@polymorphism-tech/morph-spec 9.3.0 → 9.5.0

package/framework/templates/frontend/nextjs/feature-form.tsx.hbs

@@ -1,56 +1,54 @@
-// features/{{kebabCase featureName}}/components/create-{{kebabCase featureName}}-form.tsx
-'use client';
-
-import { useForm } from 'react-hook-form';
-import { zodResolver } from '@hookform/resolvers/zod';
-import { Form, FormControl, FormField, FormItem, FormLabel, FormMessage } from '@/components/ui/form';
-import { Input } from '@/components/ui/input';
-import { Button } from '@/components/ui/button';
-import { useCreate{{pascalCase featureName}} } from '@/features/{{kebabCase featureName}}/hooks/use-create-{{kebabCase featureName}}';
-import { create{{pascalCase featureName}}Schema, type Create{{pascalCase featureName}}Input } from '@/features/{{kebabCase featureName}}/types/{{kebabCase featureName}}.schemas';
-
-interface Create{{pascalCase featureName}}FormProps {
-  onSuccess?: () => void;
-}
-
-export function Create{{pascalCase featureName}}Form({ onSuccess }: Create{{pascalCase featureName}}FormProps) {
-  const form = useForm<Create{{pascalCase featureName}}Input>({
-    resolver: zodResolver(create{{pascalCase featureName}}Schema),
-    defaultValues: { name: '' },
-  });
-
-  const { mutate: create{{pascalCase featureName}}, isPending } = useCreate{{pascalCase featureName}}();
-
-  function onSubmit(values: Create{{pascalCase featureName}}Input) {
-    create{{pascalCase featureName}}(values, {
-      onSuccess: () => { form.reset(); onSuccess?.(); },
-      onError: (error) => { form.setError('root', { message: error.message }); },
-    });
-  }
-
-  return (
-    <Form {...form}>
-      <form onSubmit={form.handleSubmit(onSubmit)} className="space-y-4">
-        <FormField
-          control={form.control}
-          name="name"
-          render={({ field }) => (
-            <FormItem>
-              <FormLabel>Name</FormLabel>
-              <FormControl>
-                <Input placeholder="Enter name" {...field} />
-              </FormControl>
-              <FormMessage />
-            </FormItem>
-          )}
-        />
-        {form.formState.errors.root && (
-          <p className="text-sm text-destructive">{form.formState.errors.root.message}</p>
-        )}
-        <Button type="submit" disabled={isPending}>
-          {isPending ? 'Creating...' : 'Create {{pascalCase featureName}}'}
-        </Button>
-      </form>
-    </Form>
-  );
-}
+// features/{{kebabCase featureName}}/components/create-{{kebabCase featureName}}-form.tsx
+'use client';
+
+import { Controller, useForm } from 'react-hook-form';
+import { zodResolver } from '@hookform/resolvers/zod';
+import { Field, FieldError, FieldGroup, FieldLabel } from '@/components/ui/field';
+import { Input } from '@/components/ui/input';
+import { Button } from '@/components/ui/button';
+import { useCreate{{pascalCase featureName}} } from '@/features/{{kebabCase featureName}}/hooks/use-create-{{kebabCase featureName}}';
+import { create{{pascalCase featureName}}Schema, type Create{{pascalCase featureName}}Input } from '@/features/{{kebabCase featureName}}/types/{{kebabCase featureName}}.schemas';
+
+interface Create{{pascalCase featureName}}FormProps {
+  onSuccess?: () => void;
+}
+
+export function Create{{pascalCase featureName}}Form({ onSuccess }: Create{{pascalCase featureName}}FormProps) {
+  const form = useForm<Create{{pascalCase featureName}}Input>({
+    resolver: zodResolver(create{{pascalCase featureName}}Schema),
+    defaultValues: { name: '' },
+  });
+
+  const { mutate: create{{pascalCase featureName}}, isPending } = useCreate{{pascalCase featureName}}();
+
+  function onSubmit(values: Create{{pascalCase featureName}}Input) {
+    create{{pascalCase featureName}}(values, {
+      onSuccess: () => { form.reset(); onSuccess?.(); },
+      onError: (error) => { form.setError('root', { message: error.message }); },
+    });
+  }
+
+  return (
+    <form onSubmit={form.handleSubmit(onSubmit)}>
+      <FieldGroup>
+        <Controller
+          name="name"
+          control={form.control}
+          render={({ field, fieldState }) => (
+            <Field data-invalid={fieldState.invalid}>
+              <FieldLabel htmlFor={field.name}>Name</FieldLabel>
+              <Input {...field} id={field.name} aria-invalid={fieldState.invalid} placeholder="Enter name" />
+              {fieldState.invalid && <FieldError errors={[fieldState.error]} />}
+            </Field>
+          )}
+        />
+        {form.formState.errors.root && (
+          <p className="text-sm text-destructive">{form.formState.errors.root.message}</p>
+        )}
+        <Button type="submit" disabled={isPending}>
+          {isPending ? 'Creating...' : 'Create {{pascalCase featureName}}'}
+        </Button>
+      </FieldGroup>
+    </form>
+  );
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@polymorphism-tech/morph-spec",
-  "version": "9.3.0",
+  "version": "9.5.0",
   "description": "MORPH-SPEC: NLH (Natural Language Harness) for spec-driven development with Claude Code",
   "keywords": [
     "claude-code",
@@ -56,7 +56,8 @@
     "docs:serve": "npx http-server docs/api -p 8080 -o",
     "release": "node scripts/release.js",
     "prepublishOnly": "node scripts/prepublish-check.js",
-    "postinstall": "node src/scripts/global-install.js"
+    "postinstall": "node src/scripts/global-install.js",
+    "publish:web": "node scripts/publish-web.mjs"
   },
   "dependencies": {
     "chalk": "^5.3.0",

