@planu/cli 5.2.0 → 5.3.1

package/CHANGELOG.md

@@ -1,3 +1,47 @@
+## [5.3.1] - 2026-08-05
+
+### Bug Fixes
+- fix(session-safeguard): abort detect via FETCH_HEAD, drop invalid push --ff-only, harden refs
+- fix(session-safeguard): never autopush protected branches and detect pushed bump in release abort
+
+### Refactoring
+- refactor(tests): split release-pipeline suite, harness cache, mirror auto-sync
+
+### Chores
+- chore(planu): SPEC-1384 done state and SPEC-1385 dogfood bug spec
+- chore(planu): SPEC-1379 done state
+- chore(planu): split incidental session-context churn out of SPEC-1379 delta
+- chore(planu): file SPEC-1381 challenge resolution, SPEC-1382 operator guides, SPEC-1383 validate budget dogfood specs
+- chore(planu): SPEC-1378 done state and v5.3.0 session checkpoint
+
+
+## [5.3.0] - 2026-08-05
+
+### Features
+- feat(watchers): ignore non-actionable root events in validation freshness watchers (SPEC-1340)
+- feat(release): harden local release pipeline — auth preflight, receipt env isolation, publish retry, visibility wait (SPEC-1369)
+
+### Bug Fixes
+- fix(release): accept npm 12 keyed pack JSON across release gates (SPEC-1339)
+- fix(validator): stop marking provably implemented test-only criteria as indeterminate (SPEC-1367)
+- fix(deps): raise brace-expansion and postcss transitive floors past advisories (SPEC-1338)
+- fix(readiness): fail strict readiness when canonical BDD extraction returns zero criteria (SPEC-1321)
+- fix(lifecycle): route implementation review digests to done gates without entering reconciliation (SPEC-1328)
+- fix(privacy): redact minimality policy locators from persisted artifacts (SPEC-1334)
+- fix(create-spec): remove hardcoded test-framework commands from generated specs (SPEC-1234)
+- fix(challenge): preserve title evidence in event capability detection (SPEC-1235)
+- fix(release): enforce proprietary license and canonical plugin tool parity (SPEC-1236)
+
+### Tests
+- test(release): make release preflight/receipt regressions deterministic under full-suite load (SPEC-1207)
+- test(release): reconcile full test suite with local-only release policy and rollback semantics (SPEC-1373)
+
+### Chores
+- chore(deps): update 11 patch/minor dependencies
+- chore(planu): close stale lifecycle for SPEC-1010/1011 tool-reliability specs and record SPEC-1010 tech debt
+- chore(planu): file SPEC-1374/1375/1376 dogfood bug specs
+
+
 ## [5.2.0] - 2026-08-04
 
