@deksden-com/dd-flow-cli 0.9.0-beta.109 → 0.9.0-beta.110

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @deksden-com/dd-flow-cli
 
+## 0.9.0-beta.110
+
+### Patch Changes
+
+- Pass retained runtime ownership to the ZCode ACP provider so managed Turns do not accept an inferred idle result as native completion. Reject an empty review set while PLAN-REVIEW is explicitly standard/deep, before publishing PLAN, and explain that mode in the shared PLAN prompt.
+
 ## 0.9.0-beta.109
 
 ### Patch Changes

package/dist/build-info.json

@@ -1,8 +1,8 @@
 {
   "cli_package": "@deksden-com/dd-flow-cli",
-  "cli_version": "0.9.0-beta.109",
-  "cli_commit": "350120c67365b0b0c8f2fc81c7cd73548aae6617",
-  "built_at": "2026-09-27T07:05:10.542Z",
+  "cli_version": "0.9.0-beta.110",
+  "cli_commit": "dbb41705604e422795167f32b74fb92ee34fa1ae",
+  "built_at": "2026-09-27T09:03:36.141Z",
   "built_with_canon": {
     "version": "4.1.1",
     "commit": "678daa038287c948ada5b2d785a6dcc925c7b891",

package/dist/harness-runtime/lib/dd-zcode-daemon.mjs

@@ -593,11 +593,16 @@ export class DaemonRuntime {
   }
 }
 
+export function zcodeBridgeEnv(config, daemonId) {
+  return { ...config.env, DD_FLOW_DAEMON_ID: daemonId,
+    DD_FLOW_RUNTIME_OWNER: config.runtime_owner ? JSON.stringify(config.runtime_owner) : undefined };
+}
+
 export async function serveDaemon(stateDir) {
   const paths = locations(stateDir);
   const state = await readState(paths.dir);
   if (!state || state.schema_id !== STATE_SCHEMA) throw new DaemonError("daemon_state_missing", "daemon state is missing or incompatible");
-  const bridge = new AcpBridge({ ...state.config, env: { ...state.config.env, DD_FLOW_DAEMON_ID: state.daemon_id } });
+  const bridge = new AcpBridge({ ...state.config, env: zcodeBridgeEnv(state.config, state.daemon_id) });
   const initialized = await startManagedBridge({ config: state.config, state, bridge, kind: "zcode-provider", publish: snapshot => writeState(paths.state, snapshot) });
   const runtime = new DaemonRuntime(paths, state, bridge, initialized);
   scheduleDaemonProcessHeartbeat(state.config, state.resource_process);

package/dist/harness-runtime/lib/dd-zcode.mjs

@@ -803,6 +803,7 @@ export function zcodeLifecycleQualification(sha256, bridgeCommit, harnessContrac
     ["8c0a893f3c26a0b96cb138acf762db84c800298b", ZCODE_HARNESS_CONTRACT],
     ["f4d47b517073f9bdb8d4eba3d0d59ce66c6a2833", "dd-zcode-harness@2"],
     ["5a8c89ab716a4b2ccc50df81cb4d204ff5c06368", "dd-zcode-harness@2"],
+    ["91a1470650f5fd6105f9863fd31d1cad7b90a109", "dd-zcode-harness@2"],
   ]);
   const qualified = qualifiedBridgeCommits.get(bridgeCommit) === harnessContract;
   return { status: qualified ? "qualified" : "unqualified", mechanism: "cli-invocation@1", sha256,

