@polymorphism-tech/morph-spec 4.3.7 → 4.6.0

package/framework/skills/level-0-meta/code-review/scripts/scan-csharp.mjs

@@ -0,0 +1,121 @@
+#!/usr/bin/env node
+/**
+ * scan-csharp.mjs
+ *
+ * Scans .cs files for MORPH-SPEC coding standard violations.
+ * Executed locally by Claude via Bash — output returned to Claude.
+ *
+ * Usage:
+ *   node scan-csharp.mjs [path]           # scan directory or file
+ *   node scan-csharp.mjs src/             # scan src/ recursively
+ *   node scan-csharp.mjs --summary        # counts only, no details
+ *
+ * Checks (ref: framework/standards/core/coding.md):
+ *   - UPPER_SNAKE_CASE constants       → should be PascalCase
+ *   - Hungarian notation               → strName, iCount, btnSubmit
+ *   - Missing CancellationToken        → async methods without CT param
+ *   - String interpolation in logging  → $"" in ILogger calls
+ *   - Empty catch blocks               → catch { } or catch (E) { }
+ */
+
+import { readdirSync, readFileSync, statSync, existsSync } from 'fs';
+import { join, extname, relative } from 'path';
+
+const targetPath = process.argv[2] ?? '.';
+const summaryOnly = process.argv.includes('--summary');
+
+const CHECKS = [
+  {
+    id: 'UPPER_SNAKE_CASE',
+    severity: 'CRITICAL',
+    pattern: /\bconst\s+\w+\s+([A-Z][A-Z_]{2,})\s*=/g,
+    message: (m) => `Constant '${m[1]}' uses UPPER_SNAKE_CASE (anti-pattern in C#) → use PascalCase`,
+  },
+  {
+    id: 'HUNGARIAN_NOTATION',
+    severity: 'CRITICAL',
+    pattern: /\b(str|int|bool|btn|lbl|txt|dbl|flt|obj|arr|lst)([A-Z]\w*)\b/g,
+    message: (m) => `'${m[0]}' looks like Hungarian notation → rename to '${m[2].charAt(0).toLowerCase() + m[2].slice(1)}'`,
+  },
+  {
+    id: 'MISSING_CANCELLATION_TOKEN',
+    severity: 'HIGH',
+    pattern: /public\s+async\s+Task(?:<[^>]+>)?\s+(\w+Async)\s*\(([^)]*)\)/g,
+    message: (m) => {
+      const params = m[2];
+      if (params.includes('CancellationToken') || params.includes('ct ') || params.includes('ct,') || params.includes('ct)')) return null;
+      return `Async method '${m[1]}' missing CancellationToken parameter`;
+    },
+  },
+  {
+    id: 'LOG_STRING_INTERPOLATION',
+    severity: 'HIGH',
+    pattern: /\.(LogInformation|LogWarning|LogError|LogDebug|LogCritical)\s*\(\s*\$"/g,
+    message: () => 'String interpolation ($"") in log call → use message template with structured parameters',
+  },
+  {
+    id: 'EMPTY_CATCH',
+    severity: 'CRITICAL',
+    pattern: /catch\s*(\([^)]*\))?\s*\{\s*\}/g,
+    message: () => 'Empty catch block — exceptions are silently swallowed',
+  },
+];
+
+function collectCsFiles(dir) {
+  if (!existsSync(dir)) return [];
+  const stat = statSync(dir);
+  if (stat.isFile()) return dir.endsWith('.cs') ? [dir] : [];
+  const results = [];
+  for (const entry of readdirSync(dir, { withFileTypes: true })) {
+    if (entry.isDirectory() && entry.name !== 'bin' && entry.name !== 'obj' && entry.name !== '.git') {
+      results.push(...collectCsFiles(join(dir, entry.name)));
+    } else if (entry.isFile() && extname(entry.name) === '.cs') {
+      results.push(join(dir, entry.name));
+    }
+  }
+  return results;
+}
+
+const files = collectCsFiles(targetPath);
+const findings = [];
+
+for (const file of files) {
+  const content = readFileSync(file, 'utf-8');
+  const lines = content.split('\n');
+
+  for (const check of CHECKS) {
+    const regex = new RegExp(check.pattern.source, check.pattern.flags);
+    let match;
+    while ((match = regex.exec(content)) !== null) {
+      const msg = check.message(match);
+      if (!msg) continue;
+      const lineNum = content.slice(0, match.index).split('\n').length;
+      findings.push({
+        severity: check.severity,
+        id: check.id,
+        file: relative(process.cwd(), file).replace(/\\/g, '/'),
+        line: lineNum,
+        message: msg,
+        snippet: lines[lineNum - 1]?.trim().slice(0, 100),
+      });
+    }
+  }
+}
+
+const bySeverity = { CRITICAL: 0, HIGH: 0, MEDIUM: 0, LOW: 0 };
+for (const f of findings) bySeverity[f.severity] = (bySeverity[f.severity] ?? 0) + 1;
+
+const summary = {
+  scanned: files.length,
+  findings: findings.length,
+  bySeverity,
+  clean: findings.length === 0,
+};
+
+if (summaryOnly) {
+  console.log(JSON.stringify(summary, null, 2));
+} else {
+  console.log(JSON.stringify({ summary, findings }, null, 2));
+}
+
+process.exit(findings.some(f => f.severity === 'CRITICAL') ? 1 : 0);