package/src/commands/project/worktree.js

@@ -743,7 +743,7 @@ export async function clearRootWorktreeRegistration(root, feature, { stamp } = {
     let unchanged = true;
     try { execFileSync('git', ['diff', '--quiet', 'HEAD', '--', featPathspec], gitOpts); } catch { unchanged = false; }
     if (!unchanged) {
-      execFileSync('git', ['commit', '-m', `morph-spec finish: clear ${feature} worktree registration`, '--', featPathspec], gitOpts);
+      execFileSync('git', ['commit', '-m', `chore(morph): clear ${feature} worktree registration`, '--', featPathspec], gitOpts);
     }
   } catch { /* fail-open — a dirty root is a nuisance, not a reason to fail */ }
   return { shedBackup: null };

package/src/commands/state/archive.js

@@ -123,7 +123,7 @@ export function runArchive(feature, opts = {}) {
       ...(adrIndex.changed ? [ADR_INDEX_PATHSPEC] : []),
     ];
     try {
-      execFileSync('git', ['commit', '-m', `morph-spec archive: ${feature}`, '--', ...pathspecs], { cwd, stdio: 'pipe' });
+      execFileSync('git', ['commit', '-m', `chore(morph): archive ${feature}`, '--', ...pathspecs], { cwd, stdio: 'pipe' });
       committed = true;
     } catch { /* nothing to commit / no identity — not fatal, the move + stage stand */ }
   }

package/src/commands/state/finish.js

@@ -494,7 +494,7 @@ export function finishPreflight({ feature, root, worktreePath, cwd, mode, branch
 }
 
 async function integrateMerge({ emit, root, feature, expectedBranch, defaultBranch, isWorktreeFlow, worktreePath, options, arch, backupStamp }) {
-  const mergeMsg = `morph-spec finish: merge ${expectedBranch}`;
+  const mergeMsg = `chore(morph): merge ${expectedBranch}`;
   const adrNote = adrIndexNote(arch);
 
   if (isWorktreeFlow) {

package/src/core/paths/output-schema.js

@@ -43,15 +43,6 @@ export function getFeatureDir(featureName) {
   return join('.morph', 'features', featureName).replace(/\\/g, '/');
 }
 
