@planu/cli 4.13.0 → 5.0.0

package/dist/engine/decision-store.js

@@ -1,18 +1,15 @@
-// SPEC-597-EXEMPT: canonical mapping (npm-package↔framework, keyword catalogue)
-// — must enumerate framework names by design; no detection logic to migrate.
-// engine/decision-store.ts — Search and conflict detection for decisions (SPEC-040)
-// Pure functions — no I/O. All persistence is in storage/decision-store.ts.
+import { technologyValue } from './technology-registry.js';
 // ---------------------------------------------------------------------------
 // Keyword maps
 // ---------------------------------------------------------------------------
 const STACK_KEYWORDS = [
-    'react',
-    'vue',
-    'angular',
-    'svelte',
+    technologyValue('technology-react-275976'),
+    technologyValue('technology-vue-564382'),
+    technologyValue('technology-angular-a39f89'),
+    technologyValue('technology-svelte-c190ac'),
     'next',
-    'nuxt',
-    'remix',
+    technologyValue('technology-nuxt-22c407'),
+    technologyValue('technology-remix-0c5d96'),
     'node',
     'deno',
     'bun',
@@ -20,16 +17,16 @@ const STACK_KEYWORDS = [
     'java',
     'kotlin',
     'swift',
-    'flutter',
+    technologyValue('technology-flutter-be1396'),
     'expo',
-    'typescript',
+    technologyValue('technology-typescript-969545'),
     'javascript',
     'rust',
     'go',
     'postgres',
     'mysql',
     'mongodb',
-    'redis',
+    technologyValue('technology-redis-34fb46'),
     'sqlite',
 ];
 const ARCHITECTURE_KEYWORDS = [
@@ -44,7 +41,7 @@ const ARCHITECTURE_KEYWORDS = [
     'clean architecture',
     'layered',
     'rest',
-    'graphql',
+    technologyValue('technology-graphql-aed31c'),
     'grpc',
     'message queue',
     'kafka',

package/dist/engine/deleter/core.js

@@ -4,8 +4,9 @@ import * as patternStore from '../../storage/pattern-store.js';
 import * as decisionStore from '../../storage/decision-store.js';
 import { moveToTrash, moveDataToTrash, countFiles, pathExists } from '../../storage/trash-store.js';
 import { appendAuditEntry } from './audit-logger.js';
-import { rm, mkdir, cp } from 'node:fs/promises';
+import { rm, mkdir, rename } from 'node:fs/promises';
 import { join } from 'node:path';
+import { resolveStorageLayout } from '../../storage/storage-layout.js';
 /**
  * Check if any specs reference the given specId as a dependency.
  * Returns a list of dependent spec IDs for cascade awareness.
@@ -132,13 +133,12 @@ export async function executeDeleteProject(projectId, force) {
     if (!force) {
         // For soft delete of a project, move the entire directory
         // Use a global trash since project dir itself is being deleted
-        const globalTrashDir = 'data/projects/.trash';
+        const globalTrashDir = join(resolveStorageLayout().trash, 'projects');
         const timestamp = Date.now();
         const trashSubdir = `${String(timestamp)}-project-${projectId}`;
         const destPath = join(globalTrashDir, trashSubdir);
-        await mkdir(destPath, { recursive: true });
-        await cp(dataDir, destPath, { recursive: true });
-        await rm(dataDir, { recursive: true, force: true });
+        await mkdir(globalTrashDir, { recursive: true });
+        await rename(dataDir, destPath);
     }
     else {
         await rm(dataDir, { recursive: true, force: true });

