@planu/cli 5.3.68 → 5.4.0

package/dist/engine/docs-site-generator/markdown-renderer.js

@@ -1,3 +1,4 @@
+import { escapeHtml } from '../../core/shared/strings.js';
 /**
  * Minimal markdown-to-HTML converter for spec rendering.
  * No external dependencies — pure regex-based transformation.
@@ -142,13 +143,6 @@ function renderInline(text) {
     result = result.replace(/\[([^\]]+)\]\(([^)]+)\)/g, '<a href="$2">$1</a>');
     return result;
 }
-function escapeHtml(text) {
-    return text
-        .replace(/&/g, '&amp;')
-        .replace(/</g, '&lt;')
-        .replace(/>/g, '&gt;')
-        .replace(/"/g, '&quot;');
-}
 function closeList(output, inList) {
     if (inList) {
         output.push('</ul>');

package/dist/engine/drift/violation-resolver.js

@@ -1,7 +1,9 @@
 // engine/drift/violation-resolver.ts — Semi-automatic drift violation resolution (SPEC-408)
 import { mkdir, access } from 'node:fs/promises';
 import { join } from 'node:path';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { specStore } from '../../storage/index.js';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { DriftCacheStore } from '../../storage/drift-cache-store.js';
 import { atomicWriteFile } from '../safety/atomic-write-file.js';
 // ---------------------------------------------------------------------------

package/dist/engine/dynamic-knowledge/knowledge-cache.js

@@ -4,6 +4,7 @@
 import { CATEGORY_TTL, } from '../../types/index.js';
 import { readFile, writeFile, mkdir } from 'node:fs/promises';
 import { dirname } from 'node:path';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { resolvedStorageArtifactPath } from '../../storage/storage-catalog.js';
 const MAX_ENTRIES = 200;
 const PRUNE_THRESHOLD_DAYS = 30;

package/dist/engine/ecosystem-absorber/knowledge-cache.js

@@ -1,6 +1,7 @@
 // engine/ecosystem-absorber/knowledge-cache.ts — Reads/writes ecosystem capability cache
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
 import { join } from 'node:path';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { resolveStorageLayout } from '../../storage/storage-layout.js';
 const CACHE_VERSION = '1';
 const PRUNE_DAYS = 30;

package/dist/engine/edge-db-detector.js

@@ -1,19 +1,10 @@
 // engine/edge-db-detector.ts — SPEC-052
 // Detects edge-native SQLite usage: Turso (libSQL) and Cloudflare D1.
-import { readFile } from 'node:fs/promises';
 import { join } from 'node:path';
 import { glob } from 'glob';
+import { readFileOrNull } from '../core/shared/fs.js';
 // === Source file glob ignore list ===
 const SOURCE_GLOB_IGNORE = ['node_modules/**', 'dist/**', 'build/**', '.git/**', 'coverage/**'];
-// === Helpers ===
-async function readFileOrNull(filePath) {
-    try {
-        return await readFile(filePath, 'utf-8');
-    }
-    catch {
-        return null;
-    }
-}
 async function readEdgeDbPackageDeps(projectPath) {
     const content = await readFileOrNull(join(projectPath, 'package.json'));
     if (!content) {

package/dist/engine/escalator/retry-counter.js

@@ -3,6 +3,7 @@
 import { join } from 'node:path';
 import { readFile } from 'node:fs/promises';
 import { atomicWriteFile } from '../safety/atomic-write-file.js';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { projectDataDir } from '../../storage/base-store.js';
 // ---------------------------------------------------------------------------
 // Constants

package/dist/engine/evidence-gates/artifact-reader.js

@@ -4,6 +4,7 @@ import { lstatSync, realpathSync } from 'node:fs';
 import { createHash } from 'node:crypto';
 import { isAbsolute, join, relative, resolve } from 'node:path';
 import { z } from 'zod';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { projectDataDir } from '../../storage/base-store.js';
 import { computeValidationEvidenceIdentity, computeValidationEvidenceKey, normalizeValidationCommand, readMatchingValidationEvidence, } from '../validation-evidence-ledger.js';
 import { VALIDATION_COMMANDS } from '../validation-impact-planner.js';