-export function getTaskReportPath(featureName, taskId) {
-  return join('.morph', 'features', featureName, '3-implement', 'reports', `${taskId}.md`)
-    .replace(/\\/g, '/');
-}
-
-export function getAbsoluteTaskReportPath(projectRoot, featureName, taskId) {
-  return join(projectRoot, '.morph', 'features', featureName, '3-implement', 'reports', `${taskId}.md`);
-}
-
 /** `multi` types contribute their directory, so `created` means "the folder exists". */
 export function getAllOutputPaths(featureName) {
   const outputs = {};

package/src/core/state/feature-identity.js

@@ -1,5 +1,3 @@
-export const IDENTITY_FIELDS = ['name', 'description', 'workType', 'createdAt'];
-
 const blank = (v) => v === undefined || v === null || String(v).trim() === '';
 
 // `workType` is excluded on purpose: absent, it defaults to `feature`.

package/src/core/state/state-manager.js

@@ -1,4 +1,4 @@
-import { readFileSync, writeFileSync, renameSync, unlinkSync, existsSync, mkdirSync, rmdirSync, statSync, readdirSync } from 'fs';
+import { readFileSync, writeFileSync, renameSync, unlinkSync, existsSync, mkdirSync, readdirSync } from 'fs';
 import { join, dirname } from 'path';
 import { getAllOutputPaths, getOutputPath } from '../paths/output-schema.js';
 import { derivePhaseFrom, diskArtifactProbe } from '../../../framework/hooks/shared/state-reader.js';
@@ -248,41 +248,6 @@ export function saveState(state) {
   });
 }
 
-const LOCK_DIR_NAME = '.morph/state.json.lock';
-const LOCK_MAX_RETRIES = 5;
-const LOCK_BASE_MS = 100;
-const LOCK_STALE_MS = 30_000;
-
-export async function withStateLock(fn) {
-  const lockPath = join(process.cwd(), LOCK_DIR_NAME);
-
-  for (let attempt = 0; attempt <= LOCK_MAX_RETRIES; attempt++) {
-    try {
-      mkdirSync(lockPath);
-      break;
-    } catch (err) {
-      if (err.code !== 'EEXIST') throw err;
-      try {
-        const lockStat = statSync(lockPath);
-        if (Date.now() - lockStat.mtimeMs > LOCK_STALE_MS) {
-          try { rmdirSync(lockPath); } catch { }
-          continue;
-        }
-      } catch { }
-      if (attempt === LOCK_MAX_RETRIES) {
-        throw new Error('Could not acquire state lock after retries');
-      }
-      Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, LOCK_BASE_MS * (2 ** attempt));
-    }
-  }
-
-  try {
-    return await fn();
-  } finally {
-    try { rmdirSync(lockPath); } catch { }
-  }
-}
-
 export function initState(options = {}) {
   const { force = false, projectName = '{PROJECT_NAME}', projectType = 'dotnet-nextjs' } = options;
 
@@ -402,29 +367,6 @@ export async function updateFeature(featureName, key, value) {
   saveState(state);
 }
 
-export async function updateFeatureMultiple(featureName, updates) {
-  await ensureFeature(featureName);
-  const state = loadState(); // Load AFTER ensuring feature exists
-
-  for (const [key, value] of Object.entries(updates)) {
-    const keys = key.split('.');
-    let target = state.features[featureName];
-
-    for (let i = 0; i < keys.length - 1; i++) {
-      if (!target[keys[i]]) {
-        target[keys[i]] = {};
-      }
-      target = target[keys[i]];
-    }
-
-    const finalKey = keys[keys.length - 1];
-    target[finalKey] = value;
-  }
-
-  state.features[featureName].updatedAt = new Date().toISOString();
-  saveState(state);
-}
-
 function normalizeOutputType(type) {
   if (!type.includes('-')) {
     return type;
@@ -544,91 +486,6 @@ export async function markOutput(featureName, outputType) {
   saveState(state);
 }
 
