@deksden-com/dd-flow-cli 0.9.0-beta.16 → 0.9.0-beta.160

package/CHANGELOG.md

@@ -1,5 +1,963 @@
 # @deksden-com/dd-flow-cli
 
+## 0.9.0-beta.160
+
+### Patch Changes
+
+- Prepare pinned Worktrunk through a provider-free CLI and reuse its verified cache across isolated runs through the explicit resource home. Use owned installation locks, bounded native download retries and actual write progress across retries. Preserve acquisition context and refuse replay when child cleanup is unknown (plan 114).
+
+## 0.9.0-beta.159
+
+### Patch Changes
+
+- Follow committed lifecycle successors consistently in native and CLI admission, including changed-fingerprint repair retries. Keep native-call bindings immutable after expiry and restrict actionable repairs to the current stage attempt/cycle.
+- Recognize semantic completion progress independently of the Work graph; pause genuine nonprogress with current diagnostics instead of replaying historical failures (plan 113).
+- Resolve emitted JavaScript import specifiers to their TypeScript fixture sources when selecting affected verification consumers, without selecting an unrelated full suite.
+
+## 0.9.0-beta.158
+
+### Patch Changes
+
+- Resolve proven explicit Work refusals through coordinator retry/block/pause/fail decisions. Retain accepted corrections and launch history, recover lost acceptance/pause acknowledgements, and keep native/provider failures fenced. Align PLAN stop conditions with accepted intent (plan 112).
+- Register focused PLAN/canon verification ownership so release selection never falls back to an unrelated full gate.
+
+## 0.9.0-beta.157
+
+### Patch Changes
+
+- b7555a7: Preserve actionable lifecycle output and actual Work inputs through preparation retries, persist refusal-to-successor links, and allow distinct same-child correction episodes without duplicate dispatch. Reconcile consistent observations of one technical pause without losing its accepted source.
+
+  Retire owned execution after native shutdown failures without fabricating native success. Preserve AGY terminal task evidence and reject capture when native inventory changes during physical observation.
+
+## 0.9.0-beta.156
+
+### Patch Changes
+
+- b59c32b: Preserve current lifecycle successors, restore OpenCode retained child admission, and separate Work correction from technical pause and native resource cleanup. Continue an eligible completed child once per Work without replaying unknown effects or treating descriptive deviations as unfinished obligations.
+
+  Observe a concurrent controller-launch winner instead of rejecting an already accepted duplicate resume; retain physical ownership and launch CAS fences.
+
+## 0.9.0-beta.155
+
+Versions beta.153 and beta.154 were used by unpublished preparation candidates; this release uses a new immutable identity. Older pending Changesets below reconcile release accounting rather than claim their functionality is new.
+
+Scoped workers validate only their own consumed inputs; the coordinator retains whole-selection checks. Include integrated E5 flow owners and Changesets prerelease metadata in the reviewed impact map.
+
+Connect the selected E5 and engine-storage Node contracts to their explicit runner groups without changing historical release-candidate@1 requirements.
+
+### Patch Changes
+
+- 025a576: Accept managed lifecycle results through their retained assignments, without a
+  fresh native tool receipt. Preserve accepted work when native retirement fails,
+  report technical notes separately and retain conflicting-writer safeguards.
+- f06d07f: Replace mandatory full release gates with change-impact verification and reusable scoped evidence. Publish component identities for technical EVAL proof reuse without coupling unrelated native adapter changes.
+- fa9d145: Preserve AGY task completion and native profile provenance; validate recursive runner proofs through a portable shared core. Add bounded, effect-fenced transient provider recovery and managed ZCode continuation contracts, and expose immutable browser capability facts to checks.
+- 623b866: Keep native hooks lightweight and admit first child Work through the existing CLI assignment and CAS. Preserve original late-tool identities and failures, extend native verification only on real progress, and prevent historical public callbacks from starving a fresh successor.
+
+  Separate accepted execution from resource retirement, refuse graceful cancellation of newly active required work, and retain shutdown notices as technical evidence. Preserve E5 coordinator and historical result custody with assigned lifecycle execution.
+
+- a2ec242: Scope verification to meaningful per-contract inputs and reuse immutable evidence
+  across release selections and squash-equivalent sources. Isolate bounded jobs,
+  retain exact attempts and prevent orphaned children from freeing verification slots.
+
+## 0.9.0-beta.151
+
+### Patch Changes
+
+- Preserve causal AGY completion and model/role evidence, share bounded recursive
+  runner proof, and continue eligible provider failures with effect-fenced native
+  child admission. Admit the reviewed CP253 ZCode bridge and bind browser facts
+  to stage context without turning an unavailable probe into a baseline gate.
+- Replace blanket release checks with scoped contract receipts and package
+  delivery verification; keep provider, Memory Bank and CLI ownership separate
+  so harness fixes do not launch unrelated acceptance suites.
+
+## 0.9.0-beta.150
+
+### Patch Changes
+
+- Retain bound test-runtime failure diagnostics, reconcile AGY native task
+  completion and cancellation without model calls, keep cleanup retry available
+  until owned resources settle, and disable auto-update for managed AGY launches.
+
+## 0.9.0-beta.149
+
+### Patch Changes
+
+- 54899ed: Publish explicit proven Codex and OpenCode shutdown activity, reject unknown activity as clean settlement, and decode OpenCode finite log synchronization markers consistently for revision and completion.
+
+## 0.9.0-beta.148
+
+### Patch Changes
+
+- Validate lifecycle issuance before accessing storage, and align native readiness,
+  shutdown and overload regression fixtures with the current execution contract.
+
+## 0.9.0-beta.147
+
+### Patch Changes
+
+- Use the shared setup startup budget for silent prerequisite probes and preserve
+  typed subprocess failure diagnostics for init and upgrade without leaking output.
+
+## 0.9.0-beta.146
+
+### Patch Changes
+
+- d031e09: Add owned, trajectory-bound read-only AGY node-state inspection for native qualification. Capture parent executor idle independently from required-tree readiness, native task inventories and pending completion messages. Preserve qualified production prompt/stop ordering and owned fixture cleanup in native acceptance tooling.
