mustflow 2.31.0 → 2.37.1

package/dist/cli/lib/validation/frontmatter.js

@@ -0,0 +1,75 @@
+import { SKILL_SECTION_MARKER_PATTERN } from './constants.js';
+export function readSkillSectionIds(content) {
+    return new Set([...content.matchAll(SKILL_SECTION_MARKER_PATTERN)].map((match) => match[1]));
+}
+function findFrontmatterEnd(content) {
+    const match = /\n---(?:\r?\n|$)/u.exec(content.slice(3));
+    return match ? 3 + match.index : -1;
+}
+export function parseSimpleFrontmatter(content) {
+    if (!content.startsWith('---')) {
+        return {};
+    }
+    const end = findFrontmatterEnd(content);
+    if (end === -1) {
+        return {};
+    }
+    const frontmatter = {};
+    for (const line of content.slice(3, end).split(/\r?\n/)) {
+        const separatorIndex = line.indexOf(':');
+        if (separatorIndex === -1) {
+            continue;
+        }
+        const key = line.slice(0, separatorIndex).trim();
+        const value = line.slice(separatorIndex + 1).trim().replace(/^["']|["']$/g, '');
+        if (key.length > 0 && value.length > 0) {
+            frontmatter[key] = value;
+        }
+    }
+    return frontmatter;
+}
+function readFrontmatterLines(content) {
+    if (!content.startsWith('---')) {
+        return [];
+    }
+    const end = findFrontmatterEnd(content);
+    if (end === -1) {
+        return [];
+    }
+    return content
+        .slice(3, end)
+        .split(/\n/u)
+        .map((line) => line.replace(/\r$/u, ''));
+}
+function stripScalarMarkers(value) {
+    return value.trim().replace(/^["'`]|["'`]$/g, '').trim();
+}
+export function readFrontmatterList(content, key) {
+    const lines = readFrontmatterLines(content);
+    const values = [];
+    let keyIndent;
+    for (const line of lines) {
+        const keyMatch = line.match(new RegExp(`^(\\s*)${key}:\\s*$`, 'u'));
+        if (keyIndent === undefined) {
+            if (keyMatch) {
+                keyIndent = keyMatch[1].length;
+            }
+            continue;
+        }
+        if (line.trim().length === 0) {
+            continue;
+        }
+        const lineIndent = line.match(/^\s*/u)?.[0].length ?? 0;
+        const itemMatch = line.match(/^\s*-\s+(.+)$/u);
+        if (lineIndent <= keyIndent && !itemMatch) {
+            break;
+        }
+        if (itemMatch) {
+            const value = stripScalarMarkers(itemMatch[1]);
+            if (value.length > 0) {
+                values.push(value);
+            }
+        }
+    }
+    return values;
+}

