@planu/cli 4.13.0 → 5.0.0

package/dist/types/usage.d.ts

@@ -1,30 +1,15 @@
-import type { PricingTier } from './common/primitives.js';
 export interface UsageEvent {
     /** Tool name that was called */
     readonly toolName: string;
-    /** Tier at the time of the call */
-    readonly tier: PricingTier;
     /** ISO 8601 timestamp */
     readonly timestamp: string;
-    /** Whether the call succeeded (not blocked by license gate) */
+    /** Whether the call succeeded */
     readonly success: boolean;
 }
 export interface UsageLog {
     /** Array of usage events */
     readonly events: readonly UsageEvent[];
 }
-export interface DailyUsage {
-    /** Date string YYYY-MM-DD */
-    readonly date: string;
-    /** Number of tool calls today */
-    readonly callCount: number;
-    /** ISO 8601 timestamp of the last tool call */
-    readonly lastCallAt: string;
-}
-export interface TrialState {
-    /** ISO 8601 timestamp of the first Planu execution ever */
-    readonly firstRunAt: string;
-}
 export interface ToolHealthEntry {
     readonly name: string;
     readonly totalCalls: number;
@@ -38,8 +23,6 @@ export interface UsageStats {
     readonly totalCalls: number;
     /** Calls grouped by tool name */
     readonly callsByTool: Record<string, number>;
-    /** Calls grouped by tier */
-    readonly callsByTier: Record<string, number>;
     /** Top N most-used tools */
     readonly topTools: readonly {
         readonly name: string;
@@ -49,29 +32,11 @@ export interface UsageStats {
     readonly activeSpecs: number;
     /** Number of active projects */
     readonly activeProjects: number;
-    /** Current tier */
-    readonly currentTier: PricingTier;
-    /** Days since first run */
-    readonly daysSinceFirstRun: number;
-    /** Whether in trial period */
-    readonly isTrialActive: boolean;
-    /** Remaining daily calls (Starter only, -1 for unlimited) */
-    readonly remainingDailyCalls: number;
     /** Per-tool health breakdown — sorted by error rate descending (most broken first) */
     readonly toolHealthBreakdown: readonly ToolHealthEntry[];
     /** Tool names with 0 calls in the reporting period (candidates for removal) */
     readonly deadTools: readonly string[];
 }
-export interface RateLimitResult {
-    /** Whether the call is allowed */
-    readonly allowed: boolean;
-    /** If not allowed, the reason */
-    readonly reason: 'daily_limit' | 'cooldown' | null;
-    /** Human-readable message */
-    readonly message: string;
-    /** Remaining daily calls (-1 = unlimited) */
-    readonly remainingCalls: number;
-}
 export interface UsageStatsInput {
     readonly period?: '7d' | '30d' | 'all';
 }

package/dist/types/usage.js

@@ -1,4 +1,4 @@
 // types/usage.ts — Usage tracking and analytics types for Planu SDD MCP Server.
-// Supports local telemetry, trial enforcement, rate limiting, and usage reporting.
+// Supports neutral local telemetry and usage reporting.
 export {};
 //# sourceMappingURL=usage.js.map

package/dist/types/validate-worker.d.ts

@@ -0,0 +1,50 @@
+import type { ToolResult, ValidateInput } from './index.js';
+export interface ValidateWorkerRequest {
+    readonly kind: 'validate-request';
+    readonly schemaVersion: 1;
+    readonly secret: string;
+    readonly requestId: string;
+    readonly deadlineAt: number;
+    readonly input: ValidateInput;
+}
+export type ValidateWorkerResponse = {
+    readonly kind: 'ready';
+    readonly schemaVersion: 1;
+} | {
+    readonly kind: 'validate-progress';
+    readonly schemaVersion: 1;
+    readonly requestId: string;
+    readonly progress: ValidateWorkerProgress;
+} | {
+    readonly kind: 'validate-result';
+    readonly schemaVersion: 1;
+    readonly requestId: string;
+    readonly result: ToolResult;
+} | {
+    readonly kind: 'validate-error';
+    readonly schemaVersion: 1;
+    readonly requestId: string;
+    readonly message: string;
+};
+export interface ValidateWorkerCall {
+    readonly requestId: string;
+    readonly input: ValidateInput;
+    readonly deadlineAt: number;
+    readonly signal?: AbortSignal;
+    readonly onProgress?: (progress: ValidateWorkerProgress) => void;
+}
+export interface ValidateWorkerProgress {
+    readonly phase: string;
+    readonly command: string;
+    readonly durationMs: number;
+    /** Number of validation gates that have reached a terminal state. */
+    readonly completedGates: number;
+    /** Stable gate count for the current validation run. */
+    readonly totalGates: number;
+    /** ISO timestamp of the most recent semantic progress transition. */
+    readonly lastProgressAt: string;
+    readonly filesScanned?: number;
+    readonly status: 'running' | 'passed' | 'failed' | 'cancelled';
+    readonly remediation?: string;
+}
+//# sourceMappingURL=validate-worker.d.ts.map

