@lumenflow/cli 3.19.0 → 3.21.0

package/dist/wu-verify.js

@@ -19,23 +19,28 @@
 import { createWUParser, WU_OPTIONS } from '@lumenflow/core/arg-parser';
 import { EXIT_CODES } from '@lumenflow/core/wu-constants';
 import { verifyWUComplete, debugSummary } from '@lumenflow/agent/verification';
-const opts = createWUParser({
-    name: 'wu-verify',
-    description: 'Verify WU completion (stamp, commit, clean tree)',
-    options: [WU_OPTIONS.id],
-    required: ['id'],
-});
-const id = opts.id;
-try {
-    const result = verifyWUComplete(id);
-    const message = debugSummary(result);
-    // eslint-disable-next-line no-console -- CLI output
-    console.log(message);
-    process.exit(result.complete ? EXIT_CODES.SUCCESS : EXIT_CODES.ERROR);
+import { runCLI } from './cli-entry-point.js';
+// WU-2482: Wrap in async main() + runCLI so --help exits 0 via ProcessExitError handling.
+async function main() {
+    const opts = createWUParser({
+        name: 'wu-verify',
+        description: 'Verify WU completion (stamp, commit, clean tree)',
+        options: [WU_OPTIONS.id],
+        required: ['id'],
+    });
+    const id = opts.id;
+    try {
+        const result = verifyWUComplete(id);
+        const message = debugSummary(result);
+        console.log(message);
+        process.exit(result.complete ? EXIT_CODES.SUCCESS : EXIT_CODES.ERROR);
+    }
+    catch (error) {
+        console.error(`Verification error: ${error instanceof Error ? error.message : String(error)}`);
+        process.exit(EXIT_CODES.ERROR);
+    }
 }
-catch (error) {
-    // eslint-disable-next-line no-console -- CLI error output
-    console.error(`Verification error: ${error instanceof Error ? error.message : String(error)}`);
-    process.exit(EXIT_CODES.ERROR);
+if (import.meta.main) {
+    void runCLI(main);
 }
 //# sourceMappingURL=wu-verify.js.map

package/dist/wu-verify.js.map

@@ -1 +1 @@
-{"version":3,"file":"wu-verify.js","sourceRoot":"","sources":["../src/wu-verify.ts"],"names":[],"mappings":";AACA,iCAAiC;AACjC,yCAAyC;AACzC;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AACxE,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAE/E,MAAM,IAAI,GAAG,cAAc,CAAC;IAC1B,IAAI,EAAE,WAAW;IACjB,WAAW,EAAE,kDAAkD;IAC/D,OAAO,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;IACxB,QAAQ,EAAE,CAAC,IAAI,CAAC;CACjB,CAAC,CAAC;AAEH,MAAM,EAAE,GAAW,IAAI,CAAC,EAAE,CAAC;AAE3B,IAAI,CAAC;IACH,MAAM,MAAM,GAAG,gBAAgB,CAAC,EAAE,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IACrC,oDAAoD;IACpD,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACrB,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;AACxE,CAAC;AAAC,OAAO,KAAK,EAAE,CAAC;IACf,0DAA0D;IAC1D,OAAO,CAAC,KAAK,CAAC,uBAAuB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC/F,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;AACjC,CAAC"}
+{"version":3,"file":"wu-verify.js","sourceRoot":"","sources":["../src/wu-verify.ts"],"names":[],"mappings":";AACA,iCAAiC;AACjC,yCAAyC;AACzC;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AACxE,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAC/E,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAE9C,0FAA0F;AAC1F,KAAK,UAAU,IAAI;IACjB,MAAM,IAAI,GAAG,cAAc,CAAC;QAC1B,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,kDAAkD;QAC/D,OAAO,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;QACxB,QAAQ,EAAE,CAAC,IAAI,CAAC;KACjB,CAAC,CAAC;IAEH,MAAM,EAAE,GAAW,IAAI,CAAC,EAAE,CAAC;IAE3B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,gBAAgB,CAAC,EAAE,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACrB,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACxE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,uBAAuB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC/F,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;AACH,CAAC;AAED,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACrB,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC;AACpB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lumenflow/cli",
-  "version": "3.19.0",
+  "version": "3.21.0",
   "description": "Command-line interface for LumenFlow workflow framework",
   "keywords": [
     "lumenflow",
@@ -186,13 +186,13 @@
     "xstate": "^5.28.0",
     "yaml": "^2.8.2",
     "zod": "^4.3.6",
-    "@lumenflow/agent": "3.19.0",
-    "@lumenflow/control-plane-sdk": "3.19.0",
-    "@lumenflow/core": "3.19.0",
-    "@lumenflow/initiatives": "3.19.0",
-    "@lumenflow/metrics": "3.19.0",
-    "@lumenflow/memory": "3.19.0",
-    "@lumenflow/kernel": "3.19.0"
+    "@lumenflow/control-plane-sdk": "3.21.0",
+    "@lumenflow/core": "3.21.0",
+    "@lumenflow/initiatives": "3.21.0",
+    "@lumenflow/kernel": "3.21.0",
+    "@lumenflow/memory": "3.21.0",
+    "@lumenflow/metrics": "3.21.0",
+    "@lumenflow/agent": "3.21.0"
   },
   "devDependencies": {
     "@vitest/coverage-v8": "^4.0.18",

