@polymorphism-tech/morph-spec 8.47.0 → 9.0.0

package/framework/hooks/shared/state-reader.js

@@ -227,25 +227,18 @@ export function getFeature(featureName, projectPath) {
  * Derive phase from filesystem (phase deleted from state).
  *
  * Walks the phase map in descending order and returns the first phase whose
- * CANONICAL ARTIFACT exists. An empty folder is not enough — this avoids the
- * chicken-and-egg problem where `mkdir 2-plan/` (or any pre-created sibling)
- * advances the phase before plan content is written, then
- * `enforce-phase-writes` blocks writes back to `0-proposal/`.
+ * CANONICAL ARTIFACT exists. An empty folder is not enough — a pre-created
+ * sibling folder never advances the phase before its content is written.
  *
  * Canonical artifacts (one per phase) match MORPH.md §3:
- *   - 4-review  → review-report.md
- *   - 3-implement → recap.md
- *   - 2-plan    → spec.md  (the first plan-phase output produced)
- *   - 1-design  → design-system.md
- *   - 0-proposal → proposal.md
+ *   - 4-review    → verifier.md
+ *   - 3-implement → any slice report (`reports/*.md`)
+ *   - 1-design   → design-system.md
+ *   - 2-plan      → plan.md
  *
- * If no canonical file is found, returns `'proposal'` (the starting phase).
- *
- * @param {string} featureName
- * @param {string} [projectPath]
- * @returns {string} Phase name
+ * If no canonical file is found, returns `'plan'` (the starting phase).
  */
-export const PHASE_INDEX = { proposal: 0, uiux: 1, plan: 2, implement: 3, review: 4 };
+export const PHASE_INDEX = { plan: 0, uiux: 1, implement: 2, review: 3 };
 
 /**
  * The canonical artifact of each phase, descending. Exported so a caller that
@@ -253,32 +246,61 @@ export const PHASE_INDEX = { proposal: 0, uiux: 1, plan: 2, implement: 3, review
  * tree, say) can answer the same question without re-encoding the map.
  */
 export const PHASE_ARTIFACTS = [
-  ['4-review',    'review',    'review-report.md'],
-  ['3-implement', 'implement', 'recap.md'],
-  ['2-plan',      'plan',      'spec.md'],
+  ['4-review',    'review',    'verifier.md'],
+  ['3-implement', 'implement', 'reports/'],
   ['1-design',    'uiux',      'design-system.md'],
-  ['0-proposal',  'proposal',  'proposal.md'],
+  ['2-plan',      'plan',      'plan.md'],
 ];
 
+const DESIGN_DIR = '1-design';
+
 const gatesOf = (feature) => feature?.approvals || feature?.approvalGates;
 
 /**
  * Gate-implied phase from an ALREADY-LOADED feature object — no disk access.
- *
- * Split out of `gateImpliedPhase` so callers holding a feature.json that did
- * not come from the working tree (e.g. `git show morph/{f}:…`) can reuse the
- * rule instead of copying it. The path-based wrapper below is unchanged.
+ * An approved gate authorizes the NEXT phase:
+ *   review approved → review (terminal)
+ *   plan approved   → implement, or uiux while the design branch was taken
+ *                     (`1-design/` exists) and its gate is still open
+ *   otherwise       → plan
  *
  * @param {Object|null} feature
+ * @param {boolean} [designStarted] - whether `1-design/` exists for the feature
  * @returns {string} phase name
  */
-export function gateImpliedPhaseFrom(feature) {
+export function gateImpliedPhaseFrom(feature, designStarted = false) {
   const gates = gatesOf(feature);
   const ok = (g) => gates?.[g]?.approved === true;
   if (ok('review')) return 'review';
-  if (ok('plan')) return 'implement';
-  if (ok('uiux')) return 'plan';
-  return 'proposal';
+  if (ok('plan')) return designStarted && !ok('uiux') ? 'uiux' : 'implement';
+  return 'plan';
+}
+
+/**
+ * Artifact predicate over a feature dir on disk. A path ending in `/` asks for
+ * any `.md` file directly under it: an empty folder is not an artifact.
+ */
+export function diskArtifactProbe(featureDir) {
+  return (rel) => {
+    const abs = join(featureDir, ...rel.split('/').filter(Boolean));
+    if (!rel.endsWith('/')) return existsSync(abs);
+    try {
+      return readdirSync(abs, { withFileTypes: true }).some((e) => e.isFile() && e.name.endsWith('.md'));
+    } catch {
+      return false;
+    }
+  };
+}
+
+/** The same predicate over a set of feature-relative POSIX paths (a git tree). */
+export function fileSetArtifactProbe(files) {
+  return (rel) => {
+    if (!rel.endsWith('/')) return files.has(rel);
+    for (const f of files) {
+      if (f.startsWith(rel) && f.endsWith('.md') && !f.slice(rel.length).includes('/')) return true;
+    }
+    return false;
+  };
 }
 
