@polymorphism-tech/morph-spec 8.47.0 → 9.1.0

package/bin/morph-spec.js

@@ -1,14 +1,5 @@
 #!/usr/bin/env node
 
-/**
- * morph-spec CLI v5
- *
- * In v5 the CLI is the *installer* — Claude executes everything else
- * autonomously based on MORPH.md and the core skills. Commands here are
- * limited to actions that humans take or operations Claude needs help with
- * (scaffolding, validation, context refresh).
- */
-
 import { program } from 'commander';
 import chalk from 'chalk';
 import { fileURLToPath } from 'url';
@@ -16,14 +7,9 @@ import { dirname, join } from 'path';
 import { readFileSync } from 'fs';
 import { renderLogo, maybePrintFirstRunBanner } from '../src/utils/banner.js';
 
-// Command modules load on demand. Importing all ~45 of them eagerly cost
-// ~700 ms on EVERY invocation (init.js alone pulls inquirer: ~550 ms), paid
-// by each hook that shells out to the CLI and by each CLI spawn in the suite.
-// test/bin/command-modules-import.test.js imports every path below, so a module
-// that breaks at import time still fails the suite, not only its own command.
+// Lazy: eager import of every command cost ~700 ms per invocation, paid by each hook that shells out.
 const lazy = (path, name) => async (...args) => (await import(path))[name](...args);
 
-// === Project / install ===
 const initCommand = lazy('../src/commands/project/init.js', 'initCommand');
 const setupInfraCommand = lazy('../src/commands/project/setup-infra-cmd.js', 'setupInfraCommand');
 const installPluginCommand = lazy('../src/commands/project/install-plugin-cmd.js', 'installPluginCommand');
@@ -45,8 +31,9 @@ const claimCommand = lazy('../src/commands/project/claim.js', 'claimCommand');
 const standardsCommand = lazy('../src/commands/project/standards.js', 'standardsCommand');
 const reportCheckCommand = lazy('../src/commands/state/report-check.js', 'reportCheckCommand');
 const scoutCheckCommand = lazy('../src/commands/validation/scout-check.js', 'scoutCheckCommand');
+const planCheckCommand = lazy('../src/commands/validation/plan-check.js', 'planCheckCommand');
+const stackScanCommand = lazy('../src/commands/project/stack-scan.js', 'stackScanCommand');
 
-// === Approval gates (human-only) ===
 const approveCommand = lazy('../src/commands/state/approve.js', 'approveCommand');
 const approvalStatusCommand = lazy('../src/commands/state/approve.js', 'approvalStatusCommand');
 const unapproveCommand = lazy('../src/commands/state/approve.js', 'unapproveCommand');
@@ -60,19 +47,12 @@ const retypeCommand = lazy('../src/commands/state/retype.js', 'retypeCommand');
 const handoffCommand = lazy('../src/commands/state/handoff.js', 'handoffCommand');
 const listCommand = lazy('../src/commands/state/list.js', 'listCommand');
 const deleteCommand = lazy('../src/commands/state/delete.js', 'deleteCommand');
-const usecaseReserveCommand = lazy('../src/commands/state/usecase.js', 'usecaseReserveCommand');
-const usecaseCheckCommand = lazy('../src/commands/state/usecase.js', 'usecaseCheckCommand');
-
-// === Tasks ===
-const dagCommand = lazy('../src/commands/tasks/dag.js', 'dagCommand');
 
-// === Codebase graph ===
 const graphStatusCommand = lazy('../src/commands/graph/status.js', 'graphStatusCommand');
 const graphBuildCommand = lazy('../src/commands/graph/build.js', 'graphBuildCommand');
 const graphAffectedCommand = lazy('../src/commands/graph/affected.js', 'graphAffectedCommand');
 const graphExplainCommand = lazy('../src/commands/graph/explain.js', 'graphExplainCommand');
 
-// === Validation ===
 const validateCommand = lazy('./validate.js', 'validateCommand');
 const validateFeatureCommand = lazy('../src/commands/validation/validate-feature.js', 'validateFeatureCommand');
 const verifyCommand = lazy('../src/commands/validation/verify.js', 'verifyCommand');
@@ -81,20 +61,15 @@ const e2eUpCommand = lazy('../src/commands/e2e/e2e.js', 'e2eUpCommand');
 const e2eStatusCommand = lazy('../src/commands/e2e/e2e.js', 'e2eStatusCommand');
 const e2eDownCommand = lazy('../src/commands/e2e/e2e.js', 'e2eDownCommand');
 
