mustflow 2.106.0 → 2.107.0

package/dist/cli/commands/run/args.js

@@ -3,6 +3,7 @@ import { t } from '../../lib/i18n.js';
 import { getParsedCliStringOption, hasCliOptionToken, hasParsedCliOption, parseCliOptions, } from '../../lib/option-parser.js';
 import { ALLOW_UNTRUSTED_ROOT_OPTION } from '../../lib/run-root-trust.js';
 const DEFAULT_ACTIVE_LOCK_WAIT_TIMEOUT_SECONDS = 300;
+const SUPPORTED_RUN_APPROVAL_ACTIONS = new Set(['network_access', 'destructive_command']);
 const RUN_OPTIONS = [
     { name: '--json', kind: 'boolean' },
     { name: '--dry-run', kind: 'boolean' },
@@ -10,13 +11,28 @@ const RUN_OPTIONS = [
     { name: '--wait', kind: 'boolean' },
     { name: ALLOW_UNTRUSTED_ROOT_OPTION, kind: 'boolean' },
     { name: '--wait-timeout', kind: 'string' },
+    { name: '--allow-approval', kind: 'string' },
 ];
 export function hasRunHelpOption(args) {
     return hasCliOptionToken(args, '--help', ['-h']);
 }
+export function getSupportedRunApprovalActions() {
+    return [...SUPPORTED_RUN_APPROVAL_ACTIONS].sort((left, right) => left.localeCompare(right));
+}
+function getAllowApprovalValues(parsed) {
+    const values = parsed.occurrences
+        .filter((occurrence) => occurrence.name === '--allow-approval')
+        .map((occurrence) => occurrence.value)
+        .filter((value) => typeof value === 'string');
+    return [...new Set(values)];
+}
+function findInvalidApprovalAction(values) {
+    return values.find((value) => !SUPPORTED_RUN_APPROVAL_ACTIONS.has(value)) ?? null;
+}
 export function parseRunArguments(args) {
     const parsed = parseCliOptions(args, RUN_OPTIONS, { allowPositionals: true });
     let waitTimeoutSeconds = DEFAULT_ACTIVE_LOCK_WAIT_TIMEOUT_SECONDS;
+    const allowApprovals = getAllowApprovalValues(parsed);
     if (parsed.error) {
         const [intentName, ...extra] = parsed.positionals;
         return {
@@ -24,16 +40,22 @@ export function parseRunArguments(args) {
             dryRun: hasParsedCliOption(parsed, '--dry-run'),
             planOnly: hasParsedCliOption(parsed, '--plan-only'),
             allowUntrustedRoot: hasParsedCliOption(parsed, ALLOW_UNTRUSTED_ROOT_OPTION),
+            allowApprovals,
             wait: hasParsedCliOption(parsed, '--wait'),
             waitTimeoutSeconds,
             intentName: intentName ?? null,
             extra,
+            invalidApprovalAction: null,
             error: parsed.error,
         };
     }
+    const invalidApprovalAction = findInvalidApprovalAction(allowApprovals);
     const waitTimeoutValue = getParsedCliStringOption(parsed, '--wait-timeout');
     let error = null;
-    if (waitTimeoutValue !== null) {
+    if (invalidApprovalAction) {
+        error = 'invalid_approval_action';
+    }
+    else if (waitTimeoutValue !== null) {
         const parsedWaitTimeout = Number(waitTimeoutValue);
         if (!Number.isInteger(parsedWaitTimeout) || parsedWaitTimeout <= 0) {
             error = 'invalid_wait_timeout';
@@ -48,10 +70,12 @@ export function parseRunArguments(args) {
         dryRun: hasParsedCliOption(parsed, '--dry-run'),
         planOnly: hasParsedCliOption(parsed, '--plan-only'),
         allowUntrustedRoot: hasParsedCliOption(parsed, ALLOW_UNTRUSTED_ROOT_OPTION),
+        allowApprovals,
         wait: hasParsedCliOption(parsed, '--wait'),
         waitTimeoutSeconds,
         intentName: intentName ?? null,
         extra,
+        invalidApprovalAction,
         error,
     };
 }
@@ -65,10 +89,11 @@ export function getRunHelp(lang = 'en') {
             { label: '--json', description: t(lang, 'run.help.option.json') },
             { label: '--wait', description: t(lang, 'run.help.option.wait') },
             { label: '--wait-timeout <seconds>', description: t(lang, 'run.help.option.waitTimeout') },
+            { label: '--allow-approval <action>', description: t(lang, 'run.help.option.allowApproval') },
             { label: ALLOW_UNTRUSTED_ROOT_OPTION, description: t(lang, 'run.help.option.allowUntrustedRoot') },
             { label: '-h, --help', description: t(lang, 'cli.option.help') },
         ],
-        examples: ['mf run test', 'mf run lint --json', 'mf run mustflow_check --dry-run --json'],
+        examples: ['mf run test', 'mf run lint --json', 'mf run release_npm_version_available --allow-approval network_access --json'],
         exitCodes: [
             {
                 label: '0',

