@planu/cli 5.3.0 → 5.3.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (23) hide show
  1. package/CHANGELOG.md +17 -0
  2. package/dist/config/hook-templates/planu-session-safeguard.sh +14 -4
  3. package/dist/engine/planu-core.darwin-arm64.node.manifest.json +7 -7
  4. package/dist/engine/planu-core.darwin-arm64.node.sbom.json +4 -4
  5. package/dist/engine/planu-core.darwin-x64.node.manifest.json +7 -7
  6. package/dist/engine/planu-core.darwin-x64.node.sbom.json +4 -4
  7. package/dist/engine/planu-core.linux-arm64-gnu.node.manifest.json +7 -7
  8. package/dist/engine/planu-core.linux-arm64-gnu.node.sbom.json +4 -4
  9. package/dist/engine/planu-core.linux-arm64-musl.node.manifest.json +7 -7
  10. package/dist/engine/planu-core.linux-arm64-musl.node.sbom.json +4 -4
  11. package/dist/engine/planu-core.linux-x64-gnu.node.manifest.json +7 -7
  12. package/dist/engine/planu-core.linux-x64-gnu.node.sbom.json +4 -4
  13. package/dist/engine/planu-core.linux-x64-musl.node.manifest.json +7 -7
  14. package/dist/engine/planu-core.linux-x64-musl.node.sbom.json +4 -4
  15. package/dist/engine/planu-core.win32-arm64-msvc.node.manifest.json +7 -7
  16. package/dist/engine/planu-core.win32-arm64-msvc.node.sbom.json +4 -4
  17. package/dist/engine/planu-core.win32-x64-msvc.node.manifest.json +7 -7
  18. package/dist/engine/planu-core.win32-x64-msvc.node.sbom.json +4 -4
  19. package/dist/engine/session-safeguard/autopush.js +8 -2
  20. package/dist/tools/reconcile-session-safeguard-hook.js +14 -3
  21. package/package.json +9 -9
  22. package/planu-native.json +1 -1
  23. package/planu-plugin.json +1 -1
package/CHANGELOG.md CHANGED
@@ -1,3 +1,20 @@
1
+ ## [5.3.1] - 2026-08-05
2
+
3
+ ### Bug Fixes
4
+ - fix(session-safeguard): abort detect via FETCH_HEAD, drop invalid push --ff-only, harden refs
5
+ - fix(session-safeguard): never autopush protected branches and detect pushed bump in release abort
6
+
7
+ ### Refactoring
8
+ - refactor(tests): split release-pipeline suite, harness cache, mirror auto-sync
9
+
10
+ ### Chores
11
+ - chore(planu): SPEC-1384 done state and SPEC-1385 dogfood bug spec
12
+ - chore(planu): SPEC-1379 done state
13
+ - chore(planu): split incidental session-context churn out of SPEC-1379 delta
14
+ - chore(planu): file SPEC-1381 challenge resolution, SPEC-1382 operator guides, SPEC-1383 validate budget dogfood specs
15
+ - chore(planu): SPEC-1378 done state and v5.3.0 session checkpoint
16
+
17
+
1
18
  ## [5.3.0] - 2026-08-05
2
19
 
3
20
  ### Features
package/dist/config/hook-templates/planu-session-safeguard.sh CHANGED
@@ -7,10 +7,20 @@ mkdir -p "$(dirname "$log")"
7
7
  echo "[$(date -u +%FT%TZ)] PreCompaction safeguard fired"
8
8
  cd "${CLAUDE_PROJECT_DIR:-.}" || exit 0
9
9
  current=$(git rev-parse --abbrev-ref HEAD 2>/dev/null || echo "")
10
- if [[ -n "$current" && "$current" != "HEAD" ]]; then
11
- # ff-only push, never force, never overwrite remote
12
- git push origin "$current" --no-verify 2>&1 || echo "push failed or nothing to push"
13
- fi
10
+ case "$current" in
11
+ ""|HEAD|main|master|develop|release|production)
12
+ # SPEC-1379: never autopush protected branches — mirrors PROTECTED_BRANCHES
13
+ # in src/engine/session-safeguard/autopush.ts. --no-verify below is safe
14
+ # ONLY because of this guard; remove one, remove both.
15
+ echo "skip: protected or detached ($current)"
16
+ ;;
17
+ *)
18
+ # No --force: the remote rejects any non-fast-forward push, so this can
19
+ # never overwrite remote history. --end-of-options hardens against
20
+ # refnames that start with a dash.
