mustflow 2.16.0 → 2.18.0

package/README.md

@@ -103,7 +103,7 @@ available as a direct shell command, install mustflow globally:
 npm install -g mustflow
 mf version --check
 
-bun install -g mustflow
+bun add -g mustflow@latest
 mf version --check
 ```
 
@@ -282,10 +282,10 @@ npx mf update --dry-run
 npx mf update --apply
 ```
 
-After updating the mustflow package, `mf upgrade` combines the package freshness check with the safe project-file update step. It does not install packages by itself; update npm, pnpm, or Bun first.
+After updating the mustflow package, `mf upgrade` combines the package freshness check with the safe project-file update step. It does not install packages by itself; refresh mustflow with the package manager you used first. When a newer release exists, `mf version --check` and `mf upgrade` print update commands for npm, Bun, pnpm, Yarn, and Deno.
 
 ```sh
-bun update -g mustflow
+bun add -g mustflow@latest
 mf upgrade --dry-run
 mf upgrade
 ```
@@ -331,7 +331,7 @@ mf run mustflow_update_apply
 | `mf help <topic>` | Show installed mustflow help. |
 | `mf dashboard` | Start a local inspection dashboard for status, verification recommendations, release/version-source status, template update readiness, latest run receipt, skill routes, safe preferences, and documentation review. Use `--export-json <path>` or `--export <path>` for a bounded static report. It does not execute commands or apply fixes. |
 | `mf version` | Print the installed mustflow package version. |
-| `mf version --check` | Compare the installed package version with the latest npm release and print an update command if a newer version exists. |
+| `mf version --check` | Compare the installed package version with the latest npm release and print package-manager update commands if a newer version exists. |
 | `mf version-sources` | Inspect detected package, template, and declared version sources without modifying files. |
 | `mf impact --changed` | Report whether changed paths require a package or template version decision. |
 | `mf verify --reason <event>` | Run configured verification intents selected by `required_after` metadata. |
@@ -354,7 +354,7 @@ Runnable work is declared in `.mustflow/config/commands.toml` so agents do not g
 - `run_policy = "agent_allowed"`
 - `stdin = "closed"`
 
-Development servers, watch modes, browser UIs, interactive commands, and background processes do not run directly.
+Development servers, watch modes, browser UIs, interactive commands, and background processes do not run directly. `mf run` also rejects obvious long-running `argv` shapes, such as shell-wrapper background payloads, interpreter loops, package-manager development scripts, watchers, and development servers declared as one-shot commands.
 
 Use `mf verify --reason <event> --plan-only --json` to inspect matching verification intents, command eligibility, remaining gaps, and missing runnable coverage without executing commands. Use `mf run <intent> --dry-run --json` to inspect one resolved command intent without spawning a process or writing a run receipt. Plan-only verification includes a `decision_graph` that connects changed surfaces, classification reasons, command candidates, eligibility checks, effects, and gaps. When `.mustflow/cache/mustflow.sqlite` is fresh, scheduled entries also include read-only `effectGraph` metadata for write locks and lock conflicts. These graph rows are marked `explanation_only` and never grant command authority; `.mustflow/config/commands.toml` remains the only runnable command source.
 

package/dist/cli/commands/classify.js

@@ -2,7 +2,7 @@ import { mkdirSync, writeFileSync } from 'node:fs';
 import path from 'node:path';
 import { createChangeClassificationReport, } from '../../core/change-classification.js';
 import { printUsageError, renderHelp } from '../lib/cli-output.js';
-import { readGitChangedFiles } from '../lib/git-changes.js';
+import { requireGitChangedFiles } from '../lib/git-changes.js';
 import { t } from '../lib/i18n.js';
 import { resolveMustflowRoot } from '../lib/project-root.js';
 const CLASSIFY_SCHEMA_VERSION = '1';
@@ -67,7 +67,7 @@ function parseClassifyArgs(args) {
     return { json, changed, writePath, paths };
 }
 export function createClassifyOutput(projectRoot, source, paths) {
-    const files = source === 'changed' ? readGitChangedFiles(projectRoot) : paths;
+    const files = source === 'changed' ? requireGitChangedFiles(projectRoot) : paths;
     return {
         schema_version: CLASSIFY_SCHEMA_VERSION,
         command: 'classify',
@@ -136,7 +136,17 @@ export function runClassify(args, reporter, lang = 'en') {
         return 1;
     }
     const projectRoot = resolveMustflowRoot();
-    const output = createClassifyOutput(projectRoot, parsed.changed ? 'changed' : 'paths', parsed.paths);
+    let output;
+    try {
+        output = createClassifyOutput(projectRoot, parsed.changed ? 'changed' : 'paths', parsed.paths);
+    }
+    catch (error) {
+        const message = error instanceof Error && error.message === 'git_changed_files_unavailable'
+            ? t(lang, 'classify.error.changed_files_unavailable')
+            : t(lang, 'cli.common.invalidInput');
+        printUsageError(reporter, message, 'mf classify --help', getClassifyHelp(lang), lang);
+        return 1;
+    }
     if (parsed.writePath) {
         try {
             writeClassifyOutput(projectRoot, parsed.writePath, output);