package/dist/cli/commands/run/execution.js

@@ -188,7 +188,10 @@ export async function executeRunCommand(request, reporter, lang = 'en', options
         return { exitCode: 1, receipt: null };
     }
     const contract = profiler.measure('command_contract', () => readCommandContract(projectRoot));
-    const plan = profiler.measure('plan_creation', () => createRunPlan(projectRoot, contract, request.intentName, { testTargets: options.testTargets }));
+    const plan = profiler.measure('plan_creation', () => createRunPlan(projectRoot, contract, request.intentName, {
+        testTargets: options.testTargets,
+        approvedActions: request.allowApprovals,
+    }));
     if (!plan.ok) {
         if (request.outputMode === 'json') {
             reporter.stdout(JSON.stringify(createRunPreview(plan, 'plan-only'), null, 2));

package/dist/cli/commands/run.js

@@ -1,7 +1,7 @@
 import { printUsageError } from '../lib/cli-output.js';
 import { t } from '../lib/i18n.js';
 import { formatCliOptionParseError } from '../lib/option-parser.js';
-import { getRunHelp, hasRunHelpOption, parseRunArguments } from './run/args.js';
+import { getRunHelp, getSupportedRunApprovalActions, hasRunHelpOption, parseRunArguments } from './run/args.js';
 import { executeRunCommand } from './run/execution.js';
 import { executeRunPreviewCommand, getRunPreviewMode } from './run/preview.js';
 export { getRunHelp } from './run/args.js';
@@ -19,7 +19,18 @@ export async function runRun(args, reporter, lang = 'en', options = {}) {
         return 0;
     }
     const parsedArgs = parseRunArguments(args);
-    if (parsedArgs.error && parsedArgs.error !== 'invalid_wait_timeout') {
+    if (parsedArgs.error === 'invalid_wait_timeout') {
+        printUsageError(reporter, t(lang, 'run.error.invalidWaitTimeout'), 'mf run --help', getRunHelp(lang), lang);
+        return 1;
+    }
+    if (parsedArgs.error === 'invalid_approval_action') {
+        printUsageError(reporter, t(lang, 'run.error.invalidApprovalAction', {
+            action: parsedArgs.invalidApprovalAction ?? 'unknown',
+            allowed: getSupportedRunApprovalActions().join(', '),
+        }), 'mf run --help', getRunHelp(lang), lang);
+        return 1;
+    }
+    if (parsedArgs.error) {
         if (parsedArgs.error.kind === 'missing_value' && parsedArgs.error.option === '--wait-timeout') {
             printUsageError(reporter, t(lang, 'run.error.invalidWaitTimeout'), 'mf run --help', getRunHelp(lang), lang);
             return 1;
@@ -27,10 +38,6 @@ export async function runRun(args, reporter, lang = 'en', options = {}) {
         printUsageError(reporter, formatCliOptionParseError(parsedArgs.error, lang), 'mf run --help', getRunHelp(lang), lang);
         return 1;
     }
-    if (parsedArgs.error === 'invalid_wait_timeout') {
-        printUsageError(reporter, t(lang, 'run.error.invalidWaitTimeout'), 'mf run --help', getRunHelp(lang), lang);
-        return 1;
-    }
     const json = parsedArgs.json;
     const dryRun = parsedArgs.dryRun;
     const planOnly = parsedArgs.planOnly;
@@ -59,6 +66,7 @@ export async function runRun(args, reporter, lang = 'en', options = {}) {
             intentName,
             outputMode: json ? 'json' : 'text',
             allowUntrustedRoot,
+            allowApprovals: parsedArgs.allowApprovals,
             wait: parsedArgs.wait,
             waitTimeoutSeconds: parsedArgs.waitTimeoutSeconds,
         }, reporter, lang, options);

