@lumenflow/cli 1.3.4 → 1.3.6

package/dist/__tests__/release.test.js

@@ -0,0 +1,283 @@
+/**
+ * Tests for release command
+ *
+ * Verifies that the release command:
+ * - Validates version format (semver)
+ * - Bumps all @lumenflow/* package versions
+ * - Uses micro-worktree isolation for version commit
+ * - Builds all packages
+ * - Publishes to npm with proper auth
+ * - Creates git tag vX.Y.Z
+ *
+ * WU-1074: Add release command for npm publishing
+ */
+import { describe, it, expect, beforeEach, afterEach } from 'vitest';
+import { existsSync, mkdirSync, writeFileSync, rmSync } from 'node:fs';
+import { join } from 'node:path';
+import { tmpdir } from 'node:os';
+// Import functions under test
+import { validateSemver, findPackageJsonPaths, updatePackageVersions, buildCommitMessage, buildTagName, } from '../release.js';
+describe('release command', () => {
+    describe('validateSemver', () => {
+        it('should accept valid semver versions', () => {
+            expect(validateSemver('1.0.0')).toBe(true);
+            expect(validateSemver('1.2.3')).toBe(true);
+            expect(validateSemver('10.20.30')).toBe(true);
+            expect(validateSemver('0.0.1')).toBe(true);
+        });
+        it('should accept semver with pre-release identifiers', () => {
+            expect(validateSemver('1.0.0-alpha')).toBe(true);
+            expect(validateSemver('1.0.0-beta.1')).toBe(true);
+            expect(validateSemver('1.0.0-rc.1')).toBe(true);
+        });
+        it('should reject invalid versions', () => {
+            expect(validateSemver('1')).toBe(false);
+            expect(validateSemver('1.0')).toBe(false);
+            expect(validateSemver('v1.0.0')).toBe(false);
+            expect(validateSemver('1.0.0.0')).toBe(false);
+            expect(validateSemver('abc')).toBe(false);
+            expect(validateSemver('')).toBe(false);
+        });
+    });
+    describe('findPackageJsonPaths', () => {
+        let testDir;
+        beforeEach(() => {
+            // Create temp directory for test packages
+            testDir = join(tmpdir(), `release-test-${Date.now()}`);
+            mkdirSync(testDir, { recursive: true });
+        });
+        afterEach(() => {
+            // Clean up temp directory
+            rmSync(testDir, { recursive: true, force: true });
+        });
+        it('should find all @lumenflow/* package.json files', () => {
+            // Create mock package structure
+            const packagesDir = join(testDir, 'packages/@lumenflow');
+            mkdirSync(join(packagesDir, 'core'), { recursive: true });
+            mkdirSync(join(packagesDir, 'cli'), { recursive: true });
+            mkdirSync(join(packagesDir, 'memory'), { recursive: true });
+            writeFileSync(join(packagesDir, 'core/package.json'), JSON.stringify({ name: '@lumenflow/core', version: '1.0.0' }));
+            writeFileSync(join(packagesDir, 'cli/package.json'), JSON.stringify({ name: '@lumenflow/cli', version: '1.0.0' }));
+            writeFileSync(join(packagesDir, 'memory/package.json'), JSON.stringify({ name: '@lumenflow/memory', version: '1.0.0' }));
+            const paths = findPackageJsonPaths(testDir);
+            expect(paths).toHaveLength(3);
+            expect(paths).toContain(join(packagesDir, 'core/package.json'));
+            expect(paths).toContain(join(packagesDir, 'cli/package.json'));
+            expect(paths).toContain(join(packagesDir, 'memory/package.json'));
+        });
+        it('should not include packages with private: true', () => {
+            // Create mock package structure with private package
+            const packagesDir = join(testDir, 'packages/@lumenflow');
+            mkdirSync(join(packagesDir, 'core'), { recursive: true });
+            mkdirSync(join(packagesDir, 'internal'), { recursive: true });
+            writeFileSync(join(packagesDir, 'core/package.json'), JSON.stringify({ name: '@lumenflow/core', version: '1.0.0' }));
+            writeFileSync(join(packagesDir, 'internal/package.json'), JSON.stringify({ name: '@lumenflow/internal', version: '1.0.0', private: true }));
+            const paths = findPackageJsonPaths(testDir);
+            expect(paths).toHaveLength(1);
+            expect(paths).toContain(join(packagesDir, 'core/package.json'));
+        });
+    });
+    describe('updatePackageVersions', () => {
+        let testDir;
+        beforeEach(() => {
+            testDir = join(tmpdir(), `release-test-${Date.now()}`);
+            mkdirSync(testDir, { recursive: true });
+        });
+        afterEach(() => {
+            rmSync(testDir, { recursive: true, force: true });
+        });
+        it('should update version in all package.json files', async () => {
+            // Create mock package.json
+            const packagePath = join(testDir, 'package.json');
+            writeFileSync(packagePath, JSON.stringify({
+                name: '@lumenflow/core',
+                version: '1.0.0',
+                description: 'Core package',
+            }, null, 2));
+            await updatePackageVersions([packagePath], '1.2.3');
+            // Read back and verify
+            const content = JSON.parse(await import('node:fs/promises').then((fs) => fs.readFile(packagePath, 'utf-8')));
+            expect(content.version).toBe('1.2.3');
+            expect(content.name).toBe('@lumenflow/core'); // Other fields preserved
+        });
+        it('should preserve JSON formatting', async () => {
+            // Create mock package.json with specific formatting
+            const packagePath = join(testDir, 'package.json');
+            writeFileSync(packagePath, JSON.stringify({ name: '@lumenflow/core', version: '1.0.0' }, null, 2) + '\n');
+            await updatePackageVersions([packagePath], '1.2.3');
+            // Read back raw content and check formatting
+            const content = await import('node:fs/promises').then((fs) => fs.readFile(packagePath, 'utf-8'));
+            expect(content).toMatch(/{\n  "name"/); // Preserve 2-space indent
+        });
+    });
+    describe('buildCommitMessage', () => {
+        it('should build correct commit message for version bump', () => {
+            const message = buildCommitMessage('1.3.0');
+            expect(message).toBe('chore: bump all packages to v1.3.0');
+        });
+    });
+    describe('buildTagName', () => {
+        it('should build correct tag name', () => {
+            expect(buildTagName('1.3.0')).toBe('v1.3.0');
+            expect(buildTagName('1.0.0-beta.1')).toBe('v1.0.0-beta.1');
+        });
+    });
+});
+describe('release command integration', () => {
+    // These tests verify the command exists and parses arguments correctly
+    // They don't actually run the full release process
+    it('should export main function from release.ts', async () => {
+        // This test verifies the module structure exists
+        const module = await import('../release.js');