package/dist/types/validate-worker.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=validate-worker.js.map

package/dist/types/validation-evidence.d.ts

@@ -1,5 +1,5 @@
 export declare const VALIDATION_EVIDENCE_SCHEMA_VERSION: '1.0.0';
-export type ValidationGateCapability = 'typecheck' | 'lint' | 'test-related' | 'test-full' | 'security' | 'native' | 'website' | 'reproducibility';
+export type ValidationGateCapability = 'typecheck' | 'lint' | 'test-related' | 'test-full' | 'contract' | 'coverage' | 'migration' | 'fault-injection' | 'security' | 'native' | 'website' | 'reproducibility';
 export type ValidationEvidenceStatus = 'passed' | 'failed' | 'cancelled' | 'invalidated';
 export interface ValidationEvidenceKeyInput {
     projectPath: string;

package/dist/types/validation-receipt.d.ts

@@ -0,0 +1,104 @@
+import type { FSWatcher } from 'node:fs';
+export interface ValidationReceiptBindings {
+    readonly projectId: string;
+    readonly specId: string;
+    readonly sourceDigest: string;
+    readonly specDigest: string;
+    readonly policyDigest: string;
+    readonly toolchainDigest: string;
+    readonly artifactDigests: ValidationArtifactDigests;
+}
+export interface ValidationArtifactDigests {
+    readonly approvedSpec: string;
+    readonly discovery: string;
+    readonly taskPlan: string;
+    readonly traceability: string;
+    readonly contractValidation: string;
+}
+export interface ValidationArtifactProvenance {
+    readonly receiptId: string;
+    /** Digest of canonical artifact content excluding this provenance envelope. */
+    readonly artifactDigest: string;
+    readonly specId: string;
+    readonly issuerId: string;
+}
+export interface ValidationFreshnessLease {
+    readonly projectId: string;
+    readonly specId: string;
+    readonly epoch: string;
+    readonly generation: number;
+}
+export interface ValidationFreshnessWatchState {
+    readonly epoch: string;
+    readonly expiresAt: number;
+    readonly generation: number;
+    readonly healthy: boolean;
+    readonly projectPath: string;
+    readonly handoffPath: string;
+    readonly evidenceFingerprint: string;
+    readonly bindings?: ValidationReceiptBindings;
+    readonly invalidating: Promise<void>;
+    readonly watchers: readonly FSWatcher[];
+}
+export interface ValidationCommandInput {
+    readonly executable: string;
+    readonly args?: readonly string[];
+    readonly cwd?: string;
+}
+export interface ValidationGateResult {
+    readonly gate: string;
+    readonly status: 'passed' | 'failed';
+    readonly durationMs: number;
+}
+export interface ValidationReceiptIssueInput {
+    readonly bindings: ValidationReceiptBindings;
+    readonly command: ValidationCommandInput;
+    readonly versions: Readonly<Record<string, string>>;
+    readonly exitCode: number;
+    readonly durationMs: number;
+    readonly log: string | Buffer;
+    readonly gates: readonly ValidationGateResult[];
+    readonly issuedAt?: string;
+}
+export interface ValidationReceipt {
+    readonly schemaVersion: 1;
+    readonly receiptId: string;
+    readonly issuer: string;
+    readonly issuedAt: string;
+    readonly bindings: ValidationReceiptBindings;
+    readonly normalizedCommand: string;
+    readonly versions: Readonly<Record<string, string>>;
+    readonly exitCode: number;
+    readonly durationMs: number;
+    readonly logDigest: string;
+    readonly gates: readonly ValidationGateResult[];
+    readonly authenticity: {
+        readonly algorithm: 'hmac-sha256';
+        readonly proof: string;
+    };
+}
+export interface ValidationReceiptIssuerOptions {
+    readonly issuerId: string;
+    readonly signingKeyReference: string;
+    readonly store: ValidationReceiptPersistence;
+}
+export interface ValidationReceiptVerificationOptions {
+    readonly bindings: ValidationReceiptBindings;
+    readonly trustedIssuers: Readonly<Record<string, string>>;
+    readonly store: ValidationReceiptPersistence;
+}
+export interface ValidationReceiptPersistence {
+    persist(receipt: ValidationReceipt, log: Buffer): Promise<void>;
+    readReceipt(projectId: string, receiptId: string): Promise<ValidationReceipt | undefined>;
+    readCurrent(projectId: string, specId: string): Promise<ValidationReceipt | undefined>;
+    readCurrentBindings(projectId: string, specId: string): Promise<ValidationReceiptBindings | undefined>;
+    projectCurrentBindings(bindings: ValidationReceiptBindings): Promise<void>;
+    invalidateCurrentBindings(projectId: string, specId: string, receiptId?: string): Promise<void>;
+    readLog(logDigest: string): Promise<Buffer | undefined>;
+    logPath(logDigest: string): string;
+}
+export interface ValidationReceiptVerification {
+    readonly valid: boolean;
+    readonly reason?: 'invalid-schema' | 'unsupported-version' | 'unknown-issuer' | 'invalid-authenticity' | 'stale-bindings' | 'missing-receipt' | 'missing-log' | 'invalid-log';
+}
+//# sourceMappingURL=validation-receipt.d.ts.map

