@deksden-com/dd-flow-cli 0.9.0-beta.103 → 0.9.0-beta.105

package/dist/services/work-registry.js

@@ -1,4 +1,4 @@
-import { managedLifecycleCommand } from "./lifecycle-invocations.js";
+import { bindLifecyclePacketAssignments, managedLifecycleCommand } from "./lifecycle-invocations.js";
 import { bindStageWork, currentStageWorkIds, stageWorkIds } from "./stage-work-graph.js";
 import { runtimeCommand } from "./runtime-command.js";
 import crypto from "node:crypto";
@@ -22,6 +22,8 @@ import { publicSessionIdentity } from "./session-identity.js";
 import { activateRecoveryWork, assertRecoveryHookCurrent, assertRunMutationAllowed, assertWorkSettlementAllowed, recoveryGuard, recoveryPromptForWork, settleRecoveryWork } from "./run-recovery.js";
 import { runControlDirective } from "./run-control.js";
 import { prepareError, prepareJsonFile } from "../cli/input-preparation.js";
+import { lifecycleRetryInstruction } from "../harness-runtime/lib/delegation-instructions.mjs";
+import { acceptedDecisionPrecedence } from "./stage-context.js";
 import { reviewEnvironmentAllowed, reviewExecutionCopyHash, reviewSourceHash, reviewSourcePaths } from "./review-copy.js";
 const workColumns = "work_id, project_id, run_id, parent_work_id, task, launch_policy, result_schema, payload_json, depends_on_json, status, result, created_at, started_at, updated_at, completed_at";
 export function ensureWorkRegistry(context) { context.db.exec("SELECT 1 FROM works LIMIT 1"); context.db.exec("SELECT 1 FROM work_sessions LIMIT 1"); }
@@ -62,6 +64,23 @@ export function assertStageLifecycleOwner(context, input) {
         if (row && completed && (index?.current_stage ?? index?.stage_runs.at(-1)?.stage) === input.stage)
             owner = context.db.get("SELECT ws.id, ws.work_id, ws.session_id, ws.hook_event_id FROM work_sessions ws JOIN works w ON w.work_id = ws.work_id WHERE w.project_id = ? AND w.run_id = ? AND w.parent_work_id IS NULL AND w.status = 'completed' AND ws.status = 'completed' AND ws.result_path = ? ORDER BY ws.created_at DESC LIMIT 1", [project.id, input.runId, path.join(row.run_root, completed.dir, "stage-report.json")]);
     }
+    if (!owner && input.operation === "stage_finish" && input.stage === "protocolize") {
+        const row = context.db.get("SELECT run_root, index_json FROM runs WHERE project_id = ? AND id = ?", [project.id, input.runId]);
+        const index = row ? JSON.parse(row.index_json) : null;
+        const completed = index?.stage_runs.find(entry => entry.stage === input.stage && entry.status === "done");
+        const root = row && completed ? path.join(row.run_root, completed.dir) : null;
+        const accepted = root && completed?.attempt && context.db.get("SELECT 1 FROM audit_events WHERE project_id = ? AND event_type = 'flow_run.stage_report' AND json_extract(payload_json, '$.run_id') = ? AND json_extract(payload_json, '$.stage') = ? AND json_extract(payload_json, '$.attempt') = ? AND json_extract(payload_json, '$.root') = ? LIMIT 1", [project.id, input.runId, input.stage, completed.attempt, root]);
+        if (accepted && completed?.data) {
+            owner = context.db.get(`SELECT ws.id, ws.work_id, ws.session_id, ws.hook_event_id FROM work_sessions ws
+           JOIN works w ON w.work_id = ws.work_id
+          WHERE w.project_id = ? AND w.run_id = ?
+            AND w.parent_work_id IS NULL AND ws.status = 'completed'
+            AND ws.result_path = ? ${scopedWork ? "AND w.work_id = ?" : ""}
+          ORDER BY ws.created_at DESC LIMIT 1`, scopedWork
+                ? [project.id, input.runId, path.join(root, completed.data), scopedWork.work_id]
+                : [project.id, input.runId, path.join(root, completed.data)]);
+        }
+    }
     if (!owner)
         throw new AppError("trusted_session_binding_required", "Stage lifecycle command has no running coordinator Work/Session binding", 1, { run_id: input.runId, stage: input.stage, ...(input.workId ? { work_id: input.workId } : {}) });
     const identity = claimStageLifecycleHookEvent(context, {
@@ -258,27 +277,29 @@ function publishReceiptFile(file, contents) {
 /** Rebuild prompt/context projections from a committed Work-start receipt. */
 export function materializePendingWorkStarts(context, projectId, runId) {
     const runHome = requireRunHome(requireRun(context, projectId, runId));
-    context.db.writeTransaction(() => {
-        const rows = context.db.all("SELECT ws.id, ws.work_id, ws.prompt_path, ws.start_receipt_json FROM work_sessions ws JOIN works w ON w.work_id = ws.work_id WHERE w.project_id = ? AND w.run_id = ? AND ws.status = 'running' AND ws.start_receipt_json IS NOT NULL", [projectId, runId]);
-        for (const row of rows) {
-            // The same coordinator Session can move on to a different stage packet.
-            // A start receipt is not authority to overwrite that later packet.
-            let receipt;
-            try {
-                receipt = JSON.parse(row.start_receipt_json);
-            }
-            catch {
-                throw new AppError("work_start_receipt_invalid", "Committed Work start receipt is not valid JSON", 1, { work_id: row.work_id });
-            }
-            const originalPromptPath = path.join(runHome, "works", row.work_id, ...(receipt.generation && receipt.generation > 0 ? ["starts", row.id] : []), "prompt.md");
-            if (path.resolve(row.prompt_path) !== path.resolve(originalPromptPath))
-                continue;
-            if (receipt.version !== 1 || typeof receipt.prompt !== "string" || typeof receipt.context !== "string" || receipt.prompt_sha256 !== sha256(receipt.prompt) || receipt.context_sha256 !== sha256(receipt.context))
-                throw new AppError("work_start_receipt_invalid", "Committed Work start receipt does not match its retained bytes", 1, { work_id: row.work_id });
-            publishStartReceiptFile(row.prompt_path, receipt.prompt, String(receipt.prompt_sha256));
-            publishStartReceiptFile(path.join(path.dirname(row.prompt_path), "context.json"), receipt.context, String(receipt.context_sha256));
+    const rows = context.db.all("SELECT ws.id, ws.work_id, ws.prompt_path, ws.start_receipt_json, ws.start_publication_status FROM work_sessions ws JOIN works w ON w.work_id = ws.work_id WHERE w.project_id = ? AND w.run_id = ? AND ws.status = 'running' AND ws.start_receipt_json IS NOT NULL AND (ws.start_publication_status IS NULL OR ws.start_publication_status != 'published')", [projectId, runId]);
+    for (const row of rows) {
+        // The same coordinator Session can move on to a different stage packet.
+        // A start receipt is not authority to overwrite that later packet.
