@planu/cli 5.3.2 → 5.3.3

package/dist/engine/planu-core.linux-x64-musl.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.3.2",
+      "bom-ref": "pkg:cargo/planu-core@5.3.3",
       "type": "library",
       "name": "planu-core",
-      "version": "5.3.2",
+      "version": "5.3.3",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "d44f03ecaed34427ca6ed682ce695f432d25eac3366fc5e779cfa78fe39d504b"
+          "content": "0e4804010d87a4089e8fd59af5d0b61ba6a572ff20f9f55b1caa904af861f030"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.3.2",
+      "ref": "pkg:cargo/planu-core@5.3.3",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/planu-core.win32-arm64-msvc.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.3.2",
-  "engineVersion": "5.3.2",
-  "buildId": "1-5.3.2-aarch64-pc-windows-msvc",
+  "cliVersion": "5.3.3",
+  "engineVersion": "5.3.3",
+  "buildId": "1-5.3.3-aarch64-pc-windows-msvc",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -16,15 +16,15 @@
   "platform": "win32",
   "arch": "arm64",
   "libc": null,
-  "artifactSha256": "9a10e393e1b0aad7856de5973ea8efb018513bcb4e2c47ddb013be9bda7e3bda",
+  "artifactSha256": "5f4ce40b9f76cfaa1fdc25ba8ce765cc3fd7fc0b38bbe10ce8a5b3ba5b0dcc1a",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.win32-arm64-msvc.node.sbom.json",
-    "sha256": "38f38493f6013f50daff7808dcbbab81133b141bce61cba430e7a07fe9a89fc2"
+    "sha256": "f054e6818584024d2f3acb36f2ebfa044546d72d203ecf06b758bfb4c2a8dcfc"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "30226657c1e66411b6ff233c2ea82e47573d533a",
+    "sourceCommit": "30eda7a2ba11647e835b0079c526bed77f189c8e",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -33,6 +33,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "ktHCgTSn2Br8NhGf6Pjz5fCP38a9sGluOqs617pwRXymMiUBu2GNjvyp7mLqk2gY/L8KAbzvF6FHoqEVDzb9AA=="
+    "value": "i9Ts/DMWmNUhyq+YNId6aNr4Y+5GGr8CPIe0fXqtBLcXoqGlxgxq83PMgvnFX0fG0pa8MI+Fv7fbamFQ4/SWBg=="
   }
 }

package/dist/engine/planu-core.win32-arm64-msvc.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.3.2",
+      "bom-ref": "pkg:cargo/planu-core@5.3.3",
       "type": "library",
       "name": "planu-core",
-      "version": "5.3.2",
+      "version": "5.3.3",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "9a10e393e1b0aad7856de5973ea8efb018513bcb4e2c47ddb013be9bda7e3bda"
+          "content": "5f4ce40b9f76cfaa1fdc25ba8ce765cc3fd7fc0b38bbe10ce8a5b3ba5b0dcc1a"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.3.2",
+      "ref": "pkg:cargo/planu-core@5.3.3",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/planu-core.win32-x64-msvc.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.3.2",
-  "engineVersion": "5.3.2",
-  "buildId": "1-5.3.2-x86_64-pc-windows-msvc",
+  "cliVersion": "5.3.3",
+  "engineVersion": "5.3.3",
+  "buildId": "1-5.3.3-x86_64-pc-windows-msvc",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -16,15 +16,15 @@
   "platform": "win32",
   "arch": "x64",
   "libc": null,
-  "artifactSha256": "4a41383ea29c9dd64a668143e206b4af1859ba6f35b79fdeb7ea8f812113811c",
+  "artifactSha256": "5da0cd500b980f5a7295886298ea9176905bc38190fee2a7eae3359ec59513e9",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.win32-x64-msvc.node.sbom.json",
-    "sha256": "f96dbf4fd6d9cab1aa9b90057325829de42e018dfa2bf4220c78c9bbfab0f9c5"
+    "sha256": "a8f35671f2c924ba92ed04e0a9513262c9005451c04423c11e13a9d8371164bc"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "30226657c1e66411b6ff233c2ea82e47573d533a",
+    "sourceCommit": "30eda7a2ba11647e835b0079c526bed77f189c8e",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -33,6 +33,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "vZ49hewESnK5idVecQPyBFUD+GPcbfa0ihzAKkxuqBSsyVEWNFGaGU4c/rzvXD6D3SKnApFEM3vZ9D2uCfSjDA=="
+    "value": "yN+zsORULiFYmazE/LZm1vp2+Nd3NpEqE/1IKcjW3OHz/Nqk9jN1Hj1CR78aDGcJHiMSMobSiBdCviN9dvM4CA=="
   }
 }

