@planu/cli 4.13.0 → 5.0.0

package/dist/tools/challenge-spec.js

@@ -19,6 +19,7 @@ import { analyzeMinimalImplementation, loadMinimalImplementationPolicy, } from '
 import { detectChallengeCapabilities, } from './challenge-spec/scenarios-utils.js';
 import { collectCapabilityScenarios } from './challenge-spec/scenario-collector.js';
 import { buildChallengeReport, parseChallengeResolutionEvidence, } from './challenge-spec/challenge-report.js';
+import { extractListItems, findMarkdownSectionRange, } from '../engine/spec-format/markdown-sections.js';
 const ALL_FOCUS_AREAS = [
     'failures',
     'concurrency',
@@ -150,11 +151,10 @@ export async function handleChallengeSpec(args, server) {
     failureScenarios.push(...collectCapabilityScenarios({ spec, specContent, knowledge, focusAreas, capabilities }));
     // SPEC-612: Check for contradictions between outOfScope and acceptance criteria
     if (spec.outOfScope !== undefined && spec.outOfScope.length > 0) {
-        const criteriaTexts = specContent
-            .split('\n')
-            .filter((line) => line.trim().startsWith('-') || line.trim().startsWith('*'))
-            .map((line) => line.replace(/^[\s\-*]+/, '').trim())
-            .filter((line) => line.length > 0);
+        const criteriaRange = findMarkdownSectionRange(specContent, 'Acceptance Criteria');
+        const criteriaTexts = criteriaRange === null
+            ? []
+            : extractListItems(specContent.slice(criteriaRange.contentStart, criteriaRange.end));
         const contradictionResult = checkScopeContradictions(spec.outOfScope, criteriaTexts);
         for (const c of contradictionResult.contradictions) {
             failureScenarios.push({

package/dist/tools/check-readiness.js

@@ -118,7 +118,7 @@ export async function handleCheckReadiness(args) {
         scoreSpecQuality(spec),
         validateSpecFormat(spec, { readinessMode: mode, skipQuality: true }),
     ]);
-    // SPEC-716: Ground ready flag in unified ValidationResult.
+    // SPEC-716: Ground ready flag in unified SpecValidationResult.
     // Only non-file-access errors from validateSpecFormat are surfaced in the
     // report — MISSING_FRONTMATTER due to file-not-found is best-effort since
     // the readiness checker already handles missing files gracefully.

