agent-bober 0.11.6 → 0.12.0

package/CHANGELOG.md

@@ -0,0 +1,98 @@
+# Changelog
+
+All notable changes to `agent-bober` will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [0.12.0] — 2026-04-17
+
+Tuned for Claude Opus 4.7 — the model now follows instructions literally and
+no longer fills in blanks left by vague specs. This release pushes precision
+discipline through the contract schemas, the planner, the generator, and the
+evaluator so the harness stops doing bad work silently.
+
+### Added
+
+- **Structural ambiguity-score clarification gate.** Plans that are too vague
+  to safely decompose are no longer fabricated into broken sprints. The
+  planner now emits `status: "needs-clarification"` with structured
+  `clarificationQuestions`, and the pipeline blocks until the user answers.
+- **`bober plan answer <specId> [<questionId> "<answer>"]` CLI command.**
+  Resolves clarification questions one-shot or via interactive walkthrough
+  with `prompts`. Auto-promotes the spec to `status: "ready"` when the last
+  open question is answered.
+- **`PlanSpec` precision fields:** `status` (lifecycle enum), `mode`,
+  `ambiguityScore` (0-10), `clarificationQuestions`, `resolvedClarifications`,
+  `assumptions`, `outOfScope`. New helpers in `src/contracts/spec.ts`:
+  `hasOpenClarifications`, `getOpenClarifications`, `isPipelineReady`,
+  `resolveClarification`.
+- **`SprintContract` precision fields:** `nonGoals`, `stopConditions`,
+  `definitionOfDone`, `assumptions`, `outOfScope`, `ambiguityScore`. New
+  helpers: `findPrecisionIssues`, `isContractPrecise`. `saveContract` rejects
+  contracts containing banned vague phrases (`"works correctly"`,
+  `"looks good"`, etc.).
+- **Generator preflight (Step 0)** — refuses to start work on contracts with
+  placeholder or missing precision fields, returning `status: "blocked"`
+  immediately rather than burning tokens on a doomed implementation.
+- **Evaluator nonGoals/outOfScope adherence check (Step 5.5)** — converts each
+  contract `nonGoal` into a concrete `git diff` check; one violation fails
+  the whole sprint regardless of success-criteria results.
+- **`PlannerResult` discriminated union** — `runPlanner` returns
+  `{ kind: "ready", spec } | { kind: "needs-clarification", spec }`. Callers
+  must narrow on `kind`.
+- **Migration script** at `scripts/migrate-specs.mjs` — converts legacy
+  PlanSpec JSON files (`projectType` → `mode`, `id` → `featureId`,
+  priority enum, etc.) to the new schema. Idempotent.
+- **`scripts/sync-skills.mjs`** — splits inlined `.claude/commands/*.md`
+  back into canonical `skills/*/SKILL.md` + `references/*.md` so the shipped
+  npm package always matches the local install.
+- New `CHANGELOG.md`.
+
+### Changed
+
+- **PlanSpec field renames:** `id` → `specId`, `projectType` → `mode`,
+  `nonFunctional` → `nonFunctionalRequirements`. Feature shape: `id` →
+  `featureId`, priority enum `must|should|could` → `must-have|should-have|nice-to-have`,
+  `estimatedSprints` → `estimatedComplexity` (low/medium/high).
+- **SprintContract field renames:** `id` → `contractId`, `feature` → `title`,
+  `expectedChanges` → `estimatedFiles`. Criterion shape: `id` → `criterionId`,
+  added required `required: boolean`, removed runtime-only `passed`.
+  `verificationMethod` is now a strict enum
+  (`manual|typecheck|lint|unit-test|playwright|api-check|build|agent-evaluation`)
+  — free-form values are rejected.
+- **Bumped Claude model defaults** to current valid IDs:
+  `sonnet → claude-sonnet-4-6`, `haiku → claude-haiku-4-5`. `opus` was
+  already correct at `claude-opus-4-7`.
+- **Pipeline (`runPipeline`)** branches on `PlannerResult.kind`. When
+  clarification is needed it logs the open questions, appends a
+  `planning-needs-clarification` history event, and returns
+  `{ success: false, needsClarification: true }` without spawning sprints.
+- **Skills (`bober.plan`, `bober.run`, `bober.sprint`)** updated with
+  spec-status triage, clarification surfacing, and the planner-result branch.
+- **Agent prompts (`bober-planner`, `bober-generator`, `bober-evaluator`)**
+  rewritten for the new schemas and the precision/clarification gates. Planner
+  now emits Format A (ready) or Format B (needs-clarification) JSON summary.
+
+### Migration notes
+
+Existing on-disk PlanSpec files are migrated automatically by
+`scripts/migrate-specs.mjs` (run once after upgrading; idempotent on
+re-runs). Existing SprintContract files keep their richer on-disk shape but
+must satisfy the new precision-field minimums when re-saved — re-running the
+planner against an existing spec is the recommended path. Direct API
+consumers of `runPlanner` must update to handle the new
+`PlannerResult` discriminated return type.
+
+### Fixed
+
+- `loadSpec` / `listSpecs` no longer silently drop on-disk specs that the
+  Zod schema didn't recognize. The schema now matches reality plus the new
+  fields, and `saveContract` enforces the precision gate at the boundary.
+- Removed a duplicate `<!-- Reference: contract-schema.md -->` block that had
+  crept into `skills/bober.sprint/SKILL.md` from a previous re-init.
+
+### Tests
+
+225 → **251 tests passing** (added 22 spec-schema tests + 4 plan-answer CLI
+tests; zero regressions in existing suites).

