@deksden-com/dd-flow-cli 0.9.0-beta.16 → 0.9.0-beta.161

package/dist/cli/run-cli.js

@@ -1,57 +1,145 @@
 import fs from "node:fs";
+import { ensureManagedWorktrunk } from "../services/tooling.js";
+import { prepareResponseDestination, writeResponseFile } from "./response-file.js";
+import { preparePromptDelivery, publishPromptDelivery } from "../services/prompt-delivery.js";
+import { requiredOption, optionalOption, optionalNumber, optionalPositiveNumber } from "./argument-values.js";
+import { resolveCommandPaths, resolveCommandProjectRoot } from "../services/command-context.js";
+import { assertAuxiliaryCommandScope, cliManagedInvocationScope, manualRecoveryInvocationScope, assertManualRecoveryInvocationTarget, currentAssignedLifecycle } from "../services/lifecycle-invocations.js";
 import path from "node:path";
+import { createHash, randomUUID } from "node:crypto";
+import { quote } from "shell-quote";
+import { observeLifecycleCommand, observedLifecycleNativeEvent } from "../services/lifecycle-invocations.js";
+import { verifyCodexHookDelivery } from "../services/codex-hook-delivery.js";
+import { assertLifecycleInvocationCurrent, awaitLifecycleInvocation, bindLifecyclePublishedPacket, expandLifecycleInvocationArgs, issueLifecycleInvocation, prepareLifecycleIssuance, lifecycleInvocationScope, observedLifecycleDiagnostic, observedLifecycleInvocation, resolveObservedLifecycleArgs, retainObservedLifecycleSemantics, settleLifecycleInvocation, settleLifecyclePreparationRejection, settleLifecycleRejection, validateLifecyclePathAliases } from "../services/lifecycle-invocations.js";
+import { readAcceptedAssignedWork } from "../services/assigned-lifecycle.js";
 import { createContext, createRouterContext } from "../runtime/context.js";
-import { helpForArgs } from "./help.js";
-import { AppError, isAppError } from "../shared/errors.js";
-import { writeJson } from "../shared/json.js";
-import { archiveProject, getProjectStatus, migrateProjectIds, registerProject, resolveProject } from "../services/projects.js";
-import { cancelProtocol, getProtocolBlockers, getProtocolStatus, getReadyProtocols, implementProtocol, readyForMerge, registerProtocol, requireProtocol, syncProtocolFromRun, transitionProtocol } from "../services/protocols.js";
-import { blockPlanItem, completePlanItem, getPlanStatus, skipPlanItem, startPlanItem } from "../services/plans.js";
-import { cancelMergeQueueJob, claimNextMergeJob, claimMergeJob, claimMergeBundle, completeMergeBundle, completeMergeJob, failMergeBundle, failMergeJob, getMergeBundleStatus, getMergeQueueStatus, noteMergeJob, waitNextMergeJob } from "../services/merge-queue.js";
+import { dispatchNativeHook, isNativeHookIngress } from "./native-hook-ingress.js";
+import { isRuntimeMaintenance, runtimeMaintenanceDiagnostics, withMaintenanceDiagnosticScope } from "./runtime-maintenance-diagnostics.js";
+import { migrateStoreWriter } from "../storage/writer-migration.js";
+import { resolveHelp } from "./help.js";
+import { renderHumanError, writePreparationError } from "./error-output.js";
+import { runOperatorProfilesCli } from "./operator-profiles.js";
+import { runSetupCli } from "./setup.js";
+import { runCompletionCli } from "./completion-cli.js";
+import { runHarnessesCli } from "./harnesses.js";
+import { runModelsCli } from "./models.js";
+import { parseOutputOptions } from "./output-options.js";
+import { AppError, errorRecord, isAppError } from "../shared/errors.js";
+import { entityReferenceVariants } from "../shared/entity-references.js";
+import { writeJson, parseJsonObject } from "../shared/json.js";
+import { archiveProject, prepareProjectArchive, getProjectStatus, migrateProjectIds, registerProject, resolveProject } from "../services/projects.js";
+import { cancelProtocol, getProtocolBlockers, getProtocolStatus, getReadyProtocols, implementProtocol, readyForMerge, registerProtocol, prepareProtocolRegistration, requireProtocol, syncProtocolFromRun, prepareProtocolTransition, transitionProtocol } from "../services/protocols.js";
+import { getPlanStatus, preparePlanItemMutation, updatePlanItem } from "../services/plans.js";
+import { cancelMergeQueueJob, prepareMergeQueueCancellation, prepareMergeQueueWait, prepareMergeClaim, prepareMergeBundleClaim, claimNextMergeJob, claimMergeJob, claimMergeBundle, completeMergeBundle, prepareMergeBundleCompletion, completeMergeJob, prepareMergeJobCompletion, failMergeBundle, prepareMergeBundleFailure, failMergeJob, prepareMergeJobFailure, getMergeBundleStatus, getMergeQueueStatus, noteMergeJob, prepareMergeJobNote, waitNextMergeJob } from "../services/merge-queue.js";
 import { getMergeWorkerStatus, oneShotMergeClaim, startMergeWorker, stopProjectMergeWorker } from "../services/merge-worker.js";
-import { cleanupApply, cleanupScan } from "../services/cleanup.js";
-import { getCodexHomeStatus, getCodexHooksStatus, handleCodexHook, handleAgyEvent, handleGrokEvent, handleOpenCodeEvent, handleZcodeEvent, isolatedDdFlowHomeFromHookStdin, claimBootstrapHookEvent, findRecentMatchingHookEvent, stageStartMatchKey, initCodexHome, installCodexHooks, planCodexHome, printCodexHomeEnv, printCodexHooks, removeCodexHome, removeCodexHooks } from "../services/hooks.js";
-import { bootstrapWorktree, closeWorktree, createWorktreeRecord, getWorktreeStatus, planWorktree } from "../services/worktrees.js";
-import { acquireLaneLock, cancelLaneWaiter, checkLaneWorkspace, getLaneWaiters, getLaneStatus, heartbeatLaneLock, releaseLaneLock, setLaneWorkspace, waitAcquireLaneLock, waitForLaneLock } from "../services/lanes.js";
-import { getProjectConfigStatus, setProjectConfigValue } from "../services/config.js";
-import { getCanonStatus, registerCanonRoot, resolveCanonRoot } from "../services/canon.js";
+import { cleanupApply, cleanupScan, prepareCleanupApply } from "../services/cleanup.js";
+import { getCodexHomeStatus, getCodexHooksStatus, handleCodexHook, handleAgyEvent, handleDroidEvent, handleGrokEvent, handleOpenCodeEvent, handleZcodeHook, handleZcodeEvent, isolatedDdFlowHomeFromHookStdin, claimBootstrapHookEvent, findRecentMatchingHookEvent, stageStartMatchKey, stageLifecycleMatchKey, initCodexHome, prepareCodexHome, prepareCodexHooks, installCodexHooks, planCodexHome, printCodexHomeEnv, printCodexHooks, removeCodexHome, prepareCodexHomeRemoval, removeCodexHooks } from "../services/hooks.js";
+import { bootstrapWorktree, closeWorktree, createWorktreeRecord, prepareWorktreeCreate, prepareWorktreeBootstrap, prepareWorktreeClose, getWorktreeStatus, planWorktree } from "../services/worktrees.js";
+import { acquireLaneLock, cancelLaneWaiter, prepareLaneWaiterCancellation, checkLaneWorkspace, getLaneWaiters, getLaneStatus, heartbeatLaneLock, releaseLaneLock, setLaneWorkspace, prepareLaneWorkspace, prepareLaneLock, waitAcquireLaneLock, waitForLaneLock } from "../services/lanes.js";
+import { getProjectConfigStatus, prepareProjectConfigValue, setProjectConfigValue } from "../services/config.js";
+import { getCanonStatus, registerCanonRoot, resolveCanonRoot, prepareCanonRegistration } from "../services/canon.js";
 import { getRuntimeStatus } from "../services/status.js";
 import { getCliVersionReport } from "../services/build-info.js";
 import { parseCommandArgs } from "../services/lifecycle-command.js";
-import { autoRefreshDashboards, dashboardData, getCmuxStatus, openDashboard, openGlobalDashboard, openProtocolDashboard, refreshAllDashboards, refreshDashboard, refreshGlobalDashboard, renderDashboard, renderGlobalDashboard } from "../services/dashboard.js";
+import { prepareError, prepareJsonFile, prepareJsonSchema, prepareJsonText, prepareTextFile, prepareFileBytes, readBoundedUtf8Stream, recordConsumedInputDigest, withPreparedInputBinding } from "./input-preparation.js";
+import { autoRefreshDashboards, dashboardData, getCmuxStatus, openDashboard, openGlobalDashboard, openProtocolDashboard, refreshAllDashboards, prepareDashboardRefresh, prepareDashboardRender, prepareGlobalDashboardRender, prepareDashboardOptions, refreshDashboard, refreshGlobalDashboard, renderDashboard, renderGlobalDashboard } from "../services/dashboard.js";
 import { dashboardTargetSummary, preferredDashboardCommand, relatedDashboardCommands, resolveDashboardTarget } from "../services/dashboard-targets.js";
-import { getFlowSessionStatus, registerFlowSession, stopFlowSession, stopMergeWorker, syncFlowSessionUsage } from "../services/sessions.js";
+import { getFlowSessionStatus, prepareFlowSessionPayload, registerFlowSession, stopFlowSession, stopMergeWorker, syncFlowSessionUsage } from "../services/sessions.js";
 import { getProtocolBranchContext } from "../services/branch-context.js";
-import { attachFlowRunStage, completeFlowRun, completeFlowRunStage, getFlowRunSessions, getFlowRunTimeline, getStoredFlowRunUsage, getFlowRunFlagsStatus, getFlowRunStatus, getFlowRunConfig, getFlowRunVariables, listFlowRuns, reviseFlowRunFlags, setFlowRunConfig, setFlowRunVariable, startFlowRun } from "../services/runs.js";
+import { attachFlowRunStage, readFlowRunExecutionBundle, prepareFlowRunStageAttachment, prepareRawFlowRunStageCompletion, completeFlowRun, prepareFlowRunCompletion, completeFlowRunStage, getFlowRunSessions, getFlowRunTimeline, getStoredFlowRunUsage, getFlowRunFlagsStatus, getFlowRunStatus, getFlowRunConfig, getFlowRunVariables, listFlowRuns, reviseFlowRunFlags, setFlowRunConfig, prepareFlowRunConfig, prepareFlowRunVariable, setFlowRunVariable, startFlowRun, resolveRun, prepareFlowRunStart } from "../services/runs.js";
 import { previewNextEntityId } from "../services/ids.js";
 import { validateSchema } from "../services/schema-validation.js";
 import { preflightMemoryPermissions } from "../services/memory-permissions.js";
-import { ingestAgyUsage, ingestGrokUsage, ingestOpenCodeUsage, ingestZcodeUsage } from "../services/usage.js";
-import { applyMigration, assessMigrationImpact, assertUpgradeRunStorageReady, planMigration, verifyMigrationReport } from "../services/migrations.js";
+import { ingestDroidUsage, ingestAgyUsage, ingestGrokUsage, ingestOpenCodeUsage, ingestZcodeUsage } from "../services/usage.js";
+import { applyMigration, assessMigrationImpact, assertUpgradeRunStorageReady, planMigration, prepareMigrationApply, verifyMigrationReport } from "../services/migrations.js";
+import { PreparedUpgradeStorageReadiness } from "../services/memory-upgrade-storage-readiness.js";
 import { publishProjectSummary } from "../services/project-summary.js";
 import { requireProjectByRoot } from "../services/projects.js";
-import { resolveProjectRoot } from "../storage/paths.js";
-import { doctorEngines, bindRunEngine, engineInfo, installCurrentEngine, listEngines, resolveEngine, resolveExplicitProjectRoot, resolveOperationProjectRoot, routeArgsThroughEngine } from "../services/engines.js";
+import { resolveProjectRoot, resolveDdFlowHome } from "../storage/paths.js";
+import { doctorEngines, bindRunEngine, prepareRunEngineBind, engineInfo, installCurrentEngine, listEngines, resolveEngine, resolveExplicitProjectRoot, resolveOperationProjectRoot, routeArgsThroughEngine } from "../services/engines.js";
 import { preflightCliCompatibility } from "../services/compatibility-preflight.js";
-import { finishVnextSpecifyStage, getVnextWorkStatus, isVnextSpecifyFlow, isVnextSpecifyRun, launchVnextSpecify } from "../services/vnext-specify.js";
-import { finishVnextProtocolize, isVnextProtocolizeRun, startVnextProtocolize } from "../services/vnext-protocolize.js";
-import { finishVnextPlan, isVnextPlanRun, startVnextPlan } from "../services/vnext-plan.js";
-import { dispatchVnextPlanReview, finishVnextPlanReview, isVnextPlanReviewRun, recordVnextPlanReviewCapacity, startVnextPlanReview } from "../services/vnext-plan-review.js";
-import { addVnextCodeRepair, finishVnextCode, startVnextCode } from "../services/vnext-code.js";
-import { addVnextCodeReviewRepair, finishVnextCodeReview, isVnextCodeReviewRun, startVnextCodeReview } from "../services/vnext-code-review.js";
-import { applyVnextMerge, finishVnextMerge, getVnextMergeRequest, isVnextMergeRun, repairVnextMerge, routeVnextMergeRequest, startVnextMerge } from "../services/vnext-merge.js";
+import { getVnextWorkStatus, isVnextSpecifyFlow, isVnextSpecifyRun, prepareVnextSpecifyStart } from "../services/vnext-specify.js";
+import { isVnextProtocolizeRun, prepareProtocolizeResultPath, prepareVnextProtocolizeStart } from "../services/vnext-protocolize.js";
+import { isVnextPlanRun, prepareVnextPlanStart, prepareVnextPlanFinish } from "../services/vnext-plan.js";
+import { dispatchVnextPlanReview, isVnextPlanReviewRun, prepareVnextPlanReviewStart, recordVnextPlanReviewCapacity } from "../services/vnext-plan-review.js";
+import { addVnextCodeRepair, prepareVnextCodeRepair, prepareVnextCodeStart } from "../services/vnext-code.js";
+import { isVnextCodeReviewRun, prepareCodeReviewDecision, prepareVnextCodeReviewRepair, prepareVnextCodeReviewStart } from "../services/vnext-code-review.js";
+import { applyVnextMerge, getVnextMergeRequest, isVnextMergeRun, prepareVnextMergeFinish, prepareVnextMergeStart, repairVnextMerge, routeVnextMergeRequest } from "../services/vnext-merge.js";
+import { sdlcStageHandlers } from "../services/stage-handlers.js";
+import { startMemoryStage, finishMemoryStage, startMemoryUpgradeStage, finishMemoryUpgradeStage } from "../services/memory-stage-dispatch.js";
+import { startDiagnosticStage, finishDiagnosticStage } from "../services/diagnostic-stage-handlers.js";
+import { startDistillStage, finishDistillStage } from "../services/distill-stage-handlers.js";
+import { startMemoryFixStage } from "../services/memory-fix-stage-entry.js";
+import { finishMemoryFixStage } from "../services/memory-fix-stage-handlers.js";
+import { startReviewFixStage } from "../services/review-fix-stage-entry.js";
+import { finishReviewFixStage } from "../services/review-fix-stage-handlers.js";
+import { startInteractiveStage } from "../services/interactive-stage-entry.js";
+import { isDeliveryFlow } from "../domain/delivery-flows.js";
+import { startDeliveryStage, readDeliveryStageScope, assertDeliveryCommandOwner } from "../services/delivery-stage-entry.js";
+import { finishDeliveryStage } from "../services/delivery-stage-handlers.js";
+import { prepareDeliveryChecks } from "../services/delivery-checks.js";
+import { executeDeliveryOperation } from "../services/delivery-operation.js";
+import { observeDeliveryResult } from "../services/delivery-result.js";
+import { prepareDeliveryProjectBinding } from "../services/delivery-policy.js";
+import { deliveryApprovalScope } from "../services/delivery-approval.js";
+import { issueDeliveryStageCommands } from "../services/delivery-stage-commands.js";
+import { readDescriptorStageInput } from "../services/descriptor-stage-coordinator.js";
+import { readAcceptedStageData } from "../services/stage-report-renderer.js";
+import { finishInteractiveStage, registerInteractiveReviewCorrection, registerInteractiveCorrectionReview } from "../services/interactive-stage-handlers.js";
+import { observeInteractiveOriginalGitInputs } from "../services/interactive-finish-integration.js";
+import { readInteractiveUserInputs } from "../services/interactive-user-inputs.js";
+import { deliverInteractiveUserInput } from "../services/interactive-input-delivery.js";
+import { PreparedInteractiveMutationScope } from "../services/interactive-mutation-scope.js";
+import { PreparedInteractiveChecks } from "../services/interactive-checks.js";
+import { registerInteractiveStageGraph } from "../services/interactive-work-registration.js";
+import { readInteractiveWorkGit } from "../services/interactive-work-start.js";
+import { integrateInteractiveFinish } from "../services/interactive-git-dispatch.js";
+import { readMemoryFixSourceIntake } from "../services/memory-fix-intake-custody.js";
+import { readMemoryFixUserInputs } from "../services/diagnostic-repair-intake.js";
+import { prepareMemoryFixScopeEvidence } from "../services/memory-fix-scope.js";
+import { prepareMemoryFixPublication } from "../services/memory-fix-publication.js";
+import { integrateMemoryFixFinish } from "../services/memory-fix-git-dispatch.js";
+import { isDiagnosticFlow } from "../domain/diagnostic-flows.js";
+import { bindStageCoordinatorWork } from "../services/work-registry.js";
+import { registerMemoryCompositionFromStage, publishMemoryUpgradeFromStage } from "../services/memory-compose-handler.js";
+import { publishDistillFromStage } from "../services/distill-promotion.js";
+import { readDistillUserInputs } from "../services/distill-user-inputs.js";
+import { hybridDigest } from "../services/hybrid-contracts.js";
+import { runMemoryVerificationChecks } from "../services/memory-verify-handler.js";
+import { registerMemoryReviewFromStage, collectMemoryInitialReviewFromStage } from "../services/memory-review-handler.js";
+import { PreparedRetainedMemoryReviewAuthority } from "../services/memory-retained-review-authority.js";
+import { PreparedRetainedMemoryReviewResults } from "../services/memory-retained-review-results.js";
+import { registerMemoryCorrectionsFromStage, registerMemorySecondCorrectionsFromStage, runMemoryCorrectionChecksFromStage, runMemorySecondCorrectionChecksFromStage, registerCorrectedMemoryReviewFromStage, registerSecondCorrectedMemoryReviewFromStage, collectCorrectedMemoryReviewFromStage, collectSecondCorrectedMemoryReviewFromStage } from "../services/memory-review-handler.js";
+import { integrateMemoryFinishFromStage, registerMemoryFinishEvidenceFromStage } from "../services/memory-finish-handler.js";
+import { registerMemoryRepairBaselineFromStage, registerMemorySecondRepairBaselineFromStage, reserveMemoryRepairWriterCopyFromStage, reserveMemorySecondRepairCopyFromStage, materializeMemoryRepairWriterCopyFromStage, materializeMemorySecondRepairCopyFromStage, prepareMemoryRepairDispatchFromStage, prepareMemorySecondRepairDispatchFromStage, registerMemoryRepairCurrentViewFromStage, registerMemorySecondRepairCurrentViewFromStage, registerMemoryRepairPublicationSourceFromStage, reserveMemoryRepairPublicationAgainstSourceFromStage, reserveMemorySecondRepairPublicationFromStage, applyMemoryRepairPublicationFromStage, applyMemorySecondRepairPublicationFromStage, finishMemoryRepairPublicationFromStage, finishMemorySecondRepairPublicationFromStage } from "../services/memory-review-handler.js";
 import { mergeServerStatus, serveMergeRequests, stopMergeServer } from "../services/merge-server.js";
-import { getVnextFanoutStatus } from "../services/vnext-fanout.js";
-import { pauseStageForUser, resumeStageAfterUser } from "../services/stage-pause.js";
-import { blockStageForRuntime, unblockStageAfterRuntimeRepair } from "../services/stage-blocker.js";
+import { getVnextFanoutStatus, registeredStageFanoutDescriptor, observeVnextNativeChildren, prepareNativeObservations, reconcileVnextFanout } from "../services/vnext-fanout.js";
+import { pauseStageForUser, resumeStageAfterUser, prepareStagePause, prepareStageResume, stagePauseCommand } from "../services/stage-pause.js";
+import { runtimeCommand } from "../services/runtime-command.js";
+import { managedLifecycleCommand } from "../services/lifecycle-invocations.js";
+import { blockStageForRuntime, unblockStageAfterRuntimeRepair, prepareStageRuntimeBlock, prepareStageRuntimeUnblock } from "../services/stage-blocker.js";
