@planu/cli 5.3.68 → 5.3.69

package/CHANGELOG.md

@@ -1,3 +1,71 @@
+## [5.3.69] - 2026-08-29
+
+### Features
+- feat(SPEC-1674): tail or skip oversized operational graph sources instead of throwing
+
+### Bug Fixes
+- fix(SPEC-1674): include warnings in graph coverage test fixtures
+- fix(SPEC-1669): fail closed on ambiguous spec discovery, real validator in tests
+- fix(SPEC-1669): quarantine journals via atomic rename, test via init_project
+- fix(SPEC-1669): re-discover canonical spec.md when the readiness index is stale
+- fix(SPEC-1669): quarantine stale terminal migration journals instead of throwing
+- fix(SPEC-1673): capture nested vitest child output instead of inheriting stdio
+- fix(SPEC-1673): serialize load-sensitive test suites into a dedicated vitest project
+- fix(SPEC-1670): accept Next.js route group and dynamic segment characters in ownership paths
+- fix(SPEC-1674): harden oversized-source handling per implementation review
+- fix(SPEC-1674): surface persisted oversized graph sources as validate warnings
+- fix(SPEC-1674): thread oversizedSources through the build result, artifact, and query slice
+- fix(SPEC-1664): include backtick in criterion identity punctuation normalization
+- fix(SPEC-1661): guarantee cascade-hook wiring in lean release process
+- fix(SPEC-1660): grandfather full-allowlist and dynamic-import violations
+- fix(SPEC-1660): full allowlist, subpath fix, dynamic imports, exemption scope
+- fix(SPEC-1660): grandfather existing layer-boundary violations
+- fix(SPEC-1660): enforce merged layer and status-write import rules per scope
+- fix(SPEC-1320): serialize legacy session writers behind the paired refresher
+- fix(SPEC-1320): derive both session artifacts from one serialized active-spec snapshot
+
+### Refactoring
+- refactor(SPEC-1663): relocate DurableJobRecord/SpecGraph/validation-evidence types into src/types
+- refactor(SPEC-1663): rename divergent tools-cluster types off shared names
+- refactor(SPEC-1663): figma cluster imports canonical types, renames divergent thumbnail/visual-qa shapes
+- refactor(SPEC-1663): rename divergent ToolHandler/SkipReason/RollbackStep off shared names
+- refactor(SPEC-1663): rename divergent compliance catalog types off shared names
+- refactor(SPEC-1663): index.d.ts trio re-exports FileHash/FileMetadata/SpecAnnotation from types/
+- refactor(SPEC-1662): readFileOrNull — migrate 4 sites found by strengthened meta test
+- refactor(SPEC-1662): apply review fixes — enoent code check, meta-test coverage, comment cleanup
+- refactor(SPEC-1662): readFileSafe family — consolidate into src/core/shared
+- refactor(SPEC-1662): escapeRegex family — consolidate into src/core/shared
+- refactor(SPEC-1662): escapeHtml — consolidate into src/core/shared
+- refactor(SPEC-1662): fileExists/pathExists — consolidate into src/core/shared
+- refactor(SPEC-1662): setup — create src/core/shared and allow engine/storage/tools to import it
+- refactor(SPEC-1661): invert hook dispatch via injected handler; add layer-inversion tests
+- refactor(SPEC-1661): invert dashboard status update via injected handler
+- refactor(SPEC-1661): consolidate generateSpecId and spec-id schema in engine
+- refactor(SPEC-1661): remove now-unused src/types/storage-bundle.ts
+- refactor(SPEC-1661): break types->storage inversion in StorageBundle
+- refactor(SPEC-1661): move InstallationRecord/InstallationManifest into types
+
+### Chores
+- chore: scope mutation gate to mutated-range suites via dedicated vitest config
+- chore(SPEC-1669/1670): record approval and implementing transitions
+- chore(SPEC-1674): record done transition and release pending entry
+- chore(SPEC-1674): transition to implementing
+- chore(SPEC-1663): record done transition and session context
+- chore(SPEC-1663): record implementing transition
+- chore(SPEC-1662): record done transition and session artifacts
+- chore(SPEC-1662): record implementing transition
+- chore(SPEC-1664): record done transition and session artifacts
+- chore(SPEC-1664): record implementing transition
+- chore(SPEC-1661): record done transition and session artifacts
+- chore(SPEC-1661): record implementing transition
+- chore(SPEC-1660): record done transition and session artifacts
+- chore(SPEC-1660): record implementing transition
+- chore(SPEC-1660): reconcile ownership format and risk section for handoff gate
+- chore: absorb post-done session state
+- chore(SPEC-1320): record done transition
+- chore(SPEC-1320): record implementing transition and fix stale verification command
+
+
 ## [5.3.68] - 2026-08-28
 
