@polymorphism-tech/morph-spec 9.4.0 → 9.5.0

package/framework/hooks/claude-code/core/protect-spec-files.js

@@ -9,7 +9,6 @@ import {
   PROTECTED_SPEC_FILES
 } from '../../shared/phase-utils.js';
 import { blockResult, runStandalone } from '../../shared/hook-response.js';
-import { logHookActivity } from '../../shared/activity-logger.js';
 import { getFilePath, getToolName, resolveMorphRoot, resolveTargetPath } from '../../shared/payload-utils.js';
 import { ERRATA_HEADING, errataViolation } from '../../shared/errata.js';
 
@@ -57,7 +56,6 @@ export async function run(payload) {
     // Generated only by the CLI: a hand-written one would carry checks the parser never judged.
     // Decided before the creation carve-out, since chore/hotfix are born with the plan gate stamped.
     if (filename === CHECKS_FILE) {
-      logHookActivity('protect-spec-files', 'PreToolUse', 'blocked');
       return blockResult(
         `MORPH-SPEC: '${CHECKS_FILE}' is generated — never written by hand.\n` +
         `Edit 2-plan/plan.md and run \`morph-spec plan-check ${featureName}\`: it parses the plan and writes ${CHECKS_FILE}.\n` +
@@ -67,7 +65,6 @@ export async function run(payload) {
     }
 
     if (!isGateApproved(featureName, requiredGate, root)) {
-      logHookActivity('protect-spec-files', 'PreToolUse', 'ok');
       return null;
     }
 
@@ -76,7 +73,6 @@ export async function run(payload) {
     // A file not yet on disk is its CREATION (chore/hotfix are born with `plan` stamped), not an edit of a frozen spec.
     // The criterion is existence, never `approvedBy`: by signature, deleting a spec first would license rewriting it.
     if (!existsSync(absPath)) {
-      logHookActivity('protect-spec-files', 'PreToolUse', 'ok:absent');
       return null;
     }
 
@@ -90,11 +86,8 @@ export async function run(payload) {
     } catch {}
 
     if (errataCheck?.ok) {
-      logHookActivity('protect-spec-files', 'PreToolUse', 'ok');
       return null;
     }
-
-    logHookActivity('protect-spec-files', 'PreToolUse', 'blocked');
     return blockResult(
       `MORPH-SPEC: '${filename}' is locked — the '${requiredGate}' gate has been approved.\n` +
       `Editing an approved artifact breaks its contract.\n\n` +

package/framework/hooks/claude-code/core/validate-completion.js

@@ -7,7 +7,6 @@ import {
   stateExists, getActiveFeature, getMostRecentFeature, derivePhaseForFeature,
 } from '../../shared/state-reader.js';
 import { contextResult, runStandalone } from '../../shared/hook-response.js';
-import { logHookActivity, logEvent } from '../../shared/activity-logger.js';
 import { appendTelemetryEvent } from '../../shared/telemetry-logger.js';
 import { readTranscriptUsage, usageDelta } from '../../shared/transcript-usage.js';
 import { sliceProgress, sliceReportPath, inspectReport } from '../../shared/slice-progress.js';
@@ -145,9 +144,6 @@ export async function run(payload) {
       'MORPH-SPEC:',
       ...warnings.map(w => `  ${w}`),
     ].join('\n');
-
-    logHookActivity('validate-completion', 'Stop', `warnings(${warnings.length})`);
-    logEvent('session_end', { feature: name, phase: currentPhase, warnings: warnings.length });
     return contextResult(message, 'Stop');
   } catch {
     return null;

package/framework/hooks/claude-code/core/worktree-context.js

@@ -13,7 +13,6 @@ import { sliceProgress } from '../../shared/slice-progress.js';
 import { collectNextSignals, decideNext, formatNext } from '../../shared/next-step.js';
 import { contextResult, runStandalone } from '../../shared/hook-response.js';
 import { acquireClaim, foreignClaim, claimAge } from '../../shared/claim-registry.js';
-import { rotateActivityLogIfLarge } from '../../shared/activity-logger.js';
 import { rotateEventsLogIfLarge } from '../../shared/telemetry-logger.js';
 import { kickGraphRefresh, seedFromPrimary } from '../../shared/graph-refresh.js';
 import { kickAgentReap } from '../../shared/agent-reap.js';
@@ -226,7 +225,6 @@ export async function run(payload) {
       return null;
     }
 
