@planu/cli 4.13.0 → 5.0.0

package/dist/tools/generate-tests/generators/llm-security-test-generator.js

@@ -1,5 +1,4 @@
-// tools/generate-tests/generators/llm-security-test-generator.ts — SPEC-045
-// Generates LLM security baseline test scaffolds.
+import { technologyValue } from '../../../engine/technology-registry.js';
 // Security baseline comment prepended to generated test files
 const SECURITY_BASELINE_COMMENT = '// Security baseline — complement with formal pentest';
 /**
@@ -200,7 +199,9 @@ export function generateLlmSecurityTestFiles(spec, testDir, language, autoGenera
     const slug = spec.id.toLowerCase().replace(/[^a-z0-9]/g, '-');
     const ext = getFileExtension(language);
     const content = generateLlmSecurityTestContent(spec.title, language);
-    const framework = language === 'python' ? 'pytest' : 'vitest';
+    const framework = language === 'python'
+        ? technologyValue('technology-pytest-2b0121')
+        : technologyValue('technology-vitest-a9127f');
     return [
         {
             path: `${testDir}/security/${slug}.llm-security.${ext}`,

package/dist/tools/generate-tests/generators/local-first-test-generator.js

@@ -1,5 +1,4 @@
-// tools/generate-tests/generators/local-first-test-generator.ts — SPEC-047
-// Generates local-first property-based tests and offline test scaffolds.
+import { technologyValue } from '../../../engine/technology-registry.js';
 const PBT_COMMENT = '// Property-based tests — complement with fast-check or similar library';
 /**
  * Returns true when the project has local-first architecture detected.
@@ -297,7 +296,9 @@ export function generateLocalFirstTestFiles(spec, testDir, language, autoGenerat
     const slug = spec.id.toLowerCase().replace(/[^a-z0-9]/g, '-');
     const ext = getFileExtension(language);
     const content = generateLocalFirstTestContent(spec.title, language);
-    const framework = language === 'python' ? 'pytest' : 'vitest';
+    const framework = language === 'python'
+        ? technologyValue('technology-pytest-2b0121')
+        : technologyValue('technology-vitest-a9127f');
     return [
         {
             path: `${testDir}/local-first/${slug}.local-first.${ext}`,

package/dist/tools/generate-tests/generators/mcp-tests-generator.js

@@ -1,6 +1,4 @@
-// tools/generate-tests/generators/mcp-tests-generator.ts
-// SPEC-016b: Generates test scaffolds for MCP servers.
-// Criterion 6: tool registration, valid call, invalid call, resource read, e2e smoke test.
+import { technologyValue } from '../../../engine/technology-registry.js';
 import { isMcpServerProject } from '../../../engine/detectors/mcp-server-detector.js';
 // === Detection ===
 export function isMcpProject(knowledge) {
@@ -69,9 +67,11 @@ export function generateMcpTestDefs(title, testDir) {
 }
 // === Test file content generators ===
 function buildImportLine(testFramework, language) {
-    const isVitest = testFramework === 'vitest';
-    const source = isVitest ? 'vitest' : 'jest';
-    if (language === 'typescript') {
+    const isVitest = testFramework === technologyValue('technology-vitest-a9127f');
+    const source = isVitest
+        ? technologyValue('technology-vitest-a9127f')
+        : technologyValue('technology-jest-35e99f');
+    if (language === technologyValue('technology-typescript-969545')) {
         return `import { describe, it, expect, beforeAll, afterAll } from '${source}';`;
     }
     return `const { describe, it, expect, beforeAll, afterAll } = require('${source}');`;
@@ -152,8 +152,10 @@ function buildMcpUnitTestContent(title, testFramework, language) {
     return lines.join('\n');
 }
 function buildMcpIntegrationTestContent(title, testFramework) {
-    const isVitest = testFramework === 'vitest';
-    const source = isVitest ? 'vitest' : 'jest';
+    const isVitest = testFramework === technologyValue('technology-vitest-a9127f');
+    const source = isVitest
+        ? technologyValue('technology-vitest-a9127f')
+        : technologyValue('technology-jest-35e99f');
     const lines = [
         `// Integration tests for MCP server: ${title}`,
         '// SPEC-016b: E2E initialize handshake, resource reads, concurrent calls',
@@ -218,7 +220,7 @@ function buildMcpIntegrationTestContent(title, testFramework) {
 // === TestFile builders ===
 export function generateMcpTestFiles(spec, testDir, testFramework, language) {
     const slug = spec.id.toLowerCase().replace(/[^a-z0-9]/g, '-');
-    const ext = language === 'typescript' ? 'ts' : 'js';
+    const ext = language === technologyValue('technology-typescript-969545') ? 'ts' : 'js';
     return [
         {
             path: `${testDir}/unit/${slug}.mcp.test.${ext}`,