package/dist/services/vnext-plan.js

@@ -91,6 +91,7 @@ export function startVnextPlan(context, input, prepared = prepareVnextPlanStart(
         `${flowCommand(context)} schema validate --schema plan-aspect-map --file ${JSON.stringify(mapPaths[index])} --project-root ${JSON.stringify(run.workspace_root)} --run ${run.id} --json`
     ]);
     const measuredCapacity = runVariables.variables[subagentCapacityKey];
+    const planReviewMode = requestedPlanReviewMode(context, project.id, run.id);
     const capacityContext = typeof measuredCapacity === "number" && Number.isInteger(measuredCapacity) && measuredCapacity >= 0
         ? `- The qualified reviewer capacity is ${measuredCapacity}. This is a runtime fact for later PLAN-REVIEW dispatch; do not repeat qualification or invent a different value.`
         : "- Reviewer capacity is not qualified yet. PLAN must not qualify or launch reviewers; an external harness controller supplies it before fan-out.";
@@ -107,7 +108,10 @@ export function startVnextPlan(context, input, prepared = prepareVnextPlanStart(
     // This explicit final rule supersedes historical pack wording: a flow gate
     // has only executable autonomous evidence. Human or external confirmation
     // is neither a check nor a permitted completion condition.
-    fs.writeFileSync(promptPath, `${prompt}\n<verification_rule>Every flow check must be an autonomous executable command. Do not declare external/manual proof or a human review as a check, evidence substitute, DEF, or gate. The only user interaction supported by this flow is an explicit stage pause for a material unanswered question.</verification_rule>\n${stageLifecycleInstruction}\n`);
+    const reviewModeRule = planReviewMode === "standard" || planReviewMode === "deep"
+        ? `PLAN-REVIEW mode is ${planReviewMode}: assign at least one genuinely applicable aspect to a review group. Small feature size alone does not make every aspect not applicable; PLAN finish rejects an empty review set.`
+        : `PLAN-REVIEW mode is ${planReviewMode}: include review groups only for genuinely applicable aspects; an empty set is allowed.`;
+    fs.writeFileSync(promptPath, `${prompt}\n<review_mode_rule>${reviewModeRule}</review_mode_rule>\n<verification_rule>Every flow check must be an autonomous executable command. Do not declare external/manual proof or a human review as a check, evidence substitute, DEF, or gate. The only user interaction supported by this flow is an explicit stage pause for a material unanswered question.</verification_rule>\n${stageLifecycleInstruction}\n`);
     const externalContext = applyExternalStageContext({ stageRoot: root, promptPath, ...(input.externalContext ? { loaded: input.externalContext } : {}) });
     fs.writeFileSync(path.join(root, "work-context.json"), JSON.stringify({ schema_id: "dd-flow/work-context@1", system: { run_id: run.id, work_id: planWorkId, stage: "plan" }, workspace: { project_root: projectRoot, workspace_root: run.workspace_root, stage_root: root }, artifacts: artifactMaterialization, input: { protocols, owned_obligations: Object.fromEntries(owned) } }, null, 2));
     const binding = bindStageCoordinatorWork(context, { workId: planWorkId, hookEventId: input.hookEventId, stage: "plan", promptPath, resultPath: path.join(root, "stage-report.json"), ...(input.contextSha256 ? { contextSha256: input.contextSha256 } : {}) });
@@ -193,6 +197,7 @@ export function prepareVnextPlanArtifacts(context, input) {
     const workspaceRoot = input.workspaceRoot ?? input.projectRoot;
     const planFiles = input.protocols.map((id) => path.join(workspaceRoot, ".memory-bank", "protocol", id, "plan.json"));
     const mapFiles = input.protocols.map((id) => path.join(input.home, "03-plan", id, "aspect-map.json"));
+    let reviewGroupCount = 0;
     const batch = path.join(input.home, "03-plan", "code-work-batch.json");
     const ownership = protocolOwnership(input.home, input.protocols);
     const obligations = acceptedObligations(input.home);
@@ -232,12 +237,19 @@ export function prepareVnextPlanArtifacts(context, input) {
                 throw new AppError("validation", "Accepted aspect-map requires normalization; regenerate it in PLAN", 2, { file });
             const value = JSON.parse(bytes);
             validateAspectMap(file, input.protocols, workspaceRoot, value);
+            reviewGroupCount += Array.isArray(value.review_groups) ? value.review_groups.length : 0;
             publications.set(file, bytes);
         }
         catch (error) {
             failures.push(validationFailure(file, error));
         }
     }
+    if (!failures.length && reviewGroupCount === 0) {
+        const project = requireProjectByRoot(context, resolveProjectRoot(input.projectRoot));
+        const mode = requestedPlanReviewMode(context, project.id, input.runId);
+        if (mode === "standard" || mode === "deep")
+            failures.push(validationFailure(mapFiles[0] ?? batch, new AppError("validation", "Configured PLAN-REVIEW requires at least one applicable aspect and review group in the PLAN map", 2, { mode })));
+    }
     if (!failures.length) {
         try {
             validatePsetCheckIdentity(plans);
@@ -670,6 +682,10 @@ function validatePsetCheckIdentity(plans) {
             owners.set(check.id, plan.protocolId);
         }
 }
+function requestedPlanReviewMode(context, projectId, runId) {
+    const row = context.db.get("SELECT index_json FROM runs WHERE project_id = ? AND id = ?", [projectId, runId]);
+    return JSON.parse(row?.index_json ?? "{}").settings?.plan_review?.mode ?? "auto";
+}
 function runEndsAtMerge(context, projectRoot, runId) {
     const project = requireProjectByRoot(context, resolveProjectRoot(projectRoot));
     const row = context.db.get("SELECT index_json FROM runs WHERE project_id = ? AND id = ?", [project.id, runId]);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@deksden-com/dd-flow-cli",
-  "version": "0.9.0-beta.109",
+  "version": "0.9.0-beta.110",
   "description": "Mechanical runtime CLI for dd-flow workflows.",
   "type": "module",
   "bin": {