package/dist/types/validation-receipt.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=validation-receipt.js.map

package/dist/types/validation.d.ts

@@ -18,13 +18,13 @@ export interface ValidationError {
 }
 /**
  * A non-blocking issue. Same shape as ValidationError; severity is implicit
- * from array placement in ValidationResult.
+ * from array placement in SpecValidationResult.
  */
 export type ValidationWarning = ValidationError;
 /**
  * Unified result returned by validateSpecFormat().
  */
-export interface ValidationResult {
+export interface SpecValidationResult {
     valid: boolean;
     errors: ValidationError[];
     warnings: ValidationWarning[];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@planu/cli",
-  "version": "4.13.0",
+  "version": "5.0.0",
   "description": "Planu — MCP Server for Spec Driven Development with native Rust acceleration for hot paths. Cross-platform (Linux/macOS/Windows, x64/arm64, glibc/musl).",
   "type": "module",
   "main": "dist/index.js",
@@ -12,6 +12,7 @@
     "dist/",
     "!dist/**/*.map",
     "!dist/engine/*.node",
+    "scripts/lib/pending-release-file.mjs",
     "src/i18n/messages/",
     "planu-native.json",
     "planu-plugin.json",
@@ -22,26 +23,26 @@
   "napi": {
     "binaryName": "planu-core",
     "targets": [
-      "x86_64-apple-darwin",
       "aarch64-apple-darwin",
-      "x86_64-unknown-linux-gnu",
+      "x86_64-apple-darwin",
       "aarch64-unknown-linux-gnu",
-      "x86_64-unknown-linux-musl",
       "aarch64-unknown-linux-musl",
-      "x86_64-pc-windows-msvc",
-      "aarch64-pc-windows-msvc"
+      "x86_64-unknown-linux-gnu",
+      "x86_64-unknown-linux-musl",
+      "aarch64-pc-windows-msvc",
+      "x86_64-pc-windows-msvc"
     ],
     "packageName": "@planu/core"
   },
   "optionalDependencies": {
-    "@planu/core-darwin-arm64": "4.13.0",
-    "@planu/core-darwin-x64": "4.13.0",
-    "@planu/core-linux-arm64-gnu": "4.13.0",
-    "@planu/core-linux-arm64-musl": "4.13.0",
-    "@planu/core-linux-x64-gnu": "4.13.0",
-    "@planu/core-linux-x64-musl": "4.13.0",
-    "@planu/core-win32-arm64-msvc": "4.13.0",
-    "@planu/core-win32-x64-msvc": "4.13.0"
+    "@planu/core-darwin-arm64": "5.0.0",
+    "@planu/core-darwin-x64": "5.0.0",
+    "@planu/core-linux-arm64-gnu": "5.0.0",
+    "@planu/core-linux-arm64-musl": "5.0.0",
+    "@planu/core-linux-x64-gnu": "5.0.0",
+    "@planu/core-linux-x64-musl": "5.0.0",
+    "@planu/core-win32-arm64-msvc": "5.0.0",
+    "@planu/core-win32-x64-msvc": "5.0.0"
   },
   "engines": {
     "node": ">=24.0.0"
@@ -51,6 +52,11 @@
     "build:rust": "bash scripts/build-rust-local.sh --host",
     "build:rust:all": "bash scripts/build-rust-local.sh --all",
     "build:rust:check-tools": "bash scripts/build-rust-local.sh --check-tools",
+    "check:native-version-parity": "node scripts/check-native-version-parity.mjs",
+    "check:release-authorities": "node scripts/check-release-authorities.mjs",
+    "check:commercial-surfaces": "node scripts/check-commercial-surfaces.mjs",
+    "check:tool-registration": "bash scripts/check-tool-registration.sh",
+    "generate:host-tool-registry": "node scripts/generate-host-tool-registry.mjs",
     "release:local": "bash scripts/release-local.sh",
     "release:local:all": "bash scripts/release-local.sh --all",
     "release:publish": "bash scripts/release-local.sh --all --publish",
@@ -70,18 +76,26 @@
     "verify:typescript-migration": "node scripts/verify-typescript-migration.mjs",
     "test": "vitest run",
     "test:watch": "vitest",
-    "test:coverage": "vitest run --coverage --exclude 'tests/integration/**'",
+    "test:coverage": "vitest run --coverage --testTimeout=60000 --maxWorkers=4",
     "test:integration": "vitest run tests/integration",
     "test:website:unit": "vitest run tests/website tests/scripts/generate-website-proof.test.ts tests/scripts/website-tool-counts.test.ts",
     "test:website:browser": "playwright test --config playwright.website.config.ts",
     "test:website:lighthouse": "lhci autorun --config=.lighthouserc.cjs",
     "test:website:lighthouse:production": "PLANU_LIGHTHOUSE_PRODUCTION=1 lhci autorun --config=.lighthouserc.cjs",
