@the-bearded-bear/claude-craft 8.22.0 → 8.23.0

package/Dev/i18n/en/Flutter/rules/12-performance.md

@@ -3,7 +3,7 @@
 ## const Widgets
 
 ```dart
-//  GOOD - const
+// ✅ GOOD - const
 class MyWidget extends StatelessWidget {
   const MyWidget({super.key});
 
@@ -19,7 +19,7 @@ class MyWidget extends StatelessWidget {
   }
 }
 
-// L BAD - no const
+// ❌ BAD - no const
 class MyWidget extends StatelessWidget {
   @override
   Widget build(BuildContext context) {
@@ -39,7 +39,7 @@ class MyWidget extends StatelessWidget {
 ## ListView Optimization
 
 ```dart
-//  GOOD - ListView.builder (lazy loading)
+// ✅ GOOD - ListView.builder (lazy loading)
 ListView.builder(
   itemCount: items.length,
   itemBuilder: (context, index) {
@@ -47,7 +47,7 @@ ListView.builder(
   },
 )
 
-// L BAD - ListView with children (all created at once)
+// ❌ BAD - ListView with children (all created at once)
 ListView(
   children: items.map((item) => ItemWidget(item)).toList(),
 )
@@ -123,7 +123,7 @@ VisibilityDetector(
 ## Avoid Rebuilds
 
 ```dart
-//  GOOD - Separate widgets
+// ✅ GOOD - Separate widgets
 class MyPage extends StatelessWidget {
   @override
   Widget build(BuildContext context) {
@@ -136,12 +136,12 @@ class MyPage extends StatelessWidget {
   }
 }
 
-//  GOOD - RepaintBoundary
+// ✅ GOOD - RepaintBoundary
 RepaintBoundary(
   child: ComplexWidget(),
 )
 
-//  GOOD - AutomaticKeepAliveClientMixin for TabBar
+// ✅ GOOD - AutomaticKeepAliveClientMixin for TabBar
 class MyTab extends StatefulWidget {
   @override
   State<MyTab> createState() => _MyTabState();
@@ -213,16 +213,16 @@ heavy.showFeature();
 ## Performance Checklist
 
 ```
-� const widgets everywhere possible
-� ListView.builder for lists
-� Image caching enabled
-� Lazy loading of images
-� Avoid unnecessary rebuilds
-� RepaintBoundary for complex widgets
-� Code splitting for heavy features
-� Profile mode tested
-� Frame rate > 60 FPS
-� Startup time < 2s
+□ const widgets everywhere possible
+□ ListView.builder for lists
+□ Image caching enabled
+□ Lazy loading of images
+□ Avoid unnecessary rebuilds
+□ RepaintBoundary for complex widgets
+□ Code splitting for heavy features
+□ Profile mode tested
+□ Frame rate > 60 FPS
+□ Startup time < 2s
 ```
 
 ---

package/Dev/i18n/en/PHP/CLAUDE.md.template

@@ -35,7 +35,7 @@ See `rules/02-architecture.md` for complete patterns.
 | Rule | Reason |
 |------|--------|
 | `declare(strict_types=1)` | Type safety enforcement |
-| PSR-12 + PHPStan level 10 | Code quality |
+| PER-CS 3.0 + PHPStan level 10 | Code quality |
 | Repository pattern | Data access abstraction |
 | 80%+ coverage | Quality assurance |
 

package/Dev/i18n/en/PHP/agents/php-reviewer.md

@@ -1,6 +1,6 @@
 ---
 name: php-reviewer
-description: PHP 8.5 and Clean Architecture code review specialist — DDD, hexagonal, PSR-12, PHPStan, security analysis
+description: PHP 8.5 and Clean Architecture code review specialist — DDD, hexagonal, PER-CS 3.0, PHPStan, security analysis
 model: haiku
 effort: low
 maxTurns: 6
@@ -21,7 +21,7 @@ I am a specialist in PHP 8.5 and Clean Architecture code review. My approach foc
 | Category | Points | Focus |
 |----------|--------|-------|
 | Architecture and Clean Code | 30 | Clean Architecture, hexagonal, DDD, CQRS |
-| PHP 8.5 and Quality | 20 | PSR-12, PHPStan level 10, strict_types, modern features |
+| PHP 8.5 and Quality | 20 | PER-CS 3.0, PHPStan level 10, strict_types, modern features |
 | Tests | 25 | Pest PHP, PHPUnit, mutation testing, coverage |
 | Security and Performance | 25 | OWASP, SQL injection, N+1, cache |
 
@@ -211,7 +211,7 @@ $first = array_first($items);
 $last = array_last($items);
 ```
 
