@planu/cli 5.3.25 → 5.3.27

package/CHANGELOG.md

@@ -1,3 +1,22 @@
+## [5.3.27] - 2026-08-19
+
+### Bug Fixes
+- fix(spec-1575): require clause to assert forbidden action for outOfScope contradiction
+- fix(spec-1539): require real independent implementation-review before done
+
+### Chores
+- chore(spec-1539-1575): close done ceremonies, reconcile specs, file SPEC-1576
+
+
+## [5.3.26] - 2026-08-19
+
+### Bug Fixes
+- fix(spec-1569-1572): host-LLM legacy migration, gitignore allowlist, scope+section guards
+
+### Chores
+- chore(spec-1569-1572): mark legacy-migration and guard specs done
+
+
 ## [5.3.25] - 2026-08-18
 
 ### Bug Fixes

package/README.md

@@ -21,7 +21,7 @@ Planu is a Spec Driven Development stack for AI coding agents: an MCP server and
 - **Local change detection** — observes project changes without requiring a hosted configuration service.
 - **Unified Spec Format** — Requirements and technical details in a single, context-efficient `spec.md`.
 - **Atomic Integrity** — Indestructible writes and **Freeze-on-done** immutability (P0).
-- **29 official MCP tools** for the public SDD surface, with advanced workflows kept in skills, CLI commands, and internal pipelines.
+- **30 official MCP tools** for the public SDD surface, with advanced workflows kept in skills, CLI commands, and internal pipelines.
 - **Multi-agent compatible** — Optimized for Claude Code, Cursor, Windsurf, and Gemini CLI.
 
 ---

package/dist/config/legacy-artifacts.json

@@ -0,0 +1,26 @@
+[
+  {
+    "id": "technical-md",
+    "pattern": "technical.md",
+    "classification": "content-bearing",
+    "targetSection": "Technical"
+  },
+  { "id": "plan-md", "pattern": "plan.md", "classification": "content-bearing", "targetSection": "Technical" },
+  { "id": "plan-md-upper", "pattern": "PLAN.md", "classification": "content-bearing", "targetSection": "Technical" },
+  {
+    "id": "ficha-tecnica-md",
+    "pattern": "FICHA-TECNICA.md",
+    "classification": "content-bearing",
+    "targetSection": "Technical"
+  },
+  { "id": "progress-md", "pattern": "progress.md", "classification": "content-bearing", "targetSection": "Progress" },
+  {
+    "id": "progress-md-upper",
+    "pattern": "PROGRESS.md",
+    "classification": "content-bearing",
+    "targetSection": "Progress"
+  },
+  { "id": "hu-md", "pattern": "HU.md", "classification": "content-bearing", "targetSection": "Problem" },
+  { "id": "child-plans-dir", "pattern": "child-plans", "classification": "transient" },
+  { "id": "behavior-evidence-json", "pattern": "behavior-evidence.json", "classification": "transient" }
+]

package/dist/config/official-sdd-tools.d.ts

@@ -1,4 +1,4 @@
 /** Single editable authority for the official local SDD tool surface. */
-export declare const OFFICIAL_SDD_TOOL_NAMES: readonly ['planu_status', 'session_checkpoint', 'facilitate', 'init_project', 'clarify_requirements', 'create_spec', 'list_specs', 'challenge_spec', 'check_readiness', 'update_status', 'update_status_batch', 'package_handoff', 'validate', 'get_job', 'watch_job', 'cancel_job', 'restart_job', 'reconcile_spec', 'create_rule', 'create_skill', 'skill_search', 'configure_code_graph', 'code_graph_status', 'submit_feedback', 'triage_feedback', 'resolve_feedback', 'sync_feedback', 'feedback_status', 'bump_spec_version'];
+export declare const OFFICIAL_SDD_TOOL_NAMES: readonly ['planu_status', 'session_checkpoint', 'facilitate', 'init_project', 'clarify_requirements', 'create_spec', 'list_specs', 'challenge_spec', 'check_readiness', 'update_status', 'update_status_batch', 'package_handoff', 'validate', 'get_job', 'watch_job', 'cancel_job', 'restart_job', 'reconcile_spec', 'create_rule', 'create_skill', 'skill_search', 'configure_code_graph', 'code_graph_status', 'submit_feedback', 'triage_feedback', 'resolve_feedback', 'sync_feedback', 'feedback_status', 'bump_spec_version', 'migrate_legacy_spec'];
 export declare function readCanonicalToolNames(): string[];
 //# sourceMappingURL=official-sdd-tools.d.ts.map

