@the-bearded-bear/claude-craft 8.22.0 → 8.23.0

package/Dev/i18n/en/Common/rules/11-security.md

@@ -9,7 +9,7 @@ Security is an **absolute priority**. This document presents the general securit
 **References:**
 - **OWASP Top 10:2025** (published November 2025)
 - CWE/SANS Top 25
-- SLSA 1.0
+- SLSA 1.2
 
 ---
 
@@ -31,9 +31,11 @@ Security is an **absolute priority**. This document presents the general securit
 ## OWASP Top 10:2025
 
 > **Source:** [OWASP Top 10:2025](https://owasp.org/Top10/2025/) — published November 2025.
-> Key changes vs 2021: SSRF consolidated into #1, Supply Chain Failures new at #6, Mishandling Exceptional Conditions new at #7.
+> Key changes vs 2021: SSRF consolidated into A01, Security Misconfiguration moves up to A02, Software Supply Chain Failures new at A03 (absorbs the former "Vulnerable and Outdated Components"), Software or Data Integrity Failures at A08, Mishandling of Exceptional Conditions new at A10.
 
-### 1. Broken Access Control (includes consolidated SSRF)
+> **Related lists:** OWASP Top 10 for Agentic Applications 2026 (published 2025-12-09) and OWASP Top 10 for LLM Applications 2025 ([genai.owasp.org](https://genai.owasp.org/)) for AI-agent/LLM code; OWASP ASVS 5.0.0 for verification requirements.
+
+### A01. Broken Access Control (includes consolidated SSRF)
 
 ```
 RISK
@@ -50,7 +52,41 @@ PROTECTION
 - No internal network access from user inputs
 ```
 
-### 2. Cryptographic Failures
+### A02. Security Misconfiguration
+
+```
+RISK
+- Default configs unchanged
+- Unnecessary features enabled
+- Verbose error messages
+- Permissions too broad
+
+PROTECTION
+- Configuration hardening
+- Disable what is unnecessary
+- Generic error messages in prod
+- Principle of least privilege
+```
+
+### A03. Software Supply Chain Failures (new in 2025)
+
+```
+RISK
+- Dependencies with known vulnerabilities
+- Components without verifiable provenance
+- Unsecured CI/CD
+- Unsigned artifacts
+
+PROTECTION
+- SLSA 1.2 levels 1-3 (verifiable sources, reproducible builds, provenance)
+- Automatic SBOM (SPDX 3 or CycloneDX 1.7) on every build
+- Sigstore keyless signing (cosign) for artifacts and images
+- Dependabot / Renovate with CVE scanning (Trivy, Grype)
+- Pinned versions on all dependencies (no "latest")
+- Outdated or vulnerable components (former A06:2021): inventory, regular updates, `npm audit --omit=dev --audit-level=moderate`
+```
+
+### A04. Cryptographic Failures
 
 ```
 RISK
@@ -62,12 +98,12 @@ RISK
 PROTECTION
 - Encrypt sensitive data at rest
 - Use TLS 1.3 in transit
-- Password hashing: Argon2id (128 MiB RAM, t=3-5, p=1) — NEVER MD5/SHA1/bcrypt
+- Password hashing: Argon2id (OWASP minimum 19 MiB RAM, t=2, p=1; internal recommendation 128 MiB RAM, t≥3, p=1) — NEVER MD5/SHA1 ; bcrypt only as a legacy fallback if Argon2id/scrypt are unavailable (OWASP work factor ≥ 10; ≥ 12 here)
 - JWT: EdDSA (Ed25519) preferred > ES256 > RS256
 - Secrets in a vault (not in the code)
 ```
 
-### 3. Injection
+### A05. Injection
 
 ```
 RISK
@@ -82,7 +118,7 @@ PROTECTION
 - Output escaping
 ```
 
-### 4. Insecure Design
+### A06. Insecure Design
 
 ```
 RISK
@@ -97,55 +133,7 @@ PROTECTION
 - Rate limiting
 ```
 
