mustflow 2.103.3 → 2.103.12

package/dist/cli/commands/run.js

@@ -79,6 +79,14 @@ function reportRunPlanFailure(plan, reporter, lang) {
                 detail: getRunPlanDetail(plan, lang, 'run.error.blockedLongRunningCommandDetail'),
             });
             break;
+        case 'network_requires_approval':
+        case 'destructive_requires_approval':
+        case 'approval_policy_unreadable':
+            message = t(lang, 'run.error.approvalRequired', {
+                intent: plan.intentName,
+                detail: getRunPlanDetail(plan, lang, 'run.error.approvalRequiredDetail'),
+            });
+            break;
         case 'cwd_outside_project':
             message = t(lang, 'run.error.cwdOutsideProject', {
                 intent: plan.intentName,
@@ -327,6 +335,9 @@ export async function runRun(args, reporter, lang = 'en', options = {}) {
         return plan.ok ? 0 : 1;
     }
     if (!plan.ok) {
+        if (json) {
+            reporter.stdout(JSON.stringify(createRunPreview(plan, 'plan-only'), null, 2));
+        }
         reportRunPlanFailure(plan, reporter, lang);
         writeLatestProfile(profiler, options, {
             projectRoot,

package/dist/cli/commands/script-pack.js

@@ -76,6 +76,7 @@ export function getScriptPackHelp(lang = 'en') {
             'mf script-pack run repo/config-chain inspect src/cli/index.ts --json',
             'mf script-pack run repo/env-contract scan --json',
             'mf script-pack run repo/secret-risk-scan scan src README.md --json',
+            'mf script-pack run repo/security-pattern-scan scan src .github/workflows --json',
             'mf script-pack run repo/generated-boundary check src/cli/index.ts --json',
             'mf script-pack run repo/merge-conflict-scan check --json',
             'mf script-pack run repo/git-ignore-audit audit .env.local dist/app.js --json',
@@ -83,6 +84,7 @@ export function getScriptPackHelp(lang = 'en') {
             'mf script-pack run repo/skill-route-audit audit --json',
             'mf script-pack run repo/version-source inspect --json',
             'mf script-pack run repo/approval-gate check --action git_commit --json',
+            'mf script-pack run repo/deploy-surface inspect --json',
             'mf script-pack run repo/related-files map src/cli/index.ts --json',
             'mf script-pack run core/text-budget --help',
         ],

package/dist/cli/i18n/en.js

@@ -1123,9 +1123,29 @@ Read these files before working:
     "secretRiskScan.error.missingAction": "Specify a secret-risk-scan action: scan",
     "secretRiskScan.error.unknownAction": "Unknown secret-risk-scan action: {action}",
     "secretRiskScan.error.invalidPositiveInteger": "{option} must be a positive safe integer: {value}",
+    "scriptPack.script.securityPatternScan.summary": "Scan repository files for high-signal security code patterns",
+    "securityPatternScan.help.summary": "Scan source, CI, and config files for security code-pattern leads without printing matched source lines or secret values.",
+    "securityPatternScan.help.option.maxFiles": "Maximum number of files to inspect. Default: 1000",
+    "securityPatternScan.help.option.maxFileBytes": "Maximum bytes to read from each inspected file. Default: 262144",
+    "securityPatternScan.help.option.maxFindings": "Maximum number of findings to report. Default: 300",
+    "securityPatternScan.help.exit.ok": "The security-pattern scan completed without blocking findings",
+    "securityPatternScan.help.exit.fail": "The security-pattern scan found invalid input, unreadable files, or security-pattern findings",
+    "securityPatternScan.title": "mustflow security pattern scan",
+    "securityPatternScan.label.files": "Files",
+    "securityPatternScan.label.findings": "Findings",
+    "securityPatternScan.label.categories": "Categories",
+    "securityPatternScan.label.highOrCritical": "High or critical",
+    "securityPatternScan.label.truncated": "Truncated",
+    "securityPatternScan.label.reviewFocus": "Review focus",
+    "securityPatternScan.label.issues": "Issues",
+    "securityPatternScan.clean": "No high-signal security code patterns were found.",
+    "securityPatternScan.error.missingAction": "Specify a security-pattern-scan action: scan",
+    "securityPatternScan.error.unknownAction": "Unknown security-pattern-scan action: {action}",
+    "securityPatternScan.error.invalidPositiveInteger": "{option} must be a positive safe integer: {value}",
     "scriptPack.script.skillRouteAudit.summary": "Audit skill routes, template skill copies, manifest profiles, and i18n metadata for drift",
     "scriptPack.script.versionSource.summary": "Inspect repository version sources before release metadata changes",
     "scriptPack.script.approvalGate.summary": "Check planned actions against repository approval policy gates",
+    "scriptPack.script.deploySurface.summary": "Inspect repository deploy and release surfaces with verification gates",
     "scriptPack.script.mergeConflictScan.summary": "Scan repository files for unresolved Git merge conflict markers",
     "scriptPack.script.gitIgnoreAudit.summary": "Audit Git ignore rules and path visibility evidence",
     "scriptPack.script.manifestLockDrift.summary": "Check manifest-lock file hashes against current repository files",
@@ -1165,6 +1185,19 @@ Read these files before working:
     "approvalGate.error.missingAction": "Specify an approval-gate action: check",
     "approvalGate.error.unknownAction": "Unknown approval-gate action: {action}",
     "approvalGate.error.missingActionType": "Specify at least one --action <type>",
+    "deploySurface.help.summary": "Inspect workflows, package metadata, package scripts, and deploy config files for local deploy or release surfaces.",
+    "deploySurface.help.exit.ok": "The deploy-surface report was generated",
+    "deploySurface.help.exit.fail": "The deploy-surface report found unreadable metadata or invalid input",
+    "deploySurface.title": "mustflow deploy surface",
+    "deploySurface.label.deploySurface": "Deploy surface detected",
+    "deploySurface.label.surfaces": "Surfaces",
+    "deploySurface.label.surfaceDetails": "Surface details",
+    "deploySurface.label.requiredVerification": "Required verification",
+    "deploySurface.label.manualGates": "Manual gates",
+    "deploySurface.label.issues": "Issues",
+    "deploySurface.noSurfaces": "No local deploy or release surface was detected.",
+    "deploySurface.error.missingAction": "Specify a deploy-surface action: inspect",
+    "deploySurface.error.unknownAction": "Unknown deploy-surface action: {action}",
     "mergeConflictScan.help.summary": "Scan changed files or explicit paths for unresolved Git merge conflict markers without printing file content.",
     "mergeConflictScan.help.option.maxFiles": "Maximum files to scan. Default: 1000",
     "mergeConflictScan.help.option.maxFileBytes": "Maximum bytes to read from each file. Default: 524288",
@@ -1238,6 +1271,8 @@ Read these files before working:
     "run.error.blockedShellBackgroundDetail": "Shell commands must not spawn background work.",
     "run.error.blockedLongRunningCommand": 'Intent "{intent}" is blocked. {detail}',
     "run.error.blockedLongRunningCommandDetail": "Command argv must describe a finite one-shot command, not a development server, watcher, shell wrapper, interpreter loop, or background process.",
+    "run.error.approvalRequired": 'Intent "{intent}" requires approval. {detail}',
+    "run.error.approvalRequiredDetail": "The repository approval policy requires explicit approval before this command intent can run.",
     "run.error.cwdOutsideProject": 'Command "{intent}" has an invalid cwd: {detail}',
     "run.error.cwdOutsideProjectDetail": "Intent cwd must stay inside the current root.",
     "run.error.invalidTestTarget": 'Command "{intent}" received an invalid test target. {detail}',