package/dist/config/official-sdd-tools.js

@@ -29,6 +29,7 @@ export const OFFICIAL_SDD_TOOL_NAMES = [
     'sync_feedback',
     'feedback_status',
     'bump_spec_version',
+    'migrate_legacy_spec',
 ];
 export function readCanonicalToolNames() {
     return [...OFFICIAL_SDD_TOOL_NAMES];

package/dist/config/registries/hosts/codex.json

@@ -31,7 +31,8 @@
     "resolve_feedback",
     "sync_feedback",
     "feedback_status",
-    "bump_spec_version"
+    "bump_spec_version",
+    "migrate_legacy_spec"
   ],
   "unsupportedTools": ["challenge_spec", "red_team"],
   "restrictedTools": {

package/dist/engine/handoff-artifacts/io.js

@@ -32,6 +32,7 @@ function eventTypeForKind(kind) {
         review_feedback: 'handoff.review_feedback',
         'implementation-report': 'handoff.implementation-report',
         'validation-report': 'handoff.validation-report',
+        implementation_review: 'handoff.implementation_review',
     };
     return map[kind];
 }

package/dist/engine/handoff-artifacts/schemas.d.ts

@@ -53,6 +53,29 @@ export declare const ReviewFeedbackV1Schema: z.ZodObject<{
     body: z.ZodString;
     reviewedAt: z.ZodISODateTime;
 }, z.core.$strip>;
+export declare const ImplementationReviewV1Schema: z.ZodObject<{
+    schema_version: z.ZodString;
+    specId: z.ZodString;
+    verdict: z.ZodEnum<{
+        approved: "approved";
+        "changes-requested": "changes-requested";
+    }>;
+    reviewer: z.ZodObject<{
+        kind: z.ZodEnum<{
+            human: "human";
+            "implementation-review-agent": "implementation-review-agent";
+        }>;
+        agent: z.ZodString;
+        verdict: z.ZodEnum<{
+            approved: "approved";
+            "changes-requested": "changes-requested";
+        }>;
+    }, z.core.$strip>;
+    blockers: z.ZodArray<z.ZodString>;
+    suggestions: z.ZodArray<z.ZodString>;
+    body: z.ZodString;
+    reviewedAt: z.ZodISODateTime;
+}, z.core.$strip>;
 export declare const ImplementationReportV1Schema: z.ZodObject<{
     schema_version: z.ZodString;
     specId: z.ZodString;
@@ -314,6 +337,29 @@ export declare const ARTIFACT_SCHEMAS: {
         score: z.ZodOptional<z.ZodNumber>;
         completedAt: z.ZodISODateTime;
     }, z.core.$strip>;
+    readonly implementation_review: z.ZodObject<{
+        schema_version: z.ZodString;
+        specId: z.ZodString;
+        verdict: z.ZodEnum<{
+            approved: "approved";
+            "changes-requested": "changes-requested";
+        }>;
+        reviewer: z.ZodObject<{
+            kind: z.ZodEnum<{
+                human: "human";
+                "implementation-review-agent": "implementation-review-agent";
+            }>;
+            agent: z.ZodString;
+            verdict: z.ZodEnum<{
+                approved: "approved";
+                "changes-requested": "changes-requested";
+            }>;
+        }, z.core.$strip>;
+        blockers: z.ZodArray<z.ZodString>;
+        suggestions: z.ZodArray<z.ZodString>;
+        body: z.ZodString;
+        reviewedAt: z.ZodISODateTime;
+    }, z.core.$strip>;
 };
 /**
  * Validate a payload against the schema for the given artifact kind.

