mustflow 2.103.16 → 2.103.21

package/dist/cli/i18n/fr.js

@@ -777,6 +777,7 @@ Lisez ces fichiers avant de travailler :
     "scriptPack.script.codeOutline.summary": "Scan TypeScript and JavaScript files for symbol headers and line ranges",
     "scriptPack.script.codeDependencyGraph.summary": "Trace relative TypeScript and JavaScript dependency graph edges",
     "scriptPack.script.codeImportCycle.summary": "Detect relative TypeScript and JavaScript import cycles with line evidence",
+    "scriptPack.script.codeModuleBoundary.summary": "Check configured module boundary import rules and shared budgets",
     "scriptPack.script.codeChangeImpact.summary": "Analyze changed files for impact, script-pack, and verification hints",
     "scriptPack.script.codeSymbolRead.summary": "Read a bounded source snippet by source anchor, symbol line, or explicit line range",
     "scriptPack.script.codeRouteOutline.summary": "Scan Hono, Elysia, Axum, and NestJS route methods, paths, handlers, and lifecycle chains",
@@ -978,6 +979,32 @@ Lisez ces fichiers avant de travailler :
     "importCycle.error.unknownAction": "Unknown import-cycle action: {action}",
     "importCycle.error.missingPath": "Provide at least one path to check",
     "importCycle.error.invalidPositiveInteger": "{option} must be a positive safe integer: {value}",
+    "moduleBoundary.help.summary": "Check configured module boundary rules against TypeScript and JavaScript import graph evidence.",
+    "moduleBoundary.help.option.config": "Module boundary TOML config path. Default: .mustflow/config/module-boundaries.toml",
+    "moduleBoundary.help.option.maxDepth": "Maximum dependency depth from target files. Default: 20",
+    "moduleBoundary.help.option.maxFiles": "Maximum number of source files to scan. Default: 1000",
+    "moduleBoundary.help.option.maxFileBytes": "Maximum bytes to read from each source file. Default: 262144",
+    "moduleBoundary.help.option.maxNodes": "Maximum number of graph nodes to inspect. Default: 300",
+    "moduleBoundary.help.option.maxEdges": "Maximum number of graph edges to inspect. Default: 800",
+    "moduleBoundary.help.option.maxCycles": "Maximum number of import cycles to report. Default: 50",
+    "moduleBoundary.help.option.maxSharedFiles": "Maximum number of shared-budget source files to count. Default: 1000",
+    "moduleBoundary.help.exit.ok": "No blocking module boundary findings were detected",
+    "moduleBoundary.help.exit.fail": "A module boundary rule, cycle, invalid input, unreadable path, or scan limit failed",
+    "moduleBoundary.title": "mustflow module boundary",
+    "moduleBoundary.label.config": "Config",
+    "moduleBoundary.label.targets": "Targets",
+    "moduleBoundary.label.edges": "Edges",
+    "moduleBoundary.label.rules": "Rules",
+    "moduleBoundary.label.findings": "Findings",
+    "moduleBoundary.label.truncated": "Truncated",
+    "moduleBoundary.label.findingList": "Module boundary findings",
+    "moduleBoundary.label.sharedMetrics": "Shared budget metrics",
+    "moduleBoundary.label.issues": "Issues",
+    "moduleBoundary.clean": "No module boundary findings were found.",
+    "moduleBoundary.error.missingAction": "Specify a module-boundary action: check",
+    "moduleBoundary.error.unknownAction": "Unknown module-boundary action: {action}",
+    "moduleBoundary.error.missingPath": "Provide at least one path to check",
+    "moduleBoundary.error.invalidPositiveInteger": "{option} must be a positive safe integer: {value}",
     "changeImpact.help.summary": "Analyze git changes and return bounded file-impact, script-pack, and verification hints.",
     "changeImpact.help.option.base": "Git base ref to compare from. Default: HEAD",
     "changeImpact.help.option.head": "Git head ref to compare to. Omit to compare the base with the working tree.",

