mustflow 2.32.0 → 2.37.1

package/dist/cli/lib/validation/frontmatter.js

@@ -0,0 +1,75 @@
+import { SKILL_SECTION_MARKER_PATTERN } from './constants.js';
+export function readSkillSectionIds(content) {
+    return new Set([...content.matchAll(SKILL_SECTION_MARKER_PATTERN)].map((match) => match[1]));
+}
+function findFrontmatterEnd(content) {
+    const match = /\n---(?:\r?\n|$)/u.exec(content.slice(3));
+    return match ? 3 + match.index : -1;
+}
+export function parseSimpleFrontmatter(content) {
+    if (!content.startsWith('---')) {
+        return {};
+    }
+    const end = findFrontmatterEnd(content);
+    if (end === -1) {
+        return {};
+    }
+    const frontmatter = {};
+    for (const line of content.slice(3, end).split(/\r?\n/)) {
+        const separatorIndex = line.indexOf(':');
+        if (separatorIndex === -1) {
+            continue;
+        }
+        const key = line.slice(0, separatorIndex).trim();
+        const value = line.slice(separatorIndex + 1).trim().replace(/^["']|["']$/g, '');
+        if (key.length > 0 && value.length > 0) {
+            frontmatter[key] = value;
+        }
+    }
+    return frontmatter;
+}
+function readFrontmatterLines(content) {
+    if (!content.startsWith('---')) {
+        return [];
+    }
+    const end = findFrontmatterEnd(content);
+    if (end === -1) {
+        return [];
+    }
+    return content
+        .slice(3, end)
+        .split(/\n/u)
+        .map((line) => line.replace(/\r$/u, ''));
+}
+function stripScalarMarkers(value) {
+    return value.trim().replace(/^["'`]|["'`]$/g, '').trim();
+}
+export function readFrontmatterList(content, key) {
+    const lines = readFrontmatterLines(content);
+    const values = [];
+    let keyIndent;
+    for (const line of lines) {
+        const keyMatch = line.match(new RegExp(`^(\\s*)${key}:\\s*$`, 'u'));
+        if (keyIndent === undefined) {
+            if (keyMatch) {
+                keyIndent = keyMatch[1].length;
+            }
+            continue;
+        }
+        if (line.trim().length === 0) {
+            continue;
+        }
+        const lineIndent = line.match(/^\s*/u)?.[0].length ?? 0;
+        const itemMatch = line.match(/^\s*-\s+(.+)$/u);
+        if (lineIndent <= keyIndent && !itemMatch) {
+            break;
+        }
+        if (itemMatch) {
+            const value = stripScalarMarkers(itemMatch[1]);
+            if (value.length > 0) {
+                values.push(value);
+            }
+        }
+    }
+    return values;
+}

