@polymorphism-tech/morph-spec 8.47.0 → 9.0.0

package/src/lib/worktree/fleet-scanner.js

@@ -6,7 +6,7 @@
  * operator loses track of "what is each session doing, what is waiting on me".
  * This scanner answers that from the primary root's vantage point: one entry
  * per active feature, worktree or root-resident, with the operational facts
- * (phase, pending gates, task counts, port block, handoff freshness, last
+ * (phase, pending gates, slice counts, port block, handoff freshness, last
  * commit, dirtiness) resolved per entry.
  *
  * Read-only and fail-open per FIELD: a corrupt feature.json or a git hiccup
@@ -24,52 +24,39 @@ import {
   getFeature,
   derivePhaseForFeature,
   derivePhaseFrom,
+  fileSetArtifactProbe,
   getPendingGates,
   pendingGatesFrom,
 } from '../../../framework/hooks/shared/state-reader.js';
 import { listClaims } from '../../../framework/hooks/shared/claim-registry.js';
 import { buildPrIndex } from '../git/pr-index.js';
 import { pendingPrFeatures } from '../git/pending-prs.js';
+import { sliceProgress, sliceProgressFrom } from '../../../framework/hooks/shared/slice-progress.js';
 
-function countFrom(raw) {
-  const data = JSON.parse(raw);
-  if (!Array.isArray(data.tasks)) return null;
-  return { done: data.tasks.filter((t) => t.status === 'done').length, total: data.tasks.length };
-}
+const counts = (progress) => (progress ? { done: progress.done, total: progress.total } : null);
 
 /**
- * Task progress for one feature.
- *
- * DIVERGENCE from the bug report, which blamed "a cached state.json/feature.json
- * snapshot": this never read either — it always read `2-plan/tasks.json`
- * directly. The real mechanism is which COPY of that file is on disk. Since
- * v8.4 every feature is born on `morph/{f}` and its tasks.json is COMMITTED
- * there; the primary root's working tree only ever holds the copy of the
- * CHECKED-OUT branch. An operator sitting on the default therefore read the
- * pre-work copy — the reported `2/2` for a feature whose branch already had
- * T1..T3 all done.
+ * Slice progress for one feature, read from the copy that holds the work: a
+ * root-resident feature's plan checks and reports are committed on its own
+ * `morph/{f}` branch, while the root working tree only holds the checked-out
+ * branch's (pre-work) copy.
  *
  * @param {string} featureDir - the feature dir inside `path`
  * @param {{ root: string, feature: string, featureBranch: string|null }} ctx
  */
-function taskCounts(featureDir, { root, feature, featureBranch } = {}) {
+function sliceCounts(featureDir, { root, feature, featureBranch } = {}) {
   if (featureBranch && root && feature) {
-    try {
-      const raw = execFileSync(
-        'git',
-        ['show', `${featureBranch}:.morph/features/${feature}/2-plan/tasks.json`],
-        { cwd: root, stdio: 'pipe' },
-      ).toString();
-      const counted = countFrom(raw);
-      if (counted) return counted;
-    } catch { /* no such branch/blob — fall through to the working tree */ }
-  }
-
-  try {
-    return countFrom(readFileSync(join(featureDir, '2-plan', 'tasks.json'), 'utf8'));
-  } catch {
-    return null;
+    const show = (rel) => {
+      try {
+        return execFileSync('git', ['show', `${featureBranch}:.morph/features/${feature}/${rel}`], { cwd: root, stdio: 'pipe' }).toString();
+      } catch {
+        return null;
+      }
+    };
+    const onBranch = sliceProgressFrom(show('2-plan/checks.json'), (id) => show(`3-implement/reports/${id}.md`));
+    if (onBranch) return counts(onBranch);
   }
+  return counts(sliceProgress(featureDir));
 }
 
 function handoffInfo(featureDir) {
@@ -164,15 +151,15 @@ function buildRemote(feature, branch, heads, prs) {
 function buildEntry(feature, { location, path, branch, root, allocations, blockSize, heads, prs, claims }) {
   let workType = null;
   let status = 'unknown';
-  let phase = 'proposal';
+  let phase = 'plan';
   let pendingGates = [];
 
