@polymorphism-tech/morph-spec 4.21.0 → 5.0.1

package/src/utils/claude-settings-manager.js

@@ -165,13 +165,36 @@ export async function resetMorphSettings(targetPath) {
     }
   }
 
-  // Remove managed MCP servers
-  if (managed.mcps_installed && settings.mcpServers) {
-    for (const mcpName of managed.mcps_installed) {
-      delete settings.mcpServers[mcpName];
+  // Remove managed MCP servers from .mcp.json (primary location)
+  if (managed.mcps_installed) {
+    const mcpJson = await loadMcpJson(targetPath);
+    if (mcpJson.mcpServers) {
+      for (const mcpName of managed.mcps_installed) {
+        delete mcpJson.mcpServers[mcpName];
+      }
+      if (Object.keys(mcpJson.mcpServers).length === 0) {
+        delete mcpJson.mcpServers;
+      }
+      // Write back (or remove file if empty)
+      if (Object.keys(mcpJson).length === 0) {
+        const mcpJsonPath = join(targetPath, '.mcp.json');
+        if (existsSync(mcpJsonPath)) {
+          const { unlink } = await import('fs/promises');
+          await unlink(mcpJsonPath);
+        }
+      } else {
+        await saveMcpJson(targetPath, mcpJson);
+      }
     }
-    if (Object.keys(settings.mcpServers).length === 0) {
-      delete settings.mcpServers;
+
+    // Also clean legacy entries from settings.local.json
+    if (settings.mcpServers) {
+      for (const mcpName of managed.mcps_installed) {
+        delete settings.mcpServers[mcpName];
+      }
+      if (Object.keys(settings.mcpServers).length === 0) {
+        delete settings.mcpServers;
+      }
     }
   }
 
@@ -192,31 +215,35 @@ export async function resetMorphSettings(targetPath) {
 }
 
 /**
- * Install MCP server entries into .claude/settings.local.json
- * Tracks installed MCPs in _morph_managed.mcps_installed for safe reset.
+ * Install MCP server entries into .mcp.json at the project root.
+ * Claude Code reads MCP servers from .mcp.json (not settings.local.json).
+ * Tracks installed names in settings.local.json _morph_managed.mcps_installed for safe reset.
  *
  * @param {string} targetPath - Project root directory
- * @param {Object} servers - Map of server name → config { command, args, env? }
+ * @param {Object} servers - Map of server name → config { type?, command, args, env? }
  * @returns {Promise<Object>} Summary of changes { added, skipped, total }
  */
 export async function installMcpServers(targetPath, servers) {
-  const settings = await loadSettings(targetPath);
+  const mcpJson = await loadMcpJson(targetPath);
 
-  settings.mcpServers = settings.mcpServers || {};
+  mcpJson.mcpServers = mcpJson.mcpServers || {};
 
   const added = [];
   const skipped = [];
 
   for (const [name, config] of Object.entries(servers)) {
-    if (settings.mcpServers[name]) {
+    if (mcpJson.mcpServers[name]) {
       skipped.push(name);
     } else {
-      settings.mcpServers[name] = config;
+      mcpJson.mcpServers[name] = config;
       added.push(name);
     }
   }
 
-  // Track in _morph_managed
+  await saveMcpJson(targetPath, mcpJson);
+
+  // Track in settings.local.json _morph_managed
+  const settings = await loadSettings(targetPath);
   settings[MORPH_MANAGED_KEY] = settings[MORPH_MANAGED_KEY] || {};
   settings[MORPH_MANAGED_KEY].mcps_installed =
     settings[MORPH_MANAGED_KEY].mcps_installed || [];
@@ -229,13 +256,28 @@ export async function installMcpServers(targetPath, servers) {
 
   await saveSettings(targetPath, settings);
 
-  return { added, skipped, total: Object.keys(settings.mcpServers).length };
+  return { added, skipped, total: Object.keys(mcpJson.mcpServers).length };
 }
 