-// === Scaffolding ===
 const scaffoldDotnetCommand = lazy('../src/commands/scaffold/scaffold.js', 'scaffoldDotnetCommand');
 const scaffoldNextjsCommand = lazy('../src/commands/scaffold/scaffold.js', 'scaffoldNextjsCommand');
 
-// === MCP setup ===
 const mcpSetupCommand = lazy('../src/commands/mcp/mcp-setup.js', 'mcpSetupCommand');
 
-// === Context refresh ===
 const contextRefreshCommand = lazy('../src/commands/context/context-refresh.js', 'contextRefreshCommand');
 
-// === Dashboard ===
 const dashboardCommand = lazy('../src/commands/dashboard/dashboard.js', 'dashboardCommand');
 
-// === Observability ===
 const telemetryCommand = lazy('../src/commands/observability/telemetry.js', 'telemetryCommand');
 const costCommand = lazy('../src/commands/observability/cost.js', 'costCommand');
 
@@ -105,9 +80,7 @@ const banner = `${renderLogo(pkg.version)}
   ${chalk.dim('Spec-driven development harness for Claude Code — by Polymorphism Tech')}
 `;
 
-// First run after an install/upgrade: show the install banner (npm ≥7 hides
-// postinstall output). Skipped for --version/--help (parsed/already-bannered)
-// and for non-TTY output — see maybePrintFirstRunBanner.
+// npm >=7 hides postinstall output, so the first run after an install shows the banner.
 const argvRest = process.argv.slice(2);
 const skipFirstRun = argvRest.length === 0 ||
   argvRest.some(a => ['-V', '--version', '-h', '--help'].includes(a));
@@ -121,7 +94,6 @@ program
   .version(pkg.version)
   .addHelpText('beforeAll', banner);
 
-// ─── Install ──────────────────────────────────────────────────────────────
 program
   .command('init')
   .description('Initialize MORPH-SPEC in current directory')
@@ -164,7 +136,6 @@ program
   .option('--reset', 'Remove morph-managed entries from .claude/settings.local.json')
   .action(doctorCommand);
 
-// ─── Status / inspection ──────────────────────────────────────────────────
 program
   .command('status <feature>')
   .description('Show feature status (phase, gate state, task counts)')
@@ -174,22 +145,21 @@ program
 
 program
   .command('list')
-  .description('List every feature × status × gates (G1/G2/G3) × workType — the audit board')
+  .description('List every feature × status × gates (G1 plan / Gd uiux / G3 review) × workType — the audit board')
   .option('--all', 'Include archived features (.morph/archive)')
   .option('--archived', 'Include archived features (alias of --all)')
   .option('--no-branch', 'Skip reading morph/{feature} for truth — report only what is on disk in this tree')
   .option('--json', 'Output as JSON')
   .action((options) => listCommand(options));
 
-// ─── Approval gates (dev-only) ────────────────────────────────────────────
 program
   .command('approve <feature> <gate>')
-  .description('Approve a phase gate (proposal, plan, review). Enforces gate order (N requires N-1)')
+  .description('Approve a phase gate (plan, uiux, review). Enforces gate order (uiux and review require plan)')
   .option('--approver <name>', 'Name of approver (default: current user when interactive, "auto" otherwise)')
   .option('--mode <mode>', 'Approval mode: "user" or "auto" (default: detected from TTY)')
   .option('--notes <notes>', 'Approval notes')
   .option('--force', 'Approve out of order (bypass the gate-monotonicity check)')
-  .option('--self-assessed', 'Gate 3 only: approve without 4-review/evaluator-report.md, recording the degradation in feature.json')
+  .option('--self-assessed', 'Gate 3 only: approve without the review reports (verifier.md, reviewer.md, security.md), recording the degradation in feature.json')
   .action((feature, gate, options) => approveCommand(feature, gate, options));
 