+        let receipt;
+        try {
+            receipt = JSON.parse(row.start_receipt_json);
         }
-    });
+        catch {
+            throw new AppError("work_start_receipt_invalid", "Committed Work start receipt is not valid JSON", 1, { work_id: row.work_id });
+        }
+        const originalPromptPath = path.join(runHome, "works", row.work_id, ...(receipt.version === 2 || receipt.generation && receipt.generation > 0 ? ["starts", row.id] : []), "prompt.md");
+        if (path.resolve(row.prompt_path) !== path.resolve(originalPromptPath))
+            continue;
+        if (![1, 2].includes(Number(receipt.version)) || typeof receipt.prompt !== "string" || typeof receipt.context !== "string" || receipt.prompt_sha256 !== sha256(receipt.prompt) || receipt.context_sha256 !== sha256(receipt.context))
+            throw new AppError("work_start_receipt_invalid", "Committed Work start receipt does not match its retained bytes", 1, { work_id: row.work_id });
+        if (row.start_publication_status && context.db.writeTransaction(() => context.db.run("UPDATE work_sessions SET start_publication_status = 'publishing' WHERE id = ? AND status = 'running' AND prompt_path = ? AND start_receipt_json = ? AND start_publication_status IN ('pending','publishing')", [row.id, row.prompt_path, row.start_receipt_json]).changes) !== 1)
+            continue;
+        publishStartReceiptFile(row.prompt_path, receipt.prompt, String(receipt.prompt_sha256));
+        publishStartReceiptFile(path.join(path.dirname(row.prompt_path), "context.json"), receipt.context, String(receipt.context_sha256));
+        if (row.start_publication_status && context.db.writeTransaction(() => context.db.run("UPDATE work_sessions SET start_publication_status = 'published' WHERE id = ? AND status = 'running' AND prompt_path = ? AND start_receipt_json = ? AND start_publication_status = 'publishing'", [row.id, row.prompt_path, row.start_receipt_json]).changes) !== 1)
+            throw new AppError("work_start_projection_conflict", "Work start binding changed during packet publication", 1, { work_id: row.work_id });
+    }
 }
 function publishStartReceiptFile(file, contents, expectedHash) {
     const actual = receiptFileHash(file);
@@ -288,45 +309,72 @@ function publishStartReceiptFile(file, contents, expectedHash) {
         throw new AppError("work_start_projection_conflict", "Work start packet differs from its committed receipt; preserve it for recovery", 1, { path: file, expected_sha256: expectedHash, actual_sha256: actual });
     }
     fs.mkdirSync(path.dirname(file), { recursive: true });
-    publishReceiptFile(file, contents);
+    const temporary = `${file}.tmp-${crypto.randomUUID()}`;
+    try {
+        fs.writeFileSync(temporary, contents, { flag: "wx" });
+        const descriptor = fs.openSync(temporary, "r");
+        try {
+            fs.fsyncSync(descriptor);
+        }
+        finally {
+            fs.closeSync(descriptor);
+        }
+        try {
+            fs.linkSync(temporary, file);
+        }
+        catch (error) {
+            if (error.code !== "EEXIST")
+                throw error;
+            if (receiptFileHash(file) !== expectedHash) {
+                throw new AppError("work_start_projection_conflict", "Concurrent Work start publication differs from its committed receipt", 1, { path: file, expected_sha256: expectedHash, actual_sha256: receiptFileHash(file) });
+            }
+        }
+        const directory = fs.openSync(path.dirname(file), "r");
+        try {
+            fs.fsyncSync(directory);
+        }
+        finally {
+            fs.closeSync(directory);
+        }
+    }
+    finally {
+        fs.rmSync(temporary, { force: true });
+    }
 }
 /** Replay only a prepared publication whose exact receipt was committed in SQLite. */
-export function materializePendingWorkResults(context, projectId, runId) {
-    context.db.beginWriteTransaction();
-    try {
-        const rows = context.db.all(`SELECT w.work_id, w.result, w.status, ws.id, ws.result_path FROM works w JOIN work_sessions ws ON ws.work_id = w.work_id AND ws.status = w.status WHERE w.project_id = ? AND w.run_id = ? AND w.parent_work_id IS NOT NULL AND w.result IS NOT NULL AND w.status IN ('completed', 'failed', 'cancelled') AND ws.result_path IS NOT NULL`, [projectId, runId]);
-        for (const row of rows) {
-            const intentPath = receiptIntentPath(row.result_path, row.id);
-            if (!fs.existsSync(intentPath))
-                continue;
-            const intent = JSON.parse(fs.readFileSync(intentPath, "utf8"));
-            const digest = crypto.createHash("sha256").update(row.result).digest("hex");
-            if (intent.work_id !== row.work_id || intent.work_session_id !== row.id || intent.status !== row.status || intent.result_sha256 !== digest)
-                throw new AppError("work_result_publication_conflict", "Pending result publication does not identify the committed receipt", 1, { work_id: row.work_id, intent_path: intentPath });
-            const actual = receiptFileHash(row.result_path);
-            if (actual !== digest && actual !== intent.previous_sha256)
-                throw new AppError("work_result_artifact_drift", "Result changed after its publication was prepared; preserve it for diagnosis", 1, { work_id: row.work_id, actual_sha256: actual, expected_sha256: digest });
-            if (fs.existsSync(row.result_path)) {
-                const previous = fs.readFileSync(row.result_path);
-                if (!previous.equals(Buffer.from(row.result))) {
-                    const retained = `${row.result_path}.conflict-${crypto.createHash("sha256").update(previous).digest("hex")}`;
-                    try {
-                        fs.writeFileSync(retained, previous, { flag: "wx", flush: true });
-                    }
-                    catch (error) {
-                        if (error.code !== "EEXIST" || !fs.readFileSync(retained).equals(previous))
-                            throw error;
-                    }
+export function materializePendingWorkResults(context, projectId, runId, workId) {
+    const rows = context.db.all(`SELECT w.work_id, w.result, w.status, ws.id, ws.result_path, ws.result_receipt_json FROM works w JOIN work_sessions ws ON ws.work_id = w.work_id AND ws.status = w.status WHERE w.project_id = ? AND w.run_id = ? AND w.parent_work_id IS NOT NULL AND w.result IS NOT NULL AND w.status IN ('completed', 'failed', 'cancelled') AND ws.result_path IS NOT NULL AND (? IS NULL OR w.work_id = ?)`, [projectId, runId, workId ?? null, workId ?? null]);
+    for (const row of rows) {
+        const intentPath = receiptIntentPath(row.result_path, row.id);
+        const legacyIntent = fs.existsSync(intentPath) ? fs.readFileSync(intentPath, "utf8") : null;
+        if (!row.result_receipt_json && !legacyIntent)
+            continue;
+        const intent = JSON.parse(row.result_receipt_json ?? legacyIntent);
+        const digest = crypto.createHash("sha256").update(row.result).digest("hex");
+        if (intent.work_id !== row.work_id || intent.work_session_id !== row.id || intent.status !== row.status || intent.result_sha256 !== digest)
+            throw new AppError("work_result_publication_conflict", "Pending result publication does not identify the committed receipt", 1, { work_id: row.work_id, intent_path: intentPath });
+        if (legacyIntent && row.result_receipt_json && legacyIntent !== row.result_receipt_json)
+            throw new AppError("work_result_publication_conflict", "File intent differs from the committed result receipt", 1, { work_id: row.work_id, intent_path: intentPath });
+        const actual = receiptFileHash(row.result_path);
+        if (actual !== digest && actual !== intent.previous_sha256)
+            throw new AppError("work_result_artifact_drift", "Result changed after its publication was prepared; preserve it for diagnosis", 1, { work_id: row.work_id, actual_sha256: actual, expected_sha256: digest });
