mustflow 2.75.2 → 2.85.4

package/schemas/README.md

@@ -65,14 +65,48 @@ Current schemas:
 - `script-pack-suggestion-report.schema.json`: output of `mf script-pack suggest --json`, containing
   path, skill, phase, and changed-file evidence used to recommend optional script-pack helpers
 - `code-outline-report.schema.json`: output of
-  `mf script-pack run code/outline scan <path...> --json`, containing a bounded TypeScript and
-  JavaScript source outline with file hashes, symbol names, declaration kinds, line ranges,
-  signatures, export flags, source-anchor navigation metadata, static return metadata, and stable
-  input-limit finding codes
+  `mf script-pack run code/outline scan <path...> --json`, containing a bounded source outline with
+  file hashes, language metadata, symbol names, declaration kinds, line ranges, signatures, export
+  flags, source-anchor navigation metadata, static return metadata, and stable input-limit finding
+  codes
+- `dependency-graph-report.schema.json`: output of
+  `mf script-pack run code/dependency-graph scan <path...> --json`, containing bounded relative
+  TypeScript and JavaScript import graph nodes, edges, cycle hints, target flags, depth, importer
+  counts, policy limits, and stable input-limit finding codes
+- `change-impact-report.schema.json`: output of
+  `mf script-pack run code/change-impact analyze [path...] --json`, containing git-diff changed
+  files, surface classifications, bounded impact candidates, optional script-pack hints,
+  verification intent hints, policy limits, and stable git or input-limit finding codes
 - `code-symbol-read-report.schema.json`: output of
   `mf script-pack run code/symbol-read read <path> --start-line <line> --json`, containing a
-  focused source snippet selected by outline symbol line or explicit line range with file hash,
-  resolved line metadata, optional symbol and static return metadata, and stable range/read finding codes
+  focused source snippet selected by source anchor, outline symbol line, or explicit line range with
+  file hash, resolved line metadata, optional anchor, symbol and static return metadata, and stable
+  range/read finding codes
+- `route-outline-report.schema.json`: output of
+  `mf script-pack run code/route-outline scan <path...> --json`, containing a bounded Hono,
+  Elysia, Axum, and NestJS route outline with file hashes, framework evidence, route methods,
+  route paths, optional handler names, line ranges, lifecycle-chain metadata, and stable input-limit
+  finding codes
+- `export-diff-report.schema.json`: output of
+  `mf script-pack run code/export-diff compare [path...] --json`, containing a bounded git-based
+  comparison of exported TypeScript and JavaScript declarations, signatures, return metadata,
+  package surface hints, and unresolved re-export findings
+- `reference-drift-report.schema.json`: output of
+  `mf script-pack run docs/reference-drift check [path...] --json`, containing checked
+  documentation references to `mf` commands, script-pack refs, schema files, repository paths,
+  and stable stale-reference finding codes
+- `config-chain-report.schema.json`: output of
+  `mf script-pack run repo/config-chain inspect <path...> --json`, containing nearby package,
+  TypeScript, ESLint, Prettier, Vite, Vitest, Tailwind, Jest, Playwright, and mustflow config files
+  with static inheritance, reference, workspace, dynamic-config, path, and content-hash metadata
+- `env-contract-report.schema.json`: output of
+  `mf script-pack run repo/env-contract scan [path...] --json`, containing code, CI, docs, config,
+  and env-example references for environment-variable contract drift without reading secret env files
+  or printing env values
+- `secret-risk-scan-report.schema.json`: output of
+  `mf script-pack run repo/secret-risk-scan scan [path...] --json`, containing plausible
+  hardcoded-secret findings with detector names, paths, line numbers, and redacted fingerprints
+  without printing secret values
 - `text-budget-report.schema.json`: output of
   `mf script-pack run core/text-budget check <path...> --json`, containing
   exact text-budget metrics, input content hashes, policy metadata, findings, and JSON Pointer field
@@ -80,6 +114,10 @@ Current schemas:
 - `generated-boundary-report.schema.json`: output of
   `mf script-pack run repo/generated-boundary check <path...> --json`, containing candidate path
   classifications for generated, ignored, protected, vendor, and cache boundaries before or after edits
+- `related-files-report.schema.json`: output of
+  `mf script-pack run repo/related-files map <path...> --json`, containing conservative related-file
+  candidates from direct imports, importers, same-basename siblings, parent configuration files, and
+  package boundaries for source-oriented repository navigation
 - `skill-route-report.schema.json`: output of `mf skill route --json`, containing compact route
   candidates, selected main and adjunct skills, score breakdowns, route read plans, source route
   shards, and optional read-only script-pack helper suggestions without granting command authority