+        expect(module).toBeDefined();
+        expect(typeof module.validateSemver).toBe('function');
+        expect(typeof module.findPackageJsonPaths).toBe('function');
+        expect(typeof module.updatePackageVersions).toBe('function');
+    });
+});
+/**
+ * WU-1077: Tests for release script bug fixes
+ *
+ * Verifies:
+ * - hasNpmAuth() detects auth from ~/.npmrc not just env vars
+ * - Changeset pre mode is detected and exited in micro-worktree
+ * - Tag push bypasses pre-push hooks via LUMENFLOW_FORCE
+ */
+describe('WU-1077: release script bug fixes', () => {
+    describe('hasNpmAuth - ~/.npmrc detection', () => {
+        let testDir;
+        beforeEach(() => {
+            testDir = join(tmpdir(), `release-npmrc-test-${Date.now()}`);
+            mkdirSync(testDir, { recursive: true });
+        });
+        afterEach(() => {
+            rmSync(testDir, { recursive: true, force: true });
+        });
+        it('should detect auth from ~/.npmrc authToken line', async () => {
+            // Import the function we're testing
+            const { hasNpmAuth } = await import('../release.js');
+            // Create a mock .npmrc with auth token
+            const npmrcPath = join(testDir, '.npmrc');
+            writeFileSync(npmrcPath, '//registry.npmjs.org/:_authToken=npm_testToken123\n');
+            // Test that it detects auth from the file
+            const result = hasNpmAuth(npmrcPath);
+            expect(result).toBe(true);
+        });
+        it('should return false when ~/.npmrc has no auth token', async () => {
+            const { hasNpmAuth } = await import('../release.js');
+            // Create a mock .npmrc without auth token
+            const npmrcPath = join(testDir, '.npmrc');
+            writeFileSync(npmrcPath, 'registry=https://registry.npmjs.org\n');
+            const result = hasNpmAuth(npmrcPath);
+            expect(result).toBe(false);
+        });
+        it('should return false when ~/.npmrc does not exist', async () => {
+            const { hasNpmAuth } = await import('../release.js');
+            // Non-existent path
+            const npmrcPath = join(testDir, 'nonexistent', '.npmrc');
+            const result = hasNpmAuth(npmrcPath);
+            expect(result).toBe(false);
+        });
+        it('should still detect auth from NPM_TOKEN env var', async () => {
+            const { hasNpmAuth } = await import('../release.js');
+            // Set env var
+            const originalNpmToken = process.env.NPM_TOKEN;
+            process.env.NPM_TOKEN = 'test_token';
+            try {
+                // No npmrc file provided, should check env var
+                const result = hasNpmAuth();
+                expect(result).toBe(true);
+            }
+            finally {
+                // Restore
+                if (originalNpmToken === undefined) {
+                    delete process.env.NPM_TOKEN;
+                }
+                else {
+                    process.env.NPM_TOKEN = originalNpmToken;
+                }
+            }
+        });
+    });
+    describe('isInChangesetPreMode', () => {
+        let testDir;
+        beforeEach(() => {
+            testDir = join(tmpdir(), `release-pre-test-${Date.now()}`);
+            mkdirSync(testDir, { recursive: true });
+        });
+        afterEach(() => {
+            rmSync(testDir, { recursive: true, force: true });
+        });
+        it('should return true when .changeset/pre.json exists', async () => {
+            const { isInChangesetPreMode } = await import('../release.js');
+            // Create .changeset directory and pre.json
+            const changesetDir = join(testDir, '.changeset');
+            mkdirSync(changesetDir, { recursive: true });
+            writeFileSync(join(changesetDir, 'pre.json'), JSON.stringify({
+                mode: 'pre',
+                tag: 'next',
+                initialVersions: {},
+                changesets: [],
+            }));
+            const result = isInChangesetPreMode(testDir);
+            expect(result).toBe(true);
+        });
+        it('should return false when .changeset/pre.json does not exist', async () => {
+            const { isInChangesetPreMode } = await import('../release.js');
+            // Create .changeset directory without pre.json
+            const changesetDir = join(testDir, '.changeset');
+            mkdirSync(changesetDir, { recursive: true });
+            writeFileSync(join(changesetDir, 'config.json'), JSON.stringify({ access: 'public' }));
+            const result = isInChangesetPreMode(testDir);
+            expect(result).toBe(false);
+        });
+        it('should return false when .changeset directory does not exist', async () => {
+            const { isInChangesetPreMode } = await import('../release.js');
+            const result = isInChangesetPreMode(testDir);
+            expect(result).toBe(false);
+        });
+    });
+    describe('exitChangesetPreMode', () => {
+        let testDir;
+        beforeEach(() => {
+            testDir = join(tmpdir(), `release-exit-pre-test-${Date.now()}`);
+            mkdirSync(testDir, { recursive: true });
+        });
+        afterEach(() => {
+            rmSync(testDir, { recursive: true, force: true });
+        });
+        it('should delete .changeset/pre.json to exit pre mode', async () => {
+            const { exitChangesetPreMode, isInChangesetPreMode } = await import('../release.js');
+            // Create .changeset directory and pre.json
+            const changesetDir = join(testDir, '.changeset');
+            mkdirSync(changesetDir, { recursive: true });
+            const preJsonPath = join(changesetDir, 'pre.json');
+            writeFileSync(preJsonPath, JSON.stringify({
+                mode: 'pre',
+                tag: 'next',
+                initialVersions: {},
+                changesets: [],
+            }));
+            // Verify pre mode is active
+            expect(isInChangesetPreMode(testDir)).toBe(true);
+            // Exit pre mode
+            exitChangesetPreMode(testDir);
+            // Verify pre mode is no longer active
+            expect(isInChangesetPreMode(testDir)).toBe(false);
+            expect(existsSync(preJsonPath)).toBe(false);
+        });
+        it('should not throw when .changeset/pre.json does not exist', async () => {
+            const { exitChangesetPreMode } = await import('../release.js');
+            // No pre.json file exists
+            expect(() => exitChangesetPreMode(testDir)).not.toThrow();
+        });
+    });
+    describe('pushTagWithForce', () => {
+        it('should export pushTagWithForce function', async () => {
+            const { pushTagWithForce } = await import('../release.js');
+            expect(typeof pushTagWithForce).toBe('function');
+        });
+        // Integration test would require git setup - functional verification
+        // is done by checking the function uses LUMENFLOW_FORCE env var
+    });
+});