     "native:project-graph:e2e": "PLANU_NATIVE_E2E=1 vitest run tests/integration/native-project-graph-e2e.test.ts",
-    "native:project-graph:benchmark": "node scripts/benchmark-native-performance.mjs --operation project_graph_query --samples 5 --project-path . --spec-id SPEC-1119 --json",
-    "check": "pnpm typecheck && pnpm lint && pnpm format:check && pnpm check:public-privacy && pnpm check:website-proof && pnpm check:donation-assets && pnpm check:website-public-assets",
-    "check:strict": "pnpm check && pnpm audit:deadcode && pnpm audit:circular && pnpm audit:types && pnpm audit:security && pnpm audit:licenses && pnpm audit:i18n",
+    "native:project-graph:benchmark": "node scripts/benchmark-native-performance.mjs --operation project_graph_query --samples 30 --warmups 5 --project-path . --spec-id SPEC-1119 --json",
+    "benchmark:execution-kernel": "pnpm build && node scripts/benchmark-execution-kernel.mjs",
+    "check": "pnpm typecheck && pnpm lint && pnpm format:check && pnpm check:release-authorities && pnpm check:commercial-surfaces && pnpm check:tool-registration && pnpm check:public-privacy && pnpm check:website-proof && pnpm check:donation-assets && pnpm check:website-public-assets",
+    "check:strict": "pnpm check && pnpm generate:host-tool-registry -- --check && pnpm check:native-version-parity && pnpm check:environment-schema && pnpm audit:hardcodes && pnpm audit:deadcode && pnpm audit:circular && pnpm audit:types && pnpm audit:security && pnpm audit:licenses && pnpm audit:i18n",
+    "check:reliability": "node scripts/check-reliability-policies.mjs",
+    "check:environment-schema": "node scripts/check-environment-schema.mjs",
+    "test:contracts": "vitest run tests/contracts tests/integration/package-consumer-hono.test.ts",
+    "test:migrations": "vitest run tests/storage/corruption-contract.test.ts tests/integration/runtime-storage.test.ts tests/integration/canonical-storage-migration.test.ts",
+    "test:fault-injection": "vitest run tests/engine/auto-updater/atomic-upgrade.test.ts tests/integration/durable-job-runtime.test.ts tests/integration/idempotent-operations.test.ts",
     "check:website-public-assets": "node scripts/check-website-public-assets.mjs",
-    "check:public-privacy": "node scripts/check-public-privacy.mjs",
+    "check:public-privacy": "node scripts/check-public-privacy.mjs && node scripts/check-native-signing-privacy.mjs",
+    "check:readme-parity": "node scripts/check-readme-parity.mjs --package-root .",
+    "privacy:prepublish": "node scripts/check-prepublish-privacy.mjs --package-root .",
     "generate:website-proof": "node scripts/generate-website-proof.mjs",
     "generate:donation-assets": "node scripts/generate-crypto-donation-assets.mjs",
     "check:donation-assets": "node scripts/generate-crypto-donation-assets.mjs --check",
@@ -96,13 +110,14 @@
     "audit:licenses": "bash scripts/audit-licenses.sh",
     "audit:size": "bash scripts/audit-package-size.sh",
     "audit:i18n": "bash scripts/audit-i18n.sh",
+    "audit:hardcodes": "node scripts/check-hardcodes.mjs",
     "audit:mutation": "stryker run",
     "setup:protection": "bash scripts/setup-branch-protection.sh",
     "prepare": "husky || true",
     "prepublishOnly": "bash scripts/prepublish-guard.sh",
     "prepack": "pnpm build:ts && pnpm package:size",
     "test:debug": "vitest run --inspect-brk --single-thread",
-    "validate": "pnpm typecheck && pnpm verify:typescript-migration && pnpm lint && pnpm format:check && pnpm test",
+    "validate": "pnpm build && pnpm typecheck && pnpm verify:typescript-migration && pnpm lint && pnpm format:check && pnpm test",
     "docker:build": "docker build -t planu .",
     "docker:run": "docker compose up",
     "publish:blog": "node scripts/publish-blog.mjs",
@@ -157,7 +172,7 @@
     "@commitlint/config-conventional": "^21.2.0",
     "@eslint/js": "^10.0.1",
     "@lhci/cli": "0.15.1",
-    "@napi-rs/cli": "^3.7.4",
+    "@napi-rs/cli": "3.7.4",
     "@noble/hashes": "2.2.0",
     "@playwright/test": "1.62.0",
     "@scure/base": "2.2.0",

