@planu/cli 5.3.5 → 5.3.6

package/CHANGELOG.md

@@ -1,3 +1,35 @@
+## [5.3.6] - 2026-08-07
+
+### Bug Fixes
+- fix(spec-1404): make filesystem hook watcher observation-only
+- fix(spec-1427): recognize exposed/exposes as affirmative scope drift
+- fix(spec-1427): stop scope-contradiction check from flagging boundary-preserving criteria
+- fix(spec-1415): arbitrate independent Codex review, harden fence and marker matching
+- fix(spec-1415): heal 35 truncated spec.md bodies with a one-shot script
+- fix(spec-migrator): preserve actionable estimation during portable spec import
+- fix(spec-1429): cover the two untested acceptance criteria and correct stale claims
+- fix(tests): match CLAUDE.md's current canonical release gate commands
+- fix(spec-format): stop discarding BDD criteria mixed with checklist bullets
+- fix(challenge-spec): count the challenge gate requirement against distinct scenario names
+
+### Refactoring
+- refactor(spec-migrator): extract importSpecEntry to satisfy max-lines-per-function
+
+### Chores
+- chore(planu): redact absolute home path from public spec reproducers
+- chore(planu): sync session state after SPEC-1403/1404 closure
+- chore(spec-1404): mark done after independent implementation review
+- chore(planu): move SPEC-1449/1450 to review with challenge resolution evidence
+- chore(planu): file SPEC-1449/1450 dogfood bugs, sync session state
+- chore(spec-1427): mark spec done and drop duplicate test ownership entry
+- chore(spec-1415): reconcile Files scope for done gate, file SPEC-1447 dogfood bug
+- chore(planu): approve SPEC-1415 after challenge/grounding gate fixes
+- chore(planu): sync SDD lifecycle state for SPEC-1404/1415/1427, file SPEC-1445/1446
+- chore(planu): mark SPEC-1429 and SPEC-1431 done, file SPEC-1443/1444
+- chore(planu): sync session-context checkpoint
+- chore(planu): close 8 verified-stale backlog specs
+
+
 ## [5.3.5] - 2026-08-06
 
 ### Bug Fixes

package/dist/engine/hooks/handlers/on-impl-change.d.ts

@@ -13,6 +13,18 @@ export declare function recordAnalysisTimestamp(specId: string, nowMs?: number,
  * Clear all rate limit timestamps (for testing).
  */
 export declare function clearRateLimitTimestamps(): void;
+/**
+ * Get the cached result from the last on-impl-change analysis.
+ * If projectPath is omitted, returns the most recently set result across all projects.
+ */
+export declare function getLastImplChangeResult(projectPath?: string): ImplChangeAnalysisResult | null;
+/**
+ * Reset the on-impl-change diagnostic cache.
+ * If projectPath is provided, clears only that project's cache.
+ * If omitted, clears all projects.
+ * Useful for testing.
+ */
+export declare function resetImplChangeCache(projectPath?: string): void;
 /**
  * Returns true for src/**\/*.ts files, excluding test files.
  * Test files are identified by the .test.ts or .spec.ts suffix.
@@ -26,9 +38,10 @@ export declare function findRelatedSpecs(filePath: string, specs: MinimalAnalyza
 /**
  * Handle an implementation file change event.
  * Fire-and-forget — all errors are caught internally.
- * When specs array and analyzeSpec function are provided, analyzes related specs.
- * When autoMarkDone is true (default), specs reaching 100% are automatically
- * transitioned to 'done' status via the spec store.
+ * When specs array and analyzeSpec function are provided, analyzes related specs
+ * and records the result as a diagnostic (see getLastImplChangeResult). It never
+ * transitions spec lifecycle status or writes spec.md — that requires an explicit
+ * reconcile_spec / update_status call by the user (SPEC-1404).
  */
-export declare function handleOnImplChange(event: WatcherEvent, projectPath: string, specs?: MinimalAnalyzableSpec[], analyzeSpec?: AnalyzeSpecFn, autoMarkDone?: boolean): Promise<ImplChangeAnalysisResult | undefined>;
+export declare function handleOnImplChange(event: WatcherEvent, projectPath: string, specs?: MinimalAnalyzableSpec[], analyzeSpec?: AnalyzeSpecFn): Promise<ImplChangeAnalysisResult | undefined>;
 //# sourceMappingURL=on-impl-change.d.ts.map