-### PSR-12 Conventions
+### PER-CS 3.0 Conventions
 
 | Criterion | Expected |
 |-----------|----------|
@@ -229,7 +229,7 @@ $last = array_last($items);
 |-----------|--------|
 | strict_types=1 everywhere, PHPStan level 10 without errors | 6 |
 | Zero unjustified `mixed`, complete typing (params + returns) | 5 |
-| PSR-12 respected, explicit naming, readonly used | 5 |
+| PER-CS 3.0 respected, explicit naming, readonly used | 5 |
 | PHP 8.5 features: enums, pipe operator, clone with | 4 |
 
 ---
@@ -414,7 +414,7 @@ $orders = $repository->findAllWithItems(); // JOIN or batch loading
 
 1. Verify strict_types=1 in every file
 2. Mentally run PHPStan level 10 (types, mixed, any)
-3. Verify PSR-12 compliance
+3. Verify PER-CS 3.0 compliance
 4. Scan PHP 8.5 feature usage
 5. Verify enums, readonly, match expressions
 
@@ -531,7 +531,7 @@ $orders = $repository->findAllWithItems(); // JOIN or batch loading
 | Tool | Usage |
 |------|-------|
 | **PHPStan** (level 10) | Static analysis, type safety |
-| **PHP-CS-Fixer** | PSR-12 compliance |
+| **PHP-CS-Fixer** | PER-CS 3.0 compliance |
 | **Pest PHP** | Modern and expressive tests |
 | **Infection** | Mutation testing (MSI >= 80%) |
 | **Deptrac** | Layer dependency verification |

package/Dev/i18n/en/PHP/commands/check-compliance.md

@@ -50,7 +50,7 @@ Execute code quality check:
 **Command**: Use slash command `/php:check-code-quality` or manually follow steps in `check-code-quality.md`
 
 **Evaluated Criteria**:
-- PSR-12 compliance (5 pts)
+- PER-CS 3.0 compliance (5 pts)
 - PHPStan level 10 (5 pts)
 - Strict type hints and declare(strict_types=1) (4 pts)
 - KISS/DRY/YAGNI principles (4 pts)

package/Dev/i18n/en/PHP/rules/03-coding-standards.md

@@ -29,7 +29,9 @@ class UserAccount
 }
 ```
 
-### PSR-12: Extended Coding Style
+### PER-CS 3.0: Extended Coding Style
+
+> PER Coding Style 3.0 extends, expands and replaces PSR-12 (PSR-1 remains required). PHP-CS-Fixer ruleset: `@PER-CS3x0` (`@PER-CS3.0` is deprecated).
 
 ```php
 <?php
@@ -629,7 +631,7 @@ interface UserRepositoryInterface
 ## Coding Standards Checklist
 
 - [ ] `declare(strict_types=1)` at top of every file
-- [ ] PSR-12 formatting applied
+- [ ] PER-CS 3.0 formatting applied
 - [ ] PSR-4 autoloading configured
 - [ ] All methods have return type declarations
 - [ ] All parameters have type declarations

