@deksden-com/dd-flow-cli 0.9.0-beta.15 → 0.9.0-beta.151

package/dist/harness-runtime/vendor/opencode-client/service.d.ts

@@ -0,0 +1,52 @@
+/** Connection details for a local OpenCode service. */
+export type Endpoint = {
+    /** Base URL of the service. */
+    readonly url: string;
+    /** Authentication required by the service, when configured. */
+    readonly auth?: {
+        /** HTTP authentication scheme. */
+        readonly type: "basic";
+        /** Basic authentication username. */
+        readonly username: string;
+        /** Basic authentication password. */
+        readonly password: string;
+    };
+};
+/** Options used to discover the local OpenCode service. */
+export type DiscoverOptions = {
+    /** Absolute registration file path. Defaults to the XDG state directory. */
+    readonly file?: string;
+    /** Required exact service version or compatibility predicate. */
+    readonly version?: string | ((version: string) => boolean);
+};
+/** Reason ensuring the service requires a new process. */
+export type EnsureReason = "missing" | "version-mismatch";
+/** Options used to ensure the local OpenCode service is running. */
+export type EnsureOptions = DiscoverOptions & {
+    /** Service command and arguments. Defaults to `opencode serve --service`. */
+    readonly command?: ReadonlyArray<string>;
+    /** Environment variables added to the inherited service process environment. */
+    readonly env?: Readonly<Record<string, string>>;
+    /** Called once before spawning a new service process. */
+    readonly onStart?: (reason: EnsureReason, previousVersion?: string) => void;
+};
+/** Options used to stop the local OpenCode service. */
+export type StopOptions = {
+    /** Absolute registration file path. Defaults to the XDG state directory. */
+    readonly file?: string;
+    /** How to handle persistent terminals before stopping the service. */
+    readonly pty?: "clear" | "handoff";
+};
+/** Contents of the local service registration file. */
+export type Info = {
+    /** Unique service instance identifier. */
+    readonly id?: string;
+    /** OpenCode version served by the process. */
+    readonly version?: string;
+    /** Base URL advertised by the service. */
+    readonly url: string;
+    /** Operating system process identifier. */
+    readonly pid: number;
+    /** Private service password, when authentication is enabled. */
+    readonly password?: string;
+};

package/dist/harness-runtime/vendor/opencode-client/service.js

@@ -0,0 +1 @@
+import"./chunks/service-probe-qav6mfdz.js";

package/dist/harness-runtime/vendor/opencode-client/shared-events.d.ts

@@ -0,0 +1,11 @@
+export * as SharedEvents from "./shared-events.js";
+export type SubscribeOptions = {
+    readonly signal?: AbortSignal;
+    /** Reports transport activity on the shared stream, including keepalive frames that carry no event. */
+    readonly onActivity?: () => void;
+};
+export declare function make<A extends {
+    readonly type: string;
+}>(connect: (signal: AbortSignal, onActivity: () => void) => AsyncIterable<A>): {
+    subscribe(options?: SubscribeOptions): AsyncIterable<A>;
+};

package/dist/harness-runtime/vendor/opencode-client/shared-events.js

@@ -0,0 +1,8 @@
+import {
+  make7,
+  exports_shared_events
+} from "./chunks/service-probe-frbwqjmf.js";
+export {
+  exports_shared_events as SharedEvents,
+  make7 as make
+};

package/dist/harness-runtime/vendor/opencode-client/solid/connection.d.ts

@@ -0,0 +1,37 @@
+import type { OpenCodeClient, OpenCodeEvent } from "../promise";
+export type ClientConnectionStatus = "connected" | "connecting" | "reconnecting";
+export type ClientConnectionEvent = {
+    readonly type: "client.connection";
+    readonly created: number;
+    readonly data: {
+        readonly status: "connecting" | "connected" | "disconnected" | "reconnecting";
+        readonly attempt: number;
+        readonly error?: string;
+    };
+};
+export type ClientConnectionOptions = {
+    readonly reconnect?: (signal: AbortSignal) => Promise<OpenCodeClient>;
+    readonly onEvent: (event: OpenCodeEvent) => void;
+    readonly flushInterval?: number;
+    readonly pageLifecycle?: boolean;
+    /**
+     * Abort and reconnect a stream that receives no bytes for this long. The server writes a keepalive
+     * comment every 15 seconds, so a quiet but healthy stream never trips this.
+     */
+    readonly idleTimeout?: number;
+    readonly log?: {
+        readonly debug?: (message: string, data?: Readonly<Record<string, unknown>>) => void;
+        readonly info?: (message: string, data?: Readonly<Record<string, unknown>>) => void;
+    };
+};
+export declare const defaultIdleTimeout = 45000;
+export declare const foregroundIdleThreshold = 20000;
+export declare function createClientConnection(initialApi: OpenCodeClient, options: ClientConnectionOptions): {
+    status: () => ClientConnectionStatus;
+    attempt: () => number;
+    error: () => string | undefined;
+    internal: {
+        history: () => ClientConnectionEvent[];
+        resync: (reason: string) => void;
+    };
+};

