mustflow 2.112.10 → 2.112.13

package/dist/cli/commands/contract-lint.js

@@ -1,13 +1,11 @@
-import { existsSync } from 'node:fs';
-import path from 'node:path';
 import { lintCommandContract } from '../../core/contract-lint.js';
-import { readCommandContract, isRecord } from '../../core/config-loading.js';
+import { readCommandContract } from '../../core/config-loading.js';
+import { readEffectivePreferencesToml } from '../../core/preferences.js';
 import { releaseVersioningIsEnabled } from '../../core/version-sources.js';
 import { printUsageError, renderHelp } from '../lib/cli-output.js';
 import { t } from '../lib/i18n.js';
 import { formatCliOptionParseError, hasCliOptionToken, hasParsedCliOption, parseCliOptions, } from '../lib/option-parser.js';
 import { resolveMustflowRoot } from '../lib/project-root.js';
-import { readMustflowTomlFile } from '../lib/toml.js';
 const CONTRACT_LINT_SCHEMA_VERSION = '1';
 const CONTRACT_LINT_OPTIONS = [
     { name: '--coverage', kind: 'boolean' },
@@ -31,14 +29,6 @@ export function getContractLintHelp(lang = 'en') {
         ],
     }, lang);
 }
-function readPreferences(projectRoot) {
-    const preferencesPath = path.join(projectRoot, '.mustflow', 'config', 'preferences.toml');
-    if (!existsSync(preferencesPath)) {
-        return undefined;
-    }
-    const preferences = readMustflowTomlFile(projectRoot, '.mustflow/config/preferences.toml');
-    return isRecord(preferences) ? preferences : undefined;
-}
 function createContractLintOutput(projectRoot, coverage, suggest) {
     return {
         schema_version: CONTRACT_LINT_SCHEMA_VERSION,
@@ -48,7 +38,7 @@ function createContractLintOutput(projectRoot, coverage, suggest) {
             coverage,
             suggest,
             projectRoot,
-            releaseVersioningEnabled: releaseVersioningIsEnabled(readPreferences(projectRoot)),
+            releaseVersioningEnabled: releaseVersioningIsEnabled(readEffectivePreferencesToml(projectRoot)),
         }),
     };
 }

package/dist/cli/commands/impact.js

@@ -1,12 +1,11 @@
 import { createChangeClassificationReport } from '../../core/change-classification.js';
+import { readEffectivePreferencesToml } from '../../core/preferences.js';
 import { summarizeVersionImpact } from '../../core/version-impact.js';
 import { printUsageError, renderHelp } from '../lib/cli-output.js';
-import { isRecord } from '../lib/command-contract.js';
 import { requireGitChangedFiles } from '../lib/git-changes.js';
 import { t } from '../lib/i18n.js';
 import { formatCliOptionParseError, hasCliOptionToken, hasParsedCliOption, parseCliOptions, } from '../lib/option-parser.js';
 import { resolveMustflowRoot } from '../lib/project-root.js';
-import { readMustflowTomlFile } from '../lib/toml.js';
 import { detectVersionSources, releaseVersioningIsEnabled, } from '../../core/version-sources.js';
 const IMPACT_SCHEMA_VERSION = '1';
 const IMPACT_OPTIONS = [
@@ -38,15 +37,6 @@ function parseImpactArgs(args) {
         error: parsed.error,
     };
 }
-function readPreferences(projectRoot) {
-    try {
-        const preferences = readMustflowTomlFile(projectRoot, '.mustflow/config/preferences.toml');
-        return isRecord(preferences) ? preferences : undefined;
-    }
-    catch {
-        return undefined;
-    }
-}
 function createImpactOutput(projectRoot, parsed) {
     const source = parsed.changed ? 'changed' : 'paths';
     const files = parsed.changed ? requireGitChangedFiles(projectRoot) : parsed.paths;
@@ -58,7 +48,7 @@ function createImpactOutput(projectRoot, parsed) {
         mustflow_root: projectRoot,
         source,
         files: classificationReport.files,
-        versioning_enabled: releaseVersioningIsEnabled(readPreferences(projectRoot)),
+        versioning_enabled: releaseVersioningIsEnabled(readEffectivePreferencesToml(projectRoot)),
         version_sources: versionSources,
         classification_summary: classificationReport.summary,
         version_impact: summarizeVersionImpact(classificationReport, versionSources),