 ### Features

package/dist/config/environment-schema.json

@@ -8,10 +8,34 @@
       "sensitivity": "secret",
       "default": null
     },
-    { "name": "PLANU_AUTO_DRIFT", "type": "boolean", "scope": "runtime", "sensitivity": "public", "default": null },
-    { "name": "PLANU_COMMENT", "type": "string", "scope": "runtime", "sensitivity": "public", "default": null },
-    { "name": "PLANU_DISABLE_HOOKS", "type": "boolean", "scope": "runtime", "sensitivity": "public", "default": null },
-    { "name": "PLANU_DRIFT_THRESHOLD", "type": "number", "scope": "runtime", "sensitivity": "public", "default": null },
+    {
+      "name": "PLANU_AUTO_DRIFT",
+      "type": "boolean",
+      "scope": "runtime",
+      "sensitivity": "public",
+      "default": null
+    },
+    {
+      "name": "PLANU_COMMENT",
+      "type": "string",
+      "scope": "runtime",
+      "sensitivity": "public",
+      "default": null
+    },
+    {
+      "name": "PLANU_DISABLE_HOOKS",
+      "type": "boolean",
+      "scope": "runtime",
+      "sensitivity": "public",
+      "default": null
+    },
+    {
+      "name": "PLANU_DRIFT_THRESHOLD",
+      "type": "number",
+      "scope": "runtime",
+      "sensitivity": "public",
+      "default": null
+    },
     {
       "name": "PLANU_ENABLE_AUTOCOMMIT",
       "type": "boolean",
@@ -26,7 +50,13 @@
       "sensitivity": "public",
       "default": null
     },
-    { "name": "PLANU_FIGMA_CLIENT_ID", "type": "string", "scope": "runtime", "sensitivity": "public", "default": null },
+    {
+      "name": "PLANU_FIGMA_CLIENT_ID",
+      "type": "string",
+      "scope": "runtime",
+      "sensitivity": "public",
+      "default": null
+    },
     {
       "name": "PLANU_FIGMA_CLIENT_SECRET",
       "type": "string",
@@ -55,7 +85,13 @@
       "sensitivity": "private",
       "default": null
     },
-    { "name": "PLANU_HOST", "type": "string", "scope": "runtime", "sensitivity": "public", "default": null },
+    {
+      "name": "PLANU_HOST",
+      "type": "string",
+      "scope": "runtime",
+      "sensitivity": "public",
+      "default": null
+    },
     {
       "name": "PLANU_MAX_PARALLEL_AGENTS",
       "type": "number",
@@ -63,7 +99,13 @@
       "sensitivity": "public",
       "default": null
     },
-    { "name": "PLANU_MAX_TS_WATCHERS", "type": "number", "scope": "runtime", "sensitivity": "public", "default": null },
+    {
+      "name": "PLANU_MAX_TS_WATCHERS",
+      "type": "number",
+      "scope": "runtime",
+      "sensitivity": "public",
+      "default": null
+    },
     {
       "name": "PLANU_MONTHLY_BUDGET_USD",
       "type": "number",
@@ -71,7 +113,13 @@
       "sensitivity": "private",
       "default": null
     },
-    { "name": "PLANU_NATIVE_PATH", "type": "string", "scope": "runtime", "sensitivity": "private", "default": null },
+    {
+      "name": "PLANU_NATIVE_PATH",
+      "type": "string",
+      "scope": "runtime",
+      "sensitivity": "private",
+      "default": null
+    },
     {
       "name": "PLANU_NETWORK_CONSENT",
       "type": "string",
@@ -79,8 +127,20 @@
       "sensitivity": "private",
       "default": null
     },
-    { "name": "PLANU_OFFLINE", "type": "boolean", "scope": "runtime", "sensitivity": "public", "default": null },
-    { "name": "PLANU_PLUGINS_DIR", "type": "string", "scope": "runtime", "sensitivity": "private", "default": null },
+    {
+      "name": "PLANU_OFFLINE",
+      "type": "boolean",
+      "scope": "runtime",
+      "sensitivity": "public",
+      "default": null
+    },
+    {
+      "name": "PLANU_PLUGINS_DIR",
+      "type": "string",
+      "scope": "runtime",
+      "sensitivity": "private",
+      "default": null
+    },
     {
       "name": "PLANU_PROJECT_DATA_DIR",
       "type": "string",
@@ -88,7 +148,13 @@
       "sensitivity": "private",
       "default": null
     },
-    { "name": "PLANU_PROJECT_PATH", "type": "string", "scope": "runtime", "sensitivity": "private", "default": null },