 program
@@ -197,7 +167,7 @@ program
   .description('Approve the current phase gate and scaffold the next phase folder (one step)')
   .option('--approver <name>', 'Name of approver (default: current user when interactive, "auto" otherwise)')
   .option('--mode <mode>', 'Approval mode: "user" or "auto" (default: detected from TTY)')
-  .option('--design', 'From proposal, advance into the optional design (uiux) phase instead of plan')
+  .option('--design', 'From plan, advance into the optional design (uiux) phase instead of implement')
   .option('--notes <notes>', 'Approval notes')
   .option('--force', 'Advance even if a prerequisite gate is unapproved (out-of-order recovery)')
   .action((feature, options) => advanceCommand(feature, options));
@@ -251,7 +221,7 @@ program
 program
   .command('gate-check <feature> <gate>')
   .description('Decide + record a gate\'s trust decision from disk-derived signals (shouldPauseGate) — the deterministic default; see gate-decision for the manual escape hatch')
-  .option('--signals <json>', 'Override ONLY standardsViolations/designSystemDivergence (not derivable from disk) — everything else is read from feature.json/tasks.json/git and cannot be overridden here')
+  .option('--signals <json>', 'Override ONLY standardsViolations/designSystemDivergence (not derivable from disk) — everything else is read from feature.json/checks.json/git and cannot be overridden here')
   .option('--trust <mode>', 'Trust mode to decide with (default: config.json → trust, or "auto")')
   .option('--json', 'Output as JSON')
   .action((feature, gateArg, options) => gateCheckCommand(feature, gateArg, options));
@@ -294,34 +264,6 @@ program
   .option('--here', 'Force building/writing in the current directory, even if another tree owns this feature')
   .action((feature, options) => handoffCommand(feature, options));
 
-// ─── Use cases ────────────────────────────────────────────────────────────
-const usecaseCommand = program
-  .command('usecase')
-  .description('Project-wide use cases: UC-{nn} numbering (acervo + every worktree of this repo) and the acervo lifecycle check');
-
-usecaseCommand
-  .command('reserve')
-  .description('Atomically reserve the next N UC-{nn} numbers, shared across every worktree of this repo — replaces the old max+1 disk scan, which collides across worktrees')
-  .option('--count <n>', 'How many numbers to reserve', '1')
-  .option('--feature <name>', 'Feature to record as the reservation owner (defaults to the sole active feature, if unambiguous) — also what the promotion collision guard compares against')
-  .option('--json', 'Output as JSON')
-  .action((options) => usecaseReserveCommand(options));
-
-usecaseCommand
-  .command('check <feature>')
-  .description('Check a feature against the acervo lifecycle: tasks citing a superseded UC, malformed supersession frontmatter, spec.md revocation rows the finish could not apply (plus the task/use-case plumbing dag checks, when tasks.json exists)')
-  .option('--json', 'Output as JSON')
-  .action((feature, options) => usecaseCheckCommand(feature, options));
-
-// ─── Tasks ────────────────────────────────────────────────────────────────
-program
-  .command('dag <feature>')
-  .description('Analyze the tasks.json DAG and print the sequential vs parallel dispatch decision (effort-weighted)')
-  .option('--json', 'Output as JSON')
-  .option('--mermaid', 'Emit the tasks.json DAG as a Mermaid flowchart (flowchart TD)')
-  .action((feature, options) => dagCommand(feature, options));
-
-// ─── Codebase graph ───────────────────────────────────────────────────────
 const graphCommand = program
   .command('graph')
   .description('Grafo de codebase (graphify) com saneamento determinístico — fail-open: sem grafo, tudo segue por grep');
@@ -363,7 +305,6 @@ graphCommand
   .option('--json', 'Output as JSON')
   .action((symbol, options) => graphExplainCommand(symbol, options));
 
-// ─── Validation ───────────────────────────────────────────────────────────
 program
   .command('validate [validator]')
   .description('Run project validations (all | packages | next-components | spec-tasks)')
@@ -388,24 +329,23 @@ program
   .action(validateFeatureCommand);
 