-export async function trackFileChange(featureName, filePath, action, phase) {
-  await ensureFeature(featureName);
-  const state = loadState();
-
-  if (!Array.isArray(state.features[featureName].fileChanges)) {
-    state.features[featureName].fileChanges = [];
-  }
-
-  state.features[featureName].fileChanges.push({
-    path: filePath,
-    action,
-    phase: phase || state.features[featureName].phase || 'plan',
-    timestamp: new Date().toISOString()
-  });
-
-  state.features[featureName].updatedAt = new Date().toISOString();
-  saveState(state);
-}
-
-export function getFileChanges(featureName, options = {}) {
-  const state = loadState();
-  const feature = state.features[featureName];
-
-  if (!feature) {
-    throw new Error(`Feature '${featureName}' not found.`);
-  }
-
-  const changes = feature.fileChanges || [];
-
-  if (options.groupByPhase) {
-    const grouped = {};
-    for (const change of changes) {
-      const phase = change.phase || 'unknown';
-      if (!grouped[phase]) grouped[phase] = [];
-      grouped[phase].push(change);
-    }
-    return grouped;
-  }
-
-  return changes;
-}
-
-export async function skipPhase(featureName, phase, reason = '') {
-  await ensureFeature(featureName);
-  const state = loadState();
-
-  if (!state.features[featureName].skippedPhases) {
-    state.features[featureName].skippedPhases = [];
-  }
-
-  const existing = state.features[featureName].skippedPhases.find(s => s.phase === phase);
-  if (!existing) {
-    state.features[featureName].skippedPhases.push({
-      phase,
-      reason,
-      timestamp: new Date().toISOString()
-    });
-  }
-
-  state.features[featureName].updatedAt = new Date().toISOString();
-  saveState(state);
-}
-
-export function getSkippedPhases(featureName) {
-  const state = loadState();
-  if (!state.features[featureName]) {
-    return [];
-  }
-  return state.features[featureName].skippedPhases || [];
-}
-
-export function listFeatures() {
-  const state = loadState();
-  return Object.entries(state.features);
-}
-
-export function getSummary() {
-  const state = loadState();
-  return {
-    project: state.project,
-    metadata: state.metadata,
-    featuresCount: Object.keys(state.features).length
-  };
-}
-
 export async function setApprovalGate(featureName, gate, approved, metadata = {}) {
   const state = loadState();
   const feature = await ensureFeature(featureName);
@@ -666,31 +523,6 @@ export function getApprovalGate(featureName, gate) {
   return feature.approvalGates[gate] || null;
 }
 
-export function isPendingApproval(featureName) {
-  const state = loadState();
-  const feature = state.features[featureName];
-
-  if (!feature || !feature.approvalGates) {
-    return false;
-  }
-
-  const currentPhase = feature.phase || 'plan';
-
-  const phaseGateMap = {
-    'plan': 'plan',
-    'review': 'review',
-    'uiux': 'uiux'
-  };
-
-  const relevantGate = phaseGateMap[currentPhase];
-  if (!relevantGate) {
-    return false;
-  }
-
-  const gate = feature.approvalGates[relevantGate];
-  return gate && !gate.approved;
-}
-
 export function getApprovalHistory(featureName) {
   const state = loadState();
   const feature = state.features[featureName];

package/src/core/templates/template-registry.js

@@ -36,7 +36,7 @@ export function clearRegistryCache() {
   _registryCache.clear();
 }
 
-export function getAllTemplates(projectPath = null) {
+function getAllTemplates(projectPath = null) {
   const registry = loadTemplateRegistry(projectPath);
   return registry.templates || [];
 }
@@ -46,48 +46,6 @@ export function getTemplateById(templateId, projectPath = null) {
   return templates.find(t => t.id === templateId) || null;
 }
 
-export function getTemplatesByCategory(category, projectPath = null) {
-  const templates = getAllTemplates(projectPath);
-  return templates.filter(t => t.category === category);
-}
-
-export function getTemplatesByStack(stackId, projectPath = null) {
-  const templates = getAllTemplates(projectPath);
-  return templates.filter(t => {
-    if (!t.stackSpecific) return true;
-
-    return t.stacks && t.stacks.includes(stackId);
-  });
-}
-
-export function getRequiredTemplates(stackId = null, projectPath = null) {
-  let templates = getAllTemplates(projectPath);
-
-  templates = templates.filter(t => t.required === true);
-
-  if (stackId) {
-    templates = templates.filter(t => {
-      if (!t.stackSpecific) return true;
-      return t.stacks && t.stacks.includes(stackId);
-    });
-  }
-
-  return templates;
-}
-
-export function searchTemplates(keyword, projectPath = null) {
-  const templates = getAllTemplates(projectPath);
-  const lowerKeyword = keyword.toLowerCase();
-
-  return templates.filter(t => {
-    return (
-      t.id.toLowerCase().includes(lowerKeyword) ||
-      t.name.toLowerCase().includes(lowerKeyword) ||
-      (t.description && t.description.toLowerCase().includes(lowerKeyword))
-    );
-  });
-}
-
 const FRAMEWORK_TEMPLATES_DIR = join(__dirname, '../../../framework/templates');
 