package/dist/tools/generate-tests/generators/microservices/index.js

@@ -1,5 +1,4 @@
-// tools/generate-tests/generators/microservices/index.ts — SPEC-058b Section E
-// Public API for the microservices test generator. Re-exports all public symbols.
+import { technologyValue } from '../../../../engine/technology-registry.js';
 import { detectBroker, detectServiceMesh } from './detectors.js';
 import { buildTsMicroservicesTest } from './ts-scaffold.js';
 import { buildPythonMicroservicesTest } from './python-scaffold.js';
@@ -10,7 +9,7 @@ export function generateMicroservicesTestFiles(spec, testDir, framework, languag
     const mesh = detectServiceMesh(knowledge);
     const isPython = language === 'python';
     const ext = isPython ? 'py' : testExt;
-    const fw = isPython ? 'pytest' : framework;
+    const fw = isPython ? technologyValue('technology-pytest-2b0121') : framework;
     const content = isPython
         ? buildPythonMicroservicesTest(spec.title, broker, mesh)
         : buildTsMicroservicesTest(spec.title, broker, mesh);

package/dist/tools/generate-tests/generators/otel-test-generator.js

@@ -1,5 +1,4 @@
-// tools/generate-tests/generators/otel-test-generator.ts — SPEC-044
-// Generates instrumentation test scaffolds for projects with OpenTelemetry.
+import { technologyValue } from '../../../engine/technology-registry.js';
 /**
  * Returns true when the project has OTel installed.
  */
@@ -259,7 +258,11 @@ export function generateOtelTestFiles(spec, testDir, language, autoGenerate) {
     const slug = spec.id.toLowerCase().replace(/[^a-z0-9]/g, '-');
     const ext = getFileExtension(language);
     const content = generateOtelTestContent(spec.title, language);
-    const framework = language === 'python' ? 'pytest' : language === 'go' ? 'go-test' : 'vitest';
+    const framework = language === 'python'
+        ? technologyValue('technology-pytest-2b0121')
+        : language === 'go'
+            ? 'go-test'
+            : technologyValue('technology-vitest-a9127f');
     return [
         {
             path: `${testDir}/instrumentation/${slug}.otel.${ext}`,

package/dist/tools/generate-tests/generators/security/detectors.js

@@ -1,7 +1,4 @@
-// SPEC-597-EXEMPT: canonical mapping (npm-package↔framework, keyword catalogue)
-// — must enumerate framework names by design; no detection logic to migrate.
-// security/detectors.ts — SPEC-058b Section G
-// Signal constants and detector functions for auth, file upload, and API presence.
+import { technologyValue } from '../../../../engine/technology-registry.js';
 export const AUTH_SIGNALS = [
     'jwt',
     'oauth',
@@ -9,7 +6,7 @@ export const AUTH_SIGNALS = [
     'keycloak',
     'auth0',
     'clerk',
-    'supabase',
+    technologyValue('technology-supabase-4d7594'),
     'session',
     'cookie-session',
     'express-session',

