@polymorphism-tech/morph-spec 8.47.0 → 9.1.0

package/framework/hooks/shared/state-writer.js

@@ -1,14 +1,5 @@
-/**
- * Shared per-feature state writer for Claude Code hooks.
- *
- * Hooks run inside the user's project and cannot import the CLI's
- * src/core/state-manager.js. This module is the hook-side mirror of the core
- * writers: it persists a feature to its authoritative `feature.json` (committed)
- * and refreshes the thin, gitignored root index (`.morph/state.json`).
- *
- * Fail-open by contract: every function swallows errors and returns a boolean —
- * a hook must never break the agent over a state write.
- */
+// Hook-side mirror of the CLI state writers (hooks cannot import `src/`).
+// Fail-open: every function returns a boolean, never throws.
 
 import { readFileSync, writeFileSync, renameSync, unlinkSync, existsSync, mkdirSync } from 'fs';
 import { join, dirname } from 'path';
@@ -17,12 +8,10 @@ import { clearStateCache } from './state-reader.js';
 const STATE_FILE = '.morph/state.json';
 const STATE_VERSION = '5.0.0';
 
-/** Absolute path to a feature's authoritative feature.json. */
 export function featureJsonPath(featureName, projectPath) {
   return join(projectPath || process.cwd(), '.morph', 'features', featureName, 'feature.json');
 }
 
-/** Read a feature's feature.json, or null if missing/corrupt. */
 export function readFeatureFile(featureName, projectPath) {
   const p = featureJsonPath(featureName, projectPath);
   if (!existsSync(p)) return null;
@@ -33,7 +22,7 @@ export function readFeatureFile(featureName, projectPath) {
   }
 }
 
-/** Atomic JSON write: per-pid temp then rename, with an EPERM retry for Windows. */
+// EPERM retry: Windows rename fails while another process holds the target.
 function atomicWriteJson(targetPath, data) {
   const dir = dirname(targetPath);
   if (!existsSync(dir)) mkdirSync(dir, { recursive: true });
@@ -54,11 +43,6 @@ function atomicWriteJson(targetPath, data) {
   }
 }
 
-/**
- * Persist a feature to its authoritative feature.json and refresh the thin root
- * index entry (status + updatedAt) + aggregate metadata. Returns true on
- * success, false fail-open.
- */
 export function persistFeature(featureName, feature, projectPath) {
   try {
     atomicWriteJson(featureJsonPath(featureName, projectPath), feature);
@@ -75,19 +59,8 @@ export function persistFeature(featureName, feature, projectPath) {
     root.metadata.totalFeatures = Object.keys(root.features).length;
     atomicWriteJson(statePath, root);
 
-    // R1's loadState() memoizes per projectPath for the lifetime of the
-    // process. That was always safe when every hook was its own short-lived
-    // process (README history), but core/chain.js now runs multiple hooks
-    // — e.g. state-sync then gate-guard — IN ONE process. Without this,
-    // a loadState() call earlier in that same process (state-sync's
-    // handleWriteEdit reads via loadState before this write) would leave a
-    // stale snapshot cached, and gate-guard's loadState() right after this
-    // write would silently read the PRE-write state instead of what was
-    // just persisted — inverting the "gate-guard runs after state-sync so it
-    // sees the gate state-sync just recorded" ordering guarantee the
-    // registry comment documents. Invalidating here (the one place
-    // feature.json/state.json are actually written) covers every current
-    // and future caller, not just this one chain.
+    // chain.js runs several hooks in one process: the next link must not read
+    // the memoized pre-write snapshot.
     clearStateCache();
     return true;
   } catch {
@@ -95,16 +68,7 @@ export function persistFeature(featureName, feature, projectPath) {
   }
 }
 
-/**
- * Canonical gate-approval writer (hook-side mirror of CLI setApprovalGate).
- * Stamps approvalGates[gate] = { approved, timestamp, approvedBy } — the single
- * canonical shape — onto the feature and persists it. Returns true on success.
- *
- * @param {string} featureName
- * @param {string} gate - 'proposal'|'uiux'|'plan'|'review'
- * @param {{ approvedBy?: string, timestamp?: string }} [meta]
- * @param {string} [projectPath]
- */
+/** @param {{ approvedBy?: string, timestamp?: string, selfAssessed?: boolean }} [meta] */
 export function setGateApproved(featureName, gate, meta = {}, projectPath) {
   try {
     const feature = readFeatureFile(featureName, projectPath) || createDefaultFeature(featureName);
@@ -123,16 +87,8 @@ export function setGateApproved(featureName, gate, meta = {}, projectPath) {
   }
 }
 
