@planu/cli 5.3.26 → 5.3.27

package/CHANGELOG.md

@@ -1,3 +1,13 @@
+## [5.3.27] - 2026-08-19
+
+### Bug Fixes
+- fix(spec-1575): require clause to assert forbidden action for outOfScope contradiction
+- fix(spec-1539): require real independent implementation-review before done
+
+### Chores
+- chore(spec-1539-1575): close done ceremonies, reconcile specs, file SPEC-1576
+
+
 ## [5.3.26] - 2026-08-19
 
 ### Bug Fixes

package/dist/engine/handoff-artifacts/io.js

@@ -32,6 +32,7 @@ function eventTypeForKind(kind) {
         review_feedback: 'handoff.review_feedback',
         'implementation-report': 'handoff.implementation-report',
         'validation-report': 'handoff.validation-report',
+        implementation_review: 'handoff.implementation_review',
     };
     return map[kind];
 }

package/dist/engine/handoff-artifacts/schemas.d.ts

@@ -53,6 +53,29 @@ export declare const ReviewFeedbackV1Schema: z.ZodObject<{
     body: z.ZodString;
     reviewedAt: z.ZodISODateTime;
 }, z.core.$strip>;
+export declare const ImplementationReviewV1Schema: z.ZodObject<{
+    schema_version: z.ZodString;
+    specId: z.ZodString;
+    verdict: z.ZodEnum<{
+        approved: "approved";
+        "changes-requested": "changes-requested";
+    }>;
+    reviewer: z.ZodObject<{
+        kind: z.ZodEnum<{
+            human: "human";
+            "implementation-review-agent": "implementation-review-agent";
+        }>;
+        agent: z.ZodString;
+        verdict: z.ZodEnum<{
+            approved: "approved";
+            "changes-requested": "changes-requested";
+        }>;
+    }, z.core.$strip>;
+    blockers: z.ZodArray<z.ZodString>;
+    suggestions: z.ZodArray<z.ZodString>;
+    body: z.ZodString;
+    reviewedAt: z.ZodISODateTime;
+}, z.core.$strip>;
 export declare const ImplementationReportV1Schema: z.ZodObject<{
     schema_version: z.ZodString;
     specId: z.ZodString;
@@ -314,6 +337,29 @@ export declare const ARTIFACT_SCHEMAS: {
         score: z.ZodOptional<z.ZodNumber>;
         completedAt: z.ZodISODateTime;
     }, z.core.$strip>;
+    readonly implementation_review: z.ZodObject<{
+        schema_version: z.ZodString;
+        specId: z.ZodString;
+        verdict: z.ZodEnum<{
+            approved: "approved";
+            "changes-requested": "changes-requested";
+        }>;
+        reviewer: z.ZodObject<{
+            kind: z.ZodEnum<{
+                human: "human";
+                "implementation-review-agent": "implementation-review-agent";
+            }>;
+            agent: z.ZodString;
+            verdict: z.ZodEnum<{
+                approved: "approved";
+                "changes-requested": "changes-requested";
+            }>;
+        }, z.core.$strip>;
+        blockers: z.ZodArray<z.ZodString>;
+        suggestions: z.ZodArray<z.ZodString>;
+        body: z.ZodString;
+        reviewedAt: z.ZodISODateTime;
+    }, z.core.$strip>;
 };
 /**
  * Validate a payload against the schema for the given artifact kind.

package/dist/engine/handoff-artifacts/schemas.js

@@ -39,6 +39,20 @@ export const ReviewFeedbackV1Schema = z.object({
     body: z.string(),
     reviewedAt: z.iso.datetime(),
 });
+export const ImplementationReviewV1Schema = z.object({
+    schema_version: SchemaVersion,
+    specId: z.string(),
+    verdict: z.enum(['approved', 'changes-requested']),
+    reviewer: z.object({
+        kind: z.enum(['implementation-review-agent', 'human']),
+        agent: z.string().min(1),
+        verdict: z.enum(['approved', 'changes-requested']),
+    }),
+    blockers: z.array(z.string()),
+    suggestions: z.array(z.string()),
+    body: z.string(),
+    reviewedAt: z.iso.datetime(),
+});
 export const ImplementationReportV1Schema = z.object({
     schema_version: SchemaVersion,
     specId: z.string(),
@@ -163,6 +177,7 @@ export const ARTIFACT_SCHEMAS = {
     review_feedback: ReviewFeedbackV1Schema,
     'implementation-report': ImplementationReportV1Schema,
     'validation-report': ValidationReportV1Schema,
+    implementation_review: ImplementationReviewV1Schema,
 };
 // ---------------------------------------------------------------------------
 // Validate function

