mustflow 2.16.0 → 2.18.0

package/dist/core/command-contract-validation.js

@@ -1,7 +1,8 @@
 import { COMMAND_LIFECYCLES, COMMAND_RUN_POLICIES, LONG_RUNNING_LIFECYCLES, isRecord, } from './config-loading.js';
 import { COMMAND_ENV_POLICIES } from './command-env.js';
 import { COMMAND_EFFECT_CONCURRENCY, COMMAND_EFFECT_MODES, COMMAND_EFFECT_TYPES, validateCommandEffectLockWarnings, validateCommandEffects, } from './command-effects.js';
-import { commandIntentHasBlockedShellBackgroundPattern, commandIntentHasCommandSource, commandIntentNameIsSafe, } from './command-contract-rules.js';
+import { commandIntentBlockedCommandPattern, commandIntentHasBlockedShellBackgroundPattern, commandIntentHasCommandSource, commandIntentNameIsSafe, } from './command-contract-rules.js';
+import { MAX_COMMAND_OUTPUT_BYTES, commandMaxOutputBytesLimitMessage } from './command-output-limits.js';
 function commandContractIssue(message) {
     return { message };
 }
@@ -46,6 +47,12 @@ function validatePositiveIntegerField(table, key, label, issues) {
         issues.push(commandContractIssue(`${label} must be a positive integer`));
     }
 }
+function validateMaxOutputBytesField(table, key, label, issues) {
+    validatePositiveIntegerField(table, key, label, issues);
+    if (isPositiveInteger(table[key]) && Number(table[key]) > MAX_COMMAND_OUTPUT_BYTES) {
+        issues.push(commandContractIssue(commandMaxOutputBytesLimitMessage(label)));
+    }
+}
 function validateAllowedStringField(table, key, label, allowedValues, issues) {
     if (!hasOwn(table, key)) {
         return;
@@ -70,7 +77,7 @@ function validateCommandDefaults(commandsToml, issues) {
     validateAllowedStringField(defaults, 'env_policy', '[commands.defaults].env_policy', COMMAND_ENV_POLICIES, issues);
     validateStringArrayField(defaults, 'env_allowlist', '[commands.defaults].env_allowlist', issues);
     validatePositiveIntegerField(defaults, 'default_timeout_seconds', '[commands.defaults].default_timeout_seconds', issues);
-    validatePositiveIntegerField(defaults, 'max_output_bytes', '[commands.defaults].max_output_bytes', issues);
+    validateMaxOutputBytesField(defaults, 'max_output_bytes', '[commands.defaults].max_output_bytes', issues);
     validatePositiveIntegerField(defaults, 'kill_after_seconds', '[commands.defaults].kill_after_seconds', issues);
 }
 function validateCommandResources(commandsToml, issues) {
@@ -148,6 +155,7 @@ function validateCommandIntent(intentName, intent, issues) {
     validateAllowedStringField(intent, 'run_policy', `[commands.intents.${intentName}].run_policy`, COMMAND_RUN_POLICIES, issues);
     validateAllowedStringField(intent, 'env_policy', `[commands.intents.${intentName}].env_policy`, COMMAND_ENV_POLICIES, issues);
     validateStringArrayField(intent, 'env_allowlist', `[commands.intents.${intentName}].env_allowlist`, issues);
+    validateMaxOutputBytesField(intent, 'max_output_bytes', `[commands.intents.${intentName}].max_output_bytes`, issues);
     validateCommandIntentSelection(intentName, intent, issues);
     if (intent.status !== 'configured') {
         return;
@@ -178,6 +186,10 @@ function validateCommandIntent(intentName, intent, issues) {
     if (commandIntentHasBlockedShellBackgroundPattern(intent)) {
         issues.push(commandContractIssue(`Shell intent ${intentName} contains a blocked long-running or background pattern`));
     }
+    const blockedCommandPattern = commandIntentBlockedCommandPattern(intent);
+    if (blockedCommandPattern?.code === 'long_running_command_pattern') {
+        issues.push(commandContractIssue(`Intent ${intentName} contains a blocked long-running or background command pattern`));
+    }
     if (hasOwn(intent, 'success_exit_codes')) {
         const value = intent.success_exit_codes;
         if (!Array.isArray(value) || value.length === 0 || value.some((entry) => !Number.isInteger(entry))) {