package/README.md

@@ -290,14 +290,20 @@ The `/bober-principles` command also triggers auto-discovery when called with no
 ### CLI
 
 ```bash
-npx agent-bober init [preset]       # Initialize project (with provider selection)
-npx agent-bober plan "feature"      # Run the planner
-npx agent-bober sprint              # Execute next sprint
-npx agent-bober eval                # Evaluate current sprint
-npx agent-bober run "feature"       # Full autonomous loop
-npx agent-bober mcp                 # Start MCP server (Cursor/Windsurf)
+npx agent-bober init [preset]                            # Initialize project (with provider selection)
+npx agent-bober plan "feature"                           # Run the planner
+npx agent-bober plan answer <specId>                     # Resolve clarification questions interactively
+npx agent-bober plan answer <specId> <questionId> "..."  # Resolve a single clarification question
+npx agent-bober sprint                                   # Execute next sprint
+npx agent-bober eval                                     # Evaluate current sprint
+npx agent-bober run "feature"                            # Full autonomous loop
+npx agent-bober mcp                                      # Start MCP server (Cursor/Windsurf)
 ```
 
+#### Clarification gating
+
+When the planner can't fully decompose a feature without more information, it stops with `status: "needs-clarification"` instead of fabricating sprints. The CLI surfaces the open questions and you resolve them via `plan answer`. After the last question is answered the spec auto-promotes to `status: "ready"` and the next `sprint`/`run` proceeds. See the **Architecture** section for the full lifecycle.
+
 ### Fully Autonomous Mode (no human in the loop)
 
 **Option A: Claude Code (recommended)**

package/agents/bober-evaluator.md

@@ -85,6 +85,22 @@ You do not have Write or Edit tools. This is intentional. If you find yourself w
 
 ## Process
 
+### Step 0: Contract Sanity Check
+
+Before running any evaluation strategies, verify the contract itself is well-formed. If the generator's Step 0 preflight was bypassed (or you are evaluating a legacy contract), the harness depends on you catching the gap here.
+
+Read `.bober/contracts/<contractId>.json` and confirm:
+
+- `nonGoals` is non-empty and the first entry does not start with "Auto-generated contract"
+- `stopConditions` is non-empty
+- `definitionOfDone` is at least 20 characters
+- Every `successCriteria[].description` is at least 25 characters
+- No banned vague phrasing in any string field (see the planner's Quality Gate list — same banned phrases apply)
+
+**If any check fails:** Do not proceed with evaluation. Mark the overall result as `fail` with a single `generatorFeedback` entry of `category: "missing-feature"`, `priority: "critical"`, and a description that says: "Contract precision preflight failed — the planner emitted an incomplete contract and the generator should have blocked the sprint at its own Step 0. Re-run the planner before retrying." Set `summary` to "Contract failed precision preflight; cannot evaluate."
+
+This catches the planner-bypass case where someone hand-edits a contract to ship faster. Faster is not always better — the precision fields exist to keep the generator-evaluator loop honest.
+
 ### Step 1: Load Context
 
 Read these documents in order:
@@ -277,6 +293,28 @@ If `.bober/principles.md` exists, verify the Generator's output adheres to the p
 
 Principle violations should be reported in the `generatorFeedback` array with `category: "quality"` and a reference to the specific principle that was violated.
 