 /** Path inside this package's `framework/templates/`, not a project's `.morph/`; throws when missing. */

package/src/core/templates/template-renderer.js

@@ -340,15 +340,6 @@ export function renderTemplateString(templateString, variables, options = {}) {
   }
 }
 
-export function getTemplatePlaceholders(templatePath) {
-  if (!existsSync(templatePath)) {
-    throw new Error(`Template file not found: ${templatePath}`);
-  }
-
-  const templateContent = readFileSync(templatePath, 'utf-8');
-  return getTemplatePlaceholdersFromString(templateContent);
-}
-
 export function getTemplatePlaceholdersFromString(templateString) {
   const placeholders = new Set();
 
@@ -380,18 +371,4 @@ export function getTemplatePlaceholdersFromString(templateString) {
   return Array.from(placeholders).sort();
 }
 
-export function validateTemplatePlaceholders(templatePath, variables, optionalPlaceholders = []) {
-  const placeholders = getTemplatePlaceholders(templatePath);
-  const providedKeys = Object.keys(variables);
-
-  const missing = placeholders.filter(
-    p => !providedKeys.includes(p) && !optionalPlaceholders.includes(p)
-  );
-
-  return {
-    valid: missing.length === 0,
-    missing
-  };
-}
-
 export { Handlebars };

package/src/dashboard/app/lib/format.js

@@ -48,13 +48,6 @@ export function bytes(n) {
   return `${(n / 1024 / 1024).toFixed(1)} MB`;
 }
 
-export function duration(seconds) {
-  if (typeof seconds !== 'number' || !Number.isFinite(seconds) || seconds <= 0) return '—';
-  const m = Math.round(seconds / 60);
-  if (m < 60) return `${m} min`;
-  return `${Math.floor(m / 60)} h ${m % 60} min`;
-}
-
 export function splitFrontmatter(text) {
   const m = /^---\r?\n([\s\S]*?)\r?\n---\r?\n?/.exec(text || '');
   if (!m) return { meta: null, body: text || '' };

package/src/dashboard/app/lib/phases.js

@@ -36,13 +36,6 @@ export const STATUS_LABEL = {
   abandoned: 'Abandonada',
 };
 
-export const WORKTYPE_LABEL = {
-  feature: 'feature',
-  bug: 'bug',
-  chore: 'chore',
-  hotfix: 'hotfix',
-};
-
 export const LOCATION_LABEL = {
   root: 'raiz',
   worktree: 'worktree',

package/src/dashboard/scanner/activity-scanner.js

@@ -145,10 +145,6 @@ export function lastActivityByFeature(events) {
   return out;
 }
 
-export function loadProjectEvents(projectDir) {
-  return dedupeEvents(loadTelemetryAllTrees(projectDir).flatMap((t) => t.events));
-}
-
 const LIVE_LOG = join('.morph', 'logs', 'events.jsonl');
 
 function eventKey(e) {

package/src/lib/ai/ai-project-scan.js

@@ -2,7 +2,7 @@
 // `[]` é "perguntei e não achei". Worktrees ficam fora: são o checkout de outra feature.
 
 import { readdirSync, readFileSync, statSync, existsSync } from 'node:fs';
-import { join, basename } from 'node:path';
+import { join } from 'node:path';
 import { WORKTREE_DIR_NAMES } from '../worktree/dirs.js';
 
 export const SCAN_IGNORED_DIRS = new Set([
@@ -246,8 +246,3 @@ export function findPackage(scan, name) {
   if (!scan || !Array.isArray(scan.packages)) return null;
   return scan.packages.find((p) => p.name === name) ?? null;
 }
-
-export function projectFileNames(scan) {
-  if (!scan) return [];
-  return scan.projectFiles.map((f) => basename(f));
-}