package/dist/cli/lib/validation/index.js

@@ -13,13 +13,15 @@ import { readGitChangedFiles } from '../git-changes.js';
 import { inspectManifestLock } from '../manifest-lock.js';
 import { generateRepoMap } from '../repo-map.js';
 import { parseTomlText, readMustflowTomlFile } from '../toml.js';
-import { MUSTFLOW_JSON_MAX_BYTES, readMustflowTextFileResult, } from '../mustflow-read.js';
+import { MUSTFLOW_JSON_MAX_BYTES } from '../mustflow-read.js';
 import { getContractModelDefinitions, validateCandidateContractModelConfig, } from '../../../core/contract-models.js';
 import { VERSIONING_CONFIG_PATH, detectVersionSourcePaths, readDeclaredVersionSources, releaseVersioningIsEnabled, } from '../../../core/version-sources.js';
 import { normalizeTechnologyPreferencesTable, TECHNOLOGY_CONFIG_RELATIVE_PATH, } from '../../../core/technology-preferences.js';
-import { ALLOWED_APPROVAL_ACTIONS, ALLOWED_APPROVAL_GATES, ALLOWED_BUDGET_LIMIT_ACTIONS, ALLOWED_CAPABILITY_STATES, ALLOWED_COMMIT_MESSAGE_STYLES, ALLOWED_COMPACTION_CATEGORIES, ALLOWED_COMPACTION_LONG_LIMIT_ACTIONS, ALLOWED_COMPACTION_RAW_LIMIT_ACTIONS, ALLOWED_COMPACTION_STATE_STORES, ALLOWED_COMPACTION_STRATEGIES, ALLOWED_CONTEXT_AUTHORITIES, ALLOWED_CONTEXT_DOCUMENT_AUTHORITIES, ALLOWED_CONTEXT_READ_POLICIES, ALLOWED_HANDOFF_MODES, ALLOWED_HARNESS_FRESH_CONTEXT_MODES, ALLOWED_HARNESS_MODES, ALLOWED_HARNESS_PHASES, ALLOWED_ISOLATION_PREFERENCES, ALLOWED_MAP_MODES, ALLOWED_MAP_PRIVACY_LEVELS, ALLOWED_PROJECT_PROFILES, ALLOWED_REPO_MAP_DEGRADED_VALUES, ALLOWED_REPO_MAP_GIT_LS_FILES_STATUSES, ALLOWED_PROMPT_CACHE_STABLE_PREFIX_POLICIES, ALLOWED_PROMPT_CACHE_STRATEGIES, ALLOWED_PROMPT_CACHE_TASK_READ_POLICIES, ALLOWED_REFRESH_CHECKPOINTS, ALLOWED_REFRESH_METHODS, ALLOWED_REFRESH_MODES, ALLOWED_REFRESH_STATE_STORES, ALLOWED_SKILL_RESOURCE_TYPES, ALLOWED_SKILL_ROUTE_CATEGORIES, ALLOWED_SKILL_ROUTE_PROFILES, ALLOWED_SKILL_ROUTE_TYPES, ALLOWED_STALE_TEST_ACTIONS, ALLOWED_TEST_AUTHORING_POLICIES, ALLOWED_TEST_DELETION_REASONS, ALLOWED_TESTING_POLICIES, ALLOWED_TRANSLATION_POLICIES, ALLOWED_VERIFICATION_SELECTION_STRATEGIES, ALLOWED_VERSION_SOURCE_AUTHORITIES, ALLOWED_VERSION_SOURCE_KINDS, CAPABILITY_BOOLEAN_FIELDS, CAPABILITY_STATE_FIELDS, CONTEXT_AUTHORITY_DRIFT_PATTERNS, DESIGN_TOKEN_DEFINITION_PATTERNS, FORBIDDEN_RELEASE_VERSIONING_CONTRACT_FIELDS, FORBIDDEN_TEST_DELETION_REASONS, FORBIDDEN_VERIFICATION_SELECTION_AUTHORITY_FIELDS, LOCAL_ABSOLUTE_PATH_PATTERNS, LOCAL_TASK_STATE_ROOTS, RAW_COMMAND_FENCE_PATTERN, RELEASE_VERSIONING_BOOLEAN_FIELDS, REPO_MAP_DOC_ID, REPO_MAP_GENERATOR, REPO_MAP_LIFECYCLE, REPO_MAP_PRIVACY_MODE, REPO_MAP_RELATIVE_ROOT, REPO_MAP_REMOTE_OR_BRANCH_PATTERNS, REPO_MAP_SOURCE_FINGERPRINT_PATTERN, REPO_MAP_SOURCE_POLICY, REQUIRED_AGENT_LOOP_PHASES, REQUIRED_SKILL_SCRIPT_RUN_POLICY, REQUIRED_SKILL_SECTION_IDS, ROUTER_INDEX_FILES, ROUTER_INDEX_PROCEDURE_SECTION_PATTERN, SECRET_LIKE_CONTEXT_PATTERNS, SKILL_COMMAND_PERMISSION_CLAIM_PATTERNS, SKILL_INDEX_PATH, SKILL_PACK_ID_PATTERN, SKILL_RESOURCE_MANIFEST, SKILL_RESOURCE_ROOTS, SKILL_RESOURCE_TYPE_BY_ROOT, SKILL_ROUTE_CATEGORY_LABELS, SKILL_ROUTES_METADATA_PATH, SKILL_SECTION_MARKER_PATTERN, SUPPORTED_SKILL_SCHEMA_VERSION, TEST_AUTHORING_BOOLEAN_FIELDS, VERIFICATION_SELECTION_BOOLEAN_FIELDS, VOLATILE_REPO_MAP_PATTERNS } from './constants.js';