package/dist/engine/lifecycle-reconciliation.js

@@ -4,6 +4,7 @@ import { join } from 'node:path';
 import { projectDataDir } from '../storage/base-store.js';
 import { specStore } from '../storage/index.js';
 import { ValidationReportV1Schema } from './handoff-artifacts/schemas.js';
+import { AUTOMATED_VALIDATOR_AGENT } from './validator/validation-report-writer.js';
 import { rollbackTransitionSpec, transitionSpec, } from './spec-state-machine/transition-spec.js';
 import { acquireLock, releaseLock } from './safety/cross-process-lock.js';
 import { appendTransitionEvent, readTransitionLog } from '../storage/transition-log.js';
@@ -144,10 +145,10 @@ async function validateRequest(args) {
     const report = ValidationReportV1Schema.safeParse(JSON.parse(reportBytes.toString('utf8')));
     if (!report.success ||
         report.data.passed ||
-        report.data.reviewer.kind !== 'implementation-review-agent' ||
-        report.data.reviewer.agent !== 'planu-implementation-reviewer' ||
+        report.data.reviewer.kind !== 'automation' ||
+        report.data.reviewer.agent !== AUTOMATED_VALIDATOR_AGENT ||
         report.data.reviewer.verdict !== 'changes-requested') {
-        return failure('validation report is not an independent changes-requested finding');
+        return failure('validation report is not an automated changes-requested finding');
     }
     const reviewDigest = digest(reportBytes);
     if (reviewDigest !== input.implementationReviewDigest) {
@@ -197,8 +198,8 @@ async function validateStoredBinding(args) {
         const report = ValidationReportV1Schema.safeParse(JSON.parse(reportBytes.toString('utf8')));
         if (!report.success ||
             report.data.passed ||
-            report.data.reviewer.kind !== 'implementation-review-agent' ||
-            report.data.reviewer.agent !== 'planu-implementation-reviewer' ||
+            report.data.reviewer.kind !== 'automation' ||
+            report.data.reviewer.agent !== AUTOMATED_VALIDATOR_AGENT ||
             report.data.reviewer.verdict !== 'changes-requested' ||
             digest(reportBytes) !== args.receipt.implementationReviewDigest) {
             return failure('implementation review no longer matches the durable receipt', 'RECONCILIATION_BINDING_CONFLICT');

package/dist/engine/planu-core.darwin-arm64.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.3.26",
-  "engineVersion": "5.3.26",
-  "buildId": "1-5.3.26-aarch64-apple-darwin",
+  "cliVersion": "5.3.27",
+  "engineVersion": "5.3.27",
+  "buildId": "1-5.3.27-aarch64-apple-darwin",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -17,15 +17,15 @@
   "platform": "darwin",
   "arch": "arm64",
   "libc": null,
-  "artifactSha256": "b2d852dc52754af4bb30c62703566f1904ef5d36905a500ee93dd659d2a5e1e2",
+  "artifactSha256": "3944cdece78490684988774e3080412e52305165f34bec47d3b3793e4876f16d",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.darwin-arm64.node.sbom.json",
-    "sha256": "f40d46dc1cafb9791a5abb6b22715025ed1a46ebbece82949b770e92009a33d0"
+    "sha256": "dfcb582019b086c81718b5099866e3d099fdfb26d1d768fdc4b6ccdee0e61e6d"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "2419aedc35345da335c3469eaf80b19f428fd53b",
+    "sourceCommit": "79788c0b8d9bfbc05294316f3546693af74482ab",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -34,6 +34,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "chGhyQXfG6qVz8U+TCAugdrFAW9pvbketCjVF0BESmKZlIMKyzq15V3r8QSuBOGqCs3OtuORM0R6VRJEreHlAA=="
+    "value": "YcxPQGO0lonpNPFA4QOaIliyLhn8uSXBgEYi8ebd6RokgmoKc+XSPdga7ZMkx5N7jiPJXAX8Hs6VtTs0SP3qAA=="
   }
 }

package/dist/engine/planu-core.darwin-arm64.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.3.26",
+      "bom-ref": "pkg:cargo/planu-core@5.3.27",
       "type": "library",
       "name": "planu-core",
-      "version": "5.3.26",
+      "version": "5.3.27",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "b2d852dc52754af4bb30c62703566f1904ef5d36905a500ee93dd659d2a5e1e2"
+          "content": "3944cdece78490684988774e3080412e52305165f34bec47d3b3793e4876f16d"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.3.26",
+      "ref": "pkg:cargo/planu-core@5.3.27",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/planu-core.darwin-x64.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.3.26",
-  "engineVersion": "5.3.26",
-  "buildId": "1-5.3.26-x86_64-apple-darwin",
+  "cliVersion": "5.3.27",
+  "engineVersion": "5.3.27",
+  "buildId": "1-5.3.27-x86_64-apple-darwin",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -17,15 +17,15 @@
   "platform": "darwin",
   "arch": "x64",
   "libc": null,
-  "artifactSha256": "6a08bbe0d147a81c8f9094651912b89f2a7bbd9d4ab09e8f713db3493469ba68",
+  "artifactSha256": "bad5403aa1169630e7f34c73a202ee9419e845e7aedc1833f3c10ce9e316d019",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.darwin-x64.node.sbom.json",
-    "sha256": "2aa4b1f6dfe3be29bfafa818692dd08f629763eb02b7f0119a0ba828c5de11d8"
+    "sha256": "9bd682d7d30035b52bd89a7ca52f6a2e72997bac78162a42a548db36d95f0402"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "2419aedc35345da335c3469eaf80b19f428fd53b",
+    "sourceCommit": "79788c0b8d9bfbc05294316f3546693af74482ab",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -34,6 +34,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "gVWSBJ6t5K9Jl6iC3VDEqApdsZXpGKK/+Qv75Ijp6JinDPZvqO8ESVeO4RonNELQljv5r0DFgvR+5Z+IfsNxAg=="
+    "value": "Ief0G5GcpRr5dx8XXAvuBSoSypSj/OaTvm5LKMjXePMorS3UbOxNUNAVTwmK50xU3wNAXAEjQBItrH3takLLBg=="
   }
 }

