@planu/cli 4.3.21 → 4.3.23

package/CHANGELOG.md

@@ -1,3 +1,15 @@
+## [4.3.23] - 2026-06-02
+
+### Chores
+- chore(deps): refresh direct dependencies
+
+
+## [4.3.22] - 2026-06-02
+
+### Bug Fixes
+- fix: stop fabricating spec and test artifacts
+
+
 ## [4.3.21] - 2026-06-02
 
 ### Bug Fixes

package/dist/engine/spec-format/lean-technical-generator.js

@@ -3,7 +3,11 @@
 /** Generate lean ## Technical content: YAML-like metadata + files section only. */
 export function generateLeanTechnicalContent(input) {
     const { specId, filesToCreate = [], filesToModify = [], filesToTest = [] } = input;
-    const lines = ['---', `spec: ${specId}`, '---', '', '## Files', ''];
+    const lines = ['---', `spec: ${specId}`, '---'];
+    if (filesToCreate.length === 0 && filesToModify.length === 0 && filesToTest.length === 0) {
+        return lines.join('\n');
+    }
+    lines.push('', '## Files', '');
     if (filesToCreate.length > 0) {
         lines.push('### Create', '');
         for (const f of filesToCreate) {
@@ -25,12 +29,6 @@ export function generateLeanTechnicalContent(input) {
         }
         lines.push('');
     }
-    // If no files specified, add placeholder
-    if (filesToCreate.length === 0 && filesToModify.length === 0 && filesToTest.length === 0) {
-        lines.push('### Create', '', '- (to be determined)', '');
-        lines.push('### Modify', '', '- (to be determined)', '');
-        lines.push('### Test', '', '- (to be determined)', '');
-    }
     return lines.join('\n');
 }
 //# sourceMappingURL=lean-technical-generator.js.map

package/dist/engine/spec-format/unified-spec-builder.js

@@ -13,7 +13,7 @@
  * inject sections the user did not author themselves.
  */
 export function buildUnifiedSpecContent(leanSpecBody, leanTechnicalBody) {
-    const technicalBodyRaw = leanTechnicalBody.replace(/^---\n[\s\S]*?\n---\n/, '').trim();
+    const technicalBodyRaw = leanTechnicalBody.replace(/^---\n[\s\S]*?\n---(?:\n|$)/, '').trim();
     if (technicalBodyRaw.length === 0) {
         return leanSpecBody.endsWith('\n') ? leanSpecBody : `${leanSpecBody}\n`;
     }

package/dist/engine/test-generators/contract-test-generator.d.ts

@@ -5,9 +5,10 @@ import type { ContractFormat, ContractSpec, ContractSpecEndpoint, ProjectKnowled
  */
 export declare function detectContractFormat(knowledge: ProjectKnowledge): ContractFormat;
 /**
- * Build a sample set of endpoints from a spec title (for scaffolding purposes).
+ * Legacy helper retained for API compatibility. Contract generation must not
+ * infer endpoints from a title; callers must pass observed endpoints instead.
  */
-export declare function buildSampleEndpoints(specTitle: string): ContractSpecEndpoint[];
+export declare function buildSampleEndpoints(_specTitle: string): ContractSpecEndpoint[];
 /**
  * Generate a contract spec for the given spec title and knowledge.
  * Format is auto-detected from project stack.