package/dist/cli/i18n/es.js

@@ -1123,9 +1123,29 @@ Lee estos archivos antes de trabajar:
     "secretRiskScan.error.missingAction": "Specify a secret-risk-scan action: scan",
     "secretRiskScan.error.unknownAction": "Unknown secret-risk-scan action: {action}",
     "secretRiskScan.error.invalidPositiveInteger": "{option} must be a positive safe integer: {value}",
+    "scriptPack.script.securityPatternScan.summary": "Scan repository files for high-signal security code patterns",
+    "securityPatternScan.help.summary": "Scan source, CI, and config files for security code-pattern leads without printing matched source lines or secret values.",
+    "securityPatternScan.help.option.maxFiles": "Maximum number of files to inspect. Default: 1000",
+    "securityPatternScan.help.option.maxFileBytes": "Maximum bytes to read from each inspected file. Default: 262144",
+    "securityPatternScan.help.option.maxFindings": "Maximum number of findings to report. Default: 300",
+    "securityPatternScan.help.exit.ok": "The security-pattern scan completed without blocking findings",
+    "securityPatternScan.help.exit.fail": "The security-pattern scan found invalid input, unreadable files, or security-pattern findings",
+    "securityPatternScan.title": "mustflow security pattern scan",
+    "securityPatternScan.label.files": "Files",
+    "securityPatternScan.label.findings": "Findings",
+    "securityPatternScan.label.categories": "Categories",
+    "securityPatternScan.label.highOrCritical": "High or critical",
+    "securityPatternScan.label.truncated": "Truncated",
+    "securityPatternScan.label.reviewFocus": "Review focus",
+    "securityPatternScan.label.issues": "Issues",
+    "securityPatternScan.clean": "No high-signal security code patterns were found.",
+    "securityPatternScan.error.missingAction": "Specify a security-pattern-scan action: scan",
+    "securityPatternScan.error.unknownAction": "Unknown security-pattern-scan action: {action}",
+    "securityPatternScan.error.invalidPositiveInteger": "{option} must be a positive safe integer: {value}",
     "scriptPack.script.skillRouteAudit.summary": "Audit skill routes, template skill copies, manifest profiles, and i18n metadata for drift",
     "scriptPack.script.versionSource.summary": "Inspect repository version sources before release metadata changes",
     "scriptPack.script.approvalGate.summary": "Check planned actions against repository approval policy gates",
+    "scriptPack.script.deploySurface.summary": "Inspect repository deploy and release surfaces with verification gates",
     "scriptPack.script.mergeConflictScan.summary": "Scan repository files for unresolved Git merge conflict markers",
     "scriptPack.script.gitIgnoreAudit.summary": "Audit Git ignore rules and path visibility evidence",
     "scriptPack.script.manifestLockDrift.summary": "Check manifest-lock file hashes against current repository files",
@@ -1165,6 +1185,19 @@ Lee estos archivos antes de trabajar:
     "approvalGate.error.missingAction": "Specify an approval-gate action: check",
     "approvalGate.error.unknownAction": "Unknown approval-gate action: {action}",
     "approvalGate.error.missingActionType": "Specify at least one --action <type>",
+    "deploySurface.help.summary": "Inspect workflows, package metadata, package scripts, and deploy config files for local deploy or release surfaces.",
+    "deploySurface.help.exit.ok": "The deploy-surface report was generated",
+    "deploySurface.help.exit.fail": "The deploy-surface report found unreadable metadata or invalid input",
+    "deploySurface.title": "mustflow deploy surface",
+    "deploySurface.label.deploySurface": "Deploy surface detected",
+    "deploySurface.label.surfaces": "Surfaces",
+    "deploySurface.label.surfaceDetails": "Surface details",
+    "deploySurface.label.requiredVerification": "Required verification",
+    "deploySurface.label.manualGates": "Manual gates",
+    "deploySurface.label.issues": "Issues",
+    "deploySurface.noSurfaces": "No local deploy or release surface was detected.",
+    "deploySurface.error.missingAction": "Specify a deploy-surface action: inspect",
+    "deploySurface.error.unknownAction": "Unknown deploy-surface action: {action}",
     "mergeConflictScan.help.summary": "Scan changed files or explicit paths for unresolved Git merge conflict markers without printing file content.",
     "mergeConflictScan.help.option.maxFiles": "Maximum files to scan. Default: 1000",
     "mergeConflictScan.help.option.maxFileBytes": "Maximum bytes to read from each file. Default: 524288",
@@ -1238,6 +1271,8 @@ Lee estos archivos antes de trabajar:
     "run.error.blockedShellBackgroundDetail": "Los comandos de shell no deben iniciar trabajo en segundo plano.",
     "run.error.blockedLongRunningCommand": 'La intención "{intent}" está bloqueada. {detail}',
     "run.error.blockedLongRunningCommandDetail": "argv debe describir un comando finito de una sola ejecución, no un servidor de desarrollo, watcher, envoltorio de shell, bucle de intérprete o proceso en segundo plano.",
+    "run.error.approvalRequired": 'La intención "{intent}" requiere aprobación. {detail}',
+    "run.error.approvalRequiredDetail": "La política de aprobación del repositorio requiere aprobación explícita antes de ejecutar esta intención de comando.",
     "run.error.cwdOutsideProject": 'El comando "{intent}" tiene un cwd no válido: {detail}',
     "run.error.cwdOutsideProjectDetail": "El cwd de la intención debe permanecer dentro de la raíz actual.",
     "run.error.invalidTestTarget": 'El comando "{intent}" recibió un objetivo de prueba no válido. {detail}',