package/dist/cli/lib/validation/index.js

@@ -13,13 +13,15 @@ import { readGitChangedFiles } from '../git-changes.js';
 import { inspectManifestLock } from '../manifest-lock.js';
 import { generateRepoMap } from '../repo-map.js';
 import { parseTomlText, readMustflowTomlFile } from '../toml.js';
-import { MUSTFLOW_JSON_MAX_BYTES, readMustflowTextFileResult, } from '../mustflow-read.js';
+import { MUSTFLOW_JSON_MAX_BYTES } from '../mustflow-read.js';
 import { getContractModelDefinitions, validateCandidateContractModelConfig, } from '../../../core/contract-models.js';
 import { VERSIONING_CONFIG_PATH, detectVersionSourcePaths, readDeclaredVersionSources, releaseVersioningIsEnabled, } from '../../../core/version-sources.js';
 import { normalizeTechnologyPreferencesTable, TECHNOLOGY_CONFIG_RELATIVE_PATH, } from '../../../core/technology-preferences.js';
-import { ALLOWED_APPROVAL_ACTIONS, ALLOWED_APPROVAL_GATES, ALLOWED_BUDGET_LIMIT_ACTIONS, ALLOWED_CAPABILITY_STATES, ALLOWED_COMMIT_MESSAGE_STYLES, ALLOWED_COMPACTION_CATEGORIES, ALLOWED_COMPACTION_LONG_LIMIT_ACTIONS, ALLOWED_COMPACTION_RAW_LIMIT_ACTIONS, ALLOWED_COMPACTION_STATE_STORES, ALLOWED_COMPACTION_STRATEGIES, ALLOWED_CONTEXT_AUTHORITIES, ALLOWED_CONTEXT_DOCUMENT_AUTHORITIES, ALLOWED_CONTEXT_READ_POLICIES, ALLOWED_HANDOFF_MODES, ALLOWED_HARNESS_FRESH_CONTEXT_MODES, ALLOWED_HARNESS_MODES, ALLOWED_HARNESS_PHASES, ALLOWED_ISOLATION_PREFERENCES, ALLOWED_MAP_MODES, ALLOWED_MAP_PRIVACY_LEVELS, ALLOWED_PROJECT_PROFILES, ALLOWED_REPO_MAP_DEGRADED_VALUES, ALLOWED_REPO_MAP_GIT_LS_FILES_STATUSES, ALLOWED_PROMPT_CACHE_STABLE_PREFIX_POLICIES, ALLOWED_PROMPT_CACHE_STRATEGIES, ALLOWED_PROMPT_CACHE_TASK_READ_POLICIES, ALLOWED_REFRESH_CHECKPOINTS, ALLOWED_REFRESH_METHODS, ALLOWED_REFRESH_MODES, ALLOWED_REFRESH_STATE_STORES, ALLOWED_SKILL_RESOURCE_TYPES, ALLOWED_SKILL_ROUTE_CATEGORIES, ALLOWED_SKILL_ROUTE_PROFILES, ALLOWED_SKILL_ROUTE_TYPES, ALLOWED_STALE_TEST_ACTIONS, ALLOWED_TEST_AUTHORING_POLICIES, ALLOWED_TEST_DELETION_REASONS, ALLOWED_TESTING_POLICIES, ALLOWED_TRANSLATION_POLICIES, ALLOWED_VERIFICATION_SELECTION_STRATEGIES, ALLOWED_VERSION_SOURCE_AUTHORITIES, ALLOWED_VERSION_SOURCE_KINDS, CAPABILITY_BOOLEAN_FIELDS, CAPABILITY_STATE_FIELDS, CONTEXT_AUTHORITY_DRIFT_PATTERNS, DESIGN_TOKEN_DEFINITION_PATTERNS, FORBIDDEN_RELEASE_VERSIONING_CONTRACT_FIELDS, FORBIDDEN_TEST_DELETION_REASONS, FORBIDDEN_VERIFICATION_SELECTION_AUTHORITY_FIELDS, LOCAL_ABSOLUTE_PATH_PATTERNS, LOCAL_TASK_STATE_ROOTS, RAW_COMMAND_FENCE_PATTERN, RELEASE_VERSIONING_BOOLEAN_FIELDS, REPO_MAP_DOC_ID, REPO_MAP_GENERATOR, REPO_MAP_LIFECYCLE, REPO_MAP_PRIVACY_MODE, REPO_MAP_RELATIVE_ROOT, REPO_MAP_REMOTE_OR_BRANCH_PATTERNS, REPO_MAP_SOURCE_FINGERPRINT_PATTERN, REPO_MAP_SOURCE_POLICY, REQUIRED_AGENT_LOOP_PHASES, REQUIRED_SKILL_SCRIPT_RUN_POLICY, REQUIRED_SKILL_SECTION_IDS, ROUTER_INDEX_FILES, ROUTER_INDEX_PROCEDURE_SECTION_PATTERN, SECRET_LIKE_CONTEXT_PATTERNS, SKILL_COMMAND_PERMISSION_CLAIM_PATTERNS, SKILL_INDEX_PATH, SKILL_PACK_ID_PATTERN, SKILL_RESOURCE_MANIFEST, SKILL_RESOURCE_ROOTS, SKILL_RESOURCE_TYPE_BY_ROOT, SKILL_ROUTE_CATEGORY_LABELS, SKILL_ROUTES_METADATA_PATH, SKILL_SECTION_MARKER_PATTERN, SUPPORTED_SKILL_SCHEMA_VERSION, TEST_AUTHORING_BOOLEAN_FIELDS, VERIFICATION_SELECTION_BOOLEAN_FIELDS, VOLATILE_REPO_MAP_PATTERNS } from './constants.js';