+        if (actual !== digest && fs.existsSync(row.result_path)) {
+            const previous = fs.readFileSync(row.result_path);
+            if (!previous.equals(Buffer.from(row.result))) {
+                const retained = `${row.result_path}.conflict-${crypto.createHash("sha256").update(previous).digest("hex")}`;
+                try {
+                    fs.writeFileSync(retained, previous, { flag: "wx", flush: true });
+                }
+                catch (error) {
+                    if (error.code !== "EEXIST" || !fs.readFileSync(retained).equals(previous))
+                        throw error;
                 }
             }
+        }
+        if (actual !== digest)
             publishReceiptFile(row.result_path, row.result);
+        if (legacyIntent)
             fs.unlinkSync(intentPath);
-        }
-        context.db.exec("COMMIT");
-    }
-    catch (error) {
-        context.db.exec("ROLLBACK");
-        throw error;
     }
 }
 export function mutateWorkDeps(context, input) {
@@ -452,20 +500,14 @@ export function bindRunningWorkSession(context, input) {
                 throw new AppError("handoff_session_mismatch", "The active Work is already bound to a different Session", 1, { work_id: work.work_id });
             const now = context.now();
             const id = `WS-${crypto.randomUUID()}`;
-            context.db.beginWriteTransaction();
-            try {
+            context.db.writeTransaction(() => {
                 context.db.run("UPDATE work_sessions SET status = 'completed', completed_at = ?, updated_at = ? WHERE id = ?", [now, now, active.id]);
                 const stillRunning = context.db.get("SELECT 1 FROM work_sessions WHERE session_id = ? AND status = 'running' LIMIT 1", [active.session_id]);
                 if (!stillRunning)
                     context.db.run("UPDATE sessions SET status = 'idle', updated_at = ? WHERE project_id = ? AND session_id = ?", [now, work.project_id, active.session_id]);
                 bindSession(context, work, run, identity, now);
                 context.db.run("INSERT INTO work_sessions (id, work_id, session_id, hook_event_id, status, prompt_path, result_path, created_at, updated_at, completed_at) VALUES (?, ?, ?, ?, 'running', ?, ?, ?, ?, NULL)", [id, work.work_id, identity.sessionId, input.hookEventId, input.promptPath, input.resultPath ?? null, now, now]);
-                context.db.exec("COMMIT");
-            }
-            catch (error) {
-                context.db.exec("ROLLBACK");
-                throw error;
-            }
+            });
             refreshRunWorkProjection(context, work.project_id, work.run_id);
             return { work_session_id: id, session_id: identity.sessionId, handed_off: true };
         }
@@ -474,16 +516,10 @@ export function bindRunningWorkSession(context, input) {
     }
     const now = context.now();
     const id = `WS-${crypto.randomUUID()}`;
-    context.db.beginWriteTransaction();
-    try {
+    context.db.writeTransaction(() => {
         bindSession(context, work, run, identity, now);
         context.db.run("INSERT INTO work_sessions (id, work_id, session_id, hook_event_id, status, prompt_path, result_path, created_at, updated_at, completed_at) VALUES (?, ?, ?, ?, 'running', ?, ?, ?, ?, NULL)", [id, work.work_id, identity.sessionId, input.hookEventId, input.promptPath, input.resultPath ?? null, now, now]);
-        context.db.exec("COMMIT");
-    }
-    catch (error) {
-        context.db.exec("ROLLBACK");
-        throw error;
-    }
+    });
     refreshRunWorkProjection(context, work.project_id, work.run_id);
     return { work_session_id: id, session_id: identity.sessionId };
 }
@@ -499,7 +535,7 @@ export function bindStageCoordinatorWork(context, input) {
     if (profile?.settings.execution) {
         if (!profile.agent_profiles)
             throw new AppError("execution_profile_not_frozen", "Stage handoff requires frozen RUN profiles", 1);
-        sessionMode = resolveStageTransition({ ddFlowHome: context.ddFlowHome, policy: profile.settings.execution, profiles: profile.agent_profiles, ...(previous?.current_stage ? { fromStage: previous.current_stage } : {}), stage: input.stage, stageSessionMode: sessionMode, mergeMode: profile.settings.merge_mode }).session_mode;
+        sessionMode = resolveStageTransition({ ddFlowHome: context.ddFlowHome, policy: profile.settings.execution, profiles: profile.agent_profiles, projectRoot: run.project_root, workspaceRoot: run.workspace_root, ...(previous?.current_stage ? { fromStage: previous.current_stage } : {}), stage: input.stage, stageSessionMode: sessionMode, mergeMode: profile.settings.merge_mode }).session_mode;
     }
     const identity = hookSessionIdentity(context, work.project_id, input.hookEventId);
     if (previous?.current_stage && previous.current_stage !== input.stage && sessionMode === "new_session" && previous.session_id === identity.sessionId)
@@ -530,14 +566,26 @@ export function startBoundWork(context, work, run, claimIdentity, hookEventId, s
     const linkId = `WS-${crypto.randomUUID()}`;
     // Recovery can reopen the same Work without retiring its historical packet.
     // Give each new-generation start its own immutable publication destination.
-    const packetDirectory = generation > 0 ? path.join(directory, "starts", linkId) : directory;
+    const packetDirectory = path.join(directory, "starts", linkId);
     const promptPath = path.join(packetDirectory, "prompt.md"), resultPath = path.join(directory, "result.json");
     // The first reviewer freezes shared inputs in the same transaction as its claim.
     const readOnly = parsePayload(work)?.read_only === true;
     const workerRun = readOnly && context.env.DD_FLOW_READ_ONLY_WORKSPACE
         ? { ...run, workspace_root: path.resolve(context.env.DD_FLOW_READ_ONLY_WORKSPACE) }
         : run;
-    let fingerprint;
+    const indexBeforePrepare = context.db.get("SELECT index_json FROM runs WHERE project_id = ? AND id = ?", [work.project_id, work.run_id])?.index_json;
+    const preparedReviewInput = readOnly ? assertSharedReviewInput(context, work, run, generation) : null;
+    const reviewPaths = preparedReviewInput?.run_inputs.filter(item => item.root === "workspace").map(item => item.path) ?? [];
+    const preparedCopy = readOnly && context.env.DD_FLOW_READ_ONLY_WORKSPACE ? prepareBoundReviewCopy(context, work, run, context.env.DD_FLOW_READ_ONLY_WORKSPACE, reviewPaths) : null;
+    const fingerprint = readOnly ? preparedReviewInput?.source_sha256 ?? preparedReviewInput?.workspace_fingerprint ?? legacyReviewFingerprint(work, run) ?? workspaceFingerprint(run.workspace_root) : undefined;
+    const preparedDependencies = parseDependencies(work).map(dependency => context.db.get("SELECT work_id, result FROM works WHERE work_id = ?", [dependency])).filter(Boolean);
+    const preparedRecovery = recoveryPromptForWork(context, work.work_id);
+    const retryPending = fs.existsSync(path.join(directory, ".retry.json"));
+    const finishMarker = `DD_FLOW_FINISH_${crypto.randomUUID()}`;
+    const failMarker = `DD_FLOW_FAIL_${crypto.randomUUID()}`;
+    let promptTemplate = renderWorkerPrompt(context, work, workerRun, preparedDependencies, { finish: finishMarker, fail: failMarker });
+    if (preparedRecovery)
+        promptTemplate = `${recoveryPrompt(preparedRecovery)}\n\n${promptTemplate}`;
     let binding;
     try {
         binding = context.db.writeTransaction(() => {
@@ -547,9 +595,11 @@ export function startBoundWork(context, work, run, claimIdentity, hookEventId, s
                 throw new AppError("conflict", "Work was claimed concurrently", 1, { work_id: current.work_id, status: current.status });
             if (Object.keys(current).some(key => current[key] !== work[key]))
                 throw new AppError("work_not_ready", "Work inputs changed while preparing its start packet", 2, { work_id: current.work_id });