+    {
+      "name": "PLANU_PROJECT_PATH",
+      "type": "string",
+      "scope": "runtime",
+      "sensitivity": "private",
+      "default": null
+    },
     {
       "name": "PLANU_QA_CHECK_TIMEOUT_MS",
       "type": "number",
@@ -96,11 +162,41 @@
       "sensitivity": "public",
       "default": null
     },
-    { "name": "PLANU_RECORD_CASSETTES", "type": "boolean", "scope": "test", "sensitivity": "public", "default": null },
-    { "name": "PLANU_REGISTRY_URL", "type": "string", "scope": "runtime", "sensitivity": "public", "default": null },
-    { "name": "PLANU_SAGA_CHAOS", "type": "string", "scope": "test", "sensitivity": "public", "default": null },
-    { "name": "PLANU_SESSION_BUDGET", "type": "number", "scope": "runtime", "sensitivity": "private", "default": null },
-    { "name": "PLANU_SESSION_ID", "type": "string", "scope": "runtime", "sensitivity": "private", "default": null },
+    {
+      "name": "PLANU_RECORD_CASSETTES",
+      "type": "boolean",
+      "scope": "test",
+      "sensitivity": "public",
+      "default": null
+    },
+    {
+      "name": "PLANU_REGISTRY_URL",
+      "type": "string",
+      "scope": "runtime",
+      "sensitivity": "public",
+      "default": null
+    },
+    {
+      "name": "PLANU_SAGA_CHAOS",
+      "type": "string",
+      "scope": "test",
+      "sensitivity": "public",
+      "default": null
+    },
+    {
+      "name": "PLANU_SESSION_BUDGET",
+      "type": "number",
+      "scope": "runtime",
+      "sensitivity": "private",
+      "default": null
+    },
+    {
+      "name": "PLANU_SESSION_ID",
+      "type": "string",
+      "scope": "runtime",
+      "sensitivity": "private",
+      "default": null
+    },
     {
       "name": "PLANU_SUPPRESS_AUTOCOMMIT",
       "type": "boolean",
@@ -108,7 +204,13 @@
       "sensitivity": "public",
       "default": null
     },
-    { "name": "PLANU_TELEMETRY", "type": "string", "scope": "runtime", "sensitivity": "public", "default": null },
+    {
+      "name": "PLANU_TELEMETRY",
+      "type": "string",
+      "scope": "runtime",
+      "sensitivity": "public",
+      "default": null
+    },
     {
       "name": "PLANU_TELEMETRY_CONSENT_VERSION",
       "type": "string",
@@ -123,9 +225,27 @@
       "sensitivity": "public",
       "default": null
     },
-    { "name": "PLANU_TELEMETRY_TOKEN", "type": "string", "scope": "runtime", "sensitivity": "secret", "default": null },
-    { "name": "PLANU_TIMING", "type": "boolean", "scope": "runtime", "sensitivity": "public", "default": null },
-    { "name": "PLANU_TOOL_TIMEOUT_MS", "type": "number", "scope": "runtime", "sensitivity": "public", "default": null },
+    {
+      "name": "PLANU_TELEMETRY_TOKEN",
+      "type": "string",
+      "scope": "runtime",
+      "sensitivity": "secret",
+      "default": null
+    },
+    {
+      "name": "PLANU_TIMING",
+      "type": "boolean",
+      "scope": "runtime",
+      "sensitivity": "public",
+      "default": null
+    },
+    {
+      "name": "PLANU_TOOL_TIMEOUT_MS",
+      "type": "number",
+      "scope": "runtime",
+      "sensitivity": "public",
+      "default": null
+    },
     {
       "name": "PLANU_VALIDATE_LINT_TIMEOUT_MS",
       "type": "number",
@@ -133,7 +253,27 @@
       "sensitivity": "public",
       "default": null
     },
-    { "name": "PLANU_VERBOSE_OUTPUT", "type": "boolean", "scope": "runtime", "sensitivity": "public", "default": null }
+    {
+      "name": "PLANU_VALIDATE_PROBE",
+      "type": "string",
+      "scope": "runtime",
+      "sensitivity": "public",
+      "default": null
+    },
+    {
+      "name": "PLANU_VALIDATE_PROBE_TIMEOUT_MS",
+      "type": "number",
+      "scope": "runtime",
+      "sensitivity": "public",
+      "default": null
+    },
+    {
+      "name": "PLANU_VERBOSE_OUTPUT",
+      "type": "boolean",
+      "scope": "runtime",
+      "sensitivity": "public",
+      "default": null
+    }
   ],
   "dynamicPatterns": [
     {

