@lumenflow/cli 4.23.0 → 5.0.0

package/packs/sidekick/tool-impl/task-tools.ts

@@ -18,6 +18,13 @@ import {
   type ToolContextLike,
   type ToolOutput,
 } from './shared.js';
+import {
+  buildTaskCompletedEvent,
+  buildTaskCreatedEvent,
+  buildTaskScheduledEvent,
+  buildTaskSnoozedEvent,
+  emitSidekickEvent,
+} from '../sidekick-events.js';
 
 // ---------------------------------------------------------------------------
 // Constants
@@ -97,6 +104,16 @@ function buildCanceledTask(task: TaskRecord): TaskRecord {
   };
 }
 
+function movedDueDateLater(
+  previousDueAt: string | undefined,
+  nextDueAt: string | undefined,
+): boolean {
+  if (!previousDueAt || !nextDueAt) {
+    return false;
+  }
+  return Date.parse(nextDueAt) > Date.parse(previousDueAt);
+}
+
 // ---------------------------------------------------------------------------
 // task:create
 // ---------------------------------------------------------------------------
@@ -140,6 +157,8 @@ async function taskCreateTool(input: unknown, context?: ToolContextLike): Promis
     );
   });
 
+  await emitSidekickEvent(buildTaskCreatedEvent(task));
+
   return success({ task: task as unknown as Record<string, unknown> });
 }
 
@@ -234,6 +253,8 @@ async function taskUpdateTool(input: unknown, context?: ToolContextLike): Promis
     });
   }
 
+  const previousDueAt = task.due_at ?? null;
+
   await storage.withLock(async () => {
     const latest = await storage.readStore('tasks');
     const target = latest.find((entry) => entry.id === id);
@@ -254,6 +275,15 @@ async function taskUpdateTool(input: unknown, context?: ToolContextLike): Promis
 
   const updated = await storage.readStore('tasks');
   const updatedTask = updated.find((entry) => entry.id === id);
+  if (updatedTask && movedDueDateLater(previousDueAt ?? undefined, updatedTask.due_at)) {
+    await emitSidekickEvent(
+      buildTaskSnoozedEvent({
+        task_id: id,
+        previous_due_at: previousDueAt,
+        due_at: updatedTask.due_at ?? previousDueAt ?? '',
+      }),
+    );
+  }
   return success({ task: updatedTask as unknown as Record<string, unknown> });
 }
 
@@ -309,6 +339,9 @@ async function taskCompleteTool(input: unknown, context?: ToolContextLike): Prom
 
   const updated = await storage.readStore('tasks');
   const completedTask = updated.find((t) => t.id === id);
+  if (completedTask) {
+    await emitSidekickEvent(buildTaskCompletedEvent(completedTask));
+  }
 
   return success({ task: completedTask as unknown as Record<string, unknown> });
 }
@@ -391,6 +424,7 @@ async function taskScheduleTool(input: unknown, context?: ToolContextLike): Prom
 
   const dueAt = asNonEmptyString(parsed.due_at);
   const cron = asNonEmptyString(parsed.cron);
+  const previousDueAt = task.due_at ?? null;
 
   if (isDryRun(parsed)) {
     const preview = {
@@ -429,6 +463,18 @@ async function taskScheduleTool(input: unknown, context?: ToolContextLike): Prom
 
   const updated = await storage.readStore('tasks');
   const scheduledTask = updated.find((t) => t.id === id);
+  if (scheduledTask) {
+    await emitSidekickEvent(buildTaskScheduledEvent(scheduledTask));
+    if (movedDueDateLater(previousDueAt ?? undefined, scheduledTask.due_at)) {
+      await emitSidekickEvent(
+        buildTaskSnoozedEvent({
+          task_id: id,
+          previous_due_at: previousDueAt,
+          due_at: scheduledTask.due_at ?? previousDueAt ?? '',
+        }),
+      );
+    }
+  }
 
   return success({ task: scheduledTask as unknown as Record<string, unknown> });
 }

package/packs/sidekick/tsconfig.json

@@ -15,6 +15,6 @@
     "checkJs": false,
     "noEmitOnError": true
   },
-  "include": ["*.ts", "tools/**/*.ts", "tool-impl/**/*.ts"],
+  "include": ["*.ts", "tools/**/*.ts", "tool-impl/**/*.ts", "src/**/*.ts"],
   "exclude": ["node_modules", "dist", "__tests__"]
 }

