@deksden-com/dd-flow-cli 0.9.0-beta.152 → 0.9.0-beta.156

package/dist/services/worktrees.js

@@ -57,7 +57,8 @@ export function prepareManagedWorktree(input) {
         if (typeof input[key] !== "string" || !input[key].trim() || input[key].includes("\0"))
             invalid(`--${key} must be a non-empty value without NUL`);
     const git = (args) => {
-        const result = spawnSync("git", ["-C", projectRoot, ...args], { encoding: "utf8", env: { ...process.env, GIT_OPTIONAL_LOCKS: "0" } });
+        const result = spawnSync("git", ["-C", projectRoot, ...args], { encoding: "utf8",
+            env: { ...Object.fromEntries(Object.entries(process.env).filter(([key]) => !key.startsWith("GIT_"))), GIT_OPTIONAL_LOCKS: "0" } });
         if (result.error)
             throw result.error;
         return result;
@@ -90,7 +91,9 @@ export async function createManagedWorktree(context, input, prepared = prepareMa
     // Worktrunk owns creation; the CLI supplies its project-scoped service path
     // as a one-shot config override rather than relying on a developer's user config.
     const command = [worktrunk.bin, "-C", projectRoot, "--config-set", `worktree-path = ${JSON.stringify(prepared.path)}`, "switch", "--create", prepared.branch, "--base", prepared.base, "--no-cd", "--format=json", "-y"];
-    const result = await runExternal(command);
+    // commandResult overlays process.env, so explicitly clear inherited Git
+    // redirection instead of merely omitting it from the override object.
+    const result = await runExternal(command, Object.fromEntries(Object.keys(process.env).filter(key => key.startsWith("GIT_")).map(key => [key, undefined])));
     if (result.exit_code !== 0)
         throw new AppError("worktrunk_command_unavailable", "Worktrunk switch failed", 1, { command: sanitizeCommand(command), result });
     const response = parseWorktrunkResponse(result.stdout, command);
@@ -256,12 +259,12 @@ export function worktreeRecord(context, projectId, protocolId) {
 function activeWorktreeRecord(context, projectId, protocolId) {
     return context.db.get("SELECT * FROM worktree_records WHERE project_id = ? AND protocol_id = ? AND status = 'active'", [projectId, protocolId]);
 }
-async function runExternal(command) {
+async function runExternal(command, env = {}) {
     const [bin, ...args] = command;
     if (!bin) {
         return { exit_code: null, signal: null, stdout: "", stderr: "Missing executable." };
     }
-    const result = await commandResult(bin, args, { startupMs: SETUP_STARTUP_MS });
+    const result = await commandResult(bin, args, { startupMs: SETUP_STARTUP_MS, env });
     const evidence = processEvidence(result);
     return {
         exit_code: result.exit_code,

package/dist/storage/database.js

@@ -106,7 +106,7 @@ export function ensureLifecycleInvocationStorage(db) {
     CREATE TABLE IF NOT EXISTS lifecycle_invocations (
       id TEXT PRIMARY KEY, scope_json TEXT NOT NULL, command TEXT NOT NULL,
       fingerprint TEXT NOT NULL, status TEXT NOT NULL,
-      event_key TEXT UNIQUE, identity_json TEXT, deadline INTEGER, outcome_json TEXT,
+      event_key TEXT UNIQUE, identity_json TEXT, admission_json TEXT, deadline INTEGER, outcome_json TEXT,
       created_at TEXT NOT NULL, updated_at TEXT NOT NULL
     );
     CREATE INDEX IF NOT EXISTS idx_lifecycle_invocations_scope
@@ -117,6 +117,7 @@ export function ensureLifecycleInvocationStorage(db) {
       PRIMARY KEY(packet_sha256, invocation_id)
     );
   `);
+    ensureColumn(db, "lifecycle_invocations", "admission_json", "ALTER TABLE lifecycle_invocations ADD COLUMN admission_json TEXT");
 }
 /** RUN authority stays in its existing store; process leases stay in runtime.sqlite. */
 export function ensureRunControlStorage(db) {