package/dist/cli/commands/init.js

@@ -158,7 +158,7 @@ const VERIFICATION_SELECTION_BOOLEAN_FIELDS = new Set([
 ]);
 const TEST_AUTHORING_BOOLEAN_FIELDS = new Set(['prefer_existing_tests', 'require_new_test_rationale']);
 function createPreferenceOverride(key, value, reporter, lang) {
-    if (key === 'git.auto_stage' || key === 'git.auto_commit') {
+    if (key === 'git.auto_stage' || key === 'git.auto_commit' || key === 'git.auto_push') {
         const parsed = parseBoolean(value);
         if (parsed === undefined) {
             reporter.stderr(t(lang, 'init.error.invalidPreferenceValue', { key, value }));
@@ -171,18 +171,6 @@ function createPreferenceOverride(key, value, reporter, lang) {
             renderedValue: String(parsed),
         };
     }
-    if (key === 'git.auto_push') {
-        if (value !== 'false') {
-            reporter.stderr(t(lang, 'init.error.invalidPreferenceValue', { key, value }));
-            return undefined;
-        }
-        return {
-            key,
-            section: 'git',
-            field: 'auto_push',
-            renderedValue: 'false',
-        };
-    }
     if (key === 'git.commit_message.language') {
         if (!isSupportedLanguagePreference(value)) {
             reporter.stderr(t(lang, 'init.error.invalidPreferenceValue', { key, value }));

package/dist/cli/commands/onboard.js

@@ -1,13 +1,11 @@
-import { existsSync } from 'node:fs';
-import path from 'node:path';
 import { lintCommandContract, } from '../../core/contract-lint.js';
-import { isRecord, readCommandContract, } from '../../core/config-loading.js';
+import { readCommandContract } from '../../core/config-loading.js';
+import { readEffectivePreferencesToml } from '../../core/preferences.js';
 import { releaseVersioningIsEnabled } from '../../core/version-sources.js';
 import { printUsageError, renderHelp } from '../lib/cli-output.js';
 import { t } from '../lib/i18n.js';
 import { formatCliOptionParseError, hasCliOptionToken, hasParsedCliOption, parseCliOptions, } from '../lib/option-parser.js';
 import { resolveMustflowRoot } from '../lib/project-root.js';
-import { readMustflowTomlFile } from '../lib/toml.js';
 const ONBOARD_COMMANDS_SCHEMA_VERSION = '1';
 const COMMAND_CONTRACT_PATH = '.mustflow/config/commands.toml';
 const ONBOARD_COMMANDS_OPTIONS = [
@@ -28,14 +26,6 @@ export function getOnboardHelp(lang = 'en') {
         ],
     }, lang);
 }
-function readPreferences(projectRoot) {
-    const preferencesPath = path.join(projectRoot, '.mustflow', 'config', 'preferences.toml');
-    if (!existsSync(preferencesPath)) {
-        return undefined;
-    }
-    const preferences = readMustflowTomlFile(projectRoot, '.mustflow/config/preferences.toml');
-    return isRecord(preferences) ? preferences : undefined;
-}
 function countSuggestionsByKind(suggestions, sourceKind) {
     return suggestions.filter((suggestion) => suggestion.sourceKind === sourceKind).length;
 }
@@ -56,7 +46,7 @@ function createOnboardCommandsOutput(projectRoot) {
     const report = lintCommandContract(readCommandContract(projectRoot), {
         suggest: true,
         projectRoot,
-        releaseVersioningEnabled: releaseVersioningIsEnabled(readPreferences(projectRoot)),
+        releaseVersioningEnabled: releaseVersioningIsEnabled(readEffectivePreferencesToml(projectRoot)),
     });
     const suggestions = report.suggestions ?? [];
     return {