package/Dev/i18n/en/PHP/rules/06-tooling.md

@@ -43,7 +43,7 @@ composer validate
     "minimum-stability": "stable",
     "prefer-stable": true,
     "require": {
-        "php": ">=8.3",
+        "php": ">=8.4",
         "ext-pdo": "*",
         "ext-json": "*",
         "ramsey/uuid": "^4.7",
@@ -51,11 +51,10 @@ composer validate
         "psr/container": "^2.0"
     },
     "require-dev": {
-        "phpunit/phpunit": "^11.0",
         "phpstan/phpstan": "^2.0",
         "friendsofphp/php-cs-fixer": "^3.0",
         "rector/rector": "^2.4",
-        "pestphp/pest": "^4.7"
+        "pestphp/pest": "^5.3"
     },
     "autoload": {
         "psr-4": {
@@ -107,7 +106,7 @@ $finder = PhpCsFixer\Finder::create()
 return (new PhpCsFixer\Config())
     ->setRiskyAllowed(true)
     ->setRules([
-        '@PSR12' => true,
+        '@PER-CS3x0' => true,
         '@PHP85Migration' => true,
         '@Symfony' => true,
         '@Symfony:risky' => true,
@@ -493,8 +492,6 @@ WORKDIR /var/www/html
 ### docker-compose.yml
 
 ```yaml
-version: '3.8'
-
 services:
   php:
     build:
@@ -533,7 +530,7 @@ volumes:
 ## Tooling Checklist
 
 - [ ] Composer configured with autoload
-- [ ] PHP-CS-Fixer configured (PSR-12 + strict)
+- [ ] PHP-CS-Fixer configured (PER-CS 3.0 + strict)
 - [ ] PHPStan at level 10 with strict rules
 - [ ] PHPUnit/Pest configured with coverage
 - [ ] Rector configured for upgrades

package/Dev/i18n/en/PHP/rules/08-quality-tools.md

@@ -116,7 +116,7 @@ $finder = PhpCsFixer\Finder::create()
 return (new PhpCsFixer\Config())
     ->setRiskyAllowed(true)
     ->setRules([
-        '@PSR12' => true,
+        '@PER-CS3x0' => true,
         '@PHP85Migration' => true,
         '@Symfony' => true,
         '@Symfony:risky' => true,
@@ -209,7 +209,7 @@ vendor/bin/php-cs-fixer fix
 vendor/bin/php-cs-fixer fix src/Domain/Entity/User.php
 
 # Show rules explanation
-vendor/bin/php-cs-fixer describe @PSR12
+vendor/bin/php-cs-fixer describe @PER-CS3x0
 ```
 
 ## Architecture Testing

package/Dev/i18n/en/Paperclip/CLAUDE.md.template

@@ -4,8 +4,8 @@
 
 ## What (Stack & Structure)
 
-**Stack**: Node.js 22+ LTS, TypeScript 5.x (strict), React 19+, Vitest 4.1+, pnpm 9.15+, PostgreSQL 15+
-**Paperclip**: 2026.609.0+ (MIT) — https://docs.paperclip.ing/
+**Stack**: Node.js 24.11+ LTS, TypeScript 5.x (strict), React 19+, Vitest 4.1+, pnpm 9.15+, PostgreSQL 15+
+**Paperclip**: 2026.1012.0+ (MIT) — https://docs.paperclip.ing/
 
 **Paperclip is a two-layer system**: a control plane (server + web + DB) that owns all governance state, and adapters that execute work and report back. Adapters never decide budgets or approvals.
 

package/Dev/i18n/en/Paperclip/README.md

@@ -15,7 +15,7 @@ This directory contains the Claude-Craft rules, commands, skills, and templates
 | React | 19+ (web UI) |
 | Vitest | 4.1+ |
 | PostgreSQL | 15+ (or embedded for dev) |
-| Paperclip | 2026.609.0+ |
+| Paperclip | 2026.1012.0+ |
 
 ## What's in here
 

package/Dev/i18n/en/Paperclip/commands/setup-company.md

@@ -19,7 +19,7 @@ Walk an operator through onboarding: install, create the instance, bootstrap the
 
 ### 1. Preconditions
 
-- [ ] Node.js 20+ and pnpm 9.15+ installed
+- [ ] Node.js 24.11+ and pnpm 9.15+ installed
 - [ ] PostgreSQL reachable **OR** accept the embedded Postgres for local dev
 - [ ] Port 3100 available (or set `PORT`)
 

package/Dev/i18n/en/Paperclip/rules/06-tooling.md

@@ -6,7 +6,7 @@
 
 | Tool | Version | Why |
 |---|---|---|
-| Node.js | 20+ LTS (22 LTS also supported and recommended) | Paperclip minimum; Node.js 22 LTS tested in CI |
+| Node.js | 24.11+ LTS | Paperclip minimum (`paperclipai` `engines`: `>=24.11.0`) |
 | pnpm | 9.15+ | Official workspace manager |
 | tsx | latest | Running TS files during dev |
 | PostgreSQL | 15+ (or embedded) | Primary store |
@@ -183,7 +183,7 @@ jobs:
   ci:
     strategy:
       matrix:
-        node: [20.x, 22.x]
+        node: [24.x]
     steps:
       - uses: pnpm/action-setup@v3
       - run: pnpm install --frozen-lockfile
@@ -209,7 +209,7 @@ Paperclip ships a Dockerfile (see `docs.paperclip.ing/deployment/docker`). For c
 