package/dist/cli/i18n/fr.js

@@ -1123,9 +1123,29 @@ Lisez ces fichiers avant de travailler :
     "secretRiskScan.error.missingAction": "Specify a secret-risk-scan action: scan",
     "secretRiskScan.error.unknownAction": "Unknown secret-risk-scan action: {action}",
     "secretRiskScan.error.invalidPositiveInteger": "{option} must be a positive safe integer: {value}",
+    "scriptPack.script.securityPatternScan.summary": "Scan repository files for high-signal security code patterns",
+    "securityPatternScan.help.summary": "Scan source, CI, and config files for security code-pattern leads without printing matched source lines or secret values.",
+    "securityPatternScan.help.option.maxFiles": "Maximum number of files to inspect. Default: 1000",
+    "securityPatternScan.help.option.maxFileBytes": "Maximum bytes to read from each inspected file. Default: 262144",
+    "securityPatternScan.help.option.maxFindings": "Maximum number of findings to report. Default: 300",
+    "securityPatternScan.help.exit.ok": "The security-pattern scan completed without blocking findings",
+    "securityPatternScan.help.exit.fail": "The security-pattern scan found invalid input, unreadable files, or security-pattern findings",
+    "securityPatternScan.title": "mustflow security pattern scan",
+    "securityPatternScan.label.files": "Files",
+    "securityPatternScan.label.findings": "Findings",
+    "securityPatternScan.label.categories": "Categories",
+    "securityPatternScan.label.highOrCritical": "High or critical",
+    "securityPatternScan.label.truncated": "Truncated",
+    "securityPatternScan.label.reviewFocus": "Review focus",
+    "securityPatternScan.label.issues": "Issues",
+    "securityPatternScan.clean": "No high-signal security code patterns were found.",
+    "securityPatternScan.error.missingAction": "Specify a security-pattern-scan action: scan",
+    "securityPatternScan.error.unknownAction": "Unknown security-pattern-scan action: {action}",
+    "securityPatternScan.error.invalidPositiveInteger": "{option} must be a positive safe integer: {value}",
     "scriptPack.script.skillRouteAudit.summary": "Audit skill routes, template skill copies, manifest profiles, and i18n metadata for drift",
     "scriptPack.script.versionSource.summary": "Inspect repository version sources before release metadata changes",
     "scriptPack.script.approvalGate.summary": "Check planned actions against repository approval policy gates",
+    "scriptPack.script.deploySurface.summary": "Inspect repository deploy and release surfaces with verification gates",
     "scriptPack.script.mergeConflictScan.summary": "Scan repository files for unresolved Git merge conflict markers",
     "scriptPack.script.gitIgnoreAudit.summary": "Audit Git ignore rules and path visibility evidence",
     "scriptPack.script.manifestLockDrift.summary": "Check manifest-lock file hashes against current repository files",
@@ -1165,6 +1185,19 @@ Lisez ces fichiers avant de travailler :
     "approvalGate.error.missingAction": "Specify an approval-gate action: check",
     "approvalGate.error.unknownAction": "Unknown approval-gate action: {action}",
     "approvalGate.error.missingActionType": "Specify at least one --action <type>",
+    "deploySurface.help.summary": "Inspect workflows, package metadata, package scripts, and deploy config files for local deploy or release surfaces.",
+    "deploySurface.help.exit.ok": "The deploy-surface report was generated",
+    "deploySurface.help.exit.fail": "The deploy-surface report found unreadable metadata or invalid input",
+    "deploySurface.title": "mustflow deploy surface",
+    "deploySurface.label.deploySurface": "Deploy surface detected",
+    "deploySurface.label.surfaces": "Surfaces",
+    "deploySurface.label.surfaceDetails": "Surface details",
+    "deploySurface.label.requiredVerification": "Required verification",
+    "deploySurface.label.manualGates": "Manual gates",
+    "deploySurface.label.issues": "Issues",
+    "deploySurface.noSurfaces": "No local deploy or release surface was detected.",
+    "deploySurface.error.missingAction": "Specify a deploy-surface action: inspect",
+    "deploySurface.error.unknownAction": "Unknown deploy-surface action: {action}",
     "mergeConflictScan.help.summary": "Scan changed files or explicit paths for unresolved Git merge conflict markers without printing file content.",
     "mergeConflictScan.help.option.maxFiles": "Maximum files to scan. Default: 1000",
     "mergeConflictScan.help.option.maxFileBytes": "Maximum bytes to read from each file. Default: 524288",
@@ -1238,6 +1271,8 @@ Lisez ces fichiers avant de travailler :
     "run.error.blockedShellBackgroundDetail": "Les commandes shell ne doivent pas lancer de travail en arrière-plan.",
     "run.error.blockedLongRunningCommand": 'L’intention "{intent}" est bloquée. {detail}',
     "run.error.blockedLongRunningCommandDetail": "argv doit décrire une commande ponctuelle finie, pas un serveur de développement, un watcher, un wrapper shell, une boucle d'interpréteur ou un processus en arrière-plan.",
+    "run.error.approvalRequired": 'L’intention "{intent}" nécessite une approbation. {detail}',
+    "run.error.approvalRequiredDetail": "La politique d’approbation du dépôt exige une approbation explicite avant d’exécuter cette intention de commande.",
     "run.error.cwdOutsideProject": 'La commande "{intent}" a un cwd non valide : {detail}',
     "run.error.cwdOutsideProjectDetail": "Le cwd de l’intention doit rester dans la racine actuelle.",
     "run.error.invalidTestTarget": 'La commande "{intent}" a reçu une cible de test invalide. {detail}',