package/dist/engine/dep-auditor/abandonment-data.js

@@ -1,3 +1,4 @@
+import { technologyValue } from '../technology-registry.js';
 // Heuristic abandonment registry — no npm registry calls.
 const KNOWN_ABANDONED = {
     request: { months: 60, alternative: 'axios or native fetch' },
@@ -9,7 +10,7 @@ const KNOWN_ABANDONED = {
     moment: { months: 24, alternative: 'dayjs or date-fns (moment in maintenance mode)' },
     'node-uuid': { months: 84, alternative: 'uuid (v9+)' },
     'uglify-js': { months: 48, alternative: 'esbuild or terser' },
-    coffeescript: { months: 60, alternative: 'TypeScript' },
+    coffeescript: { months: 60, alternative: technologyValue('technology-typescript-ed0504') },
 };
 export function getAbandonedInfo(name) {
     const entry = KNOWN_ABANDONED[name];

package/dist/engine/dep-auditor/abandonment-registry.js

@@ -1,5 +1,6 @@
 // dep-auditor/abandonment-registry.ts — SPEC-025 tech debt: abandonment detection via registry date
 // Uses npm registry API to check last publish date and determine if a package is abandoned.
+import { assertNetworkAllowed } from '../network-policy.js';
 const TIMEOUT_MS = 5000;
 const DEFAULT_THRESHOLD_YEARS = 2;
 // ---------------------------------------------------------------------------
@@ -12,11 +13,12 @@ const DEFAULT_THRESHOLD_YEARS = 2;
  * Returns null on any error (network, timeout, parse, missing field).
  */
 export async function fetchNpmLastPublish(pkg) {
+    const url = `https://registry.npmjs.org/${encodeURIComponent(pkg)}`;
+    assertNetworkAllowed(url);
     return new Promise((resolve) => {
         import('node:https')
             .then(({ default: https }) => {
             /* v8 ignore start */
-            const url = `https://registry.npmjs.org/${encodeURIComponent(pkg)}`;
             const req = https.get(url, { timeout: TIMEOUT_MS }, (res) => {
                 let data = '';
                 res.on('data', (chunk) => {

package/dist/engine/dep-auditor/cve-fetcher.js

@@ -1,3 +1,4 @@
+import { assertNetworkAllowed } from '../network-policy.js';
 const TIMEOUT_MS = 5000;
 // ---------------------------------------------------------------------------
 // npm advisory API
@@ -88,6 +89,7 @@ export function fetchCargoCve(_pkg, _version) {
 // Shared HTTP helpers
 // ---------------------------------------------------------------------------
 async function makeHttpsGet(url, parser) {
+    assertNetworkAllowed(url);
     return new Promise((resolve) => {
         import('node:https')
             .then(({ default: https }) => {
@@ -123,6 +125,7 @@ async function makeHttpsGet(url, parser) {
     });
 }
 async function makeHttpsPost(url, body, parser) {
+    assertNetworkAllowed(url);
     return new Promise((resolve) => {
         import('node:https')
             .then(({ default: https }) => {

