@planu/cli 5.1.1 → 5.3.0

package/dist/engine/core-bridge.js

@@ -12,6 +12,7 @@ import { detectMusl } from './native-platform.js';
 import { findDuplicateBlocks } from './core-bridge-duplicate-blocks.js';
 import { appendGapEntry, verifyGapsChain } from './core-bridge-gaps.js';
 import { reportClassifiedDegradation } from '../errors/classified-degradation.js';
+import { runNativeWorkerOperation } from './execution/native-worker-runtime.js';
 export { negotiateNativeRuntime, NATIVE_CAPABILITY_ABI, NATIVE_NODE_API_ABI, NATIVE_PROTOCOL_ABI, RUNTIME_STORAGE_SCHEMA, };
 const require = createRequire(import.meta.url);
 const reportedDegradations = new Set();
@@ -678,9 +679,75 @@ export function fastSelectCompactGraphSlice(seeds, nodes, edges, policy, overrid
     }
     return tsSelectCompactGraphSlice(seeds, nodes, edges, limits);
 }
+// Main-thread dispatch strategy (SPEC-1344) -----------------------------------
+// getNative() deliberately returns null on the main thread so long native FFI
+// calls never block the event loop (see comment above getNative()). For hot
+// paths that need acceleration anyway, dispatchViaWorker() moves the call onto
+// the existing native-worker-dispatch.ts runtime (a worker thread, where
+// isMainThread is false and native loads normally). If the worker fails to
+// spawn, times out, or the operation isn't allowlisted, it falls back to the
+// caller-supplied synchronous implementation so behavior never regresses.
+const WORKER_DISPATCH_TIMEOUT_MS = 30_000;
+const DEGRADATION_NOTICE_THRESHOLD_MS = 2_000;
+async function dispatchViaWorker(operation, payload, projectId, syncFallback) {
+    const start = Date.now();
+    if (isMainThread && process.env.DISABLE_NATIVE_CORE !== '1') {
+        try {
+            const value = (await runNativeWorkerOperation({
+                operation,
+                payload,
+                projectId,
+                deadlineAt: start + WORKER_DISPATCH_TIMEOUT_MS,
+            }));
+            return { value };
+        }
+        catch (error) {
+            /* reliability-optional: NATIVE_WORKER_DISPATCH_FAILED — falls through to sync fallback */
+            reportOnce(`NATIVE_WORKER_DISPATCH_FAILED:${operation}`, () => {
+                reportClassifiedDegradation('NATIVE_WORKER_DISPATCH_FAILED', error instanceof Error ? error : FALLBACK_ERROR);
+            });
+        }
+    }
+    const value = syncFallback();
+    const elapsedMs = Date.now() - start;
+    if (elapsedMs > DEGRADATION_NOTICE_THRESHOLD_MS) {
+        return {
+            value,
+            degradationNotice: `native engine unavailable — run planu doctor (fallback took ${String(elapsedMs)}ms)`,
+        };
+    }
+    return { value };
+}
+/** Worker-dispatched variant of {@link fastDetectDriftParallel} for main-thread callers. */
+export async function fastDetectDriftParallelAsync(rootPath, keywords) {
+    return dispatchViaWorker('detect-drift', { rootPath, keywords }, fastHashProjectPath(rootPath), () => fastDetectDriftParallel(rootPath, keywords));
+}
+/** Worker-dispatched variant of {@link fastScanAndHashFiles} for main-thread callers. */
+export async function fastScanAndHashFilesAsync(rootPath) {
+    return dispatchViaWorker('scan-and-hash-files', { rootPath }, fastHashProjectPath(rootPath), () => fastScanAndHashFiles(rootPath));
+}
+/** Worker-dispatched variant of {@link fastScanProjectMetadata} for main-thread callers. */
+export async function fastScanProjectMetadataAsync(rootPath) {
+    return dispatchViaWorker('scan-project-metadata', { rootPath }, fastHashProjectPath(rootPath), () => fastScanProjectMetadata(rootPath));
+}
+/** Worker-dispatched variant of {@link fastScanSpecs} for main-thread callers. */
+export async function fastScanSpecsAsync(rootPath) {
+    return dispatchViaWorker('scan-specs', { rootPath }, fastHashProjectPath(rootPath), () => fastScanSpecs(rootPath));
+}
 export const isNativeActive = () => getNative() !== null;
 export const nativeLoadDiagnostic = () => {
     refreshNativeCapabilityDiagnostic();
     return loadDiagnostic;
 };
+/**
+ * Force a native load attempt regardless of the calling thread and return the
+ * resulting diagnostic. `nativeLoadDiagnostic()` alone only reports load state
+ * that some other main-thread-bypassing caller already triggered (e.g. the
+ * macOS Keychain port); this is the main-thread-safe way to actually probe
+ * native availability, used by `planu doctor`.
+ */
+export const probeNativeLoad = () => {
+    loadNative();
+    return nativeLoadDiagnostic();
+};
 //# sourceMappingURL=core-bridge.js.map