 ## Checklist
 
-- [ ] Node 20+, pnpm 9.15+, Corepack enabled
+- [ ] Node 24.11+, pnpm 9.15+, Corepack enabled
 - [ ] ESLint flat config + Prettier configured
 - [ ] Pre-commit hook runs lint-staged
 - [ ] CI runs lint, typecheck, test, build

package/Dev/i18n/en/Paperclip/rules/11-security-paperclip.md

@@ -141,6 +141,15 @@ Adjust CSP script/style sources if the UI requires specific CDNs; otherwise keep
 - [ ] Activity log append-only, DB-enforced where possible
 - [ ] Kill switch + plugin disable tested
 
+## Upgrade Notes: Breaking Changes (2026.916.0 to 2026.1012.0)
+
+Verified against the official GitHub release notes (paperclipai/paperclip).
+
+- **2026.916.0**: agent APIs no longer return plaintext credentials (`plain` bindings are redacted: use `secretRef`, never read secrets back); "cheap model profiles" removed (migration `0236` strips stored `modelProfiles`); `X-Forwarded-Host` is honored only when the immediate peer passes `TRUST_PROXY` (set it behind a reverse proxy, otherwise the raw `Host` header is used); the legacy Anthropic REST connection option is removed (REST tool connections are validated as REST).
+- **2026.1001.0**: the legacy Composio broker is retired (no automated migration; replacement: Composio Connect behind the `enableMcpAggregators` flag). Execution harnesses now default to **full auto**: ACPX/Claude `approve-all`, OpenCode `allow`, Codex `never` (no approval pauses). To keep provider-side approval gates, set an explicit restrictive mode per agent: `acpxPermissionMode` (`approve-paperclip`, `approve-reads` or `deny-all`) or `opencodePermissionMode` (`ask` or `deny`). Paperclip's own governed approvals still apply.
+- **2026.1005.0**: `PAPERCLIP_CLOUD_UI_SNIPPET` / `PAPERCLIP_CLOUD_UI_SNIPPET_B64` no longer inject HTML (move the integration to a plugin UI contribution); an @-mention in a task comment is context only and no longer starts a run (only explicit assignment or review requests do).
+- **2026.1012.0**: workspace restore locks are now SQLite file locks under `<instance root>/locks/directory-merge/`: stop all old server and worker processes before upgrading or rolling back; tool grants with unknown selectors or malformed restrictions now deny access (review custom grants).
+
 ---
 
 **Last updated:** 2026-04 | **Version:** 2.0.0 | **Author:** The Bearded CTO

package/Dev/i18n/en/Paperclip/skills/coding-standards-ts/SKILL.md

@@ -5,6 +5,6 @@ description: Paperclip TypeScript coding standards — strict mode, kebab files,
 
 # Paperclip Coding Standards (TypeScript)
 
-Node 20+, TypeScript strict + `noUncheckedIndexedAccess`, pnpm 9.15+ workspaces, kebab-case files, PascalCase types, camelCase vars, no `any`, structured logs with redaction.
+Node 24.11+, TypeScript strict + `noUncheckedIndexedAccess`, pnpm 9.15+ workspaces, kebab-case files, PascalCase types, camelCase vars, no `any`, structured logs with redaction.
 
 See ../../rules/03-coding-standards.md for detailed documentation.

package/Dev/i18n/en/Python/commands/generate-model.md

@@ -31,7 +31,9 @@ Identify:
 - Indexes and constraints
 - Validations
 
-### Step 2: SQLAlchemy 2.0 Model
+### Step 2: SQLAlchemy 2.1 Model
+
+> **Migration 2.0 -> 2.1 (key points):** Python 3.11+ required; `greenlet` is no longer installed by default (asyncio: `sqlalchemy[asyncio]` extra); default PostgreSQL driver is psycopg 3; `Session` autoflush is now unconditional (including Core/text); `Select.filter_by()` raises `AmbiguousColumnError` on ambiguous names; mapped dataclass defaults are delivered via descriptor. Source: docs.sqlalchemy.org/en/21/changelog/migration_21.html
 
 [Create complete model with Mapped, relationships, constraints]
 

package/Dev/i18n/en/Python/rules/06-tooling.md

@@ -1,6 +1,6 @@
 # Rule 06: Tooling
 
-> **Reference version:** Python **3.14 (stable, 3.14.6+)** — Ruff 0.15+, pytest 9.x (drops Python 3.9).
+> **Reference version:** Python **3.14 (stable, 3.14.8+)** — Ruff 0.17+, pytest 9.x (drops Python 3.9).
 > **⚠ JIT (PEP 744):** experimental in Python 3.14, **disabled by default**, subject to re-evaluation by the Python Steering Council before Python 3.15 (Oct. 2026). Do not rely on it in production.
 