package/dist/engine/test-generators/contract-test-generator.js

@@ -21,49 +21,11 @@ export function detectContractFormat(knowledge) {
 }
 // === Contract generation functions ===
 /**
- * Build a sample set of endpoints from a spec title (for scaffolding purposes).
+ * Legacy helper retained for API compatibility. Contract generation must not
+ * infer endpoints from a title; callers must pass observed endpoints instead.
  */
-export function buildSampleEndpoints(specTitle) {
-    const resource = specTitle
-        .toLowerCase()
-        .replace(/[^a-z0-9]/g, '-')
-        .replace(/-+/g, '-');
-    return [
-        {
-            path: `/api/${resource}`,
-            method: 'GET',
-            requestSchema: {},
-            responseSchema: {
-                type: 'array',
-                items: { type: 'object', properties: { id: { type: 'string' } } },
-            },
-            statusCodes: [200, 401, 500],
-        },
-        {
-            path: `/api/${resource}`,
-            method: 'POST',
-            requestSchema: {
-                type: 'object',
-                required: ['name'],
-                properties: { name: { type: 'string' } },
-            },
-            responseSchema: {
-                type: 'object',
-                properties: { id: { type: 'string' }, name: { type: 'string' } },
-            },
-            statusCodes: [201, 400, 401, 422, 500],
-        },
-        {
-            path: `/api/${resource}/{id}`,
-            method: 'GET',
-            requestSchema: {},
-            responseSchema: {
-                type: 'object',
-                properties: { id: { type: 'string' }, name: { type: 'string' } },
-            },
-            statusCodes: [200, 401, 404, 500],
-        },
-    ];
+export function buildSampleEndpoints(_specTitle) {
+    return [];
 }
 // === OpenAPI contract generation ===
 function buildOpenApiYaml(specTitle, endpoints) {
@@ -244,7 +206,10 @@ export const ${name}Router = router({
  */
 export function generateContractSpec(specTitle, knowledge) {
     const format = detectContractFormat(knowledge);
-    const endpoints = buildSampleEndpoints(specTitle);
+    const endpoints = [];
+    if (endpoints.length === 0) {
+        return { format, content: '', endpoints };
+    }
     let content;
     switch (format) {
         case 'pact':

package/dist/engine/test-generators/mock-generator.d.ts

@@ -2,7 +2,7 @@ import type { ApiMockDefinition, ContractSpecEndpoint, MockServerTool } from '..
 /**
  * Generate mock definitions from a list of endpoints.
  */
-export declare function generateMockDefinitions(endpoints: ContractSpecEndpoint[], specTitle: string): ApiMockDefinition[];
+export declare function generateMockDefinitions(endpoints: ContractSpecEndpoint[], _specTitle: string): ApiMockDefinition[];
 /**
  * Generate mock server content for the given tool.
  */

package/dist/engine/test-generators/mock-generator.js

@@ -1,23 +1,5 @@