package/dist/tools/clarify-requirements/multiple-choice.js

@@ -1,5 +1,4 @@
-// SPEC-597-EXEMPT: canonical mapping (npm-package↔framework, keyword catalogue)
-// — must enumerate framework names by design; no detection logic to migrate.
+import { technologyValue } from '../../engine/technology-registry.js';
 // tools/clarify-requirements/multiple-choice.ts — SPEC-337
 // Structured multiple-choice options for clarify_requirements interview mode.
 // Provides: per-question options[], stack detection, suggestedDescription builder.
@@ -7,23 +6,23 @@ import { readFile } from 'node:fs/promises';
 import { join } from 'node:path';
 const OPTIONS_CATALOG = {
     stack_frontend: [
-        'Next.js',
-        'Remix',
-        'Nuxt',
-        'SvelteKit',
-        'Astro',
+        technologyValue('technology-next-js-30b7f8'),
+        technologyValue('technology-remix-f84ed4'),
+        technologyValue('technology-nuxt-e88c87'),
+        technologyValue('technology-sveltekit-b62200'),
+        technologyValue('technology-astro-c490cc'),
         'Vite + React',
-        'Angular',
+        technologyValue('technology-angular-e79052'),
         'Other: ___',
     ],
     stack_backend: [
-        'Express',
-        'Fastify',
-        'NestJS',
+        technologyValue('technology-express-572a14'),
+        technologyValue('technology-fastify-ed8050'),
+        technologyValue('technology-nestjs-58b822'),
         'Hono',
-        'FastAPI',
-        'Django',
-        'Spring Boot',
+        technologyValue('technology-fastapi-2dd9eb'),
+        technologyValue('technology-django-4445d9'),
+        technologyValue('technology-spring-boot-8d9a80'),
         'Other: ___',
     ],
     stack_database: [
@@ -31,12 +30,20 @@ const OPTIONS_CATALOG = {
         'MySQL',
         'SQLite',
         'MongoDB',
-        'Redis',
-        'Supabase',
+        technologyValue('technology-redis-a7f641'),
+        technologyValue('technology-supabase-fe7ceb'),
         'PlanetScale',
         'Other: ___',
     ],
-    stack_language: ['TypeScript', 'JavaScript', 'Python', 'Go', 'Java', 'Rust', 'Other: ___'],
+    stack_language: [
+        technologyValue('technology-typescript-ed0504'),
+        'JavaScript',
+        'Python',
+        'Go',
+        'Java',
+        'Rust',
+        'Other: ___',
+    ],
     auth_method: [
         'Email + password',
         'Google OAuth',
@@ -101,35 +108,37 @@ export async function detectStack(projectPath) {
         result.detectedLibs = libs;
         // Framework detection
         if (libs.includes('next')) {
-            result.framework = 'Next.js';
+            result.framework = technologyValue('technology-next-js-30b7f8');
         }
         else if (libs.includes('@remix-run/react') || libs.includes('@remix-run/node')) {
-            result.framework = 'Remix';
+            result.framework = technologyValue('technology-remix-f84ed4');
         }
-        else if (libs.includes('nuxt')) {
-            result.framework = 'Nuxt';
+        else if (libs.includes(technologyValue('technology-nuxt-22c407'))) {
+            result.framework = technologyValue('technology-nuxt-e88c87');
         }
         else if (libs.includes('@sveltejs/kit')) {
-            result.framework = 'SvelteKit';
+            result.framework = technologyValue('technology-sveltekit-b62200');
         }
-        else if (libs.includes('astro')) {
-            result.framework = 'Astro';
+        else if (libs.includes(technologyValue('technology-astro-23661e'))) {
+            result.framework = technologyValue('technology-astro-c490cc');
         }
-        else if (libs.includes('fastify')) {
-            result.framework = 'Fastify';
+        else if (libs.includes(technologyValue('technology-fastify-cbe57e'))) {
+            result.framework = technologyValue('technology-fastify-ed8050');
         }
         else if (libs.includes('@nestjs/core')) {
-            result.framework = 'NestJS';
+            result.framework = technologyValue('technology-nestjs-58b822');
         }
-        else if (libs.includes('express')) {
-            result.framework = 'Express';
+        else if (libs.includes(technologyValue('technology-express-008231'))) {
+            result.framework = technologyValue('technology-express-572a14');
         }
         else if (libs.includes('hono')) {
             result.framework = 'Hono';
         }
         // Language (TypeScript presence)
-        if (libs.includes('typescript') || libs.includes('ts-node') || libs.includes('tsx')) {
-            result.language = 'TypeScript';
+        if (libs.includes(technologyValue('technology-typescript-969545')) ||
+            libs.includes('ts-node') ||
+            libs.includes('tsx')) {
+            result.language = technologyValue('technology-typescript-ed0504');
         }
         else {
             result.language = 'JavaScript';
@@ -144,14 +153,16 @@ export async function detectStack(projectPath) {
         else if (libs.includes('better-sqlite3') || libs.includes('sqlite3')) {
             result.database = 'SQLite';
         }
-        else if (libs.includes('mongoose') || libs.includes('mongodb')) {
+        else if (libs.includes(technologyValue('technology-mongoose-4e1812')) ||
+            libs.includes('mongodb')) {
             result.database = 'MongoDB';
         }
         else if (libs.includes('@supabase/supabase-js')) {
-            result.database = 'Supabase';
+            result.database = technologyValue('technology-supabase-fe7ceb');
         }
-        else if (libs.includes('ioredis') || libs.includes('redis')) {
-            result.database = 'Redis';
+        else if (libs.includes('ioredis') ||
+            libs.includes(technologyValue('technology-redis-34fb46'))) {
+            result.database = technologyValue('technology-redis-a7f641');
         }
     }
     catch {
@@ -162,16 +173,17 @@ export async function detectStack(projectPath) {
                 .split('\n')
                 .map((l) => (l.split('=')[0] ?? l).split('>')[0]?.split('<')[0]?.trim().toLowerCase() ?? '');
             result.detectedLibs = lines.filter(Boolean);
-            if (lines.includes('django') || lines.includes('django-rest-framework')) {
-                result.framework = 'Django';
+            if (lines.includes(technologyValue('technology-django-7d8a08')) ||
+                lines.includes('django-rest-framework')) {
+                result.framework = technologyValue('technology-django-4445d9');
                 result.language = 'Python';
             }
-            else if (lines.includes('fastapi')) {
-                result.framework = 'FastAPI';
+            else if (lines.includes(technologyValue('technology-fastapi-6aee0e'))) {
+                result.framework = technologyValue('technology-fastapi-2dd9eb');
                 result.language = 'Python';
             }
-            else if (lines.includes('flask')) {
-                result.framework = 'Flask';
+            else if (lines.includes(technologyValue('technology-flask-b87aa5'))) {
+                result.framework = technologyValue('technology-flask-c08622');
                 result.language = 'Python';
             }
             else {