-/**
- * Default feature shape (canonical object-form gates, incl. optional uiux).
- * Stamps identity — name (the slug), workType, createdAt — so the implicit
- * birth path (state-sync registering a feature on the first Write) never
- * produces an anonymous {status,updatedAt} shell. `description` stays absent
- * (a hook can't invent it); `list`/`doctor` flag its absence. Mirrors the CLI
- * createFeature's stamping.
- *
- * @param {string} [featureName] - the feature slug, stamped as `name`
- */
+// Stamps identity so a feature born implicitly by a hook is never an anonymous
+// shell; `description` stays absent because a hook cannot invent it.
 export function createDefaultFeature(featureName) {
   const now = new Date().toISOString();
   return {
@@ -142,9 +98,8 @@ export function createDefaultFeature(featureName) {
     createdAt: now,
     updatedAt: now,
     approvalGates: {
-      proposal: { approved: false, timestamp: null, approvedBy: null },
-      uiux: { approved: false, timestamp: null, approvedBy: null },
       plan: { approved: false, timestamp: null, approvedBy: null },
+      uiux: { approved: false, timestamp: null, approvedBy: null },
       review: { approved: false, timestamp: null, approvedBy: null },
     },
     outputs: {},

package/framework/hooks/shared/stdin-reader.js

@@ -1,14 +1,4 @@
-/**
- * Shared stdin reader for Claude Code hooks.
- *
- * Reads JSON payload from stdin (provided by Claude Code to hooks).
- * Returns parsed object or null on failure.
- */
-
-/**
- * Read and parse JSON from stdin
- * @returns {Promise<Object|null>} Parsed JSON or null
- */
+/** @returns {Promise<Object|null>} the hook payload, or null when stdin is not JSON */
 export function readStdin() {
   return new Promise((resolve) => {
     let input = '';

package/framework/hooks/shared/telemetry-logger.js

@@ -1,20 +1,5 @@
-/**
- * Telemetry Logger — append-only harness event stream
- *
- * Writes one JSON line per event to .morph/logs/events.jsonl. This is the sink
- * for the `telemetry-log` hook, which fires on every tool call (PostToolUse,
- * all tools) and on every user prompt (UserPromptSubmit) — the only vantage
- * points an NLH exposes. The whole execution path (skills, sub-agent dispatch,
- * knowledge-base reads, prompts) is reconstructable by reading this file.
- *
- * Design constraints (same discipline as activity-logger, plus one):
- * - Synchronous only (hooks run in process, no async overhead)
- * - Fail-silent (never throws — hooks must not be blocked by the logger)
- * - APPEND-ONLY: one `appendFileSync` line per event, O(1) per call. The
- *   read-modify-write of a whole JSON doc (activity-logger) is O(n²) across a
- *   session and blows the ≤5ms budget once tool calls number in the hundreds.
- * - Windows-safe paths via path.join
- */
+// Append-only on purpose: rewriting a whole JSON doc per event is O(n²) across
+// a session, and this runs on every tool call. Fail-silent: never blocks a hook.
 
 import {
   appendFileSync, readFileSync, mkdirSync, existsSync, statSync, renameSync,
@@ -26,13 +11,7 @@ import { redactSecrets } from './redact-secrets.js';
 const LOGS_DIR = '.morph/logs';
 export const EVENTS_FILE = join(LOGS_DIR, 'events.jsonl');
 
-// SessionStart (worktree-context.js) rotates events.jsonl once it crosses
-// this size, alongside the pre-existing activity.jsonl rotation — same
-// call site, same "between sessions" checkpoint. events.jsonl has no natural
-// per-turn cap (prompts/commands are truncated at the write site, but the
-// LINE COUNT itself grows unbounded across a long-lived project), so without
-// this it grows forever the way activity.jsonl used to before R1.2.
-export const ROTATE_THRESHOLD_BYTES = 5 * 1024 * 1024; // 5 MB
+export const ROTATE_THRESHOLD_BYTES = 5 * 1024 * 1024;
 
 // Bumped when a field changes meaning. Readers key legacy handling off its
 // absence (v1 events carry no schemaVersion and no eventId).
@@ -49,15 +28,7 @@ function getEventsPath(projectPath) {
   return join(projectPath || process.cwd(), EVENTS_FILE);
 }
 
