@deksden-com/dd-flow-cli 0.9.0-beta.14 → 0.9.0-beta.141

package/CHANGELOG.md

@@ -1,5 +1,744 @@
 # @deksden-com/dd-flow-cli
 
+## 0.9.0-beta.141
+
+### Patch Changes
+
+- 49dbfa3: Retain precise check and startup failures, validate bound browser inactivity proof,
+  and observe test progress without losing diagnostics or rollback guarantees.
+
+## 0.9.0-beta.140
+
+- Compare observable birth after EPERM so a foreign reused PID is not mistaken for the retained owner; unknown identity remains conservative.
+
+- Separate pre-reboot physical retirement of controllers and waiting probes from their retained logical outcome.
+
+- Preserve legacy resource writer contracts during terminal retirement and recognize retained resource aliases without changing their historical bytes.
+- Retire structurally validated registries predating writer contracts without installing a new schema or fence definition.
+
+### Patch Changes
+
+- Retire validated pre-reboot legacy daemon processes without claiming native Session success or signalling reused PIDs.
+
+## 0.9.0-beta.139
+
+### Patch Changes
+
+- Route each Stage from current RUN workspace authority, preserve known native
+  terminal outcomes independently of diagnostic reads, and retain exact owned
+  OpenCode hook identity failures. Fence automatic cleanup from active owners,
+  persist retirement observation budgets and causal errors, validate resource
+  homes before writes, and preserve maintenance effect/cleanup boundaries.
+  Use progress-observed fixture transport without losing native CLI exit codes.
+- dafdb20: Use a shared bounded provider-overload episode: two same-Session continuations,
+  5/15-second backoff with jitter, and explicit provider-unavailable exhaustion.
+  Normalize native capacity failures across adapters, retain restart-safe retry
+  budgets, and close child episodes only after confirmed successful native Turns.
+
+## 0.9.0-beta.138
+
+- Retain causal native check failures and permit fenced source repair in the same Session. Reject malformed repair proofs and preserve physical execution blockers during reconciliation.
+
+## 0.9.0-beta.137
+
+- Preserve shared reasoning/mode options in OpenCode v2 and support non-generative doctor before daemon startup.
+
+### Patch Changes
+
+- e65a615: Retain scoped native child failures through read-only ZCode observation and durable dispatch fences. Bind failure provenance to current Work/Session/controller identities. Publish materialized PROTOCOLIZE evidence separately from authored input, and replay completed stages without revalidating an archived worktree or regressing later stages.
+
+## 0.9.0-beta.136
+
+### Patch Changes
+
+- 8c75ca6: Reconcile retained RUN health using physical ownership and controller settlement without dispatch or lease takeover. Persist target-stage pauses, preserve unknown historical timing, and leave future pending stages untouched after a failure.
+
+## 0.9.0-beta.135
+
+### Patch Changes
+
+- Migrate dd-opencode to the pinned OpenCode v2 client/plugin API, owned private servers and durable inbox/outcome reconciliation. Bind native lifecycle hooks, sliding shell progress and shared overload continuation; hoist engine dependency snapshots without duplicating shared graphs. Legacy v1 runtime states remain available only through the archived engine.
+
+## 0.9.0-beta.134
+
+### Patch Changes
+
+- 7dae2f0: Freeze explicitly accepted RUN operational decisions and deliver the same verified policy/context to Stage and Work. Preserve their authority across recovery, require new acceptance for imported experiments, and retain native aborted-check reasons.
+- Deliver plan 082 Work authority, native failure evidence and Judge diagnostic repairs; admit the exact CP226 ZCode bridge after root, concurrent-child, same-child continuation and clean shutdown probes.
+- 46b7dbc: Persist stage usage through the shared completion service, including vNext SPECIFY and PROTOCOLIZE. Completed stage records now retain scoped token measurements for console readers; missing measurements remain unavailable.
+- 430a7df: Prepare writable parent directories before handing agents HITL, Work result and CODE blocker input paths. Preserve existing payloads and reject unavailable destinations without publishing unusable instructions.
+- 539de25: Capture bounded observation journals without requiring global runtime silence.
+  Retain RUN-scoped productive authority, immutable payload checksums and recovery
+  materials. Finalize stop-after captures as candidates after native settlement.