package/dist/tools/generate-tests/generators/security/index.js

@@ -1,6 +1,4 @@
-// security/index.ts — SPEC-058b Section G
-// Public API: re-exports all security generator functions and
-// implements generateSecurityTestFiles() as the main entry point.
+import { technologyValue } from '../../../../engine/technology-registry.js';
 import { detectAuth, detectFileUpload, hasPublicApi } from './detectors.js';
 import { buildTsSecurityTest } from './ts-scaffold.js';
 import { buildPythonSecurityTest } from './python-scaffold.js';
@@ -12,7 +10,7 @@ export function generateSecurityTestFiles(spec, testDir, framework, language, te
     const publicApi = hasPublicApi(knowledge);
     const isPython = language === 'python';
     const ext = isPython ? 'py' : testExt;
-    const fw = isPython ? 'pytest' : framework;
+    const fw = isPython ? technologyValue('technology-pytest-2b0121') : framework;
     const content = isPython
         ? buildPythonSecurityTest(spec.title, auth, upload, publicApi)
         : buildTsSecurityTest(spec.title, auth, upload, publicApi);

package/dist/tools/generate-tests/generators/supply-chain-test-generator.js

@@ -1,5 +1,4 @@
-// tools/generate-tests/generators/supply-chain-test-generator.ts — SPEC-046
-// Generates supply chain validation runbook and test definitions.
+import { technologyValue } from '../../../engine/technology-registry.js';
 /**
  * Returns true when the project has supply chain gaps detected.
  */
@@ -139,7 +138,7 @@ function getRunbookExtension(_language) {
 export function generateSupplyChainTestFiles(spec, testDir, language, autoGenerate) {
     const slug = spec.id.toLowerCase().replace(/[^a-z0-9]/g, '-');
     const ext = getRunbookExtension(language);
-    const content = language === 'typescript' || language === 'javascript'
+    const content = language === technologyValue('technology-typescript-969545') || language === 'javascript'
         ? generateNodeRunbook(spec.title, slug)
         : generateGenericRunbook(spec.title, slug, language);
     return [

package/dist/tools/generate-tests/generators/visual-regression-generator.js

@@ -1,29 +1,26 @@
-// SPEC-597-EXEMPT: canonical mapping (npm-package↔framework, keyword catalogue)
-// — must enumerate framework names by design; no detection logic to migrate.
-// tools/generate-tests/generators/visual-regression-generator.ts — SPEC-058a Section C
-// Generates visual regression and frontend screenshot test scaffolds.
+import { technologyValue } from '../../../engine/technology-registry.js';
 const UI_FRAMEWORKS = [
-    'react',
-    'vue',
-    'angular',
-    'svelte',
+    technologyValue('technology-react-275976'),
+    technologyValue('technology-vue-564382'),
+    technologyValue('technology-angular-a39f89'),
+    technologyValue('technology-svelte-c190ac'),
     'next',
-    'nextjs',
-    'next.js',
-    'nuxt',
-    'sveltekit',
+    technologyValue('technology-nextjs-c93379'),
+    technologyValue('technology-next-js-0d857f'),
+    technologyValue('technology-nuxt-22c407'),
+    technologyValue('technology-sveltekit-eefb03'),
     'svelte-kit',
     'solid',
     'solidjs',
     'preact',
     'qwik',
-    'remix',
+    technologyValue('technology-remix-0c5d96'),
     'gatsby',
-    'astro',
+    technologyValue('technology-astro-23661e'),
 ];
 const DARK_MODE_SIGNALS = [
-    'tailwind',
-    'shadcn',
+    technologyValue('technology-tailwind-44c8cf'),
+    technologyValue('technology-shadcn-d27663'),
     'radix',
     'mui',
     'chakra',
@@ -290,7 +287,7 @@ function getFileExtension(language) {
  */
 export function generateVisualRegressionTestFiles(spec, testDir, framework, language, testExt, autoGenerate) {
     const ext = language === 'python' ? 'py' : getFileExtension(language);
-    const resolvedFramework = framework === 'cypress' ? 'cypress' : 'playwright';
+    const resolvedFramework = framework === 'cypress' ? 'cypress' : technologyValue('technology-playwright-7827e8');
     const content = generateVisualTestContent(spec.title, spec.slug, framework, language);
     return [
         {

