@deksden-com/dd-flow-cli 0.9.0-beta.106 → 0.9.0-beta.107

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @deksden-com/dd-flow-cli
 
+## 0.9.0-beta.107
+
+### Patch Changes
+
+- Give a corrective successor only for proven no-effect PROTOCOLIZE, PLAN, PLAN-REVIEW, and Work input errors, including invalid corrected PLAN schemas and missing evidence references; keep broken runtime artifacts fatal. Tell PLAN reviewers the exact workspace-relative PLAN path. Apply ZCode's profile as one unarmed configuration phase and verify the final native profile before productive work, so transient native mode notifications cannot masquerade as drift.
+
 ## 0.9.0-beta.106
 
 ### Patch Changes

package/dist/build-info.json

@@ -1,8 +1,8 @@
 {
   "cli_package": "@deksden-com/dd-flow-cli",
-  "cli_version": "0.9.0-beta.106",
-  "cli_commit": "41377cb4915163be7220cc90928ea8a0f50683d0",
-  "built_at": "2026-09-27T00:48:48.042Z",
+  "cli_version": "0.9.0-beta.107",
+  "cli_commit": "b1e4fba26b8d9dea7b9b4f6de05aec6be3e21dc2",
+  "built_at": "2026-09-27T03:02:31.051Z",
   "built_with_canon": {
     "version": "4.1.1",
     "commit": "678daa038287c948ada5b2d785a6dcc925c7b891",

package/dist/harness-runtime/lib/dd-zcode.mjs

@@ -666,6 +666,8 @@ async function controlledIdentity(bridge, options) {
 }
 
 async function applyProfile(bridge, sessionId, requested, assertDispatch = () => {}) {
+  const identity = bridge.modelSessions?.get(sessionId);
+  if (identity) identity.armed = false;
   assertDispatch();
   if (requested.mode) await bridge.request("session/set_mode", { sessionId, modeId: requested.mode });
   assertDispatch();
@@ -674,10 +676,11 @@ async function applyProfile(bridge, sessionId, requested, assertDispatch = () =>
   if (requested.model) await bridge.request("session/setModel", { sessionId, modelId: requested.provider ? `${requested.provider}\\${requested.model}` : requested.model });
   assertDispatch();
   const read = await bridge.request("zcode/session/read", { sessionId });
+  await bridge.notifications;
   const observed = observedProfile(read);
   await bridge.recordModel?.(sessionId, observed, "zcode/session/read.applied");
   const receipt = assertProfile(requested, observed);
-  const identity = bridge.modelSessions?.get(sessionId); if (identity) identity.armed = true;
+  if (identity) identity.armed = true;
   return receipt;
 }
 

package/dist/services/lifecycle-invocations.js

@@ -1302,8 +1302,6 @@ export async function awaitLifecycleInvocation(context, input) {
         checkCommand(initial, input.command);
         // A terminal command is immutable evidence.  Do not require a now-gone
         // caller payload merely to replay its recorded result.
-        if (["issued", "observed"].includes(initial.status))
-            await input.prepare?.();
     }
     catch (error) {
         if (!(error instanceof AppError) || !(["usage", "invocation_command_mismatch", "invocation_command_invalid"].includes(error.code) || error.details.phase === "prepare"))
@@ -1311,6 +1309,22 @@ export async function awaitLifecycleInvocation(context, input) {
         Object.assign(error.details, settleLifecyclePreparationRejection(context, input.id, error));
         throw error;
     }
+    if (["issued", "observed"].includes(initial.status)) {
+        try {
+            await input.prepare?.();
+        }
+        catch (error) {
+            if (!(error instanceof AppError) || (error.details.effect !== undefined && error.details.effect !== "no_effect"))
+                throw error;
+            const details = { ...error.details, phase: "prepare", effect: "no_effect" };
+            const recoverable = error.exitCode === 2 && ["validation", "schema_validation"].includes(error.code)
+                ? error.details.recoverable !== false
+                : isRetryableLifecycleRejection(error.code, details);
+            Object.assign(error.details, { phase: "prepare", effect: "no_effect", recoverable });
+            Object.assign(error.details, settleLifecyclePreparationRejection(context, input.id, error));
+            throw error;
+        }
+    }
     const timeoutMs = input.timeoutMs ?? 30000;
     if (!Number.isFinite(timeoutMs) || timeoutMs <= 0 || timeoutMs > 60000)
         throw new AppError("invocation_timeout_invalid", "Receipt timeout must be within 1..60000 ms", 1);