 // ============================================================================
 // Helpers
 // ============================================================================
 
+async function loadMcpJson(targetPath) {
+  const mcpJsonPath = join(targetPath, '.mcp.json');
+  try {
+    if (!existsSync(mcpJsonPath)) return {};
+    return JSON.parse(await readFile(mcpJsonPath, 'utf-8'));
+  } catch {
+    return {};
+  }
+}
+
+async function saveMcpJson(targetPath, data) {
+  const mcpJsonPath = join(targetPath, '.mcp.json');
+  await writeFile(mcpJsonPath, JSON.stringify(data, null, 2) + '\n', 'utf-8');
+}
+
 async function loadSettings(targetPath) {
   const settingsPath = join(targetPath, '.claude', 'settings.local.json');
   try {

package/src/utils/file-copier.js

@@ -142,6 +142,7 @@ export async function updateGitignore(projectPath) {
     '.morph/memory/',
     '.morph/plans/',
     '.morph/analytics/',
+    '.morph/traces/',
     '.claude/commands/',
     '.claude/rules/',
     '.claude/skills/',

package/src/utils/hooks-installer.js

@@ -50,164 +50,62 @@ const MORPH_PERMISSIONS = [
  * Each entry maps to a Claude Code hook event.
  */
 const MORPH_HOOKS = [
-  // === SessionStart ===
-  {
-    event: 'SessionStart',
-    matcher: 'startup|resume|compact',
-    hooks: [{
-      type: 'command',
-      command: 'node framework/hooks/claude-code/session-start/inject-morph-context.js'
-    }]
-  },
-
-  // === SessionStart: compact only — post-compact context restore ===
-  {
-    event: 'SessionStart',
-    matcher: 'compact',
-    hooks: [{
-      type: 'command',
-      command: 'node framework/hooks/claude-code/session-start/post-compact-restore.js'
-    }]
-  },
-
-  // === SessionStart: resume only — orientation context ===
-  {
-    event: 'SessionStart',
-    matcher: 'resume',
-    hooks: [{
-      type: 'command',
-      command: 'node framework/hooks/claude-code/session-start/resume-context.js'
-    }]
-  },
-
-  // === UserPromptSubmit ===
-  {
-    event: 'UserPromptSubmit',
-    matcher: null,
-    hooks: [
-      {
-        type: 'command',
-        command: 'node framework/hooks/claude-code/user-prompt/enrich-prompt.js'
-      },
-    ]
-  },
-
-  // === PreToolUse: Write|Edit ===
+  // === PreToolUse: Write|Edit — phase + spec protection (silent on success) ===
   {
     event: 'PreToolUse',
     matcher: 'Write|Edit',
     hooks: [
-      // Note: protect-readonly-files.js replaced by native permissions.deny (see MORPH_PERMISSIONS)
-      // Order matters: cheapest check first
       {
         type: 'command',
-        command: 'node framework/hooks/claude-code/pre-tool-use/protect-spec-files.js'
+        command: 'node framework/hooks/claude-code/core/protect-spec-files.js'
       },
       {
         type: 'command',
-        command: 'node framework/hooks/claude-code/pre-tool-use/enforce-phase-writes.js'
-      },
-      {
-        type: 'command',
-        command: 'node framework/hooks/claude-code/pre-tool-use/task-tracking-guard.js'
+        command: 'node framework/hooks/claude-code/core/enforce-phase-writes.js'
       }
     ]
   },
 
