@planu/cli 5.3.2 → 5.3.4

package/dist/engine/implementation-contract/evaluator.js

@@ -1,4 +1,4 @@
-import { extractTopLevelSection, IMPLEMENTATION_CONTRACT_SECTION, IMPLEMENTATION_CONTRACT_SUBSECTIONS, } from './common.js';
+import { extractTopLevelSection, IMPLEMENTATION_CONTRACT_OPTIONAL_SUBSECTIONS, IMPLEMENTATION_CONTRACT_REQUIRED_SUBSECTIONS, IMPLEMENTATION_CONTRACT_SECTION, } from './common.js';
 const FILLER_PATTERNS = [
     /\bTBD\b/i,
     /\bN\/A\b/i,
@@ -8,6 +8,19 @@ const FILLER_PATTERNS = [
 ];
 const MANUAL_VERIFICATION_STEP_RE = /\b(given|when|then|step|observe|click|run)\b/i;
 const CONCRETE_MANUAL_EVIDENCE_RE = /`[^`]+`|\b(?:src|tests|docs|scripts|website|planu)\/[\w./-]+/i;
+const OPTIONAL_SUBSECTIONS = new Set(IMPLEMENTATION_CONTRACT_OPTIONAL_SUBSECTIONS);
+/**
+ * SPEC-1406 (DEFECT 1, round 2 — FALSE EVIDENCE fix): the old CONCRETE_MANUAL_EVIDENCE_RE
+ * accepted ANY backticked text, so a row whose evidence was `` `not-a-path` `` produced zero
+ * issues. Verification-row evidence must actually look like a test path (a `tests/` segment,
+ * or `.test.`/`.spec.` in the filename), a runnable test/typecheck/lint command, or a
+ * backticked command/path that names a real file or script (contains `/` or a file
+ * extension) — a bare backticked word with neither is not evidence.
+ */
+const TEST_EVIDENCE_RE = /tests?\/[\w./-]+\.\w+|\.(?:test|spec)\.\w+|\b(?:pnpm|npm|npx|yarn)\s+(?:run\s+)?[\w:-]*(?:test|typecheck|lint)[\w:-]*\b|\bvitest\b|\bjest\b|\bpytest\b|\bgo test\b|\bcargo test\b|`[^`]*(?:[\\/]|\.[a-zA-Z]{1,10}\b)[^`]*`/i;
+/** The shared row rendered by renderSharedVerificationRow when there are fewer test files
+ * than criteria — it covers every criterion at once rather than one row each. */
+const SHARED_VERIFICATION_ROW_RE = /^-\s*All criteria are verified by:/;
 export function evaluateImplementationContract(specBody, acceptanceCriteria) {
     const contract = extractTopLevelSection(specBody, IMPLEMENTATION_CONTRACT_SECTION);
     if (contract.trim().length === 0) {
@@ -19,56 +32,77 @@ export function evaluateImplementationContract(specBody, acceptanceCriteria) {
         ];
     }
     const issues = [];
-    const sections = new Map(IMPLEMENTATION_CONTRACT_SUBSECTIONS.map((section) => [
-        section,
-        extractSubsection(contract, section),
-    ]));
+    const allSubsections = [
+        ...IMPLEMENTATION_CONTRACT_REQUIRED_SUBSECTIONS,
+        ...IMPLEMENTATION_CONTRACT_OPTIONAL_SUBSECTIONS,
+    ];
+    const sections = new Map(allSubsections.map((section) => [section, extractSubsection(contract, section)]));
     for (const [section, content] of sections.entries()) {
-        if (content === null) {
+        issues.push(...evaluateSubsection(section, content));
+    }
+    const map = sections.get('Acceptance-To-Verification Map') ?? '';
+    const mapLines = map.split('\n').map((line) => line.trim());
+    const sharedRowCoversAll = mapLines.some((line) => SHARED_VERIFICATION_ROW_RE.test(line) && TEST_EVIDENCE_RE.test(line));
+    const useStrictIndex = hasCompleteAcLabeling(mapLines, acceptanceCriteria.length);
+    acceptanceCriteria.forEach((criterion, index) => {
+        if (sharedRowCoversAll) {
+            return;
+        }
+        if (!criterionHasVerification(criterion, index + 1, mapLines, useStrictIndex)) {
+            issues.push({
+                code: 'contract_unmapped_criterion',
+                message: `Acceptance criterion is not mapped to verification evidence: ${criterion}`,
+            });
+        }
+    });
+    if (/\bmanual verification\b/i.test(map) &&
+        !MANUAL_VERIFICATION_STEP_RE.test(map) &&
+        !CONCRETE_MANUAL_EVIDENCE_RE.test(map)) {
+        issues.push({
+            code: 'contract_manual_verification_vague',
+            message: 'Manual verification in the Implementation Contract must include exact observable steps.',
+        });
+    }
+    return issues;
+}
+/**
+ * SPEC-1406: optional subsections with no grounded content are omitted from the rendered
+ * body entirely — that is the intended fix, not a defect to flag.
