mustflow 2.22.15 → 2.22.17

package/dist/cli/commands/check.js

@@ -69,5 +69,6 @@ export function runCheck(args, reporter, lang = 'en') {
     for (const issue of issues) {
         reporter.stderr(issue);
     }
+    reporter.stderr(t(lang, 'check.result.failed', { count: issues.length }));
     return 1;
 }

package/dist/cli/commands/context.js

@@ -86,10 +86,10 @@ export async function runContext(args, reporter, lang = 'en') {
     }
     const context = getAgentContext(mustflowRoot);
     reporter.stdout(t(lang, 'context.title'));
-    reporter.stdout(`${t(lang, 'label.installed')}: ${context.installed ? 'yes' : 'no'}`);
+    reporter.stdout(`${t(lang, 'label.installed')}: ${context.installed ? t(lang, 'value.yes') : t(lang, 'value.no')}`);
     reporter.stdout(`${t(lang, 'label.mustflowRoot')}: ${context.mustflow_root}`);
-    reporter.stdout(`${t(lang, 'label.commandContract')}: ${context.command_contract.exists ? 'present' : 'missing'}`);
+    reporter.stdout(`${t(lang, 'label.commandContract')}: ${context.command_contract.exists ? t(lang, 'value.present') : t(lang, 'value.missing')}`);
     reporter.stdout(`${t(lang, 'label.runnableIntents')}: ${context.command_contract.runnable_intents.length}`);
-    reporter.stdout(`${t(lang, 'label.latestRun')}: ${context.latest_run.exists ? 'present' : 'missing'}`);
+    reporter.stdout(`${t(lang, 'label.latestRun')}: ${context.latest_run.exists ? t(lang, 'value.present') : t(lang, 'value.missing')}`);
     return 0;
 }

package/dist/cli/commands/doctor.js

@@ -223,20 +223,32 @@ function getDiagnosticLabel(id, lang) {
             return t(lang, 'doctor.diagnostic.latestRun');
     }
 }
+function getDiagnosticStatusLabel(status, lang) {
+    switch (status) {
+        case 'ok':
+            return t(lang, 'doctor.status.ok');
+        case 'warn':
+            return t(lang, 'doctor.status.warn');
+        case 'fail':
+            return t(lang, 'doctor.status.fail');
+        case 'info':
+            return t(lang, 'doctor.status.info');
+    }
+}
 function renderDoctorOutput(output, lang) {
     const lines = [];
     lines.push(t(lang, 'doctor.title'));
     lines.push(`${t(lang, 'label.mustflowRoot')}: ${output.mustflow_root}`);
-    lines.push(`${t(lang, 'label.installed')}: ${output.installed ? 'yes' : 'no'}`);
-    lines.push(`${t(lang, 'doctor.label.strict')}: ${output.strict ? 'yes' : 'no'}`);
-    lines.push(`${t(lang, 'doctor.label.check')}: ${output.check.ok ? 'passed' : 'failed'}`);
+    lines.push(`${t(lang, 'label.installed')}: ${output.installed ? t(lang, 'value.yes') : t(lang, 'value.no')}`);
+    lines.push(`${t(lang, 'doctor.label.strict')}: ${output.strict ? t(lang, 'value.yes') : t(lang, 'value.no')}`);
+    lines.push(`${t(lang, 'doctor.label.check')}: ${output.check.ok ? t(lang, 'value.passed') : t(lang, 'value.failed')}`);
     lines.push(`${t(lang, 'doctor.label.issues')}: ${output.check.issue_count}`);
-    lines.push(`${t(lang, 'label.commandContract')}: ${output.context.command_contract_exists ? 'present' : 'missing'}`);
+    lines.push(`${t(lang, 'label.commandContract')}: ${output.context.command_contract_exists ? t(lang, 'value.present') : t(lang, 'value.missing')}`);
     lines.push(`${t(lang, 'label.runnableIntents')}: ${output.context.runnable_intents.length}`);
     lines.push('', t(lang, 'doctor.section.health'));
     for (const diagnostic of output.diagnostics) {
         const action = diagnostic.action && diagnostic.status !== 'ok' ? ` (${t(lang, 'doctor.actionLabel')}: ${diagnostic.action})` : '';
-        lines.push(`- [${diagnostic.status}] ${getDiagnosticLabel(diagnostic.id, lang)}: ${diagnostic.summary}${action}`);
+        lines.push(`- [${getDiagnosticStatusLabel(diagnostic.status, lang)}] ${getDiagnosticLabel(diagnostic.id, lang)}: ${diagnostic.summary}${action}`);
     }
     if (output.check.issues.length > 0) {
         lines.push('', t(lang, 'doctor.section.issueList'));