package/schemas/change-impact-report.schema.json

@@ -0,0 +1,150 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://mustflow.github.io/schemas/change-impact-report.schema.json",
+  "title": "mustflow change-impact report",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema_version",
+    "command",
+    "pack_id",
+    "script_id",
+    "script_ref",
+    "action",
+    "status",
+    "ok",
+    "mustflow_root",
+    "policy",
+    "input_hash",
+    "changed_files",
+    "impacts",
+    "script_hints",
+    "verification_hints",
+    "truncated",
+    "findings",
+    "issues"
+  ],
+  "properties": {
+    "schema_version": { "const": "1" },
+    "command": { "const": "script-pack" },
+    "pack_id": { "const": "code" },
+    "script_id": { "const": "change-impact" },
+    "script_ref": { "const": "code/change-impact" },
+    "action": { "const": "analyze" },
+    "status": { "enum": ["passed", "failed", "error"] },
+    "ok": { "type": "boolean" },
+    "mustflow_root": { "type": "string" },
+    "policy": { "$ref": "#/$defs/policy" },
+    "input_hash": { "$ref": "#/$defs/sha256" },
+    "changed_files": { "type": "array", "items": { "$ref": "#/$defs/changedFile" } },
+    "impacts": { "type": "array", "items": { "$ref": "#/$defs/impact" } },
+    "script_hints": { "type": "array", "items": { "$ref": "#/$defs/scriptHint" } },
+    "verification_hints": { "type": "array", "items": { "$ref": "#/$defs/verificationHint" } },
+    "truncated": { "type": "boolean" },
+    "findings": { "type": "array", "items": { "$ref": "#/$defs/finding" } },
+    "issues": { "type": "array", "items": { "type": "string" } }
+  },
+  "$defs": {
+    "sha256": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
+    "surface": {
+      "enum": ["source", "test", "docs", "schema", "config", "package", "template", "workflow", "i18n", "unknown"]
+    },
+    "policy": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "base_ref",
+        "head_ref",
+        "compare_worktree",
+        "max_files",
+        "max_impacts",
+        "max_file_bytes",
+        "path_filters"
+      ],
+      "properties": {
+        "base_ref": { "type": "string" },
+        "head_ref": { "type": ["string", "null"] },
+        "compare_worktree": { "type": "boolean" },
+        "max_files": { "type": "integer", "minimum": 1 },
+        "max_impacts": { "type": "integer", "minimum": 1 },
+        "max_file_bytes": { "type": "integer", "minimum": 1 },
+        "path_filters": { "type": "array", "items": { "type": "string" } }
+      }
+    },
+    "changedFile": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["path", "previous_path", "status", "surface"],
+      "properties": {
+        "path": { "type": "string" },
+        "previous_path": { "type": ["string", "null"] },
+        "status": { "enum": ["added", "modified", "deleted", "renamed", "type_changed", "untracked"] },
+        "surface": { "$ref": "#/$defs/surface" }
+      }
+    },
+    "impact": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["path", "exists", "surface", "relationship", "confidence", "reason", "source_path"],
+      "properties": {
+        "path": { "type": "string" },
+        "exists": { "type": "boolean" },
+        "surface": { "$ref": "#/$defs/surface" },
+        "relationship": {
+          "enum": [
+            "changed_file",
+            "imports_changed_file",
+            "sibling_test",
+            "sibling_source",
+            "contract_doc",
+            "contract_test",
+            "package_surface",
+            "workflow_surface"
+          ]
+        },
+        "confidence": { "type": "number", "minimum": 0, "maximum": 1 },
+        "reason": { "type": "string" },
+        "source_path": { "type": "string" }
+      }
+    },
+    "scriptHint": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["script_ref", "command", "reason", "confidence"],
+      "properties": {
+        "script_ref": { "type": "string" },
+        "command": { "type": "string" },
+        "reason": { "type": "string" },
+        "confidence": { "type": "number", "minimum": 0, "maximum": 1 }
+      }
+    },
+    "verificationHint": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["intent", "reason", "confidence"],
+      "properties": {
+        "intent": { "type": "string" },
+        "reason": { "type": "string" },
+        "confidence": { "type": "number", "minimum": 0, "maximum": 1 }
+      }
+    },
+    "finding": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["code", "severity", "message", "path"],
+      "properties": {
+        "code": {
+          "enum": [
+            "change_impact_git_unavailable",
+            "change_impact_invalid_ref",
+            "change_impact_max_files_exceeded",
+            "change_impact_max_impacts_exceeded"
+          ]
+        },
+        "severity": { "enum": ["low", "medium", "high", "critical"] },
+        "message": { "type": "string" },
+        "path": { "type": "string" }
+      }
+    }
+  }
+}