package/dist/tools/generate-tests/generators/websocket-test-generator.js

@@ -1,5 +1,4 @@
-// tools/generate-tests/generators/websocket-test-generator.ts — SPEC-058a Section D
-// Generates WebSocket test scaffolds: connection lifecycle, reconnection, ordering, heartbeat.
+import { technologyValue } from '../../../engine/technology-registry.js';
 const WS_SIGNALS = [
     'ws',
     'socket.io',
@@ -227,7 +226,7 @@ class Test${cls}WebSocket:
 export function generateWebSocketTestFiles(spec, testDir, framework, language, testExt, autoGenerate) {
     const isPython = language === 'python';
     const resolvedExt = isPython ? 'py' : testExt;
-    const resolvedFramework = isPython ? 'pytest' : framework;
+    const resolvedFramework = isPython ? technologyValue('technology-pytest-2b0121') : framework;
     const content = isPython
         ? buildPythonWebSocketTest(spec.title)
         : buildTsWebSocketTest(spec.title);

package/dist/tools/generate-tests/test-helpers.js

@@ -1,19 +1,18 @@
-// tools/generate-tests/test-helpers.ts — Shared helpers for generate-tests
-// Extracted from generate-tests.ts to stay under 400-line limit
+import { technologyValue } from '../../engine/technology-registry.js';
 export function inferTestFramework(language, stack) {
-    if (stack.includes('vitest')) {
-        return 'vitest';
+    if (stack.includes(technologyValue('technology-vitest-a9127f'))) {
+        return technologyValue('technology-vitest-a9127f');
     }
-    if (stack.includes('jest')) {
-        return 'jest';
+    if (stack.includes(technologyValue('technology-jest-35e99f'))) {
+        return technologyValue('technology-jest-35e99f');
     }
-    if (stack.includes('pytest')) {
-        return 'pytest';
+    if (stack.includes(technologyValue('technology-pytest-2b0121'))) {
+        return technologyValue('technology-pytest-2b0121');
     }
     const defaults = {
-        typescript: 'vitest',
-        javascript: 'vitest',
-        python: 'pytest',
+        typescript: technologyValue('technology-vitest-a9127f'),
+        javascript: technologyValue('technology-vitest-a9127f'),
+        python: technologyValue('technology-pytest-2b0121'),
         go: 'go-test',
         rust: 'cargo-test',
         java: 'junit',
@@ -21,7 +20,7 @@ export function inferTestFramework(language, stack) {
         swift: 'xctest',
         dart: 'flutter-test',
     };
-    return defaults[language] ?? 'vitest';
+    return defaults[language] ?? technologyValue('technology-vitest-a9127f');
 }
 export function inferTestDir(language) {
     const dirs = {

package/dist/tools/generate-tests-content.js

@@ -1,3 +1,4 @@
+import { technologyValue } from '../engine/technology-registry.js';
 // tools/generate-tests-content.ts — Test scaffold content generators
 // Pure functions that return test file content strings
 import { generateXCTestContent, generateAndroidTestContent } from './generate-tests-mobile.js';
@@ -15,7 +16,7 @@ export function generateUnitTestContent(title, _target, framework, language) {
     if (language === 'kotlin' && framework.includes('junit')) {
         return generateAndroidTestContent(title, 'unit', 'compose', 'mockk');
     }
-    if (framework === 'pytest') {
+    if (framework === technologyValue('technology-pytest-2b0121')) {
         return `# Unit tests for: ${title}
 # Generated by Planu SDD MCP Server
 
@@ -85,7 +86,7 @@ describe('${title}', () => {
 `;
 }
 export function generateIntegrationTestContent(title, framework, _language) {
-    if (framework === 'pytest') {
+    if (framework === technologyValue('technology-pytest-2b0121')) {
         return `# Integration tests for: ${title}
 # Generated by Planu SDD MCP Server
 