 program
-  .command('verify <feature> [task]')
+  .command('verify <feature>')
   .description('Run the deterministic verification chain (build + tests + validators + e2e) — code before the LLM judge')
   .option('--json', 'Output as JSON')
   .option('--timeout <ms>', 'Timeout in ms for the build AND tests nodes (build default 120000; tests default 120000 per test project, or project.testTimeoutMs)', (v) => parseInt(v, 10))
   .option('--filter <ids>', 'Run only the test nodes whose id matches (comma-separated; exact or substring). Unmatched nodes are reported as skip; matching nothing is a usage error (exit 2)')
   .option('--linux', 'Run the test nodes inside a Linux container, on a COPY of the tree (the host tree is mounted read-only and copied in — a bind mount is case-insensitive and cannot reproduce case defects). No Docker = usage error, never a skip')
   .option('--linux-image <img>', 'Image used by --linux (default: mcr.microsoft.com/dotnet/sdk:10.0)')
-  .option('--full', 'No escopo de task, desliga o recorte automático e roda todos os nós inteiros (o group da task não escolhe nós e os outputs não estreitam comandos). No escopo de feature não muda nada: ali nada é recortado')
-  .option('--record-baseline', 'Measure every test node and write expectedCount back into .morph/config/config.json (only from an all-green run at FEATURE scope; with a task id it is a usage error; never creates config.json)')
+  .option('--record-baseline', 'Measure every test node and write expectedCount back into .morph/config/config.json (only from an all-green run; never creates config.json)')
   .option('--refresh-cache', 'Rewrite the response cache of every `runner: "evals"` node against the real provider. NEVER implicit: a cache rewrite is a paid call nobody asked for. Requires the declared envFile; no eval node declared, --skip-tests, or a --filter that excludes them all are usage errors (exit 2), refused BEFORE the cache is touched')
-  .option('--skip-tests', 'Skip the test node. At feature scope the run is partial, so the verification stamp is NOT written (reason "skip-tests")')
-  .option('--skip-build', 'Skip the build node. At feature scope the run is partial, so the verification stamp is NOT written (reason "skip-build")')
+  .option('--skip-tests', 'Skip the test node. The run is partial, so the verification stamp is NOT written (reason "skip-tests")')
+  .option('--skip-build', 'Skip the build node. The run is partial, so the verification stamp is NOT written (reason "skip-build")')
   .option('--skip-e2e', 'Skip the e2e node (Docker bring-up + Playwright)')
   .option('--fresh-e2e', 'Recreate the e2e stack from scratch: down -v (named volumes included), drop the freshness stamp, rebuild, re-seed auth')
   .option('--no-persist', 'Do not persist the result to feature.json')
-  .option('--ci', 'Feature scope only: push morph/<feature> and take the proof from the project CI (creates .github/workflows/morph-verify.yml when no workflow runs verify). Same stamp, source "ci". No GitHub/gh/workflow = local verify with the reason; uncommitted code = exit 2; CI still running after 50 min = exit 3, no stamp')
-  .action((feature, task, options) =>
-    verifyCommand(feature, task, { ...options, noPersist: options.persist === false })
+  .option('--ci', 'Push morph/<feature> and take the proof from the project CI (creates .github/workflows/morph-verify.yml when no workflow runs verify). Same stamp, source "ci". No GitHub/gh/workflow = local verify with the reason; uncommitted code = exit 2; CI still running after 50 min = exit 3, no stamp')
+  .action((feature, options) =>
+    verifyCommand(feature, { ...options, noPersist: options.persist === false })
   );
 
 program
@@ -421,7 +361,6 @@ program
   .option('--json', 'Output as JSON')
   .action((feature, options) => mutateCommand(feature, options));
 
-// ─── Scaffolding ──────────────────────────────────────────────────────────
 const scaffoldCmd = program
   .command('scaffold')
   .description('Generate feature files from templates');
@@ -443,7 +382,6 @@ scaffoldCmd
   .option('-v, --verbose', 'Show detailed output')
   .action(scaffoldNextjsCommand);
 
-// ─── MCP setup ────────────────────────────────────────────────────────────
 const mcpCommand = program
   .command('mcp')
   .description('MCP server setup and configuration');
@@ -455,7 +393,6 @@ mcpCommand
   .option('--auto', 'Auto-install credential-free MCPs without prompts')
   .action((name, options) => mcpSetupCommand(name, options));
 
-// ─── Context refresh ──────────────────────────────────────────────────────
 const contextCommand = program
   .command('context')
   .description('Project context management (refresh)');
@@ -468,7 +405,6 @@ contextCommand
   .option('--json', 'Output scan result as JSON')
   .action((options) => contextRefreshCommand(options));
 
-// ─── E2E stack (Docker bring-up for runtime verification) ─────────────────
 const e2eCommand = program
   .command('e2e')
   .description("Lifecycle of the feature's verification stack (docker compose)");
@@ -493,7 +429,6 @@ e2eCommand
   .option('--json', 'Output as JSON')
   .action((feature, options) => e2eDownCommand(feature, options));
 