 ### Features

package/dist/.planu-build.json

@@ -1 +1 @@
-{"schemaVersion":1,"commit":"39afacbb6522be60172b8571f6c5973000936a4a"}
+{"schemaVersion":1,"commit":"3cfd6dac20d6444035162379c6284620d6d8961a"}

package/dist/cli/commands/install.d.ts

@@ -1,4 +1,5 @@
 import type { CliCommand } from '../../types/cli.js';
+import type { InstallationManifest, InstallationRecord } from '../../types/installation.js';
 interface McpEntry {
     command: string;
     args: string[];
@@ -26,21 +27,7 @@ interface ToolDefinition {
     projectScopePath: string | null;
     format: 'standard' | 'zed';
 }
-export interface InstallationRecord {
-    host: string;
-    configPath: string;
-    format: ToolDefinition['format'];
-    scope: 'user' | 'project';
-    package: string;
-    version: string;
-    offline: boolean;
-    installedAt: string;
-}
-export interface InstallationManifest {
-    schemaVersion: 1;
-    updatedAt: string;
-    installations: InstallationRecord[];
-}
+export type { InstallationRecord, InstallationManifest } from '../../types/installation.js';
 declare function buildMcpEntry(): McpEntry;
 declare function readJsonFile(filePath: string): ToolConfig;
 declare function hasPlanuEntry(config: ToolConfig, format: ToolDefinition['format']): boolean;

package/dist/core/shared/fs.d.ts

@@ -0,0 +1,11 @@
+export declare function fileExists(filePath: string): Promise<boolean>;
+export declare function fileExistsIn(basePath: string, relativePath: string): Promise<boolean>;
+export declare function fileExistsByRead(filePath: string): Promise<boolean>;
+export declare const pathExists: typeof fileExists;
+export declare function pathExistsByStat(filePath: string): Promise<boolean>;
+export declare function pathExistsStrict(filePath: string): Promise<boolean>;
+export declare function pathExistsStrictByStat(filePath: string): Promise<boolean>;
+export declare function readFileSafe(filePath: string): Promise<string>;
+export declare function readFileSafeSync(filePath: string): string;
+export declare function readFileOrNull(filePath: string): Promise<string | null>;
+//# sourceMappingURL=fs.d.ts.map

package/dist/core/shared/fs.js

@@ -0,0 +1,90 @@
+import { access, readFile, stat } from 'node:fs/promises';
+import { readFileSync } from 'node:fs';
+import { join } from 'node:path';
+function isEnoent(error) {
+    return (error.code === 'ENOENT' ||
+        (error instanceof Error && error.message === 'ENOENT'));
+}
+function isEnoentCode(error) {
+    return error.code === 'ENOENT';
+}
+export async function fileExists(filePath) {
+    try {
+        await access(filePath);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+export async function fileExistsIn(basePath, relativePath) {
+    return fileExists(join(basePath, relativePath));
+}
+export async function fileExistsByRead(filePath) {
+    try {
+        await readFile(filePath, 'utf-8');
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+export const pathExists = fileExists;
+export async function pathExistsByStat(filePath) {
+    try {
+        await stat(filePath);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+export async function pathExistsStrict(filePath) {
+    try {
+        await access(filePath);
+        return true;
+    }
+    catch (error) {
+        if (isEnoent(error)) {
+            return false;
+        }
+        throw error;
+    }
+}
+export async function pathExistsStrictByStat(filePath) {
+    try {
+        await stat(filePath);
+        return true;
+    }
+    catch (error) {
+        if (isEnoentCode(error)) {
+            return false;
+        }
+        throw error;
+    }
+}
+export async function readFileSafe(filePath) {
+    try {
+        return await readFile(filePath, 'utf-8');
+    }
+    catch {
+        return '';
+    }
+}
+export function readFileSafeSync(filePath) {
+    try {
+        return readFileSync(filePath, 'utf-8');
+    }
+    catch {
+        return '';
+    }
+}
+export async function readFileOrNull(filePath) {
+    try {
+        return await readFile(filePath, 'utf-8');
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=fs.js.map