@@ -182,7 +183,7 @@ export function buildTestCommands(existingCmd, framework) {
     const frameworkCmds = {
         vitest: ['npx vitest run', 'npx vitest run --coverage'],
         jest: ['npx jest', 'npx jest --coverage'],
-        pytest: ['pytest', 'pytest --cov'],
+        pytest: [technologyValue('technology-pytest-2b0121'), 'pytest --cov'],
         'go-test': ['go test ./...', 'go test -cover ./...'],
         'cargo-test': ['cargo test'],
     };

package/dist/tools/generate-tests.js

@@ -1,3 +1,4 @@
+import { technologyValue } from '../engine/technology-registry.js';
 // tools/generate-tests.ts — Generate test scaffold from spec
 // Uses project knowledge + spec to create test definitions
 import { t, ti } from '../i18n/index.js';
@@ -66,11 +67,11 @@ export async function handleGenerateTests(args) {
     }
     // E2E test file
     if (spec.target === 'frontend' || spec.target === 'fullstack') {
-        const e2eFramework = knowledge.stack.includes('playwright')
-            ? 'playwright'
+        const e2eFramework = knowledge.stack.includes(technologyValue('technology-playwright-7827e8'))
+            ? technologyValue('technology-playwright-7827e8')
             : knowledge.stack.includes('cypress')
                 ? 'cypress'
-                : 'playwright';
+                : technologyValue('technology-playwright-7827e8');
         testFiles.push({
             path: `${testDir}/e2e/${slug}.e2e.test.${testExt}`,
             framework: e2eFramework,
@@ -149,7 +150,9 @@ export async function handleGenerateTests(args) {
         for (const file of result.testFiles) {
             lines.push(`#### \`${file.path}\``);
             lines.push('');
-            const ext = file.path.endsWith('.py') ? 'python' : 'typescript';
+            const ext = file.path.endsWith('.py')
+                ? 'python'
+                : technologyValue('technology-typescript-969545');
             lines.push(`\`\`\`${ext}`);
             lines.push(file.content);
             lines.push('```');

package/dist/tools/git/branch-ops.d.ts

@@ -1,5 +1,5 @@
 import type { ToolResult, GitConfig } from '../../types/index.js';
-export declare function handleCreateBranch(projectId: string, specId: string | undefined, config?: GitConfig): Promise<ToolResult>;
+export declare function handleCreateBranch(projectId: string, specId: string | undefined, config?: GitConfig, resolvedProjectPath?: string): Promise<ToolResult>;
 export declare function handleCheckBranch(projectId: string, _specId: string | undefined, config?: GitConfig): Promise<ToolResult>;
 /**
  * Auto-setup: detect git workflow, sync base branch, create feature branch.

package/dist/tools/git/branch-ops.js

@@ -19,11 +19,12 @@ function randomSuffix() {
         .toString(16)
         .padStart(8, '0');
 }
-export async function handleCreateBranch(projectId, specId, config) {
+export async function handleCreateBranch(projectId, specId, config, resolvedProjectPath) {
     if (!specId) {
         return compactError('❌ Error: specId is required for create-branch action');
     }
-    const projectPath = await resolveProjectPath(projectId);
+    const suppliedPath = resolvedProjectPath?.trim();
+    const projectPath = suppliedPath && suppliedPath.length > 0 ? suppliedPath : await resolveProjectPath(projectId);
     const spec = await specStore.getSpec(projectId, specId);
     if (!spec) {
         return compactError(`❌ Error: Spec '${specId}' not found`);

package/dist/tools/git/git-helpers.d.ts

@@ -1,6 +1,4 @@
-import { execFile as execFileCb } from 'node:child_process';
 import type { GitConfig, GitFlowType } from '../../types/index.js';
-export declare const execFile: typeof execFileCb.__promisify__;
 export interface GitExecutionOptions {
     signal?: AbortSignal;
     timeoutMs?: number;