 import { classifyCliOperation, requiresExplicitUpgradeAuthorization } from "../services/cli-operation-classifier.js";
-import { renderWorkerPrompt } from "../services/prompts.js";
-import { finishStage, startStage } from "../services/stage-lifecycle.js";
-import { addWorkBatch, cancelWork, deleteWork, failWork, finishWork, listWorks, mutateWorkDeps, retryWork, showWork, startWork } from "../services/work-registry.js";
-import { createEvalBootstrapSnapshot, createEvalRunSnapshot, prepareVnextSpecifyRun, restoreEvalBootstrapSnapshot, restoreEvalRunSnapshot } from "../services/eval-snapshots.js";
-import { loadExternalStageContext } from "../services/stage-context.js";
-import { stopManagedProcess, confirmManagedProcess, finishManagedProcess, heartbeatManagedProcess, managedProcessStatus, reconcileExpiredManagedProcesses, registerManagedProcess } from "../services/managed-processes.js";
-import { startRuntimeService } from "../services/runtime-service.js";
+import { prepareWorkerPrompt, renderWorkerPrompt } from "../services/prompts.js";
+import { finishStage, prepareStageFinish, startStage, prepareLegacyStageStart } from "../services/stage-lifecycle.js";
+import { addWorkBatch, assertGenericWorkBatchAllowed, prepareWorkBatch, prepareWorkDeps, prepareWorkDelete, prepareWorkSettlement, prepareWorkRetry, assertStageLifecycleOwner, assertWorkLifecycleOwner, cancelWork, deleteWork, failWork, finishWork, listWorks, mutateWorkDeps, prepareWorkResult, workResultByteLimit, retryWork, showWork, startWork } from "../services/work-registry.js";
+import { launchExternalWork } from "../services/external-work-launch.js";
+import { createEvalBootstrapSnapshot, prepareEvalBootstrapSnapshot, createEvalRunSnapshot, prepareEvalRunSnapshotCreation, prepareVnextSpecifyRun, prepareEvalRunRestore, prepareEvalBootstrapRestore, restoreEvalBootstrapSnapshot, restoreEvalRunSnapshot } from "../services/eval-snapshots.js";
+import { forkRunFromSnapshot, prepareRunFork } from "../services/run-fork.js";
+import { acceptRunRecovery, beginRunRecovery, inspectRunRecovery, prepareRecoveryCapture, prepareRecoveryPayload, prepareRunRecoveryResume, recordRecoveryCapture, resumeRunRecovery, sealRunRecovery } from "../services/run-recovery.js";
+import { loadExternalStageContext, prepareExternalStageContext } from "../services/stage-context.js";
+import { vnextStageDirectory } from "../domain/stage-catalog.js";
+import { prepareCommandRoute } from "./command-inputs.js";
+import { parseLifecycleCommand } from "../services/lifecycle-command.js";
+import { dispatchRuntimeProcess, prepareRuntimeProcess } from "./runtime-process.js";
+import { reconcileFlowRunHealth } from "../services/run-health.js";
+import { fenceRuntimeBudget, runtimeBudgetStatus, prepareRuntimeScopeStatus, prepareRuntimeScopeControl, prepareRuntimeScopeFence } from "../services/runtime-budget.js";
+import { stopRuntimeScope } from "../services/runtime-scope-stop.js";
+import { launchRuntimeScopeControl, launchRuntimeScopeResume, prepareRuntimeScopeReconciliation, prepareRuntimeScopeServing, reconcileRuntimeScopeControl, serveRuntimeScopeControl } from "../services/runtime-scope-worker.js";
+import { prepareRuntimeScopeResumeRequest } from "../services/runtime-scope-resume.js";
+import { launchRunController, prepareRunControllerLaunch, resumeRunController, serveRunController, runControllerStatus, answerRunController, prepareRunControllerAnswer, supplyRunControllerContext, prepareRunControllerContext } from "../services/run-controller.js";
+import { controlLifecycleReply, runControlStatus } from "../services/run-control.js";
+import { reconcileRunControl, requestRunControl, serveRunControl } from "../services/run-control-worker.js";
+import { startRuntimeService, prepareRuntimeService } from "../services/runtime-service.js";
 const defaultIo = {
     stdout: process.stdout,
     stderr: process.stderr,
@@ -59,9 +147,62 @@ const defaultIo = {
 };
 const flagValue = "__dd_flow_flag__";
 export async function runCli(args, io = defaultIo, env = process.env) {
-    const output = parseOutputOptions(args);
+    return withMaintenanceDiagnosticScope(() => runCliRequest(args, io, env));
+}
+async function runCliRequest(args, io, env) {
+    try {
+        const help = resolveHelp(args);
+        if (help) {
+            if (help.json)
+                writeJson(io.stdout, help.data);
+            else
+                io.stdout.write(`${help.text}\n`);
+            return 0;
+        }
+    }
+    catch (error) {
+        const record = errorRecord(error);
+        writePreparationError(io, args, record);
+        return record.exitCode;
+    }
+    let output;
+    try {
+        output = parseOutputOptions(args);
+        // Expand before routing/context selection, after stripping transport flags.
+        // The alias keeps the existing RUN's engine and prepared-store rules.
+        if (output.args[0] === "finish")
+            output.args = ["interactive", "finish", ...output.args.slice(1)];
+    }
+    catch (error) {
+        const rejection = isAppError(error) ? error : new AppError("usage", error instanceof Error ? error.message : String(error), 2);
+        Object.assign(rejection.details, { phase: "prepare", effect: "no_effect", recoverable: true, ...rejection.details });
+        try {
+            const command = quote(["dd-flow", ...args]);
+            const analysis = parseLifecycleCommand(command);
+            const event = analysis.kind !== "none" || analysis.auxiliary
+                ? observedLifecycleNativeEvent(createRouterContext(env), command, env.DD_FLOW_DAEMON_ID) : null;
+            if (event) {
+                const context = createContext({ ...env }, "hook");
+                try {
+                    observeLifecycleCommand(context, command, event)({ error: rejection });
+                }
+                finally {
+                    context.db.close?.();
+                }
+            }
+        }
+        catch (persistence) {
+            rejection.details.lifecycle_diagnostic_error = String(persistence);
+        }
+        writePreparationError(io, args, errorRecord(rejection));
+        return rejection.exitCode;
+    }
     const progress = progressForCommand(output.args);
     let heartbeat;
+    let invocationSettlement;
+    let settleHook;
+    let diagnosticHome;
+    let maintenanceDiagnostics;
     try {
         if (output.args.length === 1 && output.args[0] === "--version") {
             const payload = getCliVersionReport();
@@ -71,11 +212,72 @@ export async function runCli(args, io = defaultIo, env = process.env) {
                 io.stdout.write(`dd-flow ${payload.cli.version}\n`);
             return 0;
         }
-        const help = helpForArgs(output.args);
-        if (help) {
-            io.stdout.write(`${help}\n`);
+        if (output.args[0] === "completion")
+            return runCompletionCli(args, io);
+        if (output.args[0] === "setup")
+            return runSetupCli(args, env, io);
+        if (output.args[0] === "harnesses")
+            return runHarnessesCli(args, env, io);
+        if (output.args[0] === "models")
+            return runModelsCli(args, io);
+        if (output.args[0] === "profiles")
+            return runOperatorProfilesCli(args, env, io);
+        if (output.args[0] === "tool") {
+            prepareCommandRoute(output.args); // Reject unknown tools before filesystem/store effects.
+            if (output.responseFile)
+                prepareResponseDestination(output.responseFile);
+            const tool = await ensureManagedWorktrunk({ ddFlowHome: resolveDdFlowHome(env), env });
+            const payload = writeResponseFile({ ok: true, tool: "wt", ...tool, cache_root: path.dirname(tool.bin) }, output);
+            if (output.json)
+                writeJson(io.stdout, payload);
+            else
+                io.stdout.write(`${renderHumanResult(output.args, payload)}${tool.bin}\n`);
+            return 0;
+        }
+        const suppliedInvocationId = optionalOption(parseArgs(output.args.slice(2)), "invocation-id");
+        if (isNativeHookIngress(output.args)) {
+            writeJson(io.stdout, await dispatchNativeHook(output.args, await readStdin(io.stdin), env));
             return 0;
         }
+        if (output.args.slice(0, 3).join(" ") === "codex hook handle") {
+            const parsed = prepareCommandRoute(output.args).parsed;
+            const stdin = await readStdin(io.stdin);
+            const payload = parseJsonObject(stdin || "{}", "codex hook stdin");
+            const event = requiredOption(parsed, "event");
+            const isolatedHome = event === "PreToolUse" ? isolatedDdFlowHomeFromHookStdin(stdin) : null;
+            const hookEnv = isolatedHome ? { ...env, DD_FLOW_HOME: isolatedHome } : env;
+            const proof = await verifyCodexHookDelivery(hookEnv, payload);
+            let opened;
+            const mode = databaseModeForCommand(output.args, classifyCliOperation(output.args, hookEnv));
+            const context = {
+                env: hookEnv, ddFlowHome: resolveDdFlowHome(hookEnv), now: () => new Date().toISOString(),
+                get db() { return (opened ??= createContext(hookEnv, mode)).db; }
+            };
+            try {
+                // Retired events retain the explicit startup/migration path. PreToolUse
+                // only opens its selected prepared store when the handler needs it.
+                if (mode !== "hook")
+                    opened = createContext(hookEnv, mode);
+                if (proof)
+                    context.codexHookProof = proof;
+                const result = handleCodexHook(context, { event, projectRoot: optionalOption(parsed, "project-root"), stdin });
+                writeJson(io.stdout, result && typeof result === "object" && !Array.isArray(result) && "hookSpecificOutput" in result
+                    ? { hookSpecificOutput: result.hookSpecificOutput } : {});
+                return 0;
+            }
+            finally {
+                opened?.db.close?.();
+            }
+        }
+        if (output.args[0] === "run" && ["drive", "control"].includes(output.args[1] ?? "")) {
+            const controlArgs = parseArgs(output.args.slice(2));
+            requiredOption(controlArgs, "run");
+            requiredOption(controlArgs, "project-root");
+        }
+        if (io.stdin?.isTTY && ["work", "stage"].includes(output.args[0] ?? "") && output.args[1] === "finish"
+            && hasOption(parseArgs(output.args.slice(2)), "result-stdin")) {
+            throw new AppError("usage", "--result-stdin requires non-interactive input. Pipe or redirect the complete JSON into this command, or use --result-file; interactive terminals can truncate long JSON and wait indefinitely for EOF.", 2);
+        }
         const classification = classifyCliOperation(output.args, env);
         if (requiresExplicitUpgradeAuthorization(output.args) && classification.mode !== "mb_upgrade") {
             throw new AppError("upgrade_authorization_required", "This mb-upgrade command requires the explicit mb-upgrade authorization marker and allowlisted target context", 1, {
@@ -83,26 +285,205 @@ export async function runCli(args, io = defaultIo, env = process.env) {
                 required_marker: "DD_FLOW_COMPATIBILITY_MODE=mb-upgrade"
             });
         }
-        const routerContext = createRouterContext(env);
+        // Registration may bootstrap the resource registry, but never the unrelated
+        // RUN store. Its caller's absolute deadline also bounds that first open.
+        const maintenanceOptions = isRuntimeMaintenance(output.args) ? { resourceDatabaseMode: output.args[2] === "register" ? "initialize" : output.args[2] === "status" ? "read_existing" : "prepared_existing", ...(env.DD_FLOW_HOOK_DEADLINE_AT ? { databaseDeadlineAt: Number(env.DD_FLOW_HOOK_DEADLINE_AT) } : {}) } : {};
+        if (output.args[0] === "runtime" && output.args[1] === "scope" && ["fence", "stop"].includes(output.args[2] ?? ""))
+            maintenanceOptions.resourceDatabaseMode = "retirement";
+        // Keep ordinary CLI JSON/stderr compatibility; bounded maintenance callers
+        // provide this request's deadline and consume its structured phase evidence.
+        if (maintenanceOptions.databaseDeadlineAt !== undefined)
+            maintenanceDiagnostics = runtimeMaintenanceDiagnostics(output.args, maintenanceOptions.databaseDeadlineAt, line => io.stderr.write(line));
+        const routerContext = createRouterContext(env, maintenanceOptions.databaseDeadlineAt);
+        const publicCommand = quote(["dd-flow", ...output.args]);
+        const nativeCommand = quote(["dd-flow", ...args]);
+        const lifecycleCommand = parseLifecycleCommand(publicCommand);
+        if (lifecycleCommand.kind === "standalone")
+            validateLifecyclePathAliases(output.args, lifecycleCommand.invocation.operation);
+        const managedScope = lifecycleCommand.kind === "standalone" && env.DD_FLOW_DAEMON_ID ? cliManagedInvocationScope({ ...routerContext, env }) : null;
+        const nativeEvent = env.DD_FLOW_DAEMON_ID && lifecycleCommand.kind === "standalone"
+            ? observedLifecycleNativeEvent(routerContext, nativeCommand, env.DD_FLOW_DAEMON_ID) : null;
+        const nativeEventKey = nativeEvent && routerContext.db.get("SELECT event_key FROM hook_events WHERE project_id = ? AND id = ?", [nativeEvent.project_id, nativeEvent.id])?.event_key;
+        const observedInvocation = managedScope ? observedLifecycleInvocation(routerContext, publicCommand, managedScope, nativeEventKey ? { eventKey: nativeEventKey } : undefined) : null;
+        if (managedScope && suppliedInvocationId
+            && routerContext.db.get("SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = 'lifecycle_invocations'")
+            && routerContext.db.get("SELECT id FROM lifecycle_invocations WHERE id = ?", [suppliedInvocationId])) {
+            const suppliedScope = lifecycleInvocationScope({ ...routerContext, env }, suppliedInvocationId);
+            if (["projectRoot", "daemonId", "rootSessionId", "runId", "generation"].some(key => suppliedScope[key] !== managedScope[key])) {
+                throw new AppError("invocation_scope_mismatch", "Explicit lifecycle assignment differs from the current physical native owner", 1, { effect: "no_effect", recoverable: false });
+            }
+        }
+        const diagnostic = env.DD_FLOW_DAEMON_ID && lifecycleCommand.kind === "standalone"
+            ? observedLifecycleDiagnostic(routerContext, publicCommand, env.DD_FLOW_DAEMON_ID, observedInvocation?.id) : null;
+        if (diagnostic && (!nativeEvent || Number(diagnostic.hook_event_id) > nativeEvent.id)) {
+            throw new AppError("lifecycle_shell_syntax_invalid", `Native observer rejected the shell form: ${String(diagnostic.reason ?? "unsupported shell composition")}. Write structured input to a file and run the returned dd-flow command separately.`, 2, { ...diagnostic, phase: "prepare", effect: "no_effect", recoverable: true });
+        }
+        let manualRecoveryHookEventKey;
+        if (!observedInvocation && !suppliedInvocationId && env.DD_FLOW_DAEMON_ID && lifecycleCommand.kind === "standalone") {
+            const receipt = nativeEvent && routerContext.db.get("SELECT event_key,harness,provider_session_id,parent_session_id,daemon_id,status FROM hook_events WHERE id = ? AND project_id = ?", [nativeEvent.id, nativeEvent.project_id]);
+            const manual = managedScope && receipt?.status === "observed" ? manualRecoveryInvocationScope({ ...routerContext, env }, managedScope.projectRoot, { daemonId: receipt.daemon_id, rootSessionId: receipt.provider_session_id, sessionId: receipt.provider_session_id, parentSessionId: receipt.parent_session_id, toolCallId: String(nativeEvent.id) }, receipt.harness) : null;
+            if (!manual || JSON.stringify(manual) !== JSON.stringify(managedScope))
+                throw new AppError(nativeEvent ? "invocation_assignment_missing" : "invocation_receipt_missing", nativeEvent ? "Native call was observed, but its arguments do not match an issued lifecycle assignment" : "Managed lifecycle command has no committed native receipt", 1, { effect: "no_effect", recoverable: false });
+            assertManualRecoveryInvocationTarget({ ...routerContext, env }, manual, publicCommand);
+            manualRecoveryHookEventKey = receipt.event_key;
+        }
+        const invocationId = observedInvocation?.id ?? suppliedInvocationId;
+        let boundInvocationArgs;
+        try {
+            boundInvocationArgs = observedInvocation
+                ? resolveObservedLifecycleArgs(routerContext, observedInvocation.id, output.args)
+                : invocationId && invocationId !== suppliedInvocationId
+                    ? [...output.args.filter((_, index, values) => values[index - 1] !== "--invocation-id" && values[index] !== "--invocation-id"), "--invocation-id", invocationId]
+                    : output.args;
+        }
+        catch (error) {
+            if (!(observedInvocation && error instanceof AppError))
+                throw error;
+            const rejectionContext = createContext({ ...env }, "hook");
+            try {
+                Object.assign(error.details, settleLifecyclePreparationRejection(rejectionContext, observedInvocation.id, error));
+            }
+            finally {
+                rejectionContext.db.close?.();
+            }
+            throw error;
+        }
+        const observedOperation = lifecycleCommand.kind === "standalone" ? lifecycleCommand.invocation.operation : null;
+        if (observedInvocation && !observedOperation)
+            throw new AppError("invocation_command_invalid", "Observed lifecycle command could not be parsed", 1);
+        const invocationScope = invocationId ? lifecycleInvocationScope({ ...routerContext, env }, invocationId) : undefined;
+        const expandedInvocationArgs = invocationScope && observedOperation
+            ? expandLifecycleInvocationArgs(routerContext, boundInvocationArgs, invocationScope, observedOperation)
+            : boundInvocationArgs;
+        const retainedOutput = observedInvocation ? parseOutputOptions(expandedInvocationArgs) : null;
+        if (retainedOutput?.json)
+            output.json = true;
+        if (retainedOutput?.progressJsonl)
+            output.progressJsonl = true;
+        if (retainedOutput?.responseFile)
+            output.responseFile = retainedOutput.responseFile;
+        let invocationArgs = retainedOutput?.args ?? expandedInvocationArgs;
         emitHumanProgress(io, output, progress, "start");
         if (output.progressJsonl) {
             writeProgressJsonl(io, "start", `Starting ${output.args.slice(0, 3).join(" ")}`);
             heartbeat = setInterval(() => writeProgressJsonl(io, "running", "Command is still running"), 15_000);
         }
-        const scopeProjectRoot = resolveProjectRootBeforeRouting(output.args, env);
-        const routedArgs = output.responseFile ? [...output.args, "--response-file", output.responseFile] : output.args;
+        // Route by retained authority, so a mistyped project path reaches the CLI
+        // validator instead of selecting a different engine or failing preflight.