+            if (context.db.get("SELECT index_json FROM runs WHERE project_id = ? AND id = ?", [work.project_id, work.run_id])?.index_json !== indexBeforePrepare)
+                throw new AppError("work_not_ready", "RUN revision changed while preparing the Work start packet", 2, { work_id: current.work_id });
             if (!isReady(context, current))
                 throw new AppError("work_not_ready", "Work dependencies are not ready", 2, { work_id: current.work_id, blockers: readinessBlockers(context, current) });
-            if (fs.existsSync(path.join(directory, ".retry.json")))
+            if (retryPending)
                 throw new AppError("work_retry_incomplete", "Complete the interrupted Work retry before starting its next attempt", 1, { work_id: work.work_id });
             const identity = claimIdentity();
             assertRecoveryHookCurrent(context, current.project_id, current.run_id, identity);
@@ -557,27 +607,34 @@ export function startBoundWork(context, work, run, claimIdentity, hookEventId, s
                 && context.db.get("SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = 'work_launches'")
                 && context.db.get("SELECT 1 FROM work_launches WHERE work_id = ? AND status IN ('launching','start_requested')", [current.work_id]))
                 throw new AppError("read_only_workspace_unbound", "External reviewer did not inherit its qualified execution workspace", 1, { work_id: current.work_id });
-            const reviewInput = readOnly ? assertSharedReviewInput(context, current, run, generation) : null;
-            const reviewPaths = reviewInput?.run_inputs.filter(item => item.root === "workspace").map(item => item.path) ?? [];
-            const reviewCopy = readOnly && context.env.DD_FLOW_READ_ONLY_WORKSPACE ? boundReviewCopy(context, current, run, identity, context.env.DD_FLOW_READ_ONLY_WORKSPACE, reviewPaths) : null;
+            if (preparedCopy) {
+                const launch = context.db.get("SELECT provider_session_id, profile_json FROM work_launches WHERE work_id = ? AND status IN ('launching','start_requested')", [current.work_id]);
+                if (!launch || launch.provider_session_id !== identity.providerSessionId || launch.provider_session_id !== preparedCopy.providerSessionId || launch.profile_json !== preparedCopy.profileJson)
+                    throw new AppError("read_only_workspace_unbound", "Read-only execution copy belongs to another physical Session or launch revision", 1, { work_id: current.work_id });
+            }
+            const reviewInput = preparedReviewInput;
+            const reviewCopy = preparedCopy?.copy ?? null;
+            if (reviewInput)
+                assertReviewSiblingBaseline(context, current, reviewInput, generation);
             const dependencyResults = parseDependencies(current).map(dependency => context.db.get("SELECT work_id, result FROM works WHERE work_id = ?", [dependency])).filter(Boolean);
             const recovery = recoveryPromptForWork(context, current.work_id);
-            let prompt = renderWorkerPrompt(context, current, workerRun, dependencyResults);
-            if (recovery)
-                prompt = `${recoveryPrompt(recovery)}\n\n${prompt}`;
-            if (readOnly)
-                fingerprint = reviewInput?.source_sha256 ?? reviewInput?.workspace_fingerprint ?? legacyReviewFingerprint(current, run) ?? workspaceFingerprint(run.workspace_root);
+            if (JSON.stringify(dependencyResults) !== JSON.stringify(preparedDependencies) || JSON.stringify(recovery) !== JSON.stringify(preparedRecovery))
+                throw new AppError("work_not_ready", "Work dependencies or recovery segment changed while preparing its packet", 2, { work_id: current.work_id });
+            const assignments = new Set();
+            const commands = workerLifecycleCommands({ ...context, captureLifecycleAssignment: (id) => assignments.add(id) }, current, workerRun);
+            const prompt = promptTemplate.replace(finishMarker, commands.finish).replace(failMarker, commands.fail);
+            bindLifecyclePacketAssignments(context, prompt, assignments);
             const workContext = { schema_id: "dd-flow/work-context@1", run_id: current.run_id, work_id: current.work_id, parent_work_id: current.parent_work_id, project_root: run.project_root, workspace_root: workerRun.workspace_root, run_root: requireRunHome(run), depends_on: parseDependencies(current), launch_policy: current.launch_policy, result_schema: current.result_schema, read_only: readOnly, ...(recovery ? { recovery } : {}), ...(readOnly ? { workspace_fingerprint: fingerprint, ...(reviewInput ? { review_input: reviewInput } : {}), ...(reviewCopy ? { review_copy: reviewCopy } : {}) } : {}) };
             const contextBytes = `${JSON.stringify(workContext, null, 2)}\n`;
             const response = { ok: true, work_id: current.work_id, work_session_id: linkId, worker_prompt_markdown: prompt, prompt_path: promptPath, ...(recovery ? { recovery } : {}), session_binding: { source: "PreToolUse", session: { harness_id: identity.harness, session_id: identity.nativeSessionId } } };
-            const receipt = JSON.stringify({ version: 1, prompt, context: contextBytes, prompt_sha256: sha256(prompt), context_sha256: sha256(contextBytes), response, response_sha256: sha256(JSON.stringify(response)), generation, invocation_id: context.env.DD_FLOW_CURRENT_INVOCATION ?? null });
+            const receipt = JSON.stringify({ version: 2, prompt, context: contextBytes, prompt_sha256: sha256(prompt), context_sha256: sha256(contextBytes), response, response_sha256: sha256(JSON.stringify(response)), generation, invocation_id: context.env.DD_FLOW_CURRENT_INVOCATION ?? null });
             const now = context.now();
             bindSession(context, current, run, identity, now);
             if (current.parent_work_id && current.launch_policy === "reuse_allowed")
                 context.db.run("UPDATE work_sessions SET status = 'completed', completed_at = ?, updated_at = ? WHERE session_id = ? AND status = 'running' AND work_id <> ?", [now, now, identity.sessionId, current.work_id]);
             if (context.db.run("UPDATE works SET status = 'running', started_at = COALESCE(started_at, ?), updated_at = ? WHERE work_id = ? AND status = 'created'", [now, now, current.work_id]).changes !== 1)
                 throw new AppError("conflict", "Work was claimed concurrently", 1, { work_id: current.work_id });
-            context.db.run("INSERT INTO work_sessions (id, work_id, session_id, hook_event_id, status, prompt_path, result_path, start_receipt_json, created_at, updated_at, completed_at) VALUES (?, ?, ?, ?, 'running', ?, ?, ?, ?, ?, NULL)", [linkId, current.work_id, identity.sessionId, hookEventId, promptPath, resultPath, receipt, now, now]);
+            context.db.run("INSERT INTO work_sessions (id, work_id, session_id, hook_event_id, status, prompt_path, result_path, start_receipt_json, start_publication_status, created_at, updated_at, completed_at) VALUES (?, ?, ?, ?, 'running', ?, ?, ?, 'pending', ?, ?, NULL)", [linkId, current.work_id, identity.sessionId, hookEventId, promptPath, resultPath, receipt, now, now]);
             if (stage)
                 context.db.run("UPDATE sessions SET current_stage = ?, updated_at = ? WHERE project_id = ? AND session_id = ?", [stage, now, current.project_id, identity.sessionId]);
             if (recovery)
@@ -607,6 +664,12 @@ export function startBoundWork(context, work, run, claimIdentity, hookEventId, s
         throw error;
     }
     try {
+        if (readOnly) {
+            const committedWork = requireWork(context, work.work_id);
+            assertSharedReviewInput(context, committedWork, run, generation);
+            const link = context.db.get("SELECT id, work_id, session_id, hook_event_id, status, prompt_path, result_path, created_at, completed_at FROM work_sessions WHERE id = ?", [linkId]);