package/dist/cli/i18n/hi.js

@@ -777,6 +777,7 @@ export const hiMessages = {
     "scriptPack.script.codeOutline.summary": "Scan TypeScript and JavaScript files for symbol headers and line ranges",
     "scriptPack.script.codeDependencyGraph.summary": "Trace relative TypeScript and JavaScript dependency graph edges",
     "scriptPack.script.codeImportCycle.summary": "Detect relative TypeScript and JavaScript import cycles with line evidence",
+    "scriptPack.script.codeModuleBoundary.summary": "Check configured module boundary import rules and shared budgets",
     "scriptPack.script.codeChangeImpact.summary": "Analyze changed files for impact, script-pack, and verification hints",
     "scriptPack.script.codeSymbolRead.summary": "Read a bounded source snippet by source anchor, symbol line, or explicit line range",
     "scriptPack.script.codeRouteOutline.summary": "Scan Hono, Elysia, Axum, and NestJS route methods, paths, handlers, and lifecycle chains",
@@ -978,6 +979,32 @@ export const hiMessages = {
     "importCycle.error.unknownAction": "Unknown import-cycle action: {action}",
     "importCycle.error.missingPath": "Provide at least one path to check",
     "importCycle.error.invalidPositiveInteger": "{option} must be a positive safe integer: {value}",
+    "moduleBoundary.help.summary": "Check configured module boundary rules against TypeScript and JavaScript import graph evidence.",
+    "moduleBoundary.help.option.config": "Module boundary TOML config path. Default: .mustflow/config/module-boundaries.toml",
+    "moduleBoundary.help.option.maxDepth": "Maximum dependency depth from target files. Default: 20",
+    "moduleBoundary.help.option.maxFiles": "Maximum number of source files to scan. Default: 1000",
+    "moduleBoundary.help.option.maxFileBytes": "Maximum bytes to read from each source file. Default: 262144",
+    "moduleBoundary.help.option.maxNodes": "Maximum number of graph nodes to inspect. Default: 300",
+    "moduleBoundary.help.option.maxEdges": "Maximum number of graph edges to inspect. Default: 800",
+    "moduleBoundary.help.option.maxCycles": "Maximum number of import cycles to report. Default: 50",
+    "moduleBoundary.help.option.maxSharedFiles": "Maximum number of shared-budget source files to count. Default: 1000",
+    "moduleBoundary.help.exit.ok": "No blocking module boundary findings were detected",
+    "moduleBoundary.help.exit.fail": "A module boundary rule, cycle, invalid input, unreadable path, or scan limit failed",
+    "moduleBoundary.title": "mustflow module boundary",
+    "moduleBoundary.label.config": "Config",
+    "moduleBoundary.label.targets": "Targets",
+    "moduleBoundary.label.edges": "Edges",
+    "moduleBoundary.label.rules": "Rules",
+    "moduleBoundary.label.findings": "Findings",
+    "moduleBoundary.label.truncated": "Truncated",
+    "moduleBoundary.label.findingList": "Module boundary findings",
+    "moduleBoundary.label.sharedMetrics": "Shared budget metrics",
+    "moduleBoundary.label.issues": "Issues",
+    "moduleBoundary.clean": "No module boundary findings were found.",
+    "moduleBoundary.error.missingAction": "Specify a module-boundary action: check",
+    "moduleBoundary.error.unknownAction": "Unknown module-boundary action: {action}",
+    "moduleBoundary.error.missingPath": "Provide at least one path to check",
+    "moduleBoundary.error.invalidPositiveInteger": "{option} must be a positive safe integer: {value}",
     "changeImpact.help.summary": "Analyze git changes and return bounded file-impact, script-pack, and verification hints.",
     "changeImpact.help.option.base": "Git base ref to compare from. Default: HEAD",
     "changeImpact.help.option.head": "Git head ref to compare to. Omit to compare the base with the working tree.",