 /**
@@ -286,44 +308,33 @@ export function gateImpliedPhaseFrom(feature) {
  * access of its own, so the artifact universe can be a git tree.
  *
  * @param {Object|null} feature
- * @param {(relPath: string) => boolean} hasArtifact - receives POSIX-style
- *   paths relative to the feature dir, e.g. `2-plan/spec.md`
+ * @param {(relPath: string) => boolean} hasArtifact - {@link diskArtifactProbe}
+ *   or {@link fileSetArtifactProbe}: POSIX paths relative to the feature dir
  * @returns {string} phase name
  */
 export function derivePhaseFrom(feature, hasArtifact) {
-  let artifactPhase = 'proposal';
+  let artifactPhase = 'plan';
   for (const [folder, phase, canonical] of PHASE_ARTIFACTS) {
     if (hasArtifact(`${folder}/${canonical}`)) { artifactPhase = phase; break; }
   }
 
   // Gate-aware: an approved gate advances the phase even before the next
-  // phase's first canonical artifact exists. This breaks the chicken-and-egg
-  // where that first artifact could never be written because the phase never
-  // advanced to permit it. Take whichever of (artifact, gate-implied) is later.
-  const implied = gateImpliedPhaseFrom(feature);
+  // phase's first canonical artifact exists, or that artifact could never be
+  // written. Take whichever of (artifact, gate-implied) is later.
+  const designStarted = hasArtifact(DESIGN_DIR) || hasArtifact(`${DESIGN_DIR}/design-system.md`);
+  const implied = gateImpliedPhaseFrom(feature, designStarted);
   return PHASE_INDEX[implied] > PHASE_INDEX[artifactPhase] ? implied : artifactPhase;
 }
 
-/**
- * The phase implied purely by approved gates, independent of which artifacts
- * exist on disk. An approved gate authorizes the NEXT phase, so:
- *   review approved  → review   (terminal)
- *   plan approved    → implement
- *   uiux approved    → plan
- *   otherwise        → proposal  (proposal-approval's fork between uiux/plan is
- *                                 resolved by enforce-phase-writes, not here)
- * @returns {string} phase name
- */
+/** The phase implied purely by approved gates — see {@link gateImpliedPhaseFrom}. */
 export function gateImpliedPhase(featureName, projectPath) {
-  return gateImpliedPhaseFrom(getFeature(featureName, projectPath));
+  const designDir = join(projectPath || process.cwd(), '.morph/features', featureName, DESIGN_DIR);
+  return gateImpliedPhaseFrom(getFeature(featureName, projectPath), existsSync(designDir));
 }
 
 export function derivePhaseForFeature(featureName, projectPath) {
   const basePath = join(projectPath || process.cwd(), '.morph/features', featureName);
-  return derivePhaseFrom(
-    getFeature(featureName, projectPath),
-    (rel) => existsSync(join(basePath, rel)),
-  );
+  return derivePhaseFrom(getFeature(featureName, projectPath), diskArtifactProbe(basePath));
 }
 
 /**
@@ -342,7 +353,7 @@ export function getFeaturePhase(featureName, projectPath) {
 /**
  * Get approval status for a gate.
  * @param {string} featureName
- * @param {string} gate - 'proposal'|'uiux'|'plan'|'review'
+ * @param {string} gate - 'plan'|'uiux'|'review'
  * @param {string} [projectPath]
  * @returns {boolean}
  */
@@ -384,43 +395,6 @@ export function getOutputs(featureName, projectPath) {
   return feature?.outputs || null;
 }
 
