@lumenflow/cli 5.5.0 → 5.7.12

package/packs/software-delivery/manifest.ts

@@ -1,657 +0,0 @@
-// Copyright (c) 2026 Hellmai Ltd
-// SPDX-License-Identifier: LicenseRef-LumenFlow-Proprietary
-
-import {
-  SOFTWARE_DELIVERY_PACK_ID,
-  SOFTWARE_DELIVERY_PACK_VERSION,
-  SOFTWARE_DELIVERY_POLICY_ID_PREFIX,
-} from './constants.js';
-import {
-  MANIFEST_POLICY_DECISIONS,
-  MANIFEST_POLICY_TRIGGERS,
-  SoftwareDeliveryManifestSchema,
-  type SoftwareDeliveryManifestTool,
-  type SoftwareDeliveryPackManifest,
-} from './manifest-schema.js';
-import {
-  TOOL_PERMISSIONS as TOOL_PERMISSION_VALUES,
-  TOOL_SCOPE_ACCESS,
-  TOOL_SCOPE_TYPES,
-  type PathScope,
-  type ToolPermission,
-} from './tools/types.js';
-
-export { SoftwareDeliveryManifestSchema };
-export type {
-  ManifestPolicyDecision,
-  ManifestPolicyTrigger,
-  SoftwareDeliveryManifestPolicy,
-  SoftwareDeliveryManifestTool,
-  SoftwareDeliveryPackManifest,
-} from './manifest-schema.js';
-
-const FULL_WORKSPACE_SCOPE_PATTERN = '**';
-// WU-2833 (INIT-062 WU-G): the canonical read-only workspace scope used by
-// validation runners like gates / gates:docs. Exposed so remote callers
-// cannot mis-declare a read-only runner with a broader write scope.
-export const SOFTWARE_DELIVERY_READ_SCOPE_PATTERN = FULL_WORKSPACE_SCOPE_PATTERN;
-/**
- * WU-2833 (INIT-062 WU-G): tools whose runtime handlers perform only
- * read-side inspection (no filesystem mutation, no git mutation). Any
- * attempt to re-declare these tools with permission: write or admin MUST
- * fail the pack:validate gate so the security posture established by
- * WU-2810/2811/2816 cannot drift without an explicit ADR.
- */
-export const SOFTWARE_DELIVERY_READ_ONLY_RUNNER_TOOLS = ['gates', 'gates:docs'] as const;
-export type SoftwareDeliveryReadOnlyRunnerTool =
-  (typeof SOFTWARE_DELIVERY_READ_ONLY_RUNNER_TOOLS)[number];
-// WU-2833: metrics:snapshot reads the workspace to compute DORA metrics
-// but writes the computed snapshot back into workspace state. This narrow
-// write scope keeps mobile/cloud tokens for metrics:snapshot from leaking
-// full-tree write access (principle of least privilege).
-const SOFTWARE_DELIVERY_WORKSPACE_STATE_WRITE_PATTERN = '.lumenflow/state/**';
-const SOFTWARE_DELIVERY_WRITE_DIRECTORY_PATTERNS = [
-  '.changeset/**',
-  '.claude/**',
-  '.codex/**',
-  '.cursor/**',
-  '.github/**',
-  '.git/**',
-  '.husky/**',
-  '.lumenflow/**',
-  '.vercel/**',
-  '.windsurf/**',
-  'apps/**',
-  'docs/**',
-  'packages/**',
-  'scripts/**',
-  'tools/**',
-  'worktrees/**',
-] as const;
-const SOFTWARE_DELIVERY_ROOT_WRITE_FILE_PATTERNS = [
-  '.gitignore',
-  '.npmrc',
-  'LUMENFLOW.md',
-  'README.md',
-  'package.json',
-  'pnpm-lock.yaml',
-  'pnpm-workspace.yaml',
-  'turbo.json',
-  'workspace.yaml',
-  '*.cjs',
-  '*.js',
-  '*.json',
-  '*.md',
-  '*.mjs',
-  '*.sh',
-  '*.toml',
-  '*.ts',
-  '*.tsx',
-  '*.txt',
-  '*.yaml',
-  '*.yml',
-] as const;
-const SOFTWARE_DELIVERY_WRITE_SCOPE_PATTERNS = [
-  ...SOFTWARE_DELIVERY_WRITE_DIRECTORY_PATTERNS,
-  ...SOFTWARE_DELIVERY_ROOT_WRITE_FILE_PATTERNS,
-] as const;
-const GIT_STATUS_TOOL_ENTRY = 'tool-impl/git-tools.ts#gitStatusTool';
-const WU_STATUS_TOOL_ENTRY = 'tool-impl/wu-lifecycle-tools.ts#wuStatusTool';
-const WU_CREATE_TOOL_ENTRY = 'tool-impl/wu-lifecycle-tools.ts#wuCreateTool';
-const WU_CLAIM_TOOL_ENTRY = 'tool-impl/wu-lifecycle-tools.ts#wuClaimTool';
-const WU_DONE_TOOL_ENTRY = 'tool-impl/wu-lifecycle-tools.ts#wuDoneTool';