package/dist/engine/planu-core.win32-x64-msvc.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.3.2",
+      "bom-ref": "pkg:cargo/planu-core@5.3.3",
       "type": "library",
       "name": "planu-core",
-      "version": "5.3.2",
+      "version": "5.3.3",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "4a41383ea29c9dd64a668143e206b4af1859ba6f35b79fdeb7ea8f812113811c"
+          "content": "5da0cd500b980f5a7295886298ea9176905bc38190fee2a7eae3359ec59513e9"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.3.2",
+      "ref": "pkg:cargo/planu-core@5.3.3",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/runtime-policy.js

@@ -100,6 +100,20 @@ const runtimePolicySchema = z
         minimumHeartbeatMs: z.number().int().positive(),
     })
         .strict(),
+    outbox: z
+        .object({
+        sliceRecordBudget: z.number().int().positive(),
+        sliceTimeBudgetMs: z.number().int().positive(),
+        backoffBaseMs: z.number().int().positive(),
+        backoffCapMs: z.number().int().positive(),
+        maxAttempts: z.number().int().positive(),
+        diagnosticMaxLength: z.number().int().positive(),
+        continuationDelayMs: z.number().int().positive(),
+    })
+        .strict()
+        .refine((value) => value.backoffBaseMs <= value.backoffCapMs, {
+        message: 'backoffBaseMs must not exceed backoffCapMs',
+    }),
 })
     .strict();
 const require = createRequire(import.meta.url);

package/dist/index.js

@@ -126,7 +126,9 @@ async function setupPostHandshake(handshakeGate, officialToolNames) {
     })();
     // SPEC-334: Sync planu/ YAML frontmatter status → data/ store (non-blocking)
     scheduleStartupStateRecovery(startupSync, recoverPendingPostCommitTasksAtStartup);
-    await startSpecCreatedOutboxConsumer().catch((err) => {
+    // SPEC-1271: bounded, fair, durable spec.created outbox recovery — fire-and-forget so a
+    // large or poisoned backlog never delays post-handshake completion (mirrors serve.ts).
+    void startSpecCreatedOutboxConsumer().catch((err) => {
         console.error('[Planu] Startup spec.created outbox recovery failed:', err);
     });
     try {

package/dist/storage/runtime-db.d.ts

@@ -167,8 +167,30 @@ export declare class RuntimeDatabase implements Disposable {
         readonly pendingOnly?: boolean;
         readonly limit?: number;
         readonly topics?: readonly string[];
+        /**
+         * When set, applies fence-based eligibility filtering (excludes dead-lettered
+         * records and records whose durable `nextAttemptAt` is still in the future)
+         * BEFORE the LIMIT clause, so ineligible records cannot head-of-line block
+         * an eligible record behind them in the same scope.
+         */
+        readonly eligibleAt?: string;
+        /** Only rows with `id > afterId`, for paginating past ineligible head records. */
+        readonly afterId?: number;
     }): readonly RuntimeOutboxRecord[];
-    listPendingOutboxScopes(): readonly RuntimeOutboxScope[];
+    /**
+     * Counts pending records that would be eligible for delivery right now, without
+     * materializing them. Used to report an exact `skipped` count when a bounded
+     * slice stops early (budget or time), rather than inferring it from the LIMIT.
+     */
+    countEligibleOutbox(projectId: string, workspaceId: string, options: {
+        readonly topics?: readonly string[];
+        readonly eligibleAt: string;
+        readonly afterId?: number;
+    }): number;
+    listPendingOutboxScopes(options?: {
+        readonly topics?: readonly string[];
+        readonly eligibleAt?: string;
+    }): readonly RuntimeOutboxScope[];
     markOutboxDelivered(projectId: string, workspaceId: string, id: number, deliveredAt?: string): boolean;
     appendAudit(input: {
         readonly projectId: string;

