@deksden-com/dd-flow-cli 0.9.0-beta.115 → 0.9.0-beta.116

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @deksden-com/dd-flow-cli
 
+## 0.9.0-beta.116
+
+### Patch Changes
+
+- Reject ZCode managed lifecycle commands launched as background Bash before execution, and give all harnesses one foreground lifecycle instruction so their native admission receipts remain observable.
+
 ## 0.9.0-beta.115
 
 ### Patch Changes

package/dist/build-info.json

@@ -1,8 +1,8 @@
 {
   "cli_package": "@deksden-com/dd-flow-cli",
-  "cli_version": "0.9.0-beta.115",
-  "cli_commit": "c9825bc3272340c5583cab59ccdaab47c9968b10",
-  "built_at": "2026-09-27T17:57:38.414Z",
+  "cli_version": "0.9.0-beta.116",
+  "cli_commit": "c30f54c04930f51d7982c49369a96bca51eabe65",
+  "built_at": "2026-09-27T20:17:11.827Z",
   "built_with_canon": {
     "version": "4.1.1",
     "commit": "678daa038287c948ada5b2d785a6dcc925c7b891",

package/dist/harness-runtime/lib/delegation-instructions.mjs

@@ -49,7 +49,7 @@ export function delegationContract(harness) {
   return `dd-flow/delegation/${key}@${key === "codex" ? 2 : 1}`;
 }
 
-export const lifecycleCommandCompletionInstruction = "A shell tool may yield before the lifecycle process exits. Retain and poll its exact process/session handle to completion, including inside a tool wrapper; empty interim output is not a CLI result. Read final stdout or response_file before deciding continuation, and never reissue the command while it is pending.";
+export const lifecycleCommandCompletionInstruction = "Run runtime-issued lifecycle CLI calls in the foreground, never with a native background or detached-shell option. A shell tool may yield before the lifecycle process exits. Retain and poll its exact process/session handle to completion, including inside a tool wrapper; empty interim output is not a CLI result. Read final stdout or response_file before deciding continuation, and never reissue the command while it is pending.";
 
 export const lifecycleRetryInstruction = `${lifecycleCommandCompletionInstruction} A failure is not permission to replay a lifecycle command. For proven effect=no_effect with recoverable=true and retry_command, correct the input and execute that exact issued successor. A check failure can retain receipts while leaving Work running: correct the evidenced cause first, then use the CLI's exact retry_command for an intentional fresh check attempt; never replay a check merely because Work is unsettled. If continuation.kind=repair_required, or a successful result has outcome=repair_required and a repair Work ID, end this Turn for the registered repair child; use any retry_command only after that repair settles and verification is refreshed. Unknown effects require reconciliation, never replay. A committed effect without an explicit continuation is not retryable. A native shell launch refusal before the CLI starts permits correcting only that shell-form error and retrying the same exact command. Otherwise report the primary error and stop; never invent IDs, call hooks directly, or run status as a substitute.`;
 

package/dist/services/hooks.js

@@ -509,9 +509,9 @@ export function handleZcodeEvent(context, input) {
  * admission; the native hook must not create a competing receipt for them.
  */
 export function handleZcodeHook(context, input) {
-    return recordZcodeLifecycle(context, input);
+    return recordZcodeLifecycle(context, input, undefined, true);
 }
-function recordZcodeLifecycle(context, input, invocationId) {
+function recordZcodeLifecycle(context, input, invocationId, nativePreTool = false) {
     const hook = parseJsonObject(input.stdin || "{}", "ZCode hook event");
     const eventName = stringValue(hook.hook_event_name) ?? stringValue(hook.hookEventName);
     if (eventName && eventName !== "PreToolUse" && eventName !== "pre_tool_use")
@@ -524,6 +524,11 @@ function recordZcodeLifecycle(context, input, invocationId) {
     const lifecycle = lifecycleFacts(command);
     if (!lifecycle && !continuationCommand(command))
         return { ok: true, observed: false, reason: "event_not_participating" };
+    // ZCode can execute background Bash without emitting the ACP tool_call that admits an issued CLI invocation.
+    if (nativePreTool && lifecycle && rawInput.run_in_background === true) {
+        const reason = "Run dd-flow lifecycle commands in the foreground; ZCode background Bash does not provide the required admission receipt.";
+        return { continue: false, reason, hookSpecificOutput: { hookEventName: "PreToolUse", permissionDecision: "deny", permissionDecisionReason: reason } };
+    }
     if (!invocationId && lifecycle && commandOption(lifecycle.invocation, "invocation-id"))
         return { ok: true, observed: false, reason: "cli_invocation_owns_admission" };
     const expectedRoot = resolveProjectRoot(input.projectRoot);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@deksden-com/dd-flow-cli",
-  "version": "0.9.0-beta.115",
+  "version": "0.9.0-beta.116",
   "description": "Mechanical runtime CLI for dd-flow workflows.",
   "type": "module",
   "bin": {