package/dist/tools/git/git-helpers.js

@@ -1,8 +1,5 @@
-// tools/git/git-helpers.ts — Shared git utilities
-import { execFile as execFileCb } from 'node:child_process';
-import { promisify } from 'node:util';
 import { knowledgeStore } from '../../storage/index.js';
-export const execFile = promisify(execFileCb);
+import { runAbortableProcess } from '../../engine/abortable-process-runner.js';
 /** Default branch prefixes by spec type. */
 export const DEFAULT_BRANCH_PREFIXES = {
     feature: 'feat',
@@ -19,12 +16,15 @@ export const DEFAULT_STALENESS_THRESHOLD = 50;
 /** Execute a git command in the project directory. */
 export async function git(projectPath, args, options = {}) {
     try {
-        const result = await execFile('git', args, {
+        const result = await runAbortableProcess('git', args, {
             cwd: projectPath,
-            maxBuffer: 1024 * 1024 * 10,
-            timeout: options.timeoutMs ?? 30_000,
+            maxBufferBytes: 1024 * 1024 * 10,
+            timeoutMs: options.timeoutMs ?? 30_000,
             signal: options.signal,
         });
+        if (result.status !== 0 || result.error) {
+            throw result.error ?? new Error(result.stderr || `git exited with ${String(result.status)}`);
+        }
         return { stdout: result.stdout, stderr: result.stderr };
     }
     catch (err) {

package/dist/tools/github-pr-handler.js

@@ -4,12 +4,19 @@ import { detectAuth } from '../engine/github/auth.js';
 import { generatePRTitle, generatePRBody } from '../engine/github/pr-template.js';
 import { findLinkedPRs } from '../engine/github/spec-linker.js';
 import { validateSpecFormat } from '../core/spec-validator.js';
-import { execFile as nodeExecFile } from 'node:child_process';
-import { promisify } from 'node:util';
 import { readFile } from 'node:fs/promises';
+import { runAbortableProcess } from '../engine/abortable-process-runner.js';
 /* v8 ignore next 3 -- default exec, always overridden in tests */
 const defaultExec = async (cmd, args) => {
-    return promisify(nodeExecFile)(cmd, args, { maxBuffer: 10 * 1024 * 1024 });
+    const result = await runAbortableProcess(cmd, args, {
+        cwd: process.cwd(),
+        timeoutMs: 30_000,
+        maxBufferBytes: 10 * 1024 * 1024,
+    });
+    if (result.status !== 0 || result.error) {
+        throw result.error ?? new Error(result.stderr || `${cmd} exited with ${String(result.status)}`);
+    }
+    return { stdout: result.stdout, stderr: result.stderr };
 };
 export async function handleCreatePRFromSpec(args, exec = defaultExec) {
     const auth = await detectAuth(exec);