package/dist/engine/handoff-artifacts/schemas.js

@@ -39,6 +39,20 @@ export const ReviewFeedbackV1Schema = z.object({
     body: z.string(),
     reviewedAt: z.iso.datetime(),
 });
+export const ImplementationReviewV1Schema = z.object({
+    schema_version: SchemaVersion,
+    specId: z.string(),
+    verdict: z.enum(['approved', 'changes-requested']),
+    reviewer: z.object({
+        kind: z.enum(['implementation-review-agent', 'human']),
+        agent: z.string().min(1),
+        verdict: z.enum(['approved', 'changes-requested']),
+    }),
+    blockers: z.array(z.string()),
+    suggestions: z.array(z.string()),
+    body: z.string(),
+    reviewedAt: z.iso.datetime(),
+});
 export const ImplementationReportV1Schema = z.object({
     schema_version: SchemaVersion,
     specId: z.string(),
@@ -163,6 +177,7 @@ export const ARTIFACT_SCHEMAS = {
     review_feedback: ReviewFeedbackV1Schema,
     'implementation-report': ImplementationReportV1Schema,
     'validation-report': ValidationReportV1Schema,
+    implementation_review: ImplementationReviewV1Schema,
 };
 // ---------------------------------------------------------------------------
 // Validate function

package/dist/engine/lifecycle-reconciliation.js

@@ -4,6 +4,7 @@ import { join } from 'node:path';
 import { projectDataDir } from '../storage/base-store.js';
 import { specStore } from '../storage/index.js';
 import { ValidationReportV1Schema } from './handoff-artifacts/schemas.js';
+import { AUTOMATED_VALIDATOR_AGENT } from './validator/validation-report-writer.js';
 import { rollbackTransitionSpec, transitionSpec, } from './spec-state-machine/transition-spec.js';
 import { acquireLock, releaseLock } from './safety/cross-process-lock.js';
 import { appendTransitionEvent, readTransitionLog } from '../storage/transition-log.js';
@@ -144,10 +145,10 @@ async function validateRequest(args) {
     const report = ValidationReportV1Schema.safeParse(JSON.parse(reportBytes.toString('utf8')));
     if (!report.success ||
         report.data.passed ||
-        report.data.reviewer.kind !== 'implementation-review-agent' ||
-        report.data.reviewer.agent !== 'planu-implementation-reviewer' ||
+        report.data.reviewer.kind !== 'automation' ||
+        report.data.reviewer.agent !== AUTOMATED_VALIDATOR_AGENT ||
         report.data.reviewer.verdict !== 'changes-requested') {
-        return failure('validation report is not an independent changes-requested finding');
+        return failure('validation report is not an automated changes-requested finding');
     }
     const reviewDigest = digest(reportBytes);
     if (reviewDigest !== input.implementationReviewDigest) {
@@ -197,8 +198,8 @@ async function validateStoredBinding(args) {
         const report = ValidationReportV1Schema.safeParse(JSON.parse(reportBytes.toString('utf8')));
         if (!report.success ||
             report.data.passed ||
-            report.data.reviewer.kind !== 'implementation-review-agent' ||
-            report.data.reviewer.agent !== 'planu-implementation-reviewer' ||
+            report.data.reviewer.kind !== 'automation' ||
+            report.data.reviewer.agent !== AUTOMATED_VALIDATOR_AGENT ||
             report.data.reviewer.verdict !== 'changes-requested' ||
             digest(reportBytes) !== args.receipt.implementationReviewDigest) {
             return failure('implementation review no longer matches the durable receipt', 'RECONCILIATION_BINDING_CONFLICT');

package/dist/engine/planu-core.darwin-arm64.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.3.25",
-  "engineVersion": "5.3.25",
-  "buildId": "1-5.3.25-aarch64-apple-darwin",
+  "cliVersion": "5.3.27",
+  "engineVersion": "5.3.27",
+  "buildId": "1-5.3.27-aarch64-apple-darwin",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -17,15 +17,15 @@
   "platform": "darwin",
   "arch": "arm64",
   "libc": null,
-  "artifactSha256": "f029e4a206f892b1ae565ef2acc29db91fe532fc2ec1c1965b7abf705471d192",
+  "artifactSha256": "3944cdece78490684988774e3080412e52305165f34bec47d3b3793e4876f16d",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.darwin-arm64.node.sbom.json",
-    "sha256": "3e89bd16fa165d93341924d260832fd48754b9e3a5827507adc5377cdcc76026"
+    "sha256": "dfcb582019b086c81718b5099866e3d099fdfb26d1d768fdc4b6ccdee0e61e6d"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "d93395c02e0224530b5e52ffd7ec3a64ec462296",
+    "sourceCommit": "79788c0b8d9bfbc05294316f3546693af74482ab",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -34,6 +34,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "C/IAeXfh4rVpzrLOYmcbO6TRbZBAXAf7UxAw/HWAPV1BY5xpH2bP9dGNcYkTu4HkWeFhLz+ePFeMzdGbDvaQDg=="
+    "value": "YcxPQGO0lonpNPFA4QOaIliyLhn8uSXBgEYi8ebd6RokgmoKc+XSPdga7ZMkx5N7jiPJXAX8Hs6VtTs0SP3qAA=="
   }
 }