21
+ git push --no-verify --end-of-options origin "$current" 2>&1 || echo "push failed or nothing to push"
22
+ ;;
23
+ esac
14
24
  } >> "$log" 2>&1
15
25
 
16
26
  exit 0
package/dist/engine/planu-core.darwin-arm64.node.manifest.json CHANGED
@@ -1,8 +1,8 @@
1
1
  {
2
2
  "schemaVersion": 2,
3
- "cliVersion": "5.3.0",
4
- "engineVersion": "5.3.0",
5
- "buildId": "1-5.3.0-aarch64-apple-darwin",
3
+ "cliVersion": "5.3.1",
4
+ "engineVersion": "5.3.1",
5
+ "buildId": "1-5.3.1-aarch64-apple-darwin",
6
6
  "protocolAbi": 1,
7
7
  "capabilityAbi": 2,
8
8
  "nodeApiAbi": 4,
@@ -17,15 +17,15 @@
17
17
  "platform": "darwin",
18
18
  "arch": "arm64",
19
19
  "libc": null,
20
- "artifactSha256": "07ca15496c8d00f9b1d56fc7147677079936735e0424cf94e55f3b76fd1a4557",
20
+ "artifactSha256": "9496b35ee4f02409d2ba5d5a32b07069f188bbe39b88ab0cc3a350fe476dce2a",
21
21
  "sbom": {
22
22
  "format": "CycloneDX-1.5",
23
23
  "path": "planu-core.darwin-arm64.node.sbom.json",
24
- "sha256": "e53a5bcc426cd99534ce6f7e7934c810c8947959bc954791530bbf204206f595"
24
+ "sha256": "1e8ba252b6c59727c3572a4cc086f55900f1dfbe2f8b52ab01efbb566825bf27"
25
25
  },
26
26
  "provenance": {
27
27
  "builder": "scripts/build-rust-local.sh",
28
- "sourceCommit": "0bfc16bd342cfaa8ee48da5d9a1484df65bca782",
28
+ "sourceCommit": "cff22e20c8f95a4081485b852254fa5fbe1532ef",
29
29
  "sourceTreeDirty": false,
30
30
  "sourceDateEpoch": 1,
31
31
  "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -34,6 +34,6 @@
34
34
  "signature": {
35
35
  "algorithm": "Ed25519",
36
36
  "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
37
- "value": "xvRryyeJ5xYiQfQvv4CpxlvDfuUBXdeeTJGxnjoXsl9xzG2lpqT8ChZAcJrde0DEfyzfUkMYS24z2tk/3rapCQ=="
37
+ "value": "shwkLDoc3YH1TfCx9BXJ3sWZFkQnmUw5PF5ix0NUQIJ9zy79t1+97tCj+XxYMHr5/aEdAleDSI14AHARpTb+AQ=="
38
38
  }
39
39
  }
package/dist/engine/planu-core.darwin-arm64.node.sbom.json CHANGED
@@ -4,14 +4,14 @@
4
4
  "version": 1,
5
5
  "metadata": {
6
6
  "component": {
7
- "bom-ref": "pkg:cargo/planu-core@5.3.0",
7
+ "bom-ref": "pkg:cargo/planu-core@5.3.1",
8
8
  "type": "library",
9
9
  "name": "planu-core",
10
- "version": "5.3.0",
10
+ "version": "5.3.1",
11
11
  "hashes": [
12
12
  {
13
13
  "alg": "SHA-256",
14
- "content": "07ca15496c8d00f9b1d56fc7147677079936735e0424cf94e55f3b76fd1a4557"
14
+ "content": "9496b35ee4f02409d2ba5d5a32b07069f188bbe39b88ab0cc3a350fe476dce2a"
15
15
  }
16
16
  ]
17
17
  }
@@ -1106,7 +1106,7 @@
1106
1106
  "dependsOn": []
1107
1107
  },
1108
1108
  {
1109
- "ref": "pkg:cargo/planu-core@5.3.0",
1109
+ "ref": "pkg:cargo/planu-core@5.3.1",
1110
1110
  "dependsOn": [
1111
1111
  "pkg:cargo/core-foundation@0.10.1",
1112
1112
  "pkg:cargo/hmac@0.12.1",
package/dist/engine/planu-core.darwin-x64.node.manifest.json CHANGED
@@ -1,8 +1,8 @@
1
1
  {
2
2
  "schemaVersion": 2,
3
- "cliVersion": "5.3.0",
4
- "engineVersion": "5.3.0",
5
- "buildId": "1-5.3.0-x86_64-apple-darwin",
3
+ "cliVersion": "5.3.1",
4
+ "engineVersion": "5.3.1",
5
+ "buildId": "1-5.3.1-x86_64-apple-darwin",
6
6
  "protocolAbi": 1,
7
7
  "capabilityAbi": 2,
8
8
  "nodeApiAbi": 4,
@@ -17,15 +17,15 @@
17
17
  "platform": "darwin",
18
18
  "arch": "x64",
19
19
  "libc": null,
20
- "artifactSha256": "ac6926aab84f664e90e0fe75598b5a175a9952f57143c0a7cc560b00c8fc144c",
20
+ "artifactSha256": "8835b07d4b8a9d96c2c38d5ba7a0ee31f556a68bab2c49f3c397d813a0b467e9",
21
21
  "sbom": {
22
22
  "format": "CycloneDX-1.5",
23
23
  "path": "planu-core.darwin-x64.node.sbom.json",
24