+- acee374: Dispatch independent architectural criticism for Memory Bank audits when their accepted architecture aspect is applicable, matching the frozen review instructions.
+- 709f281: Reject diagnostic citation hash mismatches as correctable no-effect proposal errors, returning only the assigned relative path and computed digest. Retain bounded lifecycle correction, strict evidence acceptance and fatal snapshot/custody protection.
+- 18b0593: Treat unchanged-scope coverage annotations as correctable proposal errors and assign global diagnostic finding IDs from exact completed Work results during analysis settlement. Preserve strict scope, content, source and independent-review custody checks.
+- 7457963: Reject rewritten diagnostic focus as a bounded, no-effect proposal correction
+  requiring an exact copy of the accepted predecessor. Foreign focus modes,
+  changed aspect applicability and ownership violations remain fatal; no changed
+  focus is accepted and no frozen source selection is rewritten.
+- 1b315bf: Issue the exact immediate predecessor in diagnostic coordinator bindings and
+  align the frozen schema's list bound with the runtime contract. Transitive
+  history is a correctable proposal shape error; foreign direct bindings still
+  fail without acceptance.
+- da5bbf0: Allow diagnostics to record newly discovered unavailable sources without treating
+  them as a scope change. Retain accepted source-gap observations independently of
+  coordinator paraphrasing, while keeping focus, coverage and source-custody guards.
+- 6825b76: Allow diagnostic reports to disclose additional limitations while retaining all reviewed evidence, decisions and existing uncertainty unchanged.
+- e779d4d: Express diagnostic analyst/critic field restrictions in the frozen Work schema.
+  An analyst supplying review decisions remains rejected, but uses the existing
+  correctable schema-output path rather than a fatal foreign-aspect error.
+- 9939c87: Carry accepted predecessor and independently settled Work limitations into diagnostic analytical and review results in the CLI. Preserve coordinator annotations and raw proposals; retain schema bounds, scope, evidence and independent-review checks.
+- b765022: Clarify that generated review observations are not original project evidence.
+  Reject missing snapshot citations as correctable no-effect result errors while
+  preserving fatal containment, non-file and filesystem-access failures.
+- 249e5e3: Express preflight and analytical coordinator output boundaries in the frozen
+  stage schema, so unsupported findings or review decisions use existing format
+  correction while independent review remains mandatory.
+- 6f4011f: Separate required native execution readiness from owned resource retirement across harnesses. Require versioned, incarnation-bound shutdown phase proofs and retain process birth identities before provider shutdown. Qualify AGY daemon readiness independently from physical cleanup; ambiguous ancestry and native service identities remain unproven.
+
+  Fence retained recovery by the current control generation and preserve late activity during shutdown publication. Add metadata-bound AGY native tree control for typed services, gated by complete native qualification; control acknowledgements never substitute for physical retirement.
+
+- a5461c9: Preserve validated repair authority through lifecycle settlement, atomically issue
+  nonterminal successors, and retain accepted HITL context across same-session
+  overload continuation. Support versioned bounded runner and browser evidence,
+  and separate AGY physical shutdown from current native idle proof.
+- e00cda9: Use the verified relocated engine when launching a forked hybrid RUN. Preserve
+  the original bundle and manifest bytes as provenance; reject changed executable
+  content, semantic manifest metadata, or an unbound relocation path.
+- 759138b: Start restored generic-flow coordinator sessions in the current admitted RUN
+  workspace instead of the historical frozen execution path, without changing
+  retained execution bytes or profiles.
+- 5bea245: Use the verified current RUN project and workspace paths when settling restored
+  descriptor stages and terminal RUNs. Preserve frozen provenance, ownership,
+  Git-drift checks and exact replay rather than querying historical project roots.
+- 42cb47b: Read retained descriptor stage-input custody through trusted RUN publication
+  relocations after restore, preserving original packet bytes and rejecting
+  ambiguous or changed custody.
+
+## 0.9.0-beta.145
+
+### Patch Changes
+
+- Normalize Git diagnostics for gitless workspace inventories without masking damaged repositories; keep integration fixture tools on an explicitly selected PATH and scope simulated journal stalls to failure persistence.
+
+- Select Gemini's encoded reasoning level without an unsupported AGY `--effort` override; reject conflicting requested levels before native launch, while retaining explicit effort for other model families.
+
+- Preserve the effective environment across pinned engine dispatch. Isolate package-consumer routing and own executable test discovery; reduce duplicate gate preparation without removing release guarantees.
+
+- ea4e88e: Add hybrid mb-upgrade with retained current/target selection, scoped migration
+  bootstrap, preserved old-bank evidence, independent Work review and marker-free
+  ordinary flow readiness. Keep existing RUN engine bindings and reconcile partial
+  startup and publication through their original requests.
+
+  Retain bounded Codex admission phase diagnostics and separate native-host startup
+  headroom from the shared admission deadline. Refuse writer migration while a
+  MERGE request remains unresolved, including same-session integration without a
+  live process; terminal historical requests do not block migration.
+
+  Preserve project lint exclusions while independently checking affected active
+  Markdown through a separate mb-lint configuration when needed (`--config`
+  support required). Retain both reports and the effective configuration as check
+  evidence. Allow malformed terminal proposal JSON to be corrected through the
+  existing no-effect lifecycle successor without repeating Git integration.
+  Align generated FINISH guidance with the minimal proposal and CLI-owned sealed
+  coverage, findings and evidence for both initialization and upgrade.
+  Keep exact source-canon spec/protocol provenance relations distinct from
+  consumer-owned link targets when checking customized guidance. Derive scoped
+  exceptions from retained target bytes; new project/body links and Git-aware
+  ignored-target checks remain active, and project configuration stays unchanged.
+  Reject malformed bounded JSON at the shared Memory finish ingress as a
+  correctable proposal before stage-specific projections can misclassify it as
+  retained-custody corruption. Reuse the existing issued lifecycle successor;
+  empty/oversized input, unknown stages and downstream identity/effect checks
+  remain strict. Never repair proposal bytes or rerun settled work implicitly.