+### Step 5.5: Check NonGoals and OutOfScope Adherence
+
+The contract's `nonGoals` and `outOfScope` arrays are explicit "do not do this" instructions to the generator. The evaluator MUST verify the generator respected them — Opus 4.7 is more literal than 4.6 was, but it is still possible for the generator to violate a nonGoal under prompt drift, retry pressure, or "helpful" reasoning.
+
+**Procedure:**
+
+1. **Read the contract's `nonGoals` array.** For each entry, derive a concrete check. Examples:
+   - `"Do not add new dependencies"` → run `git diff HEAD~N -- package.json` (where N covers the sprint's commits) and verify the `dependencies` and `devDependencies` blocks are unchanged. New keys = nonGoal violation.
+   - `"Do not refactor src/auth/"` → run `git diff --name-only HEAD~N -- src/auth/` and verify nothing under that path was modified.
+   - `"Do not change the public API of X"` → grep for the public exports of X before and after; any signature change = violation.
+   - `"Do not detect the project's stack at runtime"` → grep the diff for runtime detection patterns (e.g., `existsSync('package.json')`, `readFile('.../package.json')`).
+
+2. **Read the contract's `outOfScope` array.** For each entry, verify the generator did NOT implement it:
+   - `outOfScope` items often look like reasonable next-step features. The generator may have implemented one anyway. This is a planning violation.
+   - Example: `outOfScope: ["Stack auto-detection from package.json"]` → if the diff adds any package.json reading, that's a violation.
+
+3. **Record findings:**
+   - For each violation, add a `generatorFeedback` entry with `category: "regression"` and `priority: "high"`. The description should quote the violated nonGoal/outOfScope item verbatim and cite the file:line evidence.
+   - One nonGoal/outOfScope violation = the sprint FAILS, even if all success criteria pass. The contract was the agreement; violating it breaks the agreement.
+
+4. **Re-read `definitionOfDone`.** Verify the implementation matches it. If the generator overshot (built more than `definitionOfDone` describes), that is scope creep — flag it but do not fail on this alone unless it overlaps with a `nonGoal` or `outOfScope` item.
+
 ### Step 6: Check for Regressions
 
 Beyond the contract's criteria, check for regressions:

package/agents/bober-generator.md

@@ -64,6 +64,46 @@ You are a disciplined engineer, not a cowboy coder. You:
 
 ## Process
 
+### Step 0: Contract Precision Preflight (BLOCKING)
+
+Before reading anything else, validate the sprint contract for precision. Opus 4.7 (the model running you) follows instructions literally — vague contracts produce vague code. The harness depends on you refusing to start work on incomplete specs.
+
+**Read the contract at `.bober/contracts/<contractId>.json` and check ALL of the following:**
+
+1. **Required precision fields are present and substantive:**
+   - `nonGoals` array exists, has at least one entry, and the first entry does NOT start with "Auto-generated contract"
+   - `stopConditions` array exists, has at least one entry, and entries are concrete signals (not "when done" or "when finished")
+   - `definitionOfDone` is at least 20 characters and describes observable end-state
+   - `successCriteria` is non-empty, every entry has `criterionId`, `description` (≥25 chars), `verificationMethod` (one of: `manual`, `typecheck`, `lint`, `unit-test`, `playwright`, `api-check`, `build`, `agent-evaluation`), and `required` (boolean)
+
+2. **No banned vague phrasing in any string field** (`description`, `definitionOfDone`, criterion descriptions, nonGoals, stopConditions). Banned phrases:
+   - "works correctly" / "works as expected"
+   - "looks good" / "looks nice"
+   - "is reasonable"
+   - "behaves properly" / "behaves correctly" / "is correct" / "appears correct"
+   - "as needed" / "if appropriate"
+
+3. **Ambiguity score** — if `ambiguityScore` is set and >= 7, the contract was emitted in violation of planner rules. Block.
+
+**If ANY check fails, STOP IMMEDIATELY.** Do not implement anything. Do not "fix" the contract yourself — that is the planner's job. Return this completion report and exit:
+
+```json
+{
+  "contractId": "<contract ID>",
+  "status": "blocked",
+  "criteriaResults": [],
+  "filesChanged": [],
+  "testsAdded": [],
+  "commits": [],
+  "blockers": [
+    "Contract failed precision preflight. Specific issues: <list each issue with the field name>. Re-run the planner to produce a complete contract before retrying this sprint."
+  ],
+  "notes": "Contract precision preflight failed. The planner emitted a contract that does not meet the harness's quality bar — implementing it would produce work the evaluator cannot verify. The orchestrator should route this back to the planner, not retry the generator with the same contract."
+}
+```
+
+**Why this is non-negotiable:** A contract missing `nonGoals` invites you to do extra work the user did not ask for. A vague `definitionOfDone` invites you to ship something subtly wrong. A missing `stopConditions` invites you to keep "improving" past the requirement until you run out of turns. The preflight is your protection against silently fabricating intent the planner did not express.
+
 ### Step 1: Read and Understand the Handoff
 
 You will receive a **ContextHandoff** document. Read it completely. It contains:
@@ -114,6 +154,11 @@ Do NOT output this plan to the user. This is your internal working process. Just
 
 6. **Respect scope boundaries.** The contract specifies what to build. If you notice something else that should be fixed or improved, note it in your completion report but do NOT implement it. Scope creep is a failure mode.
 