- "sha256": "39d80491638f2d1049abd0d2eecd79b231bce01d54752fe5dfad915112a56180"
24
+ "sha256": "cd3fde2fa5c346e6f6b4ee377eec73e63ac20ae85d6793769c33f49ce884e181"
25
25
  },
26
26
  "provenance": {
27
27
  "builder": "scripts/build-rust-local.sh",
28
- "sourceCommit": "0bfc16bd342cfaa8ee48da5d9a1484df65bca782",
28
+ "sourceCommit": "cff22e20c8f95a4081485b852254fa5fbe1532ef",
29
29
  "sourceTreeDirty": false,
30
30
  "sourceDateEpoch": 1,
31
31
  "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -34,6 +34,6 @@
34
34
  "signature": {
35
35
  "algorithm": "Ed25519",
36
36
  "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
37
- "value": "NjrWMYeOEazMOJpQQFUI+bOzrlvWKvBNehPqMqSHcQwW+TXNU/jn6EBbJKrkbywWNwdyE/UwCTZon7bi0ZaTAQ=="
37
+ "value": "BQIqLTSOP1v1gEBU6wBRH9d2G+81wpqFTtpxI1ObAfMEv22/HmXMhDieRK7ijSdhaJ0OwRE3qprfFqbYJ30pAg=="
38
38
  }
39
39
  }
package/dist/engine/planu-core.darwin-x64.node.sbom.json CHANGED
@@ -4,14 +4,14 @@
4
4
  "version": 1,
5
5
  "metadata": {
6
6
  "component": {
7
- "bom-ref": "pkg:cargo/planu-core@5.3.0",
7
+ "bom-ref": "pkg:cargo/planu-core@5.3.1",
8
8
  "type": "library",
9
9
  "name": "planu-core",
10
- "version": "5.3.0",
10
+ "version": "5.3.1",
11
11
  "hashes": [
12
12
  {
13
13
  "alg": "SHA-256",
14
- "content": "ac6926aab84f664e90e0fe75598b5a175a9952f57143c0a7cc560b00c8fc144c"
14
+ "content": "8835b07d4b8a9d96c2c38d5ba7a0ee31f556a68bab2c49f3c397d813a0b467e9"
15
15
  }
16
16
  ]
17
17
  }
@@ -1106,7 +1106,7 @@
1106
1106
  "dependsOn": []
1107
1107
  },
1108
1108
  {
1109
- "ref": "pkg:cargo/planu-core@5.3.0",
1109
+ "ref": "pkg:cargo/planu-core@5.3.1",
1110
1110
  "dependsOn": [
1111
1111
  "pkg:cargo/core-foundation@0.10.1",
1112
1112
  "pkg:cargo/hmac@0.12.1",
package/dist/engine/planu-core.linux-arm64-gnu.node.manifest.json CHANGED
@@ -1,8 +1,8 @@
1
1
  {
2
2
  "schemaVersion": 2,
3
- "cliVersion": "5.3.0",
4
- "engineVersion": "5.3.0",
5
- "buildId": "1-5.3.0-aarch64-unknown-linux-gnu",
3
+ "cliVersion": "5.3.1",
4
+ "engineVersion": "5.3.1",
5
+ "buildId": "1-5.3.1-aarch64-unknown-linux-gnu",
6
6
  "protocolAbi": 1,
7
7
  "capabilityAbi": 2,
8
8
  "nodeApiAbi": 4,
@@ -16,15 +16,15 @@
16
16
  "platform": "linux",
17
17
  "arch": "arm64",
18
18
  "libc": "glibc",
19
- "artifactSha256": "e81c28d359720a6e89c79c5425b0a60ffefd133f89774729a39252332a7d8098",
19
+ "artifactSha256": "aa7ba305602ab0cc30ed8859ae7b8aea49fc319161d583a84a39c43fc3080b2d",
20
20
  "sbom": {
21
21
  "format": "CycloneDX-1.5",
22
22
  "path": "planu-core.linux-arm64-gnu.node.sbom.json",
23
- "sha256": "6a9041cc34a0207f9cc42268313ab93bdce4df29f6152c2ec35d7eedc3fdc20f"
23
+ "sha256": "70863618fef07e482c7e5b70b7ec0f2eb86aeabb3639b458364d99be726d02b3"
24
24
  },
25
25
  "provenance": {
26
26
  "builder": "scripts/build-rust-local.sh",
27
- "sourceCommit": "0bfc16bd342cfaa8ee48da5d9a1484df65bca782",
27
+ "sourceCommit": "cff22e20c8f95a4081485b852254fa5fbe1532ef",
28
28
  "sourceTreeDirty": false,
29
29
  "sourceDateEpoch": 1,
30
30
  "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -33,6 +33,6 @@
33
33
  "signature": {
34
34
  "algorithm": "Ed25519",
35
35
  "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
36
- "value": "nvRlOzgPcI6wLyjx8m+Pz/kbAeA1AF5DyiJ1OE55S7tOhpeiAoH+0YdYKIawJe5AdhVWHP6IYc81N1c7tnrGBg=="
36
+ "value": "kwHa3R8NyX8dZ2Bb2+5+fMVTipEy8C0oHJ0P0LadjVhd5KJaXqfLPIu6a+rUkq9v/j1AUievoDE/BhgN8ukzBA=="
37
37
  }
38
38
  }
package/dist/engine/planu-core.linux-arm64-gnu.node.sbom.json CHANGED
@@ -4,14 +4,14 @@