-  // Resolved once and shared with taskCounts — see branchToReadFrom.
+  // Resolved once and shared with sliceCounts — see branchToReadFrom.
   const featureBranch = branchToReadFrom(root, feature, location, branch);
 
   try {
     // B3b: phase and gates suffered the same branch-staleness B3 fixed for
-    // tasks. They read `.morph/features/{f}/` through the working tree, so a
+    // progress. They read `.morph/features/{f}/` through the working tree, so a
     // root parked on the default reported the PRE-WORK phase for a feature
     // whose branch was already at implement — and re-asked for a gate the
     // feature branch had already approved.
@@ -180,7 +167,7 @@ function buildEntry(feature, { location, path, branch, root, allocations, blockS
     if (view) {
       workType = view.fj?.workType || null;
       status = view.fj?.status || 'unknown';
-      phase = derivePhaseFrom(view.fj, (rel) => view.files.has(rel));
+      phase = derivePhaseFrom(view.fj, fileSetArtifactProbe(view.files));
       pendingGates = pendingGatesFrom(view.fj);
     } else {
       const fj = getFeature(feature, path);
@@ -202,7 +189,7 @@ function buildEntry(feature, { location, path, branch, root, allocations, blockS
     location,
     path,
     branch,
-    tasks: taskCounts(featureDir, { root, feature, featureBranch }),
+    slices: sliceCounts(featureDir, { root, feature, featureBranch }),
     env: alloc && Number.isInteger(alloc.base)
       ? { base: alloc.base, range: [alloc.base, alloc.base + blockSize - 1] }
       : null,
@@ -316,7 +303,7 @@ export function scanFleet(cwd = process.cwd()) {
         location: 'pr-pending',
         path: null,
         branch: p.branch,
-        tasks: null,
+        slices: null,
         env: null,
         handoff: { exists: false, generatedAt: null },
         lastCommit: null,

package/src/scripts/setup-infra.js

@@ -32,6 +32,7 @@ import { installClaudeHooks, installGlobalStatusline } from '../utils/claude-set
 import { installSkills } from '../utils/skills-installer.js';
 import { installAgents, installDomainAgents } from '../utils/agents-installer.js';
 import { resolvePrimaryRoot } from '../commands/project/worktree.js';
+import { findOldFormatFeatures, oldFormatGuardLines } from '../lib/specs/old-format.js';
 import { reconcileLegacyTemplatesCopy } from '../lib/installers/templates-reconcile.js';
 import { realEffects } from '../lib/installers/effects.js';
 
@@ -241,6 +242,14 @@ export async function setupInfra(targetPath, {
     }
   }
 
+  // Same refusal as `update`, and neither `force` nor `reinstall` waives it:
+  // `init --force` and `setup-infra` overwrite `.morph/` without passing through it.
+  const oldFormat = findOldFormatFeatures(targetPath);
+  if (oldFormat.length) {
+    for (const line of oldFormatGuardLines(oldFormat, targetPath)) log(line);
+    return { refused: true, reason: 'old-format-features', features: oldFormat };
+  }
+
   // --- Reinstall mode: only re-install stack-aware assets ---
   if (reinstall) {
     log('setup-infra (reinstall): re-installing stack-aware assets...');