-/**
- * Append a single telemetry event as one JSON line.
- * Stamps `ts` (unless given), `schemaVersion` and a unique `eventId` — the
- * dedupe key when the same line is read back from a rotated archive or a
- * finish backup — and redacts secrets in the free-text fields.
- *
- * @param {Object} event - Event payload (tool, skill/persona/target/prompt, feature, phase…)
- * @param {string} [projectPath] - Project root (defaults to cwd)
- */
+// `eventId` dedupes the same line read back from a rotated archive or a finish backup.
 export function appendTelemetryEvent(event, projectPath) {
   try {
     const eventsPath = getEventsPath(projectPath);
@@ -75,17 +46,9 @@ export function appendTelemetryEvent(event, projectPath) {
     }
     appendFileSync(eventsPath, JSON.stringify(stamped) + '\n', 'utf-8');
   } catch {
-    // Fail-silent — never block hooks
   }
 }
 
-/**
- * Read the full event stream back into an array. A corrupt/truncated line
- * (e.g. a killed process mid-write) is skipped, not fatal.
- *
- * @param {string} [projectPath]
- * @returns {Object[]} events in write order (may be empty)
- */
 export function readTelemetryEvents(projectPath) {
   try {
     const eventsPath = getEventsPath(projectPath);
@@ -98,7 +61,7 @@ export function readTelemetryEvents(projectPath) {
       try {
         events.push(JSON.parse(trimmed));
       } catch {
-        // skip a single corrupt line — don't lose the whole stream
+        // a process killed mid-write leaves a truncated line
       }
     }
     return events;
@@ -107,19 +70,7 @@ export function readTelemetryEvents(projectPath) {
   }
 }
 
-/**
- * Archive the current events.jsonl to `.morph/logs/sessions/`, mirroring
- * activity-logger.js's `archiveSession()` — same directory, same rename-not-
- * rewrite mechanics (O(1) even at multi-MB sizes). Named with an `events-`
- * prefix (activity-logger's archives carry no prefix) so the two streams
- * never collide inside the shared `sessions/` directory and stay
- * distinguishable at a glance.
- *
- * Fail-silent — called only from `rotateEventsLogIfLarge` below, which has
- * already confirmed the file exists.
- *
- * @param {string} [projectPath]
- */
+// `events-` prefix: activity-logger archives share `sessions/` without one.
 function archiveEvents(projectPath) {
   try {
     const eventsPath = getEventsPath(projectPath);
@@ -132,21 +83,10 @@ function archiveEvents(projectPath) {
     const archivePath = join(sessionsDir, `events-${stamp}.jsonl`);
     renameSync(eventsPath, archivePath);
   } catch {
-    // Fail-silent
   }
 }
 
-/**
- * Rotate events.jsonl when it crosses `thresholdBytes`. Called from
- * worktree-context.js on SessionStart, right next to the existing
- * `rotateActivityLogIfLarge()` call — the only reliable "between sessions"
- * checkpoint the harness gets. `thresholdBytes` is injectable so a test can
- * force rotation without writing multiple megabytes.
- *
- * @param {string} [projectPath] - Project root (defaults to cwd)
- * @param {number} [thresholdBytes] - Rotate once the log is at least this large
- * @returns {boolean} true if a rotation was performed
- */
+/** @returns {boolean} true if a rotation was performed */
 export function rotateEventsLogIfLarge(projectPath, thresholdBytes = ROTATE_THRESHOLD_BYTES) {
   try {
     const eventsPath = getEventsPath(projectPath);

package/framework/hooks/shared/transcript-usage.js

@@ -1,28 +1,15 @@
-/**
- * Real token usage read from a Claude Code transcript (JSONL), shared by the
- * Stop hook (the main session's transcript) and SubagentStop (each
- * sub-agent's own transcript, which the main one does not include).
- */
+// Shared by Stop and SubagentStop: the main transcript does not include the
+// sub-agents' usage.
 
 import { readFileSync, existsSync, statSync } from 'fs';
 
-// A 45 MB / ~16k-line transcript parses in ~350 ms; above this, skip rather
-// than risk an unbounded read inside a hook.
+// Skip rather than risk an unbounded read inside a hook.
 const MAX_TRANSCRIPT_BYTES = 50 * 1024 * 1024;
 
 export const USAGE_KEYS = ['inputTokens', 'outputTokens', 'cacheReadTokens', 'cacheCreationTokens'];
 
-/**
- * Sum `message.usage` over the assistant turns of a transcript.
- *
- * One turn is written as several lines (one per content block), each repeating
- * the same usage under the same `message.id`: summing lines double-counts, so
- * the sum is deduplicated by message id.
- *
- * @param {string} [transcriptPath]
- * @returns {{inputTokens:number,outputTokens:number,cacheReadTokens:number,cacheCreationTokens:number}|null}
- *   null when there is nothing to report (no/oversized/unreadable file, no usage)
- */
+// One turn spans several lines repeating the same usage under the same
+// `message.id`: summing lines double-counts, so the sum dedups by id.
 export function readTranscriptUsage(transcriptPath) {
   if (!transcriptPath || typeof transcriptPath !== 'string') return null;
   try {
@@ -61,17 +48,8 @@ export function readTranscriptUsage(transcriptPath) {
   }
 }
 