package/dist/engine/dep-auditor/dep-duplicates-detector.js

@@ -1,3 +1,4 @@
+import { technologyValue } from '../technology-registry.js';
 // ---------------------------------------------------------------------------
 // Category map: category → known packages in that category
 // ---------------------------------------------------------------------------
@@ -13,11 +14,35 @@ const CATEGORY_MAP = {
         'cross-fetch',
     ],
     'date-library': ['moment', 'dayjs', 'date-fns', 'luxon', 'fecha'],
-    'test-runner': ['jest', 'mocha', 'vitest', 'jasmine', 'ava', 'tap', 'tape'],
+    'test-runner': [
+        technologyValue('technology-jest-35e99f'),
+        'mocha',
+        technologyValue('technology-vitest-a9127f'),
+        'jasmine',
+        'ava',
+        'tap',
+        'tape',
+    ],
     'assertion-library': ['chai', 'expect', 'assert', 'should', '@testing-library/jest-dom'],
     logger: ['winston', 'pino', 'bunyan', 'log4js', 'morgan', 'signale', 'consola'],
-    validation: ['joi', 'yup', 'zod', 'ajv', 'valibot', 'superstruct', 'io-ts'],
-    orm: ['sequelize', 'typeorm', 'prisma', 'drizzle', 'knex', 'mongoose', 'mikro-orm'],
+    validation: [
+        'joi',
+        'yup',
+        technologyValue('technology-zod-4f63cf'),
+        'ajv',
+        'valibot',
+        'superstruct',
+        'io-ts',
+    ],
+    orm: [
+        technologyValue('technology-sequelize-d18291'),
+        technologyValue('technology-typeorm-527d4d'),
+        technologyValue('technology-prisma-99497c'),
+        technologyValue('technology-drizzle-424f22'),
+        'knex',
+        technologyValue('technology-mongoose-4e1812'),
+        'mikro-orm',
+    ],
     'state-management': ['redux', 'mobx', 'zustand', 'recoil', 'jotai', 'valtio', 'xstate', 'pinia'],
     'css-in-js': [
         'styled-components',
@@ -27,7 +52,14 @@ const CATEGORY_MAP = {
         'linaria',
         'vanilla-extract',
     ],
-    bundler: ['webpack', 'vite', 'rollup', 'esbuild', 'parcel', 'turbopack'],
+    bundler: [
+        'webpack',
+        'vite',
+        'rollup',
+        'esbuild',
+        'parcel',
+        technologyValue('technology-turbopack-1a3487'),
+    ],
     uuid: ['uuid', 'nanoid', 'cuid', 'cuid2', 'ulid', 'ksuid'],
     'env-loading': ['dotenv', 'dotenv-expand', 'envalid', '@t3-oss/env-core', 'env-var'],
     'graphql-client': ['apollo-client', '@apollo/client', 'urql', 'graphql-request'],

package/dist/engine/dep-auditor/license-registry.js

@@ -1,5 +1,6 @@
 // dep-auditor/license-registry.ts — SPEC-025 tech debt: license detection from registries
 // Fetches license info from npm, PyPI, and crates.io JSON APIs.
+import { assertNetworkAllowed } from '../network-policy.js';
 const TIMEOUT_MS = 5000;
 // ---------------------------------------------------------------------------
 // npm registry
@@ -51,6 +52,7 @@ export async function fetchCratesLicense(pkg, version) {
 // Shared HTTP helper
 // ---------------------------------------------------------------------------
 async function makeHttpsGet(url, parser) {
+    assertNetworkAllowed(url);
     return new Promise((resolve) => {
         import('node:https')
             .then(({ default: https }) => {

package/dist/engine/dependency-evaluator.d.ts

@@ -0,0 +1,14 @@
+import type { Spec } from '../types/spec/core.js';
+export type DependencyBlockReason = 'cycle' | 'missing' | 'discarded' | 'not-done';
+export interface DependencyBlocker {
+    readonly specId: string;
+    readonly reason: DependencyBlockReason;
+    readonly status?: Spec['status'];
+}
+export interface DependencyEvaluation {
+    readonly allowed: boolean;
+    readonly blockers: readonly DependencyBlocker[];
+}
+/** Single dependency policy used by lifecycle gates and next-spec routing. */
+export declare function evaluateSpecDependencies(spec: Spec, allSpecs: readonly Spec[]): DependencyEvaluation;
+//# sourceMappingURL=dependency-evaluator.d.ts.map

