-registry.js';
 // --- Known equivalence knowledge base ---
 const JAVA_TO_GO = [
     {
@@ -15,7 +14,7 @@ const JAVA_TO_GO = [
     },
     {
         sourceLib: 'JPA / Hibernate',
-        targetLib: 'GORM',
+        targetLib: technologyValue('technology-gorm-9c68e4'),
         category: 'database',
         status: 'partial',
         differences: [
@@ -50,8 +49,8 @@ const JAVA_TO_GO = [
 ];
 const PHP_TO_NODE = [
     {
-        sourceLib: 'Laravel',
-        targetLib: 'NestJS',
+        sourceLib: technologyValue('technology-laravel-ab5d68'),
+        targetLib: technologyValue('technology-nestjs-58b822'),
         category: 'framework',
         status: 'partial',
         differences: [
@@ -62,7 +61,7 @@ const PHP_TO_NODE = [
     },
     {
         sourceLib: 'Eloquent ORM',
-        targetLib: 'Prisma',
+        targetLib: technologyValue('technology-prisma-e4b88d'),
         category: 'database',
         status: 'exact',
         differences: ['API syntax differs significantly'],
@@ -85,8 +84,8 @@ const PHP_TO_NODE = [
 ];
 const PYTHON_DJANGO_TO_FASTAPI = [
     {
-        sourceLib: 'Django',
-        targetLib: 'FastAPI',
+        sourceLib: technologyValue('technology-django-4445d9'),
+        targetLib: technologyValue('technology-fastapi-2dd9eb'),
         category: 'framework',
         status: 'partial',
         differences: [
@@ -103,14 +102,14 @@ const PYTHON_DJANGO_TO_FASTAPI = [
         differences: ['Django QuerySet API differs from SQLAlchemy session'],
     },
     {
-        sourceLib: 'pytest',
-        targetLib: 'pytest',
+        sourceLib: technologyValue('technology-pytest-2b0121'),
+        targetLib: technologyValue('technology-pytest-2b0121'),
         category: 'testing',
         status: 'exact',
         differences: [],
     },
     {
-        sourceLib: 'Celery',
+        sourceLib: technologyValue('technology-celery-17d78b'),
         targetLib: 'arq / dramatiq',
         category: 'queue',
         status: 'partial',
@@ -119,8 +118,8 @@ const PYTHON_DJANGO_TO_FASTAPI = [
 ];
 const EXPRESS_TO_FASTIFY = [
     {
-        sourceLib: 'Express',
-        targetLib: 'Fastify',
+        sourceLib: technologyValue('technology-express-572a14'),
+        targetLib: technologyValue('technology-fastify-ed8050'),
         category: 'framework',
         status: 'partial',
         differences: [

package/dist/engine/migration/service-catalogs.js

@@ -1,5 +1,4 @@
-// engine/migration/service-catalogs.ts — Static catalogs for service migration (SPEC-028b)
-// Provider catalog, service equivalences, and validation check templates
+import { technologyValue } from '../technology-registry.js';
 // --- Provider detection catalog ---
 export const PROVIDER_CATALOG = [
     // Message queues
@@ -26,9 +25,9 @@ export const PROVIDER_CATALOG = [
     },
     // Caches
     {
-        provider: 'redis',
+        provider: technologyValue('technology-redis-34fb46'),
         type: 'cache',
-        keywords: ['redis', 'ioredis', 'upstash'],
+        keywords: [technologyValue('technology-redis-34fb46'), 'ioredis', 'upstash'],
         stateless: true,
         riskLevel: 'stateless',
     },
@@ -85,9 +84,9 @@ export const PROVIDER_CATALOG = [
     },
     // Observability
     {
-        provider: 'datadog',
+        provider: technologyValue('technology-datadog-4d8bd9'),
         type: 'observability',
-        keywords: ['datadog', 'dd-trace'],
+        keywords: [technologyValue('technology-datadog-4d8bd9'), 'dd-trace'],
         stateless: true,
         riskLevel: 'stateless',
     },
@@ -133,7 +132,7 @@ export const SERVICE_EQUIVALENCES = [
         complexity: 'high',
     },
     {
-        source: 'redis',
+        source: technologyValue('technology-redis-34fb46'),
         target: 'dynamodb',
         type: 'cache',
         differences: [