-const WU_PREP_TOOL_ENTRY = 'tool-impl/wu-lifecycle-tools.ts#wuPrepTool';
-const WU_PREFLIGHT_TOOL_ENTRY = 'tool-impl/wu-lifecycle-tools.ts#wuPreflightTool';
-const WU_VALIDATE_TOOL_ENTRY = 'tool-impl/wu-lifecycle-tools.ts#wuValidateTool';
-const WU_SANDBOX_TOOL_ENTRY = 'tool-impl/wu-lifecycle-tools.ts#wuSandboxTool';
-const WU_PRUNE_TOOL_ENTRY = 'tool-impl/wu-lifecycle-tools.ts#wuPruneTool';
-const WU_DELETE_TOOL_ENTRY = 'tool-impl/wu-lifecycle-tools.ts#wuDeleteTool';
-const WU_CLEANUP_TOOL_ENTRY = 'tool-impl/wu-lifecycle-tools.ts#wuCleanupTool';
-const WU_UNLOCK_LANE_TOOL_ENTRY = 'tool-impl/wu-lifecycle-tools.ts#wuUnlockLaneTool';
-const WU_BRIEF_TOOL_ENTRY = 'tool-impl/wu-lifecycle-tools.ts#wuBriefTool';
-const WU_DELEGATE_TOOL_ENTRY = 'tool-impl/wu-lifecycle-tools.ts#wuDelegateTool';
-const WU_DEPS_TOOL_ENTRY = 'tool-impl/wu-lifecycle-tools.ts#wuDepsTool';
-const WU_EDIT_TOOL_ENTRY = 'tool-impl/wu-lifecycle-tools.ts#wuEditTool';
-const WU_PROTO_TOOL_ENTRY = 'tool-impl/wu-lifecycle-tools.ts#wuProtoTool';
-const WU_BLOCK_TOOL_ENTRY = 'tool-impl/wu-lifecycle-tools.ts#wuBlockTool';
-const WU_UNBLOCK_TOOL_ENTRY = 'tool-impl/wu-lifecycle-tools.ts#wuUnblockTool';
-const WU_RELEASE_TOOL_ENTRY = 'tool-impl/wu-lifecycle-tools.ts#wuReleaseTool';
-const WU_RECOVER_TOOL_ENTRY = 'tool-impl/wu-lifecycle-tools.ts#wuRecoverTool';
-const WU_REPAIR_TOOL_ENTRY = 'tool-impl/wu-lifecycle-tools.ts#wuRepairTool';
-// WU-2833 (INIT-062 WU-G): admin-mode wu:repair wrapper that forces the
-// `--admin` flag; exposed as a separate manifest tool so approvals can
-// be attached to the privileged surface independently of wu:repair.
-const WU_REPAIR_ADMIN_TOOL_ENTRY = 'tool-impl/wu-lifecycle-tools.ts#wuRepairAdminTool';
-const GATES_TOOL_ENTRY = 'tool-impl/wu-lifecycle-tools.ts#gatesTool';
-// WU-2729 (INIT-060 Phase 2): gates:docs exposes docs-only gate runs via a
-// dedicated manifest entry so remote callers can request the docs gate
-// without opting into the permissive gates handler surface.
-const GATES_DOCS_TOOL_ENTRY = 'tool-impl/wu-lifecycle-tools.ts#gatesDocsTool';
-const CONFIG_SET_TOOL_ENTRY = 'tool-impl/runtime-native-tools.ts#configSetTool';
-const CONFIG_GET_TOOL_ENTRY = 'tool-impl/runtime-native-tools.ts#configGetTool';
-const MEM_INIT_TOOL_ENTRY = 'tool-impl/memory-tools.ts#memInitTool';
-const MEM_START_TOOL_ENTRY = 'tool-impl/memory-tools.ts#memStartTool';
-const MEM_READY_TOOL_ENTRY = 'tool-impl/memory-tools.ts#memReadyTool';
-const MEM_CHECKPOINT_TOOL_ENTRY = 'tool-impl/memory-tools.ts#memCheckpointTool';
-const MEM_CLEANUP_TOOL_ENTRY = 'tool-impl/memory-tools.ts#memCleanupTool';
-const MEM_CONTEXT_TOOL_ENTRY = 'tool-impl/memory-tools.ts#memContextTool';
-const MEM_CREATE_TOOL_ENTRY = 'tool-impl/memory-tools.ts#memCreateTool';
-const MEM_DELETE_TOOL_ENTRY = 'tool-impl/memory-tools.ts#memDeleteTool';
-const MEM_EXPORT_TOOL_ENTRY = 'tool-impl/memory-tools.ts#memExportTool';
-const MEM_INBOX_TOOL_ENTRY = 'tool-impl/memory-tools.ts#memInboxTool';
-const MEM_SIGNAL_TOOL_ENTRY = 'tool-impl/memory-tools.ts#memSignalTool';
-const MEM_CONVERGED_TOOL_ENTRY = 'tool-impl/memory-tools.ts#memConvergedTool';
-const MEM_SUMMARIZE_TOOL_ENTRY = 'tool-impl/memory-tools.ts#memSummarizeTool';
-const MEM_TRIAGE_TOOL_ENTRY = 'tool-impl/memory-tools.ts#memTriageTool';
-const MEM_RECOVER_TOOL_ENTRY = 'tool-impl/memory-tools.ts#memRecoverTool';
-const AGENT_SESSION_TOOL_ENTRY = 'tool-impl/agent-tools.ts#agentSessionTool';
-const AGENT_SESSION_END_TOOL_ENTRY = 'tool-impl/agent-tools.ts#agentSessionEndTool';