package/dist/cli/commands/verify.js

@@ -161,6 +161,7 @@ async function runVerificationIntent(intent, lang, verificationPlanId, correlati
         intentName: intent,
         outputMode: 'silent',
         allowUntrustedRoot: false,
+        allowApprovals: [],
         wait: false,
         waitTimeoutSeconds: 1,
     }, output.reporter, lang, {

package/dist/cli/i18n/en.js

@@ -1287,6 +1287,7 @@ Read these files before working:
     "run.help.option.json": "Print the run record or command plan as JSON",
     "run.help.option.wait": "Wait for conflicting active run locks before executing",
     "run.help.option.waitTimeout": "Maximum seconds to wait for active run locks. Default: 300",
+    "run.help.option.allowApproval": "Allow this execution to satisfy one approval-gated action such as network_access",
     "run.help.option.allowUntrustedRoot": "Allow one execution from a root with a missing or invalid manifest lock after manual review",
     "run.help.exit.ok": "The command completed with an allowed exit code",
     "run.help.exit.fail": "The command was invalid, refused, timed out, or failed",
@@ -1319,6 +1320,7 @@ Read these files before working:
     "run.error.maxOutputBytesDetail": "The output limit must stay within the allowed maximum.",
     "run.error.conflictingPreviewModes": "Use either --dry-run or --plan-only, not both",
     "run.error.invalidWaitTimeout": "--wait-timeout must be a positive integer",
+    "run.error.invalidApprovalAction": 'Unsupported approval action "{action}". Supported actions: {allowed}',
     "run.error.waitRequiresExecution": "--wait can only be used when executing a command, not with --dry-run or --plan-only",
     "run.error.untrustedRootMissing": "Refused to execute commands because {path} is missing. Run mf init/update to install the workflow, or pass --allow-untrusted-root after reviewing AGENTS.md and .mustflow/config/commands.toml.",
     "run.error.untrustedRootInvalid": "Refused to execute commands because the manifest lock is invalid: {detail}. Restore or regenerate it, or pass --allow-untrusted-root after reviewing AGENTS.md and .mustflow/config/commands.toml.",

package/dist/cli/i18n/es.js

@@ -1287,6 +1287,7 @@ Lee estos archivos antes de trabajar:
     "run.help.option.json": "Imprime el registro de ejecución o el plan de comando como JSON",
     "run.help.option.wait": "Espera bloqueos activos en conflicto antes de ejecutar",
     "run.help.option.waitTimeout": "Segundos máximos para esperar bloqueos activos. Predeterminado: 300",
+    "run.help.option.allowApproval": "Permite que esta ejecución satisfaga una acción con aprobación como network_access",
     "run.help.option.allowUntrustedRoot": "Permite una ejecución desde una raíz con bloqueo de manifiesto ausente o inválido tras revisión manual",
     "run.help.exit.ok": "El comando se completo con un codigo de salida permitido",
     "run.help.exit.fail": "El comando no era válido, fue rechazado, agotó el tiempo o falló",
@@ -1319,6 +1320,7 @@ Lee estos archivos antes de trabajar:
     "run.error.maxOutputBytesDetail": "El límite de salida debe permanecer dentro del máximo permitido.",
     "run.error.conflictingPreviewModes": "Usa --dry-run o --plan-only, no ambos",
     "run.error.invalidWaitTimeout": "--wait-timeout debe ser un entero positivo",
+    "run.error.invalidApprovalAction": 'Acción de aprobación no admitida "{action}". Acciones admitidas: {allowed}',
     "run.error.waitRequiresExecution": "--wait solo se puede usar al ejecutar un comando, no con --dry-run o --plan-only",
     "run.error.untrustedRootMissing": "Se rechazó ejecutar comandos porque falta {path}. Ejecuta mf init/update para instalar el flujo, o usa --allow-untrusted-root tras revisar AGENTS.md y .mustflow/config/commands.toml.",
     "run.error.untrustedRootInvalid": "Se rechazó ejecutar comandos porque el bloqueo de manifiesto no es válido: {detail}. Restáuralo o regenéralo, o usa --allow-untrusted-root tras revisar AGENTS.md y .mustflow/config/commands.toml.",