+
+  Keep the native hook's per-call deadline out of project-check input identity so
+  VERIFY can accept unchanged passed checks across ordinary CLI and hook calls.
+  Continue to invalidate evidence when application environment, files, policy or
+  physical receipts change.
+
+  Check retained process birth after a permission-denied existence probe, so a
+  reused macOS system PID cannot keep an already closed agent scope unresolved.
+  Unknown identity remains conservative and foreign processes are never signaled.
+
+  Validate a current completed correction wave as one synchronous SQL snapshot,
+  sharing private successful proofs across its registration and settled histories.
+  Fresh traversals, failures, allocation fences and physical file checks remain
+  independent; no proof is reused across commands or asynchronous boundaries.
+
+- 481702b: Keep native hook admission within its qualified shared deadline without loading execution/recovery graphs. Retain matched late native terminal outcomes before shutdown, support AGY ordered stream request evidence and recovered lifecycle boundaries, and publish exact current instruction packets as readable Markdown without replaying committed lifecycle operations.
+
+  Distinguish repeated real checksum scans from duplicate progress notifications. Retry only effect-free physical self-start observations within the existing owner-bound startup horizon, without relaunching processes or renewing unconfirmed leases.
+
+  Allow an initially bound maintenance cancellation signal to drain its owned heartbeat transport during daemon shutdown.
+
+  Retain startup failures only for the exact physical owner, preventing duplicate workers from overwriting or cleaning up a winner. Keep setup progress distinct across owned CLI producers without admitting stale or duplicate notifications.
+
+## 0.9.0-beta.144
+
+### Patch Changes
+
+- Preserve exact failed-Turn tool-settlement evidence when a fresh overload inspection leaves native items unloaded. Continue the same Session with bounded backoff; contradictory pending effects and unknown native outcomes remain blocked.
+
+## 0.9.0-beta.143
+
+### Patch Changes
+
+- 60daf29: Keep an early AGY provider rejection as the readiness failure rather than a stream-drain cleanup failure. Preserve strict journal and physical cleanup errors.
+- d86445c: Observe accepted Codex Turns while persisted history is unavailable, preserving exact native outcomes, cancellation identity and conservative tree settlement. Keep RPC errors intact in compact journals.
+
+  Treat successful metadata-only history responses as incomplete in cancellation and final result admission; require exact current Turn item evidence before bypassing retained-output/profile safeguards. Reject incomplete cancellation records and terminal settlement without a valid Turn identity. Prefer native completed output over stale snapshots of the same Turn.
+
+## 0.9.0-beta.142
+
+### Patch Changes
+
+- Wait for the owned OpenCode v2 listener through typed SDK transport startup failures and expose bounded read-only scope inventory batches for validated retirement-proof reuse.
+- Retry no-effect physical confirmation on the same held check, bootstrap or service process before dispatch, without replaying commands or extending exhausted authority.
+- Backfilled from published artifact commit `19ca01d6`: Keep native Session observation stable, use bounded shared Codex read phases, scope check evidence to declared inputs, retain accepted intake/HITL review sources, and reject stale review coverage without productive replay. These changes were already shipped; beta.143 does not count them as new work.
+
+## 0.9.0-beta.141
+
+### Patch Changes
+
+- 49dbfa3: Retain precise check and startup failures, validate bound browser inactivity proof,
+  and observe test progress without losing diagnostics or rollback guarantees.
+
+## 0.9.0-beta.140
+
+- Compare observable birth after EPERM so a foreign reused PID is not mistaken for the retained owner; unknown identity remains conservative.
+
+- Separate pre-reboot physical retirement of controllers and waiting probes from their retained logical outcome.
+
+- Preserve legacy resource writer contracts during terminal retirement and recognize retained resource aliases without changing their historical bytes.
+- Retire structurally validated registries predating writer contracts without installing a new schema or fence definition.
+
+### Patch Changes
+
+- Retire validated pre-reboot legacy daemon processes without claiming native Session success or signalling reused PIDs.
+
+## 0.9.0-beta.139
+
+### Patch Changes
+
+- Route each Stage from current RUN workspace authority, preserve known native
+  terminal outcomes independently of diagnostic reads, and retain exact owned
+  OpenCode hook identity failures. Fence automatic cleanup from active owners,
+  persist retirement observation budgets and causal errors, validate resource
+  homes before writes, and preserve maintenance effect/cleanup boundaries.
+  Use progress-observed fixture transport without losing native CLI exit codes.
+- dafdb20: Use a shared bounded provider-overload episode: two same-Session continuations,
+  5/15-second backoff with jitter, and explicit provider-unavailable exhaustion.
+  Normalize native capacity failures across adapters, retain restart-safe retry
+  budgets, and close child episodes only after confirmed successful native Turns.
+
+## 0.9.0-beta.138
+
+- Retain causal native check failures and permit fenced source repair in the same Session. Reject malformed repair proofs and preserve physical execution blockers during reconciliation.
+
+## 0.9.0-beta.137
+
+- Preserve shared reasoning/mode options in OpenCode v2 and support non-generative doctor before daemon startup.
+
+### Patch Changes
+
+- e65a615: Retain scoped native child failures through read-only ZCode observation and durable dispatch fences. Bind failure provenance to current Work/Session/controller identities. Publish materialized PROTOCOLIZE evidence separately from authored input, and replay completed stages without revalidating an archived worktree or regressing later stages.
+
+## 0.9.0-beta.136
+
+### Patch Changes
+
+- 8c75ca6: Reconcile retained RUN health using physical ownership and controller settlement without dispatch or lease takeover. Persist target-stage pauses, preserve unknown historical timing, and leave future pending stages untouched after a failure.
+
+## 0.9.0-beta.135
+
+### Patch Changes
+
+- Migrate dd-opencode to the pinned OpenCode v2 client/plugin API, owned private servers and durable inbox/outcome reconciliation. Bind native lifecycle hooks, sliding shell progress and shared overload continuation; hoist engine dependency snapshots without duplicating shared graphs. Legacy v1 runtime states remain available only through the archived engine.