package/dist/harness-runtime/vendor/opencode-client/solid/connection.js

@@ -0,0 +1,10 @@
+import {
+  defaultIdleTimeout2,
+  foregroundIdleThreshold2,
+  createClientConnection2
+} from "../chunks/service-probe-ydhz1zrh.js";
+export {
+  createClientConnection2 as createClientConnection,
+  defaultIdleTimeout2 as defaultIdleTimeout,
+  foregroundIdleThreshold2 as foregroundIdleThreshold
+};

package/dist/harness-runtime/vendor/opencode-client/solid/data.d.ts

@@ -0,0 +1,211 @@
+import type { AgentInfo, CommandInfo, ConfigEntry, SessionFormCancelInput, FormInfo, SessionFormReplyInput, IntegrationInfo, LocationRef, McpResource, McpServer, ModelInfo, ModelRef, PermissionSavedInfo, PermissionRequest, PermissionReplyInput, Project, ProviderInfo, ReferenceInfo, SessionMessageInfo, SessionInfo, SessionInboxInfo, SessionInboxCompaction, ShellInfo, SkillInfo, VcsInfo, OpenCodeEvent, OpenCodeClient, WebSearchProvider } from "../promise";
+import { type SessionPromptInput } from "../promise";
+export type DataSessionStatus = "idle" | "running";
+/**
+ * Where a pending user prompt stands relative to the runner: `starting` is promoted at the next idle boundary,
+ * `steering` waits for the next step boundary of an execution that already delivered input, `stranded` outlived an
+ * execution that ended without delivering it, and `queued` waits for every steer to drain.
+ */
+export type DataPendingStatus = "starting" | "steering" | "stranded" | "queued";
+type OpenCodeEventMap = {
+    [Type in OpenCodeEvent["type"]]: Extract<OpenCodeEvent, {
+        type: Type;
+    }>;
+};
+export type CreateDataInput = {
+    readonly api: () => OpenCodeClient;
+    readonly directory: string;
+    /** Raw-message window used for an initial transcript read. Older pages retain their normal size. */
+    readonly initialMessageLimit?: () => number;
+    readonly event: {
+        readonly on: <Type extends OpenCodeEvent["type"]>(type: Type, handler: (event: OpenCodeEventMap[Type]) => void) => () => void;
+        readonly listen: (handler: (event: {
+            name: OpenCodeEvent["type"];
+            details: OpenCodeEvent;
+        }) => void) => () => void;
+    };
+    readonly connection?: {
+        readonly status: () => "connected" | "connecting" | "reconnecting";
+    };
+    /** Receives failed event-driven reads. Explicit reads still reject to their caller. */
+    readonly onError?: (error: unknown) => void;
+};
+export declare const settleMs = 150;
+export type FormWithLocation = FormInfo & {
+    readonly location?: LocationRef;
+};
+type ShellWithLocation = ShellInfo & {
+    readonly location: LocationRef;
+};
+export declare function locationKey(location: LocationRef): string;
+export declare function createData(config: CreateDataInput): {
+    on: <Type extends OpenCodeEvent["type"]>(type: Type, handler: (event: OpenCodeEventMap[Type]) => void) => () => void;
+    listen: (handler: (event: {
+        name: OpenCodeEvent["type"];
+        details: OpenCodeEvent;
+    }) => void) => () => void;
+    session: {
+        list(): SessionInfo[];
+        get(sessionID: string): SessionInfo;
+        creating(sessionID: string): boolean;
+        remember(info: SessionInfo): void;
+        setStatus(sessionID: string, status: DataSessionStatus): void;
+        root(sessionID: string): string;
+        family(sessionID: string): string[];
+        /** Clear heavy cached data for the root and all known descendants. */
+        evict(sessionID: string): void;
+        cost(sessionID: string): number;
+        status(sessionID: string): DataSessionStatus;
+        active(): string[];
+        input: {
+            list(sessionID: string): string[];
+            has(sessionID: string, inboxID: string): boolean;
+        };
+        pending: {
+            list(sessionID: string): SessionInboxInfo[];
+            status(sessionID: string, inboxID: string): DataPendingStatus | undefined;
+            sync(sessionID: string): Promise<void>;
+            invalidate(sessionID: string): void;
+        };
+        create(input: {
+            id?: string;
+            title?: string;
+            agent?: string;
+            model?: ModelRef;
+            location?: LocationRef;
+            projectID?: string;
+        }): {
+            id: string;
+            request: Promise<SessionInfo>;
+        };
+        compact(input: {
+            sessionID: string;
+            model?: ModelRef;
+        }): Promise<SessionInboxCompaction>;
+        prompt(input: SessionPromptInput & {
+            gate?: Promise<unknown>;
+            prepare?: () => Promise<unknown>;
+        }): Promise<import("../promise").SessionInboxUser>;
+        sync(sessionID: string, options?: {
+            children?: boolean;
+        }): Promise<void>;
+        invalidate(sessionID: string): void;
+        message: {
+            list(sessionID: string): SessionMessageInfo[];