package/dist/agent-issues-query.js

@@ -19,12 +19,13 @@ import { join } from 'node:path';
 import { Command } from 'commander';
 import chalk from 'chalk';
 import { die } from '@lumenflow/core/dist/error-handler.js';
+import { LUMENFLOW_PATHS } from '@lumenflow/core/dist/wu-constants.js';
 /** Log prefix for console output */
 const LOG_PREFIX = '[agent:issues-query]';
 /** Default days to query */
 const DEFAULT_SINCE_DAYS = 7;
-/** Issues log file path */
-const ISSUES_LOG_PATH = '.beacon/agent-issues.ndjson';
+/** Issues log file path - under base .lumenflow directory */
+const ISSUES_LOG_PATH = `${LUMENFLOW_PATHS.BASE}/agent-issues.ndjson`;
 /** Valid severity levels */
 const SEVERITY_LEVELS = ['blocker', 'major', 'minor', 'trivial'];
 /**

package/dist/agent-log-issue.js

@@ -9,7 +9,7 @@
  */
 import { Command } from 'commander';
 import { logIncident, getCurrentSession } from '@lumenflow/agent';
-import { EXIT_CODES, INCIDENT_SEVERITY } from '@lumenflow/core/dist/wu-constants.js';
+import { EXIT_CODES, INCIDENT_SEVERITY, LUMENFLOW_PATHS, } from '@lumenflow/core/dist/wu-constants.js';
 import chalk from 'chalk';
 const program = new Command()
     .name('agent:log-issue')
@@ -46,7 +46,7 @@ const program = new Command()
         console.log(chalk.green(`✓ Issue logged`));
         console.log(`  Category: ${chalk.cyan(opts.category)}`);
         console.log(`  Severity: ${chalk.cyan(opts.severity)}`);
-        console.log(`  File: ${chalk.gray(`.beacon/incidents/${opts.category}.ndjson`)}`);
+        console.log(`  File: ${chalk.gray(`${LUMENFLOW_PATHS.INCIDENTS}/${opts.category}.ndjson`)}`);
         if (opts.severity === INCIDENT_SEVERITY.MAJOR ||
             opts.severity === INCIDENT_SEVERITY.BLOCKER) {
             console.log();