package/planu-native.json

@@ -1,7 +1,7 @@
 {
   "name": "dev.planu.native",
   "displayName": "Planu Native Lightweight Surface",
-  "version": "4.13.0",
+  "version": "5.0.0",
   "packageName": "@planu/cli",
   "modes": {
     "lightweight": {

package/planu-plugin.json

@@ -2,66 +2,49 @@
   "name": "dev.planu.cli",
   "displayName": "Planu — Spec Driven Development",
   "description": "Manage software specs, estimations, and autonomous SDD workflows. Language-agnostic MCP server for Claude Code.",
-  "version": "4.13.0",
+  "version": "5.0.0",
   "icon": "assets/plugin/icon.svg",
-  "command": [
-    "npx",
-    "@planu/cli@latest"
-  ],
+  "command": ["npx", "@planu/cli@latest"],
   "packageName": "@planu/cli",
   "capabilities": {
     "tools": [
       "planu_status",
+      "session_checkpoint",
       "facilitate",
       "init_project",
       "clarify_requirements",
       "create_spec",
+      "list_specs",
       "challenge_spec",
       "check_readiness",
       "update_status",
+      "update_status_batch",
       "package_handoff",
       "validate",
+      "get_job",
+      "watch_job",
+      "cancel_job",
+      "restart_job",
       "reconcile_spec",
       "create_rule",
       "create_skill",
-      "skill_search"
+      "skill_search",
+      "configure_code_graph",
+      "code_graph_status",
+      "submit_feedback",
+      "triage_feedback",
+      "resolve_feedback",
+      "sync_feedback",
+      "feedback_status"
     ],
-    "resources": [
-      "planu://specs/list",
-      "planu://specs/{id}",
-      "planu://project/status",
-      "planu://roadmap"
-    ],
-    "prompts": [
-      "create-spec-from-idea",
-      "review-spec-readiness",
-      "generate-implementation-plan"
-    ],
-    "subagents": [
-      "sdd-orchestrator",
-      "spec-challenger",
-      "test-generator"
-    ]
-  },
-  "compatibility": {
-    "minimumHostVersion": "1.0.0",
-    "requiredFeatures": [
-      "mcp-tools",
-      "file-editing"
-    ]
+    "resources": ["planu://specs/list", "planu://specs/{id}", "planu://project/status", "planu://roadmap"],
+    "prompts": ["create-spec-from-idea", "review-spec-readiness", "generate-implementation-plan"],
+    "subagents": ["sdd-orchestrator", "spec-challenger", "test-generator"]
   },
+  "compatibility": { "minimumHostVersion": "1.0.0", "requiredFeatures": ["mcp-tools", "file-editing"] },
   "repository": "https://github.com/planu-dev/planu",
   "author": "Planu",
-  "license": "MIT",
+  "license": "SEE LICENSE IN LICENSE",
   "homepage": "https://planu.dev",
-  "keywords": [
-    "sdd",
-    "spec-driven-development",
-    "mcp",
-    "specs",
-    "planning",
-    "ai",
-    "bdd",
-    "tdd"
-  ]
+  "keywords": ["sdd", "spec-driven-development", "mcp", "specs", "planning", "ai", "bdd", "tdd"]
 }