package/dist/services/vnext-plan-review.js

@@ -265,7 +265,7 @@ function finishPlanReviewOwned(context, input) {
     if (evidenceFailures.length)
         throw new AppError("review_evidence_invalid", "PLAN-REVIEW reviewer evidence is incomplete, stale, or not isolated", 2, { errors: evidenceFailures });
     if (decision.outcome !== "accepted")
-        throw new AppError("validation", "Unsupported PLAN-REVIEW decision outcome", 2, { outcome: decision.outcome });
+        throw new AppError("validation", "Unsupported PLAN-REVIEW decision outcome", 2, { outcome: decision.outcome, phase: "prepare", effect: "no_effect", recoverable: true });
     // A completed reviewer can legitimately report `blocked` when an upstream
     // plan uncertainty prevents it from approving its aspect. That is evidence
     // for the coordinator to classify and fix in this one review pass, not an
@@ -283,21 +283,21 @@ function finishPlanReviewOwned(context, input) {
         throw new AppError("review_evidence_invalid", "Reviewer findings and coordinator decisions must use unique known canonical references, with every material finding decided", 2, { material_finding_ids: materialFindingIds, decided_finding_ids: decisionFindingIds, unknown_decisions: unknownDecisions });
     if (needsCorrection) {
         if (decision.correction.status !== "applied")
-            throw new AppError("validation", "Reviewer findings require an in-place correction receipt", 2);
+            throw new AppError("validation", "Reviewer findings require an in-place correction receipt", 2, { phase: "prepare", effect: "no_effect", recoverable: true });
         if (decision.correction.previous_plan_revision !== reviewedPlanRevision || planRevision <= reviewedPlanRevision || decision.correction.changed_paths.length === 0)
-            throw new AppError("validation", "Applied PLAN correction must advance revision and list changed paths", 2, { reviewed_plan_revision: reviewedPlanRevision, final_plan_revision: planRevision });
+            throw new AppError("validation", "Applied PLAN correction must advance revision and list changed paths", 2, { reviewed_plan_revision: reviewedPlanRevision, final_plan_revision: planRevision, phase: "prepare", effect: "no_effect", recoverable: true });
     }
     else if (decision.correction.status !== "not_required" || planRevision !== reviewedPlanRevision || currentPlanChecksum !== contextFile.system?.plan_checksum) {
-        throw new AppError("validation", "A clean PLAN review must not claim an unverified correction", 2);
+        throw new AppError("validation", "A clean PLAN review must not claim an unverified correction", 2, { phase: "prepare", effect: "no_effect", recoverable: true });
     }
     const prepared = prepareVnextPlanArtifacts(context, { projectRoot, workspaceRoot: run.workspace_root, runId: run.id, home, protocols: protocolIdsForReview(home) });
     if (prepared.failures.length)
-        throw new AppError("validation", "Corrected PLAN artifacts have validation errors", 2, { errors: prepared.failures });
+        throw new AppError("validation", "Corrected PLAN artifacts have validation errors", 2, { errors: prepared.failures, phase: "prepare", effect: "no_effect", recoverable: true });
     if (needsCorrection) {
         // Regeneration above is authoritative. A valid PLAN correction need not
         // change the derived CODE tasks (for example, a clarified explanation).
         if (decision.correction.changed_paths.some((item) => item.endsWith("code-work-batch.json")))
-            throw new AppError("validation", "Generated CODE batch must not be listed as an agent-authored correction", 2, { changed_paths: decision.correction.changed_paths });
+            throw new AppError("validation", "Generated CODE batch must not be listed as an agent-authored correction", 2, { changed_paths: decision.correction.changed_paths, phase: "prepare", effect: "no_effect", recoverable: true });
     }
     const finalPlanChecksum = planSetChecksum(home, run.workspace_root);
     const finalBatchChecksum = prepared.batchChecksum;
@@ -358,7 +358,7 @@ function reviewGroups(home, workspaceRoot) {
                     if (dependencyGroup && dependencyGroup !== key)
                         dependencies.add(dependencyGroup);
                 }
-            groups.push({ key, protocol_id: protocolId, aspect_ids: group.aspect_ids, depends_on: [...dependencies].sort(), task: `Review PLAN group ${key}: ${group.aspect_ids.join(", ")}. Read run://${path.basename(home)}/03-plan/${protocolId}/aspect-map.json and the referenced plan. Try to falsify ambiguous behavior and missing verification. For every selected check that starts fixture/reset, service, or client processes, verify that they share the intended data/configuration world and that any runtime entrypoint requiring change is explicit in a Work task and verification and ordered before its consumer. planned_write_areas are coordination hints, not ownership. Do not edit plan or product files. Return one aspect entry for every assigned aspect, with exact evidence references and concise findings. Finish with the JSON contract supplied in your work prompt.` });
+            groups.push({ key, protocol_id: protocolId, aspect_ids: group.aspect_ids, depends_on: [...dependencies].sort(), task: `Review PLAN group ${key}: ${group.aspect_ids.join(", ")}. Read run://${path.basename(home)}/03-plan/${protocolId}/aspect-map.json and .memory-bank/protocol/${protocolId}/plan.json under workspace_root. Cite the PLAN using that workspace-relative path, not a run:// ref. Try to falsify ambiguous behavior and missing verification. For every selected check that starts fixture/reset, service, or client processes, verify that they share the intended data/configuration world and that any runtime entrypoint requiring change is explicit in a Work task and verification and ordered before its consumer. planned_write_areas are coordination hints, not ownership. Do not edit plan or product files. Return one aspect entry for every assigned aspect, with exact evidence references and concise findings. Finish with the JSON contract supplied in your work prompt.` });
         }
     }
     return groups;