package/dist/tools/comments-handler.js

@@ -1,11 +1,10 @@
-// tools/comments-handler.ts — Spec Comments tool handlers (SPEC-282)
-import { join } from 'node:path';
 import { addComment, listComments, resolveComment, replyComment, } from '../storage/comments-store.js';
+import { hashProjectPath, projectDataDir } from '../storage/base-store.js';
 // ---------------------------------------------------------------------------
 // Data directory helper
 // ---------------------------------------------------------------------------
 function getDataDir(projectPath) {
-    return join(projectPath, 'data');
+    return projectDataDir(hashProjectPath(projectPath));
 }
 // ---------------------------------------------------------------------------
 // add_comment handler

package/dist/tools/compliance-test-handler.js

@@ -1,4 +1,4 @@
-// tools/compliance-test-handler.ts — SPEC-390: Compliance Test Suite Generator handlers
+import { technologyValue } from '../engine/technology-registry.js';
 import { generateComplianceTests } from '../engine/compliance-test-generator/index.js';
 import { getControlsForFrameworks } from '../engine/compliance-test-generator/control-mapper.js';
 import { specStore } from '../storage/index.js';
@@ -17,7 +17,7 @@ export async function handleGenerateComplianceTests(input) {
             ],
         };
     }
-    const outputFormat = input.outputFormat ?? 'jest';
+    const outputFormat = input.outputFormat ?? technologyValue('technology-jest-35e99f');
     const result = await generateComplianceTests(spec.specPath, input.specId, input.frameworks, outputFormat);
     const fileLines = result.generatedFiles.map((f) => `  ${f.path} (${f.content.split('\n').length} lines)`);
     const coveredCount = result.coverageReport.filter((r) => r.covered).length;

