mustflow 2.69.0 → 2.74.0

package/dist/cli/i18n/es.js

@@ -40,6 +40,7 @@ export const esMessages = {
     "command.map.summary": "Genera REPO_MAP.md",
     "command.lineEndings.summary": "Inspecciona y normaliza la política de finales de línea",
     "command.quality.summary": "Inspect changed files for quality-gaming patterns",
+    "command.scriptPack.summary": "List and run bundled mustflow script packs",
     "command.run.summary": "Ejecuta un comando configurado de una sola ejecución",
     "command.context.summary": "Imprime contexto de agente legible por máquinas",
     "command.tech.summary": "Gestiona preferencias tecnológicas para agentes",
@@ -182,6 +183,7 @@ export const esMessages = {
     "label.results": "Resultados",
     "label.comment": "Comentario",
     "label.mode": "Modo",
+    "label.status": "Status",
     "adapters.help.summary": "Inspecciona archivos de adaptadores visibles en el repositorio sin generarlos ni autorizarlos.",
     "adapters.help.exit.ok": "La compatibilidad de adaptadores fue inspeccionada e impresa",
     "adapters.help.exit.fail": "El comando recibió entrada inválida",
@@ -747,6 +749,42 @@ Lee estos archivos antes de trabajar:
     "quality.clean": "No quality-gaming risks found.",
     "quality.error.missingAction": "Specify a quality action: check",
     "quality.error.unknownAction": "Unknown quality action: {action}",
+    "scriptPack.help.summary": "List and run bundled mustflow script-pack utilities through one stable command namespace.",
+    "scriptPack.help.exit.ok": "The script-pack command completed successfully",
+    "scriptPack.help.exit.fail": "The script-pack command received invalid input or the selected script failed",
+    "scriptPack.title": "mustflow script packs",
+    "scriptPack.pack.core.summary": "Core built-in utility scripts",
+    "scriptPack.script.textBudget.summary": "Check exact text length budgets for files or JSON string fields",
+    "scriptPack.label.script": "Script",
+    "scriptPack.label.actions": "actions",
+    "scriptPack.label.schema": "schema",
+    "scriptPack.error.missingAction": "Specify a script-pack action: list or run",
+    "scriptPack.error.unknownAction": "Unknown script-pack action: {action}",
+    "scriptPack.error.missingScript": "Specify a script ref such as core/text-budget",
+    "scriptPack.error.unknownScript": "Unknown script-pack script: {script}",
+    "textBudget.help.summary": "Check exact text length budgets for files or JSON string fields using grapheme counts by default.",
+    "textBudget.help.option.min": "Require at least this many units",
+    "textBudget.help.option.max": "Require at most this many units",
+    "textBudget.help.option.exact": "Require exactly this many units; cannot be combined with --min or --max",
+    "textBudget.help.option.unit": "Counting unit: grapheme, code-point, utf16, utf8-byte, word, or line",
+    "textBudget.help.option.jsonPointer": "Read a string field from each JSON file before counting",
+    "textBudget.help.exit.ok": "Every checked target is within the declared budget",
+    "textBudget.help.exit.fail": "A budget violation, read error, JSON error, or invalid input was found",
+    "textBudget.title": "mustflow text budget",
+    "textBudget.label.budget": "Budget",
+    "textBudget.label.checkedTargets": "Checked targets",
+    "textBudget.label.findings": "Findings",
+    "textBudget.label.metrics": "Metrics",
+    "textBudget.label.issues": "Issues",
+    "textBudget.clean": "All text budgets passed.",
+    "textBudget.error.missingAction": "Specify a text-budget action: check",
+    "textBudget.error.unknownAction": "Unknown text-budget action: {action}",
+    "textBudget.error.missingPath": "Provide at least one path to check",
+    "textBudget.error.missingBudget": "Declare at least one text budget with --min, --max, or --exact",
+    "textBudget.error.exactConflict": "Cannot combine --exact with --min or --max",
+    "textBudget.error.invalidNumber": "{option} must be a non-negative safe integer: {value}",
+    "textBudget.error.invalidUnit": "Unknown text-budget unit: {unit}. Use one of: {allowed}",
+    "textBudget.error.minGreaterThanMax": "--min must be less than or equal to --max",
     "run.help.summary": "Ejecuta un comando configurado de una sola ejecución desde .mustflow/config/commands.toml.",
     "run.help.option.dryRun": "Imprime un plan de comando sin ejecutarlo",
     "run.help.option.planOnly": "Alias de --dry-run",

