@lumenflow/core 1.3.2 → 1.3.3

package/dist/wu-constants.d.ts

@@ -384,6 +384,55 @@ export declare const DEFAULTS: {
     MAX_COMMIT_SUBJECT: number;
     /** Parent directory traversal depth from tools/lib to project root */
     PROJECT_ROOT_DEPTH: number;
+    /**
+     * Default email domain for username -> email conversion
+     * WU-1068: Made configurable, no longer hardcoded to patientpath.co.uk
+     * @see user-normalizer.ts - Infers from git config first
+     */
+    EMAIL_DOMAIN: string;
+};
+/**
+ * Process argv indices (WU-1068)
+ *
+ * Centralized indices for process.argv access to eliminate magic numbers.
+ * In Node.js: argv[0] = node, argv[1] = script, argv[2+] = args
+ */
+export declare const ARGV_INDICES: {
+    /** Node executable path */
+    NODE: number;
+    /** Script path */
+    SCRIPT: number;
+    /** First user argument */
+    FIRST_ARG: number;
+    /** Second user argument */
+    SECOND_ARG: number;
+};
+/**
+ * Display limits for CLI output (WU-1068)
+ *
+ * Centralized limits for truncating display strings to avoid magic numbers.
+ */
+export declare const DISPLAY_LIMITS: {
+    /** Maximum items to show in lists before truncating */
+    LIST_ITEMS: number;
+    /** Maximum items to show in short lists */
+    SHORT_LIST: number;
+    /** Maximum characters for content preview */
+    CONTENT_PREVIEW: number;
+    /** Maximum characters for short preview */
+    SHORT_PREVIEW: number;
+    /** Maximum characters for title display */
+    TITLE: number;
+    /** Maximum characters for truncated title */
+    TRUNCATED_TITLE: number;
+    /** Maximum characters for command preview */
+    CMD_PREVIEW: number;
+    /** Maximum lines to preview from files */
+    FILE_LINES: number;
+    /** Maximum commits to show in lists */
+    COMMITS: number;
+    /** Maximum overlaps to display */
+    OVERLAPS: number;
 };
 /**
  * YAML serialization options
@@ -532,6 +581,8 @@ export declare const GIT_FLAGS: {
     DELETE: string;
     /** Delete branch (force - even if not merged) */
     DELETE_FORCE: string;
+    /** Delete remote branch flag (for git push --delete) */
+    DELETE_REMOTE: string;
     /** Hard reset flag */
     HARD: string;
     /** Soft reset flag */
@@ -546,6 +597,10 @@ export declare const GIT_FLAGS: {
     NO_GPG_SIGN: string;
     /** One-line log format */
     ONELINE: string;
+    /** List heads only (for ls-remote) */
+    HEADS: string;
+    /** Path separator (separates git options from file paths) */
+    PATH_SEPARATOR: string;
 };
 /**
  * Git commands
@@ -560,6 +615,10 @@ export declare const GIT_COMMANDS: {
     RESET: string;
     /** List tree objects (check file existence on branch) */
     LS_TREE: string;
+    /** List remote references */
+    LS_REMOTE: string;
+    /** Push command */
+    PUSH: string;
     /** Git diff command */
     DIFF: string;
     /** Git log command */
@@ -731,6 +790,9 @@ export declare const WU_DEFAULTS: {
  *
  * Validation is advisory only - never blocks wu:claim or wu:done.
  *
+ * WU-1068: Removed hardcoded @patientpath references. These patterns
+ * should be configured in .lumenflow.config.yaml per-project.
+ *
  * @see {@link tools/lib/lane-validator.mjs} - Validation logic
  */
 export declare const LANE_PATH_PATTERNS: {
@@ -933,6 +995,8 @@ export declare const PKG_COMMANDS: {
  * Package names (monorepo workspaces)
  *
  * Centralized package names for --filter usage.
+ * WU-1068: Changed from @patientpath to @lumenflow for framework reusability.
+ * Project-specific packages should be configured in .lumenflow.config.yaml.
  */
 export declare const PACKAGES: {
     WEB: string;
@@ -1210,6 +1274,32 @@ export declare const STRING_LITERALS: {
     /** Forward slash */
     SLASH: string;
 };
+/**
+ * Path-related constants
+ *
+ * WU-1062: Centralized path literals for lumenflow-home and spec-branch operations.
+ */
+export declare const PATH_LITERALS: {
+    /** Tilde prefix for home directory expansion (e.g., ~/path) */
+    TILDE_PREFIX: string;
+    /** Tilde character for home directory */
+    TILDE: string;
+    /** Plan file suffix for WU plans */
+    PLAN_FILE_SUFFIX: string;
+    /** Trailing slash regex pattern */
+    TRAILING_SLASH_REGEX: RegExp;
+};
+/**
+ * Slice lengths for path operations
+ *
+ * WU-1062: Magic numbers extracted for path manipulation.
+ */
+export declare const PATH_SLICE_LENGTHS: {
+    /** Length of '~/' prefix for tilde expansion */
+    TILDE_PREFIX_LENGTH: number;
+    /** Length of '/' for leading slash removal */
+    LEADING_SLASH_LENGTH: number;
+};
 /**
  * Convert lane name to kebab-case using change-case library
  *
@@ -1276,6 +1366,9 @@ export declare const FILE_TOOLS: {
  *
  * Error codes for PHI detection in file tools.
  * Used by file:write and file:edit to block PHI leakage.
+ *
+ * WU-1068: PHI scanning is healthcare-specific functionality.
+ * Enable via PHI_CONFIG.ENABLED flag or .lumenflow.config.yaml phi.enabled: true
  */
 export declare const PHI_ERRORS: {
     /** PHI detected in content - write blocked */
@@ -1283,6 +1376,29 @@ export declare const PHI_ERRORS: {
     /** PHI override requested - audit logged */
     PHI_OVERRIDE_ALLOWED: string;
 };
+/**
+ * PHI scanning configuration (WU-1068)
+ *
+ * Controls whether PHI (Protected Health Information) scanning is enabled.
+ * This is healthcare-specific functionality (NHS numbers, UK postcodes)
+ * that should only be enabled for healthcare projects.
+ *
+ * Projects can enable via:
+ * 1. Setting PHI_CONFIG.ENABLED = true in code
+ * 2. Setting LUMENFLOW_PHI_ENABLED=1 environment variable
+ * 3. Adding phi.enabled: true to .lumenflow.config.yaml
+ */
+export declare const PHI_CONFIG: {
+    /**
+     * Whether PHI scanning is enabled
+     * Default: false - projects must explicitly opt-in
+     */
+    ENABLED: boolean;
+    /**
+     * Whether to block on PHI detection (true) or just warn (false)
+     */
+    BLOCKING: boolean;
+};
 /**
  * Readiness summary UI constants (WU-1620)
  *