package/dist/storage/runtime-db.js

@@ -6,6 +6,36 @@ import { parseValidationReceiptPendingCheckpoint, } from '../types/durable-valid
 const CURRENT_SCHEMA_VERSION = 4;
 const DEFAULT_BUSY_TIMEOUT_MS = 5_000;
 const DEFAULT_MAX_CONNECTIONS = 4;
+/**
+ * Joins each outbox row to its fence record (stored as a `mutation` runtime record
+ * keyed `outbox-fence:<id>`) so eligibility can be evaluated in SQL before LIMIT.
+ */
+const OUTBOX_FENCE_JOIN = `
+         LEFT JOIN runtime_records fence
+           ON fence.project_id = o.project_id AND fence.workspace_id = o.workspace_id
+              AND fence.kind = 'mutation' AND fence.record_key = 'outbox-fence:' || o.id`;
+/**
+ * Excludes dead-lettered records and records whose durable `nextAttemptAt` retry
+ * deadline is still in the future. Records with no fence, or a fence without
+ * `nextAttemptAt` (schemaVersion 1 legacy), remain eligible.
+ *
+ * A fence with invalid JSON, or a `nextAttemptAt` that is not ISO-8601-shaped,
+ * is deliberately left ELIGIBLE rather than filtered: a non-ISO string compares
+ * lexicographically against the `?` bound and can hide the record from every
+ * future slice, so malformed fences must surface to claim()/parseFence as a
+ * `Corrupt` failure instead of vanishing silently.
+ */
+const OUTBOX_ELIGIBILITY_CLAUSE = `
+           AND (fence.value_json IS NULL
+                OR NOT json_valid(fence.value_json)
+                OR json_extract(fence.value_json, '$.state') IS NULL
+                OR json_extract(fence.value_json, '$.state') != 'dead-letter')
+           AND (fence.value_json IS NULL
+                OR NOT json_valid(fence.value_json)
+                OR json_extract(fence.value_json, '$.nextAttemptAt') IS NULL
+                OR json_extract(fence.value_json, '$.nextAttemptAt')
+                     NOT GLOB '[0-9][0-9][0-9][0-9]-[0-9][0-9]-[0-9][0-9]*'
+                OR json_extract(fence.value_json, '$.nextAttemptAt') <= ?)`;
 const openConnections = new Map();
 let integrityCheckedOpens = 0;
 let integrityBypassedOpens = 0;
@@ -746,20 +776,60 @@ export class RuntimeDatabase {
             requireIdentifier(topic, 'outbox topic');
         }
         const topicsClause = topics.length > 0 ? ` AND topic IN (${topics.map(() => '?').join(', ')})` : '';
+        const afterClause = options.afterId !== undefined ? ' AND o.id > ?' : '';
+        const afterParams = options.afterId !== undefined ? [options.afterId] : [];
+        const eligibilityJoin = options.eligibleAt !== undefined ? OUTBOX_FENCE_JOIN : '';
+        const eligibilityClause = options.eligibleAt !== undefined ? OUTBOX_ELIGIBILITY_CLAUSE : '';
+        const eligibilityParams = options.eligibleAt !== undefined ? [options.eligibleAt] : [];
         const rows = this.database
-            .prepare(`SELECT id, project_id, workspace_id, topic, payload_json, created_at, delivered_at
-         FROM outbox
-         WHERE project_id = ? AND workspace_id = ?${pendingClause}${topicsClause}
-         ORDER BY id LIMIT ?`)
-            .all(projectId, workspaceId, ...topics, limit);
+            .prepare(`SELECT o.id AS id, o.project_id AS project_id, o.workspace_id AS workspace_id,