package/dist/cli/i18n/fr.js

@@ -40,6 +40,7 @@ export const frMessages = {
     "command.map.summary": "Génère REPO_MAP.md",
     "command.lineEndings.summary": "Inspecte et normalise la politique de fins de ligne",
     "command.quality.summary": "Inspect changed files for quality-gaming patterns",
+    "command.scriptPack.summary": "List and run bundled mustflow script packs",
     "command.run.summary": "Exécute une commande configurée à exécution unique",
     "command.context.summary": "Imprime le contexte d'agent lisible par machine",
     "command.tech.summary": "Gère les préférences technologiques pour les agents",
@@ -182,6 +183,7 @@ export const frMessages = {
     "label.results": "Résultats",
     "label.comment": "Commentaire",
     "label.mode": "Mode",
+    "label.status": "Status",
     "adapters.help.summary": "Inspecte les fichiers d'adaptateur visibles dans le dépôt sans les générer ni leur donner d'autorité.",
     "adapters.help.exit.ok": "La compatibilité des adaptateurs a été inspectée et affichée",
     "adapters.help.exit.fail": "La commande a reçu une entrée non valide",
@@ -747,6 +749,42 @@ Lisez ces fichiers avant de travailler :
     "quality.clean": "No quality-gaming risks found.",
     "quality.error.missingAction": "Specify a quality action: check",
     "quality.error.unknownAction": "Unknown quality action: {action}",
+    "scriptPack.help.summary": "List and run bundled mustflow script-pack utilities through one stable command namespace.",
+    "scriptPack.help.exit.ok": "The script-pack command completed successfully",
+    "scriptPack.help.exit.fail": "The script-pack command received invalid input or the selected script failed",
+    "scriptPack.title": "mustflow script packs",
+    "scriptPack.pack.core.summary": "Core built-in utility scripts",
+    "scriptPack.script.textBudget.summary": "Check exact text length budgets for files or JSON string fields",
+    "scriptPack.label.script": "Script",
+    "scriptPack.label.actions": "actions",
+    "scriptPack.label.schema": "schema",
+    "scriptPack.error.missingAction": "Specify a script-pack action: list or run",
+    "scriptPack.error.unknownAction": "Unknown script-pack action: {action}",
+    "scriptPack.error.missingScript": "Specify a script ref such as core/text-budget",
+    "scriptPack.error.unknownScript": "Unknown script-pack script: {script}",
+    "textBudget.help.summary": "Check exact text length budgets for files or JSON string fields using grapheme counts by default.",
+    "textBudget.help.option.min": "Require at least this many units",
+    "textBudget.help.option.max": "Require at most this many units",
+    "textBudget.help.option.exact": "Require exactly this many units; cannot be combined with --min or --max",
+    "textBudget.help.option.unit": "Counting unit: grapheme, code-point, utf16, utf8-byte, word, or line",
+    "textBudget.help.option.jsonPointer": "Read a string field from each JSON file before counting",
+    "textBudget.help.exit.ok": "Every checked target is within the declared budget",
+    "textBudget.help.exit.fail": "A budget violation, read error, JSON error, or invalid input was found",
+    "textBudget.title": "mustflow text budget",
+    "textBudget.label.budget": "Budget",
+    "textBudget.label.checkedTargets": "Checked targets",
+    "textBudget.label.findings": "Findings",
+    "textBudget.label.metrics": "Metrics",
+    "textBudget.label.issues": "Issues",
+    "textBudget.clean": "All text budgets passed.",
+    "textBudget.error.missingAction": "Specify a text-budget action: check",
+    "textBudget.error.unknownAction": "Unknown text-budget action: {action}",
+    "textBudget.error.missingPath": "Provide at least one path to check",
+    "textBudget.error.missingBudget": "Declare at least one text budget with --min, --max, or --exact",
+    "textBudget.error.exactConflict": "Cannot combine --exact with --min or --max",
+    "textBudget.error.invalidNumber": "{option} must be a non-negative safe integer: {value}",
+    "textBudget.error.invalidUnit": "Unknown text-budget unit: {unit}. Use one of: {allowed}",
+    "textBudget.error.minGreaterThanMax": "--min must be less than or equal to --max",
     "run.help.summary": "Exécute une commande configurée à exécution unique depuis .mustflow/config/commands.toml.",
     "run.help.option.dryRun": "Imprime un plan de commande sans l'exécuter",
     "run.help.option.planOnly": "Alias de --dry-run",