-### 5. Security Misconfiguration
-
-```
-RISK
-- Default configs unchanged
-- Unnecessary features enabled
-- Verbose error messages
-- Permissions too broad
-
-PROTECTION
-- Configuration hardening
-- Disable what is unnecessary
-- Generic error messages in prod
-- Principle of least privilege
-```
-
-### 6. Software Supply Chain Failures (new in 2025)
-
-```
-RISK
-- Dependencies with known vulnerabilities
-- Components without verifiable provenance
-- Unsecured CI/CD
-- Unsigned artifacts
-
-PROTECTION
-- SLSA 1.0 levels 1-3 (verifiable sources, reproducible builds, provenance)
-- Automatic SBOM (SPDX 3 or CycloneDX) on every build
-- Sigstore keyless signing (cosign) for artifacts and images
-- Dependabot / Renovate with CVE scanning (Trivy, Grype)
-- Pinned versions on all dependencies (no "latest")
-```
-
-### 7. Mishandling of Exceptional Conditions (new in 2025)
-
-```
-RISK
-- Stack traces exposed in production
-- Unhandled exceptions leaking internal data
-- Undefined behavior on malformed inputs
-
-PROTECTION
-- Log errors, never expose stack traces in prod
-- Global exception handlers (error boundaries)
-- Generic error messages on the client side
-- Fail fast with clear business errors
-```
-
-### 8. Authentication Failures
+### A07. Authentication Failures
 
 ```
 RISK
@@ -162,7 +150,21 @@ PROTECTION
 - Brute force detection
 ```
 
-### 9. Logging & Monitoring Failures
+### A08. Software or Data Integrity Failures
+
+```
+RISK
+- Unverified dependencies
+- Unsecured CI/CD
+- Unsigned updates
+
+PROTECTION
+- Signature verification
+- Secured CI/CD
+- Integrity checks (checksums)
+```
+
+### A09. Security Logging and Alerting Failures
 
 ```
 RISK
@@ -177,18 +179,19 @@ PROTECTION
 - Appropriate retention
 ```
 
-### 10. Data Integrity Failures
+### A10. Mishandling of Exceptional Conditions (new in 2025)
 
 ```
 RISK
-- Unverified dependencies
-- Unsecured CI/CD
-- Unsigned updates
+- Stack traces exposed in production
+- Unhandled exceptions leaking internal data
+- Undefined behavior on malformed inputs
 
 PROTECTION
-- Signature verification
-- Secured CI/CD
-- Integrity checks (checksums)
+- Log errors, never expose stack traces in prod
+- Global exception handlers (error boundaries)
+- Generic error messages on the client side
+- Fail fast with clear business errors
 ```
 
 ---
@@ -251,8 +254,8 @@ OWASP 2026 Rules:
 - Minimum 12 characters
 - Uppercase, lowercase, digits, special characters
 - Not in compromised password lists
-- Hash with Argon2id (128 MiB RAM, t=3-5, p=1)
-- NEVER MD5/SHA1/bcrypt in new code
+- Hash with Argon2id (OWASP minimum 19 MiB RAM, t=2, p=1; internal recommendation 128 MiB RAM, t≥3, p=1)
+- NEVER MD5/SHA1 ; bcrypt only as a legacy fallback if Argon2id/scrypt are unavailable (OWASP work factor ≥ 10; ≥ 12 here)
 - Unique salt per user (managed by Argon2id)
 
 // GOOD
@@ -390,9 +393,9 @@ function getOrder(orderId, currentUser):
 
 ```
 Passwords:
-  -> Hash with Argon2id (128 MiB RAM, t=3-5, p=1)
+  -> Hash with Argon2id (OWASP minimum 19 MiB RAM, t=2, p=1; internal recommendation 128 MiB RAM, t≥3, p=1)
   -> NEVER in plain text
-  -> NEVER bcrypt/MD5/SHA1 in new code
+  -> NEVER MD5/SHA1 ; bcrypt only as a legacy fallback if Argon2id/scrypt are unavailable (OWASP work factor ≥ 10; ≥ 12 here)
 
 Personal data (GDPR):
   -> Encryption at rest (AES-256-GCM)
@@ -483,7 +486,7 @@ Content-Security-Policy:
 
 > **Reference:** [Supply Chain Security 2026](https://kawaldeepsingh.medium.com/practical-software-supply-chain-security-2026-sboms-signing-slsa-reproducible-builds-a-0416cfac32dc)
 
-### SLSA 1.0 (Supply-chain Levels for Software Artifacts)
+### SLSA 1.2 (Supply-chain Levels for Software Artifacts)
 
 | Level | Requirements | Impact |
 |-------|-------------|--------|
@@ -495,7 +498,7 @@ Content-Security-Policy:
 