package/packs/software-delivery/.turbo/turbo-build.log

@@ -1,4 +1,4 @@
 
-> @lumenflow/packs-software-delivery@4.23.0 build /home/runner/work/lumenflow-dev/lumenflow-dev/packages/@lumenflow/packs/software-delivery
+> @lumenflow/packs-software-delivery@5.0.0 build /home/tom/source/hellmai/lumenflow-dev/packages/@lumenflow/packs/software-delivery
 > tsc
 

package/packs/software-delivery/.turbo/turbo-test.log

@@ -0,0 +1,63 @@
+
+> @lumenflow/packs-software-delivery@4.24.0 test /home/tom/source/hellmai/lumenflow-dev/packages/@lumenflow/packs/software-delivery
+> vitest run
+
+
+ RUN  v4.0.18 /home/tom/source/hellmai/lumenflow-dev/packages/@lumenflow/packs/software-delivery
+
+ ✓ __tests__/bridge-regression.test.ts (1 test) 23ms
+ ✓ __tests__/runtime/work-classifier.test.ts (46 tests) 89ms
+ ✓ __tests__/git-runner.test.ts (3 tests) 374ms
+     ✓ uses explicit LUMENFLOW_GIT_BINARY override when provided  327ms
+ ✓ __tests__/memory-tools.test.ts (18 tests) 66ms
+ ✓ __tests__/wu-lifecycle-tools.test.ts (23 tests) 45ms
+ ✓ __tests__/runtime-cli-adapter.test.ts (5 tests) 160ms
+ ✓ __tests__/runtime-native-tools.test.ts (5 tests) 204ms
+ ✓ __tests__/lane-lock.test.ts (6 tests) 95ms
+ ✓ __tests__/extensions.test.ts (3 tests) 27ms
+ ✓ __tests__/agent-tools.test.ts (7 tests) 16ms
+ ✓ __tests__/state/wu-paths.test.ts (49 tests) 65ms
+ ✓ __tests__/manifest.test.ts (8 tests) 23ms
+ ✓ __tests__/config/workspace-reader.test.ts (12 tests) 181ms
+ ✓ __tests__/initiative-orchestration-tools.test.ts (5 tests) 11ms
+ ✓ __tests__/gate-policies.test.ts (4 tests) 582ms
+     ✓ resolves state alias and registers pack with integrity hash  562ms
+ ✓ __tests__/sandbox/sandbox-profile.test.ts (4 tests) 13ms
+ ✓ __tests__/flow-metrics-tools.test.ts (17 tests) 97ms
+ ✓ __tests__/constants/wu-id-format.test.ts (43 tests) 36ms
+ ✓ __tests__/constants/wu-type-helpers.test.ts (11 tests) 1854ms
+       ✓ pack constants barrel re-exports wu-type-helpers predicates  1850ms
+ ✓ __tests__/git-tools.test.ts (6 tests) 1161ms
+     ✓ rejects command arrays that try to execute non-git binaries  392ms
+     ✓ returns command output payloads for allowed git command arrays  429ms
+ ✓ __tests__/sandbox/sandbox-allowlist.test.ts (4 tests) 56ms
+ ✓ __tests__/constants/config-contract.test.ts (28 tests) 44ms
+ ✓ __tests__/tools/remote-exposure.test.ts (34 tests) 43ms
+ ✓ __tests__/constants/wu-validation-constants.test.ts (4 tests) 35ms
+ ✓ __tests__/worktree-tools.test.ts (3 tests) 19ms
+ ✓ __tests__/config/pack-wrappers-consumer-migration.test.ts (7 tests) 1168ms
+     ✓ no repo code imports @lumenflow/core/{env-accessors,normalize-config-keys,delivery-review-contract}  1154ms
+ ✓ __tests__/sandbox/sandbox-backend-macos.test.ts (17 tests) 91ms
+ ✓ __tests__/state/state-machine.test.ts (20 tests) 54ms
+ ✓ __tests__/constants/backlog-patterns.test.ts (10 tests) 38ms
+ ✓ __tests__/packaging/deps-manifest.test.ts (7 tests) 5ms
+ ✓ __tests__/ports/transitive-clean-ports-moved.test.ts (2 tests) 596ms
+     ✓ wu-helpers.ports.ts lives at the new pack path  358ms
+ ✓ __tests__/domain/orchestration-moved.test.ts (3 tests) 35ms
+ ✓ __tests__/constants/wu-git-constants.test.ts (2 tests) 13ms
+ ✓ __tests__/sandbox/sandbox-backend-windows.test.ts (3 tests) 20ms
+ ✓ __tests__/config/schema-rename.test.ts (2 tests) 2ms
+ ✓ __tests__/constants/gate-constants.test.ts (5 tests) 23ms
+ ✓ __tests__/sandbox/sandbox-backend-linux.test.ts (3 tests) 54ms
+ ✓ __tests__/config/env-accessors.test.ts (1 test) 7ms
+ ✓ __tests__/adr-013-examples-validator-parity.test.ts (4 tests) 22ms
+ ✓ __tests__/ports/dashboard-renderer-port-moved.test.ts (1 test) 30ms
+ ✓ __tests__/state/date-utils.test.ts (23 tests) 18ms
+ ✓ __tests__/state/wu-schema.test.ts (18 tests) 47ms
+ ✓ __tests__/state/wu-yaml.test.ts (38 tests) 840ms
+
+ Test Files  43 passed (43)
+      Tests  515 passed (515)
+   Start at  11:11:52
+   Duration  10.27s (transform 26.33s, setup 0ms, import 52.36s, tests 8.38s, environment 59ms)
+