 Python tooling for code quality, testing, and development workflow.

package/Dev/i18n/en/Python/rules/08-quality-tools.md

@@ -1,6 +1,6 @@
 # Code Quality Tools - Python
 
-> **Reference versions:** Ruff **0.15+** | pytest **9.x** (drops Python 3.9) | target `py314`.
+> **Reference versions:** Ruff **0.17+** | pytest **9.x** (drops Python 3.9) | target `py314`.
 
 ## Ruff - Fast Python Linter & Formatter
 

package/Dev/i18n/en/Python/rules/11-security-python.md

@@ -140,7 +140,7 @@ async def search_users(
 
 ### Password Hashing with Argon2id (pwdlib)
 
-> **passlib is unmaintained since 2020 and incompatible with Python 3.13+ (the `crypt` stdlib module it depended on was removed). bcrypt is explicitly forbidden in new code by project rule 11 (OWASP 2026 mandate: Argon2id). Use `pwdlib` with Argon2id instead.**
+> **passlib is unmaintained since 2020 and incompatible with Python 3.13+ (the `crypt` stdlib module it depended on was removed). bcrypt is legacy-only per project rule 11 (OWASP: Argon2id first; bcrypt only if Argon2id/scrypt are unavailable). Use `pwdlib` with Argon2id instead.**
 
 ```python
 # pip install pwdlib[argon2]
@@ -538,7 +538,7 @@ pip-audit --fix
 # pyproject.toml - Pin versions for security
 [project]
 dependencies = [
-    "fastapi>=0.115.0,<0.116.0",
+    "fastapi>=0.143.0,<1.0.0",
     "pydantic>=2.10.0,<3.0.0",
     "sqlalchemy>=2.0.0,<3.0.0",
 ]
@@ -582,15 +582,15 @@ updates:
 > Authoritative list: see `.claude/rules/11-security.md`.
 
 1. **Broken Access Control** (incl. SSRF): deny by default, verify permissions on every request
-2. **Cryptographic Failures**: TLS 1.3, Argon2id for passwords, secrets in vault
-3. **Injection**: Use ORMs, parameterized queries, validate all input
-4. **Insecure Design**: threat modeling, defense in depth, rate limiting
-5. **Security Misconfiguration**: secure defaults, security headers
-6. **Software Supply Chain Failures** *(new 2025)*: SLSA 1.0, SBOM, Sigstore, `pip-audit`
-7. **Mishandling of Exceptional Conditions** *(new 2025)*: log errors, never expose stack traces in prod
-8. **Authentication Failures**: MFA, brute-force protection, invalidate sessions on logout
-9. **Security Logging and Monitoring Failures**: centralize logs, alert on anomalies, retain >= 1 year
-10. **Vulnerable and Outdated Components**: Dependabot/Renovate, `pip-audit`, Trivy
+2. **Security Misconfiguration**: secure defaults, security headers
+3. **Software Supply Chain Failures** *(new 2025, absorbs Vulnerable and Outdated Components)*: SLSA 1.2, SBOM (CycloneDX 1.7), Sigstore, `pip-audit`, Dependabot/Renovate, Trivy
+4. **Cryptographic Failures**: TLS 1.3, Argon2id for passwords, secrets in vault
+5. **Injection**: Use ORMs, parameterized queries, validate all input
+6. **Insecure Design**: threat modeling, defense in depth, rate limiting
+7. **Authentication Failures**: MFA, brute-force protection, invalidate sessions on logout
+8. **Software or Data Integrity Failures**: verify signatures/checksums, secured CI/CD
+9. **Security Logging and Alerting Failures**: centralize logs, alert on anomalies, retain >= 1 year
+10. **Mishandling of Exceptional Conditions** *(new 2025)*: log errors, never expose stack traces in prod
 
 ## Conclusion
 

package/Dev/i18n/en/React/agents/react-reviewer.md

@@ -1,6 +1,6 @@
 ---
 name: react-reviewer
-description: React 19.2 + Compiler 1.0 and TypeScript code review specialist — hooks, composition, performance, bundle analysis
+description: React 19.3 + Compiler 1.0 and TypeScript code review specialist — hooks, composition, performance, bundle analysis
 model: haiku
 effort: low
 maxTurns: 6
@@ -10,11 +10,11 @@ permissionMode: default
 skills: [solid-principles, testing-react, security-react]
 ---
 
-# React 19.2 + Compiler 1.0 / TypeScript Audit Agent
+# React 19.3 + Compiler 1.0 / TypeScript Audit Agent
 
 ## Identity
 
-I am a specialist in React 19.2 + Compiler 1.0 and TypeScript code review. My approach focuses on issues specific to React: the Rules of Hooks, component composition, performant rendering, the Server/Client Components boundary, and bundle size analysis. I do not perform a generic audit -- I detect what breaks, slows down, or unnecessarily complicates a modern React application.
+I am a specialist in React 19.3 + Compiler 1.0 and TypeScript code review. My approach focuses on issues specific to React: the Rules of Hooks, component composition, performant rendering, the Server/Client Components boundary, and bundle size analysis. I do not perform a generic audit -- I detect what breaks, slows down, or unnecessarily complicates a modern React application.
 
 ## Scoring System (100 points)
 
@@ -247,7 +247,11 @@ Does the component re-render on every parent change?
     NO --> Acceptable (unnecessary micro-optimization)
 ```
 
