@lumenflow/cli 3.19.0 → 3.20.0

package/templates/core/ai/onboarding/quick-ref-commands.md.template

@@ -143,9 +143,9 @@ you want to refresh docs without upgrading packages (e.g., after manually editin
 | `pnpm approval:request --type <type> --subject <json>`         | Request control-plane approval for an action                                                                   |
 | `pnpm approval:review --id <approvalId> --decision <decision>` | Resolve an approval decision (`approved`/`rejected`/`expired`)                                                 |
 | `pnpm approval:list [--status <status>]`                       | List approvals with optional status/type filters                                                               |
-| `pnpm wu:block --id WU-XXX --reason "..."`                     | Block WU with reason                                                                                           |
-| `pnpm wu:unblock --id WU-XXX`                                  | Unblock WU                                                                                                     |
-| `pnpm wu:release --id WU-XXX`                                  | Release orphaned WU (in_progress to ready)                                                                     |
+| `pnpm wu:block --id WU-XXX --reason "..."`                     | Block WU with reason (ownership-guarded, v3.19.0)                                                              |
+| `pnpm wu:unblock --id WU-XXX`                                  | Unblock WU (ownership-guarded, v3.19.0)                                                                        |
+| `pnpm wu:release --id WU-XXX --reason "..."`                   | Release orphaned WU (ownership-guarded, v3.19.0)                                                               |
 | `pnpm wu:status --id WU-XXX`                                   | Show WU status, location, valid commands                                                                       |
 | `pnpm wu:brief --id WU-XXX --client <client>`                  | **MANDATORY after wu:claim.** Generate handoff prompt + record evidence. wu:done blocks without this (WU-2379) |
 | `pnpm wu:brief --id WU-XXX --no-context`                       | Generate prompt without memory context injection                                                               |
@@ -154,20 +154,25 @@ you want to refresh docs without upgrading packages (e.g., after manually editin
 
 ### WU Maintenance
 
-| Command                          | Description                                      |
-| -------------------------------- | ------------------------------------------------ |
-| `pnpm wu:validate --id WU-XXX`   | Validate WU spec                                 |
-| `pnpm wu:preflight --id WU-XXX`  | Pre-flight checks before wu:done                 |
-| `pnpm wu:verify --id WU-XXX`     | Verify WU completion (stamp, commit, clean tree) |
-| `pnpm wu:recover --id WU-XXX`    | Analyze and fix WU state inconsistencies         |
-| `pnpm wu:repair --id WU-XXX`     | Repair WU state issues                           |
-| `pnpm wu:prune`                  | Clean stale worktrees                            |
-| `pnpm wu:cleanup --id WU-XXX`    | Cleanup after PR merge (PR-only)                 |
-| `pnpm wu:deps --id WU-XXX`       | Show WU dependencies                             |
-| `pnpm wu:infer-lane --id WU-XXX` | Infer lane from code paths/description           |
-| `pnpm wu:delete --id WU-XXX`     | Delete WU spec and cleanup                       |
-| `pnpm wu:unlock-lane --lane <L>` | Unlock stuck lane                                |
-| `pnpm wu:proto --lane <Lane>`    | Create WU prototype (lightweight draft)          |
+| Command                          | Description                                           |
+| -------------------------------- | ----------------------------------------------------- |
+| `pnpm wu:validate --id WU-XXX`   | Validate WU spec                                      |
+| `pnpm wu:preflight --id WU-XXX`  | Pre-flight checks before wu:done                      |
+| `pnpm wu:verify --id WU-XXX`     | Verify WU completion (stamp, commit, clean tree)      |
+| `pnpm wu:recover --id WU-XXX`    | Analyze and fix WU state (ownership-guarded, v3.19.0) |
+| `pnpm wu:repair --id WU-XXX`     | Repair WU state issues                                |
+| `pnpm wu:prune`                  | Clean stale worktrees                                 |
+| `pnpm wu:cleanup --id WU-XXX`    | Cleanup after PR merge (PR-only)                      |
+| `pnpm wu:deps --id WU-XXX`       | Show WU dependencies                                  |
+| `pnpm wu:infer-lane --id WU-XXX` | Infer lane from code paths/description                |
+| `pnpm wu:delete --id WU-XXX`     | Delete WU spec and cleanup                            |
+| `pnpm wu:unlock-lane --lane <L>` | Unlock stuck lane                                     |
+| `pnpm wu:proto --lane <Lane>`    | Create WU prototype (lightweight draft)               |
+
+**Ownership guards (v3.19.0, WU-2468):** `wu:block`, `wu:unblock`, `wu:release`, and `wu:recover`
+validate session ownership before state mutations. If the WU belongs to another session, use
+`--override-owner --reason "..."` to override (audited). **AGENTS: NEVER use --override-owner
+without explicit human instruction.**
 
 ---
 
@@ -198,6 +203,11 @@ you want to refresh docs without upgrading packages (e.g., after manually editin
 ¹ **Script aliases:** `spec:linter` and `tasks:validate` are pnpm script aliases
 for `wu:validate --all`. They are not standalone CLI commands.
 
+**Conditional gates (v3.19.0, WU-2448):** Define pattern-triggered commands in
+`workspace.yaml > software_delivery.gates.conditional_commands`. Commands with `trigger_patterns`
+only run when matching files change. Supports `error` (blocks), `warn` (logs), and `off` (skip)
+severity levels. See workspace-spec.mdx for schema.
+
 **Formatting: always scope to changed files only.**
 Use `pnpm prettier --write <changed-files...>` — never unscoped `pnpm format`.
 Running `pnpm format` reformats every file in the repo, creating hundreds of

package/templates/core/ai/onboarding/starting-prompt.md.template

@@ -203,6 +203,7 @@ These are the mistakes agents make most often. Memorize these before reading any
 5. **State files are auto-generated.** Never manually edit `wu-events.jsonl`, `backlog.md`, or `status.md` — lifecycle commands manage them.
 6. **wu:edit requires a clean worktree.** Commit `wu-events.jsonl` and other changes before running `wu:edit`.
 7. **Don't edit on main then stash to a worktree.** If a hook blocks you on main, that means you need a WU. Create one and work in the worktree from the start.
+8. **Don't modify another agent's WU to free a lane.** `wu:block`, `wu:unblock`, `wu:release`, and `wu:recover` enforce ownership guards (v3.19.0). If you hit a `SESSION OWNERSHIP VIOLATION`, wait for the owning WU to complete or block itself — never use `--override-owner` without explicit human instruction.
 
 ---
 
@@ -527,7 +528,7 @@ Default profiles:
 
 - Behavior/logic changes: follow project policy (`methodology.testing`: `tdd`, `test-after`, or `none`).
 - Structured-content-only changes (`.yaml/.yml/.json/.md/.mdx`): use parse/schema/lint/eval evidence; TDD checkpoint is omitted.
-- UI presentation hints: prefer smoke/manual/integration/E2E verification and use unit tests for pure logic or explicitly required checks.
+- UI presentation hints: prefer smoke/manual/integration/E2E verification, never assert inline styles, CSS values, exact copy, or DOM shape, and use unit tests only for pure logic or explicitly required checks.
 
 Common override points include `visual-directive`, `structured-content-directive`,
 `verification-requirements`, and `design-context-ui`.