package/dist/engine/planu-core.darwin-arm64.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.3.25",
+      "bom-ref": "pkg:cargo/planu-core@5.3.27",
       "type": "library",
       "name": "planu-core",
-      "version": "5.3.25",
+      "version": "5.3.27",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "f029e4a206f892b1ae565ef2acc29db91fe532fc2ec1c1965b7abf705471d192"
+          "content": "3944cdece78490684988774e3080412e52305165f34bec47d3b3793e4876f16d"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.3.25",
+      "ref": "pkg:cargo/planu-core@5.3.27",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/planu-core.darwin-x64.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.3.25",
-  "engineVersion": "5.3.25",
-  "buildId": "1-5.3.25-x86_64-apple-darwin",
+  "cliVersion": "5.3.27",
+  "engineVersion": "5.3.27",
+  "buildId": "1-5.3.27-x86_64-apple-darwin",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -17,15 +17,15 @@
   "platform": "darwin",
   "arch": "x64",
   "libc": null,
-  "artifactSha256": "74de1ccd509b59583491f317bacdd465244cd04e057113e8c221538b7cf6e212",
+  "artifactSha256": "bad5403aa1169630e7f34c73a202ee9419e845e7aedc1833f3c10ce9e316d019",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.darwin-x64.node.sbom.json",
-    "sha256": "d9878d394147e21656556756b3c0bd6a4a4bf7384af2563cd5876b2edff6c702"
+    "sha256": "9bd682d7d30035b52bd89a7ca52f6a2e72997bac78162a42a548db36d95f0402"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "d93395c02e0224530b5e52ffd7ec3a64ec462296",
+    "sourceCommit": "79788c0b8d9bfbc05294316f3546693af74482ab",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -34,6 +34,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "rnR72pEzRclpCkRqsxQmEKwC4OSaIQXLwUNq8n1IGqWSdZK3hw19Qd8upadJOjylbjUcTlDCQoNUWj3w/dY1BA=="
+    "value": "Ief0G5GcpRr5dx8XXAvuBSoSypSj/OaTvm5LKMjXePMorS3UbOxNUNAVTwmK50xU3wNAXAEjQBItrH3takLLBg=="
   }
 }

package/dist/engine/planu-core.darwin-x64.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.3.25",
+      "bom-ref": "pkg:cargo/planu-core@5.3.27",
       "type": "library",
       "name": "planu-core",
-      "version": "5.3.25",
+      "version": "5.3.27",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "74de1ccd509b59583491f317bacdd465244cd04e057113e8c221538b7cf6e212"
+          "content": "bad5403aa1169630e7f34c73a202ee9419e845e7aedc1833f3c10ce9e316d019"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.3.25",
+      "ref": "pkg:cargo/planu-core@5.3.27",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/planu-core.linux-arm64-gnu.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.3.25",
-  "engineVersion": "5.3.25",
-  "buildId": "1-5.3.25-aarch64-unknown-linux-gnu",
+  "cliVersion": "5.3.27",
+  "engineVersion": "5.3.27",
+  "buildId": "1-5.3.27-aarch64-unknown-linux-gnu",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -16,15 +16,15 @@
   "platform": "linux",
   "arch": "arm64",
   "libc": "glibc",
-  "artifactSha256": "3298a15365c6fcf78ff4f17273cefee80705f62d66297b5bf1e45e9e77941541",
+  "artifactSha256": "5c95d0f8cc4c1206d0540582bba0c6d8dddb46dd7777f197e55bfa86a605b18f",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.linux-arm64-gnu.node.sbom.json",
-    "sha256": "fe88f4bd3c03fdb6b2f5dcecab575bcdca01f2700e38bbf4b063a5c148eb9c69"
+    "sha256": "35767b4792c75c124fba6f443ab2829a592b783fc7e9768ae7bd7acd22d338c1"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "d93395c02e0224530b5e52ffd7ec3a64ec462296",
+    "sourceCommit": "79788c0b8d9bfbc05294316f3546693af74482ab",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -33,6 +33,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "rFZl0EaJjzy23IhkX8bq/yKJfWYjWEkKRE4yS6IQ2xlpCT16K7iGyM1y0r4RMor8sU9K5gHyxSSYGB0MmcRsBg=="
+    "value": "aR4GV3GZ5PuubrvY3jLlMuTbSNarWsqsl3Z0uLyMfMBedf4RkHwgAc5H/qSRJl1qc/IR2ewNo//1VVwaW821DQ=="
   }
 }

