mustflow 2.112.3 → 2.112.7

package/README.md

@@ -272,6 +272,7 @@ mf run mustflow_update_apply
 | `mf workspace scan` | Scan a `projects/` directory for nested repositories without requiring workspace configuration or granting command authority. |
 | `mf workspace status` | Inspect configured workspace roots and nested repository contract readiness without granting parent-to-child command authority. |
 | `mf workspace command-catalog` | Aggregate per-repository command intent availability with safe `mf run` entrypoints and no raw command strings. |
+| `mf workspace command-fragments` | Suggest repo-level `.mustflow/config/commands/*.toml` fragments for repo-farm orchestration without writing files or granting parent-to-child command authority. |
 | `mf workspace verify --changed --plan-only` | Aggregate per-repository changed-file verification plans without running commands or granting parent-to-child command authority. |
 | `mf doctor` | Inspect the current mustflow root without writing files. |
 | `mf api workspace-summary --json` | Print a stable, read-only JSON summary for coding agents and external harnesses. |

package/dist/cli/commands/workspace.js

@@ -13,6 +13,7 @@ const DEFAULT_WORKSPACE_SCAN_ROOT = 'projects';
 const WORKSPACE_SCAN_SCHEMA_VERSION = '1';
 const WORKSPACE_STATUS_SCHEMA_VERSION = '1';
 const WORKSPACE_COMMAND_CATALOG_SCHEMA_VERSION = '1';
+const WORKSPACE_COMMAND_FRAGMENTS_SCHEMA_VERSION = '1';
 const WORKSPACE_VERIFICATION_PLAN_SCHEMA_VERSION = '1';
 const WORKSPACE_SCAN_OPTIONS = [
     { name: '--json', kind: 'boolean' },
@@ -20,11 +21,17 @@ const WORKSPACE_SCAN_OPTIONS = [
 ];
 const WORKSPACE_STATUS_OPTIONS = [{ name: '--json', kind: 'boolean' }];
 const WORKSPACE_COMMAND_CATALOG_OPTIONS = [{ name: '--json', kind: 'boolean' }];
+const WORKSPACE_COMMAND_FRAGMENTS_OPTIONS = [
+    { name: '--json', kind: 'boolean' },
+    { name: '--projects-dir', kind: 'string' },
+];
 const WORKSPACE_VERIFY_OPTIONS = [
     { name: '--changed', kind: 'boolean' },
     { name: '--plan-only', kind: 'boolean' },
     { name: '--json', kind: 'boolean' },
 ];
+const COMMAND_FRAGMENT_DIRECTORY = '.mustflow/config/commands';
+const COMMAND_FRAGMENT_INCLUDE_PREFIX = 'commands';
 function getWorkspaceHelp(lang = 'en') {
     return renderHelp({
         usage: 'mf workspace <action> [options]',
@@ -33,6 +40,7 @@ function getWorkspaceHelp(lang = 'en') {
             { label: 'scan', description: t(lang, 'workspace.help.action.scan') },
             { label: 'status', description: t(lang, 'workspace.help.action.status') },
             { label: 'command-catalog', description: t(lang, 'workspace.help.action.commandCatalog') },
+            { label: 'command-fragments', description: t(lang, 'workspace.help.action.commandFragments') },
             { label: 'verify', description: t(lang, 'workspace.help.action.verify') },
         ],
         options: [
@@ -47,6 +55,7 @@ function getWorkspaceHelp(lang = 'en') {
             'mf workspace scan --projects-dir projects --json',
             'mf workspace status --json',
             'mf workspace command-catalog --json',
+            'mf workspace command-fragments --json',
             'mf workspace verify --changed --plan-only --json',
         ],
         exitCodes: [
@@ -73,6 +82,14 @@ function createWorkspaceVerificationPlanPolicy() {
         selected_intents_run_via: 'mf run <intent>',
     };
 }
+function createWorkspaceCommandFragmentsPolicy() {
+    return {
+        ...createWorkspaceStatusPolicy(),
+        writes_files: false,
+        suggestions_are_review_only: true,
+        parent_fragments_grant_child_authority: false,
+    };
+}
 function createAdHocWorkspaceConfig(base, projectsDir) {
     return {
         ...base,
@@ -80,6 +97,101 @@ function createAdHocWorkspaceConfig(base, projectsDir) {
         roots: [projectsDir],
     };
 }
+function slugCommandFragmentSegment(segment) {
+    const slug = segment
+        .trim()
+        .toLowerCase()
+        .replace(/[^a-z0-9._-]+/gu, '-')
+        .replace(/^-+|-+$/gu, '')
+        .replace(/\.toml$/u, '');
+    return slug.length > 0 ? slug : 'repository';
+}
+function repositoryPathSegments(repositoryPath) {
+    return repositoryPath.split('/').filter((segment) => segment.length > 0);
+}
+function createCommandFragmentPaths(repositories) {
+    const leafSlugCounts = new Map();
+    for (const repository of repositories) {
+        const segments = repositoryPathSegments(repository.relative_path);
