@planu/cli 5.3.3 → 5.3.5

package/dist/engine/implementation-contract/renderer.js

@@ -3,6 +3,9 @@ export function buildImplementationContractSection(input) {
     const criteria = input.criteria;
     const testFiles = input.files.test.map((file) => file.path);
     const verificationCommands = input.verificationCommands;
+    const verificationRows = renderVerificationRows(criteria, testFiles, verificationCommands);
+    const failureModes = renderFailureModes(criteria);
+    const nonGoals = renderNonGoals(input.outOfScope);
     const lines = [
         `## ${IMPLEMENTATION_CONTRACT_SECTION}`,
         '### User Outcome',
@@ -10,21 +13,16 @@ export function buildImplementationContractSection(input) {
             criteria[0]?.text ??
             'Needs decision: define the exact observable outcome this spec must deliver.',
         '',
-        '### Behavior Contract',
-        ...renderBehaviorContract(criteria),
-        '',
         '### File-Level Work Plan',
         ...renderFilePlan(input.files, criteria.length > 0),
         '',
         '### Acceptance-To-Verification Map',
-        ...criteria.map((criterion, index) => renderVerificationRow(criterion.text, index + 1, testFiles, verificationCommands)),
-        '',
-        '### Edge Cases And Failure Modes',
-        ...renderFailureModes(criteria),
-        '',
-        '### Non-Goals And Forbidden Approaches',
-        ...renderNonGoals(input.outOfScope),
+        ...verificationRows,
         '',
+        // SPEC-1406 (DEFECT 5): a subsection with no grounded content is omitted rather than
+        // filled with a restated-criterion placeholder — prefer omission over filler.
+        ...(failureModes.length > 0 ? ['### Edge Cases And Failure Modes', ...failureModes, ''] : []),
+        ...(nonGoals.length > 0 ? ['### Non-Goals And Forbidden Approaches', ...nonGoals, ''] : []),
         '### Verification Commands',
         ...(verificationCommands.length > 0
             ? verificationCommands.map((command) => `- \`${command}\``)
@@ -71,31 +69,64 @@ function renderFilePlan(files, hasGroundedBehavior) {
         ? ['- No file ownership was grounded for this behavior.']
         : ['- Needs decision: identify expected source and test files.'];
 }
-function renderBehaviorContract(criteria) {
-    return criteria.length > 0
-        ? criteria.map((criterion, index) => `- Expected behavior AC${String(index + 1)}: ${criterion.text}`)
-        : ['- Needs decision: define at least one evidence-grounded acceptance criterion.'];
+/**
+ * SPEC-1406 (DEFECT 1, round 2): renders the Acceptance-To-Verification Map body.
+ * There is no per-criterion test mapping anywhere in the pipeline (LeanCriterion is
+ * `{text, done}`, `files.test` is a flat list) — positional `testFiles[index]` is only
+ * trustworthy when there are at least as many test files as criteria. When there are
+ * not enough test files to map one per criterion, emit ONE shared row naming every
+ * criterion's coverage instead of dropping rows (which used to make criteria 2..N
+ * invisible to the evaluator and promote them to false blockers).
+ */
+function renderVerificationRows(criteria, testFiles, commands) {
+    if (criteria.length === 0) {
+        return ['- Needs decision: provide at least one acceptance criterion to verify.'];
+    }
+    if (testFiles.length >= criteria.length) {
+        const rows = [];
+        criteria.forEach((criterion, index) => {
+            const test = testFiles[index];
+            if (test !== undefined) {
+                rows.push(renderPerCriterionRow(criterion.text, index + 1, test, commands));
+            }
+        });
+        return rows;
+    }
+    if (testFiles.length === 0) {
+        return ['- No repository-supported verification evidence was grounded for these criteria.'];
+    }
+    return renderSharedVerificationRow(testFiles, commands);
+}
+function renderPerCriterionRow(criterion, index, test, commands) {
+    const command = commands[index - 1] ?? commands[0];
+    return command
+        ? `- AC${String(index)}: ${criterion} -> unit test \`${test}\` plus \`${command}\`.`
+        : `- AC${String(index)}: ${criterion} -> unit test \`${test}\`.`;
 }
-function renderVerificationRow(criterion, index, testFiles, commands) {
-    const test = testFiles[0];
-    if (test) {
-        const command = commands[0];
-        return command
-            ? `- AC${String(index)}: ${criterion} -> unit test \`${test}\` plus \`${command}\`.`
-            : `- AC${String(index)}: ${criterion} -> unit test \`${test}\`.`;
+/**
+ * Emitted once when there are fewer declared test files than criteria — never repeat
+ * `commands[0]` per criterion (SPEC-1406 round 2 finding: N byte-identical rows).