-const AGENT_LOG_ISSUE_TOOL_ENTRY = 'tool-impl/agent-tools.ts#agentLogIssueTool';
-const AGENT_ISSUES_QUERY_TOOL_ENTRY = 'tool-impl/agent-tools.ts#agentIssuesQueryTool';
-const FLOW_BOTTLENECKS_TOOL_ENTRY = 'tool-impl/flow-metrics-tools.ts#flowBottlenecksTool';
-const FLOW_REPORT_TOOL_ENTRY = 'tool-impl/flow-metrics-tools.ts#flowReportTool';
-const METRICS_TOOL_ENTRY = 'tool-impl/flow-metrics-tools.ts#metricsTool';
-const METRICS_SNAPSHOT_TOOL_ENTRY = 'tool-impl/flow-metrics-tools.ts#metricsSnapshotTool';
-const WU_INFER_LANE_TOOL_ENTRY = 'tool-impl/runtime-native-tools.ts#wuInferLaneTool';
-const LANE_HEALTH_TOOL_ENTRY = 'tool-impl/runtime-native-tools.ts#laneHealthTool';
-const LANE_SUGGEST_TOOL_ENTRY = 'tool-impl/runtime-native-tools.ts#laneSuggestTool';
-const FILE_READ_TOOL_ENTRY = 'tool-impl/runtime-native-tools.ts#fileReadTool';
-const FILE_WRITE_TOOL_ENTRY = 'tool-impl/runtime-native-tools.ts#fileWriteTool';
-const FILE_EDIT_TOOL_ENTRY = 'tool-impl/runtime-native-tools.ts#fileEditTool';
-const FILE_DELETE_TOOL_ENTRY = 'tool-impl/runtime-native-tools.ts#fileDeleteTool';
-const GIT_BRANCH_TOOL_ENTRY = 'tool-impl/runtime-native-tools.ts#gitBranchTool';
-const GIT_DIFF_TOOL_ENTRY = 'tool-impl/runtime-native-tools.ts#gitDiffTool';
-const GIT_LOG_TOOL_ENTRY = 'tool-impl/runtime-native-tools.ts#gitLogTool';
-const STATE_BOOTSTRAP_TOOL_ENTRY = 'tool-impl/runtime-native-tools.ts#stateBootstrapTool';
-const STATE_CLEANUP_TOOL_ENTRY = 'tool-impl/runtime-native-tools.ts#stateCleanupTool';
-const STATE_DOCTOR_TOOL_ENTRY = 'tool-impl/runtime-native-tools.ts#stateDoctorTool';
-const BACKLOG_PRUNE_TOOL_ENTRY = 'tool-impl/runtime-native-tools.ts#backlogPruneTool';
-const SIGNAL_CLEANUP_TOOL_ENTRY = 'tool-impl/runtime-native-tools.ts#signalCleanupTool';
-const LUMENFLOW_METRICS_TOOL_ENTRY = 'tool-impl/runtime-native-tools.ts#lumenflowMetricsTool';
-const VALIDATE_TOOL_ENTRY = 'tool-impl/runtime-native-tools.ts#validateTool';
-const LUMENFLOW_VALIDATE_TOOL_ENTRY = 'tool-impl/runtime-native-tools.ts#lumenflowValidateTool';
-const VALIDATE_AGENT_SKILLS_TOOL_ENTRY =
-  'tool-impl/runtime-native-tools.ts#validateAgentSkillsTool';
-const VALIDATE_AGENT_SYNC_TOOL_ENTRY = 'tool-impl/runtime-native-tools.ts#validateAgentSyncTool';
-const VALIDATE_BACKLOG_SYNC_TOOL_ENTRY =
-  'tool-impl/runtime-native-tools.ts#validateBacklogSyncTool';
-const VALIDATE_SKILLS_SPEC_TOOL_ENTRY = 'tool-impl/runtime-native-tools.ts#validateSkillsSpecTool';
-const INITIATIVE_ADD_WU_TOOL_ENTRY =
-  'tool-impl/initiative-orchestration-tools.ts#initiativeAddWuTool';
-const INITIATIVE_BULK_ASSIGN_TOOL_ENTRY =
-  'tool-impl/initiative-orchestration-tools.ts#initiativeBulkAssignTool';
-const INITIATIVE_CREATE_TOOL_ENTRY =
-  'tool-impl/initiative-orchestration-tools.ts#initiativeCreateTool';
-const INITIATIVE_EDIT_TOOL_ENTRY = 'tool-impl/initiative-orchestration-tools.ts#initiativeEditTool';
-const INITIATIVE_LIST_TOOL_ENTRY = 'tool-impl/initiative-orchestration-tools.ts#initiativeListTool';
-const INITIATIVE_PLAN_TOOL_ENTRY = 'tool-impl/initiative-orchestration-tools.ts#initiativePlanTool';
-const INITIATIVE_REMOVE_WU_TOOL_ENTRY =
-  'tool-impl/initiative-orchestration-tools.ts#initiativeRemoveWuTool';
-const INITIATIVE_STATUS_TOOL_ENTRY =
-  'tool-impl/initiative-orchestration-tools.ts#initiativeStatusTool';
-const ORCHESTRATE_INIT_STATUS_TOOL_ENTRY =
-  'tool-impl/initiative-orchestration-tools.ts#orchestrateInitStatusTool';
-const ORCHESTRATE_INITIATIVE_TOOL_ENTRY =
-  'tool-impl/initiative-orchestration-tools.ts#orchestrateInitiativeTool';
