@deksden-com/dd-flow-cli 0.9.0-beta.141 → 0.9.0-beta.142

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @deksden-com/dd-flow-cli
 
+## 0.9.0-beta.142
+
+### Patch Changes
+
+- Wait for the owned OpenCode v2 listener through typed SDK transport startup failures and expose bounded read-only scope inventory batches for validated retirement-proof reuse.
+- Retry no-effect physical confirmation on the same held check, bootstrap or service process before dispatch, without replaying commands or extending exhausted authority.
+
 ## 0.9.0-beta.141
 
 ### Patch Changes

package/dist/build-info.json

@@ -1,8 +1,8 @@
 {
   "cli_package": "@deksden-com/dd-flow-cli",
-  "cli_version": "0.9.0-beta.141",
-  "cli_commit": "c370c6e9beaefba2216bbf5bbadac02e4827768f",
-  "built_at": "2026-10-17T22:37:48.634Z",
+  "cli_version": "0.9.0-beta.142",
+  "cli_commit": "a5b068e5cc52809ac0ea0687e40a49f9379bb198",
+  "built_at": "2026-10-18T10:20:25.955Z",
   "built_with_canon": {
     "version": "4.1.2",
     "commit": "1ddedf9d3f086e046f8e7b194c739ec386e7c8b9",

package/dist/cli/command-inputs.js

@@ -156,7 +156,7 @@ export const commandInputs = {
     "run control pause": route(0, `${control} request-id`, "grace-ms wait-ms escalate", "force"),
     "run control stop": route(0, `${control} request-id`, "grace-ms wait-ms escalate", "force"),
     "runtime scope fence": route(0, "scope-id request-id"),
-    "runtime scope status": route(0, "scope-id"),
+    "runtime scope status": route(0, "", "scope-id scope-ids-json"),
     "runtime scope stop": route(0, "scope-id request-id"),
     "runtime scope control": route(0, "scope-id request-id mode", "manifest-json", "", "", { mode: ["pause", "stop"] }),
     "runtime scope serve": route(0, "scope-id generation"),

package/dist/cli/command-option-descriptions.js

@@ -143,6 +143,7 @@ export const runtimeOptionDescriptions = {
     schema: "Registered JSON schema name against which the supplied file is validated.",
     "schema-dir": "Explicit schema directory for validation; not a workflow handler registry or permission to execute code.",
     "scope-id": "Exact retained runtime/EVAL scope identity; operations must not affect neighboring scopes.",
+    "scope-ids-json": "Read-only JSON array of 1..16 unique retained scope IDs; returns ordered fresh inventories without fencing or stopping them.",
     "semantic-file": "Stage semantic result artifact; applicable schema and finish checks are selected independently.",
     session: "Physical Session selector for source-backed usage aggregation.",
     "session-id": "Exact retained physical Session identity for registration, status, stop or usage synchronization.",

package/dist/cli/help.js

@@ -169,6 +169,7 @@ never registers a project, selects a model automatically or creates a runtime DB
     ["runtime scope", `Usage:
   dd-flow runtime scope fence --scope-id EVAL_ID --request-id ID --json
   dd-flow runtime scope status --scope-id EVAL_ID --json
+  dd-flow runtime scope status --scope-ids-json '["EVAL_ID","QUAL_ID"]' --json
   dd-flow runtime scope stop --scope-id EVAL_ID --request-id ID --json
   dd-flow runtime scope control --scope-id EVAL_ID --request-id ID --mode pause|stop [--manifest-json JSON] --json
   dd-flow runtime scope resume --scope-id EVAL_ID --request-id ID --generation N --capture-key SHA256 --json