package/dist/cli/commands/explain.js

@@ -14,11 +14,12 @@ import { explainSourceAnchor } from '../../core/source-anchor-explanation.js';
 import { checkMustflowProject } from '../lib/validation.js';
 import { readLocalCommandEffectGraph, readLocalPathSurface, } from '../lib/local-index.js';
 import { explainVerifyArgErrorMessage, explainVerifyPlanErrorMessage, getVerifyExplainOutput, parseExplainVerifyArgs, readExplainVerifyPlanReasons, renderVerifyExplainDecision, } from './explain-verify.js';
+import { createRunPlan, } from '../lib/run-plan.js';
 const EXPLAIN_SCHEMA_VERSION = '1';
 const LATEST_RUN_RECEIPT_RELATIVE_PATH = '.mustflow/state/runs/latest.json';
 export function getExplainHelp(lang = 'en') {
     return renderHelp({
-        usage: 'mf explain <topic> [target] [options] | mf explain verify --reason <event> [options] | mf explain why <target> [options]',
+        usage: 'mf explain <topic> [target] [options] | mf explain verify --reason <event> [options] | mf explain why <target> [options] | mf explain --why-blocked <intent> [options]',
         summary: t(lang, 'explain.help.summary'),
         options: [
             { label: '--json', description: t(lang, 'cli.option.json') },
@@ -33,6 +34,8 @@ export function getExplainHelp(lang = 'en') {
             'mf explain asset-optimization --json',
             'mf explain command test',
             'mf explain command lint --json',
+            'mf explain --why-blocked deploy',
+            'mf explain --why-blocked lint --json',
             'mf explain retention',
             'mf explain retention --json',
             'mf explain verify --reason code_change',
@@ -92,6 +95,43 @@ async function getCommandExplainOutput(projectRoot, commandName) {
         decision: effectGraph ? { ...decision, effectGraph } : decision,
     };
 }
+function getWhyBlockedExplainOutput(projectRoot, commandName) {
+    const contract = readCommandContract(projectRoot);
+    const plan = createRunPlan(projectRoot, contract, commandName);
+    const commandDecision = explainCommandIntent(contract, commandName, { projectRoot });
+    const blockedRunPlan = {
+        runnable: plan.ok,
+        reasonCode: plan.reasonCode,
+        detail: plan.detail,
+        status: plan.intentStatus,
+        lifecycle: plan.lifecycle,
+        runPolicy: plan.runPolicy,
+        configuredCwd: plan.configuredCwd,
+        timeoutSeconds: plan.timeoutSeconds,
+        mode: plan.mode,
+        writes: plan.writes ?? [],
+        suggestedIntentSnippet: plan.suggestedIntentSnippet,
+    };
+    const decision = {
+        ...commandDecision,
+        decision: plan.ok
+            ? `command intent "${commandName}" is not blocked for mf run`
+            : `command intent "${commandName}" is blocked for mf run`,
+        effectiveAction: plan.ok
+            ? `Run mf run ${commandName} when this intent is required for the changed behavior.`
+            : plan.suggestedIntentSnippet
+                ? 'Review the suggested command contract snippet before enabling agent execution.'
+                : commandDecision.effectiveAction,
+        blockedRunPlan,
+    };
+    return {
+        schema_version: EXPLAIN_SCHEMA_VERSION,
+        command: 'explain',
+        topic: 'why',
+        mustflow_root: projectRoot,