+- 9ca6bb3: Use scoped native progress and inactivity windows instead of productive-work
+  lifetime limits. Preserve observation uncertainty and exact operation fences
+  across quiet probes and observer replacement; bound utility output and cleanup.
+  Separate native-work and control waits across all six bundled adapters, keep
+  serving services exempt from output silence, and stop MERGE on confirmed lease
+  loss. New runtime contracts are operation-progress@1, operation-errors@2 and
+  native-operation-wait@1.
+- 0a8923a: Separate existing controller lease renewal from new launch admission so terminal RUNs can finish boundary capture and native settlement. Make terminal stop retain durable cleanup evidence without reopening productive recovery, and expose exact-owner finalization diagnostics. Full-cycle regressions now check sealed final capture and physical retirement before fixture cleanup.
+- 6b2c491: Preserve unavailable ZCode cache and reasoning counters as null instead of inventing measured zeros. Mixed histories keep optional totals unknown while retaining confirmed input, output, and total tokens.
+
+## 0.9.0-beta.133
+
+### Patch Changes
+
+- Use the exact retained committed lease for admission and capacity waits,
+  rather than an expired daemon-state snapshot.
+- Validate direct check runner evidence contracts before PLAN/Work admission.
+- beta.132 is retained as a superseded local candidate; review found the stale
+  admission horizon before release or scored E2E.
+
+## 0.9.0-beta.132
+
+### Patch Changes
+
+- Preserve structured CLI failure receipts when valid setup-phase diagnostics
+  precede the error envelope; reject malformed/error-bearing phase records.
+- beta.131 remains an unaccepted immutable local candidate; its full gate
+  exposed this parsing defect before engine promotion.
+
+## 0.9.0-beta.131
+
+### Patch Changes
+
+- Bound maintenance to verified lease authority, reconcile settled unknown
+  heartbeat acknowledgements without replay, and separate resource/RUN effects.
+- Keep scope-free maintenance cold imports narrow; finish observes its own
+  settlement window after the preceding flight.
+- Retain bound structured test outcomes and progress with profile@7, preserving
+  profile@6 compatibility. Route tooling/unknown failures away from product repair.
+
+## 0.9.0-beta.130
+
+### Patch Changes
+
+- Bind AGY startup observation to its actual daemon configuration, preserve
+  explicit OpenCode observation windows and retain the last confirmed setup phase.
+- beta.129 remained an unaccepted local candidate; its failed native gate is
+  retained separately rather than reissued under a different artifact digest.
+
+## 0.9.0-beta.129
+
+### Patch Changes
+
+- Observe setup phases across engine admission and all native daemon startups;
+  retain operation-bound progress and distinguish silence from observation loss.
+- Run engine health/bind/fork probes and managed tooling asynchronously outside
+  storage writers, preserving dependency failures, cancellation and owned cleanup.
+- Stream ZCode binary identity and preserve startup progress through EVAL control.
+
+## 0.9.0-beta.128
+
+### Patch Changes
+
+- Separate cold maintenance CLI imports from storage inactivity. Start the short
+  sliding storage window only after request-bound readiness, retaining the finite
+  ownership horizon and unknown-write recovery. Diagnose startup versus storage
+  expiry and preserve exact registration operation identity.
+
+## 0.9.0-beta.127
+
+### Patch Changes
+
+- Scope boundary consistency to productive RUN authority and retain accepted Work results across snapshot relocation without requiring unchanged provider service files.
+- Reject conflicting retained native operation inputs before transport dispatch, preserving the same conflict classification across all harness observers.
+- Distinguish recoverable pre-shutdown refusal from durable unclean shutdown in full-cycle fixtures. Verify clean settlement or retained blocker custody before teardown, with native operation-inspection and cancel-tree parameter parity.
+
+## 0.9.0-beta.126
+
+### Patch Changes
+
+- Separate existing controller renewal from productive launch admission, allowing terminal RUNs to finish sealed boundary capture and native settlement.
+- Make terminal stop retain durable cleanup without changing subject outcomes or reopening productive recovery; expose scoped read-only finalization diagnostics.
+- Verify final snapshot identity and physical retirement before full-cycle fixture teardown.
+
+## 0.9.0-beta.124
+
+### Patch Changes
+
+- Stop only two confirmed continuation overload refusals within the inclusive two-minute window, preserving native refusal times and exact owner admission across recovery.