package/dist/engine/evidence-gates/evidence-autofill.js

@@ -27,6 +27,7 @@ import { extractCanonicalFileOwnership } from '../handoff-packager.js';
 import { handoffEvidencePath } from './artifact-reader.js';
 import { atomicWriteFile } from '../safety/atomic-write-file.js';
 import { ValidationReportV1Schema } from '../handoff-artifacts/schemas.js';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { projectDataDir } from '../../storage/base-store.js';
 import { readFile } from 'node:fs/promises';
 import { reportClassifiedDegradation } from '../../errors/classified-degradation.js';

package/dist/engine/evidence-gates/evidence-skeletons.js

@@ -10,6 +10,7 @@
 import { join } from 'node:path';
 import { extractListItems, extractSection } from '../spec-format/markdown-sections.js';
 import { parseCriterionGroundingRecords } from '../spec-grounding/contract.js';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { projectDataDir } from '../../storage/base-store.js';
 import { atomicWriteFile } from '../safety/atomic-write-file.js';
 const FRONTMATTER_RE = /^---\n([\s\S]*?)\n---/;

package/dist/engine/evidence-gates/reconciliation-freshness.js

@@ -1,6 +1,7 @@
 import { createHash } from 'node:crypto';
 import { lstat, readFile, readdir } from 'node:fs/promises';
 import { join } from 'node:path';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { projectDataDir } from '../../storage/base-store.js';
 import { readCommittedReconciliations } from '../lifecycle-reconciliation.js';
 const BASE_ARTIFACTS = [

package/dist/engine/execution/durable-job-heartbeat-runtime.js

@@ -2,6 +2,7 @@ import { existsSync } from 'node:fs';
 import { isAbsolute, resolve as resolvePath } from 'node:path';
 import { pathToFileURL } from 'node:url';
 import { isMainThread, parentPort, Worker, workerData } from 'node:worker_threads';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { RuntimeDatabase } from '../../storage/runtime-db.js';
 import { reportClassifiedDegradation } from '../../errors/classified-degradation.js';
 function heartbeatWorkerUrl() {

package/dist/engine/execution/job-runtime.js

@@ -1,5 +1,7 @@
 import { createHash, randomUUID } from 'node:crypto';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { RuntimeDatabase, } from '../../storage/runtime-db.js';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { resolveStorageLayout } from '../../storage/storage-layout.js';
 import { getRuntimePolicy } from '../runtime-policy.js';
 import { getExecutionContext } from './context.js';

package/dist/engine/execution/validate-job-executor.d.ts

@@ -1,5 +1,5 @@
 import { DurableJobRuntime } from './job-runtime.js';
-import { type DurableJobRecord } from '../../storage/runtime-db.js';
+import type { DurableJobRecord } from '../../types/durable-job.js';
 import { type ValidateJobExecutorOptions, type ValidateJobRecoveryOptions } from '../../types/durable-validation.js';
 /** Executes accepted validate jobs directly against the validation core, never through MCP. */
 export declare class ValidateJobExecutor {

package/dist/engine/execution/validate-job-executor.js

@@ -2,11 +2,13 @@
 import { randomUUID } from 'node:crypto';
 import { join } from 'node:path';
 import { DurableJobRuntime } from './job-runtime.js';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { RuntimeDatabase } from '../../storage/runtime-db.js';
 import { createExecutionScope } from './context.js';
 import { runValidateWorker } from './validate-worker-runtime.js';
 import { redactValidationProgress, computeDurableValidationBindings, toValidationReceiptBindings, writeValidationArtifactProvenance, } from '../validation/durable-validation.js';
 import { parseValidationReceiptPendingCheckpoint, isValidationReceiptPendingIntent, } from '../../types/durable-validation.js';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { resolveStorageLayout } from '../../storage/storage-layout.js';
 import { reportClassifiedDegradation } from '../../errors/classified-degradation.js';
 import { createValidationReceiptAuthority, ensureValidationIssuerKey, issueValidationReceipt, LOCAL_VALIDATION_RECEIPT_ISSUER, preflightValidationReceiptSigner, } from '../validation/validation-receipt.js';
@@ -16,6 +18,7 @@ import { recoverValidateJobs } from './validate-job-recovery.js';
 import { getRuntimePolicy } from '../runtime-policy.js';
 import { isValidateJob, parseValidatePayload, rehydrateValidationPayload, } from './validate-job-payload.js';
 import { revalidateValidationWorktree } from '../validation/validation-worktree.js';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { projectDataDir } from '../../storage/base-store.js';
 import { redactSensitiveValue, redactText } from '../../security/redactor.js';
 import { MacOSKeychainOperationError } from '../../security/adapters/macos-keychain.js';