+        const scopeProjectRoot = invocationScope?.projectRoot ?? resolveCommandProjectRoot(routerContext, output.args, resolveProjectRootBeforeRouting(output.args, env, maintenanceOptions.databaseDeadlineAt));
+        assertAuxiliaryCommandScope({ ...routerContext, env }, publicCommand, scopeProjectRoot);
+        invocationArgs = resolveCommandPaths(routerContext, invocationArgs, scopeProjectRoot);
+        const routedArgs = output.responseFile ? [...invocationArgs, "--response-file", output.responseFile] : invocationArgs;
         const routed = await routeArgsThroughEngine(routerContext, output.json ? [...routedArgs, "--json", ...(output.progressJsonl ? ["--progress-jsonl"] : [])] : routedArgs, io, io.stdin, env, scopeProjectRoot);
         if (routed?.routed && !routed.inProcess) {
             if (heartbeat)
                 clearInterval(heartbeat);
-            emitHumanProgress(io, output, progress, "done");
+            emitHumanProgress(io, output, progress, routed.exitCode === 0 ? "done" : "failed");
+            if (output.progressJsonl && routed.exitCode !== 0)
+                writeProgressJsonl(io, "failed", "Routed engine failed", { exit_code: routed.exitCode });
             return routed.exitCode;
         }
+        let preparedInput;
+        let preparedRoute;
+        if (!invocationId) {
+            const preparationContext = createContext({ ...env }, "read_existing", undefined, maintenanceOptions);
+            try {
+                preparedInput = await prepareCliInput(invocationArgs, preparationContext, io, scopeProjectRoot, output.responseFile, undefined, commandProgress(io, output));
+            }
+            finally {
+                preparationContext.db.close?.();
+            }
+        }
         const dispatchContext = routed?.inProcess
-            ? createContext({ ...env, DD_FLOW_ENGINE_MODE: "1", DD_FLOW_ENGINE_HOME: "in-process", DD_FLOW_ROUTED_FROM: getCliVersionReport().cli.version }, databaseModeForCommand(output.args, classification))
-            : createContext(env, databaseModeForCommand(output.args, classification));
-        preflightCliCompatibility(dispatchContext, output.args, env, scopeProjectRoot);
-        const result = await dispatch(output.args, dispatchContext, io, scopeProjectRoot, classification, output);
+            ? createContext({ ...env, DD_FLOW_ENGINE_MODE: "1", DD_FLOW_ENGINE_HOME: "in-process", DD_FLOW_ROUTED_FROM: getCliVersionReport().cli.version }, databaseModeForCommand(invocationArgs, classification), undefined, maintenanceOptions)
+            : createContext({ ...env }, databaseModeForCommand(invocationArgs, classification), undefined, maintenanceOptions);
+        diagnosticHome = dispatchContext.ddFlowHome;
+        dispatchContext.env.DD_FLOW_INVOCATION_READONLY = classification.mode === "read_only_diagnostics" ? "1" : undefined;
+        let dispatchArgs = invocationArgs;
+        let retainedOutcome;
+        // Issued transports may deliver their receipt asynchronously. Observe only
+        // after admission; retained outcomes must not need a fresh hook receipt.
+        if (invocationId) {
+            const command = quote(["dd-flow", ...invocationArgs]);
+            let nextNativeObservation = 0;
+            const admission = await awaitLifecycleInvocation(dispatchContext, { id: invocationId, command,
+                validateArgs: () => {
+                    try {
+                        preparedRoute = prepareCommandRoute(invocationArgs);
+                    }
+                    catch (error) {
+                        if (error instanceof AppError && error.code === "usage" && ["invocation-id", "hook-event-id"].includes(String(error.details.parameter ?? ""))) {
+                            throw new AppError("lifecycle_contract_invalid", `The runtime generated arguments rejected by its own CLI contract: ${error.message}`, 1, { ...error.details, recoverable: false, operation: observedOperation });
+                        }
+                        throw error;
+                    }
+                },
+                prepare: async () => { preparedInput = await prepareCliInput(invocationArgs, dispatchContext, io, scopeProjectRoot, output.responseFile, preparedRoute, commandProgress(io, output)); },
+                assertCurrent: scope => assertLifecycleInvocationCurrent(dispatchContext, scope, command), progress: commandProgress(io, output),
+                ...((env.DD_FLOW_RUNTIME_OWNER || env.DD_FLOW_CODEX_STATE_DIR || env.DD_AGY_STATE_DIR || env.DD_GROK_STATE_DIR || env.DD_ZCODE_STATE_DIR) ? { reconcileNativeObservation: async (scope, onProgress) => {
+                        if (Date.now() < nextNativeObservation)
+                            return;
+                        nextNativeObservation = Date.now() + 250;
+                        const { reconcileRetainedNativeHook } = await import("../services/retained-native-hook.js");
+                        await reconcileRetainedNativeHook(dispatchContext, { scope, invocationId, onProgress,
+                            onDiagnostic: value => io.stderr.write(`${JSON.stringify({ kind: "native_hook_diagnostic", ...value })}\n`) });
+                    } } : {}) });
+            if (admission.replay) {
+                retainedOutcome = admission.outcome;
+                settleHook = undefined;
+                delete dispatchContext.observeLifecycleHook;
+            }
+            else {
+                invocationSettlement = { context: dispatchContext, id: invocationId };
+                if (observedInvocation)
+                    retainObservedLifecycleSemantics(dispatchContext, invocationId, invocationArgs);
+                if (admission.kind === "native_hook") {
+                    dispatchArgs = [...invocationArgs, "--hook-event-id", admission.eventKey];
+                    preparedInput?.route?.parsed.options.set("hook-event-id", [admission.eventKey]);
+                }
+                dispatchContext.env.DD_FLOW_INVOCATION_SCOPE = JSON.stringify(lifecycleInvocationScope(dispatchContext, invocationId));
+                dispatchContext.env.DD_FLOW_CURRENT_INVOCATION = invocationId;
+            }
+        }
+        if (!invocationId && manualRecoveryHookEventKey) {
+            // Keep the physically scoped receipt selected by admission; a service must
+            // not rediscover a different daemon's matching command event.
+            if (!invocationArgs.includes("--hook-event-id"))
+                dispatchArgs = [...invocationArgs, "--hook-event-id", manualRecoveryHookEventKey];
+            preparedInput?.route?.parsed.options.set("hook-event-id", [manualRecoveryHookEventKey]);
+        }
+        if (retainedOutcome?.error) {
+            const error = retainedOutcome.error;
+            throw new AppError(error.code, error.message, error.exitCode, error.details);
+        }
+        if (!retainedOutcome && !preparedInput)
+            preparedInput = await prepareCliInput(invocationArgs, dispatchContext, io, scopeProjectRoot, output.responseFile, undefined, commandProgress(io, output));
+        if (!retainedOutcome)
+            await preflightCliCompatibility(dispatchContext, invocationArgs, env, scopeProjectRoot);
+        if (!retainedOutcome) {
+            const command = !invocationId ? nativeCommand : quote(["dd-flow", ...dispatchArgs]);
+            const event = !invocationId ? nativeEvent : null;
+            settleHook = observeLifecycleCommand(dispatchContext, command, event ?? undefined);
+        }
+        const result = preparePromptDelivery(retainedOutcome ? retainedOutcome.result : await dispatch(dispatchArgs, dispatchContext, io, scopeProjectRoot, classification, output, preparedInput));
+        if (!retainedOutcome && result && typeof result === "object" && "worker_prompt_markdown" in result && typeof result.worker_prompt_markdown === "string") {
+            try {
+                bindLifecyclePublishedPacket(dispatchContext, result.worker_prompt_markdown);
+            }
+            catch (cause) {
+                throw new AppError("invocation_packet_binding_failed", "Stage started but its published lifecycle assignments could not be retained", 1, { effect: "committed", cause: String(cause) });
+            }
+        }
+        const completedHook = settleHook;
+        settleHook = undefined;
+        completedHook?.({ result });
+        if (invocationSettlement) {
+            const completed = invocationSettlement;
+            invocationSettlement = undefined;
+            // A failure to persist an already completed result is an unknown reply,
+            // not a failed operation eligible for a new productive retry.
+            settleLifecycleInvocation(completed.context, completed.id, { result });
+        }
         const refreshWarnings = refreshDashboardsAfterMutation(dispatchContext, output.args, result, scopeProjectRoot);
         const resultWithWarnings = addWarnings(result, refreshWarnings);
         if (heartbeat)
@@ -111,48 +492,179 @@ export async function runCli(args, io = defaultIo, env = process.env) {
             writeProgressJsonl(io, "done", "Command finished");
         emitHumanProgress(io, output, progress, "done");
         const payload = attachProgress(resultWithWarnings, progress, output);
+        publishPromptDelivery(payload);
         const visible = writeResponseFile(payload, output);
+        const maintenanceReceipt = payload;
+        const maintenanceExpiry = maintenanceReceipt?.lease_expires_at ?? maintenanceReceipt?.process?.lease_expires_at;
+        maintenanceDiagnostics?.phase("ack", { ...(typeof maintenanceExpiry === "string" && Number.isFinite(Date.parse(maintenanceExpiry)) ? { lease_expires_at: maintenanceExpiry } : {}) });
         if (output.json)
             writeJson(io.stdout, visible);
         else
             io.stdout.write(renderHumanResult(output.args, payload));
         return completedCommandExitCode(payload);
     }
-    catch (error) {
+    catch (caught) {
+        const record = errorRecord(caught);
+        maintenanceDiagnostics?.failure(caught);
+        const error = isAppError(caught) ? caught : Object.assign(new AppError(record.code, record.message, record.exitCode, { effect: "unknown", ...record.details, ...(caught?.errcode !== undefined ? { sqlite_extended_code: caught.errcode } : {}) }), { ...(record.cause ? { cause: record.cause } : {}), ...(record.cleanup_error ? { cleanup_error: record.cleanup_error } : {}), ...(record.retryable !== undefined ? { retryable: record.retryable } : {}) });
+        if (!settleHook && !invocationSettlement && error.code !== "prompt_delivery_pending") {
+            let earlyContext;
+            try {
+                const command = quote(["dd-flow", ...args]);
+                const analysis = parseLifecycleCommand(command);
+                // Maintenance failures must not start an unrelated, unbounded hook
+                // lookup after their own request deadline has already expired.
+                const router = analysis.kind !== "none" || analysis.auxiliary ? createRouterContext(env) : null;
+                const event = router ? observedLifecycleNativeEvent(router, command, env.DD_FLOW_DAEMON_ID) : null;
+                // A correctable prepare rejection precedes the terminal command's
+                // single-use claim. Correlate its unique hook by the same lifecycle
+                // match key used at dispatch, including compound provider tool shells;
+                // otherwise a repaired retry sees two fresh, unclaimed events.
+                if (router && (event || (error.details.phase === "prepare" && error.details.effect === "no_effect"
+                    && fs.existsSync(path.join(router.ddFlowHome, "db.sqlite"))))) {
+                    earlyContext = createContext({ ...env }, "hook");
+                    observeLifecycleCommand(earlyContext, command, event ?? undefined)({ error });
+                }
+            }
+            catch (persistence) {
+                error.details.lifecycle_diagnostic_error = String(persistence);
+            }
+            finally {
+                earlyContext?.db.close?.();
+            }
+        }
+        if (diagnosticHome && (!isAppError(caught) || error.code === "storage_write_failed")) {
+            try {
+                const directory = path.join(diagnosticHome, "diagnostics", "cli");
+                fs.mkdirSync(directory, { recursive: true });
+                const artifact = path.join(directory, `${randomUUID()}.json`);
+                fs.writeFileSync(artifact, JSON.stringify({ code: error.code, message: error.message, details: error.details, stack: caught instanceof Error ? caught.stack : null }), { flag: "wx", mode: 0o600 });
+                error.details.diagnostic_artifact = artifact;
+            }
+            catch (secondary) {
+                io.stderr.write(`CLI diagnostic persistence failed: ${String(secondary)}\n`);
+            }
+        }
         if (heartbeat)
             clearInterval(heartbeat);
-        const payload = isAppError(error)
-            ? { ok: false, error: { code: error.code, message: error.message, details: error.details } }
-            : { ok: false, error: { code: "unexpected", message: String(error) } };
+        if (invocationSettlement && error.details.effect !== "committed") {
+            try {
+                if (isAppError(error)) {
+                    delete error.details.retry_command;
+                    delete error.details.retry_instruction;
+                    // The common settlement classifies original validated proof before
+                    // errorRecord clones diagnostic objects and loses capability identity.
+                    settleLifecycleRejection(invocationSettlement.context, invocationSettlement.id, error);
+                }
+                else
+                    settleLifecycleInvocation(invocationSettlement.context, invocationSettlement.id, { error: { code: "unexpected", message: String(error), exitCode: 1, details: {} } });
+            }
+            catch (persistenceError) {
+                if (isAppError(error))
+                    error.details.recoverable = false;
+                io.stderr.write(`Invocation settlement persistence failed: ${String(persistenceError)}\n`);
+            }
+        }
+        if (invocationSettlement && error.details.work_result_accepted === true) {
+            const accepted = readAcceptedAssignedWork(invocationSettlement.context, invocationSettlement.id);
+            if (accepted) {
+                // The Work/WorkSession commit is authoritative. Report its retained
+                // answer even if a derivative publication failed after that commit.
+                const payload = addWarnings(accepted, [{ code: "work_post_commit_pending", message: "Work result accepted; derivative publication requires reconciliation" }]);
+                try {
+                    writeResponseFile(payload, output);
+                }
+                catch { /* Accepted SQL reply remains available on stdout/replay. */ }
+                if (output.json)
+                    writeJson(io.stdout, payload);
+                else
+                    io.stdout.write(renderHumanResult(output.args, payload));
+                return completedCommandExitCode(payload);
+            }
+        }
+        if (settleHook) {
+            try {
+                settleHook({ error: isAppError(error) ? error : { code: "unexpected", message: String(error), details: {} } });
+            }
+            catch (persistence) {
+                io.stderr.write(`${JSON.stringify({ primary: String(error), lifecycle_persistence_error: String(persistence) })}\n`);
+            }
+        }
+        const payload = { ok: false, error: errorRecord(error) };
+        progress.splice(0, progress.length, ...progress.filter(event => event.phase !== "done"));
+        if (progress.length)
+            progress.push({ phase: "failed", message: payload.error.message, at: new Date().toISOString() });
         emitHumanProgress(io, output, progress, "failed");
         if (output.progressJsonl)
             writeProgressJsonl(io, "failed", payload.error.message, { code: payload.error.code });
         const errorPayload = attachProgress(payload, progress, output);
-        const visible = writeResponseFile(errorPayload, output);
+        let visible = errorPayload;
+        try {
+            if (error.details.parameter !== "response-file")
+                visible = writeResponseFile(errorPayload, output);
+        }
+        catch (publication) {
+            error.details.response_publication_error = { code: publication?.code ?? "response_publication_failed", message: publication instanceof Error ? publication.message : String(publication) };
+        }
         if (output.json && output.progressJsonl)
             writeJson(io.stdout, errorPayload);
         else if (output.json)
             writeJson(io.stderr, visible);
         else
-            io.stderr.write(renderHumanError(payload));
+            io.stderr.write(renderHumanError(payload, args));
         return isAppError(error) ? error.exitCode : 1;
     }
+    finally {
+        maintenanceDiagnostics?.close();
+    }
 }
-function resolveProjectRootBeforeRouting(args, env) {
+function resolveProjectRootBeforeRouting(args, env, deadlineAt) {
     const explicit = resolveExplicitProjectRoot(args);
     if (explicit)
         return explicit;
     try {
         // Router identity lookup is read-only; it must not initialize or migrate runtime storage.