-const ORCHESTRATE_MONITOR_TOOL_ENTRY =
-  'tool-impl/initiative-orchestration-tools.ts#orchestrateMonitorTool';
-const PLAN_CREATE_TOOL_ENTRY = 'tool-impl/initiative-orchestration-tools.ts#planCreateTool';
-const PLAN_EDIT_TOOL_ENTRY = 'tool-impl/initiative-orchestration-tools.ts#planEditTool';
-const PLAN_LINK_TOOL_ENTRY = 'tool-impl/initiative-orchestration-tools.ts#planLinkTool';
-const PLAN_PROMOTE_TOOL_ENTRY = 'tool-impl/initiative-orchestration-tools.ts#planPromoteTool';
-const DELEGATION_LIST_TOOL_ENTRY = 'tool-impl/initiative-orchestration-tools.ts#delegationListTool';
-const CLOUD_CONNECT_TOOL_ENTRY = 'tool-impl/initiative-orchestration-tools.ts#cloudConnectTool';
-const DOCS_SYNC_TOOL_ENTRY = 'tool-impl/initiative-orchestration-tools.ts#docsSyncTool';
-const INIT_PLAN_TOOL_ENTRY = 'tool-impl/initiative-orchestration-tools.ts#initPlanTool';
-const LUMENFLOW_TOOL_ENTRY = 'tool-impl/initiative-orchestration-tools.ts#lumenflowTool';
-const LUMENFLOW_DOCTOR_TOOL_ENTRY =
-  'tool-impl/initiative-orchestration-tools.ts#lumenflowDoctorTool';
-const LUMENFLOW_INTEGRATE_TOOL_ENTRY =
-  'tool-impl/initiative-orchestration-tools.ts#lumenflowIntegrateTool';
-const LUMENFLOW_RELEASE_TOOL_ENTRY =
-  'tool-impl/initiative-orchestration-tools.ts#lumenflowReleaseTool';
-const LUMENFLOW_UPGRADE_TOOL_ENTRY =
-  'tool-impl/initiative-orchestration-tools.ts#lumenflowUpgradeTool';
-const WORKSPACE_INIT_TOOL_ENTRY = 'tool-impl/initiative-orchestration-tools.ts#workspaceInitTool';
-const SYNC_TEMPLATES_TOOL_ENTRY = 'tool-impl/initiative-orchestration-tools.ts#syncTemplatesTool';
-
-const TOOL_PERMISSIONS = {
-  'wu:block': 'write',
-  'wu:brief': 'read',
-  'wu:claim': 'write',
-  'wu:cleanup': 'write',
-  'wu:create': 'write',
-  'wu:delegate': 'write',
-  'wu:delete': 'write',
-  'wu:deps': 'read',
-  'wu:done': 'write',
-  'wu:edit': 'write',
-  'wu:infer-lane': 'read',
-  'wu:preflight': 'read',
-  'wu:prep': 'write',
-  'wu:proto': 'write',
-  'wu:prune': 'write',
-  'wu:recover': 'write',
-  'wu:release': 'write',
-  'wu:repair': 'write',
-  // WU-2833 (INIT-062 WU-G): privileged recovery surface for cloud-team
-  // phone UX. Distinct tool name so an approval gate + admin permission
-  // can be declared without widening the scope of the default wu:repair
-  // implementer tool.
-  'wu:repair:admin': 'admin',
-  'wu:sandbox': 'write',
-  'wu:status': 'read',
-  'wu:unblock': 'write',
-  'wu:unlock-lane': 'write',
-  'wu:validate': 'read',
-  'mem:checkpoint': 'write',
-  'mem:cleanup': 'write',
-  'mem:converged': 'read',
-  'mem:context': 'read',
-  'mem:create': 'write',
-  'mem:delete': 'write',
-  'mem:export': 'read',
-  'mem:inbox': 'read',
-  'mem:init': 'write',
-  'mem:ready': 'read',
-  'mem:recover': 'write',
-  'mem:signal': 'write',
-  'mem:start': 'write',
-  'mem:summarize': 'read',
-  'mem:triage': 'write',
-  'initiative:add-wu': 'write',
-  'initiative:bulk-assign': 'write',
-  'initiative:create': 'write',
-  'initiative:edit': 'write',
-  'initiative:list': 'read',
-  'initiative:plan': 'read',
-  'initiative:remove-wu': 'write',
-  'initiative:status': 'read',
-  'lane:health': 'read',
-  'lane:suggest': 'write',
-  'flow:bottlenecks': 'read',
-  'flow:report': 'read',
-  // WU-2833 (INIT-062 WU-G): gates and gates:docs are read-only validation
-  // runners. Mobile/cloud tokens for these tools must not carry workspace
-  // write access (principle of least privilege; matches the security
-  // posture established by WU-2810/2811/2816).