+
+## 0.9.0-beta.134
+
+### Patch Changes
+
+- 7dae2f0: Freeze explicitly accepted RUN operational decisions and deliver the same verified policy/context to Stage and Work. Preserve their authority across recovery, require new acceptance for imported experiments, and retain native aborted-check reasons.
+- Deliver plan 082 Work authority, native failure evidence and Judge diagnostic repairs; admit the exact CP226 ZCode bridge after root, concurrent-child, same-child continuation and clean shutdown probes.
+- 46b7dbc: Persist stage usage through the shared completion service, including vNext SPECIFY and PROTOCOLIZE. Completed stage records now retain scoped token measurements for console readers; missing measurements remain unavailable.
+- 430a7df: Prepare writable parent directories before handing agents HITL, Work result and CODE blocker input paths. Preserve existing payloads and reject unavailable destinations without publishing unusable instructions.
+- 539de25: Capture bounded observation journals without requiring global runtime silence.
+  Retain RUN-scoped productive authority, immutable payload checksums and recovery
+  materials. Finalize stop-after captures as candidates after native settlement.
+- 9ca6bb3: Use scoped native progress and inactivity windows instead of productive-work
+  lifetime limits. Preserve observation uncertainty and exact operation fences
+  across quiet probes and observer replacement; bound utility output and cleanup.
+  Separate native-work and control waits across all six bundled adapters, keep
+  serving services exempt from output silence, and stop MERGE on confirmed lease
+  loss. New runtime contracts are operation-progress@1, operation-errors@2 and
+  native-operation-wait@1.
+- 0a8923a: Separate existing controller lease renewal from new launch admission so terminal RUNs can finish boundary capture and native settlement. Make terminal stop retain durable cleanup evidence without reopening productive recovery, and expose exact-owner finalization diagnostics. Full-cycle regressions now check sealed final capture and physical retirement before fixture cleanup.
+- 6b2c491: Preserve unavailable ZCode cache and reasoning counters as null instead of inventing measured zeros. Mixed histories keep optional totals unknown while retaining confirmed input, output, and total tokens.
+
+## 0.9.0-beta.133
+
+### Patch Changes
+
+- Use the exact retained committed lease for admission and capacity waits,
+  rather than an expired daemon-state snapshot.
+- Validate direct check runner evidence contracts before PLAN/Work admission.
+- beta.132 is retained as a superseded local candidate; review found the stale
+  admission horizon before release or scored E2E.
+
+## 0.9.0-beta.132
+
+### Patch Changes
+
+- Preserve structured CLI failure receipts when valid setup-phase diagnostics
+  precede the error envelope; reject malformed/error-bearing phase records.
+- beta.131 remains an unaccepted immutable local candidate; its full gate
+  exposed this parsing defect before engine promotion.
+
+## 0.9.0-beta.131
+
+### Patch Changes
+
+- Bound maintenance to verified lease authority, reconcile settled unknown
+  heartbeat acknowledgements without replay, and separate resource/RUN effects.
+- Keep scope-free maintenance cold imports narrow; finish observes its own
+  settlement window after the preceding flight.
+- Retain bound structured test outcomes and progress with profile@7, preserving
+  profile@6 compatibility. Route tooling/unknown failures away from product repair.
+
+## 0.9.0-beta.130
+
+### Patch Changes
+
+- Bind AGY startup observation to its actual daemon configuration, preserve
+  explicit OpenCode observation windows and retain the last confirmed setup phase.
+- beta.129 remained an unaccepted local candidate; its failed native gate is
+  retained separately rather than reissued under a different artifact digest.
+
+## 0.9.0-beta.129
+
+### Patch Changes
+
+- Observe setup phases across engine admission and all native daemon startups;
+  retain operation-bound progress and distinguish silence from observation loss.
+- Run engine health/bind/fork probes and managed tooling asynchronously outside
+  storage writers, preserving dependency failures, cancellation and owned cleanup.
+- Stream ZCode binary identity and preserve startup progress through EVAL control.
+
+## 0.9.0-beta.128
+
+### Patch Changes
+
+- Separate cold maintenance CLI imports from storage inactivity. Start the short
+  sliding storage window only after request-bound readiness, retaining the finite
+  ownership horizon and unknown-write recovery. Diagnose startup versus storage
+  expiry and preserve exact registration operation identity.
+
+## 0.9.0-beta.127
+
+### Patch Changes
+
+- Scope boundary consistency to productive RUN authority and retain accepted Work results across snapshot relocation without requiring unchanged provider service files.
+- Reject conflicting retained native operation inputs before transport dispatch, preserving the same conflict classification across all harness observers.
+- Distinguish recoverable pre-shutdown refusal from durable unclean shutdown in full-cycle fixtures. Verify clean settlement or retained blocker custody before teardown, with native operation-inspection and cancel-tree parameter parity.
+
+## 0.9.0-beta.126
+
+### Patch Changes
+
+- Separate existing controller renewal from productive launch admission, allowing terminal RUNs to finish sealed boundary capture and native settlement.
+- Make terminal stop retain durable cleanup without changing subject outcomes or reopening productive recovery; expose scoped read-only finalization diagnostics.
+- Verify final snapshot identity and physical retirement before full-cycle fixture teardown.
+
+## 0.9.0-beta.124
+
+### Patch Changes
+
+- Stop only two confirmed continuation overload refusals within the inclusive two-minute window, preserving native refusal times and exact owner admission across recovery.
+
+  Retain final PLAN check obligations, completion markers and native output bytes in verification evidence; require canonical fixes for duplicated CODE P0/P1 findings.
+
+  Join native daemon cleanup before durable stop acknowledgement and reconcile already-closed provider bridges without replay.
+
+## 0.9.0-beta.123
+
+### Patch Changes
+
+- Continue confirmed Codex overloads in the retained Session with bounded backoff, exact owner admission and no concurrent productive Turns.
+- Retain content-addressed verification evidence and reviewer input baselines across publication, relocation and review waves.
+- Preserve canonical native model/tool observations and AGY child transcript evidence without rewriting historical results.
+
+## 0.9.0-beta.122
+
+### Patch Changes
+
+- Generate a deterministic RUN-local verification matrix from accepted requirements, PLAN and exact check receipts; publish retained input/output packets and show their paths in shared Stage/Work instructions.