-/**
- * Get uncompleted required outputs for current phase.
- * @param {string} featureName
- * @param {string} [projectPath]
- * @returns {Array<{type: string, path: string}>}
- */
-/**
- * Get task statistics directly from taskList (preferred over feature.tasks counters).
- * Excludes expanded tasks from counts, matching calculateProgress() behavior.
- *
- * @param {Object} feature - Feature state object
- * @returns {{ total: number, completed: number, inProgress: number, pending: number }}
- */
-export function getTaskStats(feature) {
-  const list = feature?.taskList || [];
-  if (list.length > 0) {
-    const active = list.filter(t => t.status !== 'expanded');
-    return {
-      total: active.length,
-      completed: active.filter(t => t.status === 'completed').length,
-      inProgress: active.filter(t => t.status === 'in_progress').length,
-      pending: active.filter(t => t.status === 'pending').length,
-    };
-  }
-  // Fallback: read from legacy counter object
-  const tasks = feature?.tasks;
-  if (tasks && typeof tasks === 'object' && !Array.isArray(tasks)) {
-    return {
-      total: tasks.total || 0,
-      completed: tasks.completed || 0,
-      inProgress: tasks.inProgress || 0,
-      pending: tasks.pending || 0,
-    };
-  }
-  return { total: 0, completed: 0, inProgress: 0, pending: 0 };
-}
-
 export function getMissingOutputs(featureName, projectPath) {
   const feature = getFeature(featureName, projectPath);
   if (!feature?.outputs) return [];

package/framework/hooks/shared/state-writer.js

@@ -101,7 +101,7 @@ export function persistFeature(featureName, feature, projectPath) {
  * canonical shape — onto the feature and persists it. Returns true on success.
  *
  * @param {string} featureName
- * @param {string} gate - 'proposal'|'uiux'|'plan'|'review'
+ * @param {string} gate - 'plan'|'uiux'|'review'
  * @param {{ approvedBy?: string, timestamp?: string }} [meta]
  * @param {string} [projectPath]
  */
@@ -142,9 +142,8 @@ export function createDefaultFeature(featureName) {
     createdAt: now,
     updatedAt: now,
     approvalGates: {
-      proposal: { approved: false, timestamp: null, approvedBy: null },
-      uiux: { approved: false, timestamp: null, approvedBy: null },
       plan: { approved: false, timestamp: null, approvedBy: null },
+      uiux: { approved: false, timestamp: null, approvedBy: null },
       review: { approved: false, timestamp: null, approvedBy: null },
     },
     outputs: {},

package/framework/mcp/registry.json

@@ -3,7 +3,7 @@
   "description": "Centralized MCP registry with phase relevance and install configuration for morph-spec workflows",
   "mcps": {
     "context7": {
-      "phases": ["proposal", "plan", "implement"],
+      "phases": ["plan", "implement"],
       "tools": ["resolve-library-id", "query-docs"],
       "serverNames": ["context7", "plugin_context7_context7"],
       "detection": "enabledPlugins includes context7 or mcpServers includes context7",
@@ -216,7 +216,7 @@
       }
     },
     "graphify": {
-      "phases": ["proposal", "plan", "implement", "review"],
+      "phases": ["plan", "implement", "review"],
       "tools": ["query_graph", "get_node", "get_neighbors", "get_community", "god_nodes", "graph_stats", "shortest_path", "list_prs", "get_pr_impact", "triage_prs"],
       "detection": "graphify-out/graph.json exists in the project root (written by morph-spec graph build, or by the graphify post-commit hook)",
       "fallback": "Comportamento atual: Grep/Glob/Read. O grafo é um subconjunto estrito do grep — no eval não encontrou um único arquivo que o grep perderia — então cair para grep não perde recall, só devolve mais ruído",
@@ -281,9 +281,8 @@
   },
   "_phaseMatrixNote": "Keys must be the v5 phases from framework/phases.json. The v4 keys 'design' and 'tasks' both collapsed into 'plan'; 'review' was absent entirely, so a project in review resolved to undefined. Stack-scoped MCPs (asaas, neon) stay out of this matrix on purpose — only universal ones are listed.",
   "phaseMatrix": {
-    "proposal": ["context7", "graphify"],
-    "uiux": ["playwright", "context7", "stitch", "morph-assets"],
     "plan": ["context7", "graphify"],
+    "uiux": ["playwright", "context7", "stitch", "morph-assets"],
     "implement": ["context7", "playwright", "vercel", "morph-assets", "graphify"],
     "review": ["playwright", "context7", "graphify"]
   }

