mustflow 2.17.0 → 2.18.2

package/dist/cli/commands/verify.js

@@ -1,10 +1,11 @@
 import { createHash } from 'node:crypto';
-import { mkdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { mkdirSync, readFileSync, writeFileSync } from 'node:fs';
 import path from 'node:path';
 import { createClassifyOutput } from './classify.js';
 import { runRun } from './run.js';
 import { createChangeVerificationReport, } from '../../core/change-verification.js';
 import { createVerifyCompletionVerdict, } from '../../core/completion-verdict.js';
+import { atomicWriteJsonFile, createStateRunId } from '../../core/atomic-state-write.js';
 import { createExternalEvidenceRisks, } from '../../core/external-evidence.js';
 import { createRepeatedFailureRisks, createVerificationFailureFingerprint, updateRepeatedFailureState, } from '../../core/repeated-failure.js';
 import { countReproEvidenceVerdictEffects, createReproEvidenceRisks, } from '../../core/repro-evidence.js';
@@ -17,9 +18,9 @@ import { t } from '../lib/i18n.js';
 import { readLocalCommandEffectGraph, readLocalPathSurfaces, readLocalSourceAnchorVerdictRisks, } from '../lib/local-index.js';
 import { resolveMustflowRoot } from '../lib/project-root.js';
 const VERIFY_SCHEMA_VERSION = '1';
-const VERIFY_RUN_DIR = path.join('.mustflow', 'state', 'runs', 'verify-latest');
-const VERIFY_MANIFEST_PATH = path.join(VERIFY_RUN_DIR, 'manifest.json');
-const LATEST_RUN_RECEIPT_PATH = path.join('.mustflow', 'state', 'runs', 'latest.json');
+const RUN_STATE_DIR = path.join('.mustflow', 'state', 'runs');
+const LATEST_RUN_RECEIPT_PATH = path.join(RUN_STATE_DIR, 'latest.json');
+const DEFAULT_VERIFY_PARALLELISM = 1;
 function createBufferedOutput() {
     const stdout = [];
     const stderr = [];
@@ -52,6 +53,7 @@ export function getVerifyHelp(lang = 'en') {
             { label: '--write-plan <path>', description: t(lang, 'verify.help.option.writePlan') },
             { label: '--repro-evidence <path>', description: t(lang, 'verify.help.option.reproEvidence') },
             { label: '--external-evidence <path>', description: t(lang, 'verify.help.option.externalEvidence') },
+            { label: '--parallel <count>', description: t(lang, 'verify.help.option.parallel') },
             { label: '--plan-only', description: t(lang, 'verify.help.option.planOnly') },
             { label: '--json', description: t(lang, 'cli.option.json') },
             { label: '-h, --help', description: t(lang, 'cli.option.help') },
@@ -81,6 +83,7 @@ function parseVerifyArgs(args) {
     let json = false;
     let planOnly = false;
     let changed = false;
+    let parallelism = DEFAULT_VERIFY_PARALLELISM;
     for (let index = 0; index < args.length; index += 1) {
         const arg = args[index];
         if (arg === '--json') {
@@ -95,6 +98,19 @@ function parseVerifyArgs(args) {
             changed = true;
             continue;
         }
+        if (arg === '--parallel') {
+            const value = args[index + 1];
+            if (!value || value.startsWith('-')) {
+                return { json, planOnly, changed, reason, parallelism, error: 'missing_parallel_value' };
+            }
+            const parsedParallelism = parseVerifyParallelism(value);
+            if (parsedParallelism === null) {
+                return { json, planOnly, changed, reason, parallelism, error: 'invalid_parallel_value' };
+            }
+            parallelism = parsedParallelism;
+            index += 1;
+            continue;
+        }
         if (arg === '--reason') {
             const value = args[index + 1];
             if (!value || value.startsWith('-')) {
@@ -195,6 +211,15 @@ function parseVerifyArgs(args) {
             reason = value;
             continue;
         }
+        if (arg.startsWith('--parallel=')) {
+            const value = arg.slice('--parallel='.length);
+            const parsedParallelism = parseVerifyParallelism(value);
+            if (parsedParallelism === null) {
+                return { json, planOnly, changed, reason, parallelism, error: 'invalid_parallel_value' };
+            }
+            parallelism = parsedParallelism;
+            continue;
+        }
         if (arg.startsWith('--from-plan=')) {
             const value = arg.slice('--from-plan='.length);
             if (value.length === 0) {
@@ -289,7 +314,25 @@ function parseVerifyArgs(args) {
             error: `unexpected:${arg}`,
         };
     }
-    return { json, planOnly, changed, reason, fromClassification, fromPlan, writePlan, reproEvidence, externalEvidence };
+    return {
+        json,
+        planOnly,
+        changed,
+        reason,
+        fromClassification,
+        fromPlan,
+        writePlan,
+        reproEvidence,
+        externalEvidence,
+        parallelism,
+    };
+}
+function parseVerifyParallelism(value) {
+    if (!/^[1-9][0-9]*$/u.test(value)) {
+        return null;
+    }
+    const parsed = Number(value);
+    return Number.isSafeInteger(parsed) ? parsed : null;
 }
 function uniqueStrings(values) {
     return [...new Set(values.map((value) => value.trim()).filter((value) => value.length > 0))];
@@ -297,6 +340,18 @@ function uniqueStrings(values) {