+
+  Retain final PLAN check obligations, completion markers and native output bytes in verification evidence; require canonical fixes for duplicated CODE P0/P1 findings.
+
+  Join native daemon cleanup before durable stop acknowledgement and reconcile already-closed provider bridges without replay.
+
+## 0.9.0-beta.123
+
+### Patch Changes
+
+- Continue confirmed Codex overloads in the retained Session with bounded backoff, exact owner admission and no concurrent productive Turns.
+- Retain content-addressed verification evidence and reviewer input baselines across publication, relocation and review waves.
+- Preserve canonical native model/tool observations and AGY child transcript evidence without rewriting historical results.
+
+## 0.9.0-beta.122
+
+### Patch Changes
+
+- Generate a deterministic RUN-local verification matrix from accepted requirements, PLAN and exact check receipts; publish retained input/output packets and show their paths in shared Stage/Work instructions.
+- Recognize one unambiguous lifecycle command through the shared Bash grammar instead of rejecting all shell composition; retain scoped authority, execution-directory and foreground checks.
+- Share native hook deadlines through subprocess and SQLite admission, retain bounded phase diagnostics and the first ZCode failure, and prepare Stage archive/Git work outside the writer.
+- Admit the tested ZCode ACP 0.52 bridge and retain explicitly configured native storage routes across daemon lifecycle calls.
+
+## 0.9.0-beta.120
+
+### Patch Changes
+
+- Continue only confirmed, effect-free Codex `serverOverloaded` Turns in the same Session with bounded backoff and retained owner, budget, HITL, Work, MERGE, and recovery admission. Preserve exact native child Turn evidence and fail closed when effects are unknown.
+- Distinguish hard provider quota from short rate limiting and ambiguous 429 responses across AGY, ZCode, and OpenCode.
+
+## 0.9.0-beta.119
+
+### Patch Changes
+
+- Give Grok's native ACP startup a bounded 60-second initialize window and a 120-second daemon-ready window. ZCode keeps its 30-second initialize bound.
+
+## 0.9.0-beta.118
+
+### Patch Changes
+
+- Admit the tested ZCode bridge fix for managed turns that remain active after a frozen event watermark, and allow 30 seconds for Antigravity's version check during doctor and daemon startup.
+
+## 0.9.0-beta.117
+
+### Patch Changes
+
+- Preserve Grok child model facts, replay owned Codex tool events, and let CODE collect aggregate-check evidence before semantic acceptance.
+
+## 0.9.0-beta.116
+
+### Patch Changes
+
+- Reject ZCode managed lifecycle commands launched as background Bash before execution, and give all harnesses one foreground lifecycle instruction so their native admission receipts remain observable.
+
+## 0.9.0-beta.115
+
+### Patch Changes
+
+- Freeze the reviewed source check profile for MERGE after verifying that it only adds aliases to the integration baseline; keep existing check policy immutable and verify the post-apply profile against that frozen source.
+
+## 0.9.0-beta.114
+
+### Patch Changes
+
+- Route controlled `merge apply` and `merge repair` hooks to the MERGE request's integration workspace, preserving native cwd validation across AGY, OpenCode, and Droid.
+
+## 0.9.0-beta.113
+
+### Patch Changes
+
+- Allow sibling read-only reviewers to start concurrently when one updates the shared RUN projection; retain Work, generation, dependency, and immutable review-input checks.
+
+## 0.9.0-beta.112
+
+### Patch Changes
+
+- Give ZCode native Session creation a bounded end-to-end budget and admit the matching tested bridge commit, reject bare long-running service scripts as checks, run managed checks with the engine's Node architecture, and serialize concurrent Work checks within one RUN. Classify Git's expected EPIPE on a gitless check-ignore probe without hiding other Git failures.
+
+## 0.9.0-beta.111
+
+### Patch Changes
+
+- Settle retired Grok child Sessions from their retained terminal native TaskOutput when session/info omits status; keep explicit activity, new attempts and outcome conflicts blocking settlement.
+
+## 0.9.0-beta.110
+
+### Patch Changes
+
+- Pass retained runtime ownership to the ZCode ACP provider so managed Turns do not accept an inferred idle result as native completion. Reject an empty review set while PLAN-REVIEW is explicitly standard/deep, before publishing PLAN, and explain that mode in the shared PLAN prompt.