package/dist/cli/commands/version-sources.js

@@ -1,9 +1,8 @@
+import { readEffectivePreferencesToml } from '../../core/preferences.js';
 import { printUsageError, renderHelp } from '../lib/cli-output.js';
-import { isRecord } from '../lib/command-contract.js';
 import { t } from '../lib/i18n.js';
 import { formatCliOptionParseError, hasCliOptionToken, hasParsedCliOption, parseCliOptions, } from '../lib/option-parser.js';
 import { resolveMustflowRoot } from '../lib/project-root.js';
-import { readMustflowTomlFile } from '../lib/toml.js';
 import { detectVersionSources, releaseVersioningIsEnabled, } from '../../core/version-sources.js';
 const VERSION_SOURCES_SCHEMA_VERSION = '1';
 const VERSION_SOURCES_OPTIONS = [
@@ -24,17 +23,8 @@ export function getVersionSourcesHelp(lang = 'en') {
         ],
     }, lang);
 }
-function readPreferences(projectRoot) {
-    try {
-        const preferences = readMustflowTomlFile(projectRoot, '.mustflow/config/preferences.toml');
-        return isRecord(preferences) ? preferences : undefined;
-    }
-    catch {
-        return undefined;
-    }
-}
 function getVersionSourcesOutput(projectRoot) {
-    const preferences = readPreferences(projectRoot);
+    const preferences = readEffectivePreferencesToml(projectRoot);
     return {
         schema_version: VERSION_SOURCES_SCHEMA_VERSION,
         command: 'version-sources',

package/dist/cli/lib/agent-context.js

@@ -10,6 +10,7 @@ import { MUSTFLOW_JSON_MAX_BYTES, readMustflowTextFile, readMustflowTextFileIfEx
 import { createRunPlan } from './run-plan.js';
 import { readMustflowTomlFile } from './toml.js';
 import { normalizeTechnologyPreferencesTable, TECHNOLOGY_CONFIG_RELATIVE_PATH, } from '../../core/technology-preferences.js';
+import { readEffectivePreferencesToml } from '../../core/preferences.js';
 import { isPromptCacheStableLeafSkillSurface, measurePromptCacheReferenceBlockBytes, renderPromptCacheReferenceBlock, } from '../../core/prompt-cache-rendering.js';
 import { resolveSkillRoutes } from '../../core/skill-route-resolution.js';
 const CONTEXT_SCHEMA_VERSION = '1';
@@ -1487,7 +1488,7 @@ export async function getPromptCacheProfileContext(projectRoot, profile, options
 }
 export function getAgentContext(projectRoot) {
     const mustflow = readTomlTableIfExists(projectRoot, MUSTFLOW_RELATIVE_PATH);
-    const preferences = readTomlTableIfExists(projectRoot, PREFERENCES_RELATIVE_PATH);
+    const preferences = readEffectivePreferencesToml(projectRoot);
     const authority = isRecord(mustflow?.authority) ? mustflow.authority : undefined;
     const capabilities = isRecord(mustflow?.capabilities) ? mustflow.capabilities : undefined;
     const readOrder = mustflow ? readStringArray(mustflow, 'read_order') ?? [] : [];

