@planu/cli 5.3.67 → 5.3.69

package/dist/engine/lifecycle-reconciliation.js

@@ -1,12 +1,15 @@
 import { AsyncLocalStorage } from 'node:async_hooks';
 import { lstat, readFile } from 'node:fs/promises';
 import { join } from 'node:path';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { projectDataDir } from '../storage/base-store.js';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { specStore } from '../storage/index.js';
 import { ValidationReportV1Schema } from './handoff-artifacts/schemas.js';
 import { AUTOMATED_VALIDATOR_AGENT } from './validator/validation-report-writer.js';
 import { rollbackTransitionSpec, transitionSpec, } from './spec-state-machine/transition-spec.js';
 import { acquireLock, releaseLock } from './safety/cross-process-lock.js';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { appendTransitionEvent, readTransitionLog } from '../storage/transition-log.js';
 import { collectSupersededReconciliationArtifacts, readCommittedReconciliationReceipts, readReconciliationReceipt, reconciliationDigest as digest, safeReceiptPath, writeReconciliationReceipt, } from './lifecycle-reconciliation-io.js';
 const REQUEST_ID = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/u;

package/dist/engine/local-first/detector.js

@@ -1,8 +1,8 @@
 // engine/local-first/detector.ts — SPEC-047
 // Detects CRDT libraries, sync backends, local storage, and offline signals.
-import { readFile } from 'node:fs/promises';
 import { join } from 'node:path';
 import { glob } from 'glob';
+import { readFileOrNull } from '../../core/shared/fs.js';
 // === CRDT library package names ===
 const CRDT_PACKAGES = new Map([
     ['yjs', 'yjs'],
@@ -45,14 +45,6 @@ const OFFLINE_FILES = ['sw.js', 'service-worker.js', 'sw.ts', 'service-worker.ts
 const INDEXEDDB_PACKAGES = ['idb', 'idb-keyval', 'dexie', 'localforage', 'rxdb', 'pouchdb'];
 // === LevelDB additional packages ===
 const LEVELDB_PACKAGES = ['abstract-level', 'memory-level', 'classic-level'];
-async function readFileOrNull(filePath) {
-    try {
-        return await readFile(filePath, 'utf-8');
-    }
-    catch {
-        return null;
-    }
-}
 async function readPackageJson(projectPath) {
     const content = await readFileOrNull(join(projectPath, 'package.json'));
     if (!content) {

package/dist/engine/marketplace-fetcher/cache.js

@@ -2,7 +2,9 @@
 // Reads/writes to .planu/skill-cache/{source}/{skillName}.md (NOT planu/ — internal cache).
 import { mkdir, readFile, writeFile } from 'node:fs/promises';
 import { dirname, join } from 'node:path';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { hashProjectPath } from '../../storage/base-store.js';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { resolveStorageLayout } from '../../storage/storage-layout.js';
 // ---------------------------------------------------------------------------
 // Constants — single exported location (no per-call literals)

package/dist/engine/marketplace-fetcher/index.js

@@ -1,6 +1,7 @@
 // engine/marketplace-fetcher/index.ts — SPEC-681: Orchestrate skill fetching from all sources
 // Fetches skills from Superpowers, Anthropic, local ~/.claude/skills/, and community registry.
 // Per-source failures are isolated via Promise.allSettled — never throws.
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { writeSkillRegistryEntry } from '../../storage/skill-registry-storage.js';
 import { DEFAULT_CACHE_TTL_MS } from './cache.js';
 import { appendToEvolutionLog } from './evolution-log.js';

package/dist/engine/mcp-config/mcp-config-writer.js

@@ -5,6 +5,7 @@ import { readFile, writeFile } from 'node:fs/promises';
 import { join } from 'node:path';
 import { homedir } from 'node:os';
 import { buildPinnedEntry } from '../auto-updater/config-patcher.js';
+import { fileExistsByRead } from '../../core/shared/fs.js';
 // ---------------------------------------------------------------------------
 // Constants
 // ---------------------------------------------------------------------------
@@ -26,15 +27,6 @@ async function readJsonFile(filePath) {
         return {};
     }
 }
-async function fileExists(filePath) {
-    try {
-        await readFile(filePath, 'utf-8');
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
 // ---------------------------------------------------------------------------
 // Public API
 // ---------------------------------------------------------------------------
@@ -53,7 +45,7 @@ export async function findMcpConfigPath(projectPath) {
         join(projectPath, '.claude.json'),
     ];
     for (const candidate of candidates) {
-        if (await fileExists(candidate)) {
+        if (await fileExistsByRead(candidate)) {
             return candidate;
         }
     }