package/dist/engine/execution/validate-job-payload.js

@@ -1,5 +1,6 @@
 import { mkdir } from 'node:fs/promises';
 import { join } from 'node:path';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { projectDataDir } from '../../storage/base-store.js';
 import { reportClassifiedDegradation } from '../../errors/classified-degradation.js';
 import { computeDurableValidationBindings, toValidationReceiptBindings, } from '../validation/durable-validation.js';

package/dist/engine/execution/validate-worker-thread.js

@@ -26,6 +26,7 @@ async function execute(value) {
             Date.now() >= request.deadlineAt) {
             throw new Error('[Planu] Validate worker rejected malformed or expired work');
         }
+        // eslint-disable-next-line no-restricted-syntax -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
         const { executeValidate } = await import('../../tools/validate.js');
         const input = request.input;
         const scope = createExecutionScope({ requestId, deadlineAt: request.deadlineAt });

package/dist/engine/facilitate/context-loader.js

@@ -2,6 +2,7 @@
 // engine/facilitate/context-loader.ts — SPEC-264 Loads project context from disk
 import { readdir, readFile } from 'node:fs/promises';
 import { join } from 'node:path';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { hashProjectPath, projectDataDir } from '../../storage/base-store.js';
 // ---------------------------------------------------------------------------
 // Internal helpers

package/dist/engine/figma/change-detector.d.ts

@@ -1,11 +1,4 @@
-import type { FigmaFrame } from '../../types/index.js';
-export interface FigmaFrameSnapshot {
-    nodeId: string;
-    name: string;
-    pageId: string;
-    pageName: string;
-    section: string;
-}
+import type { FigmaFrame, FigmaFrameSnapshot } from '../../types/index.js';
 export interface FigmaRenamedFrame {
     nodeId: string;
     oldName: string;

package/dist/engine/figma/code-connect-fetcher.d.ts

@@ -1,10 +1,4 @@
-export interface FigmaCodeConnectEntry {
-    figmaNodeId: string;
-    componentName: string;
-    codeUrl: string;
-    framework: string;
-    syncedAt: string;
-}
+import type { FigmaCodeConnectEntry } from '../../types/figma.js';
 export declare function fetchCodeConnectMappings(fileKey: string, accessToken: string): Promise<FigmaCodeConnectEntry[]>;
 export declare function buildCodeConnectMap(entries: FigmaCodeConnectEntry[]): Map<string, FigmaCodeConnectEntry>;
 export declare function formatCodeConnectAsMarkdown(entries: FigmaCodeConnectEntry[]): string;

package/dist/engine/figma/design-enricher.d.ts

@@ -1,3 +1,4 @@
+import type { DesignContext, EnrichmentResult } from '../../types/figma.js';
 interface FigmaNode {
     id: string;
     name: string;
@@ -24,23 +25,6 @@ interface FigmaFrame {
     pageName: string;
     section: string;
 }
-export interface DesignContext {
-    nodeId: string;
-    frameName: string;
-    section: string;
-    description: string;
-    componentHints: string[];
-    layoutNotes: string[];
-    colorTokens: string[];
-    generatedAt: string;
-}
-export interface EnrichmentResult {
-    specId: string;
-    enriched: boolean;
-    nodeIds: string[];
-    contexts: DesignContext[];
-    skippedReason?: string;
-}
 export declare function buildDesignContext(nodeId: string, frameName: string, section: string, figmaDocument: FigmaNode): DesignContext;
 export declare function enrichSpecsWithDesignContext(specs: {
     specId: string;

package/dist/engine/figma/design-enricher.js

@@ -1,4 +1,3 @@
-// engine/figma/design-enricher.ts — Design enrichment for specs from Figma context (SPEC-420)
 // ---------------------------------------------------------------------------
 // Private helpers
 // ---------------------------------------------------------------------------