+import { ALLOWED_APPROVAL_ACTIONS, ALLOWED_APPROVAL_GATES, ALLOWED_BUDGET_LIMIT_ACTIONS, ALLOWED_CAPABILITY_STATES, ALLOWED_COMMIT_MESSAGE_STYLES, ALLOWED_COMPACTION_CATEGORIES, ALLOWED_COMPACTION_LONG_LIMIT_ACTIONS, ALLOWED_COMPACTION_RAW_LIMIT_ACTIONS, ALLOWED_COMPACTION_STATE_STORES, ALLOWED_COMPACTION_STRATEGIES, ALLOWED_CONTEXT_AUTHORITIES, ALLOWED_CONTEXT_DOCUMENT_AUTHORITIES, ALLOWED_CONTEXT_READ_POLICIES, ALLOWED_HANDOFF_MODES, ALLOWED_HARNESS_FRESH_CONTEXT_MODES, ALLOWED_HARNESS_MODES, ALLOWED_HARNESS_PHASES, ALLOWED_ISOLATION_PREFERENCES, ALLOWED_MAP_MODES, ALLOWED_MAP_PRIVACY_LEVELS, ALLOWED_PROJECT_PROFILES, ALLOWED_REPO_MAP_DEGRADED_VALUES, ALLOWED_REPO_MAP_GIT_LS_FILES_STATUSES, ALLOWED_PROMPT_CACHE_STABLE_PREFIX_POLICIES, ALLOWED_PROMPT_CACHE_STRATEGIES, ALLOWED_PROMPT_CACHE_TASK_READ_POLICIES, ALLOWED_REFRESH_CHECKPOINTS, ALLOWED_REFRESH_METHODS, ALLOWED_REFRESH_MODES, ALLOWED_REFRESH_STATE_STORES, ALLOWED_SKILL_RESOURCE_TYPES, ALLOWED_SKILL_ROUTE_CATEGORIES, ALLOWED_SKILL_ROUTE_PROFILES, ALLOWED_SKILL_ROUTE_TYPES, ALLOWED_STALE_TEST_ACTIONS, ALLOWED_TEST_AUTHORING_POLICIES, ALLOWED_TEST_DELETION_REASONS, ALLOWED_TESTING_POLICIES, ALLOWED_TRANSLATION_POLICIES, ALLOWED_VERIFICATION_SELECTION_STRATEGIES, ALLOWED_VERSION_SOURCE_AUTHORITIES, ALLOWED_VERSION_SOURCE_KINDS, CAPABILITY_BOOLEAN_FIELDS, CAPABILITY_STATE_FIELDS, CONTEXT_AUTHORITY_DRIFT_PATTERNS, DESIGN_TOKEN_DEFINITION_PATTERNS, FORBIDDEN_RELEASE_VERSIONING_CONTRACT_FIELDS, FORBIDDEN_TEST_DELETION_REASONS, FORBIDDEN_VERIFICATION_SELECTION_AUTHORITY_FIELDS, LOCAL_ABSOLUTE_PATH_PATTERNS, LOCAL_TASK_STATE_ROOTS, RAW_COMMAND_FENCE_PATTERN, RELEASE_VERSIONING_BOOLEAN_FIELDS, REPO_MAP_DOC_ID, REPO_MAP_GENERATOR, REPO_MAP_LIFECYCLE, REPO_MAP_PRIVACY_MODE, REPO_MAP_RELATIVE_ROOT, REPO_MAP_REMOTE_OR_BRANCH_PATTERNS, REPO_MAP_SOURCE_FINGERPRINT_PATTERN, REPO_MAP_SOURCE_POLICY, REQUIRED_AGENT_LOOP_PHASES, REQUIRED_SKILL_SCRIPT_RUN_POLICY, REQUIRED_SKILL_SECTION_IDS, ROUTER_INDEX_FILES, ROUTER_INDEX_PROCEDURE_SECTION_PATTERN, SECRET_LIKE_CONTEXT_PATTERNS, SKILL_COMMAND_PERMISSION_CLAIM_PATTERNS, SKILL_INDEX_PATH, SKILL_PACK_ID_PATTERN, SKILL_RESOURCE_MANIFEST, SKILL_RESOURCE_ROOTS, SKILL_RESOURCE_TYPE_BY_ROOT, SKILL_ROUTE_CATEGORY_LABELS, SKILL_ROUTES_METADATA_PATH, SUPPORTED_SKILL_SCHEMA_VERSION, TEST_AUTHORING_BOOLEAN_FIELDS, VERIFICATION_SELECTION_BOOLEAN_FIELDS, VOLATILE_REPO_MAP_PATTERNS } from './constants.js';
 import { hasOwn, isPositiveInteger, isSafeRelativePath, pushStrictIssue, pushStrictWarning, validateAllowedStringField, validateBooleanField, validateExactStringArrayField, validateNestedTable, validatePathArrayField, validatePathField, validatePositiveIntegerField, validateRequiredFiles, validateRequiredPathField, validateRequiredStringField, validateStringArrayField, validateStringArrayMembers, validateStringField, validateTable, validateToml, validateWorkspaceRoots } from './primitives.js';
 import { isConfiguredCommandIntent, isDeclaredCommandIntent } from './command-intents.js';
+import { parseSimpleFrontmatter, readFrontmatterList, readSkillSectionIds } from './frontmatter.js';
+import { readStrictMustflowText } from './safe-read.js';
 import { validateStrictTestSelectionConfig } from './test-selection.js';