package/packs/software-delivery/.turbo/turbo-typecheck.log

@@ -0,0 +1,4 @@
+
+> @lumenflow/packs-software-delivery@4.24.0 typecheck /home/tom/source/hellmai/lumenflow-dev/worktrees/framework-agent-wu-2764/packages/@lumenflow/packs/software-delivery
+> tsc --noEmit
+

package/packs/software-delivery/manifest-schema.ts

@@ -37,6 +37,13 @@ export interface SoftwareDeliveryManifestTool {
   permission: ToolPermission;
   required_scopes: PathScope[];
   internal_only?: boolean;
+  /**
+   * WU-2729 (INIT-060 Phase 2, ADR-013 §3): approval-surface identifiers the
+   * tool must present to callers before runtime dispatch. Empty array means
+   * no approval gate; undefined means the tool does not declare approval
+   * metadata (treated the same as empty by the discovery surface).
+   */
+  required_approvals?: string[];
 }
 
 export interface SoftwareDeliveryManifestPolicy {
@@ -57,6 +64,11 @@ export interface SoftwareDeliveryPackManifest {
   evidence_types: string[];
   state_aliases: Record<string, string>;
   lane_templates: Array<{ id: string }>;
+  /** WU-2718 (INIT-060 WU-1, ADR-013). */
+  emitted_event_kinds: string[];
+  subscribed_event_kinds: string[];
+  required_approvals: string[];
+  surfaces_required: string[];
 }
 
 function asRecord(input: unknown, label: string): Record<string, unknown> {
@@ -166,6 +178,12 @@ function parseTool(input: unknown, index: number): SoftwareDeliveryManifestTool
     throw new Error(`tools[${index}].permission is invalid.`);
   }
 
+  // WU-2729: optional per-tool required_approvals list.
+  const parsedApprovals =
+    tool.required_approvals === undefined
+      ? undefined
+      : parseStringArray(tool.required_approvals, `tools[${index}].required_approvals`);
+
   return {
     name: parseNonEmptyString(tool.name, `tools[${index}].name`),
     entry: parseNonEmptyString(tool.entry, `tools[${index}].entry`),
@@ -180,6 +198,7 @@ function parseTool(input: unknown, index: number): SoftwareDeliveryManifestTool
             }
             return tool.internal_only;
           })(),
+    ...(parsedApprovals === undefined ? {} : { required_approvals: parsedApprovals }),
   };
 }
 