-        return resolveOperationProjectRoot(createContext(env, "read_existing"), args);
+        const context = createContext(env, "read_existing", undefined, deadlineAt === undefined ? {} : { databaseDeadlineAt: deadlineAt });
+        try {
+            return resolveOperationProjectRoot(context, args);
+        }
+        finally {
+            context.db.close?.();
+        }
     }
     catch {
         return null;
     }
 }
 function databaseModeForCommand(args, classification) {
+    if (isNativeHookIngress(args))
+        return "hook";
+    if (args[0] === "run" && args[1] === "reconcile")
+        return args.includes("--apply") ? "reconcile" : "read_existing";
+    if (isRuntimeMaintenance(args))
+        return "read_existing";
     const [family, command] = args;
+    // Bound interactive operations never initialize or migrate a RUN store.
+    if (family === "interactive" && classification.mode !== "read_only_diagnostics")
+        return "prepared_existing";
+    if (family === "migration" && command === "readiness")
+        return "prepared_existing";
+    // Managed attempts are issued only from a prepared store. Opening that
+    // existing writer must not run migrations before their input is admitted.
+    if (parseArgs(args.slice(2)).options.has("invocation-id"))
+        return "hook";
+    // Native hook ingress must remain synchronous, but it must not run schema
+    // migration/VACUUM while the provider is waiting for its decision.  Startup
+    // prepares the store; the hook mode only verifies the prepared contract and
+    // records the receipt.
+    if (family === "codex" && command === "hook" && args[2] === "handle") {
+        // Only the participating PreToolUse ingress needs the prepared hot-path
+        // contract. SessionStart/Stop/PostToolUse are observational no-ops here
+        // and retain the ordinary startup path for backwards compatibility.
+        return optionalOption(parseArgs(args.slice(3)), "event") === "PreToolUse" ? "hook" : "initialize";
+    }
     if (family === "engine" ||
+        family === "storage" && command === "migrate-writer" ||
         family === "version" ||
         family === "schema" ||
         family === "canon" && command === "resolve" ||
@@ -166,86 +678,6 @@ function databaseModeForCommand(args, classification) {
         return "read_existing";
     return "initialize";
 }
-function renderHumanError(payload) {
-    const lines = [`dd-flow: ${payload.error.message}`];
-    const details = recordObject(payload.error.details);
-    const compatibility = recordObject(details?.compatibility);
-    const remediation = recordObject(details?.remediation);
-    if (compatibility) {
-        lines.push(`Compatibility: ${String(compatibility.verdict ?? "unknown")} (${String(compatibility.engine_resolution ?? "unknown")})`);
-        if (compatibility.blocked_operation)
-            lines.push(`Blocked operation: ${String(compatibility.blocked_operation)}`);
-        if (compatibility.install_hint)
-            lines.push(`Install compatible engine: ${String(compatibility.install_hint)}`);
-    }
-    if (remediation?.mb_upgrade_mode)
-        lines.push(`Upgrade mode: ${String(remediation.mb_upgrade_mode)}`);
-    if (details?.preferred_command)
-        lines.push(`Preferred command: ${String(details.preferred_command)}`);
-    const related = Array.isArray(details?.related_commands) ? details.related_commands.map(String) : [];
-    if (related.length > 0) {
-        lines.push("", "Related commands:");
-        for (const command of related)
-            lines.push(`  ${command}`);
-    }
-    return `${lines.join("\n")}\n`;
-}
-function parseOutputOptions(args) {
-    const stripped = [];
-    let json = false;
-    let progressJsonl = false;
-    let responseFile = null;
-    for (let index = 0; index < args.length; index += 1) {
-        const arg = args[index];
-        if (arg === undefined)
-            continue;
-        if (arg === "--json") {
-            json = true;
-            continue;
-        }
-        if (arg === "--progress-jsonl") {
-            progressJsonl = true;
-            continue;
-        }
-        if (arg === "--response-file") {
-            const file = args[++index];
-            if (!file)
-                throw new AppError("usage", "--response-file requires a path", 2);
-            responseFile = file;
-            continue;
-        }
-        stripped.push(arg);
-    }
-    if (responseFile && !json)
-        throw new AppError("usage", "--response-file requires --json", 2);
-    const hookJsonOnly = stripped[0] === "codex" && stripped[1] === "hook" && stripped[2] === "handle";
-    return { json: json || hookJsonOnly, progressJsonl, args: stripped, hookJsonOnly, responseFile };
-}
-/** Persist the complete machine response for harnesses that cap tool output.
- * The visible response keeps routing fields but omits the potentially large
- * rendered prompt; an agent can safely read the named file without rerunning
- * the lifecycle command. */
-function writeResponseFile(payload, output) {
-    if (!output.responseFile)
-        return payload;
-    const file = path.resolve(output.responseFile);
-    try {
-        fs.mkdirSync(path.dirname(file), { recursive: true });
-        const temporary = `${file}.tmp-${process.pid}-${crypto.randomUUID()}`;
-        fs.writeFileSync(temporary, `${JSON.stringify(payload, null, 2)}\n`, "utf8");
-        fs.renameSync(temporary, file);
-    }
-    catch (error) {
-        // The lifecycle mutation may already be accepted. Do not retry it just
-        // because its optional full-response file could not be written.
-        return { ...(payload && typeof payload === "object" && !Array.isArray(payload) ? payload : { ok: true, result: payload }), response_file: file, response_file_error: String(error) };
-    }
-    if (!payload || typeof payload !== "object" || Array.isArray(payload))
-        return { ok: true, response_file: file };
-    const visible = { ...payload, response_file: file };
-    delete visible.worker_prompt_markdown;
-    return visible;
-}
 function progressForCommand(args) {
     const [family, command, subcommand] = args;
     if (family === "merge-queue" && command === "wait-next") {
@@ -294,7 +726,12 @@ function writeProgressJsonl(io, phase, message, detail) {
     io.stderr.write(`${JSON.stringify({ schema_id: "dd-flow/progress@1", phase, message, at: new Date().toISOString(), ...(detail ? { detail } : {}) })}\n`);
 }
 function commandProgress(io, output) {
-    return (message) => output.progressJsonl ? writeProgressJsonl(io, "running", message) : io.stderr.write(`[running] ${message}\n`);
+    return (message) => {
+        if (output.progressJsonl)
+            writeProgressJsonl(io, "running", message);
+        else if (!output.json && !output.hookJsonOnly)
+            io.stderr.write(`[running] ${message}\n`);
+    };
 }
 function attachProgress(result, progress, output) {
     if (progress.length === 0 || output.hookJsonOnly)
@@ -308,7 +745,7 @@ function attachProgress(result, progress, output) {
     }
     return { ok: true, result, progress };
 }
-function renderHumanResult(args, result) {
+export function renderHumanResult(args, result) {
     const [family, command] = args;
     const record = result && typeof result === "object" && !Array.isArray(result) ? result : {};
     const ok = record.ok === false ? "failed" : "ok";
@@ -376,6 +813,16 @@ function renderHumanResult(args, result) {
         if (run.run_index_path)
             lines.push(`run_index: ${String(run.run_index_path)}`);
     }
+    for (const key of ["outcome", "instruction", "agent_instruction", "next_action", "resume_command", "resume_command_template", "prompt_path"]) {
+        if (record[key] !== undefined && typeof record[key] !== "object")
+            lines.push(`${key}: ${String(record[key])}`);
+    }
+    for (const [name, keys] of [["next", ["finish_command"]], ["repair", ["work_id"]], ["prompt_delivery", ["path", "sha256"]], ["pause", ["user_message", "question_path", "resume_command", "resume_command_template"]]]) {
+        const value = recordObject(record[name]);
+        for (const key of keys)
+            if (value?.[key] !== undefined)
+                lines.push(`${name}.${key}: ${String(value[key])}`);
+    }
     appendFlowGuidanceHuman(lines, record);
     return `${lines.join("\n")}\n`;
 }
@@ -501,27 +948,759 @@ function stringValue(value) {
 function shortSha(value) {
     return value ? value.slice(0, 12) : "unknown";
 }
-async function dispatch(args, context, io, scopeProjectRoot = null, classification = classifyCliOperation(args, context.env), output = parseOutputOptions(args)) {
-    const [family, command, ...rest] = args;
-    const parsed = parseArgs(rest);
+function compositionProposalRetry(context, parsed) {
+    return {
+        retry_command: runtimeCommand(context, ["memory", "compose", "register", "--run", requiredOption(parsed, "run"),
+            "--project-root", requiredOption(parsed, "project-root"), "--request-key", requiredOption(parsed, "request-key"),
+            "--result-file", requiredOption(parsed, "result-file"), "--json", "--progress-jsonl"]),
+        retry_instruction: "Correct only the rejected composition proposal, then execute retry_command in this same Session. No Work graph was registered by this rejected call; do not dispatch children or finish the Stage until registration succeeds."
+    };
+}
+/** All caller supplied file/stdin data is consumed here, before a managed
+ * invocation is allowed to claim execution or a stage claims its hook event. */
+async function prepareCliInput(...args) {
+    try {
+        return await withPreparedInputBinding(() => prepareCliInputValue(...args));
+    }
+    catch (error) {
+        return prepareError(error);
+    }
+}
+async function prepareCliInputValue(args, context, io, scopeProjectRoot, responseFile = null, route = prepareCommandRoute(args), progress) {
+    const { family, command, parsed } = route;
+    const prepared = { route };
+    if (family === "delivery" && ["checks", "execute"].includes(command ?? "")) {
+        const file = requiredOption(parsed, "result-file"), text = prepareTextFile(file, "Delivery input", 1024 * 1024);
+        const value = prepareJsonText(text.text, { file, label: "Delivery input" }).value;
+        const keys = command === "checks" ? "path,sha256,subject_ref,version" : "basis,expires_at,reason,scope_sha256,user_inputs_sha256";
+        if (!value || typeof value !== "object" || Array.isArray(value) || Object.keys(value).sort().join() !== keys)
+            throw new AppError("usage", "Delivery input must match the selected command's exact JSON contract", 2, { phase: "prepare", effect: "no_effect" });
+        if (command === "checks")
+            prepared.deliveryArtifact = value;
+        else
+            prepared.deliveryApproval = value;
+    }
+    if (family === "interactive" && command === "integrate" && hasOption(parsed, "result-file")) {
+        const file = requiredOption(parsed, "result-file"), input = prepareTextFile(file, "Interactive Git agreement", 1024 * 1024);
+        const value = prepareJsonText(input.text, { file, label: "Interactive Git agreement" }).value;
+        if (!value || typeof value !== "object" || Array.isArray(value) || Object.keys(value).sort().join() !== "basis,include_existing_paths,reason")
+            throw new AppError("usage", "Interactive Git agreement requires basis, include_existing_paths and reason", 2, { phase: "prepare", effect: "no_effect" });
+        prepared.interactiveGitAgreement = value;
+    }
+    if (family === "interactive" && command === "checks") {
+        const file = requiredOption(parsed, "result-file"), input = prepareTextFile(file, "Interactive check selection", 1024 * 1024);
+        const value = prepareJsonText(input.text, { file, label: "Interactive check selection" }).value;
+        if (!value || typeof value !== "object" || Array.isArray(value)
+            || !["additionalChecks", "additionalChecks,noChecksReason"].includes(Object.keys(value).sort().join()))
+            throw new AppError("usage", "Interactive checks require additionalChecks and optional noChecksReason", 2, { phase: "prepare", effect: "no_effect" });
+        prepared.interactiveChecksProposal = value;
+    }
+    if (family === "interactive" && command === "scope") {
+        const file = requiredOption(parsed, "result-file"), input = prepareTextFile(file, "Interactive mutation scope", 1024 * 1024);
+        const value = prepareJsonText(input.text, { file, label: "Interactive mutation scope" }).value;
+        if (!value || typeof value !== "object" || Array.isArray(value)
+            || Object.keys(value).sort().join() !== "basis,expectedInputsSha256,paths,reason,requestId")
+            throw new AppError("usage", "Interactive scope requires requestId, paths, basis, reason and expectedInputsSha256", 2, { phase: "prepare", effect: "no_effect" });
+        const basis = recordObject(recordObject(value).basis);
+        if (!basis || Object.keys(basis).sort().join() !== "event_id,role,sha256"
+            || !["request", "turn", "answer", "finish"].includes(String(basis.role))
+            || typeof basis.event_id !== "number" || !Number.isSafeInteger(basis.event_id) || basis.event_id < 0
+            || typeof basis.sha256 !== "string" || !/^[a-f0-9]{64}$/.test(basis.sha256))
+            throw new AppError("usage", "Interactive scope basis requires role request|turn|answer|finish, a nonnegative integer event_id and a SHA-256", 2, {
+                reason: "invalid_scope_basis_shape", phase: "prepare", effect: "no_effect", recoverable: true,
+                retry_command: runtimeCommand(context, ["interactive", "scope", "--project-root", requiredOption(parsed, "project-root"),
+                    "--run", requiredOption(parsed, "run"), "--result-file", file, "--json", "--progress-jsonl"]),
+                retry_instruction: "Correct only the rejected basis shape. For the original request use role=request, event_id=0 and initial_request.sha256 from interactive inputs. For a later user message copy its exact role, integer event_id and sha256 from messages; a question is not user approval. No scope was retained by this call. Reuse this exact retry_command; valid-shaped but unowned evidence or conflicting accepted scope identities remain refusals."