 function toPosixPath(value) {
     return value.split(path.sep).join('/');
 }
+function createVerifyRunStatePaths(projectRoot) {
+    const runDir = toPosixPath(path.join(RUN_STATE_DIR, createStateRunId('verify')));
+    const manifestPath = toPosixPath(path.join(runDir, 'manifest.json'));
+    const absoluteRunDir = path.join(projectRoot, runDir);
+    return {
+        runDir,
+        manifestPath,
+        absoluteRunDir,
+        absoluteIntentDir: path.join(absoluteRunDir, 'intents'),
+        absoluteManifestPath: path.join(projectRoot, manifestPath),
+    };
+}
 function sanitizeIntentFilePart(value) {
     const sanitized = value.replace(/[^A-Za-z0-9._-]+/g, '_').replace(/^_+|_+$/g, '');
     return sanitized.length > 0 ? sanitized.slice(0, 80) : 'intent';
@@ -445,7 +500,7 @@ function resolvePlanPath(projectRoot, inputPath) {
     }
     return resolved;
 }
-export function readInputFromPlan(projectRoot, inputPath) {
+export function readInputFromClassificationReport(projectRoot, inputPath) {
     let parsed;
     const planPath = resolvePlanPath(projectRoot, inputPath);
     try {
@@ -764,6 +819,8 @@ export function planErrorMessageKey(code) {
             return 'verify.error.unsupported_plan_source';
         case 'plan_root_mismatch':
             return 'verify.error.plan_root_mismatch';
+        case 'git_changed_files_unavailable':
+            return 'verify.error.changed_files_unavailable';
         default:
             return 'verify.error.invalid_plan_file';
     }
@@ -834,7 +891,8 @@ async function runVerificationIntent(intent, lang, verificationPlanId, testTarge
         if (receiptStatus === 'passed' ||
             receiptStatus === 'failed' ||
             receiptStatus === 'timed_out' ||
-            receiptStatus === 'start_failed') {
+            receiptStatus === 'start_failed' ||
+            receiptStatus === 'output_limit_exceeded') {
             status = receiptStatus;
         }
     }
@@ -854,12 +912,52 @@ async function runVerificationIntent(intent, lang, verificationPlanId, testTarge
         receipt,
     };
 }
+function entriesForScheduleBatch(entries, batch) {
+    const batchIntents = new Set(batch.intents);
+    return entries.filter((entry) => batchIntents.has(entry.intent));
+}
+async function runVerificationEntriesSequentially(entries, lang, verificationPlanId, scheduledTestTargets) {
+    const results = [];
+    for (const entry of entries) {
+        results.push(await runVerificationIntent(entry.intent, lang, verificationPlanId, scheduledTestTargets.get(entry.intent) ?? []));
+    }
+    return results;
+}
+async function runVerificationEntriesInParallelChunks(entries, parallelism, lang, verificationPlanId, scheduledTestTargets) {
+    const results = [];
+    for (let index = 0; index < entries.length; index += parallelism) {
+        const chunk = entries.slice(index, index + parallelism);
+        results.push(...(await Promise.all(chunk.map((entry) => runVerificationIntent(entry.intent, lang, verificationPlanId, scheduledTestTargets.get(entry.intent) ?? [])))));
+    }
+    return results;
+}
+async function runScheduledVerificationIntents(report, lang, verificationPlanId, scheduledTestTargets, parallelism) {
+    if (parallelism <= DEFAULT_VERIFY_PARALLELISM) {
+        return runVerificationEntriesSequentially(report.schedule.entries, lang, verificationPlanId, scheduledTestTargets);
+    }
+    const results = [];
+    for (const batch of report.schedule.batches) {
+        const entries = entriesForScheduleBatch(report.schedule.entries, batch);
+        if (entries.length === 0) {
+            continue;
+        }
+        if (entries.length > 1 && entries.every((entry) => entry.parallelEligible)) {
+            results.push(...(await runVerificationEntriesInParallelChunks(entries, parallelism, lang, verificationPlanId, scheduledTestTargets)));
+            continue;
+        }
+        results.push(...(await runVerificationEntriesSequentially(entries, lang, verificationPlanId, scheduledTestTargets)));
+    }
+    return results;
+}
 function summarizeResults(results) {
     const ran = results.filter((result) => !result.skipped).length;
     const passed = results.filter((result) => result.status === 'passed').length;
     const skipped = results.filter((result) => result.skipped).length;
     const failed = results.filter((result) => !result.skipped &&
-        (result.status === 'failed' || result.status === 'timed_out' || result.status === 'start_failed')).length;
+        (result.status === 'failed' ||
+            result.status === 'timed_out' ||
+            result.status === 'start_failed' ||
+            result.status === 'output_limit_exceeded')).length;
     return {
         matched: results.filter((result) => result.intent !== null).length,
         ran,
@@ -908,11 +1006,15 @@ function timedOutForResult(result) {
     return result.status === 'timed_out' || resultSummary?.timed_out === true;
 }
 function errorKindForResult(result) {
-    return stringField(resultSummaryForResult(result)?.error_kind) ?? (result.status === 'start_failed' ? 'start_failed' : null);
+    return (stringField(resultSummaryForResult(result)?.error_kind) ??