package/dist/tools/configure-telemetry.js

@@ -1,19 +1,43 @@
-import { readTelemetryConfig, writeTelemetryConfig, getOrCreateInstallationId, } from '../engine/telemetry/index.js';
+import { readTelemetryConfig, writeTelemetryConfig, TELEMETRY_CONSENT_VERSION, } from '../engine/telemetry/index.js';
 import { compactResult, compactError, formatKeyValue } from './output-formatter.js';
+function isLoopbackHost(hostname) {
+    return hostname === 'localhost' || hostname === '127.0.0.1' || hostname === '[::1]';
+}
+function isTelemetryConfigured() {
+    const endpoint = process.env.PLANU_TELEMETRY_ENDPOINT?.trim();
+    const token = process.env.PLANU_TELEMETRY_TOKEN?.trim();
+    if (!endpoint || !token) {
+        return false;
+    }
+    try {
+        const parsed = new URL(endpoint);
+        return (parsed.username === '' &&
+            parsed.password === '' &&
+            (parsed.protocol === 'https:' ||
+                (parsed.protocol === 'http:' && isLoopbackHost(parsed.hostname))));
+    }
+    catch {
+        return false;
+    }
+}
 export async function handleConfigureTelemetry(input) {
     try {
-        const installationId = await getOrCreateInstallationId();
         const existing = await readTelemetryConfig();
+        const enabled = existing?.enabled === true && existing.consentVersion === TELEMETRY_CONSENT_VERSION;
+        const configured = isTelemetryConfigured();
         if (input.action === 'status') {
             const observatoryStatus = existing?.enableObservatory === true
                 ? ' Observatory: ENABLED (cross-project insights active).'
                 : ' Observatory: DISABLED (use enableObservatory=true to opt in).';
             const result = {
                 action: 'status',
-                enabled: existing?.enabled ?? false,
-                installationId,
-                message: (existing?.enabled
-                    ? 'Telemetry is ENABLED. Anonymous usage events are being sent to help improve Planu.'
+                enabled,
+                configured,
+                consentVersion: existing?.consentVersion,
+                message: (enabled
+                    ? configured
+                        ? 'Telemetry is ENABLED and configured. Anonymous usage events may be sent to help improve Planu.'
+                        : 'Telemetry consent is ENABLED, but delivery is inactive: configure valid PLANU_TELEMETRY_ENDPOINT and PLANU_TELEMETRY_TOKEN values.'
                     : 'Telemetry is DISABLED. No data is being collected.') + observatoryStatus,
             };
             return compactResult(formatKeyValue(result));
@@ -21,8 +45,8 @@ export async function handleConfigureTelemetry(input) {
         if (input.action === 'enable') {
             await writeTelemetryConfig({
                 enabled: true,
-                installationId,
                 promptedAt: existing?.promptedAt ?? new Date().toISOString(),
+                consentVersion: TELEMETRY_CONSENT_VERSION,
                 enableObservatory: input.enableObservatory ?? existing?.enableObservatory,
             });
             const observatoryNote = input.enableObservatory === true
@@ -31,10 +55,13 @@ export async function handleConfigureTelemetry(input) {
             const result = {
                 action: 'enable',
                 enabled: true,
-                installationId,
-                message: 'Telemetry ENABLED. Thank you! Only anonymous usage data is collected — ' +
-                    'no paths, emails, or personal info. Your installation ID is ' +
-                    `${installationId}. Run configure_telemetry with action=disable to opt out anytime.` +
+                configured,
+                consentVersion: TELEMETRY_CONSENT_VERSION,
+                message: (configured
+                    ? 'Telemetry ENABLED and configured. Only anonymous usage data is collected — '
+                    : 'Telemetry consent ENABLED, but delivery is inactive until valid PLANU_TELEMETRY_ENDPOINT and PLANU_TELEMETRY_TOKEN values are configured. ') +
+                    'no paths, emails, identifiers, source content, or raw errors. ' +
+                    'Run configure_telemetry with action=disable to opt out anytime.' +
                     observatoryNote,
             };
             return compactResult(formatKeyValue(result));
@@ -42,14 +69,15 @@ export async function handleConfigureTelemetry(input) {
         // disable
         await writeTelemetryConfig({
             enabled: false,
-            installationId,
             promptedAt: existing?.promptedAt ?? new Date().toISOString(),
+            consentVersion: existing?.consentVersion,
             enableObservatory: existing?.enableObservatory,
         });
         const result = {
             action: 'disable',
             enabled: false,
-            installationId,
+            configured,
+            consentVersion: existing?.consentVersion,
             message: 'Telemetry DISABLED. No usage data will be sent.',
         };
         return compactResult(formatKeyValue(result));

package/dist/tools/create-spec/auto-pipeline.js

@@ -207,8 +207,17 @@ export async function runAutoPostCreatePipeline(specId, projectId, _projectPath)
     const timeout = setTimeout(() => {
         controller.abort(abortError(`Auto-pipeline timeout (${String(AUTO_PIPELINE_TIMEOUT_MS / 1000)}s)`));
     }, AUTO_PIPELINE_TIMEOUT_MS);
+    let rejectOnAbort;
+    const aborted = new Promise((_resolve, reject) => {
+        rejectOnAbort = () => {
+            reject(controller.signal.reason instanceof Error
+                ? controller.signal.reason
+                : abortError('Auto-pipeline aborted'));
+        };
+        controller.signal.addEventListener('abort', rejectOnAbort, { once: true });
+    });
     try {
-        return await runPipelineInternal(specId, projectId, controller.signal);
+        return await Promise.race([runPipelineInternal(specId, projectId, controller.signal), aborted]);
     }
     catch (err) {
         if (err instanceof Error && err.name === 'AbortError') {
@@ -229,6 +238,9 @@ export async function runAutoPostCreatePipeline(specId, projectId, _projectPath)
     }
     finally {
         clearTimeout(timeout);
+        if (rejectOnAbort) {
+            controller.signal.removeEventListener('abort', rejectOnAbort);
+        }
     }
 }
 //# sourceMappingURL=auto-pipeline.js.map

