@planu/cli 5.3.8 → 5.3.10

package/CHANGELOG.md

@@ -1,3 +1,25 @@
+## [5.3.10] - 2026-08-09
+
+### Bug Fixes
+- fix(orchestration): derive file-conflict ownership from persisted spec bodies (SPEC-1461)
+
+### Chores
+- chore(spec-1461): mark done after validate 100/100 and dual review
+- chore(spec-1461): sync spec v1.3.1 into branch and strip narrative comments
+- chore(planu): SPEC-1461 lifecycle after dual review; file SPEC-1463/SPEC-1464
+- chore(planu): file SPEC-1462 (transient smoke CLI failure) and record v5.3.9 release state
+
+
+## [5.3.9] - 2026-08-09
+
+### Bug Fixes
+- fix(spec-format): reject prose bullets in Files-section ownership parsing
+- fix(code-scanner): bound implementation-detection evidence to spec-owned paths
+
+### Chores
+- chore(planu): record SPEC-1219 done transition and duplicate-cluster discards
+
+
 ## [5.3.8] - 2026-08-09
 
 ### Bug Fixes

package/dist/engine/code-scanner/index.d.ts

@@ -6,7 +6,8 @@ export type { GapScore, ImplementationStatus } from './gap-scorer.js';
 import { type GapScore } from './gap-scorer.js';
 /**
  * Run the full code reality check for a spec in a project.
- * Returns a GapScore describing how much of the spec is already in code.
+ * Evidence is bounded to the spec's canonical owned paths (SPEC-1219);
+ * empty ownership yields the zero-score GapScore instead of a repo-wide scan.
  */
-export declare function checkCodeReality(projectPath: string, specTitle: string, specDescription?: string): Promise<GapScore>;
+export declare function checkCodeReality(projectPath: string, specTitle: string, ownedPaths: string[], specDescription?: string): Promise<GapScore>;
 //# sourceMappingURL=index.d.ts.map

package/dist/engine/code-scanner/index.js

@@ -7,12 +7,13 @@ import { scanLayers } from './layer-scanner.js';
 import { scoreGap } from './gap-scorer.js';
 /**
  * Run the full code reality check for a spec in a project.
- * Returns a GapScore describing how much of the spec is already in code.
+ * Evidence is bounded to the spec's canonical owned paths (SPEC-1219);
+ * empty ownership yields the zero-score GapScore instead of a repo-wide scan.
  */
-export async function checkCodeReality(projectPath, specTitle, specDescription) {
+export async function checkCodeReality(projectPath, specTitle, ownedPaths, specDescription) {
     const keywords = extractKeywords(specTitle, specDescription);
     const variants = toSymbolVariants(keywords);
-    const layers = await scanLayers(projectPath, keywords, variants);
+    const layers = await scanLayers(projectPath, keywords, variants, ownedPaths);
     return scoreGap(layers);
 }
 //# sourceMappingURL=index.js.map

package/dist/engine/code-scanner/layer-scanner.d.ts

@@ -1,7 +1,8 @@
 import type { LayerScanResult } from '../../types/index.js';
 export type { LayerScanResult };
 /**
- * Scan a project directory for evidence of spec implementation across 4 layers.
+ * Scan the spec's owned paths for evidence of implementation across 4 layers.
+ * Empty ownership yields an empty result — never a repository-wide scan.
  */
-export declare function scanLayers(projectPath: string, keywords: string[], symbolVariants: string[]): Promise<LayerScanResult>;
+export declare function scanLayers(projectPath: string, keywords: string[], symbolVariants: string[], ownedPaths: string[]): Promise<LayerScanResult>;
 //# sourceMappingURL=layer-scanner.d.ts.map