package/src/utils/agents-installer.js

@@ -15,7 +15,7 @@
  *
  * In v5 the harness has 8 personas (no tiers) across two axes — domain
  * (dotnet-senior, ef-modeler, maf-expert, nextjs-expert, ui-designer,
- * infra-engineer, evaluator) and stage (scout, read-only diagnosis before
+ * infra-engineer, verifier, reviewer, security) and stage (scout, read-only diagnosis before
  * implementation). Each persona is a subagent the Specialist (Claude in
  * implementer role) can dispatch. The 3 roles (Orchestrator/Specialist/
  * Evaluator) are assumed by Claude itself per MORPH.md, not as separate agents.
@@ -294,7 +294,7 @@ export function loadKnownMcpIds(frameworkDir) {
  * with NO known stack tags (greenfield / install before config.json exists)
  * EVERY persona is generated — a project that dispatches `morph-{id}` must
  * find the subagent registered, and an install that only lands
- * morph-evaluator forces every domain dispatch into the general-purpose
+ * morph-verifier forces every domain dispatch into the general-purpose
  * fallback. Stack filtering only applies when the project's stack is KNOWN
  * (tags non-empty): the fallback stays reserved for stacks the project
  * genuinely does not have. Note this deliberately differs from rules/skills
@@ -431,7 +431,7 @@ function buildFrontmatter(agent, description, knownMcpIds, maxTurns) {
     // Canonical 1:1 naming: frontmatter name === filename === subagent_type.
     `name: morph-${agent.id}`,
     `description: ${description}`,
-    // The evaluator is sonnet here; the dispatch routes it to opus when the risk
+    // The verifier is sonnet here; the dispatch routes it to opus when the risk
     // detector flags the diff. A persona without the field inherits the session model.
     `model: ${agent.model ?? 'inherit'}`,
     `tools: ${buildToolsLine(agent, knownMcpIds)}`,
@@ -453,6 +453,63 @@ function buildDescription(agent) {
   return desc.length > 200 ? desc.slice(0, 197) + '...' : desc;
 }
 
+/**
+ * The fixed half of every implementer dispatch. The orchestrator paraphrases
+ * a prompt template in the field; the generated body is the only text a
+ * dispatch is guaranteed to carry, so the contract lives here and the
+ * dispatch carries only what changes per slice.
+ */
+const NEON_CAUTION = 'NEON: o MCP `neon` inspeciona schema e ensaia migração numa branch descartável ' +
+  '(prepare_database_migration → complete_database_migration); ele também APAGA branch e projeto — ' +
+  'nunca chame tool destrutiva sem confirmação humana explícita.';
+
+const STANDARDS_HINT = 'Digest de cada um: `morph-spec standards --find <id>`; só a seção que importa: ' +
+  '`morph-spec standards --show <id>#<âncora>` (`--show <id>` lista as âncoras).';
+
+export const DISPATCH_CONTRACT = [
+  '## Contrato de dispatch',
+  '',
+  'O dispatch traz só o que muda por fatia: id e título, `cobre` com o texto de cada cenário, `arquivos`, `standards`, ' +
+    'o caminho do relatório e, se houver, o worktree. O resto é este contrato.',
+  '',
+  '1. RELATÓRIO: GRAVE o arquivo de relatório que o dispatch nomeia (`.morph/features/{feature}/3-implement/reports/F{n}.md`) ' +
+    'ANTES de encerrar — é o retorno autoritativo, não a sua mensagem final. `SendMessage` não é substituto do relatório e não deve ser chamado.',
+  '2. ESTADO: NÃO toque em `plan.md`, `checks.json`, `feature.json`, `state.json` nem no board de sessão — todo estado é gravado exclusivamente pelo orquestrador.',
+  '3. TESTE: a prova é do orquestrador (`morph-spec verify {feature}`, depois do seu retorno), não sua. Escreva os testes pelo orçamento: ' +
+    'um por pós-condição, um de regressão por bug, variantes numa tabela (`[Theory]`/`it.each`). NÃO rode teste a cada marco nem faça ciclo red→green: ' +
+    'escreva código e testes, compile, e rode SÓ o filtro dos seus testes UMA vez, em primeiro plano, antes do relatório; se falhar, corrija e rode só os que falharam. ' +
+    'Grave a saída em arquivo (`… > .morph/logs/test-last.log 2>&1`, sem nada depois) e leia o arquivo — um pipe troca o exit do teste pelo do último comando. ' +
+    'Em batch paralelo SEM isolamento, só compile. Com `isolation: "worktree"`, o mesmo vale no seu worktree, e o último ato é o commit na branch dele.',
+  '4. ESCOPO: uma fatia, ~4 arquivos (nunca mais de 8). Escopo maior falha e volta — fatie antes, não depois.',
+  '5. SOBREVIVÊNCIA: o limite de turnos corta sem aviso: commite `wip(F{n})` a cada marco (um arquivo ou uma fatia coerente escrita), não só ao fim — ' +
+    'e só os seus arquivos (`git add <paths>`, nunca `-A` nem diretório). Sem commit, a retomada recomeça do zero.',
+  '6. PROCESSOS: NUNCA `taskkill /IM node.exe` (derruba os MCPs de todas as sessões). Encerre dev server pelo PID que você mesmo subiu. ' +
+    'Build e suíte pesados rodam por `morph-spec heavy run -- <comando>`, em primeiro plano. Exit 3 é fila cheia depois da espera da própria fila: ' +
+    'não repita nem espere em laço — diga no relatório o que não rodou.',
+  '7. REUSO: antes de criar tipo, componente, hook ou serviço NOVO, verifique se já existe: `morph-spec graph explain <nome>` e ' +
+    '`graph affected <conceito> --uses-only`; sem grafo (`no-graph`), caia para `grep -rn "<nome>"` e siga — a ausência de grafo nunca bloqueia. ' +
+    'Se criar mesmo assim, diga por que em uma linha no relatório.',
+  '8. MUTAÇÃO: nunca altere, reverta, mova ou apague código de produção para ver um teste falhar (`sed`, `mv`, `git show HEAD:… >`, `git stash`, ' +
+    '`git checkout --`). A prova de que o teste morde é do verificador (Gate 3).',
+  '9. ESCRITA: código e teste do projeto só por Write/Edit, nunca pelo Bash — heredoc, redirecionamento, `sed -i` ou script python/node que grava (`cat > X.cs <<EOF`, `sed -i … X.cs`): ' +
+    'os guards de escrita só enxergam Write/Edit.',
+  '',
+  'Formato do relatório (o `report-check` lê estas marcas):',
+  '',
+  '```',
+  '# F1 — <título>',
+  'O que foi feito, em 2-3 frases: o comportamento entregue e onde ele mora, sem repetir a lista de arquivos.',
+  '**Arquivos:** `src/a.cs`, `src/a.test.cs`',
+  '**Checks:**',
+  '- C1 — provado: `a.test.cs` › nome do teste (ou `arquivo:linha`)',
+  '- C2 — não provado: por quê',
+  '```',
+  '',
+  '`**Arquivos:**` lista TODO arquivo criado ou modificado, inclusive artefato auxiliar fora do plano (factory, seed, config gerada): ' +
+    'arquivo em produção sem dono é falha de protocolo que o Gate 3 aponta. Todo cenário que a fatia `cobre` aparece em `**Checks:**`. ' +
+    'Problemas e como foram resolvidos vão em prosa depois.',
+];
+
 function buildBody(agent, maxTurns) {
   const lines = [
     `# ${agent.title ?? agent.id}`,
@@ -461,12 +518,20 @@ function buildBody(agent, maxTurns) {
     '',
   ];
 