+import { ALLOWED_APPROVAL_ACTIONS, ALLOWED_APPROVAL_GATES, ALLOWED_BUDGET_LIMIT_ACTIONS, ALLOWED_CAPABILITY_STATES, ALLOWED_COMMIT_MESSAGE_STYLES, ALLOWED_COMPACTION_CATEGORIES, ALLOWED_COMPACTION_LONG_LIMIT_ACTIONS, ALLOWED_COMPACTION_RAW_LIMIT_ACTIONS, ALLOWED_COMPACTION_STATE_STORES, ALLOWED_COMPACTION_STRATEGIES, ALLOWED_CONTEXT_AUTHORITIES, ALLOWED_CONTEXT_DOCUMENT_AUTHORITIES, ALLOWED_CONTEXT_READ_POLICIES, ALLOWED_HANDOFF_MODES, ALLOWED_HARNESS_FRESH_CONTEXT_MODES, ALLOWED_HARNESS_MODES, ALLOWED_HARNESS_PHASES, ALLOWED_ISOLATION_PREFERENCES, ALLOWED_MAP_MODES, ALLOWED_MAP_PRIVACY_LEVELS, ALLOWED_PROJECT_PROFILES, ALLOWED_REPO_MAP_DEGRADED_VALUES, ALLOWED_REPO_MAP_GIT_LS_FILES_STATUSES, ALLOWED_PROMPT_CACHE_STABLE_PREFIX_POLICIES, ALLOWED_PROMPT_CACHE_STRATEGIES, ALLOWED_PROMPT_CACHE_TASK_READ_POLICIES, ALLOWED_REFRESH_CHECKPOINTS, ALLOWED_REFRESH_METHODS, ALLOWED_REFRESH_MODES, ALLOWED_REFRESH_STATE_STORES, ALLOWED_SKILL_RESOURCE_TYPES, ALLOWED_SKILL_ROUTE_CATEGORIES, ALLOWED_SKILL_ROUTE_PROFILES, ALLOWED_SKILL_ROUTE_TYPES, ALLOWED_STALE_TEST_ACTIONS, ALLOWED_TEST_AUTHORING_POLICIES, ALLOWED_TEST_DELETION_REASONS, ALLOWED_TESTING_POLICIES, ALLOWED_TRANSLATION_POLICIES, ALLOWED_VERIFICATION_SELECTION_STRATEGIES, ALLOWED_VERSION_SOURCE_AUTHORITIES, ALLOWED_VERSION_SOURCE_KINDS, CAPABILITY_BOOLEAN_FIELDS, CAPABILITY_STATE_FIELDS, CONTEXT_AUTHORITY_DRIFT_PATTERNS, DESIGN_TOKEN_DEFINITION_PATTERNS, FORBIDDEN_RELEASE_VERSIONING_CONTRACT_FIELDS, FORBIDDEN_TEST_DELETION_REASONS, FORBIDDEN_VERIFICATION_SELECTION_AUTHORITY_FIELDS, LOCAL_ABSOLUTE_PATH_PATTERNS, LOCAL_TASK_STATE_ROOTS, RAW_COMMAND_FENCE_PATTERN, RELEASE_VERSIONING_BOOLEAN_FIELDS, REPO_MAP_DOC_ID, REPO_MAP_GENERATOR, REPO_MAP_LIFECYCLE, REPO_MAP_PRIVACY_MODE, REPO_MAP_RELATIVE_ROOT, REPO_MAP_REMOTE_OR_BRANCH_PATTERNS, REPO_MAP_SOURCE_FINGERPRINT_PATTERN, REPO_MAP_SOURCE_POLICY, REQUIRED_AGENT_LOOP_PHASES, REQUIRED_SKILL_SCRIPT_RUN_POLICY, REQUIRED_SKILL_SECTION_IDS, ROUTER_INDEX_FILES, ROUTER_INDEX_PROCEDURE_SECTION_PATTERN, SECRET_LIKE_CONTEXT_PATTERNS, SKILL_COMMAND_PERMISSION_CLAIM_PATTERNS, SKILL_INDEX_PATH, SKILL_PACK_ID_PATTERN, SKILL_RESOURCE_MANIFEST, SKILL_RESOURCE_ROOTS, SKILL_RESOURCE_TYPE_BY_ROOT, SKILL_ROUTE_CATEGORY_LABELS, SKILL_ROUTES_METADATA_PATH, SUPPORTED_SKILL_SCHEMA_VERSION, TEST_AUTHORING_BOOLEAN_FIELDS, VERIFICATION_SELECTION_BOOLEAN_FIELDS, VOLATILE_REPO_MAP_PATTERNS } from './constants.js';
 import { hasOwn, isPositiveInteger, isSafeRelativePath, pushStrictIssue, pushStrictWarning, validateAllowedStringField, validateBooleanField, validateExactStringArrayField, validateNestedTable, validatePathArrayField, validatePathField, validatePositiveIntegerField, validateRequiredFiles, validateRequiredPathField, validateRequiredStringField, validateStringArrayField, validateStringArrayMembers, validateStringField, validateTable, validateToml, validateWorkspaceRoots } from './primitives.js';
 import { isConfiguredCommandIntent, isDeclaredCommandIntent } from './command-intents.js';
+import { parseSimpleFrontmatter, readFrontmatterList, readSkillSectionIds } from './frontmatter.js';
+import { readStrictMustflowText } from './safe-read.js';
 import { validateStrictTestSelectionConfig } from './test-selection.js';