package/dist/engine/code-scanner/layer-scanner.js

@@ -1,42 +1,47 @@
 // src/engine/code-scanner/layer-scanner.ts — Scans the 4 implementation layers (SPEC-441)
+// SPEC-1219: evidence is bounded to the spec's canonical owned paths.
 import { stat } from 'node:fs/promises';
-import { join, relative, basename } from 'node:path';
-import { fastFindFilesByExt, fastReadFiles } from '../core-bridge.js';
+import { join, relative, basename, isAbsolute, normalize } from 'node:path';
+import { fastReadFiles } from '../core-bridge.js';
+const CODE_FILE_RE = /\.(ts|js|tsx|jsx)$/;
 /**
- * Scan a project directory for evidence of spec implementation across 4 layers.
+ * Scan the spec's owned paths for evidence of implementation across 4 layers.
+ * Empty ownership yields an empty result — never a repository-wide scan.
  */
-export async function scanLayers(projectPath, keywords, symbolVariants) {
-    const srcDir = join(projectPath, 'src');
-    const testsDir = join(projectPath, 'tests');
-    const [srcExists, testsExists] = await Promise.all([dirExists(srcDir), dirExists(testsDir)]);
-    let srcFiles = [];
-    let testFiles = [];
-    if (srcExists) {
-        srcFiles = fastFindFilesByExt(srcDir, ['ts', 'js', 'tsx', 'jsx']).filter((f) => !f.endsWith('.d.ts'));
-    }
-    if (testsExists) {
-        testFiles = fastFindFilesByExt(testsDir, ['ts', 'js', 'tsx', 'jsx']).filter((f) => !f.endsWith('.d.ts'));
-    }
-    // Layer 1: files whose names match keywords
-    const matchedFiles = srcFiles.filter((f) => keywords.some((kw) => basename(f).toLowerCase().includes(kw)));
-    // Layer 2: exported symbols in matched files (and register/index files)
-    const registerFiles = srcFiles.filter((f) => /register.*\.ts$|index\.ts$/.test(f));
-    const filesToScanForSymbols = [...new Set([...matchedFiles, ...registerFiles])];
-    const symbols = findSymbols(filesToScanForSymbols, symbolVariants);
-    // Layer 3: test files matching keywords
+export async function scanLayers(projectPath, keywords, symbolVariants, ownedPaths) {
+    const ownedFiles = await resolveExistingOwnedFiles(projectPath, ownedPaths);
+    const testFiles = ownedFiles.filter(isTestPath);
+    const sourceFiles = ownedFiles.filter((f) => !isTestPath(f));
+    const sourceCodeFiles = sourceFiles.filter((f) => CODE_FILE_RE.test(f) && !f.endsWith('.d.ts'));
+    const matchedFiles = sourceFiles.filter((f) => keywords.some((kw) => basename(f).toLowerCase().includes(kw)));
+    const symbols = findSymbols(sourceCodeFiles.map((f) => join(projectPath, f)), symbolVariants);
     const matchedTests = testFiles.filter((f) => keywords.some((kw) => basename(f).toLowerCase().includes(kw)));
-    // Layer 4: registrations in canonical registry source files.
-    const registrations = findRegistrations(projectPath, srcFiles, keywords);
-    return {
-        files: matchedFiles.map((f) => relative(projectPath, f)),
-        symbols,
-        tests: matchedTests.map((f) => relative(projectPath, f)),
-        registrations,
-    };
+    const registrations = findRegistrations(sourceCodeFiles.map((f) => join(projectPath, f)), keywords);
+    return { files: matchedFiles, symbols, tests: matchedTests, registrations };
 }
 // ---------------------------------------------------------------------------
 // Internal helpers
 // ---------------------------------------------------------------------------
+async function resolveExistingOwnedFiles(projectPath, ownedPaths) {
+    const inRoot = [
+        ...new Set(ownedPaths
+            .map((p) => normalize(p))
+            .filter((p) => !isAbsolute(p) && !p.split(/[\\/]/).includes('..'))),
+    ];
+    const existing = await Promise.all(inRoot.map(async (p) => {
+        try {
+            const s = await stat(join(projectPath, p));
+            return s.isFile() ? relative(projectPath, join(projectPath, p)) : null;
+        }
+        catch {
+            return null;
+        }
+    }));
+    return existing.filter((p) => p !== null);
+}
+function isTestPath(relativePath) {
+    return relativePath.startsWith('tests/') || /\.(test|spec)\.[a-z]+$/.test(relativePath);
+}
 function findSymbols(files, variants) {
     const found = new Set();
     if (files.length > 0) {
@@ -51,16 +56,14 @@ function findSymbols(files, variants) {
             }
             EXPORT_RE.lastIndex = 0;
         }
-        return [...found];
     }
     return [...found];
 }
-function findRegistrations(_projectPath, srcFiles, keywords) {
+function findRegistrations(files, keywords) {
     const found = new Set();
-    const registerFiles = srcFiles.filter((f) => /register.*\.ts$|tool-registry\/.*\.ts$/.test(f));
-    if (registerFiles.length > 0) {
+    if (files.length > 0) {
         const REGISTER_RE = /(?:registerTool\s*\(\s*|name:\s*)['"]([^'"]+)['"]/g;
-        for (const file of fastReadFiles(registerFiles)) {
+        for (const file of fastReadFiles(files)) {
             let match;
             while ((match = REGISTER_RE.exec(file.content)) !== null) {
                 const toolName = match[1] ?? '';
@@ -70,17 +73,7 @@ function findRegistrations(_projectPath, srcFiles, keywords) {
             }
             REGISTER_RE.lastIndex = 0;
         }
-        return [...found];
     }
     return [...found];
 }
-async function dirExists(p) {
-    try {
-        const s = await stat(p);
-        return s.isDirectory();
-    }
-    catch {
-        return false;
-    }
-}
 //# sourceMappingURL=layer-scanner.js.map

package/dist/engine/next-spec-resolver/conflict-filter.d.ts

@@ -1,23 +1,5 @@
 import type { Spec } from '../../types/spec/core.js';
-/**
- * SPEC-686 Scenario 4: Filter out candidates that share files with implementing specs.
- *
- * A conflict exists when candidate.technicalFiles ∩ activeSpec.technicalFiles is non-empty.
- * technicalFiles extracted from spec.technical?.filesToModify + spec.technical?.filesToCreate.
- *
- * Specs with no file info (draft/rough specs) are treated as conflict-free and included.
- *
- * @param candidates - specs to evaluate (approved, not blocked by deps)
- * @param activeSpecs - all specs currently with status === 'implementing'
- */
-export declare function filterConflicting(candidates: Spec[], activeSpecs: Spec[]): Spec[];
-/**
- * Extract all file paths from a spec's technical section.
- * Reads filesToModify and filesToCreate from spec.technical.
- */
-export declare function extractFiles(spec: Spec): string[];
-/**
- * Check if two specs share any files (used by orchestration planner).
- */
-export declare function hasFileConflict(specA: Spec, specB: Spec): boolean;
+export declare function filterConflicting(candidates: Spec[], activeSpecs: Spec[], projectPath: string, cache?: Map<string, string[]>): Promise<Spec[]>;
+export declare function extractFiles(spec: Spec, projectPath: string): Promise<string[]>;
+export declare function hasFileConflict(specA: Spec, specB: Spec, projectPath: string, cache?: Map<string, string[]>): Promise<boolean>;
 //# sourceMappingURL=conflict-filter.d.ts.map