package/dist/cli/commands/dashboard.js

@@ -682,7 +682,8 @@ async function renderStatusResponse(projectRoot) {
     const activeDocuments = listDocReviewEntries(projectRoot);
     const rawCommandContract = readDashboardCommandContract(projectRoot);
     const commandContract = await renderCommandContractResponse(projectRoot, rawCommandContract);
-    const gitChangedFiles = readGitChangedFiles(projectRoot);
+    const gitChangedFilesResult = readGitChangedFiles(projectRoot);
+    const gitChangedFiles = gitChangedFilesResult.ok ? gitChangedFilesResult.files : [];
     const packageMetadata = readPackageMetadata();
     const verification = createDashboardVerificationSnapshot(projectRoot, rawCommandContract, commandContract.intents, gitChangedFiles, manifest.changedFiles, manifest.missingFiles);
     const readModel = await readLatestLocalVerificationReadModelQueries(projectRoot);

package/dist/cli/commands/impact.js

@@ -3,7 +3,7 @@ import { createChangeClassificationReport } from '../../core/change-classificati
 import { summarizeVersionImpact } from '../../core/version-impact.js';
 import { printUsageError, renderHelp } from '../lib/cli-output.js';
 import { isRecord } from '../lib/command-contract.js';
-import { readGitChangedFiles } from '../lib/git-changes.js';
+import { requireGitChangedFiles } from '../lib/git-changes.js';
 import { t } from '../lib/i18n.js';
 import { resolveMustflowRoot } from '../lib/project-root.js';
 import { readTomlFile } from '../lib/toml.js';
@@ -56,7 +56,7 @@ function readPreferences(projectRoot) {
 }
 function createImpactOutput(projectRoot, parsed) {
     const source = parsed.changed ? 'changed' : 'paths';
-    const files = parsed.changed ? readGitChangedFiles(projectRoot) : parsed.paths;
+    const files = parsed.changed ? requireGitChangedFiles(projectRoot) : parsed.paths;
     const classificationReport = createChangeClassificationReport(source, files);
     const versionSources = detectVersionSources(projectRoot);
     return {
@@ -110,7 +110,17 @@ export function runImpact(args, reporter, lang = 'en') {
         printUsageError(reporter, t(lang, 'impact.error.missingInput'), 'mf impact --help', getImpactHelp(lang), lang);
         return 1;
     }
-    const output = createImpactOutput(resolveMustflowRoot(), parsed);
+    let output;
+    try {
+        output = createImpactOutput(resolveMustflowRoot(), parsed);
+    }
+    catch (error) {
+        const message = error instanceof Error && error.message === 'git_changed_files_unavailable'
+            ? t(lang, 'impact.error.changed_files_unavailable')
+            : t(lang, 'cli.common.invalidInput');
+        printUsageError(reporter, message, 'mf impact --help', getImpactHelp(lang), lang);
+        return 1;
+    }
     if (parsed.json) {
         reporter.stdout(JSON.stringify(output, null, 2));
         return 0;