-    try { rotateActivityLogIfLarge(dir); } catch {}
     try { rotateEventsLogIfLarge(dir); } catch {}
     // Only the ROOT's graph is refreshed in background: a detached process holding a worktree directory made `finish` fail on win32.
     try { seedFromPrimary(dir); } catch {}

package/framework/hooks/claude-code/statusline.py

@@ -457,49 +457,13 @@ def get_active_features(cwd):
     return result
 
 
-def get_last_hook(cwd):
-    """Name of the most recent hook from .morph/logs/activity.jsonl.
-
-    activity-logger.js (R1.2) writes append-only JSONL now, one event per
-    line (`{"kind": "hook", ...}` or `{"kind": "event", ...}`), instead of a
-    single JSON doc rewritten whole on every call. The log can grow up to the
-    rotation threshold (2 MB, see ROTATE_THRESHOLD_BYTES in activity-logger.js)
-    between SessionStarts, and this function runs on every prompt redraw, so
-    only the trailing slice is read — never the whole file.
-
-    The age is deliberately not shown: activity-logger.js only records
-    HH:MM:SS, so any age computed from it is wrong across midnight.
-    """
-    try:
-        path = Path(cwd) / '.morph' / 'logs' / 'activity.jsonl'
-        size = path.stat().st_size
-        tail_bytes = 8192
-        with path.open('rb') as f:
-            if size > tail_bytes:
-                f.seek(-tail_bytes, 2)
-            tail = f.read().decode('utf-8', errors='ignore')
-        for line in reversed(tail.splitlines()):
-            line = line.strip()
-            if not line:
-                continue
-            try:
-                obj = json.loads(line)
-            except Exception:
-                continue
-            if obj.get('kind') == 'hook':
-                return obj.get('name') or None
-        return None
-    except Exception:
-        return None
-
-
 # ── Line renderers ────────────────────────────────────────────────────────────
 
-def render_morph_line(feature, hook_name, columns):
+def render_morph_line(feature, columns):
     """Line 0 — the active MORPH feature.
 
     Goes through join_to_width like the status line: a feature name plus phase,
-    slice bar, gate and hook is the longest thing this script prints, and a
+    slice bar and gate is the longest thing this script prints, and a
     wrapping line 0 would defeat the whole point of the single-row layout.
     """
     parts = [(0, f"{CYAN}{BOLD}► {feature['name']}{R}")]
@@ -523,9 +487,6 @@ def render_morph_line(feature, hook_name, columns):
     if feature['pending']:
         parts.append((2, f"{RED}⛔ gate: {feature['pending']}{R}"))
 
-    if hook_name:
-        parts.append((4, f"{GRAY}🪝 {hook_name}{R}"))
-
     return join_to_width(parts, columns)
 
 
@@ -722,10 +683,8 @@ def main():
         # worktree. In the primary tree it resurrects stale feature names
         # during unrelated work, so there the status line is a single row.
         if get_worktree_label(payload, cwd):
-            hook_name = get_last_hook(cwd)
             for feature in get_active_features(cwd):
-                print(render_morph_line(feature, hook_name, columns))
-                hook_name = None  # annotate the first line only
+                print(render_morph_line(feature, columns))
 
         status_line = render_status_line(payload, cwd, settings, columns)
         if status_line:

package/framework/hooks/shared/build-check.js

@@ -4,6 +4,7 @@ import { join } from 'path';
 
 const DOTNET_BUILD_CMD = 'dotnet build --no-restore --nologo -v q';
 const TSC_BUILD_CMD = 'npx tsc --noEmit';
+const ESLINT_CONFIGS = ['eslint.config.mjs', 'eslint.config.js', 'eslint.config.cjs'];
 
 export function isDotnetStack(s) {
   return s.includes('dotnet') || s.includes('aspnet');
@@ -13,26 +14,9 @@ function isFrontendStack(s) {
   return s.includes('nextjs') || s.includes('node') || s.includes('react') || s.includes('vue');
 }
 