package/dist/cli/i18n/ko.js

@@ -777,6 +777,7 @@ export const koMessages = {
     "scriptPack.script.codeOutline.summary": "TypeScript와 JavaScript 파일에서 symbol header와 라인 범위를 스캔합니다",
     "scriptPack.script.codeDependencyGraph.summary": "Trace relative TypeScript and JavaScript dependency graph edges",
     "scriptPack.script.codeImportCycle.summary": "Detect relative TypeScript and JavaScript import cycles with line evidence",
+    "scriptPack.script.codeModuleBoundary.summary": "Check configured module boundary import rules and shared budgets",
     "scriptPack.script.codeChangeImpact.summary": "Analyze changed files for impact, script-pack, and verification hints",
     "scriptPack.script.codeSymbolRead.summary": "source anchor, symbol 라인, 또는 명시 라인 범위로 제한된 소스 snippet을 읽습니다",
     "scriptPack.script.codeRouteOutline.summary": "Hono, Elysia, Axum, NestJS route method, path, handler, lifecycle chain을 스캔합니다",
@@ -978,6 +979,32 @@ export const koMessages = {
     "importCycle.error.unknownAction": "Unknown import-cycle action: {action}",
     "importCycle.error.missingPath": "Provide at least one path to check",
     "importCycle.error.invalidPositiveInteger": "{option} must be a positive safe integer: {value}",
+    "moduleBoundary.help.summary": "Check configured module boundary rules against TypeScript and JavaScript import graph evidence.",
+    "moduleBoundary.help.option.config": "Module boundary TOML config path. Default: .mustflow/config/module-boundaries.toml",
+    "moduleBoundary.help.option.maxDepth": "Maximum dependency depth from target files. Default: 20",
+    "moduleBoundary.help.option.maxFiles": "Maximum number of source files to scan. Default: 1000",
+    "moduleBoundary.help.option.maxFileBytes": "Maximum bytes to read from each source file. Default: 262144",
+    "moduleBoundary.help.option.maxNodes": "Maximum number of graph nodes to inspect. Default: 300",
+    "moduleBoundary.help.option.maxEdges": "Maximum number of graph edges to inspect. Default: 800",
+    "moduleBoundary.help.option.maxCycles": "Maximum number of import cycles to report. Default: 50",
+    "moduleBoundary.help.option.maxSharedFiles": "Maximum number of shared-budget source files to count. Default: 1000",
+    "moduleBoundary.help.exit.ok": "No blocking module boundary findings were detected",
+    "moduleBoundary.help.exit.fail": "A module boundary rule, cycle, invalid input, unreadable path, or scan limit failed",
+    "moduleBoundary.title": "mustflow module boundary",
+    "moduleBoundary.label.config": "Config",
+    "moduleBoundary.label.targets": "Targets",
+    "moduleBoundary.label.edges": "Edges",
+    "moduleBoundary.label.rules": "Rules",
+    "moduleBoundary.label.findings": "Findings",
+    "moduleBoundary.label.truncated": "Truncated",
+    "moduleBoundary.label.findingList": "Module boundary findings",
+    "moduleBoundary.label.sharedMetrics": "Shared budget metrics",
+    "moduleBoundary.label.issues": "Issues",
+    "moduleBoundary.clean": "No module boundary findings were found.",
+    "moduleBoundary.error.missingAction": "Specify a module-boundary action: check",
+    "moduleBoundary.error.unknownAction": "Unknown module-boundary action: {action}",
+    "moduleBoundary.error.missingPath": "Provide at least one path to check",
+    "moduleBoundary.error.invalidPositiveInteger": "{option} must be a positive safe integer: {value}",
     "changeImpact.help.summary": "Analyze git changes and return bounded file-impact, script-pack, and verification hints.",
     "changeImpact.help.option.base": "Git base ref to compare from. Default: HEAD",
     "changeImpact.help.option.head": "Git head ref to compare to. Omit to compare the base with the working tree.",