package/dist/engine/planu-core.linux-arm64-gnu.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.3.25",
+      "bom-ref": "pkg:cargo/planu-core@5.3.27",
       "type": "library",
       "name": "planu-core",
-      "version": "5.3.25",
+      "version": "5.3.27",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "3298a15365c6fcf78ff4f17273cefee80705f62d66297b5bf1e45e9e77941541"
+          "content": "5c95d0f8cc4c1206d0540582bba0c6d8dddb46dd7777f197e55bfa86a605b18f"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.3.25",
+      "ref": "pkg:cargo/planu-core@5.3.27",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/planu-core.linux-arm64-musl.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.3.25",
-  "engineVersion": "5.3.25",
-  "buildId": "1-5.3.25-aarch64-unknown-linux-musl",
+  "cliVersion": "5.3.27",
+  "engineVersion": "5.3.27",
+  "buildId": "1-5.3.27-aarch64-unknown-linux-musl",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -16,15 +16,15 @@
   "platform": "linux",
   "arch": "arm64",
   "libc": "musl",
-  "artifactSha256": "d6a25cf24a69de3409c46a2ae0c8f46a27e5906fb256371d3746bf56649048f4",
+  "artifactSha256": "403cda11d886b0e61105413cc6b52b5c75132a36c7e3bd9696ffac7ecfaa8c38",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.linux-arm64-musl.node.sbom.json",
-    "sha256": "0e9cf4b53eeed5bf166ff88982155d90f6b766e6ab288d91a369e844a404a383"
+    "sha256": "fdd8d79891f8f1d52941dc4695e3357eaf14c2839fe9029ea0eaac8bed70dea3"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "d93395c02e0224530b5e52ffd7ec3a64ec462296",
+    "sourceCommit": "79788c0b8d9bfbc05294316f3546693af74482ab",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -33,6 +33,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "MxlAtNKM78NgLWko4gNIASnqSrnFlqL03jxXpJkJoR7bh9kD7E2SzvIZeYkPrqFweKTvyyqLQlz3RCT4325+BA=="
+    "value": "+JcZN2BHlWWb2q5cjOnbxJR/TlGmiDrDQJOWy+lpi2cugScY7RvNqUlaYcDKR/yyuA+NbUqRaSzC3aZT4IsKDQ=="
   }
 }