package/dist/cli/commands/run.js

@@ -24,7 +24,7 @@ function emitOutput(reporter, output, stream) {
     }
     reporter[stream](text);
 }
-function terminateProcessTree(pid) {
+function signalProcessTree(pid, signal) {
     if (!pid || pid <= 0) {
         return;
     }
@@ -33,20 +33,73 @@ function terminateProcessTree(pid) {
             stdio: 'ignore',
             windowsHide: true,
         });
+        if (signal === 'SIGKILL') {
+            try {
+                process.kill(pid, signal);
+            }
+            catch {
+                // taskkill may already have terminated the direct child.
+            }
+        }
         return;
     }
     try {
-        process.kill(-pid, 'SIGTERM');
+        process.kill(-pid, signal);
     }
     catch {
         try {
-            process.kill(pid, 'SIGTERM');
+            process.kill(pid, signal);
         }
         catch {
             // The child may already be gone after Node's spawn timeout handling.
         }
     }
 }
+function signalProcessTreeNonBlocking(pid, signal) {
+    if (!pid || pid <= 0) {
+        return;
+    }
+    if (process.platform === 'win32') {
+        const killer = spawn('taskkill', ['/PID', String(pid), '/T', '/F'], {
+            stdio: 'ignore',
+            windowsHide: true,
+            detached: true,
+        });
+        killer.unref();
+        if (signal === 'SIGKILL') {
+            try {
+                process.kill(pid, signal);
+            }
+            catch {
+                // taskkill may already have terminated the direct child.
+            }
+        }
+        return;
+    }
+    try {
+        process.kill(-pid, signal);
+    }
+    catch {
+        try {
+            process.kill(pid, signal);
+        }
+        catch {
+            // The child may already be gone after the timeout fired.
+        }
+    }
+}
+function terminateProcessTree(pid) {
+    signalProcessTree(pid, 'SIGTERM');
+}
+function forceTerminateProcessTree(pid) {
+    signalProcessTree(pid, 'SIGKILL');
+}
+function terminateProcessTreeNonBlocking(pid) {
+    signalProcessTreeNonBlocking(pid, 'SIGTERM');
+}
+function forceTerminateProcessTreeNonBlocking(pid) {
+    signalProcessTreeNonBlocking(pid, 'SIGKILL');
+}
 function getKillMethod() {
     return process.platform === 'win32' ? 'taskkill_process_tree' : 'process_group_sigterm';
 }
@@ -178,14 +231,14 @@ function writeStreamChunk(reporter, stream, chunk) {
             reporter.writeStdout(chunk);
             return;
         }
-        reporter.stdout(chunk.toString().trimEnd());
+        reporter.stdout(chunk.toString());
         return;
     }
     if (reporter.writeStderr) {
         reporter.writeStderr(chunk);
         return;
     }
-    reporter.stderr(chunk.toString().trimEnd());
+    reporter.stderr(chunk.toString());
 }
 function runArgvCommandStreaming(command, cwd, env, timeoutSeconds, stdoutTailBytes, stderrTailBytes, reporter) {
     return new Promise((resolve) => {
@@ -214,8 +267,8 @@ function runArgvCommandStreaming(command, cwd, env, timeoutSeconds, stdoutTailBy
                 clearTimeout(timeout);
             }
             resolve({
-                status,
-                signal,
+                status: timedOut ? null : status,
+                signal: timedOut ? null : signal,
                 error: timedOut ? Object.assign(new Error('Command timed out'), { code: 'ETIMEDOUT' }) : childError,
                 stdout: stdout.toSnapshot(),
                 stderr: stderr.toSnapshot(),
@@ -238,7 +291,12 @@ function runArgvCommandStreaming(command, cwd, env, timeoutSeconds, stdoutTailBy
         });
         timeout = setTimeout(() => {
             timedOut = true;
-            terminateProcessTree(childPid);
+            child.stdout?.destroy();
+            child.stderr?.destroy();
+            child.unref();
+            terminateProcessTreeNonBlocking(childPid);
+            forceTerminateProcessTreeNonBlocking(childPid);
+            finish(null, null);
         }, timeoutSeconds * 1000);
     });
 }
@@ -282,8 +340,8 @@ function runShellCommandStreaming(command, cwd, env, timeoutSeconds, stdoutTailB
                 clearTimeout(timeout);
             }
             resolve({
-                status,
-                signal,
+                status: timedOut ? null : status,
+                signal: timedOut ? null : signal,
                 error: timedOut ? Object.assign(new Error('Command timed out'), { code: 'ETIMEDOUT' }) : childError,
                 stdout: stdout.toSnapshot(),
                 stderr: stderr.toSnapshot(),
@@ -306,7 +364,12 @@ function runShellCommandStreaming(command, cwd, env, timeoutSeconds, stdoutTailB
         });
         timeout = setTimeout(() => {
             timedOut = true;
-            terminateProcessTree(childPid);
+            child.stdout?.destroy();
+            child.stderr?.destroy();
+            child.unref();
+            terminateProcessTreeNonBlocking(childPid);
+            forceTerminateProcessTreeNonBlocking(childPid);
+            finish(null, null);
         }, timeoutSeconds * 1000);
     });
 }
@@ -356,12 +419,24 @@ function reportRunPlanFailure(plan, reporter, lang) {
                 detail: getRunPlanDetail(plan, lang, 'run.error.blockedShellBackgroundDetail'),
             });
             break;
+        case 'blocked_long_running_command_pattern':
+            message = t(lang, 'run.error.blockedLongRunningCommand', {
+                intent: plan.intentName,
+                detail: getRunPlanDetail(plan, lang, 'run.error.blockedLongRunningCommandDetail'),
+            });
+            break;
         case 'cwd_outside_project':
             message = t(lang, 'run.error.cwdOutsideProject', {
                 intent: plan.intentName,
                 detail: getRunPlanDetail(plan, lang, 'run.error.cwdOutsideProjectDetail'),
             });
             break;
+        case 'max_output_bytes_exceeds_limit':
+            message = t(lang, 'run.error.maxOutputBytes', {
+                intent: plan.intentName,
+                detail: getRunPlanDetail(plan, lang, 'run.error.maxOutputBytesDetail'),
+            });
+            break;
         case 'intent_not_table':
         default:
             message = t(lang, 'run.error.unknownIntent', { intent: plan.intentName });

package/dist/cli/commands/upgrade.js

@@ -26,7 +26,9 @@ function printPackageCheck(check, reporter, lang) {
     if (check.updateAvailable) {
         reporter.stdout('');
         reporter.stdout(t(lang, 'version.check.updateCommand'));
-        reporter.stdout(check.updateCommand);
+        for (const entry of check.updateCommands) {
+            reporter.stdout(`${entry.manager}: ${entry.command}`);
+        }
     }
 }
 export async function runUpgrade(args, reporter, lang = 'en') {

