mustflow 2.115.16 → 2.115.17

package/dist/cli/lib/run-plan.js

@@ -8,6 +8,7 @@ import { inspectActiveRunLocks, } from '../../core/active-run-locks.js';
 import { isRecord, readPositiveInteger, readString, readStringArray, } from '../../core/config-loading.js';
 import { DEFAULT_COMMAND_MAX_OUTPUT_BYTES, COMMAND_OUTPUT_LIMIT_SCOPE, } from '../../core/command-output-limits.js';
 import { checkRepoApprovalGate } from '../../core/repo-approval-gate.js';
+import { inferCommandApprovalActions } from '../../core/approval-actions.js';
 import { normalizeSuccessExitCodes } from '../../core/success-exit-codes.js';
 import { normalizeSafeTestTargetPath, TEST_TARGET_PATH_ERROR } from '../../core/test-target-paths.js';
 import { evaluateCommandPreconditions, } from '../../core/command-preconditions.js';
@@ -134,7 +135,10 @@ function readRunIntentMetadata(contract, intent) {
     };
 }
 function createApprovalBlock(projectRoot, metadata, approvedActions) {
-    const actionTypes = [...metadata.approvalActions];
+    const actionTypes = [
+        ...metadata.approvalActions,
+        ...inferCommandApprovalActions(metadata.commandArgv ?? []),
+    ];
     if (metadata.network === true) {
         actionTypes.push('network_access');
     }

package/dist/core/approval-actions.js

@@ -11,3 +11,31 @@ export const APPROVAL_ACTION_TYPES = [
     'cross_repository_change',
 ];
 export const APPROVAL_ACTION_TYPE_SET = new Set(APPROVAL_ACTION_TYPES);
+function readGitSubcommand(argv) {
+    if ((argv[0] ?? '').split(/[\\/]/u).at(-1)?.replace(/\.(?:cmd|exe|ps1)$/iu, '').toLowerCase() !== 'git') {
+        return null;
+    }
+    const optionsWithSeparateValue = new Set(['-C', '-c', '--exec-path', '--git-dir', '--work-tree', '--namespace']);
+    for (let index = 1; index < argv.length; index += 1) {
+        const argument = argv[index] ?? '';
+        if (optionsWithSeparateValue.has(argument)) {
+            index += 1;
+            continue;
+        }
+        if (argument.startsWith('-')) {
+            continue;
+        }
+        return argument;
+    }
+    return null;
+}
+export function inferCommandApprovalActions(argv) {
+    const gitSubcommand = readGitSubcommand(argv);
+    if (gitSubcommand === 'add' || gitSubcommand === 'commit') {
+        return ['git_commit'];
+    }
+    if (gitSubcommand === 'push') {
+        return ['git_push'];
+    }
+    return [];
+}

package/dist/core/command-contract-validation.js

@@ -71,46 +71,6 @@ function validateApprovalActions(intentName, intent, issues) {
         issues.push(commandContractIssue(`[commands.intents.${intentName}].approval_actions contains unsupported action types: ${unsupported.join(', ')}`));
     }
 }
-function readGitSubcommand(argv) {
-    if (normalizeCommandExecutableName(argv[0] ?? '') !== 'git') {
-        return null;
-    }
-    const optionsWithSeparateValue = new Set(['-C', '-c', '--exec-path', '--git-dir', '--work-tree', '--namespace']);
-    for (let index = 1; index < argv.length; index += 1) {
-        const argument = argv[index] ?? '';
-        if (optionsWithSeparateValue.has(argument)) {
-            index += 1;
-            continue;
-        }
-        if (argument.startsWith('-')) {
-            continue;
-        }
-        return argument;
-    }
-    return null;
-}
-function validateSensitiveGitApprovalActions(intentName, intent, issues) {
-    if (intent.status !== 'configured' || intent.run_policy !== 'agent_allowed') {
-        return;
-    }
-    const argv = readStringArray(intent, 'argv');
-    if (!argv) {
-        return;
-    }
-    const gitSubcommand = readGitSubcommand(argv);
-    const requiredAction = gitSubcommand === 'add' || gitSubcommand === 'commit'
-        ? 'git_commit'
-        : gitSubcommand === 'push'
-            ? 'git_push'
-            : null;
-    if (!requiredAction) {
-        return;
-    }
-    const approvalActions = readStringArray(intent, 'approval_actions') ?? [];
-    if (!approvalActions.includes(requiredAction)) {
-        issues.push(commandContractIssue(`Agent-runnable git ${gitSubcommand} intent ${intentName} must include approval_actions = ["${requiredAction}"]`));
-    }
-}
 function validatePositiveIntegerField(table, key, label, issues) {
     if (hasOwn(table, key) && !isPositiveInteger(table[key])) {
         issues.push(commandContractIssue(`${label} must be a positive integer`));
@@ -392,7 +352,6 @@ function validateCommandIntent(intentName, intent, allIntents, issues) {
     validateBooleanField(intent, 'allow_shell', `[commands.intents.${intentName}].allow_shell`, issues);
     validateStringArrayField(intent, 'env_allowlist', `[commands.intents.${intentName}].env_allowlist`, issues);
     validateApprovalActions(intentName, intent, issues);
-    validateSensitiveGitApprovalActions(intentName, intent, issues);
     validateBooleanField(intent, ALLOW_ENV_INHERITANCE_RISKS_KEY, `[commands.intents.${intentName}].${ALLOW_ENV_INHERITANCE_RISKS_KEY}`, issues);
     validateBooleanField(intent, ALLOW_LONG_RUNNING_COMMAND_PATTERNS_KEY, `[commands.intents.${intentName}].${ALLOW_LONG_RUNNING_COMMAND_PATTERNS_KEY}`, issues);
     validateMaxOutputBytesField(intent, 'max_output_bytes', `[commands.intents.${intentName}].max_output_bytes`, issues);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mustflow",
-  "version": "2.115.16",
+  "version": "2.115.17",
   "description": "Agent workflow documents and CLI for mustflow repository roots.",
   "type": "module",
   "license": "MIT-0",

package/templates/default/manifest.toml

@@ -1,6 +1,6 @@
 id = "default"
 name = "default"
-version = "2.115.16"
+version = "2.115.17"
 description = "Minimal workflow for LLM agents to read, edit, and verify their work in a repository."
 common_root = "common"
 locales_root = "locales"