package/dist/engine/hooks/handlers/on-impl-change.js

@@ -1,8 +1,7 @@
 // engine/hooks/handlers/on-impl-change.ts — on-impl-change hook handler (SPEC-137)
 // Triggered when source implementation files (src/**/*.ts) change.
-// Analyzes related specs, updates completion percentage, auto-reconciles if all criteria met.
-import { hashProjectPath } from '../../../storage/base-store.js';
-const UPDATE_STATUS_MODULE = '../../../tools/update-status/index.js';
+// Analyzes related specs and reports completion percentage as a diagnostic —
+// it never mutates spec lifecycle state (SPEC-1404).
 // ---------------------------------------------------------------------------
 // Rate limiter (per spec, 5 min cooldown)
 // ---------------------------------------------------------------------------
@@ -40,6 +39,38 @@ export function clearRateLimitTimestamps() {
     lastAnalysisTimestamps.clear();
 }
 // ---------------------------------------------------------------------------
+// Diagnostic cache (per-project, mirrors on-push-check.ts's cache pattern)
+// ---------------------------------------------------------------------------
+const lastImplChangeResultMap = new Map();
+/**
+ * Get the cached result from the last on-impl-change analysis.
+ * If projectPath is omitted, returns the most recently set result across all projects.
+ */
+export function getLastImplChangeResult(projectPath) {
+    if (projectPath !== undefined) {
+        return lastImplChangeResultMap.get(projectPath) ?? null;
+    }
+    let last = null;
+    for (const v of lastImplChangeResultMap.values()) {
+        last = v;
+    }
+    return last;
+}
+/**
+ * Reset the on-impl-change diagnostic cache.
+ * If projectPath is provided, clears only that project's cache.
+ * If omitted, clears all projects.
+ * Useful for testing.
+ */
+export function resetImplChangeCache(projectPath) {
+    if (projectPath !== undefined) {
+        lastImplChangeResultMap.delete(projectPath);
+    }
+    else {
+        lastImplChangeResultMap.clear();
+    }
+}
+// ---------------------------------------------------------------------------
 // Pattern matching
 // ---------------------------------------------------------------------------
 /**
@@ -98,11 +129,12 @@ export function findRelatedSpecs(filePath, specs) {
 /**
  * Handle an implementation file change event.
  * Fire-and-forget — all errors are caught internally.
- * When specs array and analyzeSpec function are provided, analyzes related specs.
- * When autoMarkDone is true (default), specs reaching 100% are automatically
- * transitioned to 'done' status via the spec store.
+ * When specs array and analyzeSpec function are provided, analyzes related specs
+ * and records the result as a diagnostic (see getLastImplChangeResult). It never
+ * transitions spec lifecycle status or writes spec.md — that requires an explicit
+ * reconcile_spec / update_status call by the user (SPEC-1404).
  */
-export async function handleOnImplChange(event, projectPath, specs, analyzeSpec, autoMarkDone = true) {
+export async function handleOnImplChange(event, projectPath, specs, analyzeSpec) {
     try {
         if (!isSourceFile(event.path)) {
             return;
@@ -133,53 +165,20 @@ export async function handleOnImplChange(event, projectPath, specs, analyzeSpec,
             });
             if (result.completionPct === 100) {
                 autoReconciled = true;
-                console.warn(`[hooks] Auto-reconcile triggered for ${spec.id} (100% completion)`);
-                if (autoMarkDone) {
-                    await markSpecDone(spec.id, projectPath);
-                }
+                console.warn(`[hooks] Spec ${spec.id} reached 100% completion (diagnostic only)`);
             }
         }
-        return {
+        const analysisResult = {
             changedFile: event.path,
             specsAnalyzed: results,
             autoReconciled,
         };
+        lastImplChangeResultMap.set(projectPath, analysisResult);
+        return analysisResult;
     }
     catch (err) {
         console.warn(`[hooks] on-impl-change error for ${event.path}:`, err);
         return undefined;
     }
 }
-// ---------------------------------------------------------------------------
-// Auto-done helper
-// ---------------------------------------------------------------------------
-/**
- * Mark a spec as 'done' in the spec store.
- * Errors are logged but not re-thrown so the hook pipeline continues.
- */
-async function markSpecDone(specId, projectPath) {
-    try {
-        const projectId = hashProjectPath(projectPath);
-        // SPEC-720: Route through handleUpdateStatus so all gates (DoD/validate/QA) run.
-        const updateStatusModule = (await import(UPDATE_STATUS_MODULE));
-        const result = await updateStatusModule.handleUpdateStatus({
-            specId,
-            status: 'done',
-            projectId,
-            projectPath,
-            trigger: 'fs-hook',
-            actor: 'system',
-        });
-        if (result.isError) {
-            const reason = result.content[0]?.type === 'text' ? result.content[0].text : 'gate blocked';
-            console.warn(`[hooks] Auto-done blocked for ${specId} (gates): ${reason}`);
-        }
-        else {
-            console.warn(`[hooks] Auto-done: spec ${specId} marked as 'done' via update_status gates`);
-        }
-    }
-    catch (err) {
-        console.warn(`[hooks] Auto-done failed for ${specId}:`, err);
-    }
-}
 //# sourceMappingURL=on-impl-change.js.map