4
4
  "version": 1,
5
5
  "metadata": {
6
6
  "component": {
7
- "bom-ref": "pkg:cargo/planu-core@5.3.0",
7
+ "bom-ref": "pkg:cargo/planu-core@5.3.1",
8
8
  "type": "library",
9
9
  "name": "planu-core",
10
- "version": "5.3.0",
10
+ "version": "5.3.1",
11
11
  "hashes": [
12
12
  {
13
13
  "alg": "SHA-256",
14
- "content": "e81c28d359720a6e89c79c5425b0a60ffefd133f89774729a39252332a7d8098"
14
+ "content": "aa7ba305602ab0cc30ed8859ae7b8aea49fc319161d583a84a39c43fc3080b2d"
15
15
  }
16
16
  ]
17
17
  }
@@ -1106,7 +1106,7 @@
1106
1106
  "dependsOn": []
1107
1107
  },
1108
1108
  {
1109
- "ref": "pkg:cargo/planu-core@5.3.0",
1109
+ "ref": "pkg:cargo/planu-core@5.3.1",
1110
1110
  "dependsOn": [
1111
1111
  "pkg:cargo/core-foundation@0.10.1",
1112
1112
  "pkg:cargo/hmac@0.12.1",
package/dist/engine/planu-core.linux-arm64-musl.node.manifest.json CHANGED
@@ -1,8 +1,8 @@
1
1
  {
2
2
  "schemaVersion": 2,
3
- "cliVersion": "5.3.0",
4
- "engineVersion": "5.3.0",
5
- "buildId": "1-5.3.0-aarch64-unknown-linux-musl",
3
+ "cliVersion": "5.3.1",
4
+ "engineVersion": "5.3.1",
5
+ "buildId": "1-5.3.1-aarch64-unknown-linux-musl",
6
6
  "protocolAbi": 1,
7
7
  "capabilityAbi": 2,
8
8
  "nodeApiAbi": 4,
@@ -16,15 +16,15 @@
16
16
  "platform": "linux",
17
17
  "arch": "arm64",
18
18
  "libc": "musl",
19
- "artifactSha256": "b0d4c6c83b85af40d685e0e005624c34b2a20d295f74c58615293322b42ba965",
19
+ "artifactSha256": "d767b6ef1ec48f8bd745e02d39a53ef0efa052a15c3370ba65d3365e817cf454",
20
20
  "sbom": {
21
21
  "format": "CycloneDX-1.5",
22
22
  "path": "planu-core.linux-arm64-musl.node.sbom.json",
23
- "sha256": "16178e0bb9e2714e0e06b3a58c29fad539bf3c4c72eedd5f42fd4878fbf0079e"
23
+ "sha256": "cf84110894384279fa1712a7b582767dd1dbebc72c1f4d3b53937d45109edc19"
24
24
  },
25
25
  "provenance": {
26
26
  "builder": "scripts/build-rust-local.sh",
27
- "sourceCommit": "0bfc16bd342cfaa8ee48da5d9a1484df65bca782",
27
+ "sourceCommit": "cff22e20c8f95a4081485b852254fa5fbe1532ef",
28
28
  "sourceTreeDirty": false,
29
29
  "sourceDateEpoch": 1,
30
30
  "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -33,6 +33,6 @@
33
33
  "signature": {
34
34
  "algorithm": "Ed25519",
35
35
  "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
36
- "value": "mwwwq8vQTDPmmIZ4ssE1UjYXd6UnhDmchDD+x/vqjr6HAIW2I4+q1mrf6vQ7X1ln/J+9lxJymJlyu4dA0QBTDQ=="
36
+ "value": "0jHhH3Ng3cOPbyiCfBZqdMVbp7i3tP7JnViKwaJqEF65k1M4NTootCYDahfaxcOPQbdyywqgoGBn9D/c8x6dAA=="
37
37
  }
38
38
  }
package/dist/engine/planu-core.linux-arm64-musl.node.sbom.json CHANGED
@@ -4,14 +4,14 @@
4
4
  "version": 1,
5
5
  "metadata": {
6
6
  "component": {
7
- "bom-ref": "pkg:cargo/planu-core@5.3.0",
7
+ "bom-ref": "pkg:cargo/planu-core@5.3.1",
8
8
  "type": "library",
9
9
  "name": "planu-core",
10
- "version": "5.3.0",
10
+ "version": "5.3.1",
11
11
  "hashes": [
12
12
  {
13
13
  "alg": "SHA-256",
14
- "content": "b0d4c6c83b85af40d685e0e005624c34b2a20d295f74c58615293322b42ba965"
14
+ "content": "d767b6ef1ec48f8bd745e02d39a53ef0efa052a15c3370ba65d3365e817cf454"
15
15
  }
16
16
  ]
17
17
  }
@@ -1106,7 +1106,7 @@
1106
1106
  "dependsOn": []
1107
1107
  },
1108
1108
  {
1109
- "ref": "pkg:cargo/planu-core@5.3.0",
1109
+ "ref": "pkg:cargo/planu-core@5.3.1",
1110
1110
  "dependsOn": [
1111
1111
  "pkg:cargo/core-foundation@0.10.1",
1112
1112
  "pkg:cargo/hmac@0.12.1",
package/dist/engine/planu-core.linux-x64-gnu.node.manifest.json CHANGED
@@ -1,8 +1,8 @@
1
1
  {
2
2
  "schemaVersion": 2,
3
- "cliVersion": "5.3.0",
