@polymorphism-tech/morph-spec 8.1.0 → 8.1.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (162) hide show
  1. package/README.md +2 -2
  2. package/bin/validate.js +379 -379
  3. package/claude-plugin.json +1 -1
  4. package/docs/CHEATSHEET.md +1 -1
  5. package/docs/QUICKSTART.md +1 -1
  6. package/framework/commands/commit.md +166 -166
  7. package/framework/commands/morph-infra.md +215 -215
  8. package/framework/commands/morph-preflight.md +205 -205
  9. package/framework/commands/morph-troubleshoot.md +124 -124
  10. package/framework/hooks/claude-code/statusline.py +679 -679
  11. package/framework/hooks/claude-code/statusline.sh +11 -11
  12. package/framework/hooks/git/commit-msg/conventional-commits.sh +33 -33
  13. package/framework/hooks/git/pre-commit/agents.sh +25 -25
  14. package/framework/hooks/git/pre-commit/orchestrator.sh +64 -64
  15. package/framework/hooks/git/pre-commit/specs.sh +50 -50
  16. package/framework/hooks/git/pre-push/run-tests.sh +44 -44
  17. package/framework/hooks/shared/activity-logger.js +160 -160
  18. package/framework/hooks/shared/stdin-reader.js +26 -26
  19. package/framework/rubrics/backend.json +41 -41
  20. package/framework/rules/ai-agents-standards.md +45 -45
  21. package/framework/rules/dotnet-templates.md +86 -86
  22. package/framework/rules/frontend-standards.md +13 -13
  23. package/framework/rules/infrastructure-standards.md +27 -27
  24. package/framework/rules/neon-standards.md +25 -25
  25. package/framework/rules/nextjs-standards.md +20 -20
  26. package/framework/rules/nextjs-templates.md +40 -40
  27. package/framework/skills/core/create-umbraco-lp/SKILL.md +1 -1
  28. package/framework/skills/core/migrate-lp-to-umbraco/SKILL.md +1 -1
  29. package/framework/skills/core/morph-apply/SKILL.md +1 -1
  30. package/framework/skills/core/morph-brainstorming/SKILL.md +1 -1
  31. package/framework/skills/core/morph-eval/SKILL.md +1 -1
  32. package/framework/skills/core/morph-hotfix/SKILL.md +1 -1
  33. package/framework/skills/core/morph-implement/SKILL.md +1 -1
  34. package/framework/skills/core/morph-plan/SKILL.md +1 -1
  35. package/framework/skills/core/morph-proposal/SKILL.md +1 -1
  36. package/framework/skills/core/morph-review/SKILL.md +1 -1
  37. package/framework/skills/core/morph-stack-scan/SKILL.md +1 -1
  38. package/framework/skills/core/morph-standards/SKILL.md +1 -1
  39. package/framework/standards/ai-agents/agent-session.md +160 -160
  40. package/framework/standards/ai-agents/batching.md +193 -193
  41. package/framework/standards/ai-agents/context-providers.md +188 -188
  42. package/framework/standards/ai-agents/mcp-server.md +250 -250
  43. package/framework/standards/ai-agents/mcp-tools.md +197 -197
  44. package/framework/standards/ai-agents/middleware-patterns.md +207 -207
  45. package/framework/standards/ai-agents/modalities-image-gen.md +173 -173
  46. package/framework/standards/ai-agents/modalities-speech-to-text.md +171 -171
  47. package/framework/standards/ai-agents/modalities-text-to-speech.md +181 -181
  48. package/framework/standards/ai-agents/modalities-vision.md +201 -201
  49. package/framework/standards/ai-agents/multi-agent-patterns.md +155 -155
  50. package/framework/standards/ai-agents/production.md +275 -275
  51. package/framework/standards/ai-agents/prompts-in-db.md +214 -214
  52. package/framework/standards/ai-agents/providers/model-registry.md +158 -158
  53. package/framework/standards/ai-agents/service-tier-flex.md +135 -135
  54. package/framework/standards/ai-agents/structured-output.md +249 -249
  55. package/framework/standards/ai-agents/sweet-spot.md +109 -109
  56. package/framework/templates/IDE-SNIPPETS.md +262 -262
  57. package/framework/templates/code/dotnet/abstractions/api-endpoint.cs +7 -7
  58. package/framework/templates/code/dotnet/ai-agents/AgentBootstrap.cs.template +39 -39