+            get(sessionID: string, messageID: string): SessionMessageInfo | undefined;
+            sync(sessionID: string): Promise<void>;
+            more(sessionID: string): boolean;
+            loading(sessionID: string): boolean;
+            loadMore(sessionID: string, options?: {
+                all?: boolean;
+                signal?: AbortSignal;
+                /** Runs synchronously inside the store-publication batch. */
+                beforePublish?: () => void;
+            }): Promise<void>;
+            invalidate(sessionID: string): void;
+        };
+        permission: {
+            list(sessionID: string): PermissionRequest[];
+            sessions(): string[];
+            sync(sessionID: string): Promise<void>;
+            invalidate(sessionID: string): void;
+            reply(input: PermissionReplyInput): Promise<void>;
+        };
+        form: {
+            list(sessionID: string, ref?: LocationRef): FormWithLocation[] | undefined;
+            sessions(): string[];
+            sync(sessionID: string, ref?: LocationRef): Promise<void>;
+            invalidate(sessionID: string, ref?: LocationRef): void;
+            reply(input: SessionFormReplyInput, ref?: LocationRef): Promise<void>;
+            cancel(input: SessionFormCancelInput, ref?: LocationRef): Promise<void>;
+        };
+    };
+    project: {
+        list(): Project[];
+        get(projectID: string): Project;
+        sync(): Promise<void>;
+        invalidate(): void;
+        permission: {
+            list(projectID: string): PermissionSavedInfo[];
+            sync(projectID: string): Promise<void>;
+            invalidate(projectID: string): void;
+        };
+    };
+    shell: {
+        list(location?: LocationRef): ShellWithLocation[];
+        listBySession(sessionID: string): ShellWithLocation[];
+        get(id: string): ShellWithLocation | undefined;
+        sync: (ref?: LocationRef) => Promise<void>;
+        invalidate: (ref?: LocationRef) => void;
+    };
+    location: {
+        info(ref?: LocationRef): import("../promise").LocationPublicInfo | undefined;
+        default(): LocationRef;
+        syncInfo(ref?: LocationRef): Promise<void>;
+        sync(ref?: LocationRef): Promise<void>;
+        invalidate(ref?: LocationRef): void;
+        vcs: {
+            info: (ref?: LocationRef) => VcsInfo | undefined;
+            sync: (ref?: LocationRef) => Promise<void>;
+            invalidate: (ref?: LocationRef) => void;
+        };
+        agent: {
+            list: (ref?: LocationRef) => AgentInfo[] | undefined;
+            sync: (ref?: LocationRef) => Promise<void>;
+            invalidate: (ref?: LocationRef) => void;
+        };
+        command: {
+            list: (ref?: LocationRef) => CommandInfo[] | undefined;
+            sync: (ref?: LocationRef) => Promise<void>;
+            invalidate: (ref?: LocationRef) => void;
+        };
+        config: {
+            list: (ref?: LocationRef) => ConfigEntry[] | undefined;
+            sync: (ref?: LocationRef) => Promise<void>;
+            invalidate: (ref?: LocationRef) => void;
+        };
+        integration: {
+            list: (ref?: LocationRef) => IntegrationInfo[] | undefined;
+            sync: (ref?: LocationRef) => Promise<void>;
+            invalidate: (ref?: LocationRef) => void;
+        };
+        mcp: {
+            server: {
+                list: (ref?: LocationRef) => McpServer[] | undefined;
+                sync: (ref?: LocationRef) => Promise<void>;
+                invalidate: (ref?: LocationRef) => void;
+            };
+            resource: {
+                list: (ref?: LocationRef) => McpResource[] | undefined;
+                sync: (ref?: LocationRef) => Promise<void>;
+                invalidate: (ref?: LocationRef) => void;
+            };
+        };
+        model: {
+            list: (ref?: LocationRef) => ModelInfo[] | undefined;
+            sync: (ref?: LocationRef) => Promise<void>;
+            invalidate: (ref?: LocationRef) => void;
+        };
+        provider: {
+            list: (ref?: LocationRef) => ProviderInfo[] | undefined;
+            sync: (ref?: LocationRef) => Promise<void>;
+            invalidate: (ref?: LocationRef) => void;
+        };
+        reference: {
+            list: (ref?: LocationRef) => ReferenceInfo[] | undefined;
+            sync: (ref?: LocationRef) => Promise<void>;
+            invalidate: (ref?: LocationRef) => void;
+        };
+        websearch: {
+            list(location?: LocationRef): WebSearchProvider[] | undefined;
+            refresh(ref?: LocationRef): Promise<void>;
+        };
+        skill: {
+            list: (ref?: LocationRef) => SkillInfo[] | undefined;
+            sync: (ref?: LocationRef) => Promise<void>;
+            invalidate: (ref?: LocationRef) => void;
+        };
+    };
+};
+export type Data = ReturnType<typeof createData>;
+export {};