+            assertReviewCopyUnchanged(context, committedWork, run, link);
+        }
         materializePendingWorkStarts(context, work.project_id, work.run_id);
         refreshRunWorkProjection(context, work.project_id, work.run_id);
     }
@@ -665,6 +728,9 @@ export function prepareWorkSettlement(context, id, status, result) {
     const link = context.db.get("SELECT id, work_id, session_id, hook_event_id, status, prompt_path, result_path, created_at, completed_at FROM work_sessions WHERE work_id = ? AND status = 'running' ORDER BY created_at DESC LIMIT 1", [work.work_id]);
     if (work.status === "running" && !link)
         throw new AppError("runtime_missing", "Running Work has no open Work/Session link", 1, { work_id: work.work_id });
+    const startPublication = link ? context.db.get("SELECT start_publication_status FROM work_sessions WHERE id = ?", [link.id])?.start_publication_status : null;
+    if (startPublication && startPublication !== "published")
+        throw new AppError("work_start_publication_pending", "Finish publishing this Work's committed start packet before settlement", 1, { work_id: work.work_id, effect: "no_effect" });
     return { work, run, link };
 }
 export function prepareWorkRetry(context, id, reason) {
@@ -716,54 +782,52 @@ export function prepareWorkRetry(context, id, reason) {
     return { work, run, directory, journal, pending, prepared, archive };
 }
 export function retryWork(context, id, reason) {
-    const { work, run, directory, journal } = prepareWorkRetry(context, id, reason);
-    let archive = "";
-    context.db.beginWriteTransaction();
-    try {
-        const { work: current, pending, prepared, archive: targetArchive } = prepareWorkRetry(context, work.work_id, reason);
-        archive = targetArchive;
-        if (current.status === "failed") {
-            if (prepared.result_sha256 !== (current.result === null ? null : crypto.createHash("sha256").update(current.result).digest("hex")))
-                throw new AppError("work_retry_conflict", "Failed Work receipt changed during retry", 1);
-            fs.mkdirSync(archive, { recursive: true });
-            if (!pending)
-                publishReceiptFile(journal, JSON.stringify(prepared));
-            const receipt = path.join(archive, "accepted-receipt.json");
-            const receiptBytes = JSON.stringify({ work_id: current.work_id, status: current.status, result: current.result, result_sha256: prepared.result_sha256 });
-            if (fs.existsSync(receipt) && fs.readFileSync(receipt, "utf8") !== receiptBytes)
-                throw new AppError("work_retry_conflict", "Archived receipt differs from failed Work", 1);
-            if (!fs.existsSync(receipt))
-                publishReceiptFile(receipt, receiptBytes);
-            for (const file of prepared.entries) {
-                const source = path.join(directory, file), target = path.join(archive, file);
-                if (fs.existsSync(source)) {
-                    if (fs.existsSync(target))
-                        throw new AppError("archive_conflict", "Both live and archived Work artifact exist; preserve both", 1, { source, target });
-                    fs.renameSync(source, target);
-                }
-                else if (!fs.existsSync(target))
-                    throw new AppError("archive_artifact_missing", "Work artifact is absent from both retry locations", 1, { source, target });
+    const pending = requireWork(context, id);
+    // A committed failed result must be published (or diagnosed) before its
+    // live path can be archived for the next attempt.
+    materializePendingWorkResults(context, pending.project_id, pending.run_id, pending.work_id);
+    const { work, run, directory, journal, pending: retainedJournal, prepared, archive } = prepareWorkRetry(context, id, reason);
+    if (work.status === "failed") {
+        // The durable journal and archive are projections of the failed SQL
+        // receipt. They must finish before the short transaction opens a new
+        // attempt; a crash at any point is replayed from the same journal.
+        if (!retainedJournal)
+            publishStartReceiptFile(journal, JSON.stringify(prepared), sha256(JSON.stringify(prepared)));
+        fs.mkdirSync(archive, { recursive: true });
+        const receipt = path.join(archive, "accepted-receipt.json");
+        const receiptBytes = JSON.stringify({ work_id: work.work_id, status: work.status, result: work.result, result_sha256: prepared.result_sha256 });
+        publishStartReceiptFile(receipt, receiptBytes, sha256(receiptBytes));
+        for (const file of prepared.entries) {
+            const source = path.join(directory, file), target = path.join(archive, file);
+            if (fs.existsSync(source)) {
+                if (fs.existsSync(target))
+                    throw new AppError("archive_conflict", "Both live and archived Work artifact exist; preserve both", 1, { source, target });
+                fs.renameSync(source, target);
             }
-            for (const folder of [archive, directory]) {
-                const descriptor = fs.openSync(folder, "r");
-                try {
-                    fs.fsyncSync(descriptor);
-                }
-                finally {
-                    fs.closeSync(descriptor);
-                }
+            else if (!fs.existsSync(target))
+                throw new AppError("archive_artifact_missing", "Work artifact is absent from both retry locations", 1, { source, target });
+        }
+        for (const folder of [archive, directory]) {
+            const descriptor = fs.openSync(folder, "r");
+            try {
+                fs.fsyncSync(descriptor);
+            }
+            finally {
+                fs.closeSync(descriptor);
             }
+        }
+        context.db.writeTransaction(() => {
+            const current = requireWork(context, work.work_id);
+            assertRunMutationAllowed(context, current.project_id, current.run_id);
+            if (current.status !== "failed" || current.result !== work.result || current.updated_at !== work.updated_at)
+                throw new AppError("work_retry_conflict", "Failed Work receipt changed during retry", 1);
             for (const column of ["prompt_path", "result_path"]) {
                 const file = column === "prompt_path" ? "prompt.md" : "result.json";
                 context.db.run(`UPDATE work_sessions SET ${column} = ? WHERE work_id = ? AND ${column} = ?`, [path.join(archive, file), work.work_id, path.join(directory, file)]);
             }
-            context.db.run("UPDATE works SET status = 'created', result = NULL, started_at = NULL, completed_at = NULL, updated_at = ? WHERE work_id = ? AND status = 'failed'", [context.now(), work.work_id]);
-        }
-        context.db.exec("COMMIT");
-    }
-    catch (error) {
-        context.db.exec("ROLLBACK");
-        throw error;
+            if (context.db.run("UPDATE works SET status = 'created', result = NULL, started_at = NULL, completed_at = NULL, updated_at = ? WHERE work_id = ? AND status = 'failed'", [context.now(), work.work_id]).changes !== 1)
+                throw new AppError("work_retry_conflict", "Failed Work changed during retry", 1);
+        });
     }
     fs.rmSync(journal, { force: true });
     refreshRunWorkProjection(context, work.project_id, work.run_id);
@@ -786,11 +850,11 @@ function reviewInputPath(root, relative) {
     }
     return resolved;
 }
-function boundReviewCopy(context, work, run, identity, requested, reviewPaths) {
+function prepareBoundReviewCopy(context, work, run, requested, reviewPaths) {
     const launch = context.db.get("SELECT provider_session_id, profile_json FROM work_launches WHERE work_id = ? AND status IN ('launching','start_requested')", [work.work_id]);
     const metadata = launch ? JSON.parse(launch.profile_json) : null;