package/dist/cli/commands/verify.js

@@ -764,6 +764,8 @@ export function planErrorMessageKey(code) {
             return 'verify.error.unsupported_plan_source';
         case 'plan_root_mismatch':
             return 'verify.error.plan_root_mismatch';
+        case 'git_changed_files_unavailable':
+            return 'verify.error.changed_files_unavailable';
         default:
             return 'verify.error.invalid_plan_file';
     }
@@ -1293,6 +1295,7 @@ function writeVerifyRunReceipts(projectRoot, output, report, sourceAnchorRisks,
         reasons: outputWithReceiptPaths.reasons,
         plan_source: outputWithReceiptPaths.plan_source,
         verification_plan_id: outputWithReceiptPaths.verification_plan_id,
+        execution_status: outputWithReceiptPaths.execution_status,
         status: outputWithReceiptPaths.status,
         completion_verdict: outputWithReceiptPaths.completion_verdict,
         evidence_model: outputWithReceiptPaths.evidence_model,
@@ -1312,6 +1315,7 @@ function writeVerifyRunReceipts(projectRoot, output, report, sourceAnchorRisks,
         reasons: outputWithReceiptPaths.reasons,
         plan_source: outputWithReceiptPaths.plan_source,
         verification_plan_id: outputWithReceiptPaths.verification_plan_id,
+        execution_status: outputWithReceiptPaths.execution_status,
         status: outputWithReceiptPaths.status,
         completion_verdict: outputWithReceiptPaths.completion_verdict,
         evidence_model: outputWithReceiptPaths.evidence_model,
@@ -1403,6 +1407,7 @@ async function createVerifyOutput(input, planSource, projectRoot, lang, reproEvi
         reasons: input.reasons,
         plan_source: planSource,
         verification_plan_id: verificationPlanId,
+        execution_status: status,
         status,
         completion_verdict: completionVerdict,
         evidence_model: evidenceModel,
@@ -1538,6 +1543,9 @@ export async function runVerify(args, reporter, lang = 'en') {
     let reproEvidence = null;
     let externalChecks = [];
     try {
+        if (parsed.writePlan) {
+            resolvePlanPath(projectRoot, parsed.writePlan);
+        }
         if (parsed.changed) {
             const changedInput = createInputFromChanged(projectRoot);
             input = changedInput.input;
@@ -1587,5 +1595,5 @@ export async function runVerify(args, reporter, lang = 'en') {
     else {
         reporter.stdout(renderVerifyOutput(output, lang));
     }
-    return output.status === 'passed' ? 0 : 1;
+    return output.completion_verdict.status === 'verified' ? 0 : 1;
 }

package/dist/cli/commands/version.js

@@ -25,7 +25,7 @@ function renderVersionCheck(check, lang) {
             : t(lang, 'version.check.upToDate', { version: check.latestVersion }),
     ];
     if (check.updateAvailable) {
-        lines.push('', t(lang, 'version.check.updateCommand'), check.updateCommand);
+        lines.push('', t(lang, 'version.check.updateCommand'), ...check.updateCommands.map((entry) => `${entry.manager}: ${entry.command}`));
     }
     return lines.join('\n');
 }