package/src/lib/graph/graphify-runtime.js

@@ -7,7 +7,6 @@ import { execFileSync } from 'node:child_process';
 export const GRAPHIFY_VERSION = '0.9.50';
 export const GRAPHIFY_PACKAGE = 'graphifyy';
 export const GRAPHIFY_BIN = 'graphify';
-export const GRAPHIFY_MCP_BIN = 'graphify-mcp';
 
 const PREFERENCE = ['uv', 'pipx', 'python3', 'python'];
 

package/src/lib/mutation/snapshot.js

@@ -1,5 +1,5 @@
 import { createHash } from 'node:crypto';
-import { existsSync, mkdirSync, readFileSync, rmSync, unlinkSync, writeFileSync } from 'node:fs';
+import { existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync } from 'node:fs';
 import { join, dirname } from 'node:path';
 
 export const md5Of = (bytes) => createHash('md5').update(bytes).digest('hex');
@@ -63,7 +63,3 @@ export function restoreSnapshot(snapshot, { rewrite = true } = {}) {
   writeJournal(snapshot);
   return report;
 }
-
-export function discardSnapshot(snapshot) {
-  rmSync(snapshot.dir, { recursive: true, force: true });
-}

package/src/lib/risk-detector.js

@@ -379,8 +379,3 @@ export function getRiskSignals(signals) {
 
   return out;
 }
-
-export const RISK_CONSTANTS = {
-  FORCED_PAUSE_WORK_TYPES,
-  E2E_SKIP_CLASSES_THAT_PAUSE,
-};

package/src/lib/stack/stack-profile.js

@@ -9,17 +9,14 @@ const PROFILES = {
   dotnet: {
     isDotnet: true, isNextjs: false,
     defaultValidators: ['packages'],
-    buildCommand: 'dotnet build --no-restore',
   },
   nextjs: {
     isDotnet: false, isNextjs: true,
     defaultValidators: ['nextjs-component'],
-    buildCommand: 'npx tsc --noEmit',
   },
   empty: {
     isDotnet: false, isNextjs: false,
     defaultValidators: [],
-    buildCommand: null,
   },
 };
 
@@ -38,7 +35,6 @@ function mergeProfiles(profiles) {
     isDotnet: profiles.some((p) => p.isDotnet),
     isNextjs: profiles.some((p) => p.isNextjs),
     defaultValidators: [...new Set(profiles.flatMap((p) => p.defaultValidators))],
-    buildCommand: profiles.map((p) => p.buildCommand).find(Boolean) ?? null,
   };
 }
 

package/src/lib/stack/stack-scan.js

@@ -120,8 +120,11 @@ function auditDotnet(files, read) {
     if (major !== null && major < DOTNET_EXPECTED_MAJOR) add('Baixo', `Pacote desatualizado mas compatível (${p} ${packages.get(p)})`, [], `subir para ${DOTNET_EXPECTED_MAJOR}.x`);
   }
 