-/**
- * The usage added since the previous sample of the same transcript.
- *
- * A counter going DOWN means the transcript restarted (a new file under the
- * same key), so the whole current total is new usage — subtracting would
- * produce negative spend.
- *
- * @param {object|null|undefined} previous - last recorded totals for this key
- * @param {object} current - totals just read
- * @returns {{delta: object, changed: boolean}}
- */
+// A counter going DOWN means the transcript restarted: the whole current
+// total is new usage, and subtracting would produce negative spend.
 export function usageDelta(previous, current) {
   const reset = !previous || USAGE_KEYS.some((k) => (current[k] ?? 0) < (previous[k] ?? 0));
   const delta = {};

package/framework/hooks/shared/worktree-root.js

@@ -1,29 +1,13 @@
-/**
- * worktree-root.js — onde as worktrees do morph-spec moram, num lugar só.
- *
- * Padrão: `<raiz>/worktrees/<nome>` (mais o legado `.worktrees/`). Com `worktree.root` na
- * config (ou `MORPH_WORKTREE_ROOT`), as novas nascem em `<root>/<chave-do-repo>/<nome>`, FORA da
- * árvore aberta no editor. A chave é `basename-<hash da raiz>`: só o basename colidiria entre dois
- * repositórios de mesmo nome que dividem o mesmo root.
- *
- * Um root DENTRO da raiz é recusado: toda lista que se orienta pelo nome do container
- * (.gitignore, graphifyignore, descoberta de testes, tar do --linux, globs do editor) deixaria de
- * enxergá-lo, em silêncio. Recusado, vale o padrão e o motivo volta em `warning`.
- *
- * O predicado "está no container" é a UNIÃO do layout configurado com o padrão e o legado: uma
- * worktree que já existe continua reconhecida depois que a chave muda. Mora em `hooks/shared`
- * porque hook não importa `src/`; o `src/` importa daqui.
- *
- * @module worktree-root
- */
+// "Está no container" é a UNIÃO do layout configurado com o padrão e o legado:
+// uma worktree antiga segue reconhecida. Root dentro da raiz é recusado, porque as
+// listas orientadas pelo nome `worktrees/` deixariam de enxergá-lo.
 
 import { createHash } from 'crypto';
 import { readFileSync } from 'fs';
 import { homedir } from 'os';
 import { basename, isAbsolute, join, relative, resolve } from 'path';
 
-// No leading dot (C1): Jest escapes it inside an absolute `rootDir` glob, so `.worktrees/` made a whole
-// frontend suite report 0 tests without an error. `.worktrees/` is the pre-C1 name, still read everywhere.
+// No leading dot: Jest escapes it inside an absolute `rootDir` glob and reports 0 tests.
 export const WORKTREES_DIR = 'worktrees';
 export const LEGACY_WORKTREES_DIR = '.worktrees';
 export const WORKTREE_DIR_NAMES = [WORKTREES_DIR, LEGACY_WORKTREES_DIR];
@@ -31,7 +15,7 @@ export const WORKTREE_DIR_NAMES = [WORKTREES_DIR, LEGACY_WORKTREES_DIR];
 const fwd = (p) => String(p).replace(/\\/g, '/');
 const foldCase = (p) => (process.platform === 'win32' ? p.toLowerCase() : p);
 
-/** `basename-<8 hex do hash da raiz>` — estável entre `R:` e `r:` no Windows. */
+// Só o basename colidiria entre repositórios; o hash é estável entre `R:` e `r:`.
 export function repoKey(primaryRoot) {
   const root = fwd(resolve(primaryRoot));
   const hash = createHash('sha1').update(foldCase(root)).digest('hex').slice(0, 8);
@@ -54,11 +38,7 @@ function isInside(root, path) {
   return rel === '' || (!rel.startsWith('..') && !isAbsolute(rel));
 }
 
-/**
- * @param {string} primaryRoot
- * @param {{ env?: NodeJS.ProcessEnv }} [opts]
- * @returns {{ dir: string|null, base?: string, warning?: string }} `dir` = `<root>/<repoKey>`
- */
+/** @returns {{ dir: string|null, base?: string, warning?: string }} `dir` = `<root>/<repoKey>` */
 export function externalContainer(primaryRoot, { env = process.env } = {}) {
   const configured = configuredRoot(primaryRoot, env);
   if (!configured) return { dir: null };
@@ -70,19 +50,17 @@ export function externalContainer(primaryRoot, { env = process.env } = {}) {
   return { dir: fwd(join(base, repoKey(primaryRoot))), base: fwd(base) };
 }
 