package/dist/engine/next-spec-resolver/conflict-filter.js

@@ -1,80 +1,62 @@
-// ---------------------------------------------------------------------------
-// Public API
-// ---------------------------------------------------------------------------
-/**
- * SPEC-686 Scenario 4: Filter out candidates that share files with implementing specs.
- *
- * A conflict exists when candidate.technicalFiles ∩ activeSpec.technicalFiles is non-empty.
- * technicalFiles extracted from spec.technical?.filesToModify + spec.technical?.filesToCreate.
- *
- * Specs with no file info (draft/rough specs) are treated as conflict-free and included.
- *
- * @param candidates - specs to evaluate (approved, not blocked by deps)
- * @param activeSpecs - all specs currently with status === 'implementing'
- */
-export function filterConflicting(candidates, activeSpecs) {
+// engine/next-spec-resolver/conflict-filter.ts — SPEC-1461: derive file ownership from persisted spec bodies
+import { isAbsolute, join } from 'node:path';
+import { readSpecContent } from '../spec-reader.js';
+import { extractFilesFromSpecBody } from '../spec-format/technical-md-populator.js';
+export async function filterConflicting(candidates, activeSpecs, projectPath, cache = new Map()) {
     if (activeSpecs.length === 0) {
         return candidates;
     }
-    const activeFiles = buildFileSet(activeSpecs);
+    const activeFiles = await buildFileSet(activeSpecs, projectPath, cache);
     if (activeFiles.size === 0) {
         return candidates;
     }
-    return candidates.filter((spec) => {
-        const specFiles = extractFiles(spec);
-        // No file info → no conflict (treat as safe)
-        if (specFiles.length === 0) {
-            return true;
+    const result = [];
+    for (const spec of candidates) {
+        const specFiles = await extractFilesMemoized(spec, projectPath, cache);
+        if (specFiles.length === 0 || !specFiles.some((f) => activeFiles.has(f))) {
+            result.push(spec);
         }
-        return !specFiles.some((f) => activeFiles.has(f));
-    });
+    }
+    return result;
 }
-/**
- * Build a set of all files owned by the active (implementing) specs.
- */
-function buildFileSet(specs) {
+async function buildFileSet(specs, projectPath, cache) {
     const files = new Set();
     for (const spec of specs) {
-        for (const f of extractFiles(spec)) {
+        for (const f of await extractFilesMemoized(spec, projectPath, cache)) {
             files.add(f);
         }
     }
     return files;
 }
-/**
- * Extract all file paths from a spec's technical section.
- * Reads filesToModify and filesToCreate from spec.technical.
- */
-export function extractFiles(spec) {
-    const technical = spec.technical;
-    if (!technical) {
+export async function extractFiles(spec, projectPath) {
+    if (!spec.specPath) {
         return [];
     }
-    const files = [];
-    const filesToModify = technical.filesToModify;
-    if (Array.isArray(filesToModify)) {
-        for (const f of filesToModify) {
-            if (typeof f === 'string' && f.trim()) {
-                files.push(f.trim());
-            }
-        }
+    const specPath = isAbsolute(spec.specPath) ? spec.specPath : join(projectPath, spec.specPath);
+    const body = await readSpecContent(specPath);
+    if (body === null) {
+        return [];
     }
-    const filesToCreate = technical.filesToCreate;
-    if (Array.isArray(filesToCreate)) {
-        for (const f of filesToCreate) {
-            if (typeof f === 'string' && f.trim()) {
-                files.push(f.trim());
-            }
-        }
+    const ownership = await extractFilesFromSpecBody(body, projectPath);
+    if (ownership === null) {
+        return [];
+    }
+    return [
+        ...new Set([...ownership.create, ...ownership.modify, ...ownership.test].map((e) => e.path)),
+    ];
+}
+async function extractFilesMemoized(spec, projectPath, cache) {
+    const cached = cache.get(spec.id);
+    if (cached !== undefined) {
+        return cached;
     }
+    const files = await extractFiles(spec, projectPath);
+    cache.set(spec.id, files);
     return files;
 }
-/**
- * Check if two specs share any files (used by orchestration planner).
- */
-export function hasFileConflict(specA, specB) {
-    const filesA = extractFiles(specA);
-    const filesB = new Set(extractFiles(specB));
+export async function hasFileConflict(specA, specB, projectPath, cache = new Map()) {
+    const filesA = await extractFilesMemoized(specA, projectPath, cache);
+    const filesB = new Set(await extractFilesMemoized(specB, projectPath, cache));
     return filesA.some((f) => filesB.has(f));
 }
 //# sourceMappingURL=conflict-filter.js.map

package/dist/engine/next-spec-resolver/index.d.ts

@@ -11,8 +11,8 @@ export type { NextSpecResult } from '../../types/next-spec.js';
  *   4. Sort by scoreSpec() DESC, then by id ASC (tie-break)
  *   5. Return top-1 as NextSpecResult
  *
- * @param _projectPath - absolute path to project root (reserved for future use)
+ * @param projectPath - absolute path to project root, used to resolve spec.md paths for conflict detection
  * @param allSpecs - full list of all specs in the project
  */
-export declare function resolveNextSpec(_projectPath: string, allSpecs: Spec[]): Promise<NextSpecResult>;
+export declare function resolveNextSpec(projectPath: string, allSpecs: Spec[]): Promise<NextSpecResult>;
 //# sourceMappingURL=index.d.ts.map

package/dist/engine/next-spec-resolver/index.js

@@ -14,13 +14,13 @@ import { scoreSpec } from './scorer.js';
  *   4. Sort by scoreSpec() DESC, then by id ASC (tie-break)
  *   5. Return top-1 as NextSpecResult
  *
- * @param _projectPath - absolute path to project root (reserved for future use)
+ * @param projectPath - absolute path to project root, used to resolve spec.md paths for conflict detection
  * @param allSpecs - full list of all specs in the project
  */
-export function resolveNextSpec(_projectPath, allSpecs) {
-    return Promise.resolve(computeNextSpec(allSpecs));
+export function resolveNextSpec(projectPath, allSpecs) {
+    return computeNextSpec(projectPath, allSpecs);
 }
-function computeNextSpec(allSpecs) {
+async function computeNextSpec(projectPath, allSpecs) {
     // Scenario 8: empty spec list
     if (allSpecs.length === 0) {
         return { spec: null, reason: 'No specs in project yet' };
@@ -55,7 +55,7 @@ function computeNextSpec(allSpecs) {
     }
     // Step 3: Filter conflicting with implementing specs
     const activeSpecs = allSpecs.filter((s) => s.status === 'implementing');
-    const candidates = filterConflicting(unblocked, activeSpecs);
+    const candidates = await filterConflicting(unblocked, activeSpecs, projectPath);
     if (candidates.length === 0) {
         return {
             spec: null,