package/dist/cli/i18n/zh.js

@@ -777,6 +777,7 @@ export const zhMessages = {
     "scriptPack.script.codeOutline.summary": "Scan TypeScript and JavaScript files for symbol headers and line ranges",
     "scriptPack.script.codeDependencyGraph.summary": "Trace relative TypeScript and JavaScript dependency graph edges",
     "scriptPack.script.codeImportCycle.summary": "Detect relative TypeScript and JavaScript import cycles with line evidence",
+    "scriptPack.script.codeModuleBoundary.summary": "Check configured module boundary import rules and shared budgets",
     "scriptPack.script.codeChangeImpact.summary": "Analyze changed files for impact, script-pack, and verification hints",
     "scriptPack.script.codeSymbolRead.summary": "Read a bounded source snippet by source anchor, symbol line, or explicit line range",
     "scriptPack.script.codeRouteOutline.summary": "Scan Hono, Elysia, Axum, and NestJS route methods, paths, handlers, and lifecycle chains",
@@ -978,6 +979,32 @@ export const zhMessages = {
     "importCycle.error.unknownAction": "Unknown import-cycle action: {action}",
     "importCycle.error.missingPath": "Provide at least one path to check",
     "importCycle.error.invalidPositiveInteger": "{option} must be a positive safe integer: {value}",
+    "moduleBoundary.help.summary": "Check configured module boundary rules against TypeScript and JavaScript import graph evidence.",
+    "moduleBoundary.help.option.config": "Module boundary TOML config path. Default: .mustflow/config/module-boundaries.toml",
+    "moduleBoundary.help.option.maxDepth": "Maximum dependency depth from target files. Default: 20",
+    "moduleBoundary.help.option.maxFiles": "Maximum number of source files to scan. Default: 1000",
+    "moduleBoundary.help.option.maxFileBytes": "Maximum bytes to read from each source file. Default: 262144",
+    "moduleBoundary.help.option.maxNodes": "Maximum number of graph nodes to inspect. Default: 300",
+    "moduleBoundary.help.option.maxEdges": "Maximum number of graph edges to inspect. Default: 800",
+    "moduleBoundary.help.option.maxCycles": "Maximum number of import cycles to report. Default: 50",
+    "moduleBoundary.help.option.maxSharedFiles": "Maximum number of shared-budget source files to count. Default: 1000",
+    "moduleBoundary.help.exit.ok": "No blocking module boundary findings were detected",
+    "moduleBoundary.help.exit.fail": "A module boundary rule, cycle, invalid input, unreadable path, or scan limit failed",
+    "moduleBoundary.title": "mustflow module boundary",
+    "moduleBoundary.label.config": "Config",
+    "moduleBoundary.label.targets": "Targets",
+    "moduleBoundary.label.edges": "Edges",
+    "moduleBoundary.label.rules": "Rules",
+    "moduleBoundary.label.findings": "Findings",
+    "moduleBoundary.label.truncated": "Truncated",
+    "moduleBoundary.label.findingList": "Module boundary findings",
+    "moduleBoundary.label.sharedMetrics": "Shared budget metrics",
+    "moduleBoundary.label.issues": "Issues",
+    "moduleBoundary.clean": "No module boundary findings were found.",
+    "moduleBoundary.error.missingAction": "Specify a module-boundary action: check",
+    "moduleBoundary.error.unknownAction": "Unknown module-boundary action: {action}",
+    "moduleBoundary.error.missingPath": "Provide at least one path to check",
+    "moduleBoundary.error.invalidPositiveInteger": "{option} must be a positive safe integer: {value}",
     "changeImpact.help.summary": "Analyze git changes and return bounded file-impact, script-pack, and verification hints.",
     "changeImpact.help.option.base": "Git base ref to compare from. Default: HEAD",
     "changeImpact.help.option.head": "Git head ref to compare to. Omit to compare the base with the working tree.",