+        (result.status === 'start_failed' || result.status === 'output_limit_exceeded' ? result.status : null));
 }
 function failedResults(results) {
     return results.filter((result) => !result.skipped &&
-        (result.status === 'failed' || result.status === 'timed_out' || result.status === 'start_failed'));
+        (result.status === 'failed' ||
+            result.status === 'timed_out' ||
+            result.status === 'start_failed' ||
+            result.status === 'output_limit_exceeded'));
 }
 function createFailureFingerprintForVerify(input) {
     const failures = failedResults(input.results);
@@ -1024,7 +1126,10 @@ function createCriteriaEvidence(report, results) {
             .filter((intent) => intent !== null);
         const gapCount = report.gaps.filter((gap) => gap.reason === requirement.reason).length;
         const selectedResults = selectedIntents.map((intent) => resultForSelectedIntent(results, intent));
-        if (selectedResults.some((result) => result?.status === 'failed' || result?.status === 'timed_out' || result?.status === 'start_failed')) {
+        if (selectedResults.some((result) => result?.status === 'failed' ||
+            result?.status === 'timed_out' ||
+            result?.status === 'start_failed' ||
+            result?.status === 'output_limit_exceeded')) {
             return { ...current, contradicted: current.contradicted + 1 };
         }
         if (gapCount > 0 || (selectedIntents.length === 0 && skippedIntents.length > 0)) {
@@ -1179,20 +1284,18 @@ function createVerificationPlanId(report, contract) {
     return hashTextSha256(stableJson(fingerprintSource));
 }
 function writeVerifyRunReceipts(projectRoot, output, report, sourceAnchorRisks, scopeDiffRisks, validationRatchetRisks, reproEvidence, externalChecks) {
-    const runDir = path.join(projectRoot, VERIFY_RUN_DIR);
-    const intentDir = path.join(runDir, 'intents');
+    const statePaths = createVerifyRunStatePaths(projectRoot);
     const receipts = [];
     const results = [];
-    rmSync(runDir, { recursive: true, force: true });
-    mkdirSync(intentDir, { recursive: true });
+    mkdirSync(statePaths.absoluteIntentDir, { recursive: true });
     for (const [index, result] of output.results.entries()) {
         let receiptPath = null;
         let receiptSha256 = null;
         let receipt = result.receipt;
         if (result.intent && result.receipt) {
             const fileName = `${String(index + 1).padStart(3, '0')}-${sanitizeIntentFilePart(result.intent)}.json`;
-            const absoluteReceiptPath = path.join(intentDir, fileName);
-            receiptPath = toPosixPath(path.join(VERIFY_RUN_DIR, 'intents', fileName));
+            const absoluteReceiptPath = path.join(statePaths.absoluteIntentDir, fileName);
+            receiptPath = toPosixPath(path.join(statePaths.runDir, 'intents', fileName));
             receipt = {
                 ...result.receipt,
                 verification_plan_id: output.verification_plan_id,
@@ -1200,7 +1303,7 @@ function writeVerifyRunReceipts(projectRoot, output, report, sourceAnchorRisks,
             };
             const receiptContent = `${JSON.stringify(receipt, null, 2)}\n`;
             receiptSha256 = hashTextSha256(receiptContent);
-            writeFileSync(absoluteReceiptPath, receiptContent, 'utf8');
+            atomicWriteJsonFile(absoluteReceiptPath, receipt);
         }
         receipts.push({
             intent: result.intent,
@@ -1270,6 +1373,8 @@ function writeVerifyRunReceipts(projectRoot, output, report, sourceAnchorRisks,
         completion_verdict: completionVerdict,
         failure_fingerprint: failureFingerprint,
         repeated_failure_summary: repeatedFailureSummary,
+        run_dir: statePaths.runDir,
+        manifest_path: statePaths.manifestPath,
         results,
         evidence_model: createVerifyEvidenceModel({
             report,
@@ -1293,6 +1398,7 @@ function writeVerifyRunReceipts(projectRoot, output, report, sourceAnchorRisks,
         reasons: outputWithReceiptPaths.reasons,
         plan_source: outputWithReceiptPaths.plan_source,
         verification_plan_id: outputWithReceiptPaths.verification_plan_id,
+        execution_status: outputWithReceiptPaths.execution_status,
         status: outputWithReceiptPaths.status,
         completion_verdict: outputWithReceiptPaths.completion_verdict,
         evidence_model: outputWithReceiptPaths.evidence_model,
@@ -1303,7 +1409,7 @@ function writeVerifyRunReceipts(projectRoot, output, report, sourceAnchorRisks,
         ...(outputWithReceiptPaths.external_checks ? { external_checks: outputWithReceiptPaths.external_checks } : {}),
         receipts,
     };
-    writeFileSync(path.join(runDir, 'manifest.json'), `${JSON.stringify(manifest, null, 2)}\n`, 'utf8');
+    atomicWriteJsonFile(statePaths.absoluteManifestPath, manifest);
     const latest = {
         schema_version: '1',