+        const leafSlug = slugCommandFragmentSegment(segments.at(-1) ?? repository.relative_path);
+        leafSlugCounts.set(leafSlug, (leafSlugCounts.get(leafSlug) ?? 0) + 1);
+    }
+    const usedSlugs = new Set();
+    const paths = new Map();
+    for (const repository of repositories) {
+        const segments = repositoryPathSegments(repository.relative_path);
+        const leafSlug = slugCommandFragmentSegment(segments.at(-1) ?? repository.relative_path);
+        const baseSlug = (leafSlugCounts.get(leafSlug) ?? 0) > 1
+            ? segments.map((segment) => slugCommandFragmentSegment(segment)).join('--')
+            : leafSlug;
+        let candidateSlug = baseSlug;
+        let suffix = 2;
+        while (usedSlugs.has(candidateSlug)) {
+            candidateSlug = `${baseSlug}-${suffix}`;
+            suffix += 1;
+        }
+        usedSlugs.add(candidateSlug);
+        paths.set(repository.relative_path, `${COMMAND_FRAGMENT_INCLUDE_PREFIX}/${candidateSlug}.toml`);
+    }
+    return paths;
+}
+function createCommandFragmentGuidance(repository) {
+    if (repository.status === 'mustflow_ready') {
+        return [
+            'Prefer the child repository command contract for commands owned by this repository.',
+            'Use the parent command fragment only for intentionally parent-owned orchestration or cross-repository workflows.',
+        ];
+    }
+    if (repository.status === 'contract_invalid') {
+        return [
+            'Fix the child repository command contract before copying or mirroring any intent shape.',
+            'Keep the parent command fragment empty or review-only until the child contract parses cleanly.',
+        ];
+    }
+    return [
+        'Initialize or author this repository command contract before adding runnable parent-level orchestration.',
+        'If the parent root still needs orchestration, keep that repository-specific intent group in the suggested fragment.',
+    ];
+}
+function createCommandFragmentSuggestion(repository, includeEntry) {
+    const commandSurface = repository.command_contract;
+    return {
+        repository: repository.relative_path,
+        status: repository.status === 'mustflow_ready'
+            ? 'child_contract_ready'
+            : repository.status === 'contract_invalid'
+                ? 'contract_invalid'
+                : 'contract_missing',
+        suggested_fragment_path: `.mustflow/config/${includeEntry}`,
+        include_entry: includeEntry,
+        source_command_contract: commandSurface.path,
+        intent_count: commandSurface.total_intents,
+        runnable_intent_count: commandSurface.runnable_count,
+        guidance: createCommandFragmentGuidance(repository),
+    };
+}
+function renderCommandFragmentIncludeSnippet(includeEntries) {
+    if (includeEntries.length === 0) {
+        return '[include]\nfiles = []';
+    }
+    return [
+        '[include]',
+        'files = [',
+        ...includeEntries.map((entry) => `  "${entry}",`),
+        ']',
+    ].join('\n');
+}
+function commandFragmentNextActions(repositoryCount) {
+    if (repositoryCount === 0) {
+        return ['Run mf workspace scan --projects-dir <dir> --json against the directory that contains cloned repositories.'];
+    }
+    return [
+        'Review each suggested fragment before editing .mustflow/config/commands.toml.',
+        'Prefer child repository command contracts for repository-owned commands.',
+        'Use parent command fragments only for intentionally parent-owned orchestration or cross-repository workflows.',
+        'After accepting fragments, run the configured mustflow check intent.',
+    ];
+}
 function getIntentNames(intents) {
     return Object.keys(intents).sort((left, right) => left.localeCompare(right));
 }
@@ -345,6 +457,36 @@ function createWorkspaceCommandCatalogOutput() {
         issues: createWorkspaceIssues(config, repositories.length),
     };
 }
+function createWorkspaceCommandFragmentsOutput(projectsDir) {
+    const projectRoot = resolveMustflowRoot();
+    const config = getRepoMapConfig(projectRoot);
+    const workspace = projectsDir ? createAdHocWorkspaceConfig(config.workspace, projectsDir) : config.workspace;
+    const nestedRepositories = discoverNestedRepositories(projectRoot, { ...config.map, includeNested: true }, workspace);
+    const repositories = nestedRepositories.map((repository) => summarizeRepository(projectRoot, repository));
+    const includePaths = createCommandFragmentPaths(repositories);
