@deksden-com/dd-flow-cli 0.9.0-beta.1 → 0.9.0-beta.11

package/CHANGELOG.md

@@ -1,5 +1,82 @@
 # @deksden-com/dd-flow-cli
 
+## 0.9.0-beta.11
+
+### Patch Changes
+
+- Bind a native Codex subagent Work to the child Thread identifier supplied as
+  `agent_id`, rather than Codex's inherited root hook session identifier.
+
+## 0.9.0-beta.10
+
+### Patch Changes
+
+- 4858f6d: Preserve complete CODE review findings through repair and require one evidenced resolution per assigned finding.
+
+## 0.9.0-beta.9
+
+### Patch Changes
+
+- f156ad8: Use harness-qualified native child capacity for PLAN-REVIEW, CODE and
+  CODE-REVIEW fan-out instead of creating flow-owned capacity probes.
+
+## 0.9.0-beta.8
+
+### Patch Changes
+
+- 5f17e79: Keep CODE worker and reviewer prompts aligned on authorization/lifecycle write
+  boundaries, and project current check receipts without overwriting repair
+  history.
+
+## 0.9.0-beta.7
+
+### Patch Changes
+
+- 4621387: Expose public Session receipts and cleanup actions as native
+  harness/Session pairs without SQLite storage keys. Keep a freshly reserved
+  check receipt owned while its process is initializing, so a concurrent caller
+  cannot incorrectly abort it.
+
+## 0.9.0-beta.6
+
+### Patch Changes
+
+- 781274c: Materialize a causal CODE repair Work when the coordinator's semantic
+  verification lists unresolved accepted obligations, rather than leaving CODE
+  running after a rejected finish.
+
+## 0.9.0-beta.5
+
+### Patch Changes
+
+- Keep every accepted original CODE check eligible for a later causal repair, so
+  a prior repair cannot make another failed aggregate check impossible to fix.
+
+## 0.9.0-beta.4
+
+### Patch Changes
+
+- Persist an atomic check completion marker so a later CLI invocation can recover
+  the actual terminal result after its original caller exits.
+
+## 0.9.0-beta.3
+
+### Patch Changes
+
+- 0bd32f6: Expose a durable host resource registry for managed processes, preserve public
+  native Session identity separately from internal storage keys, and safely
+  reconcile interrupted check receipts.
+
+## 0.9.0-beta.2
+
+### Patch Changes
+
+- Make CODE and CODE-REVIEW terminal transitions create their MERGE request
+  before persisting a completed stage, and validate MERGE prerequisites before
+  freezing the source commit. Upgrade project check profiles to
+  `dd-flow/code-check-profile@6`: aliases may declare named local ports, which
+  the CLI allocates per check invocation and records in its receipt.
+
 ## 0.9.0-beta.1
 
 ### Patch Changes

package/dist/build-info.json

@@ -1,11 +1,11 @@
 {
   "cli_package": "@deksden-com/dd-flow-cli",
-  "cli_version": "0.9.0-beta.1",
-  "cli_commit": "5e493443b9f97ad3c83e0edccc29dfbee584b92e",
-  "built_at": "2026-09-01T21:02:46.536Z",
+  "cli_version": "0.9.0-beta.11",
+  "cli_commit": "67fea9fdb3fbcc04cc0a45de9afc5f7120c13a08",
+  "built_at": "2026-09-04T20:59:42.597Z",
   "built_with_canon": {
-    "version": "4.0.0",
-    "commit": "bd6494ad11bca9544d9b483bd7fe37049e6d00fe",
+    "version": "4.0.2",
+    "commit": "fccdb9fe7359f2ba321eebace328fd18557dcd25",
     "flow_contract": "dd-flow-canonical-2026-08",
     "repo_root": "/Users/deksden/Documents/_Projects/dd-memorybank",
     "memorybank_root": "/Users/deksden/Documents/_Projects/dd-memorybank/.memory-bank",

package/dist/cli/help.js

@@ -204,9 +204,9 @@ Usage:
   dd-flow work show <WORK-ID> --json
   dd-flow work start <WORK-ID> --project-root <root> --json
   dd-flow work finish <WORK-ID> (--result-file <path>|--result-stdin) --project-root <root> --json
-  dd-flow work repair add --run <RUN-ID> --from-check <CHECK-ID> --origin-work <WORK-ID>... --task-stdin --project-root <root> --json
+  dd-flow work repair add --run <RUN-ID> (--from-check <CHECK-ID>|--from-unresolved <gap> --verification-file <file>) --origin-work <WORK-ID>... --task-stdin --project-root <root> --json
 
-CODE workers receive their full accepted packet from work start. work finish validates the result and executes the packet's focused checks before completion. A failed aggregate CODE gate returns the exact failed receipt and repair command; repair add creates a new Work from the selected completed origin context plus that failure evidence. Its planned write areas are coordination hints only; the repair may change any necessary project file inside its RUN workspace.`
+CODE workers receive their full accepted packet from work start. work finish validates the result and executes the packet's focused checks before completion. A failed aggregate CODE gate or unresolved semantic verification creates a repair Work from the selected completed origin context and retained evidence. Its planned write areas are coordination hints only; the repair may change any necessary project file inside its RUN workspace.`
     ],
     [
         "id",
@@ -477,7 +477,7 @@ Dashboards are rendered views of dd-flow state. Markdown remains the compatibili
         `dd-flow schema - validate canonical dd-flow data contracts
 
 Usage:
-  dd-flow schema validate --schema <name> --file <json-file> [--project-root <root>] [--schema-dir <dir>] --json
+  dd-flow schema validate --schema <name> --file <json-file> [--project-root <root>] [--run <RUN>] [--schema-dir <dir>] --json
 