+
+## 0.9.0-beta.109
+
+### Patch Changes
+
+- Start managed daemons from their confirmed registration without a redundant blocking heartbeat. Keep periodic ownership checks and reject productive work when renewal cannot be confirmed. Recognize a failed daemon start as settled only when the native journal proves no Session was created and the exact daemon/provider processes have terminated with released leases. Accept an identical Work start packet already published by a concurrent starter while retaining conflict detection for changed bindings or bytes.
+
+## 0.9.0-beta.108
+
+### Patch Changes
+
+- Route native tool hooks through the prepared hook store and skip storage entirely for unrelated tools. Give ZCode daemon readiness a bounded 30-second window and clean up the exact registered provider process if any managed daemon fails to start, preserving the primary startup error.
+
+## 0.9.0-beta.107
+
+### Patch Changes
+
+- Give a corrective successor only for proven no-effect PROTOCOLIZE, PLAN, PLAN-REVIEW, and Work input errors, including invalid corrected PLAN schemas and missing evidence references; keep broken runtime artifacts fatal. Tell PLAN reviewers the exact workspace-relative PLAN path. Apply ZCode's profile as one unarmed configuration phase and verify the final native profile before productive work, so transient native mode notifications cannot masquerade as drift.
+
+## 0.9.0-beta.106
+
+### Patch Changes
+
+- Keep all Stage and Work lifecycle commands attached to their shell process until final output arrives, including HITL resume and standalone launch prompts. Resolve a model-facing command's hidden RUN from its issued authority when checking Antigravity workspace routing. Reserve the SQLite writer before reading and publishing the RUN projection so concurrent reviewer completions cannot invalidate it.
+
+## 0.9.0-beta.105
+
+### Patch Changes
+
+- Unify managed lifecycle correction and Stage/Work instructions across harnesses; enforce phase-specific workspace ownership; keep accepted Stage, Work, HITL, protocol, and RUN publications recoverable while moving filesystem and process work outside SQLite writer transactions. Retain exact native and physical-owner evidence through controller capture and snapshot restore.
+
+## 0.9.0-beta.96
+
+### Patch Changes
+
+- 4769ad6: Settle early lifecycle rejections against their native calls, reconcile retained provider capacity before continuing, and preserve causal outcomes across AGY, Grok, Droid, OpenCode, Codex, and ZCode adapters.
+
+## 0.9.0-beta.95
+
+### Patch Changes
+
+- Qualify the exact ZCode 0.16.9 / zcode-acp 0.46.7 contract @2 tuple after live public-command receipts, and reject inferred or failed native completion evidence.
+
+## 0.9.0-beta.94
+
+### Patch Changes
+
+- Admit public ZCode lifecycle commands through their native receipt without exposing runtime-owned invocation IDs.
+
+## 0.9.0-beta.93
+
+### Patch Changes
+
+- Move native ZCode request usage accounting into dd-zcode, preserve causal native errors, and distinguish bridge contract support from exact-tuple runtime qualification.
+
+## 0.9.0-beta.92
+
+### Patch Changes
+
+- 03fea2a: Accept the behaviorally qualified ZCode 0.16.9 and zcode-acp 0.43.2 harness overlay tuple in the managed runtime gate.
+
+## 0.9.0-beta.91
+
+### Patch Changes
+
+- 8650f0f: Unify managed lifecycle command syntax, preserve terminal preparation errors,
+  bound unchanged retries, and retain causal controller failures through MERGE.
+
+## 0.9.0-beta.90
+
+### Patch Changes
+
+- 18e2627: Require settled fan-out stages to complete their semantic decision and invoke
+  the authoritative finish command before assuming a repair exists. Report the
+  controller action that failed to make progress, and hand off repair Work only
+  after an actual lifecycle response registers it.
+- 954c676: Publish the exact CI-tested tarball through a credential-isolated release job, with deterministic test shards, package smoke, trusted candidate receipts, and safe lost-reply recovery.
+
+## 0.9.0-beta.89
+
+### Minor Changes
+
+- Register aggregate CODE and CODE-REVIEW repairs atomically from all failed receipts, with stable replay identity and stage/attempt/cycle membership. Resolve declared contextual file paths independently of lifecycle authority, retain exact native command rejection causes, and emit shell-safe commands with explicit JSON recovery inputs. Keep historical Work out of current dispatch and block ambiguous legacy fanout execution.
