@planu/cli 5.3.68 → 5.4.0

package/dist/engine/autopilot/complete-loop.js

@@ -46,6 +46,7 @@ async function runWithProgress(projectPath, projectId, specId, action, fn) {
  * existing create-branch handler so naming conventions stay consistent.
  */
 async function doAutoCreateBranch(projectId, specId) {
+    // eslint-disable-next-line no-restricted-syntax -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
     const { handleCreateBranch } = await import('../../tools/git/branch-ops.js');
     // SPEC-1396: cascade side effect — create the ref, never move the shared checkout.
     const result = await handleCreateBranch(projectId, specId, undefined, undefined, {
@@ -69,11 +70,13 @@ export function fireAutoCreateBranch(projectPath, projectId, specId) {
  * tdd_scaffold handler once the spec path is resolved.
  */
 async function doAutoScaffoldTdd(projectPath, projectId, specId) {
+    // eslint-disable-next-line no-restricted-syntax -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
     const { specStore } = await import('../../storage/index.js');
     const spec = await specStore.getSpec(projectId, specId);
     if (!spec?.specPath) {
         throw new Error(`spec ${specId} has no specPath`);
     }
+    // eslint-disable-next-line no-restricted-syntax -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
     const { handleTddScaffold } = await import('../../tools/tdd-scaffold-handler.js');
     const result = await handleTddScaffold({ projectPath, specPath: spec.specPath });
     if (result.isError === true) {
@@ -100,6 +103,7 @@ export function resolveAutoMergeThreshold(config) {
  * Fire-and-forget — delegates to handleCreatePRFromSpec and captures errors.
  */
 async function doAutoCreatePr(specId) {
+    // eslint-disable-next-line no-restricted-syntax -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
     const { handleCreatePRFromSpec } = await import('../../tools/github-pr-handler.js');
     const result = await handleCreatePRFromSpec({
         specId,

package/dist/engine/autopilot/crash-shield-rate-limiter.js

@@ -1,6 +1,7 @@
 // engine/autopilot/crash-shield-rate-limiter.ts — SPEC-628: Rate-limit crash scans to max once per 6h per project
 import { readFile, writeFile, mkdir } from 'node:fs/promises';
 import { join, dirname } from 'node:path';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { hashProjectPath, projectDataDir } from '../../storage/base-store.js';
 const SIX_HOURS_MS = 6 * 60 * 60 * 1000;
 function stateFilePath(projectPath) {

package/dist/engine/autopilot/event-bus.js

@@ -1,5 +1,6 @@
 // engine/autopilot/event-bus.ts — SPEC-413: Simple in-memory event bus for autopilot triggers
 // SPEC-772: log each emitted event to autopilot-log.jsonl (best-effort, fire-and-forget)
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { appendAutopilotLogEntry } from '../../storage/autopilot-log-store.js';
 const handlers = new Map();
 export function onAutopilotEvent(name, handler) {

package/dist/engine/autopilot/state-updater.js

@@ -4,10 +4,15 @@
 // SPEC-753: File-lock applied to all writes; self-healing on corrupt reads.
 import { readFile } from 'node:fs/promises';
 import { join } from 'node:path';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { withStatusLock } from '../../storage/status-store/file-lock.js';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { validateStatusJson, rebuildStatusFromFrontmatters, writeRebuiltStatus, } from '../../storage/status-store/self-healing.js';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { syncVersionField } from '../../storage/status-store/version-sync.js';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { hashProjectPath, projectDataDir } from '../../storage/base-store.js';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { atomicStatusWrite } from '../../storage/status-store/atomic-status-write.js';
 const STATUS_FILENAME = 'status.json';
 const MAX_RECENT_CHANGES = 20;
@@ -97,6 +102,7 @@ export async function refreshProjectStatus(projectPath, projectId) {
     const filePath = getStatusPath(projectPath);
     try {
         await withStatusLock(filePath, async () => {
+            // eslint-disable-next-line no-restricted-syntax -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
             const { specStore } = await import('../../storage/index.js');
             const specs = await specStore.listSpecs(projectId);
             const { PLANU_VERSION } = await import('../../config/version.js');