-// ─── Heavy nodes (build, tests, e2e) ─────────────────────────────────────
 const heavyCommand = program
   .command('heavy')
   .description('Slots por usuário para os nós pesados (build, testes, e2e), compartilhados entre as sessões');
@@ -510,7 +445,6 @@ heavyCommand
   .option('--label <label>', 'Nome do que roda, mostrado a quem espera pelo slot')
   .action((command, options) => heavyRunCommand(command, options));
 
-// ─── Worktree (optional, isolation) ───────────────────────────────────────
 const worktreeCommand = program
   .command('worktree')
   .description('Manage git worktrees for feature isolation');
@@ -522,10 +456,6 @@ worktreeCommand
   .option('--json', 'Output as JSON (always JSON — accepted so the WorktreeCreate hook can call setup and provision uniformly)')
   .action((feature, options) => worktreeSetupCommand(feature, options));
 
-// Task isolation — the tree `claude -w`, EnterWorktree and Agent
-// isolation:"worktree" ask for when the name is NOT a feature. Same infra as
-// setup (junctions, port block, git-invisible manifest, primary-root landing),
-// no feature identity. The WorktreeCreate hook is its main caller.
 worktreeCommand
   .command('provision <name>')
   .description('Create a task-isolation worktree at worktrees/{name}/ on branch morph-task/{name} — full morph infra, no feature identity')
@@ -540,10 +470,8 @@ worktreeCommand
   .option('--all', 'Link all shared dirs, not just node_modules')
   .action((options) => worktreeLinkCommand(options));
 
-// The SAFE removal — it drops the infra junctions before letting git near the
-// directory. Raw `git worktree remove` follows them out and empties the primary
-// root's .claude/ and .morph/framework/, so nothing in this repo (message, doc,
-// or skill) may point at it; they all point here.
+// Raw `git worktree remove` follows the infra junctions and empties the primary root's .claude/
+// and .morph/framework/: nothing in this repo may point at it, only at this command.
 worktreeCommand
   .command('remove [feature]')
   .description('Safely tear down a worktree (drops infra junctions first, PROVE-or-DECLINE) — does NOT close the feature; that is `finish`')
@@ -554,9 +482,6 @@ worktreeCommand
   .option('--json', 'Output as JSON (always JSON)')
   .action((feature, options) => worktreeRemoveCommand(feature, options));
 
-// Sub-agent trees (`agent-<hex>` on `morph-task/agent-<hex>`) outlive the agent: nothing
-// tells the harness the agent is done with its worktree. The reaper removes only what it can prove
-// is finished and lost-proof; the rest is listed with the reason.
 worktreeCommand
   .command('reap')
   .description('Remove the worktrees and branches of sub-agents that stopped clean (nothing uncommitted, no commit only they hold); everything else is listed with the reason and left alone')
@@ -571,11 +496,6 @@ worktreeCommand
   .option('--json', 'Output as JSON')
   .action((options) => worktreeListCommand(options));
 
-// ─── Branch housekeeping ──────────────────────────────────────────────────
-// `git branch --merged` cannot see a squash-merge, so the only command left for
-// a squash-merged branch is `git branch -D` — indistinguishable from discarding
-// real work. `prune` makes the distinction itself and deletes only what it
-// proved is already integrated.
 const branchCommand = program
   .command('branch')
   .description('Local branch housekeeping');
@@ -588,7 +508,6 @@ branchCommand
   .option('--json', 'Output as JSON')
   .action((options) => branchPruneCommand(options));
 
-// ─── Worktree env (shell-loadable port block) ─────────────────────────────
 program
   .command('env [feature]')
   .description('Print the worktree\'s dedicated environment (port block + COMPOSE_PROJECT_NAME), shell-loadable: eval "$(morph-spec env)" outside Claude Code; feature defaults to the morph/{f} or morph-task/{n} branch of cwd')
@@ -596,14 +515,12 @@ program
   .option('--powershell', 'Emit $env:K="V" lines instead of POSIX exports')
   .action((feature, options) => envCommand(feature, options));
 
-// ─── Fleet ────────────────────────────────────────────────────────────────
 program
   .command('fleet')
   .description('Fleet view — every active feature across primary root and worktrees (phase, gates, tasks, ports, handoff, activity)')
   .option('--json', 'Output as JSON')
   .action((options) => fleetCommand(options));
 