package/dist/engine/drift-monitor.js

@@ -2,7 +2,7 @@
 import fs from 'node:fs';
 import { readFile, stat } from 'node:fs/promises';
 import path from 'node:path';
-import { fastScanProjectMetadata, isNativeActive, fastDetectDriftParallel, } from './core-bridge.js';
+import { fastScanProjectMetadataAsync, fastDetectDriftParallelAsync, } from './core-bridge.js';
 import { readSpecTechnicalSection } from './spec-format/read-technical-section.js';
 // ---------------------------------------------------------------------------
 // Config builder
@@ -41,13 +41,11 @@ export async function computeSummaryReport(projectPath, specList, config, rules,
     const alerts = [];
     let drifted = 0;
     let clean = 0;
-    // Layer 3 (AC coverage) Optimization:
-    // If native is active, we can do a single parallel scan for keywords across ALL specs.
-    // This is much faster than doing it one-by-one.
-    const nativeActive = isNativeActive();
-    const metadataMap = nativeActive
-        ? new Map(fastScanProjectMetadata(projectPath).map((m) => [m.path, m]))
-        : undefined;
+    // Layer 3 (AC coverage) Optimization: a single project-wide metadata scan
+    // (worker-dispatched when native is available) is much faster than doing it
+    // spec-by-spec.
+    const { value: projectMetadata } = await fastScanProjectMetadataAsync(projectPath);
+    const metadataMap = new Map(projectMetadata.map((m) => [m.path, m]));
     for (const specId of specList) {
         const technicalPath = specTechnicalPaths?.get(specId);
         const { score: healthScore } = await computeDriftScore(projectPath, specId, undefined, technicalPath, metadataMap);
@@ -272,19 +270,19 @@ async function computeAcCoverageScore(criteria, filePaths) {
         return 100;
     }
     let foundTerms;
-    if (isNativeActive()) {
-        // Use Rust to find which terms appear in implementation files across the WHOLE project.
-        // Note: Rust already does parallel walking and multi-threaded search.
-        // We pass any directory/file from the spec, but Rust will scan efficiently.
-        const firstFile = existingFiles[0];
-        if (!firstFile) {
-            return 100;
-        }
+    const firstFile = existingFiles[0];
+    if (!firstFile) {
+        return 100;
+    }
+    try {
+        // Worker-dispatched (native when available) parallel search across the WHOLE
+        // project rooted at the first file's dir — much faster than reading files
+        // one by one, and never blocks the main thread's event loop.
         const rootPath = path.dirname(firstFile); // Use first file's dir as heuristic
-        const result = fastDetectDriftParallel(rootPath, [...allTerms]);
+        const { value: result } = await fastDetectDriftParallelAsync(rootPath, [...allTerms]);
         foundTerms = new Set(result.foundKeywords);
     }
-    else {
+    catch {
         // Fallback: Read all implementation files once
         const fileContents = [];
         for (const filePath of existingFiles) {