package/dist/engine/next-spec-resolver/orchestration-planner.js

@@ -33,11 +33,12 @@ export async function resolveOrchestrationPlan(projectPath, allSpecs) {
     const levels = buildTopologicalLevels(unblocked, inDegree, dependents);
     const waves = [];
     const resolvedIds = new Set();
+    const conflictCache = new Map();
     for (const level of levels) {
         if (waves.length >= MAX_WAVES) {
             break;
         }
-        const waveGroups = groupByConflict(level);
+        const waveGroups = await groupByConflict(level, projectPath, conflictCache);
         for (const group of waveGroups) {
             if (waves.length >= MAX_WAVES) {
                 break;
@@ -121,7 +122,7 @@ function buildWaveEntry(spec, group, resolvedIds) {
         dependsOn: (Array.isArray(spec.dependencies) ? spec.dependencies : []).filter((d) => resolvedIds.has(d)),
     };
 }
-function groupByConflict(specs) {
+async function groupByConflict(specs, projectPath, cache) {
     const groups = [];
     const assigned = new Set();
     for (const spec of specs) {
@@ -133,7 +134,14 @@ function groupByConflict(specs) {
             if (group.length >= MAX_PARALLEL_PER_WAVE) {
                 continue;
             }
-            if (!group.some((other) => hasFileConflict(spec, other))) {
+            let conflicts = false;
+            for (const other of group) {
+                if (await hasFileConflict(spec, other, projectPath, cache)) {
+                    conflicts = true;
+                    break;
+                }
+            }
+            if (!conflicts) {
                 group.push(spec);
                 assigned.add(spec.id);
                 placed = true;

package/dist/engine/planu-core.darwin-arm64.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.3.8",
-  "engineVersion": "5.3.8",
-  "buildId": "1-5.3.8-aarch64-apple-darwin",
+  "cliVersion": "5.3.10",
+  "engineVersion": "5.3.10",
+  "buildId": "1-5.3.10-aarch64-apple-darwin",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -17,15 +17,15 @@
   "platform": "darwin",
   "arch": "arm64",
   "libc": null,
-  "artifactSha256": "8dcbd7a6a1225d68658cb50ce32b174e52e820a3ebdc3f125cdec568966a7759",
+  "artifactSha256": "d8beac69c20433cc67304bfe9e6975447c6d18aa744887ebe8982858a5c9b50e",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.darwin-arm64.node.sbom.json",
-    "sha256": "34ae39426563dbd6b2d4f61119ac53e362ddb2fb78a27b074518b477cb808d37"
+    "sha256": "d14e32fc056c4d533366178a95f503ea18623c9c7502a78dede88bdfe080d149"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "c0d406e9b49a5ed393b2dcade39eb951223974c6",
+    "sourceCommit": "fb419d210888ffbb972e48b7382a7d01b50a9625",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -34,6 +34,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "zulz2seIniwXGYJINphaouLeL8/CHmjKezWwOUf/8l1tBlpk8z/7jl/SL3SspVFih3PWPM9+0kJAo7aHixOUDA=="
+    "value": "rUhhOkekI/nd5O6msXScY3LSPnVEsXjt6NeTF94SFzkwkh8kMGthFycMcVWx35HfeWbWf7gs1AUCtliXbv8DDA=="
   }
 }

package/dist/engine/planu-core.darwin-arm64.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.3.8",
+      "bom-ref": "pkg:cargo/planu-core@5.3.10",
       "type": "library",
       "name": "planu-core",
-      "version": "5.3.8",
+      "version": "5.3.10",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "8dcbd7a6a1225d68658cb50ce32b174e52e820a3ebdc3f125cdec568966a7759"
+          "content": "d8beac69c20433cc67304bfe9e6975447c6d18aa744887ebe8982858a5c9b50e"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.3.8",
+      "ref": "pkg:cargo/planu-core@5.3.10",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/planu-core.darwin-x64.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.3.8",
-  "engineVersion": "5.3.8",
-  "buildId": "1-5.3.8-x86_64-apple-darwin",
+  "cliVersion": "5.3.10",
+  "engineVersion": "5.3.10",
+  "buildId": "1-5.3.10-x86_64-apple-darwin",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -17,15 +17,15 @@
   "platform": "darwin",
   "arch": "x64",
   "libc": null,
-  "artifactSha256": "f3affc187e9c20766667848f9742e59cbba41b4791238e5aeaffaeccaaaa5dc2",
+  "artifactSha256": "0ff4b1ebedbbae23b9e16e336f17e4eba1be291e1ef264ef39fc63dd954f4aac",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.darwin-x64.node.sbom.json",
-    "sha256": "417f4b08fcf6c6668ad620c9019fad7bbe79a09f613c253ee59863d6f44b8039"
+    "sha256": "dc1aca4f7f611ade3456586ac75b3a61850fc2d23bde6ec57abf2545f128eb17"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "c0d406e9b49a5ed393b2dcade39eb951223974c6",
+    "sourceCommit": "fb419d210888ffbb972e48b7382a7d01b50a9625",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -34,6 +34,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "AepYMvl7NAYszjYlB691/Cp+P7MEM3/9rd1CcbHbYaz8G+T0HTNQ8U80LddrdKnPAcje/nrwolUapbRScWs+Bg=="
+    "value": "R9zcCaXmBVoWPdrBiF6/GqvfVK41W3NWgJ5JgSymiSmiwx45BjOZF7HIrvGq1tr/zruCeBBzGYl05FR/JA8ADQ=="
   }
 }