+ */
+function renderSharedVerificationRow(testFiles, commands) {
+    const fileList = testFiles.map((file) => `\`${file}\``).join(', ');
+    const lines = [`- All criteria are verified by: ${fileList}`];
+    const command = commands[0];
+    if (command) {
+        lines.push(`- Shared verification command: \`${command}\`.`);
     }
-    return `- AC${String(index)}: ${criterion} -> verify the exact observable result declared by this criterion.`;
+    return lines;
 }
 function renderNonGoals(outOfScope) {
-    return outOfScope.length > 0
-        ? outOfScope.map((item) => `- ${item}`)
-        : ['- No explicit non-goals were supplied.'];
+    return outOfScope.map((item) => `- ${item}`);
 }
-function renderFailureModes(criteria) {
-    return criteria.length > 0
-        ? criteria.map((criterion, index) => `- AC${String(index + 1)} failure: reject partial behavior that violates "${criterion.text}" and preserve the last valid observable state.`)
-        : [
-            '- Needs decision: identify criterion-specific failure modes from user input or project evidence.',
-        ];
+/**
+ * SPEC-1406 (DEFECT 5): there is no per-criterion failure-mode input — the previous
+ * implementation synthesized a constant restatement of the criterion text instead
+ * ("AC1 failure: reject partial behavior that violates \"<criterion>\"..."), which carries
+ * no information beyond the Acceptance-To-Verification Map. Prefer omission over filler:
+ * this subsection has nothing grounded to add, so it is always empty here.
+ */
+function renderFailureModes(_criteria) {
+    return [];
 }
 //# sourceMappingURL=renderer.js.map

package/dist/engine/planu-core.darwin-arm64.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.3.3",
-  "engineVersion": "5.3.3",
-  "buildId": "1-5.3.3-aarch64-apple-darwin",
+  "cliVersion": "5.3.5",
+  "engineVersion": "5.3.5",
+  "buildId": "1-5.3.5-aarch64-apple-darwin",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -17,15 +17,15 @@
   "platform": "darwin",
   "arch": "arm64",
   "libc": null,
-  "artifactSha256": "936cf103c37c5622595eba08d503131657a4718d37b84d9355fe3dd8b63f313a",
+  "artifactSha256": "27b347bd91597ca547e26cf2eb25f4e7d7d7ec83ed405511bf8b80a52075b6a5",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.darwin-arm64.node.sbom.json",
-    "sha256": "a3350e8b345415b6b7881cd0ed7b1fa09a86e21530f790e08f93e74c0bfc4384"
+    "sha256": "cdacedfbf96f09a8815ea3b5b293d4d688d0a1216d5ac8e309c3031703144b76"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "30eda7a2ba11647e835b0079c526bed77f189c8e",
+    "sourceCommit": "1ebfd1609a251513993d8635170963f6dab1420e",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -34,6 +34,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "bk6W0MZRvTB3XJtJPw0Oe9Brcs8vOa0ZyWNyx81gBZHTp1qRjQjyT+bWVWjMRl9ULBE8+Iu5Sd02wR0ZGZ3MCQ=="
+    "value": "V5w31e1ARajB+tq5/Zuqn/I6AS9upApk4U+3MQudZRJNXMsp+LynzSTuHb8Eg9G6AiXJxt88ZRtqJbAo2b0DAg=="
   }
 }

package/dist/engine/planu-core.darwin-arm64.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.3.3",
+      "bom-ref": "pkg:cargo/planu-core@5.3.5",
       "type": "library",
       "name": "planu-core",
-      "version": "5.3.3",
+      "version": "5.3.5",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "936cf103c37c5622595eba08d503131657a4718d37b84d9355fe3dd8b63f313a"