package/dist/wu-constants.js

@@ -406,6 +406,55 @@ export const DEFAULTS = {
     MAX_COMMIT_SUBJECT: 100,
     /** Parent directory traversal depth from tools/lib to project root */
     PROJECT_ROOT_DEPTH: 2,
+    /**
+     * Default email domain for username -> email conversion
+     * WU-1068: Made configurable, no longer hardcoded to patientpath.co.uk
+     * @see user-normalizer.ts - Infers from git config first
+     */
+    EMAIL_DOMAIN: 'example.com',
+};
+/**
+ * Process argv indices (WU-1068)
+ *
+ * Centralized indices for process.argv access to eliminate magic numbers.
+ * In Node.js: argv[0] = node, argv[1] = script, argv[2+] = args
+ */
+export const ARGV_INDICES = {
+    /** Node executable path */
+    NODE: 0,
+    /** Script path */
+    SCRIPT: 1,
+    /** First user argument */
+    FIRST_ARG: 2,
+    /** Second user argument */
+    SECOND_ARG: 3,
+};
+/**
+ * Display limits for CLI output (WU-1068)
+ *
+ * Centralized limits for truncating display strings to avoid magic numbers.
+ */
+export const DISPLAY_LIMITS = {
+    /** Maximum items to show in lists before truncating */
+    LIST_ITEMS: 5,
+    /** Maximum items to show in short lists */
+    SHORT_LIST: 3,
+    /** Maximum characters for content preview */
+    CONTENT_PREVIEW: 200,
+    /** Maximum characters for short preview */
+    SHORT_PREVIEW: 60,
+    /** Maximum characters for title display */
+    TITLE: 50,
+    /** Maximum characters for truncated title */
+    TRUNCATED_TITLE: 40,
+    /** Maximum characters for command preview */
+    CMD_PREVIEW: 60,
+    /** Maximum lines to preview from files */
+    FILE_LINES: 10,
+    /** Maximum commits to show in lists */
+    COMMITS: 50,
+    /** Maximum overlaps to display */
+    OVERLAPS: 3,
 };
 /**
  * YAML serialization options
@@ -557,6 +606,8 @@ export const GIT_FLAGS = {
     DELETE: '-d',
     /** Delete branch (force - even if not merged) */
     DELETE_FORCE: '-D',
+    /** Delete remote branch flag (for git push --delete) */
+    DELETE_REMOTE: '--delete',
     /** Hard reset flag */
     HARD: '--hard',
     /** Soft reset flag */
@@ -571,6 +622,10 @@ export const GIT_FLAGS = {
     NO_GPG_SIGN: '--no-gpg-sign',
     /** One-line log format */
     ONELINE: '--oneline',
+    /** List heads only (for ls-remote) */
+    HEADS: '--heads',
+    /** Path separator (separates git options from file paths) */
+    PATH_SEPARATOR: '--',
 };
 /**
  * Git commands
@@ -585,6 +640,10 @@ export const GIT_COMMANDS = {
     RESET: 'reset',
     /** List tree objects (check file existence on branch) */
     LS_TREE: 'ls-tree',
+    /** List remote references */
+    LS_REMOTE: 'ls-remote',
+    /** Push command */
+    PUSH: 'push',
     /** Git diff command */
     DIFF: 'diff',
     /** Git log command */
@@ -770,6 +829,9 @@ export const WU_DEFAULTS = {
  *
  * Validation is advisory only - never blocks wu:claim or wu:done.
  *
+ * WU-1068: Removed hardcoded @patientpath references. These patterns
+ * should be configured in .lumenflow.config.yaml per-project.
+ *
  * @see {@link tools/lib/lane-validator.mjs} - Validation logic
  */
 export const LANE_PATH_PATTERNS = {
@@ -778,7 +840,7 @@ export const LANE_PATH_PATTERNS = {
      * These paths belong to the Intelligence lane.
      */