package/packs/agent-runtime/.turbo/turbo-build.log

@@ -1,4 +1,4 @@
 
-> @lumenflow/packs-agent-runtime@3.19.0 build /home/runner/work/lumenflow-dev/lumenflow-dev/packages/@lumenflow/packs/agent-runtime
+> @lumenflow/packs-agent-runtime@3.21.0 build /home/runner/work/lumenflow-dev/lumenflow-dev/packages/@lumenflow/packs/agent-runtime
 > tsc
 

package/packs/agent-runtime/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lumenflow/packs-agent-runtime",
-  "version": "3.19.0",
+  "version": "3.21.0",
   "description": "Agent runtime pack scaffold for LumenFlow — governed model-turn execution, pack config, and provider capability baselines",
   "keywords": [
     "lumenflow",

package/packs/sidekick/.turbo/turbo-build.log

@@ -1,4 +1,4 @@
 
-> @lumenflow/packs-sidekick@3.19.0 build /home/runner/work/lumenflow-dev/lumenflow-dev/packages/@lumenflow/packs/sidekick
+> @lumenflow/packs-sidekick@3.21.0 build /home/runner/work/lumenflow-dev/lumenflow-dev/packages/@lumenflow/packs/sidekick
 > tsc
 

package/packs/sidekick/README.md

@@ -1,194 +1,199 @@
 # Sidekick Pack
 
-Personal productivity pack for the LumenFlow kernel. Provides task management,
-workspace memory, communication channels, routines, and system administration
-tools -- all scoped to a local `.sidekick/` directory.
+Workspace-local productivity pack for the LumenFlow kernel. Sidekick manages tasks, memory,
+channels, routines, and status under `.sidekick/`, while keeping every tool call inside the normal
+kernel scope, policy, and evidence pipeline.
 
 ## Status
 
-**Version**: 0.1.0 (pre-release)
-**License**: AGPL-3.0-only
+**Version**: `0.1.0` (pre-release)  
+**License**: `AGPL-3.0-only`
 
 ## Tool Groups
 
-| Group   | Tools                                                        | Description                                 |
-| ------- | ------------------------------------------------------------ | ------------------------------------------- |
-| Task    | `task:create`, `task:list`, `task:complete`, `task:schedule` | Create, query, complete, and schedule tasks |
-| Memory  | `memory:store`, `memory:recall`, `memory:forget`             | Persist and retrieve workspace knowledge    |
-| Channel | `channel:configure`, `channel:send`, `channel:receive`       | Named message channels                      |
-| Routine | `routine:create`, `routine:list`, `routine:run`              | Multi-step tool sequences (plan-only)       |
-| System  | `sidekick:init`, `sidekick:status`, `sidekick:export`        | Bootstrap, health check, data export        |
-
-**Total**: 16 tools
-
-## Key Design Decisions
-
-- **`.sidekick/` is workspace-local storage.** All data lives under the project
-  root in a `.sidekick/` directory managed by the `StoragePort` abstraction.
-- **`routine:run` returns a plan only.** It resolves the routine definition and
-  returns the ordered list of steps with their inputs. It does not execute them.
-- **`sidekick:export` is read-only.** It returns all stored data as a JSON
-  structure. It does not write files to disk.
-- **Every write tool supports `dry_run`.** When `dry_run: true`, the tool
-  validates input and returns what it would do, without persisting changes.
-- **Pack manifest is the contract.** There is no separate contract package. The
-  `manifest.yaml` file defines tool names, schemas, scopes, and policies.
+| Group   | Tools                                                                                      | Description                                                |
+| ------- | ------------------------------------------------------------------------------------------ | ---------------------------------------------------------- |
+| Task    | `task:create`, `task:list`, `task:update`, `task:cancel`, `task:complete`, `task:schedule` | Create, manage, cancel, complete, and schedule local tasks |
+| Memory  | `memory:store`, `memory:recall`, `memory:update`, `memory:forget`                          | Persist and edit reusable workspace knowledge              |
+| Channel | `channel:configure`, `channel:list`, `channel:delete`, `channel:send`, `channel:receive`   | Discover and manage named local message channels           |
+| Routine | `routine:create`, `routine:list`, `routine:update`, `routine:delete`, `routine:run`        | Define, stop, inspect, and remove plan-only routines       |
+| System  | `sidekick:init`, `sidekick:status`, `sidekick:export`                                      | Bootstrap, health check, and export Sidekick-managed state |
 