+          "content": "27b347bd91597ca547e26cf2eb25f4e7d7d7ec83ed405511bf8b80a52075b6a5"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.3.3",
+      "ref": "pkg:cargo/planu-core@5.3.5",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/planu-core.darwin-x64.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.3.3",
-  "engineVersion": "5.3.3",
-  "buildId": "1-5.3.3-x86_64-apple-darwin",
+  "cliVersion": "5.3.5",
+  "engineVersion": "5.3.5",
+  "buildId": "1-5.3.5-x86_64-apple-darwin",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -17,15 +17,15 @@
   "platform": "darwin",
   "arch": "x64",
   "libc": null,
-  "artifactSha256": "a00b4de15350f55e6b2dfbff7d172fe9c731f857b517ca903a3ef2faab5c9b2a",
+  "artifactSha256": "7993a3dc2ff7947eb227812e88b329e870fd0e8b7b3ad152796bef8d77387745",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.darwin-x64.node.sbom.json",
-    "sha256": "7e25d45c059cf37c0f32d13526d9857d8b33e20e1326428d2ce6f6bf2684029b"
+    "sha256": "cc3be430ad14a4bb6f233e60c7fccb055079b3f3aa0208c6e6f8eca9ee47e7a3"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "30eda7a2ba11647e835b0079c526bed77f189c8e",
+    "sourceCommit": "1ebfd1609a251513993d8635170963f6dab1420e",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -34,6 +34,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "JFfOtvnI+70+fijN8e5fJF4XqkwdZyAR8tOUxm+gdnM1okUI0EFUtqnb2nzPFzG4RnFZGSYgnoYJQpfd5zmnDw=="
+    "value": "lL4RDYXTj5JyMi4aPH4Dq9r7u45cD/onxAOOGeQJglIrLryYfLTgvUw0bCxLIExD4LghbskIpbMO5RoxilsTCA=="
   }
 }

package/dist/engine/planu-core.darwin-x64.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.3.3",
+      "bom-ref": "pkg:cargo/planu-core@5.3.5",
       "type": "library",
       "name": "planu-core",
-      "version": "5.3.3",
+      "version": "5.3.5",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "a00b4de15350f55e6b2dfbff7d172fe9c731f857b517ca903a3ef2faab5c9b2a"
+          "content": "7993a3dc2ff7947eb227812e88b329e870fd0e8b7b3ad152796bef8d77387745"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.3.3",
+      "ref": "pkg:cargo/planu-core@5.3.5",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/planu-core.linux-arm64-gnu.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.3.3",
-  "engineVersion": "5.3.3",
-  "buildId": "1-5.3.3-aarch64-unknown-linux-gnu",
+  "cliVersion": "5.3.5",
+  "engineVersion": "5.3.5",
+  "buildId": "1-5.3.5-aarch64-unknown-linux-gnu",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -16,15 +16,15 @@
   "platform": "linux",
   "arch": "arm64",
   "libc": "glibc",
-  "artifactSha256": "83c55f2f9e0f2bc32bca52de4d5ed248b09217d1893d2e05ce7880394e25a884",
+  "artifactSha256": "58667d7bf48d685e0a68845bf986ab76d7669909994649fed71b76b5e19c0fd9",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.linux-arm64-gnu.node.sbom.json",
-    "sha256": "39ddcdd6a6c9fae71bbb1f6f1716a1352ee37bf81196b24eef318d4abb0b4b1d"
+    "sha256": "e167309ef0c22da6bbb804b6e59c64a2777aba539a718cd9225f2a5ffe16253f"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "30eda7a2ba11647e835b0079c526bed77f189c8e",
+    "sourceCommit": "1ebfd1609a251513993d8635170963f6dab1420e",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -33,6 +33,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "P1xQ4p3pp++gck7GGKW/Ue9/MdpedjnqGeuyl/76jzqFN5VmtA+L/5jlHvBc+qDPGkNT6wiXY8R3J5CHkjk5Cg=="