+ */
+function evaluateSubsection(section, content) {
+    const issues = [];
+    if (content === null) {
+        if (!OPTIONAL_SUBSECTIONS.has(section)) {
             issues.push({
                 code: 'contract_subsection_missing',
                 message: `Implementation Contract subsection "${section}" is missing.`,
             });
-            continue;
         }
-        const trimmed = content.trim();
-        if (trimmed.length === 0) {
+        return issues;
+    }
+    const trimmed = content.trim();
+    if (trimmed.length === 0) {
+        if (!OPTIONAL_SUBSECTIONS.has(section)) {
             issues.push({
                 code: 'contract_subsection_empty',
                 message: `Implementation Contract subsection "${section}" is empty.`,
             });
         }
-        for (const pattern of FILLER_PATTERNS) {
-            if (pattern.test(trimmed)) {
-                issues.push({
-                    code: 'contract_filler',
-                    message: `Implementation Contract subsection "${section}" contains filler text.`,
-                });
-                break;
-            }
-        }
-        if (/\bNeeds decision:/i.test(trimmed)) {
-            issues.push({
-                code: 'contract_needs_decision',
-                message: `Implementation Contract subsection "${section}" still has unresolved Needs decision items.`,
-            });
-        }
+        return issues;
     }
-    const map = sections.get('Acceptance-To-Verification Map') ?? '';
-    for (const criterion of acceptanceCriteria) {
-        if (!criterionHasVerification(criterion, map)) {
+    for (const pattern of FILLER_PATTERNS) {
+        if (pattern.test(trimmed)) {
             issues.push({
-                code: 'contract_unmapped_criterion',
-                message: `Acceptance criterion is not mapped to verification evidence: ${criterion}`,
+                code: 'contract_filler',
+                message: `Implementation Contract subsection "${section}" contains filler text.`,
             });
+            break;
         }
     }
-    if (/\bmanual verification\b/i.test(map) &&
-        !MANUAL_VERIFICATION_STEP_RE.test(map) &&
-        !CONCRETE_MANUAL_EVIDENCE_RE.test(map)) {
+    if (/\bNeeds decision:/i.test(trimmed)) {
         issues.push({
-            code: 'contract_manual_verification_vague',
-            message: 'Manual verification in the Implementation Contract must include exact observable steps.',
+            code: 'contract_needs_decision',
+            message: `Implementation Contract subsection "${section}" still has unresolved Needs decision items.`,
         });
     }
     return issues;
@@ -85,7 +119,54 @@ function extractSubsection(sectionBody, subsectionName) {
     const next = nextRe.exec(sectionBody);
     return sectionBody.slice(start, next ? next.index : sectionBody.length);
 }
-function criterionHasVerification(criterion, map) {
+/**
+ * A map only qualifies for strict index-based matching when EVERY criterion 1..N has its
+ * own `AC{n}:` row — a partial or off-by-one labeling scheme (e.g. an extra `AB1:` row for
+ * a review-only criterion) is not the renderer's per-criterion output shape and must not
+ * be forced into it; fall back to the legacy whole-map match instead (see below).