package/dist/engine/planu-core.linux-arm64-musl.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.3.25",
+      "bom-ref": "pkg:cargo/planu-core@5.3.27",
       "type": "library",
       "name": "planu-core",
-      "version": "5.3.25",
+      "version": "5.3.27",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "d6a25cf24a69de3409c46a2ae0c8f46a27e5906fb256371d3746bf56649048f4"
+          "content": "403cda11d886b0e61105413cc6b52b5c75132a36c7e3bd9696ffac7ecfaa8c38"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.3.25",
+      "ref": "pkg:cargo/planu-core@5.3.27",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/planu-core.linux-x64-gnu.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.3.25",
-  "engineVersion": "5.3.25",
-  "buildId": "1-5.3.25-x86_64-unknown-linux-gnu",
+  "cliVersion": "5.3.27",
+  "engineVersion": "5.3.27",
+  "buildId": "1-5.3.27-x86_64-unknown-linux-gnu",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -16,15 +16,15 @@
   "platform": "linux",
   "arch": "x64",
   "libc": "glibc",
-  "artifactSha256": "1d4bf6073483ae43635ac9815f566e323f03024d6156a5d6103df55933072caa",
+  "artifactSha256": "5589735f4b9fd914dd2caeb85451cb43e044aabd21fbf576b7848ca5307dca97",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.linux-x64-gnu.node.sbom.json",
-    "sha256": "b75911513d1837537c9913d9eaadfb6e3664709847e09e9850f05d24a9e17f96"
+    "sha256": "5ff8867f8dc53d4ba510e8a1ddd93737dd8ad8aa5d0bcb14a99e881637c375b7"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "d93395c02e0224530b5e52ffd7ec3a64ec462296",
+    "sourceCommit": "79788c0b8d9bfbc05294316f3546693af74482ab",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -33,6 +33,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "WzDGhTD3hlmreR0zaduJm5RHfqPVzQIjm4Y8X8XHaW9UpVirVllhvrg9A0wrL1Uiw+wrkqeAQAYdNcDcTmQBAg=="
+    "value": "344JYOjoTT7KOMOf+hHJibJndPiOyB3kVhEVf/OgRvyS0itLL3j4R/EFytlfqJsKfGU18TBs0TBgGhE02MedCg=="
   }
 }

package/dist/engine/planu-core.linux-x64-gnu.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.3.25",
+      "bom-ref": "pkg:cargo/planu-core@5.3.27",
       "type": "library",
       "name": "planu-core",
-      "version": "5.3.25",
+      "version": "5.3.27",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "1d4bf6073483ae43635ac9815f566e323f03024d6156a5d6103df55933072caa"
+          "content": "5589735f4b9fd914dd2caeb85451cb43e044aabd21fbf576b7848ca5307dca97"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.3.25",
+      "ref": "pkg:cargo/planu-core@5.3.27",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/planu-core.linux-x64-musl.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.3.25",
-  "engineVersion": "5.3.25",
-  "buildId": "1-5.3.25-x86_64-unknown-linux-musl",
+  "cliVersion": "5.3.27",
+  "engineVersion": "5.3.27",
+  "buildId": "1-5.3.27-x86_64-unknown-linux-musl",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -16,15 +16,15 @@
   "platform": "linux",
   "arch": "x64",
   "libc": "musl",
-  "artifactSha256": "e514123ce0f9194810a7735351dc4b07fa0247012e6409bc28e88f8cad001e8d",
+  "artifactSha256": "714caf18004f9bacf3a9c343a13799b1d348a74b8d37e03fa6cf9a7589fc9cd7",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.linux-x64-musl.node.sbom.json",
-    "sha256": "b65fef60c2d7d93b54f6754185131fdf7983be8138c6553022b5871d926326df"
+    "sha256": "bbb4d91ec1bb637a3e29e2b8b0d16248a33bdfb65050b932f7b3aacee5ecfbe2"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "d93395c02e0224530b5e52ffd7ec3a64ec462296",
+    "sourceCommit": "79788c0b8d9bfbc05294316f3546693af74482ab",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -33,6 +33,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "17L3oFyUCuAlRbQXvbmDqLUlAn01r3qpiy/1/yIcmzsM2cncFpMICDRNV9PUmP6ohFWagoLdv2dQdW4yNjN7Bg=="
+    "value": "nKxw4OqHVfIUJsWGwFZo7yi5AVBpl5Fxgn1isO5nXRTFsvrQIGZ349nnmv7GBRqlOatcBhlicO3ApL629AKbBA=="
   }
 }

package/dist/engine/planu-core.linux-x64-musl.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.3.25",
+      "bom-ref": "pkg:cargo/planu-core@5.3.27",
       "type": "library",
       "name": "planu-core",
-      "version": "5.3.25",
+      "version": "5.3.27",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "e514123ce0f9194810a7735351dc4b07fa0247012e6409bc28e88f8cad001e8d"
+          "content": "714caf18004f9bacf3a9c343a13799b1d348a74b8d37e03fa6cf9a7589fc9cd7"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.3.25",
+      "ref": "pkg:cargo/planu-core@5.3.27",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",