-  gates: 'read',
-  'gates:docs': 'read',
-  'file:delete': 'write',
-  'file:edit': 'write',
-  'file:read': 'read',
-  'file:write': 'write',
-  'git:branch': 'write',
-  'git:diff': 'read',
-  'git:log': 'read',
-  'git:status': 'read',
-  'agent:issues-query': 'read',
-  'agent:log-issue': 'write',
-  'agent:session': 'write',
-  'agent:session-end': 'write',
-  'orchestrate:init-status': 'read',
-  'orchestrate:initiative': 'write',
-  'orchestrate:monitor': 'read',
-  'state:bootstrap': 'write',
-  'state:cleanup': 'write',
-  'state:doctor': 'read',
-  'plan:create': 'write',
-  'plan:edit': 'write',
-  'plan:link': 'write',
-  'plan:promote': 'write',
-  'backlog:prune': 'write',
-  'cloud:connect': 'write',
-  'config:get': 'read',
-  'config:set': 'write',
-  'delegation:list': 'read',
-  'docs:sync': 'write',
-  'init:plan': 'read',
-  lumenflow: 'write',
-  'lumenflow:doctor': 'read',
-  'lumenflow:integrate': 'write',
-  'lumenflow:release': 'write',
-  'lumenflow:upgrade': 'write',
-  metrics: 'read',
-  // WU-2833 (INIT-062 WU-G): metrics:snapshot reads the workspace and
-  // writes a DORA snapshot back into .lumenflow/state/. Permission role
-  // is "write" because it mutates state; the explicit SCOPE_OVERRIDE
-  // narrows the write path to .lumenflow/state/** (no full-tree write).
-  'metrics:snapshot': 'write',
-  'lumenflow:metrics': 'read',
-  'signal:cleanup': 'write',
-  'sync:templates': 'write',
-  validate: 'read',
-  'lumenflow:validate': 'read',
-  'validate:agent-skills': 'read',
-  'validate:agent-sync': 'read',
-  'validate:backlog-sync': 'read',
-  'validate:skills-spec': 'read',
-  'workspace:init': 'write',
-} as const satisfies Record<string, ToolPermission>;
-
-type ToolName = keyof typeof TOOL_PERMISSIONS;
-
-const TOOL_ENTRY_OVERRIDES: Partial<Record<ToolName, string>> = {
-  'git:status': GIT_STATUS_TOOL_ENTRY,
-  'git:branch': GIT_BRANCH_TOOL_ENTRY,
-  'git:diff': GIT_DIFF_TOOL_ENTRY,
-  'git:log': GIT_LOG_TOOL_ENTRY,
-  'wu:status': WU_STATUS_TOOL_ENTRY,
-  'wu:create': WU_CREATE_TOOL_ENTRY,
-  'wu:claim': WU_CLAIM_TOOL_ENTRY,
-  'wu:done': WU_DONE_TOOL_ENTRY,
-  'wu:prep': WU_PREP_TOOL_ENTRY,
-  'wu:preflight': WU_PREFLIGHT_TOOL_ENTRY,
-  'wu:validate': WU_VALIDATE_TOOL_ENTRY,
-  'wu:sandbox': WU_SANDBOX_TOOL_ENTRY,
-  'wu:prune': WU_PRUNE_TOOL_ENTRY,
-  'wu:delete': WU_DELETE_TOOL_ENTRY,
-  'wu:cleanup': WU_CLEANUP_TOOL_ENTRY,
-  'wu:unlock-lane': WU_UNLOCK_LANE_TOOL_ENTRY,
-  'wu:brief': WU_BRIEF_TOOL_ENTRY,
-  'wu:delegate': WU_DELEGATE_TOOL_ENTRY,
-  'wu:deps': WU_DEPS_TOOL_ENTRY,
-  'wu:edit': WU_EDIT_TOOL_ENTRY,
-  'wu:proto': WU_PROTO_TOOL_ENTRY,
-  'wu:block': WU_BLOCK_TOOL_ENTRY,
-  'wu:unblock': WU_UNBLOCK_TOOL_ENTRY,
-  'wu:release': WU_RELEASE_TOOL_ENTRY,
-  'wu:recover': WU_RECOVER_TOOL_ENTRY,
-  'wu:repair': WU_REPAIR_TOOL_ENTRY,
-  'wu:repair:admin': WU_REPAIR_ADMIN_TOOL_ENTRY,
-  'wu:infer-lane': WU_INFER_LANE_TOOL_ENTRY,
-  gates: GATES_TOOL_ENTRY,
-  'gates:docs': GATES_DOCS_TOOL_ENTRY,
-  'mem:init': MEM_INIT_TOOL_ENTRY,
-  'mem:start': MEM_START_TOOL_ENTRY,
-  'mem:ready': MEM_READY_TOOL_ENTRY,
-  'mem:checkpoint': MEM_CHECKPOINT_TOOL_ENTRY,
-  'mem:cleanup': MEM_CLEANUP_TOOL_ENTRY,
-  'mem:context': MEM_CONTEXT_TOOL_ENTRY,
-  'mem:create': MEM_CREATE_TOOL_ENTRY,
-  'mem:delete': MEM_DELETE_TOOL_ENTRY,
-  'mem:export': MEM_EXPORT_TOOL_ENTRY,
-  'mem:inbox': MEM_INBOX_TOOL_ENTRY,
-  'mem:signal': MEM_SIGNAL_TOOL_ENTRY,
-  'mem:converged': MEM_CONVERGED_TOOL_ENTRY,
-  'mem:summarize': MEM_SUMMARIZE_TOOL_ENTRY,