package/dist/engine/living-spec-analyzer.d.ts

@@ -1,7 +1,10 @@
-import type { Spec, LivingSpecReport } from '../types/index.js';
+import type { Spec, LivingSpecReport, AnalyzeLivingSpecOptions } from '../types/index.js';
 /**
  * Analyze a spec's acceptance criteria against the codebase.
  * Returns a per-criterion assessment and overall completion percentage.
+ * Does not write ## Progress into spec.md unless options.writeProgress is true —
+ * callers that document a Progress write (reconcile_spec, auto-reconcile) opt in
+ * explicitly (SPEC-1404).
  */
-export declare function analyzeLivingSpec(spec: Spec, projectPath: string): Promise<LivingSpecReport>;
+export declare function analyzeLivingSpec(spec: Spec, projectPath: string, options?: AnalyzeLivingSpecOptions): Promise<LivingSpecReport>;
 //# sourceMappingURL=living-spec-analyzer.d.ts.map

package/dist/engine/living-spec-analyzer.js

@@ -12,8 +12,11 @@ const MAX_FILES_TO_SCAN = 80;
 /**
  * Analyze a spec's acceptance criteria against the codebase.
  * Returns a per-criterion assessment and overall completion percentage.
+ * Does not write ## Progress into spec.md unless options.writeProgress is true —
+ * callers that document a Progress write (reconcile_spec, auto-reconcile) opt in
+ * explicitly (SPEC-1404).
  */
-export async function analyzeLivingSpec(spec, projectPath) {
+export async function analyzeLivingSpec(spec, projectPath, options = {}) {
     const criteria = await extractCriteria(spec);
     const assessments = [];
     // Pre-load file index for the project (cached for all criteria)
@@ -30,7 +33,7 @@ export async function analyzeLivingSpec(spec, projectPath) {
     // SPEC-1010 PR-C: Write living spec analysis into the unified spec.md
     // ## Progress section instead of a standalone progress.md file.
     let progressUpdated = false;
-    if (spec.specPath) {
+    if (options.writeProgress === true && spec.specPath) {
         progressUpdated = await updateProgressInSpec(spec.specPath, assessments, completionPercent);
     }
     else if (spec.progressPath) {

package/dist/engine/planu-core.darwin-arm64.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.3.5",
-  "engineVersion": "5.3.5",
-  "buildId": "1-5.3.5-aarch64-apple-darwin",
+  "cliVersion": "5.3.6",
+  "engineVersion": "5.3.6",
+  "buildId": "1-5.3.6-aarch64-apple-darwin",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -17,15 +17,15 @@
   "platform": "darwin",
   "arch": "arm64",
   "libc": null,
-  "artifactSha256": "27b347bd91597ca547e26cf2eb25f4e7d7d7ec83ed405511bf8b80a52075b6a5",
+  "artifactSha256": "c319951a5aff69954e19a04ccc2165fbbe7e334ca1ec42defd9bc81543748bd7",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.darwin-arm64.node.sbom.json",
-    "sha256": "cdacedfbf96f09a8815ea3b5b293d4d688d0a1216d5ac8e309c3031703144b76"
+    "sha256": "5c09e19e2aed6fc51ffdbc569f291fbadf84d6fe76e9f889df7a0e8b2896b154"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "1ebfd1609a251513993d8635170963f6dab1420e",
+    "sourceCommit": "2dae5f5028632004802bad4c143eb86d8abba774",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -34,6 +34,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "V5w31e1ARajB+tq5/Zuqn/I6AS9upApk4U+3MQudZRJNXMsp+LynzSTuHb8Eg9G6AiXJxt88ZRtqJbAo2b0DAg=="
+    "value": "eyypjiaqLdyOHXK4eND7lnJCagGpBRp5htIhZvkik7iU/KYdTS0Vfl0Wsl4XKo/sfoiY2gHaqf624PZABAK0DQ=="
   }
 }