+    "value": "jPABgCINF4cuTxCuWa2h5suwGdPzU0lXP7oL45TvpMv8A1YP/Q5Lt4w/DIqRYYjlWzsqk228wu0O5f5V+S+kDw=="
   }
 }

package/dist/engine/planu-core.linux-arm64-gnu.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.3.3",
+      "bom-ref": "pkg:cargo/planu-core@5.3.5",
       "type": "library",
       "name": "planu-core",
-      "version": "5.3.3",
+      "version": "5.3.5",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "83c55f2f9e0f2bc32bca52de4d5ed248b09217d1893d2e05ce7880394e25a884"
+          "content": "58667d7bf48d685e0a68845bf986ab76d7669909994649fed71b76b5e19c0fd9"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.3.3",
+      "ref": "pkg:cargo/planu-core@5.3.5",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/planu-core.linux-arm64-musl.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.3.3",
-  "engineVersion": "5.3.3",
-  "buildId": "1-5.3.3-aarch64-unknown-linux-musl",
+  "cliVersion": "5.3.5",
+  "engineVersion": "5.3.5",
+  "buildId": "1-5.3.5-aarch64-unknown-linux-musl",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -16,15 +16,15 @@
   "platform": "linux",
   "arch": "arm64",
   "libc": "musl",
-  "artifactSha256": "6f31cf91ea1ae1bde34191ab4a7b7c2d6a58dcdb7206f18dcefcc1dfb42b349b",
+  "artifactSha256": "948e76211c8b7a4770c9f79e172184baf13fa7208a06cc149b6cd168ef5c1cf6",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.linux-arm64-musl.node.sbom.json",
-    "sha256": "c90938e79cf8fb28eb448b50b683c624c65ddfd34ee50515b3b999465d55cc83"
+    "sha256": "fe1febc4c73090f46d5513ac83d98fa5fcc69b50b82aea2a9eb9bfc9943d9f58"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "30eda7a2ba11647e835b0079c526bed77f189c8e",
+    "sourceCommit": "1ebfd1609a251513993d8635170963f6dab1420e",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -33,6 +33,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "uvmtUXDibJr1Kf/Y1D1IiFea7pMuBcx2UWIonJHde2OweiQqQ1++KkoPMLGAIxfsSTncVTdXpU7nGiGpIm3jAQ=="
+    "value": "W8DaJ4zBO7CgzNQ8Ygt3Fsq76sLt2AZgzRzfZLN2cxvOEsTK/aS+KgM/JpSfKbuv45c7wBgM5jUvLSPIh/qTAw=="
   }
 }

package/dist/engine/planu-core.linux-arm64-musl.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.3.3",
+      "bom-ref": "pkg:cargo/planu-core@5.3.5",
       "type": "library",
       "name": "planu-core",
-      "version": "5.3.3",
+      "version": "5.3.5",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "6f31cf91ea1ae1bde34191ab4a7b7c2d6a58dcdb7206f18dcefcc1dfb42b349b"
+          "content": "948e76211c8b7a4770c9f79e172184baf13fa7208a06cc149b6cd168ef5c1cf6"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.3.3",
+      "ref": "pkg:cargo/planu-core@5.3.5",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/planu-core.linux-x64-gnu.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.3.3",
-  "engineVersion": "5.3.3",
-  "buildId": "1-5.3.3-x86_64-unknown-linux-gnu",
+  "cliVersion": "5.3.5",
+  "engineVersion": "5.3.5",
+  "buildId": "1-5.3.5-x86_64-unknown-linux-gnu",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -16,15 +16,15 @@
   "platform": "linux",
   "arch": "x64",
   "libc": "glibc",
-  "artifactSha256": "125329171f49f6a9d37b2503c64e74238c1b4ad4f22a56177a58e64f5297ea8c",