package/dist/cli/i18n/en.js

@@ -664,8 +664,12 @@ Read these files before working:
     "run.error.unsafeIntentDetail": "Use a shell-safe intent name.",
     "run.error.blockedShellBackground": 'Intent "{intent}" is blocked. {detail}',
     "run.error.blockedShellBackgroundDetail": "Shell commands must not spawn background work.",
+    "run.error.blockedLongRunningCommand": 'Intent "{intent}" is blocked. {detail}',
+    "run.error.blockedLongRunningCommandDetail": "Command argv must describe a finite one-shot command, not a development server, watcher, shell wrapper, interpreter loop, or background process.",
     "run.error.cwdOutsideProject": 'Command "{intent}" has an invalid cwd: {detail}',
     "run.error.cwdOutsideProjectDetail": "Intent cwd must stay inside the current root.",
+    "run.error.maxOutputBytes": 'Command "{intent}" has invalid max_output_bytes. {detail}',
+    "run.error.maxOutputBytesDetail": "The output limit must stay within the allowed maximum.",
     "run.error.conflictingPreviewModes": "Use either --dry-run or --plan-only, not both",
     "run.error.timedOut": 'Command "{intent}" timed out after {seconds} seconds',
     "run.error.startFailed": 'Command "{intent}" failed to start: {message}',
@@ -697,7 +701,7 @@ Read these files before working:
     "version.help.exit.ok": "Version information was printed",
     "version.check.latestAvailable": "latest {version} available",
     "version.check.upToDate": "latest {version}; already up to date",
-    "version.check.updateCommand": "Update command:",
+    "version.check.updateCommand": "Update commands:",
     "version.error.checkFailed": "Could not check npm for a newer version: {message}",
     "upgrade.help.summary": "Check whether the installed mustflow package is current, then safely apply bundled workflow template updates when possible.",
     "upgrade.help.option.dryRun": "Check package status and print the project update plan without writing files",
@@ -727,6 +731,7 @@ Read these files before working:
     "classify.source.changed": "changed files",
     "classify.source.paths": "explicit paths",
     "classify.error.missingInput": "Specify --changed or at least one path",
+    "classify.error.changed_files_unavailable": "Unable to inspect changed files with git status",
     "classify.error.write_path_outside_root": "Classification report path must stay inside the mustflow root",
     "impact.help.summary": "Report whether changed paths require a package or template version decision without modifying files.",
     "impact.help.option.changed": "Read paths from git status --short --untracked-files=all",
@@ -741,6 +746,7 @@ Read these files before working:
     "impact.label.affectedVersionSources": "Affected version sources",
     "impact.label.affectedSurfaces": "Affected surfaces",
     "impact.error.missingInput": "Specify --changed or at least one path",
+    "impact.error.changed_files_unavailable": "Unable to inspect changed files with git status",
     "verify.help.summary": "Run configured verification intents selected by required_after metadata.",
     "verify.help.option.reason": "Select the required_after reason to verify",
     "verify.help.option.fromClassification": "Read verification reasons from an mf classify report inside this repository",
@@ -768,6 +774,7 @@ Read these files before working:
     "verify.error.plan_root_mismatch": "Classification report must come from this mustflow root",
     "verify.error.missing_plan_reasons": "Classification report must include summary.validationReasons",
     "verify.error.plan_path_outside_root": "Classification report path must stay inside the mustflow root",
+    "verify.error.changed_files_unavailable": "Unable to inspect changed files with git status",
     "verify.error.invalid_repro_evidence_file": "Repro evidence must be a readable JSON summary with structured evidence fields",
     "verify.error.unsupported_repro_evidence_source": "Repro evidence input must use command repro-evidence",
     "verify.error.invalid_external_evidence_file": "External evidence must be a readable JSON summary with checks",

package/dist/cli/i18n/es.js

@@ -664,8 +664,12 @@ Lee estos archivos antes de trabajar:
     "run.error.unsafeIntentDetail": "Usa un nombre de intención seguro para shell.",
     "run.error.blockedShellBackground": 'La intención "{intent}" está bloqueada. {detail}',
     "run.error.blockedShellBackgroundDetail": "Los comandos de shell no deben iniciar trabajo en segundo plano.",
+    "run.error.blockedLongRunningCommand": 'La intención "{intent}" está bloqueada. {detail}',
+    "run.error.blockedLongRunningCommandDetail": "argv debe describir un comando finito de una sola ejecución, no un servidor de desarrollo, watcher, envoltorio de shell, bucle de intérprete o proceso en segundo plano.",
     "run.error.cwdOutsideProject": 'El comando "{intent}" tiene un cwd no válido: {detail}',
     "run.error.cwdOutsideProjectDetail": "El cwd de la intención debe permanecer dentro de la raíz actual.",
+    "run.error.maxOutputBytes": 'El comando "{intent}" tiene max_output_bytes no válido. {detail}',
+    "run.error.maxOutputBytesDetail": "El límite de salida debe permanecer dentro del máximo permitido.",
     "run.error.conflictingPreviewModes": "Usa --dry-run o --plan-only, no ambos",
     "run.error.timedOut": 'El comando "{intent}" agotó el tiempo después de {seconds} segundos',
     "run.error.startFailed": 'No se pudo iniciar el comando "{intent}": {message}',
@@ -697,7 +701,7 @@ Lee estos archivos antes de trabajar:
     "version.help.exit.ok": "Se imprimió la información de versión",
     "version.check.latestAvailable": "última versión {version} disponible",
     "version.check.upToDate": "última versión {version}; ya está actualizado",
-    "version.check.updateCommand": "Comando de actualización:",
+    "version.check.updateCommand": "Comandos de actualización:",
     "version.error.checkFailed": "No se pudo consultar npm para una versión nueva: {message}",
     "upgrade.help.summary": "Comprueba si el paquete mustflow instalado está actualizado y luego aplica de forma segura las actualizaciones de la plantilla incluida cuando sea posible.",
     "upgrade.help.option.dryRun": "Comprueba el estado del paquete e imprime el plan de actualización del proyecto sin escribir archivos",
@@ -727,6 +731,7 @@ Lee estos archivos antes de trabajar:
     "classify.source.changed": "archivos cambiados",
     "classify.source.paths": "rutas explicitas",
     "classify.error.missingInput": "Indica --changed o al menos una ruta",
+    "classify.error.changed_files_unavailable": "No se pudieron inspeccionar los archivos cambiados con git status",
     "classify.error.write_path_outside_root": "La ruta del informe de clasificacion debe permanecer dentro de la raiz mustflow",
     "impact.help.summary": "Informa si las rutas cambiadas requieren una decision de version de paquete o plantilla sin modificar archivos.",
     "impact.help.option.changed": "Lee rutas desde git status --short --untracked-files=all",
@@ -741,6 +746,7 @@ Lee estos archivos antes de trabajar:
     "impact.label.affectedVersionSources": "Fuentes de version afectadas",
     "impact.label.affectedSurfaces": "Superficies afectadas",
     "impact.error.missingInput": "Indica --changed o al menos una ruta",
+    "impact.error.changed_files_unavailable": "No se pudieron inspeccionar los archivos cambiados con git status",
     "verify.help.summary": "Ejecuta intenciones de verificación configuradas seleccionadas por metadatos required_after.",
     "verify.help.option.reason": "Selecciona la razón required_after que se debe verificar",
     "verify.help.option.fromClassification": "Lee razones de verificación desde un informe de mf classify dentro de este repositorio",
@@ -768,6 +774,7 @@ Lee estos archivos antes de trabajar:
     "verify.error.plan_root_mismatch": "El informe de clasificación debe provenir de esta raíz mustflow",
     "verify.error.missing_plan_reasons": "El informe de clasificación debe incluir summary.validationReasons",
     "verify.error.plan_path_outside_root": "La ruta del informe de clasificación debe permanecer dentro de la raíz mustflow",
+    "verify.error.changed_files_unavailable": "No se pudieron inspeccionar los archivos cambiados con git status",
     "verify.error.invalid_repro_evidence_file": "La evidencia de reproducción debe ser un resumen JSON legible con campos de evidencia estructurados",
     "verify.error.unsupported_repro_evidence_source": "La entrada de evidencia de reproducción debe usar command repro-evidence",
     "verify.error.invalid_external_evidence_file": "La evidencia externa debe ser un resumen JSON legible con checks",