package/framework/phases.json

@@ -1,22 +1,22 @@
 {
   "version": "5.0.0",
   "phases": {
-    "proposal": {
-      "id": "proposal",
+    "plan": {
+      "id": "plan",
       "index": 0,
-      "folder": "0-proposal",
-      "displayName": "Proposal",
+      "folder": "2-plan",
+      "displayName": "Plan",
       "goals": [
-        "Understand the business problem and user flows",
-        "Detect existing stack (brownfield) or assume default stack (greenfield)",
-        "Produce proposal.md and reach Gate 1"
+        "Understand the business problem and scan the stack (brownfield) or assume the default (greenfield)",
+        "Write plan.md — scenarios with proof, decisions, reuse and slices",
+        "Run plan-check to produce checks.json and reach the plan gate"
       ],
-      "requiredOutputs": ["proposal"],
-      "optionalOutputs": ["stackScan"],
+      "requiredOutputs": ["plan", "checks"],
+      "optionalOutputs": [],
       "pausePoints": [
-        { "id": "proposal", "label": "Gate 1 — Approve proposal" }
+        { "id": "plan", "label": "Gate do plano — Approve plan.md + checks.json" }
       ],
-      "skill": "morph-brainstorming"
+      "skill": "morph-plan"
     },
     "uiux": {
       "id": "uiux",
@@ -35,50 +35,34 @@
       ],
       "skill": "morph-uiux"
     },
-    "plan": {
-      "id": "plan",
-      "index": 2,
-      "folder": "2-plan",
-      "displayName": "Plan",
-      "goals": [
-        "Write spec.md (technical spec)",
-        "Write tasks.json (ordered task breakdown)"
-      ],
-      "requiredOutputs": ["spec", "tasks"],
-      "optionalOutputs": ["decisions"],
-      "pausePoints": [
-        { "id": "plan", "label": "Gate 2 — Approve spec + tasks" }
-      ],
-      "skill": "morph-plan"
-    },
     "implement": {
       "id": "implement",
-      "index": 3,
+      "index": 2,
       "folder": "3-implement",
       "displayName": "Implementation",
       "goals": [
-        "Execute tasks in order with auto-advance between tasks",
-        "Advance a task only on verify green and its doneCriteria met",
-        "Maintain recap.md and execution trace"
+        "Execute the slices of plan.md, in parallel waves when plan-check allows",
+        "Close a slice only on verify green and its scenarios proven",
+        "One report per slice (3-implement/reports/F{n}.md, with **Arquivos:** and **Standards:**) — the implementation record"
       ],
-      "requiredOutputs": ["recap"],
+      "requiredOutputs": [],
       "optionalOutputs": ["evidencias"],
       "pausePoints": [],
-      "skill": "morph-implement"
+      "skill": "morph-apply"
     },
     "review": {
       "id": "review",
-      "index": 4,
+      "index": 3,
       "folder": "4-review",
       "displayName": "Review",
       "goals": [
-        "Independent evaluator verdict (SHIP/FIX) with evidence-typed blockers",
-        "Produce review-report.md and present Gate 3"
+        "Verifier proves every scenario; reviewer (and security, when required) judge the diff at a fixed SHA",
+        "verifier.md + reviewer.md (+ security.md) with SHIP/FIX and evidence-typed blockers, then Gate 3"
       ],
-      "requiredOutputs": ["reviewReport"],
-      "optionalOutputs": [],
+      "requiredOutputs": ["verifierReport", "reviewerReport"],
+      "optionalOutputs": ["securityReport"],
       "pausePoints": [
-        { "id": "review", "label": "Gate 3 — Approve review-report" }
+        { "id": "review", "label": "Gate 3 — Approve the review reports" }
       ],
       "skill": "morph-review"
     }