-### React 19.2 + Compiler 1.0: Server Components vs Client Components
+### React 19.3 features to know
+
+No breaking changes. `<ViewTransition>` and Fragment Refs (`<Fragment ref>`) are stable; `addTransitionType` tags a Transition; `use(browser())` (`react-dom`) opts a component out of server rendering; Trusted Types are supported; Context renders without a Provider in Server Components; Effects are double-invoked on hydration in Strict Mode. Do not flag these APIs as experimental. 
+
+### React 19.3 + Compiler 1.0: Server Components vs Client Components
 
 ```
 Does the component need interactivity (hooks, events)?
@@ -368,7 +372,7 @@ import { format } from 'date-fns';
 ## Audit Report Format
 
 ```markdown
-# React 19.2 + Compiler 1.0 / TypeScript Audit Report
+# React 19.3 + Compiler 1.0 / TypeScript Audit Report
 
 ## Project: [Project Name]
 **Date:** [Date]

package/Dev/i18n/en/React/rules/06-tooling.md

@@ -398,8 +398,6 @@ http {
 ### docker-compose.yml
 
 ```yaml
-version: '3.8'
-
 services:
   # React Frontend
   frontend:

package/Dev/i18n/en/React/rules/11-security-react.md

@@ -564,6 +564,15 @@ snyk test
 snyk monitor
 ```
 
+### React Server Components — React2Shell (CVE-2025-55182)
+
+- **CVSS 10.0**: unauthenticated remote code execution through a crafted HTTP request to a Server Function endpoint; apps supporting React Server Components are affected even without Server Functions.
+- Affected: `react-server-dom-webpack`, `-parcel`, `-turbopack` 19.0, 19.1.0, 19.1.1, 19.2.0. Fixed: 19.0.1, 19.1.2, 19.2.1.
+- Follow-up flaws (CVE-2025-55183, CVE-2025-55184, CVE-2025-67779, CVE-2026-23864: DoS / source exposure): always run the latest patch release.
+- Also upgrade the frameworks that bundle these packages (Next.js, React Router, Waku, `@parcel/rsc`, `@vitejs/plugin-rsc`, rwsdk).
+
+Source: [React advisory](https://react.dev/blog/2025/12/03/critical-security-vulnerability-in-react-server-components)
+
 ## Secrets Management
 
 ### Environment Variables

package/Dev/i18n/en/ReactNative/agents/reactnative-reviewer.md

@@ -1,6 +1,6 @@
 ---
 name: reactnative-reviewer
-description: React Native 0.85 and Expo code review specialist — New Architecture, navigation, mobile performance, bundle analysis
+description: React Native 0.87 and Expo code review specialist — New Architecture, navigation, mobile performance, bundle analysis
 model: haiku
 effort: low
 maxTurns: 6
@@ -10,11 +10,11 @@ permissionMode: default
 skills: [solid-principles, testing-reactnative, security-reactnative, architecture, navigation]
 ---
 