 import { getDefaultTemplate, getTemplateFiles } from '../templates.js';
 export { describeCheckIssues, getCheckIssueId, } from '../../../core/check-issues.js';
@@ -481,90 +483,6 @@ function validateSkills(projectRoot, issues) {
         }
     }
 }
-function readSkillSectionIds(content) {
-    return new Set([...content.matchAll(SKILL_SECTION_MARKER_PATTERN)].map((match) => match[1]));
-}
-function findFrontmatterEnd(content) {
-    const match = /\n---(?:\r?\n|$)/u.exec(content.slice(3));
-    return match ? 3 + match.index : -1;
-}
-function parseSimpleFrontmatter(content) {
-    if (!content.startsWith('---')) {
-        return {};
-    }
-    const end = findFrontmatterEnd(content);
-    if (end === -1) {
-        return {};
-    }
-    const frontmatter = {};
-    for (const line of content.slice(3, end).split(/\r?\n/)) {
-        const separatorIndex = line.indexOf(':');
-        if (separatorIndex === -1) {
-            continue;
-        }
-        const key = line.slice(0, separatorIndex).trim();
-        const value = line.slice(separatorIndex + 1).trim().replace(/^["']|["']$/g, '');
-        if (key.length > 0 && value.length > 0) {
-            frontmatter[key] = value;
-        }
-    }
-    return frontmatter;
-}
-function readStrictMustflowText(projectRoot, relativePath, issues, options = {}) {
-    const result = readMustflowTextFileResult(projectRoot, relativePath, options);
-    if (result.ok) {
-        return result.content;
-    }
-    if (result.exists && result.error) {
-        pushStrictIssue(issues, `${toPosixPath(relativePath)} could not be read safely: ${result.error}`);
-    }
-    return undefined;
-}
-function readFrontmatterLines(content) {
-    if (!content.startsWith('---')) {
-        return [];
-    }
-    const end = findFrontmatterEnd(content);
-    if (end === -1) {
-        return [];
-    }
-    return content
-        .slice(3, end)
-        .split(/\n/u)
-        .map((line) => line.replace(/\r$/u, ''));
-}
-function stripScalarMarkers(value) {
-    return value.trim().replace(/^["'`]|["'`]$/g, '').trim();
-}
-function readFrontmatterList(content, key) {
-    const lines = readFrontmatterLines(content);
-    const values = [];
-    let keyIndent;
-    for (const line of lines) {
-        const keyMatch = line.match(new RegExp(`^(\\s*)${key}:\\s*$`, 'u'));
-        if (keyIndent === undefined) {
-            if (keyMatch) {
-                keyIndent = keyMatch[1].length;
-            }
-            continue;
-        }
-        if (line.trim().length === 0) {
-            continue;
-        }
-        const lineIndent = line.match(/^\s*/u)?.[0].length ?? 0;
-        const itemMatch = line.match(/^\s*-\s+(.+)$/u);
-        if (lineIndent <= keyIndent && !itemMatch) {
-            break;
-        }
-        if (itemMatch) {
-            const value = stripScalarMarkers(itemMatch[1]);
-            if (value.length > 0) {
-                values.push(value);
-            }
-        }
-    }
-    return values;
-}
 function validateContextDocuments(projectRoot, issues) {
     const contextRoot = path.join(projectRoot, '.mustflow', 'context');
     const contextFiles = listFilesRecursive(contextRoot).filter((relativePath) => relativePath.endsWith('.md'));

