@planu/cli 4.9.0 → 4.10.1

package/dist/tools/validate.js

@@ -1,7 +1,5 @@
 // tools/validate.ts — Compare spec vs implementation (SPEC-595: elicitation on failures)
 // Uses the validator engine to check coverage, missing items, quality issues.
-import { execSync, execFileSync } from 'node:child_process';
-import { readFileSync } from 'node:fs';
 import { elicitOrFallback, buildEnumSchema } from '../engine/elicitation/elicit-helper.js';
 import { compactObj } from '../engine/compact-obj.js';
 import { resolveProjectId, missingProjectIdError } from './resolve-project-id.js';
@@ -16,104 +14,13 @@ import { parseConventions, scanConventions } from '../engine/convention-scanner/
 import { validateScopeCompliance } from '../engine/scope-boundaries/index.js';
 import { compareWithBaseline } from '../storage/convention-baseline.js';
 import { writeImplementationReviewReport } from '../engine/validator/validation-report-writer.js';
-import { evaluateNewCodeGate } from '../engine/ai-assurance/index.js';
-import { queryProjectGraphSlice } from '../engine/project-graph/index.js';
-import { analyzeMinimalImplementation, loadMinimalImplementationPolicy, } from '../engine/minimality/index.js';
+import { buildGraphCoverageReport, formatGraphCoverageText } from './validate-graph-coverage.js';
+import { buildMinimalityReport } from './validate-minimality.js';
+import { buildValidateFailureFallback, validateStrictLayoutOrError } from './validate-helpers.js';
+import { runLintCheck } from './validate-lint.js';
+import { checkPlanuUncommittedChanges, runAssuranceGates } from './validate-assurance.js';
 // Re-export for external use (SPEC-018)
 export { validateContractCompliance };
-function graphCoverageGaps(slice) {
-    if (slice === null) {
-        return [];
-    }
-    const criteria = slice.nodes.filter((node) => node.type === 'criterion');
-    return criteria
-        .filter((criterion) => {
-        const outgoing = slice.edges.filter((edge) => edge.from === criterion.id);
-        return !outgoing.some((edge) => edge.type === 'implements' || edge.type === 'tests');
-    })
-        .map((criterion) => criterion.label)
-        .slice(0, 10);
-}
-async function buildGraphCoverageReport(args) {
-    const graphSlice = await queryProjectGraphSlice(args).catch(() => null);
-    return {
-        freshness: graphSlice?.freshness,
-        gaps: graphCoverageGaps(graphSlice),
-        compactNodes: graphSlice?.nodes.length ?? 0,
-        compactEdges: graphSlice?.edges.length ?? 0,
-    };
-}
-function formatGraphCoverageText(report) {
-    return report.gaps.length > 0
-        ? `\nGRAPH     ${String(report.gaps.length)} graph-backed coverage gap(s)`
-        : '';
-}
-async function buildMinimalityReport(args) {
-    try {
-        const { policy, evidence } = await loadMinimalImplementationPolicy(args.projectPath);
-        return analyzeMinimalImplementation({
-            policy,
-            specId: args.specId,
-            specRisk: args.risk,
-            specText: [args.title ?? '', ...args.missing, ...args.extra].join('\n'),
-            files: args.qualityIssues.map((issue) => ({
-                path: issue.file,
-                content: [issue.rule, issue.message, issue.suggestion ?? ''].join('\n'),
-            })),
-            evidence,
-        });
-    }
-    catch {
-        return null;
-    }
-}
-async function validateStrictLayoutOrError(args) {
-    try {