package/framework/schemas/config.schema.json

@@ -9,6 +9,18 @@
       "type": "object",
       "additionalProperties": true,
       "properties": {
+        "stack": {
+          "type": "string",
+          "description": "Stack tags joined by `+` (e.g. `dotnet+nextjs`). Decides the build node's commands, which assets install, and that bin/ and obj/ go into .gitignore."
+        },
+        "frontendPath": {
+          "type": "string",
+          "description": "Folder of the frontend, relative to the project root: where the build node runs `tsc`. Absent: the root."
+        },
+        "backendPath": {
+          "type": "string",
+          "description": "Folder of the .NET solution, relative to the project root: where the build node runs `dotnet build`. Absent: the root, or the repository's single .sln/.slnx (else single .csproj) when the root has none."
+        },
         "ci": {
           "type": "boolean",
           "description": "false turns `verify {f} --ci` into the local verify (with the reason printed). Absent or true: the Gate 3 proof comes from the GitHub Actions workflow that runs `morph-spec verify` (created on first use), whenever origin is GitHub and gh is authenticated."
@@ -60,20 +72,13 @@
               "e2e": {
                 "type": "boolean",
                 "default": false,
-                "description": "Requires the application stack to be up. Runs at feature scope only, never in the per-task loop."
+                "description": "Requires the application stack to be up."
               },
               "linuxImage": {
                 "type": "string",
                 "minLength": 1,
                 "description": "Overrides the container image used by `verify --linux` for this node."
               },
-              "groups": {
-                "type": "array",
-                "minItems": 1,
-                "uniqueItems": true,
-                "items": { "type": "string", "enum": ["backend", "frontend", "tests", "infra", "docs"] },
-                "description": "Which task group(s) (tasks.json `group`) this node verifies. Absent means the runner's own default applies (RUNNER_DEFAULT_GROUPS in src/lib/tasks/test-nodes.js) — `none`/`evals` have no default and are unscoped unless declared here."
-              },
               "evals": {
                 "type": "object",
                 "additionalProperties": false,
@@ -191,7 +196,7 @@
         "shutdownBuildServer": {
           "type": "boolean",
           "default": true,
-          "description": "Run `dotnet build-server shutdown` at the end of a feature-scope `verify` and of `e2e down`, only when no slot is held and no dotnet build/test is alive. Never at the end of a task-scope verify: every task would pay a cold compiler."
+          "description": "Run `dotnet build-server shutdown` at the end of a `verify` and of `e2e down`, only when no slot is held and no dotnet build/test is alive."
         },
         "disableNodeReuse": {
           "type": "boolean",