@@ -233,6 +252,17 @@ export const SoftwareDeliveryManifestSchema: Parser<SoftwareDeliveryPackManifest
         const entry = asRecord(laneTemplate, `lane_templates[${index}]`);
         return { id: parseNonEmptyString(entry.id, `lane_templates[${index}].id`) };
       }),
+      // WU-2718 (INIT-060 WU-1, ADR-013): manifest extension fields.
+      emitted_event_kinds: parseStringArray(
+        manifest.emitted_event_kinds ?? [],
+        'emitted_event_kinds',
+      ),
+      subscribed_event_kinds: parseStringArray(
+        manifest.subscribed_event_kinds ?? [],
+        'subscribed_event_kinds',
+      ),
+      required_approvals: parseStringArray(manifest.required_approvals ?? [], 'required_approvals'),
+      surfaces_required: parseStringArray(manifest.surfaces_required ?? [], 'surfaces_required'),
     };
   },
 };

package/packs/software-delivery/manifest.ts

@@ -55,6 +55,10 @@ const WU_RELEASE_TOOL_ENTRY = 'tool-impl/wu-lifecycle-tools.ts#wuReleaseTool';
 const WU_RECOVER_TOOL_ENTRY = 'tool-impl/wu-lifecycle-tools.ts#wuRecoverTool';
 const WU_REPAIR_TOOL_ENTRY = 'tool-impl/wu-lifecycle-tools.ts#wuRepairTool';
 const GATES_TOOL_ENTRY = 'tool-impl/wu-lifecycle-tools.ts#gatesTool';
+// WU-2729 (INIT-060 Phase 2): gates:docs exposes docs-only gate runs via a
+// dedicated manifest entry so remote callers can request the docs gate
+// without opting into the permissive gates handler surface.
+const GATES_DOCS_TOOL_ENTRY = 'tool-impl/wu-lifecycle-tools.ts#gatesDocsTool';
 const CONFIG_SET_TOOL_ENTRY = 'tool-impl/runtime-native-tools.ts#configSetTool';
 const CONFIG_GET_TOOL_ENTRY = 'tool-impl/runtime-native-tools.ts#configGetTool';
 const MEM_INIT_TOOL_ENTRY = 'tool-impl/memory-tools.ts#memInitTool';
@@ -193,6 +197,7 @@ const TOOL_PERMISSIONS = {
   'flow:bottlenecks': 'read',
   'flow:report': 'read',
   gates: 'write',
+  'gates:docs': 'write',
   'file:delete': 'write',
   'file:edit': 'write',
   'file:read': 'read',
@@ -272,6 +277,7 @@ const TOOL_ENTRY_OVERRIDES: Partial<Record<ToolName, string>> = {
   'wu:repair': WU_REPAIR_TOOL_ENTRY,
   'wu:infer-lane': WU_INFER_LANE_TOOL_ENTRY,
   gates: GATES_TOOL_ENTRY,
+  'gates:docs': GATES_DOCS_TOOL_ENTRY,
   'mem:init': MEM_INIT_TOOL_ENTRY,
   'mem:start': MEM_START_TOOL_ENTRY,
   'mem:ready': MEM_READY_TOOL_ENTRY,
@@ -361,15 +367,85 @@ function requiredScopesForPermission(permission: ToolPermission): PathScope[] {
   ];
 }
 