package/dist/init.js

@@ -113,7 +113,7 @@ const BACKLOG_TEMPLATE = `---\nsections:\n  ready:\n    heading: '## 🚀 Ready
 // Template for docs/04-operations/tasks/status.md
 const STATUS_TEMPLATE = `# Status (active work)\n\n## In Progress\n\n(No items in progress)\n\n## Blocked\n\n(No items blocked)\n\n## Completed\n\n(No items completed yet)\n`;
 // Template for docs/04-operations/tasks/templates/wu-template.yaml
-const WU_TEMPLATE_YAML = `# Work Unit Template (LumenFlow WU Schema)\n#\n# Copy this template when creating new WUs. Fill in all required fields and\n# remove optional fields if not needed.\n#\n# If you used "lumenflow init --full", this template lives at:\n# docs/04-operations/tasks/templates/wu-template.yaml\n\n# Required: Unique work unit identifier (format: WU-NNN)\nid: WU-XXX\n\n# Required: Short, descriptive title (max 80 chars)\ntitle: 'Your WU title here'\n\n# Required: Lane (Parent: Sublane format)\nlane: 'Framework: CLI'\n\n# Required: Type of work\ntype: 'feature' # feature | bug | documentation | process | tooling | chore | refactor\n\n# Required: Current status\nstatus: 'ready' # ready | in_progress | blocked | done | cancelled\n\n# Required: Priority\npriority: P2 # P0 | P1 | P2 | P3\n\n# Required: Creation date (YYYY-MM-DD)\ncreated: {{DATE}}\n\n# Required: Owner/assignee (email)\nassigned_to: 'unassigned@example.com'\n\n# Required: Description\ndescription: |\n  Context: ...\n  Problem: ...\n  Solution: ...\n\n# Required: Acceptance criteria (testable, binary)\nacceptance:\n  - Criterion 1 (specific, measurable, testable)\n  - Criterion 2 (binary pass/fail)\n  - Documentation updated\n\n# Required: References to plans/specs (required for type: feature)\nspec_refs:\n  - docs/04-operations/plans/WU-XXX-plan.md\n\n# Required: Code files changed or created (empty only for docs/process WUs)\ncode_paths:\n  - path/to/file.ts\n\n# Required: Test paths (at least one of manual/unit/e2e/integration for non-doc WUs)\ntests:\n  manual:\n    - Manual test: Verify behavior\n  unit:\n    - path/to/test.test.ts\n  e2e: []\n  integration: []\n\n# Required: Exposure level\nexposure: 'backend-only' # ui | api | backend-only | documentation\n\n# Optional: User journey (recommended for ui/api)\n# user_journey: |\n#   User navigates to ...\n#   User performs ...\n\n# Optional: UI pairing WUs (for api exposure)\n# ui_pairing_wus:\n#   - WU-1234\n\n# Optional: Navigation path (required when exposure=ui and no page file)\n# navigation_path: '/settings'\n\n# Required: Deliverable artifacts (stamps, docs, etc.)\nartifacts:\n  - .beacon/stamps/WU-XXX.done\n\n# Optional: Dependencies (other WUs that must complete first)\ndependencies: []\n\n# Optional: Risks\nrisks:\n  - Risk 1\n\n# Optional: Notes\nnotes: ''\n\n# Optional: Requires human review\nrequires_review: false\n\n# Optional: Claimed mode (worktree or branch-only)\n# Automatically set by wu:claim, usually don't need to specify\n# claimed_mode: worktree\n\n# Optional: Assigned to (email of current claimant)\n# Automatically set by wu:claim\n# assigned_to: engineer@example.com\n\n# Optional: Locked status (prevents concurrent edits)\n# Automatically set by wu:claim and wu:done\n# locked: false\n\n# Optional: Completion date (ISO 8601 format)\n# Automatically set by wu:done\n# completed: 2025-10-23\n\n# Optional: Completion notes (added by wu:done)\n# completion_notes: |\n#   Additional notes added during wu:done.\n#   Any deviations from original plan.\n#   Lessons learned.\n\n# ============================================================================\n# GOVERNANCE BLOCK (WU Schema v2.0)\n# ============================================================================\n# Optional: COS governance rules that apply to this WU\n# Only include if this WU needs specific governance enforcement\n\n# governance:\n#   # Rules that apply to this WU (evaluated during cos:gates)\n#   rules:\n#     - rule_id: UPAIN-01\n#       satisfied: false  # Initially false, set true when evidence provided\n#       evidence:\n#         - type: link\n#           value: docs/product/voc/feature-user-pain.md\n#           description: "Voice of Customer analysis showing user pain"\n#       notes: |\n#         VOC analysis shows 40% of support tickets request this feature.\n#         Average time wasted: 15min/user/week.\n#\n#     - rule_id: CASH-03\n#       satisfied: false\n#       evidence:\n#         - type: link\n#           value: docs/finance/spend-reviews/2025-10-cloud-infra.md\n#           description: "Spend review for £1200/month cloud infrastructure"\n#         - type: approval\n#           value: owner@example.com\n#           description: "Owner approval for spend commitment"\n#       notes: |\n#         New cloud infrastructure commitment: £1200/month for 12 months.\n#         ROI: Reduces latency by 50%, improves user retention.\n#\n#   # Gate checks (enforced by cos-gates.mjs)\n#   gates:\n#     narrative: "pending"  # Status: pending, passed, skipped, failed\n#     finance: "pending"\n#\n#   # Exemptions (only if rule doesn't apply)\n#   exemptions:\n#     - rule_id: FAIR-01\n#       reason: "No user-facing pricing changes in this WU"\n#       approved_by: product-owner@example.com\n#       approved_at: 2025-10-23\n\n# ============================================================================\n# USAGE NOTES\n# ============================================================================\n#\n# 1. Remove this entire governance block if no COS rules apply to your WU\n# 2. Only include rules that require enforcement (not all rules apply to all WUs)\n# 3. Evidence types: link:, metric:, screenshot:, approval:\n# 4. Gates are checked during wu:done (before merge)\n# 5. Exemptions require approval from rule owner\n#\n# For more details, see:\n# - docs/04-operations/_frameworks/cos/system-prompt-v1.3.md\n# - docs/04-operations/_frameworks/cos/evidence-format.md\n`;