package/dist/engine/living-spec/hash-tracker.js

@@ -3,7 +3,7 @@
 import { createHash } from 'node:crypto';
 import { readFile, stat } from 'node:fs/promises';
 import { join } from 'node:path';
-import { fastScanAndHashFiles, isNativeActive } from '../core-bridge.js';
+import { fastScanAndHashFilesAsync } from '../core-bridge.js';
 /**
  * Compute SHA-256 hash of a file's content.
  */
@@ -34,38 +34,36 @@ export async function createFileHashEntry(projectPath, relativePath) {
  * Create hash entries for multiple files.
  */
 export async function createFileHashEntries(projectPath, relativePaths) {
-    // Try native Rust implementation for bulk hashing
-    if (isNativeActive()) {
-        try {
-            const results = fastScanAndHashFiles(projectPath);
-            const resultMap = new Map(results.map((r) => [r.path, r.hash]));
-            const entries = [];
-            for (const rel of relativePaths) {
-                const fullPath = join(projectPath, rel);
-                const hash = resultMap.get(fullPath);
-                if (hash) {
-                    try {
-                        const s = await stat(fullPath);
-                        entries.push({
-                            file: rel,
-                            hash,
-                            size: s.size,
-                            snapshotAt: new Date().toISOString(),
-                        });
-                    }
-                    catch {
-                        // File might have disappeared between scan and stat
-                    }
+    // Try the accelerated bulk-hash path (worker-dispatched native, or the TS fallback).
+    try {
+        const { value: results } = await fastScanAndHashFilesAsync(projectPath);
+        const resultMap = new Map(results.map((r) => [r.path, r.hash]));
+        const entries = [];
+        for (const rel of relativePaths) {
+            const fullPath = join(projectPath, rel);
+            const hash = resultMap.get(fullPath);
+            if (hash) {
+                try {
+                    const s = await stat(fullPath);
+                    entries.push({
+                        file: rel,
+                        hash,
+                        size: s.size,
+                        snapshotAt: new Date().toISOString(),
+                    });
+                }
+                catch {
+                    // File might have disappeared between scan and stat
                 }
-            }
-            if (entries.length > 0) {
-                return entries;
             }
         }
-        catch (err) {
-            console.warn('[Planu-RS] Native bulk hash failed, falling back to Node.', err);
+        if (entries.length > 0) {
+            return entries;
         }
     }
+    catch (err) {
+        console.warn('[Planu-RS] Bulk hash failed, falling back to Node.', err);
+    }
     const entries = [];
     for (const relativePath of relativePaths) {
         const entry = await createFileHashEntry(projectPath, relativePath);

package/dist/engine/planu-core.darwin-arm64.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.1.1",
-  "engineVersion": "5.1.1",
-  "buildId": "1-5.1.1-aarch64-apple-darwin",
+  "cliVersion": "5.3.0",
+  "engineVersion": "5.3.0",
+  "buildId": "1-5.3.0-aarch64-apple-darwin",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -17,15 +17,15 @@
   "platform": "darwin",
   "arch": "arm64",
   "libc": null,
-  "artifactSha256": "3791a7635fda74d3c0c5a226115ac4ab78c98afc366d0451a107ed1419139873",
+  "artifactSha256": "07ca15496c8d00f9b1d56fc7147677079936735e0424cf94e55f3b76fd1a4557",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.darwin-arm64.node.sbom.json",
-    "sha256": "434d0491e2130ac49b7eb34989f5ae2135f3ad9f54f0042f5bb3ba660bd2c568"
+    "sha256": "e53a5bcc426cd99534ce6f7e7934c810c8947959bc954791530bbf204206f595"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "5046eff43d23641fe60bd1c01e8c34277172db16",
+    "sourceCommit": "0bfc16bd342cfaa8ee48da5d9a1484df65bca782",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -34,6 +34,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "7kFQj3Sq5rFuMciulVbszYysMir4sSVuTrgLv0exAYSmkfwj16xag4ldwYRCJky/EXeCn1ZYZYJvfuCNEqZ5DQ=="
+    "value": "xvRryyeJ5xYiQfQvv4CpxlvDfuUBXdeeTJGxnjoXsl9xzG2lpqT8ChZAcJrde0DEfyzfUkMYS24z2tk/3rapCQ=="
   }
 }