package/dist/cli/i18n/hi.js

@@ -40,6 +40,7 @@ export const hiMessages = {
     "command.map.summary": "REPO_MAP.md बनाएँ",
     "command.lineEndings.summary": "लाइन-एंडिंग नीति की जाँच और सामान्यीकरण करें",
     "command.quality.summary": "Inspect changed files for quality-gaming patterns",
+    "command.scriptPack.summary": "List and run bundled mustflow script packs",
     "command.run.summary": "कॉन्फ़िगर की गई एक-बार चलने वाली कमांड चलाएँ",
     "command.context.summary": "मशीन-पठनीय एजेंट संदर्भ प्रिंट करें",
     "command.tech.summary": "एजेंटों के लिए technology preferences प्रबंधित करें",
@@ -182,6 +183,7 @@ export const hiMessages = {
     "label.results": "परिणाम",
     "label.comment": "टिप्पणी",
     "label.mode": "मोड",
+    "label.status": "Status",
     "adapters.help.summary": "रिपॉज़िटरी में दिखने वाली होस्ट एडाप्टर फ़ाइलों की जाँच करें, बिना फ़ाइल बनाए या अधिकार दिए।",
     "adapters.help.exit.ok": "एडाप्टर संगतता जाँची और प्रिंट की गई",
     "adapters.help.exit.fail": "कमांड को अमान्य इनपुट मिला",
@@ -747,6 +749,42 @@ export const hiMessages = {
     "quality.clean": "No quality-gaming risks found.",
     "quality.error.missingAction": "Specify a quality action: check",
     "quality.error.unknownAction": "Unknown quality action: {action}",
+    "scriptPack.help.summary": "List and run bundled mustflow script-pack utilities through one stable command namespace.",
+    "scriptPack.help.exit.ok": "The script-pack command completed successfully",
+    "scriptPack.help.exit.fail": "The script-pack command received invalid input or the selected script failed",
+    "scriptPack.title": "mustflow script packs",
+    "scriptPack.pack.core.summary": "Core built-in utility scripts",
+    "scriptPack.script.textBudget.summary": "Check exact text length budgets for files or JSON string fields",
+    "scriptPack.label.script": "Script",
+    "scriptPack.label.actions": "actions",
+    "scriptPack.label.schema": "schema",
+    "scriptPack.error.missingAction": "Specify a script-pack action: list or run",
+    "scriptPack.error.unknownAction": "Unknown script-pack action: {action}",
+    "scriptPack.error.missingScript": "Specify a script ref such as core/text-budget",
+    "scriptPack.error.unknownScript": "Unknown script-pack script: {script}",
+    "textBudget.help.summary": "Check exact text length budgets for files or JSON string fields using grapheme counts by default.",
+    "textBudget.help.option.min": "Require at least this many units",
+    "textBudget.help.option.max": "Require at most this many units",
+    "textBudget.help.option.exact": "Require exactly this many units; cannot be combined with --min or --max",
+    "textBudget.help.option.unit": "Counting unit: grapheme, code-point, utf16, utf8-byte, word, or line",
+    "textBudget.help.option.jsonPointer": "Read a string field from each JSON file before counting",
+    "textBudget.help.exit.ok": "Every checked target is within the declared budget",
+    "textBudget.help.exit.fail": "A budget violation, read error, JSON error, or invalid input was found",
+    "textBudget.title": "mustflow text budget",
+    "textBudget.label.budget": "Budget",
+    "textBudget.label.checkedTargets": "Checked targets",
+    "textBudget.label.findings": "Findings",
+    "textBudget.label.metrics": "Metrics",
+    "textBudget.label.issues": "Issues",
+    "textBudget.clean": "All text budgets passed.",
+    "textBudget.error.missingAction": "Specify a text-budget action: check",
+    "textBudget.error.unknownAction": "Unknown text-budget action: {action}",
+    "textBudget.error.missingPath": "Provide at least one path to check",
+    "textBudget.error.missingBudget": "Declare at least one text budget with --min, --max, or --exact",
+    "textBudget.error.exactConflict": "Cannot combine --exact with --min or --max",
+    "textBudget.error.invalidNumber": "{option} must be a non-negative safe integer: {value}",
+    "textBudget.error.invalidUnit": "Unknown text-budget unit: {unit}. Use one of: {allowed}",
+    "textBudget.error.minGreaterThanMax": "--min must be less than or equal to --max",
     "run.help.summary": ".mustflow/config/commands.toml से कॉन्फ़िगर की गई एक-बार चलने वाली कमांड चलाएँ।",
     "run.help.option.dryRun": "कमांड चलाए बिना उसका plan प्रिंट करें",
     "run.help.option.planOnly": "--dry-run का alias",