-// Single stack only: a compound stack resolves to `dotnet build` alone. Use
-// `getBuildSteps()` for those.
-export function getBuildCommand(stack, hasTsConfig = false) {
-  if (!stack) return null;
-  const s = stack.toLowerCase();
-
-  if (isDotnetStack(s)) {
-    return DOTNET_BUILD_CMD;
-  }
-
-  if (isFrontendStack(s) && hasTsConfig) {
-    return TSC_BUILD_CMD;
-  }
-
-  return null;
-}
-
 // A compound stack checks BOTH sides, each from its own directory.
 // `backendTarget` names the solution when the backend directory holds none.
-export function getBuildSteps(stack, { cwd, frontendPath, backendPath, backendTarget } = {}) {
+export function getBuildSteps(stack, { cwd, frontendPath, backendPath, backendTarget, lintFiles = [] } = {}) {
   if (!stack || !cwd) return [];
   const s = stack.toLowerCase();
   const steps = [];
@@ -51,6 +35,15 @@ export function getBuildSteps(stack, { cwd, frontendPath, backendPath, backendTa
     ) {
       steps.push({ command: TSC_BUILD_CMD, cwd: frontendDir });
     }
+    // Only the files the feature touched: legacy lint debt never turns a feature's verify red.
+    if (
+      lintFiles.length > 0 &&
+      ESLINT_CONFIGS.some((name) => existsSync(join(frontendDir, name))) &&
+      existsSync(join(frontendDir, 'node_modules', 'eslint'))
+    ) {
+      const files = lintFiles.map((file) => JSON.stringify(file)).join(' ');
+      steps.push({ command: `npx eslint --quiet --no-warn-ignored ${files}`, cwd: frontendDir });
+    }
   }
 
   return steps;
@@ -68,7 +61,7 @@ export function parseBuildResult(exitCode, output) {
 
 /** @returns {{ status: 'pass'|'fail'|'skip', output: string }} */
 export function runBuildCheck(cwd, stack, timeout = 30000, paths = {}) {
-  const steps = getBuildSteps(stack, { cwd, frontendPath: paths.frontendPath, backendPath: paths.backendPath, backendTarget: paths.backendTarget });
+  const steps = getBuildSteps(stack, { cwd, frontendPath: paths.frontendPath, backendPath: paths.backendPath, backendTarget: paths.backendTarget, lintFiles: paths.lintFiles });
   if (steps.length === 0) return { status: 'skip', output: '' };
 
   const failures = [];

package/framework/hooks/shared/comment-rules.js

@@ -37,6 +37,15 @@ function isBanner(text) {
   return words === '' || /^[-=*#~_+]{3,}.*[-=*#~_+]{3,}$/.test(body);
 }
 
+const CODE_KEYWORD = /^(?:const|let|var|return|await|throw|if|else|for|foreach|while|switch|import|export|using|new|public|private|protected|internal|function|class)\b/;
+
+function isCommentedCode(text) {
+  const body = bodyOf(text);
+  if (/^[}\])]+[;,)]*$/.test(body)) return true;
+  if (/\{$/.test(body)) return CODE_KEYWORD.test(body) || /[=(]/.test(body);
+  return /;$/.test(body) && (CODE_KEYWORD.test(body) || /[=(.]/.test(body));
+}
+
 function isDocComment(text, isCs) {
   return isCs ? /^\/\/\/(?!\/)/.test(text) : /^\/\*\*(?!\*)/.test(text);
 }
@@ -103,7 +112,7 @@ function addedRegionLines(before, after) {
   return out;
 }
 
-/** @returns {Array<{ line: number, rule: 'process'|'banner'|'doc-comment'|'long-block', text: string }>} */
+/** @returns {Array<{ line: number, rule: 'process'|'banner'|'commented-code'|'doc-comment'|'long-block', text: string }>} */
 export function commentFindings({ file, before, after, docCommentsForbidden: docForbidden = false }) {
   const isCs = /\.cs$/i.test(file);
   const all = commentLines(after, file);
@@ -120,6 +129,7 @@ export function commentFindings({ file, before, after, docCommentsForbidden: doc
     if (ALLOWED.some((re) => re.test(text))) continue;
     if (citesProcess(text)) flag(line, 'process', text);
     else if (isBanner(text)) flag(line, 'banner', text);
+    else if (!isDocComment(text, isCs) && isCommentedCode(text)) flag(line, 'commented-code', text);
   }
   for (const { line, text } of addedRegionLines(before, after)) flag(line, 'banner', text);
 

package/framework/hooks/shared/hook-response.js

@@ -30,10 +30,6 @@ export function blockResult(reason) {
   return { decision: 'block', reason };
 }
 