 ```
 Generate automatically on every build:
-- Format SPDX 3 or CycloneDX
+- Format SPDX 3 or CycloneDX 1.7
 - List all direct and transitive dependencies
 - Include versions, licenses, known CVEs
 - Publish to artifact registry
@@ -517,7 +520,7 @@ cosign sign --identity-token=$(cat $ACTIONS_ID_TOKEN_REQUEST_TOKEN) \
 
 ### Supply Chain Checklist
 
-- [ ] SBOM generated automatically (SPDX 3 or CycloneDX)
+- [ ] SBOM generated automatically (SPDX 3 or CycloneDX 1.7)
 - [ ] Artifacts signed with Sigstore/cosign
 - [ ] SLSA 1+ provenance documented
 - [ ] Dependencies with pinned versions (hash or exact version)
@@ -655,7 +658,7 @@ Use Claude Code hooks to block dangerous patterns.
 - [ ] Server-side input validation
 - [ ] Parameterized queries (no SQL concatenation)
 - [ ] Output escaping (XSS prevention)
-- [ ] Passwords hashed with **Argon2id** (128 MiB, t=3-5, p=1)
+- [ ] Passwords hashed with **Argon2id** (OWASP minimum 19 MiB, t=2, p=1; internal recommendation 128 MiB, t≥3, p=1)
 - [ ] Secure sessions (httpOnly, secure, sameSite)
 - [ ] Permission verification on every request
 - [ ] Secrets in environment variables or Vault
@@ -674,7 +677,7 @@ Use Claude Code hooks to block dangerous patterns.
 
 ### Supply Chain
 
-- [ ] SBOM generated (SPDX 3 or CycloneDX)
+- [ ] SBOM generated (SPDX 3 or CycloneDX 1.7)
 - [ ] Artifacts signed (Sigstore/cosign)
 - [ ] SLSA 1+ provenance documented
 - [ ] Dependencies pinned to exact version

package/Dev/i18n/en/Common/rules/12-context-management.md

@@ -41,15 +41,15 @@ The context window is **THE critical resource** in Claude Code. Every token coun
 
 ### Recommended Limit
 
-> **Main CLAUDE.md: 150-200 lines maximum.**
+> **Main CLAUDE.md: under 200 lines (Anthropic target).**
 > Each additional instruction dilutes attention on existing instructions.
 
 ### Modularity Strategy
 
 ```
 .claude/
-  CLAUDE.md              <- Summary (150-200 lines max)
-  rules/                 <- Detailed rules (loaded on demand)
+  CLAUDE.md              <- Summary (under 200 lines)
+  rules/                 <- Detailed rules (loaded at launch; on demand if `paths:` frontmatter)
     01-workflow-analysis.md
     04-solid-principles.md
     05-kiss-dry-yagni.md
@@ -58,6 +58,8 @@ The context window is **THE critical resource** in Claude Code. Every token coun
   skills/                <- On-demand capabilities
 ```
 
+> **Note:** `.claude/rules/*.md` files without `paths:` frontmatter are loaded at launch with the same priority as `.claude/CLAUDE.md`. Only rules with `paths:` globs are loaded on demand, when Claude works on matching files.
+
 ### Best Practices
 
 | Practice | Description |
@@ -352,11 +354,14 @@ Adjust the model's effort level based on task complexity:
 
