@planu/cli 4.14.1 → 5.1.1

package/dist/config/release-policy.json

@@ -1,6 +1,7 @@
 {
   "schemaVersion": 1,
   "supportedNativeTargets": 8,
+  "gitIdentity": { "name": "planudev", "email": "hello@planu.dev" },
   "quality": { "branchCoverageMinimum": 88.1, "mutationScoreMinimum": 80 },
   "native": {
     "blockingCommands": [
@@ -13,12 +14,93 @@
     ],
     "performance": { "samples": 30, "warmups": 5, "p95RatioMaximum": 1.1, "rssP95RatioMaximum": 1.15 }
   },
+  "releaseOptimization": {
+    "rustNightlyToolchain": "nightly-2026-04-14",
+    "releaseSloSeconds": { "warm": 1500, "cold": 2100, "recovery": 180 },
+    "sourceReceiptInputPatterns": [
+      "(^|/)package\\.json$",
+      "(^|/)(pnpm-lock\\.yaml|Cargo\\.toml|Cargo\\.lock|rust-toolchain(?:\\.toml)?)$",
+      "^scripts/",
+      "^src/config/release-policy\\.json$"
+    ],
+    "sourceQualityPlan": [
+      { "id": "validate", "executable": "pnpm", "args": ["validate"], "timeoutSeconds": 1800 },
+      { "id": "strict", "executable": "pnpm", "args": ["check:strict"], "timeoutSeconds": 1800 },
+      { "id": "reliability", "executable": "pnpm", "args": ["check:reliability"], "timeoutSeconds": 1800 },
+      { "id": "dependency-freshness", "executable": "pnpm", "args": ["check:deps:fresh"], "timeoutSeconds": 1800 },
+      { "id": "coverage", "executable": "pnpm", "args": ["test:coverage"], "timeoutSeconds": 1800 },
+      { "id": "mutation", "executable": "pnpm", "args": ["audit:mutation"], "timeoutSeconds": 1800 },
+      {
+        "id": "rust-format",
+        "executable": "cargo",
+        "args": ["fmt", "--manifest-path", "rust/planu-core/Cargo.toml", "--all", "--", "--check"],
+        "timeoutSeconds": 1800
+      },
+      {
+        "id": "rust-clippy",
+        "executable": "cargo",
+        "args": [
+          "clippy",
+          "--manifest-path",
+          "rust/planu-core/Cargo.toml",
+          "--all-targets",
+          "--all-features",
+          "--",
+          "-D",
+          "warnings"
+        ],
+        "timeoutSeconds": 1800
+      },
+      {
+        "id": "rust-test",
+        "executable": "cargo",
+        "args": ["test", "--manifest-path", "rust/planu-core/Cargo.toml", "--all-features"],
+        "timeoutSeconds": 1800
+      },
+      {
+        "id": "rust-audit",
+        "executable": "cargo",
+        "args": ["audit", "--file", "rust/planu-core/Cargo.lock"],
+        "timeoutSeconds": 1800
+      },
+      {
+        "id": "rust-policy",
+        "executable": "cargo",
+        "args": [
+          "deny",
+          "--manifest-path",
+          "rust/planu-core/Cargo.toml",
+          "check",
+          "--config",
+          "rust/planu-core/deny.toml"
+        ],
+        "timeoutSeconds": 1800
+      },
+      {
+        "id": "rust-fuzz",
+        "executable": "cargo",
+        "args": [
+          "+nightly-2026-04-14",
+          "fuzz",
+          "run",
+          "public-inputs",
+          "--fuzz-dir",
+          "rust/planu-core/fuzz",
+          "--",
+          "-max_total_time=60"
+        ],
+        "timeoutSeconds": 1800
+      }
+    ],
+    "effectiveLinkers": [
+      { "id": "CC", "command": "clang" },
+      { "id": "CXX", "command": "clang++" }
+    ]
+  },
   "workflowActions": {
     "actions/checkout": "d23441a48e516b6c34aea4fa41551a30e30af803",
     "actions/setup-node": "249970729cb0ef3589644e2896645e5dc5ba9c38",
     "actions/upload-artifact": "b7c566a772e6b6bfb58ed0dc250532a479d7789f",
-    "actions/download-artifact": "018cc2cf5baa6db3ef3c5f8a56943fffe632ef53",
-    "actions/attest": "f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6",
     "pnpm/action-setup": "fc06bc1257f339d1d5d8b3a19a8cae5388b55320",
     "dtolnay/rust-toolchain": "2c7215f132e9ebf062739d9130488b56d53c060c",
     "Swatinem/rust-cache": "e18b497796c12c097a38f9edb9d0641fb99eee32"