-export function approveResult(context) {
-  return context ? { decision: 'approve', additionalContext: context } : null;
-}
-
 export function contextResult(text, eventName) {
   return { hookSpecificOutput: { hookEventName: eventName, additionalContext: text } };
 }

package/framework/hooks/shared/payload-utils.js

@@ -1,29 +1,5 @@
 import { createHash } from 'crypto';
-import { existsSync } from 'fs';
-import { dirname, join, isAbsolute } from 'path';
-
-// A sub-agent may edit inside its own worktree: the build root comes from the
-// file, not from the session's cwd.
-export function resolveRootForFile(filePath, fallbackCwd, markers = ['package.json']) {
-  try {
-    if (!filePath) return fallbackCwd;
-    let p = String(filePath).replace(/\\/g, '/');
-    if (!isAbsolute(p)) p = join(fallbackCwd, p);
-
-    let dir = dirname(p);
-    let prev = null;
-    while (dir && dir !== prev) {
-      for (const marker of markers) {
-        if (existsSync(join(dir, marker))) return dir;
-      }
-      prev = dir;
-      dir = dirname(dir);
-    }
-    return fallbackCwd;
-  } catch {
-    return fallbackCwd;
-  }
-}
+import { join, isAbsolute } from 'path';
 
 // State is resolved from the target PATH, never the session: a session in the
 // primary root may write a feature that lives in a worktree. `lastIndexOf` picks
@@ -58,16 +34,6 @@ export function getFilePath(payload) {
   return raw.replace(/\\/g, '/');
 }
 
-export function getContentToValidate(payload) {
-  const input = payload?.tool_input;
-  if (!input) return '';
-  return input.content || input.new_string || '';
-}
-
-export function isWriteOperation(payload) {
-  return typeof payload?.tool_input?.content === 'string';
-}
-
 export function getToolName(payload) {
   return payload?.tool_name || 'unknown';
 }

package/framework/hooks/shared/phase-utils.js

@@ -2,8 +2,6 @@
 // Source of truth: src/core/paths/output-schema.js
 // Regenerate with: node scripts/generate-refs.js
 
-export const PHASE_ORDER = ["plan","uiux","implement","review"];
-
 export const PHASE_DIRS = {
   plan: '2-plan',
   uiux: '1-design',
@@ -63,16 +61,6 @@ export function isFeaturePath(filePath) {
   return normalized.includes('.morph/features/');
 }
 
-export function isFrameworkPath(filePath) {
-  const normalized = filePath.replace(/\\/g, '/');
-  return normalized.includes('.morph/framework/');
-}
-
-export function isStatePath(filePath) {
-  const normalized = filePath.replace(/\\/g, '/');
-  return normalized.endsWith('.morph/state.json');
-}
-
 export function getBasename(filePath) {
   const normalized = filePath.replace(/\\/g, '/');
   return normalized.split('/').pop();

package/framework/hooks/shared/slice-progress.js

@@ -7,8 +7,6 @@ export const PARTIAL_MARKER = /^[\s#>*_]*PARCIAL\b/;
 /** `BLOQUEADO`: the slice waits on a decision only the human can make; re-dispatching it repeats the question. */
 export const BLOCKED_MARKER = /^[\s#>*_]*BLOQUEADO\b/;
 
-export const SLICE_STATUSES = ['pendente', 'parcial', 'bloqueado', 'feito'];
-
 export function checksPath(featureDir) {
   return join(featureDir, '2-plan', 'checks.json');
 }

package/framework/hooks/shared/state-reader.js

@@ -185,11 +185,6 @@ export function derivePhaseFrom(feature, hasArtifact) {
   return PHASE_INDEX[implied] > PHASE_INDEX[artifactPhase] ? implied : artifactPhase;
 }
 