+/**
+ * WU-2729 (INIT-060 Phase 2): the 10 software-delivery pack tools that are
+ * callable remotely via POST /tools/:name. The HTTP surface uses this list
+ * to build its allowlist so the set is the single source of truth (no
+ * duplicate allowlist in surface code). ADR-013 §3 tool exposure.
+ */
+export const REMOTE_CALLABLE_TOOLS = [
+  'gates',
+  'gates:docs',
+  'lane:suggest',
+  'lane:health',
+  'plan:create',
+  'plan:promote',
+  'initiative:create',
+  'initiative:add-wu',
+  'initiative:status',
+  'flow:report',
+] as const satisfies readonly ToolName[];
+
+export type RemoteCallableToolName = (typeof REMOTE_CALLABLE_TOOLS)[number];
+
+/**
+ * Well-known approval identifiers the software-delivery pack may request.
+ * Kept narrow on purpose; adding a new identifier requires an ADR.
+ */
+export const SOFTWARE_DELIVERY_APPROVAL_IDS = {
+  REMOTE_MUTATION: 'software-delivery:remote_mutation',
+} as const;
+
+/**
+ * WU-2729 (INIT-060 Phase 2): per-tool required_approvals overrides.
+ * Tools absent from this table default to `[]` (no approval required).
+ * Read-only tools MUST remain at `[]`; state-mutating remote-callable
+ * tools SHOULD request an explicit approval identifier so the conductor
+ * UI can surface the approval gate to operators.
+ */
+const APPROVAL_OVERRIDES: Partial<Record<ToolName, readonly string[]>> = {
+  'lane:suggest': [SOFTWARE_DELIVERY_APPROVAL_IDS.REMOTE_MUTATION],
+  'plan:create': [SOFTWARE_DELIVERY_APPROVAL_IDS.REMOTE_MUTATION],
+  'plan:promote': [SOFTWARE_DELIVERY_APPROVAL_IDS.REMOTE_MUTATION],
+  'initiative:create': [SOFTWARE_DELIVERY_APPROVAL_IDS.REMOTE_MUTATION],
+  'initiative:add-wu': [SOFTWARE_DELIVERY_APPROVAL_IDS.REMOTE_MUTATION],
+};
+
+function requiredApprovalsForTool(name: ToolName): string[] | undefined {
+  // WU-2729: only the 10 remote-callable tools carry explicit
+  // required_approvals metadata (even if empty). Other tools leave the
+  // field undefined so the manifest stays minimally descriptive.
+  const isRemoteCallable = (REMOTE_CALLABLE_TOOLS as readonly string[]).includes(name);
+  if (!isRemoteCallable) {
+    return undefined;
+  }
+  const override = APPROVAL_OVERRIDES[name];
+  return override ? [...override] : [];
+}
+
+/**
+ * WU-2729: ordered list of the 10 remote-callable tool names. Preserves
+ * declaration order from REMOTE_CALLABLE_TOOLS so callers can render
+ * stable UIs without re-sorting.
+ */
+export function getRemoteCallableToolNames(): RemoteCallableToolName[] {
+  return [...REMOTE_CALLABLE_TOOLS];
+}
+
 function createManifestTools(): SoftwareDeliveryManifestTool[] {
   return (Object.keys(TOOL_PERMISSIONS) as ToolName[]).map((name) => {
     const permission = TOOL_PERMISSIONS[name];
-    return {
+    const approvals = requiredApprovalsForTool(name);
+    const entry: SoftwareDeliveryManifestTool = {
       name,
       entry: resolveToolEntry(name),
       permission,
       required_scopes: requiredScopesForPermission(permission),
     };
+    if (approvals !== undefined) {
+      entry.required_approvals = approvals;
+    }
+    return entry;
   });
 }
 
@@ -400,6 +476,24 @@ export function renderSoftwareDeliveryMigrationScorecard(
 }
 
 const POLICY_SUFFIXES = ['format', 'lint', 'typecheck', 'test', 'coverage'] as const;
+const SOFTWARE_DELIVERY_EMITTED_EVENT_KINDS = [
+  'software-delivery:gate_started',
+  'software-delivery:gate_passed',
+  'software-delivery:gate_failed',
+  'software-delivery:co_change_rule_fired',
+  'software-delivery:conditional_command_fired',
+  'software-delivery:lane_wip_breached',
+  'software-delivery:lane_locked',
+  'software-delivery:lane_unlocked',
+  'software-delivery:lane_suggestion_emitted',
+  'software-delivery:initiative_created',
+  'software-delivery:initiative_closed',
+  'software-delivery:initiative_phase_advanced',
+  'software-delivery:plan_created',
+  'software-delivery:plan_linked',
+  'software-delivery:plan_promoted',
+] as const;
+const SOFTWARE_DELIVERY_REQUIRED_SURFACES = ['http'] as const;
 
 export const SOFTWARE_DELIVERY_MANIFEST: SoftwareDeliveryPackManifest = {
   id: SOFTWARE_DELIVERY_PACK_ID,
@@ -415,4 +509,8 @@ export const SOFTWARE_DELIVERY_MANIFEST: SoftwareDeliveryPackManifest = {
   evidence_types: ['gate-run'],
   state_aliases: { active: 'in_progress' },
   lane_templates: [],
+  emitted_event_kinds: [...SOFTWARE_DELIVERY_EMITTED_EVENT_KINDS],
+  subscribed_event_kinds: [],
+  required_approvals: [],
+  surfaces_required: [...SOFTWARE_DELIVERY_REQUIRED_SURFACES],
 };