+            });
+        prepared.interactiveScopeProposal = value;
+    }
+    if (family === "interactive" && (command === "turn" || command === "finish")) {
+        const input = prepareTextFile(requiredOption(parsed, "intake-file"), "Interactive user input", 1024 * 1024);
+        prepared.interactiveInputBytes = Buffer.from(input.text);
+        if (!prepared.interactiveInputBytes.length || !/^[a-f0-9]{64}$/.test(requiredOption(parsed, "expected-inputs-sha256")))
+            throw new AppError("usage", "Interactive delivery requires nonempty UTF-8 input and its current input digest", 2, { phase: "prepare", effect: "no_effect" });
+    }
+    if (optionalOption(parsed, "reason-file")) {
+        const value = prepareJsonFile(requiredOption(parsed, "reason-file"), "Check recovery evidence").value;
+        if (!value || typeof value.reason !== "string" || !value.reason.trim() || Object.keys(value).some(key => key !== "reason"))
+            throw new AppError("validation", "Recovery evidence must be a JSON object with one nonempty reason", 2);
+        prepared.retryReason = value.reason;
+    }
+    else if (optionalOption(parsed, "retry-check"))
+        prepared.retryReason = optionalOption(parsed, "reason");
+    if (route.key === "project register")
+        resolveProjectRoot(requiredOption(parsed, "root"));
+    if (route.key === "project archive")
+        prepareProjectArchive(context, { idOrAlias: parsed.positional[0], root: optionalOption(parsed, "root"), reason: requiredOption(parsed, "reason") });
+    if (route.key === "protocol register")
+        prepareProtocolRegistration(context, { handshakeId: requiredPosition(parsed, 0, "handshake-id"), projectRoot: requiredOption(parsed, "project-root"), workspacePath: optionalOption(parsed, "workspace-path") });
+    if (route.key === "canon register")
+        prepared.canonRegistration = prepareCanonRegistration(context, { root: requiredOption(parsed, "root") });
+    if (route.key === "run attach-stage")
+        prepareFlowRunStageAttachment(context, stageAttachmentInput(parsed));
+    if (route.key === "run complete-stage")
+        prepareRawFlowRunStageCompletion(context, stageCompletionInput(parsed));
+    if (route.key === "run override")
+        prepareFlowRunCompletion(context, runOverrideInput(parsed));
+    if (route.key === "engine bind-run")
+        prepared.engineBind = await prepareRunEngineBind(context, engineBindInput(parsed));
+    if (route.key === "worktree create")
+        prepared.worktreeCreate = prepareWorktreeCreate(context, { protocolId: requiredOption(parsed, "protocol-id"), projectRoot: requiredScopeProjectRoot(scopeProjectRoot, "worktree create"), branch: requiredOption(parsed, "branch"), base: requiredOption(parsed, "base"), path: requiredOption(parsed, "path") });
+    if (route.key === "worktree bootstrap")
+        prepared.worktreeBootstrap = prepareWorktreeBootstrap(context, { protocolId: requiredOption(parsed, "protocol-id"), projectRoot: requiredScopeProjectRoot(scopeProjectRoot, "worktree bootstrap") });
+    if (route.key === "worktree close")
+        prepareWorktreeClose(context, { protocolId: requiredOption(parsed, "protocol-id"), projectRoot: requiredScopeProjectRoot(scopeProjectRoot, "worktree close"), mode: requiredOption(parsed, "mode") });
+    if (route.key.startsWith("plan item "))
+        preparePlanItemMutation(context, planItemInput(parsed, requiredScopeProjectRoot(scopeProjectRoot, route.key)));
+    if (route.key === "lane workspace set")
+        prepareLaneWorkspace(context, laneWorkspaceInput(parsed));
+    if (route.key === "lane waiter cancel")
+        prepareLaneWaiterCancellation(context, laneWaiterCancelInput(parsed));
+    if (route.key === "merge-queue complete")
+        prepareMergeJobCompletion(context, { ...mergeJobTarget(parsed, scopeProjectRoot), summary: requiredOption(parsed, "summary") });
+    if (route.key === "merge-queue cancel")
+        prepareMergeQueueCancellation(context, mergeCancellationInput(parsed, scopeProjectRoot));
+    if (route.key === "merge-queue wait-next")
+        prepareMergeQueueWait(context, mergeWaitInput(parsed, scopeProjectRoot));
+    if (route.key === "merge-queue next" || route.key === "merge-queue claim")
+        prepareMergeClaim(context, { projectRoot: requiredOptionOrScope(parsed, scopeProjectRoot, "project-root"), workerId: requiredWorkerId(parsed), workspacePath: workspacePathOption(parsed), ...(route.key === "merge-queue claim" ? { protocolId: requiredPosition(parsed, 0, "protocol-id") } : {}) });
+    if (route.key === "merge-queue note")
+        prepareMergeJobNote(context, { protocolId: requiredPosition(parsed, 0, "protocol-id"), projectRoot: requiredScopeProjectRoot(scopeProjectRoot, "merge-queue note"), workerId: requiredWorkerId(parsed), summary: requiredOption(parsed, "summary") });
+    if (route.key === "merge bundle complete")
+        prepareMergeBundleCompletion(context, { projectRoot: requiredOption(parsed, "project-root"), workspacePath: workspacePathOption(parsed), workerId: requiredWorkerId(parsed), summary: requiredOption(parsed, "summary") });
+    if (route.key === "merge bundle claim")
+        prepareMergeBundleClaim(context, { projectRoot: requiredOption(parsed, "project-root"), workspacePath: workspacePathOption(parsed), workerId: requiredWorkerId(parsed) });
+    if (route.key === "merge bundle fail")
+        prepareMergeBundleFailure(context, { projectRoot: requiredOption(parsed, "project-root"), workspacePath: workspacePathOption(parsed), workerId: requiredWorkerId(parsed), reason: requiredOption(parsed, "reason"), requeue: parseBoolean(requiredOption(parsed, "requeue"), "requeue") });
+    if (route.key === "merge-queue fail")
+        prepareMergeJobFailure(context, { ...mergeJobTarget(parsed, scopeProjectRoot), reason: requiredOption(parsed, "reason"), requeue: parseBoolean(requiredOption(parsed, "requeue"), "requeue") });
+    if (route.key.startsWith("lane lock ") && route.key !== "lane lock status") {
+        const action = requiredPosition(parsed, 0, "lane lock action");
+        prepareLaneLock(context, {
+            projectRoot: requiredOption(parsed, "project-root"), lane: requiredOption(parsed, "lane"), workerId: requiredOption(parsed, "worker-id"),
+            workspacePath: workspacePathOption(parsed), leaseToken: optionalOption(parsed, "lease-token"), reason: optionalOption(parsed, "reason"),
+            ttlSeconds: optionalNumber(parsed, "ttl"), timeoutSeconds: optionalNumber(parsed, "timeout"), pollIntervalSeconds: optionalNumber(parsed, "poll-interval")
+        }, action);
+    }
+    if (route.key === "run recovery begin")
+        prepared.recoveryPayload = prepareRecoveryPayload(requiredOption(parsed, "interruption-json"), "interruption");
+    if (route.key === "run recovery seal")
+        prepared.recoveryPayload = prepareRecoveryPayload(requiredOption(parsed, "settlement-json"), "settlement");
+    if (route.key === "run recovery capture")
+        prepared.recoveryCapture = prepareRecoveryCapture(context, recoveryCaptureInput(parsed));
+    if (route.key === "run recovery resume")
+        prepared.recoveryResume = prepareRunRecoveryResume(context, recoveryResumeInput(parsed));
+    if (route.key === "run drive answer")
+        prepared.controllerAnswer = prepareRunControllerAnswer(context, controllerAnswerInput(parsed));
+    if (route.key === "run drive launch")
+        prepared.controllerLaunch = prepareRunControllerLaunch(context, controllerLaunchInput(parsed));
+    if (route.key === "run drive context")
+        prepared.controllerContext = prepareRunControllerContext(context, controllerContextInput(parsed));
+    if (route.key === "protocol transition" || route.key === "transition")
+        prepared.protocolTransition = prepareProtocolTransition(context, protocolTransitionInput(parsed, scopeProjectRoot ?? resolveOperationProjectRoot(context, args)));
+    if (route.key === "codex home init")
+        prepared.codexHome = prepareCodexHome(context, codexHomeInput(parsed));
+    if (route.key === "codex home remove")
+        prepareCodexHomeRemoval(context, { projectRoot: requiredOption(parsed, "project-root"), profile: optionalOption(parsed, "profile"), mode: requiredOption(parsed, "mode") });
+    if (["codex hooks install", "codex hooks remove"].includes(route.key))
+        prepared.codexHooks = prepareCodexHooks(context, { projectRoot: requiredOption(parsed, "project-root"), target: optionalOption(parsed, "target"), profile: optionalOption(parsed, "profile"), yes: hasOption(parsed, "yes") });
+    if (route.key === "migration apply")
+        prepared.migrationApply = prepareMigrationApply(context, migrationApplyInput(parsed, classifyCliOperation(args, context.env)));
+    if (route.key === "migration readiness")
+        prepared.upgradeStorageScope = {
+            projectRoot: requiredOption(parsed, "project-root"), workspaceRoot: requiredOption(parsed, "workspace-root"), requestId: requiredOption(parsed, "request-id")
+        };
+    if (route.key === "migration verify")
+        prepared.migrationVerification = verifyMigrationReport(context, { file: requiredOption(parsed, "file") });
+    if (responseFile)
+        prepareResponseDestination(responseFile);
+    if (family === "dashboard") {
+        const action = dashboardAction(command);
+        prepareDashboardOptions({ format: optionalOption(parsed, "format"), viewer: optionalOption(parsed, "viewer"), open: optionalOption(parsed, "open") });
+        const target = resolveDashboardTarget(context, { action, project: optionalOption(parsed, "project"), projectRoot: optionalOption(parsed, "project-root"), protocol: optionalOption(parsed, "protocol"), all: hasOption(parsed, "all"), global: hasOption(parsed, "global") || command?.endsWith("-global") });
+        if (action === "refresh" && target.kind !== "global" && optionalOption(parsed, "output") !== undefined) {
+            throw new AppError("validation", "--output is supported only for global dashboard refresh; use dashboard render for a custom project/protocol output", 2, { parameter: "output" });
+        }
+        if (target.kind === "protocol")
+            requireProtocol(context, target.protocolId, target.project.id);
+        if (action !== "data") {
+            if (target.kind === "global" || target.kind === "all_projects") {
+                prepareGlobalDashboardRender(context, { output: optionalOption(parsed, "output"), format: optionalOption(parsed, "format") ?? (command?.endsWith("-global") ? undefined : "html") });
+            }
+            else {
+                const format = optionalOption(parsed, "format") ?? (action === "open" || hasOption(parsed, "project") ? "html" : undefined);
+                const input = { projectRoot: target.project.root, format, ...(target.kind === "protocol" ? { protocol: target.protocolId } : {}) };
+                if (action === "refresh")
+                    prepareDashboardRefresh(context, { ...input, open: optionalOption(parsed, "open") });
+                else if (action === "render")
+                    prepareDashboardRender(context, { ...input, output: optionalOption(parsed, "output") });
+                else if (target.kind === "protocol") {
+                    if (format !== "html")
+                        throw new AppError("validation", "Protocol dashboard open supports --format html", 2, { protocol: target.protocolId });
+                    prepareDashboardRender(context, input);
+                }
+            }
+        }
+    }
+    if (route.key === "prompt render") {
+        const input = workerPromptInput(parsed);
+        prepared.workerPrompt = { input, value: prepareWorkerPrompt(context, input) };
+    }
+    if (route.key === "run snapshot restore" || route.key === "run snapshot bootstrap restore") {
+        try {
+            const input = snapshotRestoreInput(parsed);
+            if (route.key === "run snapshot restore")
+                prepared.snapshotRestore = prepareEvalRunRestore(context, input);
+            else
+                prepared.bootstrapRestore = prepareEvalBootstrapRestore(input);
+        }
+        catch (error) {
+            return prepareError(error, { parameter: "snapshot/project-root" });
+        }
+    }
+    if (route.key === "run snapshot bootstrap create") {
+        try {
+            prepareEvalBootstrapSnapshot(context, { projectRoot: requiredOption(parsed, "project-root"), output: requiredOption(parsed, "output"), flow: optionalOption(parsed, "flow") });
+        }
+        catch (error) {
+            return prepareError(error, { parameter: "project-root/output" });
+        }
+    }
+    if (route.key === "run snapshot create") {
+        prepareEvalRunSnapshotCreation(context, snapshotCreateInput(parsed));
+    }
+    if (route.key === "run start") {
+        try {
+            const input = runStartInput(parsed);
+            prepared.runStart = { input, value: prepareFlowRunStart(context, input) };
+        }
+        catch (error) {
+            return prepareError(error, { parameter: "run start" });
+        }
+    }
+    if (route.key === "run fork") {
+        try {
+            prepared.runFork = prepareRunFork(runForkInput(parsed));
+        }
+        catch (error) {
+            return prepareError(error, { parameter: "from/output" });
+        }
+    }
+    if (route.key === "runtime scope status")
+        prepareRuntimeScopeStatus(optionalOption(parsed, "scope-id"), optionalOption(parsed, "scope-ids-json"));
+    if (["runtime scope fence", "runtime scope stop"].includes(route.key))
+        prepareRuntimeScopeFence(requiredOption(parsed, "scope-id"), requiredOption(parsed, "request-id"));
+    if (route.key === "runtime scope resume")
+        prepareRuntimeScopeResumeRequest(context, runtimeScopeResumeInput(parsed));
+    if (route.key === "runtime scope reconcile")
+        prepareRuntimeScopeReconciliation(context, requiredOption(parsed, "scope-id"), Number(requiredOption(parsed, "generation")), requiredOption(parsed, "request-id"));
+    if (route.key === "runtime scope serve")
+        prepareRuntimeScopeServing(context, requiredOption(parsed, "scope-id"), Number(requiredOption(parsed, "generation")));
+    if (route.key === "runtime scope control") {
+        try {
+            const raw = optionalOption(parsed, "manifest-json");
+            prepared.runtimeManifest = prepareRuntimeScopeControl(requiredOption(parsed, "scope-id"), requiredOption(parsed, "request-id"), requiredOption(parsed, "mode"), raw === undefined ? undefined : prepareJsonText(raw, { file: "<manifest-json>", label: "scope manifest" }).value, context);
+        }
+        catch (error) {
+            return prepareError(error, { parameter: "scope-id/request-id/manifest-json" });
+        }
+    }
+    if (family === "runtime" && command === "process")
+        Object.assign(prepared, prepareRuntimeProcess(context, route.key, parsed));
+    if (route.key === "runtime process start") {
+        try {
+            prepareRuntimeService(context, runtimeServiceInput(parsed));
+        }
+        catch (error) {
+            return prepareError(error, { parameter: "runtime process start" });
+        }
+    }
+    if (family === "work" && command === "retry") {
+        try {
+            prepareWorkRetry(context, requiredPosition(parsed, 0, "work-id"), requiredOption(parsed, "reason"));
+        }
+        catch (error) {
+            return prepareError(error, { parameter: "work-id/reason" });
+        }
+    }
+    if (family === "work" && (command === "fail" || command === "cancel")) {
+        try {
+            prepareWorkSettlement(context, requiredPosition(parsed, 0, "work-id"), command === "fail" ? "failed" : "cancelled", requiredOption(parsed, "reason"));
+        }
+        catch (error) {
+            return prepareError(error, { parameter: "work-id/reason" });
+        }
+    }
+    if (family === "work" && (command === "deps" || command === "delete")) {
+        try {
+            if (command === "delete")
+                prepareWorkDelete(context, requiredPosition(parsed, 0, "work-id"));
+            else
+                prepareWorkDeps(context, { workId: requiredPosition(parsed, 1, "work-id"), action: requiredPosition(parsed, 0, "action"), on: parsed.options.get("on") ?? [] });
+        }
+        catch (error) {
+            return prepareError(error, { parameter: "work-id/on" });
+        }
+    }
+    if (route.key === "cleanup apply") {
+        const planFile = requiredOption(parsed, "plan-file");
+        try {
+            prepared.cleanup = prepareCleanupApply(context, { projectRoot: requiredOption(parsed, "project-root"), planFile, reason: requiredOption(parsed, "reason"), force: hasOption(parsed, "force") });
+        }
+        catch (error) {
+            return prepareError(error, { parameter: "plan-file", file: planFile });
+        }
+    }
+    if (route.key === "stage block" || route.key === "stage unblock") {
+        const input = { projectRoot: requiredOption(parsed, "project-root"), runId: requiredPosition(parsed, 0, "run-id"), stage: requiredOption(parsed, "stage"), workId: requiredOption(parsed, "work") };
+        try {
+            if (route.key === "stage block") {
+                const summaryFile = optionalOption(parsed, "summary-file"), summaryStdin = hasOption(parsed, "summary-stdin");
+                if (Boolean(summaryFile) === summaryStdin)
+                    throw new AppError("usage", "stage block requires exactly one of --summary-file or --summary-stdin", 2);
+                prepared.interactionText = summaryFile ? prepareTextFile(summaryFile, "Runtime block summary").text : await readStdin(io.stdin);
+                prepareStageRuntimeBlock(context, { ...input, kind: requiredOption(parsed, "kind"), code: requiredOption(parsed, "code"), summary: prepared.interactionText, retryable: hasOption(parsed, "retryable") });
+            }
+            else
+                prepareStageRuntimeUnblock(context, input);
+        }
+        catch (error) {
+            return prepareError(error, { parameter: "stage/work/summary" });
+        }
+    }
+    if (route.key === "zcode invocation prepare") {
+        const value = prepareJsonText(await readStdin(io.stdin), { file: "<stdin>", label: "invocation issuance" }).value;
+        const payload = value && typeof value === "object" ? value : {};
+        try {
+            prepared.lifecycleIssuance = prepareLifecycleIssuance(payload.command, payload.scope);
+        }
+        catch (error) {
+            if (error instanceof AppError && ["invocation_command_invalid", "invocation_scope_invalid"].includes(error.code))
+                return prepareError(new AppError("usage", error.message, 2, { cause_code: error.code }), { parameter: "stdin" });
+            throw error;
+        }
+        assertLifecycleInvocationCurrent(context, prepared.lifecycleIssuance.scope, prepared.lifecycleIssuance.command);
+    }
+    if (route.key === "work add-batch") {
+        const file = requiredOption(parsed, "file");
+        try {
+            assertGenericWorkBatchAllowed(context, requiredOption(parsed, "parent"));
+            prepared.workBatch = prepareWorkBatch(context, { parentWorkId: requiredOption(parsed, "parent"), file,
+                ...(optionalOption(parsed, "stage") ? { stage: optionalOption(parsed, "stage") } : {}),
+                ...(optionalOption(parsed, "request-key") ? { requestKey: optionalOption(parsed, "request-key") } : {}) });
+        }
+        catch (error) {
+            return prepareError(error, { parameter: "file/parent", file });
+        }
+    }
+    if (route.key === "work repair add") {
+        const taskFile = optionalOption(parsed, "task-file"), taskStdin = hasOption(parsed, "task-stdin");
+        if (Boolean(taskFile) === taskStdin)
+            throw new AppError("usage", "work repair add requires exactly one of --task-file or --task-stdin", 2);
+        if (taskStdin && io.stdin?.isTTY)
+            throw new AppError("usage", "--task-stdin requires piped or redirected input", 2);
+        const task = taskFile ? prepareTextFile(taskFile, "Repair task").text : await readStdin(io.stdin);
+        prepared.workRepair = prepareCliWorkRepair(context, parsed, task, scopeProjectRoot);
+    }
+    if (route.key === "run config set" || route.key === "run vars set") {
+        const input = { projectRoot: requiredOption(parsed, "project-root"), runId: requiredPosition(parsed, 1, "run-id"), key: requiredOption(parsed, "key"), value: requiredOption(parsed, "value") };
+        try {
+            if (route.key === "run config set")
+                prepareFlowRunConfig(context, { ...input, reason: requiredOption(parsed, "reason") });
+            else
+                prepareFlowRunVariable(context, input);
+        }
+        catch (error) {
+            return prepareError(error, { parameter: "run config/vars" });
+        }
+    }
+    if (route.key === "schema validate") {
+        try {
+            prepared.schemaValidation = dispatchSchema(context, command, parsed);
+        }
+        catch (error) {
+            return prepareError(error, { parameter: "file", file: requiredOption(parsed, "file") });
+        }
+    }
+    if (route.key === "project config set") {
+        try {
+            prepareProjectConfigValue(requiredOption(parsed, "key"), requiredOption(parsed, "value"));
+        }
+        catch (error) {
+            return prepareError(error, { parameter: "key/value" });
+        }
+    }
+    if (family === "session" && command === "register") {
+        try {
+            prepared.sessionPayload = prepareFlowSessionPayload({ payloadBase64: optionalOption(parsed, "payload-base64"), payloadFile: optionalOption(parsed, "payload-file"), payloadJson: optionalOption(parsed, "payload-json") });
+        }
+        catch (error) {
+            return prepareError(error, { parameter: "session payload" });
+        }
+    }
+    const run = (projectRoot, runId) => {
+        try {
+            const project = requireProjectByRoot(context, resolveProjectRoot(projectRoot));
+            const row = context.db.get("SELECT run_root, workspace_root, index_json FROM runs WHERE project_id = ? AND id = ?", [project.id, runId]);
+            if (!row)
+                throw new AppError("not_found", "RUN is not registered", 2, { run_id: runId });
+            if (!row.run_root)
+                throw new AppError("runtime_missing", "RUN artifact root is unavailable", 1, { run_id: runId });
+            return { runRoot: row.run_root, workspaceRoot: row.workspace_root, indexJson: row.index_json };
+        }
+        catch (error) {
+            return prepareError(error, { parameter: "run-id", run_id: runId });
+        }
+    };
+    const json = (file, stdin, label, schema) => {
+        if (stdin) {
+            // The caller awaits this helper; the synchronous facade below is only
+            // used for file inputs.  Keep stdin handling in the stage branch.