-export function gateImpliedPhase(featureName, projectPath) {
-  const designDir = join(projectPath || process.cwd(), '.morph/features', featureName, DESIGN_DIR);
-  return gateImpliedPhaseFrom(getFeature(featureName, projectPath), existsSync(designDir));
-}
-
 export function derivePhaseForFeature(featureName, projectPath) {
   const basePath = join(projectPath || process.cwd(), '.morph/features', featureName);
   return derivePhaseFrom(getFeature(featureName, projectPath), diskArtifactProbe(basePath));
@@ -219,17 +214,3 @@ export function pendingGatesFrom(feature) {
 export function getPendingGates(featureName, projectPath) {
   return pendingGatesFrom(getFeature(featureName, projectPath));
 }
-
-export function getOutputs(featureName, projectPath) {
-  const feature = getFeature(featureName, projectPath);
-  return feature?.outputs || null;
-}
-
-export function getMissingOutputs(featureName, projectPath) {
-  const feature = getFeature(featureName, projectPath);
-  if (!feature?.outputs) return [];
-
-  return Object.entries(feature.outputs)
-    .filter(([, output]) => !output.created)
-    .map(([type, output]) => ({ type, path: output.path }));
-}

package/framework/hooks/shared/telemetry-logger.js

@@ -70,7 +70,7 @@ export function readTelemetryEvents(projectPath) {
   }
 }
 
-// `events-` prefix: activity-logger archives share `sessions/` without one.
+// `events-` prefix: older activity-log archives in `sessions/` carry none.
 function archiveEvents(projectPath) {
   try {
     const eventsPath = getEventsPath(projectPath);

package/framework/rules/frontend-standards.md

@@ -9,8 +9,7 @@ stacks:
 
 # Frontend Standards
 
-- **frontend-design-system-naming** (`frontend/design-system/naming.md`) — BEM para componente reutilizável (`.card`, `.card__header`, `.card--featured`); prefixo de página para elemento específico (`.home-hero`). Custom properties em `:root` com namespace `--app-`. Estado por sufixo fixo: `--active`, `--disabled`, `--loading`, `--error`.
-- **frontend-design-system-animations** (`frontend/design-system/animations.md`) — Classes `.animate-*`, `.duration-fast/normal/slow`, `.stagger-1..10`. Lista escalonada exige `animation-delay` E `animation-fill-mode: backwards`. Sempre o bloco `prefers-reduced-motion: reduce`. Além do CSS: Motion (`motion/react`) para enter/exit/layout; GSAP só para ScrollTrigger, SVG morph e timelines.
+- **frontend-design-system-animations** (`frontend/design-system/animations.md`) — Lista escalonada exige `animation-delay` E `animation-fill-mode: backwards` (senão pisca antes do atraso). Sempre o bloco `prefers-reduced-motion: reduce`. Além do CSS: Motion (`motion/react`) para enter/exit/layout; GSAP só para ScrollTrigger, SVG morph e timelines.
 - **frontend-design-system-art-direction** (`frontend/design-system/art-direction.md`) — Tela nova ou alterada segue a direção escrita em `1-design/direcao.md` e o protótipo de `1-design/prototipos/`: celular composto (folha inferior, alvos de 44px), movimento só em `transform`/`opacity` com versão estática em `prefers-reduced-motion`, nenhum número inventado em cena ilustrativa.
 
 > Resumo injetado quando você lê ou edita um arquivo casado por `paths:`. Texto completo: `morph-spec standards --find "<id>"` e leia só a seção necessária de `.morph/framework/standards/<path>`.

package/framework/rules/nextjs-standards.md

@@ -8,16 +8,17 @@ stacks:
 