-  if (agent.domains?.length) {
+  // The 5.3.0 shape (no effort, no surfaces, implementer) renders byte-for-byte as before.
+  const legacyShape = !agent.effort && !agent.surfaces && isImplementer(agent);
+
+  if (legacyShape && agent.domains?.length) {
     lines.push('## Domains', ...agent.domains.map(d => `- ${d}`), '');
   }
 
+  if (!legacyShape && agent.mcp?.includes('neon')) {
+    lines.push(NEON_CAUTION, '');
+  }
+
   if (agent.standards?.length) {
     lines.push('## Standards to consult on demand');
+    if (!legacyShape) lines.push(STANDARDS_HINT);
     for (const s of agent.standards) lines.push(`- ${s}`);
     lines.push('');
   }
@@ -485,7 +550,9 @@ function buildBody(agent, maxTurns) {
     }
   }
 
-  if (isImplementer(agent)) {
+  if (agent.effort && isImplementer(agent)) {
+    lines.push(...DISPATCH_CONTRACT, '');
+  } else if (isImplementer(agent)) {
     lines.push(
       '## How you operate',
       '',
@@ -493,11 +560,11 @@ function buildBody(agent, maxTurns) {
       '',
     );
   } else {
-    // A read-only persona has no task to do nor doneCriteria to report.
+    // A read-only persona has no slice to implement nor scenario to report.
     lines.push(
       '## Como você opera',
       '',
-      'Você é read-only: nunca escreva, edite nem reverta código, testes, `tasks.json` ou `feature.json` (nada de `git checkout --`). ' +
+      'Você é read-only: nunca escreva, edite nem reverta código, testes, o plano ou `feature.json` (nada de `git checkout --`). ' +
         'O entregável é o arquivo de relatório que o dispatch nomeia; sem arquivo nomeado, é a sua mensagem final (no scout, o mapa).',
       '',
     );
@@ -505,7 +572,7 @@ function buildBody(agent, maxTurns) {
 