package/framework/schemas/feature.schema.json

@@ -38,17 +38,16 @@
       "type": "object",
       "description": "One entry per gate. Written ONLY by `morph-spec approve`/`advance` (approvedBy: \"auto\") or the state-sync hook on a human \"aprovado\" answer (approvedBy: \"manual\").",
       "properties": {
-        "proposal": { "$ref": "#/definitions/gate" },
-        "uiux": { "$ref": "#/definitions/gate" },
         "plan": { "$ref": "#/definitions/gate" },
+        "uiux": { "$ref": "#/definitions/gate" },
         "review": { "$ref": "#/definitions/gate" }
       },
       "additionalProperties": false
     },
     "gateDecisions": {
       "type": "object",
-      "description": "Trust decision persisted BEFORE acting on a gate, written ONLY by `morph-spec gate-decision` (decidedAt is server-side). Read by the gate-guard hook to verify the observed action matched the recorded decision.",
-      "propertyNames": { "enum": ["proposal", "uiux", "plan", "review"] },
+      "description": "Trust decision persisted BEFORE acting on a gate, written ONLY by `morph-spec gate-decision` and `morph-spec gate-check` (decidedAt is server-side). Read by the gate-guard hook to verify the observed action matched the recorded decision.",
+      "propertyNames": { "enum": ["plan", "uiux", "review"] },
       "additionalProperties": {
         "type": "object",
         "required": ["pause", "reason", "signals", "trust", "decidedAt"],
@@ -57,48 +56,26 @@
           "reason": { "type": "string", "description": "The signal that drove the decision (or 'nenhum sinal de risco')." },
           "signals": {
             "type": "object",
-            "description": "Risk signals evaluated (free-form): taskCount, evaluatorVerdict, standardsViolations, designSystemDivergence..."
+            "description": "Risk signals evaluated (free-form): sliceCount, planChecks, reviewReports, standardsViolations, designSystemDivergence..."
           },
           "trust": { "type": "string", "enum": ["auto", "manual"] },
           "decidedAt": { "type": "string", "format": "date-time" },
           "mockupsHash": {
             "type": ["string", "null"],
             "description": "uiux only: hash of the 1-design/mockups.md the decision saw (null = no mockup). A pause:false unlocks the auto signature only while the mockup is still this one."
-          }
-        },
-        "additionalProperties": false
-      }
-    },
-    "taskVerifications": {
-      "type": "object",
-      "description": "Deterministic verify results per task, written ONLY by `morph-spec verify` (task scope). updatedAt is server-side; attempts auto-increment. Persisted only from the primary root or the feature's own registered worktree — see verify.js decidePersistence().",
-      "propertyNames": { "pattern": "^T\\d+$" },
-      "additionalProperties": {
-        "type": "object",
-        "required": ["status", "nodes", "attempts", "updatedAt"],
-        "properties": {
-          "status": { "type": "string", "enum": ["pass", "fail"] },
-          "nodes": {
-            "type": "object",
-            "required": ["build", "tests", "validators"],
-            "properties": {
-              "build": { "type": "string", "enum": ["pass", "fail", "skip"] },
-              "tests": { "type": "string", "enum": ["pass", "fail", "skip"] },
-              "validators": { "type": "string", "enum": ["pass", "fail", "skip"] },
-              "e2e": { "type": "string", "enum": ["pass", "fail", "skip"], "description": "Docker bring-up + Playwright specs against the running stack. Absent on entries written before the node existed — which is why it is NOT in `required`." },
-              "evals": { "type": ["string", "null"], "enum": ["pass", "fail", "skip", null], "description": "Eval suites, pulled out of the tests rollup. Written by the SAME function that writes the singular stamp (nodeStatuses in verify.js): the two shapes must stay identical, or a stamp would omit what the history records. null means the project declares no eval node at all — distinct from skip, which means it declares one and this run did not execute it. Absent on entries written before the field existed, which is why it is NOT in required." }
-            },
-            "additionalProperties": false
           },
-          "attempts": { "type": "integer", "minimum": 1 },
-          "updatedAt": { "type": "string", "format": "date-time" }
+          "source": {
+            "type": "string",
+            "enum": ["manual", "gate-check"],
+            "description": "Which command decided: `gate-decision` writes manual, `gate-check` writes gate-check. A manual pause:true is sticky: `gate-check` keeps it paused (manual reason, fresh signals); only a new `gate-decision --pause false` clears it."
+          }
         },
         "additionalProperties": false
       }
     },
     "verifications": {
       "type": "object",
-      "description": "Deterministic verify results at feature scope, written ONLY by `morph-spec verify` (feature scope, no task id).",
+      "description": "Deterministic verify results at feature scope, written ONLY by `morph-spec verify`.",
       "properties": {
         "feature": {
           "type": "object",
@@ -127,8 +104,8 @@
     },
     "verification": {
       "type": "object",
-      "description": "The single latest deterministic verify stamp (any scope), written ONLY by `morph-spec verify`. Distinct from `verifications`/`taskVerifications` above (per-scope history with attempts/nodes): this is overwritten by every verify call regardless of scope, carrying just enough to correlate a pass/fail with the exact commit it covers. Primary consumer: `morph-spec gate-check`, which feeds `status` to shouldPauseGate as `verificationStatus` — a red verify pauses the gate (risk-detector.js) — and `nodes.e2e`/`e2eReason` as `e2eStatus`/`e2eReason`, the pair that decides whether an e2e SKIP is a recorded dispensation or an absence of proof (a skip never reddens `status`, so the rollup alone is blind to it). `scope` is the third pause input: a dispensation only counts from a feature-scoped stamp (see the field below). The rest (sha/ts, and the derived `verificationStale`) is audit context.",
-      "required": ["status", "sha", "ts", "scope"],