+    const suggestions = repositories.map((repository) => createCommandFragmentSuggestion(repository, includePaths.get(repository.relative_path) ?? `${COMMAND_FRAGMENT_INCLUDE_PREFIX}/repository.toml`));
+    const includeEntries = suggestions.map((suggestion) => suggestion.include_entry);
+    const issues = projectsDir
+        ? repositories.length === 0
+            ? [t('en', 'workspace.scan.issue.noneDiscovered', { projectsDir })]
+            : []
+        : createWorkspaceIssues(config, repositories.length);
+    return {
+        schema_version: WORKSPACE_COMMAND_FRAGMENTS_SCHEMA_VERSION,
+        command: 'workspace command-fragments',
+        mustflow_root: projectRoot,
+        workspace: workspaceConfigOutput(workspace),
+        policy: createWorkspaceCommandFragmentsPolicy(),
+        repository_count: repositories.length,
+        fragment_directory: COMMAND_FRAGMENT_DIRECTORY,
+        root_command_contract: '.mustflow/config/commands.toml',
+        root_include_snippet: renderCommandFragmentIncludeSnippet(includeEntries),
+        suggestions,
+        issues,
+        projects_dir: projectsDir ?? null,
+        next_actions: commandFragmentNextActions(repositories.length),
+    };
+}
 function createUnavailableVerificationRepository(repository, commandSurface, status, classification, issue) {
     return {
         relative_path: repository.relativePath,
@@ -527,6 +669,37 @@ function renderWorkspaceCommandCatalog(output) {
     }
     return lines.join('\n');
 }
+function renderWorkspaceCommandFragments(output) {
+    const lines = [
+        'mustflow workspace command-fragments',
+        `mustflow root: ${output.mustflow_root}`,
+        `workspace enabled: ${output.workspace.enabled ? 'yes' : 'no'}`,
+        `repositories: ${output.repository_count}`,
+        `fragment directory: ${output.fragment_directory}`,
+        '',
+    ];
+    if (output.suggestions.length === 0) {
+        lines.push('No nested repositories discovered.');
+        return lines.join('\n');
+    }
+    lines.push('Root include snippet:');
+    lines.push(output.root_include_snippet);
+    lines.push('', 'Suggested fragments:');
+    for (const suggestion of output.suggestions) {
+        lines.push(`- ${suggestion.repository} -> ${suggestion.suggested_fragment_path} (${suggestion.status})`);
+        if (suggestion.source_command_contract) {
+            lines.push(`  source command contract: ${suggestion.source_command_contract}`);
+        }
+        for (const guidance of suggestion.guidance) {
+            lines.push(`  - ${guidance}`);
+        }
+    }
+    lines.push('', 'Next actions:');
+    for (const action of output.next_actions) {
+        lines.push(`- ${action}`);
+    }
+    return lines.join('\n');
+}
 function renderWorkspaceVerificationPlan(output) {
     const lines = [
         'mustflow workspace verify',
@@ -603,6 +776,22 @@ function runWorkspaceCommandCatalog(args, reporter, lang) {
     reporter.stdout(hasParsedCliOption(parsed, '--json') ? JSON.stringify(output, null, 2) : renderWorkspaceCommandCatalog(output));
     return 0;
 }
+function runWorkspaceCommandFragments(args, reporter, lang) {
+    if (hasCliOptionToken(args, '--help', ['-h'])) {
+        reporter.stdout(getWorkspaceHelp(lang));
+        return 0;
+    }
+    const parsed = parseCliOptions(args, WORKSPACE_COMMAND_FRAGMENTS_OPTIONS);
+    if (parsed.error) {
+        printUsageError(reporter, formatCliOptionParseError(parsed.error, lang), 'mf workspace --help', getWorkspaceHelp(lang), lang);
+        return 1;
+    }
+    const projectsDirValue = parsed.values.get('--projects-dir');
+    const projectsDir = typeof projectsDirValue === 'string' ? projectsDirValue : undefined;
+    const output = createWorkspaceCommandFragmentsOutput(projectsDir);
+    reporter.stdout(hasParsedCliOption(parsed, '--json') ? JSON.stringify(output, null, 2) : renderWorkspaceCommandFragments(output));
+    return 0;
+}
 function runWorkspaceVerify(args, reporter, lang) {
     if (hasCliOptionToken(args, '--help', ['-h'])) {
         reporter.stdout(getWorkspaceHelp(lang));
@@ -648,6 +837,9 @@ export function runWorkspace(args, reporter, lang = 'en') {
     if (action === 'command-catalog') {
         return runWorkspaceCommandCatalog(rest, reporter, lang);
     }
+    if (action === 'command-fragments') {
+        return runWorkspaceCommandFragments(rest, reporter, lang);
+    }
     if (action === 'verify') {
         return runWorkspaceVerify(rest, reporter, lang);
     }

