@lumenflow/cli 5.2.9 → 5.2.10

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (5) hide show
  1. package/package.json +11 -11
  2. package/packs/agent-runtime/package.json +1 -1
  3. package/packs/sidekick/package.json +1 -1
  4. package/packs/software-delivery/package.json +1 -1
  5. package/templates/core/scripts/safe-git.template +15 -0
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@lumenflow/cli",
3
- "version": "5.2.9",
3
+ "version": "5.2.10",
4
4
  "description": "Command-line interface for LumenFlow workflow framework",
5
5
  "keywords": [
6
6
  "lumenflow",
@@ -197,16 +197,16 @@
197
197
  "xstate": "^5.28.0",
198
198
  "yaml": "^2.8.2",
199
199
  "zod": "^4.3.6",
200
- "@lumenflow/initiatives": "5.2.9",
201
- "@lumenflow/control-plane-sdk": "5.2.9",
202
- "@lumenflow/memory": "5.2.9",
203
- "@lumenflow/metrics": "5.2.9",
204
- "@lumenflow/kernel": "5.2.9",
205
- "@lumenflow/agent": "5.2.9",
206
- "@lumenflow/core": "5.2.9",
207
- "@lumenflow/packs-agent-runtime": "^5.2.9",
208
- "@lumenflow/host": "^5.2.9",
209
- "@lumenflow/packs-software-delivery": "^5.2.9"
200
+ "@lumenflow/agent": "5.2.10",
201
+ "@lumenflow/core": "5.2.10",
202
+ "@lumenflow/kernel": "5.2.10",
203
+ "@lumenflow/memory": "5.2.10",
204
+ "@lumenflow/initiatives": "5.2.10",
205
+ "@lumenflow/host": "^5.2.10",
206
+ "@lumenflow/metrics": "5.2.10",
207
+ "@lumenflow/control-plane-sdk": "5.2.10",
208
+ "@lumenflow/packs-agent-runtime": "^5.2.10",
209
+ "@lumenflow/packs-software-delivery": "^5.2.10"
210
210
  },
211
211
  "devDependencies": {
212
212
  "@vitest/coverage-v8": "^4.0.18",
package/packs/agent-runtime/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@lumenflow/packs-agent-runtime",
3
- "version": "5.2.9",
3
+ "version": "5.2.10",
4
4
  "description": "Agent runtime pack scaffold for LumenFlow — governed model-turn execution, pack config, and provider capability baselines",
5
5
  "keywords": [
6
6
  "lumenflow",
package/packs/sidekick/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@lumenflow/packs-sidekick",
3
- "version": "5.2.9",
3
+ "version": "5.2.10",
4
4
  "description": "Sidekick personal assistant pack for LumenFlow — 16 tools for task management, typed memory, channels, routines, and audit",
5
5
  "keywords": [
6
6
  "lumenflow",
package/packs/software-delivery/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@lumenflow/packs-software-delivery",
3
- "version": "5.2.9",
3
+ "version": "5.2.10",
4
4
  "description": "Software delivery pack for LumenFlow — work units, gates, lanes, initiatives, and agent coordination",
5
5
  "keywords": [
6
6
  "lumenflow",
package/templates/core/scripts/safe-git.template CHANGED
@@ -25,5 +25,20 @@ if [ "$1" = "worktree" ] && [ "$2" = "remove" ]; then
25
25
  exit 1
26
26
  fi
27
27
 
28
+ # WU-2884: Block GIT_EDITOR override unless trusted rebase context is active.
29
+ # Framework rebase callers (wu:done) set LUMENFLOW_REBASE_CONTEXT=wu-done
30
+ # in a try/finally before invoking git. An attacker cannot fabricate the
31
+ # sentinel without already running inside the framework's process tree.
32
+ if [ -n "${GIT_EDITOR:-}" ] && [ "${LUMENFLOW_REBASE_CONTEXT:-}" != "wu-done" ]; then
33
+ if [ "${LUMENFLOW_FORCE:-}" != "1" ]; then
34
+ echo "" >&2
35
+ echo "=== LUMENFLOW SAFETY BLOCK ===" >&2
36
+ echo "BLOCKED: GIT_EDITOR override is unsafe outside framework rebase context." >&2
37
+ echo "Set LUMENFLOW_REBASE_CONTEXT=wu-done (framework only) or LUMENFLOW_FORCE=1 to bypass." >&2
38
+ echo "==============================" >&2
39
+ exit 1
40
+ fi
41
+ fi
42
+
28
43
  # Pass through to real git
29
44
  exec git "$@"