 // engine/test-generators/mock-generator.ts
 // SPEC-018: Mock generation for API endpoints (realistic data, delays, error responses)
-// === Realistic sample data generators ===
-function generateSampleId() {
-    return '550e8400-e29b-41d4-a716-446655440000';
-}
-function generateSampleData(resource) {
-    return {
-        id: generateSampleId(),
-        name: `Sample ${resource}`,
-        description: `Auto-generated sample for ${resource} (Planu SPEC-018)`,
-        status: 'active',
-        createdAt: '2025-01-15T10:30:00.000Z',
-        updatedAt: '2025-01-15T10:30:00.000Z',
-        email: `user@example.com`,
-        count: 42,
-        tags: ['sample', 'generated'],
-        metadata: { source: 'planu', version: '1.0' },
-    };
-}
 const ERROR_RESPONSES = [
     {
         status: 400,
@@ -56,16 +38,11 @@ function getErrorResponsesForEndpoint(statusCodes) {
 /**
  * Build an ApiMockDefinition from a ContractSpecEndpoint.
  */
-function buildMockFromEndpoint(endpoint, resource) {
-    const sampleData = endpoint.method === 'GET' && endpoint.path.endsWith('}')
-        ? generateSampleData(resource)
-        : endpoint.method === 'GET'
-            ? { items: [generateSampleData(resource)], total: 1, page: 1, pageSize: 20 }
-            : generateSampleData(resource);
+function buildMockFromEndpoint(endpoint) {
     return {
         endpoint: endpoint.path,
         method: endpoint.method,
-        sampleData,
+        sampleData: endpoint.responseSchema ?? {},
         delayMs: 250,
         errorResponses: getErrorResponsesForEndpoint(endpoint.statusCodes),
     };
@@ -73,15 +50,14 @@ function buildMockFromEndpoint(endpoint, resource) {
 /**
  * Generate mock definitions from a list of endpoints.
  */
-export function generateMockDefinitions(endpoints, specTitle) {
-    const resource = specTitle
-        .toLowerCase()
-        .replace(/[^a-z0-9]/g, '-')
-        .replace(/-+/g, '-');
-    return endpoints.map((ep) => buildMockFromEndpoint(ep, resource));
+export function generateMockDefinitions(endpoints, _specTitle) {
+    return endpoints.map((ep) => buildMockFromEndpoint(ep));
 }
 // === MSW (Mock Service Worker) content generation ===
 function buildMswMockContent(mocks, specTitle) {
+    if (mocks.length === 0) {
+        return '';
+    }
     const handlerLines = [];
     for (const mock of mocks) {
         const method = mock.method.toLowerCase();
@@ -109,6 +85,9 @@ ${mocks
 }
 // === json-server content generation ===
 function buildJsonServerContent(mocks, specTitle) {
+    if (mocks.length === 0) {
+        return '';
+    }
     const db = {};
     const resource = specTitle
         .toLowerCase()
@@ -133,6 +112,9 @@ ${JSON.stringify(db, null, 2)}
 }
 // === WireMock content generation ===
 function buildWiremockContent(mocks, _specTitle) {
+    if (mocks.length === 0) {
+        return '';
+    }
     const stubs = mocks.map((mock) => ({
         request: {
             method: mock.method,