package/dist/config/hook-templates/planu-session-safeguard.sh

@@ -7,10 +7,20 @@ mkdir -p "$(dirname "$log")"
   echo "[$(date -u +%FT%TZ)] PreCompaction safeguard fired"
   cd "${CLAUDE_PROJECT_DIR:-.}" || exit 0
   current=$(git rev-parse --abbrev-ref HEAD 2>/dev/null || echo "")
-  if [[ -n "$current" && "$current" != "HEAD" ]]; then
-    # ff-only push, never force, never overwrite remote
-    git push origin "$current" --no-verify 2>&1 || echo "push failed or nothing to push"
-  fi
+  case "$current" in
+    ""|HEAD|main|master|develop|release|production)
+      # SPEC-1379: never autopush protected branches — mirrors PROTECTED_BRANCHES
+      # in src/engine/session-safeguard/autopush.ts. --no-verify below is safe
+      # ONLY because of this guard; remove one, remove both.
+      echo "skip: protected or detached ($current)"
+      ;;
+    *)
+      # No --force: the remote rejects any non-fast-forward push, so this can
+      # never overwrite remote history. --end-of-options hardens against
+      # refnames that start with a dash.
+      git push --no-verify --end-of-options origin "$current" 2>&1 || echo "push failed or nothing to push"
+      ;;
+  esac
 } >> "$log" 2>&1
 
 exit 0

package/dist/config/release-policy.json

@@ -96,13 +96,5 @@
       { "id": "CC", "command": "clang" },
       { "id": "CXX", "command": "clang++" }
     ]
-  },
-  "workflowActions": {
-    "actions/checkout": "d23441a48e516b6c34aea4fa41551a30e30af803",
-    "actions/setup-node": "249970729cb0ef3589644e2896645e5dc5ba9c38",
-    "actions/upload-artifact": "b7c566a772e6b6bfb58ed0dc250532a479d7789f",
-    "pnpm/action-setup": "fc06bc1257f339d1d5d8b3a19a8cae5388b55320",
-    "dtolnay/rust-toolchain": "2c7215f132e9ebf062739d9130488b56d53c060c",
-    "Swatinem/rust-cache": "e18b497796c12c097a38f9edb9d0641fb99eee32"
   }
 }

package/dist/engine/planu-core.darwin-arm64.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.2.0",
-  "engineVersion": "5.2.0",
-  "buildId": "1-5.2.0-aarch64-apple-darwin",
+  "cliVersion": "5.3.1",
+  "engineVersion": "5.3.1",
+  "buildId": "1-5.3.1-aarch64-apple-darwin",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -17,15 +17,15 @@
   "platform": "darwin",
   "arch": "arm64",
   "libc": null,
-  "artifactSha256": "d651b32dc2ec3d58adc720400cab3cfd0114388d2697c861038b913cda3ad711",
+  "artifactSha256": "9496b35ee4f02409d2ba5d5a32b07069f188bbe39b88ab0cc3a350fe476dce2a",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.darwin-arm64.node.sbom.json",
-    "sha256": "28c7421f2ee232830c3150449c51d89a494e2a4841a39af4348dcaaccb27f6cc"
+    "sha256": "1e8ba252b6c59727c3572a4cc086f55900f1dfbe2f8b52ab01efbb566825bf27"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "121065e63e9fd2c067367e286ecba619ecc3f18a",
+    "sourceCommit": "cff22e20c8f95a4081485b852254fa5fbe1532ef",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -34,6 +34,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "9R5L33t90yHh/8SXCNpjSRbCoIJ8wooiMtvkHpCKr1ByDK13NiUuH3v0uLiquqXbf4r6mMe5K4bWQ63nm/XQBg=="
+    "value": "shwkLDoc3YH1TfCx9BXJ3sWZFkQnmUw5PF5ix0NUQIJ9zy79t1+97tCj+XxYMHr5/aEdAleDSI14AHARpTb+AQ=="
   }
 }