 # Next.js Standards
 
-- **frontend-nextjs-naming-conventions** (`frontend/nextjs/naming-conventions.md`) — Arquivo SEMPRE kebab-case (`user-card.tsx`); export PascalCase para componente e `useX` para hook. Zod em `.schemas.ts`, tipos em `.types.ts` via `z.infer`. Named export (só `page.tsx` usa `default`). Nunca misture casos na mesma categoria.
-- **frontend-nextjs-project-structure** (`frontend/nextjs/project-structure.md`) — `src/app/` só roteia e importa de `features/`. Cada `src/features/{f}/` tem `components/`, `hooks/`, `types/` e `index.ts` como API pública (import de `@/features/users`, nunca deep path). NUNCA uma feature importa outra; `components/ui/` é shadcn e não se edita.
-- **frontend-nextjs-app-router** (`frontend/nextjs/app-router.md`) — Server Component por padrão; `'use client'` só para interação, browser API ou TanStack Query. Nunca fetch em `useEffect`. `loading.tsx`/`error.tsx` ao lado do `page.tsx` (`error.tsx` é client). Server Component chama o .NET com `BACKEND_API_PREFIX`; evite `route.ts`.
-- **frontend-nextjs-components** (`frontend/nextjs/components.md`) — `components/ui/` é saída do shadcn CLI (nunca editar; envolva em `components/`); `components/` sem regra de negócio e sem importar `features/`; `features/*/components/` conhece o domínio. Props tipadas e validadas com Zod, sempre com `className` opcional.
-- **frontend-nextjs-data-fetching** (`frontend/nextjs/data-fetching.md`) — Server Component com `BACKEND_API_PREFIX`; Client Component só pelo proxy same-origin com `PROXY_API_PREFIX`. TanStack Query 5 com key factory por feature e `invalidateQueries({ queryKey })`; toda resposta passa por Zod. PROIBIDO: `useEffect(() => fetch…)` e paginar/filtrar a coleção inteira no browser.
+- **frontend-nextjs-lint** (`frontend/nextjs/lint.md`) — O lint cobra o mecânico: `framer-motion`, Zustand/Redux, driver de banco, Form legado, deep import de feature, fronteiras `components`/`features`/`app`/`hooks`, fetch em `useEffect`, `'use client'` no layout raiz, `export default` fora de rota, `any`. O `verify` roda o eslint nos arquivos da feature quando há `eslint.config.*`; sem `eslint.config.mjs`: `morph-spec standards --show frontend-nextjs-lint#files`. Regra mecânica nova vira linha nele, nunca prosa.
+- **frontend-nextjs-naming-conventions** (`frontend/nextjs/naming-conventions.md`) — Arquivo SEMPRE kebab-case (`user-card.tsx`); componente PascalCase. Zod em `.schemas.ts`, tipos em `.types.ts` via `z.infer`. Nunca misture casos na mesma categoria.
+- **frontend-nextjs-project-structure** (`frontend/nextjs/project-structure.md`) — `src/app/` só roteia; a lógica da tela mora em `src/features/{f}/` (`components/`, `hooks/`, `types/`, `index.ts` como API pública). NUNCA uma feature importa outra (extraia para `components/` ou `lib/`); `components/ui/` é shadcn e não se edita.
+- **frontend-nextjs-app-router** (`frontend/nextjs/app-router.md`) — Server Component por padrão; `'use client'` só para interação, browser API ou TanStack Query. `loading.tsx`/`error.tsx` ao lado do `page.tsx`. Server Component chama o .NET com `BACKEND_API_PREFIX`; evite `route.ts`.
+- **frontend-nextjs-components** (`frontend/nextjs/components.md`) — `components/ui/` é saída do shadcn CLI (nunca editar; envolva em `components/`); `components/` sem regra de negócio; `features/*/components/` conhece o domínio e entrega props tipadas, nunca a resposta crua da API.
+- **frontend-nextjs-data-fetching** (`frontend/nextjs/data-fetching.md`) — Server Component com `BACKEND_API_PREFIX`; Client Component só pelo proxy same-origin com `PROXY_API_PREFIX`. TanStack Query 5 com key factory por feature e `invalidateQueries({ queryKey })`; toda resposta passa por Zod. PROIBIDO paginar/filtrar a coleção inteira no browser.
 - **frontend-nextjs-forms** (`frontend/nextjs/forms.md`) — react-hook-form + Zod (`zodResolver`) + Field do shadcn via `Controller`; tipo por `z.infer`; nunca `useState` por campo. Submit por `useMutation`, erro em `root`. Edição reusa o schema de criação (`.partial()`). Zod 4: `z.email()`.
-- **frontend-nextjs-state-management** (`frontend/nextjs/state-management.md`) — Estado de servidor no TanStack Query, nunca copiado para `useState`. Página, ordenação, filtros e aba ativa na URL (`searchParams`). Context só para tema, usuário ou locale. NUNCA Zustand/Redux antes de esgotar Server Components + TanStack Query.
+- **frontend-nextjs-state-management** (`frontend/nextjs/state-management.md`) — Estado de servidor no TanStack Query, nunca copiado para `useState`. Página, ordenação, filtros e aba ativa na URL (`searchParams`). Context só para tema, usuário ou locale.
 - **frontend-nextjs-testing** (`frontend/nextjs/testing.md`) — Vitest + Testing Library; MSW para API; Playwright para e2e. Teste comportamento, não implementação. Orçamento por risco: um teste por cenário com `risco:` + o de regressão do bug, componente sem risco é `leitura`/`e2e`; cenários do mesmo comportamento em `it.each`; nada de teste que só confere string de copy.
-- **frontend-nextjs-nextjs-patterns** (`frontend/nextjs/nextjs-patterns.md`) — Route Handler é BFF: `auth.getSession()` (401 sem sessão) e delega ao .NET; banco NUNCA em route handler. Zod no client e no server (`safeParse`, 400). `strict: true` + `noUncheckedIndexedAccess`; sem `any` em resposta de API. shadcn via `npx shadcn@latest add`.
-- **frontend-nextjs-motion-patterns** (`frontend/nextjs/motion-patterns.md`) — Motion via `motion/react` (nunca `framer-motion` junto). Variants em `motion/variants.ts` com durations/easings de `@/lib/design-tokens`. `useReducedMotion()` obrigatório; o `layout.tsx` raiz segue Server Component. 3–5 momentos de motion por página; cena guiada por scroll é do GSAP, nunca no mesmo elemento.
+- **frontend-nextjs-nextjs-patterns** (`frontend/nextjs/nextjs-patterns.md`) — Route Handler é BFF: `auth.getSession()` (401 sem sessão) e delega ao .NET. Zod no client e no server (`safeParse`, 400). `strict: true` + `noUncheckedIndexedAccess`. shadcn via `npx shadcn@latest add`.
+- **frontend-nextjs-motion-patterns** (`frontend/nextjs/motion-patterns.md`) — Motion via `motion/react`. Variants em `motion/variants.ts` com durations/easings de `@/lib/design-tokens`. `useReducedMotion()` obrigatório. Cena guiada por scroll é do GSAP, nunca no mesmo elemento que o Motion.
 - **architecture-code-comments** (`architecture/code-comments.md`) — Padrão é nenhum comentário: renomeie, extraia, tipe ou teste antes. Só o porquê que o código não mostra (invariante, ordem, quirk externo com link), até ~3 linhas. PROIBIDO: história de processo (task, UC, ADR, Gate), repetir o código, XML doc/JSDoc que repete a assinatura, banner, `#region`, código comentado, TODO solto. O hook `comment-guard` bloqueia.
 - **architecture-engineering-lens** (`architecture/engineering-lens.md`) — Escreva para quem herda amanhã: convenção do projeto, o mais simples, causa raiz. PROIBIDO no que você adiciona: `catch` que engole, flag booleana que bifurca o método (são dois métodos), efeito colateral escondido, símbolo/flag/config sem consumidor, abstração ou camada sem segundo uso, literal repetido sem constante. Nomes de domínio buscáveis, funções pequenas, ≤ 3 parâmetros, condicional positiva. Commit em Conventional Commits (hook `conventional-commit`).
 