         command: 'verify',
@@ -1312,6 +1418,7 @@ function writeVerifyRunReceipts(projectRoot, output, report, sourceAnchorRisks,
         reasons: outputWithReceiptPaths.reasons,
         plan_source: outputWithReceiptPaths.plan_source,
         verification_plan_id: outputWithReceiptPaths.verification_plan_id,
+        execution_status: outputWithReceiptPaths.execution_status,
         status: outputWithReceiptPaths.status,
         completion_verdict: outputWithReceiptPaths.completion_verdict,
         evidence_model: outputWithReceiptPaths.evidence_model,
@@ -1320,13 +1427,13 @@ function writeVerifyRunReceipts(projectRoot, output, report, sourceAnchorRisks,
         summary: outputWithReceiptPaths.summary,
         ...(outputWithReceiptPaths.repro_evidence ? { repro_evidence: outputWithReceiptPaths.repro_evidence } : {}),
         ...(outputWithReceiptPaths.external_checks ? { external_checks: outputWithReceiptPaths.external_checks } : {}),
-        run_dir: toPosixPath(VERIFY_RUN_DIR),
-        manifest_path: toPosixPath(VERIFY_MANIFEST_PATH),
+        run_dir: statePaths.runDir,
+        manifest_path: statePaths.manifestPath,
     };
-    writeFileSync(path.join(projectRoot, LATEST_RUN_RECEIPT_PATH), `${JSON.stringify(latest, null, 2)}\n`, 'utf8');
+    atomicWriteJsonFile(path.join(projectRoot, LATEST_RUN_RECEIPT_PATH), latest);
     return outputWithReceiptPaths;
 }
-async function createVerifyOutput(input, planSource, projectRoot, lang, reproEvidence = null, externalChecks = []) {
+async function createVerifyOutput(input, planSource, projectRoot, lang, reproEvidence = null, externalChecks = [], parallelism = DEFAULT_VERIFY_PARALLELISM) {
     const contract = readCommandContract(projectRoot);
     const report = createChangeVerificationReport(input.classificationReport, contract, projectRoot);
     const verificationPlanId = createVerificationPlanId(report, contract);
@@ -1339,10 +1446,7 @@ async function createVerifyOutput(input, planSource, projectRoot, lang, reproEvi
     const reproEvidenceRisks = createReproEvidenceRisks(reproEvidence, { verificationPlanId });
     const reproEvidenceVerdictEffects = countReproEvidenceVerdictEffects(reproEvidenceRisks);
     const externalEvidenceRisks = createExternalEvidenceRisks(externalChecks);
-    const results = [];
-    for (const entry of report.schedule.entries) {
-        results.push(await runVerificationIntent(entry.intent, lang, verificationPlanId, scheduledTestTargets.get(entry.intent) ?? []));
-    }
+    const results = await runScheduledVerificationIntents(report, lang, verificationPlanId, scheduledTestTargets, parallelism);
     results.push(...createSkippedResults(report.candidates, scheduledIntents, report.gaps));
     const summary = summarizeResults(results);
     const status = getVerificationStatus(summary);
@@ -1403,6 +1507,7 @@ async function createVerifyOutput(input, planSource, projectRoot, lang, reproEvi
         reasons: input.reasons,
         plan_source: planSource,
         verification_plan_id: verificationPlanId,
+        execution_status: status,
         status,
         completion_verdict: completionVerdict,
         evidence_model: evidenceModel,
@@ -1411,8 +1516,8 @@ async function createVerifyOutput(input, planSource, projectRoot, lang, reproEvi
         summary,
         ...(reproEvidence ? { repro_evidence: reproEvidence } : {}),
         ...(externalChecks.length > 0 ? { external_checks: externalChecks } : {}),
-        run_dir: toPosixPath(VERIFY_RUN_DIR),
-        manifest_path: toPosixPath(VERIFY_MANIFEST_PATH),
+        run_dir: '',
+        manifest_path: '',
         results,
     };
     return writeVerifyRunReceipts(projectRoot, output, report, sourceAnchorRisks, scopeDiffRisks, validationRatchetRisks, reproEvidence, externalChecks);
@@ -1486,19 +1591,23 @@ export async function runVerify(args, reporter, lang = 'en') {
     if (parsed.error) {
         const message = parsed.error === 'missing_reason_value'
             ? t(lang, 'cli.error.missingValue', { option: '--reason' })
-            : parsed.error === 'missing_from_classification_value'
-                ? t(lang, 'cli.error.missingValue', { option: '--from-classification' })
-                : parsed.error === 'missing_from_plan_value'
-                    ? t(lang, 'cli.error.missingValue', { option: '--from-plan' })
-                    : parsed.error === 'missing_write_plan_value'
-                        ? t(lang, 'cli.error.missingValue', { option: '--write-plan' })
-                        : parsed.error === 'missing_repro_evidence_value'
-                            ? t(lang, 'cli.error.missingValue', { option: '--repro-evidence' })
-                            : parsed.error === 'missing_external_evidence_value'
-                                ? t(lang, 'cli.error.missingValue', { option: '--external-evidence' })
-                                : parsed.error.startsWith('unexpected:')