package/dist/engine/browser-validator.js

@@ -2,6 +2,7 @@ import { technologyValue } from './technology-registry.js';
 // engine/browser-validator.ts — SPEC-308: Parse spec criteria for UI checkable assertions
 import { execFile } from 'node:child_process';
 import { promisify } from 'node:util';
+import { escapeRegex as escapeRegExpLiteral } from '../core/shared/strings.js';
 const execFileAsync = promisify(execFile);
 /** Patterns that indicate a visibility assertion. */
 const VISIBILITY_KEYWORDS = ['visible', 'shown', 'displayed', 'appear', 'shows', 'see'];
@@ -88,9 +89,6 @@ export function extractUIAssertions(criteriaMarkdown) {
     }
     return assertions;
 }
-function escapeRegExpLiteral(value) {
-    return value.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
-}
 function safeComment(value) {
     return value.replace(/[\r\n\u2028\u2029]+/g, ' ');
 }

package/dist/engine/build-tool-detector.js

@@ -5,6 +5,7 @@ import { technologyValue } from './technology-registry.js';
 // package.json devDependencies and config files.
 import { readFile, access } from 'node:fs/promises';
 import { join } from 'node:path';
+import { readFileSafe } from '../core/shared/fs.js';
 // -- Constants ----------------------------------------------------------------
 /** devDependency key → BuildTool */
 const DEV_DEP_TO_BUILD_TOOL = new Map([
@@ -71,14 +72,6 @@ async function configFileExists(filePath) {
         return false;
     }
 }
-async function readFileSafe(filePath) {
-    try {
-        return await readFile(filePath, 'utf-8');
-    }
-    catch {
-        return '';
-    }
-}
 function allDeps(pkg) {
     return { ...pkg.dependencies, ...pkg.devDependencies };
 }

package/dist/engine/bundle-installer.js

@@ -1,9 +1,10 @@
 // @crash-shield-ignore-file — config/cache reader for Planu-controlled JSON; writer is this codebase, shape guaranteed by build/seed.
 // Planu — bundle-installer.ts
 // Installs domain bundle components (skills, rules, spec templates) into a project.
-import { readFile, writeFile, mkdir, access } from 'node:fs/promises';
+import { readFile, writeFile, mkdir } from 'node:fs/promises';
 import { join, dirname } from 'node:path';
 import { fileURLToPath } from 'node:url';
+import { fileExists } from '../core/shared/fs.js';
 // ---------------------------------------------------------------------------
 // Config loading
 // ---------------------------------------------------------------------------
@@ -31,15 +32,6 @@ export async function listBundlesAsync() {
 /**
  * Checks if a file exists at the given path.
  */
-async function fileExists(filePath) {
-    try {
-        await access(filePath);
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
 /**
  * Writes a file, creating parent directories as needed.
  */

package/dist/engine/cascade-hooks/core/append-releases.js

@@ -6,6 +6,7 @@ import { readFile, mkdir } from 'node:fs/promises';
 import { execFile as execFileCallback } from 'node:child_process';
 import { createRequire } from 'node:module';
 import { promisify } from 'node:util';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { specStore } from '../../../storage/index.js';
 import { reportClassifiedDegradation } from '../../../errors/classified-degradation.js';
 const CORE_ACTION_BUDGET_MS = 2000;

package/dist/engine/cascade-hooks/core/write-session-json.js

@@ -8,12 +8,12 @@ async function actuallyWriteSessionJson(ctx, opts) {
     if (opts.signal.aborted) {
         throw new Error('write-session-json aborted before start');
     }
-    const { generateSessionContext } = await import('../../session-context-generator.js');
+    const { refreshSessionArtifacts } = await import('../../session-state/session-artifact-refresher.js');
     await new Promise((resolve, reject) => {
         opts.signal.addEventListener('abort', () => {
             reject(new Error('CoreActionTimeoutError: write-session-json timed out'));
         });
-        generateSessionContext(projectPath, projectId)
+        refreshSessionArtifacts(projectPath, projectId)
             .then(() => {
             resolve();
         })