+
+## 0.9.0-beta.88
+
+### Patch Changes
+
+- 5f3806c: Keep managed HITL answer paths inside retained runtime authority, preserve early
+  native CLI failures, and fail controllers conclusively when an answer turn does
+  not resume its assigned pause.
+
+## 0.9.0-beta.87
+
+### Patch Changes
+
+- a49655a: Use separate files for model-authored lifecycle payloads and preserve native
+  shell-composition diagnostics instead of reporting a missing hook receipt.
+
+## 0.9.0-beta.86
+
+### Patch Changes
+
+- 8abe471: Settle invalid managed lifecycle arguments atomically before dispatch and return one safe corrected command.
+
+## 0.9.0-beta.85
+
+### Patch Changes
+
+- fe8f493: Restore runtime-owned response publication options before dispatching a managed lifecycle command, and update the controller fixture to validate the public command contract.
+
+## 0.9.0-beta.84
+
+### Patch Changes
+
+- 644d181: Keep RUN identity, project paths, context files, response destinations and
+  integrity hashes inside retained lifecycle authority instead of asking agents
+  to copy them. Restore those inputs deterministically when the observed command
+  executes, including MERGE apply and repair commands.
+
+## 0.9.0-beta.83
+
+### Patch Changes
+
+- bf69c56: Accept shell-escaped lifecycle path aliases deterministically and render model-facing aliases with stable quoting.
+
+## 0.9.0-beta.82
+
+### Patch Changes
+
+- Keep release registry readback running through delayed npm propagation while still failing authorization errors immediately.
+
+## 0.9.0-beta.81
+
+### Patch Changes
+
+- a48e3de: Canonicalize short and full RUN/Work references across native hook receipts, lifecycle admission, Work settlement, and HITL pause/resume. Keep model-facing commands short while preserving scoped ownership checks and report precise receipt mismatch reasons.
+
+## 0.9.0-beta.75
+
+### Patch Changes
+
+- Use adapter-owned native delegation instructions for Codex and the other
+  supported harnesses, preserving independent child Work ownership and clearer
+  native-session diagnostics across fan-out and recovery.
+
+## 0.9.0-beta.64
+
+### Patch Changes
+
+- Reserve SQLite writes explicitly, retain trusted lifecycle outcomes across harnesses,
+  continuously fence failed managed runs, and recover committed Work start packets and
+  replies without repeating effects. Revalidate stage inputs before acceptance and keep
+  the causal failure when adapter, publication or cleanup also fails. Writer contract 2
+  requires fresh campaign and resource homes; historical contract-1 stores are not
+  implicitly upgraded. Recovery-generation Work starts keep separate immutable packets
+  per WorkSession, preserving the interrupted attempt's evidence.
+
+## 0.9.0-beta.63
+
+### Patch Changes
+
+- Accept the qualified retained-subagent ZCode bridge and settle a control only
+  when a durable startup rejection proves that it created no native resources.
+
+## 0.9.0-beta.62
+
+### Patch Changes
+
+- Verify a controlled native Session with a fresh inspection after cancellation before treating its tree as settled.
+
+## 0.9.0-beta.61
+
+### Patch Changes
+
+- Keep the scope reconciliation contract test type-safe.
+
+## 0.9.0-beta.60
+
+### Patch Changes
+
+- Document and verify explicit reconciliation of a drained runtime scope without automatic observer respawn.
+
+## 0.9.0-beta.59
+
+### Patch Changes
+
+- Keep bundled ZCode close-contract fixtures aligned with retained native topology checks.
+
+## 0.9.0-beta.58
+
+### Patch Changes
+
+- Keep local task artifacts outside the release lint scope.
+
+## 0.9.0-beta.57
+
+### Patch Changes
+
+- Bound recovery observation, expose safe external reconciliation, and require
+  complete non-resident ZCode session-tree evidence before a stopped run settles.
+
+## 0.9.0-beta.56
+
+### Patch Changes
+
+- Keep RUN database and runtime status aligned with pause, stop, controller failures and trusted recovery. Preserve real Stage pauses and terminal results, reject late revival under a recovery fence, roll back status changes after persistence failures, and provide an explicit backed-up legacy status repair tool.
+
+## 0.9.0-beta.55
+
+### Patch Changes
+
+- Require autonomous check evidence, preflight commands in their actual workspace, bind final retry arguments, and settle ZCode cancellation through verified native residency. Retain closed sessions without implicit resume and store growing transcripts in reusable content-addressed chunks.