 import { getDefaultTemplate, getTemplateFiles } from '../templates.js';
 export { describeCheckIssues, getCheckIssueId, } from '../../../core/check-issues.js';
@@ -481,90 +483,6 @@ function validateSkills(projectRoot, issues) {
         }
     }
 }
-function readSkillSectionIds(content) {
-    return new Set([...content.matchAll(SKILL_SECTION_MARKER_PATTERN)].map((match) => match[1]));
-}
-function findFrontmatterEnd(content) {
-    const match = /\n---(?:\r?\n|$)/u.exec(content.slice(3));
-    return match ? 3 + match.index : -1;
-}
-function parseSimpleFrontmatter(content) {
-    if (!content.startsWith('---')) {
-        return {};
-    }
-    const end = findFrontmatterEnd(content);
-    if (end === -1) {
-        return {};
-    }
-    const frontmatter = {};
-    for (const line of content.slice(3, end).split(/\r?\n/)) {
-        const separatorIndex = line.indexOf(':');
-        if (separatorIndex === -1) {
-            continue;
-        }
-        const key = line.slice(0, separatorIndex).trim();
-        const value = line.slice(separatorIndex + 1).trim().replace(/^["']|["']$/g, '');
-        if (key.length > 0 && value.length > 0) {
-            frontmatter[key] = value;
-        }
-    }
-    return frontmatter;
-}
-function readStrictMustflowText(projectRoot, relativePath, issues, options = {}) {
-    const result = readMustflowTextFileResult(projectRoot, relativePath, options);
-    if (result.ok) {
-        return result.content;
-    }
-    if (result.exists && result.error) {
-        pushStrictIssue(issues, `${toPosixPath(relativePath)} could not be read safely: ${result.error}`);
-    }
-    return undefined;
-}
-function readFrontmatterLines(content) {
-    if (!content.startsWith('---')) {
-        return [];
-    }
-    const end = findFrontmatterEnd(content);
-    if (end === -1) {
-        return [];
-    }
-    return content
-        .slice(3, end)
-        .split(/\n/u)
-        .map((line) => line.replace(/\r$/u, ''));
-}
-function stripScalarMarkers(value) {
-    return value.trim().replace(/^["'`]|["'`]$/g, '').trim();
-}
-function readFrontmatterList(content, key) {
-    const lines = readFrontmatterLines(content);
-    const values = [];
-    let keyIndent;
-    for (const line of lines) {
-        const keyMatch = line.match(new RegExp(`^(\\s*)${key}:\\s*$`, 'u'));
-        if (keyIndent === undefined) {
-            if (keyMatch) {
-                keyIndent = keyMatch[1].length;
-            }
-            continue;
-        }
-        if (line.trim().length === 0) {
-            continue;
-        }
-        const lineIndent = line.match(/^\s*/u)?.[0].length ?? 0;
-        const itemMatch = line.match(/^\s*-\s+(.+)$/u);
-        if (lineIndent <= keyIndent && !itemMatch) {
-            break;
-        }
-        if (itemMatch) {
-            const value = stripScalarMarkers(itemMatch[1]);
-            if (value.length > 0) {
-                values.push(value);
-            }
-        }
-    }
-    return values;
-}
 function validateContextDocuments(projectRoot, issues) {
     const contextRoot = path.join(projectRoot, '.mustflow', 'context');
     const contextFiles = listFilesRecursive(contextRoot).filter((relativePath) => relativePath.endsWith('.md'));