package/dist/engine/planu-core.darwin-x64.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.3.8",
+      "bom-ref": "pkg:cargo/planu-core@5.3.10",
       "type": "library",
       "name": "planu-core",
-      "version": "5.3.8",
+      "version": "5.3.10",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "f3affc187e9c20766667848f9742e59cbba41b4791238e5aeaffaeccaaaa5dc2"
+          "content": "0ff4b1ebedbbae23b9e16e336f17e4eba1be291e1ef264ef39fc63dd954f4aac"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.3.8",
+      "ref": "pkg:cargo/planu-core@5.3.10",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/planu-core.linux-arm64-gnu.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.3.8",
-  "engineVersion": "5.3.8",
-  "buildId": "1-5.3.8-aarch64-unknown-linux-gnu",
+  "cliVersion": "5.3.10",
+  "engineVersion": "5.3.10",
+  "buildId": "1-5.3.10-aarch64-unknown-linux-gnu",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -16,15 +16,15 @@
   "platform": "linux",
   "arch": "arm64",
   "libc": "glibc",
-  "artifactSha256": "c8f8315bb60f966e6250dffc7c094adcb1516499056b6c88a4d714e1b85ae52e",
+  "artifactSha256": "28e9486017819da5031ba39be725f749b91e575df2f2fcb90b1529d673a82749",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.linux-arm64-gnu.node.sbom.json",
-    "sha256": "14a46a7d84851076b7549b8ff8d412a31d845c7ff291c90fff08bfb39e4b2ea0"
+    "sha256": "845dd005c78338dd6597aa8583919e4d1d545263cc6792e7929fe1dc41458377"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "c0d406e9b49a5ed393b2dcade39eb951223974c6",
+    "sourceCommit": "fb419d210888ffbb972e48b7382a7d01b50a9625",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -33,6 +33,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "3002w64/CbUXeA8G0etnA8f8k6EnI8HpTXL0D97EghZLaU4lmqJ4KTgnjaVV7XtemRz4QkGXrlfQ8MW6nJTnAg=="
+    "value": "UTQoqkDsSuju0czEEjP2TYgDSUoWkiC31y5cUchXvSf9LmvHNiJEG+Dq6dE66NUF2vRuTb0mxqbxPq0PwlW3Dg=="
   }
 }

package/dist/engine/planu-core.linux-arm64-gnu.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.3.8",
+      "bom-ref": "pkg:cargo/planu-core@5.3.10",
       "type": "library",
       "name": "planu-core",
-      "version": "5.3.8",
+      "version": "5.3.10",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "c8f8315bb60f966e6250dffc7c094adcb1516499056b6c88a4d714e1b85ae52e"
+          "content": "28e9486017819da5031ba39be725f749b91e575df2f2fcb90b1529d673a82749"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.3.8",
+      "ref": "pkg:cargo/planu-core@5.3.10",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/planu-core.linux-arm64-musl.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.3.8",
-  "engineVersion": "5.3.8",
-  "buildId": "1-5.3.8-aarch64-unknown-linux-musl",
+  "cliVersion": "5.3.10",
+  "engineVersion": "5.3.10",
+  "buildId": "1-5.3.10-aarch64-unknown-linux-musl",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -16,15 +16,15 @@
   "platform": "linux",
   "arch": "arm64",
   "libc": "musl",
-  "artifactSha256": "ffc21930a3ffa37a8ffb963d1c3bd88194261c5f47d6645df01024d9e2b60d5a",
+  "artifactSha256": "cb3e41dbb3826bbe7d7df0a24c133d2492c31ffe856ad71a4c5d8bd08560b06f",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.linux-arm64-musl.node.sbom.json",
-    "sha256": "421f01e0c237604db423ba74d1a1e91849d4bbf6223f2fa5d2c6c110888b08d1"
+    "sha256": "e9d225953b5b2d459d11d671cb3023a3523f98ab0a8f9576bceccff155e52877"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "c0d406e9b49a5ed393b2dcade39eb951223974c6",
+    "sourceCommit": "fb419d210888ffbb972e48b7382a7d01b50a9625",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -33,6 +33,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "Euk8g0nxITjsBrUfmZltIfPHxy6x8s6iySzbxjxYSuuLlgHPYgCQwR8blrV+CNnzXbLhCf7bDseprKw9ZxhcDg=="
+    "value": "WJljyakoVmJfKTow05wBS/zH8bDYZG7KKqbWi6BwJORPZx1Ds3Sb9Y5F8WKv9RA+5BuFSFIJp4zHyJt9Tw6GDQ=="
   }
 }

package/dist/engine/planu-core.linux-arm64-musl.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.3.8",
+      "bom-ref": "pkg:cargo/planu-core@5.3.10",
       "type": "library",
       "name": "planu-core",
-      "version": "5.3.8",
+      "version": "5.3.10",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "ffc21930a3ffa37a8ffb963d1c3bd88194261c5f47d6645df01024d9e2b60d5a"
+          "content": "cb3e41dbb3826bbe7d7df0a24c133d2492c31ffe856ad71a4c5d8bd08560b06f"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.3.8",
+      "ref": "pkg:cargo/planu-core@5.3.10",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/planu-core.linux-x64-gnu.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.3.8",
-  "engineVersion": "5.3.8",
-  "buildId": "1-5.3.8-x86_64-unknown-linux-gnu",
+  "cliVersion": "5.3.10",
+  "engineVersion": "5.3.10",
+  "buildId": "1-5.3.10-x86_64-unknown-linux-gnu",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -16,15 +16,15 @@
   "platform": "linux",
   "arch": "x64",
   "libc": "glibc",
-  "artifactSha256": "2fd2f2b88fba7345f0d0e19ea16b9600230ef6fae6b1f1a044ee02764214c5e3",
+  "artifactSha256": "7787ae4a0980dbbb2e63a771d7570b7006c950b1ed1acf48513aef47ea74738f",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.linux-x64-gnu.node.sbom.json",
-    "sha256": "51e56ab54ee969b571b7009169db4edbc533c5a92476395c20764cd2ab6654bf"
+    "sha256": "983b6e5dd328ba08e035996568d2dcda48419876e22ff2c54ab09479cfdb4fd0"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "c0d406e9b49a5ed393b2dcade39eb951223974c6",
+    "sourceCommit": "fb419d210888ffbb972e48b7382a7d01b50a9625",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -33,6 +33,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "3dDrNnVtW/juPnD67kL7ZA3tvrDFvyfbIBX+eVVi26Ly9tCDUM9abpvX28TPazuGUJ+Paipj+W1/cOEyGsKhDA=="
+    "value": "QQVd67qTw4BrhqCyOmd8SBKa8IeiTwzo6zV5UKv8206KvXxT+bqcv6ZcN1EsLYkjw9/g8DzcQSbgbpbS+oo/Ag=="
   }
 }