package/dist/engine/migrations/remove-commercial-state.js

@@ -6,7 +6,9 @@ import { atomicWriteFile } from '../safety/atomic-write-file.js';
 import { withUpgradeLock } from '../auto-updater/upgrade-lock.js';
 import { deleteSecretField } from '../../security/secret-field.js';
 import { isSecretReference, parseSecretReference } from '../../security/secret-provider.js';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { globalDataDir } from '../../storage/base-store.js';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { resolveStorageLayout } from '../../storage/storage-layout.js';
 const TOP_LEVEL_USAGE_KEYS = [
     'trialState',

package/dist/engine/mobile-detector-shared.d.ts

@@ -1,4 +1,4 @@
-export declare function safeReadFile(p: string): Promise<string | null>;
+export { readFileOrNull as safeReadFile } from '../core/shared/fs.js';
 export declare function safeReaddir(p: string): Promise<string[]>;
 export declare function walkForExt(dir: string, ext: string, results: string[], limit: number, depth: number): Promise<void>;
 //# sourceMappingURL=mobile-detector-shared.d.ts.map

package/dist/engine/mobile-detector-shared.js

@@ -1,15 +1,8 @@
 // Planu — Shared helpers for mobile detection (SPEC-013)
-import { readFile, readdir } from 'node:fs/promises';
+import { readdir } from 'node:fs/promises';
 import { join, extname } from 'node:path';
+export { readFileOrNull as safeReadFile } from '../core/shared/fs.js';
 const SKIP_DIRS = new Set(['node_modules', '.git', 'Pods', 'build', 'DerivedData']);
-export async function safeReadFile(p) {
-    try {
-        return await readFile(p, 'utf-8');
-    }
-    catch {
-        return null;
-    }
-}
 export async function safeReaddir(p) {
     try {
         return await readdir(p);

package/dist/engine/multi-channel-notifier.js

@@ -26,6 +26,7 @@ async function notifySlackChannel(message, projectPath) {
     }
     try {
         const { buildManualPayload, dispatchToSlack } = await import('./slack-dispatcher.js');
+        // eslint-disable-next-line no-restricted-syntax -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
         const { getSlackConfig } = await import('../storage/slack-store.js');
         const config = await getSlackConfig(projectPath);
         if (!config?.webhookUrl || !config.enabled) {

package/dist/engine/multi-teammate-review/disagreement-counter.js

@@ -3,6 +3,7 @@
 import { join } from 'node:path';
 import { readFile } from 'node:fs/promises';
 import { atomicWriteFile } from '../safety/atomic-write-file.js';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { projectDataDir } from '../../storage/base-store.js';
 // ---------------------------------------------------------------------------
 // Constants

package/dist/engine/multi-teammate-review/panel-orchestrator.js

@@ -12,6 +12,7 @@ import { checkHeterogeneity } from './heterogeneity-gate.js';
 import { markDisagreement } from './disagreement-counter.js';
 import { runArbitrator, ArbitratorOutputInvalid } from './arbitrator-runner.js';
 import { atomicWriteFile } from '../safety/atomic-write-file.js';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { appendTransitionEvent } from '../../storage/transition-log.js';
 import { withEscalation } from '../escalator/with-escalation.js';
 // ---------------------------------------------------------------------------

package/dist/engine/onboarding-engine.js

@@ -1,6 +1,7 @@
 // engine/onboarding-engine.ts — SPEC-360: Interactive Onboarding & Guided Tours
 import * as fs from 'node:fs/promises';
 import * as path from 'node:path';
+import { fileExists } from '../core/shared/fs.js';
 // ---------------------------------------------------------------------------
 // Recommendations
 // ---------------------------------------------------------------------------
@@ -551,15 +552,6 @@ export async function buildProgressSummary(projectPath, config) {
 // ---------------------------------------------------------------------------
 // Helpers
 // ---------------------------------------------------------------------------
-async function fileExists(filePath) {
-    try {
-        await fs.access(filePath);
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
 async function dirHasContents(dirPath) {
     try {
         const entries = await fs.readdir(dirPath);

package/dist/engine/permissions-merger/stack-detectors.js

@@ -4,11 +4,12 @@
 // Registry-driven: reads deny rules plus the validated technology authority.
 // as the sources of truth. Zero hardcoded framework/deploy-target names in this file.
 // Adding a new stack = edit the JSON registries, never this file.
-import { access, readFile } from 'node:fs/promises';
+import { readFile } from 'node:fs/promises';
 import { fileURLToPath } from 'node:url';
 import { dirname, join, resolve as pathResolve } from 'node:path';
 import { detectStack } from '../project-dna/stack-detector.js';
 import { loadTechnologyRegistry } from '../technology-registry.js';
+import { fileExists } from '../../core/shared/fs.js';
 let denyRegistryCache = null;
 let signalsRegistryCache = null;
 function registryDir() {
@@ -37,15 +38,6 @@ export function resetStackDetectorCaches() {
     denyRegistryCache = null;
     signalsRegistryCache = null;
 }
-async function fileExists(filePath) {
-    try {
-        await access(filePath);
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
 /**
  * Detect deploy-target / database / container tokens from filesystem markers,
  * driven by the signals registry. Does NOT know framework names — only follows