+                o.topic AS topic, o.payload_json AS payload_json,
+                o.created_at AS created_at, o.delivered_at AS delivered_at
+         FROM outbox o${eligibilityJoin}
+         WHERE o.project_id = ? AND o.workspace_id = ?${pendingClause}${topicsClause}${afterClause}${eligibilityClause}
+         ORDER BY o.id LIMIT ?`)
+            .all(projectId, workspaceId, ...topics, ...afterParams, ...eligibilityParams, limit);
         return rows.map(mapOutboxRow);
     }
-    listPendingOutboxScopes() {
+    /**
+     * Counts pending records that would be eligible for delivery right now, without
+     * materializing them. Used to report an exact `skipped` count when a bounded
+     * slice stops early (budget or time), rather than inferring it from the LIMIT.
+     */
+    countEligibleOutbox(projectId, workspaceId, options) {
+        this.assertOpen();
+        requireIdentifier(projectId, 'projectId');
+        requireIdentifier(workspaceId, 'workspaceId');
+        const topics = options.topics ?? [];
+        for (const topic of topics) {
+            requireIdentifier(topic, 'outbox topic');
+        }
+        const topicsClause = topics.length > 0 ? ` AND o.topic IN (${topics.map(() => '?').join(', ')})` : '';
+        const afterClause = options.afterId !== undefined ? ' AND o.id > ?' : '';
+        const afterParams = options.afterId !== undefined ? [options.afterId] : [];
+        const row = this.database
+            .prepare(`SELECT COUNT(*) AS count
+         FROM outbox o${OUTBOX_FENCE_JOIN}
+         WHERE o.project_id = ? AND o.workspace_id = ? AND o.delivered_at IS NULL${topicsClause}${afterClause}${OUTBOX_ELIGIBILITY_CLAUSE}`)
+            .get(projectId, workspaceId, ...topics, ...afterParams, options.eligibleAt);
+        return row.count;
+    }
+    listPendingOutboxScopes(options = {}) {
         this.assertOpen();
+        const topics = options.topics ?? [];
+        for (const topic of topics) {
+            requireIdentifier(topic, 'outbox topic');
+        }
+        const topicsClause = topics.length > 0 ? ` AND o.topic IN (${topics.map(() => '?').join(', ')})` : '';
+        const eligibilityJoin = options.eligibleAt !== undefined ? OUTBOX_FENCE_JOIN : '';
+        const eligibilityClause = options.eligibleAt !== undefined ? OUTBOX_ELIGIBILITY_CLAUSE : '';
+        const eligibilityParams = options.eligibleAt !== undefined ? [options.eligibleAt] : [];
         return this.database
-            .prepare(`SELECT DISTINCT project_id AS projectId, workspace_id AS workspaceId
-         FROM outbox WHERE delivered_at IS NULL ORDER BY project_id, workspace_id`)
-            .all();
+            .prepare(`SELECT DISTINCT o.project_id AS projectId, o.workspace_id AS workspaceId
+         FROM outbox o${eligibilityJoin}
+         WHERE o.delivered_at IS NULL${topicsClause}${eligibilityClause}
+         ORDER BY o.project_id, o.workspace_id`)
+            .all(...topics, ...eligibilityParams);
     }
     markOutboxDelivered(projectId, workspaceId, id, deliveredAt = new Date().toISOString()) {
         this.assertOpen();