package/dist/harness-runtime/vendor/opencode-client/solid/data.js

@@ -0,0 +1,18 @@
+import {
+  settleMs2,
+  locationKey2,
+  createData2
+} from "../chunks/service-probe-9vdz0zwn.js";
+import"../chunks/service-probe-m2eywc8w.js";
+import"../chunks/service-probe-wjyeq25y.js";
+import"../chunks/service-probe-vyas3vgt.js";
+import"../chunks/service-probe-ecs5ftka.js";
+import"../chunks/service-probe-1y4a697q.js";
+import"../chunks/service-probe-nwcpakzx.js";
+import"../chunks/service-probe-vt9jbch8.js";
+import"../chunks/service-probe-frbwqjmf.js";
+export {
+  createData2 as createData,
+  locationKey2 as locationKey,
+  settleMs2 as settleMs
+};

package/dist/harness-runtime/vendor/opencode-client/solid/index.d.ts

@@ -0,0 +1,3 @@
+export * from "./data";
+export * from "./connection";
+export * from "./pty";

package/dist/harness-runtime/vendor/opencode-client/solid/index.js

@@ -0,0 +1,32 @@
+import"../chunks/service-probe-nwcpakzx.js";
+import"../chunks/service-probe-ecs5ftka.js";
+import"../chunks/service-probe-vt9jbch8.js";
+import"../chunks/service-probe-vyas3vgt.js";
+import"../chunks/service-probe-frbwqjmf.js";
+import"../chunks/service-probe-1y4a697q.js";
+import"../chunks/service-probe-wjyeq25y.js";
+import"../chunks/service-probe-m2eywc8w.js";
+import {
+  settleMs2,
+  locationKey2,
+  createData2
+} from "../chunks/service-probe-9vdz0zwn.js";
+import {
+  defaultIdleTimeout2,
+  foregroundIdleThreshold2,
+  createClientConnection2
+} from "../chunks/service-probe-ydhz1zrh.js";
+import {
+  createPtyClient2,
+  createPersistentPtyClient2
+} from "../chunks/service-probe-gne7h7mq.js";
+export {
+  createClientConnection2 as createClientConnection,
+  createData2 as createData,
+  createPersistentPtyClient2 as createPersistentPtyClient,
+  createPtyClient2 as createPtyClient,
+  defaultIdleTimeout2 as defaultIdleTimeout,
+  foregroundIdleThreshold2 as foregroundIdleThreshold,
+  locationKey2 as locationKey,
+  settleMs2 as settleMs
+};

package/dist/harness-runtime/vendor/opencode-client/solid/pty.d.ts

@@ -0,0 +1,22 @@
+import type { ExperimentalPersistentPtyConnectTokenInput, OpenCodeClient, PtyConnectTokenInput } from "../promise";
+export type PtyClientOptions = {
+    readonly url: string;
+    readonly openSocket?: (url: URL) => WebSocket;
+};
+export type PtyConnectInput = {
+    readonly ptyID: PtyConnectTokenInput["ptyID"];
+    readonly location?: PtyConnectTokenInput["location"];
+    readonly cursor?: number;
+};
+export type PersistentPtyConnectInput = {
+    readonly ptyID: ExperimentalPersistentPtyConnectTokenInput["ptyID"];
+    readonly cursor: number;
+    readonly attachmentID: string;
+    readonly takeover?: boolean;
+};
+export declare function createPtyClient(api: OpenCodeClient, options: PtyClientOptions): {
+    connect(input: PtyConnectInput): Promise<WebSocket>;
+};
+export declare function createPersistentPtyClient(api: OpenCodeClient, options: PtyClientOptions): {
+    connect(input: PersistentPtyConnectInput): Promise<WebSocket>;
+};

