@lumenflow/cli 5.2.9 → 5.3.0

package/packs/software-delivery/src/ports/dashboard-renderer.port.ts

@@ -1,5 +1,5 @@
 // Copyright (c) 2026 Hellmai Ltd
-// SPDX-License-Identifier: AGPL-3.0-only
+// SPDX-License-Identifier: LicenseRef-LumenFlow-Proprietary
 
 /**
  * Dashboard Renderer Port

package/packs/software-delivery/src/ports/index.ts

@@ -1,5 +1,5 @@
 // Copyright (c) 2026 Hellmai Ltd
-// SPDX-License-Identifier: AGPL-3.0-only
+// SPDX-License-Identifier: LicenseRef-LumenFlow-Proprietary
 
 // Barrel for pack-local port contracts. Populated by Layer 4 of INIT-058.
 // WU-2699: moved wu-state.ports, sync-validator.ports from @lumenflow/core.

package/packs/software-delivery/src/ports/sync-validator.ports.ts

@@ -1,5 +1,5 @@
 // Copyright (c) 2026 Hellmai Ltd
-// SPDX-License-Identifier: AGPL-3.0-only
+// SPDX-License-Identifier: LicenseRef-LumenFlow-Proprietary
 
 /**
  * Sync Validator Port Interfaces

package/packs/software-delivery/src/ports/wu-helpers.ports.ts

@@ -1,5 +1,5 @@
 // Copyright (c) 2026 Hellmai Ltd
-// SPDX-License-Identifier: AGPL-3.0-only
+// SPDX-License-Identifier: LicenseRef-LumenFlow-Proprietary
 
 /**
  * WU Helpers Port Interfaces

package/packs/software-delivery/src/ports/wu-state.ports.ts

@@ -1,5 +1,5 @@
 // Copyright (c) 2026 Hellmai Ltd
-// SPDX-License-Identifier: AGPL-3.0-only
+// SPDX-License-Identifier: LicenseRef-LumenFlow-Proprietary
 
 /**
  * WU State Ports (WU-2013)

package/packs/software-delivery/src/primitives/index.ts

@@ -1,5 +1,5 @@
 // Copyright (c) 2026 Hellmai Ltd
-// SPDX-License-Identifier: AGPL-3.0-only
+// SPDX-License-Identifier: LicenseRef-LumenFlow-Proprietary
 
 // Barrel for pack-local primitives. Populated by Layers 2-4 of INIT-058.
 export {};

package/packs/software-delivery/src/runtime/index.ts

@@ -1,5 +1,5 @@
 // Copyright (c) 2026 Hellmai Ltd
-// SPDX-License-Identifier: AGPL-3.0-only
+// SPDX-License-Identifier: LicenseRef-LumenFlow-Proprietary
 
 // Barrel for pack-runtime-helpers. Populated by Layer 4 of INIT-058.
 // WU-2698: added work-classifier (L4-prep narrow — pure leaf from @lumenflow/core).

package/packs/software-delivery/src/runtime/work-classifier.ts

@@ -1,5 +1,5 @@
 // Copyright (c) 2026 Hellmai Ltd
-// SPDX-License-Identifier: AGPL-3.0-only
+// SPDX-License-Identifier: LicenseRef-LumenFlow-Proprietary
 
 /**
  * Signal-Based Work Classifier

package/packs/software-delivery/src/sandbox/index.ts

@@ -1,5 +1,5 @@
 // Copyright (c) 2026 Hellmai Ltd
-// SPDX-License-Identifier: AGPL-3.0-only
+// SPDX-License-Identifier: LicenseRef-LumenFlow-Proprietary
 
 // Barrel for pack-local sandbox modules. Populated by Layer 4 of INIT-058.
 // WU-2678: moved sandbox-profile, sandbox-allowlist, sandbox-backend-{linux,macos,windows} from @lumenflow/core.