package/framework/skills/core/create-umbraco-lp/SKILL.md

@@ -4,7 +4,7 @@ description: Guia a criação de uma landing page nova ponta-a-ponta a partir do
 version: core
 when_to_use: Use quando for iniciar um novo projeto de LP com o template Umbraco genérico
 user-invocable: true
-cliVersion: "9.4.0"
+cliVersion: "9.5.0"
 stacks:
   - umbraco
 ---

package/framework/skills/core/migrate-lp-to-umbraco/SKILL.md

@@ -4,7 +4,7 @@ description: Migra uma landing page existente (React/Vite, Next.js estático ou
 version: core
 when_to_use: Use quando o usuário pedir "use /migrate-lp-to-umbraco {projeto}" ou descrever a necessidade de migrar uma LP para Umbraco
 user-invocable: true
-cliVersion: "9.4.0"
+cliVersion: "9.5.0"
 stacks:
   - umbraco
 ---

package/framework/skills/core/morph-apply/SKILL.md

@@ -4,7 +4,7 @@ description: Executa as fatias do plano de uma feature morph-spec — dispatch p
 version: core
 when_to_use: Use com o gate do plano aprovado, em "use /morph-apply {feature}" ou "implementar feature"
 user-invocable: true
-cliVersion: "9.4.0"
+cliVersion: "9.5.0"
 ---
 