 Schema names resolve to <name>.schema.json. Lookup order is --schema-dir, then <project-root>/.memory-bank/dd-flow/schemas/, then <project-root>/dd-flow/schemas/ for canonical checkouts, then bundled CLI schemas. Flow-contract validation runs structural checks first and the runtime's shared semantic normalizer second. If --project-root is omitted, the current working directory is used. JSON mode writes valid results to stdout and structured validation/usage errors to stderr.`
     ],

package/dist/cli/run-cli.js

@@ -50,6 +50,7 @@ import { finishStage, startStage } from "../services/stage-lifecycle.js";
 import { addWorkBatch, cancelWork, deleteWork, failWork, finishWork, listWorks, mutateWorkDeps, retryWork, showWork, startWork } from "../services/work-registry.js";
 import { createEvalBootstrapSnapshot, createEvalRunSnapshot, prepareVnextSpecifyRun, restoreEvalBootstrapSnapshot, restoreEvalRunSnapshot } from "../services/eval-snapshots.js";
 import { loadExternalStageContext } from "../services/stage-context.js";
+import { confirmManagedProcess, finishManagedProcess, heartbeatManagedProcess, managedProcessStatus, reconcileExpiredManagedProcesses, registerManagedProcess } from "../services/managed-processes.js";
 const defaultIo = {
     stdout: process.stdout,
     stderr: process.stderr,
@@ -88,7 +89,8 @@ export async function runCli(args, io = defaultIo, env = process.env) {
             heartbeat = setInterval(() => writeProgressJsonl(io, "running", "Command is still running"), 15_000);
         }
         const scopeProjectRoot = resolveProjectRootBeforeRouting(output.args, env);
-        const routed = await routeArgsThroughEngine(routerContext, output.json ? [...output.args, "--json", ...(output.progressJsonl ? ["--progress-jsonl"] : [])] : output.args, io, io.stdin, env, scopeProjectRoot);
+        const routedArgs = output.responseFile ? [...output.args, "--response-file", output.responseFile] : output.args;
+        const routed = await routeArgsThroughEngine(routerContext, output.json ? [...routedArgs, "--json", ...(output.progressJsonl ? ["--progress-jsonl"] : [])] : routedArgs, io, io.stdin, env, scopeProjectRoot);
         if (routed?.routed && !routed.inProcess) {
             if (heartbeat)
                 clearInterval(heartbeat);
@@ -108,8 +110,9 @@ export async function runCli(args, io = defaultIo, env = process.env) {
             writeProgressJsonl(io, "done", "Command finished");
         emitHumanProgress(io, output, progress, "done");
         const payload = attachProgress(resultWithWarnings, progress, output);
+        const visible = writeResponseFile(payload, output);
         if (output.json)
-            writeJson(io.stdout, payload);
+            writeJson(io.stdout, visible);
         else
             io.stdout.write(renderHumanResult(output.args, payload));
         return completedCommandExitCode(payload);
@@ -124,10 +127,11 @@ export async function runCli(args, io = defaultIo, env = process.env) {
         if (output.progressJsonl)
             writeProgressJsonl(io, "failed", payload.error.message, { code: payload.error.code });
         const errorPayload = attachProgress(payload, progress, output);
+        const visible = writeResponseFile(errorPayload, output);
         if (output.json && output.progressJsonl)
             writeJson(io.stdout, errorPayload);
         else if (output.json)
-            writeJson(io.stderr, errorPayload);
+            writeJson(io.stderr, visible);
         else
             io.stderr.write(renderHumanError(payload));
         return isAppError(error) ? error.exitCode : 1;
@@ -189,7 +193,11 @@ function parseOutputOptions(args) {
     const stripped = [];
     let json = false;
     let progressJsonl = false;
-    for (const arg of args) {
+    let responseFile = null;
+    for (let index = 0; index < args.length; index += 1) {
+        const arg = args[index];
+        if (arg === undefined)
+            continue;
         if (arg === "--json") {
             json = true;
             continue;
@@ -198,10 +206,44 @@ function parseOutputOptions(args) {
             progressJsonl = true;
             continue;
         }
+        if (arg === "--response-file") {
+            const file = args[++index];
+            if (!file)
+                throw new AppError("usage", "--response-file requires a path", 2);
+            responseFile = file;
+            continue;
+        }
         stripped.push(arg);
     }
+    if (responseFile && !json)
+        throw new AppError("usage", "--response-file requires --json", 2);
     const hookJsonOnly = stripped[0] === "codex" && stripped[1] === "hook" && stripped[2] === "handle";
-    return { json: json || hookJsonOnly, progressJsonl, args: stripped, hookJsonOnly };
+    return { json: json || hookJsonOnly, progressJsonl, args: stripped, hookJsonOnly, responseFile };
+}
+/** Persist the complete machine response for harnesses that cap tool output.
+ * The visible response keeps routing fields but omits the potentially large
+ * rendered prompt; an agent can safely read the named file without rerunning
+ * the lifecycle command. */
+function writeResponseFile(payload, output) {
+    if (!output.responseFile)
+        return payload;
+    const file = path.resolve(output.responseFile);
+    try {
+        fs.mkdirSync(path.dirname(file), { recursive: true });
+        const temporary = `${file}.tmp-${process.pid}-${crypto.randomUUID()}`;
+        fs.writeFileSync(temporary, `${JSON.stringify(payload, null, 2)}\n`, "utf8");
+        fs.renameSync(temporary, file);
+    }
+    catch (error) {
+        // The lifecycle mutation may already be accepted. Do not retry it just
+        // because its optional full-response file could not be written.
+        return { ...(payload && typeof payload === "object" && !Array.isArray(payload) ? payload : { ok: true, result: payload }), response_file: file, response_file_error: String(error) };
+    }
+    if (!payload || typeof payload !== "object" || Array.isArray(payload))
+        return { ok: true, response_file: file };
+    const visible = { ...payload, response_file: file };
+    delete visible.worker_prompt_markdown;
+    return visible;
 }
 function progressForCommand(args) {
     const [family, command, subcommand] = args;
@@ -474,6 +516,9 @@ async function dispatch(args, context, io, scopeProjectRoot = null, classificati
     if (family === "version") {
         return getCliVersionReport();
     }
+    if (family === "runtime") {
+        return await dispatchRuntime(context, command, parsed);
+    }
     if (family === "canon") {
         return dispatchCanon(context, command, parsed);
     }
@@ -662,8 +707,9 @@ async function dispatch(args, context, io, scopeProjectRoot = null, classificati
             throw new AppError("usage", "work repair add requires --task-stdin", 2);
         const origins = parsed.options.get("origin-work") ?? [];
         const findings = parsed.options.get("from-finding") ?? [];
+        const unresolved = parsed.options.get("from-unresolved") ?? [];
         if (!origins.length && !findings.length)
-            throw new AppError("usage", "work repair add requires --from-check with --origin-work or --from-finding", 2);