-                                    ? t(lang, 'cli.error.unexpectedArgument', { argument: parsed.error.slice('unexpected:'.length) })
-                                    : t(lang, 'cli.error.unknownOption', { option: parsed.error });
+            : parsed.error === 'missing_parallel_value'
+                ? t(lang, 'cli.error.missingValue', { option: '--parallel' })
+                : parsed.error === 'invalid_parallel_value'
+                    ? t(lang, 'verify.error.invalidParallel')
+                    : parsed.error === 'missing_from_classification_value'
+                        ? t(lang, 'cli.error.missingValue', { option: '--from-classification' })
+                        : parsed.error === 'missing_from_plan_value'
+                            ? t(lang, 'cli.error.missingValue', { option: '--from-plan' })
+                            : parsed.error === 'missing_write_plan_value'
+                                ? t(lang, 'cli.error.missingValue', { option: '--write-plan' })
+                                : parsed.error === 'missing_repro_evidence_value'
+                                    ? t(lang, 'cli.error.missingValue', { option: '--repro-evidence' })
+                                    : parsed.error === 'missing_external_evidence_value'
+                                        ? t(lang, 'cli.error.missingValue', { option: '--external-evidence' })
+                                        : parsed.error.startsWith('unexpected:')
+                                            ? t(lang, 'cli.error.unexpectedArgument', { argument: parsed.error.slice('unexpected:'.length) })
+                                            : t(lang, 'cli.error.unknownOption', { option: parsed.error });
         printUsageError(reporter, message, 'mf verify --help', getVerifyHelp(lang), lang);
         return 1;
     }
@@ -1538,13 +1647,16 @@ export async function runVerify(args, reporter, lang = 'en') {
     let reproEvidence = null;
     let externalChecks = [];
     try {
+        if (parsed.writePlan) {
+            resolvePlanPath(projectRoot, parsed.writePlan);
+        }
         if (parsed.changed) {
             const changedInput = createInputFromChanged(projectRoot);
             input = changedInput.input;
             changedPlan = changedInput.plan;
         }
         else if (parsed.fromClassification || parsed.fromPlan) {
-            input = readInputFromPlan(projectRoot, (parsed.fromClassification ?? parsed.fromPlan));
+            input = readInputFromClassificationReport(projectRoot, (parsed.fromClassification ?? parsed.fromPlan));
         }
         else {
             input = {
@@ -1580,12 +1692,12 @@ export async function runVerify(args, reporter, lang = 'en') {
         reporter.stdout(JSON.stringify(await createPlanOnlyOutput(input, projectRoot), null, 2));
         return 0;
     }
-    const output = await createVerifyOutput(input, parsed.fromClassification ?? parsed.fromPlan ?? (parsed.changed ? 'changed' : null), projectRoot, lang, reproEvidence, externalChecks);
+    const output = await createVerifyOutput(input, parsed.fromClassification ?? parsed.fromPlan ?? (parsed.changed ? 'changed' : null), projectRoot, lang, reproEvidence, externalChecks, parsed.parallelism ?? DEFAULT_VERIFY_PARALLELISM);
     if (parsed.json) {
         reporter.stdout(JSON.stringify(output, null, 2));
     }
     else {
         reporter.stdout(renderVerifyOutput(output, lang));
     }
-    return output.status === 'passed' ? 0 : 1;
+    return output.completion_verdict.status === 'verified' ? 0 : 1;
 }

package/dist/cli/i18n/en.js

@@ -664,8 +664,12 @@ Read these files before working:
     "run.error.unsafeIntentDetail": "Use a shell-safe intent name.",
     "run.error.blockedShellBackground": 'Intent "{intent}" is blocked. {detail}',
     "run.error.blockedShellBackgroundDetail": "Shell commands must not spawn background work.",
+    "run.error.blockedLongRunningCommand": 'Intent "{intent}" is blocked. {detail}',
+    "run.error.blockedLongRunningCommandDetail": "Command argv must describe a finite one-shot command, not a development server, watcher, shell wrapper, interpreter loop, or background process.",
     "run.error.cwdOutsideProject": 'Command "{intent}" has an invalid cwd: {detail}',
     "run.error.cwdOutsideProjectDetail": "Intent cwd must stay inside the current root.",
+    "run.error.maxOutputBytes": 'Command "{intent}" has invalid max_output_bytes. {detail}',
+    "run.error.maxOutputBytesDetail": "The output limit must stay within the allowed maximum.",
     "run.error.conflictingPreviewModes": "Use either --dry-run or --plan-only, not both",
     "run.error.timedOut": 'Command "{intent}" timed out after {seconds} seconds',
     "run.error.startFailed": 'Command "{intent}" failed to start: {message}',
@@ -727,6 +731,7 @@ Read these files before working:
     "classify.source.changed": "changed files",