+        decision,
+    };
+}
 function getRetentionExplainOutput(projectRoot) {
     return {
         schema_version: EXPLAIN_SCHEMA_VERSION,
@@ -393,6 +433,13 @@ function renderExplainDecision(output, lang) {
         const latest = output.decision.latestFailure;
         lines.push('', 'Latest run failure', `- path: ${latest.path}`, `- present: ${latest.present ? t(lang, 'value.yes') : t(lang, 'value.no')}`, `- valid: ${latest.valid ? t(lang, 'value.yes') : t(lang, 'value.no')}`, `- failed: ${latest.failed ? t(lang, 'value.yes') : t(lang, 'value.no')}`, `- status: ${latest.status ?? t(lang, 'value.none')}`, `- intent: ${latest.intent ?? t(lang, 'value.none')}`, `- exit_code: ${latest.exitCode ?? t(lang, 'value.none')}`, `- error_kind: ${latest.errorKind ?? t(lang, 'value.none')}`, `- duration_ms: ${latest.durationMs ?? t(lang, 'value.none')}`, `- summary: ${latest.summary}`);
     }
+    if ('blockedRunPlan' in output.decision && output.decision.blockedRunPlan) {
+        const plan = output.decision.blockedRunPlan;
+        lines.push('', t(lang, 'explain.label.blockedRunPlan'), `- runnable: ${plan.runnable ? t(lang, 'value.yes') : t(lang, 'value.no')}`, `- reason_code: ${plan.reasonCode ?? t(lang, 'value.none')}`, `- detail: ${plan.detail ?? t(lang, 'value.none')}`, `- status: ${plan.status ?? t(lang, 'value.none')}`, `- lifecycle: ${plan.lifecycle ?? t(lang, 'value.none')}`, `- run_policy: ${plan.runPolicy ?? t(lang, 'value.none')}`, `- configured_cwd: ${plan.configuredCwd ?? t(lang, 'value.none')}`, `- timeout_seconds: ${plan.timeoutSeconds ?? t(lang, 'value.none')}`, `- mode: ${plan.mode ?? t(lang, 'value.none')}`, `- writes: ${plan.writes.join(', ') || t(lang, 'value.none')}`);
+        if (plan.suggestedIntentSnippet) {
+            lines.push('', `${t(lang, 'run.label.suggestedIntentSnippet')}:`, plan.suggestedIntentSnippet);
+        }
+    }
     if ('boundary' in output.decision) {
         lines.push('', t(lang, 'explain.label.authorityBoundary'), `- role: ${output.decision.boundary.role}`);
         if (output.decision.boundary.canDefine.length > 0) {
@@ -508,6 +555,23 @@ export async function runExplain(args, reporter, lang = 'en') {
     const json = args.includes('--json');
     const positional = args.filter((arg) => arg !== '--json');
     const [topic, targetArg, ...rest] = positional;
+    if (topic === '--why-blocked') {
+        if (!targetArg) {
+            printUsageError(reporter, t(lang, 'explain.error.missingCommand'), 'mf explain --help', getExplainHelp(lang), lang);
+            return 1;
+        }
+        if (rest.length > 0) {
+            printUsageError(reporter, t(lang, 'cli.error.unexpectedArgument', { argument: rest[0] }), 'mf explain --help', getExplainHelp(lang), lang);
+            return 1;
+        }
+        const output = getWhyBlockedExplainOutput(resolveMustflowRoot(), targetArg);
+        if (json) {
+            reporter.stdout(JSON.stringify(output, null, 2));
+            return 0;
+        }
+        reporter.stdout(renderExplainDecision(output, lang));
+        return 0;
+    }
     if (topic === 'why') {
         const projectRoot = resolveMustflowRoot();
         const output = await getWhyExplainOutput(projectRoot, targetArg, rest, lang, reporter);