-// ─── Claims (advisory feature ownership) ──────────────────────────────────
 program
   .command('claim [feature]')
   .description('claim [feature] acquires it (moves this tree\'s previous claim in the same step); no args shows the board (claims are advisory warnings, never locks)')
@@ -613,23 +530,22 @@ program
   .option('--json', 'Output as JSON')
   .action((feature, options) => claimCommand(feature, options));
 
-// ─── Standards search (server-side, R2 token cut) ─────────────────────────
 program
   .command('standards')
-  .description('Search STANDARDS.json server-side (top 3, full digest) instead of reading the whole registry. No --find: list categories + counts')
+  .description('Search STANDARDS.json server-side (top 3, digest + anchors) or print one section, instead of reading the whole registry. Bare: categories + counts')
   .option('--find <query>', 'Search query — matches name/id, tags/aliases, category, digest')
+  .option('--show <target>', '<id>: digest + anchors; <id>#<anchor>: only that section of the standard .md')
   .option('--category <category>', 'Restrict --find to a single category')
   .option('--tags <tags>', 'Restrict --find to standards carrying any of these comma-separated tags')
   .option('--json', 'Output as JSON')
   .action((options) => standardsCommand(options));
 
-// ─── Sub-agent report protocol ────────────────────────────────────────────
 program
-  .command('report-check <feature> [tasks...]')
-  .description('Audit sub-agent report files against the work that actually landed. Answers "did the WORK land even though the REPORT did not" — exits 0 only when everything is intact. Several task ids audit a parallel batch in one call')
-  .option('--before-eval', 'Save a snapshot of the tree before dispatching the evaluator; later runs report what changed since')
+  .command('report-check <feature> [slices...]')
+  .description('Audit slice report files (3-implement/reports/{slice}.md) against the work the dispatch actually wrote (telemetry, keyed by the agent that wrote the report). Exits 0 only when every audited slice is intact; naming slices audits only those')
+  .option('--before-eval', 'Save a snapshot of the tree before dispatching the review agents and print their models; later runs report what changed since')
   .option('--json', 'Output as JSON')
-  .action((feature, tasks, options) => reportCheckCommand(feature, tasks.length > 1 ? tasks : tasks[0], options));
+  .action((feature, slices, options) => reportCheckCommand(feature, slices, options));
 
 program
   .command('scout-check <map>')
@@ -638,7 +554,20 @@ program
   .option('--json', 'Output as JSON')
   .action((map, options) => scoutCheckCommand(map, options));
 
-// ─── Dashboard ────────────────────────────────────────────────────────────
+program
+  .command('plan-check <feature>')
+  .description('Parse 2-plan/plan.md (scenarios, slices, decisions, reuse) and, with no error, write 2-plan/checks.json — the only writer of checks.json. Refuses to rewrite it once the plan gate is approved and the plan changed outside ## Errata. Exits 1 on errors, 2 when plan.md is missing')
+  .option('--json', 'Output as JSON')
+  .addHelpText('after', () => '\nGramática (framework/templates/docs/plan.md):\n\n' +
+    readFileSync(join(__dirname, '..', 'framework', 'templates', 'docs', 'plan.md'), 'utf8').replace(/\{\{FEATURE_NAME\}\}/g, '<feature>'))
+  .action((feature, options) => planCheckCommand(feature, options));
+
+program
+  .command('stack-scan [feature]')
+  .description('Audit the code against config.project.stack, judging only the configured stacks (runtime, ORM, database, Guid.NewGuid, generic repository, service layer, raw SQL, sealed, router, UI library) by severity. With a feature, write .morph/features/<f>/2-plan/stack-scan.md; without, print the report')
+  .option('--json', 'Output as JSON')
+  .action((feature, options) => stackScanCommand(feature, options));
+
 program
   .command('dashboard')
   .description('Open the morph-spec inspector dashboard')
@@ -646,7 +575,6 @@ program
   .option('--no-open', 'Don\'t auto-open browser')
   .action(dashboardCommand);
 