+            throw new AppError("usage", `${label} stdin preparation must be awaited`, 2);
+        }
+        if (!file)
+            throw new AppError("usage", `${label} input is required`, 2);
+        return prepareJsonSchema(file, label, schema);
+    };
+    if (family === "stage" && command === "start") {
+        const stage = requiredOption(parsed, "stage");
+        if (stage !== "specify" && ["bootstrap", "intake-file", "intake-stdin"].some(option => hasOption(parsed, option)))
+            throw new AppError("usage", "--bootstrap and intake inputs are only supported for SPECIFY", 2);
+        requiredOption(parsed, "project-root");
+        if (!hasOption(parsed, "bootstrap"))
+            requiredPosition(parsed, 0, "run-id");
+        if (hasOption(parsed, "session-id"))
+            throw new AppError("usage", "--session-id is managed by the harness lifecycle adapter and is not accepted", 2);
+        const contextFile = optionalOption(parsed, "context-file"), contextSha256 = optionalOption(parsed, "context-sha256");
+        if (Boolean(contextFile) !== Boolean(contextSha256))
+            throw new AppError("usage", "stage start requires --context-file together with --context-sha256", 2);
+        if ([hasOption(parsed, "intake-file"), hasOption(parsed, "intake-stdin"), Boolean(contextFile)].filter(Boolean).length > 1)
+            throw new AppError("usage", "Use exactly one of --intake-file, --intake-stdin or --context-file", 2);
+        if (!hasOption(parsed, "bootstrap")) {
+            const bundle = readFlowRunExecutionBundle(context, { projectRoot: requiredOption(parsed, "project-root"), runId: requiredPosition(parsed, 0, "run-id") });
+            if (bundle)
+                prepared.stageBindingBundle = { stage, bundle, ...(contextSha256 ? { contextSha256 } : {}) };
+            if (bundle && (["interactive", "mb-init", "mb-upgrade", "mb-distill", "mb-fix", "review-fix"].includes(bundle.descriptor.descriptor.id) || isDiagnosticFlow(bundle.descriptor.descriptor.id) || isDeliveryFlow(bundle.descriptor.descriptor.id))) {
+                bundle.descriptor.stage(stage);
+                if (hasOption(parsed, "dir"))
+                    throw new AppError("usage", "Memory stage layout belongs to its frozen descriptor", 2);
+                const loaded = contextFile && contextSha256 ? loadExternalStageContext({ file: contextFile, expectedSha256: contextSha256, stage }) : undefined;
+                if (loaded)
+                    prepared.stageStart = { externalContext: loaded };
+                prepared.memoryStage = { operation: "start", bytes: loaded ? Buffer.from(loaded.bytes) : Buffer.alloc(0),
+                    flowId: isDeliveryFlow(bundle.descriptor.descriptor.id) ? bundle.descriptor.descriptor.id : bundle.descriptor.descriptor.id === "interactive" ? "interactive" : bundle.descriptor.descriptor.id === "review-fix" ? "review-fix" : bundle.descriptor.descriptor.id === "mb-fix" ? "mb-fix" : bundle.descriptor.descriptor.id === "mb-distill" ? "mb-distill" : isDiagnosticFlow(bundle.descriptor.descriptor.id) ? bundle.descriptor.descriptor.id : bundle.descriptor.descriptor.id === "mb-upgrade" ? "mb-upgrade" : "mb-init" };
+                return prepared;
+            }
+        }
+        if (contextFile && contextSha256) {
+            try {
+                prepared.stageStart = { externalContext: loadExternalStageContext({ file: contextFile, expectedSha256: contextSha256, stage }) };
+            }
+            catch (error) {
+                return prepareError(error, { file: contextFile, parameter: "context-file" });
+            }
+            if (!hasOption(parsed, "bootstrap")) {
+                const { runRoot } = run(requiredOption(parsed, "project-root"), requiredPosition(parsed, 0, "run-id"));
+                prepareExternalStageContext({ stageRoot: path.join(runRoot, vnextStageDirectory(stage)), loaded: prepared.stageStart.externalContext });
+            }
+        }
+        if (stage === "specify") {
+            const intakeFile = optionalOption(parsed, "intake-file");
+            if (intakeFile)
+                prepared.stageStart = { intakeMarkdown: prepareTextFile(intakeFile, "SPECIFY intake").text };
+            else if (hasOption(parsed, "intake-stdin"))
+                prepared.stageStart = { intakeMarkdown: await readStdin(io.stdin) };
+            else if (prepared.stageStart?.externalContext)
+                prepared.stageStart.intakeMarkdown = runnerIntake(prepared.stageStart.externalContext);
+            const projectRoot = requiredOption(parsed, "project-root");
+            const bootstrap = hasOption(parsed, "bootstrap");
+            if (isVnextSpecifyFlow(projectRoot) && (bootstrap || isVnextSpecifyRun(context, { projectRoot, runId: requiredPosition(parsed, 0, "run-id") }))) {
+                prepared.specifyStart = prepareVnextSpecifyStart(context, { projectRoot, ...(prepared.stageStart?.intakeMarkdown !== undefined ? { intakeMarkdown: prepared.stageStart.intakeMarkdown } : {}), ...(prepared.stageStart?.externalContext ? { externalContext: prepared.stageStart.externalContext } : {}), slug: optionalOption(parsed, "subject"), ...(!bootstrap ? { runId: requiredPosition(parsed, 0, "run-id") } : {}) });
+            }
+            else if (bootstrap) {
+                if (hasOption(parsed, "intake-stdin") || contextFile)
+                    throw new AppError("usage", "Legacy SPECIFY bootstrap supports --intake-file, not stdin or runner context", 2);
+                prepared.legacyStageStart = prepareLegacyStageStart(context, { projectRoot, stage, bootstrap: { subject: requiredOption(parsed, "subject"), ...(intakeFile ? { intakeFile } : {}) }, ...(optionalOption(parsed, "dir") ? { dir: optionalOption(parsed, "dir") } : {}) }, prepared.stageStart?.intakeMarkdown);
+            }
+        }
+        if (stage === "merge" && isVnextMergeRun(context, { projectRoot: requiredOption(parsed, "project-root"), runId: requiredPosition(parsed, 0, "run-id") })) {
+            prepared.mergeStart = prepareVnextMergeStart(context, { projectRoot: requiredOption(parsed, "project-root"), runId: requiredPosition(parsed, 0, "run-id"), ...(prepared.stageStart?.externalContext ? { externalContext: prepared.stageStart.externalContext } : {}) });
+        }
+        if (stage === "protocolize" && isVnextProtocolizeRun(context, { projectRoot: requiredOption(parsed, "project-root"), runId: requiredPosition(parsed, 0, "run-id") })) {
+            prepared.protocolizeStart = prepareVnextProtocolizeStart(context, { projectRoot: requiredOption(parsed, "project-root"), runId: requiredPosition(parsed, 0, "run-id"), ...(prepared.stageStart?.externalContext ? { externalContext: prepared.stageStart.externalContext } : {}) });
+        }
+        if (stage === "plan" && isVnextPlanRun(context, { projectRoot: requiredOption(parsed, "project-root"), runId: requiredPosition(parsed, 0, "run-id") })) {
+            prepared.planStart = prepareVnextPlanStart(context, { projectRoot: requiredOption(parsed, "project-root"), runId: requiredPosition(parsed, 0, "run-id"), ...(prepared.stageStart?.externalContext ? { externalContext: prepared.stageStart.externalContext } : {}) });
+        }
+        if (stage === "plan-review" && isVnextPlanReviewRun(context, { projectRoot: requiredOption(parsed, "project-root"), runId: requiredPosition(parsed, 0, "run-id") })) {
+            prepared.planReviewStart = prepareVnextPlanReviewStart(context, { projectRoot: requiredOption(parsed, "project-root"), runId: requiredPosition(parsed, 0, "run-id"), ...(prepared.stageStart?.externalContext ? { externalContext: prepared.stageStart.externalContext } : {}) });
+        }
+        if (stage === "code" && isVnextPlanRun(context, { projectRoot: requiredOption(parsed, "project-root"), runId: requiredPosition(parsed, 0, "run-id") })) {
+            prepared.codeStart = prepareVnextCodeStart(context, { projectRoot: requiredOption(parsed, "project-root"), runId: requiredPosition(parsed, 0, "run-id"), ...(prepared.stageStart?.externalContext ? { externalContext: prepared.stageStart.externalContext } : {}) });
+        }
+        if (stage === "code-review" && isVnextCodeReviewRun(context, { projectRoot: requiredOption(parsed, "project-root"), runId: requiredPosition(parsed, 0, "run-id") })) {
+            prepared.codeReviewStart = prepareVnextCodeReviewStart(context, { projectRoot: requiredOption(parsed, "project-root"), runId: requiredPosition(parsed, 0, "run-id"), ...(prepared.stageStart?.externalContext ? { externalContext: prepared.stageStart.externalContext } : {}) });
+        }
+        if (![prepared.specifyStart, prepared.protocolizeStart, prepared.planStart, prepared.planReviewStart, prepared.codeStart, prepared.codeReviewStart, prepared.mergeStart, prepared.legacyStageStart].some(Boolean)) {
+            if (prepared.stageStart?.externalContext)
+                throw new AppError("usage", "--context-file is currently supported only by vNext flow stages", 2);
+            prepared.legacyStageStart = prepareLegacyStageStart(context, { projectRoot: requiredOption(parsed, "project-root"), runId: requiredPosition(parsed, 0, "run-id"), stage, ...(optionalOption(parsed, "dir") ? { dir: optionalOption(parsed, "dir") } : {}) });
+        }
+    }
+    if (family === "stage" && (command === "pause" || command === "resume")) {
+        requiredPosition(parsed, 0, "run-id");
+        requiredOption(parsed, "project-root");
+        requiredOption(parsed, "stage");
+        requiredOption(parsed, "work");
+        const fileParameter = command === "pause" ? "question-file" : "answer-file";
+        const stdinParameter = command === "pause" ? "question-stdin" : "answer-stdin";
+        const inputFile = optionalOption(parsed, fileParameter);
+        const fromStdin = hasOption(parsed, stdinParameter);
+        if (Boolean(inputFile) === fromStdin)
+            throw new AppError("usage", `stage ${command} requires exactly one of --${fileParameter} or --${stdinParameter}`, 2);
+        if (fromStdin && io.stdin?.isTTY)
+            throw new AppError("usage", `--${stdinParameter} requires piped or redirected input`, 2);
+        prepared.interactionText = inputFile ? prepareTextFile(inputFile, command === "pause" ? "User question" : "User answer").text : await readStdin(io.stdin);
+        if (!prepared.interactionText.trim())
+            return prepareError(new AppError("validation", `stage ${command} requires non-empty input`, 2), { parameter: inputFile ? fileParameter : stdinParameter });
+        const input = { projectRoot: requiredOption(parsed, "project-root"), runId: requiredPosition(parsed, 0, "run-id"), stage: requiredOption(parsed, "stage"), workId: requiredOption(parsed, "work") };
+        try {
+            if (command === "pause")
+                prepareStagePause(context, { ...input, question: prepared.interactionText });
+            else
+                prepared.resumeEvidence = prepareStageResume(context, { ...input, answer: prepared.interactionText }).evidence;
+        }
+        catch (error) {
+            return prepareError(error, { parameter: "stage/work" });
+        }
+    }
+    if (family === "work" && command === "finish") {
+        const retryReceiptId = optionalOption(parsed, "retry-check"), retryReason = prepared.retryReason;
+        if (Boolean(retryReceiptId) !== Boolean(retryReason))
+            throw new AppError("usage", "--retry-check and --reason must be supplied together", 2);
+        const resultFile = optionalOption(parsed, "result-file");
+        const resultStdin = hasOption(parsed, "result-stdin");
+        if (Boolean(resultFile) === resultStdin)
+            throw new AppError("usage", "work finish requires exactly one of --result-file or --result-stdin", 2);
+        const maxBytes = workResultByteLimit(context, requiredPosition(parsed, 0, "work-id"));
+        prepared.workFinish = { result: resultFile ? prepareTextFile(resultFile, "Work result", maxBytes).text : await readStdin(io.stdin, maxBytes) };
+        prepareWorkResult(context, requiredPosition(parsed, 0, "work-id"), prepared.workFinish.result, progress);
+    }
+    if (family === "stage" && command === "fanout" && requiredPosition(parsed, 0, "fanout action") === "reconcile") {
+        prepared.observations = prepareNativeObservations(prepareJsonFile(requiredOption(parsed, "observations-file"), "native observations").value);
+    }
+    if (family === "stage" && command === "native" && requiredPosition(parsed, 0, "native action") === "observe") {
+        prepared.observations = prepareNativeObservations(prepareJsonFile(requiredOption(parsed, "observations-file"), "native observations").value);
+    }
+    if (family === "memory" && (["compose", "corrections"].includes(command ?? "") && parsed.positional[0] === "register"
+        || command === "repair" && parsed.positional[0] === "publication-reserve"
+        || command === "distill" && parsed.positional[0] === "publish")) {
+        try {
+            const bytes = prepareFileBytes(requiredOption(parsed, "result-file"), `Memory ${command} result`, 1024 * 1024).bytes;
+            if (!bytes.length || bytes.length > 1024 * 1024)
+                throw new AppError("usage", "Memory operation result exceeds its byte bound", 2, { phase: "prepare", effect: "no_effect", recoverable: true });
+            prepared.memoryOperationBytes = bytes;
+        }
+        catch (error) {
+            if (command === "compose" && isAppError(error) && error.details.phase === "prepare"
+                && error.details.effect === "no_effect" && error.details.recoverable === true)
+                Object.assign(error.details, compositionProposalRetry(context, parsed));
+            throw error;
+        }
+    }
+    if (family === "memory" && command === "fix" && ["scope", "publish", "integrate"].includes(parsed.positional[0] ?? "") && hasOption(parsed, "result-file")) {
+        const file = requiredOption(parsed, "result-file"), input = prepareTextFile(file, "Memory repair proposal", 1024 * 1024);
+        prepared.memoryFixProposal = prepareJsonText(input.text, { file, label: "Memory repair proposal" }).value;
+        if (!prepared.memoryFixProposal || typeof prepared.memoryFixProposal !== "object" || Array.isArray(prepared.memoryFixProposal))
+            throw new AppError("usage", "Memory repair proposal must be a JSON object", 2, { phase: "prepare", effect: "no_effect" });
+    }
+    if (family !== "stage" || command !== "finish")
+        return prepared;
+    const projectRoot = requiredOption(parsed, "project-root");
+    const runId = requiredPosition(parsed, 0, "run-id");
+    const stage = requiredOption(parsed, "stage");
+    if (hasOption(parsed, "status"))
+        throw new AppError("usage", "Stage status belongs in the semantic input file", 2);
+    if (["result-file", "semantic-file", "data", "result-stdin"].filter(key => hasOption(parsed, key)).length > 1)
+        throw new AppError("usage", "Use exactly one result input: --result-file, --semantic-file, --data or --result-stdin", 2);
+    if (Boolean(optionalOption(parsed, "retry-check")) !== Boolean(prepared.retryReason))
+        throw new AppError("usage", "--retry-check requires recovery evidence", 2);
+    const resultStdin = hasOption(parsed, "result-stdin");
+    const semanticFile = optionalOption(parsed, "semantic-file") ?? optionalOption(parsed, "data");
+    const resultFile = optionalOption(parsed, "result-file") ?? semanticFile;
+    const runtime = run(projectRoot, runId);
+    const retainedFlowId = JSON.parse(runtime.indexJson).execution_bundle?.flow_id;
+    if (["interactive", "mb-init", "mb-upgrade", "mb-distill", "mb-fix", "review-fix"].includes(retainedFlowId) || isDiagnosticFlow(retainedFlowId) || isDeliveryFlow(retainedFlowId)) {
+        const bundle = readFlowRunExecutionBundle(context, { projectRoot, runId });
+        if (!bundle || !["interactive", "mb-init", "mb-upgrade", "mb-distill", "mb-fix", "review-fix"].includes(bundle.descriptor.descriptor.id) && !isDiagnosticFlow(bundle.descriptor.descriptor.id) && !isDeliveryFlow(bundle.descriptor.descriptor.id))
+            throw new AppError("cli_input_unprepared", "Registered RUN bundle is unavailable", 1);
+        bundle.descriptor.stage(stage);
+        if (["dir", "outcome", "decision-file", "verification-file", "retry-check", "reason", "reason-file", "request", "work"].some(option => hasOption(parsed, option)))
+            throw new AppError("usage", "Memory stage finish requires its registered JSON result, not legacy result options", 2);
+        if (Boolean(resultFile) === resultStdin)
+            throw new AppError("usage", "Memory stage finish requires exactly one result input", 2);
+        const bytes = resultStdin ? Buffer.from(await readStdin(io.stdin, 1024 * 1024)) : prepareFileBytes(resultFile, "Memory stage result", 1024 * 1024).bytes;
+        if (!bytes.length || bytes.length > 1024 * 1024)
+            throw new AppError("usage", "Memory stage result exceeds its byte bound", 2);
+        prepared.memoryStage = { operation: "finish", bytes, flowId: isDeliveryFlow(bundle.descriptor.descriptor.id) ? bundle.descriptor.descriptor.id : bundle.descriptor.descriptor.id === "interactive" ? "interactive" : bundle.descriptor.descriptor.id === "review-fix" ? "review-fix" : bundle.descriptor.descriptor.id === "mb-fix" ? "mb-fix" : bundle.descriptor.descriptor.id === "mb-distill" ? "mb-distill" : isDiagnosticFlow(bundle.descriptor.descriptor.id) ? bundle.descriptor.descriptor.id : bundle.descriptor.descriptor.id === "mb-upgrade" ? "mb-upgrade" : "mb-init" };
+        return prepared;
+    }
+    const terminalReplay = (name) => {
+        let index;
+        try {
+            index = JSON.parse(runtime.indexJson);
+        }
+        catch (error) {
+            throw new AppError("runtime_artifact_invalid", "RUN index is not valid retained JSON", 1, { run_id: runId, cause: error instanceof Error ? error.message : String(error) });
+        }
+        return index.stage_runs?.some(entry => entry.stage === name && entry.status === "done") === true
+            && fs.existsSync(path.join(runtime.runRoot, vnextStageDirectory(name), "stage-report.json"));
+    };
+    const acceptStageInputs = (allowed) => {
+        const options = allowed.split(" ");
+        for (const name of ["dir", "semantic-file", "data", "result-file", "result-stdin", "outcome", "decision-file", "verification-file", "retry-check", "reason", "reason-file", "request", "work"]) {
+            if (hasOption(parsed, name) && !options.includes(name === "reason-file" ? "reason" : name))
+                throw new AppError("usage", `stage finish ${stage} does not accept --${name} for this flow`, 2, { parameter: name });
+        }
+    };
+    const fromStdin = async (label, schema) => {
+        const value = prepareJsonText(await readStdin(io.stdin), { file: "<stdin>", label });
