mustflow 2.99.2 → 2.103.10

package/dist/cli/commands/run.js

@@ -79,6 +79,14 @@ function reportRunPlanFailure(plan, reporter, lang) {
                 detail: getRunPlanDetail(plan, lang, 'run.error.blockedLongRunningCommandDetail'),
             });
             break;
+        case 'network_requires_approval':
+        case 'destructive_requires_approval':
+        case 'approval_policy_unreadable':
+            message = t(lang, 'run.error.approvalRequired', {
+                intent: plan.intentName,
+                detail: getRunPlanDetail(plan, lang, 'run.error.approvalRequiredDetail'),
+            });
+            break;
         case 'cwd_outside_project':
             message = t(lang, 'run.error.cwdOutsideProject', {
                 intent: plan.intentName,
@@ -327,6 +335,9 @@ export async function runRun(args, reporter, lang = 'en', options = {}) {
         return plan.ok ? 0 : 1;
     }
     if (!plan.ok) {
+        if (json) {
+            reporter.stdout(JSON.stringify(createRunPreview(plan, 'plan-only'), null, 2));
+        }
         reportRunPlanFailure(plan, reporter, lang);
         writeLatestProfile(profiler, options, {
             projectRoot,

package/dist/cli/commands/skill.js

@@ -5,28 +5,41 @@ import { resolveMustflowRoot } from '../lib/project-root.js';
 import { listScriptPackScripts } from '../lib/script-pack-registry.js';
 import { createScriptPackSuggestionReport, } from '../../core/script-pack-suggestions.js';
 import { resolveSkillRoutes } from '../../core/skill-route-resolution.js';
+import { createExternalSkillImportReport, } from '../lib/external-skill-import.js';
 const SKILL_OPTIONS = [
     { name: '--json', kind: 'boolean' },
     { name: '--task', kind: 'string' },
     { name: '--path', kind: 'string' },
     { name: '--reason', kind: 'string' },
     { name: '--max-candidates', kind: 'string' },
+    { name: '--install', kind: 'boolean' },
+    { name: '--dry-run', kind: 'boolean' },
+    { name: '--name', kind: 'string' },
+    { name: '--ref', kind: 'string' },
 ];
 export function getSkillHelp(lang = 'en') {
     return renderHelp({
         usage: 'mf skill route [options]',
         summary: t(lang, 'command.skill.summary'),
         options: [
+            { label: 'route', description: 'Resolve installed skill route candidates' },
+            { label: 'import <github-url>', description: 'Preview or install an external SKILL.md under .mustflow/external-skills/' },
             { label: '--task <text>', description: 'Task text used for route scoring' },
             { label: '--path <path>', description: 'Changed or expected path; may be repeated' },
             { label: '--reason <reason>', description: 'Classification or verification reason; may be repeated' },
             { label: '--max-candidates <count>', description: 'Maximum candidates to return, from 1 to 10' },
+            { label: '--dry-run', description: 'Preview an external skill import without writing files; default for import' },
+            { label: '--install', description: 'Install an external skill after previewing the same source' },
+            { label: '--name <slug>', description: 'Override the installed external skill directory name' },
+            { label: '--ref <ref>', description: 'Override the GitHub ref used for import' },
             { label: '--json', description: t(lang, 'cli.option.json') },
             { label: '-h, --help', description: t(lang, 'cli.option.help') },
         ],
         examples: [
             'mf skill route --task "change TypeScript CLI output" --path src/cli/index.ts --reason code_change --json',
             'mf skill route --reason docs_change --path docs-site/src/content/docs/en/commands/context.md',
+            'mf skill import https://github.com/example/agent-skills/tree/main/review/security --dry-run --json',
+            'mf skill import https://github.com/example/agent-skills/blob/main/review/security/SKILL.md --install',
         ],
         exitCodes: [
             { label: '0', description: 'Skill route candidates were resolved' },
@@ -51,10 +64,15 @@ function parseSkillArgs(args) {
     return {
         json: hasParsedCliOption(parsed, '--json'),
         action: parsed.positionals[0] ?? null,
+        sourceUrl: parsed.positionals[1] ?? null,
         taskText: getParsedCliStringOption(parsed, '--task'),
         paths: getParsedCliStringOptions(parsed, '--path'),
         reasons: getParsedCliStringOptions(parsed, '--reason'),
         maxCandidates: parseMaxCandidates(getParsedCliStringOption(parsed, '--max-candidates')),
+        install: hasParsedCliOption(parsed, '--install'),
+        dryRun: hasParsedCliOption(parsed, '--dry-run'),
+        name: getParsedCliStringOption(parsed, '--name'),
+        ref: getParsedCliStringOption(parsed, '--ref'),
         error: parsed.error,
     };
 }
@@ -101,7 +119,40 @@ function renderSkillRouteReport(report, lang) {
     lines.push('', 'Read plan', ...report.read_plan.selected_skill_paths.map((skillPath) => `- read selected skill: ${skillPath}`), `- avoid by default: ${report.read_plan.avoid_by_default.join(', ') || t(lang, 'value.none')}`, `- fallback route metadata: ${report.read_plan.fallback_route_metadata.path}`, '', 'Source files', ...report.source_files.map((sourceFile) => `- ${sourceFile}`));
     return lines.join('\n');
 }
-export function runSkill(args, reporter, lang = 'en') {
+function renderSkillImportReport(report) {
+    const lines = [
+        'mustflow skill import',
+        `status: ${report.status}`,
+        `mode: ${report.mode}`,
+        `source: ${report.source?.source_url ?? 'none'}`,
+        `target: ${report.target?.skill_dir ?? 'none'}`,
+        `wrote_files: ${String(report.wrote_files)}`,
+        '',
+        'Files',
+    ];
+    if (report.files.length === 0) {
+        lines.push('- none');
+    }
+    else {
+        for (const file of report.files) {
+            lines.push(`- ${file.relative_path} (${file.kind}, ${file.bytes} bytes, ${file.sha256})`);
+        }
+    }
+    if (report.warnings.length > 0) {
+        lines.push('', 'Warnings', ...report.warnings.map((warning) => `- ${warning}`));
+    }
+    if (report.issues.length > 0) {
+        lines.push('', 'Issues', ...report.issues.map((issue) => `- ${issue}`));
+    }
+    return lines.join('\n');
+}
+function parseImportMode(parsed) {
+    if (parsed.install && parsed.dryRun) {
+        return null;
+    }
+    return parsed.install ? 'install' : 'dry_run';
+}
+export async function runSkill(args, reporter, lang = 'en') {
     if (hasCliOptionToken(args, '--help', ['-h'])) {
         reporter.stdout(getSkillHelp(lang));
         return 0;
@@ -111,13 +162,36 @@ export function runSkill(args, reporter, lang = 'en') {
         printUsageError(reporter, formatCliOptionParseError(parsed.error, lang), 'mf skill --help', getSkillHelp(lang), lang);
         return 1;
     }
-    if (parsed.action !== 'route') {
+    if (parsed.action !== 'route' && parsed.action !== 'import') {
         printUsageError(reporter, t(lang, parsed.action ? 'cli.error.unexpectedArgument' : 'cli.error.missingValue', {
             argument: parsed.action ?? '',
             option: 'route',
         }), 'mf skill --help', getSkillHelp(lang), lang);
         return 1;
     }
+    if (parsed.action === 'import') {
+        const mode = parseImportMode(parsed);
+        if (mode === null) {
+            printUsageError(reporter, t(lang, 'cli.error.unexpectedValue', { option: '--install/--dry-run' }), 'mf skill --help', getSkillHelp(lang), lang);
+            return 1;
+        }
+        if (!parsed.sourceUrl) {
+            printUsageError(reporter, t(lang, 'cli.error.missingValue', { option: 'import <github-url>' }), 'mf skill --help', getSkillHelp(lang), lang);
+            return 1;
+        }
+        const report = await createExternalSkillImportReport(resolveMustflowRoot(), parsed.sourceUrl, {
+            mode,
+            name: parsed.name,
+            ref: parsed.ref,
+        });
+        if (parsed.json) {
+            reporter.stdout(JSON.stringify(report, null, 2));
+        }
+        else {
+            reporter.stdout(renderSkillImportReport(report));
+        }
+        return report.ok ? 0 : 1;
+    }
     if (Number.isNaN(parsed.maxCandidates)) {
         printUsageError(reporter, t(lang, 'cli.error.unexpectedValue', { option: '--max-candidates' }), 'mf skill --help', getSkillHelp(lang), lang);
         return 1;

