@planu/cli 4.3.2 → 4.3.3

package/CHANGELOG.md

@@ -1,3 +1,11 @@
+## [4.3.3] - 2026-05-22
+
+**Tarball SHA-256:** `d681d7d176a263f3b059c4ed5fbc7647a17758dc3c56cc79fd47658bab082fe6`
+
+### Bug Fixes
+- fix(planu): expose update_status routing evidence
+
+
 ## [4.3.2] - 2026-05-22
 
 **Tarball SHA-256:** `7732de964d5e10d24bdab5ea79baee3d281654cf5caff1f713671502c8e09ee3`

package/dist/tools/register-spec-tools/core-spec-tools.js

@@ -286,6 +286,49 @@ export function registerCoreSpecTools(server) {
                 .optional()
                 .describe('Absolute path to the project root. Used to derive projectId automatically.'),
             status: SpecStatusEnum.describe('New status'),
+            sessionId: z
+                .string()
+                .max(500)
+                .optional()
+                .describe('Agent/session ID performing this lifecycle transition.'),
+            modelId: z
+                .string()
+                .max(500)
+                .optional()
+                .describe('Concrete model ID used for this transition. Can satisfy SDD model-routing evidence when it maps to the required tier.'),
+            modelTierUsed: z
+                .enum(['max', 'implementation', 'review'])
+                .optional()
+                .describe('SDD model tier evidence for this phase: max for approval/arbitration, implementation for coding, review for reviewer work.'),
+            contextHash: z
+                .string()
+                .max(500)
+                .optional()
+                .describe('SHA-256 hash of the persisted context package used to prove context continuity across agents.'),
+            handoffPath: z
+                .string()
+                .max(4096)
+                .optional()
+                .describe('Path to the persisted handoff package generated by package_handoff. Required for implementing/done unless handoffArtifactId is provided.'),
+            handoffArtifactId: z
+                .string()
+                .max(500)
+                .optional()
+                .describe('External handoff artifact ID when the host stores handoff evidence outside the filesystem.'),
+            reviewedBy: z
+                .string()
+                .max(500)
+                .optional()
+                .describe('Reviewer identity/evidence required before status=done.'),
+            arbitratedBy: z
+                .string()
+                .max(500)
+                .optional()
+                .describe('Arbiter identity/evidence required before status=done.'),
+            reconcileRequired: z
+                .boolean()
+                .optional()
+                .describe('Set true when implementation drift requires reconcile_spec before status=done; true blocks done.'),
             actuals: z
                 .object({
                 devHours: z.number().min(0),

package/dist/tools/update-status/file-sync.js

@@ -67,6 +67,29 @@ async function autoCaptureLessonEstimation(spec, actuals, accuracy, projectId, p
         /* best-effort — never throw */
     }
 }
+const SPEC_BODY_SHRINK_ABSOLUTE_THRESHOLD = 200;
+const SPEC_BODY_SHRINK_RATIO_THRESHOLD = 0.05;
+function bodyWithoutFrontmatter(content) {
+    return parseFrontmatter(content).body;
+}
+function hasExplicitTruncationMarker(content) {
+    return /\btruncated\b|SPEC_INTEGRITY_ALLOWED_REDUCTION/i.test(content);
+}
+function assertSpecBodyIntegrity(args) {
+    if (args.newStatus === 'done') {
+        return;
+    }
+    if (hasExplicitTruncationMarker(args.updated)) {
+        return;
+    }
+    const originalBodyLength = bodyWithoutFrontmatter(args.original).length;
+    const updatedBodyLength = bodyWithoutFrontmatter(args.updated).length;
+    const lost = originalBodyLength - updatedBodyLength;
+    const ratio = originalBodyLength === 0 ? 0 : lost / originalBodyLength;
+    if (lost > SPEC_BODY_SHRINK_ABSOLUTE_THRESHOLD && ratio > SPEC_BODY_SHRINK_RATIO_THRESHOLD) {
+        throw new Error(`SPEC_INTEGRITY_WRITE_FAILED: refusing to write ${args.specId} because update_status(${args.newStatus}) would shrink spec.md body by ${String(lost)} characters without an explicit migration marker.`);
+    }
+}
 export async function syncSpecFiles(updatedSpec, currentStatus, newStatus, projectPath) {
     let warning;
     if (updatedSpec.specPath) {
@@ -80,6 +103,12 @@ export async function syncSpecFiles(updatedSpec, currentStatus, newStatus, proje
                     updatedContent = stripDoneCriteria(updatedContent);
                 }
             }
+            assertSpecBodyIntegrity({
+                original: specContent,
+                updated: updatedContent,
+                newStatus,
+                specId: updatedSpec.id,
+            });
             await writeFile(updatedSpec.specPath, updatedContent, 'utf-8');
             // SPEC-544: Auto-stage spec.md after writing so it's included in the user's next commit
             // SPEC-575: Auto-commit staged planu/ docs (idempotent, safe-fail)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@planu/cli",
-  "version": "4.3.2",
+  "version": "4.3.3",
   "description": "Planu — MCP Server for Spec Driven Development with native Rust acceleration for hot paths. Cross-platform (Linux/macOS/Windows, x64/arm64, glibc/musl).",
   "type": "module",
   "main": "dist/index.js",
@@ -32,14 +32,14 @@
     "packageName": "@planu/core"
   },
   "optionalDependencies": {
-    "@planu/core-darwin-arm64": "4.3.2",
-    "@planu/core-darwin-x64": "4.3.2",
-    "@planu/core-linux-arm64-gnu": "4.3.2",
-    "@planu/core-linux-arm64-musl": "4.3.2",
-    "@planu/core-linux-x64-gnu": "4.3.2",
-    "@planu/core-linux-x64-musl": "4.3.2",
-    "@planu/core-win32-arm64-msvc": "4.3.2",
-    "@planu/core-win32-x64-msvc": "4.3.2"
+    "@planu/core-darwin-arm64": "4.3.3",
+    "@planu/core-darwin-x64": "4.3.3",
+    "@planu/core-linux-arm64-gnu": "4.3.3",
+    "@planu/core-linux-arm64-musl": "4.3.3",
+    "@planu/core-linux-x64-gnu": "4.3.3",
+    "@planu/core-linux-x64-musl": "4.3.3",
+    "@planu/core-win32-arm64-msvc": "4.3.3",
+    "@planu/core-win32-x64-msvc": "4.3.3"
   },
   "engines": {
     "node": ">=24.0.0"