package/dist/cli/commands/index.js

@@ -58,8 +58,8 @@ function renderIndexSummary(result, lang) {
         `source_anchors: ${result.source_anchor_count}`,
         `source_anchor_risk_signals: ${result.source_anchor_risk_signal_count}`,
         `index_mode: ${result.index_mode}`,
-        `reused_existing: ${result.reused_existing ? 'yes' : 'no'}`,
-        `${t(lang, 'label.wroteFiles')}: ${result.wrote_files ? 'yes' : 'no'}`,
+        `reused_existing: ${result.reused_existing ? t(lang, 'value.yes') : t(lang, 'value.no')}`,
+        `${t(lang, 'label.wroteFiles')}: ${result.wrote_files ? t(lang, 'value.yes') : t(lang, 'value.no')}`,
     ];
     if (result.dry_run) {
         lines.push(t(lang, 'index.dryRunNoFiles'));

package/dist/cli/commands/run.js

@@ -36,6 +36,9 @@ function reportRunPlanFailure(plan, reporter, lang) {
         case 'stdin_not_closed':
             message = t(lang, 'run.error.stdin', { intent: plan.intentName });
             break;
+        case 'agent_shell_requires_allow':
+            message = t(lang, 'run.error.agentShellRequiresAllow', { intent: plan.intentName });
+            break;
         case 'missing_timeout':
             message = t(lang, 'run.error.timeout', { intent: plan.intentName });
             break;
@@ -66,6 +69,12 @@ function reportRunPlanFailure(plan, reporter, lang) {
                 detail: getRunPlanDetail(plan, lang, 'run.error.cwdOutsideProjectDetail'),
             });
             break;
+        case 'invalid_test_target':
+            message = t(lang, 'run.error.invalidTestTarget', {
+                intent: plan.intentName,
+                detail: getRunPlanDetail(plan, lang, 'run.error.invalidTestTargetDetail'),
+            });
+            break;
         case 'max_output_bytes_exceeds_limit':
             message = t(lang, 'run.error.maxOutputBytes', {
                 intent: plan.intentName,
@@ -97,10 +106,16 @@ function createPlanCommandHash(plan) {
     };
     return `sha256:${createHash('sha256').update(JSON.stringify(payload)).digest('hex')}`;
 }
-function renderActiveLockConflictMessage(intentName, conflicts) {
+function renderActiveLockConflictMessage(intentName, conflicts, lang) {
     const [first] = conflicts;
-    const detail = first ? `${first.lock} conflicts with active intent ${first.conflictsWithIntent} (pid ${first.conflictsWithPid})` : 'unknown active lock conflict';
-    return `mf run ${intentName} is blocked by an active run lock: ${detail}`;
+    const detail = first
+        ? t(lang, 'run.error.activeLockConflictDetail', {
+            lock: first.lock,
+            intent: first.conflictsWithIntent,
+            pid: first.conflictsWithPid,
+        })
+        : t(lang, 'run.error.activeLockConflictUnknown');
+    return t(lang, 'run.error.activeLockConflict', { intent: intentName, detail });
 }
 export function getRunHelp(lang = 'en') {
     return renderHelp({
@@ -205,7 +220,7 @@ export async function runRun(args, reporter, lang = 'en', options = {}) {
     }
     const activeRunLock = profiler.measure('active_lock_acquire', () => acquireActiveRunLock(projectRoot, contract, intentName, { commandHash: createPlanCommandHash(plan) }));
     if (!activeRunLock.ok) {
-        reporter.stderr(renderCliError(renderActiveLockConflictMessage(intentName, activeRunLock.conflicts), 'mf run --dry-run --json', lang));
+        reporter.stderr(renderCliError(renderActiveLockConflictMessage(intentName, activeRunLock.conflicts, lang), 'mf run --dry-run --json', lang));
         writeLatestProfile(profiler, options, {
             projectRoot,
             intent: intentName,
@@ -219,6 +234,7 @@ export async function runRun(args, reporter, lang = 'en', options = {}) {
         const env = profiler.measure('environment', () => createCommandEnv(projectRoot, { policy: plan.envPolicy, allowlist: plan.envAllowlist }));
         const writeTracker = profiler.measure('write_drift_before', () => startRunWriteTracking(projectRoot, contract, intentName, {
             additionalDeclaredPaths: options.additionalDeclaredWritePaths,
+            env,
         }));
         const stdoutTailBytes = Math.min(runReceiptPolicy.stdoutTailBytes, plan.maxOutputBytes);
         const stderrTailBytes = Math.min(runReceiptPolicy.stderrTailBytes, plan.maxOutputBytes);