package/dist/tools/create-spec/post-creation.js

@@ -8,6 +8,8 @@ import { incrementSpecCount } from '../../engine/autopilot/state-updater.js';
 import { join } from 'node:path';
 import { hashProjectPath, projectDataDir } from '../../storage/base-store.js';
 import { appendAutopilotLogEntry } from '../../storage/autopilot-log-store.js';
+import { getRuntimePolicy } from '../../engine/runtime-policy.js';
+import { redactText } from '../../security/redactor.js';
 import { analyzeContextPreflight, buildTokenWasteReport, loadTokenWastePolicy, recommendRelevantTools, toolsFromPolicyGroups, } from '../../engine/token-optimizer/index.js';
 import { atomicWriteFile } from '../../engine/safety/atomic-write-file.js';
 const ASYNC_ANALYSIS_HOOK = 'create-spec-async-analysis';
@@ -52,7 +54,9 @@ export async function buildInitialTokenWasteMetadata(specId, projectPath, descri
 }
 /** Auto-setup git branch (non-blocking). Returns branch info or undefined. */
 export async function setupGitBranch(projectId, specId) {
-    const result = await tryAutoSetupGit(projectId, specId);
+    // SPEC-1396: runs from durable outbox delivery (including startup recovery) — never
+    // move the shared checkout, or replaying a backlog walks HEAD through every spec branch.
+    const result = await tryAutoSetupGit(projectId, specId, { mutateCheckout: false });
     /* v8 ignore start -- requires real git repo */
     if (result) {
         return { branch: result.branch, data: result.data };
@@ -254,7 +258,8 @@ export async function runAutopilotAnalysis(specId, projectPath, description) {
         });
     }
     catch (err) {
-        const error = err instanceof Error ? err.message : String(err);
+        const raw = err instanceof Error ? err.message : String(err);
+        const error = redactText(raw).slice(0, getRuntimePolicy().outbox.diagnosticMaxLength);
         await appendAutopilotLogEntry(projectId, {
             specId,
             hookName: ASYNC_ANALYSIS_HOOK,

package/dist/tools/create-spec/spec-created-outbox-consumer.d.ts

@@ -11,4 +11,6 @@ export declare class SpecCreatedOutboxConsumer {
 }
 export declare function drainSpecCreatedOutbox(databasePath?: string): Promise<void>;
 export declare function startSpecCreatedOutboxConsumer(): Promise<void>;
+/** Test-only: clear scheduler state so fixtures do not leak timers across tests. */
+export declare function resetSpecCreatedOutboxSchedulerForTests(): void;
 //# sourceMappingURL=spec-created-outbox-consumer.d.ts.map