package/dist/cli/i18n/ko.js

@@ -40,6 +40,7 @@ export const koMessages = {
     "command.map.summary": "REPO_MAP.md를 작성합니다",
     "command.lineEndings.summary": "줄바꿈 정책을 검사하고 정규화합니다",
     "command.quality.summary": "변경 파일의 품질 지표 꼼수를 검사합니다",
+    "command.scriptPack.summary": "mustflow 내장 script pack을 나열하고 실행합니다",
     "command.run.summary": "설정된 일회성 명령을 실행합니다",
     "command.context.summary": "에이전트 작업 맥락을 출력합니다",
     "command.tech.summary": "에이전트용 기술 선호를 관리합니다",
@@ -182,6 +183,7 @@ export const koMessages = {
     "label.results": "결과",
     "label.comment": "코멘트",
     "label.mode": "모드",
+    "label.status": "상태",
     "adapters.help.summary": "파일을 만들거나 어댑터 표면에 권한을 주지 않고, 저장소에서 보이는 호스트 어댑터 파일을 확인합니다.",
     "adapters.help.exit.ok": "어댑터 호환성을 확인하고 출력했습니다",
     "adapters.help.exit.fail": "잘못된 입력이 제공되었습니다",
@@ -747,6 +749,42 @@ export const koMessages = {
     "quality.clean": "품질 지표 꼼수가 발견되지 않았습니다.",
     "quality.error.missingAction": "quality 작업을 지정하세요: check",
     "quality.error.unknownAction": "알 수 없는 quality 작업: {action}",
+    "scriptPack.help.summary": "mustflow 내장 utility script들을 하나의 안정적인 command namespace 아래에서 나열하고 실행합니다.",
+    "scriptPack.help.exit.ok": "script-pack 명령이 성공적으로 완료되었습니다",
+    "scriptPack.help.exit.fail": "script-pack 명령에 잘못된 입력이 제공되었거나 선택한 script가 실패했습니다",
+    "scriptPack.title": "mustflow script packs",
+    "scriptPack.pack.core.summary": "핵심 내장 utility script",
+    "scriptPack.script.textBudget.summary": "파일이나 JSON 문자열 필드의 정확한 텍스트 길이 예산을 검사합니다",
+    "scriptPack.label.script": "Script",
+    "scriptPack.label.actions": "작업",
+    "scriptPack.label.schema": "스키마",
+    "scriptPack.error.missingAction": "script-pack 작업을 지정하세요: list 또는 run",
+    "scriptPack.error.unknownAction": "알 수 없는 script-pack 작업: {action}",
+    "scriptPack.error.missingScript": "core/text-budget 같은 script ref를 지정하세요",
+    "scriptPack.error.unknownScript": "알 수 없는 script-pack script: {script}",
+    "textBudget.help.summary": "파일이나 JSON 문자열 필드의 정확한 텍스트 길이 예산을 검사합니다. 기본 단위는 grapheme입니다.",
+    "textBudget.help.option.min": "최소 단위 수를 요구합니다",
+    "textBudget.help.option.max": "최대 단위 수를 요구합니다",
+    "textBudget.help.option.exact": "정확히 이 단위 수를 요구합니다. --min 또는 --max와 함께 쓸 수 없습니다",
+    "textBudget.help.option.unit": "계산 단위: grapheme, code-point, utf16, utf8-byte, word, line",
+    "textBudget.help.option.jsonPointer": "계산 전에 각 JSON 파일에서 문자열 필드를 읽습니다",
+    "textBudget.help.exit.ok": "모든 대상이 선언된 예산 안에 있습니다",
+    "textBudget.help.exit.fail": "예산 위반, 읽기 오류, JSON 오류, 또는 잘못된 입력이 발견되었습니다",
+    "textBudget.title": "mustflow text budget",
+    "textBudget.label.budget": "예산",
+    "textBudget.label.checkedTargets": "검사한 대상",
+    "textBudget.label.findings": "발견 항목",
+    "textBudget.label.metrics": "측정값",
+    "textBudget.label.issues": "문제",
+    "textBudget.clean": "모든 텍스트 예산을 통과했습니다.",
+    "textBudget.error.missingAction": "text-budget 작업을 지정하세요: check",
+    "textBudget.error.unknownAction": "알 수 없는 text-budget 작업: {action}",
+    "textBudget.error.missingPath": "검사할 경로를 하나 이상 제공하세요",
+    "textBudget.error.missingBudget": "--min, --max, 또는 --exact 중 하나로 텍스트 예산을 선언하세요",
+    "textBudget.error.exactConflict": "--exact는 --min 또는 --max와 함께 쓸 수 없습니다",
+    "textBudget.error.invalidNumber": "{option} 값은 0 이상의 안전한 정수여야 합니다: {value}",
+    "textBudget.error.invalidUnit": "알 수 없는 text-budget 단위: {unit}. 다음 중 하나를 사용하세요: {allowed}",
+    "textBudget.error.minGreaterThanMax": "--min은 --max보다 작거나 같아야 합니다",
     "run.help.summary": ".mustflow/config/commands.toml에 설정된 일회성 명령을 실행합니다.",
     "run.help.option.dryRun": "실행하지 않고 명령 계획을 출력합니다",
     "run.help.option.planOnly": "--dry-run과 같은 동작입니다",