+  "artifactSha256": "c1df1defdec7ecf99a65391798bb1452a0677193fc49778ebb621adf8f984da7",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.linux-x64-gnu.node.sbom.json",
-    "sha256": "edb71690879e6a06c47b15db5d2ecd5c45d0d96f574dfb025e4ede5201925ca8"
+    "sha256": "1fa7db3a02d7cd799a500eb378a41dacde4eb5f694916b49ad651658c24f3a9d"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "30eda7a2ba11647e835b0079c526bed77f189c8e",
+    "sourceCommit": "1ebfd1609a251513993d8635170963f6dab1420e",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -33,6 +33,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "8E8ysYR9C83WqDmoU9pE+Qz8skx8fRTDRQY58Cz3CWkvU0Ul5FqTVqsMmOCGMtbQnKloSTpqejDr4wfieZcOBw=="
+    "value": "vtEQHO2zRWFl2vbnBxSjwxwT+VTgwuPDVxcYAoQaIBFNt3JSOeh/NwXfEmn43xQ66vvRW1wsu5mj5nIvz7B5DQ=="
   }
 }

package/dist/engine/planu-core.linux-x64-gnu.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.3.3",
+      "bom-ref": "pkg:cargo/planu-core@5.3.5",
       "type": "library",
       "name": "planu-core",
-      "version": "5.3.3",
+      "version": "5.3.5",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "125329171f49f6a9d37b2503c64e74238c1b4ad4f22a56177a58e64f5297ea8c"
+          "content": "c1df1defdec7ecf99a65391798bb1452a0677193fc49778ebb621adf8f984da7"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.3.3",
+      "ref": "pkg:cargo/planu-core@5.3.5",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/planu-core.linux-x64-musl.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.3.3",
-  "engineVersion": "5.3.3",
-  "buildId": "1-5.3.3-x86_64-unknown-linux-musl",
+  "cliVersion": "5.3.5",
+  "engineVersion": "5.3.5",
+  "buildId": "1-5.3.5-x86_64-unknown-linux-musl",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -16,15 +16,15 @@
   "platform": "linux",
   "arch": "x64",
   "libc": "musl",
-  "artifactSha256": "0e4804010d87a4089e8fd59af5d0b61ba6a572ff20f9f55b1caa904af861f030",
+  "artifactSha256": "0116080409d8d34a70bcd11545d83ef0055475bac5338e1390eb2694296f64e1",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.linux-x64-musl.node.sbom.json",
-    "sha256": "b90757ad531f433d3152e0e90a090afe261e5463f88accb49abd5b19f909a326"
+    "sha256": "26de786cbe886f27871dba4af38506dbbefd7823503a3af1ec91e506b10efd41"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "30eda7a2ba11647e835b0079c526bed77f189c8e",
+    "sourceCommit": "1ebfd1609a251513993d8635170963f6dab1420e",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -33,6 +33,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "cff322qqiXm/iOOexje+zv117NOLslTpYswuxD7tgzZ86aQL30/W+bGQ2W6Qe2VVhhoG60WDXpMbwiyQndvFBg=="
+    "value": "UVlIbDnlrHlchfrOyYRZu/Rj8qQQkbiaPKNf8ei7B1+rXkHdryVRUiC06/UP3aaydkDVXhdkLOQmvLw1JbnyDA=="
   }
 }

package/dist/engine/planu-core.linux-x64-musl.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.3.3",
+      "bom-ref": "pkg:cargo/planu-core@5.3.5",
       "type": "library",
       "name": "planu-core",
-      "version": "5.3.3",
+      "version": "5.3.5",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "0e4804010d87a4089e8fd59af5d0b61ba6a572ff20f9f55b1caa904af861f030"
+          "content": "0116080409d8d34a70bcd11545d83ef0055475bac5338e1390eb2694296f64e1"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.3.3",