package/dist/engine/planu-core.darwin-x64.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.3.26",
+      "bom-ref": "pkg:cargo/planu-core@5.3.27",
       "type": "library",
       "name": "planu-core",
-      "version": "5.3.26",
+      "version": "5.3.27",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "6a08bbe0d147a81c8f9094651912b89f2a7bbd9d4ab09e8f713db3493469ba68"
+          "content": "bad5403aa1169630e7f34c73a202ee9419e845e7aedc1833f3c10ce9e316d019"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.3.26",
+      "ref": "pkg:cargo/planu-core@5.3.27",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/planu-core.linux-arm64-gnu.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.3.26",
-  "engineVersion": "5.3.26",
-  "buildId": "1-5.3.26-aarch64-unknown-linux-gnu",
+  "cliVersion": "5.3.27",
+  "engineVersion": "5.3.27",
+  "buildId": "1-5.3.27-aarch64-unknown-linux-gnu",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -16,15 +16,15 @@
   "platform": "linux",
   "arch": "arm64",
   "libc": "glibc",
-  "artifactSha256": "1d9dfeccdff69d18bbddbd0824dca6742c4a3ecd9e66b52cace270eddb900444",
+  "artifactSha256": "5c95d0f8cc4c1206d0540582bba0c6d8dddb46dd7777f197e55bfa86a605b18f",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.linux-arm64-gnu.node.sbom.json",
-    "sha256": "9b9271f9439cc9be0737167da1453b37dd2607891da718aa4dd355edf57286fe"
+    "sha256": "35767b4792c75c124fba6f443ab2829a592b783fc7e9768ae7bd7acd22d338c1"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "2419aedc35345da335c3469eaf80b19f428fd53b",
+    "sourceCommit": "79788c0b8d9bfbc05294316f3546693af74482ab",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -33,6 +33,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "bo+EsDcaAkbFJiPyt3Fdenl+cKnPfTysWT7PfJKVAxYpdyWFv9prn7G7Hb8LwVjgsUulNv/v7+Uwx+R0O9ywBw=="
+    "value": "aR4GV3GZ5PuubrvY3jLlMuTbSNarWsqsl3Z0uLyMfMBedf4RkHwgAc5H/qSRJl1qc/IR2ewNo//1VVwaW821DQ=="
   }
 }

package/dist/engine/planu-core.linux-arm64-gnu.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.3.26",
+      "bom-ref": "pkg:cargo/planu-core@5.3.27",
       "type": "library",
       "name": "planu-core",
-      "version": "5.3.26",
+      "version": "5.3.27",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "1d9dfeccdff69d18bbddbd0824dca6742c4a3ecd9e66b52cace270eddb900444"
+          "content": "5c95d0f8cc4c1206d0540582bba0c6d8dddb46dd7777f197e55bfa86a605b18f"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.3.26",
+      "ref": "pkg:cargo/planu-core@5.3.27",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/planu-core.linux-arm64-musl.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.3.26",
-  "engineVersion": "5.3.26",
-  "buildId": "1-5.3.26-aarch64-unknown-linux-musl",
+  "cliVersion": "5.3.27",
+  "engineVersion": "5.3.27",
+  "buildId": "1-5.3.27-aarch64-unknown-linux-musl",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -16,15 +16,15 @@
   "platform": "linux",
   "arch": "arm64",
   "libc": "musl",
-  "artifactSha256": "998d8d6076161d998a11a57c2c06f291e4f73caa638bd530c6391926456c9e88",
+  "artifactSha256": "403cda11d886b0e61105413cc6b52b5c75132a36c7e3bd9696ffac7ecfaa8c38",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.linux-arm64-musl.node.sbom.json",
-    "sha256": "1d0bc13dc8e4c207ae2a6eb857b1be214cce702f2be06b1538078e54a2285f8d"
+    "sha256": "fdd8d79891f8f1d52941dc4695e3357eaf14c2839fe9029ea0eaac8bed70dea3"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "2419aedc35345da335c3469eaf80b19f428fd53b",
+    "sourceCommit": "79788c0b8d9bfbc05294316f3546693af74482ab",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -33,6 +33,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "E3FUnw4F0Mo18fXF12PdntrhwZ5PpG3jrUnwRIo+xL62Ij5XDe0CiF8n9cSBALGLSUCeytaeYPWYsPjq5DO3CQ=="
+    "value": "+JcZN2BHlWWb2q5cjOnbxJR/TlGmiDrDQJOWy+lpi2cugScY7RvNqUlaYcDKR/yyuA+NbUqRaSzC3aZT4IsKDQ=="
   }
 }