     Operations: {
-        exclude: ['ai/prompts/**', 'packages/@patientpath/prompts/**', 'apps/web/src/lib/prompts/**'],
+        exclude: ['ai/prompts/**', 'apps/web/src/lib/prompts/**'],
         allowExceptions: [],
     },
     /**
@@ -975,12 +1037,14 @@ export const PKG_COMMANDS = {
  * Package names (monorepo workspaces)
  *
  * Centralized package names for --filter usage.
+ * WU-1068: Changed from @patientpath to @lumenflow for framework reusability.
+ * Project-specific packages should be configured in .lumenflow.config.yaml.
  */
 export const PACKAGES = {
     WEB: 'web',
-    APPLICATION: '@patientpath/application',
-    DOMAIN: '@patientpath/domain',
-    INFRASTRUCTURE: '@patientpath/infrastructure',
+    APPLICATION: '@lumenflow/core',
+    DOMAIN: '@lumenflow/core',
+    INFRASTRUCTURE: '@lumenflow/cli',
 };
 /**
  * Directory paths within the monorepo
@@ -1253,6 +1317,32 @@ export const STRING_LITERALS = {
     /** Forward slash */
     SLASH: '/',
 };
+/**
+ * Path-related constants
+ *
+ * WU-1062: Centralized path literals for lumenflow-home and spec-branch operations.
+ */
+export const PATH_LITERALS = {
+    /** Tilde prefix for home directory expansion (e.g., ~/path) */
+    TILDE_PREFIX: '~/',
+    /** Tilde character for home directory */
+    TILDE: '~',
+    /** Plan file suffix for WU plans */
+    PLAN_FILE_SUFFIX: '-plan.md',
+    /** Trailing slash regex pattern */
+    TRAILING_SLASH_REGEX: /\/+$/,
+};
+/**
+ * Slice lengths for path operations
+ *
+ * WU-1062: Magic numbers extracted for path manipulation.
+ */
+export const PATH_SLICE_LENGTHS = {
+    /** Length of '~/' prefix for tilde expansion */
+    TILDE_PREFIX_LENGTH: 2,
+    /** Length of '/' for leading slash removal */
+    LEADING_SLASH_LENGTH: 1,
+};
 /**
  * Convert lane name to kebab-case using change-case library
  *
@@ -1337,6 +1427,9 @@ export const FILE_TOOLS = {
  *
  * Error codes for PHI detection in file tools.
  * Used by file:write and file:edit to block PHI leakage.
+ *
+ * WU-1068: PHI scanning is healthcare-specific functionality.
+ * Enable via PHI_CONFIG.ENABLED flag or .lumenflow.config.yaml phi.enabled: true
  */
 export const PHI_ERRORS = {
     /** PHI detected in content - write blocked */
@@ -1344,6 +1437,29 @@ export const PHI_ERRORS = {
     /** PHI override requested - audit logged */
     PHI_OVERRIDE_ALLOWED: 'PHI_OVERRIDE_ALLOWED',
 };
+/**
+ * PHI scanning configuration (WU-1068)
+ *
+ * Controls whether PHI (Protected Health Information) scanning is enabled.
+ * This is healthcare-specific functionality (NHS numbers, UK postcodes)
+ * that should only be enabled for healthcare projects.
+ *
+ * Projects can enable via:
+ * 1. Setting PHI_CONFIG.ENABLED = true in code
+ * 2. Setting LUMENFLOW_PHI_ENABLED=1 environment variable
+ * 3. Adding phi.enabled: true to .lumenflow.config.yaml
+ */
+export const PHI_CONFIG = {
+    /**
+     * Whether PHI scanning is enabled
+     * Default: false - projects must explicitly opt-in
+     */
+    ENABLED: process.env.LUMENFLOW_PHI_ENABLED === '1',
+    /**
+     * Whether to block on PHI detection (true) or just warn (false)
+     */
+    BLOCKING: process.env.LUMENFLOW_PHI_BLOCKING === '1',
+};
 /**
  * Readiness summary UI constants (WU-1620)
  *