package/dist/cli/i18n/zh.js

@@ -40,6 +40,7 @@ export const zhMessages = {
     "command.map.summary": "生成 REPO_MAP.md",
     "command.lineEndings.summary": "检查并规范化换行符策略",
     "command.quality.summary": "Inspect changed files for quality-gaming patterns",
+    "command.scriptPack.summary": "List and run bundled mustflow script packs",
     "command.run.summary": "运行已配置的一次性命令",
     "command.context.summary": "输出机器可读的代理上下文",
     "command.tech.summary": "管理代理使用的技术偏好",
@@ -182,6 +183,7 @@ export const zhMessages = {
     "label.results": "结果",
     "label.comment": "评论",
     "label.mode": "模式",
+    "label.status": "Status",
     "adapters.help.summary": "检查仓库中可见的宿主适配器文件，但不生成文件，也不授予适配器执行权限。",
     "adapters.help.exit.ok": "已检查并输出适配器兼容性",
     "adapters.help.exit.fail": "命令收到无效输入",
@@ -747,6 +749,42 @@ export const zhMessages = {
     "quality.clean": "No quality-gaming risks found.",
     "quality.error.missingAction": "Specify a quality action: check",
     "quality.error.unknownAction": "Unknown quality action: {action}",
+    "scriptPack.help.summary": "List and run bundled mustflow script-pack utilities through one stable command namespace.",
+    "scriptPack.help.exit.ok": "The script-pack command completed successfully",
+    "scriptPack.help.exit.fail": "The script-pack command received invalid input or the selected script failed",
+    "scriptPack.title": "mustflow script packs",
+    "scriptPack.pack.core.summary": "Core built-in utility scripts",
+    "scriptPack.script.textBudget.summary": "Check exact text length budgets for files or JSON string fields",
+    "scriptPack.label.script": "Script",
+    "scriptPack.label.actions": "actions",
+    "scriptPack.label.schema": "schema",
+    "scriptPack.error.missingAction": "Specify a script-pack action: list or run",
+    "scriptPack.error.unknownAction": "Unknown script-pack action: {action}",
+    "scriptPack.error.missingScript": "Specify a script ref such as core/text-budget",
+    "scriptPack.error.unknownScript": "Unknown script-pack script: {script}",
+    "textBudget.help.summary": "Check exact text length budgets for files or JSON string fields using grapheme counts by default.",
+    "textBudget.help.option.min": "Require at least this many units",
+    "textBudget.help.option.max": "Require at most this many units",
+    "textBudget.help.option.exact": "Require exactly this many units; cannot be combined with --min or --max",
+    "textBudget.help.option.unit": "Counting unit: grapheme, code-point, utf16, utf8-byte, word, or line",
+    "textBudget.help.option.jsonPointer": "Read a string field from each JSON file before counting",
+    "textBudget.help.exit.ok": "Every checked target is within the declared budget",
+    "textBudget.help.exit.fail": "A budget violation, read error, JSON error, or invalid input was found",
+    "textBudget.title": "mustflow text budget",
+    "textBudget.label.budget": "Budget",
+    "textBudget.label.checkedTargets": "Checked targets",
+    "textBudget.label.findings": "Findings",
+    "textBudget.label.metrics": "Metrics",
+    "textBudget.label.issues": "Issues",
+    "textBudget.clean": "All text budgets passed.",
+    "textBudget.error.missingAction": "Specify a text-budget action: check",
+    "textBudget.error.unknownAction": "Unknown text-budget action: {action}",
+    "textBudget.error.missingPath": "Provide at least one path to check",
+    "textBudget.error.missingBudget": "Declare at least one text budget with --min, --max, or --exact",
+    "textBudget.error.exactConflict": "Cannot combine --exact with --min or --max",
+    "textBudget.error.invalidNumber": "{option} must be a non-negative safe integer: {value}",
+    "textBudget.error.invalidUnit": "Unknown text-budget unit: {unit}. Use one of: {allowed}",
+    "textBudget.error.minGreaterThanMax": "--min must be less than or equal to --max",
     "run.help.summary": "从 .mustflow/config/commands.toml 运行已配置的一次性命令。",
     "run.help.option.dryRun": "输出命令计划但不执行",
     "run.help.option.planOnly": "--dry-run 的别名",

package/dist/cli/index.js

@@ -54,6 +54,7 @@ function getTopLevelHelp(lang) {
             'mf verify --reason code_change',
             'mf line-endings check',
             'mf quality check',
+            'mf script-pack run core/text-budget check README.md --max 5000',
             'mf version --check',
             'mf version-sources --json',
         ],