package/dist/engine/figma/e2e-generator.d.ts

@@ -1,26 +1,4 @@
-import type { FigmaFlow } from './flow-analyzer.js';
-export interface E2ETestCase {
-    id: string;
-    description: string;
-    fromFrame: string;
-    toFrame: string;
-    trigger: string;
-    section: string;
-    playwrightCode: string;
-}
-export interface E2ETestFile {
-    filename: string;
-    section: string;
-    testCases: E2ETestCase[];
-    fullContent: string;
-}
-export interface E2EGenerationResult {
-    totalFlows: number;
-    totalTestCases: number;
-    files: E2ETestFile[];
-    skippedFlows: number;
-    outputDir: string;
-}
+import type { FigmaFlow, E2ETestCase, E2EGenerationResult } from '../../types/figma.js';
 export declare function flowToTestCase(flow: FigmaFlow, index: number): E2ETestCase | null;
 export declare function groupFlowsBySection(flows: FigmaFlow[]): Map<string, FigmaFlow[]>;
 export declare function generateTestFileContent(section: string, testCases: E2ETestCase[]): string;

package/dist/engine/figma/flow-analyzer.d.ts

@@ -1,15 +1,5 @@
 import type { FigmaFileResponse } from './api-client.js';
-export interface FigmaFlow {
-    fromNodeId: string;
-    fromFrameName: string;
-    toNodeId: string;
-    toFrameName: string;
-    trigger: string;
-    transitionType: string;
-    pageId: string;
-    pageName: string;
-    section: string;
-}
+import type { FigmaFlow } from '../../types/figma.js';
 export declare function extractFlows(file: FigmaFileResponse): FigmaFlow[];
 export declare function groupFlowsBySection(flows: FigmaFlow[]): Map<string, FigmaFlow[]>;
 export declare function formatFlowsAsMarkdown(sections: Map<string, FigmaFlow[]>): string;

package/dist/engine/figma/frame-extractor.d.ts

@@ -1,16 +1,6 @@
-import type { FigmaFrame } from '../../types/index.js';
+import type { FigmaFrame, BreakpointGroup } from '../../types/index.js';
 import type { FigmaFileResponse } from './api-client.js';
 export declare function extractFrames(file: FigmaFileResponse): FigmaFrame[];
 export declare function groupFramesBySection(frames: FigmaFrame[], groupBy: 'prefix' | 'page'): Map<string, FigmaFrame[]>;
-export interface BreakpointGroup {
-    section: string;
-    frames: {
-        mobile: FigmaFrame[];
-        tablet: FigmaFrame[];
-        desktop: FigmaFrame[];
-        unknown: FigmaFrame[];
-    };
-    allNodeIds: string[];
-}
 export declare function groupFramesByBreakpoint(frames: FigmaFrame[]): Map<string, BreakpointGroup>;
 //# sourceMappingURL=frame-extractor.d.ts.map

package/dist/engine/figma/frame-extractor.js

@@ -83,6 +83,9 @@ function collectNestedFrames(parent, pageId, pageName, frames) {
         }
     }
 }
+// ---------------------------------------------------------------------------
+// Responsive frame pairing — groupFramesByBreakpoint (SPEC-423)
+// ---------------------------------------------------------------------------
 const BREAKPOINT_PAGE_KEYWORDS = {
     mobile: ['mobile', 'sm', 'phone', 'iphone', 'android'],
     tablet: ['tablet', 'md', 'ipad'],

package/dist/engine/figma/multi-file-manager.d.ts

@@ -1,9 +1,4 @@
-export interface FigmaFileEntry {
-    fileKey: string;
-    label: string;
-    figmaUrl: string;
-    addedAt: string;
-}
+import type { FigmaFileEntry } from '../../types/figma.js';
 export declare function parseAndValidateFileEntry(figmaUrl: string, label: string): FigmaFileEntry;
 export declare function addFileEntry(existing: FigmaFileEntry[], entry: FigmaFileEntry): FigmaFileEntry[];
 export declare function removeFileEntry(existing: FigmaFileEntry[], fileKey: string): FigmaFileEntry[];

package/dist/engine/figma/spec-generator.js

@@ -1,4 +1,6 @@
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { listSpecs } from '../../storage/spec-store.js';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { hashProjectPath } from '../../storage/base-store.js';
 import { generateSpecId } from '../spec-format/spec-id.js';
 // ---------------------------------------------------------------------------

package/dist/engine/figma/thumbnail-fetcher.d.ts

@@ -1,4 +1,4 @@
-export interface FigmaThumbnailResult {
+export interface FigmaThumbnailFetchResult {
     nodeId: string;
     url: string | null;
 }