-// ─── Observability ────────────────────────────────────────────────────────
 program
   .command('telemetry')
   .description('Summarize the harness execution path from .morph/logs/events.jsonl (skills, personas, standards read, tool mix, prompts)')
@@ -657,10 +585,10 @@ program
 
 program
   .command('cost [feature]')
-  .description('Cost-facing view over .morph/logs/events.jsonl: task duration, bytes re-ingested by kind (proxy, not tokens), dispatch counts')
-  .option('--by <mode>', 'Group by: task|phase (default: feature-wide summary; with --all-trees, applies to the combined aggregate)')
+  .description('Cost-facing view over .morph/logs/events.jsonl: bytes re-ingested by kind (proxy, not tokens), dispatch counts, real tokens when observed')
+  .option('--by <mode>', 'Group by: phase (default: feature-wide summary; with --all-trees, applies to the combined aggregate)')
   .option('--all-trees', 'Aggregate across every git worktree with a log plus the logs finish saved in .git/morph-spec/finish-backup — per-tree breakdown + combined total')
-  .option('--metrics', 'Loop measurements: turns, tool calls (orchestrator x sub-agent), time per command class, identical reruns, rereads, feature verify count, git per task, reuse validator per tree')
+  .option('--metrics', 'Loop measurements: turns, tool calls (orchestrator x sub-agent), time per command class, identical reruns, rereads, verify count per feature, git calls, reuse validator per tree')
   .option('--top <n>', 'With --metrics: how many reread files to list (default 10)', (v) => Number.parseInt(v, 10))
   .option('--json', 'Output the aggregate as JSON')
   .action((feature, options) => costCommand(feature, options));

package/bin/validate.js

@@ -1,32 +1,8 @@
 #!/usr/bin/env node
 
-/**
- * Validation CLI
- *
- * Runs validators for the current project stack (detected from .morph/config/config.json).
- *
- * .NET stacks:       packages, spec-tasks
- * Next.js stack:      next-components, spec-tasks
- * Other stacks:       spec-tasks
- *
- * Usage:
- *   morph-spec validate [options]
- *   morph-spec validate all
- *   morph-spec validate next-components  (Next.js projects)
- *   morph-spec validate packages         (.NET projects)
- *
- * MORPH-SPEC 3.0
- */
-
 import chalk from 'chalk';
 import { getStackProfile } from '../src/lib/stack/stack-profile.js';
 
-/**
- * Build the VALIDATORS registry for the current stack.
- * .NET stacks  → packages, spec-tasks
- * nextjs stack → next-components, spec-tasks
- * other stacks → spec-tasks only
- */
 async function buildValidators(stack) {
   const validators = {};
 
@@ -52,114 +28,9 @@ async function buildValidators(stack) {
     };
   }
 
-  validators['spec-tasks'] = {
-    name: 'Spec vs Tasks Coverage',
-    description: 'Validates that tasks.json covers all requirements from spec.md',
-    run: validateSpecVsTasks
-  };
-
   return validators;
 }
 