package/dist/config/runtime-policy.json

@@ -28,11 +28,22 @@
   },
   "validation": {
     "defaultDeadlineMs": 1800000,
+    "durableLintTimeoutMs": 150000,
+    "complianceCommandTimeoutMs": 900000,
+    "noProgressTimeoutMs": 960000,
     "submissionLockWaitMs": 180,
     "submissionLockPollMs": 5,
     "workerLeaseMs": 30000,
     "workerHeartbeatMs": 1000,
-    "workerConcurrency": 2
+    "workerConcurrency": 2,
+    "heartbeatStartupTimeoutMs": 5000,
+    "heartbeatShutdownTimeoutMs": 5000,
+    "heartbeatDatabaseBusyTimeoutMs": 250,
+    "freshnessLeaseTtlMs": 2100000,
+    "freshnessInvalidationCoalesceMs": 25,
+    "receiptPublicationDeadlineMs": 20000,
+    "receiptCheckpointLogMaxBytes": 1048576,
+    "receiptCheckpointResultMaxBytes": 4194304
   },
   "postCommit": {
     "defaultTaskTimeoutMs": 10000,

package/dist/config/skill-templates/planu-resume-work.md

@@ -26,7 +26,7 @@ Use this skill at the start of a session, or when returning to a project after a
 1. **Check status** — calls `planu_status` to see all active specs
 2. **Find in-progress** — identifies specs with status `implementing` or `review`
 3. **Load context** — reads the spec's `spec.md` and any inline `## Technical`, `## Files`, and `## Progress` sections
-4. **Restore session** — calls `restore_session` or `session_checkpoint` to recover the previous session state
+4. **Read checkpoint** — reads `planu/session-context.md` to recover the saved session context
 5. **Report** — summarizes exactly where to resume: which files were being modified, which criteria are still open
 
 ## What you get
@@ -48,4 +48,4 @@ User: "resume work" (or start a new session)
 
 - Run this skill at the start of every session when you have in-progress specs
 - If multiple specs are in-progress, the skill picks the most recently modified one
-- Use `session_checkpoint` at the end of each session to make resumption smoother
+- Use `session_checkpoint` at the end of each session to save bounded context for the next one

package/dist/core/index.d.ts

@@ -14,7 +14,7 @@ export { generateLeanTechnicalContent } from '../engine/spec-format/lean-technic
 export { checkSpecReadiness } from '../engine/readiness-checker.js';
 export { scoreSpecQuality } from '../engine/spec-quality-scorer.js';
 export { validateSpecFormat } from './spec-validator.js';
-export type { ValidationResult, ValidationError, ValidationWarning, ValidateSpecFormatOptions, ValidationSource, } from '../types/validation.js';
+export type { SpecValidationResult as ValidationResult, ValidationError, ValidationWarning, ValidateSpecFormatOptions, ValidationSource, } from '../types/validation.js';
 export { estimateSpec, inferDifficulty, calculateAccuracy } from '../engine/estimator.js';
 export { calculateEstimation } from '../engine/estimator.js';
 export { analyzeProject, quickAnalyze } from '../engine/analyzer.js';