  59. package/framework/templates/code/dotnet/ai-agents/EmbeddingService.cs.template +68 -68
  60. package/framework/templates/code/dotnet/ai-agents/ModelRegistry.cs.template +117 -117
  61. package/framework/templates/code/dotnet/ai-agents/PromptRepository.cs.template +95 -95
  62. package/framework/templates/code/dotnet/ai-agents/ResilientToolMiddleware.cs.template +61 -61
  63. package/framework/templates/code/dotnet/ai-agents/VectorSearchTool.cs.template +107 -107
  64. package/framework/templates/code/dotnet/ai-agents/model-registry.json.template +58 -58
  65. package/framework/templates/code/dotnet/contracts/contracts-vsa.cs +281 -281
  66. package/framework/templates/code/dotnet/database/migration.cs +83 -83
  67. package/framework/templates/code/dotnet/feature/endpoint.cs.hbs +21 -21
  68. package/framework/templates/code/dotnet/feature/request.cs.hbs +4 -4
  69. package/framework/templates/code/dotnet/feature/response.cs.hbs +4 -4
  70. package/framework/templates/code/dotnet/feature/validator.cs.hbs +15 -15
  71. package/framework/templates/code/sql/ai-agents/agent-prompts-migration.sql.template +58 -58
  72. package/framework/templates/code/sql/ai-agents/pgvector-embeddings-migration.sql.template +91 -91
  73. package/framework/templates/code/typescript/contracts.ts +167 -167
  74. package/framework/templates/docs/clarifications.md +253 -253
  75. package/framework/templates/docs/schema-analysis.md +119 -119
  76. package/framework/templates/docs/ui-components.md +52 -52
  77. package/framework/templates/docs/ui-design-system.md +76 -76
  78. package/framework/templates/docs/ui-flows.md +167 -167
  79. package/framework/templates/docs/ui-mockups.md +98 -98
  80. package/framework/templates/feature/decisions.md +122 -122
  81. package/framework/templates/frontend/nextjs/Dockerfile.nextjs.hbs +43 -43
  82. package/framework/templates/frontend/nextjs/client-component.tsx.hbs +26 -26
  83. package/framework/templates/frontend/nextjs/env.mjs.hbs +32 -32
  84. package/framework/templates/frontend/nextjs/feature-form.tsx.hbs +56 -56
  85. package/framework/templates/frontend/nextjs/page.tsx.hbs +22 -22
  86. package/framework/templates/frontend/nextjs/tsconfig.json.hbs +26 -26
  87. package/framework/templates/frontend/nextjs/use-feature.ts.hbs +54 -54
  88. package/framework/templates/infrastructure/docker/Dockerfile.template +58 -58
  89. package/framework/templates/infrastructure/docker/docker-compose.template.yml +50 -50
  90. package/framework/templates/infrastructure/docker/dockerfile-api.dockerfile +38 -38
  91. package/framework/templates/infrastructure/docker/dockerfile-web.dockerfile +48 -48
  92. package/framework/templates/infrastructure/github/README.md +56 -56
  93. package/framework/templates/infrastructure/github/actions/docker-build-push/action.yml.hbs +45 -45
  94. package/framework/templates/infrastructure/github/actions/health-check/action.yml.hbs +27 -27
  95. package/framework/templates/infrastructure/github/workflows/docker-build-push.yml.hbs +59 -59
  96. package/framework/templates/infrastructure/github/workflows/dotnet-build.yml.hbs +39 -39
  97. package/framework/templates/integrations/asaas-client.cs +387 -387
  98. package/framework/templates/integrations/asaas-webhook.cs +351 -351
  99. package/framework/templates/meta-prompts/fusion/fusion-agent.md +76 -76
  100. package/framework/templates/meta-prompts/fusion/fusion-aggregator.md +100 -100
  101. package/framework/templates/meta-prompts/validators/pre-commit-validator.md +95 -95
  102. package/framework/templates/project/validate.js +120 -120
  103. package/framework/templates/state.template.json +17 -17
  104. package/framework/templates/ui/design-system.css +226 -226
  105. package/package.json +1 -1
  106. package/src/commands/dashboard/dashboard.js +53 -53
  107. package/src/commands/index.js +13 -13
  108. package/src/commands/mcp/mcp-setup.js +519 -519
  109. package/src/commands/project/checkpoint.js +209 -209