+            throw new AppError("usage", "work repair add requires --from-check with --origin-work, --from-finding, or --from-unresolved with --origin-work", 2);
         if (findings.length)
             return addVnextCodeReviewRepair(context, {
                 projectRoot: requiredScopeProjectRoot(scopeProjectRoot, "work repair add"),
@@ -672,14 +718,30 @@ async function dispatch(args, context, io, scopeProjectRoot = null, classificati
                 checkRefsByFinding: Object.fromEntries(findings.map((finding) => [finding, parsed.options.get("check-ref") ?? []])),
                 objective: await readStdin(io.stdin)
             });
+        if (unresolved.length) {
+            if (!origins.length)
+                throw new AppError("usage", "semantic repair requires at least one --origin-work", 2);
+            const verificationPath = requiredOption(parsed, "verification-file");
+            return addVnextCodeRepair(context, {
+                projectRoot: requiredScopeProjectRoot(scopeProjectRoot, "work repair add"),
+                runId: requiredOption(parsed, "run"),
+                originWorkIds: origins,
+                semanticUnresolved: unresolved,
+                verificationPath,
+                objective: await readStdin(io.stdin)
+            });
+        }
         if (!hasOption(parsed, "from-check"))
             throw new AppError("usage", "check repair requires --from-check", 2);
         if (!origins.length)
             throw new AppError("usage", "check repair requires at least one --origin-work", 2);
+        const receipts = parsed.options.get("from-check") ?? [];
+        if (receipts.length !== 1)
+            throw new AppError("usage", "check repair accepts exactly one --from-check; create one causal repair Work per failed receipt", 2);
         return addVnextCodeRepair(context, {
             projectRoot: requiredScopeProjectRoot(scopeProjectRoot, "work repair add"),
             runId: requiredOption(parsed, "run"),
-            checkReceiptId: requiredOption(parsed, "from-check"),
+            checkReceiptId: receipts[0],
             originWorkIds: origins,
             objective: await readStdin(io.stdin)
         });
@@ -1519,6 +1581,42 @@ function dispatchRun(context, command, parsed) {
     }
     throw new AppError("usage", `Unknown run command: ${command ?? "<empty>"}`, 2);
 }
+async function dispatchRuntime(context, command, parsed) {
+    if (command !== "process")
+        throw new AppError("usage", "Usage: dd-flow runtime process <register|confirm|heartbeat|finish|status|reconcile>", 2);
+    const action = requiredPosition(parsed, 0, "runtime process action");
+    if (action === "register") {
+        const leaseMs = optionalPositiveNumber(parsed, "lease-ms", true);
+        const process = registerManagedProcess(context, {
+            kind: requiredOption(parsed, "kind"), ownerId: requiredOption(parsed, "owner"),
+            projectId: optionalOption(parsed, "project-id") ?? null, runId: optionalOption(parsed, "run") ?? null,
+            workId: optionalOption(parsed, "work") ?? null, checkId: optionalOption(parsed, "check") ?? null,
+            operationId: optionalOption(parsed, "operation") ?? null, stdoutPath: optionalOption(parsed, "stdout") ?? null,
+            stderrPath: optionalOption(parsed, "stderr") ?? null, ...(leaseMs ? { leaseMs } : {})
+        });
+        return { ok: true, process };
+    }
+    if (action === "confirm") {
+        const leaseMs = optionalPositiveNumber(parsed, "lease-ms", true);
+        const processGroupId = optionalPositiveNumber(parsed, "process-group-id", true);
+        return { ok: true, process: confirmManagedProcess(context, { id: requiredOption(parsed, "id"), leaseToken: requiredOption(parsed, "lease-token"), pid: optionalPositiveNumber(parsed, "pid", true) ?? 0, ...(processGroupId ? { processGroupId } : {}), ...(leaseMs ? { leaseMs } : {}) }) };
+    }
+    if (action === "heartbeat") {
+        const leaseMs = optionalPositiveNumber(parsed, "lease-ms", true);
+        return { ok: heartbeatManagedProcess(context, { id: requiredOption(parsed, "id"), leaseToken: requiredOption(parsed, "lease-token"), ...(leaseMs ? { leaseMs } : {}) }) };
+    }
+    if (action === "finish") {
+        const state = requiredOption(parsed, "state");
+        if (state !== "stopped" && state !== "failed")
+            throw new AppError("validation", "--state must be stopped or failed", 2);
+        return { ok: finishManagedProcess(context, { id: requiredOption(parsed, "id"), leaseToken: requiredOption(parsed, "lease-token"), state: state, reason: optionalOption(parsed, "reason") ?? null }) };
+    }
+    if (action === "status")
+        return { ok: true, processes: managedProcessStatus(context) };
+    if (action === "reconcile")
+        return { ok: true, processes: await reconcileExpiredManagedProcesses(context, requiredOption(parsed, "owner"), optionalPositiveNumber(parsed, "grace-ms", true)) };
+    throw new AppError("usage", "Usage: dd-flow runtime process <register|confirm|heartbeat|finish|status|reconcile>", 2);
+}
 function dispatchStat(context, command, parsed) {
     if (command === "usage") {
         return getStoredFlowRunUsage(context, {
@@ -1699,16 +1797,37 @@ function dispatchSchema(context, command, parsed) {
     if (command === "validate") {
         const schemaDir = optionalOption(parsed, "schema-dir");
         const projectRoot = optionalOption(parsed, "project-root");
+        const file = requiredOption(parsed, "file");
+        // A generic validation command can still bind to the exact RUN without
+        // searching project directories: run_id is a structural field in the
+        // submitted artifact and the database owns its materialized run_root.
+        const explicitRunId = optionalOption(parsed, "run");
+        const declaredRunId = explicitRunId ?? readRunId(file);
+        const fileRunRoot = path.basename(file) === "run.json" ? path.dirname(path.resolve(file)) : undefined;
+        const bound = projectRoot
+            ? context.db.get("SELECT r.id, r.run_root FROM runs r JOIN projects p ON p.id = r.project_id WHERE p.root = ? AND (r.id = ? OR r.run_root = ?) LIMIT 1", [fs.realpathSync(projectRoot), declaredRunId ?? "", fileRunRoot ?? ""])
+            : undefined;
         return validateSchema({
             schemaName: requiredOption(parsed, "schema"),
-            file: requiredOption(parsed, "file"),
+            file,
             ...(schemaDir ? { schemaDir } : {}),
             ...(projectRoot ? { projectRoot } : {}),
+            ...(declaredRunId || bound?.id ? { runId: declaredRunId ?? bound.id } : {}),
+            ...(bound?.run_root ? { runRoot: bound.run_root } : {}),
             ddFlowHome: context.ddFlowHome
         });
     }
     throw new AppError("usage", `Unknown schema command: ${command ?? "<empty>"}`, 2);
 }
+function readRunId(file) {
+    try {
+        const value = JSON.parse(fs.readFileSync(file, "utf8"));
+        return typeof value.run_id === "string" && value.run_id.trim() ? value.run_id : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
 async function dispatchLane(context, command, parsed) {
     if (command === "status") {
         return getLaneStatus(context, { projectRoot: requiredOption(parsed, "project-root"), lane: optionalOption(parsed, "lane") });