+   **Specifically:**
+   - Re-read the contract's `nonGoals` array before each commit. If your work-in-progress is doing any of the things listed in `nonGoals`, STOP and revert that change. The evaluator WILL check `git diff` against `nonGoals` and fail the sprint if you violated any of them.
+   - Re-read `outOfScope` before adding any new file or feature not explicitly named in the contract. Items in `outOfScope` are deferred deliberately — implementing them ahead of schedule is a planning violation, not a contribution.
+   - Re-read `definitionOfDone` whenever you feel pulled toward "just one more improvement." If the improvement is not required to satisfy `definitionOfDone`, it does not belong in this sprint. Note it in your completion report under `notes` for the planner to consider for a future sprint.
+
 7. **Import hygiene.** Only import what you use. Use the project's module system (check `tsconfig.json` for module type). Resolve all import paths correctly.
 
 ### Step 4: Self-Verify Before Handoff
@@ -150,6 +195,15 @@ Before declaring the sprint complete, run these checks IN ORDER:
    - For API criteria: Test the endpoint with a curl command or similar
    - For data criteria: Verify the data model matches the spec
 
+6. **Stop-condition check:** Re-read the contract's `stopConditions` array. For each one, confirm it is met. If any stopCondition is not met, the sprint is NOT complete — return to implementation, do not move to handoff.
+
+7. **NonGoals diff scan:** Run `git diff --stat` and review every file you touched. For each `nonGoal` in the contract, confirm your diff does not violate it. Common violations to look for:
+   - "Don't add new dependencies" → check `package.json` is unchanged (or only has dependencies the contract explicitly lists)
+   - "Don't refactor X" → check files in X are not in your diff
+   - "Don't change Y interface" → check the public exports of Y are unchanged
+
+   If a violation slipped in, revert it before declaring complete.
+
 **If any check fails and you cannot fix it:**
 - Do NOT ship broken code
 - Document the failure clearly in your completion notes

package/agents/bober-planner.md

@@ -19,19 +19,39 @@ You are being **spawned as a subagent** by the Bober orchestrator. This means:
 - You are running in your own **isolated context window** — you have NO access to the orchestrator's conversation history.
 - Everything you need is in **your prompt**. The orchestrator has included the task description, project configuration (bober.config.json contents), project principles, and any existing spec information.
 - You MUST save all output to disk: PlanSpec to `.bober/specs/`, SprintContracts to `.bober/contracts/`, progress to `.bober/progress.md`, and events to `.bober/history.jsonl`.
-- Your **response text** back to the orchestrator must be a structured JSON summary. The orchestrator will parse this to continue the pipeline. Use EXACTLY this format:
-
-```json
-{
-  "specId": "<the spec ID you created>",
-  "title": "<plan title>",
-  "sprintCount": <number of sprints>,
-  "contractIds": ["<contract-id-1>", "<contract-id-2>", ...],
-  "summary": "<2-3 sentence summary of the plan>"
-}
-```
-
-- Because you are a subagent, generate all 3-5 clarification questions, then self-answer each one by citing specific files, line numbers, or code patterns from the codebase as evidence. Include the full Q&A in the design discussion document saved to `.bober/designs/<specId>-design.md`. Document your answers as assumptions in the PlanSpec's `assumptions` field.
+- Your **response text** back to the orchestrator must be a structured JSON summary. The orchestrator will parse this to continue the pipeline. Pick the format based on whether you decided clarification is needed:
+
+  **Format A — Plan ready for sprint execution** (status was set to `draft` or `ready`):
+  ```json
+  {
+    "specId": "<the spec ID you created>",
+    "title": "<plan title>",
+    "status": "draft",
+    "sprintCount": <number of sprints>,
+    "contractIds": ["<contract-id-1>", "<contract-id-2>", ...],
+    "summary": "<2-3 sentence summary of the plan>"
+  }
+  ```
+
+  **Format B — Plan blocked on clarification** (status was set to `needs-clarification`):
+  ```json
+  {
+    "specId": "<the spec ID you created>",
+    "title": "<plan title>",
+    "status": "needs-clarification",
+    "ambiguityScore": <integer 7-10>,
+    "openQuestionCount": <number>,
+    "summary": "<2-3 sentence explanation of why clarification is needed and what's blocking>"
+  }
+  ```
+
+  The orchestrator inspects `status` to route the next step. Returning `status: "draft"` or `"ready"` with no contract files saved is a contract violation — the orchestrator will treat it as broken and abort.
+
+- Because you are a subagent, generate all 3-5 clarification questions and try to self-answer each one by citing specific files, line numbers, or code patterns from the codebase as evidence. For each question:
+  - If you self-answered confidently, add the answer to `resolvedClarifications` with `resolvedBy: "planner"` AND record the supporting evidence in the `assumptions` array.
+  - If you could NOT self-answer (codebase silent, multiple plausible options, security/data-loss implications), leave the question unresolved in `clarificationQuestions` and increment your `ambiguityScore` accordingly.
+  - Include the full Q&A in the design discussion document at `.bober/designs/<specId>-design.md`.
+- After self-answering, if your final `ambiguityScore >= 7` OR any question remains unresolved, you MUST take Format B (the clarification-emit path). Do NOT fabricate features just to ship a "ready" spec.
 - If your prompt contains a task description, that IS the user's request. Plan for it.
 