package/dist/core/command-intent-eligibility.js

@@ -1,5 +1,5 @@
 import { isRecord, readString } from './config-loading.js';
-import { commandIntentHasBlockedShellBackgroundPattern, commandIntentHasCommandSource, commandIntentNameIsSafe, } from './command-contract-rules.js';
+import { commandIntentBlockedCommandPattern, commandIntentHasBlockedShellBackgroundPattern, commandIntentHasCommandSource, commandIntentNameIsSafe, } from './command-contract-rules.js';
 export function evaluateCommandIntentEligibility(intentName, rawIntent) {
     if (!commandIntentNameIsSafe(intentName)) {
         return {
@@ -68,6 +68,14 @@ export function evaluateCommandIntentEligibility(intentName, rawIntent) {
             detail: 'Shell command contains a blocked long-running or background pattern.',
         };
     }
+    const blockedPattern = commandIntentBlockedCommandPattern(rawIntent);
+    if (blockedPattern?.code === 'long_running_command_pattern') {
+        return {
+            ok: false,
+            code: 'blocked_long_running_command_pattern',
+            detail: blockedPattern.detail,
+        };
+    }
     return {
         ok: true,
         code: 'ok',

package/dist/core/command-output-limits.js

@@ -0,0 +1,5 @@
+export const DEFAULT_COMMAND_MAX_OUTPUT_BYTES = 1_048_576;
+export const MAX_COMMAND_OUTPUT_BYTES = 16 * 1024 * 1024;
+export function commandMaxOutputBytesLimitMessage(label) {
+    return `${label} must be less than or equal to ${MAX_COMMAND_OUTPUT_BYTES}`;
+}

package/dist/core/contract-lint.js

@@ -2,7 +2,8 @@ import { existsSync, readFileSync } from 'node:fs';
 import path from 'node:path';
 import { COMMAND_LIFECYCLES, COMMAND_RUN_POLICIES, LONG_RUNNING_LIFECYCLES, isRecord, readPositiveInteger, readString, readStringArray, } from './config-loading.js';
 import { evaluateCommandIntentEligibility, } from './command-intent-eligibility.js';
-import { commandIntentHasBlockedShellBackgroundPattern, commandIntentHasCommandSource, commandIntentNameIsSafe, } from './command-contract-rules.js';
+import { commandIntentBlockedCommandPattern, commandIntentHasBlockedShellBackgroundPattern, commandIntentHasCommandSource, commandIntentNameIsSafe, } from './command-contract-rules.js';
+import { MAX_COMMAND_OUTPUT_BYTES } from './command-output-limits.js';
 import { commandEffectsConflict, normalizeCommandEffects } from './command-effects.js';
 import { listChangeClassificationValidationReasons } from './change-classification.js';
 import { parseSkillIndexRoutes } from './skill-route-alignment.js';
@@ -309,6 +310,10 @@ function lintIntent(name, value, issues) {
     if (lifecycle === 'oneshot' && readPositiveInteger(value, 'timeout_seconds') === undefined) {
         pushIssue(issues, 'error', 'oneshot_missing_timeout', name, `Oneshot intent ${name} must define timeout_seconds.`);
     }
+    const maxOutputBytes = readPositiveInteger(value, 'max_output_bytes');
+    if (maxOutputBytes !== undefined && maxOutputBytes > MAX_COMMAND_OUTPUT_BYTES) {
+        pushIssue(issues, 'error', 'max_output_bytes_exceeds_limit', name, `Intent ${name} max_output_bytes must be less than or equal to ${MAX_COMMAND_OUTPUT_BYTES}.`);
+    }
     if (lifecycle === 'oneshot' && readString(value, 'stdin') !== 'closed') {
         pushIssue(issues, 'error', 'oneshot_stdin_not_closed', name, `Oneshot intent ${name} must set stdin to closed.`);
     }
@@ -321,6 +326,10 @@ function lintIntent(name, value, issues) {
     if (commandIntentHasBlockedShellBackgroundPattern(value)) {
         pushIssue(issues, 'error', 'shell_background_pattern', name, `Shell intent ${name} contains a blocked long-running or background pattern.`);
     }
+    const blockedCommandPattern = commandIntentBlockedCommandPattern(value);
+    if (blockedCommandPattern?.code === 'long_running_command_pattern') {
+        pushIssue(issues, 'error', 'long_running_command_pattern', name, `Intent ${name} contains a blocked long-running or background command pattern.`);
+    }
     if (!successExitCodesAreValid(value)) {
         pushIssue(issues, 'error', 'invalid_success_exit_codes', name, `Intent ${name} success_exit_codes must be an integer array.`);
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mustflow",
-  "version": "2.16.0",
+  "version": "2.18.0",
   "description": "Agent workflow documents and CLI for mustflow repository roots.",
   "type": "module",
   "license": "MIT-0",