package/dist/cli/i18n/en.js

@@ -1238,6 +1238,8 @@ Read these files before working:
     "run.error.blockedShellBackgroundDetail": "Shell commands must not spawn background work.",
     "run.error.blockedLongRunningCommand": 'Intent "{intent}" is blocked. {detail}',
     "run.error.blockedLongRunningCommandDetail": "Command argv must describe a finite one-shot command, not a development server, watcher, shell wrapper, interpreter loop, or background process.",
+    "run.error.approvalRequired": 'Intent "{intent}" requires approval. {detail}',
+    "run.error.approvalRequiredDetail": "The repository approval policy requires explicit approval before this command intent can run.",
     "run.error.cwdOutsideProject": 'Command "{intent}" has an invalid cwd: {detail}',
     "run.error.cwdOutsideProjectDetail": "Intent cwd must stay inside the current root.",
     "run.error.invalidTestTarget": 'Command "{intent}" received an invalid test target. {detail}',

package/dist/cli/i18n/es.js

@@ -1238,6 +1238,8 @@ Lee estos archivos antes de trabajar:
     "run.error.blockedShellBackgroundDetail": "Los comandos de shell no deben iniciar trabajo en segundo plano.",
     "run.error.blockedLongRunningCommand": 'La intención "{intent}" está bloqueada. {detail}',
     "run.error.blockedLongRunningCommandDetail": "argv debe describir un comando finito de una sola ejecución, no un servidor de desarrollo, watcher, envoltorio de shell, bucle de intérprete o proceso en segundo plano.",
+    "run.error.approvalRequired": 'La intención "{intent}" requiere aprobación. {detail}',
+    "run.error.approvalRequiredDetail": "La política de aprobación del repositorio requiere aprobación explícita antes de ejecutar esta intención de comando.",
     "run.error.cwdOutsideProject": 'El comando "{intent}" tiene un cwd no válido: {detail}',
     "run.error.cwdOutsideProjectDetail": "El cwd de la intención debe permanecer dentro de la raíz actual.",
     "run.error.invalidTestTarget": 'El comando "{intent}" recibió un objetivo de prueba no válido. {detail}',

