@planu/cli 4.3.2 → 4.3.4

package/CHANGELOG.md

@@ -1,3 +1,19 @@
+## [4.3.4] - 2026-05-22
+
+**Tarball SHA-256:** `e1ac042fd623c1421d7a0788fed14c369472489180ffe80eb8bce4d422d360d8`
+
+### Bug Fixes
+- fix(planu): keep host adapters outside managed state
+
+
+## [4.3.3] - 2026-05-22
+
+**Tarball SHA-256:** `d681d7d176a263f3b059c4ed5fbc7647a17758dc3c56cc79fd47658bab082fe6`
+
+### Bug Fixes
+- fix(planu): expose update_status routing evidence
+
+
 ## [4.3.2] - 2026-05-22
 
 **Tarball SHA-256:** `7732de964d5e10d24bdab5ea79baee3d281654cf5caff1f713671502c8e09ee3`

package/dist/engine/spec-migrator/planu-canonical-policy.js

@@ -4,6 +4,7 @@ export const PLANU_CANONICAL_POLICY = {
     canonicalRootFiles: ['conventions.json', 'context.md', 'session-context.md', 'session.json'],
     canonicalRootDirs: ['releases', 'specs'],
     canonicalSpecFiles: ['spec.md'],
+    forbiddenHostAssetRootDirs: ['agents', 'skills', 'rules', 'hooks'],
     generatedRuntimePatterns: [
         'planu/index.html',
         'planu/roadmap.html',
@@ -57,6 +58,12 @@ export function canonicalContractText() {
         '  specs/',
         '    SPEC-XXX-slug/',
         '      spec.md',
+        '',
+        'Host adapters are written outside planu/:',
+        '  Claude Code: .claude/agents, .claude/skills, .claude/rules',
+        '  Codex: AGENTS.md, .agents/skills, .codex/agents',
+        '  Gemini: GEMINI.md, .gemini/skills',
+        '  Cursor: .cursor/rules/planu.mdc',
     ].join('\n');
 }
 //# sourceMappingURL=planu-canonical-policy.js.map

package/dist/hosts/codex/config-scaffold.js

@@ -13,6 +13,7 @@ import { join } from 'node:path';
 import { detectCodexWorkspace } from './workspace-scope.js';
 import { buildRulesForHost } from '../../engine/host-rules-templates/index.js';
 import { assertEnglishOnlyArtifactText } from '../../engine/spec-language/english-only.js';
+import { generateImplementerRole, generateReviewerRole, generateSpecWriterRole, } from '../../engine/ai-integration/codex/agent-roles-generator.js';
 const CODEX_CONFIG_TOML = `# .openai/config.toml — Planu Codex workspace configuration
 # Auto-generated by Planu init_project. Safe to customize.
 
@@ -69,6 +70,7 @@ export async function scaffoldCodexConfig(projectPath, planuVersion = '1.96.0')
     await mkdir(openaiDir, { recursive: true });
     await writeIfMissing(join(openaiDir, 'config.toml'), CODEX_CONFIG_TOML);
     await writeIfMissing(join(projectPath, 'AGENTS.md'), AGENTS_MD_CONTENT);
+    await scaffoldCodexAgentRoles(projectPath);
     await injectRulesBlock(join(projectPath, 'AGENTS.md'), planuVersion);
 }
 // ---------------------------------------------------------------------------
@@ -86,6 +88,15 @@ async function writeIfMissing(filePath, content) {
         await writeFile(filePath, content, 'utf-8');
     }
 }
+async function scaffoldCodexAgentRoles(projectPath) {
+    const agentsDir = join(projectPath, '.codex', 'agents');
+    await mkdir(agentsDir, { recursive: true });
+    await Promise.all([
+        writeIfMissing(join(agentsDir, 'spec-writer.toml'), generateSpecWriterRole()),
+        writeIfMissing(join(agentsDir, 'implementer.toml'), generateImplementerRole()),
+        writeIfMissing(join(agentsDir, 'reviewer.toml'), generateReviewerRole()),
+    ]);
+}
 const PLANU_RULES_BLOCK_REGEX = /<!-- planu:rules:start[\s\S]*?<!-- planu:rules:end -->/;
 const PLANU_RULES_START_REGEX = /<!-- planu:rules:start[^>]* -->/;
 /**

package/dist/tools/register-spec-tools/core-spec-tools.js

@@ -286,6 +286,49 @@ export function registerCoreSpecTools(server) {
                 .optional()
                 .describe('Absolute path to the project root. Used to derive projectId automatically.'),
             status: SpecStatusEnum.describe('New status'),
+            sessionId: z
+                .string()
+                .max(500)
+                .optional()
+                .describe('Agent/session ID performing this lifecycle transition.'),
+            modelId: z
+                .string()
+                .max(500)
+                .optional()
+                .describe('Concrete model ID used for this transition. Can satisfy SDD model-routing evidence when it maps to the required tier.'),
+            modelTierUsed: z
+                .enum(['max', 'implementation', 'review'])
+                .optional()
+                .describe('SDD model tier evidence for this phase: max for approval/arbitration, implementation for coding, review for reviewer work.'),
+            contextHash: z
+                .string()
+                .max(500)
+                .optional()
+                .describe('SHA-256 hash of the persisted context package used to prove context continuity across agents.'),
+            handoffPath: z
+                .string()
+                .max(4096)
+                .optional()
+                .describe('Path to the persisted handoff package generated by package_handoff. Required for implementing/done unless handoffArtifactId is provided.'),
+            handoffArtifactId: z
+                .string()
+                .max(500)
+                .optional()
+                .describe('External handoff artifact ID when the host stores handoff evidence outside the filesystem.'),
+            reviewedBy: z
+                .string()
+                .max(500)
+                .optional()
+                .describe('Reviewer identity/evidence required before status=done.'),
+            arbitratedBy: z
+                .string()
+                .max(500)
+                .optional()
+                .describe('Arbiter identity/evidence required before status=done.'),
+            reconcileRequired: z
+                .boolean()
+                .optional()
+                .describe('Set true when implementation drift requires reconcile_spec before status=done; true blocks done.'),
             actuals: z
                 .object({
                 devHours: z.number().min(0),