     "classify.source.paths": "explicit paths",
     "classify.error.missingInput": "Specify --changed or at least one path",
+    "classify.error.changed_files_unavailable": "Unable to inspect changed files with git status",
     "classify.error.write_path_outside_root": "Classification report path must stay inside the mustflow root",
     "impact.help.summary": "Report whether changed paths require a package or template version decision without modifying files.",
     "impact.help.option.changed": "Read paths from git status --short --untracked-files=all",
@@ -741,14 +746,16 @@ Read these files before working:
     "impact.label.affectedVersionSources": "Affected version sources",
     "impact.label.affectedSurfaces": "Affected surfaces",
     "impact.error.missingInput": "Specify --changed or at least one path",
+    "impact.error.changed_files_unavailable": "Unable to inspect changed files with git status",
     "verify.help.summary": "Run configured verification intents selected by required_after metadata.",
     "verify.help.option.reason": "Select the required_after reason to verify",
     "verify.help.option.fromClassification": "Read verification reasons from an mf classify report inside this repository",
-    "verify.help.option.fromPlan": "Compatibility alias for --from-classification",
+    "verify.help.option.fromPlan": "Deprecated compatibility alias for --from-classification; it still expects an mf classify report",
     "verify.help.option.changed": "Classify current Git changes and verify the matching reasons",
     "verify.help.option.writePlan": "Compatibility option that writes the changed-file classification report",
     "verify.help.option.reproEvidence": "Read structured bug-fix reproduction evidence from a repository-local JSON summary",
     "verify.help.option.externalEvidence": "Read lower-authority external CI evidence from a repository-local JSON summary",
+    "verify.help.option.parallel": "Run safe non-conflicting schedule batches with up to this many commands; default is 1",
     "verify.help.option.planOnly": "Print the verification plan without running commands; requires --json",
     "verify.help.exit.ok": "All selected verification intents passed",
     "verify.help.exit.fail": "Verification failed, was partial, was blocked, or input was invalid",
@@ -763,11 +770,13 @@ Read these files before working:
     "verify.error.planOnlyJson": "--plan-only requires --json",
     "verify.error.reproEvidenceRequiresRun": "--repro-evidence cannot be used with --plan-only",
     "verify.error.externalEvidenceRequiresRun": "--external-evidence cannot be used with --plan-only",
+    "verify.error.invalidParallel": "--parallel must be a positive integer",
     "verify.error.invalid_plan_file": "Classification report must be a readable JSON file",
     "verify.error.unsupported_plan_source": "Verification input must be an mf classify report",
     "verify.error.plan_root_mismatch": "Classification report must come from this mustflow root",
     "verify.error.missing_plan_reasons": "Classification report must include summary.validationReasons",
     "verify.error.plan_path_outside_root": "Classification report path must stay inside the mustflow root",
+    "verify.error.changed_files_unavailable": "Unable to inspect changed files with git status",
     "verify.error.invalid_repro_evidence_file": "Repro evidence must be a readable JSON summary with structured evidence fields",
     "verify.error.unsupported_repro_evidence_source": "Repro evidence input must use command repro-evidence",
     "verify.error.invalid_external_evidence_file": "External evidence must be a readable JSON summary with checks",

package/dist/cli/i18n/es.js

@@ -664,8 +664,12 @@ Lee estos archivos antes de trabajar:
     "run.error.unsafeIntentDetail": "Usa un nombre de intención seguro para shell.",
     "run.error.blockedShellBackground": 'La intención "{intent}" está bloqueada. {detail}',
     "run.error.blockedShellBackgroundDetail": "Los comandos de shell no deben iniciar trabajo en segundo plano.",
+    "run.error.blockedLongRunningCommand": 'La intención "{intent}" está bloqueada. {detail}',
+    "run.error.blockedLongRunningCommandDetail": "argv debe describir un comando finito de una sola ejecución, no un servidor de desarrollo, watcher, envoltorio de shell, bucle de intérprete o proceso en segundo plano.",
     "run.error.cwdOutsideProject": 'El comando "{intent}" tiene un cwd no válido: {detail}',
     "run.error.cwdOutsideProjectDetail": "El cwd de la intención debe permanecer dentro de la raíz actual.",
+    "run.error.maxOutputBytes": 'El comando "{intent}" tiene max_output_bytes no válido. {detail}',
+    "run.error.maxOutputBytesDetail": "El límite de salida debe permanecer dentro del máximo permitido.",
     "run.error.conflictingPreviewModes": "Usa --dry-run o --plan-only, no ambos",