     const copy = metadata?.review_copy;
-    if (!copy?.root || !copy.sha256 || !copy.source_sha256 || launch?.provider_session_id !== identity.providerSessionId)
+    if (!copy?.root || !copy.sha256 || !copy.source_sha256 || !launch?.provider_session_id)
         throw new AppError("read_only_workspace_unbound", "Read-only execution copy has no matching trusted launch", 1, { work_id: work.work_id });
     const expected = reviewInputPath(requireRunHome(run), copy.root);
     if (path.resolve(requested) !== expected)
@@ -801,7 +865,7 @@ function boundReviewCopy(context, work, run, identity, requested, reviewPaths) {
     const actual = reviewExecutionCopyHash(expected, run.workspace_root, true, reviewPaths, base);
     if (actual !== copy.sha256)
         throw new AppError("read_only_input_changed", "Read-only execution copy changed before Work start", 2, { work_id: work.work_id, expected: copy.sha256, current: actual });
-    return { root: copy.root, sha256: copy.sha256, source_sha256: copy.source_sha256 };
+    return { copy: { root: copy.root, sha256: copy.sha256, source_sha256: copy.source_sha256 }, providerSessionId: launch.provider_session_id, profileJson: launch.profile_json };
 }
 function assertReviewCopyUnchanged(context, work, run, link) {
     if (!link)
@@ -938,7 +1002,11 @@ function assertSharedReviewInput(context, work, run, generation = recoveryGuard(
         throw new AppError("review_input_invalid", "Required review input is excluded from external review", 1, { work_id: work.work_id });
     const selectedSource = value.read_only_input.version === 3 ? reviewSourceHash(run.workspace_root, reviewPaths, base) : null;
     const current = { schema_id: value.read_only_input.version === 3 ? "dd-flow/review-input@3" : "dd-flow/review-input@2", parent_work_id: work.parent_work_id, kind: String(kind), cycle: kind === "code-review" ? String(payload?.review_cycle) : "initial", generation, workspace_fingerprint: selectedSource ?? workspaceFingerprint(run.workspace_root), ...(selectedSource ? { source_policy: "review-inputs@1", source_sha256: selectedSource } : {}), run_inputs: runInputs };
-    const committed = context.db.all("SELECT ws.start_receipt_json FROM work_sessions ws JOIN works w ON w.work_id = ws.work_id WHERE w.project_id = ? AND w.run_id = ? AND w.parent_work_id = ? AND json_extract(w.payload_json, '$.kind') = ? AND ws.start_receipt_json IS NOT NULL ORDER BY ws.created_at, ws.id", [work.project_id, work.run_id, work.parent_work_id, kind]);
+    assertReviewSiblingBaseline(context, work, current, generation);
+    return current;
+}
+function assertReviewSiblingBaseline(context, work, current, generation) {
+    const committed = context.db.all("SELECT ws.start_receipt_json FROM work_sessions ws JOIN works w ON w.work_id = ws.work_id WHERE w.project_id = ? AND w.run_id = ? AND w.parent_work_id = ? AND json_extract(w.payload_json, '$.kind') = ? AND ws.start_receipt_json IS NOT NULL ORDER BY ws.created_at, ws.id", [work.project_id, work.run_id, work.parent_work_id, current.kind]);
     for (const row of committed) {
         const receipt = JSON.parse(row.start_receipt_json);
         if (!receipt.context)
@@ -952,7 +1020,6 @@ function assertSharedReviewInput(context, work, run, generation = recoveryGuard(
             throw new AppError("read_only_input_changed", "Reviewer inputs differ from the first committed review start", 2, { work_id: work.work_id, baseline: prior, current });
         break;
     }
-    return current;
 }
 async function settle(context, id, status, result, progress, retry) {
     const { work, run, link } = prepareWorkSettlement(context, id, status, result);
@@ -998,28 +1065,28 @@ async function settle(context, id, status, result, progress, retry) {
                 throw new AppError("work_checks_failed", "Work remains running because required checks failed", 2, { work_id: id, failures: failed, all_receipts: receipts });
         }
     }
+    // Shared-input and workspace fingerprint checks read files and may traverse
+    // the project tree. Keep them before the SQLite writer reservation.
+    assertReadOnlyInput();
+    const resultReceipt = link?.result_path && work.parent_work_id !== null
+        ? JSON.stringify({ work_id: work.work_id, work_session_id: link.id, status, result_sha256: sha256(result), previous_sha256: receiptFileHash(link.result_path) })
+        : null;
     const now = context.now();
-    context.db.beginWriteTransaction();
-    try {
-        assertReadOnlyInput();
+    context.db.writeTransaction(() => {
         assertWorkSettlementAllowed(context, work.project_id, work.run_id, work.work_id);
         if (link && !context.db.get("SELECT 1 FROM work_sessions WHERE id = ? AND status = 'running'", [link.id]))
             throw new AppError("work_generation_stale", "Work Session was interrupted or superseded while checks ran", 1, { work_id: id });
-        if (link?.result_path && work.parent_work_id !== null)
-            publishReceiptFile(receiptIntentPath(link.result_path, link.id), JSON.stringify({ work_id: work.work_id, work_session_id: link.id, status, result_sha256: crypto.createHash("sha256").update(result).digest("hex"), previous_sha256: receiptFileHash(link.result_path) }));
-        context.db.run("UPDATE works SET status = ?, result = ?, completed_at = ?, updated_at = ? WHERE work_id = ?", [status, result, now, now, id]);
+        if (link && context.db.get("SELECT start_publication_status FROM work_sessions WHERE id = ?", [link.id])?.start_publication_status && !context.db.get("SELECT 1 FROM work_sessions WHERE id = ? AND start_publication_status = 'published'", [link.id]))
+            throw new AppError("work_start_publication_pending", "Finish publishing this Work's committed start packet before settlement", 1, { work_id: id, effect: "no_effect" });
+        if (context.db.run("UPDATE works SET status = ?, result = ?, completed_at = ?, updated_at = ? WHERE work_id = ? AND status = ? AND updated_at = ?", [status, result, now, now, id, work.status, work.updated_at]).changes !== 1)
+            throw new AppError("work_generation_stale", "Work changed while its result and review inputs were prepared", 1, { work_id: id });
         if (link) {
-            context.db.run("UPDATE work_sessions SET status = ?, completed_at = ?, updated_at = ? WHERE id = ?", [status, now, now, link.id]);
+            context.db.run("UPDATE work_sessions SET status = ?, result_receipt_json = ?, completed_at = ?, updated_at = ? WHERE id = ?", [status, resultReceipt, now, now, link.id]);
             const stillRunning = context.db.get("SELECT 1 FROM work_sessions WHERE session_id = ? AND status = 'running' LIMIT 1", [link.session_id]);
             if (!stillRunning)
                 context.db.run("UPDATE sessions SET status = 'idle', updated_at = ? WHERE project_id = ? AND session_id = ?", [now, work.project_id, link.session_id]);
         }
-        context.db.exec("COMMIT");
-    }
-    catch (error) {
-        context.db.exec("ROLLBACK");
-        throw error;
-    }
+    });
     materializePendingWorkResults(context, work.project_id, work.run_id);
     settleRecoveryWork(context, work.work_id, status);
     refreshRunWorkProjection(context, work.project_id, work.run_id);
@@ -1072,7 +1139,7 @@ function bindSession(context, work, run, identity, now) {
         throw new AppError("session_parent_conflict", "Observed Session already has a different immutable parent", 1, { work_id: work.work_id, ...identityDetails(existing.session_id, existing.parent_session_id), conflicting_internal_parent_session_key: parentSession });
     if (existing?.provider_parent_session_id && providerParentSession && existing.provider_parent_session_id !== providerParentSession)