package/dist/engine/cascade-hooks/hooks/dispatch-hook-event.hook.d.ts

@@ -1,3 +1,5 @@
-import type { CascadeHook } from '../../../types/cascade-hooks.js';
+import type { CascadeHook, DispatchHookEventFn } from '../../../types/cascade-hooks.js';
+/** Wired by the tools layer at startup so this engine module never imports tools/. */
+export declare function setDispatchHookEventHandler(fn: DispatchHookEventFn): void;
 export declare const dispatchHookEventHook: CascadeHook;
 //# sourceMappingURL=dispatch-hook-event.hook.d.ts.map

package/dist/engine/cascade-hooks/hooks/dispatch-hook-event.hook.js

@@ -1,16 +1,25 @@
-import { dispatchHookEvent } from '../../../tools/manage-hooks.js';
 import { buildStatusChangePayload } from '../../hooks/triggers.js';
 import { withAudit } from '../../autopilot/audit-logger.js';
+let dispatchHookEvent;
+/** Wired by the tools layer at startup so this engine module never imports tools/. */
+export function setDispatchHookEventHandler(fn) {
+    dispatchHookEvent = fn;
+}
 async function handler(ctx) {
     const { projectPath, projectId, specId, spec, newStatus, currentStatus } = ctx;
+    if (!dispatchHookEvent) {
+        console.error('[planu] dispatchHookEvent failed: no handler registered');
+        return;
+    }
+    const dispatch = dispatchHookEvent;
     const payload = buildStatusChangePayload(projectId, specId, spec.title, currentStatus, newStatus);
     if (projectPath) {
-        await withAudit(projectPath, `update_status(${newStatus})`, 'dispatchHookEvent', () => dispatchHookEvent(projectId, payload)).catch((err) => {
+        await withAudit(projectPath, `update_status(${newStatus})`, 'dispatchHookEvent', () => dispatch(projectId, payload)).catch((err) => {
             console.error('[planu] dispatchHookEvent failed:', err);
         });
     }
     else {
-        await dispatchHookEvent(projectId, payload).catch((err) => {
+        await dispatch(projectId, payload).catch((err) => {
             console.error('[planu] dispatchHookEvent failed:', err);
         });
     }

package/dist/engine/cascade-hooks/hooks/estimate-calibration.hook.js

@@ -4,6 +4,7 @@ async function handler(ctx) {
         return;
     }
     try {
+        // eslint-disable-next-line no-restricted-syntax -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
         const { listActuals, saveCalibration } = await import('../../../storage/actuals-store.js');
         const { computeCalibrationFactors } = await import('../../estimation-calibrator.js');
         const records = await listActuals(projectId);

package/dist/engine/cascade-hooks/hooks/housekeeping-on-done.hook.js

@@ -1,4 +1,6 @@
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { appendAutopilotLogEntry } from '../../../storage/autopilot-log-store.js';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { hashProjectPath } from '../../../storage/base-store.js';
 async function handler(ctx) {
     const { projectPath, specId } = ctx;

package/dist/engine/cascade-hooks/hooks/implementing-kickoff.hook.js

@@ -1,4 +1,6 @@
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { appendAutopilotLogEntry } from '../../../storage/autopilot-log-store.js';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { hashProjectPath } from '../../../storage/base-store.js';
 function logExecutionPlanOutcome(projectPath, entry) {
     try {
@@ -11,7 +13,9 @@ function logExecutionPlanOutcome(projectPath, entry) {
 async function fireExecutionPlan(projectPath, projectId, specId) {
     const start = Date.now();
     try {
-        const { handleGenerateExecutionPlan } = await import('../../../tools/generate-execution-plan.js');
+        const { handleGenerateExecutionPlan } = 
+        // eslint-disable-next-line no-restricted-syntax -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
+        await import('../../../tools/generate-execution-plan.js');
         const result = await handleGenerateExecutionPlan({ specId, projectId });
         logExecutionPlanOutcome(projectPath, {
             specId,