-## Manual Smoke Flow
+**Total**: 23 tools
 
-Use this sequence to verify the pack end-to-end after installation or upgrade.
+## Behavior Notes
 
-### Prerequisites
+- `.sidekick/` is the pack-owned storage root.
+- `routine:run` is plan-only. It returns the resolved steps and never executes them.
+- `routine:update` with `enabled: false` is the stop primitive for routines.
+- `task:cancel` is the destructive task terminal state; it is separate from `task:complete`.
+- `sidekick:export` is read-only. It returns data and does not write export artifacts.
+- All write-capable and destructive tools support `dry_run`.
+- Destructive Sidekick tools are approval-gated through the pack policy factory.
 
-- LumenFlow kernel runtime with the sidekick pack registered
-- HTTP surface running (for HTTP dispatch tests)
+### Approval-Gated Destructive Tools
 
-### Step 1: Initialize
+These tools require policy evaluation to return `approval_required` before execution:
 
-```bash
-# Via kernel tool dispatch (or HTTP POST /tools/sidekick:init)
+- `task:cancel`
+- `memory:forget`
+- `channel:delete`
+- `routine:delete`
+
+The permission label helps classify them as destructive, but the actual pause comes from the pack
+policy path and kernel approval flow.
+
+## Manual Smoke Flow
+
+Use this sequence after installation or whenever you want to smoke test the current contract.
+
+### 1. Initialize storage
+
+```text
 tool: sidekick:init
 input: {}
 ```
 
-Expected: `{ "success": true, "data": { "initialized": true, "root_dir": ".sidekick" } }`
+Expected: `initialized: true` and a `.sidekick/` root path.
 
-### Step 2: Create a Task
+### 2. Create and update a task
 
-```bash
+```text
 tool: task:create
 input: { "title": "Review docs", "priority": "P1", "tags": ["docs"] }
 ```
 
-Expected: `{ "success": true, "data": { "id": "<uuid>", "title": "Review docs", ... } }`
-
-### Step 3: List Tasks
-
-```bash
-tool: task:list
-input: { "status": "pending" }
+```text
+tool: task:update
+input: {
+  "id": "<task-id>",
+  "description": "Check final Sidekick contract",
+  "due_at": "2026-03-31T00:00:00Z"
+}
 ```
 
-Expected: Array containing the task from Step 2.
+Expected: `task:list` returns the updated task metadata.
 
-### Step 4: Store a Memory
+### 3. Store and update memory
 
-```bash
+```text
 tool: memory:store
-input: { "type": "note", "content": "Sidekick pack validated", "tags": ["smoke-test"] }
+input: { "type": "note", "content": "Sidekick docs updated", "tags": ["docs"] }
 ```
 
-Expected: `{ "success": true, "data": { "id": "<uuid>", ... } }`
-
-### Step 5: Recall Memory
-
-```bash
-tool: memory:recall
-input: { "query": "validated", "type": "note" }
+```text
+tool: memory:update
+input: { "id": "<memory-id>", "type": "snippet", "content": "task:cancel is approval-gated" }
 ```
 
-Expected: Array containing the memory from Step 4.
+Expected: `memory:recall` returns the edited record.
 
-### Step 6: Create a Routine
+### 4. Create and stop a routine
 
-```bash
+```text
 tool: routine:create
 input: {
   "name": "daily-review",
   "steps": [
     { "tool": "task:list", "input": { "status": "pending" } },
     { "tool": "sidekick:status", "input": {} }
-  ]
+  ],
+  "enabled": true
 }
 ```
 
-Expected: `{ "success": true, "data": { "id": "<uuid>", "name": "daily-review", ... } }`
+```text
+tool: routine:update
+input: { "id": "<routine-id>", "enabled": false }
+```
 
-### Step 7: Run Routine (plan-only)
+Expected: `routine:list` still shows the routine, while `routine:list { "enabled_only": true }`
+excludes it.
 