package/dist/cli/commands/status.js

@@ -53,7 +53,7 @@ export function runStatus(args, reporter, lang = 'en') {
         return 0;
     }
     reporter.stdout(t(lang, 'status.title'));
-    reporter.stdout(`${t(lang, 'label.installed')}: ${status.installed ? 'yes' : 'no'}`);
+    reporter.stdout(`${t(lang, 'label.installed')}: ${status.installed ? t(lang, 'value.yes') : t(lang, 'value.no')}`);
     reporter.stdout(`${t(lang, 'label.manifestLock')}: ${status.manifestLock}`);
     reporter.stdout(`${t(lang, 'label.trackedFiles')}: ${status.trackedFiles}`);
     reporter.stdout(`${t(lang, 'label.changedFiles')}: ${status.changedFiles.length}`);

package/dist/cli/commands/verify.js

@@ -11,6 +11,7 @@ import { createVerifyEvidenceModel } from '../../core/verification-evidence.js';
 import { createScopeDiffRisks } from '../../core/scope-risk.js';
 import { countValidationRatchetVerdictEffects, createValidationRatchetRisks, } from '../../core/validation-ratchet.js';
 import { finishRunWriteBatchTracking, startRunWriteBatchTracking, } from '../../core/run-write-drift.js';
+import { createCommandEnv } from '../../core/command-env.js';
 import { readCommandContract } from '../../core/config-loading.js';
 import { evaluateCommandPreconditions, } from '../../core/command-preconditions.js';
 import { DEFAULT_VERIFY_PARALLELISM, parseVerifyArgs, resolveVerifyParallelism, } from './verify/args.js';
@@ -198,7 +199,7 @@ async function runVerificationEntriesInParallelChunks(projectRoot, entries, para
     const results = [];
     for (let index = 0; index < entries.length; index += parallelism) {
         const chunk = entries.slice(index, index + parallelism);
-        const batchTracker = startRunWriteBatchTracking(projectRoot);
+        const batchTracker = startRunWriteBatchTracking(projectRoot, createCommandEnv(projectRoot, { policy: 'minimal', allowlist: [] }));
         const chunkResults = await Promise.all(chunk.map((entry) => runVerificationIntent(entry.intent, lang, verificationPlanId, correlationId, scheduledTestTargets.get(entry.intent) ?? [])));
         const writeDriftByIntent = finishRunWriteBatchTracking(batchTracker, chunk.map((entry) => ({
             intentName: entry.intent,
@@ -919,18 +920,24 @@ function renderVerifyOutput(output, lang) {
         `${t(lang, 'verify.label.reason')}: ${output.reason}`,
         `${t(lang, 'verify.label.planSource')}: ${output.plan_source ?? t(lang, 'value.none')}`,
         `${t(lang, 'verify.label.status')}: ${output.status}`,
-        `completion verdict: ${output.completion_verdict.status} (${output.completion_verdict.primary_reason})`,
-        `matched: ${output.summary.matched}`,
-        `ran: ${output.summary.ran}`,
-        `passed: ${output.summary.passed}`,
-        `failed: ${output.summary.failed}`,
-        `skipped: ${output.summary.skipped}`,
+        `${t(lang, 'verify.label.completionVerdict')}: ${output.completion_verdict.status} (${output.completion_verdict.primary_reason})`,
+        `${t(lang, 'verify.label.matched')}: ${output.summary.matched}`,
+        `${t(lang, 'verify.label.ran')}: ${output.summary.ran}`,
+        `${t(lang, 'verify.label.passed')}: ${output.summary.passed}`,
+        `${t(lang, 'verify.label.failed')}: ${output.summary.failed}`,
+        `${t(lang, 'verify.label.skipped')}: ${output.summary.skipped}`,
     ];
     if (output.parallelism) {
         const cpuAvailable = output.parallelism.cpu_available ?? t(lang, 'value.none');
-        lines.push(`parallelism: requested ${output.parallelism.requested}, effective ${output.parallelism.effective}, repository max ${output.parallelism.repository_max}, cpu available ${cpuAvailable}, mode ${output.parallelism.mode}`);
+        lines.push(`${t(lang, 'verify.label.parallelism')}: ${t(lang, 'verify.parallelism.summary', {
+            requested: output.parallelism.requested,
+            effective: output.parallelism.effective,
+            repositoryMax: output.parallelism.repository_max,
+            cpuAvailable,
+            mode: output.parallelism.mode,
+        })}`);
         if (output.parallelism.capped) {
-            lines.push(`parallelism note: ${output.parallelism.note}`);
+            lines.push(`${t(lang, 'verify.label.parallelismNote')}: ${output.parallelism.note}`);
         }
     }
     lines.push('', t(lang, 'verify.label.results'));