package/dist/cli/i18n/fr.js

@@ -1287,6 +1287,7 @@ Lisez ces fichiers avant de travailler :
     "run.help.option.json": "Imprime l'enregistrement d'exécution ou le plan de commande en JSON",
     "run.help.option.wait": "Attend les verrous actifs en conflit avant d'exécuter",
     "run.help.option.waitTimeout": "Nombre maximal de secondes d'attente des verrous actifs. Par défaut : 300",
+    "run.help.option.allowApproval": "Autorise cette exécution à satisfaire une action soumise à approbation comme network_access",
     "run.help.option.allowUntrustedRoot": "Autorise une seule exécution depuis une racine sans verrou de manifeste valide après revue manuelle",
     "run.help.exit.ok": "La commande s'est terminée avec un code de sortie autorisé",
     "run.help.exit.fail": "La commande était non valide, refusée, expirée ou a échoué",
@@ -1319,6 +1320,7 @@ Lisez ces fichiers avant de travailler :
     "run.error.maxOutputBytesDetail": "La limite de sortie doit rester dans le maximum autorisé.",
     "run.error.conflictingPreviewModes": "Utilisez --dry-run ou --plan-only, pas les deux",
     "run.error.invalidWaitTimeout": "--wait-timeout doit être un entier positif",
+    "run.error.invalidApprovalAction": 'Action d’approbation non prise en charge "{action}". Actions prises en charge : {allowed}',
     "run.error.waitRequiresExecution": "--wait ne peut être utilisé que lors de l'exécution d'une commande, pas avec --dry-run ou --plan-only",
     "run.error.untrustedRootMissing": "Exécution refusée car {path} est absent. Lancez mf init/update pour installer le workflow, ou ajoutez --allow-untrusted-root après avoir relu AGENTS.md et .mustflow/config/commands.toml.",
     "run.error.untrustedRootInvalid": "Exécution refusée car le verrou de manifeste est invalide : {detail}. Restaurez-le ou régénérez-le, ou ajoutez --allow-untrusted-root après avoir relu AGENTS.md et .mustflow/config/commands.toml.",

package/dist/cli/i18n/hi.js

@@ -1287,6 +1287,7 @@ export const hiMessages = {
     "run.help.option.json": "Run record या command plan को JSON के रूप में प्रिंट करें",
     "run.help.option.wait": "चलाने से पहले conflicting active run locks के लिए wait करें",
     "run.help.option.waitTimeout": "active run locks के लिए wait करने की maximum seconds. Default: 300",
+    "run.help.option.allowApproval": "इस execution को network_access जैसे approval-gated action को satisfy करने दें",
     "run.help.option.allowUntrustedRoot": "Manual review के बाद missing या invalid manifest lock वाली root से एक execution allow करें",
     "run.help.exit.ok": "कमांड अनुमत exit code के साथ पूरी हुई",
     "run.help.exit.fail": "कमांड अमान्य थी, अस्वीकार हुई, timed out हुई या विफल हुई",
@@ -1319,6 +1320,7 @@ export const hiMessages = {
     "run.error.maxOutputBytesDetail": "Output limit अनुमत maximum के अंदर रहनी चाहिए।",
     "run.error.conflictingPreviewModes": "--dry-run या --plan-only में से एक इस्तेमाल करें, दोनों नहीं",
     "run.error.invalidWaitTimeout": "--wait-timeout positive integer होना चाहिए",
+    "run.error.invalidApprovalAction": 'Unsupported approval action "{action}". Supported actions: {allowed}',
     "run.error.waitRequiresExecution": "--wait केवल command execute करते समय इस्तेमाल हो सकता है, --dry-run या --plan-only के साथ नहीं",
     "run.error.untrustedRootMissing": "{path} missing है, इसलिए commands execute करने से मना किया गया। Workflow install करने के लिए mf init/update चलाएँ, या AGENTS.md और .mustflow/config/commands.toml review करने के बाद --allow-untrusted-root पास करें।",
     "run.error.untrustedRootInvalid": "Manifest lock invalid है, इसलिए commands execute करने से मना किया गया: {detail}. इसे restore या regenerate करें, या AGENTS.md और .mustflow/config/commands.toml review करने के बाद --allow-untrusted-root पास करें।",