+const WU_TEMPLATE_YAML = `# Work Unit Template (LumenFlow WU Schema)\n#\n# Copy this template when creating new WUs. Fill in all required fields and\n# remove optional fields if not needed.\n#\n# If you used "lumenflow init --full", this template lives at:\n# docs/04-operations/tasks/templates/wu-template.yaml\n\n# Required: Unique work unit identifier (format: WU-NNN)\nid: WU-XXX\n\n# Required: Short, descriptive title (max 80 chars)\ntitle: 'Your WU title here'\n\n# Required: Lane (Parent: Sublane format)\nlane: 'Framework: CLI'\n\n# Required: Type of work\ntype: 'feature' # feature | bug | documentation | process | tooling | chore | refactor\n\n# Required: Current status\nstatus: 'ready' # ready | in_progress | blocked | done | cancelled\n\n# Required: Priority\npriority: P2 # P0 | P1 | P2 | P3\n\n# Required: Creation date (YYYY-MM-DD)\ncreated: {{DATE}}\n\n# Required: Owner/assignee (email)\nassigned_to: 'unassigned@example.com'\n\n# Required: Description\ndescription: |\n  Context: ...\n  Problem: ...\n  Solution: ...\n\n# Required: Acceptance criteria (testable, binary)\nacceptance:\n  - Criterion 1 (specific, measurable, testable)\n  - Criterion 2 (binary pass/fail)\n  - Documentation updated\n\n# Required: References to plans/specs (required for type: feature)\nspec_refs:\n  - docs/04-operations/plans/WU-XXX-plan.md\n\n# Required: Code files changed or created (empty only for docs/process WUs)\ncode_paths:\n  - path/to/file.ts\n\n# Required: Test paths (at least one of manual/unit/e2e/integration for non-doc WUs)\ntests:\n  manual:\n    - Manual test: Verify behavior\n  unit:\n    - path/to/test.test.ts\n  e2e: []\n  integration: []\n\n# Required: Exposure level\nexposure: 'backend-only' # ui | api | backend-only | documentation\n\n# Optional: User journey (recommended for ui/api)\n# user_journey: |\n#   User navigates to ...\n#   User performs ...\n\n# Optional: UI pairing WUs (for api exposure)\n# ui_pairing_wus:\n#   - WU-1234\n\n# Optional: Navigation path (required when exposure=ui and no page file)\n# navigation_path: '/settings'\n\n# Required: Deliverable artifacts (stamps, docs, etc.)\nartifacts:\n  - .lumenflow/stamps/WU-XXX.done\n\n# Optional: Dependencies (other WUs that must complete first)\ndependencies: []\n\n# Optional: Risks\nrisks:\n  - Risk 1\n\n# Optional: Notes\nnotes: ''\n\n# Optional: Requires human review\nrequires_review: false\n\n# Optional: Claimed mode (worktree or branch-only)\n# Automatically set by wu:claim, usually don't need to specify\n# claimed_mode: worktree\n\n# Optional: Assigned to (email of current claimant)\n# Automatically set by wu:claim\n# assigned_to: engineer@example.com\n\n# Optional: Locked status (prevents concurrent edits)\n# Automatically set by wu:claim and wu:done\n# locked: false\n\n# Optional: Completion date (ISO 8601 format)\n# Automatically set by wu:done\n# completed: 2025-10-23\n\n# Optional: Completion notes (added by wu:done)\n# completion_notes: |\n#   Additional notes added during wu:done.\n#   Any deviations from original plan.\n#   Lessons learned.\n\n# ============================================================================\n# GOVERNANCE BLOCK (WU Schema v2.0)\n# ============================================================================\n# Optional: COS governance rules that apply to this WU\n# Only include if this WU needs specific governance enforcement\n\n# governance:\n#   # Rules that apply to this WU (evaluated during cos:gates)\n#   rules:\n#     - rule_id: UPAIN-01\n#       satisfied: false  # Initially false, set true when evidence provided\n#       evidence:\n#         - type: link\n#           value: docs/product/voc/feature-user-pain.md\n#           description: "Voice of Customer analysis showing user pain"\n#       notes: |\n#         VOC analysis shows 40% of support tickets request this feature.\n#         Average time wasted: 15min/user/week.\n#\n#     - rule_id: CASH-03\n#       satisfied: false\n#       evidence:\n#         - type: link\n#           value: docs/finance/spend-reviews/2025-10-cloud-infra.md\n#           description: "Spend review for £1200/month cloud infrastructure"\n#         - type: approval\n#           value: owner@example.com\n#           description: "Owner approval for spend commitment"\n#       notes: |\n#         New cloud infrastructure commitment: £1200/month for 12 months.\n#         ROI: Reduces latency by 50%, improves user retention.\n#\n#   # Gate checks (enforced by cos-gates.mjs)\n#   gates:\n#     narrative: "pending"  # Status: pending, passed, skipped, failed\n#     finance: "pending"\n#\n#   # Exemptions (only if rule doesn't apply)\n#   exemptions:\n#     - rule_id: FAIR-01\n#       reason: "No user-facing pricing changes in this WU"\n#       approved_by: product-owner@example.com\n#       approved_at: 2025-10-23\n\n# ============================================================================\n# USAGE NOTES\n# ============================================================================\n#\n# 1. Remove this entire governance block if no COS rules apply to your WU\n# 2. Only include rules that require enforcement (not all rules apply to all WUs)\n# 3. Evidence types: link:, metric:, screenshot:, approval:\n# 4. Gates are checked during wu:done (before merge)\n# 5. Exemptions require approval from rule owner\n#\n# For more details, see:\n# - docs/04-operations/_frameworks/cos/system-prompt-v1.3.md\n# - docs/04-operations/_frameworks/cos/evidence-format.md\n`;
 // Template for .lumenflow.framework.yaml
 const FRAMEWORK_HINT_TEMPLATE = `# LumenFlow Framework Hint\n# Generated by: lumenflow init --framework {{FRAMEWORK_NAME}}\n\nframework: "{{FRAMEWORK_NAME}}"\nslug: "{{FRAMEWORK_SLUG}}"\n`;
 // Template for docs/04-operations/_frameworks/<framework>/README.md