+      "description": "The single latest deterministic verify stamp, written ONLY by `morph-spec verify`. Distinct from `verifications` above (history with attempts/nodes): this is overwritten by every persisted verify, carrying just enough to correlate a pass/fail with the exact commit it covers. Primary consumer: `morph-spec gate-check`, which feeds `status` to shouldPauseGate as `verificationStatus` — a red verify pauses the gate (risk-detector.js) — and `nodes.e2e`/`e2eReason` as `e2eStatus`/`e2eReason`, the pair that decides whether an e2e SKIP is a recorded dispensation or an absence of proof (a skip never reddens `status`, so the rollup alone is blind to it). The rest (sha/ts, and the derived `verificationStale`) is audit context.",
+      "required": ["status", "sha", "ts"],
       "properties": {
         "status": { "type": "string", "enum": ["pass", "fail"] },
         "nodes": {
@@ -142,31 +119,19 @@
             "evals": {
               "type": ["string", "null"],
               "enum": ["pass", "fail", "skip", null],
-              "description": "Status of the `runner: \"evals\"` entries of nodes.tests.runs[], pulled out of the rollup. The rollup cannot answer what Gate 3 asks: a red eval and a red unit test both read as tests:fail, and an eval SKIPPED at task scope leaves the rollup green. null means this project declares NO eval node - distinct from 'skip', which means it declares one and this run did not execute it; risk-detector.js pauses on the two for different reasons because they call for different actions. Absent on stamps written before this field existed."
+              "description": "Status of the `runner: \"evals\"` entries of nodes.tests.runs[], pulled out of the rollup. The rollup cannot answer what Gate 3 asks: a red eval and a red unit test both read as tests:fail. null means this project declares NO eval node - distinct from 'skip', which means it declares one and this run did not execute it; risk-detector.js pauses on the two for different reasons because they call for different actions. Absent on stamps written before this field existed."
             }
           },
           "additionalProperties": false
         },
         "e2eReason": { "type": ["string", "null"], "description": "The LITERAL reason the e2e node skipped (e2e-check.js's own wording), or null when it did not skip. risk-detector.js's classifyE2eSkip() reads it: 'project does not containerize' / 'does not touch runtime' are legitimate dispensations and pass; 'docker is not available' / 'requested' (--skip-e2e) / anything unclassifiable — null included — are an absence of proof and pause Gate 3. A skip recorded WITHOUT a reason is refused on purpose: a nameless dispensation is a silent no-op." },
         "sha": { "type": ["string", "null"], "description": "HEAD commit SHA at verify time (git rev-parse HEAD); null when not in a git repo or no commits yet." },
-        "ts": { "type": "string", "format": "date-time", "description": "Server-side timestamp, same instant as the corresponding verifications/taskVerifications entry's updatedAt." },
-        "scope": { "type": "string", "description": "'feature', or 'task:<id>' for a task-scoped verify. READ BY THE GATE, not just audit: this stamp is singular and any verify overwrites it, so a 'task:<id>' value at ship time means the last verify was NOT the feature's. risk-detector.js therefore accepts an e2e dispensation ('project'/'scope' in e2eReason) only from scope === 'feature' — a `morph-spec verify {f} {task}` of a task whose group does not touch runtime stamps exactly the legitimate-sounding reason that would otherwise buy Gate 3 for the whole feature (the last task of a feature is typically group: docs). Absent/unknown falls on the safe side, like an unclassifiable reason." },
+        "ts": { "type": "string", "format": "date-time", "description": "Server-side timestamp, same instant as the corresponding verifications entry's updatedAt." },
         "source": { "type": "string", "enum": ["ci"], "description": "Present only when the stamp came from `verify --ci`: the verify --json the project CI uploaded for the pushed commit, judged by the same rules as a local run. Absent = local run." },
         "ciRun": { "type": "string", "description": "URL of the CI run whose artifact wrote this stamp (with source: ci). `sha` is that run's headSha, so verificationStale compares the code CI saw with HEAD." }
       },
       "additionalProperties": false
     },
-    "tasks": {
-      "type": "object",
-      "description": "Aggregate task counters (informational — the source of truth is 2-plan/tasks.json).",
-      "properties": {
-        "total": { "type": "integer", "minimum": 0 },
-        "completed": { "type": "integer", "minimum": 0 },
-        "inProgress": { "type": "integer", "minimum": 0 },
-        "pending": { "type": "integer", "minimum": 0 }
-      },
-      "additionalProperties": true
-    },
     "outputs": {
       "type": "object",
       "description": "Outputs tracked by the state-sync hook: filename → { created, path }.",
@@ -234,7 +199,7 @@
         "approved": { "type": "boolean" },
         "timestamp": { "type": ["string", "null"], "description": "ISO timestamp of the approval/revocation, null while never evaluated." },
         "approvedBy": { "type": ["string", "null"], "description": "\"auto\" (approve/advance --mode auto), \"manual\" (human in the loop), \"policy:{workType}\" (gate stamped at birth by `morph-spec create` per the work type's skippedGates — see src/core/work-types.js; the gate-guard hook only special-cases \"auto\", so policy-stamped gates stay silent to it), a --approver name, or null while never evaluated." },
-        "selfAssessed": { "type": "boolean", "description": "Gate `review` SOMENTE. `true` quando o Gate 3 foi aprovado sem `4-review/evaluator-report.md`, via `morph-spec approve <f> review --self-assessed`. O veredito deveria vir do avaliador independente; esta flag registra a degradação em vez de deixá-la silenciosa, e aparece no `morph-spec list`." }
+        "selfAssessed": { "type": "boolean", "description": "Gate `review` SOMENTE. `true` quando o Gate 3 foi aprovado sem os relatórios de review exigidos (`4-review/verifier.md`, `reviewer.md`, `security.md`), via `morph-spec approve <f> review --self-assessed` ou um \"aprovado\" humano sem eles. O veredito deveria vir dos agentes independentes; esta flag registra a degradação em vez de deixá-la silenciosa, e aparece no `morph-spec list`." }
       },
       "additionalProperties": true
     }