+- Recognize one unambiguous lifecycle command through the shared Bash grammar instead of rejecting all shell composition; retain scoped authority, execution-directory and foreground checks.
+- Share native hook deadlines through subprocess and SQLite admission, retain bounded phase diagnostics and the first ZCode failure, and prepare Stage archive/Git work outside the writer.
+- Admit the tested ZCode ACP 0.52 bridge and retain explicitly configured native storage routes across daemon lifecycle calls.
+
+## 0.9.0-beta.120
+
+### Patch Changes
+
+- Continue only confirmed, effect-free Codex `serverOverloaded` Turns in the same Session with bounded backoff and retained owner, budget, HITL, Work, MERGE, and recovery admission. Preserve exact native child Turn evidence and fail closed when effects are unknown.
+- Distinguish hard provider quota from short rate limiting and ambiguous 429 responses across AGY, ZCode, and OpenCode.
+
+## 0.9.0-beta.119
+
+### Patch Changes
+
+- Give Grok's native ACP startup a bounded 60-second initialize window and a 120-second daemon-ready window. ZCode keeps its 30-second initialize bound.
+
+## 0.9.0-beta.118
+
+### Patch Changes
+
+- Admit the tested ZCode bridge fix for managed turns that remain active after a frozen event watermark, and allow 30 seconds for Antigravity's version check during doctor and daemon startup.
+
+## 0.9.0-beta.117
+
+### Patch Changes
+
+- Preserve Grok child model facts, replay owned Codex tool events, and let CODE collect aggregate-check evidence before semantic acceptance.
+
+## 0.9.0-beta.116
+
+### Patch Changes
+
+- Reject ZCode managed lifecycle commands launched as background Bash before execution, and give all harnesses one foreground lifecycle instruction so their native admission receipts remain observable.
+
+## 0.9.0-beta.115
+
+### Patch Changes
+
+- Freeze the reviewed source check profile for MERGE after verifying that it only adds aliases to the integration baseline; keep existing check policy immutable and verify the post-apply profile against that frozen source.
+
+## 0.9.0-beta.114
+
+### Patch Changes
+
+- Route controlled `merge apply` and `merge repair` hooks to the MERGE request's integration workspace, preserving native cwd validation across AGY, OpenCode, and Droid.
+
+## 0.9.0-beta.113
+
+### Patch Changes
+
+- Allow sibling read-only reviewers to start concurrently when one updates the shared RUN projection; retain Work, generation, dependency, and immutable review-input checks.
+
+## 0.9.0-beta.112
+
+### Patch Changes
+
+- Give ZCode native Session creation a bounded end-to-end budget and admit the matching tested bridge commit, reject bare long-running service scripts as checks, run managed checks with the engine's Node architecture, and serialize concurrent Work checks within one RUN. Classify Git's expected EPIPE on a gitless check-ignore probe without hiding other Git failures.
+
+## 0.9.0-beta.111
+
+### Patch Changes
+
+- Settle retired Grok child Sessions from their retained terminal native TaskOutput when session/info omits status; keep explicit activity, new attempts and outcome conflicts blocking settlement.
+
+## 0.9.0-beta.110
+
+### Patch Changes
+
+- Pass retained runtime ownership to the ZCode ACP provider so managed Turns do not accept an inferred idle result as native completion. Reject an empty review set while PLAN-REVIEW is explicitly standard/deep, before publishing PLAN, and explain that mode in the shared PLAN prompt.
+
+## 0.9.0-beta.109
+
+### Patch Changes
+
+- Start managed daemons from their confirmed registration without a redundant blocking heartbeat. Keep periodic ownership checks and reject productive work when renewal cannot be confirmed. Recognize a failed daemon start as settled only when the native journal proves no Session was created and the exact daemon/provider processes have terminated with released leases. Accept an identical Work start packet already published by a concurrent starter while retaining conflict detection for changed bindings or bytes.
+
+## 0.9.0-beta.108
+
+### Patch Changes
+
+- Route native tool hooks through the prepared hook store and skip storage entirely for unrelated tools. Give ZCode daemon readiness a bounded 30-second window and clean up the exact registered provider process if any managed daemon fails to start, preserving the primary startup error.
+
+## 0.9.0-beta.107
+
+### Patch Changes
+
+- Give a corrective successor only for proven no-effect PROTOCOLIZE, PLAN, PLAN-REVIEW, and Work input errors, including invalid corrected PLAN schemas and missing evidence references; keep broken runtime artifacts fatal. Tell PLAN reviewers the exact workspace-relative PLAN path. Apply ZCode's profile as one unarmed configuration phase and verify the final native profile before productive work, so transient native mode notifications cannot masquerade as drift.
+
+## 0.9.0-beta.106
+
+### Patch Changes
+
+- Keep all Stage and Work lifecycle commands attached to their shell process until final output arrives, including HITL resume and standalone launch prompts. Resolve a model-facing command's hidden RUN from its issued authority when checking Antigravity workspace routing. Reserve the SQLite writer before reading and publishing the RUN projection so concurrent reviewer completions cannot invalidate it.
+
+## 0.9.0-beta.105
+
+### Patch Changes
+
+- Unify managed lifecycle correction and Stage/Work instructions across harnesses; enforce phase-specific workspace ownership; keep accepted Stage, Work, HITL, protocol, and RUN publications recoverable while moving filesystem and process work outside SQLite writer transactions. Retain exact native and physical-owner evidence through controller capture and snapshot restore.
+
+## 0.9.0-beta.96
+
+### Patch Changes
+
+- 4769ad6: Settle early lifecycle rejections against their native calls, reconcile retained provider capacity before continuing, and preserve causal outcomes across AGY, Grok, Droid, OpenCode, Codex, and ZCode adapters.
+
+## 0.9.0-beta.95
+
+### Patch Changes
+
+- Qualify the exact ZCode 0.16.9 / zcode-acp 0.46.7 contract @2 tuple after live public-command receipts, and reject inferred or failed native completion evidence.
+
+## 0.9.0-beta.94
+
+### Patch Changes
+
+- Admit public ZCode lifecycle commands through their native receipt without exposing runtime-owned invocation IDs.