  110. package/src/commands/project/worktree.js +83 -1
  111. package/src/core/state/phase-state-machine.js +197 -197
  112. package/src/core/templates/template-renderer.js +477 -477
  113. package/src/dashboard/app/components/DetailPanel.jsx +11 -11
  114. package/src/dashboard/app/components/FlowGraph.jsx +17 -17
  115. package/src/dashboard/app/components/SearchFilter.jsx +22 -22
  116. package/src/dashboard/app/hooks/useDetailPanel.js +15 -15
  117. package/src/dashboard/app/main.jsx +13 -13
  118. package/src/dashboard/app/pages/AgentMap.jsx +370 -370
  119. package/src/dashboard/app/pages/HookInspector.jsx +418 -418
  120. package/src/dashboard/app/pages/PhasePipeline.jsx +408 -408
  121. package/src/dashboard/app/pages/RulesMap.jsx +273 -273
  122. package/src/dashboard/app/pages/SkillsLibrary.jsx +366 -366
  123. package/src/dashboard/app/pages/Standards.jsx +332 -332
  124. package/src/dashboard/app/styles/index.css +47 -47
  125. package/src/dashboard/index.html +12 -12
  126. package/src/dashboard/package.json +24 -24
  127. package/src/dashboard/scanner/hooks-scanner.js +41 -41
  128. package/src/dashboard/scanner/phases-scanner.js +15 -15
  129. package/src/dashboard/scanner/rubrics-scanner.js +12 -12
  130. package/src/dashboard/scanner/rules-scanner.js +37 -37
  131. package/src/dashboard/scanner/skills-scanner.js +43 -43
  132. package/src/dashboard/scanner/squads-scanner.js +13 -13
  133. package/src/dashboard/scanner/standards-scanner.js +26 -26
  134. package/src/dashboard/vite-plugin-morph-data.js +17 -17
  135. package/src/dashboard/vite.config.js +24 -24
  136. package/src/lib/agents/metrics-aggregator.js +56 -56
  137. package/src/lib/agents/metrics-calculator.js +125 -125
  138. package/src/lib/agents/output-collector.js +73 -73
  139. package/src/lib/detectors/claude-config-detector.js +152 -152
  140. package/src/lib/detectors/design-system-detector.js +231 -231
  141. package/src/lib/detectors/index.js +217 -217
  142. package/src/lib/generators/architecture-scanner.js +639 -639
  143. package/src/lib/generators/design-system-generator.js +508 -508
  144. package/src/lib/generators/index.js +13 -13
  145. package/src/lib/generators/settings-generator.js +209 -209
  146. package/src/lib/hooks/hook-executor.js +167 -167
  147. package/src/lib/installers/mcp-installer.js +719 -719
  148. package/src/lib/tasks/task-classifier.js +30 -30
  149. package/src/lib/tasks/task-parser.js +209 -209
  150. package/src/lib/validators/architecture/architecture-validator.js +259 -259
  151. package/src/lib/validators/checkpoint-persistence.js +39 -39
  152. package/src/lib/validators/contracts/contract-compliance-validator.js +274 -274
  153. package/src/lib/validators/css/css-validator.js +340 -340
  154. package/src/lib/validators/packages/package-validator.js +347 -347
  155. package/src/lib/validators/shared/emit-validator-dispatch.js +14 -14
  156. package/src/lib/validators/shared/issue-counter.js +14 -14
  157. package/src/lib/validators/validation-runner.js +349 -349
  158. package/src/utils/agent-id-mapper.js +11 -11
  159. package/src/utils/claude-settings-manager.js +300 -300
  160. package/src/utils/skills-installer.js +174 -174
  161. package/framework/templates/.idea/morph-templates.xml +0 -92
  162. package/framework/templates/.vscode/morph-templates.code-snippets +0 -186
@@ -1,13 +1,13 @@
1
- /**
2
- * Code Generators
3
- *
4
- * Code and documentation generation utilities.
5
- */
6
-
7
- export * from './design-system-generator.js';
8
- export * from './context-generator.js';
9
- export * from './recap-generator.js';
10
- export * from './metadata-extractor.js';
11
- export * from './architecture-scanner.js';
12
- export * from './scaffold-generator.js';
13
- export * from './mandate-generator.js';
1
+ /**
2
+ * Code Generators
3
+ *
4
+ * Code and documentation generation utilities.