package/dist/cli/run-cli.js

@@ -92,7 +92,7 @@ import { prepareCommandRoute } from "./command-inputs.js";
 import { parseLifecycleCommand } from "../services/lifecycle-command.js";
 import { dispatchRuntimeProcess, prepareRuntimeProcess } from "./runtime-process.js";
 import { reconcileFlowRunHealth } from "../services/run-health.js";
-import { fenceRuntimeBudget, runtimeBudgetStatus, prepareRuntimeScopeControl, prepareRuntimeScopeFence } from "../services/runtime-budget.js";
+import { fenceRuntimeBudget, runtimeBudgetStatus, prepareRuntimeScopeStatus, prepareRuntimeScopeControl, prepareRuntimeScopeFence } from "../services/runtime-budget.js";
 import { stopRuntimeScope } from "../services/runtime-scope-stop.js";
 import { launchRuntimeScopeControl, launchRuntimeScopeResume, prepareRuntimeScopeReconciliation, prepareRuntimeScopeServing, reconcileRuntimeScopeControl, serveRuntimeScopeControl } from "../services/runtime-scope-worker.js";
 import { prepareRuntimeScopeResumeRequest } from "../services/runtime-scope-resume.js";
@@ -1017,6 +1017,8 @@ async function prepareCliInputValue(args, context, io, scopeProjectRoot, respons
             return prepareError(error, { parameter: "from/output" });
         }
     }
+    if (route.key === "runtime scope status")
+        prepareRuntimeScopeStatus(optionalOption(parsed, "scope-id"), optionalOption(parsed, "scope-ids-json"));
     if (["runtime scope fence", "runtime scope stop"].includes(route.key))
         prepareRuntimeScopeFence(requiredOption(parsed, "scope-id"), requiredOption(parsed, "request-id"));
     if (route.key === "runtime scope resume")
@@ -2778,8 +2780,12 @@ async function dispatchRuntime(context, command, parsed, progress, prepared = {}
             return { ok: true, ...await stopRuntimeScope(context, requiredOption(parsed, "scope-id"), requiredOption(parsed, "request-id")) };
         }
         if (parsed.positional.length === 1 && parsed.positional[0] === "status") {
-            if ([...parsed.options.keys()].some(key => key !== "scope-id") || [...parsed.options.values()].some(values => values.length !== 1))
-                throw new AppError("usage", "Usage: dd-flow runtime scope status --scope-id EVAL_ID", 2);
+            if ([...parsed.options.keys()].some(key => !["scope-id", "scope-ids-json"].includes(key)) || parsed.options.size !== 1 || [...parsed.options.values()].some(values => values.length !== 1))
+                throw new AppError("usage", "Use exactly one of --scope-id or --scope-ids-json", 2);
+            const ids = prepareRuntimeScopeStatus(optionalOption(parsed, "scope-id"), optionalOption(parsed, "scope-ids-json"));
+            if (parsed.options.has("scope-ids-json")) {
+                return { ok: true, scopes: ids.map(id => runtimeBudgetStatus(context, id)) };
+            }
             return { ok: true, ...runtimeBudgetStatus(context, requiredOption(parsed, "scope-id")) };
         }
         if (parsed.positional.length !== 1 || parsed.positional[0] !== "fence" || [...parsed.options.keys()].some(key => !["scope-id", "request-id"].includes(key)) || [...parsed.options.values()].some(values => values.length !== 1))

package/dist/harness-runtime/lib/dd-opencode-daemon.mjs

@@ -499,7 +499,9 @@ export async function awaitOpenCodeStartup(client, state, child, { timeoutMs = S
         if (["loading", "activating", "registered"].includes(plugin?.state?.status)) await mark(`required_plugin_${plugin.state.status}`);
       } catch (error) {
         const transient = error.code === "opencode_unavailable" && error.retryable === true
-          && (error.details?.native_type === "ServiceUnavailableError" || phase === "server" && ["TypeError", "ConnectionError", "Error"].includes(error.details?.native_type));
+          // Safe pre-identity reads use the normalized observation category,
+          // not a version-specific SDK error wrapper. No productive RPC here.
+          && (phase === "server" || error.details?.native_type === "ServiceUnavailableError");
         if (!transient) throw error;
       }
       const pause = Math.min([250, 500, 1000, 2000][Math.min(attempt++, 3)], remaining());