package/framework/skills/level-0-meta/mcp-registry.json

@@ -0,0 +1,207 @@
+{
+  "version": "2.0.0",
+  "description": "Centralized MCP registry with phase relevance and install configuration for morph-spec workflows",
+  "mcps": {
+    "context7": {
+      "phases": ["proposal", "design", "tasks", "implement"],
+      "tools": ["resolve-library-id", "query-docs"],
+      "detection": "enabledPlugins includes context7 or mcpServers includes context7",
+      "fallback": "WebSearch + WebFetch for library documentation",
+      "usage": "Library documentation lookups, API reference, implementation patterns",
+      "install": {
+        "autoInstall": true,
+        "config": {
+          "command": "npx",
+          "args": ["-y", "@upstash/context7-mcp@latest"]
+        },
+        "credentials": [],
+        "prerequisites": [],
+        "stackRelevance": ["*"],
+        "warnings": [],
+        "setupGuide": null
+      }
+    },
+    "playwright": {
+      "phases": ["uiux", "implement"],
+      "tools": ["browser_navigate", "browser_snapshot", "browser_take_screenshot", "browser_console_messages", "browser_click", "browser_resize"],
+      "detection": "mcpServers includes playwright",
+      "fallback": "WebFetch for read-only page content, manual testing",
+      "usage": "UI preview, smoke testing, page inspection, responsive testing, screenshot capture",
+      "install": {
+        "autoInstall": true,
+        "config": {
+          "command": "npx",
+          "args": ["-y", "@playwright/mcp@latest"]
+        },
+        "credentials": [],
+        "prerequisites": [],
+        "stackRelevance": ["*"],
+        "warnings": [],
+        "setupGuide": null
+      }
+    },
+    "supabase": {
+      "phases": ["design", "implement"],
+      "tools": ["list_tables", "get_table_schema", "get_relationships", "query"],
+      "detection": "mcpServers includes supabase",
+      "fallback": "Grep query files + Read type definitions for schema inference",
+      "usage": "Schema analysis, migrations, RLS policies, data operations",
+      "install": {
+        "autoInstall": false,
+        "config": {
+          "command": "npx",
+          "args": ["-y", "@supabase/mcp-server-supabase"],
+          "env": {
+            "SUPABASE_URL": "",
+            "SUPABASE_SERVICE_ROLE_KEY": ""
+          }
+        },
+        "credentials": [
+          {
+            "name": "Supabase Project URL",
+            "envVar": "SUPABASE_URL",
+            "secret": false,
+            "helpUrl": "https://supabase.com/dashboard/project/_/settings/api"
+          },
+          {
+            "name": "Service Role Key",
+            "envVar": "SUPABASE_SERVICE_ROLE_KEY",
+            "secret": true,
+            "helpUrl": "https://supabase.com/dashboard/project/_/settings/api"
+          }
+        ],
+        "prerequisites": [],
+        "stackRelevance": ["nextjs-supabase", "supabase", "nextjs"],
+        "warnings": ["NEVER connect to PRODUCTION databases. Use local/dev environment only."],
+        "setupGuide": null
+      }
+    },
+    "github": {
+      "phases": ["setup", "tasks", "implement"],
+      "tools": ["get_repo", "search_code", "create_issue", "create_pull_request", "search_issues"],
+      "detection": "mcpServers includes github",
+      "fallback": "Bash `gh` CLI commands",
+      "usage": "Repo metadata, code search, issue creation, PR management",
+      "install": {
+        "autoInstall": false,
+        "config": {
+          "command": "npx",
+          "args": ["-y", "@modelcontextprotocol/server-github"],
+          "env": {
+            "GITHUB_PERSONAL_ACCESS_TOKEN": ""
+          }
+        },
+        "credentials": [