package/dist/engine/planu-core.linux-arm64-musl.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.3.26",
+      "bom-ref": "pkg:cargo/planu-core@5.3.27",
       "type": "library",
       "name": "planu-core",
-      "version": "5.3.26",
+      "version": "5.3.27",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "998d8d6076161d998a11a57c2c06f291e4f73caa638bd530c6391926456c9e88"
+          "content": "403cda11d886b0e61105413cc6b52b5c75132a36c7e3bd9696ffac7ecfaa8c38"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.3.26",
+      "ref": "pkg:cargo/planu-core@5.3.27",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/planu-core.linux-x64-gnu.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.3.26",
-  "engineVersion": "5.3.26",
-  "buildId": "1-5.3.26-x86_64-unknown-linux-gnu",
+  "cliVersion": "5.3.27",
+  "engineVersion": "5.3.27",
+  "buildId": "1-5.3.27-x86_64-unknown-linux-gnu",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -16,15 +16,15 @@
   "platform": "linux",
   "arch": "x64",
   "libc": "glibc",
-  "artifactSha256": "82aad07391992062c26f860f5ef9beab126048cae4c56c1c3eb097c7edad674d",
+  "artifactSha256": "5589735f4b9fd914dd2caeb85451cb43e044aabd21fbf576b7848ca5307dca97",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.linux-x64-gnu.node.sbom.json",
-    "sha256": "2e5cd34fb3b8e6bf81f6da6c09a7a777f274ee7c6a55696d7541622383e250e1"
+    "sha256": "5ff8867f8dc53d4ba510e8a1ddd93737dd8ad8aa5d0bcb14a99e881637c375b7"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "2419aedc35345da335c3469eaf80b19f428fd53b",
+    "sourceCommit": "79788c0b8d9bfbc05294316f3546693af74482ab",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -33,6 +33,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "di+vGzqgsPMmHH/6UFcIElY003sMfb/Q/MduHuxY06aY6JT82QNuLNx1mkV3+MYhJhynyMsaBxt7Vin/FTPUBA=="
+    "value": "344JYOjoTT7KOMOf+hHJibJndPiOyB3kVhEVf/OgRvyS0itLL3j4R/EFytlfqJsKfGU18TBs0TBgGhE02MedCg=="
   }
 }

package/dist/engine/planu-core.linux-x64-gnu.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.3.26",
+      "bom-ref": "pkg:cargo/planu-core@5.3.27",
       "type": "library",
       "name": "planu-core",
-      "version": "5.3.26",
+      "version": "5.3.27",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "82aad07391992062c26f860f5ef9beab126048cae4c56c1c3eb097c7edad674d"
+          "content": "5589735f4b9fd914dd2caeb85451cb43e044aabd21fbf576b7848ca5307dca97"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.3.26",
+      "ref": "pkg:cargo/planu-core@5.3.27",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/planu-core.linux-x64-musl.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.3.26",
-  "engineVersion": "5.3.26",
-  "buildId": "1-5.3.26-x86_64-unknown-linux-musl",
+  "cliVersion": "5.3.27",
+  "engineVersion": "5.3.27",
+  "buildId": "1-5.3.27-x86_64-unknown-linux-musl",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -16,15 +16,15 @@
   "platform": "linux",
   "arch": "x64",
   "libc": "musl",
-  "artifactSha256": "91d71782f92e585b90444463370ec9d600b25a52a1d892b903676d4c8fddd2ad",
+  "artifactSha256": "714caf18004f9bacf3a9c343a13799b1d348a74b8d37e03fa6cf9a7589fc9cd7",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.linux-x64-musl.node.sbom.json",
-    "sha256": "5fa1e3aed4b54c4fef050d7a541c2bbbed4ffec3fc21667818df15572087e7a4"
+    "sha256": "bbb4d91ec1bb637a3e29e2b8b0d16248a33bdfb65050b932f7b3aacee5ecfbe2"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "2419aedc35345da335c3469eaf80b19f428fd53b",
+    "sourceCommit": "79788c0b8d9bfbc05294316f3546693af74482ab",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -33,6 +33,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "N+t5MBnx7wr/JyNeJ+8887ZHguXLM9IgP8UT+p5CqZsooNBCHKXErn9vUyRWNHdR8bJ0zqVIOnWMq44Lmh/PDw=="
+    "value": "nKxw4OqHVfIUJsWGwFZo7yi5AVBpl5Fxgn1isO5nXRTFsvrQIGZ349nnmv7GBRqlOatcBhlicO3ApL629AKbBA=="
   }
 }