package/dist/cli/lib/validation/safe-read.js

@@ -0,0 +1,13 @@
+import { toPosixPath } from '../filesystem.js';
+import { readMustflowTextFileResult } from '../mustflow-read.js';
+import { pushStrictIssue } from './primitives.js';
+export function readStrictMustflowText(projectRoot, relativePath, issues, options = {}) {
+    const result = readMustflowTextFileResult(projectRoot, relativePath, options);
+    if (result.ok) {
+        return result.content;
+    }
+    if (result.exists && result.error) {
+        pushStrictIssue(issues, `${toPosixPath(relativePath)} could not be read safely: ${result.error}`);
+    }
+    return undefined;
+}

package/dist/core/active-run-locks.js

@@ -9,6 +9,7 @@ const LOCK_MUTEX_STALE_MS = 30_000;
 const LOCK_MUTEX_WAIT_MS = 1_000;
 const LOCK_MUTEX_SLEEP_MS = 25;
 const LOCK_MUTEX_SLEEP_BUFFER = new Int32Array(new SharedArrayBuffer(4));
+const LOCK_MUTEX_RECOVERY_DIRECTORY = 'recovery';
 function sleep(milliseconds) {
     Atomics.wait(LOCK_MUTEX_SLEEP_BUFFER, 0, 0, milliseconds);
 }
@@ -24,6 +25,9 @@ function activeLockDirectory(projectRoot) {
 function activeLockMutexDirectory(projectRoot) {
     return path.join(activeLockRoot(projectRoot), 'mutex');
 }
+function activeLockMutexRecoveryDirectory(mutex) {
+    return path.join(mutex, LOCK_MUTEX_RECOVERY_DIRECTORY);
+}
 function normalizeEffect(effect) {
     return {
         source: effect.source,
@@ -192,6 +196,95 @@ function createRecord(projectRoot, intentName, effects, commandHash) {
         writes: [...new Set(writes)],
     };
 }
+function readMutexOwner(ownerPath) {
+    try {
+        const owner = JSON.parse(readFileSync(ownerPath, 'utf8'));
+        if (typeof owner.started_at !== 'string' || typeof owner.token !== 'string') {
+            return null;
+        }
+        return {
+            pid: Number(owner.pid),
+            startedAt: owner.started_at,
+            token: owner.token,
+        };
+    }
+    catch {
+        return null;
+    }
+}
+function sameMutexOwner(left, right) {
+    return right !== null && left.pid === right.pid && left.startedAt === right.startedAt && left.token === right.token;
+}
+function mutexOwnerIsStale(owner) {
+    const ownerStartedAt = Date.parse(owner.startedAt);
+    const staleByAge = Number.isFinite(ownerStartedAt) && Date.now() - ownerStartedAt > LOCK_MUTEX_STALE_MS;
+    return !isProcessLive(owner.pid) || staleByAge;
+}
+function beginMutexRecovery(mutex) {
+    const recoveryPath = activeLockMutexRecoveryDirectory(mutex);
+    try {
+        mkdirSync(recoveryPath);
+    }
+    catch (error) {
+        if (!error || typeof error !== 'object' || !('code' in error) || error.code !== 'EEXIST') {
+            throw error;
+        }
+        try {
+            const recoveryStat = statSync(recoveryPath);
+            if (Date.now() - recoveryStat.mtimeMs > LOCK_MUTEX_STALE_MS) {
+                rmSync(recoveryPath, { recursive: true, force: true });
+            }
+        }
+        catch {
+            // A concurrent recovery may have already finished.
+        }
+        return null;
+    }
+    let active = true;
+    return () => {
+        if (!active) {
+            return;
+        }
+        active = false;
+        rmSync(recoveryPath, { recursive: true, force: true });
+    };
+}
+function recoverStaleMutexWithOwner(mutex, ownerPath, staleOwner) {
+    const releaseRecovery = beginMutexRecovery(mutex);
+    if (!releaseRecovery) {
+        return false;
+    }
+    try {
+        if (!sameMutexOwner(staleOwner, readMutexOwner(ownerPath)) || !mutexOwnerIsStale(staleOwner)) {
+            return false;
+        }
+        rmSync(mutex, { recursive: true, force: true });
+        return true;
+    }
+    finally {
+        releaseRecovery();
+    }
+}
+function recoverStaleMutexWithoutOwner(mutex) {
+    const releaseRecovery = beginMutexRecovery(mutex);
+    if (!releaseRecovery) {
+        return false;
+    }
+    try {
+        const ownerPath = path.join(mutex, 'owner.json');
+        if (readMutexOwner(ownerPath) !== null) {
+            return false;
+        }
+        rmSync(mutex, { recursive: true, force: true });
+        return true;
+    }
+    catch {
+        return false;
+    }
+    finally {
+        releaseRecovery();
+    }
+}
 function acquireMutex(projectRoot) {
     const root = activeLockRoot(projectRoot);
     const mutex = activeLockMutexDirectory(projectRoot);
@@ -227,22 +320,29 @@ function acquireMutex(projectRoot) {
                 throw error;
             }
             if (Date.now() - startedAt > LOCK_MUTEX_WAIT_MS) {
-                try {
-                    const owner = JSON.parse(readFileSync(ownerPath, 'utf8'));
-                    const ownerPid = Number(owner.pid);
-                    const ownerStartedAt = typeof owner.started_at === 'string' ? Date.parse(owner.started_at) : Number.NaN;
-                    const staleByAge = Number.isFinite(ownerStartedAt) && Date.now() - ownerStartedAt > LOCK_MUTEX_STALE_MS;
-                    if (!isProcessLive(ownerPid) || staleByAge) {
-                        rmSync(mutex, { recursive: true, force: true });
+                const owner = readMutexOwner(ownerPath);
+                if (owner) {
+                    if (mutexOwnerIsStale(owner) && recoverStaleMutexWithOwner(mutex, ownerPath, owner)) {
                         startedAt = Date.now();
                         continue;
                     }
                 }
-                catch {
+                else {
+                    const recoveryPath = activeLockMutexRecoveryDirectory(mutex);
+                    try {
+                        const recoveryStat = statSync(recoveryPath);
+                        if (Date.now() - recoveryStat.mtimeMs <= LOCK_MUTEX_STALE_MS) {
+                            throw new Error('active_run_lock_mutex_busy');
+                        }
+                    }
+                    catch (recoveryError) {
+                        if (recoveryError instanceof Error && recoveryError.message === 'active_run_lock_mutex_busy') {
+                            throw recoveryError;
+                        }
+                    }
                     try {
                         const mutexStat = statSync(mutex);
-                        if (Date.now() - mutexStat.mtimeMs > LOCK_MUTEX_STALE_MS) {
-                            rmSync(mutex, { recursive: true, force: true });
+                        if (Date.now() - mutexStat.mtimeMs > LOCK_MUTEX_STALE_MS && recoverStaleMutexWithoutOwner(mutex)) {
                             startedAt = Date.now();
                             continue;
                         }