package/scripts/lib/pending-release-file.mjs

@@ -0,0 +1,93 @@
+import { mkdir, readFile, rename, rm, stat, writeFile } from 'node:fs/promises';
+
+const DEFAULT_TIMEOUT_MS = 5_000;
+const POLL_INTERVAL_MS = 10;
+const ABANDONED_LOCK_MS = 30_000;
+
+function delay(milliseconds) {
+  return new Promise((resolve) => setTimeout(resolve, milliseconds));
+}
+
+function isProcessAlive(pid) {
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch (error) {
+    return error?.code !== 'ESRCH';
+  }
+}
+
+async function removeAbandonedLock(lockPath) {
+  try {
+    const owner = JSON.parse(await readFile(`${lockPath}/owner.json`, 'utf8'));
+    if (Number.isInteger(owner.pid) && owner.pid > 0 && !isProcessAlive(owner.pid)) {
+      await rm(lockPath, { recursive: true, force: true });
+      return true;
+    }
+  } catch {
+    try {
+      const lockStat = await stat(lockPath);
+      if (Date.now() - lockStat.mtimeMs > ABANDONED_LOCK_MS) {
+        await rm(lockPath, { recursive: true, force: true });
+        return true;
+      }
+    } catch {
+      return true;
+    }
+  }
+  return false;
+}
+
+async function acquireLock(pendingPath, { timeoutMs, signal }) {
+  const lockPath = `${pendingPath}.lock`;
+  const deadline = Date.now() + timeoutMs;
+  while (true) {
+    if (signal?.aborted) throw new Error('pending release lock acquisition aborted');
+    try {
+      await mkdir(lockPath);
+      await writeFile(
+        `${lockPath}/owner.json`,
+        `${JSON.stringify({ pid: process.pid, createdAt: new Date().toISOString() })}\n`,
+        { flag: 'wx', mode: 0o600 },
+      );
+      return lockPath;
+    } catch (error) {
+      if (error?.code !== 'EEXIST') {
+        await rm(lockPath, { recursive: true, force: true });
+        throw error;
+      }
+      if (await removeAbandonedLock(lockPath)) continue;
+      if (Date.now() >= deadline) {
+        throw new Error(`timed out waiting for pending release lock: ${lockPath}`);
+      }
+      await delay(POLL_INTERVAL_MS);
+    }
+  }
+}
+
+export async function withPendingReleaseLock(pendingPath, options, task) {
+  const lockPath = await acquireLock(pendingPath, {
+    timeoutMs: options?.timeoutMs ?? DEFAULT_TIMEOUT_MS,
+    signal: options?.signal,
+  });
+  try {
+    return await task();
+  } finally {
+    await rm(lockPath, { recursive: true, force: true });
+  }
+}
+
+export async function writePendingReleaseLedger(pendingPath, entries) {
+  const temporaryPath = `${pendingPath}.${process.pid}.${Date.now()}.tmp`;
+  try {
+    await writeFile(temporaryPath, `${JSON.stringify(entries, null, 2)}\n`, {
+      encoding: 'utf8',
+      flag: 'wx',
+      mode: 0o644,
+    });
+    await rename(temporaryPath, pendingPath);
+  } catch (error) {
+    await rm(temporaryPath, { force: true });
+    throw error;
+  }
+}