package/dist/engine/figma/token-extractor.d.ts

@@ -1,9 +1,4 @@
-export interface FigmaToken {
-    category: 'color' | 'typography' | 'spacing' | 'radius' | 'shadow' | 'other';
-    name: string;
-    value: string;
-    rawValue: unknown;
-}
+import type { FigmaToken } from '../../types/figma.js';
 export declare function fetchFigmaTokens(fileKey: string, accessToken: string): Promise<FigmaToken[]>;
 export declare function groupTokensByCategory(tokens: FigmaToken[]): Map<FigmaToken['category'], FigmaToken[]>;
 export declare function formatTokensAsMarkdown(groups: Map<FigmaToken['category'], FigmaToken[]>): string;

package/dist/engine/figma/token-extractor.js

@@ -1,4 +1,3 @@
-// engine/figma/token-extractor.ts — Figma Design Tokens extractor (SPEC-421)
 // ---------------------------------------------------------------------------
 // Helpers
 // ---------------------------------------------------------------------------

package/dist/engine/figma/version-tracker.d.ts

@@ -1,10 +1,4 @@
-export interface FigmaDriftEntry {
-    specId: string;
-    section: string;
-    storedVersion: string | null;
-    currentVersion: string;
-    driftDetected: boolean;
-}
+import type { FigmaDriftEntry } from '../../types/figma.js';
 export declare function fetchLatestFigmaVersion(fileKey: string, accessToken: string): Promise<string>;
 export declare function detectDrift(specs: {
     specId: string;

package/dist/engine/figma/version-tracker.js

@@ -1,4 +1,3 @@
-// engine/figma/version-tracker.ts — Figma version fetching and drift detection (SPEC-428)
 export async function fetchLatestFigmaVersion(fileKey, accessToken) {
     const response = await fetch(`https://api.figma.com/v1/files/${fileKey}/versions`, {
         headers: { 'X-Figma-Token': accessToken },

package/dist/engine/figma/visual-qa.d.ts

@@ -1,12 +1,5 @@
-export type DiffSeverity = 'critical' | 'warning' | 'info';
-export interface VisualDiffEntry {
-    element: string;
-    figmaValue: string;
-    implementedValue: string;
-    delta: string;
-    severity: DiffSeverity;
-}
-export interface VisualQAResult {
+import type { VisualDiffEntry, VisualQASummary } from '../../types/figma.js';
+export interface VisualQaRunResult {
     specId: string;
     nodeId: string;
     figmaImageUrl: string;
@@ -19,16 +12,9 @@ export interface VisualQAResult {
     infoCount: number;
     passed: boolean;
 }
-export interface VisualQASummary {
-    totalSpecs: number;
-    specsValidated: number;
-    specsWithCritical: number;
-    specsNeverValidated: number;
-    validatedAt: string;
-}
 export declare function exportFigmaFrameImage(fileKey: string, nodeId: string, accessToken: string): Promise<string>;
-export declare function createVisualQAResult(specId: string, nodeId: string, figmaImageUrl: string, screenshotUrl: string, diffs: VisualDiffEntry[], comparisonMode?: 'pixel-diff' | 'evidence-only'): VisualQAResult;
+export declare function createVisualQAResult(specId: string, nodeId: string, figmaImageUrl: string, screenshotUrl: string, diffs: VisualDiffEntry[], comparisonMode?: 'pixel-diff' | 'evidence-only'): VisualQaRunResult;
 export declare function buildPlaceholderDiff(_screenshotUrl: string, _figmaImageUrl: string): VisualDiffEntry[];
-export declare function formatVisualQAReport(results: VisualQAResult[]): string;
-export declare function buildSummary(results: VisualQAResult[], totalSpecs: number): VisualQASummary;
+export declare function formatVisualQAReport(results: VisualQaRunResult[]): string;
+export declare function buildSummary(results: VisualQaRunResult[], totalSpecs: number): VisualQASummary;
 //# sourceMappingURL=visual-qa.d.ts.map