package/dist/engine/planu-core.darwin-arm64.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.3.5",
+      "bom-ref": "pkg:cargo/planu-core@5.3.6",
       "type": "library",
       "name": "planu-core",
-      "version": "5.3.5",
+      "version": "5.3.6",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "27b347bd91597ca547e26cf2eb25f4e7d7d7ec83ed405511bf8b80a52075b6a5"
+          "content": "c319951a5aff69954e19a04ccc2165fbbe7e334ca1ec42defd9bc81543748bd7"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.3.5",
+      "ref": "pkg:cargo/planu-core@5.3.6",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/planu-core.darwin-x64.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.3.5",
-  "engineVersion": "5.3.5",
-  "buildId": "1-5.3.5-x86_64-apple-darwin",
+  "cliVersion": "5.3.6",
+  "engineVersion": "5.3.6",
+  "buildId": "1-5.3.6-x86_64-apple-darwin",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -17,15 +17,15 @@
   "platform": "darwin",
   "arch": "x64",
   "libc": null,
-  "artifactSha256": "7993a3dc2ff7947eb227812e88b329e870fd0e8b7b3ad152796bef8d77387745",
+  "artifactSha256": "3e9868d3264b3df31e81a6f16ed50b11e5438a7336b9f131b5d333d6e1704e97",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.darwin-x64.node.sbom.json",
-    "sha256": "cc3be430ad14a4bb6f233e60c7fccb055079b3f3aa0208c6e6f8eca9ee47e7a3"
+    "sha256": "e2508d46acae3efb316207d0c15be64fc875207d0fc780f2530cc72f7db2652c"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "1ebfd1609a251513993d8635170963f6dab1420e",
+    "sourceCommit": "2dae5f5028632004802bad4c143eb86d8abba774",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -34,6 +34,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "lL4RDYXTj5JyMi4aPH4Dq9r7u45cD/onxAOOGeQJglIrLryYfLTgvUw0bCxLIExD4LghbskIpbMO5RoxilsTCA=="
+    "value": "cGf49U9+LuqEiQc9Ro+8XJHMfOm9AE6/tftEmeMVZIPUohMd+MpprFCMdAZu41VMhiu/MZb91+5phEaBIbmlCw=="
   }
 }

package/dist/engine/planu-core.darwin-x64.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.3.5",
+      "bom-ref": "pkg:cargo/planu-core@5.3.6",
       "type": "library",
       "name": "planu-core",
-      "version": "5.3.5",
+      "version": "5.3.6",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "7993a3dc2ff7947eb227812e88b329e870fd0e8b7b3ad152796bef8d77387745"
+          "content": "3e9868d3264b3df31e81a6f16ed50b11e5438a7336b9f131b5d333d6e1704e97"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.3.5",
+      "ref": "pkg:cargo/planu-core@5.3.6",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/planu-core.linux-arm64-gnu.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.3.5",
-  "engineVersion": "5.3.5",
-  "buildId": "1-5.3.5-aarch64-unknown-linux-gnu",
+  "cliVersion": "5.3.6",
+  "engineVersion": "5.3.6",
+  "buildId": "1-5.3.6-aarch64-unknown-linux-gnu",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -16,15 +16,15 @@
   "platform": "linux",
   "arch": "arm64",
   "libc": "glibc",
-  "artifactSha256": "58667d7bf48d685e0a68845bf986ab76d7669909994649fed71b76b5e19c0fd9",
+  "artifactSha256": "a057f9f806c472c60949ec962a7872ffed5d858e6e231d7864de285a2ae87ffe",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.linux-arm64-gnu.node.sbom.json",
-    "sha256": "e167309ef0c22da6bbb804b6e59c64a2777aba539a718cd9225f2a5ffe16253f"
+    "sha256": "8722f7dead83c0a64bbb596258edfa5e098f7289652a7317c4fc130a44b5debb"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "1ebfd1609a251513993d8635170963f6dab1420e",
+    "sourceCommit": "2dae5f5028632004802bad4c143eb86d8abba774",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -33,6 +33,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "jPABgCINF4cuTxCuWa2h5suwGdPzU0lXP7oL45TvpMv8A1YP/Q5Lt4w/DIqRYYjlWzsqk228wu0O5f5V+S+kDw=="
+    "value": "rokl1fIAhfFkN+cVkmHqWJKL9V5rwP5iCJ2nFZ+n8+N3NwhIbxX6v/ZNjYXYH2sOwIx6aRFFd3EN1pBApwU/AQ=="
   }
 }