package/dist/tools/generate-tests/adapters/contract-testing-adapter.js

@@ -56,10 +56,16 @@ export function buildContractMockSummaryLines(specTitle, knowledge) {
         '### Mock Server',
         '',
         `**Tool:** ${tool} (auto-detected)`,
-        `**Mocks:** ${endpoints.length} endpoint mocks with realistic sample data`,
-        '**Features:** Simulated delay (250ms), error scenarios (400/401/403/404/500)',
+        `**Mocks:** ${endpoints.length} endpoint mocks generated from explicit contracts`,
+        ...(endpoints.length === 0
+            ? [
+                '> No endpoints were provided; Planu did not fabricate API paths, status codes, or mock payloads.',
+            ]
+            : []),
         '',
-        '> Frontend developers can use these mocks to work independently of the backend.',
+        ...(endpoints.length > 0
+            ? ['> Frontend developers can use these mocks to work independently of the backend.']
+            : []),
         '',
     ];
     return lines;

package/dist/tools/heal-spec-docs.js

@@ -2,7 +2,7 @@
 // SPEC-715: heal_spec_docs is now the SINGLE tool that performs migrations.
 //           list_specs is read-only; migrations were moved here.
 // SPEC-724: Added dryRun, backup flags and Jaccard goal-scenario drift warning.
-import { readFile, readdir } from 'node:fs/promises';
+import { readFile, readdir, rm } from 'node:fs/promises';
 import { atomicWriteFile } from '../engine/safety/atomic-write-file.js';
 import { join } from 'node:path';
 import { hashProjectPath } from '../storage/base-store.js';
@@ -46,33 +46,13 @@ function isPlaceholderTechnical(content) {
     }
     return false;
 }
-// ---------------------------------------------------------------------------
-// File entry generation
-// ---------------------------------------------------------------------------
-function buildFileEntries(type, isDone) {
-    const status = isDone ? '(done)' : '(pending)';
-    // SPEC-579: never fabricate paths from title slug — produces garbage like
-    // `src/tools/<spanish-title-slug>.ts` for paths that do not exist.
-    // Always return placeholders; real paths are populated manually or by
-    // detection tools (scan_project, link_pr_to_spec, sync_spec_from_code).
-    if (type === 'refactor') {
-        return [
-            `- modify: (to be determined by implementation) ${status}`,
-            `- test: (to be determined) ${status}`,
-        ];
-    }
-    if (type === 'bugfix' || type === 'fix') {
-        return [
-            `- modify: (affected files TBD) ${status}`,
-            `- test: tests/ (regression test) ${status}`,
-        ];
-    }
-    return [`- modify: (to be determined) ${status}`];
+function hasInlineTechnicalFilesPlaceholder(content) {
+    return /^##\s+Technical\b[\s\S]*?^##\s+Files\b[\s\S]*?(?:\(pending\)|\(to be determined\)|\bTBD\b|--[a-z])/im.test(content);
 }
 // ---------------------------------------------------------------------------
-// Technical section writer (SPEC-1010 PR-C: writes into spec.md ## Technical)
+// File entry generation
 // ---------------------------------------------------------------------------
-async function writeTechnicalMd(specDir, specId, type, isDone, projectPath, specBody) {
+async function writeTechnicalMd(specDir, isDone, projectPath, specBody) {
     // SPEC-586: Try to extract real file paths from spec body before using placeholders
     let extractedBody = null;
     if (projectPath && specBody !== undefined) {
@@ -102,18 +82,13 @@ async function writeTechnicalMd(specDir, specId, type, isDone, projectPath, spec
             // best-effort — fall through to placeholder
         }
     }
-    const fileEntries = buildFileEntries(type, isDone);
-    // Build the body for the ## Technical section (no outer heading — replaceSectionInSpec adds it)
-    const technicalBody = extractedBody ??
-        [
-            `## Files — ${specId}`,
-            ...fileEntries,
-            '',
-            '## Notes',
-            `> Auto-generated by heal_spec_docs (SPEC-493). Review and update paths as needed.`,
-            '',
-        ].join('\n');
     const specMdPath = join(specDir, 'spec.md');
+    if (extractedBody === null) {
+        const removedInline = await removeTechnicalSectionIfPlaceholder(specMdPath);
+        const removedLegacy = await removeLegacyTechnicalPlaceholder(join(specDir, 'technical.md'));
+        return removedInline || removedLegacy;
+    }
+    const technicalBody = extractedBody;
     // SPEC-579: idempotency check — skip write if section already matches.
     try {
         const existing = await readFile(specMdPath, 'utf-8');
@@ -128,13 +103,74 @@ async function writeTechnicalMd(specDir, specId, type, isDone, projectPath, spec