package/dist/harness-runtime/vendor/opencode-client/solid/pty.js

@@ -0,0 +1,8 @@
+import {
+  createPtyClient2,
+  createPersistentPtyClient2
+} from "../chunks/service-probe-gne7h7mq.js";
+export {
+  createPersistentPtyClient2 as createPersistentPtyClient,
+  createPtyClient2 as createPtyClient
+};

package/dist/harness-runtime/vendor/opencode-plugin.mjs

@@ -0,0 +1,3 @@
+export function define(plugin) {
+    return plugin;
+}

package/dist/protocol/local-files.js

@@ -62,16 +62,12 @@ export function ensureProtocolFiles(input) {
     writeState(statePath, { ...state, flow_contract: flowContract, updated_at: input.now });
     return { ...state, flow_contract: flowContract, updated_at: input.now };
 }
-export function ensureRuntimeProtocolFiles(input) {
+/** Read legacy state and prepare a registration without publishing files. */
+export function prepareRuntimeProtocolFiles(input) {
     const currentFlowContract = loadProjectFlowContract(input.projectRoot);
     const statePath = path.join(input.runtimeDir, "state.json");
     const existing = readStateIfExists(statePath);
     const flowContract = existing?.flow_contract ?? currentFlowContract;
-    ensureDir(input.runtimeDir);
-    const metadataPath = path.join(input.runtimeDir, "metadata.json");
-    if (!fs.existsSync(metadataPath)) {
-        fs.writeFileSync(metadataPath, `${JSON.stringify({ protocol_id: input.protocolId, handshake_id: input.handshakeId, project_root: input.projectRoot }, null, 2)}\n`);
-    }
     const state = existing ??
         {
             schema_version: schemaVersion,
@@ -103,9 +99,22 @@ export function ensureRuntimeProtocolFiles(input) {
             updated_at: input.now
         };
     const workspace = input.workspacePath ? { ...state.workspace, worktree_path: input.workspacePath } : state.workspace;
-    const nextState = { ...state, workspace, flow_contract: flowContract, updated_at: input.now };
-    writeState(statePath, nextState);
-    return nextState;
+    return { ...state, workspace, flow_contract: flowContract, updated_at: input.now };
+}
+/** Metadata is a retained write-once compatibility artifact, never authority. */
+export function publishRuntimeProtocolMetadata(input) {
+    ensureDir(input.runtimeDir);
+    const metadataPath = path.join(input.runtimeDir, "metadata.json");
+    if (fs.existsSync(metadataPath))
+        return;
+    const bytes = `${JSON.stringify({ protocol_id: input.protocolId, handshake_id: input.handshakeId, project_root: input.projectRoot }, null, 2)}\n`;
+    try {
+        fs.writeFileSync(metadataPath, bytes, { flag: "wx" });
+    }
+    catch (error) {
+        if (error.code !== "EEXIST")
+            throw error;
+    }
 }
 export function readState(projectRoot, protocolId) {
     return readStateFile(stateJsonPath(projectRoot, protocolId), protocolId);

package/dist/runtime/context.js

@@ -1,18 +1,22 @@
 import { getDatabase } from "../storage/database.js";
 import { resolveDdFlowHome } from "../storage/paths.js";
-export function createRouterContext(env) {
+import { assertImportAdmission } from "../storage/import-guard.js";
+export function createRouterContext(env, deadlineAt) {
     const ddFlowHome = resolveDdFlowHome(env);
     return {
         ddFlowHome,
-        db: getDatabase(ddFlowHome, "read_existing"),
+        db: getDatabase(ddFlowHome, "read_existing", undefined, deadlineAt),
         now: () => new Date().toISOString()
     };
 }
-export function createContext(env, mode = "initialize") {
+export function createContext(env, mode = "initialize", importPermitId, options = {}) {
     const ddFlowHome = resolveDdFlowHome(env);
+    if (options.resourceDatabaseMode === "prepared_existing" || options.resourceDatabaseMode === "initialize" || options.resourceDatabaseMode === "create_new" || options.resourceDatabaseMode === "retirement")
+        assertImportAdmission(ddFlowHome, importPermitId);
     return {
         ddFlowHome,
-        db: getDatabase(ddFlowHome, mode),
+        db: getDatabase(ddFlowHome, mode, importPermitId, options.databaseDeadlineAt ?? (mode === "hook" && env.DD_FLOW_HOOK_DEADLINE_AT ? Number(env.DD_FLOW_HOOK_DEADLINE_AT) : undefined)),
+        ...options,
         env,
         now: () => new Date().toISOString()
     };