package/dist/engine/dependency-evaluator.js

@@ -0,0 +1,81 @@
+function normalizeDependencies(value) {
+    if (Array.isArray(value)) {
+        return value.filter((dependency) => typeof dependency === 'string' && dependency.trim().length > 0);
+    }
+    return typeof value === 'string' && value.trim().length > 0 ? [value] : [];
+}
+function cycleMembers(allSpecs) {
+    const adjacency = new Map(allSpecs.map((spec) => [spec.id, normalizeDependencies(spec.dependencies)]));
+    const active = new Set();
+    const visited = new Set();
+    const path = [];
+    const members = new Set();
+    const visit = (specId) => {
+        if (active.has(specId)) {
+            const start = path.indexOf(specId);
+            for (const member of path.slice(start)) {
+                members.add(member);
+            }
+            return;
+        }
+        if (visited.has(specId)) {
+            return;
+        }
+        visited.add(specId);
+        active.add(specId);
+        path.push(specId);
+        for (const dependency of adjacency.get(specId) ?? []) {
+            if (adjacency.has(dependency)) {
+                visit(dependency);
+            }
+        }
+        path.pop();
+        active.delete(specId);
+    };
+    for (const specId of adjacency.keys()) {
+        visit(specId);
+    }
+    return members;
+}
+/** Single dependency policy used by lifecycle gates and next-spec routing. */
+export function evaluateSpecDependencies(spec, allSpecs) {
+    const blockers = [];
+    const cyclicSpecs = cycleMembers(allSpecs);
+    if (cyclicSpecs.has(spec.id)) {
+        blockers.push({ specId: spec.id, reason: 'cycle' });
+    }
+    const specsById = new Map(allSpecs.map((candidate) => [candidate.id, candidate]));
+    const reachable = [...normalizeDependencies(spec.dependencies)];
+    const visited = new Set();
+    while (reachable.length > 0) {
+        const dependencyId = reachable.shift();
+        if (!dependencyId || visited.has(dependencyId)) {
+            continue;
+        }
+        visited.add(dependencyId);
+        if (cyclicSpecs.has(dependencyId)) {
+            blockers.push({ specId: dependencyId, reason: 'cycle' });
+        }
+        const dependency = specsById.get(dependencyId);
+        if (dependency) {
+            reachable.push(...normalizeDependencies(dependency.dependencies));
+        }
+    }
+    for (const dependencyId of normalizeDependencies(spec.dependencies)) {
+        const dependency = specsById.get(dependencyId);
+        if (!dependency) {
+            blockers.push({ specId: dependencyId, reason: 'missing' });
+        }
+        else if (dependency.status === 'discarded') {
+            blockers.push({ specId: dependencyId, reason: 'discarded', status: dependency.status });
+        }
+        else if (dependency.status !== 'done') {
+            blockers.push({ specId: dependencyId, reason: 'not-done', status: dependency.status });
+        }
+    }
+    const uniqueBlockers = [
+        ...new Map(blockers.map((item) => [`${item.specId}:${item.reason}`, item])).values(),
+    ];
+    return { allowed: uniqueBlockers.length === 0, blockers: uniqueBlockers };
+}
+//# sourceMappingURL=dependency-evaluator.js.map