         throw new AppError("provider_session_parent_conflict", "Observed provider Session already has a different immutable provider parent", 1, { work_id: work.work_id, ...identityDetails(existing.session_id, existing.parent_session_id), conflicting_internal_provider_parent_session_key: providerParentSession, conflicting_native_parent_session_id: context.db.get("SELECT provider_session_id FROM sessions WHERE project_id = ? AND session_id = ?", [work.project_id, providerParentSession])?.provider_session_id ?? null });
-    context.db.run(`INSERT INTO sessions (session_id, project_id, harness, provider_session_id, provider_parent_session_id, agent_id, parent_session_id, provider, model, reasoning, mode, agent_type, project_root, flow_kind, status, run_id, protocol_id, worker_id, workspace_path, continuation_policy, current_stage, next_action, last_action_hash, continuation_count, stop_reason, transcript_path, cwd, metadata_json, coverage_units_json, created_at, updated_at, stopped_at) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 'vnext', 'active', ?, NULL, ?, ?, 'go_router', 'work', NULL, NULL, 0, NULL, ?, ?, '{}', '[]', ?, ?, NULL) ON CONFLICT(session_id, project_id) DO UPDATE SET harness = excluded.harness, provider_session_id = COALESCE(excluded.provider_session_id, provider_session_id), provider_parent_session_id = COALESCE(excluded.provider_parent_session_id, provider_parent_session_id), agent_id = COALESCE(excluded.agent_id, agent_id), parent_session_id = COALESCE(excluded.parent_session_id, parent_session_id), provider = COALESCE(excluded.provider, provider), model = COALESCE(excluded.model, model), reasoning = COALESCE(excluded.reasoning, reasoning), mode = COALESCE(excluded.mode, mode), agent_type = COALESCE(excluded.agent_type, agent_type), flow_kind = excluded.flow_kind, run_id = excluded.run_id, worker_id = excluded.worker_id, workspace_path = excluded.workspace_path, transcript_path = COALESCE(excluded.transcript_path, transcript_path), cwd = excluded.cwd, updated_at = excluded.updated_at`, [identity.sessionId, work.project_id, identity.harness, identity.providerSessionId, providerParentSession, identity.agentId, existing?.parent_session_id ?? (parentSession === identity.sessionId ? null : parentSession), identity.provider, identity.model, identity.reasoning, identity.mode, identity.agentType, run.project_root, work.run_id, work.work_id, run.workspace_root, identity.transcriptPath, run.workspace_root, now, now]);
+    context.db.run(`INSERT INTO sessions (session_id, project_id, harness, provider_session_id, provider_parent_session_id, agent_id, parent_session_id, provider, model, reasoning, mode, agent_type, project_root, flow_kind, status, run_id, protocol_id, worker_id, workspace_path, continuation_policy, current_stage, next_action, last_action_hash, continuation_count, stop_reason, transcript_path, cwd, metadata_json, coverage_units_json, created_at, updated_at, stopped_at) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 'vnext', 'active', ?, NULL, ?, ?, 'go_router', 'work', NULL, NULL, 0, NULL, ?, ?, '{}', '[]', ?, ?, NULL) ON CONFLICT(session_id, project_id) DO UPDATE SET harness = excluded.harness, provider_session_id = COALESCE(excluded.provider_session_id, provider_session_id), provider_parent_session_id = COALESCE(excluded.provider_parent_session_id, provider_parent_session_id), agent_id = COALESCE(excluded.agent_id, agent_id), parent_session_id = COALESCE(excluded.parent_session_id, parent_session_id), provider = COALESCE(excluded.provider, provider), model = COALESCE(excluded.model, model), reasoning = COALESCE(excluded.reasoning, reasoning), mode = COALESCE(excluded.mode, mode), agent_type = COALESCE(excluded.agent_type, agent_type), flow_kind = excluded.flow_kind, run_id = excluded.run_id, worker_id = excluded.worker_id, workspace_path = excluded.workspace_path, transcript_path = COALESCE(excluded.transcript_path, transcript_path), cwd = COALESCE(excluded.cwd, sessions.cwd), updated_at = excluded.updated_at`, [identity.sessionId, work.project_id, identity.harness, identity.providerSessionId, providerParentSession, identity.agentId, existing?.parent_session_id ?? (parentSession === identity.sessionId ? null : parentSession), identity.provider, identity.model, identity.reasoning, identity.mode, identity.agentType, run.project_root, work.run_id, work.work_id, run.workspace_root, identity.transcriptPath, identity.cwd, now, now]);
     reactivateBoundSession(context, work.project_id, identity.sessionId, now);
 }
 /** Register the trusted physical Session before a paused Work moves to it. */
@@ -1091,7 +1158,7 @@ export function prepareWorkResult(context, id, result) {
         validateWorkResult(work, result, run.project_root, run.workspace_root, requireRunHome(run), run.id, link?.result_path ?? null);
     }
     catch (error) {
-        prepareError(error, { work_id: id });
+        prepareError(error, { work_id: id, input_sha256: sha256(result) });
     }
 }
 function validateWorkResult(work, result, projectRoot, workspaceRoot, runHome, runId, resultPath) {
@@ -1164,13 +1231,25 @@ export function validateReviewResolutions(workId, assigned, resolutions) {
     if (missing.length || unexpected.length || duplicate)
         throw new AppError("review_repair_incomplete", "Review repair must include exactly one resolution for each assigned finding reference", 2, { work_id: workId, missing, unexpected, duplicate });
 }
-function renderWorkerPrompt(context, work, run, dependencies) {
+function renderWorkerPrompt(context, work, run, dependencies, commands) {
+    const body = renderWorkerPromptBody(context, work, run, dependencies, commands);
+    return ["<accepted_decision_precedence>", `Read ${path.join(requireRunHome(run), "01-specify", "specify.json")} and later accepted RUN decisions relevant to this Work.`, acceptedDecisionPrecedence, "</accepted_decision_precedence>", "", body].join("\n");
+}
+function workerLifecycleCommands(context, work, run) {
+    const resultInputPath = path.join(requireRunHome(run), "works", work.work_id, "result-input.json");
+    return {
+        finish: managedLifecycleCommand(context, runtimeCommand(context, ["work", "finish", work.work_id, "--result-file", resultInputPath, "--project-root", run.project_root, "--json", "--progress-jsonl"])),
+        fail: managedLifecycleCommand(context, runtimeCommand(context, ["work", "fail", shortWorkId(work.work_id), "--reason", "receipt path + exact external or semantic blocker", "--project-root", run.project_root, "--json"]))
+    };
+}
+function renderWorkerPromptBody(context, work, run, dependencies, commands) {
     const command = flowCommand(context);
     const packet = codePacket(work);
     const readOnly = parsePayload(work)?.read_only === true;
     const resultInputPath = path.join(requireRunHome(run), "works", work.work_id, "result-input.json");
-    const finishWorkCommand = managedLifecycleCommand(context, runtimeCommand(context, ["work", "finish", work.work_id, "--result-file", resultInputPath, "--project-root", run.project_root, "--json", "--progress-jsonl"]));
-    const failWorkCommand = managedLifecycleCommand(context, runtimeCommand(context, ["work", "fail", shortWorkId(work.work_id), "--reason", "receipt path + exact external or semantic blocker", "--project-root", run.project_root, "--json"]));
+    const lifecycleCommands = commands ?? workerLifecycleCommands(context, work, run);
+    const finishWorkCommand = lifecycleCommands.finish;
+    const failWorkCommand = lifecycleCommands.fail;
     const mergeWork = parsePayload(work)?.kind === "merge";
     const writeBoundary = readOnly
         ? [`Review inputs under workspace_root (${run.workspace_root}) and run_home are read-only. After Work start, work from workspace_root and do not edit project source, PLAN, aspect maps, CODE evidence, or another Work's files.`, "Do not write inside workspace_root, including an isolated review copy. Write only this Work's declared result-input.json and explicitly assigned Work-owned evidence paths under run_home. Report changed or inaccessible review inputs as a blocker; do not repair them."]