-        const { validateStrictPlanuLayout } = await import('../engine/spec-migrator/index.js');
-        const layout = await validateStrictPlanuLayout(args.projectPath, {
-            specPath: args.specPath,
-            includeRoot: false,
-        });
-        if (layout.ok) {
-            return null;
-        }
-        return {
-            content: [
-                {
-                    type: 'text',
-                    text: `Strict Planu layout validation failed for ${args.specId}.\n\n` +
-                        `Non-canonical paths:\n${layout.offenders.map((p) => `- ${p}`).join('\n')}\n\n` +
-                        `Canonical contract:\n${layout.contract}`,
-                },
-            ],
-            isError: true,
-            structuredContent: {
-                error: 'strict_planu_layout_violation',
-                offenders: layout.offenders,
-                contract: layout.contract,
-            },
-        };
-    }
-    catch {
-        return null;
-    }
-}
-/** Build the fallback interactiveQuestion for validation failures. */
-function buildValidateFailureFallback(failedCount) {
-    return {
-        header: 'Failures',
-        question: `${failedCount} criteria failed. How do you want to proceed?`,
-        multiSelect: false,
-        options: [
-            {
-                label: 're-implement',
-                description: 'Fix the failing criteria and run validate again (Recommended)',
-            },
-            { label: 'ignore', description: 'Ignore failures and proceed (not recommended)' },
-            { label: 'mark-manual', description: 'Mark as manually reviewed — will bypass auto-check' },
-        ],
-    };
-}
 // SPEC-595: server? param enables elicitation on failures
 export async function handleValidate(args, server) {
     const { specId } = args;
@@ -478,130 +385,6 @@ function buildCompactValidateText(args) {
     const summaryLine = `❌ Validate: ${String(score)}/100 — ${String(failedCount)} failing: [${failNames}${remainingCount + shownFailures.length > 3 ? '...' : ''}]`;
     return summaryLine + '\n' + failureList + moreLine + commitReminder + planuReminder;
 }
-/** Allowlist: alphanumerics, spaces, and safe shell chars. Rejects ; | $ ` & < > */
-const SAFE_COMMAND_RE = /^[\w\s./:@~=-]+$/;
-const LINT_CHECK_TIMEOUT_MS = 50_000;
-function isSafeCommand(cmd) {
-    return SAFE_COMMAND_RE.test(cmd);
-}
-function isCommandTimeout(err) {
-    if (!(err instanceof Error)) {
-        return false;
-    }
-    const errorWithProcessFields = err;
-    return (errorWithProcessFields.signal === 'SIGTERM' ||
-        errorWithProcessFields.killed === true ||
-        errorWithProcessFields.code === 'ETIMEDOUT' ||
-        /timed out|timeout/i.test(err.message));
-}
-function commandOutput(err) {
-    if (!(err instanceof Error)) {
-        return String(err);
-    }
-    const errorWithOutput = err;
-    return [errorWithOutput.stdout, errorWithOutput.stderr]
-        .filter((chunk) => chunk !== undefined)
-        .map((chunk) => String(chunk))
-        .join('\n')
-        .trim();
-}
-function runAssuranceGates(projectPath) {
-    return {
-        newCode: evaluateNewCodeGate(readChangedSpecLogicFiles(projectPath)),
-    };
-}
-function readChangedSpecLogicFiles(projectPath) {
-    let changedFiles;
-    try {
-        const output = execFileSync('git', [
-            '-C',
-            projectPath,
-            'diff',
-            '--name-only',