+        try {
+            validateSchema({ ...schema, file: value.file, data: value.value });
+        }
+        catch (error) {
+            return prepareError(error, { file: value.file, label });
+        }
+        return value;
+    };
+    if (stage === "specify" && isVnextSpecifyRun(context, { projectRoot, runId })) {
+        acceptStageInputs("result-file semantic-file data result-stdin outcome");
+        const outcome = optionalOption(parsed, "outcome");
+        if (!outcome || !["specified", "failed", "cancelled"].includes(outcome))
+            throw new AppError("usage", "vNext SPECIFY requires --outcome specified|failed|cancelled; use stage pause for a user question", 2);
+        if (Boolean(resultFile) === resultStdin)
+            throw new AppError("usage", "vNext SPECIFY finish requires exactly one result input", 2);
+        const schema = { schemaName: "vnext-specify", projectRoot, ddFlowHome: context.ddFlowHome, runId, runRoot: runtime.runRoot };
+        const input = resultStdin ? await fromStdin("SPECIFY result", schema) : json(resultFile, false, "SPECIFY result", schema);
+        prepared.stageFinish = { value: input.value, text: input.text };
+    }
+    else if (stage === "protocolize" && isVnextProtocolizeRun(context, { projectRoot, runId })) {
+        acceptStageInputs("result-file semantic-file data");
+        if (!resultFile || resultStdin || hasOption(parsed, "outcome"))
+            throw new AppError("usage", "vNext PROTOCOLIZE requires exactly --result-file", 2);
+        let absolute;
+        try {
+            absolute = prepareProtocolizeResultPath(runtime.runRoot, resultFile);
+        }
+        catch (error) {
+            return prepareError(error, { file: resultFile });
+        }
+        const input = json(absolute, false, "PROTOCOLIZE result", { schemaName: "vnext-protocolize-result", projectRoot, ddFlowHome: context.ddFlowHome, runId, runRoot: runtime.runRoot });
+        prepared.stageFinish = { value: input.value, text: input.text };
+    }
+    else if (stage === "plan" && isVnextPlanRun(context, { projectRoot, runId })) {
+        acceptStageInputs("");
+        if (hasOption(parsed, "code-work-batch-file"))
+            throw new AppError("usage", "vNext PLAN derives its CODE batch from accepted semantic plans; do not supply a batch file", 2);
+        try {
+            prepared.planFinish = prepareVnextPlanFinish(context, { projectRoot, runId });
+        }
+        catch (error) {
+            return prepareError(error, { parameter: "PLAN artifacts" });
+        }
+    }
+    else if (stage === "merge" && isVnextMergeRun(context, { projectRoot, runId })) {
+        acceptStageInputs("request work retry-check reason");
+        if (resultStdin || resultFile || hasOption(parsed, "outcome"))
+            throw new AppError("usage", "vNext MERGE uses the Work result path returned by stage start", 2);
+        requiredOption(parsed, "request");
+        requiredOption(parsed, "work");
+        try {
+            prepared.mergeFinish = prepareVnextMergeFinish(context, { projectRoot, runId, requestId: requiredOption(parsed, "request"), workId: requiredOption(parsed, "work"), ...(optionalOption(parsed, "retry-check") ? { retryCheckId: optionalOption(parsed, "retry-check"), retryReason: prepared.retryReason } : {}) });
+        }
+        catch (error) {
+            return prepareError(error, { parameter: "MERGE finish" });
+        }
+    }
+    else if (stage === "plan-review" && isVnextPlanReviewRun(context, { projectRoot, runId })) {
+        acceptStageInputs("decision-file");
+        if (resultStdin || hasOption(parsed, "outcome"))
+            throw new AppError("usage", "vNext PLAN-REVIEW uses --decision-file", 2);
+        const decision = optionalOption(parsed, "decision-file") ?? path.join(runtime.runRoot, "04-plan-review", "decision.json");
+        const input = json(decision, false, "PLAN-REVIEW decision", { schemaName: "plan-review-decision", projectRoot, ddFlowHome: context.ddFlowHome, runId, runRoot: runtime.runRoot });
+        prepared.stageFinish = { value: input.value, text: input.text };
+    }
+    else if (stage === "code" && isVnextPlanRun(context, { projectRoot, runId })) {
+        acceptStageInputs("verification-file retry-check reason");
+        if (semanticFile || resultFile || resultStdin || hasOption(parsed, "outcome"))
+            throw new AppError("usage", "vNext CODE finish accepts only --verification-file", 2);
+        const verification = optionalOption(parsed, "verification-file");
+        if (!verification)
+            throw new AppError("usage", "vNext CODE finish requires --verification-file", 2);
+        if (!terminalReplay(stage)) {
+            const input = json(verification, false, "CODE verification", { schemaName: "code-verification", projectRoot: runtime.workspaceRoot, ddFlowHome: context.ddFlowHome, runId, runRoot: runtime.runRoot });
+            prepared.stageFinish = { value: input.value, text: input.text };
+        }
+    }
+    else if (stage === "code-review" && isVnextCodeReviewRun(context, { projectRoot, runId })) {
+        acceptStageInputs("decision-file retry-check reason");
+        if (resultStdin || semanticFile || resultFile || hasOption(parsed, "outcome"))
+            throw new AppError("usage", "vNext CODE-REVIEW uses --decision-file", 2);
+        const decision = optionalOption(parsed, "decision-file") ?? path.join(runtime.runRoot, "06-code-review", "decision.json");
+        if (!terminalReplay(stage)) {
+            const input = prepareCodeReviewDecision(runtime.runRoot, optionalOption(parsed, "decision-file"));
+            try {
+                validateSchema({ schemaName: "code-review-decision", file: decision, data: input.value, projectRoot: runtime.workspaceRoot, ddFlowHome: context.ddFlowHome, runId, runRoot: runtime.runRoot });
+            }
+            catch (error) {
+                return prepareError(error, { file: decision, label: "CODE-REVIEW decision" });
+            }
+            prepared.stageFinish = input;
+        }
+    }
+    else {
+        acceptStageInputs("dir semantic-file data");
+        if (hasOption(parsed, "outcome") || hasOption(parsed, "result-file") || resultStdin)
+            throw new AppError("usage", "--outcome, --result-file and --result-stdin are only available for vNext SPECIFY", 2);
+        prepared.legacyStageFinish = prepareStageFinish(context, { projectRoot, runId, stage, ...(optionalOption(parsed, "dir") ? { dir: optionalOption(parsed, "dir") } : {}), ...(semanticFile ? { semanticFile } : {}) });
+    }
+    return prepared;
+}
+async function dispatch(args, context, io, scopeProjectRoot = null, classification = classifyCliOperation(args, context.env), output = parseOutputOptions(args), prepared = {}) {
+    if (!prepared.route)
+        throw new AppError("command_not_prepared", "Command dispatch requires prepared arguments", 1);
+    const { family, command, parsed } = prepared.route;
+    if (family === "zcode" && command === "invocation" && parsed.positional[0] === "prepare") {
+        const payload = prepared.lifecycleIssuance;
+        if (!payload)
+            throw new AppError("command_not_prepared", "Invocation issuance requires prepared input", 1);
+        assertLifecycleInvocationCurrent(context, payload.scope, payload.command);
+        return { ok: true, ...issueLifecycleInvocation(context, payload.command, payload.scope) };
+    }
+    if (family === "storage" && command === "migrate-writer") {
+        if (parsed.positional.length || [...parsed.options.keys()].some(key => !["database", "backup", "offline"].includes(key)) || [...parsed.options.values()].some(values => values.length !== 1))
+            throw new AppError("usage", "Usage: dd-flow storage migrate-writer --database ABSOLUTE_DB --backup NEW_ABSOLUTE_FILE --offline", 2);
+        if (parsed.options.get("offline")?.[0] !== flagValue)
+            throw new AppError("usage", "Writer migration requires --offline after draining all local and external runtime owners", 2);
+        return { ok: true, ...migrateStoreWriter(requiredOption(parsed, "database"), requiredOption(parsed, "backup")) };
+    }
     if (family === "engine") {
-        return dispatchEngine(context, command, parsed, classification);
+        return dispatchEngine(context, command, parsed, classification, prepared);
     }
     if (family === "status") {
-        const rootParsed = parseArgs([command ?? "", ...rest]);
         return getRuntimeStatus(context, {
-            projectRoot: optionalOption(rootParsed, "project-root") ?? optionalOption(rootParsed, "root"),
-            checkRegistry: hasOption(rootParsed, "check-registry")
+            projectRoot: optionalOption(parsed, "project-root") ?? optionalOption(parsed, "root"),
+            checkRegistry: hasOption(parsed, "check-registry")
         });
     }
     if (family === "version") {
         return getCliVersionReport();
     }
     if (family === "runtime") {
-        return await dispatchRuntime(context, command, parsed, commandProgress(io, output));
+        return await dispatchRuntime(context, command, parsed, commandProgress(io, output), prepared);
     }
     if (family === "canon") {
-        return dispatchCanon(context, command, parsed);
+        return dispatchCanon(context, command, parsed, prepared);
     }
     if (family === "project" && command === "register") {
         return registerProject(context, { root: requiredOption(parsed, "root") });
@@ -598,16 +1777,7 @@ async function dispatch(args, context, io, scopeProjectRoot = null, classificati
         return readyForMerge(context, { protocolId, projectRoot: requiredScopeProjectRoot(scopeProjectRoot, "protocol ready-for-merge") });
     }
     if (family === "protocol" && command === "transition") {
-        const protocolId = requiredPosition(parsed, 0, "protocol-id");
-        const reason = optionalOption(parsed, "reason");
-        return transitionProtocol(context, {
-            protocolId,
-            projectRoot: requiredScopeProjectRoot(scopeProjectRoot, "protocol transition"),
-            to: requiredOption(parsed, "to"),
-            jsonFile: requiredOptionAlias(parsed, ["payload-file", "json-file"]),
-            force: hasOption(parsed, "force"),
-            ...(reason ? { reason } : {})
-        });
+        return transitionProtocol(context, protocolTransitionInput(parsed, scopeProjectRoot), prepared.protocolTransition);
     }
     if (family === "protocol" && command === "sync-from-run") {
         const protocolId = requiredPosition(parsed, 0, "protocol-id");
@@ -632,17 +1802,7 @@ async function dispatch(args, context, io, scopeProjectRoot = null, classificati
         });
     }
     if (family === "transition") {
-        const transitionParsed = parseArgs([command ?? "", ...rest]);
-        const protocolId = requiredPosition(transitionParsed, 0, "protocol-id");
-        const reason = optionalOption(transitionParsed, "reason");
-        return transitionProtocol(context, {
-            protocolId,
-            projectRoot: requiredScopeProjectRoot(scopeProjectRoot, "transition"),
-            to: requiredOption(transitionParsed, "to"),
-            jsonFile: requiredOptionAlias(transitionParsed, ["payload-file", "json-file"]),
-            force: hasOption(transitionParsed, "force"),
-            ...(reason ? { reason } : {})
-        });
+        return transitionProtocol(context, protocolTransitionInput(parsed, scopeProjectRoot), prepared.protocolTransition);
     }
     if (family === "plan" && command === "status") {
         const protocolId = requiredPosition(parsed, 0, "protocol-id");
@@ -656,17 +1816,25 @@ async function dispatch(args, context, io, scopeProjectRoot = null, classificati
     }
     if (family === "stage" && command === "fanout") {
         const action = requiredPosition(parsed, 0, "fanout action");
-        const runId = requiredPosition(parsed, 1, "run-id");
         const stage = requiredOption(parsed, "stage");
         const projectRoot = requiredScopeProjectRoot(scopeProjectRoot, "stage fanout");
+        const project = requireProjectByRoot(context, resolveProjectRoot(projectRoot));
+        const runId = resolveRun(context, project.id, requiredPosition(parsed, 1, "run-id")).id;
         if (action === "status")
             return getVnextFanoutStatus(context, { projectRoot, runId, stage });
+        if (action === "reconcile")
+            return reconcileVnextFanout(context, { projectRoot, runId, stage, observations: prepared.observations ?? prepareJsonFile(requiredOption(parsed, "observations-file"), "native observations").value });
         if (action === "dispatch") {
             if (stage === "plan-review")
                 return dispatchVnextPlanReview(context, { projectRoot, runId });
             return getVnextFanoutStatus(context, { projectRoot, runId, stage });
         }
-        throw new AppError("usage", "Use: dd-flow stage fanout <status|dispatch> <RUN> --stage <stage> --project-root <path>", 2);
+        throw new AppError("usage", "Use: dd-flow stage fanout <status|dispatch|reconcile> <RUN> --stage <stage> --project-root <path>; reconcile requires --observations-file <native-observations.json>", 2);
+    }
+    if (family === "stage" && command === "native") {
+        if (requiredPosition(parsed, 0, "native action") !== "observe")
+            throw new AppError("usage", "Use: dd-flow stage native observe <RUN> --stage <stage> --observations-file <native-observations.json> --project-root <path>", 2);
+        return observeVnextNativeChildren(context, { projectRoot: requiredScopeProjectRoot(scopeProjectRoot, "stage native observe"), runId: requiredPosition(parsed, 1, "run-id"), stage: requiredOption(parsed, "stage"), observations: prepared.observations ?? prepareJsonFile(requiredOption(parsed, "observations-file"), "native observations").value });
     }
     if (family === "run" && command === "capacity") {
         if (requiredPosition(parsed, 0, "capacity action") !== "record")
@@ -678,16 +1846,7 @@ async function dispatch(args, context, io, scopeProjectRoot = null, classificati
         return dispatchPlanItem(context, parsed, requiredScopeProjectRoot(scopeProjectRoot, "plan item"));
     }
     if (family === "prompt" && command === "render") {
-        const workspaceRoot = optionalOption(parsed, "workspace-root");
-        const taskFile = optionalOption(parsed, "task-file");
-        return renderWorkerPrompt(context, {
-            projectRoot: requiredOption(parsed, "project-root"),
-            runId: requiredOption(parsed, "run"),
-            stage: requiredOption(parsed, "stage"),
-            profile: requiredOption(parsed, "profile"),
-            ...(taskFile ? { taskFile } : { planItemId: requiredOption(parsed, "plan-item") }),
-            ...(workspaceRoot ? { workspaceRoot } : {})
-        });
+        return renderWorkerPrompt(context, prepared.workerPrompt?.input ?? workerPromptInput(parsed), prepared.workerPrompt?.value);
     }
     if (family === "work" && command === "status") {
         return getVnextWorkStatus(context, {
@@ -696,7 +1855,10 @@ async function dispatch(args, context, io, scopeProjectRoot = null, classificati
         });
     }
     if (family === "work" && command === "add-batch") {
-        return addWorkBatch(context, { parentWorkId: requiredOption(parsed, "parent"), file: requiredOption(parsed, "file") });
+        assertGenericWorkBatchAllowed(context, requiredOption(parsed, "parent"));
+        return addWorkBatch(context, { parentWorkId: requiredOption(parsed, "parent"), file: requiredOption(parsed, "file"), prepared: prepared.workBatch,
+            ...(optionalOption(parsed, "stage") ? { stage: optionalOption(parsed, "stage") } : {}),
+            ...(optionalOption(parsed, "request-key") ? { requestKey: optionalOption(parsed, "request-key") } : {}) });
     }
     if (family === "work" && command === "ls") {
         return listWorks(context, { ...(optionalOption(parsed, "run") ? { runId: optionalOption(parsed, "run") } : {}), ...(optionalOption(parsed, "parent") ? { parentWorkId: optionalOption(parsed, "parent") } : {}), ...(optionalOption(parsed, "status") ? { status: optionalOption(parsed, "status") } : {}), ...(hasOption(parsed, "ready") ? { ready: true } : {}), ...(hasOption(parsed, "include-results") ? { includeResults: true } : {}), ...(optionalOption(parsed, "limit") ? { limit: Number(optionalOption(parsed, "limit")) } : {}) });
@@ -704,48 +1866,9 @@ async function dispatch(args, context, io, scopeProjectRoot = null, classificati
     if (family === "work" && command === "show")
         return showWork(context, requiredPosition(parsed, 0, "work-id"));
     if (family === "work" && command === "repair" && requiredPosition(parsed, 0, "action") === "add") {
-        if (!hasOption(parsed, "task-stdin"))
-            throw new AppError("usage", "work repair add requires --task-stdin", 2);
-        const origins = parsed.options.get("origin-work") ?? [];
-        const findings = parsed.options.get("from-finding") ?? [];
-        const unresolved = parsed.options.get("from-unresolved") ?? [];
-        if (!origins.length && !findings.length)
-            throw new AppError("usage", "work repair add requires --from-check with --origin-work, --from-finding, or --from-unresolved with --origin-work", 2);
-        if (findings.length)
-            return addVnextCodeReviewRepair(context, {
-                projectRoot: requiredScopeProjectRoot(scopeProjectRoot, "work repair add"),
-                runId: requiredOption(parsed, "run"),
-                findingIds: findings,
-                checkRefsByFinding: Object.fromEntries(findings.map((finding) => [finding, parsed.options.get("check-ref") ?? []])),
-                objective: await readStdin(io.stdin)
-            });
-        if (unresolved.length) {
-            if (!origins.length)
-                throw new AppError("usage", "semantic repair requires at least one --origin-work", 2);
-            const verificationPath = requiredOption(parsed, "verification-file");
-            return addVnextCodeRepair(context, {
-                projectRoot: requiredScopeProjectRoot(scopeProjectRoot, "work repair add"),
-                runId: requiredOption(parsed, "run"),
-                originWorkIds: origins,
-                semanticUnresolved: unresolved,
-                verificationPath,
-                objective: await readStdin(io.stdin)
-            });
-        }
-        if (!hasOption(parsed, "from-check"))
-            throw new AppError("usage", "check repair requires --from-check", 2);
-        if (!origins.length)
-            throw new AppError("usage", "check repair requires at least one --origin-work", 2);
-        const receipts = parsed.options.get("from-check") ?? [];
-        if (receipts.length !== 1)
-            throw new AppError("usage", "check repair accepts exactly one --from-check; create one causal repair Work per failed receipt", 2);