package/dist/core/preferences.js

@@ -0,0 +1,79 @@
+import { existsSync } from 'node:fs';
+import path from 'node:path';
+import { isRecord, readMustflowOwnedTomlFile, } from './config-loading.js';
+export const PREFERENCES_CONFIG_RELATIVE_PATH = '.mustflow/config/preferences.toml';
+function hasMustflowMarker(directoryPath) {
+    return (existsSync(path.join(directoryPath, '.mustflow', 'config', 'mustflow.toml')) ||
+        existsSync(path.join(directoryPath, '.mustflow', 'config', 'commands.toml')));
+}
+function preferencesPath(projectRoot) {
+    return path.join(projectRoot, ...PREFERENCES_CONFIG_RELATIVE_PATH.split('/'));
+}
+function readPreferencesAtRoot(projectRoot) {
+    if (!existsSync(preferencesPath(projectRoot))) {
+        return undefined;
+    }
+    const parsed = readMustflowOwnedTomlFile(projectRoot, PREFERENCES_CONFIG_RELATIVE_PATH);
+    return isRecord(parsed) ? parsed : undefined;
+}
+function parentMustflowRoots(projectRoot) {
+    const roots = [];
+    let current = path.dirname(path.resolve(projectRoot));
+    while (true) {
+        if (hasMustflowMarker(current)) {
+            roots.push(current);
+        }
+        const parent = path.dirname(current);
+        if (parent === current) {
+            return roots;
+        }
+        current = parent;
+    }
+}
+function clonePreferenceValue(value) {
+    if (Array.isArray(value)) {
+        return value.map((entry) => clonePreferenceValue(entry));
+    }
+    if (isRecord(value)) {
+        return mergePreferenceTables({}, value);
+    }
+    return value;
+}
+function mergePreferenceTables(base, override) {
+    const merged = {};
+    for (const [key, value] of Object.entries(base)) {
+        merged[key] = clonePreferenceValue(value);
+    }
+    for (const [key, value] of Object.entries(override)) {
+        const existing = merged[key];
+        if (isRecord(existing) && isRecord(value)) {
+            merged[key] = mergePreferenceTables(existing, value);
+        }
+        else {
+            merged[key] = clonePreferenceValue(value);
+        }
+    }
+    return merged;
+}
+export function readLocalPreferencesToml(projectRoot) {
+    return readPreferencesAtRoot(projectRoot);
+}
+/**
+ * mf:anchor core.preferences.inheritance
+ * purpose: Resolve low-authority workflow preferences across nested mustflow roots.
+ * search: preferences inheritance, parent workspace defaults, git auto push, release versioning
+ * invariant: Parent preferences are defaults only; child-local values override field by field, and command contracts are never inherited here.
+ * risk: config
+ */
+export function readEffectivePreferencesToml(projectRoot) {
+    const roots = [...parentMustflowRoots(projectRoot).reverse(), path.resolve(projectRoot)];
+    let effective;
+    for (const root of roots) {
+        const preferences = readPreferencesAtRoot(root);
+        if (!preferences) {
+            continue;
+        }
+        effective = effective ? mergePreferenceTables(effective, preferences) : mergePreferenceTables({}, preferences);
+    }
+    return effective;
+}

package/dist/core/repo-version-source.js

@@ -1,7 +1,6 @@
 import { createHash } from 'node:crypto';
-import { existsSync } from 'node:fs';
 import path from 'node:path';
-import { isRecord, readMustflowOwnedTomlFile } from './config-loading.js';
+import { readEffectivePreferencesToml } from './preferences.js';
 import { detectVersionSources, releaseVersioningIsEnabled, VERSIONING_CONFIG_PATH, } from './version-sources.js';
 export const REPO_VERSION_SOURCE_PACK_ID = 'repo';
 export const REPO_VERSION_SOURCE_SCRIPT_ID = 'version-source';
@@ -10,21 +9,6 @@ export const REPO_VERSION_SOURCE_PREFERENCES_PATH = '.mustflow/config/preference
 function sha256(value) {
     return `sha256:${createHash('sha256').update(value).digest('hex')}`;
 }
-function readPreferences(projectRoot, issues) {
-    const preferencesPath = path.join(projectRoot, ...REPO_VERSION_SOURCE_PREFERENCES_PATH.split('/'));
-    if (!existsSync(preferencesPath)) {
-        return undefined;
-    }
-    try {
-        const parsed = readMustflowOwnedTomlFile(projectRoot, REPO_VERSION_SOURCE_PREFERENCES_PATH);
-        return isRecord(parsed) ? parsed : undefined;
-    }
-    catch (error) {
-        const message = error instanceof Error ? error.message : String(error);
-        issues.push(`Could not read ${REPO_VERSION_SOURCE_PREFERENCES_PATH}: ${message}`);
-        return undefined;
-    }
-}
 function countSources(sources) {
     return {
         sources: sources.length,
@@ -40,7 +24,14 @@ function createInputHash(reportInput) {
 export function inspectRepoVersionSource(projectRoot) {
     const root = path.resolve(projectRoot);
     const issues = [];
-    const preferences = readPreferences(root, issues);
+    let preferences;
+    try {
+        preferences = readEffectivePreferencesToml(root);
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        issues.push(`Could not read local or inherited ${REPO_VERSION_SOURCE_PREFERENCES_PATH}: ${message}`);
+    }
     const versioningEnabled = releaseVersioningIsEnabled(preferences);
     const sources = detectVersionSources(root);
     const findings = [];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mustflow",
-  "version": "2.112.10",
+  "version": "2.112.13",
   "description": "Agent workflow documents and CLI for mustflow repository roots.",
   "type": "module",
   "license": "MIT-0",