package/dist/engine/planu-core.darwin-arm64.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.1.1",
+      "bom-ref": "pkg:cargo/planu-core@5.3.0",
       "type": "library",
       "name": "planu-core",
-      "version": "5.1.1",
+      "version": "5.3.0",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "3791a7635fda74d3c0c5a226115ac4ab78c98afc366d0451a107ed1419139873"
+          "content": "07ca15496c8d00f9b1d56fc7147677079936735e0424cf94e55f3b76fd1a4557"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.1.1",
+      "ref": "pkg:cargo/planu-core@5.3.0",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/planu-core.darwin-x64.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.1.1",
-  "engineVersion": "5.1.1",
-  "buildId": "1-5.1.1-x86_64-apple-darwin",
+  "cliVersion": "5.3.0",
+  "engineVersion": "5.3.0",
+  "buildId": "1-5.3.0-x86_64-apple-darwin",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -17,15 +17,15 @@
   "platform": "darwin",
   "arch": "x64",
   "libc": null,
-  "artifactSha256": "339ab4dad5834869aebc0130b8c63e0863d665daf0a98d8e795f08ea51bab51c",
+  "artifactSha256": "ac6926aab84f664e90e0fe75598b5a175a9952f57143c0a7cc560b00c8fc144c",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.darwin-x64.node.sbom.json",
-    "sha256": "d52bf3925938ed40201a07f6a0190694d9cfd924393ebba6d47f818c8ee79c17"
+    "sha256": "39d80491638f2d1049abd0d2eecd79b231bce01d54752fe5dfad915112a56180"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "5046eff43d23641fe60bd1c01e8c34277172db16",
+    "sourceCommit": "0bfc16bd342cfaa8ee48da5d9a1484df65bca782",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -34,6 +34,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "MBGihzcPhQf/7suo2XjxUz8kuC6zpZeVnNXlIjI/a14CCARPeI1gE67dWBIvVJuJ0dMmXeLfsw39quYQQNqdCg=="
+    "value": "NjrWMYeOEazMOJpQQFUI+bOzrlvWKvBNehPqMqSHcQwW+TXNU/jn6EBbJKrkbywWNwdyE/UwCTZon7bi0ZaTAQ=="
   }
 }

package/dist/engine/planu-core.darwin-x64.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.1.1",
+      "bom-ref": "pkg:cargo/planu-core@5.3.0",
       "type": "library",
       "name": "planu-core",
-      "version": "5.1.1",
+      "version": "5.3.0",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "339ab4dad5834869aebc0130b8c63e0863d665daf0a98d8e795f08ea51bab51c"
+          "content": "ac6926aab84f664e90e0fe75598b5a175a9952f57143c0a7cc560b00c8fc144c"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.1.1",
+      "ref": "pkg:cargo/planu-core@5.3.0",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/planu-core.linux-arm64-gnu.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.1.1",
-  "engineVersion": "5.1.1",
-  "buildId": "1-5.1.1-aarch64-unknown-linux-gnu",
+  "cliVersion": "5.3.0",
+  "engineVersion": "5.3.0",
+  "buildId": "1-5.3.0-aarch64-unknown-linux-gnu",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -16,15 +16,15 @@
   "platform": "linux",
   "arch": "arm64",
   "libc": "glibc",
-  "artifactSha256": "2542d4e3bae8c5a133b12ba13d8a0c993a538f348ecf706233485f3a306bca90",
+  "artifactSha256": "e81c28d359720a6e89c79c5425b0a60ffefd133f89774729a39252332a7d8098",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.linux-arm64-gnu.node.sbom.json",
-    "sha256": "25f989810c53995c30a21a50c704a34474c27256db590ae51cac100ce35fcd26"
+    "sha256": "6a9041cc34a0207f9cc42268313ab93bdce4df29f6152c2ec35d7eedc3fdc20f"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "5046eff43d23641fe60bd1c01e8c34277172db16",
+    "sourceCommit": "0bfc16bd342cfaa8ee48da5d9a1484df65bca782",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -33,6 +33,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "93RLQe2yAbcJh8j2gfJbQBv/BTTWX0DeGUJHLP6HbfOd6s0xtpWrjO0E7egpfso6uO34ZLD6aQ/M0kTtbBfMCg=="
+    "value": "nvRlOzgPcI6wLyjx8m+Pz/kbAeA1AF5DyiJ1OE55S7tOhpeiAoH+0YdYKIawJe5AdhVWHP6IYc81N1c7tnrGBg=="
   }
 }