package/dist/wu-create-validators.d.ts

@@ -14,6 +14,23 @@
  * NOTE: This is domain-specific WU workflow code, not a general utility.
  * No external library exists for LumenFlow lane inference validation.
  */
+/**
+ * WU-1069: Check if a path is a repo-internal path that should be rejected
+ *
+ * Repo-internal paths start with ./ or .lumenflow/ and indicate the agent
+ * is attempting to store plans inside the repository instead of externally.
+ *
+ * @param {string} path - Path to check
+ * @returns {boolean} True if path is repo-internal and should be rejected
+ */
+export declare function isRepoInternalPath(path: string): boolean;
+/**
+ * WU-1069: Build error message for repo-internal path rejection
+ *
+ * @param {string} path - The rejected path
+ * @returns {string} Error message with correct format examples
+ */
+export declare function buildRepoInternalPathError(path: string): string;
 /**
  * Generate a warning message when provided lane differs from inferred lane.
  *

package/dist/wu-create-validators.js

@@ -17,6 +17,35 @@
 import { isExternalPath, normalizeSpecRef } from './lumenflow-home.js';
 /** Confidence threshold for showing suggestion (percentage) */
 const CONFIDENCE_THRESHOLD_LOW = 30;
+/** Prefixes that indicate repo-internal paths (WU-1069) */
+const REPO_INTERNAL_PREFIXES = ['./', '.lumenflow/'];
+/**
+ * WU-1069: Check if a path is a repo-internal path that should be rejected
+ *
+ * Repo-internal paths start with ./ or .lumenflow/ and indicate the agent
+ * is attempting to store plans inside the repository instead of externally.
+ *
+ * @param {string} path - Path to check
+ * @returns {boolean} True if path is repo-internal and should be rejected
+ */
+export function isRepoInternalPath(path) {
+    return REPO_INTERNAL_PREFIXES.some((prefix) => path.startsWith(prefix));
+}
+/**
+ * WU-1069: Build error message for repo-internal path rejection
+ *
+ * @param {string} path - The rejected path
+ * @returns {string} Error message with correct format examples
+ */
+export function buildRepoInternalPathError(path) {
+    return (`Rejected repo-internal spec_ref path: "${path}"\n` +
+        `Plans must be stored externally, not inside the repository.\n\n` +
+        `Valid path formats:\n` +
+        `  - lumenflow://plans/WU-XXXX-plan.md (recommended)\n` +
+        `  - ~/.lumenflow/plans/WU-XXXX-plan.md\n` +
+        `  - $LUMENFLOW_HOME/plans/WU-XXXX-plan.md\n\n` +
+        `Use --plan flag to auto-create: pnpm wu:create --plan --id WU-XXXX ...`);
+}
 /**
  * Generate a warning message when provided lane differs from inferred lane.
  *
@@ -121,14 +150,20 @@ export function validateSpecRefs(specRefs) {
             errors.push('Empty spec_ref detected');
             continue;
         }
+        // WU-1069: Reject repo-internal paths (paths starting with ./ or .lumenflow/)
+        // This prevents agents from storing plans inside the repository
+        if (isRepoInternalPath(ref)) {
+            errors.push(buildRepoInternalPathError(ref));
+            continue;
+        }
         // External paths are valid (will be resolved at runtime)
         if (isExternalPath(ref)) {
             // Add informational warning about external paths
             warnings.push(`External spec_ref: "${ref}" - ensure plan exists at ${normalizeSpecRef(ref)}`);
             continue;
         }
-        // Repo-relative paths should follow conventions
-        const isValidRepoPath = ref.startsWith('docs/') || ref.startsWith('./docs/') || ref.endsWith('.md');
+        // Repo-relative paths should follow conventions (docs/ without ./ prefix)
+        const isValidRepoPath = ref.startsWith('docs/') || ref.endsWith('.md');
         if (!isValidRepoPath) {
             warnings.push(`Unconventional spec_ref path: "${ref}" - consider using docs/04-operations/plans/ or lumenflow://plans/`);
         }