package/dist/core/run-performance-history.js

@@ -281,12 +281,25 @@ function serializedHistorySize(samples, today) {
         Buffer.byteLength(serialize(createSummary(samples, today)), 'utf8'));
 }
 function enforceSizeLimit(samples, today) {
-    if (serializedHistorySize(samples, today) <= MAX_TOTAL_BYTES) {
+    const currentSize = serializedHistorySize(samples, today);
+    if (currentSize <= MAX_TOTAL_BYTES) {
         return samples;
     }
+    const averageBytesPerSample = Math.max(1, currentSize / Math.max(1, samples.length));
+    const estimatedDropCount = Math.floor((currentSize - MAX_TOTAL_BYTES) / averageBytesPerSample);
     let low = 1;
     let high = samples.length;
     let firstFittingIndex = samples.length;
+    const probeIndex = Math.max(1, Math.min(samples.length, estimatedDropCount));
+    if (probeIndex > 1) {
+        if (serializedHistorySize(samples.slice(probeIndex), today) <= MAX_TOTAL_BYTES) {
+            firstFittingIndex = probeIndex;
+            high = probeIndex - 1;
+        }
+        else {
+            low = probeIndex + 1;
+        }
+    }
     while (low <= high) {
         const middle = Math.floor((low + high) / 2);
         const candidate = samples.slice(middle);

package/dist/core/validation-ratchet.js

@@ -99,7 +99,7 @@ function gitDiffLinesByPath(projectRoot, relativePaths) {
     if (uniquePaths.length === 0) {
         return new Map();
     }
-    const result = spawnSync('git', ['diff', '--no-ext-diff', '--unified=0', '--', ...uniquePaths], {
+    const result = spawnSync('git', ['diff', 'HEAD', '--no-ext-diff', '--unified=0', '--', ...uniquePaths], {
         cwd: projectRoot,
         encoding: 'utf8',
         env: createCommandEnv(projectRoot, { policy: 'minimal', allowlist: [] }),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mustflow",
-  "version": "2.31.0",
+  "version": "2.37.1",
   "description": "Agent workflow documents and CLI for mustflow repository roots.",
   "type": "module",
   "license": "MIT-0",