package/dist/cli/i18n/hi.js

@@ -1123,9 +1123,29 @@ export const hiMessages = {
     "secretRiskScan.error.missingAction": "Specify a secret-risk-scan action: scan",
     "secretRiskScan.error.unknownAction": "Unknown secret-risk-scan action: {action}",
     "secretRiskScan.error.invalidPositiveInteger": "{option} must be a positive safe integer: {value}",
+    "scriptPack.script.securityPatternScan.summary": "Scan repository files for high-signal security code patterns",
+    "securityPatternScan.help.summary": "Scan source, CI, and config files for security code-pattern leads without printing matched source lines or secret values.",
+    "securityPatternScan.help.option.maxFiles": "Maximum number of files to inspect. Default: 1000",
+    "securityPatternScan.help.option.maxFileBytes": "Maximum bytes to read from each inspected file. Default: 262144",
+    "securityPatternScan.help.option.maxFindings": "Maximum number of findings to report. Default: 300",
+    "securityPatternScan.help.exit.ok": "The security-pattern scan completed without blocking findings",
+    "securityPatternScan.help.exit.fail": "The security-pattern scan found invalid input, unreadable files, or security-pattern findings",
+    "securityPatternScan.title": "mustflow security pattern scan",
+    "securityPatternScan.label.files": "Files",
+    "securityPatternScan.label.findings": "Findings",
+    "securityPatternScan.label.categories": "Categories",
+    "securityPatternScan.label.highOrCritical": "High or critical",
+    "securityPatternScan.label.truncated": "Truncated",
+    "securityPatternScan.label.reviewFocus": "Review focus",
+    "securityPatternScan.label.issues": "Issues",
+    "securityPatternScan.clean": "No high-signal security code patterns were found.",
+    "securityPatternScan.error.missingAction": "Specify a security-pattern-scan action: scan",
+    "securityPatternScan.error.unknownAction": "Unknown security-pattern-scan action: {action}",
+    "securityPatternScan.error.invalidPositiveInteger": "{option} must be a positive safe integer: {value}",
     "scriptPack.script.skillRouteAudit.summary": "Audit skill routes, template skill copies, manifest profiles, and i18n metadata for drift",
     "scriptPack.script.versionSource.summary": "Inspect repository version sources before release metadata changes",
     "scriptPack.script.approvalGate.summary": "Check planned actions against repository approval policy gates",
+    "scriptPack.script.deploySurface.summary": "Inspect repository deploy and release surfaces with verification gates",
     "scriptPack.script.mergeConflictScan.summary": "Scan repository files for unresolved Git merge conflict markers",
     "scriptPack.script.gitIgnoreAudit.summary": "Audit Git ignore rules and path visibility evidence",
     "scriptPack.script.manifestLockDrift.summary": "Check manifest-lock file hashes against current repository files",
@@ -1165,6 +1185,19 @@ export const hiMessages = {
     "approvalGate.error.missingAction": "Specify an approval-gate action: check",
     "approvalGate.error.unknownAction": "Unknown approval-gate action: {action}",
     "approvalGate.error.missingActionType": "Specify at least one --action <type>",
+    "deploySurface.help.summary": "Inspect workflows, package metadata, package scripts, and deploy config files for local deploy or release surfaces.",
+    "deploySurface.help.exit.ok": "The deploy-surface report was generated",
+    "deploySurface.help.exit.fail": "The deploy-surface report found unreadable metadata or invalid input",
+    "deploySurface.title": "mustflow deploy surface",
+    "deploySurface.label.deploySurface": "Deploy surface detected",
+    "deploySurface.label.surfaces": "Surfaces",
+    "deploySurface.label.surfaceDetails": "Surface details",
+    "deploySurface.label.requiredVerification": "Required verification",
+    "deploySurface.label.manualGates": "Manual gates",
+    "deploySurface.label.issues": "Issues",
+    "deploySurface.noSurfaces": "No local deploy or release surface was detected.",
+    "deploySurface.error.missingAction": "Specify a deploy-surface action: inspect",
+    "deploySurface.error.unknownAction": "Unknown deploy-surface action: {action}",
     "mergeConflictScan.help.summary": "Scan changed files or explicit paths for unresolved Git merge conflict markers without printing file content.",
     "mergeConflictScan.help.option.maxFiles": "Maximum files to scan. Default: 1000",
     "mergeConflictScan.help.option.maxFileBytes": "Maximum bytes to read from each file. Default: 524288",
@@ -1238,6 +1271,8 @@ export const hiMessages = {
     "run.error.blockedShellBackgroundDetail": "Shell commands background work शुरू नहीं कर सकतीं।",
     "run.error.blockedLongRunningCommand": 'इंटेंट "{intent}" अवरुद्ध है। {detail}',
     "run.error.blockedLongRunningCommandDetail": "argv में finite one-shot command होना चाहिए, development server, watcher, shell wrapper, interpreter loop, या background process नहीं।",
+    "run.error.approvalRequired": 'इंटेंट "{intent}" को approval चाहिए। {detail}',
+    "run.error.approvalRequiredDetail": "Repository approval policy के अनुसार इस command intent को चलाने से पहले explicit approval चाहिए।",
     "run.error.cwdOutsideProject": 'कमांड "{intent}" का cwd अमान्य है: {detail}',
     "run.error.cwdOutsideProjectDetail": "Intent cwd current root के अंदर रहना चाहिए।",
     "run.error.invalidTestTarget": 'कमांड "{intent}" को अमान्य test target मिला। {detail}',