package/dist/engine/planu-core.darwin-arm64.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.2.0",
+      "bom-ref": "pkg:cargo/planu-core@5.3.1",
       "type": "library",
       "name": "planu-core",
-      "version": "5.2.0",
+      "version": "5.3.1",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "d651b32dc2ec3d58adc720400cab3cfd0114388d2697c861038b913cda3ad711"
+          "content": "9496b35ee4f02409d2ba5d5a32b07069f188bbe39b88ab0cc3a350fe476dce2a"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.2.0",
+      "ref": "pkg:cargo/planu-core@5.3.1",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/planu-core.darwin-x64.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.2.0",
-  "engineVersion": "5.2.0",
-  "buildId": "1-5.2.0-x86_64-apple-darwin",
+  "cliVersion": "5.3.1",
+  "engineVersion": "5.3.1",
+  "buildId": "1-5.3.1-x86_64-apple-darwin",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -17,15 +17,15 @@
   "platform": "darwin",
   "arch": "x64",
   "libc": null,
-  "artifactSha256": "931a0f6bc94744521f33e6ac46fb7293fe49b14d225d76446e27dd7117f12ad9",
+  "artifactSha256": "8835b07d4b8a9d96c2c38d5ba7a0ee31f556a68bab2c49f3c397d813a0b467e9",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.darwin-x64.node.sbom.json",
-    "sha256": "ec531e41f6e0ef14b7fb2727370f817b761d28ae510c93790555796f5e2fac19"
+    "sha256": "cd3fde2fa5c346e6f6b4ee377eec73e63ac20ae85d6793769c33f49ce884e181"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "121065e63e9fd2c067367e286ecba619ecc3f18a",
+    "sourceCommit": "cff22e20c8f95a4081485b852254fa5fbe1532ef",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -34,6 +34,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "mgppJ+aunLo8AOPqEdBnmAXfDYzWQzdmehp7AASRUk8Wyk9/mQm9A22K5T5NiUN3flTqQCLPT6ZN2L9eWp5VCw=="
+    "value": "BQIqLTSOP1v1gEBU6wBRH9d2G+81wpqFTtpxI1ObAfMEv22/HmXMhDieRK7ijSdhaJ0OwRE3qprfFqbYJ30pAg=="
   }
 }

package/dist/engine/planu-core.darwin-x64.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.2.0",
+      "bom-ref": "pkg:cargo/planu-core@5.3.1",
       "type": "library",
       "name": "planu-core",
-      "version": "5.2.0",
+      "version": "5.3.1",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "931a0f6bc94744521f33e6ac46fb7293fe49b14d225d76446e27dd7117f12ad9"
+          "content": "8835b07d4b8a9d96c2c38d5ba7a0ee31f556a68bab2c49f3c397d813a0b467e9"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.2.0",
+      "ref": "pkg:cargo/planu-core@5.3.1",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/planu-core.linux-arm64-gnu.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.2.0",
-  "engineVersion": "5.2.0",
-  "buildId": "1-5.2.0-aarch64-unknown-linux-gnu",
+  "cliVersion": "5.3.1",
+  "engineVersion": "5.3.1",
+  "buildId": "1-5.3.1-aarch64-unknown-linux-gnu",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -16,15 +16,15 @@
   "platform": "linux",
   "arch": "arm64",
   "libc": "glibc",
-  "artifactSha256": "9cb0106828b7045ee7c4c4f70fbbcaabc67f09f1a3466a034b171c4e326cce4c",
+  "artifactSha256": "aa7ba305602ab0cc30ed8859ae7b8aea49fc319161d583a84a39c43fc3080b2d",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.linux-arm64-gnu.node.sbom.json",
-    "sha256": "2204168dd49b9d8b05854175868efb7a38a00af37081451c273b8c5a4d34dc99"
+    "sha256": "70863618fef07e482c7e5b70b7ec0f2eb86aeabb3639b458364d99be726d02b3"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "121065e63e9fd2c067367e286ecba619ecc3f18a",
+    "sourceCommit": "cff22e20c8f95a4081485b852254fa5fbe1532ef",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -33,6 +33,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "sW/k0JsHybFw0odijKvzrpwNrYV9u58gCSE+IUdh6AAd810hXnmnmnnH4YugGOVhW8nLQyRhdEuimwwv5yn7Aw=="
+    "value": "kwHa3R8NyX8dZ2Bb2+5+fMVTipEy8C0oHJ0P0LadjVhd5KJaXqfLPIu6a+rUkq9v/j1AUievoDE/BhgN8ukzBA=="
   }
 }