package/dist/engine/planu-core.linux-arm64-gnu.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.1.1",
+      "bom-ref": "pkg:cargo/planu-core@5.3.0",
       "type": "library",
       "name": "planu-core",
-      "version": "5.1.1",
+      "version": "5.3.0",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "2542d4e3bae8c5a133b12ba13d8a0c993a538f348ecf706233485f3a306bca90"
+          "content": "e81c28d359720a6e89c79c5425b0a60ffefd133f89774729a39252332a7d8098"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.1.1",
+      "ref": "pkg:cargo/planu-core@5.3.0",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/planu-core.linux-arm64-musl.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.1.1",
-  "engineVersion": "5.1.1",
-  "buildId": "1-5.1.1-aarch64-unknown-linux-musl",
+  "cliVersion": "5.3.0",
+  "engineVersion": "5.3.0",
+  "buildId": "1-5.3.0-aarch64-unknown-linux-musl",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -16,15 +16,15 @@
   "platform": "linux",
   "arch": "arm64",
   "libc": "musl",
-  "artifactSha256": "27daadea51d3517b399d38b202581d8305a9d8c5e70ce9610cabd7c17c0829e0",
+  "artifactSha256": "b0d4c6c83b85af40d685e0e005624c34b2a20d295f74c58615293322b42ba965",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.linux-arm64-musl.node.sbom.json",
-    "sha256": "8e530dc7631981619d307b862f92c5080d30c660a2f33161a58046c5231ea283"
+    "sha256": "16178e0bb9e2714e0e06b3a58c29fad539bf3c4c72eedd5f42fd4878fbf0079e"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "5046eff43d23641fe60bd1c01e8c34277172db16",
+    "sourceCommit": "0bfc16bd342cfaa8ee48da5d9a1484df65bca782",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -33,6 +33,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "n5TSEXesZev/RV5YkPBgs7tAan7bHgicPP6qBiQBcdb2bxsv29MnR379peX7Y3yzzC7SXPeReY/qTqmqAvhYBg=="
+    "value": "mwwwq8vQTDPmmIZ4ssE1UjYXd6UnhDmchDD+x/vqjr6HAIW2I4+q1mrf6vQ7X1ln/J+9lxJymJlyu4dA0QBTDQ=="
   }
 }

package/dist/engine/planu-core.linux-arm64-musl.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.1.1",
+      "bom-ref": "pkg:cargo/planu-core@5.3.0",
       "type": "library",
       "name": "planu-core",
-      "version": "5.1.1",
+      "version": "5.3.0",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "27daadea51d3517b399d38b202581d8305a9d8c5e70ce9610cabd7c17c0829e0"
+          "content": "b0d4c6c83b85af40d685e0e005624c34b2a20d295f74c58615293322b42ba965"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.1.1",
+      "ref": "pkg:cargo/planu-core@5.3.0",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/planu-core.linux-x64-gnu.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.1.1",
-  "engineVersion": "5.1.1",
-  "buildId": "1-5.1.1-x86_64-unknown-linux-gnu",
+  "cliVersion": "5.3.0",
+  "engineVersion": "5.3.0",
+  "buildId": "1-5.3.0-x86_64-unknown-linux-gnu",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -16,15 +16,15 @@
   "platform": "linux",
   "arch": "x64",
   "libc": "glibc",
-  "artifactSha256": "ea63379c34998117ea301e635aa3654859b6ad91a0b905833b3bc11374cf84c9",
+  "artifactSha256": "9981b33dbbe44fcab6da8e909a24d6b21317cfdd771946e65dba41879bb2972c",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.linux-x64-gnu.node.sbom.json",
-    "sha256": "656e983e468fdc2428180bd064ba8cb93db5cf895cf87a44a056552e280f3641"
+    "sha256": "a1a11390578e9504f2552572f013ef11c11b5c09d65ad3fd6c01f4cba17d3304"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "5046eff43d23641fe60bd1c01e8c34277172db16",
+    "sourceCommit": "0bfc16bd342cfaa8ee48da5d9a1484df65bca782",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -33,6 +33,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "OWDWv7CxpzTCEf/CRLzLJeQKwtRiL/0SU3UfIs7gJ+oi+c6r9LllBSgrIi58woPLny0lZAa1jYHDNT6NqUJMAg=="
+    "value": "GcnOf/uVsph+kbzNir1EE5CBIzYB1bxBPIKm5BwVbmVSi7niwWlAuTgD8rHChM6yS47Y3Ms8nIxfy8oGXD3bBw=="
   }
 }