package/dist/engine/planu-core.linux-arm64-gnu.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.3.5",
+      "bom-ref": "pkg:cargo/planu-core@5.3.6",
       "type": "library",
       "name": "planu-core",
-      "version": "5.3.5",
+      "version": "5.3.6",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "58667d7bf48d685e0a68845bf986ab76d7669909994649fed71b76b5e19c0fd9"
+          "content": "a057f9f806c472c60949ec962a7872ffed5d858e6e231d7864de285a2ae87ffe"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.3.5",
+      "ref": "pkg:cargo/planu-core@5.3.6",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/planu-core.linux-arm64-musl.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.3.5",
-  "engineVersion": "5.3.5",
-  "buildId": "1-5.3.5-aarch64-unknown-linux-musl",
+  "cliVersion": "5.3.6",
+  "engineVersion": "5.3.6",
+  "buildId": "1-5.3.6-aarch64-unknown-linux-musl",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -16,15 +16,15 @@
   "platform": "linux",
   "arch": "arm64",
   "libc": "musl",
-  "artifactSha256": "948e76211c8b7a4770c9f79e172184baf13fa7208a06cc149b6cd168ef5c1cf6",
+  "artifactSha256": "2ea8f19e0cc3365dd23cbe0e7fbf7767a5b5fa0f58e6a044d0f6fd0b39949d24",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.linux-arm64-musl.node.sbom.json",
-    "sha256": "fe1febc4c73090f46d5513ac83d98fa5fcc69b50b82aea2a9eb9bfc9943d9f58"
+    "sha256": "868d8d54cef201e1454ccf935e8fe7946e8543530803140d7b97c5886c4e4237"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "1ebfd1609a251513993d8635170963f6dab1420e",
+    "sourceCommit": "2dae5f5028632004802bad4c143eb86d8abba774",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -33,6 +33,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "W8DaJ4zBO7CgzNQ8Ygt3Fsq76sLt2AZgzRzfZLN2cxvOEsTK/aS+KgM/JpSfKbuv45c7wBgM5jUvLSPIh/qTAw=="
+    "value": "tSU/uWkXwhZZ+29DcUXHWI9KYfGspNLieVr4sZzD0ds0qwTeYDSxioNMNRdCeNaieCT1nKNNM1jf+ftF2wU4DQ=="
   }
 }