package/templates/default/i18n.toml

@@ -10,12 +10,12 @@ status_values = ["current", "stale", "needs_review", "missing"]
 [documents."agents.root"]
 source = "locales/en/AGENTS.md"
 source_locale = "en"
-revision = 20
-translations.ko = { path = "locales/ko/AGENTS.md", source_revision = 20, status = "current" }
-translations.zh = { path = "locales/zh/AGENTS.md", source_revision = 11, status = "needs_review" }
-translations.es = { path = "locales/es/AGENTS.md", source_revision = 11, status = "needs_review" }
-translations.fr = { path = "locales/fr/AGENTS.md", source_revision = 11, status = "needs_review" }
-translations.hi = { path = "locales/hi/AGENTS.md", source_revision = 11, status = "needs_review" }
+revision = 21
+translations.ko = { path = "locales/ko/AGENTS.md", source_revision = 21, status = "current" }
+translations.zh = { path = "locales/zh/AGENTS.md", source_revision = 21, status = "needs_review" }
+translations.es = { path = "locales/es/AGENTS.md", source_revision = 21, status = "needs_review" }
+translations.fr = { path = "locales/fr/AGENTS.md", source_revision = 21, status = "needs_review" }
+translations.hi = { path = "locales/hi/AGENTS.md", source_revision = 21, status = "needs_review" }
 
 [documents."context.index"]
 source = "locales/en/.mustflow/context/INDEX.md"
@@ -40,7 +40,7 @@ translations.hi = { path = "locales/hi/.mustflow/context/PROJECT.md", source_rev
 [documents."docs.agent-workflow"]
 source = "locales/en/.mustflow/docs/agent-workflow.md"
 source_locale = "en"
-revision = 28
+revision = 29
 translations.ko = { path = "locales/ko/.mustflow/docs/agent-workflow.md", source_revision = 23, status = "needs_review" }
 translations.zh = { path = "locales/zh/.mustflow/docs/agent-workflow.md", source_revision = 18, status = "needs_review" }
 translations.es = { path = "locales/es/.mustflow/docs/agent-workflow.md", source_revision = 18, status = "needs_review" }
@@ -224,7 +224,7 @@ translations = {}
 [documents."skill.memory-lifetime-review"]
 source = "locales/en/.mustflow/skills/memory-lifetime-review/SKILL.md"
 source_locale = "en"
-revision = 1
+revision = 2
 translations = {}
 
 [documents."skill.desktop-memory-footprint-review"]
@@ -380,7 +380,7 @@ translations = {}
 [documents."skill.cache-integrity-review"]
 source = "locales/en/.mustflow/skills/cache-integrity-review/SKILL.md"
 source_locale = "en"
-revision = 2
+revision = 3
 translations = {}
 