package/dist/cli/lib/validation/safe-read.js

@@ -0,0 +1,13 @@
+import { toPosixPath } from '../filesystem.js';
+import { readMustflowTextFileResult } from '../mustflow-read.js';
+import { pushStrictIssue } from './primitives.js';
+export function readStrictMustflowText(projectRoot, relativePath, issues, options = {}) {
+    const result = readMustflowTextFileResult(projectRoot, relativePath, options);
+    if (result.ok) {
+        return result.content;
+    }
+    if (result.exists && result.error) {
+        pushStrictIssue(issues, `${toPosixPath(relativePath)} could not be read safely: ${result.error}`);
+    }
+    return undefined;
+}

package/dist/core/active-run-locks.js

@@ -9,6 +9,7 @@ const LOCK_MUTEX_STALE_MS = 30_000;
 const LOCK_MUTEX_WAIT_MS = 1_000;
 const LOCK_MUTEX_SLEEP_MS = 25;
 const LOCK_MUTEX_SLEEP_BUFFER = new Int32Array(new SharedArrayBuffer(4));
+const LOCK_MUTEX_RECOVERY_DIRECTORY = 'recovery';
 function sleep(milliseconds) {
     Atomics.wait(LOCK_MUTEX_SLEEP_BUFFER, 0, 0, milliseconds);
 }
@@ -24,6 +25,9 @@ function activeLockDirectory(projectRoot) {
 function activeLockMutexDirectory(projectRoot) {
     return path.join(activeLockRoot(projectRoot), 'mutex');
 }
+function activeLockMutexRecoveryDirectory(mutex) {
+    return path.join(mutex, LOCK_MUTEX_RECOVERY_DIRECTORY);
+}
 function normalizeEffect(effect) {
     return {
         source: effect.source,
@@ -192,6 +196,95 @@ function createRecord(projectRoot, intentName, effects, commandHash) {
         writes: [...new Set(writes)],
     };
 }
+function readMutexOwner(ownerPath) {
+    try {
+        const owner = JSON.parse(readFileSync(ownerPath, 'utf8'));
+        if (typeof owner.started_at !== 'string' || typeof owner.token !== 'string') {
+            return null;
+        }
+        return {
+            pid: Number(owner.pid),
+            startedAt: owner.started_at,
+            token: owner.token,
+        };
+    }
+    catch {
+        return null;
+    }
+}
+function sameMutexOwner(left, right) {
+    return right !== null && left.pid === right.pid && left.startedAt === right.startedAt && left.token === right.token;
+}
+function mutexOwnerIsStale(owner) {
+    const ownerStartedAt = Date.parse(owner.startedAt);
+    const staleByAge = Number.isFinite(ownerStartedAt) && Date.now() - ownerStartedAt > LOCK_MUTEX_STALE_MS;
+    return !isProcessLive(owner.pid) || staleByAge;
+}
+function beginMutexRecovery(mutex) {
+    const recoveryPath = activeLockMutexRecoveryDirectory(mutex);
+    try {
+        mkdirSync(recoveryPath);
+    }
+    catch (error) {
+        if (!error || typeof error !== 'object' || !('code' in error) || error.code !== 'EEXIST') {
+            throw error;
+        }
+        try {
+            const recoveryStat = statSync(recoveryPath);
+            if (Date.now() - recoveryStat.mtimeMs > LOCK_MUTEX_STALE_MS) {
+                rmSync(recoveryPath, { recursive: true, force: true });
+            }
+        }
+        catch {
+            // A concurrent recovery may have already finished.
+        }
+        return null;
+    }
+    let active = true;
+    return () => {
+        if (!active) {
+            return;
+        }
+        active = false;
+        rmSync(recoveryPath, { recursive: true, force: true });
+    };
+}
+function recoverStaleMutexWithOwner(mutex, ownerPath, staleOwner) {
+    const releaseRecovery = beginMutexRecovery(mutex);
+    if (!releaseRecovery) {
+        return false;
+    }
+    try {
+        if (!sameMutexOwner(staleOwner, readMutexOwner(ownerPath)) || !mutexOwnerIsStale(staleOwner)) {
+            return false;
+        }
+        rmSync(mutex, { recursive: true, force: true });
+        return true;
+    }
+    finally {
+        releaseRecovery();
+    }
+}
+function recoverStaleMutexWithoutOwner(mutex) {
+    const releaseRecovery = beginMutexRecovery(mutex);
+    if (!releaseRecovery) {
+        return false;
+    }
+    try {
+        const ownerPath = path.join(mutex, 'owner.json');
+        if (readMutexOwner(ownerPath) !== null) {
+            return false;
+        }
+        rmSync(mutex, { recursive: true, force: true });
+        return true;
+    }
+    catch {
+        return false;
+    }
+    finally {
+        releaseRecovery();
+    }
+}
 function acquireMutex(projectRoot) {
     const root = activeLockRoot(projectRoot);
     const mutex = activeLockMutexDirectory(projectRoot);
@@ -227,22 +320,29 @@ function acquireMutex(projectRoot) {
                 throw error;
             }
             if (Date.now() - startedAt > LOCK_MUTEX_WAIT_MS) {
-                try {
-                    const owner = JSON.parse(readFileSync(ownerPath, 'utf8'));
-                    const ownerPid = Number(owner.pid);
-                    const ownerStartedAt = typeof owner.started_at === 'string' ? Date.parse(owner.started_at) : Number.NaN;
-                    const staleByAge = Number.isFinite(ownerStartedAt) && Date.now() - ownerStartedAt > LOCK_MUTEX_STALE_MS;
-                    if (!isProcessLive(ownerPid) || staleByAge) {
-                        rmSync(mutex, { recursive: true, force: true });
+                const owner = readMutexOwner(ownerPath);
+                if (owner) {
+                    if (mutexOwnerIsStale(owner) && recoverStaleMutexWithOwner(mutex, ownerPath, owner)) {
                         startedAt = Date.now();
                         continue;
                     }
                 }
-                catch {
+                else {
+                    const recoveryPath = activeLockMutexRecoveryDirectory(mutex);
+                    try {
+                        const recoveryStat = statSync(recoveryPath);
+                        if (Date.now() - recoveryStat.mtimeMs <= LOCK_MUTEX_STALE_MS) {
+                            throw new Error('active_run_lock_mutex_busy');
+                        }
+                    }
+                    catch (recoveryError) {
+                        if (recoveryError instanceof Error && recoveryError.message === 'active_run_lock_mutex_busy') {
+                            throw recoveryError;
+                        }
+                    }
                     try {
                         const mutexStat = statSync(mutex);
-                        if (Date.now() - mutexStat.mtimeMs > LOCK_MUTEX_STALE_MS) {
-                            rmSync(mutex, { recursive: true, force: true });
+                        if (Date.now() - mutexStat.mtimeMs > LOCK_MUTEX_STALE_MS && recoverStaleMutexWithoutOwner(mutex)) {
                             startedAt = Date.now();
                             continue;
                         }