package/dist/engine/planu-core.linux-x64-gnu.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.3.8",
+      "bom-ref": "pkg:cargo/planu-core@5.3.10",
       "type": "library",
       "name": "planu-core",
-      "version": "5.3.8",
+      "version": "5.3.10",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "2fd2f2b88fba7345f0d0e19ea16b9600230ef6fae6b1f1a044ee02764214c5e3"
+          "content": "7787ae4a0980dbbb2e63a771d7570b7006c950b1ed1acf48513aef47ea74738f"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.3.8",
+      "ref": "pkg:cargo/planu-core@5.3.10",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/planu-core.linux-x64-musl.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.3.8",
-  "engineVersion": "5.3.8",
-  "buildId": "1-5.3.8-x86_64-unknown-linux-musl",
+  "cliVersion": "5.3.10",
+  "engineVersion": "5.3.10",
+  "buildId": "1-5.3.10-x86_64-unknown-linux-musl",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -16,15 +16,15 @@
   "platform": "linux",
   "arch": "x64",
   "libc": "musl",
-  "artifactSha256": "d93c3691b0f835b4056bf2d8b17d0448566616222d5221fc292fc87019120318",
+  "artifactSha256": "5c73eb5c0aacfbd3bd3a658b7037962ead65cbd568b6d503e3a94a0c676f2542",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.linux-x64-musl.node.sbom.json",
-    "sha256": "02609054c32df79175cfa245c503e1df1ca4b32b15ad34ec0eda5b34a28fda27"
+    "sha256": "c754c7acf3f4bbd331670f4bbbdacfaaa634198449e960faaa9b39c922f2a249"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "c0d406e9b49a5ed393b2dcade39eb951223974c6",
+    "sourceCommit": "fb419d210888ffbb972e48b7382a7d01b50a9625",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -33,6 +33,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "/echWzVigxiZs4/TF6wUHv1MEHBi7ulWLA9+JpDnd+otBDX8HIM3O6oOhDc4Lu1wmfQJMPyPCvutWkZxcXj6Dg=="
+    "value": "7p545clM056yw/1PTMLxeR6GrjnqnleW5oUlhLtuI6oWTWSOooTm68CuTQnvmyFFSQmTCU37zwHZIQvolmQmBw=="
   }
 }

package/dist/engine/planu-core.linux-x64-musl.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.3.8",
+      "bom-ref": "pkg:cargo/planu-core@5.3.10",
       "type": "library",
       "name": "planu-core",
-      "version": "5.3.8",
+      "version": "5.3.10",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "d93c3691b0f835b4056bf2d8b17d0448566616222d5221fc292fc87019120318"
+          "content": "5c73eb5c0aacfbd3bd3a658b7037962ead65cbd568b6d503e3a94a0c676f2542"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.3.8",
+      "ref": "pkg:cargo/planu-core@5.3.10",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/planu-core.win32-arm64-msvc.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.3.8",
-  "engineVersion": "5.3.8",
-  "buildId": "1-5.3.8-aarch64-pc-windows-msvc",
+  "cliVersion": "5.3.10",
+  "engineVersion": "5.3.10",
+  "buildId": "1-5.3.10-aarch64-pc-windows-msvc",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -16,15 +16,15 @@
   "platform": "win32",
   "arch": "arm64",
   "libc": null,
-  "artifactSha256": "1e7250f120e58d9ebbf26b22ae9b0fd3d963ad80479b61e3f4be59feb0bcc97e",
+  "artifactSha256": "5cf4072e6f2f4623ebde20134cb670a50fefcf79f849cde428a3e68aeef4dbcf",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.win32-arm64-msvc.node.sbom.json",
-    "sha256": "9a10362845e48f91b5604552de6509fcf1125c0161b43f2b6b0b3abb0fbc4295"
+    "sha256": "42a88feefc24921eda52cdd7ec4208a996136bb38871891386dadd2efbff08a6"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "c0d406e9b49a5ed393b2dcade39eb951223974c6",
+    "sourceCommit": "fb419d210888ffbb972e48b7382a7d01b50a9625",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -33,6 +33,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "xvRJaOZmJ82Ru9UzRQENpyiU64mTOOcdVfh8gdS6jK0T5QUTJ9wUtz28xhnh24uyZLjyO3niKQky3Sq2GpEhCw=="
+    "value": "efNuvSLjD0P2taPCPrLqhjh28lFR4xQFX2+cV85YTuMP6Rodzy+Y3w+YqkUyfWLGjTTDnji6QJrXtIYYNK8vAg=="
   }
 }

package/dist/engine/planu-core.win32-arm64-msvc.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.3.8",
+      "bom-ref": "pkg:cargo/planu-core@5.3.10",
       "type": "library",
       "name": "planu-core",
-      "version": "5.3.8",
+      "version": "5.3.10",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "1e7250f120e58d9ebbf26b22ae9b0fd3d963ad80479b61e3f4be59feb0bcc97e"
+          "content": "5cf4072e6f2f4623ebde20134cb670a50fefcf79f849cde428a3e68aeef4dbcf"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.3.8",
+      "ref": "pkg:cargo/planu-core@5.3.10",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/planu-core.win32-x64-msvc.node.manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
-  "cliVersion": "5.3.8",
-  "engineVersion": "5.3.8",
-  "buildId": "1-5.3.8-x86_64-pc-windows-msvc",
+  "cliVersion": "5.3.10",
+  "engineVersion": "5.3.10",
+  "buildId": "1-5.3.10-x86_64-pc-windows-msvc",
   "protocolAbi": 1,
   "capabilityAbi": 2,
   "nodeApiAbi": 4,
@@ -16,15 +16,15 @@
   "platform": "win32",
   "arch": "x64",
   "libc": null,
-  "artifactSha256": "00609e4d5c5cb1f41a9b3824bbe4775bdab365a7bc95f9936a947b5ce2103e69",
+  "artifactSha256": "0f393c02b1cfe7145bfbc4485de5ad127a07f8e8955e61d5a3bce69135f717f7",
   "sbom": {
     "format": "CycloneDX-1.5",
     "path": "planu-core.win32-x64-msvc.node.sbom.json",
-    "sha256": "805d4becff3818b502a44b83b3152b74d2064a74b0808f5e0587e6d9b8eec274"
+    "sha256": "ecc00d784269220e168e90db418228c6e92f7be9fb01409b9e9abeabe8265c1f"
   },
   "provenance": {
     "builder": "scripts/build-rust-local.sh",
-    "sourceCommit": "c0d406e9b49a5ed393b2dcade39eb951223974c6",
+    "sourceCommit": "fb419d210888ffbb972e48b7382a7d01b50a9625",
     "sourceTreeDirty": false,
     "sourceDateEpoch": 1,
     "rustToolchain": "rustc 1.95.0 (59807616e 2026-04-14)",
@@ -33,6 +33,6 @@
   "signature": {
     "algorithm": "Ed25519",
     "keyId": "e2ee765cb5ad9fbdc433ece332bce26d746d5e350b3acde0721a4c8c6337ff7b",
-    "value": "fZQLZB7+7E55Gy/9luaF7isRmDht9nrNnvy8a922yCp4AnYXqRfhztkVPQPkMgoN5+wv793XOfY/6iS4rvmhBw=="
+    "value": "9Q/RF7gB8t++GQdo4RaoBNjeCdWxXKNm3NT8sXfxDmiEPgqaAR60USiR21v3D00wStMSPoZK2UcGHKkpvqmdBg=="
   }
 }