-  // === PreToolUse: Bash ===
+  // === PreToolUse: Bash — denylist (irreversible commands only) ===
   {
     event: 'PreToolUse',
     matcher: 'Bash',
-    hooks: [{
-      type: 'prompt',
-      prompt: `You are a guard for a morph-spec project. Read the bash command from the hook input and check EXACTLY these 3 conditions. IMPORTANT: reading files (cat, head, tail, grep, less, bat) is NEVER blocked regardless of path.
-1. Does the command DELETE .morph/ or .morph/state.json or .morph/framework/ using rm -r, rm -rf, or rmdir? BLOCK only these exact paths. NOTE: deleting .morph/features/ subdirectories is NOT blocked.
-2. Does the command OVERWRITE .morph/state.json using a shell redirect (>) combined with sed, jq, awk, echo, cat, or printf? If yes, BLOCK.
-3. Does the command WRITE TO .morph/framework/ via a shell redirect (>) or Node.js fs.writeFileSync/appendFileSync on a path under .morph/framework/? READING .morph/framework/ is always allowed. Writing to .morph/features/, .morph/config/, .morph/context/ is allowed.
-If ANY of these 3 specific conditions matches, respond: {"ok": false, "reason": "MORPH-SPEC: [explain what was blocked]. To read agents/state use: morph-spec state get <feature> | morph-spec dispatch-agents <feature> <phase> --table | cat .morph/framework/agents.json (reading is always allowed). To update state use: morph-spec state set <feature> <key> <value>."}
-Otherwise respond: {"ok": true}`
-    }]
-  },
-
-  // === PostToolUse: Agent ===
-  {
-    event: 'PostToolUse',
-    matcher: 'Agent',
-    hooks: [{
-      type: 'command',
-      command: 'node framework/hooks/claude-code/post-tool-use/agent-complete.js'
-    }]
-  },
-
-  // === PostToolUse: Bash ===
-  {
-    event: 'PostToolUse',
-    matcher: 'Bash',
     hooks: [
       {
         type: 'command',
-        command: 'node framework/hooks/claude-code/post-tool-use/dispatch.js'
-      },
-      {
-        type: 'command',
-        command: 'node framework/hooks/claude-code/post-tool-use/validator-feedback.js'
+        command: 'node framework/hooks/claude-code/core/pre-bash-denylist.js'
       }
     ]
   },
 
-  // === PostToolUse: All — loop detection ===
+  // === PostToolUse: Write|Edit — typecheck (debounced, silent on success) ===
   {
     event: 'PostToolUse',
-    matcher: null,
-    hooks: [{
-      type: 'command',
-      command: 'node framework/hooks/claude-code/post-tool-use/loop-detect.js',
-      timeout: 5000
-    }]
-  },
-
-  // === Stop ===
-  {
-    event: 'Stop',
-    matcher: null,
-    hooks: [{
-      type: 'command',
-      command: 'node framework/hooks/claude-code/stop/validate-completion.js'
-    }]
-  },
-
-  // === PreCompact ===
-  {
-    event: 'PreCompact',
-    matcher: null,
+    matcher: 'Write|Edit',
     hooks: [{
       type: 'command',
-      command: 'node framework/hooks/claude-code/pre-compact/save-morph-context.js'
+      command: 'node framework/hooks/claude-code/core/post-edit-typecheck.js'
     }]
   },
 
-  // === PostToolUseFailure ===
+  // === PostToolUse: All — loop detection ===
   {
-    event: 'PostToolUseFailure',
+    event: 'PostToolUse',
     matcher: null,
     hooks: [{
       type: 'command',
-      command: 'node framework/hooks/claude-code/post-tool-use/handle-tool-failure.js',
-      timeout: 10000,
+      command: 'node framework/hooks/claude-code/core/loop-detect.js',
+      timeout: 5000
     }]
   },
 