package/dist/core/shared/strings.d.ts

@@ -0,0 +1,3 @@
+export declare function escapeRegex(str: string): string;
+export declare function escapeHtml(str: string): string;
+//# sourceMappingURL=strings.d.ts.map

package/dist/core/shared/strings.js

@@ -0,0 +1,13 @@
+const REGEX_METACHARACTERS = /[.*+?^${}()|[\]\\]/g;
+export function escapeRegex(str) {
+    return str.replace(REGEX_METACHARACTERS, '\\$&');
+}
+export function escapeHtml(str) {
+    return str
+        .replace(/&/g, '&')
+        .replace(/</g, '&lt;')
+        .replace(/>/g, '&gt;')
+        .replace(/"/g, '&quot;')
+        .replace(/'/g, '&#39;');
+}
+//# sourceMappingURL=strings.js.map

package/dist/engine/actuals/git-analyzer.js

@@ -1,7 +1,7 @@
 // Planu — engine/actuals/git-analyzer.ts (SPEC-061)
 // Derives actuals from git log history for a given spec.
 import { execFileSync } from 'node:child_process';
-import { isCanonicalSpecId } from '../../tools/schemas/spec-id.js';
+import { isCanonicalSpecId } from '../spec-format/spec-id.js';
 const MAX_SESSION_GAP_MS = 2 * 60 * 60 * 1000; // 2 hours
 const REVIEW_HOURS_RATIO = 0.15;
 const MINIMUM_DEV_HOURS = 1;

package/dist/engine/actuals/progress-parser.js

@@ -1,6 +1,4 @@
-function escapeRegex(input) {
-    return input.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
-}
+import { escapeRegex } from '../../core/shared/strings.js';
 /**
  * Parses progress.md content and extracts any actual metrics found.
  *

package/dist/engine/agent-handoff-store.js

@@ -1,6 +1,7 @@
 // engine/agent-handoff-store.ts — SPEC-639: handoff.json protocol for agent teams
 import { readFile, writeFile, mkdir } from 'node:fs/promises';
 import { join } from 'node:path';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { hashProjectPath, projectDataDir } from '../storage/base-store.js';
 function handoffPath(projectPath, specId) {
     return join(projectDataDir(hashProjectPath(projectPath)), 'team', specId, 'handoff.json');

package/dist/engine/agent-squad/dispatcher.js

@@ -3,6 +3,7 @@ import { readFile } from 'node:fs/promises';
 import { join, dirname } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { resolveAgents } from '../agent-router.js';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { appendSquadRun, getSquadConfig } from '../../storage/agent-squad-store.js';
 const CONFIG_DIR = join(dirname(fileURLToPath(import.meta.url)), '../../config');
 async function loadRegistry() {

package/dist/engine/agent-telemetry.js

@@ -3,6 +3,7 @@ import { appendFile, stat, readFile, writeFile, mkdir } from 'node:fs/promises';
 import { createReadStream } from 'node:fs';
 import { createInterface } from 'node:readline';
 import { join } from 'node:path';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { hashProjectPath, projectDataDir } from '../storage/base-store.js';
 const MAX_FILE_BYTES = 1024 * 1024; // 1 MB
 const PRUNE_AGE_MS = 30 * 24 * 60 * 60 * 1000; // 30 days

package/dist/engine/auth/config.js

@@ -3,6 +3,7 @@
 // Persists to the canonical config root. Never persists tokens.
 import { readFile, writeFile, mkdir } from 'node:fs/promises';
 import { join } from 'node:path';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { resolveStorageLayout } from '../../storage/storage-layout.js';
 const CONFIG_DIR = resolveStorageLayout().config;
 const CONFIG_PATH = join(CONFIG_DIR, 'auth-config.json');

package/dist/engine/auto-updater/atomic-upgrade.js

@@ -1,6 +1,7 @@
 import { readFile, rm } from 'node:fs/promises';
 import { isAbsolute } from 'node:path';
 import { atomicWriteFile } from '../safety/atomic-write-file.js';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { readInstallationManifest, } from '../../cli/commands/install.js';
 import { buildPinnedEntry } from './config-patcher.js';
 import { stageAndVerifyRelease } from './release-verifier.js';