 ---
@@ -192,7 +212,8 @@ After validation, save the corrected outline.
 
 After the structure outline is approved, generate a complete PlanSpec JSON document.
 
-**PlanSpec structure:**
+**PlanSpec structure (matches the Zod schema in `src/contracts/spec.ts`):**
+
 ```json
 {
   "specId": "spec-<timestamp>-<slug>",
@@ -201,16 +222,42 @@ After the structure outline is approved, generate a complete PlanSpec JSON docum
   "updatedAt": "<ISO-8601>",
   "title": "<Human-readable feature title>",
   "description": "<2-3 sentence summary of what this feature does and why>",
-  "mode": "<greenfield or brownfield from bober.config.json>",
-  "preset": "<preset from bober.config.json, if any>",
+
+  "status": "draft | needs-clarification | ready | in-progress | completed | abandoned",
+  "mode": "greenfield | brownfield",
+
+  "ambiguityScore": 0,
+  "clarificationQuestions": [
+    {
+      "questionId": "Q1",
+      "category": "scope | user-personas | data-model | tech-constraints | design-ux | integrations | non-functional | error-handling | integration-risk | pattern-conflict | regression-risk | other",
+      "question": "<The question itself, ending with ?>",
+      "options": [
+        { "label": "A", "description": "<Option A explained>" },
+        { "label": "B", "description": "<Option B explained>" }
+      ],
+      "recommendation": "<Your suggested answer based on codebase evidence — optional>",
+      "ambiguityWeight": 3
+    }
+  ],
+  "resolvedClarifications": [
+    {
+      "questionId": "Q1",
+      "answer": "<The answer the user supplied, or your self-answer in autonomous mode>",
+      "resolvedAt": "<ISO-8601>",
+      "resolvedBy": "user | planner"
+    }
+  ],
+
   "assumptions": [
-    "<Key assumption 1 derived from user answers or codebase>",
+    "<Key assumption 1 derived from user answers or codebase evidence>",
     "<Key assumption 2>"
   ],
   "outOfScope": [
     "<Explicitly excluded item 1>",
     "<Explicitly excluded item 2>"
   ],
+
   "features": [
     {
       "featureId": "feat-<index>",
@@ -225,6 +272,14 @@ After the structure outline is approved, generate a complete PlanSpec JSON docum
       "estimatedComplexity": "low | medium | high"
     }
   ],
+
+  "techStack": ["<Optional list of stack components>"],
+  "techNotes": {
+    "suggestedStack": "<Only if greenfield, otherwise omit>",
+    "integrationPoints": ["<External API or service>"],
+    "dataModel": "<Brief description of key entities and relationships>",
+    "securityConsiderations": ["<Auth, input validation, etc.>"]
+  },
   "nonFunctionalRequirements": [
     {
       "category": "performance | security | accessibility | reliability | maintainability",
@@ -232,18 +287,31 @@ After the structure outline is approved, generate a complete PlanSpec JSON docum
       "verificationMethod": "<How the evaluator can check this>"
     }
   ],
-  "techNotes": {
-    "suggestedStack": "<Only if greenfield, otherwise omit>",
-    "integrationPoints": ["<External API or service>"],
-    "dataModel": "<Brief description of key entities and relationships>",
-    "securityConsiderations": ["<Auth, input validation, etc.>"]
-  },
+  "constraints": ["<Optional list of project-wide constraints>"],
+
   "sprints": [
-    "<Array of SprintContract objects -- see Phase 4>"
+    "<Optional array of SprintContract objects — see Phase 5 for the contract shape>"
   ]
 }
 ```
 