package/dist/cli/i18n/en.js

@@ -20,6 +20,10 @@ export const enMessages = {
     "value.yes": "yes",
     "value.no": "no",
     "value.none": "none",
+    "value.present": "present",
+    "value.missing": "missing",
+    "value.passed": "passed",
+    "value.failed": "failed",
     "command.adapters.summary": "Inspect host adapter compatibility without generating adapter files",
     "command.init.summary": "Copy the default mustflow agent workflow",
     "command.check.summary": "Validate mustflow files",
@@ -54,6 +58,7 @@ export const enMessages = {
     "check.help.exit.fail": "Validation failed or the command received invalid input",
     "check.result.passed": "mustflow check passed",
     "check.result.strictPassed": "mustflow strict check passed",
+    "check.result.failed": "mustflow check failed: {count} issue(s) found.",
     "contractLint.help.summary": "Inspect .mustflow/config/commands.toml for command-contract errors and warnings.",
     "contractLint.help.option.coverage": "Also report required_after coverage for change-classification reasons",
     "contractLint.help.option.suggest": "Suggest non-runnable intent snippets from package.json, Makefile, or justfile",
@@ -484,6 +489,10 @@ export const enMessages = {
     "doctor.section.issueList": "Issue list:",
     "doctor.section.suggestedCommands": "Suggested commands:",
     "doctor.actionLabel": "run",
+    "doctor.status.ok": "ok",
+    "doctor.status.warn": "warn",
+    "doctor.status.fail": "fail",
+    "doctor.status.info": "info",
     "doctor.diagnostic.install": "Install",
     "doctor.diagnostic.validation": "Validation",
     "doctor.diagnostic.skillRoutes": "Skill routes",
@@ -662,6 +671,7 @@ Read these files before working:
     "run.error.lifecycleNotOneshot": 'Refused: command "{intent}" has lifecycle = "{lifecycle}"; mf run only executes oneshot commands',
     "run.error.runPolicy": 'Command "{intent}" requires run_policy = "agent_allowed" for mf run',
     "run.error.stdin": 'Command "{intent}" must set stdin = "closed"',
+    "run.error.agentShellRequiresAllow": 'Command "{intent}" must set allow_shell = true when mode = "shell"',
     "run.error.timeout": 'Command "{intent}" must define timeout_seconds',
     "run.error.commandSource": 'Command "{intent}" must define argv or mode = "shell" with cmd',
     "run.error.unsafeIntent": 'Intent "{intent}" has an unsafe name. {detail}',
@@ -672,6 +682,8 @@ Read these files before working:
     "run.error.blockedLongRunningCommandDetail": "Command argv must describe a finite one-shot command, not a development server, watcher, shell wrapper, interpreter loop, or background process.",
     "run.error.cwdOutsideProject": 'Command "{intent}" has an invalid cwd: {detail}',
     "run.error.cwdOutsideProjectDetail": "Intent cwd must stay inside the current root.",
+    "run.error.invalidTestTarget": 'Command "{intent}" received an invalid test target. {detail}',
+    "run.error.invalidTestTargetDetail": "Test targets must be relative file paths and cannot start with '-'.",
     "run.error.maxOutputBytes": 'Command "{intent}" has invalid max_output_bytes. {detail}',
     "run.error.maxOutputBytesDetail": "The output limit must stay within the allowed maximum.",
     "run.error.conflictingPreviewModes": "Use either --dry-run or --plan-only, not both",
@@ -680,6 +692,9 @@ Read these files before working:
     "run.error.timedOut": 'Command "{intent}" timed out after {seconds} seconds',
     "run.error.outputLimitExceeded": 'Command "{intent}" exceeded max_output_bytes: {message}',
     "run.error.startFailed": 'Command "{intent}" failed to start: {message}',
+    "run.error.activeLockConflict": "mf run {intent} is blocked by an active run lock: {detail}",
+    "run.error.activeLockConflictDetail": "{lock} conflicts with active intent {intent} (pid {pid})",
+    "run.error.activeLockConflictUnknown": "unknown active lock conflict",
     "search.help.summary": "Search the local SQLite index for the mustflow workflow.",
     "search.help.option.limit": "Set the number of results to print. Default: 10, max: 50",
     "search.help.option.scope": "Select indexed workflow data, source anchors, or both. Default: workflow",
@@ -771,6 +786,15 @@ Read these files before working:
     "verify.label.planSource": "Plan source",
     "verify.label.status": "Status",
     "verify.label.results": "Results",
+    "verify.label.completionVerdict": "Completion verdict",
+    "verify.label.matched": "Matched",
+    "verify.label.ran": "Ran",
+    "verify.label.passed": "Passed",
+    "verify.label.failed": "Failed",
+    "verify.label.skipped": "Skipped",
+    "verify.label.parallelism": "Parallelism",
+    "verify.label.parallelismNote": "Parallelism note",
+    "verify.parallelism.summary": "requested {requested}, effective {effective}, repository max {repositoryMax}, CPU available {cpuAvailable}, mode {mode}",
     "verify.error.missingReason": "Missing verification reason",
     "verify.error.conflictingInputs": "Use only one of --reason, --from-classification, --from-plan, or --changed",
     "verify.error.writePlanRequiresChanged": "--write-plan requires --changed",
@@ -810,6 +834,7 @@ Read these files before working:
     "explain.label.publicSurface": "Public surface",
     "explain.label.validationReasons": "Validation reasons",
     "explain.label.affectedContracts": "Affected contracts",
+    "explain.label.blockedRunPlan": "Blocked run plan",
     "explain.error.missingTopic": "Missing explain topic",
     "explain.error.missingCommand": "Missing command intent",
     "explain.error.missingSkill": "Missing skill id",