package/framework/skills/README.md

@@ -12,10 +12,9 @@ These are the only skills the harness needs. MORPH.md references them by path.
 
 | Skill                | Purpose                                                              | User-invocable |
 |----------------------|----------------------------------------------------------------------|----------------|
-| `morph-brainstorming` | Business understanding + brownfield scan → proposal.md (Gate 1)     | yes            |
-| `morph-stack-scan`    | Detect stack drift in existing projects, report in stack-scan.md     | yes            |
-| `morph-plan`          | Produce use cases + spec.md + tasks.json (Gate 2)                   | yes            |
-| `morph-implement`     | Execute each task with standard + persona, auto-advance between tasks| no             |
+| `morph-plan`          | Route, scan, interview, write plan.md, plan-check and the plan gate  | yes            |
+| `morph-uiux`          | Optional design branch after the plan gate (mockups + screen checklist) | yes          |
+| `morph-apply`         | Run the plan slices (dispatch, report-check, verify) into the review | yes            |
 | `morph-review`        | Final review report with SHIP/FIX verdict (Gate 3)                   | yes            |
 | `morph-standards`     | Locate and load a specific standard on demand                        | no             |
 

package/framework/skills/core/create-umbraco-lp/SKILL.md

@@ -4,7 +4,7 @@ description: Guia a criação de uma landing page nova ponta-a-ponta a partir do
 version: core
 when_to_use: Use quando for iniciar um novo projeto de LP com o template Umbraco genérico
 user-invocable: true
-cliVersion: "8.47.0"
+cliVersion: "9.0.0"
 stacks:
   - umbraco
 ---

package/framework/skills/core/migrate-lp-to-umbraco/SKILL.md

@@ -4,7 +4,7 @@ description: Migra uma landing page existente (React/Vite, Next.js estático ou
 version: core
 when_to_use: Use quando o usuário pedir "use /migrate-lp-to-umbraco {projeto}" ou descrever a necessidade de migrar uma LP para Umbraco
 user-invocable: true
-cliVersion: "8.47.0"
+cliVersion: "9.0.0"
 stacks:
   - umbraco
 ---