+
+## 0.9.0-beta.93
+
+### Patch Changes
+
+- Move native ZCode request usage accounting into dd-zcode, preserve causal native errors, and distinguish bridge contract support from exact-tuple runtime qualification.
+
+## 0.9.0-beta.92
+
+### Patch Changes
+
+- 03fea2a: Accept the behaviorally qualified ZCode 0.16.9 and zcode-acp 0.43.2 harness overlay tuple in the managed runtime gate.
+
+## 0.9.0-beta.91
+
+### Patch Changes
+
+- 8650f0f: Unify managed lifecycle command syntax, preserve terminal preparation errors,
+  bound unchanged retries, and retain causal controller failures through MERGE.
+
+## 0.9.0-beta.90
+
+### Patch Changes
+
+- 18e2627: Require settled fan-out stages to complete their semantic decision and invoke
+  the authoritative finish command before assuming a repair exists. Report the
+  controller action that failed to make progress, and hand off repair Work only
+  after an actual lifecycle response registers it.
+- 954c676: Publish the exact CI-tested tarball through a credential-isolated release job, with deterministic test shards, package smoke, trusted candidate receipts, and safe lost-reply recovery.
+
+## 0.9.0-beta.89
+
+### Minor Changes
+
+- Register aggregate CODE and CODE-REVIEW repairs atomically from all failed receipts, with stable replay identity and stage/attempt/cycle membership. Resolve declared contextual file paths independently of lifecycle authority, retain exact native command rejection causes, and emit shell-safe commands with explicit JSON recovery inputs. Keep historical Work out of current dispatch and block ambiguous legacy fanout execution.
+
+## 0.9.0-beta.88
+
+### Patch Changes
+
+- 5f3806c: Keep managed HITL answer paths inside retained runtime authority, preserve early
+  native CLI failures, and fail controllers conclusively when an answer turn does
+  not resume its assigned pause.
+
+## 0.9.0-beta.87
+
+### Patch Changes
+
+- a49655a: Use separate files for model-authored lifecycle payloads and preserve native
+  shell-composition diagnostics instead of reporting a missing hook receipt.
+
+## 0.9.0-beta.86
+
+### Patch Changes
+
+- 8abe471: Settle invalid managed lifecycle arguments atomically before dispatch and return one safe corrected command.
+
+## 0.9.0-beta.85
+
+### Patch Changes
+
+- fe8f493: Restore runtime-owned response publication options before dispatching a managed lifecycle command, and update the controller fixture to validate the public command contract.
+
+## 0.9.0-beta.84
+
+### Patch Changes
+
+- 644d181: Keep RUN identity, project paths, context files, response destinations and
+  integrity hashes inside retained lifecycle authority instead of asking agents
+  to copy them. Restore those inputs deterministically when the observed command
+  executes, including MERGE apply and repair commands.
+
+## 0.9.0-beta.83
+
+### Patch Changes
+
+- bf69c56: Accept shell-escaped lifecycle path aliases deterministically and render model-facing aliases with stable quoting.
+
+## 0.9.0-beta.82
+
+### Patch Changes
+
+- Keep release registry readback running through delayed npm propagation while still failing authorization errors immediately.
+
+## 0.9.0-beta.81
+
+### Patch Changes
+
+- a48e3de: Canonicalize short and full RUN/Work references across native hook receipts, lifecycle admission, Work settlement, and HITL pause/resume. Keep model-facing commands short while preserving scoped ownership checks and report precise receipt mismatch reasons.
+
+## 0.9.0-beta.75
+
+### Patch Changes
+
+- Use adapter-owned native delegation instructions for Codex and the other
+  supported harnesses, preserving independent child Work ownership and clearer
+  native-session diagnostics across fan-out and recovery.
+
+## 0.9.0-beta.64
+
+### Patch Changes
+
+- Reserve SQLite writes explicitly, retain trusted lifecycle outcomes across harnesses,
+  continuously fence failed managed runs, and recover committed Work start packets and
+  replies without repeating effects. Revalidate stage inputs before acceptance and keep
+  the causal failure when adapter, publication or cleanup also fails. Writer contract 2
+  requires fresh campaign and resource homes; historical contract-1 stores are not
+  implicitly upgraded. Recovery-generation Work starts keep separate immutable packets
+  per WorkSession, preserving the interrupted attempt's evidence.
+
+## 0.9.0-beta.63
+
+### Patch Changes
+
+- Accept the qualified retained-subagent ZCode bridge and settle a control only
+  when a durable startup rejection proves that it created no native resources.
+
+## 0.9.0-beta.62
+
+### Patch Changes
+
+- Verify a controlled native Session with a fresh inspection after cancellation before treating its tree as settled.
+
+## 0.9.0-beta.61
+
+### Patch Changes
+
+- Keep the scope reconciliation contract test type-safe.
+
+## 0.9.0-beta.60
+
+### Patch Changes
+
+- Document and verify explicit reconciliation of a drained runtime scope without automatic observer respawn.
+
+## 0.9.0-beta.59
+
+### Patch Changes
+
+- Keep bundled ZCode close-contract fixtures aligned with retained native topology checks.
+
+## 0.9.0-beta.58
+
+### Patch Changes
+
+- Keep local task artifacts outside the release lint scope.
+
+## 0.9.0-beta.57
+
+### Patch Changes
+
+- Bound recovery observation, expose safe external reconciliation, and require
+  complete non-resident ZCode session-tree evidence before a stopped run settles.
+
+## 0.9.0-beta.56
+
+### Patch Changes
+
+- Keep RUN database and runtime status aligned with pause, stop, controller failures and trusted recovery. Preserve real Stage pauses and terminal results, reject late revival under a recovery fence, roll back status changes after persistence failures, and provide an explicit backed-up legacy status repair tool.
+
+## 0.9.0-beta.55
+
+### Patch Changes
+
+- Require autonomous check evidence, preflight commands in their actual workspace, bind final retry arguments, and settle ZCode cancellation through verified native residency. Retain closed sessions without implicit resume and store growing transcripts in reusable content-addressed chunks.