package/dist/cli/i18n/es.js

@@ -20,6 +20,10 @@ export const esMessages = {
     "value.yes": "sí",
     "value.no": "no",
     "value.none": "ninguno",
+    "value.present": "presente",
+    "value.missing": "faltante",
+    "value.passed": "superado",
+    "value.failed": "fallido",
     "command.adapters.summary": "Inspecciona compatibilidad de adaptadores sin generar archivos",
     "command.init.summary": "Copia el flujo de trabajo de agente mustflow predeterminado",
     "command.check.summary": "Valida los archivos mustflow",
@@ -54,6 +58,7 @@ export const esMessages = {
     "check.help.exit.fail": "La validación falló o el comando recibió una entrada no válida",
     "check.result.passed": "comprobacion mustflow superada",
     "check.result.strictPassed": "comprobacion estricta de mustflow superada",
+    "check.result.failed": "comprobacion mustflow fallida: se encontraron {count} problema(s).",
     "contractLint.help.summary": "Inspecciona .mustflow/config/commands.toml para encontrar errores y advertencias del contrato de comandos.",
     "contractLint.help.option.coverage": "También informa cobertura required_after para razones de clasificación de cambios",
     "contractLint.help.option.suggest": "Sugiere fragmentos de intent no ejecutables desde package.json, Makefile o justfile",
@@ -484,6 +489,10 @@ export const esMessages = {
     "doctor.section.issueList": "Lista de problemas:",
     "doctor.section.suggestedCommands": "Comandos sugeridos:",
     "doctor.actionLabel": "ejecutar",
+    "doctor.status.ok": "ok",
+    "doctor.status.warn": "advertencia",
+    "doctor.status.fail": "fallo",
+    "doctor.status.info": "info",
     "doctor.diagnostic.install": "Instalación",
     "doctor.diagnostic.validation": "Validación",
     "doctor.diagnostic.skillRoutes": "Rutas de skills",
@@ -662,6 +671,7 @@ Lee estos archivos antes de trabajar:
     "run.error.lifecycleNotOneshot": 'Rechazado: el comando "{intent}" tiene lifecycle = "{lifecycle}"; mf run sólo ejecuta comandos oneshot',
     "run.error.runPolicy": 'El comando "{intent}" requiere run_policy = "agent_allowed" para mf run',
     "run.error.stdin": 'El comando "{intent}" debe establecer stdin = "closed"',
+    "run.error.agentShellRequiresAllow": 'El comando "{intent}" debe establecer allow_shell = true cuando mode = "shell"',
     "run.error.timeout": 'El comando "{intent}" debe definir timeout_seconds',
     "run.error.commandSource": 'El comando "{intent}" debe definir argv o mode = "shell" con cmd',
     "run.error.unsafeIntent": 'La intención "{intent}" tiene un nombre no seguro. {detail}',
@@ -672,6 +682,8 @@ Lee estos archivos antes de trabajar:
     "run.error.blockedLongRunningCommandDetail": "argv debe describir un comando finito de una sola ejecución, no un servidor de desarrollo, watcher, envoltorio de shell, bucle de intérprete o proceso en segundo plano.",
     "run.error.cwdOutsideProject": 'El comando "{intent}" tiene un cwd no válido: {detail}',
     "run.error.cwdOutsideProjectDetail": "El cwd de la intención debe permanecer dentro de la raíz actual.",
+    "run.error.invalidTestTarget": 'El comando "{intent}" recibió un objetivo de prueba no válido. {detail}',
+    "run.error.invalidTestTargetDetail": "Los objetivos de prueba deben ser rutas relativas y no pueden empezar con '-'.",
     "run.error.maxOutputBytes": 'El comando "{intent}" tiene max_output_bytes no válido. {detail}',
     "run.error.maxOutputBytesDetail": "El límite de salida debe permanecer dentro del máximo permitido.",
     "run.error.conflictingPreviewModes": "Usa --dry-run o --plan-only, no ambos",
@@ -680,6 +692,9 @@ Lee estos archivos antes de trabajar:
     "run.error.timedOut": 'El comando "{intent}" agotó el tiempo después de {seconds} segundos',
     "run.error.outputLimitExceeded": 'El comando "{intent}" superó max_output_bytes: {message}',
     "run.error.startFailed": 'No se pudo iniciar el comando "{intent}": {message}',
+    "run.error.activeLockConflict": "mf run {intent} está bloqueado por un bloqueo de ejecución activo: {detail}",
+    "run.error.activeLockConflictDetail": "{lock} entra en conflicto con la intención activa {intent} (pid {pid})",
+    "run.error.activeLockConflictUnknown": "conflicto de bloqueo de ejecución activo desconocido",
     "search.help.summary": "Busca en el índice SQLite local del flujo de trabajo mustflow.",
     "search.help.option.limit": "Define la cantidad de resultados que se imprimen. Predeterminado: 10, máximo: 50",
     "search.help.option.scope": "Selecciona datos del flujo de trabajo indexados, anchors de código fuente o ambos. Predeterminado: workflow",
@@ -771,6 +786,15 @@ Lee estos archivos antes de trabajar:
     "verify.label.planSource": "Fuente del plan",
     "verify.label.status": "Estado",
     "verify.label.results": "Resultados",
+    "verify.label.completionVerdict": "Veredicto de finalización",
+    "verify.label.matched": "Coincidencias",
+    "verify.label.ran": "Ejecutadas",
+    "verify.label.passed": "Superadas",
+    "verify.label.failed": "Fallidas",
+    "verify.label.skipped": "Omitidas",
+    "verify.label.parallelism": "Paralelismo",
+    "verify.label.parallelismNote": "Nota de paralelismo",
+    "verify.parallelism.summary": "solicitado {requested}, efectivo {effective}, máximo del repositorio {repositoryMax}, CPU disponible {cpuAvailable}, modo {mode}",
     "verify.error.missingReason": "Falta la razón de verificación",
     "verify.error.conflictingInputs": "Usa solo uno de --reason, --from-classification, --from-plan o --changed",
     "verify.error.writePlanRequiresChanged": "--write-plan requiere --changed",
@@ -810,6 +834,7 @@ Lee estos archivos antes de trabajar:
     "explain.label.publicSurface": "Superficie publica",
     "explain.label.validationReasons": "Razones de validacion",
     "explain.label.affectedContracts": "Contratos afectados",
+    "explain.label.blockedRunPlan": "Plan de ejecución bloqueado",
     "explain.error.missingTopic": "Falta el tema de explicación",
     "explain.error.missingCommand": "Falta la intención de comando",
     "explain.error.missingSkill": "Falta el id de skill",