package/dist/engine/planu-core.linux-x64-musl.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.3.26",
+      "bom-ref": "pkg:cargo/planu-core@5.3.27",
       "type": "library",
       "name": "planu-core",
-      "version": "5.3.26",
+      "version": "5.3.27",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "91d71782f92e585b90444463370ec9d600b25a52a1d892b903676d4c8fddd2ad"
+          "content": "714caf18004f9bacf3a9c343a13799b1d348a74b8d37e03fa6cf9a7589fc9cd7"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.3.26",
+      "ref": "pkg:cargo/planu-core@5.3.27",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/planu-core.win32-arm64-msvc.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.3.26",
-  "engineVersion": "5.3.26",
-  "buildId": "1-5.3.26-aarch64-pc-windows-msvc",
+  "cliVersion": "5.3.27",
+  "engineVersion": "5.3.27",
+  "buildId": "1-5.3.27-aarch64-pc-windows-msvc",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -16,15 +16,15 @@
   "platform": "win32",
   "arch": "arm64",
   "libc": null,
-  "artifactSha256": "42242fb16dcedcff4ccdc5a8d359279ba985a916eab84e803b98d1840cc2a59e",
+  "artifactSha256": "b847ff92831078fb9d108cbf191eb39307c49a25d404da070db732dded3fc894",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.win32-arm64-msvc.node.sbom.json",
-    "sha256": "cbdd51f8b9ff70711b39912839dc7d03b1670056ab8909aa46d2b90ad5e25cbb"
+    "sha256": "eea89ce4eb73df92230c4507c0a182332df56d16e8a32e5409f34a95a7a7f05f"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "2419aedc35345da335c3469eaf80b19f428fd53b",
+    "sourceCommit": "79788c0b8d9bfbc05294316f3546693af74482ab",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -33,6 +33,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "lYI+Oujs1RPS2A9qzkJC5Jf2ISaSxjMJkXH44GgpLJfNXsvSYTBFx6lq+gpzo2R0tiUvF7JSWG4+WfI2I5KYCg=="
+    "value": "7TTGhX99A+J+lpXk1+fUcDLgxki0Vmnp9nVkfJkEKS0cgGGLAVAnHAEF0uawZjywCJF1MaYSMn6jEmUUqVTJCg=="
   }
 }

package/dist/engine/planu-core.win32-arm64-msvc.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.3.26",
+      "bom-ref": "pkg:cargo/planu-core@5.3.27",
       "type": "library",
       "name": "planu-core",
-      "version": "5.3.26",
+      "version": "5.3.27",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "42242fb16dcedcff4ccdc5a8d359279ba985a916eab84e803b98d1840cc2a59e"
+          "content": "b847ff92831078fb9d108cbf191eb39307c49a25d404da070db732dded3fc894"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.3.26",
+      "ref": "pkg:cargo/planu-core@5.3.27",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/planu-core.win32-x64-msvc.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.3.26",
-  "engineVersion": "5.3.26",
-  "buildId": "1-5.3.26-x86_64-pc-windows-msvc",
+  "cliVersion": "5.3.27",
+  "engineVersion": "5.3.27",
+  "buildId": "1-5.3.27-x86_64-pc-windows-msvc",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -16,15 +16,15 @@
   "platform": "win32",
   "arch": "x64",
   "libc": null,
-  "artifactSha256": "a83417f73e4210940eef71c672d093af314be694ac60b961be41cf126f16ab8b",
+  "artifactSha256": "557925ec6e5f7f32feb1bb42683e058e974b20032ff19a0807a3c57059af748d",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.win32-x64-msvc.node.sbom.json",
-    "sha256": "a7eb5568757d44ba58a01b986573da423b7caa512d122e0de42fbe4f8a6d23c6"
+    "sha256": "e61c9fd311db17fcac42bec3d7fa6ab61bf2c7082ac80196bfb6b9ba54977fda"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "2419aedc35345da335c3469eaf80b19f428fd53b",
+    "sourceCommit": "79788c0b8d9bfbc05294316f3546693af74482ab",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -33,6 +33,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "cOjoj33opvadNE+ow9eezowf1I8vVGssK+KioLL5P2HfMP6UmwG0MVJNCpGj4h6JMF+qnu4/k7WMEVHmEcSgAA=="
+    "value": "O3ZXl5L6qzts4ZRg9WDNIHioY1qH1I/yx9V/aMi0Bb5/Ct3hq+eMS+8njmwY5p9qbhGzQq2yYf4DwJ3vbWH8DQ=="
   }
 }

package/dist/engine/planu-core.win32-x64-msvc.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.3.26",
+      "bom-ref": "pkg:cargo/planu-core@5.3.27",
       "type": "library",
       "name": "planu-core",
-      "version": "5.3.26",
+      "version": "5.3.27",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "a83417f73e4210940eef71c672d093af314be694ac60b961be41cf126f16ab8b"
+          "content": "557925ec6e5f7f32feb1bb42683e058e974b20032ff19a0807a3c57059af748d"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.3.26",
+      "ref": "pkg:cargo/planu-core@5.3.27",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/scope-boundaries/contradiction-checker.js

@@ -66,7 +66,7 @@ function splitClauses(text) {
         .map((clause) => clause.trim())
         .filter(Boolean);
 }
-const AFFIRMATIVE_ACTION_VERBS = /\b(?:changes?|modif(?:y|ies)|alters?|adds?|introduces?|implements?|enables?|exposes?|exposed|mutat(?:e|es|ing))\b/;
+const AFFIRMATIVE_ACTION_VERBS = /\b(?:build(?:s|ing)?|chang(?:e|es|ing)|modif(?:y|ies|ying)|alter(?:s|ing)?|add(?:s|ing)?|introduc(?:e|es|ing)|implement(?:s|ing)?|enabl(?:e|es|ing)|expos(?:e|es|ing|ed)|mutat(?:e|es|ing)|rewrit(?:e|es|ing|ten))\b/;
 function assertsForbiddenAction(text) {
     return AFFIRMATIVE_ACTION_VERBS.test(normalize(text));
 }