package/dist/mem-checkpoint.js

@@ -5,7 +5,7 @@
  * Create a checkpoint node for context snapshots.
  * Used before /clear or session handoff to preserve progress state.
  *
- * Includes audit logging to .beacon/telemetry/tools.ndjson.
+ * Includes audit logging to .lumenflow/telemetry/tools.ndjson.
  *
  * Usage:
  *   pnpm mem:checkpoint 'note' [--session <id>] [--wu <id>] [--progress <text>] [--next-steps <text>] [--trigger <type>] [--quiet]
@@ -17,7 +17,7 @@ import fs from 'node:fs/promises';
 import path from 'node:path';
 import { createCheckpoint } from '@lumenflow/memory/dist/mem-checkpoint-core.js';
 import { createWUParser, WU_OPTIONS } from '@lumenflow/core/dist/arg-parser.js';
-import { EXIT_CODES } from '@lumenflow/core/dist/wu-constants.js';
+import { EXIT_CODES, LUMENFLOW_PATHS } from '@lumenflow/core/dist/wu-constants.js';
 /**
  * Log prefix for mem:checkpoint output
  */
@@ -26,10 +26,6 @@ const LOG_PREFIX = '[mem:checkpoint]';
  * Tool name for audit logging
  */
 const TOOL_NAME = 'mem:checkpoint';
-/**
- * Audit log file path
- */
-const AUDIT_LOG_PATH = '.beacon/telemetry/tools.ndjson';
 /**
  * CLI argument options specific to mem:checkpoint
  */
@@ -78,7 +74,7 @@ const CLI_OPTIONS = {
  */
 async function writeAuditLog(baseDir, entry) {
     try {
-        const logPath = path.join(baseDir, AUDIT_LOG_PATH);
+        const logPath = path.join(baseDir, LUMENFLOW_PATHS.AUDIT_LOG);
         const logDir = path.dirname(logPath);
         // eslint-disable-next-line security/detect-non-literal-fs-filename -- CLI tool creates known directory
         await fs.mkdir(logDir, { recursive: true });

package/dist/mem-cleanup.js

@@ -30,7 +30,7 @@ import fs from 'node:fs/promises';
 import path from 'node:path';
 import { cleanupMemory } from '@lumenflow/memory/dist/mem-cleanup-core.js';
 import { createWUParser } from '@lumenflow/core/dist/arg-parser.js';
-import { EXIT_CODES } from '@lumenflow/core/dist/wu-constants.js';
+import { EXIT_CODES, LUMENFLOW_PATHS } from '@lumenflow/core/dist/wu-constants.js';
 /**
  * Log prefix for mem:cleanup output
  */
@@ -39,10 +39,6 @@ const LOG_PREFIX = '[mem:cleanup]';
  * Tool name for audit logging
  */
 const TOOL_NAME = 'mem:cleanup';
-/**
- * Audit log file path
- */
-const AUDIT_LOG_PATH = '.beacon/telemetry/tools.ndjson';
 /**
  * Bytes per KB for formatting
  */
@@ -90,7 +86,7 @@ const CLI_OPTIONS = {
  */
 async function writeAuditLog(baseDir, entry) {
     try {
-        const logPath = path.join(baseDir, AUDIT_LOG_PATH);
+        const logPath = path.join(baseDir, LUMENFLOW_PATHS.AUDIT_LOG);
         const logDir = path.dirname(logPath);
         // eslint-disable-next-line security/detect-non-literal-fs-filename -- CLI tool creates known directory
         await fs.mkdir(logDir, { recursive: true });

package/dist/mem-create.js

@@ -6,7 +6,7 @@
  * KEY DIFFERENTIATOR: supports discovered-from relationship for scope-creep
  * forensics. Creates audit trail of WHY work expanded, not just WHAT changed.
  *
- * Includes audit logging to .beacon/telemetry/tools.ndjson.
+ * Includes audit logging to .lumenflow/telemetry/tools.ndjson.
  *
  * Usage:
  *   pnpm mem:create 'title' [--type <type>] [--discovered-from <id>] [--wu <id>] [--quiet]
@@ -18,7 +18,7 @@ import fs from 'node:fs/promises';
 import path from 'node:path';
 import { createMemoryNode } from '@lumenflow/memory/dist/mem-create-core.js';
 import { createWUParser, WU_OPTIONS } from '@lumenflow/core/dist/arg-parser.js';
-import { EXIT_CODES } from '@lumenflow/core/dist/wu-constants.js';
+import { EXIT_CODES, LUMENFLOW_PATHS } from '@lumenflow/core/dist/wu-constants.js';
 import { MEMORY_NODE_TYPES } from '@lumenflow/memory/dist/memory-schema.js';
 /**
  * Log prefix for mem:create output
@@ -28,10 +28,6 @@ const LOG_PREFIX = '[mem:create]';
  * Tool name for audit logging
  */
 const TOOL_NAME = 'mem:create';
-/**
- * Audit log file path
- */
-const AUDIT_LOG_PATH = '.beacon/telemetry/tools.ndjson';
 /**
  * CLI argument options specific to mem:create
  */
@@ -85,7 +81,7 @@ const CLI_OPTIONS = {
  */
 async function writeAuditLog(baseDir, entry) {
     try {
-        const logPath = path.join(baseDir, AUDIT_LOG_PATH);
+        const logPath = path.join(baseDir, LUMENFLOW_PATHS.AUDIT_LOG);
         const logDir = path.dirname(logPath);
         // eslint-disable-next-line security/detect-non-literal-fs-filename -- CLI tool creates known directory
         await fs.mkdir(logDir, { recursive: true });