package/dist/tools/update-status/file-sync.js

@@ -67,6 +67,29 @@ async function autoCaptureLessonEstimation(spec, actuals, accuracy, projectId, p
         /* best-effort — never throw */
     }
 }
+const SPEC_BODY_SHRINK_ABSOLUTE_THRESHOLD = 200;
+const SPEC_BODY_SHRINK_RATIO_THRESHOLD = 0.05;
+function bodyWithoutFrontmatter(content) {
+    return parseFrontmatter(content).body;
+}
+function hasExplicitTruncationMarker(content) {
+    return /\btruncated\b|SPEC_INTEGRITY_ALLOWED_REDUCTION/i.test(content);
+}
+function assertSpecBodyIntegrity(args) {
+    if (args.newStatus === 'done') {
+        return;
+    }
+    if (hasExplicitTruncationMarker(args.updated)) {
+        return;
+    }
+    const originalBodyLength = bodyWithoutFrontmatter(args.original).length;
+    const updatedBodyLength = bodyWithoutFrontmatter(args.updated).length;
+    const lost = originalBodyLength - updatedBodyLength;
+    const ratio = originalBodyLength === 0 ? 0 : lost / originalBodyLength;
+    if (lost > SPEC_BODY_SHRINK_ABSOLUTE_THRESHOLD && ratio > SPEC_BODY_SHRINK_RATIO_THRESHOLD) {
+        throw new Error(`SPEC_INTEGRITY_WRITE_FAILED: refusing to write ${args.specId} because update_status(${args.newStatus}) would shrink spec.md body by ${String(lost)} characters without an explicit migration marker.`);
+    }
+}
 export async function syncSpecFiles(updatedSpec, currentStatus, newStatus, projectPath) {
     let warning;
     if (updatedSpec.specPath) {
@@ -80,6 +103,12 @@ export async function syncSpecFiles(updatedSpec, currentStatus, newStatus, proje
                     updatedContent = stripDoneCriteria(updatedContent);
                 }
             }
+            assertSpecBodyIntegrity({
+                original: specContent,
+                updated: updatedContent,
+                newStatus,
+                specId: updatedSpec.id,
+            });
             await writeFile(updatedSpec.specPath, updatedContent, 'utf-8');
             // SPEC-544: Auto-stage spec.md after writing so it's included in the user's next commit
             // SPEC-575: Auto-commit staged planu/ docs (idempotent, safe-fail)

package/dist/types/spec-format.d.ts

@@ -47,6 +47,7 @@ export interface PlanuCanonicalPathPolicy {
     readonly canonicalRootFiles: readonly string[];
     readonly canonicalRootDirs: readonly string[];
     readonly canonicalSpecFiles: readonly string[];
+    readonly forbiddenHostAssetRootDirs: readonly string[];
     readonly generatedRuntimePatterns: readonly string[];
     readonly legacyMergeBeforeDeleteFiles: readonly string[];
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@planu/cli",
-  "version": "4.3.2",
+  "version": "4.3.4",
   "description": "Planu — MCP Server for Spec Driven Development with native Rust acceleration for hot paths. Cross-platform (Linux/macOS/Windows, x64/arm64, glibc/musl).",
   "type": "module",
   "main": "dist/index.js",
@@ -32,14 +32,14 @@
     "packageName": "@planu/core"
   },
   "optionalDependencies": {
-    "@planu/core-darwin-arm64": "4.3.2",
-    "@planu/core-darwin-x64": "4.3.2",
-    "@planu/core-linux-arm64-gnu": "4.3.2",
-    "@planu/core-linux-arm64-musl": "4.3.2",
-    "@planu/core-linux-x64-gnu": "4.3.2",
-    "@planu/core-linux-x64-musl": "4.3.2",
-    "@planu/core-win32-arm64-msvc": "4.3.2",
-    "@planu/core-win32-x64-msvc": "4.3.2"
+    "@planu/core-darwin-arm64": "4.3.4",
+    "@planu/core-darwin-x64": "4.3.4",
+    "@planu/core-linux-arm64-gnu": "4.3.4",
+    "@planu/core-linux-arm64-musl": "4.3.4",
+    "@planu/core-linux-x64-gnu": "4.3.4",
+    "@planu/core-linux-x64-musl": "4.3.4",
+    "@planu/core-win32-arm64-msvc": "4.3.4",
+    "@planu/core-win32-x64-msvc": "4.3.4"
   },
   "engines": {
     "node": ">=24.0.0"