package/dist/tools/heal-spec-docs.js

@@ -2,7 +2,7 @@
 // SPEC-715: heal_spec_docs is now the SINGLE tool that performs migrations.
 //           list_specs is read-only; migrations were moved here.
 // SPEC-724: Added dryRun, backup flags and Jaccard goal-scenario drift warning.
-import { readFile, readdir, rm } from 'node:fs/promises';
+import { readFile, readdir } from 'node:fs/promises';
 import { atomicWriteFile } from '../engine/safety/atomic-write-file.js';
 import { join } from 'node:path';
 import { hashProjectPath } from '../storage/base-store.js';
@@ -10,6 +10,7 @@ import { refreshProjectStatus } from '../engine/autopilot/state-updater.js';
 import { extractFilesFromSpecBody } from '../engine/spec-format/technical-md-populator.js';
 import { jaccard } from '../engine/spec-format/jaccard.js';
 import { replaceSectionInSpec } from '../engine/spec-format/replace-section.js';
+import { executionRemove } from '../engine/execution/deadline-io.js';
 const SPANISH_INDICATORS = [
     'de',
     'del',
@@ -84,66 +85,18 @@ async function writeTechnicalMd(specDir, isDone, projectPath, specBody) {
     }
     const specMdPath = join(specDir, 'spec.md');
     if (extractedBody === null) {
-        const removedInline = await removeTechnicalSectionIfPlaceholder(specMdPath);
-        const removedLegacy = await removeLegacyTechnicalPlaceholder(join(specDir, 'technical.md'));
-        return removedInline || removedLegacy;
-    }
-    const technicalBody = extractedBody;
-    // SPEC-579: idempotency check — skip write if section already matches.
-    try {
-        const existing = await readFile(specMdPath, 'utf-8');
-        const currentTechnical = extractTechnicalBodyLocal(existing);
-        if (currentTechnical.trim() === technicalBody.trim()) {
-            return false;
-        }
-    }
-    catch {
-        // spec.md missing — continue to write (replaceSectionInSpec will create the section)
-    }
-    await replaceSectionInSpec(specMdPath, 'Technical', technicalBody);
-    return true;
-}
-async function removeLegacyTechnicalPlaceholder(technicalPath) {
-    let legacy;
-    try {
-        legacy = await readFile(technicalPath, 'utf-8');
-    }
-    catch {
-        return false;
-    }
-    if (!isPlaceholderTechnical(legacy)) {
         return false;
     }
-    await rm(technicalPath, { force: true });
-    return true;
-}
-async function removeTechnicalSectionIfPlaceholder(specMdPath) {
-    let existing;
-    try {
-        existing = await readFile(specMdPath, 'utf-8');
-    }
-    catch {
-        return false;
-    }
-    const currentTechnical = extractTechnicalBodyLocal(existing);
-    if (currentTechnical === '' || !isPlaceholderTechnical(currentTechnical)) {
-        return false;
-    }
-    const updated = removeTopLevelSection(existing, 'Technical');
-    if (updated === existing) {
-        return false;
-    }
-    await atomicWriteFile(specMdPath, updated);
+    await replaceSectionInSpec(specMdPath, 'Technical', extractedBody);
     return true;
 }
 function removeTopLevelSection(content, sectionName) {
     const normalized = content.replace(/\r\n/g, '\n');
     const masked = normalized.replace(/(```|~~~)[\s\S]*?\1/g, (block) => block.replace(/[^\n]/g, ' '));
     const headingRe = new RegExp(`^##\\s+${escapeRegex(sectionName)}\\b.*$`, 'm');
+    // Callers only remove sections they have just extracted from the same content.
+    // eslint-disable-next-line @typescript-eslint/no-non-null-assertion
     const match = headingRe.exec(masked);
-    if (!match) {
-        return content;
-    }
     const afterHeading = match.index + match[0].length;
     const nextRe = /^##\s+\S/gm;
     nextRe.lastIndex = afterHeading;
@@ -378,7 +331,7 @@ export async function handleHealSpecDocs(params) {
             continue;
         }
         if (legacyContent !== null && isPlaceholderTechnical(legacyContent)) {
-            await rm(technicalPath, { force: true });
+            await executionRemove(technicalPath, { force: true });
             healed += 1;
             continue;
         }

package/dist/tools/hook-generator-handler.js

@@ -1,4 +1,4 @@
-// tools/hook-generator-handler.ts — Handlers for Dynamic Hook Generator tools (SPEC-416)
+import { technologyValue } from '../engine/technology-registry.js';
 import { detectStack } from '../engine/project-scanner/index.js';
 import { getPrimaryAiTool } from '../engine/ai-tool-detector/index.js';
 import { getHookSectionsForStack } from '../engine/hook-generator/stack-hook-templates.js';
@@ -12,7 +12,7 @@ async function resolveStackTokens(projectPath) {
     const detected = await detectStack(projectPath);
     const tokens = [];
     const langMap = {
-        typescript: 'typescript',
+        typescript: technologyValue('technology-typescript-969545'),
         javascript: 'eslint',
         python: 'python',
         go: 'go',
@@ -21,11 +21,11 @@ async function resolveStackTokens(projectPath) {
     if (lang !== undefined) {
         tokens.push(lang);
     }
-    if (detected.testRunner === 'vitest') {
-        tokens.push('vitest');
+    if (detected.testRunner === technologyValue('technology-vitest-a9127f')) {
+        tokens.push(technologyValue('technology-vitest-a9127f'));
     }
-    else if (detected.testRunner === 'jest') {
-        tokens.push('jest');
+    else if (detected.testRunner === technologyValue('technology-jest-35e99f')) {
+        tokens.push(technologyValue('technology-jest-35e99f'));
     }
     if (detected.linter !== null) {
         tokens.push('eslint');