package/dist/verification-components.json

@@ -18,11 +18,17 @@
       "cli/input-preparation.js",
       "cli/native-hook-preparation.js",
       "domain/contracts.js",
+      "domain/delivery-flows.js",
       "domain/diagnostic-aspects.js",
       "domain/diagnostic-flows.js",
+      "domain/distill-flow.js",
       "domain/entity-ids.js",
       "domain/flow-contract.js",
+      "domain/interactive-flow.js",
+      "domain/memory-fix-flow.js",
+      "domain/review-fix-flow.js",
       "domain/session-coverage.js",
+      "domain/source-snapshot-flows.js",
       "domain/stage-catalog.js",
       "domain/stage-handler-identities.js",
       "domain/validation.js",
@@ -45,6 +51,7 @@
       "schemas/stage-report.schema.json",
       "schemas/stage-start-response.schema.json",
       "services/accepted-intent.js",
+      "services/assigned-lifecycle.js",
       "services/audit.js",
       "services/branch-context.js",
       "services/build-info.js",
@@ -57,6 +64,20 @@
       "services/code-checks.js",
       "services/command-context.js",
       "services/config.js",
+      "services/controller-result-authority.js",
+      "services/delivery-access.js",
+      "services/delivery-approval.js",
+      "services/delivery-artifact.js",
+      "services/delivery-checks.js",
+      "services/delivery-execution.js",
+      "services/delivery-intents.js",
+      "services/delivery-policy.js",
+      "services/delivery-procedures.js",
+      "services/delivery-request.js",
+      "services/delivery-result.js",
+      "services/delivery-stage-entry.js",
+      "services/delivery-stage-handlers.js",
+      "services/delivery-stage-results.js",
       "services/descriptor-coordinator-session.js",
       "services/descriptor-root-work.js",
       "services/descriptor-run-settlement.js",
@@ -65,15 +86,28 @@
       "services/descriptor-stage-settlement.js",
       "services/descriptor-stage-start.js",
       "services/diagnostic-evidence.js",
+      "services/diagnostic-repair-intake.js",
+      "services/diagnostic-repair-source-intake.js",
       "services/diagnostic-report-publication.js",
       "services/diagnostic-report.js",
+      "services/diagnostic-run-bundle.js",
       "services/diagnostic-snapshot.js",
       "services/diagnostic-stage-handlers.js",
       "services/diagnostic-stage-results.js",
+      "services/diagnostic-start.js",
       "services/diagnostic-work-batch.js",
       "services/diagnostic-work-collection.js",
       "services/diagnostic-work-registration.js",
       "services/diagnostic-work-results.js",
+      "services/distill-document-publication.js",
+      "services/distill-publication-custody.js",
+      "services/distill-stage-handlers.js",
+      "services/distill-stage-results.js",
+      "services/distill-user-inputs.js",
+      "services/distill-work-batch.js",
+      "services/distill-work-collection.js",
+      "services/distill-work-registration.js",
+      "services/distill-work-results.js",
       "services/engines.js",
       "services/eval-snapshots.js",
       "services/execution-bundles.js",
@@ -93,11 +127,36 @@
       "services/ids.js",
       "services/installation-lock.js",
       "services/installed-flow-source.js",
+      "services/interactive-attached-session.js",
+      "services/interactive-baseline-custody.js",
+      "services/interactive-before-versions.js",
+      "services/interactive-bundle-data.js",
+      "services/interactive-checks.js",
+      "services/interactive-finish-integration.js",
+      "services/interactive-git-baseline.js",
+      "services/interactive-git-dispatch.js",
+      "services/interactive-mutation-scope.js",
+      "services/interactive-request.js",
+      "services/interactive-run-bundle.js",
+      "services/interactive-stage-entry.js",
+      "services/interactive-stage-handlers.js",
+      "services/interactive-stage-observation.js",
+      "services/interactive-stage-results.js",
+      "services/interactive-user-inputs.js",
+      "services/interactive-work-batch.js",
+      "services/interactive-work-collection.js",
+      "services/interactive-work-completion.js",
+      "services/interactive-work-context.js",
+      "services/interactive-work-history.js",
+      "services/interactive-work-registration.js",
+      "services/interactive-work-results.js",
+      "services/interactive-work-start.js",
       "services/lanes.js",
       "services/lifecycle-command.js",