package/dist/cli/lib/agent-context.js

@@ -87,10 +87,20 @@ function readNumber(table, key) {
     return typeof value === 'number' && Number.isFinite(value) ? value : null;
 }
 function readPathContext(projectRoot, paths) {
-    return paths.map((relativePath) => ({
-        path: toPosixPath(relativePath),
-        exists: safeExists(projectRoot, relativePath),
-    }));
+    return paths.map((relativePath) => {
+        const normalizedPath = toPosixPath(relativePath);
+        const content = safeRead(projectRoot, normalizedPath);
+        return {
+            path: normalizedPath,
+            exists: content !== null,
+            trust: createContextTrust({
+                relativePath: normalizedPath,
+                cacheLayer: null,
+                contentHash: content === null ? null : sha256(content),
+                exists: content !== null,
+            }),
+        };
+    });
 }
 function readScalarObject(table) {
     if (!table) {
@@ -111,6 +121,100 @@ function readScalarObject(table) {
 function sha256(content) {
     return `sha256:${createHash('sha256').update(content).digest('hex')}`;
 }
+function trustSourceKind(relativePath, sourceKind) {
+    if (sourceKind === 'runtime_volatile') {
+        return 'runtime_volatile';
+    }
+    if (relativePath === null) {
+        return sourceKind === 'dynamic_selection' ? 'source_placeholder' : 'unknown_file';
+    }
+    if (relativePath === COMMANDS_RELATIVE_PATH) {
+        return 'command_contract';
+    }
+    if (relativePath === LATEST_RUN_RELATIVE_PATH || relativePath.startsWith('.mustflow/state/')) {
+        return 'generated_state';
+    }
+    if (relativePath.startsWith('.mustflow/cache/')) {
+        return 'generated_cache';
+    }
+    if (relativePath.startsWith('.mustflow/skills/') && relativePath.endsWith('/SKILL.md')) {
+        return 'skill_file';
+    }
+    if (relativePath.startsWith('.mustflow/context/')) {
+        return 'context_file';
+    }
+    if (relativePath === 'AGENTS.md' ||
+        relativePath.startsWith('.mustflow/docs/') ||
+        relativePath.startsWith('.mustflow/config/') ||
+        relativePath.startsWith('.mustflow/skills/')) {
+        return 'workflow_file';
+    }
+    return 'unknown_file';
+}
+function trustAuthority(relativePath, sourceKind) {
+    if (relativePath === 'AGENTS.md') {
+        return 'binding';
+    }
+    if (relativePath === COMMANDS_RELATIVE_PATH) {
+        return 'command_contract';
+    }
+    if (relativePath === MUSTFLOW_RELATIVE_PATH ||
+        relativePath === PREFERENCES_RELATIVE_PATH ||
+        relativePath === TECHNOLOGY_RELATIVE_PATH) {
+        return 'configuration';
+    }
+    if (relativePath?.startsWith('.mustflow/docs/')) {
+        return 'workflow_policy';
+    }
+    if (relativePath?.startsWith('.mustflow/skills/') && relativePath.endsWith('/SKILL.md')) {
+        return 'procedure';
+    }
+    if (relativePath?.startsWith('.mustflow/context/')) {
+        return 'contextual';
+    }
+    if (sourceKind === 'generated_cache') {
+        return 'generated';
+    }
+    if (sourceKind === 'generated_state') {
+        return 'evidence_only';
+    }
+    if (sourceKind === 'runtime_volatile') {
+        return 'volatile';
+    }
+    if (sourceKind === 'source_placeholder') {
+        return 'hint';
+    }
+    return 'unknown';
+}
+function createContextTrust(input) {
+    const normalizedPath = input.relativePath === null ? null : toPosixPath(input.relativePath);
+    const sourceKind = trustSourceKind(normalizedPath, input.sourceKind ?? null);
+    const authority = trustAuthority(normalizedPath, sourceKind);
+    const freshness = sourceKind === 'runtime_volatile'
+        ? 'runtime_volatile'
+        : input.contentHash !== null
+            ? 'hash_verified'
+            : input.exists === false
+                ? 'missing'
+                : sourceKind === 'source_placeholder'
+                    ? 'dynamic'
+                    : 'unchecked';
+    return {
+        source_kind: sourceKind,
+        authority,
+        cache_layer: input.cacheLayer,
+        freshness,
+        content_hash: input.contentHash,
+        can_instruct_agent: authority === 'binding' ||
+            authority === 'workflow_policy' ||
+            authority === 'configuration' ||
+            authority === 'command_contract' ||
+            authority === 'procedure' ||
+            authority === 'contextual',
+        grants_command_authority: authority === 'command_contract',
+        notes: input.notes ?? [],
+    };
+}
 function estimateTokens(renderedBytes) {
     return Math.ceil(renderedBytes / 4);
 }
@@ -396,10 +500,19 @@ function readStablePromptCacheLayer(projectRoot, mustflow) {
     const read = readOptionalStringArray(layer, 'read') ?? [...DEFAULT_PROMPT_CACHE_STABLE_READ];
     const documents = read.map((relativePath) => {
         const content = safeRead(projectRoot, relativePath);
+        const contentHash = content === null ? null : sha256(content);
+        const normalizedPath = toPosixPath(relativePath);
         return {
-            path: toPosixPath(relativePath),
+            path: normalizedPath,
             exists: content !== null,
-            content_hash: content === null ? null : sha256(content),
+            content_hash: contentHash,
+            trust: createContextTrust({
+                relativePath: normalizedPath,
+                cacheLayer: 'stable',
+                contentHash,
+                exists: content !== null,
+                sourceKind: 'file_reference',
+            }),
         };
     });
     const cacheMaterial = documents
@@ -515,6 +628,7 @@ function readStablePromptBundleLayer(projectRoot, mustflow) {
         blocks: read.map((relativePath, index) => {
             const path = toPosixPath(relativePath);
             const content = safeRead(projectRoot, relativePath);
+            const contentHash = content === null ? null : sha256(content);
             const renderedBytes = content === null ? null : measurePromptCacheReferenceBlockBytes(relativePath, content);
             const issue = content === null ? `stable prefix document is missing: ${path}` : null;
             return {
@@ -527,12 +641,19 @@ function readStablePromptBundleLayer(projectRoot, mustflow) {
                 source_kind: 'file_reference',
                 selection_policy: 'always_rendered',
                 content_included: false,