4
- "engineVersion": "5.3.0",
5
- "buildId": "1-5.3.0-x86_64-unknown-linux-gnu",
3
+ "cliVersion": "5.3.1",
4
+ "engineVersion": "5.3.1",
5
+ "buildId": "1-5.3.1-x86_64-unknown-linux-gnu",
6
6
  "protocolAbi": 1,
7
7
  "capabilityAbi": 2,
8
8
  "nodeApiAbi": 4,
@@ -16,15 +16,15 @@
16
16
  "platform": "linux",
17
17
  "arch": "x64",
18
18
  "libc": "glibc",
19
- "artifactSha256": "9981b33dbbe44fcab6da8e909a24d6b21317cfdd771946e65dba41879bb2972c",
19
+ "artifactSha256": "121e0cde6094d4812a1003f5e8d271c73180f87253d242c0ef2a3ce020114fb2",
20
20
  "sbom": {
21
21
  "format": "CycloneDX-1.5",
22
22
  "path": "planu-core.linux-x64-gnu.node.sbom.json",
23
- "sha256": "a1a11390578e9504f2552572f013ef11c11b5c09d65ad3fd6c01f4cba17d3304"
23
+ "sha256": "2fe67e0205c5a0893ab618f92cbe53b862b286018e30ebd93a4bb35570d9e53f"
24
24
  },
25
25
  "provenance": {
26
26
  "builder": "scripts/build-rust-local.sh",
27
- "sourceCommit": "0bfc16bd342cfaa8ee48da5d9a1484df65bca782",
27
+ "sourceCommit": "cff22e20c8f95a4081485b852254fa5fbe1532ef",
28
28
  "sourceTreeDirty": false,
29
29
  "sourceDateEpoch": 1,
30
30
  "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -33,6 +33,6 @@
33
33
  "signature": {
34
34
  "algorithm": "Ed25519",
35
35
  "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
36
- "value": "GcnOf/uVsph+kbzNir1EE5CBIzYB1bxBPIKm5BwVbmVSi7niwWlAuTgD8rHChM6yS47Y3Ms8nIxfy8oGXD3bBw=="
36
+ "value": "PANQkfk6g7pqHmExCM2voq4U2WCuJX1cbaWm8K4T/QCPNzWE4TmGoG5vQN4k80VCIyjTFz5IA5Ope+XmNhnZCA=="
37
37
  }
38
38
  }
package/dist/engine/planu-core.linux-x64-gnu.node.sbom.json CHANGED
@@ -4,14 +4,14 @@
4
4
  "version": 1,
5
5
  "metadata": {
6
6
  "component": {
7
- "bom-ref": "pkg:cargo/planu-core@5.3.0",
7
+ "bom-ref": "pkg:cargo/planu-core@5.3.1",
8
8
  "type": "library",
9
9
  "name": "planu-core",
10
- "version": "5.3.0",
10
+ "version": "5.3.1",
11
11
  "hashes": [
12
12
  {
13
13
  "alg": "SHA-256",
14
- "content": "9981b33dbbe44fcab6da8e909a24d6b21317cfdd771946e65dba41879bb2972c"
14
+ "content": "121e0cde6094d4812a1003f5e8d271c73180f87253d242c0ef2a3ce020114fb2"
15
15
  }
16
16
  ]
17
17
  }
@@ -1106,7 +1106,7 @@
1106
1106
  "dependsOn": []
1107
1107
  },
1108
1108
  {
1109
- "ref": "pkg:cargo/planu-core@5.3.0",
1109
+ "ref": "pkg:cargo/planu-core@5.3.1",
1110
1110
  "dependsOn": [
1111
1111
  "pkg:cargo/core-foundation@0.10.1",
1112
1112
  "pkg:cargo/hmac@0.12.1",
package/dist/engine/planu-core.linux-x64-musl.node.manifest.json CHANGED
@@ -1,8 +1,8 @@
1
1
  {
2
2
  "schemaVersion": 2,
3
- "cliVersion": "5.3.0",
4
- "engineVersion": "5.3.0",
5
- "buildId": "1-5.3.0-x86_64-unknown-linux-musl",
3
+ "cliVersion": "5.3.1",
4
+ "engineVersion": "5.3.1",
5
+ "buildId": "1-5.3.1-x86_64-unknown-linux-musl",
6
6
  "protocolAbi": 1,
7
7
  "capabilityAbi": 2,
8
8
  "nodeApiAbi": 4,
@@ -16,15 +16,15 @@
16
16
  "platform": "linux",
17
17
  "arch": "x64",
18
18
  "libc": "musl",
19
- "artifactSha256": "a3c5cd549a2eb667ff1c150faf23f1cfe22e87f7e556b0aa7209aa13a18f45e9",
19
+ "artifactSha256": "8bca20fd7b4458f07f9993babe7ae9417bbce0f8dadac3cd6e723bfe5162e405",
20
20
  "sbom": {
21
21
  "format": "CycloneDX-1.5",
22
22
  "path": "planu-core.linux-x64-musl.node.sbom.json",
23
- "sha256": "9890f076625256c5408d5ffec463f0935b8d7005e61d0b29761144f5cb40e17a"
23
+ "sha256": "d6638d7152102d2ba32851fd2df269e4e2a2a2ddc5fc788f4602c0dd22c0ae42"
24
24
  },
25
25
  "provenance": {
26
26
  "builder": "scripts/build-rust-local.sh",
27
- "sourceCommit": "0bfc16bd342cfaa8ee48da5d9a1484df65bca782",