-/** Where a NEW worktree lands. */
 export function newWorktreesDir(primaryRoot, opts) {
   return externalContainer(primaryRoot, opts).dir ?? `${fwd(resolve(primaryRoot))}/${WORKTREES_DIR}`;
 }
 
-/** Every directory that counts as "the container", external first. Forward slashes. */
 export function containerDirs(primaryRoot, opts) {
   const root = fwd(resolve(primaryRoot));
   const external = externalContainer(primaryRoot, opts).dir;
   return [...(external ? [external] : []), ...WORKTREE_DIR_NAMES.map((name) => `${root}/${name}`)];
 }
 
-/** Is `path` under any of `dirs` (a `containerDirs` result)? Ask `containerDirs` once per audit, not once per path. */
+// Ask `containerDirs` once per audit, not once per path.
 export function isUnder(dirs, path) {
   const target = foldCase(fwd(resolve(path)));
   return dirs.some((dir) => target.startsWith(`${foldCase(dir)}/`));

package/framework/mcp/registry.json

@@ -3,7 +3,7 @@
   "description": "Centralized MCP registry with phase relevance and install configuration for morph-spec workflows",
   "mcps": {
     "context7": {
-      "phases": ["proposal", "plan", "implement"],
+      "phases": ["plan", "implement"],
       "tools": ["resolve-library-id", "query-docs"],
       "serverNames": ["context7", "plugin_context7_context7"],
       "detection": "enabledPlugins includes context7 or mcpServers includes context7",
@@ -216,7 +216,7 @@
       }
     },
     "graphify": {
-      "phases": ["proposal", "plan", "implement", "review"],
+      "phases": ["plan", "implement", "review"],
       "tools": ["query_graph", "get_node", "get_neighbors", "get_community", "god_nodes", "graph_stats", "shortest_path", "list_prs", "get_pr_impact", "triage_prs"],
       "detection": "graphify-out/graph.json exists in the project root (written by morph-spec graph build, or by the graphify post-commit hook)",
       "fallback": "Comportamento atual: Grep/Glob/Read. O grafo é um subconjunto estrito do grep — no eval não encontrou um único arquivo que o grep perderia — então cair para grep não perde recall, só devolve mais ruído",
@@ -281,9 +281,8 @@
   },
   "_phaseMatrixNote": "Keys must be the v5 phases from framework/phases.json. The v4 keys 'design' and 'tasks' both collapsed into 'plan'; 'review' was absent entirely, so a project in review resolved to undefined. Stack-scoped MCPs (asaas, neon) stay out of this matrix on purpose — only universal ones are listed.",
   "phaseMatrix": {
-    "proposal": ["context7", "graphify"],
-    "uiux": ["playwright", "context7", "stitch", "morph-assets"],
     "plan": ["context7", "graphify"],
+    "uiux": ["playwright", "context7", "stitch", "morph-assets"],
     "implement": ["context7", "playwright", "vercel", "morph-assets", "graphify"],
     "review": ["playwright", "context7", "graphify"]
   }