package/dist/cli/i18n/fr.js

@@ -664,8 +664,12 @@ Lisez ces fichiers avant de travailler :
     "run.error.unsafeIntentDetail": "Utilisez un nom d’intention sûr pour le shell.",
     "run.error.blockedShellBackground": 'L’intention "{intent}" est bloquée. {detail}',
     "run.error.blockedShellBackgroundDetail": "Les commandes shell ne doivent pas lancer de travail en arrière-plan.",
+    "run.error.blockedLongRunningCommand": 'L’intention "{intent}" est bloquée. {detail}',
+    "run.error.blockedLongRunningCommandDetail": "argv doit décrire une commande ponctuelle finie, pas un serveur de développement, un watcher, un wrapper shell, une boucle d'interpréteur ou un processus en arrière-plan.",
     "run.error.cwdOutsideProject": 'La commande "{intent}" a un cwd non valide : {detail}',
     "run.error.cwdOutsideProjectDetail": "Le cwd de l’intention doit rester dans la racine actuelle.",
+    "run.error.maxOutputBytes": 'La commande "{intent}" a une valeur max_output_bytes non valide. {detail}',
+    "run.error.maxOutputBytesDetail": "La limite de sortie doit rester dans le maximum autorisé.",
     "run.error.conflictingPreviewModes": "Utilisez --dry-run ou --plan-only, pas les deux",
     "run.error.timedOut": 'La commande "{intent}" a expiré après {seconds} secondes',
     "run.error.startFailed": 'Impossible de démarrer la commande "{intent}" : {message}',
@@ -697,7 +701,7 @@ Lisez ces fichiers avant de travailler :
     "version.help.exit.ok": "Les informations de version ont été affichées",
     "version.check.latestAvailable": "dernière version {version} disponible",
     "version.check.upToDate": "dernière version {version}; déjà à jour",
-    "version.check.updateCommand": "Commande de mise à jour :",
+    "version.check.updateCommand": "Commandes de mise à jour :",
     "version.error.checkFailed": "Impossible de vérifier une nouvelle version sur npm : {message}",
     "upgrade.help.summary": "Vérifie si le paquet mustflow installé est à jour, puis applique en sécurité les mises à jour du modèle inclus quand c'est possible.",
     "upgrade.help.option.dryRun": "Vérifie l'état du paquet et affiche le plan de mise à jour du projet sans écrire de fichiers",
@@ -727,6 +731,7 @@ Lisez ces fichiers avant de travailler :
     "classify.source.changed": "fichiers modifies",
     "classify.source.paths": "chemins explicites",
     "classify.error.missingInput": "Indiquez --changed ou au moins un chemin",
+    "classify.error.changed_files_unavailable": "Impossible d'inspecter les fichiers modifies avec git status",
     "classify.error.write_path_outside_root": "Le chemin du rapport de classification doit rester dans la racine mustflow",
     "impact.help.summary": "Signale si les chemins modifies exigent une decision de version de paquet ou de modele sans modifier les fichiers.",
     "impact.help.option.changed": "Lire les chemins depuis git status --short --untracked-files=all",
@@ -741,6 +746,7 @@ Lisez ces fichiers avant de travailler :
     "impact.label.affectedVersionSources": "Sources de version affectees",
     "impact.label.affectedSurfaces": "Surfaces affectees",
     "impact.error.missingInput": "Indiquez --changed ou au moins un chemin",
+    "impact.error.changed_files_unavailable": "Impossible d'inspecter les fichiers modifies avec git status",
     "verify.help.summary": "Exécute les intentions de vérification configurées sélectionnées par les métadonnées required_after.",
     "verify.help.option.reason": "Sélectionne la raison required_after à vérifier",
     "verify.help.option.fromClassification": "Lit les raisons de vérification depuis un rapport mf classify dans ce dépôt",
@@ -768,6 +774,7 @@ Lisez ces fichiers avant de travailler :
     "verify.error.plan_root_mismatch": "Le rapport de classification doit venir de cette racine mustflow",
     "verify.error.missing_plan_reasons": "Le rapport de classification doit inclure summary.validationReasons",
     "verify.error.plan_path_outside_root": "Le chemin du rapport de classification doit rester dans la racine mustflow",
+    "verify.error.changed_files_unavailable": "Impossible d'inspecter les fichiers modifies avec git status",
     "verify.error.invalid_repro_evidence_file": "La preuve de reproduction doit être un résumé JSON lisible avec des champs de preuve structurés",
     "verify.error.unsupported_repro_evidence_source": "L'entrée de preuve de reproduction doit utiliser command repro-evidence",
     "verify.error.invalid_external_evidence_file": "La preuve externe doit être un résumé JSON lisible avec checks",