package/packs/software-delivery/src/sandbox/sandbox-allowlist.ts

@@ -1,5 +1,5 @@
 // Copyright (c) 2026 Hellmai Ltd
-// SPDX-License-Identifier: AGPL-3.0-only
+// SPDX-License-Identifier: LicenseRef-LumenFlow-Proprietary
 
 import fs from 'node:fs';
 import path from 'node:path';

package/packs/software-delivery/src/sandbox/sandbox-backend-linux.ts

@@ -1,5 +1,5 @@
 // Copyright (c) 2026 Hellmai Ltd
-// SPDX-License-Identifier: AGPL-3.0-only
+// SPDX-License-Identifier: LicenseRef-LumenFlow-Proprietary
 
 import { spawnSync } from 'node:child_process';
 import {

package/packs/software-delivery/src/sandbox/sandbox-backend-macos.ts

@@ -1,5 +1,5 @@
 // Copyright (c) 2026 Hellmai Ltd
-// SPDX-License-Identifier: AGPL-3.0-only
+// SPDX-License-Identifier: LicenseRef-LumenFlow-Proprietary
 
 import { spawnSync } from 'node:child_process';
 import os from 'node:os';

package/packs/software-delivery/src/sandbox/sandbox-backend-windows.ts

@@ -1,5 +1,5 @@
 // Copyright (c) 2026 Hellmai Ltd
-// SPDX-License-Identifier: AGPL-3.0-only
+// SPDX-License-Identifier: LicenseRef-LumenFlow-Proprietary
 
 import {
   SANDBOX_BACKEND_IDS,

package/packs/software-delivery/src/sandbox/sandbox-profile.ts

@@ -1,5 +1,5 @@
 // Copyright (c) 2026 Hellmai Ltd
-// SPDX-License-Identifier: AGPL-3.0-only
+// SPDX-License-Identifier: LicenseRef-LumenFlow-Proprietary
 
 import os from 'node:os';
 import path from 'node:path';

package/packs/software-delivery/src/schemas/index.ts

@@ -1,5 +1,5 @@
 // Copyright (c) 2026 Hellmai Ltd
-// SPDX-License-Identifier: AGPL-3.0-only
+// SPDX-License-Identifier: LicenseRef-LumenFlow-Proprietary
 
 // Barrel for pack-static-data schemas. Populated by Layer 2 of INIT-058.
 export {};

package/packs/software-delivery/src/state/date-utils.ts

@@ -1,5 +1,5 @@
 // Copyright (c) 2026 Hellmai Ltd
-// SPDX-License-Identifier: AGPL-3.0-only
+// SPDX-License-Identifier: LicenseRef-LumenFlow-Proprietary
 
 /**
  * @file date-utils.ts

package/packs/software-delivery/src/state/index.ts

@@ -1,5 +1,5 @@
 // Copyright (c) 2026 Hellmai Ltd
-// SPDX-License-Identifier: AGPL-3.0-only
+// SPDX-License-Identifier: LicenseRef-LumenFlow-Proprietary
 
 // Barrel for pack-local WU state modules. Populated by Layer 4 of INIT-058.
 // WU-2687 (narrowed): moved wu-state-schema, wu-doc-types from @lumenflow/core.

package/packs/software-delivery/src/state/state-machine.ts

@@ -1,5 +1,5 @@
 // Copyright (c) 2026 Hellmai Ltd
-// SPDX-License-Identifier: AGPL-3.0-only
+// SPDX-License-Identifier: LicenseRef-LumenFlow-Proprietary
 
 /**
  * Software Delivery State Machine (WU-2664, INIT-058 Layer 1 Cohort B)

package/packs/software-delivery/src/state/wu-doc-types.ts

@@ -1,5 +1,5 @@
 // Copyright (c) 2026 Hellmai Ltd
-// SPDX-License-Identifier: AGPL-3.0-only
+// SPDX-License-Identifier: LicenseRef-LumenFlow-Proprietary
 