package/framework/phases.json

@@ -1,22 +1,22 @@
 {
   "version": "5.0.0",
   "phases": {
-    "proposal": {
-      "id": "proposal",
+    "plan": {
+      "id": "plan",
       "index": 0,
-      "folder": "0-proposal",
-      "displayName": "Proposal",
+      "folder": "2-plan",
+      "displayName": "Plan",
       "goals": [
-        "Understand the business problem and user flows",
-        "Detect existing stack (brownfield) or assume default stack (greenfield)",
-        "Produce proposal.md and reach Gate 1"
+        "Understand the business problem and scan the stack (brownfield) or assume the default (greenfield)",
+        "Write plan.md — scenarios with proof, decisions, reuse and slices",
+        "Run plan-check to produce checks.json and reach the plan gate"
       ],
-      "requiredOutputs": ["proposal"],
-      "optionalOutputs": ["stackScan"],
+      "requiredOutputs": ["plan", "checks"],
+      "optionalOutputs": [],
       "pausePoints": [
-        { "id": "proposal", "label": "Gate 1 — Approve proposal" }
+        { "id": "plan", "label": "Gate do plano — Approve plan.md + checks.json" }
       ],
-      "skill": "morph-brainstorming"
+      "skill": "morph-plan"
     },
     "uiux": {
       "id": "uiux",
@@ -35,50 +35,34 @@
       ],
       "skill": "morph-uiux"
     },
-    "plan": {
-      "id": "plan",
-      "index": 2,
-      "folder": "2-plan",
-      "displayName": "Plan",
-      "goals": [
-        "Write spec.md (technical spec)",
-        "Write tasks.json (ordered task breakdown)"
-      ],
-      "requiredOutputs": ["spec", "tasks"],
-      "optionalOutputs": ["decisions"],
-      "pausePoints": [
-        { "id": "plan", "label": "Gate 2 — Approve spec + tasks" }
-      ],
-      "skill": "morph-plan"
-    },
     "implement": {
       "id": "implement",
-      "index": 3,
+      "index": 2,
       "folder": "3-implement",
       "displayName": "Implementation",
       "goals": [
-        "Execute tasks in order with auto-advance between tasks",
-        "Advance a task only on verify green and its doneCriteria met",
-        "Maintain recap.md and execution trace"
+        "Execute the slices of plan.md, in parallel waves when plan-check allows",
+        "Close a slice only on verify green and its scenarios proven",
+        "One report per slice (3-implement/reports/F{n}.md, with **Arquivos:** and **Standards:**) — the implementation record"
       ],
-      "requiredOutputs": ["recap"],
+      "requiredOutputs": [],
       "optionalOutputs": ["evidencias"],
       "pausePoints": [],
-      "skill": "morph-implement"
+      "skill": "morph-apply"
     },
     "review": {
       "id": "review",
-      "index": 4,
+      "index": 3,
       "folder": "4-review",
       "displayName": "Review",
       "goals": [
-        "Independent evaluator verdict (SHIP/FIX) with evidence-typed blockers",
-        "Produce review-report.md and present Gate 3"
+        "Verifier proves every scenario; reviewer (and security, when required) judge the diff at a fixed SHA",
+        "verifier.md + reviewer.md (+ security.md) with SHIP/FIX and evidence-typed blockers, then Gate 3"
       ],
-      "requiredOutputs": ["reviewReport"],
-      "optionalOutputs": [],
+      "requiredOutputs": ["verifierReport", "reviewerReport"],
+      "optionalOutputs": ["securityReport"],
       "pausePoints": [
-        { "id": "review", "label": "Gate 3 — Approve review-report" }
+        { "id": "review", "label": "Gate 3 — Approve the review reports" }
       ],
       "skill": "morph-review"
     }

package/framework/rules/csharp-standards.md

@@ -9,7 +9,7 @@ stacks:
 # C# and .NET VSA Standards
 
 - **architecture-vertical-slice-vertical-slice** (`architecture/vertical-slice/vertical-slice.md`) — Uma slice por operação em `Features/{Entity}Feature/{Verb}{Entity}/`: Request/Response `sealed record`, Handler, Validator e Endpoint `IApiEndpoint` `internal sealed`. Decorators Scrutor: Logging → Validation → Handler. PROIBIDO: MediatR/`IRequest`, AggregateRoot, DomainEvent, CQRS formal, camada Application Service, DTO compartilhado entre features, `IRepository<T>`/`IUnitOfWork`.
-- **backend-dotnet-vsa-handler-patterns** (`backend/dotnet/vsa-handler-patterns.md`) — Handler `sealed class` com primary constructor implementando `IHandler<TRequest, TResponse>` (não MediatR): injeta `ApplicationDbContext` direto, usa `Guid.CreateVersion7()` (nunca `Guid.NewGuid()`), passa `CancellationToken` em tudo e devolve `Result<T>`. Erros em `{Feature}Errors.cs`. SQL cru ou store dedicado só com justificativa em `decisions.md`.
+- **backend-dotnet-vsa-handler-patterns** (`backend/dotnet/vsa-handler-patterns.md`) — Handler `sealed class` com primary constructor implementando `IHandler<TRequest, TResponse>` (não MediatR): injeta `ApplicationDbContext` direto, usa `Guid.CreateVersion7()` (nunca `Guid.NewGuid()`), passa `CancellationToken` em tudo e devolve `Result<T>`. Erros em `{Feature}Errors.cs`. SQL cru ou store dedicado só com justificativa em `plan.md` (`## Decisões`).
 - **backend-dotnet-result-pattern** (`backend/dotnet/result-pattern.md`) — Falha esperada é `Result`/`Result<T>`, nunca exceção. Endpoint: `result.Match(value => Results.Ok(value), error => error.ToHttpResult())`; nunca leia `.Value` fora do `Match`. Status pelo `ErrorType` (Validation 400, NotFound 404, Conflict 409, Unauthorized 401, Forbidden 403, Unexpected 500), nunca BadRequest para tudo. PROIBIDO: try/catch no handler, retornar null, erro string sem código.
 - **backend-dotnet-fluent-validation-vsa** (`backend/dotnet/fluent-validation-vsa.md`) — Um `sealed AbstractValidator<TRequest>` (FluentValidation 12) por request, na pasta da slice; o `ValidationDecorator` roda antes do handler e devolve `Result.Failure(ValidationError)`. `AddValidatorsFromAssembly()` ANTES de `AddHandlersFromAssembly()`. Sempre `.WithMessage()`; tempo via `TimeProvider` lido DENTRO da regra. Nunca lance `ValidationException`.
 - **backend-dotnet-scrutor** (`backend/dotnet/scrutor.md`) — `AddHandlersFromAssembly` registra cada `IHandler<,>` como Scoped (filtro `!t.ContainsGenericParameters`) e depois `Decorate` Validation e então Logging (o último registrado é o mais externo). Endpoints `IApiEndpoint` via `TryAddEnumerable` Transient + `MapApiEndpoints`. Nunca registre handler um a um.