-  // === TeammateIdle ===
-  // Fires when an Agent Team teammate finishes and is about to go idle.
-  // Exit 2 = send feedback to teammate to continue working (validation failed).
-  // Exit 0 = teammate may become idle (validation passed).
-  // Requires CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS=1 (set in env above).
+  // === Stop — build check + session snapshot ===
   {
-    event: 'TeammateIdle',
+    event: 'Stop',
     matcher: null,
     hooks: [{
       type: 'command',
-      command: 'node framework/hooks/claude-code/teammate-idle/teammate-idle.js'
+      command: 'node framework/hooks/claude-code/core/validate-completion.js'
     }]
   }
 ];

package/src/utils/skills-installer.js

@@ -2,18 +2,16 @@
  * Skills Installer
  *
  * Copies framework skills to .claude/skills/ during morph-spec init.
- * Installs level-0-meta and level-1-workflows skills using the native Claude Code
- * subdirectory format: .claude/skills/{skill-name}/SKILL.md (plus optional
- * scripts/, references/, and assets/ subdirectories).
- * Level-2 domain specialists are installed as native subagents via installDomainAgents().
- * Level-3 and level-4 only contain README.md placeholder files and are skipped.
+ * Installs only the `core/` skill set — the canonical NLH skills referenced by
+ * MORPH.md (morph-brainstorming, morph-stack-scan, morph-plan, morph-implement,
+ * morph-eval, morph-review, morph-standards). The 3-tier system was collapsed
+ * into a single source of truth in framework/skills/core/.
  *
- * Source skills can be either:
- *   - Directory-based: framework/skills/{level}/{skill-name}/SKILL.md  (preferred)
- *   - Flat file: framework/skills/{level}/{skill-name}.md               (legacy, still supported)
+ * Source skills are directory-based: framework/skills/core/{skill-name}/SKILL.md
+ * (plus optional scripts/, references/, assets/ subdirectories).
  *
- * Directory-based skills have their entire directory copied (scripts/, references/,
- * assets/) so Claude Code can execute scripts and load references on demand.
+ * Directory-based skills have their entire directory copied so Claude Code can
+ * execute scripts and load references on demand.
  */
 
 import { mkdirSync, copyFileSync, existsSync, readdirSync, statSync, readFileSync, rmSync } from 'fs';
@@ -26,12 +24,9 @@ const FRAMEWORK_SKILLS_DIR = join(__dirname, '..', '..', 'framework', 'skills');
 
 /**
  * Skill levels to install in .claude/skills/.
- * Level-0 meta skills (planning, reviewing) and level-1 workflow skills
- * (phase-design, phase-implement, etc.) are installed. Level-2 domain
- * specialists are installed as native subagents via installDomainAgents()
- * instead. Level-3 and level-4 are skipped (no content yet).
+ * Only `core/` survives — single source of truth aligned with MORPH.md.
  */
-const SKILL_LEVELS_TO_INSTALL = ['level-0-meta', 'level-1-workflows'];
+const SKILL_LEVELS_TO_INSTALL = ['core'];
 
 /**
  * Check if a skill should be installed based on its stacks: frontmatter.
@@ -75,9 +70,8 @@ function copyDirectory(src, dest) {
  *   2. Flat .md skill (legacy): srcDir/{skill-name}.md
  *      → destDir/{skill-name}/SKILL.md
  *
- * Level directories (level-0-meta, level-1-workflows, sub-categories) are
- * traversed recursively. A directory is recognized as a skill directory when
- * it contains a SKILL.md file.
+ * The `core/` level directory is traversed recursively. A directory is
+ * recognized as a skill directory when it contains a SKILL.md file.
  *
  * @param {string} srcDir - Source directory to walk
  * @param {string} destDir - Destination base directory (.claude/skills/)