5
+ */
6
+
7
+ export * from './design-system-generator.js';
8
+ export * from './context-generator.js';
9
+ export * from './recap-generator.js';
10
+ export * from './metadata-extractor.js';
11
+ export * from './architecture-scanner.js';
12
+ export * from './scaffold-generator.js';
13
+ export * from './mandate-generator.js';
@@ -1,209 +1,209 @@
1
- /**
2
- * Settings Generator
3
- *
4
- * Generates .claude/settings.local.json for projects based on detected
5
- * stack, MCPs, and morph-spec configuration. Uses _morph_managed marker
6
- * to track managed entries for safe reset.
7
- */
8
-
9
- import { join } from 'path';
10
- import { existsSync } from 'fs';
11
- import { readFile, writeFile, mkdir } from 'fs/promises';
12
-
13
- const MORPH_MANAGED_KEY = '_morph_managed';
14
-
15
- /**
16
- * Generate and merge settings for a project
17
- * @param {string} targetPath - Project root directory
18
- * @param {Object} detectedConfig - Output from detectClaudeConfig()
19
- * @param {Object} morphConfig - morph-spec config (from .morph/config/config.json)
20
- * @returns {Promise<Object>} Generated settings summary
21
- */
22
- export async function generateSettings(targetPath, detectedConfig, morphConfig = {}) {
23
- const claudeDir = join(targetPath, '.claude');
24
- const settingsPath = join(claudeDir, 'settings.local.json');
25
-
26
- // Read existing settings
27
- const existing = await readSettingsSafe(settingsPath);
28
-
29
- // Build stack-based permissions
30
- const stack = morphConfig?.project?.architecture || 'unknown';
31
- const permissions = buildPermissions(stack, detectedConfig);
32
-
33
- // Build generated settings
34
- const generated = {};
35
-
36
- if (permissions.length > 0) {
37
- generated.permissions = permissions;
38
- }
39
-
40
- // Track what we manage
41
- const managed = {
42
- permissions_added: permissions,
43
- mcps_detected: detectedConfig.mcpServers.map(s => s.name),
44
- plugins_detected: detectedConfig.plugins.map(p => p.name),
45
- generated_at: new Date().toISOString()
46
- };
47
-
48
- // Merge without overwriting user config
49
- const merged = mergeSettings(existing, generated);
50
- merged[MORPH_MANAGED_KEY] = managed;
51
-
52
- // Ensure directory exists
53
- if (!existsSync(claudeDir)) {
54
- await mkdir(claudeDir, { recursive: true });
55
- }
56
-
57
- await writeFile(settingsPath, JSON.stringify(merged, null, 2) + '\n', 'utf-8');
58
-
59
- return {
60
- settingsPath,
61
- permissionsAdded: permissions.length,
62
- managed
63
- };
64
- }
65
-
66
- /**
67
- * Build permission rules based on detected stack
68
- * @param {string} stack - Detected project stack
69
- * @param {Object} detectedConfig - Detected Claude config
70
- * @returns {Array<string>} Permission patterns
71
- */
72
- export function buildPermissions(stack, detectedConfig = {}) {
73
- const permissions = [];
74
-
75
- // Stack-based permissions
76
- const stackPermissions = {
77
- nodejs: ['Bash(node:*)', 'Bash(npm:*)', 'Bash(npx:*)'],
78
- typescript: ['Bash(node:*)', 'Bash(npm:*)', 'Bash(npx:*)', 'Bash(tsc:*)'],
79
- nextjs: ['Bash(node:*)', 'Bash(npm:*)', 'Bash(npx:*)'],
80
- react: ['Bash(node:*)', 'Bash(npm:*)', 'Bash(npx:*)'],
81
- vue: ['Bash(node:*)', 'Bash(npm:*)', 'Bash(npx:*)'],
82
- dotnet: ['Bash(dotnet:*)', 'Bash(nuget:*)'],
83
- python: ['Bash(python:*)', 'Bash(pip:*)', 'Bash(pytest:*)'],
84
- go: ['Bash(go:*)']
85
- };
86
-
87
- if (stackPermissions[stack]) {
88
- permissions.push(...stackPermissions[stack]);
89
- }
90
-
91
- // morph-spec CLI always needs node/npx
92
- if (!permissions.includes('Bash(npx:*)')) {
93
- permissions.push('Bash(npx:*)');
94
- }
95
-
96
- return permissions;
97
- }
98
-
99
- /**
100
- * Deep merge settings without overwriting user entries
101
- * @param {Object} existing - Current settings.local.json
102
- * @param {Object} generated - Generated settings to merge
103
- * @returns {Object} Merged settings