package/framework/rules/frontend-standards.md

@@ -11,5 +11,6 @@ stacks:
 
 - **frontend-design-system-naming** (`frontend/design-system/naming.md`) — BEM para componente reutilizável (`.card`, `.card__header`, `.card--featured`); prefixo de página para elemento específico (`.home-hero`). Custom properties em `:root` com namespace `--app-`. Estado por sufixo fixo: `--active`, `--disabled`, `--loading`, `--error`.
 - **frontend-design-system-animations** (`frontend/design-system/animations.md`) — Classes `.animate-*`, `.duration-fast/normal/slow`, `.stagger-1..10`. Lista escalonada exige `animation-delay` E `animation-fill-mode: backwards`. Sempre o bloco `prefers-reduced-motion: reduce`. Além do CSS: Motion (`motion/react`) para enter/exit/layout; GSAP só para ScrollTrigger, SVG morph e timelines.
+- **frontend-design-system-art-direction** (`frontend/design-system/art-direction.md`) — Tela nova ou alterada segue a direção escrita em `1-design/direcao.md` e o protótipo de `1-design/prototipos/`: celular composto (folha inferior, alvos de 44px), movimento só em `transform`/`opacity` com versão estática em `prefers-reduced-motion`, nenhum número inventado em cena ilustrativa.
 
 > Resumo injetado quando você lê ou edita um arquivo casado por `paths:`. Texto completo: `morph-spec standards --find "<id>"` e leia só a seção necessária de `.morph/framework/standards/<path>`.

package/framework/rules/hangfire-standards.md

@@ -10,6 +10,6 @@ stacks:
 
 # Hangfire Background Jobs Standards
 
-- **backend-integrations-hangfire-hangfire-jobs** (`backend/integrations/hangfire/hangfire-jobs.md`) — Hangfire 1.8.25 só com razão real em `decisions.md`; o que cabe no request fica no handler. Storage `Hangfire.PostgreSql` 1.21.1 com `UseNpgsqlConnection` no endpoint DIRETO do Neon; referencie `Newtonsoft.Json` 13.0.4. Job é classe fina e idempotente que chama o handler; `[AutomaticRetry]`, sem try/catch nem retry manual. Dashboard exige Admin autenticado.
+- **backend-integrations-hangfire-hangfire-jobs** (`backend/integrations/hangfire/hangfire-jobs.md`) — Hangfire 1.8.25 só com razão real em `plan.md` (`## Decisões`); o que cabe no request fica no handler. Storage `Hangfire.PostgreSql` 1.21.1 com `UseNpgsqlConnection` no endpoint DIRETO do Neon; referencie `Newtonsoft.Json` 13.0.4. Job é classe fina e idempotente que chama o handler; `[AutomaticRetry]`, sem try/catch nem retry manual. Dashboard exige Admin autenticado.
 
 > Resumo injetado quando você lê ou edita um arquivo casado por `paths:`. Texto completo: `morph-spec standards --find "<id>"` e leia só a seção necessária de `.morph/framework/standards/<path>`.

