@planu/cli 5.3.32 → 5.3.33

package/CHANGELOG.md

@@ -1,3 +1,13 @@
+## [5.3.33] - 2026-08-21
+
+### Bug Fixes
+- fix(spec-1587): scope creation-time placeholder scan to standalone line content
+- fix(spec-1586): harden scoreAmbiguity against tautological substring-pairs and unanchored markers
+
+### Chores
+- chore(planu): sync autopilot state for SPEC-1586/1587
+
+
 ## [5.3.32] - 2026-08-21
 
 ### Bug Fixes

package/dist/engine/spec-format/unified-spec-builder.js

@@ -144,6 +144,16 @@ function extractSection(body, sectionName) {
     const end = next ? next.index : body.length;
     return body.slice(start, end).trimEnd();
 }
+const CONTRACT_PLACEHOLDER_MARKERS = ['Needs decision', 'TBD', 'TODO'];
+function stripLeadingListMarker(line) {
+    return line.replace(/^[ \t]*(?:[-*+]|\d+[.)])[ \t]+/, '');
+}
+function hasUnresolvedContractPlaceholderLine(scannable) {
+    return scannable.split('\n').some((line) => {
+        const stripped = stripLeadingListMarker(line).trim();
+        return (CONTRACT_PLACEHOLDER_MARKERS.some((marker) => marker.toLowerCase() === stripped.toLowerCase()) || /^(?:needs decision|tbd|todo)\s*:/i.test(stripped));
+    });
+}
 /** Pure pre-persistence validation for the complete unified spec candidate. */
 // eslint-disable-next-line max-lines-per-function -- validation order mirrors the public issue contract
 export function validateUnifiedSpecCandidate(candidate, options = {}) {
@@ -188,7 +198,7 @@ export function validateUnifiedSpecCandidate(candidate, options = {}) {
             message: `Required section heading is embedded in quoted, fenced, or nested content: ${section}`,
         });
     }
-    if (/\b(?:Needs decision|TBD|TODO)\b/i.test(scannable)) {
+    if (hasUnresolvedContractPlaceholderLine(scannable)) {
         issues.push({
             code: 'UNRESOLVED_CONTRACT_PLACEHOLDER',
             message: 'Unified candidate contains an unresolved contract placeholder.',

package/dist/engine/spec-quality-scorer.js

@@ -26,12 +26,12 @@ const VAGUE_WORDS = [
     'intuitive',
 ];
 const CONTRADICTION_PAIRS = [
-    ['always', 'never'],
-    ['mandatory', 'optional'],
-    ['required', 'not required'],
-    ['must', 'must not'],
-    ['synchronous', 'asynchronous'],
-    ['blocking', 'non-blocking'],
+    ['always', 'never', 'genuine'],
+    ['mandatory', 'optional', 'genuine'],
+    ['required', 'not required', 'substring'],
+    ['must', 'must not', 'substring'],
+    ['synchronous', 'asynchronous', 'substring'],
+    ['blocking', 'non-blocking', 'substring'],
 ];
 // ── Internal helpers ─────────────────────────────────────────────────────────
 function gradeFromTotal(total) {
@@ -234,6 +234,30 @@ function scoreTestability(criteriaLines) {
         bddCoverage,
     };
 }
+function wordBoundaryPattern(term) {
+    return new RegExp(`\\b${term}\\b`);
+}
+function hasWordBoundaryMatch(text, term) {
+    return wordBoundaryPattern(term).test(text);
+}
+function substringPairContradicts(line, shorter, longer) {
+    if (!hasWordBoundaryMatch(line, longer)) {
+        return false;
+    }
+    const withoutLonger = line.replace(new RegExp(`\\b${longer}\\b`, 'g'), ' ');
+    return hasWordBoundaryMatch(withoutLonger, shorter);
+}
+function genuinePairContradicts(line, termA, termB) {
+    return hasWordBoundaryMatch(line, termA) && hasWordBoundaryMatch(line, termB);
+}
+function pairContradictsInCriteria(criteriaLines, termA, termB, kind) {
+    return criteriaLines.some((rawLine) => {
+        const line = rawLine.toLowerCase();
+        return kind === 'substring'
+            ? substringPairContradicts(line, termA, termB)
+            : genuinePairContradicts(line, termA, termB);
+    });
+}
 function scoreAmbiguity(content, criteriaLines) {
     const issues = [];
     const recommendations = [];
@@ -247,10 +271,10 @@ function scoreAmbiguity(content, criteriaLines) {
         };
     }
     const lower = content.toLowerCase();
-    // Check for contradiction pairs (-3 pts each, max -9)
+    // Check for contradiction pairs, scoped per criterion (-3 pts each, max -9)
     let contradictions = 0;
-    for (const [termA, termB] of CONTRADICTION_PAIRS) {
-        if (lower.includes(termA) && lower.includes(termB)) {
+    for (const [termA, termB, kind] of CONTRADICTION_PAIRS) {
+        if (pairContradictsInCriteria(criteriaLines, termA, termB, kind)) {
             contradictions++;
             if (contradictions <= 3) {
                 issues.push(`Potential contradiction: "${termA}" and "${termB}" both appear in spec`);
@@ -265,7 +289,7 @@ function scoreAmbiguity(content, criteriaLines) {
     const undefinedTerms = ['tbd', 'todo', 'fixme', 'placeholder', 'to be defined', 'to be decided'];
     let undefinedCount = 0;
     for (const term of undefinedTerms) {
-        if (lower.includes(term)) {
+        if (hasWordBoundaryMatch(lower, term)) {
             undefinedCount++;
             issues.push(`Undefined placeholder found: "${term}"`);
         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@planu/cli",
-  "version": "5.3.32",
+  "version": "5.3.33",
   "description": "Planu — MCP Server for Spec Driven Development. Cross-platform (Linux/macOS/Windows, x64/arm64).",
   "type": "module",
   "main": "dist/index.js",

package/planu-plugin.json

@@ -2,7 +2,7 @@
   "name": "dev.planu.cli",
   "displayName": "Planu — Spec Driven Development",
   "description": "Manage software specs, estimations, and autonomous SDD workflows. Language-agnostic MCP server for Claude Code.",
-  "version": "5.3.32",
+  "version": "5.3.33",
   "icon": "assets/plugin/icon.svg",
   "command": ["npx", "@planu/cli@latest"],
   "packageName": "@planu/cli",