mustflow 2.58.0 → 2.58.1

package/dist/cli/commands/tech.js

@@ -3,6 +3,7 @@ import { printUsageError, renderCliError, renderHelp } from '../lib/cli-output.j
 import { writeUtf8FileInsideWithoutSymlinks } from '../lib/filesystem.js';
 import { isRecord } from '../lib/command-contract.js';
 import { t } from '../lib/i18n.js';
+import { checkNpmPackageExists } from '../lib/npm-version-check.js';
 import { formatCliOptionParseError, getParsedCliStringOption, hasCliOptionToken, hasParsedCliOption, parseCliOptions, } from '../lib/option-parser.js';
 import { resolveMustflowRoot } from '../lib/project-root.js';
 import { readMustflowTomlFile } from '../lib/toml.js';
@@ -14,6 +15,7 @@ const TECH_OPTIONS = [
     { name: '--status', kind: 'string' },
     { name: '--ecosystem', kind: 'string' },
     { name: '--package', kind: 'string' },
+    { name: '--verify', kind: 'boolean' },
     { name: '--why', kind: 'string' },
     { name: '--constraint', kind: 'string' },
 ];
@@ -40,13 +42,14 @@ export function getTechHelp(lang = 'en') {
             { label: '--status <status>', description: `Preference status: ${TECHNOLOGY_STATUSES.join(', ')}` },
             { label: '--ecosystem <ecosystem>', description: 'Package ecosystem or platform, such as npm, cargo, pip, go, or deno' },
             { label: '--package <package>', description: 'Package name to associate with the preference. Repeatable.' },
+            { label: '--verify', description: 'Verify listed npm packages exist before writing the preference' },
             { label: '--why <text>', description: 'Short rationale for the preference' },
             { label: '--constraint <text>', description: 'Guardrail agents must keep in mind. Repeatable.' },
             { label: '-h, --help', description: t(lang, 'cli.option.help') },
         ],
         examples: [
             'mf tech list',
-            'mf tech add framework nextjs --scope frontend --ecosystem npm --package next --package react --why "Preferred React app framework"',
+            'mf tech add framework nextjs --scope frontend --ecosystem npm --package next --package react --verify --why "Preferred React app framework"',
             'mf tech add language rust --scope backend --status preferred --why "Use for correctness-critical engines"',
             'mf tech add library jquery --scope frontend --status avoid --why "Avoid new usage"',
             'mf tech suggest --scope frontend',
@@ -71,6 +74,7 @@ function parseTechOptions(args, lang) {
             status: null,
             ecosystem: null,
             packages: [],
+            verify: false,
             why: null,
             constraints: [],
             error: actionToken ? `Unknown tech action: ${actionToken}` : 'Specify a tech action: list, add, remove, or suggest',
@@ -87,6 +91,7 @@ function parseTechOptions(args, lang) {
             status: null,
             ecosystem: null,
             packages: [],
+            verify: hasParsedCliOption(parsed, '--verify'),
             why: null,
             constraints: [],
             error: formatCliOptionParseError(parsed.error, lang),
@@ -109,6 +114,7 @@ function parseTechOptions(args, lang) {
         status,
         ecosystem: getParsedCliStringOption(parsed, '--ecosystem'),
         packages: getRepeatedStringOptions(parsed.occurrences, '--package'),
+        verify: hasParsedCliOption(parsed, '--verify'),
         why: getParsedCliStringOption(parsed, '--why'),
         constraints: getRepeatedStringOptions(parsed.occurrences, '--constraint'),
     };
@@ -123,6 +129,7 @@ function invalidParsed(action, positionals, json, error) {
         status: null,
         ecosystem: null,
         packages: [],
+        verify: false,
         why: null,
         constraints: [],
         error,
@@ -239,7 +246,44 @@ function findExistingIndex(preferences, candidate) {
         return preference.kind === candidate.kind && normalizeTechnologyKey(preference.name) === normalizeTechnologyKey(candidate.name);
     });
 }
-function runAdd(projectRoot, options, reporter) {
+async function verifyNpmPackages(options, reporter) {
+    if (!options.verify) {
+        return [];
+    }
+    if (options.action !== 'add') {
+        reporter.stderr(renderCliError('--verify is only supported with mf tech add', 'mf tech --help'));
+        return null;
+    }
+    if (options.packages.length === 0) {
+        reporter.stderr(renderCliError('--verify requires at least one --package value', 'mf tech --help'));
+        return null;
+    }
+    if (options.ecosystem !== 'npm') {
+        reporter.stderr(renderCliError('--verify currently supports --ecosystem npm only', 'mf tech --help'));
+        return null;
+    }
+    const checks = [];
+    for (const packageName of options.packages) {
+        try {
+            const check = await checkNpmPackageExists(packageName);
+            if (!check.exists) {
+                reporter.stderr(renderCliError(`npm package not found: ${packageName}`, 'mf tech --help'));
+                return null;
+            }
+            checks.push(check);
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            reporter.stderr(renderCliError(`Could not verify npm package ${packageName}: ${message}`, 'mf tech --help'));
+            return null;
+        }
+    }
+    return checks;
+}
+function renderVerifiedPackageNames(checks) {
+    return checks.map((check) => check.resolvedName ?? check.packageName).join(', ');
+}
+async function runAdd(projectRoot, options, reporter) {
     const [kindToken, nameToken] = options.positionals;
     if (!isTechnologyKind(kindToken ?? null)) {
         reporter.stderr(renderCliError('Missing or unsupported technology kind', 'mf tech --help'));
@@ -277,6 +321,10 @@ function runAdd(projectRoot, options, reporter) {
     const preferences = [...file.preferences];
     const existingIndex = findExistingIndex(preferences, candidate);
     const action = existingIndex === -1 ? 'created' : 'updated';
+    const verifiedPackages = await verifyNpmPackages(options, reporter);
+    if (verifiedPackages === null) {
+        return 1;
+    }
     if (existingIndex === -1) {
         preferences.push(candidate);
     }
@@ -285,9 +333,17 @@ function runAdd(projectRoot, options, reporter) {
     }
     writeTechnologyPreferences(projectRoot, preferences);
     if (options.json) {
-        reporter.stdout(JSON.stringify({ action, preference: candidate, path: TECHNOLOGY_CONFIG_RELATIVE_PATH }, null, 2));
+        reporter.stdout(JSON.stringify({
+            action,
+            preference: candidate,
+            path: TECHNOLOGY_CONFIG_RELATIVE_PATH,
+            verified_packages: verifiedPackages,
+        }, null, 2));
         return 0;
     }
+    if (verifiedPackages.length > 0) {
+        reporter.stdout(`Verified npm packages: ${renderVerifiedPackageNames(verifiedPackages)}`);
+    }
     reporter.stdout(`${action === 'created' ? 'Created' : 'Updated'} ${candidate.id} in ${TECHNOLOGY_CONFIG_RELATIVE_PATH}`);
     return 0;
 }
@@ -322,7 +378,7 @@ function runRemove(projectRoot, options, reporter) {
     reporter.stdout(`Removed ${removed.id} from ${TECHNOLOGY_CONFIG_RELATIVE_PATH}`);
     return 0;
 }
-export function runTech(args, reporter, lang = 'en') {
+export async function runTech(args, reporter, lang = 'en') {
     if (hasCliOptionToken(args, '--help', ['-h'])) {
         reporter.stdout(getTechHelp(lang));
         return 0;