package/dist/runtime/context.js

@@ -1,8 +1,10 @@
 import { getDatabase } from "../storage/database.js";
 import { resolveDdFlowHome } from "../storage/paths.js";
 export function createRouterContext(env) {
+    const ddFlowHome = resolveDdFlowHome(env);
     return {
-        ddFlowHome: resolveDdFlowHome(env),
+        ddFlowHome,
+        db: getDatabase(ddFlowHome, "read_existing"),
         now: () => new Date().toISOString()
     };
 }

package/dist/schemas/code-review-result.schema.json

@@ -9,6 +9,6 @@
     "verdict": {"enum": ["pass", "findings", "blocked"]},
     "summary": {"type": "string", "minLength": 1},
     "aspects": {"type": "array", "items": {"type": "object", "additionalProperties": false, "required": ["aspect_id", "verdict", "summary", "evidence_refs"], "properties": {"aspect_id": {"type": "string", "minLength": 1}, "verdict": {"enum": ["pass", "findings", "blocked"]}, "summary": {"type": "string", "minLength": 1}, "evidence_refs": {"type": "array", "items": {"type": "string"}}}}},
-    "findings": {"type": "array", "items": {"type": "object", "additionalProperties": false, "required": ["finding_id", "aspect_id", "priority", "problem", "impact", "evidence_refs", "obligation_refs"], "properties": {"finding_id": {"type": "string", "pattern": "^FIND-[0-9]{3}$"}, "aspect_id": {"type": "string", "minLength": 1}, "priority": {"enum": ["p0", "p1", "p2", "p3"]}, "problem": {"type": "string", "minLength": 1}, "impact": {"type": "string", "minLength": 1}, "evidence_refs": {"type": "array", "minItems": 1, "items": {"type": "string", "minLength": 1}}, "obligation_refs": {"type": "array", "minItems": 1, "items": {"type": "string", "minLength": 1}}}}}
+    "findings": {"type": "array", "items": {"type": "object", "additionalProperties": false, "required": ["finding_id", "aspect_id", "priority", "problem", "impact", "required_outcome", "evidence_refs", "obligation_refs"], "properties": {"finding_id": {"type": "string", "pattern": "^FIND-[0-9]{3}$"}, "aspect_id": {"type": "string", "minLength": 1}, "priority": {"enum": ["p0", "p1", "p2", "p3"]}, "problem": {"type": "string", "minLength": 1}, "impact": {"type": "string", "minLength": 1}, "required_outcome": {"type": "string", "minLength": 1}, "evidence_refs": {"type": "array", "minItems": 1, "items": {"type": "string", "minLength": 1}}, "obligation_refs": {"type": "array", "minItems": 1, "items": {"type": "string", "minLength": 1}}}}}
   }
 }