-```bash
+### 5. Inspect a routine plan
+
+```text
 tool: routine:run
-input: { "id": "<routine-id-from-step-6>" }
+input: { "id": "<routine-id>" }
 ```
 
-Expected: A plan object listing the two steps with their resolved inputs. No
-side-effects -- the steps are NOT executed.
+Expected: A plan object listing the ordered steps. No side effects occur.
 
-### Step 8: Check Status
+### 6. Check channel discovery
 
-```bash
-tool: sidekick:status
+```text
+tool: channel:send
+input: { "channel": "alerts", "content": "Docs smoke flow" }
+```
+
+```text
+tool: channel:list
 input: {}
 ```
 
-Expected: Summary showing `task_count >= 1`, `memory_entries >= 1`,
-`routines >= 1`.
+Expected: A local channel entry with stable metadata such as `message_count` and
+`last_message_at`.
 
-### Step 9: Export
+### 7. Verify a destructive dry run
 
-```bash
-tool: sidekick:export
-input: { "include_audit": true }
+```text
+tool: task:cancel
+input: { "id": "<task-id>", "dry_run": true }
 ```
 
-Expected: Full JSON dump of all stores including audit trail from prior steps.
+Expected: The response previews the canceled task and includes `dry_run: true`, while
+`task:list { "status": "pending" }` still shows the task as pending.
 
-### Step 10: Complete the Task
+### 8. Verify approval-gated destructive behavior
 
-```bash
-tool: task:complete
-input: { "id": "<task-id-from-step-2>", "note": "Smoke test passed" }
-```
+Run `task:cancel`, `memory:forget`, `channel:delete`, or `routine:delete` through the kernel
+runtime or host surface that evaluates policies.
 
-Expected: `{ "success": true, "data": { "status": "done", ... } }`
+Expected: The first attempt returns `APPROVAL_REQUIRED`. After approval resolution, the tool runs
+and the audit trail reflects the final delete or cancel transition.
 
-### Step 11: Verify via HTTP Surface
+### 9. Export
 
-```bash
-curl -X POST http://localhost:<port>/tools/sidekick:status \
-  -H "Content-Type: application/json" \
-  -d '{ "context": { "task_id": "smoke-test", "workspace_id": "test" } }'
+```text
+tool: sidekick:export
+input: { "include_audit": true }
 ```
 
-Expected: HTTP 200 with the same status payload as Step 8.
-
-### Dry Run Verification
-
-Repeat Step 2 with `"dry_run": true` added to the input. Verify that the
-response includes `"dry_run": true` and that `task:list` does not return the
-dry-run task.
+Expected: A full JSON snapshot of stores plus audit events.
 
 ## Validation
 
 ```bash
-# Schema and integrity validation
+# Pack contract and integrity
 pnpm pack:validate --id sidekick
 
-# Unit tests (119 tests across 3 suites)
-npx vitest run packages/@lumenflow/packs/sidekick/__tests__/
+# Sidekick tool and manifest tests
+pnpm vitest run packages/@lumenflow/packs/sidekick/__tests__/
 
-# HTTP surface tests (13 tests)
-npx vitest run packages/@lumenflow/surfaces/http/__tests__/tool-api.test.ts
+# Kernel approval coverage for Sidekick destructive tools
+pnpm vitest run packages/@lumenflow/kernel/src/__tests__/runtime.test.ts
 ```
 
-## Storage Architecture
+## Storage Layout
 
-The pack uses a `StoragePort` abstraction with a filesystem adapter
-(`FsStoragePort`). Each store (tasks, memories, channels, messages, routines)
-is a JSON array file under `.sidekick/`. An append-only `audit.jsonl` file
-records every tool invocation.
+Sidekick uses a `StoragePort` abstraction with a filesystem adapter. The persisted layout is:
 
-```
+```text
 .sidekick/
-  tasks.json
-  memories.json
-  channels.json
-  messages.json
-  routines.json
-  audit.jsonl
+  audit/
+    events.jsonl
+  channels/
+    channels.json
+    messages.json
+  memory/
+    memories.json
+  routines/
+    routines.json
+  tasks/
+    tasks.json
 ```
 
 ## Contributing
 
-This pack follows the LumenFlow development workflow. See the root `CLAUDE.md`
-and `LUMENFLOW.md` for contribution guidelines.
+This pack follows the LumenFlow workflow. See the repository `LUMENFLOW.md` and workspace rules for
+delivery expectations.