       "services/lifecycle-contract.js",
       "services/lifecycle-invocations.js",
       "services/managed-daemon-binding.js",
+      "services/managed-lease-monitor.js",
       "services/managed-processes.js",
       "services/memory-accepted-composition.js",
       "services/memory-baseline-preservation.js",
@@ -123,6 +182,19 @@
       "services/memory-finish-handler.js",
       "services/memory-finish-integration.js",
       "services/memory-finish-readiness.js",
+      "services/memory-fix-finish-integration.js",
+      "services/memory-fix-intake-custody.js",
+      "services/memory-fix-intake-settlement.js",
+      "services/memory-fix-publication.js",
+      "services/memory-fix-repair-admission.js",
+      "services/memory-fix-request.js",
+      "services/memory-fix-run-bundle.js",
+      "services/memory-fix-scope.js",
+      "services/memory-fix-sources.js",
+      "services/memory-fix-stage-entry.js",
+      "services/memory-fix-stage-handlers.js",
+      "services/memory-fix-stage-results.js",
+      "services/memory-flow-user-inputs.js",
       "services/memory-git-integration.js",
       "services/memory-historical-corrected-review.js",
       "services/memory-historical-original-review.js",
@@ -210,8 +282,11 @@
       "services/migrations.js",
       "services/native-session-control.js",
       "services/operator-profiles.js",
+      "services/physical-startup.js",
       "services/plan-runtime.js",
       "services/portable-refs.js",
+      "services/project-flow-source.js",
+      "services/project-git-integration.js",
       "services/project-registry.js",
       "services/project-summary.js",
       "services/projects.js",
@@ -231,6 +306,11 @@
       "services/repair-receipt.js",
       "services/review-copy.js",
       "services/review-deferral.js",
+      "services/review-fix-handoff.js",
+      "services/review-fix-intake-custody.js",
+      "services/review-fix-stage-entry.js",
+      "services/review-fix-stage-handlers.js",
+      "services/review-fix-stage-results.js",
       "services/run-control-receipt.js",
       "services/run-control.js",
       "services/run-controller-state.js",
@@ -240,6 +320,7 @@
       "services/run-recovery-guard.js",
       "services/run-recovery.js",
       "services/run-start-custody.js",
+      "services/run-timeline.js",
       "services/runs.js",
       "services/runtime-budget.js",
       "services/runtime-command.js",
@@ -254,6 +335,7 @@
       "services/stage-pause.js",
       "services/stage-report-renderer.js",
       "services/stage-work-graph.js",
+      "services/technical-notes.js",
       "services/tooling.js",
       "services/usage.js",
       "services/verification-matrix.js",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@deksden-com/dd-flow-cli",
-  "version": "0.9.0-beta.152",
+  "version": "0.9.0-beta.156",
   "description": "Mechanical runtime CLI for dd-flow workflows.",
   "type": "module",
   "packageManager": "pnpm@10.23.0",
@@ -35,8 +35,9 @@
     "test:hybrid:canon": "node --import ./scripts/source-test-loader.mjs --test --test-concurrency=1 scripts/hybrid-canon.test.mjs scripts/hybrid-inventory.test.mjs scripts/hybrid-consumers.test.mjs scripts/hybrid-schema-copies.test.mjs scripts/verify-e3-canon.test.mjs",
     "test:e2": "node --import ./scripts/source-test-loader.mjs --test --test-concurrency=1 scripts/e2-*.test.mjs",
     "test:e2:installed": "node --test scripts/verify-e2-built-cli.test.mjs scripts/verify-e2-installed-cli.test.mjs",
-    "test:e3": "node --import ./scripts/source-test-loader.mjs --test --test-concurrency=1 scripts/e3-*.test.mjs",
+    "test:e3": "node --import ./scripts/source-test-loader.mjs --test --test-concurrency=1 scripts/e3-*.test.mjs scripts/verify-e3-engine-storage.test.mjs",
     "test:e4": "node --import ./scripts/source-test-loader.mjs --test --test-concurrency=1 scripts/e4-*.test.mjs",
+    "test:e5": "node --import ./scripts/source-test-loader.mjs --test --test-concurrency=1 scripts/e5-*.test.mjs",
     "test:e3:canon": "node --import ./scripts/source-test-loader.mjs --test scripts/verify-e3-canon.test.mjs",
     "test:release": "node --test scripts/verify-release-build.test.mjs && vitest run --project=release",
     "test:release:build": "node --test --test-concurrency=1 scripts/verify-release-build.test.mjs scripts/verify-e2-built-cli.test.mjs scripts/verify-e2-installed-cli.test.mjs",