package/templates/default/i18n.toml

@@ -10,8 +10,8 @@ status_values = ["current", "stale", "needs_review", "missing"]
 [documents."agents.root"]
 source = "locales/en/AGENTS.md"
 source_locale = "en"
-revision = 14
-translations.ko = { path = "locales/ko/AGENTS.md", source_revision = 14, status = "current" }
+revision = 15
+translations.ko = { path = "locales/ko/AGENTS.md", source_revision = 15, status = "current" }
 translations.zh = { path = "locales/zh/AGENTS.md", source_revision = 11, status = "needs_review" }
 translations.es = { path = "locales/es/AGENTS.md", source_revision = 11, status = "needs_review" }
 translations.fr = { path = "locales/fr/AGENTS.md", source_revision = 11, status = "needs_review" }
@@ -40,8 +40,8 @@ translations.hi = { path = "locales/hi/.mustflow/context/PROJECT.md", source_rev
 [documents."docs.agent-workflow"]
 source = "locales/en/.mustflow/docs/agent-workflow.md"
 source_locale = "en"
-revision = 19
-translations.ko = { path = "locales/ko/.mustflow/docs/agent-workflow.md", source_revision = 19, status = "current" }
+revision = 20
+translations.ko = { path = "locales/ko/.mustflow/docs/agent-workflow.md", source_revision = 20, status = "current" }
 translations.zh = { path = "locales/zh/.mustflow/docs/agent-workflow.md", source_revision = 18, status = "needs_review" }
 translations.es = { path = "locales/es/.mustflow/docs/agent-workflow.md", source_revision = 18, status = "needs_review" }
 translations.fr = { path = "locales/fr/.mustflow/docs/agent-workflow.md", source_revision = 18, status = "needs_review" }
@@ -62,13 +62,13 @@ translations = {}
 [documents."skills.index"]
 source = "locales/en/.mustflow/skills/INDEX.md"
 source_locale = "en"
-revision = 99
+revision = 108
 translations = {}
 
 [documents."skill.adapter-boundary"]
 source = "locales/en/.mustflow/skills/adapter-boundary/SKILL.md"
 source_locale = "en"
-revision = 11
+revision = 12
 translations = {}
 
 [documents."skill.artifact-integrity-check"]
@@ -86,6 +86,18 @@ translations = {}
 [documents."skill.api-contract-change"]
 source = "locales/en/.mustflow/skills/api-contract-change/SKILL.md"
 source_locale = "en"
+revision = 2
+translations = {}
+
+[documents."skill.backend-reliability-change"]
+source = "locales/en/.mustflow/skills/backend-reliability-change/SKILL.md"
+source_locale = "en"
+revision = 1
+translations = {}
+
+[documents."skill.http-delivery-streaming"]
+source = "locales/en/.mustflow/skills/http-delivery-streaming/SKILL.md"
+source_locale = "en"
 revision = 1
 translations = {}
 
@@ -101,6 +113,12 @@ source_locale = "en"
 revision = 6
 translations = {}
 
+[documents."skill.ai-generated-code-hardening"]
+source = "locales/en/.mustflow/skills/ai-generated-code-hardening/SKILL.md"
+source_locale = "en"
+revision = 1
+translations = {}
+
 [documents."skill.contract-sync-check"]
 source = "locales/en/.mustflow/skills/contract-sync-check/SKILL.md"
 source_locale = "en"
@@ -152,13 +170,13 @@ translations = {}
 [documents."skill.dependency-upgrade-review"]
 source = "locales/en/.mustflow/skills/dependency-upgrade-review/SKILL.md"
 source_locale = "en"
-revision = 1
+revision = 3
 translations = {}
 
 [documents."skill.version-freshness-check"]
 source = "locales/en/.mustflow/skills/version-freshness-check/SKILL.md"
 source_locale = "en"
-revision = 1
+revision = 6
 translations = {}
 
 [documents."skill.line-ending-hygiene"]
@@ -173,6 +191,12 @@ source_locale = "en"
 revision = 4
 translations = {}
 
+[documents."skill.frontend-render-stability"]
+source = "locales/en/.mustflow/skills/frontend-render-stability/SKILL.md"
+source_locale = "en"
+revision = 2
+translations = {}
+
 [documents."skill.diff-risk-review"]
 source = "locales/en/.mustflow/skills/diff-risk-review/SKILL.md"
 source_locale = "en"
@@ -185,6 +209,12 @@ source_locale = "en"
 revision = 3
 translations = {}
 