     await replaceSectionInSpec(specMdPath, 'Technical', technicalBody);
     return true;
 }
+async function removeLegacyTechnicalPlaceholder(technicalPath) {
+    let legacy;
+    try {
+        legacy = await readFile(technicalPath, 'utf-8');
+    }
+    catch {
+        return false;
+    }
+    if (!isPlaceholderTechnical(legacy)) {
+        return false;
+    }
+    await rm(technicalPath, { force: true });
+    return true;
+}
+async function removeTechnicalSectionIfPlaceholder(specMdPath) {
+    let existing;
+    try {
+        existing = await readFile(specMdPath, 'utf-8');
+    }
+    catch {
+        return false;
+    }
+    const currentTechnical = extractTechnicalBodyLocal(existing);
+    if (currentTechnical === '' || !isPlaceholderTechnical(currentTechnical)) {
+        return false;
+    }
+    const updated = removeTopLevelSection(existing, 'Technical');
+    if (updated === existing) {
+        return false;
+    }
+    await atomicWriteFile(specMdPath, updated);
+    return true;
+}
+function removeTopLevelSection(content, sectionName) {
+    const normalized = content.replace(/\r\n/g, '\n');
+    const masked = normalized.replace(/(```|~~~)[\s\S]*?\1/g, (block) => block.replace(/[^\n]/g, ' '));
+    const headingRe = new RegExp(`^##\\s+${escapeRegex(sectionName)}\\b.*$`, 'm');
+    const match = headingRe.exec(masked);
+    if (!match) {
+        return content;
+    }
+    const afterHeading = match.index + match[0].length;
+    const nextRe = /^##\s+\S/gm;
+    nextRe.lastIndex = afterHeading;
+    const next = nextRe.exec(masked);
+    const before = normalized.slice(0, match.index).trimEnd();
+    const after = next ? normalized.slice(next.index).trimStart() : '';
+    if (before.length === 0) {
+        return after.length > 0 ? `${after.trimEnd()}\n` : '';
+    }
+    if (after.length === 0) {
+        return `${before}\n`;
+    }
+    return `${before}\n\n${after.trimEnd()}\n`;
+}
+function escapeRegex(input) {
+    return input.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+}
 /** Local extraction of ## Technical body to avoid circular imports. */
 function extractTechnicalBodyLocal(content) {
+    return extractSectionBodyLocal(content, 'Technical') ?? '';
+}
+function extractSectionBodyLocal(content, sectionName) {
     const normalized = content.replace(/\r\n/g, '\n');
     const masked = normalized.replace(/(```|~~~)[\s\S]*?\1/g, (block) => block.replace(/[^\n]/g, ' '));
-    const headingMatch = /^##\s+Technical\b.*$/m.exec(masked);
+    const headingMatch = new RegExp(`^##\\s+${escapeRegex(sectionName)}\\b.*$`, 'm').exec(masked);
     if (!headingMatch) {
-        return '';
+        return null;
     }
     const afterHeading = headingMatch.index + headingMatch[0].length;
     const nextRe = /^##\s+\S/gm;
@@ -271,9 +307,11 @@ export async function handleHealSpecDocs(params) {
         let legacyContent = null;
         // Determine whether healing is needed
         let needsHeal;
+        const inlinePlaceholder = technicalInSpecMd !== null &&
+            (isPlaceholderTechnical(technicalInSpecMd) || hasInlineTechnicalFilesPlaceholder(spec.body));
         if (technicalInSpecMd !== null) {
             // Check if the inline section is a placeholder
-            needsHeal = isPlaceholderTechnical(technicalInSpecMd);
+            needsHeal = inlinePlaceholder;
         }
         else {
             // No inline section — try standalone technical.md (legacy)
@@ -326,9 +364,27 @@ export async function handleHealSpecDocs(params) {
                 }
             }
         }
+        if (inlinePlaceholder) {
+            const specContent = await readFile(specMdPath, 'utf-8').catch(() => '');
+            let updated = removeTopLevelSection(specContent, 'Technical');
+            const filesBody = extractSectionBodyLocal(updated, 'Files');
+            if (filesBody !== null && isPlaceholderTechnical(filesBody)) {
+                updated = removeTopLevelSection(updated, 'Files');
+            }
+            if (updated !== specContent) {
+                await atomicWriteFile(specMdPath, updated);
+                healed += 1;
+            }
+            continue;
+        }
+        if (legacyContent !== null && isPlaceholderTechnical(legacyContent)) {
+            await rm(technicalPath, { force: true });
+            healed += 1;
+            continue;
+        }
         const isDone = spec.status === 'done' || spec.status === 'implemented';
         try {
-            const wrote = await writeTechnicalMd(spec.dir, spec.specId, spec.type, isDone, projectPath, spec.body);
+            const wrote = await writeTechnicalMd(spec.dir, isDone, projectPath, spec.body);
             if (wrote) {
                 healed += 1;
             }