package/dist/engine/auto-updater/index.js

@@ -5,6 +5,7 @@ import { detectPlanuInstall } from './config-detector.js';
 import { buildPinnedEntry } from './config-patcher.js';
 import { fetchLatestVersion } from './npm-registry.js';
 import { PLANU_VERSION } from '../../config/version.js';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { resolveStorageLayout } from '../../storage/storage-layout.js';
 import { upgradeInventoriedAdapters } from './atomic-upgrade.js';
 export { upgradeInventoriedAdapters } from './atomic-upgrade.js';

package/dist/engine/autopilot/action-registry.js

@@ -79,6 +79,7 @@ const ACTION_HANDLERS = {
         if (!ctx.specId) {
             return { success: false, summary: 'No specId', durationMs: 0 };
         }
+        // eslint-disable-next-line no-restricted-syntax -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
         const { handleSuggestCriteria } = await import('../../tools/domain-criteria-handler.js');
         const result = await handleSuggestCriteria({
             projectId: ctx.projectId,
@@ -91,6 +92,7 @@ const ACTION_HANDLERS = {
         };
     }),
     detect_contradictions: wrapHandler('detect_contradictions', async (ctx) => {
+        // eslint-disable-next-line no-restricted-syntax -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
         const { specStore } = await import('../../storage/index.js');
         const { detectContradictions } = await import('../contradiction-detector.js');
         const specs = await specStore.listSpecs(ctx.projectId);
@@ -116,6 +118,7 @@ const ACTION_HANDLERS = {
         if (!ctx.specId) {
             return { success: false, summary: 'No specId', durationMs: 0 };
         }
+        // eslint-disable-next-line no-restricted-syntax -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
         const { handleChallengeSpec } = await import('../../tools/challenge-spec.js');
         const result = await handleChallengeSpec({
             projectPath: ctx.projectPath,
@@ -131,6 +134,7 @@ const ACTION_HANDLERS = {
         if (!ctx.specId) {
             return { success: false, summary: 'No specId', durationMs: 0 };
         }
+        // eslint-disable-next-line no-restricted-syntax -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
         const { handleSpecQualityScore } = await import('../../tools/spec-quality-score-handler.js');
         const result = await handleSpecQualityScore({
             projectPath: ctx.projectPath,
@@ -146,6 +150,7 @@ const ACTION_HANDLERS = {
         if (!ctx.specId) {
             return { success: false, summary: 'No specId', durationMs: 0 };
         }
+        // eslint-disable-next-line no-restricted-syntax -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
         const { handleOrchestrateAgents } = await import('../../tools/orchestrate-agents-handler.js');
         const result = await handleOrchestrateAgents({
             projectPath: ctx.projectPath,
@@ -163,11 +168,13 @@ const ACTION_HANDLERS = {
             return { success: false, summary: 'No specId', durationMs: 0 };
         }
         // TDD scaffold needs specPath — resolve from specId
+        // eslint-disable-next-line no-restricted-syntax -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
         const { specStore } = await import('../../storage/index.js');
         const spec = await specStore.getSpec(ctx.projectId, ctx.specId);
         if (!spec?.specPath) {
             return { success: false, summary: `Spec ${ctx.specId} has no specPath`, durationMs: 0 };
         }
+        // eslint-disable-next-line no-restricted-syntax -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
         const { handleTddScaffold } = await import('../../tools/tdd-scaffold-handler.js');
         const result = await handleTddScaffold({
             projectPath: ctx.projectPath,
@@ -198,6 +205,7 @@ const ACTION_HANDLERS = {
         };
     }),
     generate_changelog: wrapHandler('generate_changelog', async (ctx) => {
+        // eslint-disable-next-line no-restricted-syntax -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
         const { specStore } = await import('../../storage/index.js');
         const specs = await specStore.listSpecs(ctx.projectId);
         const { generateChangelog } = await import('../doc-generator/support-generators.js');
@@ -205,6 +213,7 @@ const ACTION_HANDLERS = {
         // Generated changelog is returned to callers; strict Planu mode forbids planu/CHANGELOG.md.
         const { writeFile, mkdir } = await import('node:fs/promises');
         const { join } = await import('node:path');
+        // eslint-disable-next-line no-restricted-syntax -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
         const { projectDataDir } = await import('../../storage/base-store.js');
         const changelogPath = join(projectDataDir(ctx.projectId), 'generated', 'CHANGELOG.md');
         await mkdir(join(projectDataDir(ctx.projectId), 'generated'), { recursive: true });
@@ -237,6 +246,7 @@ const ACTION_HANDLERS = {
         };
     }),
     log_lesson: wrapHandler('log_lesson', async (ctx) => {