+
+## 0.9.0-beta.54
+
+### Patch Changes
+
+- Preserve current lifecycle command input, atomically settle retry authority, select current resume commands, and stop ZCode productive admission immediately on fatal identity errors. Reject ambiguous result inputs and keep diagnostic commands read-only.
+
+## 0.9.0-beta.53
+
+### Patch Changes
+
+- Admit managed ZCode lifecycle commands through durable invocation receipts, with exact native identity, bounded waits, retained outcomes and explicit validated retries. Preserve recovery generations, cooperative settlement, immutable recovery evidence and scoped snapshots. Keep Grok native hook responses and stable parent identity, and qualify the installed ZCode native event contract without requiring child hooks. Use Node 26 for the guarded release workflow.
+
+## 0.9.0-beta.52
+
+### Patch Changes
+
+- Distinguish released workspace leases from physical processes during stage-boundary capture, RUN settlement and runtime-scope stop/drain. Preserve active-lease, child-process, physical-identity and exact registration checks instead of waiting forever for a PID on a logical gate.
+
+## 0.9.0-beta.51
+
+### Patch Changes
+
+- Settle a check receipt when its confirmed process identity has exited, even if an older registration has no parent-owner PID.
+
+## 0.9.0-beta.50
+
+### Patch Changes
+
+- 422413d: Keep PLAN, PLAN-REVIEW, CODE and CODE-REVIEW settlement atomic across Work, Session and RUN state, including successor Work registration. Recover accepted CODE stage completion without repeating checks. Enforce coordinator ownership on repeated CODE start and exact reviewer coverage while preserving protocol-local aspect scopes.
+- 422413d: Reuse completed check evidence consistently across CODE, CODE-REVIEW and MERGE,
+  with validated inputs, artifacts, retry handling and concurrent execution guards.
+
+## 0.9.0-beta.49
+
+### Patch Changes
+
+- Treat a completed CODE gate command that returns `code_gate_failed` as terminal
+  recovery evidence, so the coordinator creates the returned repair Work instead
+  of waiting indefinitely or duplicating the aggregate gate.
+
+## 0.9.0-beta.48
+
+### Patch Changes
+
+- Recheck a controller lease after a transient runtime-registry write failure before
+  dispatching more work, while retaining the hard stop for an explicit lease loss.
+
+## 0.9.0-beta.47
+
+### Patch Changes
+
+- Initialize the managed Codex hook home for external worker sessions so their
+  first `work start` receives a trusted session binding.
+
+## 0.9.0-beta.44
+
+### Patch Changes
+
+- Allow a managed native session prompt to run for two hours before the outer
+  adapter watchdog cancels it, while retaining the existing short timeout for
+  non-productive adapter calls.
+
+## 0.9.0-beta.43
+
+### Patch Changes
+
+- 78e3eaf: Keep Codex prompt and inspection receipts compact by returning historical turn
+  identities and statuses without duplicating their item transcripts. Preserve the
+  current result, final answer, native history reference, descendants and observed
+  profile so long-running sessions remain within the bounded adapter reply limit.
+
+## 0.9.0-beta.42
+
+### Patch Changes
+
+- 3e1f87f: Reuse an already accepted RUN pause or stop when draining its EVAL scope, preserving the exact control identity and options without weakening stop or replaying work.
+
+## 0.9.0-beta.41
+
+### Patch Changes
+
+- c30ae89: Run generated Codex hooks with the explicitly selected CLI, or the isolated runtime shim before global installations. Preserve hook input and fail without a global fallback when the selected CLI is unavailable.
+
+## 0.9.0-beta.40
+
+### Patch Changes
+
+- 2b4b714: Admit ordinary managed HITL answers through their exact generation-bound native
+  prompt, preserving pause, Session, raw-answer and prompt integrity. Keep accepted
+  answer intent separate from physical delivery so stop drains native operations
+  and recovery can deliver an unanswered pause without replaying completed work.
+- c5eeb6f: Capture owned Codex home configuration and evidence without copying shared host
+  history or ephemeral helper links. Reuse the provisioned shared-entry contract
+  and retain strict rejection of unrelated external recovery artifact links.
+
+## 0.9.0-beta.39
+
+### Patch Changes
+
+- 803d2d0: Own managed Stage/Work execution, immutable boundary captures, mixed-profile handoffs and operator pause/stop/resume in the shared CLI runtime. Fence productive admission durably, reconcile exact native/process generations, preserve interrupted and unknown outcomes, and resume retained sessions without replaying completed work.
+
+  Control experiment-wide Subject, Judge and probe ownership through one retained resource registry, with detached control/recovery workers and explicit physical drain and release evidence. Require guarded shared-store migration and current runtime bindings; remove dependence on eval-owned productive adapters.
+
+  Discover native Codex children from spawn receipts and release terminal failed provider turns only after a fresh settled-tree observation.
+
+## 0.9.0-beta.38
+
+### Patch Changes
+
+- 44e3c80: Allow control operations to recheck failed provider cleanup after a leaderless process group exits naturally. Coalesce concurrent finalization retries, preserve the original exit and process lease, and keep live or unproven groups blocked without sending them signals.
+
+## 0.9.0-beta.37
+
+### Patch Changes
+
+- Wait for Antigravity provider-exit finalization before acknowledging clean shutdown or replacing the provider, preserving interrupted outcomes and cleanup failures. Treat signal-terminated process leaders as exited when checking remaining group ownership, and release completed initialization timers.
+
+## 0.9.0-beta.36
+
+### Patch Changes
+
+- Scope retained Antigravity tree liveness to its verified daemon shutdown before same-session recovery, preserving native outcomes and immutable prior receipts. New native tool or step activity still blocks overlapping prompt admission.
+
+## 0.9.0-beta.35
+
+### Patch Changes
+
+- Wait for npm registry propagation and verify the annotated tag created by Changesets before completing a guarded release.
+- Keep AGY native outcomes separate from settlement, invalidate old child settlement on new activity, and reserve productive operations before persistence across adapters.
+- Retain process-local native Stop observation in no-flow technical probes without installing project hooks or forwarding flow mutations.