 | Command | Model | Usage |
 |---------|-------|-------|
-| `/effort low` | Haiku 4.5 | Simple tasks, lookups, classification |
-| `/effort medium` | Sonnet 4.6 | Standard implementation |
-| `/effort high` | Opus 4.8 | Complex reasoning, architecture |
-| `/effort xhigh` | Opus 4.8 (extended thinking, v2.1.111+) | Critical decisions, complex migrations, ADR |
-| `/effort ultracode` | Opus 4.8 (v2.1.154+, Dynamic Workflows) | Maximum code throughput — automated pipelines, massive generation |
+| `/effort low` | Haiku 5.5 | Simple tasks, lookups, classification |
+| `/effort medium` | Sonnet 5.5 | Standard implementation |
+| `/effort high` | Opus 5.5 | Complex reasoning, architecture |
+| `/effort xhigh` | Opus 5.5 (extended thinking) | Critical decisions, complex migrations, ADR |
+| `/effort ultracode` | Opus 5.5 (separate toggle since v2.1.284, Dynamic Workflows) | Maximum code throughput — automated pipelines, massive generation |
+
+> **Default effort per model:** medium on Opus 5.5 and Haiku 5.5; high on Sonnet 5.5, Fable 5.1 and legacy models.
+> **Fable 5.1** (`claude-fable-5-1`, $10/$50 per Mtok) is a current model, suitable for creative/narrative agents. **Mythos** is limited availability (Cyber Verification Program only).
 
 ### Inactivity Alert (v2.1.84+)
 
@@ -539,17 +544,17 @@ CLAUDE.local.md
 
 ### Prefer Pointers over Copies
 
-Do not copy code into CLAUDE.md — it becomes stale. Use `@path` syntax to reference files:
+Do not copy code into CLAUDE.md — it becomes stale. Note that `@path` imports are loaded at launch together with the importing file: they avoid duplication but do **not** reduce context cost. For on-demand loading, cite the path without `@`, or use a rule with `paths:` frontmatter / a skill:
 
 ```markdown
 # In CLAUDE.md:
-See @.claude/references/symfony/CLAUDE.md for Symfony conventions.
-See @docs/API.md for API documentation.
+See @.claude/references/symfony/CLAUDE.md for Symfony conventions.   # always needed: @ import
+Occasional API documentation: docs/API.md                            # on demand: plain path, no @
 ```
 
 ### Emphasis for Critical Rules
 
-Use `IMPORTANT`, `YOU MUST`, `NEVER` for non-negotiable constraints:
+Use `IMPORTANT`, `YOU MUST`, `NEVER` sparingly, reserved for the few truly non-negotiable constraints — if everything is emphasized, nothing stands out (Anthropic recommendation):
 
 ```markdown
 IMPORTANT: Never modify existing migrations.
@@ -617,10 +622,10 @@ Use `/model` to switch models based on task complexity:
 
 | Command | Model | Usage |
 |---------|-------|-------|
-| `/model haiku` | Haiku 4.5 | Simple tasks, classification |
-| `/model sonnet` | Sonnet 4.6 | Standard tasks, implementation |
-| `/model opus` | Opus 4.8 | Complex reasoning, architecture |
-| `/model opusplan` | Opus 4.8 (plan) / Sonnet 4.6 (execute) | **Dynamic tiering**: Opus for Plan Mode, Sonnet for execution — optimizes cost/quality ratio on long tasks |
+| `/model haiku` | Haiku 5.5 | Simple tasks, classification |
+| `/model sonnet` | Sonnet 5.5 | Standard tasks, implementation |
+| `/model opus` | Opus 5.5 | Complex reasoning, architecture |
+| `/model opusplan` | Opus 5.5 (plan) / Sonnet 5.5 (execute) | **Dynamic tiering**: Opus for Plan Mode, Sonnet for execution — optimizes cost/quality ratio on long tasks |
 
 ### Output Filtering via Hooks
 
@@ -631,12 +636,17 @@ Use PostToolUse hooks to filter verbose outputs before Claude processes them:
   "hooks": {
     "PostToolUse": [{
       "matcher": "Bash",
-      "command": "echo '$TOOL_OUTPUT' | grep -A 5 -E '(FAIL|ERROR|WARN)' || echo 'All clear'"
+      "hooks": [{
+        "type": "command",
+        "command": "jq -r '.tool_response.stdout // empty' | grep -A 5 -E '(FAIL|ERROR|WARN)' || echo 'All clear'"
+      }]
     }]
   }
 }
 ```
 
+> The hook payload arrives as JSON on stdin (`$TOOL_OUTPUT` / `$TOOL_INPUT` are not environment variables); read it with `jq`.
+
 Potential reduction: 90%+ for verbose logs.
 