package/dist/cli/i18n/ko.js

@@ -1287,6 +1287,7 @@ export const koMessages = {
     "run.help.option.json": "실행 결과 또는 명령 계획을 JSON으로 출력합니다",
     "run.help.option.wait": "충돌하는 활성 실행 잠금이 풀릴 때까지 기다린 뒤 실행합니다",
     "run.help.option.waitTimeout": "활성 실행 잠금을 기다릴 최대 초입니다. 기본값: 300",
+    "run.help.option.allowApproval": "이번 실행에서 network_access 같은 승인 게이트 action 하나를 허용합니다",
     "run.help.option.allowUntrustedRoot": "잠금 파일이 없거나 올바르지 않은 루트에서 수동 검토 후 이번 실행만 허용합니다",
     "run.help.exit.ok": "명령이 허용된 종료 코드로 완료되었습니다",
     "run.help.exit.fail": "명령이 잘못되었거나, 거부되었거나, 시간 초과되었거나, 실패했습니다",
@@ -1319,6 +1320,7 @@ export const koMessages = {
     "run.error.maxOutputBytesDetail": "출력 상한은 허용된 최댓값 안에 있어야 합니다.",
     "run.error.conflictingPreviewModes": "--dry-run과 --plan-only 중 하나만 사용하세요",
     "run.error.invalidWaitTimeout": "--wait-timeout은 양의 정수여야 합니다",
+    "run.error.invalidApprovalAction": '지원하지 않는 승인 action입니다: "{action}". 지원 action: {allowed}',
     "run.error.waitRequiresExecution": "--wait는 --dry-run 또는 --plan-only가 아닌 실제 명령 실행에만 사용할 수 있습니다",
     "run.error.untrustedRootMissing": "{path}이 없어 명령 실행을 거부했습니다. mf init/update로 워크플로우를 설치하거나, AGENTS.md와 .mustflow/config/commands.toml을 검토한 뒤 --allow-untrusted-root를 붙이세요.",
     "run.error.untrustedRootInvalid": "잠금 파일이 올바르지 않아 명령 실행을 거부했습니다: {detail}. 파일을 복구하거나 다시 생성하거나, AGENTS.md와 .mustflow/config/commands.toml을 검토한 뒤 --allow-untrusted-root를 붙이세요.",

package/dist/cli/i18n/zh.js

@@ -1287,6 +1287,7 @@ export const zhMessages = {
     "run.help.option.json": "将运行记录或命令计划输出为 JSON",
     "run.help.option.wait": "执行前等待冲突的活动运行锁释放",
     "run.help.option.waitTimeout": "等待活动运行锁的最大秒数。默认值：300",
+    "run.help.option.allowApproval": "允许本次执行满足一个需要审批的动作，例如 network_access",
     "run.help.option.allowUntrustedRoot": "人工复核后，允许从缺失或无效清单锁的根目录执行一次命令",
     "run.help.exit.ok": "命令已以允许的退出码完成",
     "run.help.exit.fail": "命令无效、被拒绝、超时或失败",
@@ -1319,6 +1320,7 @@ export const zhMessages = {
     "run.error.maxOutputBytesDetail": "输出限制必须保持在允许的最大值内。",
     "run.error.conflictingPreviewModes": "只能使用 --dry-run 或 --plan-only，不能同时使用",
     "run.error.invalidWaitTimeout": "--wait-timeout 必须是正整数",
+    "run.error.invalidApprovalAction": '不支持的审批动作 "{action}"。支持的动作：{allowed}',
     "run.error.waitRequiresExecution": "--wait 只能用于实际执行命令，不能与 --dry-run 或 --plan-only 一起使用",
     "run.error.untrustedRootMissing": "已拒绝执行命令，因为缺少 {path}。请运行 mf init/update 安装工作流，或在检查 AGENTS.md 和 .mustflow/config/commands.toml 后传入 --allow-untrusted-root。",
     "run.error.untrustedRootInvalid": "已拒绝执行命令，因为清单锁无效：{detail}。请恢复或重新生成它，或在检查 AGENTS.md 和 .mustflow/config/commands.toml 后传入 --allow-untrusted-root。",