package/dist/engine/planu-core.win32-x64-msvc.node.sbom.json

@@ -4,14 +4,14 @@
   "version": 1,
   "metadata": {
     "component": {
-      "bom-ref": "pkg:cargo/planu-core@5.3.8",
+      "bom-ref": "pkg:cargo/planu-core@5.3.10",
       "type": "library",
       "name": "planu-core",
-      "version": "5.3.8",
+      "version": "5.3.10",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "00609e4d5c5cb1f41a9b3824bbe4775bdab365a7bc95f9936a947b5ce2103e69"
+          "content": "0f393c02b1cfe7145bfbc4485de5ad127a07f8e8955e61d5a3bce69135f717f7"
         }
       ]
     }
@@ -1106,7 +1106,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:cargo/planu-core@5.3.8",
+      "ref": "pkg:cargo/planu-core@5.3.10",
       "dependsOn": [
         "pkg:cargo/core-foundation@0.10.1",
         "pkg:cargo/hmac@0.12.1",

package/dist/engine/spec-format/technical-md-populator.js

@@ -1,25 +1,45 @@
 // engine/spec-format/technical-md-populator.ts — SPEC-586: Parse spec body to populate ## Technical
 import { stat } from 'node:fs/promises';
 import { join } from 'node:path';
+import { findMarkdownSectionRange } from './markdown-sections.js';
 const FILE_PATH_RE = /\b(?:src|tests)\/[a-zA-Z0-9/_.-]+\.[a-z]+\b/g;
+function stripFencedBlocks(content) {
+    const kept = [];
+    let fence = null;
+    for (const line of content.split('\n')) {
+        const fenceMatch = /^[ \t]{0,3}(`{3,}|~{3,})/.exec(line);
+        if (fenceMatch?.[1]) {
+            const marker = fenceMatch[1][0] ?? '`';
+            if (fence === null) {
+                fence = { marker, length: fenceMatch[1].length };
+            }
+            else if (fence.marker === marker && fenceMatch[1].length >= fence.length) {
+                fence = null;
+            }
+            continue;
+        }
+        if (fence === null) {
+            kept.push(line);
+        }
+    }
+    return kept.join('\n');
+}
+const SLASH_PATH_BULLET_RE = /^-\s+`?((?:[\w.-]+\/)+[\w-][\w.-]*\.[a-zA-Z][a-zA-Z0-9]*)`?(?=[\s`]|$)/;
+const BARE_FILE_BULLET_RE = /^-\s+`?([\w-][\w.-]*\.[a-zA-Z][a-zA-Z0-9]*)`?\s*$/;
 function extractPathsFromSection(sectionText) {
     const paths = [];
-    const listRe = /^-\s+`?(src\/[\w./-]+|tests\/[\w./-]+)`?/gm;
-    let m;
-    while ((m = listRe.exec(sectionText)) !== null) {
-        const match = m[0]
-            .replace(/^-\s+`?/, '')
-            .replace(/`.*$/, '')
-            .trim();
-        if (match) {
-            paths.push(match);
+    for (const line of sectionText.split('\n')) {
+        const candidate = SLASH_PATH_BULLET_RE.exec(line)?.[1] ?? BARE_FILE_BULLET_RE.exec(line)?.[1];
+        if (candidate !== undefined && !candidate.split('/').includes('..')) {
+            paths.push(candidate);
         }
     }
     return paths;
 }
 function parseSectionedFileLists(body) {
-    const filesSection = /##\s+Files(?:\s+likely\s+to\s+change)?\s*[\s\S]*?(?=\n##\s|$)/.exec(body);
-    const scopedBody = filesSection?.[0] ?? body;
+    const filesRange = findMarkdownSectionRange(body, 'Files') ??
+        findMarkdownSectionRange(body, 'Files likely to change');
+    const scopedBody = stripFencedBlocks(filesRange ? body.slice(filesRange.contentStart, filesRange.end) : body);
     const createSection = /###\s+Create[\s\S]*?(?=\n###|\n##\s|$)/.exec(scopedBody);
     const modifySection = /###\s+Modify[\s\S]*?(?=\n###|\n##\s|$)/.exec(scopedBody);
     const testSection = /###\s+Test[\s\S]*?(?=\n###|\n##\s|$)/.exec(scopedBody);
@@ -71,7 +91,9 @@ export async function extractFilesFromSpecBody(specBody, projectPath) {
         (structured.create.length > 0 || structured.modify.length > 0 || structured.test.length > 0)) {
         return structured;
     }
-    const allPaths = [...new Set(Array.from(specBody.matchAll(FILE_PATH_RE), (m) => m[0]))];
+    const allPaths = [
+        ...new Set(Array.from(stripFencedBlocks(specBody).matchAll(FILE_PATH_RE), (m) => m[0])),
+    ];
     if (allPaths.length === 0) {
         return null;
     }