 /**
  * WU Document Type Definitions (WU-2044)

package/packs/software-delivery/src/state/wu-paths.ts

@@ -1,5 +1,5 @@
 // Copyright (c) 2026 Hellmai Ltd
-// SPDX-License-Identifier: AGPL-3.0-only
+// SPDX-License-Identifier: LicenseRef-LumenFlow-Proprietary
 
 /**
  * WU Paths - Centralized path management for Work Units

package/packs/software-delivery/src/state/wu-schema.ts

@@ -1,5 +1,5 @@
 // Copyright (c) 2026 Hellmai Ltd
-// SPDX-License-Identifier: AGPL-3.0-only
+// SPDX-License-Identifier: LicenseRef-LumenFlow-Proprietary
 
 /**
  * Work Unit YAML Schema

package/packs/software-delivery/src/state/wu-state-schema.ts

@@ -1,5 +1,5 @@
 // Copyright (c) 2026 Hellmai Ltd
-// SPDX-License-Identifier: AGPL-3.0-only
+// SPDX-License-Identifier: LicenseRef-LumenFlow-Proprietary
 
 /**
  * WU State Schema (WU-1570)

package/packs/software-delivery/src/state/wu-yaml.ts

@@ -1,5 +1,5 @@
 // Copyright (c) 2026 Hellmai Ltd
-// SPDX-License-Identifier: AGPL-3.0-only
+// SPDX-License-Identifier: LicenseRef-LumenFlow-Proprietary
 
 import { existsSync, readFileSync, writeFileSync, promises as fs } from 'node:fs';
 

package/packs/software-delivery/src/types.d.ts

@@ -1,5 +1,5 @@
 // Copyright (c) 2026 Hellmai Ltd
-// SPDX-License-Identifier: AGPL-3.0-only
+// SPDX-License-Identifier: LicenseRef-LumenFlow-Proprietary
 
 /**
  * Shared ambient declarations for @lumenflow/packs-software-delivery.

package/packs/software-delivery/tool-impl/agent-tools.ts

@@ -1,5 +1,5 @@
 // Copyright (c) 2026 Hellmai Ltd
-// SPDX-License-Identifier: AGPL-3.0-only
+// SPDX-License-Identifier: LicenseRef-LumenFlow-Proprietary
 
 import type { ToolOutput } from '@lumenflow/kernel';
 import { RUNTIME_CLI_COMMANDS, runtimeCliAdapter } from './runtime-cli-adapter.js';

package/packs/software-delivery/tool-impl/delegation-tools.ts

@@ -1,5 +1,5 @@
 // Copyright (c) 2026 Hellmai Ltd
-// SPDX-License-Identifier: AGPL-3.0-only
+// SPDX-License-Identifier: LicenseRef-LumenFlow-Proprietary
 
 /* eslint-disable security/detect-non-literal-fs-filename */
 import { appendFile, mkdir } from 'node:fs/promises';

package/packs/software-delivery/tool-impl/flow-metrics-tools.ts

@@ -1,5 +1,5 @@
 // Copyright (c) 2026 Hellmai Ltd
-// SPDX-License-Identifier: AGPL-3.0-only
+// SPDX-License-Identifier: LicenseRef-LumenFlow-Proprietary
 
 /**
  * @file flow-metrics-tools.ts

package/packs/software-delivery/tool-impl/git-runner.ts

@@ -1,5 +1,5 @@
 // Copyright (c) 2026 Hellmai Ltd
-// SPDX-License-Identifier: AGPL-3.0-only
+// SPDX-License-Identifier: LicenseRef-LumenFlow-Proprietary
 
 import { execFileSync } from 'node:child_process';
 import { UTF8_ENCODING } from '../constants.js';

package/packs/software-delivery/tool-impl/git-tools.ts

@@ -1,5 +1,5 @@
 // Copyright (c) 2026 Hellmai Ltd
-// SPDX-License-Identifier: AGPL-3.0-only
+// SPDX-License-Identifier: LicenseRef-LumenFlow-Proprietary
 
 import { GIT_BINARY, runGit } from './git-runner.js';
 