package/dist/tools/migrate-tech/core-handlers.js

@@ -1,41 +1,20 @@
 // tools/migrate-tech/core-handlers.ts — Handlers: analyze | map | plan | strategy | validate
 import { t } from '../../i18n/index.js';
-import { buildStackAnalysis, scoreMigratableComponents, buildEquivalenceMap, generateMigrationPlan, recommendMigrationStrategy, generateParityValidation, } from '../../engine/migration/index.js';
+import { buildStackAnalysis, buildEquivalenceMap, generateMigrationPlan, recommendMigrationStrategy, generateParityValidation, } from '../../engine/migration/index.js';
 export function handleAnalyze(args) {
-    const components = scoreMigratableComponents([
-        {
-            id: 'app-core',
-            name: 'Application Core',
-            path: args.projectPath ?? './src',
-            type: 'module',
-            cyclomaticComplexity: 8,
-            couplingScore: 5,
-            dependsOn: [],
-            dependents: ['api-handler'],
-            linesOfCode: 400,
-        },
-        {
-            id: 'api-handler',
-            name: 'API Handler',
-            path: args.projectPath ? `${args.projectPath}/api` : './src/api',
-            type: 'handler',
-            cyclomaticComplexity: 12,
-            couplingScore: 6,
-            dependsOn: ['app-core'],
-            dependents: [],
-            linesOfCode: 250,
-        },
-    ]);
     const data = buildStackAnalysis({
         language: args.sourceStack ?? 'unknown',
         framework: args.sourceStack ?? 'unknown',
         components: [],
-        entryPoints: [{ type: 'http', name: 'REST API', description: 'Main HTTP entry point' }],
+        entryPoints: [],
         externalIntegrations: [],
-        migratableComponents: components,
+        migratableComponents: [],
         hasTests: false,
     });
-    const warnings = data.riskFlags;
+    const warnings = [
+        ...data.riskFlags,
+        'No project-derived migration inventory was provided; analysis does not fabricate components or entry points.',
+    ];
     return {
         action: 'analyze',
         data,
@@ -60,48 +39,15 @@ export function handleMap(args) {
     };
 }
 export function handlePlan(args) {
-    const components = scoreMigratableComponents([
-        {
-            id: 'utils',
-            name: 'Utils',
-            path: './src/utils',
-            type: 'util',
-            cyclomaticComplexity: 3,
-            couplingScore: 1,
-            dependsOn: [],
-            dependents: ['service'],
-            linesOfCode: 100,
-        },
-        {
-            id: 'service',
-            name: 'Service',
-            path: './src/service',
-            type: 'service',
-            cyclomaticComplexity: 10,
-            couplingScore: 4,
-            dependsOn: ['utils'],
-            dependents: ['handler'],
-            linesOfCode: 300,
-        },
-        {
-            id: 'handler',
-            name: 'Handler',
-            path: './src/handler',
-            type: 'handler',
-            cyclomaticComplexity: 6,
-            couplingScore: 3,
-            dependsOn: ['service'],
-            dependents: [],
-            linesOfCode: 150,
-        },
-    ]);
     const data = generateMigrationPlan({
         sourceStack: args.sourceStack ?? 'unknown',
         targetStack: args.targetStack ?? 'unknown',
-        components,
+        components: [],
         hasTests: false,
     });
-    const warnings = [];
+    const warnings = [
+        'No project-derived migration components were provided; plan does not fabricate modules.',
+    ];
     if (data.circularDependencies.length > 0) {
         warnings.push(`${data.circularDependencies.length} circular dependency cycles detected — resolve before migrating`);
     }
@@ -114,32 +60,38 @@ export function handlePlan(args) {
 }
 export function handleStrategy(_args) {
     const data = recommendMigrationStrategy({
-        componentCount: 15,
-        hasActiveUsers: true,
+        componentCount: 0,
+        hasActiveUsers: false,
         hasHighSla: false,
         hasCriticalData: false,
         migratableComponents: [],
-        entryPoints: ['/api/users', '/api/orders', '/api/products'],
+        entryPoints: [],
     });
     return {
         action: 'strategy',
         data,
         message: t('tools.migrate_tech.strategySuccess'),
-        warnings: [],
+        warnings: [
+            'No project-derived strategy inputs were provided; recommendation uses neutral empty evidence.',
+        ],
     };
 }