package/schemas/code-outline-report.schema.json

@@ -61,7 +61,7 @@
       "pattern": "^sha256:[a-f0-9]{64}$"
     },
     "language": {
-      "enum": ["typescript", "tsx", "javascript", "jsx", "javascript-module", "javascript-commonjs"]
+      "enum": ["typescript", "tsx", "javascript", "jsx", "javascript-module", "javascript-commonjs", "astro", "svelte", "go", "rust", "python"]
     },
     "symbolKind": {
       "enum": ["function", "class", "interface", "type", "enum", "variable"]

package/schemas/code-symbol-read-report.schema.json

@@ -60,7 +60,7 @@
       "pattern": "^sha256:[a-f0-9]{64}$"
     },
     "language": {
-      "enum": ["typescript", "tsx", "javascript", "jsx", "javascript-module", "javascript-commonjs"]
+      "enum": ["typescript", "tsx", "javascript", "jsx", "javascript-module", "javascript-commonjs", "astro", "svelte", "go", "rust", "python"]
     },
     "symbolKind": {
       "enum": ["function", "class", "interface", "type", "enum", "variable"]
@@ -68,9 +68,10 @@
     "policy": {
       "type": "object",
       "additionalProperties": false,
-      "required": ["start_line", "end_line", "context_lines", "max_file_bytes", "max_snippet_lines"],
+      "required": ["anchor_id", "start_line", "end_line", "context_lines", "max_file_bytes", "max_snippet_lines"],
       "properties": {
-        "start_line": { "type": "integer", "minimum": 1 },
+        "anchor_id": { "type": ["string", "null"] },
+        "start_line": { "type": ["integer", "null"], "minimum": 1 },
         "end_line": { "type": ["integer", "null"], "minimum": 1 },
         "context_lines": { "type": "integer", "minimum": 0 },
         "max_file_bytes": { "type": "integer", "minimum": 1 },
@@ -124,6 +125,53 @@
         "content_sha256": { "$ref": "#/$defs/sha256" }
       }
     },
+    "anchor": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "id",
+        "path",
+        "line_start",
+        "line_end",
+        "purpose",
+        "search",
+        "invariant",
+        "risk",
+        "navigation_only",
+        "can_instruct_agent",
+        "target_symbol_id",
+        "target_kind",
+        "target_name",
+        "target_start_line"
+      ],
+      "properties": {
+        "id": { "type": "string" },
+        "path": { "type": "string" },
+        "line_start": { "type": "integer", "minimum": 1 },
+        "line_end": { "type": "integer", "minimum": 1 },
+        "purpose": { "type": ["string", "null"] },
+        "search": {
+          "type": "array",
+          "items": { "type": "string" }
+        },
+        "invariant": { "type": ["string", "null"] },
+        "risk": {
+          "type": "array",
+          "items": { "type": "string" }
+        },
+        "navigation_only": { "const": true },
+        "can_instruct_agent": { "const": false },
+        "target_symbol_id": { "type": ["string", "null"] },
+        "target_kind": {
+          "anyOf": [
+            { "$ref": "#/$defs/symbolKind" },
+            { "type": "null" }
+          ]
+        },
+        "target_name": { "type": ["string", "null"] },
+        "target_start_line": { "type": ["integer", "null"], "minimum": 1 }
+      }
+    },
     "target": {
       "type": "object",
       "additionalProperties": false,
@@ -133,12 +181,14 @@
         "sha256",
         "size_bytes",
         "line_count",
+        "requested_anchor_id",
         "requested_start_line",
         "requested_end_line",
         "resolved_start_line",
         "resolved_end_line",
         "context_start_line",
         "context_end_line",
+        "anchor",
         "symbol"
       ],
       "properties": {
@@ -147,12 +197,19 @@
         "sha256": { "$ref": "#/$defs/sha256" },
         "size_bytes": { "type": "integer", "minimum": 0 },
         "line_count": { "type": "integer", "minimum": 0 },
-        "requested_start_line": { "type": "integer", "minimum": 1 },
+        "requested_anchor_id": { "type": ["string", "null"] },
+        "requested_start_line": { "type": ["integer", "null"], "minimum": 1 },
         "requested_end_line": { "type": ["integer", "null"], "minimum": 1 },
         "resolved_start_line": { "type": ["integer", "null"], "minimum": 1 },
         "resolved_end_line": { "type": ["integer", "null"], "minimum": 1 },
         "context_start_line": { "type": ["integer", "null"], "minimum": 1 },
         "context_end_line": { "type": ["integer", "null"], "minimum": 1 },
+        "anchor": {
+          "anyOf": [
+            { "$ref": "#/$defs/anchor" },
+            { "type": "null" }
+          ]
+        },
         "symbol": {
           "anyOf": [
             { "$ref": "#/$defs/symbol" },
@@ -183,6 +240,9 @@
             "code_symbol_read_unreadable_path",
             "code_symbol_read_invalid_range",
             "code_symbol_read_no_symbol_at_line",
+            "code_symbol_read_anchor_not_found",
+            "code_symbol_read_anchor_ambiguous",
+            "code_symbol_read_anchor_without_symbol",
             "code_symbol_read_snippet_too_large"
           ]
         },