package/dist/mem-inbox.js

@@ -6,7 +6,7 @@
  * of parallel agent progress. Filter by lane, WU, or time range.
  * Supports watch mode for continuous monitoring.
  *
- * Includes audit logging to .beacon/telemetry/tools.ndjson.
+ * Includes audit logging to .lumenflow/telemetry/tools.ndjson.
  *
  * WU-2202: Added dependency validation before operations to prevent silent
  * failures when node_modules is corrupted or incomplete.
@@ -22,7 +22,7 @@ import path from 'node:path';
 import ms from 'ms';
 import { loadSignals, markSignalsAsRead } from '@lumenflow/memory/dist/mem-signal-core.js';
 import { createWUParser, WU_OPTIONS } from '@lumenflow/core/dist/arg-parser.js';
-import { EXIT_CODES } from '@lumenflow/core/dist/wu-constants.js';
+import { EXIT_CODES, LUMENFLOW_PATHS } from '@lumenflow/core/dist/wu-constants.js';
 import { validateInboxDependencies, formatDependencyError, } from '@lumenflow/core/dist/dependency-validator.js';
 /**
  * Log prefix for mem:inbox output
@@ -32,10 +32,6 @@ const LOG_PREFIX = '[mem:inbox]';
  * Tool name for audit logging
  */
 const TOOL_NAME = 'mem:inbox';
-/**
- * Audit log file path
- */
-const AUDIT_LOG_PATH = '.beacon/telemetry/tools.ndjson';
 /**
  * Watch mode polling interval in milliseconds
  */
@@ -79,7 +75,7 @@ const CLI_OPTIONS = {
  */
 async function writeAuditLog(baseDir, entry) {
     try {
-        const logPath = path.join(baseDir, AUDIT_LOG_PATH);
+        const logPath = path.join(baseDir, LUMENFLOW_PATHS.AUDIT_LOG);
         const logDir = path.dirname(logPath);
         // eslint-disable-next-line security/detect-non-literal-fs-filename -- CLI tool creates known directory
         await fs.mkdir(logDir, { recursive: true });

package/dist/mem-init.js

@@ -3,9 +3,9 @@
  * Memory Init CLI (WU-1464)
  *
  * Initialize memory layer in the repository.
- * Creates .beacon/memory/ directory with memory.jsonl and config.yaml.
+ * Creates .lumenflow/memory/ directory with memory.jsonl and config.yaml.
  *
- * Includes audit logging to .beacon/telemetry/tools.ndjson.
+ * Includes audit logging to .lumenflow/telemetry/tools.ndjson.
  *
  * Usage:
  *   pnpm mem:init [--base-dir <path>] [--quiet]
@@ -16,7 +16,7 @@ import fs from 'node:fs/promises';
 import path from 'node:path';
 import { initMemory } from '@lumenflow/memory/dist/mem-init-core.js';
 import { createWUParser } from '@lumenflow/core/dist/arg-parser.js';
-import { EXIT_CODES, STRING_LITERALS } from '@lumenflow/core/dist/wu-constants.js';
+import { EXIT_CODES, STRING_LITERALS, LUMENFLOW_PATHS } from '@lumenflow/core/dist/wu-constants.js';
 /**
  * Log prefix for mem:init output
  */
@@ -25,10 +25,6 @@ const LOG_PREFIX = '[mem:init]';
  * Tool name for audit logging
  */
 const TOOL_NAME = 'mem:init';
-/**
- * Audit log file path
- */
-const AUDIT_LOG_PATH = '.beacon/telemetry/tools.ndjson';
 /**
  * Write audit log entry for tool execution
  *
@@ -37,7 +33,7 @@ const AUDIT_LOG_PATH = '.beacon/telemetry/tools.ndjson';
  */
 async function writeAuditLog(baseDir, entry) {
     try {
-        const logPath = path.join(baseDir, AUDIT_LOG_PATH);
+        const logPath = path.join(baseDir, LUMENFLOW_PATHS.AUDIT_LOG);
         const logDir = path.dirname(logPath);
         // Ensure telemetry directory exists
         // eslint-disable-next-line security/detect-non-literal-fs-filename -- CLI tool creates known directory
@@ -129,7 +125,7 @@ async function main() {
         console.log('');
         console.log('Created:');
         if (result.created.directory) {
-            console.log('  - .beacon/memory/ directory');
+            console.log('  - .lumenflow/memory/ directory');
         }
         if (result.created.memoryJsonl) {
             console.log('  - memory.jsonl (empty)');