package/dist/cli/i18n/ko.js

@@ -1123,9 +1123,29 @@ export const koMessages = {
     "secretRiskScan.error.missingAction": "Specify a secret-risk-scan action: scan",
     "secretRiskScan.error.unknownAction": "Unknown secret-risk-scan action: {action}",
     "secretRiskScan.error.invalidPositiveInteger": "{option} must be a positive safe integer: {value}",
+    "scriptPack.script.securityPatternScan.summary": "Scan repository files for high-signal security code patterns",
+    "securityPatternScan.help.summary": "Scan source, CI, and config files for security code-pattern leads without printing matched source lines or secret values.",
+    "securityPatternScan.help.option.maxFiles": "Maximum number of files to inspect. Default: 1000",
+    "securityPatternScan.help.option.maxFileBytes": "Maximum bytes to read from each inspected file. Default: 262144",
+    "securityPatternScan.help.option.maxFindings": "Maximum number of findings to report. Default: 300",
+    "securityPatternScan.help.exit.ok": "The security-pattern scan completed without blocking findings",
+    "securityPatternScan.help.exit.fail": "The security-pattern scan found invalid input, unreadable files, or security-pattern findings",
+    "securityPatternScan.title": "mustflow security pattern scan",
+    "securityPatternScan.label.files": "Files",
+    "securityPatternScan.label.findings": "Findings",
+    "securityPatternScan.label.categories": "Categories",
+    "securityPatternScan.label.highOrCritical": "High or critical",
+    "securityPatternScan.label.truncated": "Truncated",
+    "securityPatternScan.label.reviewFocus": "Review focus",
+    "securityPatternScan.label.issues": "Issues",
+    "securityPatternScan.clean": "No high-signal security code patterns were found.",
+    "securityPatternScan.error.missingAction": "Specify a security-pattern-scan action: scan",
+    "securityPatternScan.error.unknownAction": "Unknown security-pattern-scan action: {action}",
+    "securityPatternScan.error.invalidPositiveInteger": "{option} must be a positive safe integer: {value}",
     "scriptPack.script.skillRouteAudit.summary": "Audit skill routes, template skill copies, manifest profiles, and i18n metadata for drift",
     "scriptPack.script.versionSource.summary": "Inspect repository version sources before release metadata changes",
     "scriptPack.script.approvalGate.summary": "Check planned actions against repository approval policy gates",
+    "scriptPack.script.deploySurface.summary": "Inspect repository deploy and release surfaces with verification gates",
     "scriptPack.script.mergeConflictScan.summary": "Scan repository files for unresolved Git merge conflict markers",
     "scriptPack.script.gitIgnoreAudit.summary": "Audit Git ignore rules and path visibility evidence",
     "scriptPack.script.manifestLockDrift.summary": "Check manifest-lock file hashes against current repository files",
@@ -1165,6 +1185,19 @@ export const koMessages = {
     "approvalGate.error.missingAction": "Specify an approval-gate action: check",
     "approvalGate.error.unknownAction": "Unknown approval-gate action: {action}",
     "approvalGate.error.missingActionType": "Specify at least one --action <type>",
+    "deploySurface.help.summary": "Inspect workflows, package metadata, package scripts, and deploy config files for local deploy or release surfaces.",
+    "deploySurface.help.exit.ok": "The deploy-surface report was generated",
+    "deploySurface.help.exit.fail": "The deploy-surface report found unreadable metadata or invalid input",
+    "deploySurface.title": "mustflow deploy surface",
+    "deploySurface.label.deploySurface": "Deploy surface detected",
+    "deploySurface.label.surfaces": "Surfaces",
+    "deploySurface.label.surfaceDetails": "Surface details",
+    "deploySurface.label.requiredVerification": "Required verification",
+    "deploySurface.label.manualGates": "Manual gates",
+    "deploySurface.label.issues": "Issues",
+    "deploySurface.noSurfaces": "No local deploy or release surface was detected.",
+    "deploySurface.error.missingAction": "Specify a deploy-surface action: inspect",
+    "deploySurface.error.unknownAction": "Unknown deploy-surface action: {action}",
     "mergeConflictScan.help.summary": "Scan changed files or explicit paths for unresolved Git merge conflict markers without printing file content.",
     "mergeConflictScan.help.option.maxFiles": "Maximum files to scan. Default: 1000",
     "mergeConflictScan.help.option.maxFileBytes": "Maximum bytes to read from each file. Default: 524288",
@@ -1238,6 +1271,8 @@ export const koMessages = {
     "run.error.blockedShellBackgroundDetail": "셸 명령은 백그라운드 작업을 시작하면 안 됩니다.",
     "run.error.blockedLongRunningCommand": '명령 의도 "{intent}"가 차단되었습니다. {detail}',
     "run.error.blockedLongRunningCommandDetail": "argv는 개발 서버, 감시 명령, 셸 래퍼, 인터프리터 반복 작업, 백그라운드 프로세스가 아니라 끝나는 단발성 명령이어야 합니다.",
+    "run.error.approvalRequired": '명령 의도 "{intent}"는 승인이 필요합니다. {detail}',
+    "run.error.approvalRequiredDetail": "저장소 승인 정책상 이 명령 의도를 실행하기 전에 명시적 승인이 필요합니다.",
     "run.error.cwdOutsideProject": '명령 "{intent}"의 실행 위치(cwd)가 올바르지 않습니다: {detail}',
     "run.error.cwdOutsideProjectDetail": "명령 실행 위치(cwd)는 현재 루트 안에 있어야 합니다.",
     "run.error.invalidTestTarget": '명령 "{intent}"에 올바르지 않은 테스트 대상이 전달되었습니다. {detail}',