package/dist/cli/lib/command-registry.js

@@ -1,200 +1,292 @@
+const TEXT_OUTPUT = ['text'];
+const TEXT_JSON_OUTPUT = ['text', 'json'];
+const TEXT_JSONL_OUTPUT = ['text', 'json', 'jsonl'];
+const TEXT_JSON_FILE_OUTPUT = ['text', 'json', 'file'];
+const DEFAULT_EXIT_CODES = [0, 1];
+function commandContract(outputModes, publicJsonSchemaIds = [], exitCodes = DEFAULT_EXIT_CODES) {
+    return {
+        outputModes,
+        exitCodes,
+        publicJsonSchemaIds,
+    };
+}
 export const COMMAND_DEFINITIONS = [
     {
         id: 'api',
         usage: 'mf api',
         summaryKey: 'command.api.summary',
+        contract: commandContract(TEXT_JSONL_OUTPUT, [
+            'workspace-summary',
+            'command-catalog',
+            'verification-plan',
+            'latest-evidence',
+            'diff-risk',
+            'health',
+            'locks',
+            'api-serve-response',
+        ]),
         loadRunner: async () => (await import('../commands/api.js')).runApi,
     },
     {
         id: 'adapters',
         usage: 'mf adapters',
         summaryKey: 'command.adapters.summary',
+        contract: commandContract(TEXT_JSON_OUTPUT, ['adapter-compatibility-report']),
         loadRunner: async () => (await import('../commands/adapters.js')).runAdapters,
     },
     {
         id: 'init',
         usage: 'mf init',
         summaryKey: 'command.init.summary',
+        contract: commandContract(TEXT_OUTPUT),
         loadRunner: async () => (await import('../commands/init.js')).runInit,
     },
     {
         id: 'check',
         usage: 'mf check',
         summaryKey: 'command.check.summary',
+        contract: commandContract(TEXT_JSON_OUTPUT, ['check-report']),
         loadRunner: async () => (await import('../commands/check.js')).runCheck,
     },
     {
         id: 'classify',
         usage: 'mf classify',
         summaryKey: 'command.classify.summary',
+        contract: commandContract(TEXT_JSON_OUTPUT, ['classify-report']),
         loadRunner: async () => (await import('../commands/classify.js')).runClassify,
     },
     {
         id: 'contract-lint',
         usage: 'mf contract-lint',
         summaryKey: 'command.contractLint.summary',
+        contract: commandContract(TEXT_JSON_OUTPUT, ['contract-lint-report']),
         loadRunner: async () => (await import('../commands/contract-lint.js')).runContractLint,
     },
     {
         id: 'onboard',
         usage: 'mf onboard',
         summaryKey: 'command.onboard.summary',
+        contract: commandContract(TEXT_JSON_OUTPUT, ['onboard-commands-report']),
         loadRunner: async () => (await import('../commands/onboard.js')).runOnboard,
     },
     {
         id: 'next',
         usage: 'mf next',
         summaryKey: 'command.next.summary',
+        contract: commandContract(TEXT_JSON_OUTPUT, ['next-report']),
         loadRunner: async () => (await import('../commands/next.js')).runNext,
     },
     {
         id: 'evidence',
         usage: 'mf evidence',
         summaryKey: 'command.evidence.summary',
+        contract: commandContract(TEXT_JSON_OUTPUT, ['evidence-report']),
         loadRunner: async () => (await import('../commands/evidence.js')).runEvidence,
     },
     {
         id: 'workspace',
         usage: 'mf workspace',
         summaryKey: 'command.workspace.summary',
+        contract: commandContract(TEXT_JSON_OUTPUT, [
+            'workspace-status',
+            'workspace-command-catalog',
+            'workspace-verification-plan',
+        ]),
         loadRunner: async () => (await import('../commands/workspace.js')).runWorkspace,
     },
     {
         id: 'status',
         usage: 'mf status',
         summaryKey: 'command.status.summary',
+        contract: commandContract(TEXT_JSON_OUTPUT, ['status-report']),
         loadRunner: async () => (await import('../commands/status.js')).runStatus,
     },
     {
         id: 'update',
         usage: 'mf update',
         summaryKey: 'command.update.summary',
+        contract: commandContract(TEXT_JSON_OUTPUT),
         loadRunner: async () => (await import('../commands/update.js')).runUpdate,
     },
     {
         id: 'upgrade',
         usage: 'mf upgrade',
         summaryKey: 'command.upgrade.summary',
+        contract: commandContract(TEXT_OUTPUT),
         loadRunner: async () => (await import('../commands/upgrade.js')).runUpgrade,
     },
     {
         id: 'map',
         usage: 'mf map',
         summaryKey: 'command.map.summary',
+        contract: commandContract(TEXT_OUTPUT),
         loadRunner: async () => (await import('../commands/map.js')).runMap,
     },
     {
         id: 'line-endings',
         usage: 'mf line-endings',
         summaryKey: 'command.lineEndings.summary',
+        contract: commandContract(TEXT_JSON_OUTPUT, ['line-endings-report']),
         loadRunner: async () => (await import('../commands/line-endings.js')).runLineEndings,
     },
     {
         id: 'quality',
         usage: 'mf quality',
         summaryKey: 'command.quality.summary',
+        contract: commandContract(TEXT_JSON_OUTPUT, ['quality-gaming-report']),
         loadRunner: async () => (await import('../commands/quality.js')).runQuality,
     },
     {
         id: 'script-pack',
         usage: 'mf script-pack',
         summaryKey: 'command.scriptPack.summary',
+        contract: commandContract(TEXT_JSON_OUTPUT, [
+            'script-pack-catalog',
+            'script-pack-suggestion-report',
+            'code-outline-report',
+            'dependency-graph-report',