package/dist/cli/i18n/en.js

@@ -138,10 +138,11 @@ export const enMessages = {
     "workspace.help.action.scan": "Scan a projects directory for nested repositories without requiring workspace configuration",
     "workspace.help.action.status": "Print discovered nested repositories and their local mustflow contract status",
     "workspace.help.action.commandCatalog": "Print per-repository command intent availability without raw command strings",
+    "workspace.help.action.commandFragments": "Suggest per-repository command fragment files for repo-farm orchestration without writing files",
     "workspace.help.action.verify": "Print per-repository changed-file verification plans without running commands",
     "workspace.help.option.projectsDir": "Select the child directory to scan; default: projects",
     "workspace.help.exit.ok": "Workspace status was inspected",
-    "workspace.error.missingAction": "Specify a workspace action: scan, status, command-catalog, or verify",
+    "workspace.error.missingAction": "Specify a workspace action: scan, status, command-catalog, command-fragments, or verify",
     "workspace.error.unknownAction": "Unknown workspace action: {action}",
     "workspace.error.verifyRequiresChanged": "workspace verify requires --changed",
     "workspace.error.verifyRequiresPlanOnly": "workspace verify requires --plan-only",

package/dist/cli/i18n/es.js

@@ -138,10 +138,11 @@ export const esMessages = {
     "workspace.help.action.scan": "Escanea un directorio projects en busca de repositorios anidados sin requerir configuración de workspace",
     "workspace.help.action.status": "Imprime repositorios anidados descubiertos y su estado de contrato mustflow local",
     "workspace.help.action.commandCatalog": "Imprime disponibilidad de intents por repositorio sin cadenas de comando sin procesar",
+    "workspace.help.action.commandFragments": "Sugiere archivos command fragment por repositorio para orquestación repo-farm sin escribir archivos",
     "workspace.help.action.verify": "Imprime planes de verificación de cambios por repositorio sin ejecutar comandos",
     "workspace.help.option.projectsDir": "Selecciona el directorio hijo que se escaneará; predeterminado: projects",
     "workspace.help.exit.ok": "Se inspeccionó el estado del workspace",
-    "workspace.error.missingAction": "Especifica una acción workspace: scan, status, command-catalog o verify",
+    "workspace.error.missingAction": "Especifica una acción workspace: scan, status, command-catalog, command-fragments o verify",
     "workspace.error.unknownAction": "Acción workspace desconocida: {action}",
     "workspace.error.verifyRequiresChanged": "workspace verify requiere --changed",
     "workspace.error.verifyRequiresPlanOnly": "workspace verify requiere --plan-only",