-# React Native 0.85 / Expo Audit Agent
+# React Native 0.87 / Expo Audit Agent
 
 ## Identity
 
-I am a specialist in React Native 0.85 and Expo code review. My approach focuses on mobile-specific issues: the New Architecture (JSI, Fabric, TurboModules), navigation with Expo Router, 60 FPS performance, bundle size management, and composition patterns adapted to mobile. I do not perform a generic audit -- I detect what breaks, slows down, or unnecessarily complicates a modern React Native application using the New Architecture by default.
+I am a specialist in React Native 0.87 and Expo code review. My approach focuses on mobile-specific issues: the New Architecture (JSI, Fabric, TurboModules), navigation with Expo Router, 60 FPS performance, bundle size management, and composition patterns adapted to mobile. I do not perform a generic audit -- I detect what breaks, slows down, or unnecessarily complicates a modern React Native application using the New Architecture by default.
 
 ## Scoring System (100 points)
 
@@ -411,7 +411,7 @@ import { format } from 'date-fns';
 ## Audit Report Format
 
 ```markdown
-# React Native 0.85 / Expo Audit Report
+# React Native 0.87 / Expo Audit Report
 
 ## Project: [Project Name]
 **Date:** [Date]

package/Dev/i18n/en/ReactNative/rules/02-architecture.md

@@ -1259,6 +1259,6 @@ export default function ArticlesScreen() {
 | Project type | Activation |
 |--------------|-----------|
 | **New project (Expo SDK 56+)** | New Architecture **on** by default. |
-| **Existing project (bare RN 0.85)** | Set `newArchEnabled=true` in `android/gradle.properties` AND `RCT_NEW_ARCH_ENABLED=1` on iOS pod install. |
+| **Existing project (bare RN 0.87)** | Set `newArchEnabled=true` in `android/gradle.properties` AND `RCT_NEW_ARCH_ENABLED=1` on iOS pod install. |
 
 > Expo SDK 56+ ships with New Architecture enabled by default. `npx create-expo-app` generates projects with JSI, TurboModules, and Fabric active out of the box.

package/Dev/i18n/en/ReactNative/rules/06-tooling.md

@@ -8,9 +8,9 @@ Ce document couvre les outils essentiels pour le développement React Native ave
 
 ## System Requirements
 
-### Node.js >= 22 LTS (required for RN 0.85)
+### Node.js >= 22 LTS (required for RN 0.87)
 
-React Native 0.85 requires **Node.js 22.x LTS** minimum (RN 0.85 required Node 20). The recommended version is **Node.js 22.x active LTS**.
+React Native 0.87 requires **Node.js 22.x LTS** minimum (RN 0.85 required Node 20). The recommended version is **Node.js 22.x active LTS**.
 