     "run.error.timedOut": 'El comando "{intent}" agotó el tiempo después de {seconds} segundos',
     "run.error.startFailed": 'No se pudo iniciar el comando "{intent}": {message}',
@@ -727,6 +731,7 @@ Lee estos archivos antes de trabajar:
     "classify.source.changed": "archivos cambiados",
     "classify.source.paths": "rutas explicitas",
     "classify.error.missingInput": "Indica --changed o al menos una ruta",
+    "classify.error.changed_files_unavailable": "No se pudieron inspeccionar los archivos cambiados con git status",
     "classify.error.write_path_outside_root": "La ruta del informe de clasificacion debe permanecer dentro de la raiz mustflow",
     "impact.help.summary": "Informa si las rutas cambiadas requieren una decision de version de paquete o plantilla sin modificar archivos.",
     "impact.help.option.changed": "Lee rutas desde git status --short --untracked-files=all",
@@ -741,14 +746,16 @@ Lee estos archivos antes de trabajar:
     "impact.label.affectedVersionSources": "Fuentes de version afectadas",
     "impact.label.affectedSurfaces": "Superficies afectadas",
     "impact.error.missingInput": "Indica --changed o al menos una ruta",
+    "impact.error.changed_files_unavailable": "No se pudieron inspeccionar los archivos cambiados con git status",
     "verify.help.summary": "Ejecuta intenciones de verificación configuradas seleccionadas por metadatos required_after.",
     "verify.help.option.reason": "Selecciona la razón required_after que se debe verificar",
     "verify.help.option.fromClassification": "Lee razones de verificación desde un informe de mf classify dentro de este repositorio",
-    "verify.help.option.fromPlan": "Alias de compatibilidad para --from-classification",
+    "verify.help.option.fromPlan": "Alias de compatibilidad obsoleto para --from-classification; todavía espera un informe de mf classify",
     "verify.help.option.changed": "Clasifica los cambios actuales de Git y verifica las razones correspondientes",
     "verify.help.option.writePlan": "Opción de compatibilidad que escribe el informe de clasificación de cambios",
     "verify.help.option.reproEvidence": "Lee evidencia estructurada de reproducción de errores desde un resumen JSON local del repositorio",
     "verify.help.option.externalEvidence": "Lee evidencia de CI externa de menor autoridad desde un resumen JSON local del repositorio",
+    "verify.help.option.parallel": "Ejecuta lotes programados seguros y sin conflictos con hasta esta cantidad de comandos; el valor predeterminado es 1",
     "verify.help.option.planOnly": "Imprime el plan de verificación sin ejecutar comandos; requiere --json",
     "verify.help.exit.ok": "Todas las intenciones de verificación seleccionadas pasaron",
     "verify.help.exit.fail": "La verificación falló, fue parcial, quedó bloqueada o la entrada no fue válida",
@@ -763,11 +770,13 @@ Lee estos archivos antes de trabajar:
     "verify.error.planOnlyJson": "--plan-only requiere --json",
     "verify.error.reproEvidenceRequiresRun": "--repro-evidence no se puede usar con --plan-only",
     "verify.error.externalEvidenceRequiresRun": "--external-evidence no se puede usar con --plan-only",
+    "verify.error.invalidParallel": "--parallel debe ser un entero positivo",
     "verify.error.invalid_plan_file": "El informe de clasificación debe ser un archivo JSON legible",
     "verify.error.unsupported_plan_source": "La entrada de verificación debe ser un informe de mf classify",
     "verify.error.plan_root_mismatch": "El informe de clasificación debe provenir de esta raíz mustflow",
     "verify.error.missing_plan_reasons": "El informe de clasificación debe incluir summary.validationReasons",
     "verify.error.plan_path_outside_root": "La ruta del informe de clasificación debe permanecer dentro de la raíz mustflow",
+    "verify.error.changed_files_unavailable": "No se pudieron inspeccionar los archivos cambiados con git status",
     "verify.error.invalid_repro_evidence_file": "La evidencia de reproducción debe ser un resumen JSON legible con campos de evidencia estructurados",
     "verify.error.unsupported_repro_evidence_source": "La entrada de evidencia de reproducción debe usar command repro-evidence",
     "verify.error.invalid_external_evidence_file": "La evidencia externa debe ser un resumen JSON legible con checks",

package/dist/cli/i18n/fr.js

@@ -664,8 +664,12 @@ Lisez ces fichiers avant de travailler :
     "run.error.unsafeIntentDetail": "Utilisez un nom d’intention sûr pour le shell.",
     "run.error.blockedShellBackground": 'L’intention "{intent}" est bloquée. {detail}',
     "run.error.blockedShellBackgroundDetail": "Les commandes shell ne doivent pas lancer de travail en arrière-plan.",
+    "run.error.blockedLongRunningCommand": 'L’intention "{intent}" est bloquée. {detail}',
+    "run.error.blockedLongRunningCommandDetail": "argv doit décrire une commande ponctuelle finie, pas un serveur de développement, un watcher, un wrapper shell, une boucle d'interpréteur ou un processus en arrière-plan.",