 ### Code Intelligence Plugins
@@ -737,7 +747,7 @@ Files are merged in alphabetical order, allowing teams to layer configurations w
 **Reliability + cost** setting: up to 3 fallback models tried in order when the primary is overloaded/unavailable (equivalent `--fallback-model` flag, also applies to interactive sessions).
 
 ```json
-{ "fallbackModel": ["claude-sonnet-4-6", "claude-haiku-4-5"] }
+{ "fallbackModel": ["claude-sonnet-5-5", "claude-haiku-5-5"] }
 ```
 
 For the 5 `opus` agents (security-auditor, database-architect, migration-specialist, ralph-conductor, tdd-coach), this `opus → sonnet → haiku` fallback avoids interruptions during Opus peak load without degrading current work. Ready-to-use example in `.claude/settings.local.json.example`.
@@ -764,7 +774,7 @@ For the 5 `opus` agents (security-auditor, database-architect, migration-special
 
 **RTK (Rust Token Killer):** CLI proxy that reduces token consumption by 60-90% on dev commands. Install: `rtk init -g`.
 
-**Sub-agent model:** `export CLAUDE_CODE_SUBAGENT_MODEL="claude-sonnet-4-6"` — 40-60% cost reduction.
+**Sub-agent model:** `export CLAUDE_CODE_SUBAGENT_MODEL="claude-sonnet-5-5"` — 40-60% cost reduction.
 
 **Optimization hooks:**
 
@@ -780,7 +790,7 @@ Templates available in `.claude/templates/hooks/`: `output-filter.json`, `pre-co
 | Optimization | Savings |
 |---|---|
 | RTK + ultra-compact | 60-90% on CLI outputs |
-| SUBAGENT_MODEL=claude-sonnet-4-6 | 40-60% sub-agent cost |
+| SUBAGENT_MODEL=claude-sonnet-5-5 | 40-60% sub-agent cost |
 | ENABLE_PROMPT_CACHING_1H | -40% on repetitive sessions (active by default in settings.json) |
 | fallbackModel | Opus reliability — no session interruptions (active by default in settings.json) |
 | PostToolUse hook (Bash+Read) | Reduces context pollution (5K-50K tokens/session on large files) |
@@ -798,7 +808,7 @@ Beyond RTK and native hooks, the Claude Code ecosystem offers tools that cover a
 
 | Tool | License | Angle | Rec |
 |------|---------|-------|-----|
-| **caveman** | MIT | Output (response) compression ~65% | ✅ Integrate |
+| **caveman** | Apache-2.0 | Output (response) compression ~65% | ✅ Integrate |
 | **code-review-graph** | MIT | AST graph, blast-radius reads (−38× to −528×) | ✅ Integrate |
 | **token-savior** | MIT | Symbol index + Bash compaction (−80%) | ✅ Integrate |
 | **claude-token-efficient** | MIT | Anti-verbosity CLAUDE.md rules (~63% output) | ✅ Integrate |

package/Dev/i18n/en/Common/templates/settings.json.template

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-settings.json",
 
   "env": {
-    "CLAUDE_CODE_SUBAGENT_MODEL": "claude-sonnet-4-6",
+    "CLAUDE_CODE_SUBAGENT_MODEL": "claude-sonnet-5-5",
     "CLAUDE_CODE_FORK_SUBAGENT": "1"
   },
 