package/dist/cli/i18n/fr.js

@@ -20,6 +20,10 @@ export const frMessages = {
     "value.yes": "oui",
     "value.no": "non",
     "value.none": "aucun",
+    "value.present": "présent",
+    "value.missing": "manquant",
+    "value.passed": "réussi",
+    "value.failed": "échoué",
     "command.adapters.summary": "Inspecte la compatibilité des adaptateurs sans générer de fichiers",
     "command.init.summary": "Copie le flux de travail d'agent mustflow par défaut",
     "command.check.summary": "Valide les fichiers mustflow",
@@ -54,6 +58,7 @@ export const frMessages = {
     "check.help.exit.fail": "La validation a échoué ou la commande a reçu une entrée non valide",
     "check.result.passed": "vérification mustflow réussie",
     "check.result.strictPassed": "vérification stricte mustflow réussie",
+    "check.result.failed": "vérification mustflow échouée : {count} problème(s) trouvé(s).",
     "contractLint.help.summary": "Inspecte .mustflow/config/commands.toml pour trouver les erreurs et avertissements du contrat de commandes.",
     "contractLint.help.option.coverage": "Signale aussi la couverture required_after des raisons de classification",
     "contractLint.help.option.suggest": "Suggère des fragments d'intent non exécutables depuis package.json, Makefile ou justfile",
@@ -484,6 +489,10 @@ export const frMessages = {
     "doctor.section.issueList": "Liste des problèmes :",
     "doctor.section.suggestedCommands": "Commandes suggérées :",
     "doctor.actionLabel": "exécuter",
+    "doctor.status.ok": "ok",
+    "doctor.status.warn": "alerte",
+    "doctor.status.fail": "échec",
+    "doctor.status.info": "info",
     "doctor.diagnostic.install": "Installation",
     "doctor.diagnostic.validation": "Validation",
     "doctor.diagnostic.skillRoutes": "Routage des skills",
@@ -662,6 +671,7 @@ Lisez ces fichiers avant de travailler :
     "run.error.lifecycleNotOneshot": 'Refusé : la commande "{intent}" a lifecycle = "{lifecycle}" ; mf run exécute uniquement les commandes oneshot',
     "run.error.runPolicy": 'La commande "{intent}" nécessite run_policy = "agent_allowed" pour mf run',
     "run.error.stdin": 'La commande "{intent}" doit définir stdin = "closed"',
+    "run.error.agentShellRequiresAllow": 'La commande "{intent}" doit définir allow_shell = true lorsque mode = "shell"',
     "run.error.timeout": 'La commande "{intent}" doit définir timeout_seconds',
     "run.error.commandSource": 'La commande "{intent}" doit définir argv ou mode = "shell" avec cmd',
     "run.error.unsafeIntent": 'L’intention "{intent}" a un nom non sûr. {detail}',
@@ -672,6 +682,8 @@ Lisez ces fichiers avant de travailler :
     "run.error.blockedLongRunningCommandDetail": "argv doit décrire une commande ponctuelle finie, pas un serveur de développement, un watcher, un wrapper shell, une boucle d'interpréteur ou un processus en arrière-plan.",
     "run.error.cwdOutsideProject": 'La commande "{intent}" a un cwd non valide : {detail}',
     "run.error.cwdOutsideProjectDetail": "Le cwd de l’intention doit rester dans la racine actuelle.",
+    "run.error.invalidTestTarget": 'La commande "{intent}" a reçu une cible de test invalide. {detail}',
+    "run.error.invalidTestTargetDetail": "Les cibles de test doivent être des chemins relatifs et ne peuvent pas commencer par '-'.",
     "run.error.maxOutputBytes": 'La commande "{intent}" a une valeur max_output_bytes non valide. {detail}',
     "run.error.maxOutputBytesDetail": "La limite de sortie doit rester dans le maximum autorisé.",
     "run.error.conflictingPreviewModes": "Utilisez --dry-run ou --plan-only, pas les deux",
@@ -680,6 +692,9 @@ Lisez ces fichiers avant de travailler :
     "run.error.timedOut": 'La commande "{intent}" a expiré après {seconds} secondes',
     "run.error.outputLimitExceeded": 'La commande "{intent}" a dépassé max_output_bytes : {message}',
     "run.error.startFailed": 'Impossible de démarrer la commande "{intent}" : {message}',
+    "run.error.activeLockConflict": "mf run {intent} est bloqué par un verrou d'exécution actif : {detail}",
+    "run.error.activeLockConflictDetail": "{lock} entre en conflit avec l'intention active {intent} (pid {pid})",
+    "run.error.activeLockConflictUnknown": "conflit de verrou d'exécution actif inconnu",
     "search.help.summary": "Recherche dans l'index SQLite local du flux de travail mustflow.",
     "search.help.option.limit": "Définit le nombre de résultats à imprimer. Par défaut : 10, max : 50",
     "search.help.option.scope": "Sélectionne les données de workflow indexées, les anchors de source, ou les deux. Par défaut : workflow",
@@ -771,6 +786,15 @@ Lisez ces fichiers avant de travailler :
     "verify.label.planSource": "Source du plan",
     "verify.label.status": "État",
     "verify.label.results": "Résultats",
+    "verify.label.completionVerdict": "Verdict de complétion",
+    "verify.label.matched": "Correspondants",
+    "verify.label.ran": "Exécutés",
+    "verify.label.passed": "Réussis",
+    "verify.label.failed": "Échoués",
+    "verify.label.skipped": "Ignorés",
+    "verify.label.parallelism": "Parallélisme",
+    "verify.label.parallelismNote": "Note de parallélisme",
+    "verify.parallelism.summary": "demandé {requested}, effectif {effective}, maximum du dépôt {repositoryMax}, CPU disponible {cpuAvailable}, mode {mode}",
     "verify.error.missingReason": "Raison de vérification manquante",
     "verify.error.conflictingInputs": "Utilisez un seul de --reason, --from-classification, --from-plan ou --changed",
     "verify.error.writePlanRequiresChanged": "--write-plan nécessite --changed",
@@ -810,6 +834,7 @@ Lisez ces fichiers avant de travailler :
     "explain.label.publicSurface": "Surface publique",
     "explain.label.validationReasons": "Raisons de validation",
     "explain.label.affectedContracts": "Contrats affectes",
+    "explain.label.blockedRunPlan": "Plan d'exécution bloqué",
     "explain.error.missingTopic": "Sujet d'explication manquant",
     "explain.error.missingCommand": "Intention de commande manquante",
     "explain.error.missingSkill": "Identifiant de skill manquant",