-  const newGuid = grepFiles(source, read, /Guid\.NewGuid\(\)/);
-  if (newGuid.length > 0) add('Alto', '`Guid.NewGuid()`', newGuid, 'trocar por `Guid.CreateVersion7()`');
+  const analyzers = packages.has('Microsoft.CodeAnalysis.BannedApiAnalyzers');
+  if (!analyzers) {
+    const newGuid = grepFiles(source, read, /Guid\.NewGuid\(\)/);
+    if (newGuid.length > 0) add('Alto', '`Guid.NewGuid()`', newGuid, 'trocar por `Guid.CreateVersion7()`');
+  }
   const repository = grepFiles(source, read, /interface\s+(IRepository\s*<|IUnitOfWork\b)/);
   if (repository.length > 0) {
     const di = grepFiles(source, read, /Add(Scoped|Transient|Singleton)\s*(<\s*(IRepository|IUnitOfWork)|\(\s*typeof\s*\(\s*(IRepository|IUnitOfWork))/);
@@ -135,17 +138,16 @@ function auditDotnet(files, read) {
   if (serviceLayer.length > 0) add('Alto', 'Camada de Service/Manager entre handler e dados', serviceLayer, 'o handler fala com o `ApplicationDbContext` direto');
   const rawSql = grepFiles(source, read, /\b(FromSqlRaw|ExecuteSqlRaw|SqlQueryRaw|ExecuteQuery)\s*\(/);
   if (rawSql.length > 0) add('Alto', 'SQL cru', rawSql, 'LINQ, ou store dedicado com justificativa em ADR');
-  const notSealed = source.filter((f) => {
-    const text = read(f) ?? '';
-    return [...text.matchAll(/^\s*(?:public|internal)\s+((?:\w+\s+)*)class\s+\w+/gm)]
-      .some((m) => !/\b(sealed|abstract|static|partial)\b/.test(m[1]));
-  });
-  if (notSealed.length > 0) add('Médio', 'Classes não-sealed', notSealed, '`sealed` por padrão');
+  if (projects.length > 0 && !analyzers) {
+    add('Médio', 'Analyzers do stack ausentes (o build não barra `Guid.NewGuid()` nem token não repassado)', [],
+      '`Directory.Build.props` + `BannedSymbols.txt` + `morph.globalconfig` na raiz: `morph-spec standards --show backend-dotnet-analyzers#files`');
+  }
   const controllers = grepFiles(source, read, /:\s*Controller(Base)?\b/);
   rows.push({ layer: 'Estrutura', detected: controllers.length > 0 ? `${controllers.length} controller(s) MVC` : 'sem controllers', expected: 'VSA (endpoint por slice)', ok: controllers.length === 0 });
   return { rows, deviations };
 }
 
+const ESLINT_CONFIGS = ['eslint.config.mjs', 'eslint.config.js', 'eslint.config.cjs'];
 const UI_LIBRARIES = ['@mui/material', 'antd', '@chakra-ui/react', 'bootstrap', 'react-bootstrap', '@mantine/core'];
 
 function auditNextjs(root, read) {
@@ -177,11 +179,18 @@ function auditNextjs(root, read) {
   rows.push({ layer: 'Roteamento', detected: appRouter ? 'App Router' : (pagesRouter ? 'Pages Router' : 'não detectado'), expected: 'App Router', ok: appRouter || !pagesRouter });
   if (pagesRouter && !appRouter) add('Médio', 'Pages Router em vez de App Router', [next.file], 'migrar as rotas para `app/`');
   rows.push({ layer: 'Estilo', detected: next.deps.tailwindcss ? 'Tailwind' : 'ausente', expected: 'Tailwind', ok: Boolean(next.deps.tailwindcss) });
-  rows.push({ layer: 'Motion', detected: next.deps['framer-motion'] || next.deps.motion ? 'Framer Motion' : 'ausente', expected: 'Framer Motion', ok: true });
+  const motionPackages = ['motion', 'framer-motion'].filter((p) => next.deps[p]);
+  rows.push({ layer: 'Motion', detected: motionPackages.join(' + ') || 'ausente', expected: 'motion (`motion/react`)', ok: motionPackages.length < 2 });
+  if (motionPackages.length === 2) add('Baixo', '`motion` e `framer-motion` instalados juntos', [next.file], 'remover `framer-motion`; o import é `motion/react`');
   const shadcn = existsSync(join(root, base, 'components.json'));
   const otherUi = UI_LIBRARIES.filter((lib) => next.deps[lib]);
   rows.push({ layer: 'UI', detected: otherUi.join(', ') || (shadcn ? 'shadcn' : 'ausente'), expected: 'shadcn', ok: otherUi.length === 0 });
   if (otherUi.length > 0) add('Médio', `Biblioteca de UI diferente (${otherUi.join(', ')})`, [next.file], 'shadcn sobre Tailwind');
+  const eslintConfig = ESLINT_CONFIGS.map((name) => `${base}${name}`).find((file) => existsSync(join(root, file)));
+  if (!eslintConfig || !/no-restricted-imports/.test(read(eslintConfig) ?? '')) {
+    add('Médio', 'ESLint do stack ausente (o lint não barra import proibido nem fetch em `useEffect`)', eslintConfig ? [eslintConfig] : [],
+      '`eslint.config.mjs` na raiz do app: `morph-spec standards --show frontend-nextjs-lint#files`');
+  }
   return { rows, deviations };
 }