-  'mem:triage': MEM_TRIAGE_TOOL_ENTRY,
-  'mem:recover': MEM_RECOVER_TOOL_ENTRY,
-  'agent:session': AGENT_SESSION_TOOL_ENTRY,
-  'agent:session-end': AGENT_SESSION_END_TOOL_ENTRY,
-  'agent:log-issue': AGENT_LOG_ISSUE_TOOL_ENTRY,
-  'agent:issues-query': AGENT_ISSUES_QUERY_TOOL_ENTRY,
-  'flow:bottlenecks': FLOW_BOTTLENECKS_TOOL_ENTRY,
-  'flow:report': FLOW_REPORT_TOOL_ENTRY,
-  metrics: METRICS_TOOL_ENTRY,
-  'metrics:snapshot': METRICS_SNAPSHOT_TOOL_ENTRY,
-  'lumenflow:metrics': LUMENFLOW_METRICS_TOOL_ENTRY,
-  'lane:health': LANE_HEALTH_TOOL_ENTRY,
-  'lane:suggest': LANE_SUGGEST_TOOL_ENTRY,
-  'file:read': FILE_READ_TOOL_ENTRY,
-  'file:write': FILE_WRITE_TOOL_ENTRY,
-  'file:edit': FILE_EDIT_TOOL_ENTRY,
-  'file:delete': FILE_DELETE_TOOL_ENTRY,
-  'state:bootstrap': STATE_BOOTSTRAP_TOOL_ENTRY,
-  'state:cleanup': STATE_CLEANUP_TOOL_ENTRY,
-  'state:doctor': STATE_DOCTOR_TOOL_ENTRY,
-  'backlog:prune': BACKLOG_PRUNE_TOOL_ENTRY,
-  'config:set': CONFIG_SET_TOOL_ENTRY,
-  'config:get': CONFIG_GET_TOOL_ENTRY,
-  'signal:cleanup': SIGNAL_CLEANUP_TOOL_ENTRY,
-  validate: VALIDATE_TOOL_ENTRY,
-  'lumenflow:validate': LUMENFLOW_VALIDATE_TOOL_ENTRY,
-  'validate:agent-skills': VALIDATE_AGENT_SKILLS_TOOL_ENTRY,
-  'validate:agent-sync': VALIDATE_AGENT_SYNC_TOOL_ENTRY,
-  'validate:backlog-sync': VALIDATE_BACKLOG_SYNC_TOOL_ENTRY,
-  'validate:skills-spec': VALIDATE_SKILLS_SPEC_TOOL_ENTRY,
-  'initiative:add-wu': INITIATIVE_ADD_WU_TOOL_ENTRY,
-  'initiative:bulk-assign': INITIATIVE_BULK_ASSIGN_TOOL_ENTRY,
-  'initiative:create': INITIATIVE_CREATE_TOOL_ENTRY,
-  'initiative:edit': INITIATIVE_EDIT_TOOL_ENTRY,
-  'initiative:list': INITIATIVE_LIST_TOOL_ENTRY,
-  'initiative:plan': INITIATIVE_PLAN_TOOL_ENTRY,
-  'initiative:remove-wu': INITIATIVE_REMOVE_WU_TOOL_ENTRY,
-  'initiative:status': INITIATIVE_STATUS_TOOL_ENTRY,
-  'orchestrate:init-status': ORCHESTRATE_INIT_STATUS_TOOL_ENTRY,
-  'orchestrate:initiative': ORCHESTRATE_INITIATIVE_TOOL_ENTRY,
-  'orchestrate:monitor': ORCHESTRATE_MONITOR_TOOL_ENTRY,
-  'plan:create': PLAN_CREATE_TOOL_ENTRY,
-  'plan:edit': PLAN_EDIT_TOOL_ENTRY,
-  'plan:link': PLAN_LINK_TOOL_ENTRY,
-  'plan:promote': PLAN_PROMOTE_TOOL_ENTRY,
-  'cloud:connect': CLOUD_CONNECT_TOOL_ENTRY,
-  'delegation:list': DELEGATION_LIST_TOOL_ENTRY,
-  'docs:sync': DOCS_SYNC_TOOL_ENTRY,
-  'init:plan': INIT_PLAN_TOOL_ENTRY,
-  lumenflow: LUMENFLOW_TOOL_ENTRY,
-  'lumenflow:doctor': LUMENFLOW_DOCTOR_TOOL_ENTRY,
-  'lumenflow:integrate': LUMENFLOW_INTEGRATE_TOOL_ENTRY,
-  'lumenflow:release': LUMENFLOW_RELEASE_TOOL_ENTRY,
-  'lumenflow:upgrade': LUMENFLOW_UPGRADE_TOOL_ENTRY,
-  'workspace:init': WORKSPACE_INIT_TOOL_ENTRY,
-  'sync:templates': SYNC_TEMPLATES_TOOL_ENTRY,
-};
-
-export interface SoftwareDeliveryMigrationScorecard {
-  declaredTools: number;
-  pendingRuntimeEntries: number;
-  realHandlerEntries: number;
-}
-
-function createPathScopes(
-  patterns: readonly string[],
-  access: (typeof TOOL_SCOPE_ACCESS)[keyof typeof TOOL_SCOPE_ACCESS],
-): PathScope[] {
-  return patterns.map((pattern) => ({
-    type: TOOL_SCOPE_TYPES.PATH,
-    pattern,
-    access,
-  }));
-}
-
-function requiredScopesForPermission(permission: ToolPermission): PathScope[] {
-  if (permission === TOOL_PERMISSION_VALUES.READ) {
-    return createPathScopes([FULL_WORKSPACE_SCOPE_PATTERN], TOOL_SCOPE_ACCESS.READ);
-  }
-
-  // WU-2833: admin permission inherits the same constrained write-scope
-  // set as write permission. The admin distinction is carried by the
-  // required_approvals gate, not by broader path access.