package/dist/cli/i18n/fr.js

@@ -1238,6 +1238,8 @@ Lisez ces fichiers avant de travailler :
     "run.error.blockedShellBackgroundDetail": "Les commandes shell ne doivent pas lancer de travail en arrière-plan.",
     "run.error.blockedLongRunningCommand": 'L’intention "{intent}" est bloquée. {detail}',
     "run.error.blockedLongRunningCommandDetail": "argv doit décrire une commande ponctuelle finie, pas un serveur de développement, un watcher, un wrapper shell, une boucle d'interpréteur ou un processus en arrière-plan.",
+    "run.error.approvalRequired": 'L’intention "{intent}" nécessite une approbation. {detail}',
+    "run.error.approvalRequiredDetail": "La politique d’approbation du dépôt exige une approbation explicite avant d’exécuter cette intention de commande.",
     "run.error.cwdOutsideProject": 'La commande "{intent}" a un cwd non valide : {detail}',
     "run.error.cwdOutsideProjectDetail": "Le cwd de l’intention doit rester dans la racine actuelle.",
     "run.error.invalidTestTarget": 'La commande "{intent}" a reçu une cible de test invalide. {detail}',

package/dist/cli/i18n/hi.js

@@ -1238,6 +1238,8 @@ export const hiMessages = {
     "run.error.blockedShellBackgroundDetail": "Shell commands background work शुरू नहीं कर सकतीं।",
     "run.error.blockedLongRunningCommand": 'इंटेंट "{intent}" अवरुद्ध है। {detail}',
     "run.error.blockedLongRunningCommandDetail": "argv में finite one-shot command होना चाहिए, development server, watcher, shell wrapper, interpreter loop, या background process नहीं।",
+    "run.error.approvalRequired": 'इंटेंट "{intent}" को approval चाहिए। {detail}',
+    "run.error.approvalRequiredDetail": "Repository approval policy के अनुसार इस command intent को चलाने से पहले explicit approval चाहिए।",
     "run.error.cwdOutsideProject": 'कमांड "{intent}" का cwd अमान्य है: {detail}',
     "run.error.cwdOutsideProjectDetail": "Intent cwd current root के अंदर रहना चाहिए।",
     "run.error.invalidTestTarget": 'कमांड "{intent}" को अमान्य test target मिला। {detail}',

package/dist/cli/i18n/ko.js

@@ -1238,6 +1238,8 @@ export const koMessages = {
     "run.error.blockedShellBackgroundDetail": "셸 명령은 백그라운드 작업을 시작하면 안 됩니다.",
     "run.error.blockedLongRunningCommand": '명령 의도 "{intent}"가 차단되었습니다. {detail}',
     "run.error.blockedLongRunningCommandDetail": "argv는 개발 서버, 감시 명령, 셸 래퍼, 인터프리터 반복 작업, 백그라운드 프로세스가 아니라 끝나는 단발성 명령이어야 합니다.",
+    "run.error.approvalRequired": '명령 의도 "{intent}"는 승인이 필요합니다. {detail}',
+    "run.error.approvalRequiredDetail": "저장소 승인 정책상 이 명령 의도를 실행하기 전에 명시적 승인이 필요합니다.",
     "run.error.cwdOutsideProject": '명령 "{intent}"의 실행 위치(cwd)가 올바르지 않습니다: {detail}',
     "run.error.cwdOutsideProjectDetail": "명령 실행 위치(cwd)는 현재 루트 안에 있어야 합니다.",
     "run.error.invalidTestTarget": '명령 "{intent}"에 올바르지 않은 테스트 대상이 전달되었습니다. {detail}',

package/dist/cli/i18n/zh.js

@@ -1238,6 +1238,8 @@ export const zhMessages = {
     "run.error.blockedShellBackgroundDetail": "Shell 命令不得启动后台工作。",
     "run.error.blockedLongRunningCommand": '意图 "{intent}" 已被阻止。{detail}',
     "run.error.blockedLongRunningCommandDetail": "argv 必须描述会结束的单次命令，而不是开发服务器、监听命令、shell 包装器、解释器循环或后台进程。",
+    "run.error.approvalRequired": '意图 "{intent}" 需要审批。{detail}',
+    "run.error.approvalRequiredDetail": "仓库审批策略要求在运行此命令意图前获得明确审批。",
     "run.error.cwdOutsideProject": '命令 "{intent}" 的 cwd 无效：{detail}',
     "run.error.cwdOutsideProjectDetail": "意图 cwd 必须位于当前根目录内。",
     "run.error.invalidTestTarget": '命令 "{intent}" 收到无效测试目标。{detail}',