 export function handleValidate(args) {
-    const component = args.component ?? 'Unknown Component';
+    const component = args.component?.trim() ?? '';
     const data = generateParityValidation({
         component,
-        endpoints: ['GET /api/resource', 'POST /api/resource', 'DELETE /api/resource/:id'],
+        endpoints: [],
         observedDifferences: [],
     });
     return {
         action: 'validate',
         data,
         message: t('tools.migrate_tech.validateSuccess'),
-        warnings: [],
+        warnings: args.component === undefined
+            ? [
+                'No component was provided; validation checklist is unscoped and no contract tests were generated.',
+            ]
+            : ['No endpoints were provided; contract tests were not generated.'],
     };
 }
 //# sourceMappingURL=core-handlers.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@planu/cli",
-  "version": "4.3.21",
+  "version": "4.3.23",
   "description": "Planu — MCP Server for Spec Driven Development with native Rust acceleration for hot paths. Cross-platform (Linux/macOS/Windows, x64/arm64, glibc/musl).",
   "type": "module",
   "main": "dist/index.js",
@@ -34,14 +34,14 @@
     "packageName": "@planu/core"
   },
   "optionalDependencies": {
-    "@planu/core-darwin-arm64": "4.3.21",
-    "@planu/core-darwin-x64": "4.3.21",
-    "@planu/core-linux-arm64-gnu": "4.3.21",
-    "@planu/core-linux-arm64-musl": "4.3.21",
-    "@planu/core-linux-x64-gnu": "4.3.21",
-    "@planu/core-linux-x64-musl": "4.3.21",
-    "@planu/core-win32-arm64-msvc": "4.3.21",
-    "@planu/core-win32-x64-msvc": "4.3.21"
+    "@planu/core-darwin-arm64": "4.3.23",
+    "@planu/core-darwin-x64": "4.3.23",
+    "@planu/core-linux-arm64-gnu": "4.3.23",
+    "@planu/core-linux-arm64-musl": "4.3.23",
+    "@planu/core-linux-x64-gnu": "4.3.23",
+    "@planu/core-linux-x64-musl": "4.3.23",
+    "@planu/core-win32-arm64-msvc": "4.3.23",
+    "@planu/core-win32-x64-msvc": "4.3.23"
   },
   "engines": {
     "node": ">=24.0.0"
@@ -129,7 +129,7 @@
   ],
   "license": "SEE LICENSE IN LICENSE",
   "dependencies": {
-    "@anthropic-ai/sdk": "^0.99.0",
+    "@anthropic-ai/sdk": "^0.100.1",
     "@modelcontextprotocol/sdk": "^1.29.0",
     "glob": "^13.0.6",
     "yaml": "^2.9.0",
@@ -167,8 +167,8 @@
     }
   },
   "devDependencies": {
-    "@commitlint/cli": "^21.0.1",
-    "@commitlint/config-conventional": "^21.0.1",
+    "@commitlint/cli": "^21.0.2",
+    "@commitlint/config-conventional": "^21.0.2",
     "@eslint/js": "^10.0.1",
     "@napi-rs/cli": "^3.7.0",
     "@secretlint/secretlint-rule-no-homedir": "^13.0.2",
@@ -181,20 +181,20 @@
     "@semantic-release/release-notes-generator": "^14.1.1",
     "@stryker-mutator/core": "^9.6.1",
     "@stryker-mutator/vitest-runner": "^9.6.1",
-    "@supabase/supabase-js": "^2.106.2",
+    "@supabase/supabase-js": "^2.107.0",
     "@types/node": "^25.9.1",
     "@vitejs/plugin-vue": "^6.0.7",
-    "@vitest/coverage-v8": "^4.1.7",
+    "@vitest/coverage-v8": "^4.1.8",
     "@vue/test-utils": "^2.4.10",
-    "eslint": "^10.4.0",
+    "eslint": "^10.4.1",
     "eslint-config-prettier": "^10.1.8",
-    "eslint-import-resolver-typescript": "^4.4.4",
+    "eslint-import-resolver-typescript": "^4.4.5",
     "eslint-plugin-import": "^2.32.0",
     "happy-dom": "^20.9.0",
     "husky": "^9.1.7",
     "javascript-obfuscator": "^5.4.3",
-    "knip": "^6.14.2",
-    "lint-staged": "^17.0.5",
+    "knip": "^6.15.0",
+    "lint-staged": "^17.0.7",
     "madge": "^8.0.0",
     "prettier": "^3.8.3",
     "secretlint": "^13.0.2",
@@ -202,9 +202,9 @@
     "tsc-alias": "^1.8.17",
     "type-coverage": "^2.29.7",
     "typescript": "^6.0.3",
-    "typescript-eslint": "^8.60.0",
-    "vite": "^8.0.14",
-    "vitest": "^4.1.7",
+    "typescript-eslint": "^8.60.1",
+    "vite": "^8.0.16",
+    "vitest": "^4.1.8",
     "vue": "^3.5.35"
   }
 }

package/planu-native.json

@@ -1,7 +1,7 @@
 {
   "name": "dev.planu.native",
   "displayName": "Planu Native Lightweight Surface",
-  "version": "4.3.21",
+  "version": "4.3.23",
   "packageName": "@planu/cli",
   "modes": {
     "lightweight": {

package/planu-plugin.json

@@ -2,7 +2,7 @@
   "name": "dev.planu.cli",
   "displayName": "Planu — Spec Driven Development",
   "description": "Manage software specs, estimations, and autonomous SDD workflows. Language-agnostic MCP server for Claude Code.",
-  "version": "4.3.21",
+  "version": "4.3.23",
   "icon": "assets/plugin/icon.svg",
   "command": [
     "npx",