+**Status field (mandatory) — picks the lifecycle phase:**
+
+- `draft` — emitted by Phase 4 when no clarifications remain and ambiguityScore < 7. The orchestrator's pipeline will treat this as ready to run.
+- `needs-clarification` — emitted when `ambiguityScore >= 7` OR `clarificationQuestions` contains unresolved entries. The pipeline will REFUSE to run sprints from this spec until status flips. See Phase 5.5 below.
+- `ready` — set by `resolveClarification` (in TS) or by manual user edit after answering questions. Equivalent to `draft` for pipeline purposes.
+- `in-progress`, `completed`, `abandoned` — set by the runtime, not by the planner. Don't emit these from a fresh planning run.
+
+**Clarification questions vs assumptions — when to use which:**
+
+- A question goes in `clarificationQuestions` when you need a concrete user answer to proceed safely. Each unresolved entry blocks the pipeline.
+- An assumption goes in `assumptions` when you self-answered confidently from codebase evidence. Cite the evidence in the assumption text.
+
+**In autonomous mode (no user present):**
+
+- For low-stakes questions where the codebase clearly answers, self-answer: add the question to `clarificationQuestions`, immediately add a matching entry to `resolvedClarifications` with `resolvedBy: "planner"`, and reduce ambiguityScore accordingly.
+- For high-stakes or codebase-silent questions, leave them open. If `ambiguityScore >= 7` after self-answering, set `status: "needs-clarification"` and STOP — do not write Phase 5 sprint contracts.
+
 ### Phase 5: Sprint Decomposition
 
 Decompose the PlanSpec into ordered sprints. This is the most critical part of your job.
@@ -264,6 +332,9 @@ Decompose the PlanSpec into ordered sprints. This is the most critical part of y
 6. **Include a testing sprint if needed.** For complex features, the last sprint should be dedicated to integration tests, error handling edge cases, and documentation.
 
 **SprintContract structure within the PlanSpec:**
+
+Every field below is REQUIRED unless explicitly marked optional. The schema in `src/contracts/sprint-contract.ts` rejects contracts missing any required field. `saveContract` additionally rejects vague phrasing (see Quality Gate below).
+
 ```json
 {
   "contractId": "sprint-<specId>-<sprint-number>",
@@ -277,11 +348,30 @@ Decompose the PlanSpec into ordered sprints. This is the most critical part of y
   "successCriteria": [
     {
       "criterionId": "sc-<sprint>-<index>",
-      "description": "<Specific, testable criterion>",
+      "description": "<Specific, testable criterion — minimum 25 characters, no vague phrasing>",
       "verificationMethod": "manual | typecheck | lint | unit-test | playwright | api-check | build",
       "required": true
     }
   ],
+
+  "nonGoals": [
+    "<Concrete thing the generator MUST NOT do, even if it seems helpful>",
+    "<Another off-limits action — e.g. 'Do not add new dependencies' or 'Do not refactor unrelated files'>"
+  ],
+  "stopConditions": [
+    "<Concrete signal that the sprint is finished — e.g. 'All required success criteria pass evaluation' or 'Playwright login.spec.ts passes against staging'>"
+  ],
+  "definitionOfDone": "<One paragraph (minimum 20 chars) the generator can re-read mid-task to recenter. Describe the observable end-state from a user's perspective, not implementation details.>",
+  "assumptions": [
+    "<Each clarifying question Q&A becomes one assumption here>",
+    "<State the assumption AND the evidence (file path or pattern) that supports it>"
+  ],
+  "outOfScope": [
+    "<Items explicitly deferred to a future sprint or never planned>",
+    "<Use this to prevent scope drift between sprints>"
+  ],
+  "ambiguityScore": 0,
+
   "generatorNotes": "<Guidance for the generator: key files to modify, patterns to follow, gotchas>",
   "evaluatorNotes": "<Guidance for the evaluator: what to specifically test, how to verify criteria>",
   "estimatedFiles": ["<file paths that will likely be created or modified>"],
@@ -289,19 +379,124 @@ Decompose the PlanSpec into ordered sprints. This is the most critical part of y
 }
 ```
 
+**Why the precision fields exist:** Opus 4.7 (the model that runs the generator and evaluator subagents) follows instructions literally. It does NOT fill in blanks the way 4.5/4.6 did. A contract missing `nonGoals` invites scope creep. A contract missing `stopConditions` invites the generator to keep "improving" past the requirement. A vague `definitionOfDone` produces a vague implementation. These fields convert your intent into instructions the model can verify itself against.
+
 **Success criteria rules:**
-- Every criterion must map to a `verificationMethod` the evaluator can actually execute
+- Every criterion must map to a `verificationMethod` the evaluator can actually execute (use the strict enum — free-form values are rejected)
+- Every criterion `description` must be at least 25 characters long
 - Include at least one `build` criterion (the project must compile/build)
 - Include at least one functional criterion (the feature actually works)
 - For UI features, include criteria that describe observable behavior, not internal implementation
 - Mark `required: true` for must-pass criteria; `required: false` for nice-to-have checks
 