package/dist/engine/pii-detector/core.js

@@ -1,6 +1,7 @@
 // pii-detector/core.ts — PII detection in spec text (SPEC-030)
 import { createRequire } from 'node:module';
 import { stripNonContractText } from '../text-signal-boundaries.js';
+import { escapeRegex as escapeRegexLiteral } from '../../core/shared/strings.js';
 const require = createRequire(import.meta.url);
 export const patterns = require('../../config/pii-patterns.json');
 // ---------------------------------------------------------------------------
@@ -60,9 +61,6 @@ function hasFieldCue(contextWindow) {
     return /\b(field|fields|column|columns|property|properties|attribute|schema|model|entity|table|class|interface)\b/i.test(contextWindow);
 }
 const COLLECTION_CUE_SUFFIXES = '(?:e|es|ed|ing|ion|ies|ied|ying|y|s)?';
-function escapeRegexLiteral(value) {
-    return value.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
-}
 function toCollectionCueBase(verb) {
     return verb.endsWith('e') ? verb.slice(0, -1) : verb;
 }

package/dist/engine/platform-engineering/dx-analyzer.js

@@ -1,17 +1,8 @@
 // engine/platform-engineering/dx-analyzer.ts — SPEC-048
 // Analyzes Developer Experience gaps and generates audit findings for platform engineering.
 // Detects missing CODEOWNERS, SECURITY.md, and reproducible dev environments.
-import { access } from 'node:fs/promises';
 import { join } from 'node:path';
-async function fileExists(path) {
-    try {
-        await access(path);
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
+import { fileExists } from '../../core/shared/fs.js';
 /**
  * Checks for CODEOWNERS file in standard locations.
  */

package/dist/engine/platform-engineering/idp-detector.js

@@ -1,7 +1,8 @@
 import { technologyValue } from '../technology-registry.js';
+import { fileExists } from '../../core/shared/fs.js';
 // engine/platform-engineering/idp-detector.ts — SPEC-048
 // Detects signals of Internal Developer Platform need and calculates DX score.
-import { access, readFile } from 'node:fs/promises';
+import { readFile } from 'node:fs/promises';
 import { join } from 'node:path';
 // DX score weights (total = 10)
 const DX_WEIGHTS = {
@@ -22,15 +23,6 @@ const IAC_FILES = [
     'serverless.yml',
     'serverless.yaml',
 ];
-async function fileExists(path) {
-    try {
-        await access(path);
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
 /**
  * Counts monorepo subdirectories at the given project path.
  * Returns the count of matching top-level MONOREPO_DIRS that have subdirectories.

package/dist/engine/project-dna/ai-tool-detector.js

@@ -1,9 +1,10 @@
 // @crash-shield-ignore-file — config/cache reader for Planu-controlled JSON; writer is this codebase, shape guaranteed by build/seed.
 // Planu — project-dna/ai-tool-detector.ts
 // Detects which AI tool is active in a project by checking detection files.
-import { access, readFile } from 'node:fs/promises';
+import { readFile } from 'node:fs/promises';
 import { join, dirname } from 'node:path';
 import { fileURLToPath } from 'node:url';
+import { pathExists } from '../../core/shared/fs.js';
 const REGISTRY_PATH = join(dirname(fileURLToPath(import.meta.url)), '../../config/ai-tool-registry.json');
 let cachedRegistry = null;
 async function loadRegistry() {
@@ -30,15 +31,6 @@ const DETECTION_ORDER = [
 // ---------------------------------------------------------------------------
 // Helpers
 // ---------------------------------------------------------------------------
-async function pathExists(filePath) {
-    try {
-        await access(filePath);
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
 async function anyDetectionFileExists(projectPath, detectionFiles) {
     for (const f of detectionFiles) {
         if (await pathExists(join(projectPath, f))) {