package/dist/schemas/agent-profile.schema.json

@@ -7,7 +7,7 @@
   "properties": {
     "schema_id": {"const": "dd-flow/agent-profile@1"},
     "id": {"type": "string", "pattern": "^[A-Za-z0-9][A-Za-z0-9._-]*$"},
-    "harness": {"enum": ["codex", "zcode", "agy", "opencode", "grok"]},
+    "harness": {"enum": ["codex", "zcode", "agy", "opencode", "grok", "droid"]},
     "provider": {"type": "string", "minLength": 1},
     "model": {"type": "string", "minLength": 1},
     "reasoning": {"type": "string", "minLength": 1},

package/dist/schemas/code-review-decision.schema.json

@@ -5,6 +5,15 @@
   "additionalProperties": false,
   "required": ["schema_id", "summary", "findings"],
   "properties": {
+    "accepted_intent_acknowledgement": {
+      "type": "object", "additionalProperties": false,
+      "required": ["reviewed_fingerprint", "current_fingerprint", "clarification_refs"],
+      "properties": {
+        "reviewed_fingerprint": {"type": "string", "pattern": "^[a-f0-9]{64}$"},
+        "current_fingerprint": {"type": "string", "pattern": "^[a-f0-9]{64}$"},
+        "clarification_refs": {"type": "array", "uniqueItems": true, "items": {"type": "string", "pattern": "^HITL-[A-Za-z0-9._-]+$"}}
+      }
+    },
     "schema_id": {"const": "dd-flow/code-review-decision@3"},
     "summary": {"type": "string", "minLength": 1},
     "findings": {

package/dist/schemas/code-review-result.schema.json

@@ -8,7 +8,7 @@
     "schema_id": {"const": "dd-flow/code-review-result@1"},
     "verdict": {"enum": ["pass", "findings", "blocked"]},
     "summary": {"type": "string", "minLength": 1},
-    "aspects": {"type": "array", "items": {"type": "object", "additionalProperties": false, "required": ["aspect_id", "verdict", "summary", "evidence_refs"], "properties": {"aspect_id": {"type": "string", "minLength": 1}, "verdict": {"enum": ["pass", "findings", "blocked"]}, "summary": {"type": "string", "minLength": 1}, "evidence_refs": {"type": "array", "items": {"type": "string"}}}}},
+    "aspects": {"type": "array", "items": {"type": "object", "additionalProperties": false, "required": ["aspect_id", "verdict", "summary", "evidence_refs"], "properties": {"aspect_id": {"type": "string", "minLength": 1}, "verdict": {"enum": ["pass", "findings", "blocked"]}, "summary": {"type": "string", "minLength": 1}, "evidence_refs": {"type": "array", "minItems": 1, "items": {"type": "string", "minLength": 1}}}}},
     "findings": {"type": "array", "items": {"type": "object", "additionalProperties": false, "required": ["finding_id", "aspect_id", "priority", "problem", "impact", "required_outcome", "evidence_refs", "obligation_refs"], "properties": {"finding_id": {"type": "string", "pattern": "^FIND-[0-9]{3}$"}, "aspect_id": {"type": "string", "minLength": 1}, "priority": {"enum": ["p0", "p1", "p2", "p3"]}, "problem": {"type": "string", "minLength": 1}, "impact": {"type": "string", "minLength": 1}, "required_outcome": {"type": "string", "minLength": 1}, "evidence_refs": {"type": "array", "minItems": 1, "items": {"type": "string", "minLength": 1}}, "obligation_refs": {"type": "array", "minItems": 1, "items": {"type": "string", "minLength": 1}}}}}
   }
 }

package/dist/schemas/code-verification.schema.json

@@ -1,14 +1,16 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "dd-flow/code-verification@2",
+  "$id": "dd-flow/code-verification@3",
   "type": "object",
   "additionalProperties": false,
   "required": ["schema_id", "verdict", "summary", "unresolved", "deviations"],
   "properties": {
-    "schema_id": {"const": "dd-flow/code-verification@2"},
-    "verdict": {"enum": ["passed", "needs_repair", "blocked"]},
+    "schema_id": {"enum": ["dd-flow/code-verification@2", "dd-flow/code-verification@3"]},
+    "verdict": {"enum": ["passed", "needs_repair", "needs_checks", "blocked"]},
     "summary": {"type": "string", "minLength": 1},
     "unresolved": {"type": "array", "items": {"type": "string", "minLength": 1}},
-    "deviations": {"type": "array", "items": {"type": "string", "minLength": 1}}
-  }
+    "deviations": {"type": "array", "items": {"type": "string", "minLength": 1}},
+    "document_updates": {"type": "array", "uniqueItems": true, "items": {"type": "string", "minLength": 1}}
+  },
+  "allOf": [{"if": {"properties": {"schema_id": {"const": "dd-flow/code-verification@2"}}}, "then": {"properties": {"verdict": {"enum": ["passed", "needs_repair", "blocked"]}}, "not": {"required": ["document_updates"]}}}]
 }