@@ -1187,7 +1266,7 @@ function renderWorkerPrompt(context, work, run, dependencies) {
         codeContext.push("<document_updates>", JSON.stringify(packet.document_updates, null, 2), "Materialize every listed update. dd-flow verifies the resulting file against its PLAN-time baseline.", "</document_updates>", "", "<completion_contract>", "Successful completion requires empty deviations and blockers and every assigned document update in changed_paths. A necessary path outside planned_write_areas is normal coordination drift, not a blocker; include it in changed_paths and continue.", "</completion_contract>", "");
     if (packet)
         codeContext.push("<temporary_services>", "Prefer the declared check launcher: it already owns check resources. If the planned scenario genuinely requires an interactive HTTP service, use the managed supervisor below. This is a template: replace the project service command, port names and readiness path from the plan/project instructions; do not invent a fixed port.", `${command} runtime process start --run ${run.id} --project-root ${JSON.stringify(run.project_root)} --command '<project-service-command>' --ports api --ready-port api --ready-path /health --json --progress-jsonl`, "The service receives DD_FLOW_PORT_API (and equivalent variables for all declared names). The command stays running as its supervisor. Retain its tool handle; wait for the service ready event and read its service.json receipt. Pass those exact ports and the same project environment to reset/seed, API and browser operations.", "A ready receipt proves service readiness only. Record the scenario outcome and real evidence separately. After the scenario, execute the exact stop_command from that receipt, then wait for the supervisor to exit. Never use pkill/killall or stop a sibling's process. If cleanup fails, retain the process id and report the failure; do not claim the resource is free.", "</temporary_services>", "");
-    return ["<work>", `- work_id: ${work.work_id}`, `- run_id: ${work.run_id}`, `- project_root: ${run.project_root}`, `- workspace_root: ${run.workspace_root}`, `- run_home: ${requireRunHome(run)}`, "</work>", "", "<cli_context>", `- Work commands use the short ID ${shortWorkId(work.work_id)}; dd-flow binds it to this RUN.`, `- @project = ${run.project_root}`, `- @workspace = ${run.workspace_root}`, `- @run = ${requireRunHome(run)}`, "- @ aliases are accepted only by declared dd-flow path parameters. Copy the quoted alias literally; do not add backslashes. Shell tools such as cat and rg require ordinary paths relative to cwd or absolute paths.", "- Lifecycle invocation IDs are internal runtime authority and are intentionally omitted from commands.", "</cli_context>", "", "<hard_write_boundary>", ...writeBoundary, "</hard_write_boundary>", "", ...codeContext, "<dependency_results>", JSON.stringify(dependencies.filter(Boolean), null, 2), "</dependency_results>", "", "<task>", resolveRunReferences(work.task, work.run_id, requireRunHome(run)), "</task>", "", ...(work.result_schema ? ["<result_contract>", `Return JSON matching \`${work.result_schema}\`.`, ...resultSchemaGuidance(work, run.id), `Write the completed JSON to ${resultInputPath}. This is an attempt input, not the canonical result.json receipt. dd-flow validates the file and atomically stores the canonical receipt.`, "</result_contract>", ""] : []), "<completion>", packet?.repair?.verification_check_refs?.length ? "Work finish runs its normal work-scoped checks plus the listed causal repair checks. Their original run_at remains an aggregate obligation; this is the additional proof required before accepting this repair." : "Work finish runs only declared run_at=work checks. Stage finish owns readiness/code/merge gates; successful Work completion does not mean those gates have passed.", "A failed receipt means only that the check failed; it is not proof of an engine, harness, dependency, or environment blocker.", ...completionRepair, "Use Fail only for a concrete external blocker after deterministic bootstrap or a contradiction with an accepted requirement/non-goal. Never fail merely because a necessary project path was absent from planned_write_areas.", "Finish may run for several minutes. Preserve the shell tool's process/session handle and poll that same invocation until it exits; progress arrives as JSONL on stderr. Never reissue Finish merely because final stdout has not arrived.", `First write only the result JSON to ${resultInputPath}. Then run this standalone command:\n${finishWorkCommand}`, `Fail only for an evidenced external or semantic-contract blocker: ${failWorkCommand}`, "</completion>", ""].join("\n");
+    return ["<work>", `- work_id: ${work.work_id}`, `- run_id: ${work.run_id}`, `- project_root: ${run.project_root}`, `- workspace_root: ${run.workspace_root}`, `- run_home: ${requireRunHome(run)}`, "</work>", "", "<cli_context>", `- Work commands use the short ID ${shortWorkId(work.work_id)}; dd-flow binds it to this RUN.`, `- @project = ${run.project_root}`, `- @workspace = ${run.workspace_root}`, `- @run = ${requireRunHome(run)}`, "- @ aliases are accepted only by declared dd-flow path parameters. Copy the quoted alias literally; do not add backslashes. Shell tools such as cat and rg require ordinary paths relative to cwd or absolute paths.", "- Lifecycle invocation IDs are internal runtime authority and are intentionally omitted from commands.", "</cli_context>", "", "<hard_write_boundary>", ...writeBoundary, "</hard_write_boundary>", "", ...codeContext, "<dependency_results>", JSON.stringify(dependencies.filter(Boolean), null, 2), "</dependency_results>", "", "<task>", resolveRunReferences(work.task, work.run_id, requireRunHome(run)), "</task>", "", ...(work.result_schema ? ["<result_contract>", `Return JSON matching \`${work.result_schema}\`.`, ...resultSchemaGuidance(work, run.id), `Write the completed JSON to ${resultInputPath}. This is an attempt input, not the canonical result.json receipt. dd-flow validates the file and atomically stores the canonical receipt.`, "</result_contract>", ""] : []), "<completion>", packet?.repair?.verification_check_refs?.length ? "Work finish runs its normal work-scoped checks plus the listed causal repair checks. Their original run_at remains an aggregate obligation; this is the additional proof required before accepting this repair." : "Work finish runs only declared run_at=work checks. Stage finish owns readiness/code/merge gates; successful Work completion does not mean those gates have passed.", "A failed receipt means only that the check failed; it is not proof of an engine, harness, dependency, or environment blocker.", ...completionRepair, lifecycleRetryInstruction, "Use Fail only for a concrete external blocker after deterministic bootstrap or a contradiction with an accepted requirement/non-goal. Never fail merely because a necessary project path was absent from planned_write_areas.", "Finish may run for several minutes. Preserve the shell tool's process/session handle and poll that same invocation until it exits; progress arrives as JSONL on stderr. Never reissue Finish merely because final stdout has not arrived.", `First write only the result JSON to ${resultInputPath}. Then run this standalone command:\n${finishWorkCommand}`, `Fail only for an evidenced external or semantic-contract blocker: ${failWorkCommand}`, "</completion>", ""].join("\n");
 }
 export function resultSchemaGuidance(work, runId) {
     const schema = work.result_schema;