package/dist/core/spec-validator.d.ts

@@ -1,12 +1,12 @@
 import type { Spec } from '../types/spec/core.js';
-import type { ValidationResult, ValidateSpecFormatOptions } from '../types/validation.js';
-export type { ValidationResult, ValidationError, ValidationWarning, ValidateSpecFormatOptions, ValidationSource, } from '../types/validation.js';
+import type { SpecValidationResult, ValidateSpecFormatOptions } from '../types/validation.js';
+export type { SpecValidationResult as ValidationResult, ValidationError, ValidationWarning, ValidateSpecFormatOptions, ValidationSource, } from '../types/validation.js';
 /**
  * Validate a spec's format against the unified spec.md schema (SPEC-630).
  * Reads spec.specPath from disk, runs structural + semantic checks, returns
- * a single ValidationResult.
+ * a single SpecValidationResult.
  *
  * Pure function: no global side effects, no MCP SDK dependency, no telemetry.
  */
-export declare function validateSpecFormat(spec: Pick<Spec, 'id' | 'specPath' | 'difficulty' | 'tags' | 'dependencies' | 'scope' | 'target' | 'type' | 'title'>, opts?: ValidateSpecFormatOptions): Promise<ValidationResult>;
+export declare function validateSpecFormat(spec: Pick<Spec, 'id' | 'specPath' | 'difficulty' | 'tags' | 'dependencies' | 'scope' | 'target' | 'type' | 'title'>, opts?: ValidateSpecFormatOptions): Promise<SpecValidationResult>;
 //# sourceMappingURL=spec-validator.d.ts.map

package/dist/core/spec-validator.js

@@ -6,6 +6,8 @@ import { readFile } from 'node:fs/promises';
 import { checkSpecReadiness } from '../engine/readiness-checker.js';
 import { scoreSpecQuality } from '../engine/spec-quality-scorer.js';
 import { parseFrontmatter, stripFrontmatter } from '../engine/frontmatter-parser.js';
+import { extractNormalizedAcceptanceCriteria } from '../engine/spec-format/acceptance-criteria.js';
+import { parseFrontmatterScenarios } from '../engine/validator/spec-compliance-runner.js';
 // ── Required frontmatter fields ──────────────────────────────────────────────
 const REQUIRED_FRONTMATTER_FIELDS = ['id', 'title', 'status', 'type', 'target', 'scope'];
 // ── Required body sections (SPEC-785 aligned with lean-spec-generator output) ─
@@ -133,11 +135,25 @@ function mapQualityToValidation(dimensions) {
     }
     return warnings;
 }
+function countCanonicalBddScenarios(raw) {
+    const criteria = extractNormalizedAcceptanceCriteria(raw, { allowLegacyBodyFallback: false });
+    const bodyCriteria = criteria.filter((criterion) => criterion.source === 'body');
+    const bddCandidates = bodyCriteria.length > 0
+        ? bodyCriteria.map((criterion) => criterion.text)
+        : parseFrontmatterScenarios(raw).map((scenario) => scenario.steps?.map((step) => `${step.keyword} ${step.text}`).join(' ') ??
+            scenario.title);
+    return {
+        criteriaCount: criteria.length,
+        bddScenarioCount: bddCandidates.filter((criterion) => /\b(?:given|dado)\b/i.test(criterion) &&
+            /\b(?:when|cuando)\b/i.test(criterion) &&
+            /\b(?:then|entonces)\b/i.test(criterion)).length,
+    };
+}
 // ── Public API ───────────────────────────────────────────────────────────────
 /**
  * Validate a spec's format against the unified spec.md schema (SPEC-630).
  * Reads spec.specPath from disk, runs structural + semantic checks, returns
- * a single ValidationResult.
+ * a single SpecValidationResult.
  *
  * Pure function: no global side effects, no MCP SDK dependency, no telemetry.
  */
@@ -168,22 +184,16 @@ export async function validateSpecFormat(spec, opts) {
     allWarnings.push(...unifiedResult.warnings);
     // ── 4. Readiness check ───────────────────────────────────────────────────
     let readinessScore = 0;
-    let bddScenarioCount = 0;
-    let criteriaCount = 0;
+    let readinessReport;
+    // The canonical metrics are independent from the readiness checker. Keep
+    // them truthful even when that best-effort checker throws.
+    const { criteriaCount, bddScenarioCount } = countCanonicalBddScenarios(raw);
     try {
         // Cast to Spec since checkSpecReadiness needs the full type but only reads
         // the fields available on the Pick type we receive.
-        const report = await checkSpecReadiness(spec, readinessMode);
-        readinessScore = report.score;
-        // Count scenarios from frontmatter block
-        bddScenarioCount = (raw.match(/^\s+-\s+title:/gm) ?? []).length;
-        // Count criteria lines (checkbox or GIVEN/WHEN/THEN)
-        const bodyLines = body.split('\n');
-        criteriaCount = bodyLines.filter((l) => /^- \[[ x]\]/i.test(l.trim()) || /^- .*\bgiven\b.*\bwhen\b.*\bthen\b/i.test(l.trim())).length;
-        if (criteriaCount === 0) {
-            criteriaCount = bddScenarioCount;
-        }
-        const mapped = mapReadinessToValidation(report.issues.blockers, report.issues.warnings);
+        readinessReport = await checkSpecReadiness(spec, readinessMode);
+        readinessScore = readinessReport.score;
+        const mapped = mapReadinessToValidation(readinessReport.issues.blockers, readinessReport.issues.warnings);
         allErrors.push(...mapped.errors);
         allWarnings.push(...mapped.warnings);
     }
@@ -197,11 +207,12 @@ export async function validateSpecFormat(spec, opts) {
         return { valid, errors: allErrors, warnings: allWarnings };
     }
     // ── 5. Quality scoring ───────────────────────────────────────────────────
-    let qualityScore = 0;
-    let qualityGrade = 'F';
+    let qualityScore;
+    let qualityGrade;
+    let qualityReport;
     if (!skipQuality) {
         try {
-            const qualityReport = await scoreSpecQuality(spec);
+            qualityReport = await scoreSpecQuality(spec);
             qualityScore = qualityReport.score.total;
             qualityGrade = qualityReport.score.grade;
             const qualityWarnings = mapQualityToValidation(qualityReport.dimensions);
@@ -226,11 +237,14 @@ export async function validateSpecFormat(spec, opts) {
         warnings: allWarnings,
         metrics: {
             readinessScore,
-            qualityScore,
-            qualityGrade,
             bddScenarioCount,
             criteriaCount,
+            ...(qualityScore === undefined || qualityGrade === undefined
+                ? {}
+                : { qualityScore, qualityGrade }),
         },
+        readinessReport,
+        qualityReport,
     };
 }
 //# sourceMappingURL=spec-validator.js.map