package/packs/software-delivery/manifest.yaml

@@ -273,6 +273,8 @@ tools:
       - type: path
         pattern: '**'
         access: write
+    required_approvals:
+      - software-delivery:remote_mutation
   - name: initiative:bulk-assign
     entry: tool-impl/initiative-orchestration-tools.ts#initiativeBulkAssignTool
     permission: write
@@ -287,6 +289,8 @@ tools:
       - type: path
         pattern: '**'
         access: write
+    required_approvals:
+      - software-delivery:remote_mutation
   - name: initiative:edit
     entry: tool-impl/initiative-orchestration-tools.ts#initiativeEditTool
     permission: write
@@ -322,6 +326,7 @@ tools:
       - type: path
         pattern: '**'
         access: read
+    required_approvals: []
   # lane:*
   - name: lane:health
     entry: tool-impl/runtime-native-tools.ts#laneHealthTool
@@ -330,6 +335,7 @@ tools:
       - type: path
         pattern: '**'
         access: read
+    required_approvals: []
   - name: lane:suggest
     entry: tool-impl/runtime-native-tools.ts#laneSuggestTool
     permission: write
@@ -337,6 +343,8 @@ tools:
       - type: path
         pattern: '**'
         access: write
+    required_approvals:
+      - software-delivery:remote_mutation
   # flow:*
   - name: flow:bottlenecks
     entry: tool-impl/flow-metrics-tools.ts#flowBottlenecksTool
@@ -352,6 +360,7 @@ tools:
       - type: path
         pattern: '**'
         access: read
+    required_approvals: []
   # gate:*
   - name: gates
     entry: tool-impl/wu-lifecycle-tools.ts#gatesTool
@@ -360,6 +369,15 @@ tools:
       - type: path
         pattern: '**'
         access: write
+    required_approvals: []
+  - name: gates:docs
+    entry: tool-impl/wu-lifecycle-tools.ts#gatesDocsTool
+    permission: write
+    required_scopes:
+      - type: path
+        pattern: '**'
+        access: write
+    required_approvals: []
   # file:*
   - name: file:delete
     entry: tool-impl/runtime-native-tools.ts#fileDeleteTool
@@ -499,6 +517,8 @@ tools:
       - type: path
         pattern: '**'
         access: write
+    required_approvals:
+      - software-delivery:remote_mutation
   - name: plan:edit
     entry: tool-impl/initiative-orchestration-tools.ts#planEditTool
     permission: write
@@ -520,6 +540,8 @@ tools:
       - type: path
         pattern: '**'
         access: write
+    required_approvals:
+      - software-delivery:remote_mutation
   # setup:*
   - name: backlog:prune
     entry: tool-impl/runtime-native-tools.ts#backlogPruneTool
@@ -710,3 +732,27 @@ evidence_types:
 state_aliases:
   active: in_progress
 lane_templates: []
+# WU-2728 (INIT-060, ADR-013): software-delivery pack emits 15 namespaced
+# event kinds on a single channel (software-delivery). All kinds are
+# ephemeral per ADR-013 §4 backpressure split; fail-silent when
+# control_plane.org_id is unset (WU-2643 precedent).
+emitted_event_kinds:
+  - software-delivery:gate_started
+  - software-delivery:gate_passed
+  - software-delivery:gate_failed
+  - software-delivery:co_change_rule_fired
+  - software-delivery:conditional_command_fired
+  - software-delivery:lane_wip_breached
+  - software-delivery:lane_locked
+  - software-delivery:lane_unlocked
+  - software-delivery:lane_suggestion_emitted
+  - software-delivery:initiative_created
+  - software-delivery:initiative_closed
+  - software-delivery:initiative_phase_advanced
+  - software-delivery:plan_created
+  - software-delivery:plan_linked
+  - software-delivery:plan_promoted
+subscribed_event_kinds: []
+required_approvals: []
+surfaces_required:
+  - http