     "run.error.cwdOutsideProject": 'La commande "{intent}" a un cwd non valide : {detail}',
     "run.error.cwdOutsideProjectDetail": "Le cwd de l’intention doit rester dans la racine actuelle.",
+    "run.error.maxOutputBytes": 'La commande "{intent}" a une valeur max_output_bytes non valide. {detail}',
+    "run.error.maxOutputBytesDetail": "La limite de sortie doit rester dans le maximum autorisé.",
     "run.error.conflictingPreviewModes": "Utilisez --dry-run ou --plan-only, pas les deux",
     "run.error.timedOut": 'La commande "{intent}" a expiré après {seconds} secondes',
     "run.error.startFailed": 'Impossible de démarrer la commande "{intent}" : {message}',
@@ -727,6 +731,7 @@ Lisez ces fichiers avant de travailler :
     "classify.source.changed": "fichiers modifies",
     "classify.source.paths": "chemins explicites",
     "classify.error.missingInput": "Indiquez --changed ou au moins un chemin",
+    "classify.error.changed_files_unavailable": "Impossible d'inspecter les fichiers modifies avec git status",
     "classify.error.write_path_outside_root": "Le chemin du rapport de classification doit rester dans la racine mustflow",
     "impact.help.summary": "Signale si les chemins modifies exigent une decision de version de paquet ou de modele sans modifier les fichiers.",
     "impact.help.option.changed": "Lire les chemins depuis git status --short --untracked-files=all",
@@ -741,14 +746,16 @@ Lisez ces fichiers avant de travailler :
     "impact.label.affectedVersionSources": "Sources de version affectees",
     "impact.label.affectedSurfaces": "Surfaces affectees",
     "impact.error.missingInput": "Indiquez --changed ou au moins un chemin",
+    "impact.error.changed_files_unavailable": "Impossible d'inspecter les fichiers modifies avec git status",
     "verify.help.summary": "Exécute les intentions de vérification configurées sélectionnées par les métadonnées required_after.",
     "verify.help.option.reason": "Sélectionne la raison required_after à vérifier",
     "verify.help.option.fromClassification": "Lit les raisons de vérification depuis un rapport mf classify dans ce dépôt",
-    "verify.help.option.fromPlan": "Alias de compatibilité pour --from-classification",
+    "verify.help.option.fromPlan": "Alias de compatibilité obsolète pour --from-classification; il attend toujours un rapport mf classify",
     "verify.help.option.changed": "Classe les changements Git actuels et vérifie les raisons correspondantes",
     "verify.help.option.writePlan": "Option de compatibilité qui écrit le rapport de classification des changements",
     "verify.help.option.reproEvidence": "Lit une preuve structurée de reproduction de bogue depuis un résumé JSON local au dépôt",
     "verify.help.option.externalEvidence": "Lit une preuve CI externe de moindre autorité depuis un résumé JSON local au dépôt",
+    "verify.help.option.parallel": "Exécute les lots planifiés sûrs et sans conflit avec au plus ce nombre de commandes ; valeur par défaut : 1",
     "verify.help.option.planOnly": "Affiche le plan de vérification sans exécuter de commandes; nécessite --json",
     "verify.help.exit.ok": "Toutes les intentions de vérification sélectionnées ont réussi",
     "verify.help.exit.fail": "La vérification a échoué, est partielle, est bloquée ou l'entrée est invalide",
@@ -763,11 +770,13 @@ Lisez ces fichiers avant de travailler :
     "verify.error.planOnlyJson": "--plan-only nécessite --json",
     "verify.error.reproEvidenceRequiresRun": "--repro-evidence ne peut pas être utilisé avec --plan-only",
     "verify.error.externalEvidenceRequiresRun": "--external-evidence ne peut pas être utilisé avec --plan-only",
+    "verify.error.invalidParallel": "--parallel doit être un entier positif",
     "verify.error.invalid_plan_file": "Le rapport de classification doit être un fichier JSON lisible",
     "verify.error.unsupported_plan_source": "L'entrée de vérification doit être un rapport mf classify",
     "verify.error.plan_root_mismatch": "Le rapport de classification doit venir de cette racine mustflow",
     "verify.error.missing_plan_reasons": "Le rapport de classification doit inclure summary.validationReasons",
     "verify.error.plan_path_outside_root": "Le chemin du rapport de classification doit rester dans la racine mustflow",
+    "verify.error.changed_files_unavailable": "Impossible d'inspecter les fichiers modifies avec git status",
     "verify.error.invalid_repro_evidence_file": "La preuve de reproduction doit être un résumé JSON lisible avec des champs de preuve structurés",
     "verify.error.unsupported_repro_evidence_source": "L'entrée de preuve de reproduction doit utiliser command repro-evidence",
     "verify.error.invalid_external_evidence_file": "La preuve externe doit être un résumé JSON lisible avec checks",