-                content_hash: content === null ? null : sha256(content),
+                content_hash: contentHash,
                 rendered_digest: content === null ? null : renderedDigest(relativePath, content),
                 rendered_bytes: renderedBytes,
                 estimated_tokens: renderedBytes === null ? null : estimateTokens(renderedBytes),
                 cacheability: 'provider_prefix_candidate',
                 reload_on: ['stable_file_hash_changed'],
+                trust: createContextTrust({
+                    relativePath: path,
+                    cacheLayer: 'stable',
+                    contentHash,
+                    exists: content !== null,
+                    sourceKind: 'file_reference',
+                }),
                 issue,
             };
         }),
@@ -589,6 +710,14 @@ function readTaskPromptBundleLayer(projectRoot, mustflow, routeReport) {
                 estimated_tokens: renderedBytes === null ? null : estimateTokens(renderedBytes),
                 cacheability: taskSourceCacheability(source, selectionPolicy),
                 reload_on: taskSourceReloadOn(source, selectionPolicy),
+                trust: createContextTrust({
+                    relativePath: routeCandidateContent !== null ? SKILL_ROUTE_CANDIDATES_VIRTUAL_PATH : referencePath,
+                    cacheLayer: 'task',
+                    contentHash,
+                    exists: routeCandidateContent !== null || content !== null ? true : sourceKind === 'file_reference' ? false : null,
+                    sourceKind,
+                    notes: source === 'skill_route_candidates' ? ['derived from route resolver input'] : [],
+                }),
                 issue,
             };
             if (source !== 'matching_skill') {
@@ -597,6 +726,7 @@ function readTaskPromptBundleLayer(projectRoot, mustflow, routeReport) {
             const selectedBlocks = selectedSkillPaths.map((skillPath, selectedIndex) => {
                 const normalizedPath = toPosixPath(skillPath);
                 const skillContent = safeRead(projectRoot, normalizedPath);
+                const skillContentHash = skillContent === null ? null : sha256(skillContent);
                 const skillRenderedBytes = skillContent === null ? null : measurePromptCacheReferenceBlockBytes(normalizedPath, skillContent);
                 const skillIssue = skillContent === null
                     ? taskSourceIssue(normalizedPath, 'hash_only_deferred')
@@ -611,12 +741,20 @@ function readTaskPromptBundleLayer(projectRoot, mustflow, routeReport) {
                     source_kind: skillContent === null ? 'dynamic_selection' : 'file_reference',
                     selection_policy: 'selected_at_runtime',
                     content_included: false,
-                    content_hash: skillContent === null ? null : sha256(skillContent),
+                    content_hash: skillContentHash,
                     rendered_digest: skillContent === null ? null : renderedDigest(normalizedPath, skillContent),
                     rendered_bytes: skillRenderedBytes,
                     estimated_tokens: skillRenderedBytes === null ? null : estimateTokens(skillRenderedBytes),
                     cacheability: 'runtime_selection',
                     reload_on: ['route_resolution_changed', 'source_file_hash_changed'],
+                    trust: createContextTrust({
+                        relativePath: normalizedPath,
+                        cacheLayer: 'task',
+                        contentHash: skillContentHash,
+                        exists: skillContent !== null,
+                        sourceKind: skillContent === null ? 'dynamic_selection' : 'file_reference',
+                        notes: ['selected by task route resolver'],
+                    }),
                     issue: skillIssue,
                 };
             });
@@ -646,6 +784,14 @@ function readVolatilePromptBundleLayer(mustflow) {
             estimated_tokens: null,
             cacheability: 'volatile_suffix',
             reload_on: ['volatile_state_changed'],
+            trust: createContextTrust({
+                relativePath: null,
+                cacheLayer: 'volatile',
+                contentHash: null,
+                exists: null,
+                sourceKind: 'runtime_volatile',
+                notes: ['not rendered in stable or task prompt cache layers'],
+            }),
             issue,
         })),
     };
@@ -663,10 +809,27 @@ function readPromptBundle(projectRoot, mustflow, profile, routeReport = null) {
     }
     const blocks = layers.flatMap((layer) => layer.blocks);
     const shapeMaterial = blocks
-        .map((block) => [block.cache_layer, block.order, block.kind, block.path ?? '', block.source ?? '', block.selection_policy, block.cacheability].join('\0'))
+        .map((block) => [
+        block.cache_layer,
+        block.order,
+        block.kind,
+        block.path ?? '',
+        block.source ?? '',
+        block.selection_policy,
+        block.cacheability,
+        block.trust.authority,
+        block.trust.source_kind,
+    ].join('\0'))
         .join('\n');
     const bundleMaterial = blocks
-        .map((block) => [block.id, block.content_hash ?? '', block.rendered_digest ?? '', block.issue ?? ''].join('\0'))
+        .map((block) => [
+        block.id,
+        block.content_hash ?? '',
+        block.rendered_digest ?? '',
+        block.trust.freshness,
+        block.trust.content_hash ?? '',
+        block.issue ?? '',
+    ].join('\0'))
         .join('\n');
     return {
         schema_version: '1',
@@ -744,6 +907,9 @@ function blockLocation(block) {
 function compareStringArray(left, right) {
     return left.length === right.length && left.every((entry, index) => entry === right[index]);
 }
+function contextTrustMatches(left, right) {
+    return JSON.stringify(left ?? null) === JSON.stringify(right ?? null);
+}
 function changedBlockFields(current, baseline) {
     const fields = [];
     if (current.id !== baseline.id) {
@@ -779,6 +945,9 @@ function changedBlockFields(current, baseline) {
     if (current.cacheability !== baseline.cacheability) {
         fields.push('cacheability');
     }
+    if (!contextTrustMatches(current.trust, baseline.trust)) {
+        fields.push('trust');
+    }
     if (!compareStringArray(current.reload_on, baseline.reload_on)) {
         fields.push('reload_on');
     }

