@lumenflow/cli 5.0.0 → 5.0.2

package/packs/agent-runtime/manifest.yaml

@@ -190,6 +190,9 @@ tools:
       - type: path
         pattern: .agent-runtime/**
         access: read
+      - type: path
+        pattern: .agent-runtime/**
+        access: write
     required_approvals: []
     input_schema:
       type: object
@@ -208,6 +211,9 @@ tools:
       - type: path
         pattern: .agent-runtime/**
         access: read
+      - type: path
+        pattern: .agent-runtime/**
+        access: write
     required_approvals:
       - agent-runtime:remote_control
     input_schema:
@@ -227,6 +233,9 @@ tools:
       - type: path
         pattern: .agent-runtime/**
         access: read
+      - type: path
+        pattern: .agent-runtime/**
+        access: write
     required_approvals:
       - agent-runtime:remote_control
     input_schema:
@@ -246,6 +255,9 @@ tools:
       - type: path
         pattern: .agent-runtime/**
         access: read
+      - type: path
+        pattern: .agent-runtime/**
+        access: write
     required_approvals:
       - agent-runtime:remote_control
     input_schema:
@@ -265,6 +277,9 @@ tools:
       - type: path
         pattern: .agent-runtime/**
         access: read
+      - type: path
+        pattern: .agent-runtime/**
+        access: write
     required_approvals: []
     input_schema:
       type: object
@@ -283,6 +298,9 @@ tools:
       - type: path
         pattern: .agent-runtime/**
         access: read
+      - type: path
+        pattern: .agent-runtime/**
+        access: write
     required_approvals: []
     input_schema:
       type: object

package/packs/agent-runtime/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lumenflow/packs-agent-runtime",
-  "version": "5.0.0",
+  "version": "5.0.2",
   "description": "Agent runtime pack scaffold for LumenFlow — governed model-turn execution, pack config, and provider capability baselines",
   "keywords": [
     "lumenflow",

package/packs/sidekick/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lumenflow/packs-sidekick",
-  "version": "5.0.0",
+  "version": "5.0.2",
   "description": "Sidekick personal assistant pack for LumenFlow — 16 tools for task management, typed memory, channels, routines, and audit",
   "keywords": [
     "lumenflow",

package/packs/software-delivery/manifest.ts

@@ -31,6 +31,51 @@ export type {
 } from './manifest-schema.js';
 
 const FULL_WORKSPACE_SCOPE_PATTERN = '**';
+const SOFTWARE_DELIVERY_WRITE_DIRECTORY_PATTERNS = [
+  '.changeset/**',
+  '.claude/**',
+  '.codex/**',
+  '.cursor/**',
+  '.github/**',
+  '.git/**',
+  '.husky/**',
+  '.lumenflow/**',
+  '.vercel/**',
+  '.windsurf/**',
+  'apps/**',
+  'docs/**',
+  'packages/**',
+  'scripts/**',
+  'tools/**',
+  'worktrees/**',
+] as const;
+const SOFTWARE_DELIVERY_ROOT_WRITE_FILE_PATTERNS = [
+  '.gitignore',
+  '.npmrc',
+  'LUMENFLOW.md',
+  'README.md',
+  'package.json',
+  'pnpm-lock.yaml',
+  'pnpm-workspace.yaml',
+  'turbo.json',
+  'workspace.yaml',
+  '*.cjs',
+  '*.js',
+  '*.json',
+  '*.md',
+  '*.mjs',
+  '*.sh',
+  '*.toml',
+  '*.ts',
+  '*.tsx',
+  '*.txt',
+  '*.yaml',
+  '*.yml',
+] as const;
+const SOFTWARE_DELIVERY_WRITE_SCOPE_PATTERNS = [
+  ...SOFTWARE_DELIVERY_WRITE_DIRECTORY_PATTERNS,
+  ...SOFTWARE_DELIVERY_ROOT_WRITE_FILE_PATTERNS,
+] as const;
 const GIT_STATUS_TOOL_ENTRY = 'tool-impl/git-tools.ts#gitStatusTool';
 const WU_STATUS_TOOL_ENTRY = 'tool-impl/wu-lifecycle-tools.ts#wuStatusTool';
 const WU_CREATE_TOOL_ENTRY = 'tool-impl/wu-lifecycle-tools.ts#wuCreateTool';
@@ -354,17 +399,23 @@ export interface SoftwareDeliveryMigrationScorecard {
   realHandlerEntries: number;
 }
 
+function createPathScopes(
+  patterns: readonly string[],
+  access: (typeof TOOL_SCOPE_ACCESS)[keyof typeof TOOL_SCOPE_ACCESS],
+): PathScope[] {
+  return patterns.map((pattern) => ({
+    type: TOOL_SCOPE_TYPES.PATH,
+    pattern,
+    access,
+  }));
+}
+
 function requiredScopesForPermission(permission: ToolPermission): PathScope[] {
-  return [
-    {
-      type: TOOL_SCOPE_TYPES.PATH,
-      pattern: FULL_WORKSPACE_SCOPE_PATTERN,
-      access:
-        permission === TOOL_PERMISSION_VALUES.READ
-          ? TOOL_SCOPE_ACCESS.READ
-          : TOOL_SCOPE_ACCESS.WRITE,
-    },
-  ];
+  if (permission === TOOL_PERMISSION_VALUES.READ) {
+    return createPathScopes([FULL_WORKSPACE_SCOPE_PATTERN], TOOL_SCOPE_ACCESS.READ);
+  }
+
+  return createPathScopes(SOFTWARE_DELIVERY_WRITE_SCOPE_PATTERNS, TOOL_SCOPE_ACCESS.WRITE);
 }
 
 /**