package/framework/rules/neon-standards.md

@@ -11,7 +11,7 @@ stacks:
 # Neon PostgreSQL Standards
 
 - **infrastructure-neon-setup** (`infrastructure/neon/neon-setup.md`) — Duas connection strings: `DefaultConnection` (pooled `-pooler`) para a app e `MigrationConnection` (direta) para migrations e advisory locks; nunca commitadas (user-secrets / env do Coolify). Formato keyword (`Host=...;SSL Mode=Require`), não URI. `EnableRetryOnFailure(5, 10s)` por causa do scale-to-zero. Branch sempre com `--expires-at`.
-- **infrastructure-neon-pgvector** (`infrastructure/neon/neon-pgvector.md`) — `Npgsql.EntityFrameworkCore.PostgreSQL` 10.0.3 + `Pgvector.EntityFrameworkCore` 0.3.0; coluna `Vector` (`vector(1536)`) e `UseVector()` no `UseNpgsql`. SEMPRE índice HNSW com operator class casando a função LINQ (senão seq scan); distância em ordem ASC. PROIBIDO: DocumentRepository, SQL cru do C# sem `decisions.md`, default `gen_random_uuid()`.
+- **infrastructure-neon-pgvector** (`infrastructure/neon/neon-pgvector.md`) — `Npgsql.EntityFrameworkCore.PostgreSQL` 10.0.3 + `Pgvector.EntityFrameworkCore` 0.3.0; coluna `Vector` (`vector(1536)`) e `UseVector()` no `UseNpgsql`. SEMPRE índice HNSW com operator class casando a função LINQ (senão seq scan); distância em ordem ASC. PROIBIDO: DocumentRepository, SQL cru do C# sem `plan.md` (`## Decisões`), default `gen_random_uuid()`.
 - **infrastructure-neon-pgrag** (`infrastructure/neon/neon-pgrag.md`) — A extensão `rag` é EXPERIMENTAL: protótipo e RAG só-SQL, não produção sem teste. Nunca misture modelos de embedding numa coluna (bge-small 384 × text-embedding-3-small 1536). Índice HNSW depois da carga inicial. Produção .NET com lógica própria: tool MAF tipada sobre pgvector.
 - **backend-integrations-neon-auth-neon-auth** (`backend/integrations/neon-auth/neon-auth.md`) — SDK `@neondatabase/auth`: `createNeonAuth()` no server, `createAuthClient()` no client, `auth.middleware()` com `runtime='nodejs'`. Duas constantes de prefixo (`BACKEND_API_PREFIX`/`PROXY_API_PREFIX`), nunca uma só. O front não consulta o Neon para dado de negócio. .NET: token EdDSA/Ed25519, verificado pelo JWKS com BouncyCastle + `SignatureValidator` devolvendo `JsonWebToken`.
 

package/framework/schemas/config.schema.json

@@ -9,6 +9,18 @@
       "type": "object",
       "additionalProperties": true,
       "properties": {
+        "stack": {
+          "type": "string",
+          "description": "Stack tags joined by `+` (e.g. `dotnet+nextjs`). Decides the build node's commands, which assets install, and that bin/ and obj/ go into .gitignore."
+        },
+        "frontendPath": {
+          "type": "string",
+          "description": "Folder of the frontend, relative to the project root: where the build node runs `tsc`. Absent: the root."
+        },
+        "backendPath": {
+          "type": "string",
+          "description": "Folder of the .NET solution, relative to the project root: where the build node runs `dotnet build`. Absent: the root, or the repository's single .sln/.slnx (else single .csproj) when the root has none."
+        },
         "ci": {
           "type": "boolean",
           "description": "false turns `verify {f} --ci` into the local verify (with the reason printed). Absent or true: the Gate 3 proof comes from the GitHub Actions workflow that runs `morph-spec verify` (created on first use), whenever origin is GitHub and gh is authenticated."
@@ -60,20 +72,13 @@
               "e2e": {
                 "type": "boolean",
                 "default": false,
-                "description": "Requires the application stack to be up. Runs at feature scope only, never in the per-task loop."
+                "description": "Requires the application stack to be up."
               },
               "linuxImage": {
                 "type": "string",
                 "minLength": 1,
                 "description": "Overrides the container image used by `verify --linux` for this node."
               },
-              "groups": {
-                "type": "array",
-                "minItems": 1,
-                "uniqueItems": true,
-                "items": { "type": "string", "enum": ["backend", "frontend", "tests", "infra", "docs"] },
-                "description": "Which task group(s) (tasks.json `group`) this node verifies. Absent means the runner's own default applies (RUNNER_DEFAULT_GROUPS in src/lib/tasks/test-nodes.js) — `none`/`evals` have no default and are unscoped unless declared here."
-              },
               "evals": {
                 "type": "object",
                 "additionalProperties": false,
@@ -191,7 +196,7 @@
         "shutdownBuildServer": {
           "type": "boolean",
           "default": true,
-          "description": "Run `dotnet build-server shutdown` at the end of a feature-scope `verify` and of `e2e down`, only when no slot is held and no dotnet build/test is alive. Never at the end of a task-scope verify: every task would pay a cold compiler."
+          "description": "Run `dotnet build-server shutdown` at the end of a `verify` and of `e2e down`, only when no slot is held and no dotnet build/test is alive."
         },
         "disableNodeReuse": {
           "type": "boolean",