package/dist/engine/planu-core.linux-arm64-musl.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.3.5",
+      "bom-ref": "pkg:cargo/planu-core@5.3.6",
       "type": "library",
       "name": "planu-core",
-      "version": "5.3.5",
+      "version": "5.3.6",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "948e76211c8b7a4770c9f79e172184baf13fa7208a06cc149b6cd168ef5c1cf6"
+          "content": "2ea8f19e0cc3365dd23cbe0e7fbf7767a5b5fa0f58e6a044d0f6fd0b39949d24"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.3.5",
+      "ref": "pkg:cargo/planu-core@5.3.6",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/planu-core.linux-x64-gnu.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.3.5",
-  "engineVersion": "5.3.5",
-  "buildId": "1-5.3.5-x86_64-unknown-linux-gnu",
+  "cliVersion": "5.3.6",
+  "engineVersion": "5.3.6",
+  "buildId": "1-5.3.6-x86_64-unknown-linux-gnu",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -16,15 +16,15 @@
   "platform": "linux",
   "arch": "x64",
   "libc": "glibc",
-  "artifactSha256": "c1df1defdec7ecf99a65391798bb1452a0677193fc49778ebb621adf8f984da7",
+  "artifactSha256": "6353c0738f92143dbb24b5cc2312f76ad613c35a81c7f868f4a9bed4942cecd1",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.linux-x64-gnu.node.sbom.json",
-    "sha256": "1fa7db3a02d7cd799a500eb378a41dacde4eb5f694916b49ad651658c24f3a9d"
+    "sha256": "608d97eda6a7982dde93f50d1d704d5753abb383835dc8795d7912d645158046"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "1ebfd1609a251513993d8635170963f6dab1420e",
+    "sourceCommit": "2dae5f5028632004802bad4c143eb86d8abba774",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -33,6 +33,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "vtEQHO2zRWFl2vbnBxSjwxwT+VTgwuPDVxcYAoQaIBFNt3JSOeh/NwXfEmn43xQ66vvRW1wsu5mj5nIvz7B5DQ=="
+    "value": "dRBPmA3Yh3EfsVYIBGbjaECPAL9z/HerkHRzn5f7p30F97UEF2shfvVofKV01SNYcGB/hqa54ofvKq6GbZYWBg=="
   }
 }

package/dist/engine/planu-core.linux-x64-gnu.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.3.5",
+      "bom-ref": "pkg:cargo/planu-core@5.3.6",
       "type": "library",
       "name": "planu-core",
-      "version": "5.3.5",
+      "version": "5.3.6",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "c1df1defdec7ecf99a65391798bb1452a0677193fc49778ebb621adf8f984da7"
+          "content": "6353c0738f92143dbb24b5cc2312f76ad613c35a81c7f868f4a9bed4942cecd1"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.3.5",
+      "ref": "pkg:cargo/planu-core@5.3.6",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/planu-core.linux-x64-musl.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.3.5",
-  "engineVersion": "5.3.5",
-  "buildId": "1-5.3.5-x86_64-unknown-linux-musl",
+  "cliVersion": "5.3.6",
+  "engineVersion": "5.3.6",
+  "buildId": "1-5.3.6-x86_64-unknown-linux-musl",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -16,15 +16,15 @@
   "platform": "linux",
   "arch": "x64",
   "libc": "musl",
-  "artifactSha256": "0116080409d8d34a70bcd11545d83ef0055475bac5338e1390eb2694296f64e1",
+  "artifactSha256": "fc1ffffc7aa8178117d75efb21a21cbf47789de550aaa09010c6acbd22a3fa3f",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.linux-x64-musl.node.sbom.json",
-    "sha256": "26de786cbe886f27871dba4af38506dbbefd7823503a3af1ec91e506b10efd41"
+    "sha256": "016bcd4176cb0c11f7fa2890b13bd882afcaea12cb92a3316586f421a379ab9b"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "1ebfd1609a251513993d8635170963f6dab1420e",
+    "sourceCommit": "2dae5f5028632004802bad4c143eb86d8abba774",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -33,6 +33,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "UVlIbDnlrHlchfrOyYRZu/Rj8qQQkbiaPKNf8ei7B1+rXkHdryVRUiC06/UP3aaydkDVXhdkLOQmvLw1JbnyDA=="
+    "value": "evwVuvJPRtdHXxc0wulqvQSSTm+IoeWgcuZuZjXnI2OZXQ+M9P4dAS/7ChFxoIul52xBCEB1MIZObdMynhWvCA=="
   }
 }

package/dist/engine/planu-core.linux-x64-musl.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.3.5",
+      "bom-ref": "pkg:cargo/planu-core@5.3.6",
       "type": "library",
       "name": "planu-core",
-      "version": "5.3.5",
+      "version": "5.3.6",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "0116080409d8d34a70bcd11545d83ef0055475bac5338e1390eb2694296f64e1"
+          "content": "fc1ffffc7aa8178117d75efb21a21cbf47789de550aaa09010c6acbd22a3fa3f"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.3.5",
+      "ref": "pkg:cargo/planu-core@5.3.6",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",