-            'HEAD',
-            '--',
-            'src/tools/create-spec',
-            'src/tools/validate.ts',
-            'src/engine',
-        ], { encoding: 'utf-8', stdio: ['ignore', 'pipe', 'ignore'] });
-        changedFiles = output
-            .split('\n')
-            .map((line) => line.trim())
-            .filter((line) => line.endsWith('.ts'));
-    }
-    catch {
-        return [];
-    }
-    return changedFiles.flatMap((path) => {
-        try {
-            return [{ path, content: readFileSync(`${projectPath}/${path}`, 'utf-8') }];
-        }
-        catch {
-            return [];
-        }
-    });
-}
-function runLintCheck(projectPath, lintCommand) {
-    if (lintCommand !== null && !isSafeCommand(lintCommand)) {
-        console.warn(`[Planu] validate: lintCommand contains unsafe characters — skipping execution`);
-        return {
-            passed: true,
-            command: lintCommand,
-            issueCount: 0,
-            output: '(skipped — unsafe command)',
-        };
-    }
-    // SPEC-787: use pnpm lint (same as `pnpm lint` in package.json) to match what
-    // the developer runs manually. The old `npx eslint src ... || true` never raised
-    // an error (|| true suppressed exit code) and ran against a different scope.
-    const command = lintCommand ?? 'pnpm lint';
-    try {
-        execSync(command, {
-            cwd: projectPath,
-            stdio: ['pipe', 'pipe', 'pipe'],
-            timeout: LINT_CHECK_TIMEOUT_MS,
-        });
-        return { passed: true, command, issueCount: 0, output: '' };
-    }
-    catch (err) {
-        if (isCommandTimeout(err)) {
-            const seconds = Math.round(LINT_CHECK_TIMEOUT_MS / 1000);
-            const output = `Lint command timed out after ${String(seconds)}s and was skipped so validate can complete within MCP request limits. ` +
-                `Run \`${command}\` manually before marking the spec done.`;
-            console.warn(`[Planu] lintCheck timed out: command="${command}" cwd="${projectPath}" timeoutMs=${String(LINT_CHECK_TIMEOUT_MS)}`);
-            return { passed: true, command, issueCount: 0, output };
-        }
-        const raw = commandOutput(err);
-        // SPEC-787: never truncate — preserve full output so caller sees real issues
-        const output = raw.trim();
-        const issueCount = parseLintIssueCount(output);
-        // SPEC-787: log exact command + cwd for debuggability
-        console.warn(`[Planu] lintCheck failed: command="${command}" cwd="${projectPath}" issues=${String(issueCount)}`);
-        return { passed: false, command, issueCount, output };
-    }
-}
-function parseLintIssueCount(output) {
-    const m = /(\d+)\s+problem/i.exec(output);
-    if (m) {
-        return parseInt(m[1] ?? '0', 10);
-    }
-    return output.split('\n').filter((l) => l.trim().length > 0).length;
-}
-/** Check if planu/ directory has uncommitted changes via git status --porcelain */
-function checkPlanuUncommittedChanges(projectPath) {
-    try {
-        const output = execFileSync('git', ['status', '--porcelain', 'planu/'], {
-            cwd: projectPath,
-            encoding: 'utf-8',
-            timeout: 5_000,
-            stdio: ['pipe', 'pipe', 'pipe'],
-        });
-        return output.trim().length > 0;
-    }
-    catch {
-        return false;
-    }
-}
 function scoreToGrade(score) {
     if (score >= 90) {
         return 'A';