   lines.push(
     // `PARCIAL` on line 1 is what report-check reads; "no verdict" keeps an
-    // evaluator partial from carrying a Verdict the gate would read as final.
+    // review partial from carrying a Verdict the gate would read as final.
     '## Turn budget',
     '',
     // Pasted into EVERY dispatch of every persona — kept to the minimum that
@@ -529,7 +596,7 @@ function buildBody(agent, maxTurns) {
         'Use Read/Grep/Glob, never grep/sed/cat/find via Bash. Check a library API in the `context7` MCP before guessing ' +
         '(load a deferred `mcp__` tool with ToolSearch). Write the tests the budget asks for, then run only your own ' +
         'filter ONCE before the report — no red→green cycles, no `morph-spec verify` (the orchestrator proves it). ' +
-        'Never alter, revert or move production code to watch a test fail: mutation proof belongs to the Gate 3 evaluator.',
+        'Never alter, revert or move production code to watch a test fail: mutation proof belongs to the Gate 3 verifier.',
     );
   }
 

package/src/utils/claude-settings-manager.js

@@ -24,41 +24,6 @@ export { installAgents } from './agents-installer.js';
 // Extended settings management
 // ============================================================================
 
-/**
- * Install permission rules into .claude/settings.local.json
- * @param {string} targetPath - Project root directory
- * @param {Array<string>} permissions - Permission patterns to add
- * @returns {Promise<Object>} Summary of changes
- */
-export async function installPermissions(targetPath, permissions) {
-  const settings = await loadSettings(targetPath);
-
-  settings.permissions = settings.permissions || [];
-
-  const added = [];
-  for (const perm of permissions) {
-    if (!settings.permissions.includes(perm)) {
-      settings.permissions.push(perm);
-      added.push(perm);
-    }
-  }
-
-  // Track in _morph_managed
-  settings[MORPH_MANAGED_KEY] = settings[MORPH_MANAGED_KEY] || {};
-  settings[MORPH_MANAGED_KEY].permissions_added =
-    settings[MORPH_MANAGED_KEY].permissions_added || [];
-  for (const perm of added) {
-    if (!settings[MORPH_MANAGED_KEY].permissions_added.includes(perm)) {
-      settings[MORPH_MANAGED_KEY].permissions_added.push(perm);
-    }
-  }
-  settings[MORPH_MANAGED_KEY].generated_at = new Date().toISOString();
-
-  await saveSettings(targetPath, settings);
-
-  return { added, total: settings.permissions.length };
-}
-
 /**
  * Install environment variables into .claude/settings.local.json
  * @param {string} targetPath - Project root directory

package/src/utils/file-copier.js

@@ -156,7 +156,6 @@ export const MORPH_GITIGNORE_ENTRIES = [
     '.morph/memory/',
     '.morph/plans/',
     '.morph/analytics/',
-    '.morph/traces/',
     // Per-instance activity/session logs (activity-logger.js). Each worktree
     // writes its own — committing this guarantees a merge conflict between
     // feature branches.
@@ -240,6 +239,33 @@ export async function updateGitignore(projectPath, fx = realEffects()) {
   if (content !== original) fx.writeFile(gitignorePath, content);
 }
 