package/bin/detect-agents.js

@@ -1,226 +0,0 @@
-#!/usr/bin/env node
-
-/**
- * MORPH-SPEC Agent Detection CLI
- *
- * Detecta automaticamente quais agentes devem ser ativados baseado
- * em keywords no input do usuário.
- *
- * Uso:
- *   node bin/detect-agents.js "implementar jobs agendados"
- *   node bin/detect-agents.js --verbose "criar dashboard com charts"
- *   node bin/detect-agents.js --json "adicionar background tasks"
- */
-
-import { readFileSync } from 'fs';
-import { join, dirname } from 'path';
-import { fileURLToPath } from 'url';
-
-const __dirname = dirname(fileURLToPath(import.meta.url));
-const frameworkRoot = join(__dirname, '..');
-const AGENTS_CONFIG_PATH = join(frameworkRoot, '.morph/framework/agents.json');
-
-// Cores para output no terminal
-const colors = {
-  reset: '\x1b[0m',
-  bright: '\x1b[1m',
-  green: '\x1b[32m',
-  yellow: '\x1b[33m',
-  blue: '\x1b[34m',
-  cyan: '\x1b[36m',
-  gray: '\x1b[90m'
-};
-
-function log(message, color = 'reset') {
-  console.log(`${colors[color]}${message}${colors.reset}`);
-}
-
-/**
- * Carrega configuração de agentes
- * @returns {Object} Configuração de agentes
- */
-function loadAgentsConfig() {
-  try {
-    const content = readFileSync(AGENTS_CONFIG_PATH, 'utf8');
-    return JSON.parse(content);
-  } catch (err) {
-    console.error(`ERROR: Failed to load agents config: ${err.message}`);
-    process.exit(1);
-  }
-}
-
-/**
- * Detecta agentes baseado em user input
- * @param {string} userInput - Input do usuário
- * @param {Object} config - Configuração de agentes
- * @returns {Object} Resultado da detecção { core, specialists, all, matches }
- */
-function detectAgents(userInput, config) {
-  const input = userInput.toLowerCase();
-  const coreAgents = config.agents.core || [];
-  const specialists = config.agents.specialists || [];
-
-  // Core agents sempre ativos
-  const coreIds = coreAgents.map(a => a.id);
-
-  // Detectar specialists por keyword matching
-  const specialistMatches = [];
-
-  for (const agent of specialists) {
-    const keywords = agent.autoActivation?.keywords || [];
-    const matchedKeywords = [];
-
-    for (const keyword of keywords) {
-      if (input.includes(keyword.toLowerCase())) {
-        matchedKeywords.push(keyword);
-      }
-    }
-
-    if (matchedKeywords.length > 0) {
-      specialistMatches.push({
-        id: agent.id,
-        name: agent.name,
-        emoji: agent.emoji,
-        matchedKeywords: matchedKeywords,
-        matchCount: matchedKeywords.length
-      });
-    }
-  }
-
-  // Ordenar por número de matches (mais relevante primeiro)
-  specialistMatches.sort((a, b) => b.matchCount - a.matchCount);
-
-  const specialistIds = specialistMatches.map(m => m.id);
-  const allIds = [...new Set([...coreIds, ...specialistIds])];
-
-  return {
-    core: coreIds,
-    specialists: specialistIds,
-    all: allIds,
-    matches: specialistMatches,
-    input: userInput
-  };
-}
-
-/**
- * Formata output em modo verbose
- * @param {Object} result - Resultado da detecção
- */
-function formatVerbose(result) {
-  log('\n╔════════════════════════════════════════════════════════════════╗', 'cyan');
-  log('║                    AGENT DETECTION RESULT                      ║', 'cyan');
-  log('╠════════════════════════════════════════════════════════════════╣', 'cyan');
-  log(`║ Input: ${result.input.substring(0, 54).padEnd(54)} ║`, 'bright');
-  log('╠════════════════════════════════════════════════════════════════╣', 'cyan');
-  log('║ CORE AGENTS (always active)                                    ║', 'cyan');
-  log('╠════════════════════════════════════════════════════════════════╣', 'cyan');
-
-  result.core.forEach(id => {
-    log(`║   ✓ ${id.padEnd(58)}║`, 'green');
-  });
-
-  if (result.specialists.length > 0) {
-    log('╠════════════════════════════════════════════════════════════════╣', 'cyan');