+[documents."skill.heuristic-candidate-selection"]
+source = "locales/en/.mustflow/skills/heuristic-candidate-selection/SKILL.md"
+source_locale = "en"
+revision = 1
+translations = {}
+
 [documents."skill.astro-code-change"]
 source = "locales/en/.mustflow/skills/astro-code-change/SKILL.md"
 source_locale = "en"
@@ -194,7 +224,7 @@ translations = {}
 [documents."skill.auth-permission-change"]
 source = "locales/en/.mustflow/skills/auth-permission-change/SKILL.md"
 source_locale = "en"
-revision = 1
+revision = 2
 translations = {}
 
 [documents."skill.config-env-change"]
@@ -206,7 +236,7 @@ translations = {}
 [documents."skill.css-code-change"]
 source = "locales/en/.mustflow/skills/css-code-change/SKILL.md"
 source_locale = "en"
-revision = 2
+revision = 3
 translations = {}
 
 [documents."skill.bun-code-change"]
@@ -248,7 +278,7 @@ translations = {}
 [documents."skill.go-code-change"]
 source = "locales/en/.mustflow/skills/go-code-change/SKILL.md"
 source_locale = "en"
-revision = 2
+revision = 3
 translations = {}
 
 [documents."skill.hono-code-change"]
@@ -260,7 +290,7 @@ translations = {}
 [documents."skill.html-code-change"]
 source = "locales/en/.mustflow/skills/html-code-change/SKILL.md"
 source_locale = "en"
-revision = 2
+revision = 3
 translations = {}
 
 [documents."skill.javascript-code-change"]
@@ -278,13 +308,13 @@ translations = {}
 [documents."skill.python-code-change"]
 source = "locales/en/.mustflow/skills/python-code-change/SKILL.md"
 source_locale = "en"
-revision = 2
+revision = 3
 translations = {}
 
 [documents."skill.rust-code-change"]
 source = "locales/en/.mustflow/skills/rust-code-change/SKILL.md"
 source_locale = "en"
-revision = 3
+revision = 4
 translations = {}
 
 [documents."skill.runtime-target-selection"]
@@ -308,25 +338,31 @@ translations = {}
 [documents."skill.tailwind-code-change"]
 source = "locales/en/.mustflow/skills/tailwind-code-change/SKILL.md"
 source_locale = "en"
-revision = 2
+revision = 3
 translations = {}
 
 [documents."skill.tauri-code-change"]
 source = "locales/en/.mustflow/skills/tauri-code-change/SKILL.md"
 source_locale = "en"
-revision = 2
+revision = 3
 translations = {}
 
 [documents."skill.typescript-code-change"]
 source = "locales/en/.mustflow/skills/typescript-code-change/SKILL.md"
 source_locale = "en"
-revision = 2
+revision = 3
 translations = {}
 
 [documents."skill.unocss-code-change"]
 source = "locales/en/.mustflow/skills/unocss-code-change/SKILL.md"
 source_locale = "en"
-revision = 2
+revision = 3
+translations = {}
+
+[documents."skill.service-boundary-architecture"]
+source = "locales/en/.mustflow/skills/service-boundary-architecture/SKILL.md"
+source_locale = "en"
+revision = 1
 translations = {}
 
 [documents."skill.cli-output-contract-review"]
@@ -469,7 +505,7 @@ translations = {}
 [documents."skill.performance-budget-check"]
 source = "locales/en/.mustflow/skills/performance-budget-check/SKILL.md"
 source_locale = "en"
-revision = 19
+revision = 20
 translations = {}
 
 [documents."skill.pattern-scout"]
@@ -478,6 +514,12 @@ source_locale = "en"
 revision = 2
 translations = {}
 
+[documents."skill.proactive-risk-surfacing"]
+source = "locales/en/.mustflow/skills/proactive-risk-surfacing/SKILL.md"
+source_locale = "en"
+revision = 1
+translations = {}
+
 [documents."skill.process-execution-safety"]
 source = "locales/en/.mustflow/skills/process-execution-safety/SKILL.md"
 source_locale = "en"
@@ -559,13 +601,13 @@ translations = {}
 [documents."skill.security-privacy-review"]
 source = "locales/en/.mustflow/skills/security-privacy-review/SKILL.md"
 source_locale = "en"
-revision = 21
+revision = 22
 translations = {}
 
 [documents."skill.security-regression-tests"]
 source = "locales/en/.mustflow/skills/security-regression-tests/SKILL.md"
 source_locale = "en"
-revision = 11
+revision = 12
 translations = {}
 
 [documents."skill.search-ad-content-authoring"]