+- Publish Work receipts after the authoritative SQL commit with resumable publication intents; preserve conflicting bytes, resume partial retries, and retain non-restorable diagnostic snapshots when receipts disagree.
+- Freeze the release source/canon tuple, reconcile uncertain publication, verify the isolated and exact global consumer, and retain phase receipts without creating another version on retry.
+
+## 0.9.0-beta.34
+
+### Patch Changes
+
+- Create and verify the immutable annotated Git tag as part of the guarded release publication.
+
+## 0.9.0-beta.33
+
+### Patch Changes
+
+- Add the guarded `release:publish` entrypoint that validates local npm auth,
+  checks the quality gate, verifies the published build metadata, and refreshes
+  the installed runtime before a release is considered complete.
+
+## 0.9.0-beta.32
+
+### Patch Changes
+
+- Reject reviewer results without per-aspect evidence when the Work is finished, and distinguish missing evidence from an aspect-coverage mismatch in legacy stage validation.
+
+## 0.9.0-beta.31
+
+### Patch Changes
+
+- Treat an authoritative fully-idle Antigravity root Stop as settlement evidence
+  for otherwise unobserved native children, while preserving their distinct
+  `settled_by_root` status rather than claiming individual completion.
+
+## 0.9.0-beta.30
+
+### Patch Changes
+
+- Bound Antigravity prompt liveness from the most recent native activity and preserve clean recovery settlement after an expired prompt.
+
+## 0.9.0-beta.29
+
+### Patch Changes
+
+- Recover completed stage boundaries without reopening accepted Work, and reject
+  stale coordinator identities and retired recovery generations.
+
+  Scope Antigravity terminal results and retained accounting to the current
+  conversation progress; preserve OpenCode and ACP provider errors for the actual
+  prompt. Keep configured adapter journals and bundled hook-denial behavior intact.
+
+## 0.9.0-beta.28
+
+### Patch Changes
+
+- Accept an authoritative terminal Antigravity root result when the provider omits a root Stop hook, while retaining fail-closed behavior for an observed non-idle tree.
+
+## 0.9.0-beta.27
+
+### Patch Changes
+
+- Resume retained native sessions from their active coordinator WorkSession, preserving the root launch record and rejecting lifecycle receipts from retired daemons.
+- Propagate Antigravity lifecycle hooks to direct native children while preserving workspace hooks, and settle confirmed Codex system-error turns without losing provider failure evidence.
+
+## 0.9.0-beta.26
+
+### Patch Changes
+
+- Reject interactive terminal input for Work and Stage result submission before routing or lifecycle dispatch. Require a pipe, input redirection, or result file so long JSON cannot be truncated by terminal input limits while progress appears to run indefinitely.
+
+## 0.9.0-beta.25
+
+### Patch Changes
+
+- Publish the final serial CLI test isolation together with the current bundled harness fixes.
+
+## 0.9.0-beta.24
+
+### Patch Changes
+
+- Retain supplemental files written to the check evidence directory in normal and recovered receipts. Keep required artifacts as minimum obligations and exclude symlinks.
+
+  Carry the verified cancellation guards, child settlement and process identity recovery fixes into the bundled harness adapters. Preserve native terminal events when an older Codex turn-page response arrives later.
+
+- Run CLI tests in isolated, serial file processes so process-global test state cannot leak between suites.
+
+## 0.9.0-beta.23
+
+### Minor Changes
+
+- bcfd8cb: Ship the six managed provider adapters with the CLI runtime, including their
+  daemon primitives and public adapter entrypoints. Add frozen mixed-execution
+  policy resolution and durable explicit external Work launch without changing a
+  same-profile external request into native delegation.
+
+## 0.9.0-beta.22
+
+### Patch Changes
+
+- Reject conflicting or ambiguous lifecycle receipts before any harness can
+  mutate a Session binding. Restore a Work-start receipt when its binding
+  fails, so the same verified invocation remains safely retryable.
+
+## 0.9.0-beta.21
+
+### Patch Changes
+
+- Validate every selected engine artifact and execute its pinned snapshot even when its version matches the router. Retain a new recovery interruption before root acknowledgement.
+
+## 0.9.0-beta.20
+
+### Patch Changes
+
+- Verify recovery payloads and workspace drift before resuming, preserve staged Git changes, publish snapshots through a temporary directory, and allow explicit recovery restoration into fresh targets. Fence RUN mutations and late asynchronous Work completion while recovery is active.
+
+## 0.9.0-beta.19
+
+### Patch Changes
+
+- Require a fresh trusted hook receipt from the physical Work owner before terminal stage or Work lifecycle commands can mutate a vNext RUN. Record terminal native-child observations at their originating Stage so unbound delegation is retained as a diagnostic instead of contaminating a later fan-out wave.
+
+## 0.9.0-beta.18
+
+### Patch Changes
+
+- Add Factory Droid harness routing, native lifecycle receipts and physical Session usage ingestion. Preserve child identity and reject conflicting hook replays or inclusive Droid usage to prevent incorrect Work binding and double counting.
+
+## 0.9.0-beta.17
+
+### Patch Changes
+
+- 0dd4da3: Verify current-attempt gate retries, deduplicate equivalent checks across gate references, retain archive locations across interrupted and repeated repairs, and align MERGE environment recovery guidance with source repair.
+
+  Snapshot SQLite consistently with VACUUM INTO and exclude local environment secrets, dependencies and caches from project/workspace snapshots.
+
+  Reconcile native child failures only against unique registered Work/Session attempts, retain non-restorable incomplete snapshots for failed evals, and expose unexpected merge-lane release failures for safe retry.
+
 ## 0.9.0-beta.16
 
 ### Patch Changes
@@ -878,6 +1836,7 @@ record` command with the bounded 15-probe contract.
 - 16f68a3: Add router-native engine snapshot commands and routed project-command dispatch.
 
   Also include the runtime/dashboard compatibility wave needed by the current Memory Bank canon:
+
   - target-based dashboard `open`/`refresh` commands and related-command help;
   - persisted FIFO lane waiters and merge wait-acquire specialization;
   - `migration plan/report/verify` evidence helpers for controlled `mb-upgrade` runtime migrations;