package/packs/software-delivery/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lumenflow/packs-software-delivery",
-  "version": "4.23.0",
+  "version": "5.0.0",
   "description": "Software delivery pack for LumenFlow — work units, gates, lanes, initiatives, and agent coordination",
   "keywords": [
     "lumenflow",
@@ -25,7 +25,71 @@
   "exports": {
     ".": "./dist/index.js",
     "./tools": "./dist/tools/index.js",
-    "./tool-impl": "./dist/tool-impl/index.js"
+    "./tool-impl": "./dist/tool-impl/index.js",
+    "./constants": "./dist/src/constants/index.js",
+    "./constants/wu-statuses": "./dist/src/constants/wu-statuses.js",
+    "./constants/object-guards": "./dist/src/constants/object-guards.js",
+    "./constants/config-contract": "./dist/src/constants/config-contract.js",
+    "./constants/gate-constants": "./dist/src/constants/gate-constants.js",
+    "./constants/wu-ui-constants": "./dist/src/constants/wu-ui-constants.js",
+    "./constants/wu-paths-constants": "./dist/src/constants/wu-paths-constants.js",
+    "./constants/docs-layout-presets": "./dist/src/constants/docs-layout-presets.js",
+    "./constants/wu-git-constants": "./dist/src/constants/wu-git-constants.js",
+    "./constants/wu-cli-constants": "./dist/src/constants/wu-cli-constants.js",
+    "./constants/client-ids": "./dist/src/constants/client-ids.js",
+    "./constants/wu-domain-constants": "./dist/src/constants/wu-domain-constants.js",
+    "./constants/wu-type-helpers": "./dist/src/constants/wu-type-helpers.js",
+    "./constants/wu-validation-constants": "./dist/src/constants/wu-validation-constants.js",
+    "./constants/backlog-patterns": "./dist/src/constants/backlog-patterns.js",
+    "./constants/duration-constants": "./dist/src/constants/duration-constants.js",
+    "./constants/section-headings": "./dist/src/constants/section-headings.js",
+    "./constants/wu-id-format": "./dist/src/constants/wu-id-format.js",
+    "./runtime": "./dist/src/runtime/index.js",
+    "./runtime/work-classifier": "./dist/src/runtime/work-classifier.js",
+    "./sandbox": "./dist/src/sandbox/index.js",
+    "./sandbox/sandbox-profile": "./dist/src/sandbox/sandbox-profile.js",
+    "./sandbox/sandbox-allowlist": "./dist/src/sandbox/sandbox-allowlist.js",
+    "./sandbox/sandbox-backend-linux": "./dist/src/sandbox/sandbox-backend-linux.js",
+    "./sandbox/sandbox-backend-macos": "./dist/src/sandbox/sandbox-backend-macos.js",
+    "./sandbox/sandbox-backend-windows": "./dist/src/sandbox/sandbox-backend-windows.js",
+    "./state": "./dist/src/state/index.js",
+    "./state/wu-state-schema": "./dist/src/state/wu-state-schema.js",
+    "./state/wu-doc-types": "./dist/src/state/wu-doc-types.js",
+    "./state/wu-paths": "./dist/src/state/wu-paths.js",
+    "./state/wu-yaml": "./dist/src/state/wu-yaml.js",
+    "./state/wu-schema": "./dist/src/state/wu-schema.js",
+    "./state/date-utils": "./dist/src/state/date-utils.js",
+    "./state/state-machine": "./dist/src/state/state-machine.js",
+    "./ports": "./dist/src/ports/index.js",
+    "./ports/wu-state.ports": "./dist/src/ports/wu-state.ports.js",
+    "./ports/sync-validator.ports": "./dist/src/ports/sync-validator.ports.js",
+    "./ports/wu-helpers.ports": "./dist/src/ports/wu-helpers.ports.js",
+    "./ports/config.ports": "./dist/src/ports/config.ports.js",
+    "./ports/dashboard-renderer.port": "./dist/src/ports/dashboard-renderer.port.js",
+    "./policy": "./dist/src/policy/index.js",
+    "./policy/gates-schemas": "./dist/src/policy/gates-schemas.js",
+    "./policy/resolve-policy": "./dist/src/policy/resolve-policy.js",
+    "./policy/coverage-gate": "./dist/src/policy/coverage-gate.js",
+    "./policy/gates-config": "./dist/src/policy/gates-config.js",
+    "./policy/gates-presets": "./dist/src/policy/gates-presets.js",
+    "./policy/gates-config-internal": "./dist/src/policy/gates-config-internal.js",
+    "./policy/gates-agent-mode": "./dist/src/policy/gates-agent-mode.js",
+    "./policy/gates-coverage": "./dist/src/policy/gates-coverage.js",
+    "./policy/package-manager-resolver": "./dist/src/policy/package-manager-resolver.js",
+    "./config": "./dist/src/config/index.js",
+    "./config/workspace-reader": "./dist/src/config/workspace-reader.js",
+    "./config/schemas/lumenflow-config-schema-types": "./dist/src/config/schemas/lumenflow-config-schema-types.js",
+    "./config/env-accessors": "./dist/src/config/env-accessors.js",
+    "./config/normalize-config-keys": "./dist/src/config/normalize-config-keys.js",
+    "./config/delivery-review-contract": "./dist/src/config/delivery-review-contract.js",
+    "./constants/lock-constants": "./dist/src/constants/lock-constants.js",
+    "./domain": "./dist/src/domain/index.js",
+    "./domain/orchestration.types": "./dist/src/domain/orchestration.types.js",
+    "./domain/orchestration.schemas": "./dist/src/domain/orchestration.schemas.js",
+    "./domain/orchestration.constants": "./dist/src/domain/orchestration.constants.js",
+    "./methodology": "./dist/src/methodology/index.js",
+    "./methodology/manual-test-validator": "./dist/src/methodology/manual-test-validator.js",
+    "./methodology/incremental-test": "./dist/src/methodology/incremental-test.js"
   },
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -42,13 +106,34 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@lumenflow/kernel": "workspace:^"
+    "@lumenflow/host": "workspace:^",
+    "@lumenflow/kernel": "workspace:^",
+    "change-case": "^5.4.4",
+    "commander": "^14.0.3",
+    "date-fns": "^4.1.0",
+    "fast-glob": "^3.3.3",
+    "glob": "^13.0.3",
+    "gray-matter": "^4.0.3",
+    "micromatch": "^4.0.8",
+    "minimatch": "^10.2.0",
+    "p-retry": "^7.1.1",
+    "picocolors": "^1.1.1",
+    "yaml": "^2.8.2",
+    "zod": "^4.3.6"
   },
   "devDependencies": {
     "simple-git": "^3.27.0",
     "typescript": "^5.9.3",
     "vitest": "^4.0.18"
   },
+  "peerDependencies": {
+    "@lumenflow/core": "workspace:*"
+  },
+  "peerDependenciesMeta": {
+    "@lumenflow/core": {
+      "optional": true
+    }
+  },
   "engines": {
     "node": ">=22"
   },