+      "ref": "pkg:cargo/planu-core@5.3.5",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/planu-core.win32-arm64-msvc.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.3.3",
-  "engineVersion": "5.3.3",
-  "buildId": "1-5.3.3-aarch64-pc-windows-msvc",
+  "cliVersion": "5.3.5",
+  "engineVersion": "5.3.5",
+  "buildId": "1-5.3.5-aarch64-pc-windows-msvc",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -16,15 +16,15 @@
   "platform": "win32",
   "arch": "arm64",
   "libc": null,
-  "artifactSha256": "5f4ce40b9f76cfaa1fdc25ba8ce765cc3fd7fc0b38bbe10ce8a5b3ba5b0dcc1a",
+  "artifactSha256": "69f0804044cbbf83b24eba6c91ba56052d502fdf605cb87de1e372606a1ff030",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.win32-arm64-msvc.node.sbom.json",
-    "sha256": "f054e6818584024d2f3acb36f2ebfa044546d72d203ecf06b758bfb4c2a8dcfc"
+    "sha256": "69209ba0e316391778bbe7204080e36bb793efc060e77a9007b9d954081545d7"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "30eda7a2ba11647e835b0079c526bed77f189c8e",
+    "sourceCommit": "1ebfd1609a251513993d8635170963f6dab1420e",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -33,6 +33,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "i9Ts/DMWmNUhyq+YNId6aNr4Y+5GGr8CPIe0fXqtBLcXoqGlxgxq83PMgvnFX0fG0pa8MI+Fv7fbamFQ4/SWBg=="
+    "value": "CBuCyMiMXamGF99MF2n+dvmeHDR3NBXjUAgiutEjRmTakq+qdh6fPiGXQKli5kRhd5O4nfNWobIsaWJ+vSCdBA=="
   }
 }

package/dist/engine/planu-core.win32-arm64-msvc.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.3.3",
+      "bom-ref": "pkg:cargo/planu-core@5.3.5",
       "type": "library",
       "name": "planu-core",
-      "version": "5.3.3",
+      "version": "5.3.5",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "5f4ce40b9f76cfaa1fdc25ba8ce765cc3fd7fc0b38bbe10ce8a5b3ba5b0dcc1a"
+          "content": "69f0804044cbbf83b24eba6c91ba56052d502fdf605cb87de1e372606a1ff030"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.3.3",
+      "ref": "pkg:cargo/planu-core@5.3.5",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/planu-core.win32-x64-msvc.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.3.3",
-  "engineVersion": "5.3.3",
-  "buildId": "1-5.3.3-x86_64-pc-windows-msvc",
+  "cliVersion": "5.3.5",
+  "engineVersion": "5.3.5",
+  "buildId": "1-5.3.5-x86_64-pc-windows-msvc",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -16,15 +16,15 @@
   "platform": "win32",
   "arch": "x64",
   "libc": null,
-  "artifactSha256": "5da0cd500b980f5a7295886298ea9176905bc38190fee2a7eae3359ec59513e9",
+  "artifactSha256": "266c514673274fe29f5d625cf33524e203371741f320e6933c0231824506e433",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.win32-x64-msvc.node.sbom.json",
-    "sha256": "a8f35671f2c924ba92ed04e0a9513262c9005451c04423c11e13a9d8371164bc"
+    "sha256": "ba40d6627f3bacbc78c068a377d420a1d6cfebe1e75e7e90b4b94c726f7b71ea"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "30eda7a2ba11647e835b0079c526bed77f189c8e",
+    "sourceCommit": "1ebfd1609a251513993d8635170963f6dab1420e",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -33,6 +33,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "yN+zsORULiFYmazE/LZm1vp2+Nd3NpEqE/1IKcjW3OHz/Nqk9jN1Hj1CR78aDGcJHiMSMobSiBdCviN9dvM4CA=="
+    "value": "zQa9uJfhQpDFLD3/iWUJQGPjUjlqm66DKR9VX+2kbc7dGmYODAxXYLxxJKnFKnpjyaToedkLmurajIE4zMODAA=="
   }
 }