package/dist/schemas/code-work-batch.schema.json

@@ -16,9 +16,10 @@
     "spine": {"type": "object", "additionalProperties": false, "required": ["user_outcome", "component_responsibility", "must_preserve", "non_goals", "acceptance_contribution"], "properties": {"user_outcome": {"type": "string", "minLength": 1}, "component_responsibility": {"type": "string", "minLength": 1}, "must_preserve": {"$ref": "#/$defs/strings"}, "non_goals": {"$ref": "#/$defs/stringList"}, "acceptance_contribution": {"type": "string", "minLength": 1}}},
     "obligation": {"type": "object", "additionalProperties": false, "required": ["id", "statement"], "properties": {"id": {"type": "string", "minLength": 1}, "statement": {"type": "string", "minLength": 1}}},
     "acceptance": {"type": "object", "additionalProperties": false, "required": ["criterion_id", "path", "environment", "fixtures", "cleanup", "check_refs", "expected_evidence", "proof_limits", "gate"], "properties": {"criterion_id": {"type": "string", "pattern": "^AC-[0-9]+$"}, "path": {"type": "string", "minLength": 1}, "environment": {"type": "string", "minLength": 1}, "fixtures": {"$ref": "#/$defs/stringList"}, "cleanup": {"type": "string", "minLength": 1}, "check_refs": {"type": "array", "uniqueItems": true, "items": {"type": "string", "minLength": 1}}, "expected_evidence": {"$ref": "#/$defs/strings"}, "proof_limits": {"$ref": "#/$defs/strings"}, "gate": {"type": "string", "minLength": 1}}},
-    "check": {"type": "object", "additionalProperties": false, "required": ["id", "command", "purpose", "run_at", "availability"], "properties": {"id": {"type": "string", "pattern": "^CHK-[A-Za-z0-9-]+$"}, "command": {"type": "string", "minLength": 1}, "purpose": {"type": "string", "minLength": 1}, "run_at": {"enum": ["work", "code", "readiness", "merge", "release", "external"]}, "availability": {"enum": ["available", "planned"]}, "provided_by": {"type": "string", "minLength": 1}, "definition": {"type": "string", "minLength": 1}, "required_artifacts": {"type": "array", "uniqueItems": true, "items": {"type": "string", "minLength": 1}}}, "allOf": [{"if": {"properties": {"availability": {"const": "planned"}}, "required": ["availability"]}, "then": {"required": ["provided_by", "definition"], "properties": {"command": {"pattern": "^@check/"}}}}]},
+    "check": {"type": "object", "additionalProperties": false, "required": ["id", "command", "purpose", "run_at", "availability"], "properties": {"id": {"type": "string", "pattern": "^CHK-[A-Za-z0-9-]+$"}, "command": {"type": "string", "minLength": 1}, "purpose": {"type": "string", "minLength": 1}, "run_at": {"enum": ["work", "code", "readiness", "merge", "release", "external"]}, "availability": {"enum": ["available", "planned"]}, "provided_by": {"type": "string", "minLength": 1}, "definition": {"type": "string", "minLength": 1}, "required_artifacts": {"type": "array", "uniqueItems": true, "items": {"type": "string", "minLength": 1}}, "ports": {"type": "array", "uniqueItems": true, "items": {"type": "string", "pattern": "^[A-Za-z][A-Za-z0-9_]*$"}}}, "allOf": [{"if": {"properties": {"availability": {"const": "planned"}}, "required": ["availability"]}, "then": {"required": ["provided_by", "definition"], "properties": {"command": {"pattern": "^@check/"}}}}]},
     "documentUpdate": {"type": "object", "additionalProperties": false, "required": ["path", "action", "owner", "reason", "baseline_sha256"], "properties": {"path": {"type": "string", "minLength": 1}, "action": {"enum": ["create", "update"]}, "owner": {"type": "string", "minLength": 1}, "reason": {"type": "string", "minLength": 1}, "baseline_sha256": {"type": ["string", "null"], "pattern": "^[a-f0-9]{64}$"}}},
-    "repair": {"type": "object", "additionalProperties": false, "required": ["origin_work_ids"], "anyOf": [{"required": ["check_receipt_id", "failure_receipt_path"]}, {"required": ["review_finding_ids", "review_evidence_refs"]}], "properties": {"origin_work_ids": {"$ref": "#/$defs/strings"}, "check_receipt_id": {"type": "string", "minLength": 1}, "failure_receipt_path": {"type": "string", "minLength": 1}, "review_finding_ids": {"$ref": "#/$defs/strings"}, "review_evidence_refs": {"$ref": "#/$defs/strings"}}},
-    "work": {"type": "object", "additionalProperties": false, "required": ["schema_id", "key", "launch_policy", "source", "task", "semantic_spine", "requirements", "acceptance", "document_updates", "required_read", "discovery_boundary", "planned_write_areas", "checks", "provides_checks", "stop_conditions", "depends_on", "result_schema"], "properties": {"schema_id": {"const": "dd-flow/code-work-packet@5"}, "key": {"type": "string", "minLength": 1}, "launch_policy": {"const": "fresh_agent_required"}, "source": {"$ref": "#/$defs/source"}, "repair": {"$ref": "#/$defs/repair"}, "task": {"type": "string", "minLength": 1}, "semantic_spine": {"$ref": "#/$defs/spine"}, "requirements": {"type": "array", "minItems": 1, "items": {"$ref": "#/$defs/obligation"}}, "acceptance": {"type": "array", "items": {"$ref": "#/$defs/acceptance"}}, "document_updates": {"type": "array", "items": {"$ref": "#/$defs/documentUpdate"}}, "required_read": {"$ref": "#/$defs/strings", "description": "Mandatory starting sources, not a read allowlist."}, "discovery_boundary": {"$ref": "#/$defs/strings", "description": "Likely discovery areas; additional project-local reads are allowed."}, "planned_write_areas": {"type": "array", "items": {"type": "string", "minLength": 1}, "description": "Soft coordination hints only. A worker may change any necessary project file inside the RUN workspace."}, "checks": {"type": "array", "minItems": 1, "items": {"$ref": "#/$defs/check"}}, "provides_checks": {"type": "array", "items": {"$ref": "#/$defs/check"}}, "stop_conditions": {"$ref": "#/$defs/strings", "description": "Hard semantic or external stop conditions; path prediction drift is not a stop condition."}, "depends_on": {"type": "array", "uniqueItems": true, "items": {"type": "string", "minLength": 1}}, "result_schema": {"const": "dd-flow/code-work-result@2"}}}
+    "reviewFinding": {"type": "object", "additionalProperties": false, "required": ["finding_ref", "priority", "problem", "impact", "required_outcome", "evidence_refs", "obligation_refs", "decision_reason", "check_refs"], "properties": {"finding_ref": {"type": "string", "minLength": 1}, "priority": {"enum": ["p0", "p1", "p2", "p3"]}, "problem": {"type": "string", "minLength": 1}, "impact": {"type": "string", "minLength": 1}, "required_outcome": {"type": "string", "minLength": 1}, "evidence_refs": {"$ref": "#/$defs/strings"}, "obligation_refs": {"$ref": "#/$defs/strings"}, "decision_reason": {"type": "string", "minLength": 1}, "check_refs": {"$ref": "#/$defs/strings"}}},
+    "repair": {"type": "object", "additionalProperties": false, "required": ["origin_work_ids"], "anyOf": [{"required": ["check_receipt_id", "failure_receipt_path"]}, {"required": ["review_findings"]}, {"required": ["semantic_unresolved", "verification_path"]}], "properties": {"origin_work_ids": {"$ref": "#/$defs/strings"}, "check_receipt_id": {"type": "string", "minLength": 1}, "failure_receipt_path": {"type": "string", "minLength": 1}, "review_findings": {"type": "array", "minItems": 1, "items": {"$ref": "#/$defs/reviewFinding"}}, "semantic_unresolved": {"$ref": "#/$defs/strings"}, "verification_path": {"type": "string", "minLength": 1}}},
+    "work": {"type": "object", "additionalProperties": false, "required": ["schema_id", "key", "launch_policy", "source", "task", "semantic_spine", "requirements", "acceptance", "document_updates", "required_read", "discovery_boundary", "planned_write_areas", "checks", "provides_checks", "stop_conditions", "depends_on", "result_schema"], "properties": {"schema_id": {"const": "dd-flow/code-work-packet@5"}, "key": {"type": "string", "minLength": 1}, "launch_policy": {"const": "fresh_agent_required"}, "source": {"$ref": "#/$defs/source"}, "repair": {"$ref": "#/$defs/repair"}, "task": {"type": "string", "minLength": 1}, "semantic_spine": {"$ref": "#/$defs/spine"}, "requirements": {"type": "array", "minItems": 1, "items": {"$ref": "#/$defs/obligation"}}, "acceptance": {"type": "array", "items": {"$ref": "#/$defs/acceptance"}}, "document_updates": {"type": "array", "items": {"$ref": "#/$defs/documentUpdate"}}, "required_read": {"$ref": "#/$defs/strings", "description": "Mandatory starting sources, not a read allowlist."}, "discovery_boundary": {"$ref": "#/$defs/strings", "description": "Likely discovery areas; additional project-local reads are allowed."}, "planned_write_areas": {"type": "array", "items": {"type": "string", "minLength": 1}, "description": "Soft coordination hints only. A worker may change any necessary project file inside the RUN workspace."}, "checks": {"type": "array", "items": {"$ref": "#/$defs/check"}}, "provides_checks": {"type": "array", "items": {"$ref": "#/$defs/check"}}, "stop_conditions": {"$ref": "#/$defs/strings", "description": "Hard semantic or external stop conditions; path prediction drift is not a stop condition."}, "depends_on": {"type": "array", "uniqueItems": true, "items": {"type": "string", "minLength": 1}}, "result_schema": {"const": "dd-flow/code-work-result@2"}}}
   }
 }