package/dist/cli/i18n/fr.js

@@ -138,10 +138,11 @@ export const frMessages = {
     "workspace.help.action.scan": "Scanne un répertoire projects pour trouver des dépôts imbriqués sans exiger de configuration workspace",
     "workspace.help.action.status": "Affiche les dépôts imbriqués découverts et leur état de contrat mustflow local",
     "workspace.help.action.commandCatalog": "Affiche la disponibilité des intents par dépôt sans chaînes de commande brutes",
+    "workspace.help.action.commandFragments": "Suggère des fichiers command fragment par dépôt pour l'orchestration repo-farm sans écrire de fichiers",
     "workspace.help.action.verify": "Affiche les plans de vérification des changements par dépôt sans exécuter de commandes",
     "workspace.help.option.projectsDir": "Sélectionne le répertoire enfant à scanner ; par défaut : projects",
     "workspace.help.exit.ok": "L'état du workspace a été inspecté",
-    "workspace.error.missingAction": "Indiquez une action workspace : scan, status, command-catalog ou verify",
+    "workspace.error.missingAction": "Indiquez une action workspace : scan, status, command-catalog, command-fragments ou verify",
     "workspace.error.unknownAction": "Action workspace inconnue : {action}",
     "workspace.error.verifyRequiresChanged": "workspace verify nécessite --changed",
     "workspace.error.verifyRequiresPlanOnly": "workspace verify nécessite --plan-only",

package/dist/cli/i18n/hi.js

@@ -138,10 +138,11 @@ export const hiMessages = {
     "workspace.help.action.scan": "workspace configuration के बिना projects directory में nested repositories scan करें",
     "workspace.help.action.status": "discovered nested repositories और उनके local mustflow contract status प्रिंट करें",
     "workspace.help.action.commandCatalog": "raw command strings के बिना per-repository command intent availability प्रिंट करें",
+    "workspace.help.action.commandFragments": "files लिखे बिना repo-farm orchestration के लिए per-repository command fragment files suggest करें",
     "workspace.help.action.verify": "commands चलाए बिना per-repository changed-file verification plans प्रिंट करें",
     "workspace.help.option.projectsDir": "scan की जाने वाली child directory चुनें; default: projects",
     "workspace.help.exit.ok": "Workspace status inspect हुआ",
-    "workspace.error.missingAction": "workspace action बताएँ: scan, status, command-catalog या verify",
+    "workspace.error.missingAction": "workspace action बताएँ: scan, status, command-catalog, command-fragments या verify",
     "workspace.error.unknownAction": "अज्ञात workspace action: {action}",
     "workspace.error.verifyRequiresChanged": "workspace verify के लिए --changed चाहिए",
     "workspace.error.verifyRequiresPlanOnly": "workspace verify के लिए --plan-only चाहिए",

package/dist/cli/i18n/ko.js

@@ -138,10 +138,11 @@ export const koMessages = {
     "workspace.help.action.scan": "workspace 설정 없이 projects 디렉터리의 nested repository를 스캔합니다",
     "workspace.help.action.status": "발견된 nested repository와 각 로컬 mustflow 계약 상태를 출력합니다",
     "workspace.help.action.commandCatalog": "raw command string 없이 repository별 command intent 사용 가능 상태를 출력합니다",
+    "workspace.help.action.commandFragments": "파일을 쓰지 않고 repo farm orchestration용 repository별 command fragment 파일을 제안합니다",
     "workspace.help.action.verify": "명령을 실행하지 않고 repository별 changed-file verification plan을 출력합니다",
     "workspace.help.option.projectsDir": "스캔할 하위 디렉터리를 지정합니다. 기본값: projects",
     "workspace.help.exit.ok": "workspace 상태를 확인했습니다",
-    "workspace.error.missingAction": "workspace 작업을 지정하세요: scan, status, command-catalog 또는 verify",
+    "workspace.error.missingAction": "workspace 작업을 지정하세요: scan, status, command-catalog, command-fragments 또는 verify",
     "workspace.error.unknownAction": "알 수 없는 workspace 작업: {action}",
     "workspace.error.verifyRequiresChanged": "workspace verify에는 --changed가 필요합니다",
     "workspace.error.verifyRequiresPlanOnly": "workspace verify에는 --plan-only가 필요합니다",