 [documents."skill.quadratic-scan-review"]
@@ -398,19 +398,19 @@ translations = {}
 [documents."skill.race-condition-review"]
 source = "locales/en/.mustflow/skills/race-condition-review/SKILL.md"
 source_locale = "en"
-revision = 1
+revision = 3
 translations = {}
 
 [documents."skill.async-timing-boundary-review"]
 source = "locales/en/.mustflow/skills/async-timing-boundary-review/SKILL.md"
 source_locale = "en"
-revision = 1
+revision = 2
 translations = {}
 
 [documents."skill.concurrency-invariant-review"]
 source = "locales/en/.mustflow/skills/concurrency-invariant-review/SKILL.md"
 source_locale = "en"
-revision = 1
+revision = 2
 translations = {}
 
 [documents."skill.failure-integrity-review"]
@@ -422,13 +422,13 @@ translations = {}
 [documents."skill.backend-log-evidence-review"]
 source = "locales/en/.mustflow/skills/backend-log-evidence-review/SKILL.md"
 source_locale = "en"
-revision = 3
+revision = 4
 translations = {}
 
 [documents."skill.observability-debuggability-review"]
 source = "locales/en/.mustflow/skills/observability-debuggability-review/SKILL.md"
 source_locale = "en"
-revision = 2
+revision = 3
 translations = {}
 
 [documents."skill.incident-triage-review"]
@@ -595,7 +595,7 @@ translations = {}
 [documents."skill.dependency-upgrade-review"]
 source = "locales/en/.mustflow/skills/dependency-upgrade-review/SKILL.md"
 source_locale = "en"
-revision = 5
+revision = 6
 translations = {}
 
 [documents."skill.version-freshness-check"]
@@ -679,7 +679,7 @@ translations = {}
 [documents."skill.security-flow-review"]
 source = "locales/en/.mustflow/skills/security-flow-review/SKILL.md"
 source_locale = "en"
-revision = 1
+revision = 2
 translations = {}
 
 [documents."skill.config-env-change"]
@@ -961,7 +961,7 @@ translations = {}
 [documents."skill.cross-platform-filesystem-safety"]
 source = "locales/en/.mustflow/skills/cross-platform-filesystem-safety/SKILL.md"
 source_locale = "en"
-revision = 6
+revision = 7
 translations = {}
 
 [documents."skill.pure-core-imperative-shell"]
@@ -1116,7 +1116,7 @@ translations = {}
 [documents."skill.repro-first-debug"]
 source = "locales/en/.mustflow/skills/repro-first-debug/SKILL.md"
 source_locale = "en"
-revision = 3
+revision = 5
 translations = {}
 
 [documents."skill.source-freshness-check"]
@@ -1164,7 +1164,7 @@ translations = {}
 [documents."skill.security-privacy-review"]
 source = "locales/en/.mustflow/skills/security-privacy-review/SKILL.md"
 source_locale = "en"
-revision = 23
+revision = 24
 translations = {}
 
 [documents."skill.security-regression-tests"]

