mustflow 2.103.31 → 2.103.32

package/dist/cli/commands/check.js

@@ -3,7 +3,7 @@ import { acquireActiveCommandLock, GENERATED_SURFACE_READ_EFFECTS, reportActiveC
 import { t } from '../lib/i18n.js';
 import { formatCliOptionParseError, hasCliOptionToken, hasParsedCliOption, parseCliOptions, } from '../lib/option-parser.js';
 import { resolveMustflowRoot } from '../lib/project-root.js';
-import { checkMustflowProjectReport } from '../lib/validation.js';
+import { checkMustflowProjectReportWithGeneratedState } from '../lib/validation.js';
 const CHECK_OPTIONS = [
     { name: '--json', kind: 'boolean' },
     { name: '--strict', kind: 'boolean' },
@@ -33,7 +33,7 @@ export function getCheckHelp(lang = 'en') {
         ],
     }, lang);
 }
-export function runCheck(args, reporter, lang = 'en') {
+export async function runCheck(args, reporter, lang = 'en') {
     if (hasCliOptionToken(args, '--help', ['-h'])) {
         reporter.stdout(getCheckHelp(lang));
         return 0;
@@ -51,7 +51,7 @@ export function runCheck(args, reporter, lang = 'en') {
         return 1;
     }
     try {
-        const report = checkMustflowProjectReport(projectRoot, { strict });
+        const report = await checkMustflowProjectReportWithGeneratedState(projectRoot, { strict });
         const issues = report.issues;
         const warnings = report.warnings;
         const ok = issues.length === 0;

package/dist/cli/lib/local-index/index.js

@@ -670,3 +670,73 @@ ORDER BY source_anchors.id
         database.close();
     }
 }
+/**
+ * mf:anchor cli.index.source-anchor-check-warnings
+ * purpose: Surface generated source-anchor registry drift through mf check without making the registry authoritative.
+ * search: mf check, source anchor index, stale anchor, generated registry
+ * invariant: Local index warnings are review hints only and never grant command or verification authority.
+ * risk: cache, config
+ */
+export async function readLocalSourceAnchorCheckWarnings(projectRoot) {
+    const databasePath = getLocalIndexDatabasePath(projectRoot);
+    if (!existsSync(databasePath)) {
+        return [];
+    }
+    let SQL;
+    try {
+        SQL = await loadSqlJs();
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        return [`source anchor local index could not be loaded (${message}); refresh with mf index --source`];
+    }
+    let database;
+    try {
+        database = new SQL.Database(readFileSync(databasePath));
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        return [`source anchor local index could not be read (${message}); refresh with mf index --source`];
+    }
+    try {
+        if (readMetadataValue(database, 'source_index_enabled') !== 'true') {
+            return [];
+        }
+        if (!hasTable(database, 'indexed_files') || !hasTable(database, 'source_anchors') || !hasTable(database, 'source_anchor_status')) {
+            return ['source anchor local index is missing source-anchor tables; refresh with mf index --source'];
+        }
+        const indexedSourcePaths = new Set(queryRows(database, 'SELECT path FROM indexed_files WHERE source_scope = "source_anchor"')
+            .map((row) => toSearchString(row.path))
+            .filter(Boolean));
+        const staleSourcePaths = getStalePaths(projectRoot, database, { includeState: false }).filter((stalePath) => indexedSourcePaths.has(stalePath));
+        if (staleSourcePaths.length > 0) {
+            return [
+                `source anchor local index is stale for source paths: ${staleSourcePaths.join(', ')}; refresh with mf index --source`,
+            ];
+        }
+        return queryRows(database, `
+SELECT
+  source_anchors.id,
+  source_anchors.path,
+  source_anchors.line_start,
+  source_anchor_status.status
+FROM source_anchors
+JOIN source_anchor_status ON source_anchor_status.anchor_id = source_anchors.id
+WHERE source_anchor_status.status IN ('changed', 'review', 'stale')
+ORDER BY source_anchors.id
+`).map((row) => {
+            const anchorId = toSearchString(row.id);
+            const anchorPath = toSearchString(row.path);
+            const lineStart = toNullableNumber(row.line_start) ?? 0;
+            const status = toSearchString(row.status);
+            return `source anchor local index marks anchor "${anchorId}" as ${status} at ${anchorPath}:${lineStart}; review the anchor, then refresh with mf index --source if the current snapshot is accepted`;
+        });
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        return [`source anchor local index could not be checked (${message}); refresh with mf index --source`];
+    }
+    finally {
+        database.close();
+    }
+}