package/packs/software-delivery/tool-impl/index.ts

@@ -1,5 +1,5 @@
 // Copyright (c) 2026 Hellmai Ltd
-// SPDX-License-Identifier: AGPL-3.0-only
+// SPDX-License-Identifier: LicenseRef-LumenFlow-Proprietary
 
 export * from './delegation-tools.js';
 export * from './agent-tools.js';

package/packs/software-delivery/tool-impl/initiative-orchestration-tools.ts

@@ -1,5 +1,5 @@
 // Copyright (c) 2026 Hellmai Ltd
-// SPDX-License-Identifier: AGPL-3.0-only
+// SPDX-License-Identifier: LicenseRef-LumenFlow-Proprietary
 
 import type { ToolOutput } from '@lumenflow/kernel';
 import { RUNTIME_CLI_COMMANDS, runtimeCliAdapter } from './runtime-cli-adapter.js';

package/packs/software-delivery/tool-impl/lane-lock.ts

@@ -1,5 +1,5 @@
 // Copyright (c) 2026 Hellmai Ltd
-// SPDX-License-Identifier: AGPL-3.0-only
+// SPDX-License-Identifier: LicenseRef-LumenFlow-Proprietary
 
 /* eslint-disable security/detect-non-literal-fs-filename */
 import { mkdir, readFile, unlink, writeFile } from 'node:fs/promises';

package/packs/software-delivery/tool-impl/memory-tools.ts

@@ -1,5 +1,5 @@
 // Copyright (c) 2026 Hellmai Ltd
-// SPDX-License-Identifier: AGPL-3.0-only
+// SPDX-License-Identifier: LicenseRef-LumenFlow-Proprietary
 
 import type { ToolOutput } from '@lumenflow/kernel';
 import { RUNTIME_CLI_COMMANDS, runtimeCliAdapter } from './runtime-cli-adapter.js';

package/packs/software-delivery/tool-impl/pending-runtime-tools.ts

@@ -1,5 +1,5 @@
 // Copyright (c) 2026 Hellmai Ltd
-// SPDX-License-Identifier: AGPL-3.0-only
+// SPDX-License-Identifier: LicenseRef-LumenFlow-Proprietary
 
 interface PendingRuntimeMigrationOutput {
   success: false;

package/packs/software-delivery/tool-impl/runtime-cli-adapter.ts

@@ -1,5 +1,5 @@
 // Copyright (c) 2026 Hellmai Ltd
-// SPDX-License-Identifier: AGPL-3.0-only
+// SPDX-License-Identifier: LicenseRef-LumenFlow-Proprietary
 
 import { resolve as resolvePath } from 'node:path';
 import { pathToFileURL } from 'node:url';

package/packs/software-delivery/tool-impl/runtime-native-tools.ts

@@ -1,5 +1,5 @@
 // Copyright (c) 2026 Hellmai Ltd
-// SPDX-License-Identifier: AGPL-3.0-only
+// SPDX-License-Identifier: LicenseRef-LumenFlow-Proprietary
 
 import type { ToolOutput } from '@lumenflow/kernel';
 import { RUNTIME_CLI_COMMANDS, runtimeCliAdapter } from './runtime-cli-adapter.js';

package/packs/software-delivery/tool-impl/worker-loader.ts

@@ -1,5 +1,5 @@
 // Copyright (c) 2026 Hellmai Ltd
-// SPDX-License-Identifier: AGPL-3.0-only
+// SPDX-License-Identifier: LicenseRef-LumenFlow-Proprietary
 
 import path from 'node:path';
 import { fileURLToPath, pathToFileURL } from 'node:url';

package/packs/software-delivery/tool-impl/worktree-tools.ts

@@ -1,5 +1,5 @@
 // Copyright (c) 2026 Hellmai Ltd
-// SPDX-License-Identifier: AGPL-3.0-only
+// SPDX-License-Identifier: LicenseRef-LumenFlow-Proprietary
 
 import { runGit } from './git-runner.js';
 