package/dist/cli/lib/command-registry.js

@@ -95,6 +95,12 @@ export const COMMAND_DEFINITIONS = [
         summaryKey: 'command.quality.summary',
         loadRunner: async () => (await import('../commands/quality.js')).runQuality,
     },
+    {
+        id: 'script-pack',
+        usage: 'mf script-pack',
+        summaryKey: 'command.scriptPack.summary',
+        loadRunner: async () => (await import('../commands/script-pack.js')).runScriptPack,
+    },
     {
         id: 'run',
         usage: 'mf run',

package/dist/cli/lib/dashboard-export.js

@@ -448,6 +448,7 @@ function createDashboardHarnessReport(statusValue, docsReviewValue) {
         verification: {
             completion_verdict: completionVerdict,
             evidence_model: evidenceModel,
+            conflict_ledger: evidenceModel.conflict_ledger,
             changed_file_count: changedFileCount,
             changed_surfaces: changedSurfaces,
             decision_graph_summary: decisionGraphSummary,

package/dist/cli/lib/script-pack-registry.js

@@ -0,0 +1,27 @@
+function scriptRef(packId, scriptId) {
+    return `${packId}/${scriptId}`;
+}
+export const SCRIPT_PACKS = [
+    {
+        id: 'core',
+        summaryKey: 'scriptPack.pack.core.summary',
+        scripts: [
+            {
+                packId: 'core',
+                id: 'text-budget',
+                ref: scriptRef('core', 'text-budget'),
+                usage: 'mf script-pack run core/text-budget check <path...> [options]',
+                summaryKey: 'scriptPack.script.textBudget.summary',
+                actions: ['check'],
+                reportSchemaFile: 'text-budget-report.schema.json',
+                loadRunner: async () => (await import('../script-packs/core-text-budget.js')).runCoreTextBudgetScript,
+            },
+        ],
+    },
+];
+export function listScriptPackScripts() {
+    return SCRIPT_PACKS.flatMap((pack) => pack.scripts);
+}
+export function findScriptPackScript(ref) {
+    return listScriptPackScripts().find((script) => script.ref === ref);
+}