package/dist/cli/lib/validation/index.js

@@ -8,6 +8,7 @@ import { formatManagedMarkdownLabel, getManagedMarkdownExpectation, } from '../.
 import { SKILL_INDEX_ROUTE_COLUMN_COUNT, SKILL_INDEX_ROUTE_COLUMNS, SKILL_INDEX_SKILL_PATH_COLUMN_INDEX, findSkillRouteConflictWarnings, findSkillIndexRoutePathColumn, parseSkillIndexRoutes, readBacktickValues, } from '../../../core/skill-route-alignment.js';
 import { validateTemplateVersionSync } from '../../../core/release-version-validation.js';
 import { validateSourceAnchorsInProject } from '../../../core/source-anchor-validation.js';
+import { readLocalSourceAnchorCheckWarnings } from '../local-index/index.js';
 import { listFilesRecursive, toPosixPath } from '../filesystem.js';
 import { readGitChangedFiles } from '../git-changes.js';
 import { inspectManifestLock } from '../manifest-lock.js';
@@ -1667,6 +1668,9 @@ function collectCheckIssues(projectRoot, options = {}) {
 }
 export function checkMustflowProjectReport(projectRoot, options = {}) {
     const issues = collectCheckIssues(projectRoot, options);
+    return checkProjectReportFromIssues(issues);
+}
+function checkProjectReportFromIssues(issues) {
     const errorIssues = issues.filter((issue) => issue.severity !== 'warning');
     const warningIssues = issues.filter((issue) => issue.severity === 'warning');
     const errors = errorIssues.map((issue) => issue.message);
@@ -1678,6 +1682,21 @@ export function checkMustflowProjectReport(projectRoot, options = {}) {
         issueDetails: describeCheckIssues([...errorIssues, ...warningIssues]),
     };
 }
+async function collectGeneratedSourceAnchorIndexWarnings(projectRoot, options) {
+    if (!options.strict) {
+        return [];
+    }
+    const warnings = await readLocalSourceAnchorCheckWarnings(projectRoot);
+    return warnings.map((message) => ({
+        message: `Strict warning: ${message}`,
+        severity: 'warning',
+    }));
+}
+export async function checkMustflowProjectReportWithGeneratedState(projectRoot, options = {}) {
+    const issues = collectCheckIssues(projectRoot, options);
+    issues.push(...(await collectGeneratedSourceAnchorIndexWarnings(projectRoot, options)));
+    return checkProjectReportFromIssues(issues);
+}
 export function checkMustflowProject(projectRoot, options = {}) {
     return checkMustflowProjectReport(projectRoot, options).issues;
 }

package/dist/core/check-issues.js

@@ -78,6 +78,8 @@ const CHECK_ISSUE_ID_RULES = [
     ['mustflow.source_anchor.too_many_search_terms', /^Strict warning: source anchor [^ ]+ in .+ has too many search terms/u],
     ['mustflow.source_anchor.high_density', /^Strict warning: .+ has high source anchor density/u],
     ['mustflow.source_anchor.high_risk_review', /^Strict warning: source anchor [^ ]+ in .+ uses high-risk tags and needs review:/u],
+    ['mustflow.source_anchor.index_stale', /^Strict warning: source anchor local index (?:is stale|could not be|is missing)/u],
+    ['mustflow.source_anchor.index_status', /^Strict warning: source anchor local index marks anchor "[^"]+" as (?:changed|review|stale) at /u],
     ['mustflow.run_receipt.invalid_json', /^Strict: \.mustflow\/state\/runs\/latest\.json is not valid JSON:/u],
     ['mustflow.run_receipt.invalid_shape', /^Strict: \.mustflow\/state\/runs\/latest\.json must contain a JSON object$/u],
     ['mustflow.retention.run_receipt_size_limit', /^Strict: \.mustflow\/state\/runs\/latest\.json exceeds \[retention\.run_receipts\]\.max_file_kb/u],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mustflow",
-  "version": "2.103.31",
+  "version": "2.103.32",
   "description": "Agent workflow documents and CLI for mustflow repository roots.",
   "type": "module",
   "license": "MIT-0",

package/templates/default/manifest.toml

@@ -1,6 +1,6 @@
 id = "default"
 name = "default"
-version = "2.103.31"
+version = "2.103.32"
 description = "Minimal workflow for LLM agents to read, edit, and verify their work in a repository."
 common_root = "common"
 locales_root = "locales"