package/packs/software-delivery/tool-impl/wu-lifecycle-tools.ts

@@ -1,5 +1,5 @@
 // Copyright (c) 2026 Hellmai Ltd
-// SPDX-License-Identifier: AGPL-3.0-only
+// SPDX-License-Identifier: LicenseRef-LumenFlow-Proprietary
 
 import type { ToolOutput } from '@lumenflow/kernel';
 import { RUNTIME_CLI_COMMANDS, runtimeCliAdapter } from './runtime-cli-adapter.js';

package/packs/software-delivery/tools/delegation-tools.ts

@@ -1,5 +1,5 @@
 // Copyright (c) 2026 Hellmai Ltd
-// SPDX-License-Identifier: AGPL-3.0-only
+// SPDX-License-Identifier: LicenseRef-LumenFlow-Proprietary
 
 import { createToolDescriptor, type ToolDescriptor } from './types.js';
 

package/packs/software-delivery/tools/git-tools.ts

@@ -1,5 +1,5 @@
 // Copyright (c) 2026 Hellmai Ltd
-// SPDX-License-Identifier: AGPL-3.0-only
+// SPDX-License-Identifier: LicenseRef-LumenFlow-Proprietary
 
 import { createToolDescriptor, type ToolDescriptor } from './types.js';
 

package/packs/software-delivery/tools/index.ts

@@ -1,5 +1,5 @@
 // Copyright (c) 2026 Hellmai Ltd
-// SPDX-License-Identifier: AGPL-3.0-only
+// SPDX-License-Identifier: LicenseRef-LumenFlow-Proprietary
 
 export * from './delegation-tools.js';
 export * from './git-tools.js';

package/packs/software-delivery/tools/lane-lock-tool.ts

@@ -1,5 +1,5 @@
 // Copyright (c) 2026 Hellmai Ltd
-// SPDX-License-Identifier: AGPL-3.0-only
+// SPDX-License-Identifier: LicenseRef-LumenFlow-Proprietary
 
 import { createToolDescriptor, type ToolDescriptor } from './types.js';
 

package/packs/software-delivery/tools/types.ts

@@ -1,5 +1,5 @@
 // Copyright (c) 2026 Hellmai Ltd
-// SPDX-License-Identifier: AGPL-3.0-only
+// SPDX-License-Identifier: LicenseRef-LumenFlow-Proprietary
 
 import {
   SOFTWARE_DELIVERY_DOMAIN,

package/packs/software-delivery/tools/worktree-tools.ts

@@ -1,5 +1,5 @@
 // Copyright (c) 2026 Hellmai Ltd
-// SPDX-License-Identifier: AGPL-3.0-only
+// SPDX-License-Identifier: LicenseRef-LumenFlow-Proprietary
 
 import { createToolDescriptor, type ToolDescriptor } from './types.js';
 

package/templates/core/scripts/safe-git.template

@@ -25,5 +25,20 @@ if [ "$1" = "worktree" ] && [ "$2" = "remove" ]; then
   exit 1
 fi
 
+# WU-2884: Block GIT_EDITOR override unless trusted rebase context is active.
+# Framework rebase callers (wu:done) set LUMENFLOW_REBASE_CONTEXT=wu-done
+# in a try/finally before invoking git. An attacker cannot fabricate the
+# sentinel without already running inside the framework's process tree.
+if [ -n "${GIT_EDITOR:-}" ] && [ "${LUMENFLOW_REBASE_CONTEXT:-}" != "wu-done" ]; then
+  if [ "${LUMENFLOW_FORCE:-}" != "1" ]; then
+    echo "" >&2
+    echo "=== LUMENFLOW SAFETY BLOCK ===" >&2
+    echo "BLOCKED: GIT_EDITOR override is unsafe outside framework rebase context." >&2
+    echo "Set LUMENFLOW_REBASE_CONTEXT=wu-done (framework only) or LUMENFLOW_FORCE=1 to bypass." >&2
+    echo "==============================" >&2
+    exit 1
+  fi
+fi
+
 # Pass through to real git
 exec git "$@"