+ */
+function hasCompleteAcLabeling(mapLines, criteriaCount) {
+    if (criteriaCount === 0) {
+        return false;
+    }
+    for (let index = 1; index <= criteriaCount; index += 1) {
+        const rowRe = new RegExp(`^-\\s*AC${String(index)}:`);
+        if (!mapLines.some((line) => rowRe.test(line))) {
+            return false;
+        }
+    }
+    return true;
+}
+/**
+ * SPEC-1406 (DEFECT 1, round 2 — PREFIX COLLISION fix): the old lookup matched rows by
+ * `normalize(criterion).slice(0, 48)` and took the FIRST matching line — two criteria
+ * sharing the same first 48 normalized characters were both "certified" by AC1's row,
+ * so AC2 could be entirely unmapped and still pass. `AC{n}:` labels are only ever emitted
+ * by this renderer (renderPerCriterionRow), so when the map has a complete `AC1:`..`ACn:`
+ * sequence, match strictly on the labeled index instead of a truncated prefix.
+ *
+ * When the map does not have a complete AC-labeled sequence, it was authored by hand or by
+ * an older generator (bullet lists, GIVEN/WHEN/THEN prose, markdown tables, partial AC
+ * labeling — corpus-replay against all pre-SPEC-1406 persisted specs found no single
+ * positional or structural rule that covers every legacy shape without newly blocking specs
+ * that were previously readable). Falling back to the original whole-map prefix/keyword
+ * match preserves exact pre-fix behavior for that legacy corpus — the non-functional
+ * constraint that no already-persisted spec may gain a new blocker takes priority over
+ * tightening a shape this fix does not target.
+ */
+function criterionHasVerification(criterion, index, mapLines, useStrictIndex) {
+    if (criterion.trim().length === 0) {
+        return true;
+    }
+    if (useStrictIndex) {
+        const rowRe = new RegExp(`^-\\s*AC${String(index)}:`);
+        const row = mapLines.find((line) => rowRe.test(line));
+        return row !== undefined && TEST_EVIDENCE_RE.test(row);
+    }
+    return legacyCriterionHasVerification(criterion, mapLines.join('\n'));
+}
+/** Pre-SPEC-1406 whole-map matcher, kept verbatim for maps with no `AC{n}:` labels. */
+function legacyCriterionHasVerification(criterion, map) {
     const normalizedCriterion = normalize(criterion);
     if (normalizedCriterion.length === 0) {
         return true;

package/dist/engine/implementation-contract/renderer.js

@@ -3,6 +3,9 @@ export function buildImplementationContractSection(input) {
     const criteria = input.criteria;
     const testFiles = input.files.test.map((file) => file.path);
     const verificationCommands = input.verificationCommands;
+    const verificationRows = renderVerificationRows(criteria, testFiles, verificationCommands);
+    const failureModes = renderFailureModes(criteria);
+    const nonGoals = renderNonGoals(input.outOfScope);
     const lines = [
         `## ${IMPLEMENTATION_CONTRACT_SECTION}`,
         '### User Outcome',
@@ -10,21 +13,16 @@ export function buildImplementationContractSection(input) {
             criteria[0]?.text ??
             'Needs decision: define the exact observable outcome this spec must deliver.',
         '',
-        '### Behavior Contract',
-        ...renderBehaviorContract(criteria),
-        '',
         '### File-Level Work Plan',
         ...renderFilePlan(input.files, criteria.length > 0),
         '',
         '### Acceptance-To-Verification Map',
-        ...criteria.map((criterion, index) => renderVerificationRow(criterion.text, index + 1, testFiles, verificationCommands)),
-        '',
-        '### Edge Cases And Failure Modes',
-        ...renderFailureModes(criteria),
-        '',
-        '### Non-Goals And Forbidden Approaches',
-        ...renderNonGoals(input.outOfScope),
+        ...verificationRows,
         '',
+        // SPEC-1406 (DEFECT 5): a subsection with no grounded content is omitted rather than
+        // filled with a restated-criterion placeholder — prefer omission over filler.