-    log('║ SPECIALIST AGENTS (keyword matched)                            ║', 'cyan');
-    log('╠════════════════════════════════════════════════════════════════╣', 'cyan');
-
-    result.matches.forEach(match => {
-      const line = `${match.emoji} ${match.name} (${match.matchCount} matches)`;
-      log(`║   ${line.padEnd(61)}║`, 'yellow');
-      const keywords = match.matchedKeywords.join(', ');
-      const keywordLine = `Keywords: ${keywords}`;
-      // Quebrar em múltiplas linhas se necessário
-      if (keywordLine.length > 58) {
-        const chunks = keywordLine.match(/.{1,58}/g) || [];
-        chunks.forEach((chunk, i) => {
-          log(`║     ${chunk.padEnd(59)}║`, 'gray');
-        });
-      } else {
-        log(`║     ${keywordLine.padEnd(59)}║`, 'gray');
-      }
-    });
-  } else {
-    log('╠════════════════════════════════════════════════════════════════╣', 'cyan');
-    log('║ No specialist agents matched                                   ║', 'gray');
-  }
-
-  log('╠════════════════════════════════════════════════════════════════╣', 'cyan');
-  log(`║ TOTAL: ${result.all.length} agents activated                                      ║`, 'bright');
-  log('╚════════════════════════════════════════════════════════════════╝\n', 'cyan');
-}
-
-/**
- * Formata output em modo simples (apenas IDs)
- * @param {Object} result - Resultado da detecção
- */
-function formatSimple(result) {
-  result.all.forEach(id => console.log(id));
-}
-
-/**
- * Formata output em modo JSON
- * @param {Object} result - Resultado da detecção
- */
-function formatJSON(result) {
-  console.log(JSON.stringify(result, null, 2));
-}
-
-// ============================================================================
-// MAIN
-// ============================================================================
-
-function main() {
-  const args = process.argv.slice(2);
-
-  // Parse flags
-  const hasVerbose = args.includes('--verbose') || args.includes('-v');
-  const hasJSON = args.includes('--json') || args.includes('-j');
-  const hasHelp = args.includes('--help') || args.includes('-h');
-  const hasIdsOnly = args.includes('--ids-only') || args.includes('-i');
-
-  // Remove flags para pegar user input
-  const userInput = args
-    .filter(arg => !arg.startsWith('--') && !arg.startsWith('-'))
-    .join(' ');
-
-  if (hasHelp || args.length === 0) {
-    log('\nMORPH-SPEC Agent Detection CLI', 'bright');
-    log('\nUsage:', 'cyan');
-    log('  node bin/detect-agents.js [options] "<user input>"', 'gray');
-    log('\nOptions:', 'cyan');
-    log('  -v, --verbose     Show detailed detection results', 'gray');
-    log('  -j, --json        Output full result as JSON', 'gray');
-    log('  -i, --ids-only    Output only agent IDs (one per line)', 'gray');
-    log('  -h, --help        Show this help', 'gray');
-    log('\nExamples:', 'cyan');
-    log('  node bin/detect-agents.js "criar dashboard com charts"', 'gray');
-    log('  node bin/detect-agents.js --verbose "implementar jobs agendados"', 'gray');
-    log('  node bin/detect-agents.js --json "adicionar RAG pipeline"', 'gray');
-    log('  node bin/detect-agents.js --ids-only "background tasks"\n', 'gray');
-    process.exit(0);
-  }
-
-  if (!userInput) {
-    console.error('ERROR: User input is required');
-    console.error('Run with --help for usage information');
-    process.exit(1);
-  }
-
-  // Carregar config e detectar agentes
-  const config = loadAgentsConfig();
-  const result = detectAgents(userInput, config);
-
-  // Formatar output
-  if (hasJSON) {
-    formatJSON(result);
-  } else if (hasVerbose) {
-    formatVerbose(result);
-  } else if (hasIdsOnly) {
-    formatSimple(result);
-  } else {
-    // Default: JSON compact (só all array)
-    console.log(JSON.stringify(result.all));
-  }
-}
-
-main();