package/dist/cli/i18n/hi.js

@@ -664,8 +664,12 @@ export const hiMessages = {
     "run.error.unsafeIntentDetail": "shell-safe इंटेंट नाम इस्तेमाल करें।",
     "run.error.blockedShellBackground": 'इंटेंट "{intent}" अवरुद्ध है। {detail}',
     "run.error.blockedShellBackgroundDetail": "Shell commands background work शुरू नहीं कर सकतीं।",
+    "run.error.blockedLongRunningCommand": 'इंटेंट "{intent}" अवरुद्ध है। {detail}',
+    "run.error.blockedLongRunningCommandDetail": "argv में finite one-shot command होना चाहिए, development server, watcher, shell wrapper, interpreter loop, या background process नहीं।",
     "run.error.cwdOutsideProject": 'कमांड "{intent}" का cwd अमान्य है: {detail}',
     "run.error.cwdOutsideProjectDetail": "Intent cwd current root के अंदर रहना चाहिए।",
+    "run.error.maxOutputBytes": 'कमांड "{intent}" में max_output_bytes अमान्य है। {detail}',
+    "run.error.maxOutputBytesDetail": "Output limit अनुमत maximum के अंदर रहनी चाहिए।",
     "run.error.conflictingPreviewModes": "--dry-run या --plan-only में से एक इस्तेमाल करें, दोनों नहीं",
     "run.error.timedOut": 'कमांड "{intent}" {seconds} सेकंड बाद time out हुई',
     "run.error.startFailed": 'कमांड "{intent}" शुरू नहीं हो सकी: {message}',
@@ -697,7 +701,7 @@ export const hiMessages = {
     "version.help.exit.ok": "Version जानकारी प्रिंट की गई",
     "version.check.latestAvailable": "latest {version} उपलब्ध है",
     "version.check.upToDate": "latest {version}; पहले से up to date",
-    "version.check.updateCommand": "Update command:",
+    "version.check.updateCommand": "Update commands:",
     "version.error.checkFailed": "npm पर नया version जाँचा नहीं जा सका: {message}",
     "upgrade.help.summary": "जाँचें कि installed mustflow package current है या नहीं, फिर संभव होने पर current CLI में bundled workflow template updates सुरक्षित रूप से लागू करें.",
     "upgrade.help.option.dryRun": "Package status जाँचें और files लिखे बिना project update plan प्रिंट करें",
@@ -727,6 +731,7 @@ export const hiMessages = {
     "classify.source.changed": "बदली फ़ाइलें",
     "classify.source.paths": "दिए गए पथ",
     "classify.error.missingInput": "--changed या कम से कम एक पथ दें",
+    "classify.error.changed_files_unavailable": "git status से बदली फ़ाइलें नहीं पढ़ी जा सकीं",
     "classify.error.write_path_outside_root": "Classification report path mustflow root के अंदर रहना चाहिए",
     "impact.help.summary": "फ़ाइल बदले बिना बताएं कि बदले पथ package या template version decision मांगते हैं या नहीं.",
     "impact.help.option.changed": "git status --short --untracked-files=all से पथ पढ़ें",
@@ -741,6 +746,7 @@ export const hiMessages = {
     "impact.label.affectedVersionSources": "Affected version sources",
     "impact.label.affectedSurfaces": "Affected surfaces",
     "impact.error.missingInput": "--changed या कम से कम एक पथ दें",
+    "impact.error.changed_files_unavailable": "git status से बदली फ़ाइलें नहीं पढ़ी जा सकीं",
     "verify.help.summary": "required_after metadata से चुने गए configured verification intents चलाएँ।",
     "verify.help.option.reason": "Verify करने के लिए required_after reason चुनें",
     "verify.help.option.fromClassification": "इस repository के अंदर mf classify report से verification reasons पढ़ें",
@@ -768,6 +774,7 @@ export const hiMessages = {
     "verify.error.plan_root_mismatch": "Classification report इसी mustflow root से आना चाहिए",
     "verify.error.missing_plan_reasons": "Classification report में summary.validationReasons होना चाहिए",
     "verify.error.plan_path_outside_root": "Classification report path mustflow root के अंदर रहना चाहिए",
+    "verify.error.changed_files_unavailable": "git status से बदली फ़ाइलें नहीं पढ़ी जा सकीं",
     "verify.error.invalid_repro_evidence_file": "Repro evidence structured evidence fields वाला readable JSON summary होना चाहिए",
     "verify.error.unsupported_repro_evidence_source": "Repro evidence input को command repro-evidence इस्तेमाल करना चाहिए",
     "verify.error.invalid_external_evidence_file": "External evidence checks वाला readable JSON summary होना चाहिए",