+
+## 0.9.0-beta.54
+
+### Patch Changes
+
+- Preserve current lifecycle command input, atomically settle retry authority, select current resume commands, and stop ZCode productive admission immediately on fatal identity errors. Reject ambiguous result inputs and keep diagnostic commands read-only.
+
+## 0.9.0-beta.53
+
+### Patch Changes
+
+- Admit managed ZCode lifecycle commands through durable invocation receipts, with exact native identity, bounded waits, retained outcomes and explicit validated retries. Preserve recovery generations, cooperative settlement, immutable recovery evidence and scoped snapshots. Keep Grok native hook responses and stable parent identity, and qualify the installed ZCode native event contract without requiring child hooks. Use Node 26 for the guarded release workflow.
+
+## 0.9.0-beta.52
+
+### Patch Changes
+
+- Distinguish released workspace leases from physical processes during stage-boundary capture, RUN settlement and runtime-scope stop/drain. Preserve active-lease, child-process, physical-identity and exact registration checks instead of waiting forever for a PID on a logical gate.
+
+## 0.9.0-beta.51
+
+### Patch Changes
+
+- Settle a check receipt when its confirmed process identity has exited, even if an older registration has no parent-owner PID.
+
+## 0.9.0-beta.50
+
+### Patch Changes
+
+- 422413d: Keep PLAN, PLAN-REVIEW, CODE and CODE-REVIEW settlement atomic across Work, Session and RUN state, including successor Work registration. Recover accepted CODE stage completion without repeating checks. Enforce coordinator ownership on repeated CODE start and exact reviewer coverage while preserving protocol-local aspect scopes.
+- 422413d: Reuse completed check evidence consistently across CODE, CODE-REVIEW and MERGE,
+  with validated inputs, artifacts, retry handling and concurrent execution guards.
+
+## 0.9.0-beta.49
+
+### Patch Changes
+
+- Treat a completed CODE gate command that returns `code_gate_failed` as terminal
+  recovery evidence, so the coordinator creates the returned repair Work instead
+  of waiting indefinitely or duplicating the aggregate gate.
+
+## 0.9.0-beta.48
+
+### Patch Changes
+
+- Recheck a controller lease after a transient runtime-registry write failure before
+  dispatching more work, while retaining the hard stop for an explicit lease loss.
+
+## 0.9.0-beta.47
+
+### Patch Changes
+
+- Initialize the managed Codex hook home for external worker sessions so their
+  first `work start` receives a trusted session binding.
+
+## 0.9.0-beta.44
+
+### Patch Changes
+
+- Allow a managed native session prompt to run for two hours before the outer
+  adapter watchdog cancels it, while retaining the existing short timeout for
+  non-productive adapter calls.
+
+## 0.9.0-beta.43
+
+### Patch Changes
+
+- 78e3eaf: Keep Codex prompt and inspection receipts compact by returning historical turn
+  identities and statuses without duplicating their item transcripts. Preserve the
+  current result, final answer, native history reference, descendants and observed
+  profile so long-running sessions remain within the bounded adapter reply limit.
+
+## 0.9.0-beta.42
+
+### Patch Changes
+
+- 3e1f87f: Reuse an already accepted RUN pause or stop when draining its EVAL scope, preserving the exact control identity and options without weakening stop or replaying work.
+
+## 0.9.0-beta.41
+
+### Patch Changes
+
+- c30ae89: Run generated Codex hooks with the explicitly selected CLI, or the isolated runtime shim before global installations. Preserve hook input and fail without a global fallback when the selected CLI is unavailable.
+
+## 0.9.0-beta.40
+
+### Patch Changes
+
+- 2b4b714: Admit ordinary managed HITL answers through their exact generation-bound native
+  prompt, preserving pause, Session, raw-answer and prompt integrity. Keep accepted
+  answer intent separate from physical delivery so stop drains native operations
+  and recovery can deliver an unanswered pause without replaying completed work.
+- c5eeb6f: Capture owned Codex home configuration and evidence without copying shared host
+  history or ephemeral helper links. Reuse the provisioned shared-entry contract
+  and retain strict rejection of unrelated external recovery artifact links.