package/dist/cli/lib/run-plan.js

@@ -51,6 +51,9 @@ function commandAcceptsTestTargets(intent) {
 function isResolvedWindowsCommandScript(executablePath) {
     return process.platform === 'win32' && isWindowsCommandScriptPath(executablePath);
 }
+function createApprovedActionSet(actions) {
+    return new Set((actions ?? []).map((action) => action.trim()).filter((action) => action.length > 0));
+}
 export function isMustflowBuiltinIntent(intent) {
     return readString(intent, 'kind') === 'mustflow_builtin';
 }
@@ -129,7 +132,7 @@ function readRunIntentMetadata(contract, intent) {
         relatedOneshotChecks: readStringArray(intent, 'related_oneshot_checks') ?? [],
     };
 }
-function createApprovalBlock(projectRoot, metadata) {
+function createApprovalBlock(projectRoot, metadata, approvedActions) {
     const actionTypes = [];
     if (metadata.network === true) {
         actionTypes.push('network_access');
@@ -150,15 +153,16 @@ function createApprovalBlock(projectRoot, metadata) {
     const requiredActions = approvalReport.decisions
         .filter((decision) => decision.approval_required)
         .map((decision) => decision.action_type);
-    if (requiredActions.length === 0) {
+    const missingActions = requiredActions.filter((action) => !approvedActions.has(action));
+    if (missingActions.length === 0) {
         return null;
     }
-    const reasonCode = requiredActions.includes('destructive_command')
+    const reasonCode = missingActions.includes('destructive_command')
         ? 'destructive_requires_approval'
         : 'network_requires_approval';
     return {
         reasonCode,
-        detail: `Action ${requiredActions.map((action) => JSON.stringify(action)).join(', ')} requires explicit approval before mf run can execute this intent.`,
+        detail: `Action ${missingActions.map((action) => JSON.stringify(action)).join(', ')} requires explicit approval before mf run can execute this intent.`,
     };
 }
 function createBlockedRunPlan(contract, intentName, intent, eligibility, reasonCode, detail, preconditions = []) {
@@ -214,7 +218,7 @@ export function createRunPlan(projectRoot, contract, intentName, options = {}) {
         return createBlockedRunPlan(contract, intentName, rawIntent, eligibility, eligibility.code, eligibility.detail, preconditions);
     }
     const metadata = readRunIntentMetadata(contract, rawIntent);
-    const approvalBlock = createApprovalBlock(projectRoot, metadata);
+    const approvalBlock = createApprovalBlock(projectRoot, metadata, createApprovedActionSet(options.approvedActions));
     if (approvalBlock) {
         return createBlockedRunPlan(contract, intentName, rawIntent, eligibility, approvalBlock.reasonCode, approvalBlock.detail, preconditions);
     }

package/dist/core/source-anchors.js

@@ -13,6 +13,8 @@ export const SOURCE_ANCHOR_EXTENSIONS = new Set([
     '.svelte',
     '.ts',
     '.tsx',
+    '.yaml',
+    '.yml',
 ]);
 export const SOURCE_ANCHOR_DEFAULT_EXCLUDED_PATH_PARTS = new Set([
     '.cache',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mustflow",
-  "version": "2.106.0",
+  "version": "2.107.0",
   "description": "Agent workflow documents and CLI for mustflow repository roots.",
   "type": "module",
   "license": "MIT-0",

package/templates/default/manifest.toml

@@ -1,6 +1,6 @@
 id = "default"
 name = "default"
-version = "2.106.0"
+version = "2.107.0"
 description = "Minimal workflow for LLM agents to read, edit, and verify their work in a repository."
 common_root = "common"
 locales_root = "locales"