package/schemas/commands.schema.json

@@ -47,6 +47,18 @@
     "resources": {
       "type": "object",
       "additionalProperties": { "$ref": "#/$defs/resource" }
+    },
+    "include": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["files"],
+      "properties": {
+        "files": {
+          "type": "array",
+          "items": { "type": "string", "pattern": "^commands/(?:[A-Za-z0-9._-]+/)*[A-Za-z0-9._-]+\\.toml$" },
+          "uniqueItems": true
+        }
+      }
     }
   },
   "$defs": {

package/schemas/config-chain-report.schema.json

@@ -0,0 +1,187 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://mustflow.github.io/schemas/config-chain-report.schema.json",
+  "title": "mustflow config-chain report",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema_version",
+    "command",
+    "pack_id",
+    "script_id",
+    "script_ref",
+    "action",
+    "status",
+    "ok",
+    "mustflow_root",
+    "policy",
+    "input_hash",
+    "targets",
+    "configs",
+    "edges",
+    "findings",
+    "issues"
+  ],
+  "properties": {
+    "schema_version": { "const": "1" },
+    "command": { "const": "script-pack" },
+    "pack_id": { "const": "repo" },
+    "script_id": { "const": "config-chain" },
+    "script_ref": { "const": "repo/config-chain" },
+    "action": { "const": "inspect" },
+    "status": { "enum": ["passed", "failed", "error"] },
+    "ok": { "type": "boolean" },
+    "mustflow_root": { "type": "string" },
+    "policy": { "$ref": "#/$defs/policy" },
+    "input_hash": { "$ref": "#/$defs/sha256" },
+    "targets": {
+      "type": "array",
+      "items": { "$ref": "#/$defs/target" }
+    },
+    "configs": {
+      "type": "array",
+      "items": { "$ref": "#/$defs/config" }
+    },
+    "edges": {
+      "type": "array",
+      "items": { "$ref": "#/$defs/edge" }
+    },
+    "findings": {
+      "type": "array",
+      "items": { "$ref": "#/$defs/finding" }
+    },
+    "issues": {
+      "type": "array",
+      "items": { "type": "string" }
+    }
+  },
+  "$defs": {
+    "sha256": {
+      "type": "string",
+      "pattern": "^sha256:[a-f0-9]{64}$"
+    },
+    "nullableSha256": {
+      "type": ["string", "null"],
+      "pattern": "^sha256:[a-f0-9]{64}$"
+    },
+    "stringArray": {
+      "type": "array",
+      "items": { "type": "string" }
+    },
+    "policy": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["max_file_bytes", "max_configs", "config_names", "ignored_directories"],
+      "properties": {
+        "max_file_bytes": { "type": "integer", "minimum": 1 },
+        "max_configs": { "type": "integer", "minimum": 1 },
+        "config_names": { "$ref": "#/$defs/stringArray" },
+        "ignored_directories": { "$ref": "#/$defs/stringArray" }
+      }
+    },
+    "target": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["input", "path", "exists", "kind"],
+      "properties": {
+        "input": { "type": "string" },
+        "path": { "type": "string" },
+        "exists": { "type": ["boolean", "null"] },