package/dist/schemas/code-work-result.schema.json

@@ -11,6 +11,6 @@
     "evidence": {"type": "array", "items": {"type": "object", "additionalProperties": false, "required": ["criterion_id", "refs"], "properties": {"criterion_id": {"type": "string", "minLength": 1}, "refs": {"type": "array", "uniqueItems": true, "items": {"type": "string", "minLength": 1}}}}},
     "deviations": {"type": "array", "items": {"type": "string", "minLength": 1}},
     "blockers": {"type": "array", "items": {"type": "string", "minLength": 1}},
-    "resolved_finding_refs": {"type": "array", "uniqueItems": true, "items": {"type": "string", "minLength": 1}}
+    "resolutions": {"type": "array", "uniqueItems": true, "items": {"type": "object", "additionalProperties": false, "required": ["finding_ref", "summary", "evidence_refs"], "properties": {"finding_ref": {"type": "string", "minLength": 1}, "summary": {"type": "string", "minLength": 1}, "evidence_refs": {"type": "array", "minItems": 1, "uniqueItems": true, "items": {"type": "string", "minLength": 1}}}}}
   }
 }

package/dist/schemas/harness-config.schema.json

@@ -0,0 +1,23 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "dd-flow/harness-config@1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_id", "harnesses"],
+  "properties": {
+    "schema_id": { "const": "dd-flow/harness-config@1" },
+    "harnesses": {
+      "type": "object",
+      "additionalProperties": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["adapter_command", "runtime_command"],
+        "properties": {
+          "adapter_command": { "type": "string", "minLength": 1 },
+          "runtime_command": { "type": "string", "minLength": 1 },
+          "allow_path_discovery": { "type": "boolean" }
+        }
+      }
+    }
+  }
+}