package/dist/cli/i18n/ko.js

@@ -664,8 +664,12 @@ export const koMessages = {
     "run.error.unsafeIntentDetail": "셸에서 안전한 명령 의도 이름을 사용하세요.",
     "run.error.blockedShellBackground": '명령 의도 "{intent}"가 차단되었습니다. {detail}',
     "run.error.blockedShellBackgroundDetail": "셸 명령은 백그라운드 작업을 시작하면 안 됩니다.",
+    "run.error.blockedLongRunningCommand": '명령 의도 "{intent}"가 차단되었습니다. {detail}',
+    "run.error.blockedLongRunningCommandDetail": "argv는 개발 서버, 감시 명령, 셸 래퍼, 인터프리터 반복 작업, 백그라운드 프로세스가 아니라 끝나는 단발성 명령이어야 합니다.",
     "run.error.cwdOutsideProject": '명령 "{intent}"의 실행 위치(cwd)가 올바르지 않습니다: {detail}',
     "run.error.cwdOutsideProjectDetail": "명령 실행 위치(cwd)는 현재 루트 안에 있어야 합니다.",
+    "run.error.maxOutputBytes": '명령 "{intent}"의 max_output_bytes 값이 올바르지 않습니다. {detail}',
+    "run.error.maxOutputBytesDetail": "출력 상한은 허용된 최댓값 안에 있어야 합니다.",
     "run.error.conflictingPreviewModes": "--dry-run과 --plan-only 중 하나만 사용하세요",
     "run.error.timedOut": '명령 "{intent}"가 {seconds}초 뒤 시간 초과되었습니다',
     "run.error.startFailed": '명령 "{intent}"를 시작하지 못했습니다: {message}',
@@ -727,6 +731,7 @@ export const koMessages = {
     "classify.source.changed": "변경 파일",
     "classify.source.paths": "지정한 경로",
     "classify.error.missingInput": "--changed 또는 하나 이상의 경로를 지정하세요",
+    "classify.error.changed_files_unavailable": "git status로 변경 파일을 확인할 수 없습니다",
     "classify.error.write_path_outside_root": "분류 보고서 경로는 mustflow 루트 안에 있어야 합니다",
     "impact.help.summary": "파일을 수정하지 않고 변경 경로가 패키지나 템플릿 버전 결정을 요구하는지 보고합니다.",
     "impact.help.option.changed": "git status --short --untracked-files=all에서 경로를 읽습니다",
@@ -741,6 +746,7 @@ export const koMessages = {
     "impact.label.affectedVersionSources": "영향받은 버전 기준 원본",
     "impact.label.affectedSurfaces": "영향받은 공개 표면",
     "impact.error.missingInput": "--changed 또는 하나 이상의 경로를 지정하세요",
+    "impact.error.changed_files_unavailable": "git status로 변경 파일을 확인할 수 없습니다",
     "verify.help.summary": "required_after 메타데이터로 선택된 설정된 검증 의도를 실행합니다.",
     "verify.help.option.reason": "검증할 required_after 이유를 지정합니다",
     "verify.help.option.fromClassification": "이 저장소 안의 mf classify 보고서에서 검증 이유를 읽습니다",
@@ -768,6 +774,7 @@ export const koMessages = {
     "verify.error.plan_root_mismatch": "분류 보고서는 현재 mustflow 루트에서 나온 것이어야 합니다",
     "verify.error.missing_plan_reasons": "분류 보고서에는 summary.validationReasons가 있어야 합니다",
     "verify.error.plan_path_outside_root": "분류 보고서 경로는 mustflow 루트 안에 있어야 합니다",
+    "verify.error.changed_files_unavailable": "git status로 변경 파일을 확인할 수 없습니다",
     "verify.error.invalid_repro_evidence_file": "재현 증거는 구조화된 증거 필드를 포함한 읽을 수 있는 JSON 요약이어야 합니다",
     "verify.error.unsupported_repro_evidence_source": "재현 증거 입력은 command repro-evidence를 사용해야 합니다",
     "verify.error.invalid_external_evidence_file": "외부 증거는 checks를 포함한 읽을 수 있는 JSON 요약이어야 합니다",