package/dist/core/run-performance-history.js

@@ -281,12 +281,25 @@ function serializedHistorySize(samples, today) {
         Buffer.byteLength(serialize(createSummary(samples, today)), 'utf8'));
 }
 function enforceSizeLimit(samples, today) {
-    if (serializedHistorySize(samples, today) <= MAX_TOTAL_BYTES) {
+    const currentSize = serializedHistorySize(samples, today);
+    if (currentSize <= MAX_TOTAL_BYTES) {
         return samples;
     }
+    const averageBytesPerSample = Math.max(1, currentSize / Math.max(1, samples.length));
+    const estimatedDropCount = Math.floor((currentSize - MAX_TOTAL_BYTES) / averageBytesPerSample);
     let low = 1;
     let high = samples.length;
     let firstFittingIndex = samples.length;
+    const probeIndex = Math.max(1, Math.min(samples.length, estimatedDropCount));
+    if (probeIndex > 1) {
+        if (serializedHistorySize(samples.slice(probeIndex), today) <= MAX_TOTAL_BYTES) {
+            firstFittingIndex = probeIndex;
+            high = probeIndex - 1;
+        }
+        else {
+            low = probeIndex + 1;
+        }
+    }
     while (low <= high) {
         const middle = Math.floor((low + high) / 2);
         const candidate = samples.slice(middle);

package/dist/core/validation-ratchet.js

@@ -99,7 +99,7 @@ function gitDiffLinesByPath(projectRoot, relativePaths) {
     if (uniquePaths.length === 0) {
         return new Map();
     }
-    const result = spawnSync('git', ['diff', '--no-ext-diff', '--unified=0', '--', ...uniquePaths], {
+    const result = spawnSync('git', ['diff', 'HEAD', '--no-ext-diff', '--unified=0', '--', ...uniquePaths], {
         cwd: projectRoot,
         encoding: 'utf8',
         env: createCommandEnv(projectRoot, { policy: 'minimal', allowlist: [] }),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mustflow",
-  "version": "2.32.0",
+  "version": "2.37.1",
   "description": "Agent workflow documents and CLI for mustflow repository roots.",
   "type": "module",
   "license": "MIT-0",

package/templates/default/i18n.toml

@@ -10,8 +10,8 @@ status_values = ["current", "stale", "needs_review", "missing"]
 [documents."agents.root"]
 source = "locales/en/AGENTS.md"
 source_locale = "en"
-revision = 14
-translations.ko = { path = "locales/ko/AGENTS.md", source_revision = 14, status = "current" }
+revision = 15
+translations.ko = { path = "locales/ko/AGENTS.md", source_revision = 15, status = "current" }
 translations.zh = { path = "locales/zh/AGENTS.md", source_revision = 11, status = "needs_review" }
 translations.es = { path = "locales/es/AGENTS.md", source_revision = 11, status = "needs_review" }
 translations.fr = { path = "locales/fr/AGENTS.md", source_revision = 11, status = "needs_review" }
@@ -40,8 +40,8 @@ translations.hi = { path = "locales/hi/.mustflow/context/PROJECT.md", source_rev
 [documents."docs.agent-workflow"]
 source = "locales/en/.mustflow/docs/agent-workflow.md"
 source_locale = "en"
-revision = 19
-translations.ko = { path = "locales/ko/.mustflow/docs/agent-workflow.md", source_revision = 19, status = "current" }
+revision = 20
+translations.ko = { path = "locales/ko/.mustflow/docs/agent-workflow.md", source_revision = 20, status = "current" }
 translations.zh = { path = "locales/zh/.mustflow/docs/agent-workflow.md", source_revision = 18, status = "needs_review" }
 translations.es = { path = "locales/es/.mustflow/docs/agent-workflow.md", source_revision = 18, status = "needs_review" }
 translations.fr = { path = "locales/fr/.mustflow/docs/agent-workflow.md", source_revision = 18, status = "needs_review" }
@@ -62,13 +62,13 @@ translations = {}
 [documents."skills.index"]
 source = "locales/en/.mustflow/skills/INDEX.md"
 source_locale = "en"
-revision = 99
+revision = 108
 translations = {}
 