27
+ "sourceCommit": "cff22e20c8f95a4081485b852254fa5fbe1532ef",
28
28
  "sourceTreeDirty": false,
29
29
  "sourceDateEpoch": 1,
30
30
  "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -33,6 +33,6 @@
33
33
  "signature": {
34
34
  "algorithm": "Ed25519",
35
35
  "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
36
- "value": "ZZXH8px6SzGDX2vLSXgEitX+Mu7eyXQ3kJeb9jFqMFLHInwMGMHtNY/LQgDvbOyzJAfskZUFf3JkqaTK6/9VDw=="
36
+ "value": "vZ9UA5RzHSuz+/P18RorLLyH92erubxrJwq4nW766XwepyzlM0m8ol3QYfyrvYvHy4oP9ptee40YvsmexCQcBg=="
37
37
  }
38
38
  }
package/dist/engine/planu-core.linux-x64-musl.node.sbom.json CHANGED
@@ -4,14 +4,14 @@
4
4
  "version": 1,
5
5
  "metadata": {
6
6
  "component": {
7
- "bom-ref": "pkg:cargo/planu-core@5.3.0",
7
+ "bom-ref": "pkg:cargo/planu-core@5.3.1",
8
8
  "type": "library",
9
9
  "name": "planu-core",
10
- "version": "5.3.0",
10
+ "version": "5.3.1",
11
11
  "hashes": [
12
12
  {
13
13
  "alg": "SHA-256",
14
- "content": "a3c5cd549a2eb667ff1c150faf23f1cfe22e87f7e556b0aa7209aa13a18f45e9"
14
+ "content": "8bca20fd7b4458f07f9993babe7ae9417bbce0f8dadac3cd6e723bfe5162e405"
15
15
  }
16
16
  ]
17
17
  }
@@ -1106,7 +1106,7 @@
1106
1106
  "dependsOn": []
1107
1107
  },
1108
1108
  {
1109
- "ref": "pkg:cargo/planu-core@5.3.0",
1109
+ "ref": "pkg:cargo/planu-core@5.3.1",
1110
1110
  "dependsOn": [
1111
1111
  "pkg:cargo/core-foundation@0.10.1",
1112
1112
  "pkg:cargo/hmac@0.12.1",
package/dist/engine/planu-core.win32-arm64-msvc.node.manifest.json CHANGED
@@ -1,8 +1,8 @@
1
1
  {
2
2
  "schemaVersion": 2,
3
- "cliVersion": "5.3.0",
4
- "engineVersion": "5.3.0",
5
- "buildId": "1-5.3.0-aarch64-pc-windows-msvc",
3
+ "cliVersion": "5.3.1",
4
+ "engineVersion": "5.3.1",
5
+ "buildId": "1-5.3.1-aarch64-pc-windows-msvc",
6
6
  "protocolAbi": 1,
7
7
  "capabilityAbi": 2,
8
8
  "nodeApiAbi": 4,
@@ -16,15 +16,15 @@
16
16
  "platform": "win32",
17
17
  "arch": "arm64",
18
18
  "libc": null,
19
- "artifactSha256": "01422e8f53405b0cfffac1b978d4a07c7972c4cfa0071e3f7cf38d7f8b2513c3",
19
+ "artifactSha256": "dbc7bc2092e9280e9cbd9c18d472acc57b171fb51b34ac403d36858e460a5558",
20
20
  "sbom": {
21
21
  "format": "CycloneDX-1.5",
22
22
  "path": "planu-core.win32-arm64-msvc.node.sbom.json",
23
- "sha256": "23055aaffab71649b3fc5882ee65539d8f3db05b0e35d008cd43f807c3c55d93"
23
+ "sha256": "ac0dfa26e7466da91c35ffff0b44eddfe0e871fb4ba4e2527d74b7e6e4ad2166"
24
24
  },
25
25
  "provenance": {
26
26
  "builder": "scripts/build-rust-local.sh",
27
- "sourceCommit": "0bfc16bd342cfaa8ee48da5d9a1484df65bca782",
27
+ "sourceCommit": "cff22e20c8f95a4081485b852254fa5fbe1532ef",
28
28
  "sourceTreeDirty": false,
29
29
  "sourceDateEpoch": 1,
30
30
  "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -33,6 +33,6 @@
33
33
  "signature": {
34
34
  "algorithm": "Ed25519",
35
35
  "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
36
- "value": "Cwm9qVClAtTaV/h0ZVGCGk7QXtV1GStNz+b82ZZdsJjCKFVGv+RJybsHCZkcVakUQjSGmN4ssaJ1bvZq1paMBA=="
36
+ "value": "dXDAyNUV0maapcjOspyRQByaq39viQeMYq7iypA8UC9cUqcvOa33hojUp056RIkG+9dtu4wTFGO1GzF2oPDNCQ=="
37
37
  }
38
38
  }
package/dist/engine/planu-core.win32-arm64-msvc.node.sbom.json CHANGED
@@ -4,14 +4,14 @@
4
4
  "version": 1,
5
5
  "metadata": {
6
6
  "component": {
7
- "bom-ref": "pkg:cargo/planu-core@5.3.0",
7
+ "bom-ref": "pkg:cargo/planu-core@5.3.1",
8
8
  "type": "library",
9
9
  "name": "planu-core",
10
- "version": "5.3.0",
10
+ "version": "5.3.1",
11
11
  "hashes": [
12
12
  {