package/packs/software-delivery/src/commands/index.ts

@@ -0,0 +1,5 @@
+// Copyright (c) 2026 Hellmai Ltd
+// SPDX-License-Identifier: AGPL-3.0-only
+
+// Barrel for pack-cli-handlers. Populated by Layer 5 of INIT-058.
+export {};

package/packs/software-delivery/src/config/delivery-review-contract.ts

@@ -0,0 +1,20 @@
+// Copyright (c) 2026 Hellmai Ltd
+// SPDX-License-Identifier: AGPL-3.0-only
+
+/**
+ * Pack-side wrapper for delivery-review-contract (INIT-058 WU-2727).
+ *
+ * Part of the staged migration pattern: consumers migrate OFF the
+ * `@lumenflow/core/delivery-review-contract` subpath and onto
+ * `@lumenflow/packs-software-delivery/config/delivery-review-contract` FIRST,
+ * while the canonical implementation still lives in `@lumenflow/core`. A
+ * follow-up WU will move the canonical file into the pack and update this
+ * wrapper to become the canonical definition.
+ *
+ * This file must re-export DIRECTLY from
+ * `@lumenflow/core/delivery-review-contract` (single level). Do NOT introduce
+ * a shim chain — WU-2712 hit TS2305 on type-only imports through chained
+ * shims.
+ */
+
+export * from '@lumenflow/core/delivery-review-contract';

package/packs/software-delivery/src/config/env-accessors.ts

@@ -0,0 +1,19 @@
+// Copyright (c) 2026 Hellmai Ltd
+// SPDX-License-Identifier: AGPL-3.0-only
+
+/**
+ * Pack-side wrapper for env-accessors (INIT-058 WU-2727).
+ *
+ * Part of the staged migration pattern: consumers migrate OFF the
+ * `@lumenflow/core/env-accessors` subpath and onto
+ * `@lumenflow/packs-software-delivery/config/env-accessors` FIRST, while the
+ * canonical implementation still lives in `@lumenflow/core`. A follow-up WU
+ * will move the canonical file into the pack and update this wrapper to
+ * become the canonical definition.
+ *
+ * This file must re-export DIRECTLY from `@lumenflow/core/env-accessors`
+ * (single level). Do NOT introduce a shim chain — WU-2712 hit TS2305 on
+ * type-only imports through chained shims.
+ */
+
+export * from '@lumenflow/core/env-accessors';