package/dist/schemas/code-work-batch.schema.json

@@ -16,10 +16,10 @@
     "spine": {"type": "object", "additionalProperties": false, "required": ["user_outcome", "component_responsibility", "must_preserve", "non_goals", "acceptance_contribution"], "properties": {"user_outcome": {"type": "string", "minLength": 1}, "component_responsibility": {"type": "string", "minLength": 1}, "must_preserve": {"$ref": "#/$defs/strings"}, "non_goals": {"$ref": "#/$defs/stringList"}, "acceptance_contribution": {"type": "string", "minLength": 1}}},
     "obligation": {"type": "object", "additionalProperties": false, "required": ["id", "statement"], "properties": {"id": {"type": "string", "minLength": 1}, "statement": {"type": "string", "minLength": 1}}},
     "acceptance": {"type": "object", "additionalProperties": false, "required": ["criterion_id", "path", "environment", "fixtures", "cleanup", "check_refs", "expected_evidence", "proof_limits", "gate"], "properties": {"criterion_id": {"type": "string", "pattern": "^AC-[0-9]+$"}, "path": {"type": "string", "minLength": 1}, "environment": {"type": "string", "minLength": 1}, "fixtures": {"$ref": "#/$defs/stringList"}, "cleanup": {"type": "string", "minLength": 1}, "check_refs": {"type": "array", "uniqueItems": true, "items": {"type": "string", "minLength": 1}}, "expected_evidence": {"$ref": "#/$defs/strings"}, "proof_limits": {"$ref": "#/$defs/strings"}, "gate": {"type": "string", "minLength": 1}}},
-    "check": {"type": "object", "additionalProperties": false, "required": ["id", "command", "purpose", "run_at", "availability"], "properties": {"id": {"type": "string", "pattern": "^CHK-[A-Za-z0-9-]+$"}, "command": {"type": "string", "minLength": 1}, "purpose": {"type": "string", "minLength": 1}, "run_at": {"enum": ["work", "code", "readiness", "merge", "release", "external"]}, "availability": {"enum": ["available", "planned"]}, "provided_by": {"type": "string", "minLength": 1}, "definition": {"type": "string", "minLength": 1}, "required_artifacts": {"type": "array", "uniqueItems": true, "items": {"type": "string", "minLength": 1}}, "ports": {"type": "array", "uniqueItems": true, "items": {"type": "string", "pattern": "^[A-Za-z][A-Za-z0-9_]*$"}}}, "allOf": [{"if": {"properties": {"availability": {"const": "planned"}}, "required": ["availability"]}, "then": {"required": ["provided_by", "definition"], "properties": {"command": {"pattern": "^@check/"}}}}]},
+    "check": {"type": "object", "additionalProperties": false, "required": ["id", "command", "purpose", "run_at", "availability"], "properties": {"id": {"type": "string", "pattern": "^CHK-[A-Za-z0-9-]+$"}, "command": {"type": "string", "minLength": 1}, "purpose": {"type": "string", "minLength": 1}, "run_at": {"enum": ["work", "code", "readiness", "merge", "release"]}, "availability": {"enum": ["available", "planned"]}, "provided_by": {"type": "string", "minLength": 1}, "definition": {"type": "string", "minLength": 1}, "required_artifacts": {"type": "array", "uniqueItems": true, "items": {"type": "string", "minLength": 1}}, "ports": {"type": "array", "uniqueItems": true, "items": {"type": "string", "pattern": "^[A-Za-z][A-Za-z0-9_]*$"}}, "inputs": {"type": "array", "uniqueItems": true, "items": {"type": "string", "minLength": 1}}, "reuse": {"const": "deterministic"}}, "allOf": [{"if": {"properties": {"availability": {"const": "planned"}}, "required": ["availability"]}, "then": {"required": ["provided_by", "definition"], "properties": {"command": {"pattern": "^@check/"}}}}]},
     "documentUpdate": {"type": "object", "additionalProperties": false, "required": ["path", "action", "owner", "reason", "baseline_sha256"], "properties": {"path": {"type": "string", "minLength": 1}, "action": {"enum": ["create", "update"]}, "owner": {"type": "string", "minLength": 1}, "reason": {"type": "string", "minLength": 1}, "baseline_sha256": {"type": ["string", "null"], "pattern": "^[a-f0-9]{64}$"}}},