package/dist/schemas/plan-review-decision.schema.json

@@ -6,7 +6,7 @@
   "required": ["schema_id", "outcome", "summary", "finding_decisions", "correction"],
   "properties": {
     "schema_id": {"const": "dd-flow/plan-review-decision@3"},
-    "outcome": {"enum": ["accepted", "blocked", "failed", "cancelled"]},
+    "outcome": {"enum": ["accepted", "failed", "cancelled"]},
     "summary": {"type": "string", "minLength": 1},
     "finding_decisions": {"type": "array", "items": {"type": "object", "additionalProperties": false, "required": ["finding_ref", "decision", "reason"], "properties": {"finding_ref": {"type": "string", "pattern": "^WRK-[^/]+/FIND-[0-9]{3}$"}, "decision": {"enum": ["accepted_fix", "rejected", "deferred_as_DEF", "requires_user", "duplicate"]}, "reason": {"type": "string", "minLength": 1}}}},
     "correction": {"type": "object", "additionalProperties": false, "required": ["status", "previous_plan_revision", "changed_paths", "summary"], "properties": {"status": {"enum": ["applied", "not_required"]}, "previous_plan_revision": {"type": "integer", "minimum": 1}, "changed_paths": {"type": "array", "items": {"type": "string", "minLength": 1}}, "summary": {"type": "string", "minLength": 1}}}

package/dist/schemas/vnext-protocol-plan.schema.json

@@ -29,7 +29,7 @@
     "documentUpdate": {"type": "object", "additionalProperties": false, "required": ["path", "action", "owner", "reason"], "properties": {"path": {"type": "string", "minLength": 1}, "action": {"enum": ["create", "update"]}, "owner": {"type": "string", "minLength": 1}, "reason": {"type": "string", "minLength": 1}}},
     "spine": {"type": "object", "additionalProperties": false, "required": ["user_outcome", "component_responsibility", "must_preserve", "non_goals", "acceptance_contribution"], "properties": {"user_outcome": {"type": "string", "minLength": 1}, "component_responsibility": {"type": "string", "minLength": 1}, "must_preserve": {"$ref": "#/$defs/strings"}, "non_goals": {"type": "array", "items": {"type": "string", "minLength": 1}}, "acceptance_contribution": {"type": "string", "minLength": 1}}},
     "execution": {"type": "object", "additionalProperties": false, "required": ["required_read", "discovery_boundary", "planned_write_areas", "stop_conditions"], "properties": {"required_read": {"$ref": "#/$defs/strings", "description": "Mandatory starting sources. This is not a read allowlist."}, "discovery_boundary": {"$ref": "#/$defs/strings", "description": "Likely discovery areas. A worker may inspect other project-local sources when necessary."}, "planned_write_areas": {"type": "array", "items": {"type": "string", "minLength": 1}, "description": "Optional file or directory hints used only to coordinate concurrent Works. They never grant or deny write permission."}, "stop_conditions": {"$ref": "#/$defs/strings", "description": "Semantic contradictions or external blockers that require the worker to stop."}}},
-    "check": {"type": "object", "additionalProperties": false, "required": ["id", "command", "purpose", "run_at", "availability"], "properties": {"id": {"type": "string", "pattern": "^CHK-[A-Za-z0-9-]+$"}, "command": {"type": "string", "minLength": 1}, "purpose": {"type": "string", "minLength": 1}, "run_at": {"enum": ["work", "code", "readiness", "merge", "release", "external"]}, "availability": {"enum": ["available", "planned"]}, "provided_by": {"type": "string", "pattern": "^P[0-9]+$"}, "definition": {"type": "string", "minLength": 1}, "required_artifacts": {"type": "array", "uniqueItems": true, "items": {"type": "string", "minLength": 1}}}, "allOf": [{"if": {"properties": {"availability": {"const": "planned"}}, "required": ["availability"]}, "then": {"required": ["provided_by", "definition"], "properties": {"command": {"pattern": "^@check/"}}}}, {"if": {"properties": {"command": {"pattern": "^@check/"}}}, "then": {"required": ["definition"]}}]},
+    "check": {"type": "object", "additionalProperties": false, "required": ["id", "command", "purpose", "run_at", "availability"], "properties": {"id": {"type": "string", "pattern": "^CHK-[A-Za-z0-9-]+$"}, "command": {"type": "string", "minLength": 1}, "purpose": {"type": "string", "minLength": 1}, "run_at": {"enum": ["work", "code", "readiness", "merge", "release", "external"]}, "availability": {"enum": ["available", "planned"]}, "provided_by": {"type": "string", "pattern": "^P[0-9]+$"}, "definition": {"type": "string", "minLength": 1}, "required_artifacts": {"type": "array", "uniqueItems": true, "items": {"type": "string", "minLength": 1}}, "ports": {"type": "array", "uniqueItems": true, "items": {"type": "string", "pattern": "^[A-Za-z][A-Za-z0-9_]*$"}}}, "allOf": [{"if": {"properties": {"availability": {"const": "planned"}}, "required": ["availability"]}, "then": {"required": ["provided_by", "definition"], "properties": {"command": {"pattern": "^@check/"}}}}, {"if": {"properties": {"command": {"pattern": "^@check/"}}}, "then": {"required": ["definition"]}}]},
     "verification": {"type": "object", "additionalProperties": false, "required": ["check_refs"], "properties": {"check_refs": {"type": "array", "minItems": 1, "uniqueItems": true, "items": {"type": "string", "pattern": "^CHK-[A-Za-z0-9-]+$"}}}},
     "item": {"type": "object", "additionalProperties": false, "required": ["id", "title", "summary", "details", "depends_on", "requirement_refs", "semantic_spine", "execution_context", "verification"], "properties": {"id": {"type": "string", "pattern": "^P[0-9]+$"}, "title": {"type": "string", "minLength": 1}, "summary": {"type": "string", "minLength": 1}, "details": {"type": "string", "minLength": 1}, "depends_on": {"type": "array", "uniqueItems": true, "items": {"type": "string", "pattern": "^P[0-9]+$"}}, "requirement_refs": {"$ref": "#/$defs/strings"}, "semantic_spine": {"$ref": "#/$defs/spine"}, "execution_context": {"$ref": "#/$defs/execution"}, "verification": {"$ref": "#/$defs/verification"}}},
     "acceptance": {"type": "object", "additionalProperties": false, "required": ["criterion_id", "plan_item_ids", "changed_surfaces", "path", "environment", "fixtures", "cleanup", "check_refs", "expected_evidence", "proof_limits", "gate"], "properties": {"criterion_id": {"type": "string", "pattern": "^AC-[0-9]+$"}, "plan_item_ids": {"type": "array", "minItems": 1, "items": {"type": "string", "pattern": "^P[0-9]+$"}}, "changed_surfaces": {"$ref": "#/$defs/strings"}, "path": {"type": "string", "minLength": 1}, "environment": {"type": "string", "minLength": 1}, "fixtures": {"type": "array", "items": {"type": "string", "minLength": 1}}, "cleanup": {"type": "string", "minLength": 1}, "check_refs": {"type": "array", "minItems": 1, "uniqueItems": true, "items": {"type": "string", "pattern": "^CHK-[A-Za-z0-9-]+$"}}, "expected_evidence": {"$ref": "#/$defs/strings"}, "proof_limits": {"$ref": "#/$defs/strings"}, "gate": {"enum": ["work", "code", "readiness", "merge", "release", "external"]}}}