package/tools/verification-jobs.mjs

@@ -41,6 +41,13 @@ function self() {
   return identity;
 }
 function alive(owner, processes = snapshot()) { return same(owner, processes.find(p => p.pid === owner?.pid)); }
+function producerSettled(attempt) {
+  const owner = attempt.owner, processes = snapshot();
+  return !alive(owner, processes) && Number.isSafeInteger(owner?.pgid) && owner.pgid > 0
+    && Array.isArray(owner.groups) && !processes.some(p => !p.zombie && p.pgid === owner.pgid)
+    && owner.groups.every(group => Number.isSafeInteger(group.pgid) && group.pgid > 0
+      && !processes.some(p => !p.zombie && p.pgid === group.pgid));
+}
 function release(lock, owner) {
   // Only one reclaimer can remove this unique fence. A late reclaimer cannot
   // unlink the next owner's record after the directory has been reacquired.
@@ -81,23 +88,36 @@ async function claim(lock, signal) {
 
 /** One immutable producer attempt. The index is scheduling state, not proof;
  * callers must validate the returned report bytes and meaningful inputs. */
-export async function withContractAttempt(index, { rerun = false, reason, signal, validate, validationKey } = {}, action) {
+export async function withContractAttempt(index, { rerun = false, failedOnly = false, reason, signal, validate, validationKey } = {}, action) {
   if (rerun && !reason) throw new Error('Explicit rerun requires a reason');
   const lock = `${index}.claim`;
   const initial = optional(index);
-  if (initial?.status === 'running' && !rerun) {
-    const result = await joinAttempt(initial, signal);
-    await validate?.(result.result, initial);
-    signal?.throwIfAborted();
-    return result;
+  if (initial?.status === 'running' && (!rerun || failedOnly)) {
+    try {
+      const result = await joinAttempt(initial, signal);
+      await validate?.(result.result, initial);
+      signal?.throwIfAborted();
+      return result;
+    } catch (error) {
+      signal?.throwIfAborted();
+      if (!rerun || !producerSettled(initial)) throw error;
+    }
   }
   let joined = null;
   const owner = await claim(lock, signal);
   let attempt;
   try {
-    const current = optional(index); // Mandatory reread under claim.
-    if (current?.status === 'running' && !rerun) { joined = current; }
-    else if (current && !rerun) {
+    let current = optional(index); // Mandatory reread under claim.
+    if (rerun && current?.status === 'running' && producerSettled(current)) {
+      const terminal = optional(current.report);
+      if (terminal && (terminal.attemptId !== current.attemptId || !['passed', 'failed', 'interrupted'].includes(terminal.status))) throw blocked('Invalid terminal producer evidence');
+      signal?.throwIfAborted();
+      if (!terminal) atomicJson(current.report, { attemptId: current.attemptId, status: 'interrupted', error: 'Producer exited without terminal evidence; owner and owned process groups are absent', reason });
+      current = { ...current, status: terminal?.status ?? 'interrupted' };
+      atomicJson(index, current);
+    }
+    if (current?.status === 'running' && (!rerun || failedOnly)) { joined = current; }
+    else if (current && (!rerun || failedOnly && current.status === 'passed')) {
       if (current.status !== 'passed') throw blocked(`Retained ${current.status} attempt requires explicit rerun: ${index}`);
       try {
         const terminal = read(current.report);
@@ -249,9 +269,14 @@ async function execute(job, { home, owner, nested, scope, signal, env, save, que
   // node:test sets this private flag for its own children; a separately managed
   // test command must produce a standalone report, not use its parent's IPC.
   delete childEnv.NODE_TEST_CONTEXT;
-  for (const name of ['HOME', 'TMPDIR', 'XDG_CACHE_HOME', 'XDG_CONFIG_HOME', 'XDG_RUNTIME_DIR', 'CODEX_HOME', 'AGY_HOME', 'DD_FLOW_HOME', 'DD_FLOW_RESOURCE_HOME', 'DD_FLOW_CONFIG_HOME']) {
+  for (const name of ['HOME', 'XDG_CACHE_HOME', 'XDG_CONFIG_HOME', 'XDG_RUNTIME_DIR', 'CODEX_HOME', 'AGY_HOME', 'DD_FLOW_HOME', 'DD_FLOW_RESOURCE_HOME', 'DD_FLOW_CONFIG_HOME']) {
     childEnv[name] = path.join(root, name.toLowerCase()); fs.mkdirSync(childEnv[name], { recursive: true });
   }
+  // Unix socket paths have a small OS limit. Keep the per-attempt temporary
+  // world short even when the durable coordinator/report home is deeply nested.
+  const tempBase = process.platform === 'win32' ? os.tmpdir() : fs.realpathSync('/tmp');
+  childEnv.TMPDIR = fs.mkdtempSync(path.join(tempBase, 'ddv-'));
+  atomicJson(path.join(root, 'temporary.json'), { tmpdir: childEnv.TMPDIR });
   // Only an explicit native/delivery descriptor may opt into provider credentials.
   const token = randomUUID();
   if (!nested) {