package/dist/engine/validator/validation-report-writer.d.ts

@@ -1,6 +1,7 @@
 import type { Spec } from '../../types/index.js';
 import type { ValidationReportV1 } from '../../types/handoff-artifacts.js';
 import type { MinimalImplementationReport } from '../../types/minimal-implementation-gate.js';
+export declare const AUTOMATED_VALIDATOR_AGENT = "planu-automated-validator";
 export declare function writeImplementationReviewReport(input: {
     projectId: string;
     specId: string;

package/dist/engine/validator/validation-report-writer.js

@@ -1,5 +1,6 @@
 import { appendArtifact, readArtifact } from '../handoff-artifacts/io.js';
 import { runSpecCompliance, } from './spec-compliance-runner.js';
+export const AUTOMATED_VALIDATOR_AGENT = 'planu-automated-validator';
 export async function writeImplementationReviewReport(input) {
     const specCompliance = await runSpecCompliance(input.spec, input.projectPath, input.signal, input.projectId);
     const reportScore = resolveExecutableValidationScore(input.score, specCompliance);
@@ -13,8 +14,8 @@ export async function writeImplementationReviewReport(input) {
     const mergedGates = await preserveUnobservedGates(input, gates);
     const passed = mergedGates.every((gate) => gate.passed);
     const reviewer = {
-        kind: 'implementation-review-agent',
-        agent: 'planu-implementation-reviewer',
+        kind: 'automation',
+        agent: AUTOMATED_VALIDATOR_AGENT,
         verdict: passed ? 'approved' : 'changes-requested',
     };
     const reportCompliance = toValidationReportCompliance(specCompliance);

package/dist/tools/update-status/dod-gates.d.ts

@@ -107,6 +107,7 @@ export declare function checkValidationReportGate(specId: string, projectId: str
 export declare function readApprovedValidationReportGate(specId: string, projectId: string, force: boolean | undefined): Promise<ValidationReportGateResult>;
 /** SPEC-1051: Approval requires a dedicated spec reviewer artifact. */
 export declare function checkSpecReviewGate(specId: string, projectId: string, _forceApprove: boolean | undefined): Promise<ToolResult | null>;
+export declare function checkImplementationReviewGate(specId: string, projectId: string, _force: boolean | undefined): Promise<ToolResult | null>;
 /**
  * SPEC-335: Combined done-gates runner — DoD + security.
  * When force=true, gates are not blocking but failing items are recorded in