13
13
  "alg": "SHA-256",
14
- "content": "01422e8f53405b0cfffac1b978d4a07c7972c4cfa0071e3f7cf38d7f8b2513c3"
14
+ "content": "dbc7bc2092e9280e9cbd9c18d472acc57b171fb51b34ac403d36858e460a5558"
15
15
  }
16
16
  ]
17
17
  }
@@ -1106,7 +1106,7 @@
1106
1106
  "dependsOn": []
1107
1107
  },
1108
1108
  {
1109
- "ref": "pkg:cargo/planu-core@5.3.0",
1109
+ "ref": "pkg:cargo/planu-core@5.3.1",
1110
1110
  "dependsOn": [
1111
1111
  "pkg:cargo/core-foundation@0.10.1",
1112
1112
  "pkg:cargo/hmac@0.12.1",
package/dist/engine/planu-core.win32-x64-msvc.node.manifest.json CHANGED
@@ -1,8 +1,8 @@
1
1
  {
2
2
  "schemaVersion": 2,
3
- "cliVersion": "5.3.0",
4
- "engineVersion": "5.3.0",
5
- "buildId": "1-5.3.0-x86_64-pc-windows-msvc",
3
+ "cliVersion": "5.3.1",
4
+ "engineVersion": "5.3.1",
5
+ "buildId": "1-5.3.1-x86_64-pc-windows-msvc",
6
6
  "protocolAbi": 1,
7
7
  "capabilityAbi": 2,
8
8
  "nodeApiAbi": 4,
@@ -16,15 +16,15 @@
16
16
  "platform": "win32",
17
17
  "arch": "x64",
18
18
  "libc": null,
19
- "artifactSha256": "742b98dcbef119cd3f8b7f52c7e7508882312e40ffe6900558f054718054cb4e",
19
+ "artifactSha256": "5d65e9be51ed1f1a391064fbf8892d3ac570c774854b36487d430ee7e7b0b5c8",
20
20
  "sbom": {
21
21
  "format": "CycloneDX-1.5",
22
22
  "path": "planu-core.win32-x64-msvc.node.sbom.json",
23
- "sha256": "172c6101641c982c1bfc77907de80a963e550dea73dbd0db6e2abe332a87a88a"
23
+ "sha256": "6563cbe0310464b49325b14f1e7e17a94e476496dd9bd1f522dafabac5da5d18"
24
24
  },
25
25
  "provenance": {
26
26
  "builder": "scripts/build-rust-local.sh",
27
- "sourceCommit": "0bfc16bd342cfaa8ee48da5d9a1484df65bca782",
27
+ "sourceCommit": "cff22e20c8f95a4081485b852254fa5fbe1532ef",
28
28
  "sourceTreeDirty": false,
29
29
  "sourceDateEpoch": 1,
30
30
  "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -33,6 +33,6 @@
33
33
  "signature": {
34
34
  "algorithm": "Ed25519",
35
35
  "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
36
- "value": "rKiBtPEqL5BY1WRzouHSNnhfASCK+jUqnpGRpS2e7N/dpGootewvevQRZVJJixuQL0rlmoDZtiFmXwbfJ8yYAA=="
36
+ "value": "z2Hd9RD31bHF9HmmWsymR4XVqxLPiNSrdCvtWBUXEEBlKdk8rEde8ZPd3BEJCeEsdX0akECDyN7LenOYuFirAQ=="
37
37
  }
38
38
  }
package/dist/engine/planu-core.win32-x64-msvc.node.sbom.json CHANGED
@@ -4,14 +4,14 @@
4
4
  "version": 1,
5
5
  "metadata": {
6
6
  "component": {
7
- "bom-ref": "pkg:cargo/planu-core@5.3.0",
7
+ "bom-ref": "pkg:cargo/planu-core@5.3.1",
8
8
  "type": "library",
9
9
  "name": "planu-core",
10
- "version": "5.3.0",
10
+ "version": "5.3.1",
11
11
  "hashes": [
12
12
  {
13
13
  "alg": "SHA-256",
14
- "content": "742b98dcbef119cd3f8b7f52c7e7508882312e40ffe6900558f054718054cb4e"
14
+ "content": "5d65e9be51ed1f1a391064fbf8892d3ac570c774854b36487d430ee7e7b0b5c8"
15
15
  }
16
16
  ]
17
17
  }
@@ -1106,7 +1106,7 @@
1106
1106
  "dependsOn": []
1107
1107
  },
1108
1108
  {
1109
- "ref": "pkg:cargo/planu-core@5.3.0",
1109
+ "ref": "pkg:cargo/planu-core@5.3.1",
1110
1110
  "dependsOn": [
1111
1111
  "pkg:cargo/core-foundation@0.10.1",
1112
1112
  "pkg:cargo/hmac@0.12.1",
package/dist/engine/session-safeguard/autopush.js CHANGED
@@ -2,7 +2,9 @@
2
2
  import { execFile } from 'node:child_process';
3
3
  import { promisify } from 'node:util';
4
4
  const execFileAsync = promisify(execFile);
5
- const PROTECTED_BRANCHES = new Set(['main', 'master', 'develop']);
5
+ // SPEC-1379: unified with DEFAULT_PROTECTED_BRANCHES (git-helpers.ts) plus the
6
+ // `release` mirror branch; the shell hook template mirrors this same set.