package/dist/engine/cascade-hooks/hooks/lesson-drift.hook.js

@@ -1,3 +1,4 @@
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { addLesson, getLessons } from '../../../storage/lessons-store.js';
 async function handler(ctx) {
     const { spec, projectId, projectPath, validateScore } = ctx;

package/dist/engine/cascade-hooks/hooks/orchestration-plan.hook.js

@@ -4,6 +4,7 @@ async function handler(ctx) {
         return;
     }
     try {
+        // eslint-disable-next-line no-restricted-syntax -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
         const { specStore } = await import('../../../storage/index.js');
         await specStore.withFreshSpecsLock(projectId, async (freshSpecs) => {
             const approvedCount = freshSpecs.filter((spec) => spec.status === 'approved').length;

package/dist/engine/cascade-hooks/hooks/session-context.hook.js

@@ -1,4 +1,6 @@
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { appendAutopilotLogEntry } from '../../../storage/autopilot-log-store.js';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { hashProjectPath } from '../../../storage/base-store.js';
 async function handler(ctx) {
     const { projectPath, projectId, specId } = ctx;
@@ -7,8 +9,8 @@ async function handler(ctx) {
     }
     const start = Date.now();
     try {
-        const { generateSessionContext } = await import('../../session-context-generator.js');
-        await generateSessionContext(projectPath, projectId);
+        const { refreshSessionArtifacts } = await import('../../session-state/session-artifact-refresher.js');
+        await refreshSessionArtifacts(projectPath, projectId);
     }
     catch (err) {
         const error = err instanceof Error ? err.message : String(err);

package/dist/engine/cascade-hooks/hooks/slack-notify.hook.js

@@ -1,3 +1,4 @@
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { getSlackConfig, appendDelivery } from '../../../storage/slack-store.js';
 import { buildSpecPayload, dispatchToSlack } from '../../../engine/slack-dispatcher.js';
 async function handler(ctx) {

package/dist/engine/cascade-hooks/hooks/status-json.hook.js

@@ -1,6 +1,8 @@
 import { recordStatusChange } from '../../autopilot/state-updater.js';
 import { withAudit } from '../../autopilot/audit-logger.js';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { appendAutopilotLogEntry } from '../../../storage/autopilot-log-store.js';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { hashProjectPath } from '../../../storage/base-store.js';
 async function handler(ctx) {
     const { projectPath, projectId, specId, newStatus, currentStatus } = ctx;

package/dist/engine/cascade-hooks/hooks/velocity-profile.hook.js

@@ -1,5 +1,7 @@
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { hashProjectPath } from '../../../storage/base-store.js';
 import { measureVelocity } from '../../velocity/measure-velocity.js';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { saveVelocityProfile } from '../../../storage/velocity-store.js';
 async function handler(ctx) {
     const { projectPath } = ctx;

package/dist/engine/cascade-hooks/runner.js

@@ -1,7 +1,9 @@
 // engine/cascade-hooks/runner.ts — SPEC-714: Cascade runner
 // SPEC-772: fast hooks (hook.fast === true) are awaited synchronously (2s budget)
 import { HOOKS } from './registry.js';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { writeSessionJson } from './core/write-session-json.js';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { appendReleasesPending } from './core/append-releases.js';
 const FAST_HOOK_BUDGET_MS = 2000;
 export async function runCascade(ctx, opts) {

package/dist/engine/cascade-hooks/state-drift-detector.js

@@ -2,7 +2,9 @@
 // Detects drift between in-memory spec store and canonical Planu state files.
 import { readFile } from 'node:fs/promises';
 import { join } from 'node:path';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { specStore } from '../../storage/index.js';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { hashProjectPath, projectDataDir } from '../../storage/base-store.js';
 function externalStatusPath(projectPath) {
     return join(projectDataDir(hashProjectPath(projectPath)), 'status.json');

package/dist/engine/checkpoint/checkpoint-manager.js

@@ -1,5 +1,7 @@
 // engine/checkpoint/checkpoint-manager.ts — Checkpoint lifecycle management (SPEC-411)
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { hashProjectPath } from '../../storage/base-store.js';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { createWorkflowCheckpoint, resolveWorkflowCheckpoint, getPendingWorkflowCheckpoints, } from '../../storage/workflow-checkpoint-store.js';
 // ---------------------------------------------------------------------------
 // Request