+        // eslint-disable-next-line no-restricted-syntax -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
         const { addLesson } = await import('../../storage/lessons-store.js');
         // drift:detected events (auto-drift.ts) are project-wide and carry no
         // ctx.specId; fall back to the payload's specIds so the lesson stays
@@ -264,6 +274,7 @@ const ACTION_HANDLERS = {
     }),
     // ── B.2: spec:created triggers ──────────────────────────────────────────────
     heal_spec_docs: wrapHandler('heal_spec_docs', async (ctx) => {
+        // eslint-disable-next-line no-restricted-syntax -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
         const { handleHealSpecDocs } = await import('../../tools/heal-spec-docs.js');
         // SPEC-579: pass specId so cascade-triggered healing scopes to the changing
         // spec only, instead of mass-rewriting all technical.md files in the project.
@@ -278,6 +289,7 @@ const ACTION_HANDLERS = {
         };
     }),
     similar_problems_finder: wrapHandler('similar_problems_finder', async (ctx) => {
+        // eslint-disable-next-line no-restricted-syntax -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
         const { handleSimilarProblemsFinder } = await import('../../tools/knowledge-base-handler.js');
         const result = await handleSimilarProblemsFinder({
             projectPath: ctx.projectPath,
@@ -294,6 +306,7 @@ const ACTION_HANDLERS = {
         if (!ctx.specId) {
             return { success: false, summary: 'No specId', durationMs: 0 };
         }
+        // eslint-disable-next-line no-restricted-syntax -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
         const { specStore } = await import('../../storage/index.js');
         const spec = await specStore.getSpec(ctx.projectId, ctx.specId);
         if (!spec) {
@@ -309,6 +322,7 @@ const ACTION_HANDLERS = {
         };
     }),
     run_spec_lint: wrapHandler('run_spec_lint', async (ctx) => {
+        // eslint-disable-next-line no-restricted-syntax -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
         const { handleRunSpecLint } = await import('../../tools/spec-lint-handler.js');
         const result = await handleRunSpecLint({
             projectPath: ctx.projectPath,
@@ -341,6 +355,7 @@ const ACTION_HANDLERS = {
         if (!ctx.specId) {
             return { success: false, summary: 'No specId', durationMs: 0 };
         }
+        // eslint-disable-next-line no-restricted-syntax -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
         const { handleSpecHealthCheck } = await import('../../tools/validation-loop-handler.js');
         const result = await handleSpecHealthCheck({
             projectPath: ctx.projectPath,
@@ -353,6 +368,7 @@ const ACTION_HANDLERS = {
         };
     }),
     check_parallel_safety: wrapHandler('check_parallel_safety', async (ctx) => {
+        // eslint-disable-next-line no-restricted-syntax -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
         const { handleCheckParallelSafety } = await import('../../tools/parallel-safety-handler.js');
         const result = handleCheckParallelSafety({ projectPath: ctx.projectPath });
         return {
@@ -366,6 +382,7 @@ const ACTION_HANDLERS = {
         if (!ctx.specId) {
             return { success: false, summary: 'No specId', durationMs: 0 };
         }
+        // eslint-disable-next-line no-restricted-syntax -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
         const { handleAutoFixValidation } = await import('../../tools/auto-fix-validation.js');
         const result = await handleAutoFixValidation({
             projectPath: ctx.projectPath,
@@ -380,6 +397,7 @@ const ACTION_HANDLERS = {
         };
     }),
     calibrate_estimates: wrapHandler('calibrate_estimates', async (ctx) => {
+        // eslint-disable-next-line no-restricted-syntax -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
         const { handleCalibrateEstimates } = await import('../../tools/estimation-accuracy-handler.js');
         const result = await handleCalibrateEstimates({
             projectPath: ctx.projectPath,
@@ -394,6 +412,7 @@ const ACTION_HANDLERS = {
         if (!ctx.specId) {
             return { success: false, summary: 'No specId', durationMs: 0 };
         }
+        // eslint-disable-next-line no-restricted-syntax -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
         const { specStore } = await import('../../storage/index.js');
         const spec = await specStore.getSpec(ctx.projectId, ctx.specId);
         const specPath = spec?.specPath ?? ctx.specId;
@@ -410,6 +429,7 @@ const ACTION_HANDLERS = {
         if (!ctx.specId) {
             return { success: false, summary: 'No specId', durationMs: 0 };
         }
+        // eslint-disable-next-line no-restricted-syntax -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
         const { handleGenerateEdgeTests } = await import('../../tools/tdd-handler.js');
         const result = await handleGenerateEdgeTests({
             projectPath: ctx.projectPath,