package/dist/services/cleanup.js

@@ -8,6 +8,7 @@ import { projectCheckoutRoot, resolveProjectRoot } from "../storage/paths.js";
 import { appendAudit } from "./audit.js";
 import { requireProjectByRoot } from "./projects.js";
 import { protocolRunDiagnostics, readProtocolRuntimeState, requireProtocol } from "./protocols.js";
+import { publicSessionIdentity } from "./session-identity.js";
 const actionKinds = new Set([
     "repair_protocol_state",
     "cancel_queue_job",
@@ -68,7 +69,7 @@ export function cleanupScan(context, input) {
             action: { kind: "cancel_queue_job", project_id: project.id, protocol_id: job.protocol_id }
         });
     }
-    const staleSessions = context.db.all(`SELECT session_id, protocol_id, workspace_path FROM sessions
+    const staleSessions = context.db.all(`SELECT session_id, harness, provider_session_id, protocol_id, workspace_path FROM sessions
      WHERE project_id = ? AND status IN ('pending', 'active', 'waiting_user', 'blocked', 'stopping')
      ORDER BY updated_at ASC, session_id ASC`, [project.id]);
     for (const session of staleSessions) {
@@ -79,11 +80,11 @@ export function cleanupScan(context, input) {
         const terminalProtocol = Boolean(protocol && (["closed", "cancelled"].includes(protocol.status) || ["closed", "cancelled"].includes(protocol.stage)));
         if (missingWorkspace || terminalProtocol) {
             pushFinding(findings, actions, "stale_flow_session", "warning", {
-                session_id: session.session_id,
+                session: publicSessionIdentity(session),
                 protocol_id: session.protocol_id,
                 missing_workspace: missingWorkspace,
                 terminal_protocol: terminalProtocol,
-                action: { kind: "close_flow_session", project_id: project.id, session_id: session.session_id }
+                action: { kind: "close_flow_session", project_id: project.id, session: publicSessionIdentity(session) }
             });
         }
     }
@@ -241,6 +242,12 @@ function validateCleanupPlan(value, project) {
                 actual_project_id: action.project_id
             });
         }
+        if (action.kind === "close_flow_session") {
+            const session = action.session;
+            if (!session || typeof session.harness_id !== "string" || !session.harness_id || typeof session.session_id !== "string" || !session.session_id) {
+                throw new AppError("validation", "close_flow_session requires a native session identity", 2);
+            }
+        }
         return action;
     });
     return { project_root: project.root, project_id: project.id, actions };
@@ -305,20 +312,23 @@ function applyAction(context, action, reason, force, now) {
         });
         return { kind: action.kind, changed: true, protocol_id: action.protocol_id };
     }
-    if (action.kind === "close_flow_session" && action.session_id) {
+    if (action.kind === "close_flow_session" && action.session) {
+        const stored = context.db.get("SELECT session_id FROM sessions WHERE project_id = ? AND harness = ? AND COALESCE(provider_session_id, session_id) = ?", [action.project_id, action.session.harness_id, action.session.session_id]);
+        if (!stored)
+            return { kind: action.kind, changed: false, skipped: true, reason: "session_not_found", session: action.session };
         const result = context.db.run(`UPDATE sessions SET status = 'stopped', stop_reason = ?, updated_at = ?, stopped_at = ?
-       WHERE project_id = ? AND session_id = ? AND status IN ('pending', 'active', 'waiting_user', 'blocked', 'stopping')`, [reason, now, now, action.project_id, action.session_id]);
+       WHERE project_id = ? AND session_id = ? AND status IN ('pending', 'active', 'waiting_user', 'blocked', 'stopping')`, [reason, now, now, action.project_id, stored.session_id]);
         if (result.changes !== 1) {
-            return { kind: action.kind, changed: false, skipped: true, reason: "already_stopped", session_id: action.session_id };
+            return { kind: action.kind, changed: false, skipped: true, reason: "already_stopped", session: action.session };
         }
         appendAudit(context, {
             projectId: action.project_id,
             eventType: "flow_session.stopped",
             reason,
             forced: force,
-            payload: { session_id: action.session_id, source: "cleanup.apply" }
+            payload: { session_id: stored.session_id, source: "cleanup.apply" }
         });
-        return { kind: action.kind, changed: true, session_id: action.session_id };
+        return { kind: action.kind, changed: true, session: action.session };
     }
     if (action.kind === "discard_stale_run" && action.run_id) {
         const run = context.db.get("SELECT status, runtime_path, run_dir, workspace_root, index_json FROM runs WHERE project_id = ? AND id = ?", [action.project_id, action.run_id]);