+const DOTNET_BUILD_DIRS = ['bin', 'obj'];
+
+const ignoredDir = (line) => line.trim()
+  .replace(/^\/|^\*\*\//, '')
+  .replace(/\/(\*\*)?$/, '')
+  .replace(/^\[(\w)(\w)\]/, (_, a, b) => (a.toLowerCase() === b.toLowerCase() ? a : `[${a}${b}]`))
+  .toLowerCase();
+
+/**
+ * Appends `bin/` and `obj/` to the project `.gitignore` when no line already
+ * ignores them. Never rewrites an existing line.
+ *
+ * @returns {string[]} the entries added
+ */
+export function ensureDotnetBuildIgnores(projectPath) {
+  const gitignorePath = join(projectPath, '.gitignore');
+  const content = fs.existsSync(gitignorePath) ? fs.readFileSync(gitignorePath, 'utf8') : '';
+  const present = new Set(content.split(/\r?\n/).filter((l) => !l.trim().startsWith('#')).map(ignoredDir));
+  const missing = DOTNET_BUILD_DIRS.filter((dir) => !present.has(dir)).map((dir) => `${dir}/`);
+  if (!missing.length) return [];
+  const eol = content.includes('\r\n') ? '\r\n' : '\n';
+  const lead = content && !content.endsWith('\n') ? eol : '';
+  const block = [...(content ? [''] : []), '# .NET build output', ...missing, ''].join(eol);
+  fs.writeFileSync(gitignorePath, content + lead + block);
+  return missing;
+}
+
 /**
  * Install a MORPH-SPEC .gitattributes section pinning morph state files to LF.
  *

package/src/utils/hooks-installer.js

@@ -55,8 +55,11 @@ import { realEffects } from '../lib/installers/effects.js';
  *
  * 3.12.0 adds heavy-gate to the Bash PreToolUse chain and heavy-release to the
  * PostToolUse and PostToolUseFailure chains: the opt-in `heavy.gateBash`.
+ *
+ * 3.13.0 adds warn-bash-source-write to the Bash PreToolUse chain: a warning,
+ * never a block, when a command writes project source through a redirect.
  */
-const HOOKS_VERSION = '3.12.0';
+const HOOKS_VERSION = '3.13.0';
 
 /** Marker for old dispatch.js (v1) */
 const OLD_DISPATCH_COMMAND = 'node framework/hooks/agent-teams/dispatch.js';
@@ -93,21 +96,24 @@ const MORPH_DENY = [
  *
  * Pre-authorizes operations the agent legitimately performs during the
  * morph-spec flow, so the user does not get permission prompts on every
- * proposal.md / spec.md / tasks.json write.
+ * plan.md / slice report write.
  *
  * `Edit(path)` ONLY, for the same reason as MORPH_DENY: the `Edit` rule already
  * covers Write, and a `Write(path)` rule is inert noise.
  */
 const MORPH_ALLOW = [
-  // Feature artifacts — the agent's working directory during proposal/plan/implement/review
+  // Feature artifacts — the agent's working directory during plan/uiux/implement/review
   'Edit(.morph/features/**)',
   // state.json — fallback path when state-sync hook can't cover a case
   'Edit(.morph/state.json)',
-  // Long-lived architectural context — agent may reconcile during brainstorming
+  // Long-lived architectural context — agent may reconcile during planning
   'Edit(.morph/context/**)',
   // Folder creation under .morph
   'Bash(mkdir:.morph/**)',
   'Bash(ls:.morph/**)',
+  // Gate 3 mutation round: restores bytes itself and has --restore; an auto-mode deny pauses the gate
+  'Bash(morph-spec mutate:*)',
+  'Bash(npx morph-spec mutate:*)',
 ];
 
 // Backwards-compat alias used by older tests
@@ -168,6 +174,8 @@ const MORPH_HOOKS = [
   // on someone having read MORPH.md. block-raw-worktree-add is its way-IN
   // counterpart (a raw `git worktree add` builds a tree with no junctions, no
   // ports, no identity) — static, so it costs nothing after the first two.
+  // warn-bash-source-write only adds context (source written by redirect skips
+  // the Write/Edit guards); after the guards, so a blocked command is not warned.
   // heavy-gate comes after every guard — it takes a slot, and a command a guard
   // blocks must not hold one — and before the rewriter.
   // worktree-env-inject is LAST: it rewrites launcher commands (updatedInput)
@@ -179,7 +187,7 @@ const MORPH_HOOKS = [
     hooks: [{
       type: 'command',
       command: 'node framework/hooks/claude-code/core/chain.js',
-      args: ['pre-bash-denylist', 'block-destructive-worktree-removal', 'block-raw-worktree-add', 'heavy-gate', 'worktree-env-inject']
+      args: ['pre-bash-denylist', 'block-destructive-worktree-removal', 'block-raw-worktree-add', 'warn-bash-source-write', 'heavy-gate', 'worktree-env-inject']
     }]
   },
 