package/schemas/README.md

@@ -35,10 +35,10 @@ Current schemas:
   `mf explain verify --reason <event> --json`, `mf explain retention --json`, `mf explain skills --json`,
   and `mf explain surface --json`. Verify explanations include the shared `decisionGraph` evidence model.
 - `verify-report.schema.json`: output of `mf verify --reason <event> --json`, including an
-  evidence-based completion verdict and evidence model with a conservative coverage matrix for the
-  selected receipts and skipped checks
+  explicit execution aggregate, evidence-based completion verdict, and evidence model with a
+  conservative coverage matrix for the selected receipts and skipped checks
 - `verify-run-manifest.schema.json`: `.mustflow/state/runs/verify-latest/manifest.json`, including
-  the same completion verdict, evidence model, and coverage matrix as the verify report
+  the same execution aggregate, completion verdict, evidence model, and coverage matrix as the verify report
 - `change-verification-report.schema.json`: output of `mf verify --reason <event> --plan-only --json` and  
   `mf verify --from-classification <classify-report.json> --plan-only --json`, including the `decision_graph` that links
   changed surfaces, classification reasons, command candidates, eligibility, selected or not-selected state,

package/schemas/change-verification-report.schema.json

@@ -251,7 +251,8 @@
         "missing_timeout",
         "missing_command_source",
         "unsafe_intent_name",
-        "blocked_shell_background_pattern"
+        "blocked_shell_background_pattern",
+        "blocked_long_running_command_pattern"
       ]
     },
     "verificationCandidate": {

package/schemas/contract-lint-report.schema.json

@@ -139,7 +139,8 @@
                             "missing_timeout",
                             "missing_command_source",
                             "unsafe_intent_name",
-                            "blocked_shell_background_pattern"
+                            "blocked_shell_background_pattern",
+                            "blocked_long_running_command_pattern"
                           ]
                         },
                         "runnable": { "type": "boolean" },

package/schemas/explain-report.schema.json

@@ -829,6 +829,7 @@
             "missing_command_source",
             "unsafe_intent_name",
             "blocked_shell_background_pattern",
+            "blocked_long_running_command_pattern",
             null
           ]
         },

package/schemas/latest-run-pointer.schema.json

@@ -33,6 +33,7 @@
       "type": "string",
       "pattern": "^sha256:[0-9a-f]{64}$"
     },
+    "execution_status": { "enum": ["passed", "partial", "failed", "blocked"] },
     "status": { "enum": ["passed", "partial", "failed", "blocked"] },
     "completion_verdict": { "$ref": "#/$defs/completionVerdict" },
     "evidence_model": { "$ref": "#/$defs/evidenceModel" },

package/schemas/verify-report.schema.json

@@ -34,6 +34,7 @@
       "type": "string",
       "pattern": "^sha256:[0-9a-f]{64}$"
     },
+    "execution_status": { "enum": ["passed", "partial", "failed", "blocked"] },
     "status": { "enum": ["passed", "partial", "failed", "blocked"] },
     "completion_verdict": { "$ref": "#/$defs/completionVerdict" },
     "evidence_model": { "$ref": "#/$defs/evidenceModel" },

package/schemas/verify-run-manifest.schema.json

@@ -30,6 +30,7 @@
       "type": "string",
       "pattern": "^sha256:[0-9a-f]{64}$"
     },
+    "execution_status": { "enum": ["passed", "partial", "failed", "blocked"] },
     "status": { "enum": ["passed", "partial", "failed", "blocked"] },
     "completion_verdict": { "$ref": "#/$defs/completionVerdict" },
     "evidence_model": { "$ref": "#/$defs/evidenceModel" },

package/templates/default/manifest.toml

@@ -1,6 +1,6 @@
 id = "default"
 name = "default"
-version = "2.16.0"
+version = "2.18.0"
 description = "Minimal workflow for LLM agents to read, edit, and verify their work in a repository."
 common_root = "common"
 locales_root = "locales"