package/dist/engine/project-dna/stack-detector.js

@@ -1,9 +1,10 @@
 // @crash-shield-ignore-file — config/cache reader for Planu-controlled JSON; writer is this codebase, shape guaranteed by build/seed.
 // Planu — project-dna/stack-detector.ts
 // Detects project stack by reading manifest files.
-import { readFile, access } from 'node:fs/promises';
+import { readFile } from 'node:fs/promises';
 import { join } from 'node:path';
 import { loadTechnologyRegistry, technologyValue } from '../technology-registry.js';
+import { fileExists } from '../../core/shared/fs.js';
 // ---------------------------------------------------------------------------
 // Registry loader (readFileSync — not intercepted by test mocks of fs/promises)
 // ---------------------------------------------------------------------------
@@ -18,15 +19,6 @@ function loadSignals() {
 // ---------------------------------------------------------------------------
 // Helpers
 // ---------------------------------------------------------------------------
-async function fileExists(filePath) {
-    try {
-        await access(filePath);
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
 async function readFileIfExists(filePath) {
     try {
         return await readFile(filePath, 'utf-8');

package/dist/engine/project-graph/builder.js

@@ -179,13 +179,15 @@ async function buildProjectKnowledgeGraphUnlocked(args) {
     const cacheResult = await readProjectGraphCache(args.projectId, args.policy);
     const previousCache = cacheResult.cache;
     const previousRecords = previousCache?.records ?? {};
-    let sources = await collectProjectGraphSources({
+    const collected = await collectProjectGraphSources({
         projectId: args.projectId,
         projectPath: args.projectPath,
         policy: args.policy,
         previous: previousRecords,
         nativeCoreVersion,
     });
+    let sources = collected.sources;
+    const oversizedSources = collected.oversizedSources;
     let diff = diffSourceHashes(sources, previousRecords, nativeCoreVersion, {
         fragments: previousCache?.fragments,
         knownSourceIds: cacheResult.knownSourceIds,
@@ -208,13 +210,17 @@ async function buildProjectKnowledgeGraphUnlocked(args) {
         Array.isArray(existingGraph.nodes) &&
         Array.isArray(existingGraph.edges);
     if (hasConsistentExistingGraph && diff.changed.length === 0 && diff.removed.length === 0) {
+        const graphWithCurrentOversizedSources = {
+            ...existingGraph,
+            oversizedSources,
+        };
         publishFreshProjectGraphProjection({
             projectId: args.projectId,
             generatedAt: existingGraph.generatedAt,
             generation: existingGraph.generation,
         });
         return {
-            graph: existingGraph,
+            graph: graphWithCurrentOversizedSources,
             generation: existingGraph.generation,
             graphPath: projectGraphPath(args.projectId, args.policy),
             cachePath: projectGraphCachePath(args.projectId, args.policy),
@@ -222,6 +228,7 @@ async function buildProjectKnowledgeGraphUnlocked(args) {
             removedSources: [],
             skippedSources: diff.skipped,
             usedCache: true,
+            oversizedSources,
         };
     }
     const changedIds = new Set(diff.changed);
@@ -272,6 +279,7 @@ async function buildProjectKnowledgeGraphUnlocked(args) {
         },
         nodes,
         edges,
+        oversizedSources,
     };
     const cache = {
         version: 2,
@@ -299,6 +307,7 @@ async function buildProjectKnowledgeGraphUnlocked(args) {
         removedSources: diff.removed,
         skippedSources: diff.skipped,
         usedCache: false,
+        oversizedSources,
     };
 }
 export async function buildProjectKnowledgeGraph(args) {

package/dist/engine/project-graph/cache.d.ts

@@ -1,4 +1,4 @@
-import type { ProjectGraphCacheEnvelope, ProjectGraphCacheReadResult, ProjectGraphFreshness, ProjectGraphPolicy, ProjectGraphSource, ProjectGraphSourceCacheRecord, ProjectGraphSourceFragment, ProjectKnowledgeGraph } from '../../types/project-knowledge-graph.js';
+import type { OversizedSourceRecord, ProjectGraphCacheEnvelope, ProjectGraphCacheReadResult, ProjectGraphFreshness, ProjectGraphPolicy, ProjectGraphSource, ProjectGraphSourceCacheRecord, ProjectGraphSourceFragment, ProjectKnowledgeGraph } from '../../types/project-knowledge-graph.js';
 export declare function loadProjectGraphPolicy(): Promise<ProjectGraphPolicy>;
 export declare function hashText(text: string): string;
 export declare function projectGraphExtractorVersion(kind: string): string;
@@ -35,7 +35,10 @@ export declare function collectProjectGraphSources(args: {
     policy: ProjectGraphPolicy;
     previous?: Record<string, ProjectGraphSourceCacheRecord>;
     nativeCoreVersion?: string;
-}): Promise<ProjectGraphSource[]>;
+}): Promise<{
+    sources: ProjectGraphSource[];
+    oversizedSources: OversizedSourceRecord[];
+}>;
 export declare function getProjectGraphFreshness(args: {
     projectId: string;
     projectPath: string;