+
+## 0.9.0-beta.39
+
+### Patch Changes
+
+- 803d2d0: Own managed Stage/Work execution, immutable boundary captures, mixed-profile handoffs and operator pause/stop/resume in the shared CLI runtime. Fence productive admission durably, reconcile exact native/process generations, preserve interrupted and unknown outcomes, and resume retained sessions without replaying completed work.
+
+  Control experiment-wide Subject, Judge and probe ownership through one retained resource registry, with detached control/recovery workers and explicit physical drain and release evidence. Require guarded shared-store migration and current runtime bindings; remove dependence on eval-owned productive adapters.
+
+  Discover native Codex children from spawn receipts and release terminal failed provider turns only after a fresh settled-tree observation.
+
+## 0.9.0-beta.38
+
+### Patch Changes
+
+- 44e3c80: Allow control operations to recheck failed provider cleanup after a leaderless process group exits naturally. Coalesce concurrent finalization retries, preserve the original exit and process lease, and keep live or unproven groups blocked without sending them signals.
+
+## 0.9.0-beta.37
+
+### Patch Changes
+
+- Wait for Antigravity provider-exit finalization before acknowledging clean shutdown or replacing the provider, preserving interrupted outcomes and cleanup failures. Treat signal-terminated process leaders as exited when checking remaining group ownership, and release completed initialization timers.
+
+## 0.9.0-beta.36
+
+### Patch Changes
+
+- Scope retained Antigravity tree liveness to its verified daemon shutdown before same-session recovery, preserving native outcomes and immutable prior receipts. New native tool or step activity still blocks overlapping prompt admission.
+
+## 0.9.0-beta.35
+
+### Patch Changes
+
+- Wait for npm registry propagation and verify the annotated tag created by Changesets before completing a guarded release.
+- Keep AGY native outcomes separate from settlement, invalidate old child settlement on new activity, and reserve productive operations before persistence across adapters.
+- Retain process-local native Stop observation in no-flow technical probes without installing project hooks or forwarding flow mutations.
+- Publish Work receipts after the authoritative SQL commit with resumable publication intents; preserve conflicting bytes, resume partial retries, and retain non-restorable diagnostic snapshots when receipts disagree.
+- Freeze the release source/canon tuple, reconcile uncertain publication, verify the isolated and exact global consumer, and retain phase receipts without creating another version on retry.
+
+## 0.9.0-beta.34
+
+### Patch Changes
+
+- Create and verify the immutable annotated Git tag as part of the guarded release publication.
+
+## 0.9.0-beta.33
+
+### Patch Changes
+
+- Add the guarded `release:publish` entrypoint that validates local npm auth,
+  checks the quality gate, verifies the published build metadata, and refreshes
+  the installed runtime before a release is considered complete.
+
+## 0.9.0-beta.32
+
+### Patch Changes
+
+- Reject reviewer results without per-aspect evidence when the Work is finished, and distinguish missing evidence from an aspect-coverage mismatch in legacy stage validation.
+
+## 0.9.0-beta.31
+
+### Patch Changes
+
+- Treat an authoritative fully-idle Antigravity root Stop as settlement evidence
+  for otherwise unobserved native children, while preserving their distinct
+  `settled_by_root` status rather than claiming individual completion.
+
+## 0.9.0-beta.30
+
+### Patch Changes
+
+- Bound Antigravity prompt liveness from the most recent native activity and preserve clean recovery settlement after an expired prompt.
+
+## 0.9.0-beta.29
+
+### Patch Changes
+
+- Recover completed stage boundaries without reopening accepted Work, and reject
+  stale coordinator identities and retired recovery generations.
+
+  Scope Antigravity terminal results and retained accounting to the current
+  conversation progress; preserve OpenCode and ACP provider errors for the actual
+  prompt. Keep configured adapter journals and bundled hook-denial behavior intact.
+
+## 0.9.0-beta.28
+
+### Patch Changes
+
+- Accept an authoritative terminal Antigravity root result when the provider omits a root Stop hook, while retaining fail-closed behavior for an observed non-idle tree.
+
+## 0.9.0-beta.27
+
+### Patch Changes
+
+- Resume retained native sessions from their active coordinator WorkSession, preserving the root launch record and rejecting lifecycle receipts from retired daemons.
+- Propagate Antigravity lifecycle hooks to direct native children while preserving workspace hooks, and settle confirmed Codex system-error turns without losing provider failure evidence.