package/dist/cli/lib/npm-version-check.js

@@ -150,6 +150,42 @@ function buildLatestPackageUrl(registryUrl, packageName) {
         : encodeURIComponent(packageName);
     return `${trimmedRegistryUrl}/${encodedPackageName}/latest`;
 }
+function buildPackageMetadataUrl(registryUrl, packageName) {
+    const trimmedRegistryUrl = registryUrl.replace(/\/+$/u, '');
+    const encodedPackageName = packageName.startsWith('@')
+        ? `@${encodeURIComponent(packageName.slice(1))}`
+        : encodeURIComponent(packageName);
+    return `${trimmedRegistryUrl}/${encodedPackageName}`;
+}
+export async function checkNpmPackageExists(packageName) {
+    const registryUrl = getRegistryUrl();
+    const response = await fetch(buildPackageMetadataUrl(registryUrl, packageName), {
+        headers: { accept: 'application/json' },
+        signal: AbortSignal.timeout(getTimeoutMs()),
+    });
+    if (response.status === 404) {
+        return {
+            packageName,
+            registryUrl,
+            exists: false,
+            resolvedName: null,
+        };
+    }
+    if (!response.ok) {
+        throw new Error(`npm registry returned HTTP ${response.status}`);
+    }
+    const body = await response.json();
+    const resolvedName = isRecord(body) && typeof body.name === 'string' ? body.name : null;
+    if (!resolvedName) {
+        throw new Error('npm registry response did not include a package name');
+    }
+    return {
+        packageName,
+        registryUrl,
+        exists: true,
+        resolvedName,
+    };
+}
 export async function checkNpmLatestVersion(metadata) {
     const registryUrl = getRegistryUrl();
     const response = await fetch(buildLatestPackageUrl(registryUrl, metadata.name), {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mustflow",
-  "version": "2.58.0",
+  "version": "2.58.1",
   "description": "Agent workflow documents and CLI for mustflow repository roots.",
   "type": "module",
   "license": "MIT-0",

package/templates/default/manifest.toml

@@ -1,6 +1,6 @@
 id = "default"
 name = "default"
-version = "2.58.0"
+version = "2.58.1"
 description = "Minimal workflow for LLM agents to read, edit, and verify their work in a repository."
 common_root = "common"
 locales_root = "locales"