package/dist/services/code-checks.js

@@ -1245,6 +1245,7 @@ export function runCheck(command, cwd, environment, stdout, stderr, heartbeat, o
         let failure;
         let stopping = false;
         let closed = false;
+        let admitted = false;
         let progress;
         let cleanup;
         let cleanupUnconfirmed = false;
@@ -1280,7 +1281,7 @@ export function runCheck(command, cwd, environment, stdout, stderr, heartbeat, o
             });
         };
         const observationTimer = setInterval(() => {
-            if (stopping || closed || observation.phase?.() === "serving")
+            if (stopping || closed || !admitted || observation.phase?.() === "serving")
                 return;
             if (runnerClock && runnerProgress) {
                 try {
@@ -1331,22 +1332,6 @@ export function runCheck(command, cwd, environment, stdout, stderr, heartbeat, o
             error = "check process did not provide a PID";
             return;
         }
-        try {
-            onSpawn(child.pid);
-        }
-        catch (cause) {
-            stop(cause);
-            return;
-        }
-        if (observation.leaseExpiresAt) {
-            const expiry = observation.leaseExpiresAt();
-            if (!expiry || !renewalConfirmed(renewal, performance.now(), expiry)) {
-                stop("check confirmation has no current authority");
-                return;
-            }
-        }
-        child.stdin.end("admitted\n");
-        clock.sample(outputCursor);
         const renew = () => {
             if (stopping || closed)
                 return;
@@ -1394,7 +1379,46 @@ export function runCheck(command, cwd, environment, stdout, stderr, heartbeat, o
                 stop(cause);
             }
         };
-        progress = setInterval(renew, 15_000);
+        // The shell is held on stdin: a no-effect identity read may be retried,
+        // but never the command or an admission callback with unknown effects.
+        const confirmation = createRenewalState();
+        confirmation.uncertainSince = performance.now();
+        let confirmationError;
+        const admit = () => {
+            renewalTimer = undefined;
+            if (stopping || closed)
+                return;
+            if (confirmationError && !renewalRemaining(confirmation)) {
+                stop(confirmationError);
+                return;
+            }
+            try {
+                onSpawn(child.pid);
+            }
+            catch (cause) {
+                if (cause instanceof AppError && cause.code === "process_ownership_unknown"
+                    && cause.details.reason === "physical_identity_unavailable" && maintenanceRetryable(cause)
+                    && renewalFailure(confirmation)) {
+                    confirmationError = cause;
+                    renewalTimer = setTimeout(admit, Math.min(renewalDelay(confirmation), renewalRemaining(confirmation)));
+                    return;
+                }
+                stop(cause);
+                return;
+            }
+            if (observation.leaseExpiresAt) {
+                const expiry = observation.leaseExpiresAt();
+                if (!expiry || !renewalConfirmed(renewal, performance.now(), expiry)) {
+                    stop("check confirmation has no current authority");
+                    return;
+                }
+            }
+            admitted = true;
+            child.stdin.end("admitted\n");
+            clock.sample(++outputCursor);
+            progress = setInterval(renew, 15_000);
+        };
+        admit();
     });
 }
 function checkShellScript() {

package/dist/services/runtime-budget.js

@@ -199,6 +199,22 @@ export function admitRuntimeCheck(context, id, leaseToken) {
     }
 }
 /** Scope selection uses retained registration, never a current profile or PID search. */
+export function prepareRuntimeScopeStatus(scopeId, scopeIdsJson) {
+    if (Boolean(scopeId) === Boolean(scopeIdsJson))
+        throw new AppError("usage", "Use exactly one of --scope-id or --scope-ids-json", 2);
+    let ids;
+    try {
+        ids = scopeId ? [scopeId] : JSON.parse(scopeIdsJson);
+    }
+    catch {
+        throw new AppError("usage", "Scope inventory requires JSON IDs", 2);
+    }
+    if (!Array.isArray(ids) || !ids.length || ids.length > 16 || ids.some(id => typeof id !== "string") || new Set(ids).size !== ids.length)
+        throw new AppError("usage", "Scope inventory requires 1..16 unique scope IDs", 2);
+    for (const id of ids)
+        parseRuntimeBudget(JSON.stringify({ schema_id: "dd-flow/runtime-budget@1", scope_id: id, per_harness: {} }));
+    return ids;
+}
 export function runtimeBudgetStatus(context, scopeId) {
     parseRuntimeBudget(JSON.stringify({ schema_id: "dd-flow/runtime-budget@1", scope_id: scopeId, per_harness: {} }));
     return withResourceReadSnapshot(resourceHome(context), db => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@deksden-com/dd-flow-cli",
-  "version": "0.9.0-beta.141",
+  "version": "0.9.0-beta.142",
   "description": "Mechanical runtime CLI for dd-flow workflows.",
   "type": "module",
   "packageManager": "pnpm@10.23.0",