package/dist/cli/i18n/zh.js

@@ -138,10 +138,11 @@ export const zhMessages = {
     "workspace.help.action.scan": "无需 workspace 配置即可扫描 projects 目录中的嵌套仓库",
     "workspace.help.action.status": "输出发现的嵌套仓库及其本地 mustflow 合同状态",
     "workspace.help.action.commandCatalog": "输出各仓库的命令 intent 可用性，不包含原始命令字符串",
+    "workspace.help.action.commandFragments": "建议按仓库拆分的 command fragment 文件，不写入文件",
     "workspace.help.action.verify": "输出各仓库的变更文件验证计划，但不运行命令",
     "workspace.help.option.projectsDir": "选择要扫描的子目录；默认值：projects",
     "workspace.help.exit.ok": "已检查 workspace 状态",
-    "workspace.error.missingAction": "请指定 workspace 操作：scan、status、command-catalog 或 verify",
+    "workspace.error.missingAction": "请指定 workspace 操作：scan、status、command-catalog、command-fragments 或 verify",
     "workspace.error.unknownAction": "未知 workspace 操作：{action}",
     "workspace.error.verifyRequiresChanged": "workspace verify 需要 --changed",
     "workspace.error.verifyRequiresPlanOnly": "workspace verify 需要 --plan-only",

package/dist/core/public-json-contracts.js

@@ -175,6 +175,14 @@ const PUBLIC_JSON_SCHEMA_CONTRACTS = [
         documented: true,
         installedCommand: ['mf', 'workspace', 'command-catalog', '--json'],
     },
+    {
+        id: 'workspace-command-fragments',
+        schemaFile: 'workspace-command-fragments.schema.json',
+        producer: 'mf workspace command-fragments --json',
+        packaged: true,
+        documented: true,
+        installedCommand: ['mf', 'workspace', 'command-fragments', '--json'],
+    },
     {
         id: 'workspace-verification-plan',
         schemaFile: 'workspace-verification-plan.schema.json',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mustflow",
-  "version": "2.112.3",
+  "version": "2.112.7",
   "description": "Agent workflow documents and CLI for mustflow repository roots.",
   "type": "module",
   "license": "MIT-0",

package/schemas/README.md

@@ -45,6 +45,9 @@ Current schemas:
 - `workspace-command-catalog.schema.json`: output of `mf workspace command-catalog --json`,
   containing per-root command intent availability, safe `mf run` entrypoints, and no raw command
   strings
+- `workspace-command-fragments.schema.json`: output of `mf workspace command-fragments --json`,
+  containing read-only per-repository command fragment suggestions for repo-farm orchestration
+  without writing files or granting parent-to-child command authority
 - `workspace-verification-plan.schema.json`: output of
   `mf workspace verify --changed --plan-only --json`, containing per-root changed-file
   verification plans and risk-priced evidence assessment without running commands or granting