package/dist/engine/abortable-process-runner.d.ts

@@ -1,8 +1,26 @@
+import { spawn } from 'node:child_process';
 import type { AbortableProcessOptions, AbortableProcessResult } from '../types/abortable-process.js';
+export declare const PROCESS_TERMINATION_GRACE_MS = 75;
+export declare const PROCESS_TREE_EXTINCTION_TIMEOUT_MS = 1000;
+export declare const PROCESS_CHILD_CLOSE_TIMEOUT_MS = 1000;
+/** Isolates platform-specific process supervision in unit tests without changing host state. */
+export declare function configureAbortableProcessRunnerForTests(options?: {
+    platform?: NodeJS.Platform;
+    spawnProcess?: typeof spawn;
+    isProcessGroupAlive?: (pid: number) => boolean;
+}): void;
+export declare class ProcessTreeTerminationError extends Error {
+    readonly code = "PROCESS_TREE_TERMINATION_UNVERIFIED";
+    constructor();
+}
+export declare class ChildProcessCloseTimeoutError extends Error {
+    readonly code = "PROCESS_CLOSE_UNOBSERVED";
+    constructor();
+}
 /**
  * Runs a validation command in its own process group. Cancellation and timeouts
- * terminate the complete group and settle only after the child has closed, so a
- * cancelled gate cannot keep writing output or publish late evidence.
+ * terminate the complete group and settle only after child closure or a bounded,
+ * typed close-observation failure, so a cancelled gate cannot publish late evidence.
  */
 export declare function runAbortableProcess(command: string, args: string[], options: AbortableProcessOptions): Promise<AbortableProcessResult>;
 //# sourceMappingURL=abortable-process-runner.d.ts.map