package/dist/tools/create-spec/autopilot-analyzer.d.ts

@@ -20,7 +20,7 @@ export declare function getEmptyAutopilotResult(): AutopilotAnalysis;
  * Analyze the project to enrich a spec with real file paths and patterns.
  * Runs automatically during create_spec — no user interaction needed.
  */
-export declare function analyzeProjectForSpec(projectPath: string, description: string, title: string, _knowledge: ProjectKnowledge | null): Promise<AutopilotAnalysis>;
+export declare function analyzeProjectForSpec(projectPath: string, description: string, title: string, _knowledge: ProjectKnowledge | null, signal?: AbortSignal): Promise<AutopilotAnalysis>;
 /**
  * SPEC-619 AC1: Detect broad-scope descriptions that mention 2+ major subsystems.
  * When true, create_spec should ask clarifying questions before proceeding.

package/dist/tools/create-spec/autopilot-analyzer.js

@@ -1,5 +1,3 @@
-// SPEC-597-EXEMPT: canonical mapping (npm-package↔framework, keyword catalogue)
-// — must enumerate framework names by design; no detection logic to migrate.
 // tools/create-spec/autopilot-analyzer.ts — SPEC-461 Phase 3: Autopilot analysis for create_spec
 // Analyzes project code to suggest real files, detect patterns, and enrich specs automatically.
 import { relative, extname } from 'node:path';
@@ -19,7 +17,7 @@ export function getEmptyAutopilotResult() {
  * Analyze the project to enrich a spec with real file paths and patterns.
  * Runs automatically during create_spec — no user interaction needed.
  */
-export async function analyzeProjectForSpec(projectPath, description, title, _knowledge) {
+export async function analyzeProjectForSpec(projectPath, description, title, _knowledge, signal) {
     const result = {
         suggestedFiles: { create: [], modify: [], test: [] },
         detectedPatterns: [],
@@ -46,7 +44,7 @@ export async function analyzeProjectForSpec(projectPath, description, title, _kn
     const keywords = extractKeywordsScorer(`${title} ${description}`);
     // Scan project files to find semantically related ones
     try {
-        const relatedFiles = await findRelevantFiles(projectPath, keywords, 10);
+        const relatedFiles = await findRelevantFiles(projectPath, keywords, 10, signal);
         if (relatedFiles.length === 0) {
             result.noRelatedFilesMessage =
                 'No related files detected — please populate ## Technical manually';

package/dist/tools/create-spec/mcp-tool-contract.d.ts

@@ -1,13 +1,19 @@
-import type { ProjectKnowledge, ToolContract } from '../../types/index.js';
+import type { ProjectKnowledge, ToolContract, MCPErrorCode } from '../../types/index.js';
 export declare function isMcpToolContract(knowledge: ProjectKnowledge | null): boolean;
+export interface McpToolContractOptions {
+    /** Explicit effects declared by the caller; descriptions are never treated as executable metadata. */
+    sideEffects?: readonly string[];
+    /** Explicit protocol errors beyond the safe default contract. */
+    errorCodes?: readonly MCPErrorCode[];
+}
 /**
  * Generate a ToolContract for an MCP tool.
  * Criterion 4: name, description, inputSchema (Zod), outputSchema, side effects, error codes, timeout.
  */
-export declare function generateMcpToolContract(toolName: string, description: string, inputFields: string[]): ToolContract;
-export declare function formatMcpToolContractAsMarkdown(tools: {
+export declare function generateMcpToolContract(toolName: string, description: string, inputFields: string[], options?: McpToolContractOptions): ToolContract;
+export declare function formatMcpToolContractAsMarkdown(tools: ({
     name: string;
     description: string;
     fields: string[];
-}[], knowledge: ProjectKnowledge): string;
+} & McpToolContractOptions)[], knowledge: ProjectKnowledge): string;
 //# sourceMappingURL=mcp-tool-contract.d.ts.map