 # morph-apply

package/framework/skills/core/morph-hotfix/SKILL.md

@@ -4,7 +4,7 @@ description: ADW cirúrgico de hotfix — resolve uma queda/bug crítico de prod
 version: core
 when_to_use: Use quando chegar "/morph-hotfix {feature}", quando a morph-plan rotear o pedido como workType hotfix, ou quando o usuário disser "produção caiu / hotfix / urgente" a respeito de um incidente
 user-invocable: true
-cliVersion: "9.4.0"
+cliVersion: "9.5.0"
 ---
 
 # morph-hotfix

package/framework/skills/core/morph-machine/SKILL.md

@@ -4,7 +4,7 @@ description: Cuida da RAM e da CPU da máquina enquanto o morph-spec trabalha
 version: core
 when_to_use: Use quando a máquina estiver lenta ou sem RAM, um comando pesado esperou ou foi recusado pela fila, sobrou worktree de sub-agent, ou vários sub-agents pesados vão rodar em paralelo
 user-invocable: false
-cliVersion: "9.4.0"
+cliVersion: "9.5.0"
 ---
 
 # morph-machine
@@ -43,4 +43,4 @@ Limites: não cobre `run_in_background`, PowerShell nem comando fora da lista; u
 ## Referências
 
 - `.morph/framework/CLI.md` — `### heavy`, `### worktree reap`, `### doctor --procs` e `### worktree.root`.
-- `MORPH.md` §2.2 (worktrees) e a cláusula 6 dos templates de dispatch (PROCESSOS).
+- `MORPH.md` §2.2 (worktrees) e a cláusula PROCESSOS do contrato de dispatch.

package/framework/skills/core/morph-media/SKILL.md

@@ -4,7 +4,7 @@ description: Conduz a AUTORIA de mídia gerada por IA — escolher o modelo pelo
 version: core
 when_to_use: Use quando a tarefa for PRODUZIR imagem ou vídeo por IA (catálogo, marketing, asset de LP) e alguém precisar decidir modelo, prompt e aprovação
 user-invocable: true
-cliVersion: "9.4.0"
+cliVersion: "9.5.0"
 stacks:
   - dotnet
   - nextjs

package/framework/skills/core/morph-plan/SKILL.md

@@ -4,7 +4,7 @@ description: Leva uma feature do pedido ao plano aprovado — roteia o tipo de t
 version: core
 when_to_use: Use quando uma feature, bug ou chore começar ("/morph-plan {feature}", "vamos planejar X"), ou ao retomar uma feature cujo gate plan ainda não foi aprovado
 user-invocable: true
-cliVersion: "9.4.0"
+cliVersion: "9.5.0"
 ---
 
 # morph-plan

package/framework/skills/core/morph-review/SKILL.md

@@ -4,7 +4,7 @@ description: Conduz o Gate 3 — despacha verificador ∥ revisor (∥ seguranç
 version: core
 when_to_use: Use quando a fase review começar, com todas as fatias com relatório final e o verify da feature verde
 user-invocable: true
-cliVersion: "9.4.0"
+cliVersion: "9.5.0"
 ---
 
 # morph-review

package/framework/skills/core/morph-standards/SKILL.md

@@ -4,7 +4,7 @@ description: Localiza um standard específico via busca server-side (morph-spec
 version: core
 when_to_use: Use quando precisar consultar um standard específico durante a implementação
 user-invocable: true
-cliVersion: "9.4.0"
+cliVersion: "9.5.0"
 ---
 
 # morph-standards

package/framework/skills/core/morph-uiux/SKILL.md

@@ -4,7 +4,7 @@ description: Conduz a fase opcional de UI/UX de uma feature com plano aprovado
 version: core
 when_to_use: Use quando o ramo de design for tomado (morph-spec advance {feature} --design, depois do gate do plano) e antes de /morph-apply
 user-invocable: true
-cliVersion: "9.4.0"
+cliVersion: "9.5.0"
 ---
 
 # morph-uiux