104
- */
105
- export function mergeSettings(existing, generated) {
106
- const result = { ...existing };
107
-
108
- for (const [key, value] of Object.entries(generated)) {
109
- if (key === MORPH_MANAGED_KEY) continue;
110
-
111
- if (Array.isArray(value) && Array.isArray(result[key])) {
112
- // Merge arrays without duplicates
113
- const set = new Set(result[key]);
114
- for (const item of value) {
115
- set.add(item);
116
- }
117
- result[key] = [...set];
118
- } else if (typeof value === 'object' && value !== null && !Array.isArray(value)) {
119
- // Recursively merge objects
120
- result[key] = mergeSettings(result[key] || {}, value);
121
- } else if (!(key in result)) {
122
- // Only add new keys, never overwrite existing
123
- result[key] = value;
124
- }
125
- }
126
-
127
- return result;
128
- }
129
-
130
- /**
131
- * Remove only morph-spec managed entries from settings
132
- * @param {string} settingsPath - Path to settings.local.json
133
- * @returns {Promise<Object>} Summary of what was removed
134
- */
135
- export async function resetMorphSettings(settingsPath) {
136
- if (!existsSync(settingsPath)) {
137
- return { removed: false, reason: 'file not found' };
138
- }
139
-
140
- const settings = await readSettingsSafe(settingsPath);
141
- const managed = settings[MORPH_MANAGED_KEY];
142
-
143
- if (!managed) {
144
- return { removed: false, reason: 'no _morph_managed section found' };
145
- }
146
-
147
- // Remove managed permissions
148
- if (managed.permissions_added && Array.isArray(settings.permissions)) {
149
- settings.permissions = settings.permissions.filter(
150
- p => !managed.permissions_added.includes(p)
151
- );
152
- if (settings.permissions.length === 0) {
153
- delete settings.permissions;
154
- }
155
- }
156
-
157
- // Remove the managed marker itself
158
- delete settings[MORPH_MANAGED_KEY];
159
-
160
- // Write back
161
- await writeFile(settingsPath, JSON.stringify(settings, null, 2) + '\n', 'utf-8');
162
-
163
- return {
164
- removed: true,
165
- permissionsRemoved: managed.permissions_added || [],
166
- previouslyGenerated: managed.generated_at
167
- };
168
- }
169
-
170
- /**
171
- * Save integrations.json with detected config
172
- * @param {string} targetPath - Project root directory
173
- * @param {Object} detectedConfig - Output from detectClaudeConfig()
174
- */
175
- export async function saveIntegrations(targetPath, detectedConfig) {
176
- const integrationsPath = join(targetPath, '.morph', 'config', 'integrations.json');
177
- const integrationsDir = join(targetPath, '.morph', 'config');
178
-
179
- if (!existsSync(integrationsDir)) {
180
- await mkdir(integrationsDir, { recursive: true });
181
- }
182
-
183
- const integrations = {
184
- version: '1.0.0',
185
- detectedAt: new Date().toISOString(),
186
- plugins: detectedConfig.plugins,
187
- mcpServers: detectedConfig.mcpServers,
188
- superpowers: detectedConfig.superpowers,
189
- customSkills: detectedConfig.customSkills.length,
190
- customCommands: detectedConfig.customCommands.length,
191
- hooks: detectedConfig.hooks.length
192
- };
193
-
194
- await writeFile(integrationsPath, JSON.stringify(integrations, null, 2) + '\n', 'utf-8');
195
- return integrationsPath;
196
- }
197
-
198
- // ============================================================================
199
- // Helpers
200
- // ============================================================================
201
-
202
- async function readSettingsSafe(settingsPath) {
203
- try {
204
- if (!existsSync(settingsPath)) return {};
205
- return JSON.parse(await readFile(settingsPath, 'utf-8'));
206
- } catch {
207
- return {};
208
- }
209
- }
1
+ /**
2
+ * Settings Generator
3
+ *
4
+ * Generates .claude/settings.local.json for projects based on detected
5
+ * stack, MCPs, and morph-spec configuration. Uses _morph_managed marker
6
+ * to track managed entries for safe reset.