-/**
- * Validate spec.md requirements are covered by tasks
- */
-async function validateSpecVsTasks(projectPath, options = {}) {
-  const path = await import('path');
-  const fs = await import('fs');
-  const { loadState } = await import('../src/core/state/state-manager.js');
-
-  const results = [];
-  let errors = 0;
-  let warnings = 0;
-
-  try {
-    const state = loadState(false);
-    if (!state || !state.features) {
-      return { status: 'ok', errors: 0, warnings: 0, message: 'No features to validate' };
-    }
-
-    for (const [featureName, feature] of Object.entries(state.features)) {
-      const outputsPath = path.join(projectPath, '.morph/features', featureName);
-      const specPath = path.join(outputsPath, 'spec.md');
-
-      if (!fs.existsSync(specPath)) {
-        continue; // No spec to validate
-      }
-
-      // Read spec.md and extract requirements
-      const specContent = fs.readFileSync(specPath, 'utf-8');
-
-      // Extract requirement patterns (## Requisitos, - [ ], numbered lists, etc.)
-      const requirementPatterns = [
-        /^#+\s*Requisitos?\s*$/gim,
-        /^-\s*\[.\]\s*(.+)$/gm,
-        /^\d+\.\s+(.+)$/gm
-      ];
-
-      const requirements = [];
-      for (const pattern of requirementPatterns) {
-        const matches = specContent.matchAll(pattern);
-        for (const match of matches) {
-          if (match[1]) {
-            requirements.push(match[1].trim());
-          }
-        }
-      }
-
-      // Check if feature has tasks
-      if (!feature.tasks || (Array.isArray(feature.tasks) && feature.tasks.length === 0)) {
-        if (requirements.length > 0) {
-          warnings++;
-          results.push({
-            feature: featureName,
-            level: 'warning',
-            message: `Spec has ${requirements.length} requirements but no tasks defined`
-          });
-        }
-        continue;
-      }
-
-      // Get task titles
-      const taskTitles = Array.isArray(feature.tasks)
-        ? feature.tasks.map(t => t.title?.toLowerCase() || '')
-        : [];
-
-      // Check each requirement has a matching task (fuzzy match)
-      for (const req of requirements.slice(0, 20)) { // Limit to first 20
-        const reqLower = req.toLowerCase();
-        const hasMatch = taskTitles.some(title =>
-          title.includes(reqLower.slice(0, 20)) ||
-          reqLower.includes(title.slice(0, 20))
-        );
-
-        if (!hasMatch && options.verbose) {
-          console.log(chalk.gray(`  ? Requirement may not be covered: "${req.slice(0, 50)}..."`));
-        }
-      }
-
-      if (options.verbose) {
-        console.log(chalk.green(`  ✓ ${featureName}: ${requirements.length} requirements, ${taskTitles.length} tasks`));
-      }
-    }
-
-  } catch (error) {
-    if (options.verbose) {
-      console.log(chalk.yellow(`  ⚠ Could not validate: ${error.message}`));
-    }
-  }
-
-  return {
-    status: errors > 0 ? 'error' : warnings > 0 ? 'warning' : 'ok',
-    errors,
-    warnings,
-    results
-  };
-}
-
-/**
- * Main validation command
- */
 export async function validateCommand(args = []) {
   const validatorName = args[0] || 'all';
   const options = parseOptions(args);
@@ -187,9 +58,6 @@ export async function validateCommand(args = []) {
   }
 }
 
-/**
- * Run all validators
- */
 async function runAllValidators(VALIDATORS, options) {
   const results = {};
   let totalErrors = 0;
@@ -209,12 +77,10 @@ async function runAllValidators(VALIDATORS, options) {
 
       results[name] = result;
 
-      // Count errors/warnings
       if (result.errors !== undefined) {
         totalErrors += result.errors;
         totalWarnings += result.warnings || 0;
       } else if (result.results) {
-        // Count issues in results array
         const issues = result.results.flatMap(r => r.issues || []);
         totalErrors += issues.filter(i => i.level === 'error').length;
         totalWarnings += issues.filter(i => i.level === 'warning').length;
@@ -226,7 +92,6 @@ async function runAllValidators(VALIDATORS, options) {
     }
   }
 
-  // Summary
   console.log(chalk.bold.cyan('\n━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n'));
   console.log(chalk.bold('📊 Validation Summary\n'));
 
@@ -243,15 +108,11 @@ async function runAllValidators(VALIDATORS, options) {
 
   console.log('');
 
-  // Exit with error code if errors found
   if (totalErrors > 0 && !options.noFail) {
     process.exit(1);
   }
 }
 
-/**
- * Run single validator
- */
 async function runValidator(VALIDATORS, name, options) {
   const validator = VALIDATORS[name];
 
@@ -260,7 +121,7 @@ async function runValidator(VALIDATORS, name, options) {
 
   try {
     const result = await validator.run('.', {
-      verbose: true, // Always verbose for single validator
+      verbose: true,
       autoFix: options.autoFix
     });
 
@@ -282,9 +143,6 @@ async function runValidator(VALIDATORS, name, options) {
   }
 }
 
-/**
- * Parse command-line options
- */
 function parseOptions(args) {
   const options = {
     verbose: false,
@@ -305,9 +163,6 @@ function parseOptions(args) {
   return options;
 }
 
-/**
- * Show help
- */
 export function showValidateHelp() {
   console.log(`
 ${chalk.bold.cyan('morph-spec validate')} - Run project validations
@@ -342,7 +197,6 @@ ${chalk.bold('INTEGRATION')}
 `);
 }
 
-// Run if called directly
 if (import.meta.url === `file://${process.argv[1]}`) {
   const args = process.argv.slice(2);
 

package/claude-plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "morph-spec",
-  "version": "8.47.0",
+  "version": "9.1.0",
   "displayName": "MORPH-SPEC Framework",
   "description": "Spec-driven development with 38 agents and 8-phase workflow for .NET/Blazor/Next.js/Azure",
   "publisher": "polymorphism-tech",