 [documents."skill.adapter-boundary"]
 source = "locales/en/.mustflow/skills/adapter-boundary/SKILL.md"
 source_locale = "en"
-revision = 11
+revision = 12
 translations = {}
 
 [documents."skill.artifact-integrity-check"]
@@ -86,6 +86,18 @@ translations = {}
 [documents."skill.api-contract-change"]
 source = "locales/en/.mustflow/skills/api-contract-change/SKILL.md"
 source_locale = "en"
+revision = 2
+translations = {}
+
+[documents."skill.backend-reliability-change"]
+source = "locales/en/.mustflow/skills/backend-reliability-change/SKILL.md"
+source_locale = "en"
+revision = 1
+translations = {}
+
+[documents."skill.http-delivery-streaming"]
+source = "locales/en/.mustflow/skills/http-delivery-streaming/SKILL.md"
+source_locale = "en"
 revision = 1
 translations = {}
 
@@ -101,6 +113,12 @@ source_locale = "en"
 revision = 6
 translations = {}
 
+[documents."skill.ai-generated-code-hardening"]
+source = "locales/en/.mustflow/skills/ai-generated-code-hardening/SKILL.md"
+source_locale = "en"
+revision = 1
+translations = {}
+
 [documents."skill.contract-sync-check"]
 source = "locales/en/.mustflow/skills/contract-sync-check/SKILL.md"
 source_locale = "en"
@@ -152,13 +170,13 @@ translations = {}
 [documents."skill.dependency-upgrade-review"]
 source = "locales/en/.mustflow/skills/dependency-upgrade-review/SKILL.md"
 source_locale = "en"
-revision = 1
+revision = 3
 translations = {}
 
 [documents."skill.version-freshness-check"]
 source = "locales/en/.mustflow/skills/version-freshness-check/SKILL.md"
 source_locale = "en"
-revision = 1
+revision = 6
 translations = {}
 
 [documents."skill.line-ending-hygiene"]
@@ -173,6 +191,12 @@ source_locale = "en"
 revision = 4
 translations = {}
 
+[documents."skill.frontend-render-stability"]
+source = "locales/en/.mustflow/skills/frontend-render-stability/SKILL.md"
+source_locale = "en"
+revision = 2
+translations = {}
+
 [documents."skill.diff-risk-review"]
 source = "locales/en/.mustflow/skills/diff-risk-review/SKILL.md"
 source_locale = "en"
@@ -200,7 +224,7 @@ translations = {}
 [documents."skill.auth-permission-change"]
 source = "locales/en/.mustflow/skills/auth-permission-change/SKILL.md"
 source_locale = "en"
-revision = 1
+revision = 2
 translations = {}
 
 [documents."skill.config-env-change"]
@@ -212,7 +236,7 @@ translations = {}
 [documents."skill.css-code-change"]
 source = "locales/en/.mustflow/skills/css-code-change/SKILL.md"
 source_locale = "en"
-revision = 2
+revision = 3
 translations = {}
 
 [documents."skill.bun-code-change"]
@@ -254,7 +278,7 @@ translations = {}
 [documents."skill.go-code-change"]
 source = "locales/en/.mustflow/skills/go-code-change/SKILL.md"
 source_locale = "en"
-revision = 2
+revision = 3
 translations = {}
 
 [documents."skill.hono-code-change"]
@@ -266,7 +290,7 @@ translations = {}
 [documents."skill.html-code-change"]
 source = "locales/en/.mustflow/skills/html-code-change/SKILL.md"
 source_locale = "en"
-revision = 2
+revision = 3
 translations = {}
 