package/dist/cli/i18n/zh.js

@@ -1123,9 +1123,29 @@ export const zhMessages = {
     "secretRiskScan.error.missingAction": "Specify a secret-risk-scan action: scan",
     "secretRiskScan.error.unknownAction": "Unknown secret-risk-scan action: {action}",
     "secretRiskScan.error.invalidPositiveInteger": "{option} must be a positive safe integer: {value}",
+    "scriptPack.script.securityPatternScan.summary": "Scan repository files for high-signal security code patterns",
+    "securityPatternScan.help.summary": "Scan source, CI, and config files for security code-pattern leads without printing matched source lines or secret values.",
+    "securityPatternScan.help.option.maxFiles": "Maximum number of files to inspect. Default: 1000",
+    "securityPatternScan.help.option.maxFileBytes": "Maximum bytes to read from each inspected file. Default: 262144",
+    "securityPatternScan.help.option.maxFindings": "Maximum number of findings to report. Default: 300",
+    "securityPatternScan.help.exit.ok": "The security-pattern scan completed without blocking findings",
+    "securityPatternScan.help.exit.fail": "The security-pattern scan found invalid input, unreadable files, or security-pattern findings",
+    "securityPatternScan.title": "mustflow security pattern scan",
+    "securityPatternScan.label.files": "Files",
+    "securityPatternScan.label.findings": "Findings",
+    "securityPatternScan.label.categories": "Categories",
+    "securityPatternScan.label.highOrCritical": "High or critical",
+    "securityPatternScan.label.truncated": "Truncated",
+    "securityPatternScan.label.reviewFocus": "Review focus",
+    "securityPatternScan.label.issues": "Issues",
+    "securityPatternScan.clean": "No high-signal security code patterns were found.",
+    "securityPatternScan.error.missingAction": "Specify a security-pattern-scan action: scan",
+    "securityPatternScan.error.unknownAction": "Unknown security-pattern-scan action: {action}",
+    "securityPatternScan.error.invalidPositiveInteger": "{option} must be a positive safe integer: {value}",
     "scriptPack.script.skillRouteAudit.summary": "Audit skill routes, template skill copies, manifest profiles, and i18n metadata for drift",
     "scriptPack.script.versionSource.summary": "Inspect repository version sources before release metadata changes",
     "scriptPack.script.approvalGate.summary": "Check planned actions against repository approval policy gates",
+    "scriptPack.script.deploySurface.summary": "Inspect repository deploy and release surfaces with verification gates",
     "scriptPack.script.mergeConflictScan.summary": "Scan repository files for unresolved Git merge conflict markers",
     "scriptPack.script.gitIgnoreAudit.summary": "Audit Git ignore rules and path visibility evidence",
     "scriptPack.script.manifestLockDrift.summary": "Check manifest-lock file hashes against current repository files",
@@ -1165,6 +1185,19 @@ export const zhMessages = {
     "approvalGate.error.missingAction": "Specify an approval-gate action: check",
     "approvalGate.error.unknownAction": "Unknown approval-gate action: {action}",
     "approvalGate.error.missingActionType": "Specify at least one --action <type>",
+    "deploySurface.help.summary": "Inspect workflows, package metadata, package scripts, and deploy config files for local deploy or release surfaces.",
+    "deploySurface.help.exit.ok": "The deploy-surface report was generated",
+    "deploySurface.help.exit.fail": "The deploy-surface report found unreadable metadata or invalid input",
+    "deploySurface.title": "mustflow deploy surface",
+    "deploySurface.label.deploySurface": "Deploy surface detected",
+    "deploySurface.label.surfaces": "Surfaces",
+    "deploySurface.label.surfaceDetails": "Surface details",
+    "deploySurface.label.requiredVerification": "Required verification",
+    "deploySurface.label.manualGates": "Manual gates",
+    "deploySurface.label.issues": "Issues",
+    "deploySurface.noSurfaces": "No local deploy or release surface was detected.",
+    "deploySurface.error.missingAction": "Specify a deploy-surface action: inspect",
+    "deploySurface.error.unknownAction": "Unknown deploy-surface action: {action}",
     "mergeConflictScan.help.summary": "Scan changed files or explicit paths for unresolved Git merge conflict markers without printing file content.",
     "mergeConflictScan.help.option.maxFiles": "Maximum files to scan. Default: 1000",
     "mergeConflictScan.help.option.maxFileBytes": "Maximum bytes to read from each file. Default: 524288",
@@ -1238,6 +1271,8 @@ export const zhMessages = {
     "run.error.blockedShellBackgroundDetail": "Shell 命令不得启动后台工作。",
     "run.error.blockedLongRunningCommand": '意图 "{intent}" 已被阻止。{detail}',
     "run.error.blockedLongRunningCommandDetail": "argv 必须描述会结束的单次命令，而不是开发服务器、监听命令、shell 包装器、解释器循环或后台进程。",
+    "run.error.approvalRequired": '意图 "{intent}" 需要审批。{detail}',
+    "run.error.approvalRequiredDetail": "仓库审批策略要求在运行此命令意图前获得明确审批。",
     "run.error.cwdOutsideProject": '命令 "{intent}" 的 cwd 无效：{detail}',
     "run.error.cwdOutsideProjectDetail": "意图 cwd 必须位于当前根目录内。",
     "run.error.invalidTestTarget": '命令 "{intent}" 收到无效测试目标。{detail}',