+        ...(failureModes.length > 0 ? ['### Edge Cases And Failure Modes', ...failureModes, ''] : []),
+        ...(nonGoals.length > 0 ? ['### Non-Goals And Forbidden Approaches', ...nonGoals, ''] : []),
         '### Verification Commands',
         ...(verificationCommands.length > 0
             ? verificationCommands.map((command) => `- \`${command}\``)
@@ -71,31 +69,64 @@ function renderFilePlan(files, hasGroundedBehavior) {
         ? ['- No file ownership was grounded for this behavior.']
         : ['- Needs decision: identify expected source and test files.'];
 }
-function renderBehaviorContract(criteria) {
-    return criteria.length > 0
-        ? criteria.map((criterion, index) => `- Expected behavior AC${String(index + 1)}: ${criterion.text}`)
-        : ['- Needs decision: define at least one evidence-grounded acceptance criterion.'];
+/**
+ * SPEC-1406 (DEFECT 1, round 2): renders the Acceptance-To-Verification Map body.
+ * There is no per-criterion test mapping anywhere in the pipeline (LeanCriterion is
+ * `{text, done}`, `files.test` is a flat list) — positional `testFiles[index]` is only
+ * trustworthy when there are at least as many test files as criteria. When there are
+ * not enough test files to map one per criterion, emit ONE shared row naming every
+ * criterion's coverage instead of dropping rows (which used to make criteria 2..N
+ * invisible to the evaluator and promote them to false blockers).
+ */
+function renderVerificationRows(criteria, testFiles, commands) {
+    if (criteria.length === 0) {
+        return ['- Needs decision: provide at least one acceptance criterion to verify.'];
+    }
+    if (testFiles.length >= criteria.length) {
+        const rows = [];
+        criteria.forEach((criterion, index) => {
+            const test = testFiles[index];
+            if (test !== undefined) {
+                rows.push(renderPerCriterionRow(criterion.text, index + 1, test, commands));
+            }
+        });
+        return rows;
+    }
+    if (testFiles.length === 0) {
+        return ['- No repository-supported verification evidence was grounded for these criteria.'];
+    }
+    return renderSharedVerificationRow(testFiles, commands);
+}
+function renderPerCriterionRow(criterion, index, test, commands) {
+    const command = commands[index - 1] ?? commands[0];
+    return command
+        ? `- AC${String(index)}: ${criterion} -> unit test \`${test}\` plus \`${command}\`.`
+        : `- AC${String(index)}: ${criterion} -> unit test \`${test}\`.`;
 }
-function renderVerificationRow(criterion, index, testFiles, commands) {
-    const test = testFiles[0];
-    if (test) {
-        const command = commands[0];
-        return command
-            ? `- AC${String(index)}: ${criterion} -> unit test \`${test}\` plus \`${command}\`.`
-            : `- AC${String(index)}: ${criterion} -> unit test \`${test}\`.`;
+/**
+ * Emitted once when there are fewer declared test files than criteria — never repeat
+ * `commands[0]` per criterion (SPEC-1406 round 2 finding: N byte-identical rows).
+ */
+function renderSharedVerificationRow(testFiles, commands) {
+    const fileList = testFiles.map((file) => `\`${file}\``).join(', ');
+    const lines = [`- All criteria are verified by: ${fileList}`];
+    const command = commands[0];
+    if (command) {
+        lines.push(`- Shared verification command: \`${command}\`.`);
     }
-    return `- AC${String(index)}: ${criterion} -> verify the exact observable result declared by this criterion.`;
+    return lines;
 }
 function renderNonGoals(outOfScope) {
-    return outOfScope.length > 0
-        ? outOfScope.map((item) => `- ${item}`)
-        : ['- No explicit non-goals were supplied.'];
+    return outOfScope.map((item) => `- ${item}`);
 }
-function renderFailureModes(criteria) {
-    return criteria.length > 0
-        ? criteria.map((criterion, index) => `- AC${String(index + 1)} failure: reject partial behavior that violates "${criterion.text}" and preserve the last valid observable state.`)
-        : [
-            '- Needs decision: identify criterion-specific failure modes from user input or project evidence.',
-        ];
+/**
+ * SPEC-1406 (DEFECT 5): there is no per-criterion failure-mode input — the previous
+ * implementation synthesized a constant restatement of the criterion text instead
+ * ("AC1 failure: reject partial behavior that violates \"<criterion>\"..."), which carries
+ * no information beyond the Acceptance-To-Verification Map. Prefer omission over filler:
+ * this subsection has nothing grounded to add, so it is always empty here.