package/dist/engine/deploy/providers/fly.js

@@ -1,4 +1,4 @@
-// engine/deploy/providers/fly.ts — Fly.io Machines API deploy provider
+import { technologyValue } from '../../technology-registry.js';
 const FLY_API_BASE = 'https://api.machines.dev';
 /** Trigger a Fly.io machine creation to deploy an app. */
 export async function deployToFly(config, options) {
@@ -25,7 +25,7 @@ export async function deployToFly(config, options) {
             const text = await response.text();
             return {
                 id: `fly-error-${String(Date.now())}`,
-                provider: 'fly',
+                provider: technologyValue('technology-fly-f4debd'),
                 status: 'error',
                 createdAt: new Date().toISOString(),
                 errorMessage: `Fly API ${String(response.status)}: ${text.slice(0, 200)}`,
@@ -34,7 +34,7 @@ export async function deployToFly(config, options) {
         const data = (await response.json());
         return {
             id: data.id,
-            provider: 'fly',
+            provider: technologyValue('technology-fly-f4debd'),
             status: mapFlyState(data.state ?? 'pending'),
             createdAt: new Date().toISOString(),
         };
@@ -42,7 +42,7 @@ export async function deployToFly(config, options) {
     catch (err) {
         return {
             id: `fly-error-${String(Date.now())}`,
-            provider: 'fly',
+            provider: technologyValue('technology-fly-f4debd'),
             status: 'error',
             createdAt: new Date().toISOString(),
             errorMessage: err instanceof Error ? err.message : String(err),
@@ -62,7 +62,7 @@ export async function getFlyMachineStatus(config, machineId) {
         if (!response.ok) {
             return {
                 id: machineId,
-                provider: 'fly',
+                provider: technologyValue('technology-fly-f4debd'),
                 status: 'error',
                 createdAt: new Date().toISOString(),
                 errorMessage: `Fly API ${String(response.status)}`,
@@ -71,7 +71,7 @@ export async function getFlyMachineStatus(config, machineId) {
         const data = (await response.json());
         return {
             id: data.id,
-            provider: 'fly',
+            provider: technologyValue('technology-fly-f4debd'),
             status: mapFlyState(data.state ?? 'pending'),
             createdAt: new Date().toISOString(),
         };
@@ -79,7 +79,7 @@ export async function getFlyMachineStatus(config, machineId) {
     catch (err) {
         return {
             id: machineId,
-            provider: 'fly',
+            provider: technologyValue('technology-fly-f4debd'),
             status: 'error',
             createdAt: new Date().toISOString(),
             errorMessage: err instanceof Error ? err.message : String(err),

package/dist/engine/deploy/providers/netlify.js

@@ -1,4 +1,4 @@
-// engine/deploy/providers/netlify.ts — SPEC-478: Netlify deploy via API
+import { technologyValue } from '../../technology-registry.js';
 /** Trigger a Netlify deployment by calling the deploys API. */
 export async function deployToNetlify(config, options) {
     const siteId = config.projectId ?? '';
@@ -21,7 +21,7 @@ export async function deployToNetlify(config, options) {
             const text = await response.text();
             return {
                 id: `netlify-error-${String(Date.now())}`,
-                provider: 'netlify',
+                provider: technologyValue('technology-netlify-58465a'),
                 status: 'error',
                 createdAt: new Date().toISOString(),
                 errorMessage: `Netlify API ${String(response.status)}: ${text.slice(0, 200)}`,
@@ -30,7 +30,7 @@ export async function deployToNetlify(config, options) {
         const data = (await response.json());
         return {
             id: data.id,
-            provider: 'netlify',
+            provider: technologyValue('technology-netlify-58465a'),
             url: data.ssl_url ?? data.url,
             status: mapNetlifyState(data.state ?? 'unknown'),
             createdAt: new Date().toISOString(),
@@ -39,7 +39,7 @@ export async function deployToNetlify(config, options) {
     catch (err) {
         return {
             id: `netlify-error-${String(Date.now())}`,
-            provider: 'netlify',
+            provider: technologyValue('technology-netlify-58465a'),
             status: 'error',
             createdAt: new Date().toISOString(),
             errorMessage: err instanceof Error ? err.message : String(err),
@@ -58,7 +58,7 @@ export async function getNetlifyDeploymentStatus(config, deploymentId) {
         if (!response.ok) {
             return {
                 id: deploymentId,
-                provider: 'netlify',
+                provider: technologyValue('technology-netlify-58465a'),
                 status: 'error',
                 createdAt: new Date().toISOString(),
                 errorMessage: `Netlify API ${String(response.status)}`,
@@ -67,7 +67,7 @@ export async function getNetlifyDeploymentStatus(config, deploymentId) {
         const data = (await response.json());
         return {
             id: data.id,
-            provider: 'netlify',
+            provider: technologyValue('technology-netlify-58465a'),
             url: data.ssl_url ?? data.url,
             status: mapNetlifyState(data.state ?? 'unknown'),
             createdAt: new Date().toISOString(),
@@ -76,7 +76,7 @@ export async function getNetlifyDeploymentStatus(config, deploymentId) {
     catch (err) {
         return {
             id: deploymentId,
-            provider: 'netlify',
+            provider: technologyValue('technology-netlify-58465a'),
             status: 'error',
             createdAt: new Date().toISOString(),
             errorMessage: err instanceof Error ? err.message : String(err),