 ```bash
 # Check version
@@ -22,7 +22,7 @@ nvm use 22
 nvm alias default 22
 ```
 
-> Node versions < 22 are no longer supported with RN 0.85. Upgrade before migrating.
+> Node versions < 22 are no longer supported with RN 0.87. Upgrade before migrating.
 
 ### React Native Gesture Handler 3.0.0 — Breaking Changes
 
@@ -399,6 +399,22 @@ npx expo install expo-camera@latest
 - [ ] Consistent package manager (npm)
 - [ ] npm scripts configured
 
+## React Native 0.86 / 0.87 and Expo SDK 57
+
+**Expo SDK 57 ships RN 0.86** (0.86.3); **bare RN = 0.87** (0.87.1 `latest`, 0.88 in RC). An Expo project follows the RN version of its SDK.
+
+- `expo@57.0.17+`: Hermes V1 / Reanimated memory regression fixed (from 57.0.9) and dev startup time fixed
+- Reanimated 4.7.x supports RN 0.86-0.88 (4.5 is bundled in SDK 57)
+- Worklets bundle mode is experimental and unsupported: **do not use it in production**
+- Prefer **development builds** over Expo Go when targeting the stores
+- `expo prebuild` cleans and regenerates `android/` and `ios/` by default (`--no-clean` to keep them)
+- iOS 27: `ios.enableSceneSupport` (`expo-build-properties`, `expo@57.0.23+`, opt-in; default in SDK 58)
+- React Navigation 8 is in alpha: watch it, stay on 7.x in production
+
+**RN 0.87 breaking changes:** strict TypeScript API by default (deep imports of `react-native/Libraries/*` forbidden, opt-out until 0.88); `InteractionManager` removed (use `requestIdleCallback`); `ImageBackground` deprecated (absolute `Image` inside a `View`); `Modal.animated` and `StatusBar` `backgroundColor`/`translucent` props removed; Node 22.13+, Kotlin 2.0+; AGP 9 supported (`android.builtInKotlin=false` and `android.newDsl=false` keep the old behavior); experimental opt-in Swift Package Manager on iOS (CocoaPods stays the default).
+
+**Sources:** [RN 0.87](https://reactnative.dev/blog/2026/08/11/react-native-0.87), [Expo SDK 57](https://expo.dev/changelog/sdk-57)
+
 ---
 
 **Les bons outils rendent le développement plus efficace et agréable.**

package/Dev/i18n/en/Symfony/agents/symfony-reviewer.md

@@ -1,6 +1,6 @@
 ---
 name: symfony-reviewer
-description: Symfony 8 / PHP 8.5 code review specialist — DDD, Doctrine, CQRS, API Platform
+description: Symfony 8.1 / PHP 8.4+ (8.5 recommended) code review specialist — DDD, Doctrine, CQRS, API Platform
 model: haiku
 effort: low
 maxTurns: 6
@@ -10,11 +10,11 @@ permissionMode: default
 skills: [solid-principles, testing-symfony, security-symfony, architecture-clean-ddd, doctrine-extensions]
 ---
 
-# Symfony 8 / PHP 8.5 Audit Agent
+# Symfony 8.1 / PHP 8.4+ (8.5 recommended) Audit Agent
 
 ## Identity
 
-I am a specialist in Symfony 8 and PHP 8.5 code audit. My approach targets real issues in Symfony projects: DDD design quality, Doctrine performance, separation of responsibilities across application layers, security (OWASP + GDPR), and testing rigor. I do not perform a generic review -- I detect anti-patterns specific to the Symfony/Doctrine/API Platform ecosystem.
+I am a specialist in Symfony 8.1 and PHP 8.4+ (8.5 recommended) code audit. My approach targets real issues in Symfony projects: DDD design quality, Doctrine performance, separation of responsibilities across application layers, security (OWASP + GDPR), and testing rigor. I do not perform a generic review -- I detect anti-patterns specific to the Symfony/Doctrine/API Platform ecosystem.
 
 ## Scoring System (100 points)
 
@@ -434,7 +434,7 @@ $apiKey = $this->getParameter('stripe_api_key');
 ## Audit Report Format
 
 ```markdown
-# Symfony 8 / PHP 8.5 Audit Report
+# Symfony 8.1 / PHP 8.4+ (8.5 recommended) Audit Report
 
 ## Project: [Project Name]
 **Date:** [Date]
@@ -519,7 +519,7 @@ $apiKey = $this->getParameter('stripe_api_key');
 |------|-------|
 | **PHPStan level 10** | Strict static analysis |
 | **Deptrac** | Layer dependency validation |
-| **PHP-CS-Fixer** (PSR-12) | Automatic formatting |
+| **PHP-CS-Fixer** (PER-CS 3.0) | Automatic formatting |
 | **Pest PHP** / PHPUnit | Unit and integration tests |
 | **Behat** | BDD, business scenarios |
 | **Infection** | Mutation testing |

package/Dev/i18n/en/Symfony/checklists/README.md

@@ -20,7 +20,7 @@ This folder contains 4 essential checklists for the development workflow.
 **Automatic checks:**
 - ✅ Tests pass (unit + integration + Behat)
 - ✅ PHPStan level 10 (0 errors)
-- ✅ CS-Fixer (PSR-12 formatted code)
+- ✅ CS-Fixer (PER-CS 3.0 formatted code)
 - ✅ Hadolint (valid Dockerfile)
 - ✅ Coverage ≥ 80%
 - ✅ Conformant commit message (Conventional Commits)

package/Dev/i18n/en/Symfony/checklists/new-feature.md

@@ -424,7 +424,7 @@ make phpstan
 
 # CS-Fixer
 make cs-fix
-# ✅ Code formaté PSR-12
+# ✅ Code formaté PER-CS 3.0
 
 # Hadolint (si Dockerfile modifié)
 make hadolint
@@ -585,7 +585,7 @@ Alignement avec la politique tarifaire des hôtels partenaires.
 
 - [x] Tests passent
 - [x] PHPStan niveau 8 OK
-- [x] Code formaté (PSR-12)
+- [x] Code formaté (PER-CS 3.0)
 - [x] Documentation à jour
 - [x] Pas de breaking changes
 - [x] Migration BDD: N/A