+ */
+function renderFailureModes(_criteria) {
+    return [];
 }
 //# sourceMappingURL=renderer.js.map

package/dist/engine/planu-core.darwin-arm64.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.3.2",
-  "engineVersion": "5.3.2",
-  "buildId": "1-5.3.2-aarch64-apple-darwin",
+  "cliVersion": "5.3.4",
+  "engineVersion": "5.3.4",
+  "buildId": "1-5.3.4-aarch64-apple-darwin",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -17,15 +17,15 @@
   "platform": "darwin",
   "arch": "arm64",
   "libc": null,
-  "artifactSha256": "d871c6912f7857fedb31608d895a4e80fbf550c18875d307cf068fa966412cb7",
+  "artifactSha256": "570521dc4b74de29cb0e40a5da5da31bb8a34851c7bbc632c40dfeba48400bfc",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.darwin-arm64.node.sbom.json",
-    "sha256": "93613e9e650a12618265c467fd3007c96ad6c261dcf373ff321d70210c1fdf90"
+    "sha256": "6f82916e52c2ae01a71b3d55b2c9c6ac607d4f9b153512d349cf8decc632b309"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "30226657c1e66411b6ff233c2ea82e47573d533a",
+    "sourceCommit": "7f78cd615083c4284cab36c05f11dc2ce76e5cbd",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -34,6 +34,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "5A14AujfQn9F0F6V4dCbHhSlzyWfH43wAF+8tSzLXg0t7+yELQKNNH8XqNGSqL9qGHPVxSYeTu1nh/3qQECxBQ=="
+    "value": "VKMAa/cn3GxIH/tAv535J9ZCcXOT6tCmakcat6U6z9HyWkTb8fpBG9xYQoufyQ7GVt1GocbWIyyOVX2HV6JbCg=="
   }
 }

package/dist/engine/planu-core.darwin-arm64.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.3.2",
+      "bom-ref": "pkg:cargo/planu-core@5.3.4",
       "type": "library",
       "name": "planu-core",
-      "version": "5.3.2",
+      "version": "5.3.4",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "d871c6912f7857fedb31608d895a4e80fbf550c18875d307cf068fa966412cb7"
+          "content": "570521dc4b74de29cb0e40a5da5da31bb8a34851c7bbc632c40dfeba48400bfc"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.3.2",
+      "ref": "pkg:cargo/planu-core@5.3.4",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/planu-core.darwin-x64.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.3.2",
-  "engineVersion": "5.3.2",
-  "buildId": "1-5.3.2-x86_64-apple-darwin",
+  "cliVersion": "5.3.4",
+  "engineVersion": "5.3.4",
+  "buildId": "1-5.3.4-x86_64-apple-darwin",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -17,15 +17,15 @@
   "platform": "darwin",
   "arch": "x64",
   "libc": null,
-  "artifactSha256": "2e160dbfb5616b778ea6bc1b85b6663ae9618c664824498e0089a3b82353923e",
+  "artifactSha256": "0912425f86760d302fed2c7c81a1e6c41f46b143ba6e611120e1c9cffe4c7fe3",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.darwin-x64.node.sbom.json",
-    "sha256": "b4aa09e9d3bc3d5f4d0d80953f4d32389aa40fafabcac6895ebd296c4a2f6873"
+    "sha256": "8b9b3ef32f117e9ca3cebbe8ccfc04f4be4250496a45dffc6e9afa03640a89c9"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "30226657c1e66411b6ff233c2ea82e47573d533a",
+    "sourceCommit": "7f78cd615083c4284cab36c05f11dc2ce76e5cbd",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -34,6 +34,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "xN3AVrLnDNmagcrLzUS+voWOuOHZhY4+i+nfep/66x39IdztoQEqh/jF1H/P5qxnIwGFuSztuCS3cG0pAsRqCw=="