package/dist/engine/figma/visual-qa.js

@@ -1,4 +1,3 @@
-// engine/figma/visual-qa.ts — Visual QA comparison engine (SPEC-429)
 const FIGMA_API_BASE = 'https://api.figma.com/v1';
 // ---------------------------------------------------------------------------
 // exportFigmaFrameImage — export a Figma frame as a PNG CDN URL
@@ -19,7 +18,7 @@ export async function exportFigmaFrameImage(fileKey, nodeId, accessToken) {
     return imageUrl;
 }
 // ---------------------------------------------------------------------------
-// createVisualQAResult — build a VisualQAResult from diffs
+// createVisualQAResult — build a VisualQaRunResult from diffs
 // ---------------------------------------------------------------------------
 export function createVisualQAResult(specId, nodeId, figmaImageUrl, screenshotUrl, diffs, comparisonMode = 'pixel-diff') {
     const criticalCount = diffs.filter((d) => d.severity === 'critical').length;

package/dist/engine/figma/webhook-manager.d.ts

@@ -1,10 +1,4 @@
-export interface FigmaWebhookRegistration {
-    webhookId: string;
-    passcode: string;
-    endpoint: string;
-    registeredAt: string;
-    lastTriggeredAt?: string;
-}
+import type { FigmaWebhookRegistration } from '../../types/figma.js';
 export declare function registerFigmaWebhook(teamId: string, callbackUrl: string, accessToken: string): Promise<FigmaWebhookRegistration>;
 export declare function deregisterFigmaWebhook(webhookId: string, accessToken: string): Promise<void>;
 export declare function validateWebhookSignature(body: string, signature: string, passcode: string): boolean;

package/dist/engine/frontmatter-sha/reseal.js

@@ -3,6 +3,7 @@
 // When SPEC-717 implements bump_spec_version, it should call resealFrontmatter()
 // at the end of the version bump to update the SHA freeze for the modified spec.
 import { computeFrontmatterSha } from './compute-sha.js';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { appendTransitionEvent } from '../../storage/transition-log.js';
 /**
  * Reseal the frontmatter SHA after an authorized mutation of a terminal spec.

package/dist/engine/frontmatter-sha/verify-terminal.js

@@ -1,6 +1,7 @@
 // engine/frontmatter-sha/verify-terminal.ts — SPEC-723: Tamper detection for terminal specs
 import { computeFrontmatterSha } from './compute-sha.js';
 import { FROZEN_FIELDS } from './frozen-fields.js';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { readTransitionLog } from '../../storage/transition-log.js';
 /**
  * Verify that the frontmatter of a terminal spec has not been tampered with

package/dist/engine/git-hook-injector.js

@@ -1,19 +1,11 @@
 // @crash-shield-ignore-file — config/cache reader for Planu-controlled JSON; writer is this codebase, shape guaranteed by build/seed.
 // engine/git-hook-injector.ts — Inject planu auto-stage snippet into project git pre-commit hook
 // SPEC-347: auto-stage planu HTML files so they are never left out of commits
-import { readFile, writeFile, access, constants } from 'node:fs/promises';
+import { readFile, writeFile } from 'node:fs/promises';
 import { join, resolve } from 'node:path';
+import { fileExists } from '../core/shared/fs.js';
 const PLANU_SNIPPET = `\n# Planu: optional auto-stage specs (SPEC-466 — only source-of-truth files)\nif [ "$PLANU_ENABLE_AUTOCOMMIT" = "true" ]; then\n  git add planu/specs/ planu/conventions.json 2>/dev/null || true\nfi\n`;
 const PLANU_MARKER = 'git add planu/';
-async function fileExists(filePath) {
-    try {
-        await access(filePath, constants.F_OK);
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
 async function packageJsonHasDep(projectPath, depName) {
     try {
         const pkgPath = join(projectPath, 'package.json');

package/dist/engine/github/quality-dimensions.js

@@ -1,9 +1,7 @@
 // engine/github/quality-dimensions.ts — Quality analysis dimensions (SPEC-309)
 // Duplication, complexity, and dead-code checks extracted from review-dimensions.ts
 import { parseDiffFiles } from './review-helpers.js';
-function escapeRegex(input) {
-    return input.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
-}
+import { escapeRegex } from '../../core/shared/strings.js';
 // ---------------------------------------------------------------------------
 // Duplication dimension
 // ---------------------------------------------------------------------------