-  return createPathScopes(SOFTWARE_DELIVERY_WRITE_SCOPE_PATTERNS, TOOL_SCOPE_ACCESS.WRITE);
-}
-
-/**
- * WU-2833 (INIT-062 WU-G): per-tool scope overrides for tools whose
- * runtime semantics do not match the default read/write scope set. Used
- * sparingly — only when a tool legitimately needs both read and a narrow
- * write scope (or vice versa).
- */
-const SCOPE_OVERRIDES: Partial<Record<string, PathScope[]>> = {
-  // metrics:snapshot reads the full workspace to compute DORA metrics,
-  // then writes the snapshot back into workspace state. The narrow write
-  // scope prevents mobile/cloud tokens from leaking full-tree write.
-  'metrics:snapshot': [
-    {
-      type: TOOL_SCOPE_TYPES.PATH,
-      pattern: FULL_WORKSPACE_SCOPE_PATTERN,
-      access: TOOL_SCOPE_ACCESS.READ,
-    },
-    {
-      type: TOOL_SCOPE_TYPES.PATH,
-      pattern: SOFTWARE_DELIVERY_WORKSPACE_STATE_WRITE_PATTERN,
-      access: TOOL_SCOPE_ACCESS.WRITE,
-    },
-  ],
-};
-
-/**
- * WU-2729 (INIT-060 Phase 2): the 10 software-delivery pack tools that are
- * callable remotely via POST /tools/:name. The HTTP surface uses this list
- * to build its allowlist so the set is the single source of truth (no
- * duplicate allowlist in surface code). ADR-013 §3 tool exposure.
- */
-export const REMOTE_CALLABLE_TOOLS = [
-  'gates',
-  'gates:docs',
-  'lane:suggest',
-  'lane:health',
-  'plan:create',
-  'plan:promote',
-  'initiative:create',
-  'initiative:add-wu',
-  'initiative:status',
-  'flow:report',
-] as const satisfies readonly ToolName[];
-
-export type RemoteCallableToolName = (typeof REMOTE_CALLABLE_TOOLS)[number];
-
-/**
- * Well-known approval identifiers the software-delivery pack may request.
- * Kept narrow on purpose; adding a new identifier requires an ADR.
- */
-export const SOFTWARE_DELIVERY_APPROVAL_IDS = {
-  REMOTE_MUTATION: 'software-delivery:remote_mutation',
-} as const;
-
-/**
- * WU-2729 (INIT-060 Phase 2): per-tool required_approvals overrides.
- * Tools absent from this table default to `[]` (no approval required).
- * Read-only tools MUST remain at `[]`; state-mutating remote-callable
- * tools SHOULD request an explicit approval identifier so the conductor
- * UI can surface the approval gate to operators.
- */
-const APPROVAL_OVERRIDES: Partial<Record<ToolName, readonly string[]>> = {
-  'lane:suggest': [SOFTWARE_DELIVERY_APPROVAL_IDS.REMOTE_MUTATION],
-  'plan:create': [SOFTWARE_DELIVERY_APPROVAL_IDS.REMOTE_MUTATION],
-  'plan:promote': [SOFTWARE_DELIVERY_APPROVAL_IDS.REMOTE_MUTATION],
-  'initiative:create': [SOFTWARE_DELIVERY_APPROVAL_IDS.REMOTE_MUTATION],
-  'initiative:add-wu': [SOFTWARE_DELIVERY_APPROVAL_IDS.REMOTE_MUTATION],
-  // WU-2833: privileged recovery MUST present an explicit approval gate
-  // to conductor/phone UX before dispatch. Without this the admin tool
-  // is indistinguishable from wu:repair from an authorisation standpoint.
-  'wu:repair:admin': [SOFTWARE_DELIVERY_APPROVAL_IDS.REMOTE_MUTATION],
-};
-
-function requiredApprovalsForTool(name: ToolName): string[] | undefined {
-  // WU-2729: the 10 remote-callable tools carry explicit
-  // required_approvals metadata (even if empty). Other tools leave the
-  // field undefined so the manifest stays minimally descriptive.
-  // WU-2833: admin-permission tools also carry explicit approvals so the
-  // privileged surface cannot be invoked without a visible approval gate.