+    "value": "f/aPrNL3a1yLv73UGSBLj+lnbA1N9L7YqjgWDERXxNPsv9xmK6//LgzZhXXMHQmcU9kV40J3Re3sVnCB56MHDQ=="
   }
 }

package/dist/engine/planu-core.darwin-x64.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.3.2",
+      "bom-ref": "pkg:cargo/planu-core@5.3.4",
       "type": "library",
       "name": "planu-core",
-      "version": "5.3.2",
+      "version": "5.3.4",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "2e160dbfb5616b778ea6bc1b85b6663ae9618c664824498e0089a3b82353923e"
+          "content": "0912425f86760d302fed2c7c81a1e6c41f46b143ba6e611120e1c9cffe4c7fe3"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.3.2",
+      "ref": "pkg:cargo/planu-core@5.3.4",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/planu-core.linux-arm64-gnu.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.3.2",
-  "engineVersion": "5.3.2",
-  "buildId": "1-5.3.2-aarch64-unknown-linux-gnu",
+  "cliVersion": "5.3.4",
+  "engineVersion": "5.3.4",
+  "buildId": "1-5.3.4-aarch64-unknown-linux-gnu",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -16,15 +16,15 @@
   "platform": "linux",
   "arch": "arm64",
   "libc": "glibc",
-  "artifactSha256": "c688e223eaed377810f13b4fb59b95269c6ac386e9e22122012322aa20b4119f",
+  "artifactSha256": "0e815c9991af25c98c0d0de307b850385204b0e3eee7fd31ab40c5e77ebcd3d5",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.linux-arm64-gnu.node.sbom.json",
-    "sha256": "05e6cde28bdf46282c2024bec9491908e67cf0875a1043a879533fe26e2acf6c"
+    "sha256": "bb4cdfbbd37c0990dc035253ccb275e109941ee3a9c169d520b4f1857ab6159b"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "30226657c1e66411b6ff233c2ea82e47573d533a",
+    "sourceCommit": "7f78cd615083c4284cab36c05f11dc2ce76e5cbd",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -33,6 +33,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "evvZQIYp2VmYUaaLu8nK5yLjTSms9hMRYoF4zM3qsCHwLLKRThOR+KrFgZ9ySZk6WRWx9CE8F/c+pKFRi/7nBg=="
+    "value": "bLVx5tLIU+AaTSOdP/kJeXAUtUOY+FqHpAX04NtahMzSz61CWs8YOEDhJzLWBNv7IeorjRSKasAq/5e8YG9YBA=="
   }
 }

package/dist/engine/planu-core.linux-arm64-gnu.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.3.2",
+      "bom-ref": "pkg:cargo/planu-core@5.3.4",
       "type": "library",
       "name": "planu-core",
-      "version": "5.3.2",
+      "version": "5.3.4",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "c688e223eaed377810f13b4fb59b95269c6ac386e9e22122012322aa20b4119f"
+          "content": "0e815c9991af25c98c0d0de307b850385204b0e3eee7fd31ab40c5e77ebcd3d5"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.3.2",
+      "ref": "pkg:cargo/planu-core@5.3.4",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/planu-core.linux-arm64-musl.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.3.2",
-  "engineVersion": "5.3.2",
-  "buildId": "1-5.3.2-aarch64-unknown-linux-musl",
+  "cliVersion": "5.3.4",
+  "engineVersion": "5.3.4",
+  "buildId": "1-5.3.4-aarch64-unknown-linux-musl",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -16,15 +16,15 @@
   "platform": "linux",
   "arch": "arm64",
   "libc": "musl",
-  "artifactSha256": "ffe6b8382aded44408171166a385d31d25fa6a95919c14ec73ca5197351da8ac",
+  "artifactSha256": "5189fb5c83e53a091b57c0cfd372455b6210ffc23919434a0cf7644455b60b77",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.linux-arm64-musl.node.sbom.json",