package/dist/cli/lib/external-skill-import.js

@@ -1,4 +1,4 @@
-import { existsSync } from 'node:fs';
+import { existsSync, renameSync, rmSync } from 'node:fs';
 import { createHash } from 'node:crypto';
 import path from 'node:path';
 import { ensureFileTargetInsideWithoutSymlinks, writeJsonFileInsideWithoutSymlinks, writeUtf8FileInsideWithoutSymlinks, } from '../../core/safe-filesystem.js';
@@ -185,6 +185,52 @@ function validateImportRelativeFilePath(relativePath) {
 function normalizeTextContent(content) {
     return content.replace(/\r\n?/gu, '\n');
 }
+function readFrontmatterParts(content) {
+    if (!content.startsWith('---')) {
+        return {
+            name: null,
+            description: null,
+            body: content,
+        };
+    }
+    const firstLineEnd = content.indexOf('\n');
+    const end = firstLineEnd >= 0 ? content.indexOf('\n---', firstLineEnd + 1) : -1;
+    if (firstLineEnd < 0 || end < 0) {
+        return {
+            name: null,
+            description: null,
+            body: content,
+        };
+    }
+    const frontmatter = content.slice(firstLineEnd + 1, end).split(/\r?\n/u);
+    const bodyStart = content.indexOf('\n', end + 1);
+    return {
+        name: readFrontmatterScalar(content, 'name'),
+        description: readFrontmatterScalar(content, 'description'),
+        body: bodyStart >= 0 ? content.slice(bodyStart + 1) : '',
+    };
+}
+function renderYamlScalar(key, value) {
+    return `${key}: ${JSON.stringify(value)}`;
+}
+function sanitizeExternalSkillMarkdown(content) {
+    const frontmatter = readFrontmatterParts(content);
+    const lines = [
+        '---',
+        ...(frontmatter.name ? [renderYamlScalar('name', frontmatter.name)] : []),
+        ...(frontmatter.description ? [renderYamlScalar('description', frontmatter.description)] : []),
+        'external_authority: untrusted',
+        '---',
+        frontmatter.body,
+    ];
+    return lines.join('\n');
+}
+function normalizeImportedSkillFiles(files) {
+    return files.map((file) => ({
+        ...file,
+        content: file.relativePath === 'SKILL.md' ? sanitizeExternalSkillMarkdown(file.content) : file.content,
+    }));
+}
 function hashContent(content) {
     return `sha256:${createHash('sha256').update(content).digest('hex')}`;
 }
@@ -314,21 +360,38 @@ function createTarget(skillName) {
     };
 }
 function writeImportedSkillFiles(projectRoot, target, source, files, fileReport, warnings) {
-    const skillPath = path.join(projectRoot, ...target.skill_dir.split('/'), 'SKILL.md');
-    if (existsSync(skillPath)) {
+    const targetPath = path.join(projectRoot, ...target.skill_dir.split('/'));
+    const skillPath = path.join(targetPath, 'SKILL.md');
+    if (existsSync(targetPath)) {
         throw new Error(`External skill already exists: ${target.skill_dir}`);
     }
     ensureFileTargetInsideWithoutSymlinks(projectRoot, skillPath, { allowMissingLeaf: true });
-    for (const file of files) {
-        writeUtf8FileInsideWithoutSymlinks(projectRoot, path.join(projectRoot, ...target.skill_dir.split('/'), ...file.relativePath.split('/')), file.content);
+    const tempSkillDir = `${EXTERNAL_SKILL_ROOT}/.${target.skill_name}.tmp-${process.pid}-${Date.now()}`;
+    const tempTarget = {
+        ...target,
+        skill_dir: tempSkillDir,
+        provenance_path: `${tempSkillDir}/${PROVENANCE_FILE}`,
+    };
+    const tempPath = path.join(projectRoot, ...tempTarget.skill_dir.split('/'));
+    const tempSkillPath = path.join(tempPath, 'SKILL.md');
+    ensureFileTargetInsideWithoutSymlinks(projectRoot, tempSkillPath, { allowMissingLeaf: true });
+    try {
+        for (const file of files) {
+            writeUtf8FileInsideWithoutSymlinks(projectRoot, path.join(projectRoot, ...tempTarget.skill_dir.split('/'), ...file.relativePath.split('/')), file.content);
+        }
+        writeJsonFileInsideWithoutSymlinks(projectRoot, path.join(projectRoot, ...tempTarget.provenance_path.split('/')), {
+            schema_version: '1',
+            kind: 'external_skill_source',
+            source,
+            files: fileReport,
+            warnings,
+        });
+        renameSync(tempPath, targetPath);
+    }
+    catch (error) {
+        rmSync(tempPath, { recursive: true, force: true });
+        throw error;
     }
-    writeJsonFileInsideWithoutSymlinks(projectRoot, path.join(projectRoot, ...target.provenance_path.split('/')), {
-        schema_version: '1',
-        kind: 'external_skill_source',
-        source,
-        files: fileReport,
-        warnings,
-    });
 }
 function rejectionReport(mode, issue) {
     return {
@@ -355,10 +418,11 @@ export async function createExternalSkillImportReport(projectRoot, inputUrl, opt
         if (typeof fetchImpl !== 'function') {
             throw new Error('This runtime does not provide fetch.');
         }
-        const files = await loadExternalSkillFiles(fetchImpl, parsed);
-        const skillName = targetNameForSkill(files, parsed, options.name);
+        const sourceFiles = await loadExternalSkillFiles(fetchImpl, parsed);
+        const skillName = targetNameForSkill(sourceFiles, parsed, options.name);
         const target = createTarget(skillName);
         const source = externalSkillSourceFromParsed(inputUrl, parsed);
+        const files = normalizeImportedSkillFiles(sourceFiles);
         const reports = fileReports(files);
         const warnings = [
             ...(reports.some((file) => file.kind === 'script')