package/dist/services/vnext-plan.js

@@ -126,7 +126,7 @@ export function prepareVnextPlanFinish(context, input) {
     assertProtocolWorkspace(run.workspace_root, protocols);
     const prepared = prepareVnextPlanArtifacts(context, { projectRoot, workspaceRoot: run.workspace_root, runId: run.id, home, protocols });
     if (prepared.failures.length)
-        throw new AppError("validation", "PLAN artifacts have validation errors", 2, { errors: prepared.failures });
+        throw new AppError("validation", "PLAN artifacts have validation errors", 2, { errors: prepared.failures, phase: "prepare", effect: "no_effect", recoverable: true });
     return prepared;
 }
 export function finishVnextPlan(context, input) {
@@ -148,7 +148,7 @@ function finishVnextPlanOwned(context, input) {
     const batch = path.join(root, "code-work-batch.json");
     const prepared = input.prepared ?? prepareVnextPlanFinish(context, input);
     if (prepared.failures.length)
-        throw new AppError("validation", "PLAN artifacts have validation errors", 2, { errors: prepared.failures });
+        throw new AppError("validation", "PLAN artifacts have validation errors", 2, { errors: prepared.failures, phase: "prepare", effect: "no_effect", recoverable: true });
     const work = context.db.get("SELECT work_id FROM works WHERE project_id = ? AND run_id = ? AND task = ? AND status = 'running' ORDER BY created_at DESC LIMIT 1", [project.id, run.id, planTask]);
     if (!work)
         throw new AppError("invalid_work_state", "PLAN has no running Work", 1);

package/dist/services/vnext-protocolize.js

@@ -183,11 +183,19 @@ export function finishVnextProtocolize(context, input) {
     const resultFile = prepareProtocolizeResultPath(requireRunHome(run), input.resultFile);
     const result = input.result ?? readResult(resultFile, { projectRoot, ddFlowHome: context.ddFlowHome, runId: run.id, runRoot: requireRunHome(run) });
     validateSchema({ schemaName: "vnext-protocolize-result", file: resultFile, data: result, projectRoot, ddFlowHome: context.ddFlowHome, runId: run.id, runRoot: requireRunHome(run) });
-    if (result.outcome !== "protocolized")
-        throw new AppError("validation", "PROTOCOLIZE may finish only as protocolized; use stage pause for every user question", 2);
     const acceptedObligations = acceptedSpecifyObligations(context, projectRoot, run.id, path.join(requireRunHome(run), "01-specify", "specify.json"));
-    const obligations = effectiveObligations(result, acceptedObligations);
-    validateDelivery(projectRoot, result, obligations);
+    let obligations;
+    try {
+        if (result.outcome !== "protocolized")
+            throw new AppError("validation", "PROTOCOLIZE may finish only as protocolized; use stage pause for every user question", 2);
+        obligations = effectiveObligations(result, acceptedObligations);
+        validateDelivery(projectRoot, result, obligations);
+    }
+    catch (error) {
+        if (!(error instanceof AppError) || error.code !== "validation" || error.exitCode !== 2)
+            throw error;
+        throw new AppError(error.code, error.message, error.exitCode, { ...error.details, phase: "prepare", effect: "no_effect", recoverable: true });
+    }
     const resolvedPolicy = requireVnextWorkspaceRoute({ projectRoot, runId: run.id, runHome: requireRunHome(run), workspaceRoot: run.workspace_root, stage: "protocolize" });
     const receipt = readWorkspaceRouteReceipt(root);
     const workspaceRoot = run.workspace_root;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@deksden-com/dd-flow-cli",
-  "version": "0.9.0-beta.106",
+  "version": "0.9.0-beta.107",
   "description": "Mechanical runtime CLI for dd-flow workflows.",
   "type": "module",
   "bin": {