+            'import-cycle-report',
+            'module-boundary-report',
+            'change-impact-report',
+            'code-symbol-read-report',
+            'route-outline-report',
+            'export-diff-report',
+            'reference-drift-report',
+            'link-integrity-report',
+            'test-performance-report',
+            'test-regression-selector-report',
+            'text-budget-report',
+            'generated-boundary-report',
+            'repo-merge-conflict-scan-report',
+            'repo-git-ignore-audit-report',
+            'repo-manifest-lock-drift-report',
+            'skill-route-audit-report',
+            'repo-version-source-report',
+            'repo-approval-gate-report',
+            'repo-deploy-surface-report',
+            'config-chain-report',
+            'env-contract-report',
+            'secret-risk-scan-report',
+            'security-pattern-scan-report',
+            'related-files-report',
+        ]),
         loadRunner: async () => (await import('../commands/script-pack.js')).runScriptPack,
     },
     {
         id: 'run',
         usage: 'mf run',
         summaryKey: 'command.run.summary',
+        contract: commandContract(TEXT_JSON_OUTPUT, ['run-receipt']),
         loadRunner: async () => (await import('../commands/run.js')).runRun,
     },
     {
         id: 'context',
         usage: 'mf context',
         summaryKey: 'command.context.summary',
+        contract: commandContract(TEXT_JSON_OUTPUT, ['context-report']),
         loadRunner: async () => (await import('../commands/context.js')).runContext,
     },
     {
         id: 'tech',
         usage: 'mf tech',
         summaryKey: 'command.tech.summary',
+        contract: commandContract(TEXT_JSON_OUTPUT),
         loadRunner: async () => (await import('../commands/tech.js')).runTech,
     },
     {
         id: 'doctor',
         usage: 'mf doctor',
         summaryKey: 'command.doctor.summary',
+        contract: commandContract(TEXT_JSON_OUTPUT, ['doctor-report']),
         loadRunner: async () => (await import('../commands/doctor.js')).runDoctor,
     },
     {
         id: 'docs',
         usage: 'mf docs',
         summaryKey: 'command.docs.summary',
+        contract: commandContract(TEXT_JSON_OUTPUT, ['docs-review-list']),
         loadRunner: async () => (await import('../commands/docs.js')).runDocs,
     },
     {
         id: 'handoff',
         usage: 'mf handoff',
         summaryKey: 'command.handoff.summary',
+        contract: commandContract(TEXT_JSON_OUTPUT, ['handoff-validation-report']),
         loadRunner: async () => (await import('../commands/handoff.js')).runHandoff,
     },
     {
         id: 'index',
         usage: 'mf index',
         summaryKey: 'command.index.summary',
+        contract: commandContract(TEXT_JSON_OUTPUT, ['index-report']),
         loadRunner: async () => (await import('../commands/index.js')).runIndex,
     },
     {
         id: 'search',
         usage: 'mf search',
         summaryKey: 'command.search.summary',
+        contract: commandContract(TEXT_JSON_OUTPUT, ['search-report']),
         loadRunner: async () => (await import('../commands/search.js')).runSearch,
     },
     {
         id: 'skill',
         usage: 'mf skill',
         summaryKey: 'command.skill.summary',
+        contract: commandContract(TEXT_JSON_OUTPUT, ['skill-route-report', 'skill-import-report']),
         loadRunner: async () => (await import('../commands/skill.js')).runSkill,
     },
     {
         id: 'dashboard',
         usage: 'mf dashboard',
         summaryKey: 'command.dashboard.summary',
+        contract: commandContract(TEXT_JSON_FILE_OUTPUT, ['dashboard-export']),
         loadRunner: async () => (await import('../commands/dashboard.js')).runDashboard,
     },
     {
         id: 'version',
         usage: 'mf version',
         summaryKey: 'command.version.summary',
+        contract: commandContract(TEXT_OUTPUT),
         loadRunner: async () => (await import('../commands/version.js')).runVersion,
     },
     {
         id: 'version-sources',
         usage: 'mf version-sources',
         summaryKey: 'command.versionSources.summary',
+        contract: commandContract(TEXT_JSON_OUTPUT, ['version-sources-report']),
         loadRunner: async () => (await import('../commands/version-sources.js')).runVersionSources,
     },
     {
         id: 'verify',
         usage: 'mf verify',
         summaryKey: 'command.verify.summary',
+        contract: commandContract(TEXT_JSON_OUTPUT, [
+            'verify-report',
+            'change-verification-report',
+            'verify-run-manifest',
+            'latest-run-pointer',
+        ]),
         loadRunner: async () => (await import('../commands/verify.js')).runVerify,
     },
     {
         id: 'explain',
         usage: 'mf explain',
         summaryKey: 'command.explain.summary',
+        contract: commandContract(TEXT_JSON_OUTPUT, ['explain-report']),
         loadRunner: async () => (await import('../commands/explain.js')).runExplain,
     },
     {
         id: 'impact',
         usage: 'mf impact',
         summaryKey: 'command.impact.summary',
+        contract: commandContract(TEXT_JSON_OUTPUT, ['impact-report']),
         loadRunner: async () => (await import('../commands/impact.js')).runImpact,
     },
     {
         id: 'help',
         usage: 'mf help',
         summaryKey: 'command.help.summary',
+        contract: commandContract(TEXT_OUTPUT),
         loadRunner: async () => (await import('../commands/help.js')).runHelp,
     },
 ];