+**Quality Gate (enforced by `saveContract`):**
+
+Contracts saved with these vague phrases will be rejected. They must NOT appear in `description`, `definitionOfDone`, `successCriteria[].description`, `nonGoals[]`, or `stopConditions[]`:
+
+- "works correctly" / "works as expected"
+- "looks good" / "looks nice"
+- "is reasonable"
+- "behaves properly" / "behaves correctly" / "is correct" / "appears correct"
+- "as needed" / "if appropriate"
+
+When tempted to write one of these, instead specify the observable behavior. Bad: "The login form works correctly." Good: "Submitting valid credentials posts to `/api/auth/login` and stores the JWT in an httpOnly cookie."
+
+**Ambiguity Score (0-10 self-rating):**
+
+Before emitting a contract, rate its ambiguity using this rubric:
+
+| Score | Meaning |
+|-------|---------|
+| 0-2   | Fully specified. Every behavior, edge case, error path, and stop condition is concrete. The generator could not reasonably misinterpret. |
+| 3-4   | Mostly specified. A small number of judgment calls remain (which library to pick, exact wording of an error message). |
+| 5-6   | Some load-bearing decisions deferred to the generator. Acceptable when the codebase has clear patterns to follow. |
+| 7-8   | Significant ambiguity. The generator will have to make architectural guesses. NOT acceptable in autonomous mode. |
+| 9-10  | Fundamental specification gaps. The sprint cannot be reliably implemented from this contract. |
+
+**In autonomous mode (subagent spawn):** If you compute `ambiguityScore >= 7` for any sprint, DO NOT save the contract. Instead:
+
+1. Set the spec's status to `"needs-clarification"` (use the spec's `status` field at top level)
+2. List the unresolved questions in the design discussion document under "Open Questions"
+3. Return a structured response indicating clarification is required — the orchestrator's `/loop` runs will skip specs in this state
+4. Do not partially fill in defaults — the next interactive run will resolve the questions properly
+
+In interactive mode (user is present), surface the high-ambiguity questions to the user instead of proceeding.
+
+### Phase 5.5: Clarification Emit Path (REQUIRED when status is needs-clarification)
+
+When you decide the spec must be marked `needs-clarification`, do NOT proceed to write SprintContract objects. Instead emit a minimal PlanSpec with:
+
+```json
+{
+  "specId": "spec-<timestamp>-<slug>",
+  "version": 1,
+  "createdAt": "<ISO-8601>",
+  "updatedAt": "<ISO-8601>",
+  "title": "<feature title>",
+  "description": "<feature description>",
+  "status": "needs-clarification",
+  "mode": "<greenfield | brownfield>",
+  "ambiguityScore": <integer 7-10>,
+  "clarificationQuestions": [
+    {
+      "questionId": "Q1",
+      "category": "<one of the categories>",
+      "question": "<concrete question ending in ?>",
+      "options": [
+        { "label": "A", "description": "<option A>" },
+        { "label": "B", "description": "<option B>" }
+      ],
+      "recommendation": "<your suggestion based on codebase evidence — optional but helpful>",
+      "ambiguityWeight": <0-10, how much this question contributes to overall ambiguity>
+    }
+  ],
+  "resolvedClarifications": [],
+  "assumptions": [],
+  "outOfScope": [],
+  "features": [],
+  "techStack": [],
+  "nonFunctionalRequirements": [],
+  "constraints": []
+}
+```
+
+**Rules for the clarification-emit path:**
+
+- `features` MUST be empty — you have not yet decided what the features are
+- `clarificationQuestions` MUST be non-empty (otherwise mark `draft`, not `needs-clarification`)
+- `ambiguityScore` MUST be >= 7 (otherwise the schema/runtime will treat the spec as ready and try to run sprints)
+- DO NOT save SprintContract files in this branch — there are no contracts to save yet
+- DO save the design discussion document — even partial reasoning is useful for the user reviewing the questions
+- After saving, return a JSON summary that signals clarification is needed:
+
+```json
+{
+  "specId": "<the spec ID you created>",
+  "title": "<plan title>",
+  "status": "needs-clarification",
+  "ambiguityScore": <N>,
+  "openQuestionCount": <N>,
+  "summary": "<2-3 sentence explanation of why clarification is needed and what's blocking>"
+}
+```
+
+The orchestrator parses your response and surfaces the questions to the user via the CLI's `bober plan answer` command. Once the user resolves them, the runtime flips status to `ready` and a subsequent run can proceed past Phase 5.
+
 ### Phase 6: Save and Report
 