7
+ */
8
+
9
+ import { join } from 'path';
10
+ import { existsSync } from 'fs';
11
+ import { readFile, writeFile, mkdir } from 'fs/promises';
12
+
13
+ const MORPH_MANAGED_KEY = '_morph_managed';
14
+
15
+ /**
16
+ * Generate and merge settings for a project
17
+ * @param {string} targetPath - Project root directory
18
+ * @param {Object} detectedConfig - Output from detectClaudeConfig()
19
+ * @param {Object} morphConfig - morph-spec config (from .morph/config/config.json)
20
+ * @returns {Promise<Object>} Generated settings summary
21
+ */
22
+ export async function generateSettings(targetPath, detectedConfig, morphConfig = {}) {
23
+ const claudeDir = join(targetPath, '.claude');
24
+ const settingsPath = join(claudeDir, 'settings.local.json');
25
+
26
+ // Read existing settings
27
+ const existing = await readSettingsSafe(settingsPath);
28
+
29
+ // Build stack-based permissions
30
+ const stack = morphConfig?.project?.architecture || 'unknown';
31
+ const permissions = buildPermissions(stack, detectedConfig);
32
+
33
+ // Build generated settings
34
+ const generated = {};
35
+
36
+ if (permissions.length > 0) {
37
+ generated.permissions = permissions;
38
+ }
39
+
40
+ // Track what we manage
41
+ const managed = {
42
+ permissions_added: permissions,
43
+ mcps_detected: detectedConfig.mcpServers.map(s => s.name),
44
+ plugins_detected: detectedConfig.plugins.map(p => p.name),
45
+ generated_at: new Date().toISOString()
46
+ };
47
+
48
+ // Merge without overwriting user config
49
+ const merged = mergeSettings(existing, generated);
50
+ merged[MORPH_MANAGED_KEY] = managed;
51
+
52
+ // Ensure directory exists
53
+ if (!existsSync(claudeDir)) {
54
+ await mkdir(claudeDir, { recursive: true });
55
+ }
56
+
57
+ await writeFile(settingsPath, JSON.stringify(merged, null, 2) + '\n', 'utf-8');
58
+
59
+ return {
60
+ settingsPath,
61
+ permissionsAdded: permissions.length,
62
+ managed
63
+ };
64
+ }
65
+
66
+ /**
67
+ * Build permission rules based on detected stack
68
+ * @param {string} stack - Detected project stack
69
+ * @param {Object} detectedConfig - Detected Claude config
70
+ * @returns {Array<string>} Permission patterns
71
+ */
72
+ export function buildPermissions(stack, detectedConfig = {}) {
73
+ const permissions = [];
74
+
75
+ // Stack-based permissions
76
+ const stackPermissions = {
77
+ nodejs: ['Bash(node:*)', 'Bash(npm:*)', 'Bash(npx:*)'],
78
+ typescript: ['Bash(node:*)', 'Bash(npm:*)', 'Bash(npx:*)', 'Bash(tsc:*)'],
79
+ nextjs: ['Bash(node:*)', 'Bash(npm:*)', 'Bash(npx:*)'],
80
+ react: ['Bash(node:*)', 'Bash(npm:*)', 'Bash(npx:*)'],
81
+ vue: ['Bash(node:*)', 'Bash(npm:*)', 'Bash(npx:*)'],
82
+ dotnet: ['Bash(dotnet:*)', 'Bash(nuget:*)'],
83
+ python: ['Bash(python:*)', 'Bash(pip:*)', 'Bash(pytest:*)'],
84
+ go: ['Bash(go:*)']
85
+ };
86
+
87
+ if (stackPermissions[stack]) {
88
+ permissions.push(...stackPermissions[stack]);
89
+ }
90
+
91
+ // morph-spec CLI always needs node/npx
92
+ if (!permissions.includes('Bash(npx:*)')) {
93
+ permissions.push('Bash(npx:*)');
94
+ }
95
+
96
+ return permissions;
97
+ }
98
+
99
+ /**
100
+ * Deep merge settings without overwriting user entries
101
+ * @param {Object} existing - Current settings.local.json
102
+ * @param {Object} generated - Generated settings to merge
103
+ * @returns {Object} Merged settings
104
+ */
105
+ export function mergeSettings(existing, generated) {
106
+ const result = { ...existing };
107
+
108
+ for (const [key, value] of Object.entries(generated)) {