@@ -47,7 +47,7 @@
     ]
   },
 
-  "model": "claude-opus-4-8",
+  "model": "claude-opus-5-5",
 
   "plansDirectory": ".claude/plans",
 
@@ -59,7 +59,7 @@
           {
             "type": "command",
             "command": "if [ -f .claude/context-essentials.md ]; then echo 'Context preserved for restoration after compaction'; else echo 'No context-essentials.md found'; fi",
-            "timeout": 5000
+            "timeout": 5
           }
         ]
       }
@@ -102,7 +102,7 @@
           {
             "type": "command",
             "command": "OUTPUT_SIZE=$(jq -r '.tool_response.stdout? // .tool_response? // .tool_result? // empty' | wc -c); if [ \"$OUTPUT_SIZE\" -gt 50000 ]; then echo 'NOTICE: Large output (>50KB). Extract only the relevant information and summarize in under 20 lines.'; elif [ \"$OUTPUT_SIZE\" -gt 10000 ]; then echo 'NOTICE: Moderate output (>10KB). Focus on errors, warnings, and key results.'; fi; exit 0",
-            "timeout": 3000
+            "timeout": 3
           }
         ]
       },
@@ -112,7 +112,7 @@
           {
             "type": "command",
             "command": "OUTPUT_SIZE=$(jq -r '.tool_response.stdout? // .tool_response? // .tool_result? // empty' | wc -c); if [ \"$OUTPUT_SIZE\" -gt 50000 ]; then echo 'NOTICE: Large output (>50KB). Summarize key findings in under 20 lines.'; fi; exit 0",
-            "timeout": 3000
+            "timeout": 3
           }
         ]
       }
@@ -124,7 +124,7 @@
           {
             "type": "command",
             "command": "if [ -f .claude/context-essentials.md ]; then jq -n --rawfile c .claude/context-essentials.md '{\"systemMessage\": (\"CONTEXT RESTORED AFTER COMPACTION:\\n\" + $c)}'; else echo '{}'; fi",
-            "timeout": 5000
+            "timeout": 5
           }
         ]
       }

package/Dev/i18n/en/Flutter/agents/flutter-reviewer.md

@@ -1,6 +1,6 @@
 ---
 name: flutter-reviewer
-description: Flutter 3.44 / Dart 3.12 code review specialist — BLoC, Riverpod, widget optimization, platform-specific code
+description: Flutter 3.47 / Dart 3.13 code review specialist — BLoC, Riverpod, widget optimization, platform-specific code
 model: haiku
 effort: low
 maxTurns: 6
@@ -10,11 +10,11 @@ permissionMode: default
 skills: [solid-principles, testing-flutter, security-flutter]
 ---
 
-# Flutter 3.44 / Dart 3.12 Audit Agent
+# Flutter 3.47 / Dart 3.13 Audit Agent
 
 ## Identity
 
-I am a specialist in Flutter 3.44 and Dart 3.12 code review. My approach targets issues specific to cross-platform mobile development: state management quality (BLoC/Riverpod), widget tree optimization, platform-specific code, and rendering performance. I do not perform a generic audit -- I detect what causes janks, memory leaks, unnecessary rebuilds, or platform-specific crashes in production.
+I am a specialist in Flutter 3.47 and Dart 3.13 code review. My approach targets issues specific to cross-platform mobile development: state management quality (BLoC/Riverpod), widget tree optimization, platform-specific code, and rendering performance. I do not perform a generic audit -- I detect what causes janks, memory leaks, unnecessary rebuilds, or platform-specific crashes in production.
 
 ## Scoring System (100 points)
 
@@ -554,7 +554,7 @@ context.pushRoute(UserRoute(id: user.id)); // auto_route
 ## Audit Report Format
 
 ```markdown
-# Flutter 3.44 / Dart 3.12 Audit Report
+# Flutter 3.47 / Dart 3.13 Audit Report
 
 ## Project: [Project Name]
 **Date:** [Date]

package/Dev/i18n/en/Flutter/rules/06-tooling.md

@@ -82,8 +82,6 @@ CMD ["flutter", "test"]
 ### docker-compose.yml
 
 ```yaml
-version: '3.8'
-
 services:
   flutter:
     build:
@@ -194,7 +192,7 @@ docker-shell: ## Interactive shell in Docker
 	docker run --rm -it -v $(PWD):/app my-flutter-app /bin/bash
 
 ci: analyze format-check test ## Complete CI pipeline
-	@echo " CI passed!"
+	@echo "✅ CI passed!"
 ```
 
 ---
@@ -260,21 +258,21 @@ endif
 #!/bin/bash
 set -e
 
-echo "=� Flutter project setup..."
+echo "🚀 Flutter project setup..."
 
 # Check Flutter
 if ! command -v flutter &> /dev/null; then
-    echo "L Flutter is not installed"
+    echo "❌ Flutter is not installed"
     exit 1
 fi
 
-echo "=� Installing dependencies..."
+echo "📦 Installing dependencies..."
 flutter pub get
 
-echo "=' Generating code..."
+echo "🔧 Generating code..."
 flutter pub run build_runner build --delete-conflicting-outputs
 
-echo " Setup complete!"
+echo "✅ Setup complete!"
 ```
 
 ### scripts/test_all.sh
@@ -283,21 +281,21 @@ echo " Setup complete!"
 #!/bin/bash
 set -e
 
-echo ">� Running all tests..."
+echo "🧪 Running all tests..."
 