package/dist/tools/update-status/dod-gates.js

@@ -12,11 +12,12 @@ import { addLesson, getLessons } from '../../storage/lessons-store.js';
 import { dispatchFeedbackEvent } from '../learn.js';
 import { auditDeps } from '../../engine/dep-auditor/index.js';
 import { withEscalation } from '../../engine/escalator/with-escalation.js';
-import { writeImplementationReviewReport } from '../../engine/validator/validation-report-writer.js';
+import { AUTOMATED_VALIDATOR_AGENT, writeImplementationReviewReport, } from '../../engine/validator/validation-report-writer.js';
 import { formatKeyValue } from '../output-formatter.js';
 import { reportClassifiedDegradation } from '../../errors/classified-degradation.js';
 import { verifyCurrentDoneReceipt } from './done-receipt-verifier.js';
 import { projectDataDir } from '../../storage/base-store.js';
+import { readTransitionLog } from '../../storage/transition-log.js';
 import { ValidationReportV1Schema } from '../../engine/handoff-artifacts/schemas.js';
 export { completedJobPublishesReceipt } from './done-receipt-verifier.js';
 /**
@@ -447,10 +448,10 @@ async function checkDoneReviewDigest(specId, projectId, implementationReviewDige
         !parsed.data.passed ||
         parsed.data.gates.some((gate) => !gate.passed) ||
         parsed.data.minimalityReport?.blocked === true ||
-        parsed.data.reviewer.kind !== 'implementation-review-agent' ||
-        parsed.data.reviewer.agent !== 'planu-implementation-reviewer' ||
+        parsed.data.reviewer.kind !== 'automation' ||
+        parsed.data.reviewer.agent !== AUTOMATED_VALIDATOR_AGENT ||
         parsed.data.reviewer.verdict !== 'approved') {
-        return doneReviewDigestError(specId, 'DONE_REVIEW_REPORT_UNSAFE', 'The validation report schema or independent reviewer evidence is invalid.');
+        return doneReviewDigestError(specId, 'DONE_REVIEW_REPORT_UNSAFE', 'The validation report schema or automated validator evidence is invalid.');
     }
     return null;
 }
@@ -616,6 +617,116 @@ export async function checkSpecReviewGate(specId, projectId, _forceApprove) {
         });
     }
 }
+export async function checkImplementationReviewGate(specId, projectId, _force) {
+    try {
+        const { readArtifact } = await import('../../engine/handoff-artifacts/io.js');
+        const result = await readArtifact({ projectId, specId, kind: 'implementation_review' });
+        if (!result.ok) {
+            const firstErr = result.errors[0];
+            return implementationReviewGateError({
+                specId,
+                error: firstErr?.code === 'ARTIFACT_NOT_FOUND'
+                    ? 'implementation_review_missing'
+                    : 'implementation_review_invalid',
+                message: firstErr?.code === 'ARTIFACT_NOT_FOUND'
+                    ? 'No implementation review exists for this spec. An independent planu-implementation-reviewer must review the implementation and write its own evidence before done.'
+                    : 'Implementation review evidence is malformed or uses an obsolete schema.',
+                blockers: [],
+                fixHint: firstErr?.code === 'ARTIFACT_NOT_FOUND'
+                    ? 'Have planu-implementation-reviewer write implementation_review.json (ImplementationReviewV1) into the handoff store, then retry update_status(done).'
+                    : 'Have planu-implementation-reviewer rewrite implementation_review.json as valid ImplementationReviewV1 evidence, then retry done.',
+            });
+        }
+        const review = result.payload;
+        if (isLifecycleStubBody(specId, review.body)) {
+            return implementationReviewGateError({
+                specId,
+                error: 'implementation_review_stub',
+                message: 'Implementation review evidence is a lifecycle-generated stub, not evidence from a real reviewer.',
+                blockers: [],
+                fixHint: 'Replace the stub with genuine planu-implementation-reviewer evidence in the handoff store, then retry done.',
+            });
+        }
+        if (review.verdict !== 'approved' || review.reviewer.verdict !== 'approved') {
+            return implementationReviewGateError({
+                specId,
+                error: 'implementation_review_changes_requested',
+                message: 'Implementation reviewer requested changes. Done is blocked until the review passes.',
+                blockers: review.blockers,
+                fixHint: 'Resolve the implementation review blockers and have planu-implementation-reviewer write updated evidence, then retry done.',
+            });
+        }
+        if (review.reviewer.kind !== 'implementation-review-agent' ||
+            review.reviewer.agent !== 'planu-implementation-reviewer') {
+            return implementationReviewGateError({
+                specId,
+                error: 'implementation_review_wrong_reviewer',
+                message: 'Done requires the recognized independent implementation reviewer identity.',
+                blockers: [
+                    `Reviewer was ${review.reviewer.agent}. Expected planu-implementation-reviewer.`,
+                ],
+                fixHint: 'Have planu-implementation-reviewer (with the recognized identity) write the review artifact, then retry done.',
+            });
+        }
+        const implementerActor = await findImplementingActor(specId, projectId);
+        if (implementerActor !== undefined && implementerActor === review.reviewer.agent) {
+            return implementationReviewGateError({
+                specId,
+                error: 'implementation_review_self_review',
+                message: 'The implementation reviewer must be a different identity from the implementer. Self-review is blocked.',
+                blockers: [`Implementer and reviewer share the identity "${implementerActor}".`],
+                fixHint: 'Have a different, independent agent write the implementation review evidence, then retry done.',
+            });
+        }
+        return null;
+    }
+    catch (err) {
+        /* reliability-optional: IMPLEMENTATION_REVIEW_GATE_READ — typed gate error blocks done */
+        reportClassifiedDegradation('IMPLEMENTATION_REVIEW_GATE_READ', err);
+        return implementationReviewGateError({
+            specId,
+            error: 'implementation_review_unreadable',
+            message: `Could not read implementation review evidence: ${err instanceof Error ? err.message : String(err)}`,
+            blockers: [],
+            fixHint: 'Fix the artifact store issue so implementation_review.json is readable, then retry update_status(done).',
+        });
+    }
+}
+async function findImplementingActor(specId, projectId) {
+    const entries = await readTransitionLog(projectId, specId);
+    for (let i = entries.length - 1; i >= 0; i--) {
+        const entry = entries[i];
+        if (entry?.to === 'implementing' && entry.actor) {
+            return entry.actor;
+        }
+    }
+    return undefined;
+}
+function implementationReviewGateError(args) {
+    const artifactPath = `external Planu project data: handoffs/${args.specId}/implementation_review.json`;
+    return {
+        content: [
+            {
+                type: 'text',
+                text: formatKeyValue({
+                    error: args.error,
+                    message: args.message,
+                    artifactPath,
+                    blockers: args.blockers.length,
+                    firstBlocker: args.blockers[0],
+                    fixHint: args.fixHint,
+                }, 'Implementation review gate failed'),
+            },
+        ],
+        isError: true,
+        structuredContent: {
+            error: args.error,
+            code: 422,
+            context: { specId: args.specId, artifactPath, blockers: args.blockers },
+            fixHint: args.fixHint,
+        },
+    };
+}
 function validationReportGateError(args) {
     const artifactPath = `external Planu project data: handoffs/${args.specId}/validation-report.json`;
     return {
@@ -673,6 +784,14 @@ function specReviewGateError(args) {
  */
 export async function checkDoneGates(spec, specId, projectId, projectPath, _force, _forceReason = 'No force reason provided', verifyReceipt = verifyCurrentDoneReceipt, implementationReviewDigest) {
     try {
+        const reviewGateError = await checkImplementationReviewGate(specId, projectId, _force);
+        if (reviewGateError) {
+            return {
+                blocked: reviewGateError,
+                forcedBypassWarning: null,
+                freshnessLease: null,
+            };
+        }
         if (implementationReviewDigest !== undefined) {
             const digestError = await checkDoneReviewDigest(specId, projectId, implementationReviewDigest);
             if (digestError) {