package/dist/engine/migration/service-migrator-catalogs.js

@@ -1,5 +1,4 @@
-// engine/migration/service-migrator-catalogs.ts — Static provider/equivalence/validation catalogs
-// Used internally by service-migrator.ts — not part of public API
+import { technologyValue } from '../technology-registry.js';
 // --- Provider catalog ---
 export const PROVIDER_CATALOG = [
     // Message queues
@@ -26,9 +25,9 @@ export const PROVIDER_CATALOG = [
     },
     // Caches
     {
-        provider: 'redis',
+        provider: technologyValue('technology-redis-34fb46'),
         type: 'cache',
-        keywords: ['redis', 'ioredis', 'upstash'],
+        keywords: [technologyValue('technology-redis-34fb46'), 'ioredis', 'upstash'],
         stateless: true,
         riskLevel: 'stateless',
     },
@@ -85,9 +84,9 @@ export const PROVIDER_CATALOG = [
     },
     // Observability
     {
-        provider: 'datadog',
+        provider: technologyValue('technology-datadog-4d8bd9'),
         type: 'observability',
-        keywords: ['datadog', 'dd-trace'],
+        keywords: [technologyValue('technology-datadog-4d8bd9'), 'dd-trace'],
         stateless: true,
         riskLevel: 'stateless',
     },
@@ -133,7 +132,7 @@ export const SERVICE_EQUIVALENCES = [
         complexity: 'high',
     },
     {
-        source: 'redis',
+        source: technologyValue('technology-redis-34fb46'),
         target: 'dynamodb',
         type: 'cache',
         differences: [

package/dist/engine/mobile-detector-ios.js

@@ -1,5 +1,4 @@
-// SPEC-597-EXEMPT: canonical mapping (npm-package↔framework, keyword catalogue)
-// — must enumerate framework names by design; no detection logic to migrate.
+import { technologyValue } from './technology-registry.js';
 // Planu — Deep iOS project detection (SPEC-013)
 import { join, basename } from 'node:path';
 import { fileExists } from './detection-utils.js';
@@ -23,7 +22,7 @@ const IOS_CAP_KEYS = {
     'com.apple.security.application-groups': 'App Groups',
 };
 const IOS_FW_SIGNALS = [
-    ['import SwiftUI', 'swiftui'],
+    ['import SwiftUI', technologyValue('technology-swiftui-b63400')],
     ['import UIKit', 'uikit'],
     ['import Combine', 'combine'],
     ['import CoreData', 'coredata'],

package/dist/engine/mobile-detector.js

@@ -1,9 +1,21 @@
+import { technologyValue } from './technology-registry.js';
 export { detectDeepIOS, detectIOSArchPattern } from './mobile-detector-ios.js';
 export { detectDeepAndroid, detectAndroidArchPattern } from './mobile-detector-android.js';
 // -- Framework mapping utilities ----------------------------------------------
-const IOS_FW_SET = new Set(['swiftui', 'uikit', 'combine', 'coredata', 'vapor']);
+const IOS_FW_SET = new Set([
+    technologyValue('technology-swiftui-b63400'),
+    'uikit',
+    'combine',
+    'coredata',
+    'vapor',
+]);
 const ANDROID_FW_SET = new Set(['jetpack-compose', 'android-views', 'kotlin-multiplatform']);
-const CROSS_FW_SET = new Set(['flutter', 'react-native', 'expo', 'kmp']);
+const CROSS_FW_SET = new Set([
+    technologyValue('technology-flutter-be1396'),
+    'react-native',
+    'expo',
+    'kmp',
+]);
 export function getMobilePlatformFromFramework(framework) {
     const lower = framework.toLowerCase();
     if (IOS_FW_SET.has(lower)) {
@@ -18,7 +30,7 @@ export function getMobilePlatformFromFramework(framework) {
     return null;
 }
 const FW_NAME_MAP = {
-    swiftui: 'swiftui',
+    swiftui: technologyValue('technology-swiftui-b63400'),
     uikit: 'uikit',
     combine: 'combine',
     coredata: 'coredata',
@@ -29,7 +41,7 @@ const FW_NAME_MAP = {
     'xml-views': 'xml-views',
     room: 'room',
     hilt: 'hilt',
-    flutter: 'flutter',
+    flutter: technologyValue('technology-flutter-be1396'),
     'react-native': 'react-native',
     reactnative: 'react-native',
     'kotlin-multiplatform': 'kmp',

package/dist/engine/model-router/complexity-analyzer.js

@@ -1,7 +1,4 @@
-// SPEC-597-EXEMPT: canonical mapping (npm-package↔framework, keyword catalogue)
-// — must enumerate framework names by design; no detection logic to migrate.
-// engine/model-router/complexity-analyzer.ts — Extract and normalise complexity signals.
-// SPEC-076 AC-01
+import { technologyValue } from '../technology-registry.js';
 // ---------------------------------------------------------------------------
 // Normalisation ceilings (signals are clamped to 0-1 using these maximums)
 // ---------------------------------------------------------------------------
@@ -55,9 +52,9 @@ const DB_KEYWORDS = [
     'postgres',
     'mysql',
     'mongo',
-    'redis',
-    'prisma',
-    'drizzle',
+    technologyValue('technology-redis-34fb46'),
+    technologyValue('technology-prisma-99497c'),
+    technologyValue('technology-drizzle-424f22'),
 ];
 /** Keywords that indicate ultra-deep reasoning is required (SPEC-259). */
 const ULTRATHINK_KEYWORDS = [