package/dist/engine/planu-core.linux-arm64-gnu.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.2.0",
+      "bom-ref": "pkg:cargo/planu-core@5.3.1",
       "type": "library",
       "name": "planu-core",
-      "version": "5.2.0",
+      "version": "5.3.1",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "9cb0106828b7045ee7c4c4f70fbbcaabc67f09f1a3466a034b171c4e326cce4c"
+          "content": "aa7ba305602ab0cc30ed8859ae7b8aea49fc319161d583a84a39c43fc3080b2d"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.2.0",
+      "ref": "pkg:cargo/planu-core@5.3.1",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/planu-core.linux-arm64-musl.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.2.0",
-  "engineVersion": "5.2.0",
-  "buildId": "1-5.2.0-aarch64-unknown-linux-musl",
+  "cliVersion": "5.3.1",
+  "engineVersion": "5.3.1",
+  "buildId": "1-5.3.1-aarch64-unknown-linux-musl",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -16,15 +16,15 @@
   "platform": "linux",
   "arch": "arm64",
   "libc": "musl",
-  "artifactSha256": "264f16f835f526770fc5cda53eb3eba3f5fa37c656a0e7759dd485d3500d1586",
+  "artifactSha256": "d767b6ef1ec48f8bd745e02d39a53ef0efa052a15c3370ba65d3365e817cf454",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.linux-arm64-musl.node.sbom.json",
-    "sha256": "67a2fcee3e745158d476fba6893d43b89861386e2e66c30af6a6db56e05909d5"
+    "sha256": "cf84110894384279fa1712a7b582767dd1dbebc72c1f4d3b53937d45109edc19"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "121065e63e9fd2c067367e286ecba619ecc3f18a",
+    "sourceCommit": "cff22e20c8f95a4081485b852254fa5fbe1532ef",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -33,6 +33,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "/cAY9D72vw0NV5qgc9/xcy1dn9N+FSY39fzTGKsdz9ZJziYoROvuhjeb927Mm1oELvCQKBi198AVypNdzyUFDA=="
+    "value": "0jHhH3Ng3cOPbyiCfBZqdMVbp7i3tP7JnViKwaJqEF65k1M4NTootCYDahfaxcOPQbdyywqgoGBn9D/c8x6dAA=="
   }
 }

package/dist/engine/planu-core.linux-arm64-musl.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.2.0",
+      "bom-ref": "pkg:cargo/planu-core@5.3.1",
       "type": "library",
       "name": "planu-core",
-      "version": "5.2.0",
+      "version": "5.3.1",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "264f16f835f526770fc5cda53eb3eba3f5fa37c656a0e7759dd485d3500d1586"
+          "content": "d767b6ef1ec48f8bd745e02d39a53ef0efa052a15c3370ba65d3365e817cf454"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.2.0",
+      "ref": "pkg:cargo/planu-core@5.3.1",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/planu-core.linux-x64-gnu.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.2.0",
-  "engineVersion": "5.2.0",
-  "buildId": "1-5.2.0-x86_64-unknown-linux-gnu",
+  "cliVersion": "5.3.1",
+  "engineVersion": "5.3.1",
+  "buildId": "1-5.3.1-x86_64-unknown-linux-gnu",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -16,15 +16,15 @@
   "platform": "linux",
   "arch": "x64",
   "libc": "glibc",
-  "artifactSha256": "828e4ca1e0aac93c5a3ae1c4f8a306cc7eb306e765ea459cb323359075fe19ec",
+  "artifactSha256": "121e0cde6094d4812a1003f5e8d271c73180f87253d242c0ef2a3ce020114fb2",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.linux-x64-gnu.node.sbom.json",
-    "sha256": "035c63d02524a08605052a620bdd97d27b07e08db791cd495a39274d74848013"
+    "sha256": "2fe67e0205c5a0893ab618f92cbe53b862b286018e30ebd93a4bb35570d9e53f"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "121065e63e9fd2c067367e286ecba619ecc3f18a",
+    "sourceCommit": "cff22e20c8f95a4081485b852254fa5fbe1532ef",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -33,6 +33,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "l1u8RhJUsZO4qDxupk9ePmsfzp1AoQ78Qjujkk6HuJ3/3SyFAYSoLVK8L3QnM2kOIzga7fgkHfnk9iz4ebMWDw=="
+    "value": "PANQkfk6g7pqHmExCM2voq4U2WCuJX1cbaWm8K4T/QCPNzWE4TmGoG5vQN4k80VCIyjTFz5IA5Ope+XmNhnZCA=="
   }
 }