package/dist/tools/create-spec/spec-created-outbox-consumer.js

@@ -6,6 +6,13 @@ import { specStore } from '../../storage/index.js';
 import { runAutopilotAnalysis, setupGitBranch } from './post-creation.js';
 import { SPEC_CREATED_POST_COMMIT_TASKS, } from '../../types/outbox-worker.js';
 import { TransactionalOutboxWorker } from '../../engine/execution/outbox-worker.js';
+import { getRuntimePolicy } from '../../engine/runtime-policy.js';
+import { redactText } from '../../security/redactor.js';
+const SPEC_CREATED_TOPICS = ['spec.created'];
+/** Redact and bound a raw thrown diagnostic before it reaches durable storage. */
+function sanitizeDiagnostic(message) {
+    return redactText(message).slice(0, getRuntimePolicy().outbox.diagnosticMaxLength);
+}
 export { SPEC_CREATED_POST_COMMIT_TASKS } from '../../types/outbox-worker.js';
 const RESPONSE_ONLY_REASON = 'Advisory task is intentionally terminal because it has no durable post-commit side effect.';
 function isObject(value) {
@@ -123,6 +130,7 @@ export class SpecCreatedOutboxConsumer {
                 });
             }
             catch (error) {
+                const raw = error instanceof Error ? error.message : String(error);
                 this.database.appendAudit({
                     projectId: payload.projectId,
                     workspaceId: 'default',
@@ -130,7 +138,7 @@ export class SpecCreatedOutboxConsumer {
                     payload: {
                         deliveryKey: context.deliveryKey,
                         task,
-                        error: error instanceof Error ? error.message : String(error),
+                        error: sanitizeDiagnostic(raw),
                     },
                 });
                 throw error;
@@ -140,6 +148,8 @@ export class SpecCreatedOutboxConsumer {
 }
 let interval;
 let activeDrain;
+let continuationTimer;
+let rotationCursor = 0;
 export function drainSpecCreatedOutbox(databasePath = resolveStorageLayout().runtimeDatabase) {
     if (activeDrain) {
         return activeDrain;
@@ -147,11 +157,7 @@ export function drainSpecCreatedOutbox(databasePath = resolveStorageLayout().run
     activeDrain = (async () => {
         const database = new RuntimeDatabase({ path: databasePath });
         try {
-            const consumer = new SpecCreatedOutboxConsumer(database);
-            for (const scope of database.listPendingOutboxScopes()) {
-                const worker = new TransactionalOutboxWorker(database, scope.projectId, scope.workspaceId, `spec-created-${process.pid}-${randomUUID()}`);
-                await worker.drain((context) => consumer.deliver(context), { topics: ['spec.created'] });
-            }
+            await drainBoundedSlice(database, databasePath);
         }
         finally {
             database.close();
@@ -161,6 +167,75 @@ export function drainSpecCreatedOutbox(databasePath = resolveStorageLayout().run
     });
     return activeDrain;
 }
+/**
+ * Processes one bounded, fair slice of the spec.created backlog: round-robins
+ * pending scopes one eligible record at a time (SQL already excludes dead-lettered
+ * and not-yet-due records, so a poison record cannot head-of-line block a healthy
+ * scope) until the record or elapsed-time budget is exhausted. If work remains,
+ * schedules a single unref()'d continuation instead of blocking the caller.
+ */
+async function drainBoundedSlice(database, databasePath) {
+    const policy = getRuntimePolicy().outbox;
+    const consumer = new SpecCreatedOutboxConsumer(database);
+    const discovered = database.listPendingOutboxScopes({
+        topics: [...SPEC_CREATED_TOPICS],
+        eligibleAt: new Date().toISOString(),
+    });
+    if (discovered.length === 0) {
+        return;
+    }
+    const offset = rotationCursor % discovered.length;
+    const activeScopes = [...discovered.slice(offset), ...discovered.slice(0, offset)];
+    const startedAtMs = Date.now();
+    let recordBudget = policy.sliceRecordBudget;
+    let turnsTaken = 0;
+    let index = 0;
+    while (activeScopes.length > 0 && recordBudget > 0) {
+        if (Date.now() - startedAtMs > policy.sliceTimeBudgetMs) {
+            break;
+        }
+        const position = index % activeScopes.length;
+        const scope = activeScopes[position];
+        if (!scope) {
+            break;
+        }
+        const worker = new TransactionalOutboxWorker(database, scope.projectId, scope.workspaceId, `spec-created-${process.pid}-${randomUUID()}`);
+        const result = await worker.drain((context) => consumer.deliver(context), {
+            topics: [...SPEC_CREATED_TOPICS],
+            limit: 1,
+        });
+        turnsTaken += 1;
+        // Only actually-processed records consume the pass budget; ineligible-only
+        // turns (foreign lease, self-healed delivered fence) are free.
+        recordBudget -= result.delivered + result.failed;
+        if (result.exhausted) {
+            // No eligible record remains in this scope right now — drop it from this
+            // pass's rotation instead of spinning on it. A failed-but-not-exhausted
+            // scope stays in rotation so a poison record cannot block healthy work
+            // behind it.
+            activeScopes.splice(position, 1);
+            continue;
+        }
+        index += 1;
+    }
+    rotationCursor += turnsTaken;
+    if (activeScopes.length > 0) {
+        scheduleContinuation(databasePath);
+    }
+}
+function scheduleContinuation(databasePath) {
+    if (continuationTimer) {
+        return;
+    }
+    const policy = getRuntimePolicy().outbox;
+    continuationTimer = setTimeout(() => {
+        continuationTimer = undefined;
+        void drainSpecCreatedOutbox(databasePath).catch((error) => {
+            console.error('[Planu] spec.created outbox continuation failed:', error);
+        });
+    }, policy.continuationDelayMs);
+    continuationTimer.unref();
+}
 export async function startSpecCreatedOutboxConsumer() {
     await drainSpecCreatedOutbox();
     if (interval) {
@@ -173,4 +248,17 @@ export async function startSpecCreatedOutboxConsumer() {
     }, 30_000);
     interval.unref();
 }
+/** Test-only: clear scheduler state so fixtures do not leak timers across tests. */
+export function resetSpecCreatedOutboxSchedulerForTests() {
+    if (interval) {
+        clearInterval(interval);
+        interval = undefined;
+    }
+    if (continuationTimer) {
+        clearTimeout(continuationTimer);
+        continuationTimer = undefined;
+    }
+    activeDrain = undefined;
+    rotationCursor = 0;
+}
 //# sourceMappingURL=spec-created-outbox-consumer.js.map