package/dist/engine/deploy/providers/railway.js

@@ -1,6 +1,4 @@
-// engine/deploy/providers/railway.ts — SPEC-478: Railway deploy via GraphQL API
-// SPEC-597-EXEMPT: provider-specific implementation; the literal 'railway'
-// IS the canonical id for this module.
+import { technologyValue } from '../../technology-registry.js';
 const RAILWAY_GRAPHQL_URL = 'https://backboard.railway.app/graphql/v2';
 /** Trigger a Railway deployment via GraphQL serviceInstanceDeploy mutation. */
 export async function deployToRailway(config, _options) {
@@ -28,7 +26,7 @@ export async function deployToRailway(config, _options) {
             const text = await response.text();
             return {
                 id: `railway-error-${String(Date.now())}`,
-                provider: 'railway',
+                provider: technologyValue('technology-railway-e34d1c'),
                 status: 'error',
                 createdAt: new Date().toISOString(),
                 errorMessage: `Railway API ${String(response.status)}: ${text.slice(0, 200)}`,
@@ -39,7 +37,7 @@ export async function deployToRailway(config, _options) {
             const msg = body.errors.map((e) => e.message).join('; ');
             return {
                 id: `railway-error-${String(Date.now())}`,
-                provider: 'railway',
+                provider: technologyValue('technology-railway-e34d1c'),
                 status: 'error',
                 createdAt: new Date().toISOString(),
                 errorMessage: `Railway GraphQL error: ${msg}`,
@@ -48,7 +46,7 @@ export async function deployToRailway(config, _options) {
         const deploymentId = body.data?.serviceInstanceDeploy ?? `railway-${String(Date.now())}`;
         return {
             id: deploymentId,
-            provider: 'railway',
+            provider: technologyValue('technology-railway-e34d1c'),
             status: 'building',
             createdAt: new Date().toISOString(),
         };
@@ -56,7 +54,7 @@ export async function deployToRailway(config, _options) {
     catch (err) {
         return {
             id: `railway-error-${String(Date.now())}`,
-            provider: 'railway',
+            provider: technologyValue('technology-railway-e34d1c'),
             status: 'error',
             createdAt: new Date().toISOString(),
             errorMessage: err instanceof Error ? err.message : String(err),
@@ -86,7 +84,7 @@ export async function getRailwayDeploymentStatus(config, deploymentId) {
         if (!response.ok) {
             return {
                 id: deploymentId,
-                provider: 'railway',
+                provider: technologyValue('technology-railway-e34d1c'),
                 status: 'error',
                 createdAt: new Date().toISOString(),
                 errorMessage: `Railway API ${String(response.status)}`,
@@ -97,7 +95,7 @@ export async function getRailwayDeploymentStatus(config, deploymentId) {
             const msg = body.errors.map((e) => e.message).join('; ');
             return {
                 id: deploymentId,
-                provider: 'railway',
+                provider: technologyValue('technology-railway-e34d1c'),
                 status: 'error',
                 createdAt: new Date().toISOString(),
                 errorMessage: `Railway GraphQL error: ${msg}`,
@@ -107,7 +105,7 @@ export async function getRailwayDeploymentStatus(config, deploymentId) {
         if (!dep) {
             return {
                 id: deploymentId,
-                provider: 'railway',
+                provider: technologyValue('technology-railway-e34d1c'),
                 status: 'error',
                 createdAt: new Date().toISOString(),
                 errorMessage: 'Railway deployment not found',
@@ -115,7 +113,7 @@ export async function getRailwayDeploymentStatus(config, deploymentId) {
         }
         return {
             id: dep.id,
-            provider: 'railway',
+            provider: technologyValue('technology-railway-e34d1c'),
             url: dep.url,
             status: mapRailwayState(dep.status ?? ''),
             createdAt: new Date().toISOString(),
@@ -124,7 +122,7 @@ export async function getRailwayDeploymentStatus(config, deploymentId) {
     catch (err) {
         return {
             id: deploymentId,
-            provider: 'railway',
+            provider: technologyValue('technology-railway-e34d1c'),
             status: 'error',
             createdAt: new Date().toISOString(),
             errorMessage: err instanceof Error ? err.message : String(err),