package/dist/tools/create-spec/mcp-tool-contract.js

@@ -2,6 +2,7 @@
 // SPEC-016b: Generates Tool Contracts for MCP tools.
 // Criterion 4: define_ui_contract generates "Tool Contract" for MCP servers.
 import { isMcpServerProject } from '../../engine/detectors/mcp-server-detector.js';
+import { getRuntimePolicy } from '../../engine/runtime-policy.js';
 // === Detection ===
 export function isMcpToolContract(knowledge) {
     if (!knowledge) {
@@ -10,42 +11,12 @@ export function isMcpToolContract(knowledge) {
     return isMcpServerProject(knowledge);
 }
 // === Tool Contract builder ===
-function buildErrorCodes(toolName, description) {
-    const codes = ['InvalidParams', 'InternalError'];
-    const lower = description.toLowerCase();
-    if (lower.includes('not found') ||
-        lower.includes('missing') ||
-        lower.includes(toolName.toLowerCase())) {
-        codes.push('MethodNotFound');
-    }
-    // Deduplicate
-    return [...new Set(codes)];
-}
-function buildSideEffects(description) {
-    const lower = description.toLowerCase();
-    const effects = [];
-    if (lower.includes('write') || lower.includes('create') || lower.includes('save')) {
-        effects.push('filesystem-write');
-    }
-    if (lower.includes('delete') || lower.includes('remove')) {
-        effects.push('filesystem-delete');
-    }
-    if (lower.includes('http') || lower.includes('fetch') || lower.includes('api')) {
-        effects.push('network-call');
-    }
-    if (lower.includes('database') || lower.includes('db') || lower.includes('query')) {
-        effects.push('database-read');
-    }
-    if (lower.includes('email') || lower.includes('notify') || lower.includes('send')) {
-        effects.push('external-service-call');
-    }
-    return effects;
-}
+const DEFAULT_ERROR_CODES = ['InvalidParams', 'InternalError'];
 /**
  * Generate a ToolContract for an MCP tool.
  * Criterion 4: name, description, inputSchema (Zod), outputSchema, side effects, error codes, timeout.
  */
-export function generateMcpToolContract(toolName, description, inputFields) {
+export function generateMcpToolContract(toolName, description, inputFields, options = {}) {
     const inputSchema = {};
     for (const field of inputFields) {
         inputSchema[field] = {
@@ -79,9 +50,9 @@ export function generateMcpToolContract(toolName, description, inputFields) {
             },
             required: ['content'],
         },
-        sideEffects: buildSideEffects(description),
-        errorCodes: buildErrorCodes(toolName, description),
-        timeoutMs: 30000,
+        sideEffects: [...new Set(options.sideEffects ?? [])],
+        errorCodes: [...new Set(options.errorCodes ?? DEFAULT_ERROR_CODES)],
+        timeoutMs: getRuntimePolicy().toolExecution.defaultTimeoutMs,
     };
 }
 // === Formatted output for define_ui_contract ===
@@ -93,7 +64,7 @@ export function formatMcpToolContractAsMarkdown(tools, knowledge) {
         '',
     ];
     for (const tool of tools) {
-        const contract = generateMcpToolContract(tool.name, tool.description, tool.fields);
+        const contract = generateMcpToolContract(tool.name, tool.description, tool.fields, tool);
         lines.push(`### Tool: \`${contract.name}\``);
         lines.push('');
         lines.push(`**Description**: ${contract.description}`);

package/dist/tools/create-spec/post-creation.d.ts

@@ -20,5 +20,6 @@ export declare function formatPostCreationSuggestion(suggestion: PostCreationSug
  * Writes results to Planu's external project data dir and appends an
  * autopilot-log entry on completion. Never throws — fully best-effort.
  */
-export declare function runAutopilotAsync(specId: string, projectPath: string, _description: string): void;
+export declare function runAutopilotAnalysis(specId: string, projectPath: string, description: string): Promise<void>;
+export declare function runAutopilotAsync(specId: string, projectPath: string, description: string): void;
 //# sourceMappingURL=post-creation.d.ts.map