@deksden-com/dd-flow-cli 0.9.0-beta.10 → 0.9.0-beta.11

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @deksden-com/dd-flow-cli
 
+## 0.9.0-beta.11
+
+### Patch Changes
+
+- Bind a native Codex subagent Work to the child Thread identifier supplied as
+  `agent_id`, rather than Codex's inherited root hook session identifier.
+
 ## 0.9.0-beta.10
 
 ### Patch Changes

package/dist/build-info.json

@@ -1,8 +1,8 @@
 {
   "cli_package": "@deksden-com/dd-flow-cli",
-  "cli_version": "0.9.0-beta.10",
-  "cli_commit": "460b71fed9e52e0be2cb95d3a565d9ec015d6da7",
-  "built_at": "2026-09-04T16:11:29.424Z",
+  "cli_version": "0.9.0-beta.11",
+  "cli_commit": "67fea9fdb3fbcc04cc0a45de9afc5f7120c13a08",
+  "built_at": "2026-09-04T20:59:42.597Z",
   "built_with_canon": {
     "version": "4.0.2",
     "commit": "fccdb9fe7359f2ba321eebace328fd18557dcd25",

package/dist/services/hooks.js

@@ -268,7 +268,13 @@ export function handleCodexHook(context, input) {
     if (eventName !== "PreToolUse") {
         return { ok: true, observed: false, reason: "event_not_participating", event: eventName };
     }
-    const sessionId = stringValue(payload.session_id);
+    const rootProviderSessionId = stringValue(payload.session_id) ?? null;
+    // Codex deliberately retains its legacy root session_id inside a
+    // thread-spawned subagent. `agent_id` is the current child Thread id and
+    // therefore the only valid identity for a fresh Work.
+    const rawChildProviderSessionId = stringValue(payload.agent_id) ?? null;
+    const providerSessionId = rawChildProviderSessionId ?? rootProviderSessionId;
+    const parentProviderSessionId = rawChildProviderSessionId ? codexNativeParentId(payload, rawChildProviderSessionId) : null;
     const turnId = stringValue(payload.turn_id);
     const toolName = stringValue(payload.tool_name) ?? toolNameFromPayload(payload);
     const command = lifecycleCommandFromPayload(payload);
@@ -303,10 +309,16 @@ export function handleCodexHook(context, input) {
     const project = projectForHook(context, input.projectRoot ?? commandProjectRoot, stringValue(payload.cwd));
     if (!project)
         return { ok: true, observed: false, reason: "unrelated_cwd" };
-    const binding = sessionId ? upsertSessionBindingFromPayload(context, project, sessionId, payload) : undefined;
-    const storageId = sessionId ? storageSessionId(nativeSessionIdentity("codex-desktop", sessionId)) : null;
+    const binding = rootProviderSessionId ? upsertSessionBindingFromPayload(context, project, rootProviderSessionId, payload) : undefined;
+    const storageId = providerSessionId ? storageSessionId(nativeSessionIdentity("codex-desktop", providerSessionId)) : null;
+    const parentSessionId = parentProviderSessionId ? storageSessionId(nativeSessionIdentity("codex-desktop", parentProviderSessionId)) : null;
     const observedSession = flowPayload
-        ? bindObservedFlowSession(context, project, { ...flowPayload, harness: "codex-desktop", provider_session_id: sessionId ?? flowPayload.provider_session_id ?? null }, storageId ?? undefined)
+        ? bindObservedFlowSession(context, project, {
+            ...flowPayload,
+            harness: "codex-desktop",
+            provider_session_id: providerSessionId ?? flowPayload.provider_session_id ?? null,
+            parent_session_id: parentSessionId
+        }, storageId ?? undefined)
         : undefined;
     const effectiveSessionId = observedSession?.session_id ?? storageId;
     const protocolId = observedSession?.protocol_id ?? binding?.protocol_id ?? null;
@@ -315,10 +327,10 @@ export function handleCodexHook(context, input) {
         projectId: project.id,
         protocolId,
         harness: "codex-desktop",
-        providerSessionId: sessionId ?? null,
-        parentSessionId: null,
+        providerSessionId: providerSessionId ?? null,
+        parentSessionId,
         sessionId: effectiveSessionId,
-        agentId: stringValue(payload.agent_id) ?? null,
+        agentId: rawChildProviderSessionId ?? null,
         turnId: turnId ?? null,
         eventName,
         toolName: toolName ?? null,
@@ -345,9 +357,10 @@ export function handleCodexHook(context, input) {
         observed: inserted,
         duplicate: !inserted,
         event_key: eventKey,
-        session: sessionId ? nativeSessionIdentity("codex-desktop", sessionId) : null,
+        session: providerSessionId ? nativeSessionIdentity("codex-desktop", providerSessionId) : null,
+        ...(parentProviderSessionId ? { parent_session: nativeSessionIdentity("codex-desktop", parentProviderSessionId) } : {}),
         protocol_id: protocolId,
-        ...(sessionId && (flowPayload || stageStart || stageResume || workStart)
+        ...(providerSessionId && (flowPayload || stageStart || stageResume || workStart)
             ? {
                 hookSpecificOutput: {
                     hookEventName: "PreToolUse",
@@ -358,6 +371,24 @@ export function handleCodexHook(context, input) {
             : {})
     };
 }
+/** The hook protocol does not carry the immediate parent. Recover it only from this child's own native transcript. */
+function codexNativeParentId(payload, childId) {
+    const transcript = stringValue(payload.transcript_path);
+    if (!transcript || !path.isAbsolute(transcript))
+        return null;
+    try {
+        const firstLine = fs.readFileSync(transcript, "utf8").split("\n", 1)[0];
+        if (!firstLine)
+            return null;
+        const record = JSON.parse(firstLine);
+        return record.type === "session_meta" && record.payload?.id === childId && typeof record.payload.parent_thread_id === "string"
+            ? record.payload.parent_thread_id
+            : null;
+    }
+    catch {
+        return null;
+    }
+}
 /** Convert a zcode-acp Bash tool notification into the same trusted lifecycle receipt used by Codex hooks. */
 export function handleZcodeEvent(context, input) {
     const notification = parseJsonObject(input.stdin || "{}", "zcode ACP notification");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@deksden-com/dd-flow-cli",
-  "version": "0.9.0-beta.10",
+  "version": "0.9.0-beta.11",
   "description": "Mechanical runtime CLI for dd-flow workflows.",
   "type": "module",
   "bin": {