-  const isRemoteCallable = (REMOTE_CALLABLE_TOOLS as readonly string[]).includes(name);
-  const override = APPROVAL_OVERRIDES[name];
-  if (!isRemoteCallable && override === undefined) {
-    return undefined;
-  }
-  return override ? [...override] : [];
-}
-
-/**
- * WU-2729: ordered list of the 10 remote-callable tool names. Preserves
- * declaration order from REMOTE_CALLABLE_TOOLS so callers can render
- * stable UIs without re-sorting.
- */
-export function getRemoteCallableToolNames(): RemoteCallableToolName[] {
-  return [...REMOTE_CALLABLE_TOOLS];
-}
-
-function createManifestTools(): SoftwareDeliveryManifestTool[] {
-  return (Object.keys(TOOL_PERMISSIONS) as ToolName[]).map((name) => {
-    const permission = TOOL_PERMISSIONS[name];
-    const approvals = requiredApprovalsForTool(name);
-    // WU-2833: per-tool scope overrides take priority over the default
-    // permission-derived scope set so read-plus-narrow-write tools like
-    // metrics:snapshot can declare both accesses on a single entry.
-    const scopeOverride = SCOPE_OVERRIDES[name];
-    const entry: SoftwareDeliveryManifestTool = {
-      name,
-      entry: resolveToolEntry(name),
-      permission,
-      required_scopes: scopeOverride ? [...scopeOverride] : requiredScopesForPermission(permission),
-    };
-    if (approvals !== undefined) {
-      entry.required_approvals = approvals;
-    }
-    return entry;
-  });
-}
-
-function resolveToolEntry(name: ToolName): string {
-  const entry = TOOL_ENTRY_OVERRIDES[name];
-  if (!entry) {
-    throw new Error(`Missing runtime-native tool entry mapping for "${name}"`);
-  }
-  return entry;
-}
-
-export function getSoftwareDeliveryMigrationScorecard(
-  manifest: SoftwareDeliveryPackManifest = SOFTWARE_DELIVERY_MANIFEST,
-): SoftwareDeliveryMigrationScorecard {
-  const declaredTools = manifest.tools.length;
-  const pendingRuntimeEntries = 0;
-  return {
-    declaredTools,
-    pendingRuntimeEntries,
-    realHandlerEntries: declaredTools - pendingRuntimeEntries,
-  };
-}
-
-export function renderSoftwareDeliveryMigrationScorecard(
-  manifest: SoftwareDeliveryPackManifest = SOFTWARE_DELIVERY_MANIFEST,
-): string {
-  return JSON.stringify(getSoftwareDeliveryMigrationScorecard(manifest));
-}
-
-const POLICY_SUFFIXES = ['format', 'lint', 'typecheck', 'test', 'coverage'] as const;
-const SOFTWARE_DELIVERY_EMITTED_EVENT_KINDS = [
-  'software-delivery:gate_started',
-  'software-delivery:gate_passed',
-  'software-delivery:gate_failed',
-  'software-delivery:co_change_rule_fired',
-  'software-delivery:conditional_command_fired',
-  'software-delivery:lane_wip_breached',
-  'software-delivery:lane_locked',
-  'software-delivery:lane_unlocked',
-  'software-delivery:lane_suggestion_emitted',
-  'software-delivery:initiative_created',
-  'software-delivery:initiative_closed',
-  'software-delivery:initiative_phase_advanced',
-  'software-delivery:plan_created',
-  'software-delivery:plan_linked',
-  'software-delivery:plan_promoted',
-  // WU-2832 (INIT-062 WU-F): close the cloud-team polling gap with 9
-  // additional ephemeral kinds. Validation pair (validated/invalid),
-  // recovery, preflight, escalation, ratchet, bottleneck, DORA snapshot,
-  // and replay-artifact addressable by event_id.
-  'software-delivery:wu_spec_validated',
-  'software-delivery:wu_spec_invalid',
-  'software-delivery:wu_recovered',
-  'software-delivery:wu_preflight_failed',
-  'software-delivery:wu_escalation_resolved',
-  'software-delivery:test_ratchet_adjusted',
-  'software-delivery:flow_bottleneck_detected',
-  'software-delivery:dora_metric_snapshot',
-  'software-delivery:replay_artifact_published',
-] as const;
-const SOFTWARE_DELIVERY_REQUIRED_SURFACES = ['http'] as const;
-
-export const SOFTWARE_DELIVERY_MANIFEST: SoftwareDeliveryPackManifest = {
-  id: SOFTWARE_DELIVERY_PACK_ID,
-  version: SOFTWARE_DELIVERY_PACK_VERSION,
-  config_key: 'software_delivery',
-  task_types: ['work-unit'],
-  tools: createManifestTools(),
-  policies: POLICY_SUFFIXES.map((suffix) => ({
-    id: `${SOFTWARE_DELIVERY_POLICY_ID_PREFIX}.${suffix}`,
-    trigger: MANIFEST_POLICY_TRIGGERS.ON_COMPLETION,
-    decision: MANIFEST_POLICY_DECISIONS.ALLOW,
-  })),
-  evidence_types: ['gate-run'],
-  state_aliases: { active: 'in_progress' },
-  lane_templates: [],
-  emitted_event_kinds: [...SOFTWARE_DELIVERY_EMITTED_EVENT_KINDS],
-  subscribed_event_kinds: [],
-  required_approvals: [],
-  surfaces_required: [...SOFTWARE_DELIVERY_REQUIRED_SURFACES],
-};