 [documents."skill.javascript-code-change"]
@@ -284,13 +308,13 @@ translations = {}
 [documents."skill.python-code-change"]
 source = "locales/en/.mustflow/skills/python-code-change/SKILL.md"
 source_locale = "en"
-revision = 2
+revision = 3
 translations = {}
 
 [documents."skill.rust-code-change"]
 source = "locales/en/.mustflow/skills/rust-code-change/SKILL.md"
 source_locale = "en"
-revision = 3
+revision = 4
 translations = {}
 
 [documents."skill.runtime-target-selection"]
@@ -314,25 +338,31 @@ translations = {}
 [documents."skill.tailwind-code-change"]
 source = "locales/en/.mustflow/skills/tailwind-code-change/SKILL.md"
 source_locale = "en"
-revision = 2
+revision = 3
 translations = {}
 
 [documents."skill.tauri-code-change"]
 source = "locales/en/.mustflow/skills/tauri-code-change/SKILL.md"
 source_locale = "en"
-revision = 2
+revision = 3
 translations = {}
 
 [documents."skill.typescript-code-change"]
 source = "locales/en/.mustflow/skills/typescript-code-change/SKILL.md"
 source_locale = "en"
-revision = 2
+revision = 3
 translations = {}
 
 [documents."skill.unocss-code-change"]
 source = "locales/en/.mustflow/skills/unocss-code-change/SKILL.md"
 source_locale = "en"
-revision = 2
+revision = 3
+translations = {}
+
+[documents."skill.service-boundary-architecture"]
+source = "locales/en/.mustflow/skills/service-boundary-architecture/SKILL.md"
+source_locale = "en"
+revision = 1
 translations = {}
 
 [documents."skill.cli-output-contract-review"]
@@ -475,7 +505,7 @@ translations = {}
 [documents."skill.performance-budget-check"]
 source = "locales/en/.mustflow/skills/performance-budget-check/SKILL.md"
 source_locale = "en"
-revision = 19
+revision = 20
 translations = {}
 
 [documents."skill.pattern-scout"]
@@ -484,6 +514,12 @@ source_locale = "en"
 revision = 2
 translations = {}
 
+[documents."skill.proactive-risk-surfacing"]
+source = "locales/en/.mustflow/skills/proactive-risk-surfacing/SKILL.md"
+source_locale = "en"
+revision = 1
+translations = {}
+
 [documents."skill.process-execution-safety"]
 source = "locales/en/.mustflow/skills/process-execution-safety/SKILL.md"
 source_locale = "en"

package/templates/default/locales/en/.mustflow/docs/agent-workflow.md

@@ -2,7 +2,7 @@
 mustflow_doc: docs.agent-workflow
 locale: en
 canonical: true
-revision: 19
+revision: 20
 lifecycle: mustflow-owned
 authority: workflow-policy
 ---
@@ -139,15 +139,23 @@ Do not write turn counters, message counts, or session activity into the reposit
 
 Do not store hidden reasoning, secrets, full chat transcripts, full terminal output, raw event logs, or raw command logs in the project. If a host creates compacted summaries in the future, they must be source-linked and remain lower authority than current files and direct user instructions.
 
-## Harness Contract Boundary
+## Harness and Runtime Surfaces
 
-mustflow is not an autonomous agent runtime. It is a repository-local contract layer for agent harnesses.
+mustflow starts from repository-local workflow files and command execution boundaries, but it may
+grow optional runtime, coordination, work-item, adapter, and harness surfaces. New surfaces must be
+explicit, bounded, and reviewable instead of being smuggled in through prose, generated state, or
+inferred commands.
 
-- Brain contract: `AGENTS.md`, this workflow file, and skill documents define the expected model behavior.
-- Hands contract: `.mustflow/config/commands.toml` and `mf run` define safe command execution.
-- Session contract: run records, bounded checkpoints, and compact handoffs provide evidence for recovery.
+- Brain surface: `AGENTS.md`, this workflow file, and skill documents define the expected model behavior.
+- Hands surface: `.mustflow/config/commands.toml` and `mf run` define safe command execution.
+- Session surface: run records, bounded checkpoints, compact handoffs, and future work-item records
+  provide evidence for recovery.
+- Runtime surface: worker folders, persona systems, fleet orchestration, service processes, and
+  autonomous loops require declared lifecycle, retention, isolation, approval, and verification rules.
 
-Do not create worker folders, persona systems, fleet orchestration, raw event logs, or autonomous loops unless the repository explicitly adds those optional surfaces.
+Do not operate runtime or coordination surfaces from implicit conventions. Add or enable them through
+explicit configuration, command contracts, tests, and documentation when the repository chooses to
+support that capability.
 
 ## Long-Running Task Phases