package/schemas/workspace-command-fragments.schema.json

@@ -0,0 +1,121 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://mustflow.github.io/schemas/workspace-command-fragments.schema.json",
+  "title": "mustflow workspace command fragments report",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema_version",
+    "command",
+    "mustflow_root",
+    "workspace",
+    "policy",
+    "repository_count",
+    "fragment_directory",
+    "root_command_contract",
+    "root_include_snippet",
+    "suggestions",
+    "issues",
+    "projects_dir",
+    "next_actions"
+  ],
+  "properties": {
+    "schema_version": { "const": "1" },
+    "command": { "const": "workspace command-fragments" },
+    "mustflow_root": { "type": "string" },
+    "workspace": { "$ref": "#/$defs/workspace" },
+    "policy": { "$ref": "#/$defs/policy" },
+    "repository_count": { "type": "integer", "minimum": 0 },
+    "fragment_directory": { "const": ".mustflow/config/commands" },
+    "root_command_contract": { "const": ".mustflow/config/commands.toml" },
+    "root_include_snippet": { "type": "string" },
+    "suggestions": {
+      "type": "array",
+      "items": { "$ref": "#/$defs/suggestion" }
+    },
+    "issues": { "$ref": "#/$defs/stringArray" },
+    "projects_dir": { "type": ["string", "null"] },
+    "next_actions": { "$ref": "#/$defs/stringArray" }
+  },
+  "$defs": {
+    "stringArray": {
+      "type": "array",
+      "items": { "type": "string" }
+    },
+    "nullableString": {
+      "type": ["string", "null"]
+    },
+    "workspace": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "enabled",
+        "roots",
+        "max_depth",
+        "max_repositories",
+        "follow_symlinks",
+        "stop_at_repository_root"
+      ],
+      "properties": {
+        "enabled": { "type": "boolean" },
+        "roots": { "$ref": "#/$defs/stringArray" },
+        "max_depth": { "type": "integer", "minimum": 1 },
+        "max_repositories": { "type": "integer", "minimum": 1 },
+        "follow_symlinks": { "type": "boolean" },
+        "stop_at_repository_root": { "type": "boolean" }
+      }
+    },
+    "policy": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "mode",
+        "grants_command_authority",
+        "parent_root_grants_child_authority",
+        "command_authority_per_root",
+        "run_entrypoint_per_root",
+        "executes_commands",
+        "raw_commands_included",
+        "writes_files",
+        "suggestions_are_review_only",
+        "parent_fragments_grant_child_authority"
+      ],
+      "properties": {
+        "mode": { "const": "read_only" },
+        "grants_command_authority": { "const": false },
+        "parent_root_grants_child_authority": { "const": false },
+        "command_authority_per_root": { "const": ".mustflow/config/commands.toml" },
+        "run_entrypoint_per_root": { "const": "mf run <intent>" },
+        "executes_commands": { "const": false },
+        "raw_commands_included": { "const": false },
+        "writes_files": { "const": false },
+        "suggestions_are_review_only": { "const": true },
+        "parent_fragments_grant_child_authority": { "const": false }
+      }
+    },
+    "suggestion": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "repository",
+        "status",
+        "suggested_fragment_path",
+        "include_entry",
+        "source_command_contract",
+        "intent_count",
+        "runnable_intent_count",
+        "guidance"
+      ],
+      "properties": {
+        "repository": { "type": "string" },
+        "status": { "enum": ["child_contract_ready", "contract_missing", "contract_invalid"] },
+        "suggested_fragment_path": { "type": "string" },
+        "include_entry": { "type": "string" },
+        "source_command_contract": { "$ref": "#/$defs/nullableString" },
+        "intent_count": { "type": ["integer", "null"], "minimum": 0 },
+        "runnable_intent_count": { "type": ["integer", "null"], "minimum": 0 },
+        "guidance": { "$ref": "#/$defs/stringArray" }
+      }
+    }
+  }
+}

package/templates/default/i18n.toml

@@ -10,8 +10,8 @@ status_values = ["current", "stale", "needs_review", "missing"]
 [documents."agents.root"]
 source = "locales/en/AGENTS.md"
 source_locale = "en"
-revision = 18
-translations.ko = { path = "locales/ko/AGENTS.md", source_revision = 18, status = "current" }
+revision = 20
+translations.ko = { path = "locales/ko/AGENTS.md", source_revision = 20, status = "current" }
 translations.zh = { path = "locales/zh/AGENTS.md", source_revision = 11, status = "needs_review" }
 translations.es = { path = "locales/es/AGENTS.md", source_revision = 11, status = "needs_review" }
 translations.fr = { path = "locales/fr/AGENTS.md", source_revision = 11, status = "needs_review" }
@@ -62,7 +62,7 @@ translations = {}
 [documents."skills.index"]
 source = "locales/en/.mustflow/skills/INDEX.md"
 source_locale = "en"
-revision = 217
+revision = 220
 translations = {}
 
 [documents."skill.adapter-boundary"]
@@ -137,10 +137,16 @@ source_locale = "en"
 revision = 2
 translations = {}
 
+[documents."skill.abstraction-boundary-review"]
+source = "locales/en/.mustflow/skills/abstraction-boundary-review/SKILL.md"
+source_locale = "en"
+revision = 3
+translations = {}
+
 [documents."skill.module-boundary-review"]
 source = "locales/en/.mustflow/skills/module-boundary-review/SKILL.md"
 source_locale = "en"
-revision = 2
+revision = 3
 translations = {}
 
 [documents."skill.change-blast-radius-review"]