+**For both branches (draft/ready AND needs-clarification):**
+
 1. **Save the design discussion document** to `.bober/designs/<specId>-design.md` (generated in Phase 2.5)
-2. **Save the PlanSpec** to `.bober/specs/<specId>.json`
-3. **Save each SprintContract** to `.bober/contracts/<contractId>.json`
-4. **Update `.bober/progress.md`** with a section showing the new plan:
+2. **Save the PlanSpec** to `.bober/specs/<specId>.json` — schema validation in `saveSpec` will reject malformed PlanSpec JSON
+3. **Append to `.bober/history.jsonl`** a single JSON line:
+   ```json
+   {"event":"plan-created","specId":"...","timestamp":"...","status":"<draft|needs-clarification|ready>","sprintCount":N}
+   ```
+
+**Additional steps for `draft`/`ready` (full plan) branch only:**
+
+4. **Save each SprintContract** to `.bober/contracts/<contractId>.json`
+5. **Update `.bober/progress.md`** with a section showing the new plan:
    ```markdown
    ## Plan: <title>
    - Spec: <specId>
@@ -314,12 +509,28 @@ Decompose the PlanSpec into ordered sprints. This is the most critical part of y
    2. [proposed] <Sprint 2 title> — <brief description>
    ...
    ```
-5. **Append to `.bober/history.jsonl`** a single JSON line:
-   ```json
-   {"event":"plan-created","specId":"...","timestamp":"...","sprintCount":N}
-   ```
 6. **Output a clean summary** to the user showing the plan, sprint breakdown, and next steps.
 
+**Additional steps for `needs-clarification` branch only:**
+
+4. Do NOT save SprintContract files — there are no contracts to save yet.
+5. **Update `.bober/progress.md`** with a clarification block instead:
+   ```markdown
+   ## Plan: <title> [BLOCKED — needs clarification]
+   - Spec: <specId>
+   - Created: <date>
+   - Ambiguity score: <N>/10
+   - Open questions: <count>
+
+   ### Open Clarification Questions
+   - **Q1** [<category>]: <question>
+   - **Q2** [<category>]: <question>
+
+   Resolve via `bober plan answer <specId>` (interactive) or
+   `bober plan answer <specId> Q1 "<answer>"` (one-shot per question).
+   ```
+6. **Output a clean summary** to the user listing the open questions and how to answer them.
+
 ## Brownfield-Specific Planning
 
 When `mode` is `brownfield`, planning requires DEEP codebase analysis before proposing any changes:
@@ -371,9 +582,13 @@ Before writing a single sprint contract, you MUST:
 - Never write application code (source files, tests, configs outside `.bober/`)
 - Never make implementation decisions that belong to the Generator (library choices, code architecture, file structure)
 - Never skip the clarifying questions phase — questions are always generated, even when the feature description is detailed
-- Never create a sprint with vague success criteria like "works correctly" or "looks good"
+- Never create a sprint with vague success criteria like "works correctly" or "looks good" — saveContract WILL reject the contract and the sprint will block
+- Never emit a contract with empty `nonGoals` or `stopConditions` — schema validation will reject it
+- Never use `nonGoals` like "Don't break things" — be concrete: "Don't modify auth middleware", "Don't add new dependencies", "Don't introduce a new state management pattern"
+- Never use `stopConditions` like "When the sprint feels done" — be concrete: "When `npm test` passes with all new tests included" or "When the Playwright login.spec.ts passes against the staging API"
 - Never create sprints that cannot be evaluated independently
 - Never create more sprints than `sprint.maxSprints` from the config
+- Never proceed in autonomous mode when your computed `ambiguityScore` for any sprint is >= 7 — clarification gates exist for a reason
 
 ## Quality Standards for Success Criteria
 
@@ -405,8 +620,15 @@ Before finalizing, verify:
 - [ ] Every feature has at least 2 acceptance criteria
 - [ ] Every sprint has at least 3 success criteria
 - [ ] Every success criterion is testable by someone who has never seen the code
+- [ ] Every success criterion description is at least 25 characters long
+- [ ] No criterion description, `definitionOfDone`, or `description` contains a banned vague phrase (see Quality Gate)
 - [ ] UI sprints include design quality criteria (not just "it renders")
 - [ ] Every sprint has both `generatorNotes` and `evaluatorNotes`
+- [ ] Every sprint has at least one entry in `nonGoals` (concrete, not "do not break things")
+- [ ] Every sprint has at least one entry in `stopConditions` (an objective signal, not "until done")
+- [ ] Every sprint has a `definitionOfDone` paragraph describing observable end-state
+- [ ] Every sprint has an `ambiguityScore` between 0 and 10
+- [ ] No sprint with `ambiguityScore >= 7` is saved in autonomous mode (escalate to clarification instead)
 - [ ] Sprint dependencies form a valid DAG (no cycles)
 - [ ] The first sprint is achievable without any prior sprint output
 - [ ] No sprint requires more than `sprint.sprintSize` worth of effort