+        "kind": { "enum": ["file", "directory", "missing", "other", "unknown"] }
+      }
+    },
+    "kind": {
+      "enum": [
+        "package_json",
+        "tsconfig",
+        "eslint",
+        "prettier",
+        "vite",
+        "vitest",
+        "tailwind",
+        "jest",
+        "playwright",
+        "mustflow",
+        "other"
+      ]
+    },
+    "format": {
+      "enum": ["json", "jsonc", "javascript", "typescript", "yaml", "toml", "unknown"]
+    },
+    "config": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "path",
+        "kind",
+        "format",
+        "source",
+        "sha256",
+        "size_bytes",
+        "parseable",
+        "dynamic",
+        "package_name",
+        "workspaces",
+        "scripts",
+        "extends",
+        "references",
+        "include",
+        "exclude",
+        "compiler_options",
+        "summary"
+      ],
+      "properties": {
+        "path": { "type": "string" },
+        "kind": { "$ref": "#/$defs/kind" },
+        "format": { "$ref": "#/$defs/format" },
+        "source": { "enum": ["target", "parent", "discovered"] },
+        "sha256": { "$ref": "#/$defs/nullableSha256" },
+        "size_bytes": { "type": ["integer", "null"], "minimum": 0 },
+        "parseable": { "type": "boolean" },
+        "dynamic": { "type": "boolean" },
+        "package_name": { "type": ["string", "null"] },
+        "workspaces": { "$ref": "#/$defs/stringArray" },
+        "scripts": { "$ref": "#/$defs/stringArray" },
+        "extends": { "$ref": "#/$defs/stringArray" },
+        "references": { "$ref": "#/$defs/stringArray" },
+        "include": { "$ref": "#/$defs/stringArray" },
+        "exclude": { "$ref": "#/$defs/stringArray" },
+        "compiler_options": { "$ref": "#/$defs/stringArray" },
+        "summary": { "$ref": "#/$defs/stringArray" }
+      }
+    },
+    "edge": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["from_path", "to_path", "kind", "specifier", "resolved"],
+      "properties": {
+        "from_path": { "type": "string" },
+        "to_path": { "type": ["string", "null"] },
+        "kind": { "enum": ["parent_config", "extends", "reference", "workspace"] },
+        "specifier": { "type": "string" },
+        "resolved": { "type": "boolean" }
+      }
+    },
+    "finding": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["code", "severity", "message", "path"],
+      "properties": {
+        "code": {
+          "enum": [
+            "config_chain_path_outside_root",
+            "config_chain_unreadable_path",
+            "config_chain_parse_error",
+            "config_chain_dynamic_config",
+            "config_chain_external_reference",
+            "config_chain_missing_reference",
+            "config_chain_max_configs_exceeded"
+          ]
+        },
+        "severity": { "enum": ["low", "medium", "high", "critical"] },
+        "message": { "type": "string" },
+        "path": { "type": "string" }
+      }
+    }
+  }
+}