package/dist/engine/autopilot/audit-logger.js

@@ -1,6 +1,7 @@
 // engine/autopilot/audit-logger.ts — SPEC-468: Persistent audit log for autopilot cascade actions
 import { appendFile, readFile, mkdir, writeFile } from 'node:fs/promises';
 import { join, dirname } from 'node:path';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { hashProjectPath, projectDataDir } from '../../storage/base-store.js';
 const MAX_LINES = 1000;
 /** Fire-and-forget write. Never blocks. */

package/dist/engine/autopilot/bootstrap.js

@@ -32,6 +32,7 @@ function registerImplementingCascadeListener() {
     onAutopilotEvent('spec:status:implementing', (event) => {
         void (async () => {
             try {
+                // eslint-disable-next-line no-restricted-syntax -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
                 const { handleRecommendModel } = await import('../../tools/recommend-model-handler.js');
                 handleRecommendModel({ specId: event.specId });
             }
@@ -39,7 +40,9 @@ function registerImplementingCascadeListener() {
                 /* best-effort */
             }
             try {
-                const { handleContextWindowStatus } = await import('../../tools/context-manager-handler.js');
+                const { handleContextWindowStatus } = 
+                // eslint-disable-next-line no-restricted-syntax -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
+                await import('../../tools/context-manager-handler.js');
                 await handleContextWindowStatus({ projectPath: event.projectPath });
             }
             catch {
@@ -81,6 +84,7 @@ function registerPluginInstalledListener() {
                 if (!Array.isArray(pluginIds) || pluginIds.length === 0) {
                     return;
                 }
+                // eslint-disable-next-line no-restricted-syntax -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
                 const { handleManagePlugins } = await import('../../tools/manage-plugins-handler.js');
                 for (const pluginId of pluginIds) {
                     if (typeof pluginId !== 'string') {
@@ -108,7 +112,10 @@ function registerSemanticIndexRefreshListener() {
     onAutopilotEvent('spec:created', (event) => {
         void (async () => {
             try {
-                const { getOrCreateBackend } = await import('../../storage/vector-store/backend-factory.js');
+                const { getOrCreateBackend } = 
+                // eslint-disable-next-line no-restricted-syntax -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
+                await import('../../storage/vector-store/backend-factory.js');
+                // eslint-disable-next-line no-restricted-syntax -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
                 const { SemanticIndexStore } = await import('../../storage/semantic-index-store.js');
                 const backend = await getOrCreateBackend(event.projectId);
                 const allDocs = await backend.getAll();

package/dist/engine/autopilot/complete-loop.js

@@ -46,6 +46,7 @@ async function runWithProgress(projectPath, projectId, specId, action, fn) {
  * existing create-branch handler so naming conventions stay consistent.
  */
 async function doAutoCreateBranch(projectId, specId) {
+    // eslint-disable-next-line no-restricted-syntax -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
     const { handleCreateBranch } = await import('../../tools/git/branch-ops.js');
     // SPEC-1396: cascade side effect — create the ref, never move the shared checkout.
     const result = await handleCreateBranch(projectId, specId, undefined, undefined, {
@@ -69,11 +70,13 @@ export function fireAutoCreateBranch(projectPath, projectId, specId) {
  * tdd_scaffold handler once the spec path is resolved.
  */
 async function doAutoScaffoldTdd(projectPath, projectId, specId) {
+    // eslint-disable-next-line no-restricted-syntax -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
     const { specStore } = await import('../../storage/index.js');
     const spec = await specStore.getSpec(projectId, specId);
     if (!spec?.specPath) {
         throw new Error(`spec ${specId} has no specPath`);
     }
+    // eslint-disable-next-line no-restricted-syntax -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
     const { handleTddScaffold } = await import('../../tools/tdd-scaffold-handler.js');
     const result = await handleTddScaffold({ projectPath, specPath: spec.specPath });
     if (result.isError === true) {
@@ -100,6 +103,7 @@ export function resolveAutoMergeThreshold(config) {
  * Fire-and-forget — delegates to handleCreatePRFromSpec and captures errors.
  */
 async function doAutoCreatePr(specId) {
+    // eslint-disable-next-line no-restricted-syntax -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
     const { handleCreatePRFromSpec } = await import('../../tools/github-pr-handler.js');
     const result = await handleCreatePRFromSpec({
         specId,