package/dist/engine/checkpoint/policy-engine.js

@@ -1,4 +1,5 @@
 // engine/checkpoint/policy-engine.ts — Checkpoint policy evaluation (SPEC-411)
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { readJson, writeJson, projectDataDir, hashProjectPath } from '../../storage/base-store.js';
 // ---------------------------------------------------------------------------
 // Built-in presets

package/dist/engine/ci-generator/stack-detector.js

@@ -1,16 +1,8 @@
 // ci-generator/stack-detector.ts — Detect project stack for CI generation (SPEC-066)
-import { readFile, access } from 'node:fs/promises';
+import { readFile } from 'node:fs/promises';
 import { join } from 'node:path';
+import { fileExists } from '../../core/shared/fs.js';
 // -- File existence helper ---------------------------------------------------
-async function fileExists(filePath) {
-    try {
-        await access(filePath);
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
 async function readTextSafe(filePath) {
     try {
         return await readFile(filePath, 'utf-8');

package/dist/engine/clarification-gate/token-store.js

@@ -2,6 +2,7 @@
 // Persists tokens in data/projects/{hash}/pending-clarifications.json with 5-min TTL.
 // Lazy expiry: expired tokens are pruned on every read, no background process.
 import { createHash } from 'node:crypto';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { readJson, writeJson, projectDataDir } from '../../storage/index.js';
 import { join } from 'node:path';
 export const CLARIFICATION_TOKEN_TTL_MS = 5 * 60 * 1000;

package/dist/engine/claude-config-auditor/claudemd-auditor.js

@@ -1,7 +1,8 @@
 // Planu — CLAUDE.md auditor for SPEC-092 / SPEC-255
-import { readFile, access } from 'node:fs/promises';
+import { readFile } from 'node:fs/promises';
 import { homedir } from 'node:os';
 import { join } from 'node:path';
+import { pathExists } from '../../core/shared/fs.js';
 const DOCS_REF = 'https://code.claude.com/docs/en/memory';
 const MAX_LINES = 200;
 const CRITICAL_LINES = 400;
@@ -20,15 +21,6 @@ async function readFileLines(filePath) {
         return null;
     }
 }
-async function pathExists(p) {
-    try {
-        await access(p);
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
 function auditLineCount(lineCount, label) {
     if (lineCount > V2_CRITICAL_LINES) {
         return {

package/dist/engine/claude-config-auditor/settings-auditor.js

@@ -1,6 +1,7 @@
 // Planu — Settings and extensions auditor for SPEC-092, SPEC-374
-import { readFile, access } from 'node:fs/promises';
+import { readFile } from 'node:fs/promises';
 import { join } from 'node:path';
+import { pathExists } from '../../core/shared/fs.js';
 const DOCS_REF = 'https://code.claude.com/docs/en/settings';
 const RTK_DOCS_REF = 'https://github.com/planu-dev/rtk';
 async function readSettings(filePath) {
@@ -12,15 +13,6 @@ async function readSettings(filePath) {
         return null;
     }
 }
-async function pathExists(p) {
-    try {
-        await access(p);
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
 function settingsHasRtkHook(data) {
     const preToolUse = data.hooks?.PreToolUse;
     if (!Array.isArray(preToolUse)) {

package/dist/engine/client-detection.js

@@ -1,8 +1,9 @@
 // @crash-shield-ignore-file — config/cache reader for Planu-controlled JSON; writer is this codebase, shape guaranteed by build/seed.
 // engine/client-detection.ts — SPEC-645: 4-signal cascade LLM client detection
-import { readFile, writeFile, access, mkdir } from 'node:fs/promises';
+import { readFile, writeFile, mkdir } from 'node:fs/promises';
 import { join } from 'node:path';
 import { getConnectedClient } from './llm-runtime/index.js';
+import { pathExists } from '../core/shared/fs.js';
 // Signal 2: file paths that indicate a specific client
 const FILE_SIGNALS = [
     { path: '.cursor', client: 'cursor' },
@@ -43,15 +44,6 @@ function normalizeClientName(name) {
     }
     return 'unknown';
 }
-async function pathExists(p) {
-    try {
-        await access(p);
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
 /** Signal 1: MCP handshake clientInfo.name */
 function detectFromHandshake() {
     const client = getConnectedClient();