package/dist/cli/lib/local-index/sql.js

@@ -1,5 +1,6 @@
 import { createRequire } from 'node:module';
-export async function loadSqlJs() {
+let sqlJsPromise = null;
+async function initializeSqlJs() {
     const require = createRequire(import.meta.url);
     const wasmPath = require.resolve('sql.js/dist/sql-wasm.wasm');
     const sqlJsModule = (await import('sql.js'));
@@ -13,3 +14,10 @@ export async function loadSqlJs() {
         },
     });
 }
+export async function loadSqlJs() {
+    sqlJsPromise ??= initializeSqlJs().catch((error) => {
+        sqlJsPromise = null;
+        throw error;
+    });
+    return sqlJsPromise;
+}

package/dist/cli/lib/run-plan.js

@@ -7,6 +7,7 @@ import { evaluateCommandIntentEligibility, } from '../../core/command-intent-eli
 import { inspectActiveRunLocks, } from '../../core/active-run-locks.js';
 import { isRecord, readPositiveInteger, readString, readStringArray, } from '../../core/config-loading.js';
 import { DEFAULT_COMMAND_MAX_OUTPUT_BYTES, COMMAND_OUTPUT_LIMIT_SCOPE, } from '../../core/command-output-limits.js';
+import { checkRepoApprovalGate } from '../../core/repo-approval-gate.js';
 import { normalizeSuccessExitCodes } from '../../core/success-exit-codes.js';
 import { normalizeSafeTestTargetPath, TEST_TARGET_PATH_ERROR } from '../../core/test-target-paths.js';
 import { evaluateCommandPreconditions, } from '../../core/command-preconditions.js';
@@ -124,6 +125,38 @@ function readRunIntentMetadata(contract, intent) {
         relatedOneshotChecks: readStringArray(intent, 'related_oneshot_checks') ?? [],
     };
 }
+function createApprovalBlock(projectRoot, metadata) {
+    const actionTypes = [];
+    if (metadata.network === true) {
+        actionTypes.push('network_access');
+    }
+    if (metadata.destructive === true) {
+        actionTypes.push('destructive_command');
+    }
+    if (actionTypes.length === 0) {
+        return null;
+    }
+    const approvalReport = checkRepoApprovalGate(projectRoot, actionTypes);
+    if (approvalReport.issues.length > 0) {
+        return {
+            reasonCode: 'approval_policy_unreadable',
+            detail: `Could not evaluate ${approvalReport.input.policy_path}: ${approvalReport.issues.join(' ')}`,
+        };
+    }
+    const requiredActions = approvalReport.decisions
+        .filter((decision) => decision.approval_required)
+        .map((decision) => decision.action_type);
+    if (requiredActions.length === 0) {
+        return null;
+    }
+    const reasonCode = requiredActions.includes('destructive_command')
+        ? 'destructive_requires_approval'
+        : 'network_requires_approval';
+    return {
+        reasonCode,
+        detail: `Action ${requiredActions.map((action) => JSON.stringify(action)).join(', ')} requires explicit approval before mf run can execute this intent.`,
+    };
+}
 function createBlockedRunPlan(contract, intentName, intent, eligibility, reasonCode, detail, preconditions = []) {
     const metadata = intent ? readRunIntentMetadata(contract, intent) : null;
     return {
@@ -177,6 +210,10 @@ export function createRunPlan(projectRoot, contract, intentName, options = {}) {
         return createBlockedRunPlan(contract, intentName, rawIntent, eligibility, eligibility.code, eligibility.detail, preconditions);
     }
     const metadata = readRunIntentMetadata(contract, rawIntent);
+    const approvalBlock = createApprovalBlock(projectRoot, metadata);
+    if (approvalBlock) {
+        return createBlockedRunPlan(contract, intentName, rawIntent, eligibility, approvalBlock.reasonCode, approvalBlock.detail, preconditions);
+    }
     const maxOutputBytesLimitDetail = getCommandMaxOutputBytesLimitDetail(contract, rawIntent);
     if (maxOutputBytesLimitDetail) {
         return createBlockedRunPlan(contract, intentName, rawIntent, eligibility, 'max_output_bytes_exceeds_limit', maxOutputBytesLimitDetail, preconditions);