package/dist/tools/update-status/index.d.ts

@@ -1,5 +1,6 @@
 import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
-import type { UpdateStatusInput, ToolResult, Actuals, ReconciliationInvocationContext } from '../../types/index.js';
+import type { UpdateStatusInput, ToolResult, Actuals, Spec, ReconciliationInvocationContext } from '../../types/index.js';
+import { type GapScore } from '../../engine/code-scanner/index.js';
 type LifecycleAuthorityRoute = {
     route: 'ordinary';
 } | {
@@ -9,6 +10,7 @@ type LifecycleAuthorityRoute = {
     result: ToolResult;
 };
 /** Select the lifecycle path before any transition, artifact, receipt, or log mutation. */
+export declare function runOwnershipBoundedCodeReality(spec: Spec, projectPath: string): Promise<GapScore>;
 export declare function classifyLifecycleAuthority(input: UpdateStatusInput, context: ReconciliationInvocationContext, options?: {
     requireDoneDigest?: boolean;
 }): LifecycleAuthorityRoute;

package/dist/tools/update-status/index.js

@@ -28,6 +28,7 @@ import { recordForceUsage } from '../../storage/force-analytics-store.js';
 import { maybeSafePushOnDone, queuePostCommitTasks, runCascadeForResponse, } from './side-effects.js';
 import { formatKeyValue } from '../output-formatter.js';
 import { checkCodeReality } from '../../engine/code-scanner/index.js';
+import { extractFilesFromSpecBody } from '../../engine/spec-format/technical-md-populator.js';
 import { isAbsolute, join, resolve } from 'node:path';
 import { readSpecContent } from '../../engine/spec-reader.js';
 import { trackCost } from '../../engine/cost-tracking/operation-tracker.js';
@@ -51,6 +52,20 @@ function lifecycleAuthorityError(code, message, fixHint) {
     };
 }
 /** Select the lifecycle path before any transition, artifact, receipt, or log mutation. */
+export async function runOwnershipBoundedCodeReality(spec, projectPath) {
+    const specPath = isAbsolute(spec.specPath) ? spec.specPath : join(projectPath, spec.specPath);
+    const specBody = await readSpecContent(specPath);
+    const ownership = specBody === null ? null : await extractFilesFromSpecBody(specBody, projectPath);
+    const ownedPaths = ownership === null
+        ? []
+        : [
+            ...new Set([...ownership.create, ...ownership.modify, ...ownership.test].map((e) => e.path)),
+        ];
+    if (ownedPaths.length === 0) {
+        reportClassifiedDegradation('CODE_REALITY_OWNERSHIP_MISSING', new Error(`spec ${spec.id} declares no canonical owned paths`));
+    }
+    return checkCodeReality(projectPath, spec.title, ownedPaths);
+}
 export function classifyLifecycleAuthority(input, context, options = {}) {
     const hasRequestId = input.reconciliationRequestId !== undefined;
     const hasTransitionId = input.expectedImplementingTransitionId !== undefined;
@@ -1052,7 +1067,7 @@ export async function handleUpdateStatus(params, server) {
                     const [codeRealityResult, doneGatesResult] = await Promise.all([
                         // Code reality: only relevant for 'implementing'
                         newStatus === 'implementing' && !reverseTransition && effectiveGatePath
-                            ? checkCodeReality(effectiveGatePath, spec.title).catch((error) => {
+                            ? runOwnershipBoundedCodeReality(spec, effectiveGatePath).catch((error) => {
                                 // reliability-optional: CODE_REALITY_ENRICHMENT — downstream evidence gates remain binding
                                 reportClassifiedDegradation('CODE_REALITY_ENRICHMENT', error);
                                 return null;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@planu/cli",
-  "version": "5.3.8",
+  "version": "5.3.10",
   "description": "Planu — MCP Server for Spec Driven Development with native Rust acceleration for hot paths. Cross-platform (Linux/macOS/Windows, x64/arm64, glibc/musl).",
   "type": "module",
   "main": "dist/index.js",
@@ -35,14 +35,14 @@
     "packageName": "@planu/core"
   },
   "optionalDependencies": {
-    "@planu/core-darwin-arm64": "5.3.8",
-    "@planu/core-darwin-x64": "5.3.8",
-    "@planu/core-linux-arm64-gnu": "5.3.8",
-    "@planu/core-linux-arm64-musl": "5.3.8",
-    "@planu/core-linux-x64-gnu": "5.3.8",
-    "@planu/core-linux-x64-musl": "5.3.8",
-    "@planu/core-win32-arm64-msvc": "5.3.8",
-    "@planu/core-win32-x64-msvc": "5.3.8"
+    "@planu/core-darwin-arm64": "5.3.10",
+    "@planu/core-darwin-x64": "5.3.10",
+    "@planu/core-linux-arm64-gnu": "5.3.10",
+    "@planu/core-linux-arm64-musl": "5.3.10",
+    "@planu/core-linux-x64-gnu": "5.3.10",
+    "@planu/core-linux-x64-musl": "5.3.10",
+    "@planu/core-win32-arm64-msvc": "5.3.10",
+    "@planu/core-win32-x64-msvc": "5.3.10"
   },
   "engines": {
     "node": ">=24.0.0"

package/planu-native.json

@@ -1,7 +1,7 @@
 {
   "name": "dev.planu.native",
   "displayName": "Planu Native Lightweight Surface",
-  "version": "5.3.8",
+  "version": "5.3.10",
   "packageName": "@planu/cli",
   "modes": {
     "lightweight": {

package/planu-plugin.json

@@ -2,7 +2,7 @@
   "name": "dev.planu.cli",
   "displayName": "Planu — Spec Driven Development",
   "description": "Manage software specs, estimations, and autonomous SDD workflows. Language-agnostic MCP server for Claude Code.",
-  "version": "5.3.8",
+  "version": "5.3.10",
   "icon": "assets/plugin/icon.svg",
   "command": ["npx", "@planu/cli@latest"],
   "packageName": "@planu/cli",