-    "sha256": "6612f0831ad90d8d69aa88bbc53658d5dc55d5ff3e337e4253cb8943c7471aa5"
+    "sha256": "16fa655252e62f666d6a1ca041108685532d283622ed44bdd91838bf0953d7b2"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "30226657c1e66411b6ff233c2ea82e47573d533a",
+    "sourceCommit": "7f78cd615083c4284cab36c05f11dc2ce76e5cbd",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -33,6 +33,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "3AhxDy080JazcjbYv9SH3w6tpj4iKKLlhI95pAy1/VQ8c9iDEDLmTfFaQv4R1FXjEAUSqZ/hYZEAQ0A3XpQPCA=="
+    "value": "6QGtEc97VMTZiSeA8cROjxiO8GRssD0jak6OWFPzIQ+CG7xsnloT/6G7Yxyi0HVmoEShx2pnmSKpigEg5wQyCQ=="
   }
 }

package/dist/engine/planu-core.linux-arm64-musl.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.3.2",
+      "bom-ref": "pkg:cargo/planu-core@5.3.4",
       "type": "library",
       "name": "planu-core",
-      "version": "5.3.2",
+      "version": "5.3.4",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "ffe6b8382aded44408171166a385d31d25fa6a95919c14ec73ca5197351da8ac"
+          "content": "5189fb5c83e53a091b57c0cfd372455b6210ffc23919434a0cf7644455b60b77"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.3.2",
+      "ref": "pkg:cargo/planu-core@5.3.4",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/planu-core.linux-x64-gnu.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.3.2",
-  "engineVersion": "5.3.2",
-  "buildId": "1-5.3.2-x86_64-unknown-linux-gnu",
+  "cliVersion": "5.3.4",
+  "engineVersion": "5.3.4",
+  "buildId": "1-5.3.4-x86_64-unknown-linux-gnu",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -16,15 +16,15 @@
   "platform": "linux",
   "arch": "x64",
   "libc": "glibc",
-  "artifactSha256": "c1aeb15763bf3ee0b2d37ac694340fe65cfc106f95f6813c2e188c099c826013",
+  "artifactSha256": "3fa9b1c9b4096bbf7628582e4f2fe62250836f6415000e402b67eb109aaf2d32",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.linux-x64-gnu.node.sbom.json",
-    "sha256": "cd651b3c7af8a03fb3725d6342ee679dfef8272b65bc28e9f523dbfb88fa0ed8"
+    "sha256": "93bdc77c871c4e47c47becd9bfe65cf96970dbc17619ad9963c9ca901777b2fd"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "30226657c1e66411b6ff233c2ea82e47573d533a",
+    "sourceCommit": "7f78cd615083c4284cab36c05f11dc2ce76e5cbd",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -33,6 +33,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "T9ypzN3DZ+ks4rQIjeuMKqxHHxGc7Qm/ep9zyVEsU6BvzVjOaiZijDkJXsiaNS8AqfrZkmnr6I/HtWNCqiqjCw=="
+    "value": "ehdGAkoK/g0bywWm+yz+e6X3dZ5gmVCWjz6jip97SMkUysrPvgTiEWRJFa7DRcwLBNpmDr0M1iR3Dcktv4EpDg=="
   }
 }

package/dist/engine/planu-core.linux-x64-gnu.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.3.2",
+      "bom-ref": "pkg:cargo/planu-core@5.3.4",
       "type": "library",
       "name": "planu-core",
-      "version": "5.3.2",
+      "version": "5.3.4",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "c1aeb15763bf3ee0b2d37ac694340fe65cfc106f95f6813c2e188c099c826013"
+          "content": "3fa9b1c9b4096bbf7628582e4f2fe62250836f6415000e402b67eb109aaf2d32"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.3.2",
+      "ref": "pkg:cargo/planu-core@5.3.4",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",