package/dist/engine/deploy/providers/vercel.js

@@ -1,6 +1,4 @@
-// engine/deploy/providers/vercel.ts — SPEC-478: Vercel deploy via API
-// SPEC-597-EXEMPT: provider-specific implementation; the literal 'vercel'
-// IS the canonical id for this module.
+import { technologyValue } from '../../technology-registry.js';
 /** Trigger a Vercel deployment by calling the deployments API. */
 export async function deployToVercel(config, options) {
     const url = new URL('https://api.vercel.com/v13/deployments');
@@ -28,7 +26,7 @@ export async function deployToVercel(config, options) {
             const text = await response.text();
             return {
                 id: `vercel-error-${String(Date.now())}`,
-                provider: 'vercel',
+                provider: technologyValue('technology-vercel-9d3508'),
                 status: 'error',
                 createdAt: new Date().toISOString(),
                 errorMessage: `Vercel API ${String(response.status)}: ${text.slice(0, 200)}`,
@@ -37,7 +35,7 @@ export async function deployToVercel(config, options) {
         const data = (await response.json());
         return {
             id: data.uid,
-            provider: 'vercel',
+            provider: technologyValue('technology-vercel-9d3508'),
             url: data.url ? `https://${data.url}` : undefined,
             status: mapVercelState(data.readyState ?? data.state ?? 'pending'),
             createdAt: new Date().toISOString(),
@@ -46,7 +44,7 @@ export async function deployToVercel(config, options) {
     catch (err) {
         return {
             id: `vercel-error-${String(Date.now())}`,
-            provider: 'vercel',
+            provider: technologyValue('technology-vercel-9d3508'),
             status: 'error',
             createdAt: new Date().toISOString(),
             errorMessage: err instanceof Error ? err.message : String(err),
@@ -68,7 +66,7 @@ export async function getVercelDeploymentStatus(config, deploymentId) {
         if (!response.ok) {
             return {
                 id: deploymentId,
-                provider: 'vercel',
+                provider: technologyValue('technology-vercel-9d3508'),
                 status: 'error',
                 createdAt: new Date().toISOString(),
                 errorMessage: `Vercel API ${String(response.status)}`,
@@ -77,7 +75,7 @@ export async function getVercelDeploymentStatus(config, deploymentId) {
         const data = (await response.json());
         return {
             id: data.uid,
-            provider: 'vercel',
+            provider: technologyValue('technology-vercel-9d3508'),
             url: data.url ? `https://${data.url}` : undefined,
             status: mapVercelState(data.readyState ?? data.state ?? 'pending'),
             createdAt: new Date().toISOString(),
@@ -86,7 +84,7 @@ export async function getVercelDeploymentStatus(config, deploymentId) {
     catch (err) {
         return {
             id: deploymentId,
-            provider: 'vercel',
+            provider: technologyValue('technology-vercel-9d3508'),
             status: 'error',
             createdAt: new Date().toISOString(),
             errorMessage: err instanceof Error ? err.message : String(err),

package/dist/engine/deprecation-scanner/pattern-loader.js

@@ -1,5 +1,3 @@
-// SPEC-597-EXEMPT: canonical mapping (npm-package↔framework, keyword catalogue)
-// — must enumerate framework names by design; no detection logic to migrate.
 // pattern-loader.ts — Load deprecation patterns from JSON config files (SPEC-041)
 import { readFile } from 'node:fs/promises';
 import { fileURLToPath } from 'node:url';