package/dist/tools/create-spec-helpers.d.ts

@@ -1,9 +1,9 @@
-import type { GitSetupResult } from '../types/index.js';
+import type { GitSetupResult, GitAutoSetupOptions } from '../types/index.js';
 export declare function slugify(text: string): string;
 export declare function generateSpecId(existingSpecs: {
     id: string;
 }[]): string;
 export declare function generateBranchName(specId: string, slug: string, type: string): string;
 /** Try auto-setup git branch. Returns result or undefined on failure. */
-export declare function tryAutoSetupGit(projectId: string, specId: string): Promise<GitSetupResult | undefined>;
+export declare function tryAutoSetupGit(projectId: string, specId: string, options?: GitAutoSetupOptions): Promise<GitSetupResult | undefined>;
 //# sourceMappingURL=create-spec-helpers.d.ts.map

package/dist/tools/create-spec-helpers.js

@@ -29,10 +29,10 @@ export function generateBranchName(specId, slug, type) {
     return `${BRANCH_PREFIXES[type] ?? 'feat'}/${specId.toLowerCase()}-${slug}`;
 }
 /** Try auto-setup git branch. Returns result or undefined on failure. */
-export async function tryAutoSetupGit(projectId, specId) {
+export async function tryAutoSetupGit(projectId, specId, options) {
     /* v8 ignore start -- requires real git repo with branches */
     try {
-        const r = await handleAutoSetup(projectId, specId);
+        const r = await handleAutoSetup(projectId, specId, undefined, options);
         if (!r.isError && r.content[0]?.type === 'text') {
             const data = JSON.parse(r.content[0].text);
             if (typeof data.newBranch !== 'string') {

package/dist/tools/git/branch-ops.d.ts

@@ -1,12 +1,16 @@
-import type { ToolResult, GitConfig } from '../../types/index.js';
-export declare function handleCreateBranch(projectId: string, specId: string | undefined, config?: GitConfig, resolvedProjectPath?: string): Promise<ToolResult>;
+import type { ToolResult, GitConfig, GitAutoSetupOptions } from '../../types/index.js';
+export declare function handleCreateBranch(projectId: string, specId: string | undefined, config?: GitConfig, resolvedProjectPath?: string, options?: GitAutoSetupOptions): Promise<ToolResult>;
 export declare function handleCheckBranch(projectId: string, _specId: string | undefined, config?: GitConfig): Promise<ToolResult>;
 /**
  * Auto-setup: detect git workflow, sync base branch, create feature branch.
  * Combines detectGitFlowType + resolveBaseBranch + fetch/pull + create-branch
  * into a single atomic operation for spec creation.
+ *
+ * SPEC-1396: `mutateCheckout: false` creates the branch ref without touching HEAD
+ * or the working tree. Automatic callers (outbox recovery, cascades) MUST use it —
+ * a background checkout silently moves the shared checkout onto a foreign branch.
  */
-export declare function handleAutoSetup(projectId: string, specId: string | undefined, config?: GitConfig): Promise<ToolResult>;
+export declare function handleAutoSetup(projectId: string, specId: string | undefined, config?: GitConfig, options?: GitAutoSetupOptions): Promise<ToolResult>;
 /**
  * Returns a structured worktree-start payload with commands/paths so the caller
  * knows exactly how to spin up an isolated Claude Code session.