package/src/i18n/messages/en.json

@@ -346,45 +346,6 @@
       "actionFailed": "{action} failed: {details}",
       "error": "Manage trash failed: {message}"
     },
-    "activate_license": {
-      "description": "Activate or deactivate a Planu Pro license key to unlock all tools and increased limits.",
-      "keyRequired": "Error: licenseKey is required.",
-      "activationFailed": "License activation failed: {error}",
-      "activatedSuccess": "License activated successfully!",
-      "plan": "Plan: {tier}",
-      "customer": "Customer: {name}",
-      "instance": "Instance: {name}",
-      "proAccess": "You now have access to all 65 Planu tools and increased limits.",
-      "tierAccess": "You now have {tier} access with all tools and unlimited projects/specs.",
-      "commonCauses": "Common causes:",
-      "causeInvalidKey": "Invalid license key — check for typos",
-      "causeAlreadyActivated": "License already activated on another machine — deactivate first",
-      "causeNetwork": "Network issue — check your internet connection",
-      "deactivationCancelled": "Deactivation cancelled. Set confirm: true to proceed.",
-      "noActiveLicense": "No active license found. You are on the Free plan.",
-      "deactivatedSuccess": "License deactivated successfully.",
-      "deactivatedFreePlan": "You are now on the Free plan ({count} tools, 2 projects, 5 active specs).",
-      "keyReusable": "Your license key can be activated on another machine."
-    },
-    "license_status": {
-      "description": "Check your current license status, tier, limits, and available tools.",
-      "title": "Planu License Status",
-      "version": "Version:",
-      "plan": "Plan:",
-      "customer": "Customer:",
-      "variant": "Variant:",
-      "activated": "Activated:",
-      "lastValidated": "Last validated:",
-      "toolsAvailable": "Tools available:",
-      "limitsTitle": "Limits",
-      "projects": "Projects:",
-      "activeSpecs": "Active specs:",
-      "perProject": "per project",
-      "activationSlots": "Activation slots:",
-      "upgradeTitle": "Upgrade",
-      "upgradeMessage": "Unlock all {count} tools, 10 projects, and unlimited specs.",
-      "activateHint": "Already have a key? Use `activate_license` to activate it."
-    },
     "spec_templates": {
       "description": "List and browse available spec templates — filter by category, complexity, or tags.",
       "listTitle": "Available Spec Templates",
@@ -502,8 +463,6 @@
       "approvedChanges": "Approved Changes",
       "pendingChanges": "Pending Changes",
       "versionCreated": "Version Created",
-      "changelogUpdated": "Changelog Updated",
-      "yes": "Yes",
       "livingSpec": "Living Spec",
       "coverage": "coverage",
       "nextValidate": "Run `validate` to check implementation coverage",