package/dist/engine/desktop-detector.js

@@ -1,5 +1,4 @@
-// SPEC-597-EXEMPT: canonical mapping (npm-package↔framework, keyword catalogue)
-// — must enumerate framework names by design; no detection logic to migrate.
+import { technologyValue } from './technology-registry.js';
 // engine/desktop-detector.ts — SPEC-014b desktop advanced detection
 // Detects IPC patterns, Tauri commands, .NET UI frameworks, macOS app types, Linux native frameworks.
 import { readFile } from 'node:fs/promises';
@@ -157,7 +156,7 @@ export async function detectMacOSAppType(projectPath) {
         if (content.includes('MenuBarExtra') || content.includes('NSStatusItem')) {
             return 'menu-bar';
         }
-        return 'swiftui';
+        return technologyValue('technology-swiftui-b63400');
     }
     if (content.includes('NSApplicationDelegate') || content.includes('NSViewController')) {
         return 'appkit';

package/dist/engine/detect-duplication.js

@@ -1,3 +1,4 @@
+import { technologyValue } from './technology-registry.js';
 // engine/detect-duplication.ts — SPEC-970: Token-based code duplication detection
 import { glob } from 'glob';
 import { createHash } from 'node:crypto';
@@ -5,7 +6,7 @@ import { readFile } from 'node:fs/promises';
 import { relative } from 'node:path';
 const DEFAULT_MIN_LINES = 5;
 const DEFAULT_EXCLUDE = ['node_modules/**', 'dist/**', '.git/**', 'tests/fixtures/**'];
-const DEFAULT_LANGUAGES = ['typescript', 'javascript'];
+const DEFAULT_LANGUAGES = [technologyValue('technology-typescript-969545'), 'javascript'];
 const LANGUAGE_EXTENSIONS = {
     typescript: ['.ts', '.tsx'],
     javascript: ['.js', '.jsx', '.mjs', '.cjs'],

package/dist/engine/detectors/advanced-framework-detector/css-state-detector.js

@@ -1,3 +1,4 @@
+import { technologyValue } from '../../technology-registry.js';
 // engine/detectors/advanced-framework-detector/css-state-detector.ts
 // Detects CSS-in-JS approaches and state management libraries.
 import { join } from 'node:path';
@@ -63,7 +64,7 @@ export function buildSignalSources(deps) {
     if (deps.has('solid-js')) {
         sources.push('SolidJS Signals: createSignal(), createMemo(), createEffect() from solid-js');
     }
-    if (deps.has('vue') || deps.has('@vue/reactivity')) {
+    if (deps.has(technologyValue('technology-vue-564382')) || deps.has('@vue/reactivity')) {
         sources.push('Vue Reactivity: ref(), computed(), reactive() from vue');
     }
     return sources;

package/dist/engine/detectors/advanced-framework-detector/legacy-detector.js

@@ -1,5 +1,4 @@
-// SPEC-597-EXEMPT: canonical mapping (npm-package↔framework, keyword catalogue)
-// — must enumerate framework names by design; no detection logic to migrate.
+import { technologyValue } from '../../technology-registry.js';
 // engine/detectors/advanced-framework-detector/legacy-detector.ts
 // Detects legacy frontend frameworks: jQuery, Backbone, Knockout, Ember, ExtJS, AngularJS 1.x.
 import { join } from 'node:path';
@@ -21,7 +20,7 @@ export function detectLegacyFrameworks(deps) {
     if (deps.has('@sencha/ext') || deps.has('extjs')) {
         found.push('extjs');
     }
-    if (deps.has('angular') && !deps.has('@angular/core')) {
+    if (deps.has(technologyValue('technology-angular-a39f89')) && !deps.has('@angular/core')) {
         found.push('angularjs-1');
     }
     return found;