package/dist/cli/lib/option-parser.js

@@ -85,6 +85,32 @@ export function getParsedCliStringOption(parsed, name) {
     const value = parsed.values.get(name);
     return typeof value === 'string' ? value : null;
 }
+export function parsePositiveIntegerCliOption(value, option, invalidMessageKey, lang) {
+    if (value === null) {
+        return { value: null };
+    }
+    if (!/^[1-9]\d*$/u.test(value)) {
+        return { value: null, error: t(lang, invalidMessageKey, { option, value }) };
+    }
+    const parsed = Number(value);
+    if (!Number.isSafeInteger(parsed)) {
+        return { value: null, error: t(lang, invalidMessageKey, { option, value }) };
+    }
+    return { value: parsed };
+}
+export function parseNonNegativeIntegerCliOption(value, option, invalidMessageKey, lang) {
+    if (value === null) {
+        return { value: null };
+    }
+    if (!/^(?:0|[1-9]\d*)$/u.test(value)) {
+        return { value: null, error: t(lang, invalidMessageKey, { option, value }) };
+    }
+    const parsed = Number(value);
+    if (!Number.isSafeInteger(parsed)) {
+        return { value: null, error: t(lang, invalidMessageKey, { option, value }) };
+    }
+    return { value: parsed };
+}
 export function formatCliOptionParseError(error, lang) {
     if (error.kind === 'missing_value') {
         return t(lang, 'cli.error.missingValue', { option: error.option });

package/dist/cli/lib/script-pack-registry.js

@@ -94,6 +94,45 @@ export const SCRIPT_PACKS = [
                 reportSchemaFile: 'import-cycle-report.schema.json',
                 loadRunner: async () => (await import('../script-packs/code-import-cycle.js')).runCodeImportCycleScript,
             },
+            {
+                packId: 'code',
+                id: 'module-boundary',
+                ref: scriptRef('code', 'module-boundary'),
+                usage: 'mf script-pack run code/module-boundary check <path...> [options]',
+                summaryKey: 'scriptPack.script.codeModuleBoundary.summary',
+                actions: ['check'],
+                useWhen: [
+                    'Check configured module boundary rules for relative TypeScript and JavaScript import edges before or after boundary-sensitive changes.',
+                    'Review layer deny rules, public entrypoint access, feature-to-feature imports, ' +
+                        'shared/common budgets, and cycle evidence using .mustflow/config/module-boundaries.toml.',
+                ],
+                phases: ['before_change', 'after_change', 'review'],
+                readOnly: true,
+                mutates: false,
+                network: false,
+                inputs: [
+                    'path',
+                    'config_path',
+                    'max_files',
+                    'max_file_bytes',
+                    'max_depth',
+                    'max_nodes',
+                    'max_edges',
+                    'max_cycles',
+                ],
+                outputs: ['human_summary', 'json_report', 'module_boundary_findings', 'shared_budget_metrics'],
+                relatedSkills: [
+                    'change-blast-radius-review',
+                    'codebase-orientation',
+                    'javascript-code-change',
+                    'module-boundary-review',
+                    'typescript-code-change',
+                ],
+                riskLevel: 'low',
+                cost: 'low',
+                reportSchemaFile: 'module-boundary-report.schema.json',
+                loadRunner: async () => (await import('../script-packs/code-module-boundary.js')).runCodeModuleBoundaryScript,
+            },
             {
                 packId: 'code',
                 id: 'change-impact',