@@ -214,15 +222,14 @@ const MORPH_HOOKS = [
     }]
   },
 
-  // === PostToolUse: Write|Edit — tasks.json schema guard, trace auto-generation,
-  // comment-guard LAST: it blocks, and a block ends the chain. ===
+  // === PostToolUse: Write|Edit — comment-guard, solo: it blocks the edit that
+  // adds a forbidden comment. ===
   {
     event: 'PostToolUse',
     matcher: 'Write|Edit',
     hooks: [{
       type: 'command',
-      command: 'node framework/hooks/claude-code/core/chain.js',
-      args: ['tasks-json-guard', 'trace-autogen', 'comment-guard']
+      command: 'node framework/hooks/claude-code/core/comment-guard.js'
     }]
   },
 

package/src/utils/skills-installer.js

@@ -3,8 +3,7 @@
  *
  * Copies framework skills to .claude/skills/ during morph-spec init.
  * Installs only the `core/` skill set — the canonical NLH skills referenced by
- * MORPH.md (morph-brainstorming, morph-stack-scan, morph-plan, morph-implement,
- * morph-review, morph-standards). The 3-tier system was collapsed
+ * MORPH.md (morph-plan, morph-uiux, morph-apply, morph-review, morph-standards…). The 3-tier system was collapsed
  * into a single source of truth in framework/skills/core/.
  *
  * Source skills are directory-based: framework/skills/core/{skill-name}/SKILL.md

package/framework/evals/trace-schema.md

@@ -1,67 +0,0 @@
-# Trace Schema — morph-spec NLH
-
-## Local de armazenamento
-
-`.morph/traces/YYYY-MM-DD-{feature}-{phase}.json`
-
-Um arquivo por fase. Se a fase for executada em múltiplas sessões, o mesmo arquivo é atualizado incrementalmente.
-
-## Formato JSON
-
-```json
-{
-  "schema_version": "1.0",
-  "session_id": "YYYY-MM-DD-HH-MM-SS",
-  "feature": "nome-da-feature",
-  "phase": "implement | plan | review",
-  "started_at": "ISO 8601",
-  "completed_at": "ISO 8601",
-  "tasks": [
-    {
-      "id": "T1",
-      "title": "descrição da task",
-      "status": "completed | failed | skipped",
-      "standards_consulted": ["id-do-standard-1"],
-      "agent_persona": "dotnet-senior | nextjs-expert | etc",
-      "sub_agent_dispatched": false,
-      "files_modified": ["path/relativo/arquivo.cs"],
-      "duration_seconds": null
-    }
-  ],
-  "phase_summary": {
-    "tasks_completed": 3,
-    "tasks_failed": 0,
-    "standards_most_used": ["architecture-vertical-slice"],
-    "sub_agents_dispatched": 0
-  }
-}
-```
-
-## Como o trace é gerado (automático — não escreva à mão)
-
-O trace é **gerado pelo hook `trace-autogen`** (PostToolUse em Write|Edit) a cada
-write de `2-plan/tasks.json` — o último write da cerimônia de cada task. As skills
-(`morph-implement`, `morph-review`) **não escrevem o trace**.
-
-| Fonte | O que alimenta |
-|-------|----------------|
-| `tasks.json` | conjunto de tasks, `status` (done→completed, skipped→skipped, blocked→failed; pending/in_progress ficam fora), `outputs` → `files_modified` |
-| `recap.md` | `**Standard:**` → `standards_consulted`; `**Persona:**` → `agent_persona` + `sub_agent_dispatched` (`morph-{id}`/`general-purpose` = true) |
-
-`completed_at` e `phase_summary` são preenchidos quando nenhuma task resta
-`pending`/`in_progress`. O arquivo existente da mesma feature+fase é atualizado
-in place (`session_id`/`started_at` preservados entre sessões).
-
-**Se o trace parecer incompleto, corrija a FONTE** (um recap sem o bloco `## T{N}`), nunca o trace.
-
-## Regras de geração
-
-- Se um campo não tiver valor disponível, o hook usa `null` — nunca omite o campo.
-- Estrutura completa mantida para compatibilidade com análise de meta-harness.
-- `session_id` usa o formato `YYYY-MM-DD-HH-MM-SS` da primeira geração.
-- `standards_consulted` contém os `id`s do STANDARDS.json, não os paths.
-- `files_modified` usa paths relativos à raiz do repositório (vem de `outputs`).
-
-## Motivação
-
-Raw traces preservam o sinal completo de execução. Summaries comprimem informação e perdem sinais que o meta-harness usa para otimização. Regra: logar o trace completo — nunca substituir por resumo.