package/dist/engine/compliance/auto-remediator.js

@@ -1,6 +1,7 @@
 // engine/compliance/auto-remediator.ts — Auto-remediation for compliance gaps (SPEC-408)
 import { mkdir, writeFile, access } from 'node:fs/promises';
 import { join } from 'node:path';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { specStore } from '../../storage/index.js';
 import { analyzeComplianceGaps } from './gap-analyzer.js';
 const FRAMEWORK_MAP = {

package/dist/engine/compliance/evidence-builder.d.ts

@@ -1,5 +1,5 @@
 import type { ComplianceEvidencePackage } from '../../types/index.js';
-import type { ComplianceFramework } from './framework-catalog.js';
+import type { ComplianceCatalogFramework } from './framework-catalog.js';
 interface SpecInput {
     id: string;
     title: string;
@@ -14,6 +14,6 @@ interface AuditEventInput {
     specId: string;
     actor?: string;
 }
-export declare function buildEvidencePackage(framework: ComplianceFramework, projectId: string, specs: SpecInput[], auditEvents: AuditEventInput[]): ComplianceEvidencePackage;
+export declare function buildEvidencePackage(framework: ComplianceCatalogFramework, projectId: string, specs: SpecInput[], auditEvents: AuditEventInput[]): ComplianceEvidencePackage;
 export {};
 //# sourceMappingURL=evidence-builder.d.ts.map

package/dist/engine/compliance/framework-catalog.d.ts

@@ -1,15 +1,15 @@
 import type { EnterpriseComplianceFramework } from '../../types/index.js';
 /** Local alias for the enterprise compliance framework union type. */
-export type ComplianceFramework = EnterpriseComplianceFramework;
-export interface ComplianceControl {
+export type ComplianceCatalogFramework = EnterpriseComplianceFramework;
+export interface ComplianceCatalogControl {
     id: string;
-    framework: ComplianceFramework;
+    framework: ComplianceCatalogFramework;
     name: string;
     description: string;
     specPatterns: string[];
     requiredCriteria: string[];
 }
-export declare const COMPLIANCE_CATALOG: ComplianceControl[];
-export declare function getControlsForFramework(framework: ComplianceFramework): ComplianceControl[];
-export declare function findMatchingControls(framework: ComplianceFramework, specTitle: string, specDescription: string): ComplianceControl[];
+export declare const COMPLIANCE_CATALOG: ComplianceCatalogControl[];
+export declare function getControlsForFramework(framework: ComplianceCatalogFramework): ComplianceCatalogControl[];
+export declare function findMatchingControls(framework: ComplianceCatalogFramework, specTitle: string, specDescription: string): ComplianceCatalogControl[];
 //# sourceMappingURL=framework-catalog.d.ts.map

package/dist/engine/compliance/gap-analyzer.d.ts

@@ -1,11 +1,11 @@
 import type { ComplianceGapResult } from '../../types/index.js';
-import { type ComplianceFramework } from './framework-catalog.js';
+import { type ComplianceCatalogFramework } from './framework-catalog.js';
 interface SpecInput {
     id: string;
     title: string;
     description?: string;
     status: string;
 }
-export declare function analyzeComplianceGaps(framework: ComplianceFramework, specs: SpecInput[]): ComplianceGapResult;
+export declare function analyzeComplianceGaps(framework: ComplianceCatalogFramework, specs: SpecInput[]): ComplianceGapResult;
 export {};
 //# sourceMappingURL=gap-analyzer.d.ts.map