package/dist/engine/autopilot/crash-shield-rate-limiter.js

@@ -1,6 +1,7 @@
 // engine/autopilot/crash-shield-rate-limiter.ts — SPEC-628: Rate-limit crash scans to max once per 6h per project
 import { readFile, writeFile, mkdir } from 'node:fs/promises';
 import { join, dirname } from 'node:path';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { hashProjectPath, projectDataDir } from '../../storage/base-store.js';
 const SIX_HOURS_MS = 6 * 60 * 60 * 1000;
 function stateFilePath(projectPath) {

package/dist/engine/autopilot/event-bus.js

@@ -1,5 +1,6 @@
 // engine/autopilot/event-bus.ts — SPEC-413: Simple in-memory event bus for autopilot triggers
 // SPEC-772: log each emitted event to autopilot-log.jsonl (best-effort, fire-and-forget)
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { appendAutopilotLogEntry } from '../../storage/autopilot-log-store.js';
 const handlers = new Map();
 export function onAutopilotEvent(name, handler) {

package/dist/engine/autopilot/state-updater.js

@@ -4,10 +4,15 @@
 // SPEC-753: File-lock applied to all writes; self-healing on corrupt reads.
 import { readFile } from 'node:fs/promises';
 import { join } from 'node:path';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { withStatusLock } from '../../storage/status-store/file-lock.js';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { validateStatusJson, rebuildStatusFromFrontmatters, writeRebuiltStatus, } from '../../storage/status-store/self-healing.js';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { syncVersionField } from '../../storage/status-store/version-sync.js';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { hashProjectPath, projectDataDir } from '../../storage/base-store.js';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { atomicStatusWrite } from '../../storage/status-store/atomic-status-write.js';
 const STATUS_FILENAME = 'status.json';
 const MAX_RECENT_CHANGES = 20;
@@ -97,6 +102,7 @@ export async function refreshProjectStatus(projectPath, projectId) {
     const filePath = getStatusPath(projectPath);
     try {
         await withStatusLock(filePath, async () => {
+            // eslint-disable-next-line no-restricted-syntax -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
             const { specStore } = await import('../../storage/index.js');
             const specs = await specStore.listSpecs(projectId);
             const { PLANU_VERSION } = await import('../../config/version.js');

package/dist/engine/browser-validator.js

@@ -2,6 +2,7 @@ import { technologyValue } from './technology-registry.js';
 // engine/browser-validator.ts — SPEC-308: Parse spec criteria for UI checkable assertions
 import { execFile } from 'node:child_process';
 import { promisify } from 'node:util';
+import { escapeRegex as escapeRegExpLiteral } from '../core/shared/strings.js';
 const execFileAsync = promisify(execFile);
 /** Patterns that indicate a visibility assertion. */
 const VISIBILITY_KEYWORDS = ['visible', 'shown', 'displayed', 'appear', 'shows', 'see'];
@@ -88,9 +89,6 @@ export function extractUIAssertions(criteriaMarkdown) {
     }
     return assertions;
 }
-function escapeRegExpLiteral(value) {
-    return value.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
-}
 function safeComment(value) {
     return value.replace(/[\r\n\u2028\u2029]+/g, ' ');
 }

package/dist/engine/build-tool-detector.js

@@ -5,6 +5,7 @@ import { technologyValue } from './technology-registry.js';
 // package.json devDependencies and config files.
 import { readFile, access } from 'node:fs/promises';
 import { join } from 'node:path';
+import { readFileSafe } from '../core/shared/fs.js';
 // -- Constants ----------------------------------------------------------------
 /** devDependency key → BuildTool */
 const DEV_DEP_TO_BUILD_TOOL = new Map([
@@ -71,14 +72,6 @@ async function configFileExists(filePath) {
         return false;
     }
 }
-async function readFileSafe(filePath) {
-    try {
-        return await readFile(filePath, 'utf-8');
-    }
-    catch {
-        return '';
-    }
-}
 function allDeps(pkg) {
     return { ...pkg.dependencies, ...pkg.devDependencies };
 }