package/dist/wu-spawn.js

@@ -746,7 +746,7 @@ function generateLaneGuidance(lane) {
 - Follow prompt versioning guidelines in ai/prompts/README.md`,
         Experience: `## Lane-Specific: Experience
 
-- Follow design system tokens in packages/@patientpath/design-system
+- Follow design system tokens defined in the project
 - Ensure accessibility compliance (WCAG 2.1 AA)`,
         Core: `## Lane-Specific: Core
 

package/dist/wu-yaml-fixer.js

@@ -15,7 +15,7 @@
  */
 import { readFileSync, writeFileSync, copyFileSync } from 'node:fs';
 import { parseYAML, stringifyYAML } from './wu-yaml.js';
-import { STRING_LITERALS } from './wu-constants.js';
+import { DEFAULTS, STRING_LITERALS } from './wu-constants.js';
 // Valid type values from wu-schema.mjs
 const VALID_TYPES = ['feature', 'bug', 'documentation', 'process', 'tooling', 'chore', 'refactor'];
 // Common type aliases that should be auto-fixed
@@ -30,8 +30,11 @@ const TYPE_ALIASES = {
     ref: 'refactor',
     proc: 'process',
 };
-// Default email domain for username → email conversion
-const DEFAULT_EMAIL_DOMAIN = 'patientpath.co.uk';
+/**
+ * Default email domain for username -> email conversion
+ * WU-1068: Changed from hardcoded 'patientpath.co.uk' to configurable default
+ */
+const DEFAULT_EMAIL_DOMAIN = DEFAULTS.EMAIL_DOMAIN;
 /**
  * Issue types that can be detected and auto-fixed
  */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lumenflow/core",
-  "version": "1.3.2",
+  "version": "1.3.3",
   "description": "Core WU lifecycle tools for LumenFlow workflow framework",
   "keywords": [
     "lumenflow",
@@ -65,6 +65,13 @@
     "LICENSE",
     "README.md"
   ],
+  "scripts": {
+    "build": "tsc",
+    "build:dist": "tsc -p tsconfig.build.json",
+    "pack:dist": "pnpm pack",
+    "clean": "rm -rf dist *.tgz",
+    "test": "vitest run"
+  },
   "dependencies": {
     "change-case": "^5.4.4",
     "cli-progress": "^3.12.0",
@@ -91,8 +98,8 @@
     "vitest": "^4.0.17"
   },
   "peerDependencies": {
-    "@lumenflow/memory": "1.3.2",
-    "@lumenflow/initiatives": "1.3.2"
+    "@lumenflow/memory": "workspace:*",
+    "@lumenflow/initiatives": "workspace:*"
   },
   "peerDependenciesMeta": {
     "@lumenflow/memory": {
@@ -107,12 +114,5 @@
   },
   "publishConfig": {
     "access": "public"
-  },
-  "scripts": {
-    "build": "tsc",
-    "build:dist": "tsc -p tsconfig.build.json",
-    "pack:dist": "pnpm pack",
-    "clean": "rm -rf dist *.tgz",
-    "test": "vitest run"
   }
-}
+}