+
+## 0.9.0-beta.26
+
+### Patch Changes
+
+- Reject interactive terminal input for Work and Stage result submission before routing or lifecycle dispatch. Require a pipe, input redirection, or result file so long JSON cannot be truncated by terminal input limits while progress appears to run indefinitely.
+
+## 0.9.0-beta.25
+
+### Patch Changes
+
+- Publish the final serial CLI test isolation together with the current bundled harness fixes.
+
+## 0.9.0-beta.24
+
+### Patch Changes
+
+- Retain supplemental files written to the check evidence directory in normal and recovered receipts. Keep required artifacts as minimum obligations and exclude symlinks.
+
+  Carry the verified cancellation guards, child settlement and process identity recovery fixes into the bundled harness adapters. Preserve native terminal events when an older Codex turn-page response arrives later.
+
+- Run CLI tests in isolated, serial file processes so process-global test state cannot leak between suites.
+
+## 0.9.0-beta.23
+
+### Minor Changes
+
+- bcfd8cb: Ship the six managed provider adapters with the CLI runtime, including their
+  daemon primitives and public adapter entrypoints. Add frozen mixed-execution
+  policy resolution and durable explicit external Work launch without changing a
+  same-profile external request into native delegation.
+
+## 0.9.0-beta.22
+
+### Patch Changes
+
+- Reject conflicting or ambiguous lifecycle receipts before any harness can
+  mutate a Session binding. Restore a Work-start receipt when its binding
+  fails, so the same verified invocation remains safely retryable.
+
+## 0.9.0-beta.21
+
+### Patch Changes
+
+- Validate every selected engine artifact and execute its pinned snapshot even when its version matches the router. Retain a new recovery interruption before root acknowledgement.
+
+## 0.9.0-beta.20
+
+### Patch Changes
+
+- Verify recovery payloads and workspace drift before resuming, preserve staged Git changes, publish snapshots through a temporary directory, and allow explicit recovery restoration into fresh targets. Fence RUN mutations and late asynchronous Work completion while recovery is active.
+
+## 0.9.0-beta.19
+
+### Patch Changes
+
+- Require a fresh trusted hook receipt from the physical Work owner before terminal stage or Work lifecycle commands can mutate a vNext RUN. Record terminal native-child observations at their originating Stage so unbound delegation is retained as a diagnostic instead of contaminating a later fan-out wave.
+
+## 0.9.0-beta.18
+
+### Patch Changes
+
+- Add Factory Droid harness routing, native lifecycle receipts and physical Session usage ingestion. Preserve child identity and reject conflicting hook replays or inclusive Droid usage to prevent incorrect Work binding and double counting.
+
+## 0.9.0-beta.17
+
+### Patch Changes
+
+- 0dd4da3: Verify current-attempt gate retries, deduplicate equivalent checks across gate references, retain archive locations across interrupted and repeated repairs, and align MERGE environment recovery guidance with source repair.
+
+  Snapshot SQLite consistently with VACUUM INTO and exclude local environment secrets, dependencies and caches from project/workspace snapshots.
+
+  Reconcile native child failures only against unique registered Work/Session attempts, retain non-restorable incomplete snapshots for failed evals, and expose unexpected merge-lane release failures for safe retry.
+
+## 0.9.0-beta.16
+
+### Patch Changes
+
+- Make repair verification causal and retryable, preserve attempt-qualified
+  evidence, expose RUN continuation from persisted lifecycle state, and keep
+  native child ownership bound to the physical harness session.
+
+## 0.9.0-beta.15
+
+### Patch Changes
+
+- Add owned temporary HTTP service supervision with allocated ports and readiness receipts. Prevent duplicate workspace bootstrap processes, retain resources when process ownership is uncertain, and share safe stop behavior between explicit stops and orphan reconciliation.
+
 ## 0.9.0-beta.14
 
 ### Patch Changes
@@ -864,6 +1603,7 @@ record` command with the bounded 15-probe contract.
 - 16f68a3: Add router-native engine snapshot commands and routed project-command dispatch.
 
   Also include the runtime/dashboard compatibility wave needed by the current Memory Bank canon:
+
   - target-based dashboard `open`/`refresh` commands and related-command help;
   - persisted FIFO lane waiters and merge wait-acquire specialization;
   - `migration plan/report/verify` evidence helpers for controlled `mb-upgrade` runtime migrations;