-echo "1� Unit tests..."
+echo "1️⃣ Unit tests..."
 flutter test test/unit/
 
-echo "2� Widget tests..."
+echo "2️⃣ Widget tests..."
 flutter test test/widget/
 
-echo "3� Integration tests..."
+echo "3️⃣ Integration tests..."
 flutter test integration_test/
 
-echo "=� Generating coverage..."
+echo "📊 Generating coverage..."
 flutter test --coverage
 
-echo " All tests passed!"
+echo "✅ All tests passed!"
 ```
 
 ### scripts/build_all.sh
@@ -306,22 +304,22 @@ echo " All tests passed!"
 #!/bin/bash
 set -e
 
-echo "<� Building all platforms..."
+echo "🏗️ Building all platforms..."
 
-echo "=� Android APK..."
+echo "📱 Android APK..."
 flutter build apk --release
 
-echo "=� Android App Bundle..."
+echo "📱 Android App Bundle..."
 flutter build appbundle --release
 
-echo "<N iOS..."
+echo "🍎 iOS..."
 flutter build ios --release
 
-echo "< Web..."
+echo "🌐 Web..."
 flutter build web --release
 
-echo " Builds complete!"
-echo "=� Files available in build/"
+echo "✅ Builds complete!"
+echo "📦 Files available in build/"
 ```
 
 ---
@@ -543,7 +541,7 @@ make build-apk
 
 ### SwiftPM default on iOS
 
-Flutter 3.44+ uses **Swift Package Manager (SwiftPM)** as the default iOS plugin manager, replacing CocoaPods (still supported but deprecated for new projects).
+Flutter 3.47+ uses **Swift Package Manager (SwiftPM)** as the default iOS plugin manager, replacing CocoaPods (still supported but deprecated for new projects).
 
 ```bash
 # Verify SwiftPM migration
@@ -560,7 +558,7 @@ flutter:
   use-swift-package-manager: false
 ```
 
-**Impact:** plugins without SwiftPM support require `use-swift-package-manager: false` or migration by the plugin author. Most official pub.dev plugins already support SwiftPM since Flutter 3.22+.
+**Impact:** plugins without SwiftPM support require `use-swift-package-manager: false` or migration by the plugin author. Most official pub.dev plugins already support SwiftPM.
 
 **Source:** https://docs.flutter.dev/packages-and-plugins/swift-package-manager/for-app-developers
 
@@ -608,6 +606,14 @@ MaterialButton(onPressed: () {}, child: Text('OK'));
 
 Run `dart fix --apply` to automatically migrate detectable deprecations.
 
+### Breaking changes Flutter 3.44 and 3.47
+
+- **3.44**: `RawMenuAnchor` close order changed; `onReorder` deprecated; `TextInputConnection.setStyle` deprecated; `cacheExtent` / `cacheExtentStyle` deprecated; `IconData` is now `final`; Android 17 ignores orientation/resizability restrictions on large screens; `ListTile` reports a debug error when wrapped in a colored widget; Android projects migrate to built-in Kotlin; page transition builders reorganized.
+- **3.47**: OpenGL ES render-to-texture content is stored top-down; `Semantics` header / `headingLevel` behavior updated on iOS and Android; `describeEnum` removed (use `Enum.name`).
+- **Announced, not yet in stable**: migration to standalone `material_ui` / `cupertino_ui` packages.
+
+**Source:** https://docs.flutter.dev/release/breaking-changes
+
 ---
 
 *These tools and configurations optimize the Flutter development workflow.*

package/Dev/i18n/en/Flutter/rules/08-quality-tools.md

@@ -139,7 +139,7 @@ include: package:very_good_analysis/analysis_options.yaml
 
 ```yaml
 dev_dependencies:
-  flutter_lints: ^5.0.0  # Flutter 3.44 / Dart 3.12+ (v3.x misses sealed classes & dot shorthands lints)
+  flutter_lints: ^5.0.0  # Flutter 3.47 / Dart 3.13+ (v3.x misses sealed classes & dot shorthands lints)
 ```
 
 ---