package/dist/engine/planu-core.linux-x64-gnu.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.1.1",
+      "bom-ref": "pkg:cargo/planu-core@5.3.0",
       "type": "library",
       "name": "planu-core",
-      "version": "5.1.1",
+      "version": "5.3.0",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "ea63379c34998117ea301e635aa3654859b6ad91a0b905833b3bc11374cf84c9"
+          "content": "9981b33dbbe44fcab6da8e909a24d6b21317cfdd771946e65dba41879bb2972c"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.1.1",
+      "ref": "pkg:cargo/planu-core@5.3.0",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/planu-core.linux-x64-musl.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.1.1",
-  "engineVersion": "5.1.1",
-  "buildId": "1-5.1.1-x86_64-unknown-linux-musl",
+  "cliVersion": "5.3.0",
+  "engineVersion": "5.3.0",
+  "buildId": "1-5.3.0-x86_64-unknown-linux-musl",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -16,15 +16,15 @@
   "platform": "linux",
   "arch": "x64",
   "libc": "musl",
-  "artifactSha256": "f987d5d169ccd0326adcfbb03f78f87896f1e15dfd6db5484d0c7129d5ef0ce9",
+  "artifactSha256": "a3c5cd549a2eb667ff1c150faf23f1cfe22e87f7e556b0aa7209aa13a18f45e9",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.linux-x64-musl.node.sbom.json",
-    "sha256": "0ac824e4122bfd76300ca92e059687bbab4c2bd9c1fc95feaf69de7f90b3e129"
+    "sha256": "9890f076625256c5408d5ffec463f0935b8d7005e61d0b29761144f5cb40e17a"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "5046eff43d23641fe60bd1c01e8c34277172db16",
+    "sourceCommit": "0bfc16bd342cfaa8ee48da5d9a1484df65bca782",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -33,6 +33,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "rqKJhE/atBoQnOkGJFjjk5mkYyw00+XTkNJH2vpnTA09fTPQ3K19wrRxVULioQYYkRNB/6W3JSCGZcRv4EeJCQ=="
+    "value": "ZZXH8px6SzGDX2vLSXgEitX+Mu7eyXQ3kJeb9jFqMFLHInwMGMHtNY/LQgDvbOyzJAfskZUFf3JkqaTK6/9VDw=="
   }
 }

package/dist/engine/planu-core.linux-x64-musl.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.1.1",
+      "bom-ref": "pkg:cargo/planu-core@5.3.0",
       "type": "library",
       "name": "planu-core",
-      "version": "5.1.1",
+      "version": "5.3.0",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "f987d5d169ccd0326adcfbb03f78f87896f1e15dfd6db5484d0c7129d5ef0ce9"
+          "content": "a3c5cd549a2eb667ff1c150faf23f1cfe22e87f7e556b0aa7209aa13a18f45e9"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.1.1",
+      "ref": "pkg:cargo/planu-core@5.3.0",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",