109
+ if (key === MORPH_MANAGED_KEY) continue;
110
+
111
+ if (Array.isArray(value) && Array.isArray(result[key])) {
112
+ // Merge arrays without duplicates
113
+ const set = new Set(result[key]);
114
+ for (const item of value) {
115
+ set.add(item);
116
+ }
117
+ result[key] = [...set];
118
+ } else if (typeof value === 'object' && value !== null && !Array.isArray(value)) {
119
+ // Recursively merge objects
120
+ result[key] = mergeSettings(result[key] || {}, value);
121
+ } else if (!(key in result)) {
122
+ // Only add new keys, never overwrite existing
123
+ result[key] = value;
124
+ }
125
+ }
126
+
127
+ return result;
128
+ }
129
+
130
+ /**
131
+ * Remove only morph-spec managed entries from settings
132
+ * @param {string} settingsPath - Path to settings.local.json
133
+ * @returns {Promise<Object>} Summary of what was removed
134
+ */
135
+ export async function resetMorphSettings(settingsPath) {
136
+ if (!existsSync(settingsPath)) {
137
+ return { removed: false, reason: 'file not found' };
138
+ }
139
+
140
+ const settings = await readSettingsSafe(settingsPath);
141
+ const managed = settings[MORPH_MANAGED_KEY];
142
+
143
+ if (!managed) {
144
+ return { removed: false, reason: 'no _morph_managed section found' };
145
+ }
146
+
147
+ // Remove managed permissions
148
+ if (managed.permissions_added && Array.isArray(settings.permissions)) {
149
+ settings.permissions = settings.permissions.filter(
150
+ p => !managed.permissions_added.includes(p)
151
+ );
152
+ if (settings.permissions.length === 0) {
153
+ delete settings.permissions;
154
+ }
155
+ }
156
+
157
+ // Remove the managed marker itself
158
+ delete settings[MORPH_MANAGED_KEY];
159
+
160
+ // Write back
161
+ await writeFile(settingsPath, JSON.stringify(settings, null, 2) + '\n', 'utf-8');
162
+
163
+ return {
164
+ removed: true,
165
+ permissionsRemoved: managed.permissions_added || [],
166
+ previouslyGenerated: managed.generated_at
167
+ };
168
+ }
169
+
170
+ /**
171
+ * Save integrations.json with detected config
172
+ * @param {string} targetPath - Project root directory
173
+ * @param {Object} detectedConfig - Output from detectClaudeConfig()
174
+ */
175
+ export async function saveIntegrations(targetPath, detectedConfig) {
176
+ const integrationsPath = join(targetPath, '.morph', 'config', 'integrations.json');
177
+ const integrationsDir = join(targetPath, '.morph', 'config');
178
+
179
+ if (!existsSync(integrationsDir)) {
180
+ await mkdir(integrationsDir, { recursive: true });
181
+ }
182
+
183
+ const integrations = {
184
+ version: '1.0.0',
185
+ detectedAt: new Date().toISOString(),
186
+ plugins: detectedConfig.plugins,
187
+ mcpServers: detectedConfig.mcpServers,
188
+ superpowers: detectedConfig.superpowers,
189
+ customSkills: detectedConfig.customSkills.length,
190
+ customCommands: detectedConfig.customCommands.length,
191
+ hooks: detectedConfig.hooks.length
192
+ };
193
+
194
+ await writeFile(integrationsPath, JSON.stringify(integrations, null, 2) + '\n', 'utf-8');
195
+ return integrationsPath;
196
+ }
197
+
198
+ // ============================================================================
199
+ // Helpers
200
+ // ============================================================================
201
+
202
+ async function readSettingsSafe(settingsPath) {
203
+ try {
204
+ if (!existsSync(settingsPath)) return {};
205
+ return JSON.parse(await readFile(settingsPath, 'utf-8'));
206
+ } catch {
207
+ return {};
208
+ }
209
+ }