package/dist/tools/init-constitution/platform-principles.js

@@ -1,3 +1,4 @@
+import { technologyValue } from '../../engine/technology-registry.js';
 export function addAgentPrinciples(knowledge, principles, nextId) {
     const isAgentProject = knowledge.stack.some((s) => ['@anthropic-ai/sdk', '@mastra/core', 'langgraph', 'crewai'].some((sig) => s.toLowerCase().includes(sig))) || (knowledge.framework ?? '').toLowerCase().includes('agent');
     if (!isAgentProject) {
@@ -45,9 +46,10 @@ export function addAgentPrinciples(knowledge, principles, nextId) {
     });
 }
 export function addElectronPrinciples(knowledge, principles, nextId) {
-    const isElectronProject = knowledge.framework === 'electron' || knowledge.projectCategory === 'desktop';
+    const isElectronProject = knowledge.framework === technologyValue('technology-electron-88b1de') ||
+        knowledge.projectCategory === 'desktop';
     const stackHasElectron = Array.isArray(knowledge.stack) &&
-        knowledge.stack.some((s) => s.toLowerCase().includes('electron'));
+        knowledge.stack.some((s) => s.toLowerCase().includes(technologyValue('technology-electron-88b1de')));
     if (!isElectronProject || !stackHasElectron) {
         return;
     }

package/dist/tools/init-project/agents-md-writer.js

@@ -34,9 +34,16 @@ Auto-generated by \`init_project\`. Mirrors CLAUDE.md for IDEs that read AGENTS.
 \`\`\`
 facilitate("what to build") → create_spec → challenge_spec → check_readiness
 → update_status(review) → approve → update_status(approved) → implement
-→ validate → update_status(done)
+→ validate (ack) → watch_job (completed) → inspect job.result → update_status(done)
 \`\`\`
 
+## Durable Validation Gate
+
+1. Call \`validate\` and capture \`operationId\`, \`projectId\`, \`workspaceId\`, and \`cursor\` from the acknowledgement
+2. Call \`watch_job\` with those identifiers and the latest cursor until the job reaches a terminal state
+3. Require \`completed\` and inspect \`job.result.structuredContent\`; stop on \`failed\`, \`dead-letter\`, or \`cancelled\`
+4. Call \`update_status(done)\` only when the completed result reports \`ready: true\`, \`status: "passing"\`, and passing quality gates
+
 ## Session Start
 
 1. Call \`planu_status\` to see active specs
@@ -45,7 +52,7 @@ facilitate("what to build") → create_spec → challenge_spec → check_readine
 ## Session End
 
 - Call \`session_checkpoint\` to save context
-- Run \`validate\`, then call \`update_status(done)\` when work is complete
+- Run \`validate\`, await the completed job with \`watch_job\`, inspect \`job.result.structuredContent\`, then call \`update_status(done)\`
 
 ## Quick Reference
 
@@ -55,6 +62,7 @@ ${toolsTable}
 
 - NEVER write production code before spec is \`approved\`
 - NEVER skip \`validate\` after implementation
+- NEVER treat a \`validate\` acknowledgement as a passing result
 - NEVER create design docs outside Planu specs
 
 ## Skill Discovery
@@ -70,8 +78,9 @@ Auto-generated by init_project.
 
 1. Before writing any code, call facilitate() or create_spec() first.
 2. Never write code without an approved Planu spec.
-3. Always call validate() after implementation.
-4. Use update_status() to track progress: draft → review → approved → implementing → done.
+3. Always call validate() after implementation; it returns a durable job acknowledgement, not pass/fail.
+4. Call watch_job() until completed and inspect job.result.structuredContent before marking done.
+5. Use update_status() to track progress: draft → review → approved → implementing → done.
 
 ## Session
 
@@ -82,7 +91,7 @@ Auto-generated by init_project.
 
 - New feature: facilitate("what to build")
 - Check status: planu_status
-- Mark done: validate, then update_status(done)
+- Mark done: validate, watch_job until completed, inspect job.result.structuredContent, then update_status(done)
 `;
 async function writeIfMissing(path, content) {
     try {