package/framework/hooks/claude-code/core/tasks-json-guard.js

@@ -1,83 +0,0 @@
-#!/usr/bin/env node
-/**
- * tasks-json-guard.js — PostToolUse hook (validate-and-warn, never block)
- *
- * Event: PostToolUse | Matcher: Write|Edit
- *
- * After any Write/Edit that touches a tasks.json under .morph/features/,
- * re-reads the file from disk and validates the schema (status enum, effort
- * enum). Invalid → injects a warning so the LLM fixes the file immediately;
- * valid → logs one activity line and stays silent.
- *
- * The production failure this guards: a leaf sub-agent wrote
- * status:"completed" (not in the enum — the schema accepts "done") into
- * tasks.json and nothing flagged it. The blocking pre-write validation for
- * post-Gate-2 edits lives in protect-spec-files.js (PreToolUse); this
- * PostToolUse pass also covers pre-gate authoring (morph-plan) and anything
- * that landed on disk regardless.
- *
- * Fail-open: exits 0 on any error.
- */
-
-import { readFileSync } from 'fs';
-import { isAbsolute, join } from 'path';
-import { stateExists } from '../../shared/state-reader.js';
-import { contextResult, runStandalone } from '../../shared/hook-response.js';
-import { logHookActivity } from '../../shared/activity-logger.js';
-import { getFilePath } from '../../shared/payload-utils.js';
-import { isFeaturePath, getBasename } from '../../shared/phase-utils.js';
-import { VALID_TASK_STATUS, validateTasksDoc } from '../../shared/tasks-validator.js';
-
-function projectDir() {
-  return process.env.CLAUDE_PROJECT_DIR || process.cwd();
-}
-
-/**
- * @param {object} payload - parsed PostToolUse stdin payload (Write|Edit)
- * @returns {Promise<object|null>} a hookSpecificOutput warning when tasks.json
- *   is unparseable or schema-invalid, or null (pass/silent).
- */
-export async function run(payload) {
-  try {
-    const cwd = projectDir();
-    if (!stateExists(cwd)) return null;
-
-    const filePath = getFilePath(payload);
-    if (!filePath) return null;
-    if (!isFeaturePath(filePath)) return null;
-    if (getBasename(filePath) !== 'tasks.json') return null;
-
-    const absPath = isAbsolute(filePath) ? filePath : join(cwd, filePath);
-
-    let doc;
-    try {
-      doc = JSON.parse(readFileSync(absPath, 'utf-8'));
-    } catch {
-      logHookActivity('tasks-json-guard', 'PostToolUse', 'invalid', cwd);
-      return contextResult(
-        '⚠️ [morph-spec] tasks.json INVÁLIDO — o arquivo gravado não parseia como JSON. ' +
-        'Corrija o arquivo antes de continuar.',
-        'PostToolUse'
-      );
-    }
-
-    const { valid, errors } = validateTasksDoc(doc);
-    if (!valid) {
-      logHookActivity('tasks-json-guard', 'PostToolUse', 'invalid', cwd);
-      return contextResult(
-        '⚠️ [morph-spec] tasks.json com schema inválido após o write:\n' +
-        errors.map(e => `  • ${e}`).join('\n') +
-        `\nStatus válidos: ${VALID_TASK_STATUS.join(', ')}. Corrija antes de marcar a task como done.`,
-        'PostToolUse'
-      );
-    }
-
-    logHookActivity('tasks-json-guard', 'PostToolUse', 'ok', cwd);
-    return null;
-  } catch {
-    // Fail-open
-    return null;
-  }
-}
-
-await runStandalone(run);