+          {
+            "name": "GitHub Personal Access Token",
+            "envVar": "GITHUB_PERSONAL_ACCESS_TOKEN",
+            "secret": true,
+            "helpUrl": "https://github.com/settings/tokens"
+          }
+        ],
+        "prerequisites": [],
+        "stackRelevance": ["*"],
+        "warnings": [],
+        "setupGuide": null
+      }
+    },
+    "figma": {
+      "phases": ["uiux"],
+      "tools": ["get_file"],
+      "detection": "mcpServers includes figma",
+      "fallback": "Read CSS/SCSS files for existing design tokens",
+      "usage": "Design token extraction, component specs, color/typography from Figma files",
+      "install": {
+        "autoInstall": false,
+        "config": {
+          "command": "npx",
+          "args": ["-y", "@anthropic/mcp-server-figma"],
+          "env": {
+            "FIGMA_ACCESS_TOKEN": ""
+          }
+        },
+        "credentials": [
+          {
+            "name": "Figma Access Token",
+            "envVar": "FIGMA_ACCESS_TOKEN",
+            "secret": true,
+            "helpUrl": "https://www.figma.com/developers/api#access-tokens"
+          }
+        ],
+        "prerequisites": [],
+        "stackRelevance": ["blazor", "nextjs", "react", "vue"],
+        "warnings": [],
+        "setupGuide": null
+      }
+    },
+    "docker": {
+      "phases": ["implement"],
+      "tools": ["build", "run", "compose"],
+      "detection": "mcpServers includes docker",
+      "fallback": "Bash `docker` CLI commands",
+      "usage": "Container management, build and run containers",
+      "install": {
+        "autoInstall": false,
+        "config": {
+          "command": "npx",
+          "args": ["-y", "@modelcontextprotocol/server-docker"]
+        },
+        "credentials": [],
+        "prerequisites": [
+          {
+            "name": "Docker",
+            "checkCommand": "docker --version",
+            "installUrl": "https://docs.docker.com/get-docker/"
+          }
+        ],
+        "stackRelevance": ["dotnet", "blazor", "nextjs", "nodejs"],
+        "warnings": [],
+        "setupGuide": null
+      }
+    },
+    "azure": {
+      "phases": ["implement"],
+      "tools": ["deploy", "resource_management"],
+      "detection": "mcpServers includes azure",
+      "fallback": "Bash `az` CLI commands",
+      "usage": "Cloud resource management, deployment",
+      "install": {
+        "autoInstall": false,
+        "config": {
+          "command": "npx",
+          "args": ["-y", "@azure/mcp-server"],
+          "env": {
+            "AZURE_SUBSCRIPTION_ID": ""
+          }
+        },
+        "credentials": [
+          {
+            "name": "Azure Subscription ID",
+            "envVar": "AZURE_SUBSCRIPTION_ID",
+            "secret": false,
+            "helpUrl": "https://portal.azure.com/#blade/Microsoft_Azure_Billing/SubscriptionsBlade"
+          }
+        ],
+        "prerequisites": [
+          {
+            "name": "Azure CLI",
+            "checkCommand": "az --version",
+            "installUrl": "https://learn.microsoft.com/en-us/cli/azure/install-azure-cli"
+          }
+        ],
+        "stackRelevance": ["blazor", "dotnet", "azure"],
+        "warnings": [],
+        "setupGuide": null
+      }
+    }
+  },
+  "phaseMatrix": {
+    "proposal": ["context7"],
+    "setup": ["github"],
+    "uiux": ["playwright", "figma", "context7"],
+    "design": ["supabase", "context7", "github"],
+    "clarify": ["context7", "github"],
+    "tasks": ["context7", "github"],
+    "implement": ["supabase", "context7", "playwright", "github", "docker", "azure"]
+  }
+}

package/framework/skills/level-0-meta/{morph-checklist.md → morph-checklist/SKILL.md}