package/dist/mem-ready.js

@@ -8,7 +8,7 @@
  * Usage:
  *   pnpm mem:ready --wu WU-1234 [--type <type>] [--format <json|human>] [--quiet]
  *
- * Includes audit logging to .beacon/telemetry/tools.ndjson.
+ * Includes audit logging to .lumenflow/telemetry/tools.ndjson.
  *
  * @see {@link tools/lib/mem-ready-core.mjs} - Core logic
  * @see {@link tools/__tests__/mem-ready.test.mjs} - Tests
@@ -17,7 +17,7 @@ import fs from 'node:fs/promises';
 import path from 'node:path';
 import { queryReadyNodes } from '@lumenflow/memory/dist/mem-ready-core.js';
 import { createWUParser, WU_OPTIONS } from '@lumenflow/core/dist/arg-parser.js';
-import { EXIT_CODES } from '@lumenflow/core/dist/wu-constants.js';
+import { EXIT_CODES, LUMENFLOW_PATHS } from '@lumenflow/core/dist/wu-constants.js';
 import { MEMORY_NODE_TYPES } from '@lumenflow/memory/dist/memory-schema.js';
 /**
  * Log prefix for mem:ready output
@@ -27,10 +27,6 @@ const LOG_PREFIX = '[mem:ready]';
  * Tool name for audit logging
  */
 const TOOL_NAME = 'mem:ready';
-/**
- * Audit log file path
- */
-const AUDIT_LOG_PATH = '.beacon/telemetry/tools.ndjson';
 /**
  * CLI argument options specific to mem:ready
  */
@@ -64,7 +60,7 @@ const CLI_OPTIONS = {
  */
 async function writeAuditLog(baseDir, entry) {
     try {
-        const logPath = path.join(baseDir, AUDIT_LOG_PATH);
+        const logPath = path.join(baseDir, LUMENFLOW_PATHS.AUDIT_LOG);
         const logDir = path.dirname(logPath);
         // eslint-disable-next-line security/detect-non-literal-fs-filename -- CLI tool creates known directory
         await fs.mkdir(logDir, { recursive: true });

package/dist/mem-signal.js

@@ -5,7 +5,7 @@
  * Send coordination signals between parallel agents for sub-100ms
  * multi-agent swarm coordination without git sync latency.
  *
- * Includes audit logging to .beacon/telemetry/tools.ndjson.
+ * Includes audit logging to .lumenflow/telemetry/tools.ndjson.
  *
  * Usage:
  *   pnpm mem:signal 'message' [--wu <id>] [--lane <name>] [--quiet]
@@ -17,7 +17,7 @@ import fs from 'node:fs/promises';
 import path from 'node:path';
 import { createSignal } from '@lumenflow/memory/dist/mem-signal-core.js';
 import { createWUParser, WU_OPTIONS } from '@lumenflow/core/dist/arg-parser.js';
-import { EXIT_CODES } from '@lumenflow/core/dist/wu-constants.js';
+import { EXIT_CODES, LUMENFLOW_PATHS } from '@lumenflow/core/dist/wu-constants.js';
 /**
  * Log prefix for mem:signal output
  */
@@ -26,10 +26,6 @@ const LOG_PREFIX = '[mem:signal]';
  * Tool name for audit logging
  */
 const TOOL_NAME = 'mem:signal';
-/**
- * Audit log file path
- */
-const AUDIT_LOG_PATH = '.beacon/telemetry/tools.ndjson';
 /**
  * CLI argument options specific to mem:signal
  */
@@ -53,7 +49,7 @@ const CLI_OPTIONS = {
  */
 async function writeAuditLog(baseDir, entry) {
     try {
-        const logPath = path.join(baseDir, AUDIT_LOG_PATH);
+        const logPath = path.join(baseDir, LUMENFLOW_PATHS.AUDIT_LOG);
         const logDir = path.dirname(logPath);
         // eslint-disable-next-line security/detect-non-literal-fs-filename -- CLI tool creates known directory
         await fs.mkdir(logDir, { recursive: true });

package/dist/mem-start.js

@@ -5,7 +5,7 @@
  * Create a session node linked to a WU.
  * Called by wu:claim enhancement for context restoration after /clear.
  *
- * Includes audit logging to .beacon/telemetry/tools.ndjson.
+ * Includes audit logging to .lumenflow/telemetry/tools.ndjson.
  *
  * Usage:
  *   pnpm mem:start --wu WU-1234 [--agent-type <type>] [--context-tier <tier>] [--quiet]
@@ -17,7 +17,7 @@ import fs from 'node:fs/promises';
 import path from 'node:path';
 import { startSession } from '@lumenflow/memory/dist/mem-start-core.js';
 import { createWUParser, WU_OPTIONS } from '@lumenflow/core/dist/arg-parser.js';
-import { EXIT_CODES } from '@lumenflow/core/dist/wu-constants.js';
+import { EXIT_CODES, LUMENFLOW_PATHS } from '@lumenflow/core/dist/wu-constants.js';
 /**
  * Log prefix for mem:start output
  */
@@ -26,10 +26,6 @@ const LOG_PREFIX = '[mem:start]';
  * Tool name for audit logging
  */
 const TOOL_NAME = 'mem:start';
-/**
- * Audit log file path
- */
-const AUDIT_LOG_PATH = '.beacon/telemetry/tools.ndjson';
 /**
  * Write audit log entry for tool execution
  *
@@ -38,7 +34,7 @@ const AUDIT_LOG_PATH = '.beacon/telemetry/tools.ndjson';
  */
 async function writeAuditLog(baseDir, entry) {
     try {
-        const logPath = path.join(baseDir, AUDIT_LOG_PATH);
+        const logPath = path.join(baseDir, LUMENFLOW_PATHS.AUDIT_LOG);
         const logDir = path.dirname(logPath);
         // Ensure telemetry directory exists
         // eslint-disable-next-line security/detect-non-literal-fs-filename -- CLI tool creates known directory