7
+ const PROTECTED_BRANCHES = new Set(['main', 'master', 'develop', 'release', 'production']);
6
8
  /** Resolve the current branch name for the given projectPath. */
7
9
  async function getCurrentBranch(projectPath) {
8
10
  try {
@@ -88,7 +90,11 @@ export async function safeAutopush(projectPath, allowedPatterns = ['feat/*', 'fi
88
90
  };
89
91
  }
90
92
  try {
91
- await execFileAsync('git', ['push', '--ff-only', 'origin', branch], { cwd: projectPath });
93
+ // No --force (git push has no --ff-only flag): the receiving remote
94
+ // rejects any non-fast-forward push, which is the ff-only guarantee.
95
+ await execFileAsync('git', ['push', '--end-of-options', 'origin', branch], {
96
+ cwd: projectPath,
97
+ });
92
98
  return { pushed: true, commitsPushed: commitCount, ref: `origin/${branch}` };
93
99
  }
94
100
  catch (err) {
package/dist/tools/reconcile-session-safeguard-hook.js CHANGED
@@ -61,9 +61,20 @@ async function installHookFile(projectPath) {
61
61
  ' echo "[$(date -u +%FT%TZ)] session-safeguard fired"',
62
62
  ' cd "${CLAUDE_PROJECT_DIR:-.}" || exit 0',
63
63
  ' current=$(git rev-parse --abbrev-ref HEAD 2>/dev/null || echo "")',
64
- ' if [[ -n "$current" && "$current" != "HEAD" ]]; then',
65
- ' git push origin "$current" --no-verify 2>&1 || echo "push failed or nothing to push"',
66
- ' fi',
64
+ ' case "$current" in',
65
+ ' ""|HEAD|main|master|develop|release|production)',
66
+ ' # SPEC-1379: never autopush protected branches — mirrors PROTECTED_BRANCHES',
67
+ ' # in src/engine/session-safeguard/autopush.ts. --no-verify below is safe',
68
+ ' # ONLY because of this guard; remove one, remove both.',
69
+ ' echo "skip: protected or detached ($current)"',
70
+ ' ;;',
71
+ ' *)',
72
+ ' # No --force: the remote rejects any non-fast-forward push, so this can',
73
+ ' # never overwrite remote history. --end-of-options hardens against',
74
+ ' # refnames that start with a dash.',
75
+ ' git push --no-verify --end-of-options origin "$current" 2>&1 || echo "push failed or nothing to push"',
76
+ ' ;;',
77
+ ' esac',
67
78
  '} >> "$log" 2>&1',
68
79
  'exit 0',
69
80
  ].join('\n') + '\n';
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@planu/cli",
3
- "version": "5.3.0",
3
+ "version": "5.3.1",
4
4
  "description": "Planu — MCP Server for Spec Driven Development with native Rust acceleration for hot paths. Cross-platform (Linux/macOS/Windows, x64/arm64, glibc/musl).",
5
5
  "type": "module",
6
6
  "main": "dist/index.js",
@@ -35,14 +35,14 @@
35
35
  "packageName": "@planu/core"
36
36
  },
37
37
  "optionalDependencies": {
38
- "@planu/core-darwin-arm64": "5.3.0",
39
- "@planu/core-darwin-x64": "5.3.0",
40
- "@planu/core-linux-arm64-gnu": "5.3.0",
41
- "@planu/core-linux-arm64-musl": "5.3.0",
42
- "@planu/core-linux-x64-gnu": "5.3.0",
43
- "@planu/core-linux-x64-musl": "5.3.0",
44
- "@planu/core-win32-arm64-msvc": "5.3.0",
45
- "@planu/core-win32-x64-msvc": "5.3.0"
38
+ "@planu/core-darwin-arm64": "5.3.1",
39
+ "@planu/core-darwin-x64": "5.3.1",
40
+ "@planu/core-linux-arm64-gnu": "5.3.1",
41
+ "@planu/core-linux-arm64-musl": "5.3.1",
42
+ "@planu/core-linux-x64-gnu": "5.3.1",
43
+ "@planu/core-linux-x64-musl": "5.3.1",
44
+ "@planu/core-win32-arm64-msvc": "5.3.1",
45
+ "@planu/core-win32-x64-msvc": "5.3.1"
46
46
  },
47
47
  "engines": {
48
48
  "node": ">=24.0.0"
package/planu-native.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "name": "dev.planu.native",
3
3
  "displayName": "Planu Native Lightweight Surface",
4
- "version": "5.3.0",
4
+ "version": "5.3.1",
5
5
  "packageName": "@planu/cli",
6
6
  "modes": {
7
7
  "lightweight": {
package/planu-plugin.json CHANGED
@@ -2,7 +2,7 @@
2
2
  "name": "dev.planu.cli",
3
3
  "displayName": "Planu — Spec Driven Development",
4
4
  "description": "Manage software specs, estimations, and autonomous SDD workflows. Language-agnostic MCP server for Claude Code.",
5
- "version": "5.3.0",
5
+ "version": "5.3.1",
6
6
  "icon": "assets/plugin/icon.svg",
7
7
  "command": ["npx", "@planu/cli@latest"],
8
8
  "packageName": "@planu/cli",