package/templates/default/locales/en/.mustflow/docs/agent-workflow.md

@@ -2,7 +2,7 @@
 mustflow_doc: docs.agent-workflow
 locale: en
 canonical: true
-revision: 28
+revision: 29
 lifecycle: mustflow-owned
 authority: workflow-policy
 ---
@@ -28,7 +28,7 @@ mustflow documents have specific, narrow roles. Do not move a rule into a lower-
 | `.mustflow/docs/agent-workflow.md` | Shared workflow policy for reading, editing, verifying, reporting, and failure handling. | Expands `AGENTS.md`; does not define executable commands. | mustflow-owned Markdown. |
 | `.mustflow/config/mustflow.toml` | Machine-readable workflow configuration, document roots, protection, budget, approval, retention, and refresh settings. | Configuration source for mustflow behavior. | mustflow-owned TOML. |
 | `.mustflow/config/commands.toml` | Command intent contract. | Sole source granting project command execution through configured intents. | Repository-local TOML, edited when command contracts change. |
-| `.mustflow/config/preferences.toml` | Repository-level defaults for style, language, Git suggestions, testing tendency, verification selection, and version-impact handling. | Lower-authority preferences; not permissions. | Repository-local TOML, user-customizable. |
+| `.mustflow/config/preferences.toml` | Repository-level defaults for style, language, Git suggestions, testing tendency, verification selection, and version-impact handling. | Lower-authority preferences; not permissions. Child repositories without local preferences may inherit the nearest parent mustflow preferences as defaults. | Repository-local TOML, user-customizable. |
 | `.mustflow/context/INDEX.md` | Router for task-specific context files. | Selects optional context only; not a policy manual. | mustflow-owned Markdown. |
 | `.mustflow/context/PROJECT.md` | Cautious project facts, unknowns, and domain conventions. | Contextual reference below user instructions, code, tests, commands, and configured policies. | User-editable context. |
 | `.mustflow/skills/router.toml` | Stable compact route taxonomy and fallback rules for prompt-cache-friendly first-pass skill selection. | Selection kernel only; procedure detail remains in `SKILL.md`. | mustflow-owned TOML. |
@@ -98,6 +98,12 @@ Treat user instructions, local files, command contracts, and generated reports a
 - Direct user instructions take priority.
 - The nearest `AGENTS.md` takes precedence over broader parent rules.
 - `.mustflow/config/preferences.toml` contains defaults, not mandatory requirements.
+- If a child repository has no local `.mustflow/config/preferences.toml`, apply the nearest parent
+  mustflow root's preferences as inherited defaults. Inherited preferences include `[git]`,
+  `[git.commit_message]`, `[release.versioning]`, verification, testing, language, reporting, and
+  other preference sections. Child-local preference values override inherited values field by field.
+- Never inherit `.mustflow/config/commands.toml`; command execution authority stays with the nearest
+  repository command contract.
 - Generated files such as `REPO_MAP.md`, `.mustflow/cache/**`, and `.mustflow/state/**` may become stale.
 - Compacted summaries are derived representations of state. Current code, configuration, command records, and current user instructions override them.
 
@@ -136,7 +142,7 @@ Do not collapse every instruction into a single priority list. Resolve conflicts
 - Repository work rules: use the nearest `AGENTS.md` plus `.mustflow/config/*.toml`.
 - Command execution: `.mustflow/config/commands.toml` is the project command contract.
 - Verification evidence: `mf run` receipts and current files outrank direct host shell output.
-- Context and preferences: `.mustflow/context/*`, `preferences.toml`, and generated maps are lower-authority defaults.
+- Context and preferences: `.mustflow/context/*`, local or inherited `preferences.toml`, and generated maps are lower-authority defaults.
 - Session and cache state: host summaries, `.mustflow/cache/**`, and `.mustflow/state/**` never override current files or current user instructions.
 
 Allowed action sets narrow by intersection. Denied actions, approval requirements, privacy rules, and destructive-command rules accumulate. When the effective rule is unclear, stop and report the conflict instead of guessing.
@@ -214,7 +220,7 @@ Git operations that modify state or history are denied by default.
 - `git.auto_commit = false`: do not commit without a user request.
 - `git.auto_push = false`: do not push without a user request.
 
-These values are repository preferences, not permissions. They do not override direct user instructions, `.mustflow/config/commands.toml`, or approval policy in `.mustflow/config/mustflow.toml`. In particular, `git.auto_commit = true` does not grant push permission, and `git.auto_push = true` cannot be enabled through `mf init`.
+These values are repository preferences, not permissions. They do not override direct user instructions, `.mustflow/config/commands.toml`, or approval policy in `.mustflow/config/mustflow.toml`. In particular, `git.auto_commit = true` does not grant push permission, and `git.auto_push = true` still requires an explicit user request and any host approval required for push operations.
 
 ## Version Impact Policy