package/dist/types/handoff-artifacts.d.ts

@@ -1,6 +1,6 @@
 import type { Spec } from './spec/core.js';
 /** Artifact kinds produced/consumed by each role transition */
-export type ArtifactKind = 'intake' | 'spec.lock' | 'review_feedback' | 'implementation-report' | 'validation-report';
+export type ArtifactKind = 'intake' | 'spec.lock' | 'review_feedback' | 'implementation-report' | 'validation-report' | 'implementation_review';
 /** Triagier → Elicitor: describes the intent to be elaborated */
 export interface IntakeV1 {
     schema_version: string;
@@ -39,6 +39,21 @@ export interface ReviewFeedbackV1 {
     body: string;
     reviewedAt: string;
 }
+/** Independent reviewer → Planner: evidence that an implementation review actually happened */
+export interface ImplementationReviewV1 {
+    schema_version: string;
+    specId: string;
+    verdict: 'approved' | 'changes-requested';
+    reviewer: {
+        kind: 'implementation-review-agent' | 'human';
+        agent: string;
+        verdict: 'approved' | 'changes-requested';
+    };
+    blockers: string[];
+    suggestions: string[];
+    body: string;
+    reviewedAt: string;
+}
 /** Implementer → Validator: result of implementation run */
 export interface ImplementationReportV1 {
     schema_version: string;
@@ -125,6 +140,7 @@ export interface ArtifactPayloadMap {
     review_feedback: ReviewFeedbackV1;
     'implementation-report': ImplementationReportV1;
     'validation-report': ValidationReportV1;
+    implementation_review: ImplementationReviewV1;
 }
 export type ArtifactPayload<K extends ArtifactKind> = ArtifactPayloadMap[K];
 import type { MinimalImplementationReport } from './minimal-implementation-gate.js';

package/dist/types/transition-log.d.ts

@@ -1,5 +1,5 @@
 /** Event types recorded in the transition log. */
-export type TransitionEventType = 'transitioned_to_terminal' | 'frontmatter_resealed' | 'reopen' | 'terminal_drift_detected' | 'transition' | 'handoff.intake' | 'handoff.spec.lock' | 'handoff.review_feedback' | 'handoff.implementation-report' | 'handoff.validation-report' | 'retro_audit' | 'tdd_red_locked' | 'tdd_green_achieved' | 'status_reconciled' | 'housekeeping' | 'ghost_spec_quarantined';
+export type TransitionEventType = 'transitioned_to_terminal' | 'frontmatter_resealed' | 'reopen' | 'terminal_drift_detected' | 'transition' | 'handoff.intake' | 'handoff.spec.lock' | 'handoff.review_feedback' | 'handoff.implementation-report' | 'handoff.validation-report' | 'handoff.implementation_review' | 'retro_audit' | 'tdd_red_locked' | 'tdd_green_achieved' | 'status_reconciled' | 'housekeeping' | 'ghost_spec_quarantined';
 /** SPEC-734: Outcome of a gate execution in a transition. */
 export type GateOutcome = 'pass' | 'fail' | 'skip' | 'forced';
 /** SPEC-734: Result of verifying the hash chain integrity of a project's transition log. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@planu/cli",
-  "version": "5.3.26",
+  "version": "5.3.27",
   "description": "Planu — MCP Server for Spec Driven Development with native Rust acceleration for hot paths. Cross-platform (Linux/macOS/Windows, x64/arm64, glibc/musl).",
   "type": "module",
   "main": "dist/index.js",
@@ -36,14 +36,14 @@
     "packageName": "@planu/core"
   },
   "optionalDependencies": {
-    "@planu/core-darwin-arm64": "5.3.26",
-    "@planu/core-darwin-x64": "5.3.26",
-    "@planu/core-linux-arm64-gnu": "5.3.26",
-    "@planu/core-linux-arm64-musl": "5.3.26",
-    "@planu/core-linux-x64-gnu": "5.3.26",
-    "@planu/core-linux-x64-musl": "5.3.26",
-    "@planu/core-win32-arm64-msvc": "5.3.26",
-    "@planu/core-win32-x64-msvc": "5.3.26"
+    "@planu/core-darwin-arm64": "5.3.27",
+    "@planu/core-darwin-x64": "5.3.27",
+    "@planu/core-linux-arm64-gnu": "5.3.27",
+    "@planu/core-linux-arm64-musl": "5.3.27",
+    "@planu/core-linux-x64-gnu": "5.3.27",
+    "@planu/core-linux-x64-musl": "5.3.27",
+    "@planu/core-win32-arm64-msvc": "5.3.27",
+    "@planu/core-win32-x64-msvc": "5.3.27"
   },
   "engines": {
     "node": ">=24.0.0"

package/planu-native.json

@@ -1,7 +1,7 @@
 {
   "name": "dev.planu.native",
   "displayName": "Planu Native Lightweight Surface",
-  "version": "5.3.26",
+  "version": "5.3.27",
   "packageName": "@planu/cli",
   "modes": {
     "lightweight": {

package/planu-plugin.json

@@ -2,7 +2,7 @@
   "name": "dev.planu.cli",
   "displayName": "Planu — Spec Driven Development",
   "description": "Manage software specs, estimations, and autonomous SDD workflows. Language-agnostic MCP server for Claude Code.",
-  "version": "5.3.26",
+  "version": "5.3.27",
   "icon": "assets/plugin/icon.svg",
   "command": ["npx", "@planu/cli@latest"],
   "packageName": "@planu/cli",