package/dist/engine/config-health/build-tool-checker.js

@@ -3,20 +3,12 @@
 // C7: vite.config.ts not in tsconfig include → error
 // C8: rolldown bundler + this.emitFile in config → warning
 // C9: Vite 7+ with explicit es5/es6 target → info
-import { readFile } from 'node:fs/promises';
 import { join } from 'node:path';
 import { detectBuildTool } from '../build-tool-detector.js';
+import { readFileSafe } from '../../core/shared/fs.js';
 // ---------------------------------------------------------------------------
 // Helpers
 // ---------------------------------------------------------------------------
-async function readFileSafe(filePath) {
-    try {
-        return await readFile(filePath, 'utf-8');
-    }
-    catch {
-        return '';
-    }
-}
 function parseVersionMajor(version) {
     if (!version) {
         return null;

package/dist/engine/config-health/ci-commands-collector.d.ts

@@ -1,4 +1,5 @@
-export declare function readFileSafe(filePath: string): Promise<string>;
+import { readFileSafe } from '../../core/shared/fs.js';
+export { readFileSafe };
 export declare function fileExists(filePath: string): Promise<boolean>;
 export declare function collectProjectCommands(projectPath: string): Promise<{
     packageScripts: Set<string>;

package/dist/engine/config-health/ci-commands-collector.js

@@ -1,16 +1,9 @@
 // engine/config-health/ci-commands-collector.ts — SPEC-042
 // Helpers to collect available commands/scripts in a project.
-import { readFile } from 'node:fs/promises';
 import { join } from 'node:path';
 import { glob } from 'glob';
-export async function readFileSafe(filePath) {
-    try {
-        return await readFile(filePath, 'utf-8');
-    }
-    catch {
-        return '';
-    }
-}
+import { readFileSafe } from '../../core/shared/fs.js';
+export { readFileSafe };
 export async function fileExists(filePath) {
     const c = await readFileSafe(filePath);
     return c !== '';

package/dist/engine/config-health/go-checker.js

@@ -1,20 +1,12 @@
 // engine/config-health/go-checker.ts — SPEC-042
 // Go project configuration health checks.
-import { readFile } from 'node:fs/promises';
 import { join } from 'node:path';
 import { glob } from 'glob';
 import healthSchemas from '../../config/config-health-schemas.json' with { type: 'json' };
+import { readFileSafe } from '../../core/shared/fs.js';
 // ---------------------------------------------------------------------------
 // Helpers
 // ---------------------------------------------------------------------------
-async function readFileSafe(filePath) {
-    try {
-        return await readFile(filePath, 'utf-8');
-    }
-    catch {
-        return '';
-    }
-}
 // ---------------------------------------------------------------------------
 // go.mod parser helpers
 // ---------------------------------------------------------------------------

package/dist/engine/config-health/mcp-config-checker.js

@@ -1,18 +1,10 @@
 // engine/config-health/mcp-config-checker.ts — SPEC-1062
 // Detects unsafe Planu MCP host configuration.
-import { access, readFile } from 'node:fs/promises';
+import { readFile } from 'node:fs/promises';
 import { homedir } from 'node:os';
 import { isAbsolute, join } from 'node:path';
+import { fileExists } from '../../core/shared/fs.js';
 import { PLANU_VERSION } from '../../config/version.js';
-async function fileExists(path) {
-    try {
-        await access(path);
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
 async function readIfExists(path) {
     try {
         return await readFile(path, 'utf-8');

package/dist/engine/config-health/python-checker.js

@@ -1,19 +1,11 @@
 // engine/config-health/python-checker.ts — SPEC-042
 // Python project configuration health checks.
-import { readFile } from 'node:fs/promises';
 import { join } from 'node:path';
 import healthSchemas from '../../config/config-health-schemas.json' with { type: 'json' };
+import { readFileSafe } from '../../core/shared/fs.js';
 // ---------------------------------------------------------------------------
 // Helpers
 // ---------------------------------------------------------------------------
-async function readFileSafe(filePath) {
-    try {
-        return await readFile(filePath, 'utf-8');
-    }
-    catch {
-        return '';
-    }
-}
 // ---------------------------------------------------------------------------
 // TOML parser (minimal — no external deps)
 // ---------------------------------------------------------------------------