     "reviewFinding": {"type": "object", "additionalProperties": false, "required": ["finding_ref", "priority", "problem", "impact", "required_outcome", "evidence_refs", "obligation_refs", "decision_reason", "check_refs"], "properties": {"finding_ref": {"type": "string", "minLength": 1}, "priority": {"enum": ["p0", "p1", "p2", "p3"]}, "problem": {"type": "string", "minLength": 1}, "impact": {"type": "string", "minLength": 1}, "required_outcome": {"type": "string", "minLength": 1}, "evidence_refs": {"$ref": "#/$defs/strings"}, "obligation_refs": {"$ref": "#/$defs/strings"}, "decision_reason": {"type": "string", "minLength": 1}, "check_refs": {"$ref": "#/$defs/strings"}}},
-    "repair": {"type": "object", "additionalProperties": false, "required": ["origin_work_ids"], "anyOf": [{"required": ["check_receipt_id", "failure_receipt_path"]}, {"required": ["review_findings"]}, {"required": ["semantic_unresolved", "verification_path"]}], "properties": {"origin_work_ids": {"$ref": "#/$defs/strings"}, "check_receipt_id": {"type": "string", "minLength": 1}, "failure_receipt_path": {"type": "string", "minLength": 1}, "review_findings": {"type": "array", "minItems": 1, "items": {"$ref": "#/$defs/reviewFinding"}}, "semantic_unresolved": {"$ref": "#/$defs/strings"}, "verification_path": {"type": "string", "minLength": 1}}},
+    "repair": {"type": "object", "additionalProperties": false, "required": ["origin_work_ids", "verification_check_refs"], "anyOf": [{"required": ["check_receipt_id", "failure_receipt_path"]}, {"required": ["review_findings"]}, {"required": ["semantic_unresolved", "verification_path"]}], "properties": {"origin_work_ids": {"$ref": "#/$defs/strings"}, "check_receipt_id": {"type": "string", "minLength": 1}, "failure_receipt_path": {"type": "string", "minLength": 1}, "review_findings": {"type": "array", "minItems": 1, "items": {"$ref": "#/$defs/reviewFinding"}}, "semantic_unresolved": {"$ref": "#/$defs/strings"}, "verification_path": {"type": "string", "minLength": 1}, "verification_check_refs": {"type": "array", "minItems": 1, "items": {"$ref": "#/$defs/check"}}}},
     "work": {"type": "object", "additionalProperties": false, "required": ["schema_id", "key", "launch_policy", "source", "task", "semantic_spine", "requirements", "acceptance", "document_updates", "required_read", "discovery_boundary", "planned_write_areas", "checks", "provides_checks", "stop_conditions", "depends_on", "result_schema"], "properties": {"schema_id": {"const": "dd-flow/code-work-packet@5"}, "key": {"type": "string", "minLength": 1}, "launch_policy": {"const": "fresh_agent_required"}, "source": {"$ref": "#/$defs/source"}, "repair": {"$ref": "#/$defs/repair"}, "task": {"type": "string", "minLength": 1}, "semantic_spine": {"$ref": "#/$defs/spine"}, "requirements": {"type": "array", "minItems": 1, "items": {"$ref": "#/$defs/obligation"}}, "acceptance": {"type": "array", "items": {"$ref": "#/$defs/acceptance"}}, "document_updates": {"type": "array", "items": {"$ref": "#/$defs/documentUpdate"}}, "required_read": {"$ref": "#/$defs/strings", "description": "Mandatory starting sources, not a read allowlist."}, "discovery_boundary": {"$ref": "#/$defs/strings", "description": "Likely discovery areas; additional project-local reads are allowed."}, "planned_write_areas": {"type": "array", "items": {"type": "string", "minLength": 1}, "description": "Soft coordination hints only. A worker may change any necessary project file inside the RUN workspace."}, "checks": {"type": "array", "items": {"$ref": "#/$defs/check"}}, "provides_checks": {"type": "array", "items": {"$ref": "#/$defs/check"}}, "stop_conditions": {"$ref": "#/$defs/strings", "description": "Hard semantic or external stop conditions; path prediction drift is not a stop condition."}, "depends_on": {"type": "array", "uniqueItems": true, "items": {"type": "string", "minLength": 1}}, "result_schema": {"const": "dd-flow/code-work-result@3"}}}
   }
 }