@@ -1,6 +1,11 @@
-# Skill: /morph-checklist
+---
+name: morph-checklist
+description: Pre-deploy, security, SEO, performance, accessibility, and LGPD compliance checklists for MORPH-SPEC projects. Use before deploying to production, during security audits, when optimizing for SEO or performance, or when validating Brazilian LGPD data protection compliance.
+user-invocable: true
+allowed-tools: Read, Write, Edit, Bash, Glob, Grep
+---
 
-> **Layer:** 2 | **Load:** on-keyword | **Keywords:** checklist, deploy, security, seo, performance, accessibility, lgpd, legal
+# MORPH Checklists
 
 Types: `deploy`, `security`, `seo`, `performance`, `accessibility`, `legal-brazil`, `simulation` (see [simulation-checklist.md](simulation-checklist.md))
 
@@ -114,4 +119,4 @@ Types: `deploy`, `security`, `seo`, `performance`, `accessibility`, `legal-brazi
 
 ---
 
-*MORPH-SPEC Checklist Skill*
+*MORPH-SPEC Checklist Skill*

package/framework/skills/{level-1-workflows/morph-replicate.md → level-0-meta/morph-replicate/SKILL.md}

@@ -1,3 +1,10 @@
+---
+name: morph-replicate
+description: Simplified workflow for converting HTML prototypes into functional Blazor components, extracting design patterns and mapping HTML elements to Fluent UI/MudBlazor equivalents. Use when an approved HTML prototype exists and needs conversion to Blazor without a full MORPH-SPEC spec pipeline.
+user-invocable: false
+allowed-tools: Read, Write, Edit, Bash, Glob, Grep
+---
+
 # Skill: /morph-replicate
 
 > Workflow simplificado para replicar prototipos HTML em Blazor.
@@ -201,13 +208,13 @@ Mapeamento HTML → Blazor:
 
 ---
 
-## Referencias
+## Referências
 
-- [HTML to Blazor Guide](../../../../framework/standards/html-to-blazor.md)
-- [CSS Naming Convention](../../../../framework/standards/css-naming.md)
-- [CSS Animations](../../../../framework/standards/css-animations.md)
-- [Fluent UI Blazor](../../../../framework/standards/fluent-ui-blazor.md)
+- **Ref:** `framework/standards/frontend/blazor/html-conversion.md`
+- **Ref:** `framework/standards/frontend/design-system/naming.md`
+- **Ref:** `framework/standards/frontend/design-system/animations.md`
+- **Ref:** `framework/standards/frontend/blazor/fluent-ui.md`
 
 ---
 
-*MORPH-SPEC v2.2.0 by Polymorphism Tech*
+*MORPH-SPEC v2.2.0 by Polymorphism Tech*

package/framework/skills/level-0-meta/{simulation-checklist.md → simulation-checklist/SKILL.md}

@@ -1,8 +1,13 @@
-# Skill: /morph-checklist simulation
+---
+name: simulation-checklist
+description: Checklist for implementing mock/simulation clients for external .NET services (AI APIs, payments, email). Use when setting up simulation mode without real API access, when creating fake service implementations for development/testing, or when debugging external service integrations.
+user-invocable: true
+allowed-tools: Read, Write, Edit, Bash, Glob, Grep
+---
 
-> **Layer:** 2 | **Load:** on-keyword | **Keywords:** simulation, mock, fake, external service, sandbox
+# Simulation Checklist
 
-Checklist for simulating external services (AI, payment, email APIs).
+Checklist for simulating external services (AI, payment, email APIs) in .NET projects.
 
 ## Pre-Implementation
 
@@ -74,4 +79,4 @@ else
 
 ---
 
-*MORPH-SPEC Simulation Checklist*
+*MORPH-SPEC Simulation Checklist*