package/dist/engine/global-rules-manager.js

@@ -1,7 +1,9 @@
 // engine/global-rules-manager.ts — Global Steering Rules manager (SPEC-351)
 import { readFile, writeFile, readdir, unlink, mkdir } from 'node:fs/promises';
 import { join, dirname } from 'node:path';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { resolveStorageLayout } from '../storage/storage-layout.js';
+import { escapeRegex } from '../core/shared/strings.js';
 // ---------------------------------------------------------------------------
 // Paths
 // ---------------------------------------------------------------------------
@@ -208,7 +210,4 @@ export async function exportRule(slug) {
 // ---------------------------------------------------------------------------
 // Helpers
 // ---------------------------------------------------------------------------
-function escapeRegex(str) {
-    return str.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
-}
 //# sourceMappingURL=global-rules-manager.js.map

package/dist/engine/handoff-artifacts/implementation-review-reader.js

@@ -1,4 +1,5 @@
 import { reportClassifiedDegradation } from '../../errors/classified-degradation.js';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { readTransitionLog } from '../../storage/transition-log.js';
 import { readArtifact } from './io.js';
 export function isLifecycleStubBody(specId, body) {

package/dist/engine/handoff-artifacts/io.js

@@ -4,9 +4,11 @@ import { readFile } from 'node:fs/promises';
 import { join } from 'node:path';
 import { atomicWriteFile } from '../safety/atomic-write-file.js';
 import { acquireLock, releaseLock } from '../safety/cross-process-lock.js';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { appendTransitionEvent } from '../../storage/transition-log.js';
 import { validateArtifact } from './schemas.js';
 import { resolveCompat } from './version-policy.js';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { projectDataDir } from '../../storage/base-store.js';
 // Current schema version for version-policy checks
 const CURRENT_SCHEMA_VERSION = '1.0.0';

package/dist/engine/handoff-packager.js

@@ -3,6 +3,7 @@ import { createHash } from 'node:crypto';
 import { mkdir, readFile, writeFile } from 'node:fs/promises';
 import { join } from 'node:path';
 import { stripFrontmatter } from './frontmatter-parser.js';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { hashProjectPath, projectDataDir } from '../storage/base-store.js';
 import { extractAcceptanceCriteriaTexts } from './spec-format/acceptance-criteria.js';
 import { extractListItems, findMarkdownSectionRange } from './spec-format/markdown-sections.js';
@@ -324,7 +325,7 @@ function normalizeStrictOwnedPath(rawValue) {
     if (normalized.status !== 'valid') {
         return null;
     }
-    return /^[A-Za-z0-9._/-]+$/u.test(normalized.path) ? normalized.path : null;
+    return /^[A-Za-z0-9._/()[\]@-]+$/u.test(normalized.path) ? normalized.path : null;
 }
 function collectStrictOwnershipEntry(rawValue, classification, state) {
     const rawPath = rawValue.trim();

package/dist/engine/health/auto-fixer.js

@@ -1,4 +1,5 @@
 // engine/health/auto-fixer.ts — Auto-fix for health check issues (SPEC-408)
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { specStore } from '../../storage/index.js';
 import { computeSpecHealth } from '../validation-loop.js';
 async function collectHealthIssues(projectPath, projectId) {

package/dist/engine/hooks/context-injector.js

@@ -2,6 +2,7 @@
 // engine/hooks/context-injector.ts — Reads project data and writes .planu/plan-context.md (SPEC-262)
 import { readFile, writeFile, mkdir } from 'node:fs/promises';
 import { join } from 'node:path';
+// eslint-disable-next-line no-restricted-imports -- grandfathered layer violation, remediation SPEC-1661 SPEC-1662 SPEC-1663
 import { hashProjectPath, projectDataDir } from '../../storage/base-store.js';
 // ---------------------------------------------------------------------------
 // Constants

package/dist/engine/hooks-reconciler.js

@@ -3,17 +3,10 @@ import { technologyValue } from './technology-registry.js';
 // Read-only analysis by default; patchHooks() writes fixes when autoFix is enabled.
 import { readFileSync, existsSync, readdirSync, writeFileSync } from 'node:fs';
 import { join } from 'node:path';
+import { readFileSafeSync as readFileSafe } from '../core/shared/fs.js';
 // ---------------------------------------------------------------------------
 // Helpers
 // ---------------------------------------------------------------------------
-function readFileSafe(path) {
-    try {
-        return readFileSync(path, 'utf-8');
-    }
-    catch {
-        return '';
-    }
-}
 function readPackageJson(projectPath) {
     try {
         return JSON.parse(readFileSync(join(projectPath, 'package.json'), 'utf-8'));