package/dist/types/evidence-index.d.ts

@@ -1,5 +1,6 @@
 export type EvidenceRecordKind = 'scenario' | 'test' | 'contract' | 'manual' | 'changed-file' | 'validation' | 'reviewer';
 export type EvidenceRecordStatus = 'valid' | 'stale' | 'invalid' | 'missing';
+export type EvidencePathField = 'testEvidence' | 'contractEvidence' | 'changedFiles' | 'contractValidation.reportPath';
 export interface EvidenceRecord {
     kind: EvidenceRecordKind;
     value: string;

package/dist/types/feedback.d.ts

@@ -1,5 +1,20 @@
 export type FeedbackType = 'bug' | 'feature' | 'suggestion' | 'dx';
 export type FeedbackStatus = 'pending' | 'triaged' | 'spec_created' | 'implementing' | 'resolved' | 'dismissed';
+export type FeedbackRemoteStatus = 'pending' | 'synced' | 'failed' | 'skipped';
+export interface FeedbackRemoteDelivery {
+    status: FeedbackRemoteStatus;
+    attemptCount: number;
+    lastAttemptAt?: string;
+    lastSyncedAt?: string;
+    lastError?: string;
+    endpoint?: string;
+}
+export interface FeedbackRemoteResult {
+    ok: boolean;
+    status: 'synced' | 'failed' | 'skipped';
+    endpoint?: string;
+    error?: string;
+}
 export interface FeedbackEntry {
     id: string;
     type: FeedbackType;
@@ -20,6 +35,7 @@ export interface FeedbackEntry {
     planuVersion: string;
     tags?: string[];
     votes?: number;
+    remoteDelivery?: FeedbackRemoteDelivery;
 }
 export interface FeedbackFilter {
     type?: FeedbackType;
@@ -39,6 +55,10 @@ export interface FeedbackSummary {
         id: string;
     }[];
 }
+export interface FeedbackRemoteHealth {
+    byRemoteStatus: Record<FeedbackRemoteStatus, number>;
+    retryable: number;
+}
 export interface TriageGroup {
     representative: FeedbackEntry;
     similar: FeedbackEntry[];
@@ -65,7 +85,24 @@ export interface ResolveFeedbackInput {
     prUrl?: string;
     notes?: string;
 }
+export interface SyncFeedbackInput {
+    projectPath?: string;
+    includeSynced?: boolean;
+    limit?: number;
+}
+export interface FeedbackStatusInput {
+    projectPath?: string;
+}
+export interface SyncFeedbackSummary {
+    total: number;
+    synced: number;
+    failed: number;
+    skipped: number;
+    alreadySynced: number;
+    processedIds: string[];
+}
 export interface RemoteFeedbackPayload {
+    id?: string;
     type: string;
     title: string;
     description: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@planu/cli",
-  "version": "4.9.0",
+  "version": "4.10.1",
   "description": "Planu — MCP Server for Spec Driven Development with native Rust acceleration for hot paths. Cross-platform (Linux/macOS/Windows, x64/arm64, glibc/musl).",
   "type": "module",
   "main": "dist/index.js",
@@ -34,14 +34,14 @@
     "packageName": "@planu/core"
   },
   "optionalDependencies": {
-    "@planu/core-darwin-arm64": "4.9.0",
-    "@planu/core-darwin-x64": "4.9.0",
-    "@planu/core-linux-arm64-gnu": "4.9.0",
-    "@planu/core-linux-arm64-musl": "4.9.0",
-    "@planu/core-linux-x64-gnu": "4.9.0",
-    "@planu/core-linux-x64-musl": "4.9.0",
-    "@planu/core-win32-arm64-msvc": "4.9.0",
-    "@planu/core-win32-x64-msvc": "4.9.0"
+    "@planu/core-darwin-arm64": "4.10.1",
+    "@planu/core-darwin-x64": "4.10.1",
+    "@planu/core-linux-arm64-gnu": "4.10.1",
+    "@planu/core-linux-arm64-musl": "4.10.1",
+    "@planu/core-linux-x64-gnu": "4.10.1",
+    "@planu/core-linux-x64-musl": "4.10.1",
+    "@planu/core-win32-arm64-msvc": "4.10.1",
+    "@planu/core-win32-x64-msvc": "4.10.1"
   },
   "engines": {
     "node": ">=24.0.0"
@@ -129,7 +129,7 @@
   ],
   "license": "SEE LICENSE IN LICENSE",
   "dependencies": {
-    "@anthropic-ai/sdk": "^0.107.0",
+    "@anthropic-ai/sdk": "^0.109.0",
     "@modelcontextprotocol/sdk": "^1.29.0",
     "glob": "^13.0.6",
     "yaml": "^2.9.0",
@@ -183,7 +183,7 @@
     "@stryker-mutator/core": "^9.6.1",
     "@stryker-mutator/vitest-runner": "^9.6.1",
     "@supabase/supabase-js": "^2.110.0",
-    "@types/node": "^26.0.1",
+    "@types/node": "^26.1.0",
     "@vitejs/plugin-vue": "^6.0.7",
     "@vitest/coverage-v8": "^4.1.9",
     "@vue/test-utils": "^2.4.11",
@@ -204,7 +204,7 @@
     "type-coverage": "^2.29.7",
     "typescript": "^6.0.3",
     "typescript-eslint": "^8.62.1",
-    "vite": "^8.1.1",
+    "vite": "^8.1.2",
     "vitest": "^4.1.9",
     "vue": "^3.5.39"
   }

package/planu-native.json

@@ -1,7 +1,7 @@
 {
   "name": "dev.planu.native",
   "displayName": "Planu Native Lightweight Surface",
-  "version": "4.9.0",
+  "version": "4.10.1",
   "packageName": "@planu/cli",
   "modes": {
     "lightweight": {

package/planu-plugin.json

@@ -2,7 +2,7 @@
   "name": "dev.planu.cli",
   "displayName": "Planu — Spec Driven Development",
   "description": "Manage software specs, estimations, and autonomous SDD workflows. Language-agnostic MCP server for Claude Code.",
-  "version": "4.9.0",
+  "version": "4.10.1",
   "icon": "assets/plugin/icon.svg",
   "command": [
     "npx",