-        return addVnextCodeRepair(context, {
-            projectRoot: requiredScopeProjectRoot(scopeProjectRoot, "work repair add"),
-            runId: requiredOption(parsed, "run"),
-            checkReceiptId: receipts[0],
-            originWorkIds: origins,
-            objective: await readStdin(io.stdin)
-        });
+        if (!prepared.workRepair)
+            throw new AppError("cli_input_unprepared", "Repair input was not prepared", 1);
+        return addVnextCodeRepair(context, prepared.workRepair.input, prepared.workRepair.value);
     }
     if (family === "work" && command === "deps") {
         const on = parsed.options.get("on") ?? [];
@@ -753,26 +1876,42 @@ async function dispatch(args, context, io, scopeProjectRoot = null, classificati
     }
     if (family === "work" && command === "delete")
         return deleteWork(context, requiredPosition(parsed, 0, "work-id"));
+    if (family === "work" && command === "launch")
+        return await launchExternalWork(context, { workId: requiredPosition(parsed, 0, "work-id"), ...(optionalOption(parsed, "stage") ? { stage: optionalOption(parsed, "stage") } : {}), progress: commandProgress(io, output) });
     if (family === "work" && command === "start") {
         const hookEventId = optionalOption(parsed, "hook-event-id");
+        const recoveryId = optionalOption(parsed, "recovery-id");
         const projectRoot = requiredScopeProjectRoot(scopeProjectRoot, "work start");
-        return startWork(context, requiredPosition(parsed, 0, "work-id"), { ...(hookEventId ? { hookEventId } : {}), projectRoot });
+        return startWork(context, requiredPosition(parsed, 0, "work-id"), { ...(hookEventId ? { hookEventId } : {}), ...(recoveryId ? { recoveryId } : {}), projectRoot, progress: commandProgress(io, output) });
     }
     if (family === "work" && command === "finish") {
         const resultFile = optionalOption(parsed, "result-file");
         const resultStdin = hasOption(parsed, "result-stdin");
         if (Boolean(resultFile) === resultStdin)
             throw new AppError("usage", "work finish requires exactly one of --result-file or --result-stdin", 2);
-        const result = resultFile ? fs.readFileSync(path.resolve(resultFile), "utf8") : await readStdin(io.stdin);
-        return await finishWork(context, requiredPosition(parsed, 0, "work-id"), result, commandProgress(io, output));
+        const workId = requiredPosition(parsed, 0, "work-id");
+        const projectRoot = requiredScopeProjectRoot(scopeProjectRoot, "work finish");
+        assertWorkLifecycleOwner(context, { workId, projectRoot, operation: "work_finish", ...(optionalOption(parsed, "hook-event-id") ? { hookEventId: optionalOption(parsed, "hook-event-id") } : {}) });
+        const retryReceiptId = optionalOption(parsed, "retry-check"), retryReason = prepared.retryReason;
+        if (Boolean(retryReceiptId) !== Boolean(retryReason))
+            throw new AppError("usage", "--retry-check and --reason must be supplied together", 2);
+        const maxBytes = workResultByteLimit(context, workId);
+        const result = prepared.workFinish?.result ?? (resultFile ? prepareTextFile(resultFile, "Work result", maxBytes).text : await readStdin(io.stdin, maxBytes));
+        return await finishWork(context, workId, result, commandProgress(io, output), retryReceiptId ? { receiptId: retryReceiptId, reason: retryReason } : undefined);
+    }
+    if (family === "work" && command === "fail") {
+        const workId = requiredPosition(parsed, 0, "work-id");
+        const projectRoot = requiredScopeProjectRoot(scopeProjectRoot, "work fail");
+        assertWorkLifecycleOwner(context, { workId, projectRoot, operation: "work_fail", ...(optionalOption(parsed, "hook-event-id") ? { hookEventId: optionalOption(parsed, "hook-event-id") } : {}) });
+        return failWork(context, workId, requiredOption(parsed, "reason"));
     }
-    if (family === "work" && command === "fail")
-        return failWork(context, requiredPosition(parsed, 0, "work-id"), requiredOption(parsed, "reason"));
     if (family === "work" && command === "cancel")
         return cancelWork(context, requiredPosition(parsed, 0, "work-id"), requiredOption(parsed, "reason"));
     if (family === "work" && command === "retry")
         return retryWork(context, requiredPosition(parsed, 0, "work-id"), requiredOption(parsed, "reason"));
     if (family === "stage" && command === "start") {
+        if (prepared.stageBindingBundle)
+            context = { ...context, stageBindingBundle: prepared.stageBindingBundle };
         const dir = optionalOption(parsed, "dir");
         const bootstrap = hasOption(parsed, "bootstrap");
         const subject = optionalOption(parsed, "subject");
@@ -789,12 +1928,45 @@ async function dispatch(args, context, io, scopeProjectRoot = null, classificati
         const requireSessionBinding = hasOption(parsed, "require-session-binding");
         const projectRoot = requiredOption(parsed, "project-root");
         const stage = requiredOption(parsed, "stage");
-        const externalContext = contextFile && contextSha256 ? loadExternalStageContext({ file: contextFile, expectedSha256: contextSha256, stage }) : undefined;
+        const externalContext = prepared.stageStart?.externalContext;
+        if (prepared.memoryStage?.operation === "start") {
+            const runId = requiredPosition(parsed, 0, "run-id");
+            const event = hookEventId ?? (currentAssignedLifecycle(context) ? undefined : findRecentMatchingHookEvent(context, {
+                projectId: requireProjectByRoot(context, resolveProjectRoot(projectRoot)).id,
+                matchKey: entityReferenceVariants(runId).map(reference => stageStartMatchKey(reference, stage, projectRoot, contextSha256)),
+                errorCode: "trusted_session_binding_required", operation: "Memory stage start"
+            }).eventKey);
+            const work = (isDeliveryFlow(prepared.memoryStage.flowId) ? startDeliveryStage : prepared.memoryStage.flowId === "interactive" ? startInteractiveStage : prepared.memoryStage.flowId === "review-fix" ? startReviewFixStage : prepared.memoryStage.flowId === "mb-fix" ? startMemoryFixStage : prepared.memoryStage.flowId === "mb-distill" ? startDistillStage : isDiagnosticFlow(prepared.memoryStage.flowId) ? startDiagnosticStage : prepared.memoryStage.flowId === "mb-upgrade" ? startMemoryUpgradeStage : startMemoryStage)(context, { projectRoot, runId, stage, bytes: prepared.memoryStage.bytes });
+            try {
+                const binding = bindStageCoordinatorWork(context, { workId: work.work_id, hookEventId: event, stage,
+                    promptPath: work.prompt_path, resultPath: work.result_path, ...(contextSha256 ? { contextSha256 } : {}) });
+                // The frozen semantic prompt is also restored by auxiliary owners in
+                // other CLI contexts. Keep native invocation authority in this current
+                // delivery, not in those immutable instruction/custody bytes.
+                const finish = managedLifecycleCommand(context, runtimeCommand(context, ["stage", "finish", runId,
+                    "--stage", stage, "--project-root", projectRoot, "--result-file", work.result_path, "--json"]));
+                const pause = stagePauseCommand(context, { projectRoot, runId, stage, workId: work.work_id });
+                // These assignments belong to this native coordinator delivery, not to
+                // the immutable semantic packet restored by auxiliary owners.
+                const deliveryInstructions = isDeliveryFlow(prepared.memoryStage.flowId) ? issueDeliveryStageCommands(context, { flowId: prepared.memoryStage.flowId, projectRoot, runId, stage, stageRoot: path.dirname(work.result_path) }).instructions : "";
+                const orchestration = registeredStageFanoutDescriptor(context, { projectRoot, runId, stage });
+                const delivery = { ...work, binding, ...(orchestration ? { orchestration } : {}), next: { finish_command: finish, pause_command: pause },
+                    worker_prompt_markdown: `${work.worker_prompt_markdown}${deliveryInstructions}\n## Current lifecycle commands\n\nWrite the semantic result to the assigned result path, then execute exactly:\n${finish}\n\nFor a required user choice, write the question file named by this command, then execute exactly:\n${pause}\n` };
+                bindLifecyclePublishedPacket(context, delivery.worker_prompt_markdown);
+                return controlLifecycleReply(context, { projectRoot, runId }, delivery);
+            }
+            catch (error) {
+                throw new AppError("memory_stage_binding_pending", "Memory Stage allocated; trusted coordinator binding remains incomplete", 1, { effect: "committed", run_id: runId, stage, work_id: work.work_id, next_action: "reconcile_memory_stage_binding",
+                    cause: error instanceof AppError ? error.code : "coordinator_binding_failure" });
+            }
+        }
         const claimVnextStageStart = (runId) => {
+            if (currentAssignedLifecycle(context)?.operation === "stage_start")
+                return undefined;
             registerProject(context, { root: projectRoot });
             return findRecentMatchingHookEvent(context, {
                 projectId: requireProjectByRoot(context, resolveProjectRoot(projectRoot)).id,
-                matchKey: stageStartMatchKey(runId, stage, projectRoot, contextSha256),
+                matchKey: entityReferenceVariants(runId).map((reference) => stageStartMatchKey(reference, stage, projectRoot, contextSha256)),
                 errorCode: "trusted_session_binding_required",
                 operation: `vNext ${stage.toUpperCase()} start`
             }).eventKey;
@@ -818,39 +1990,39 @@ async function dispatch(args, context, io, scopeProjectRoot = null, classificati
                     })
                     : claimVnextStageStart(requiredPosition(parsed, 0, "run-id"));
             }
-            const result = launchVnextSpecify(context, {
+            const result = sdlcStageHandlers.specify.entry(context, {
                 projectRoot,
-                ...(externalContext ? { intakeMarkdown: runnerIntake(externalContext) } : intakeFile ? { intakeFile } : { intakeMarkdown: await readStdin(io.stdin) }),
+                ...(prepared.stageStart?.intakeMarkdown !== undefined ? { intakeMarkdown: prepared.stageStart.intakeMarkdown } : externalContext ? { intakeMarkdown: runnerIntake(externalContext) } : intakeFile ? { intakeFile } : { intakeMarkdown: await readStdin(io.stdin) }),
                 hookEventId,
                 ...(subject ? { slug: subject } : {}),
                 ...(externalContext ? { externalContext } : {}),
                 ...(!bootstrap ? { runId: requiredPosition(parsed, 0, "run-id") } : {})
-            });
+            }, prepared.specifyStart);
             return attachExternalStageContext(result, externalContext);
         }
         if (!bootstrap && stage === "protocolize" && isVnextProtocolizeRun(context, { projectRoot, runId: requiredPosition(parsed, 0, "run-id") })) {
             hookEventId ??= claimVnextStageStart(requiredPosition(parsed, 0, "run-id"));
-            return attachExternalStageContext(startVnextProtocolize(context, { projectRoot, runId: requiredPosition(parsed, 0, "run-id"), hookEventId, ...(contextSha256 ? { contextSha256 } : {}), ...(externalContext ? { externalContext } : {}) }), externalContext);
+            return attachExternalStageContext(await sdlcStageHandlers.protocolize.entry(context, { projectRoot, runId: requiredPosition(parsed, 0, "run-id"), hookEventId, ...(contextSha256 ? { contextSha256 } : {}), ...(externalContext ? { externalContext } : {}) }, prepared.protocolizeStart), externalContext);
         }
         if (!bootstrap && stage === "plan" && isVnextPlanRun(context, { projectRoot, runId: requiredPosition(parsed, 0, "run-id") })) {
             hookEventId ??= claimVnextStageStart(requiredPosition(parsed, 0, "run-id"));
-            return attachExternalStageContext(startVnextPlan(context, { projectRoot, runId: requiredPosition(parsed, 0, "run-id"), hookEventId, ...(contextSha256 ? { contextSha256 } : {}), ...(externalContext ? { externalContext } : {}) }), externalContext);
+            return attachExternalStageContext(sdlcStageHandlers.plan.entry(context, { projectRoot, runId: requiredPosition(parsed, 0, "run-id"), hookEventId, ...(contextSha256 ? { contextSha256 } : {}), ...(externalContext ? { externalContext } : {}) }, prepared.planStart), externalContext);
         }
         if (!bootstrap && stage === "plan-review" && isVnextPlanReviewRun(context, { projectRoot, runId: requiredPosition(parsed, 0, "run-id") })) {
             hookEventId ??= claimVnextStageStart(requiredPosition(parsed, 0, "run-id"));
-            return attachExternalStageContext(startVnextPlanReview(context, { projectRoot, runId: requiredPosition(parsed, 0, "run-id"), hookEventId, ...(contextSha256 ? { contextSha256 } : {}), ...(externalContext ? { externalContext } : {}) }), externalContext);
+            return attachExternalStageContext(sdlcStageHandlers["plan-review"].entry(context, { projectRoot, runId: requiredPosition(parsed, 0, "run-id"), hookEventId, ...(contextSha256 ? { contextSha256 } : {}), ...(externalContext ? { externalContext } : {}) }, prepared.planReviewStart), externalContext);
         }
         if (!bootstrap && stage === "code" && isVnextPlanRun(context, { projectRoot, runId: requiredPosition(parsed, 0, "run-id") })) {
             hookEventId ??= claimVnextStageStart(requiredPosition(parsed, 0, "run-id"));
-            return attachExternalStageContext(await startVnextCode(context, { projectRoot, runId: requiredPosition(parsed, 0, "run-id"), hookEventId, progress: commandProgress(io, output), ...(contextSha256 ? { contextSha256 } : {}), ...(externalContext ? { externalContext } : {}) }), externalContext);
+            return attachExternalStageContext(await sdlcStageHandlers.code.entry(context, { projectRoot, runId: requiredPosition(parsed, 0, "run-id"), hookEventId, progress: commandProgress(io, output), ...(contextSha256 ? { contextSha256 } : {}), ...(externalContext ? { externalContext } : {}) }, prepared.codeStart), externalContext);
         }
         if (!bootstrap && stage === "code-review" && isVnextCodeReviewRun(context, { projectRoot, runId: requiredPosition(parsed, 0, "run-id") })) {
             hookEventId ??= claimVnextStageStart(requiredPosition(parsed, 0, "run-id"));
-            return attachExternalStageContext(startVnextCodeReview(context, { projectRoot, runId: requiredPosition(parsed, 0, "run-id"), hookEventId, ...(contextSha256 ? { contextSha256 } : {}), ...(externalContext ? { externalContext } : {}) }), externalContext);
+            return attachExternalStageContext(sdlcStageHandlers["code-review"].entry(context, { projectRoot, runId: requiredPosition(parsed, 0, "run-id"), hookEventId, ...(contextSha256 ? { contextSha256 } : {}), ...(externalContext ? { externalContext } : {}) }, prepared.codeReviewStart), externalContext);
         }
         if (!bootstrap && stage === "merge" && isVnextMergeRun(context, { projectRoot, runId: requiredPosition(parsed, 0, "run-id") })) {
             hookEventId ??= claimVnextStageStart(requiredPosition(parsed, 0, "run-id"));
-            return attachExternalStageContext(await startVnextMerge(context, { projectRoot, runId: requiredPosition(parsed, 0, "run-id"), hookEventId, progress: commandProgress(io, output), ...(contextSha256 ? { contextSha256 } : {}), ...(externalContext ? { externalContext } : {}) }), externalContext);
+            return attachExternalStageContext(await sdlcStageHandlers.merge.entry(context, { projectRoot, runId: requiredPosition(parsed, 0, "run-id"), hookEventId, progress: commandProgress(io, output), ...(contextSha256 ? { contextSha256 } : {}), ...(externalContext ? { externalContext } : {}) }, prepared.mergeStart), externalContext);
         }
         if (intakeStdin) {
             throw new AppError("usage", "--intake-stdin is only available for vNext SPECIFY", 2);
@@ -865,7 +2037,7 @@ async function dispatch(args, context, io, scopeProjectRoot = null, classificati
             ...(hookEventId ? { hookEventId } : {}),
             ...(requireSessionBinding ? { requireSessionBinding: true } : {}),
             ...(dir ? { dir } : {})
-        });
+        }, prepared.legacyStageStart);
     }
     if (family === "stage" && command === "finish") {
         const dir = optionalOption(parsed, "dir");
@@ -875,13 +2047,34 @@ async function dispatch(args, context, io, scopeProjectRoot = null, classificati
         const projectRoot = requiredOption(parsed, "project-root");
         const runId = requiredPosition(parsed, 0, "run-id");
         const stage = requiredOption(parsed, "stage");
+        const controlledReply = (result) => controlLifecycleReply(context, { projectRoot, runId }, result);
         const semanticFile = optionalOption(parsed, "semantic-file") ?? optionalOption(parsed, "data");
         const resultFile = optionalOption(parsed, "result-file") ?? semanticFile;
         const resultStdin = hasOption(parsed, "result-stdin");
         const retryCheckId = optionalOption(parsed, "retry-check");
-        const retryReason = optionalOption(parsed, "reason");
+        const retryReason = prepared.retryReason;
+        const hookEventId = optionalOption(parsed, "hook-event-id");
         if (retryCheckId && !retryReason?.trim())
             throw new AppError("usage", "--retry-check requires --reason explaining the recovered environment", 2);
+        if (prepared.memoryStage?.operation === "finish") {
+            // Descriptor settlement validates exact coordinator custody and claims
+            // the fresh hook atomically with result acceptance. Do not consume it
+            // through the SDLC lifecycle owner before that settlement.
+            return controlledReply((isDeliveryFlow(prepared.memoryStage.flowId) ? finishDeliveryStage : prepared.memoryStage.flowId === "interactive" ? finishInteractiveStage : prepared.memoryStage.flowId === "review-fix" ? finishReviewFixStage : prepared.memoryStage.flowId === "mb-fix" ? finishMemoryFixStage : prepared.memoryStage.flowId === "mb-distill" ? finishDistillStage : isDiagnosticFlow(prepared.memoryStage.flowId) ? finishDiagnosticStage : prepared.memoryStage.flowId === "mb-upgrade" ? finishMemoryUpgradeStage : finishMemoryStage)(context, { projectRoot, runId, stage, bytes: prepared.memoryStage.bytes,
+                hookEventId: hookEventId ?? (currentAssignedLifecycle(context) ? "" : findRecentMatchingHookEvent(context, {
+                    projectId: requireProjectByRoot(context, resolveProjectRoot(projectRoot)).id,
+                    matchKey: entityReferenceVariants(runId).map(reference => stageLifecycleMatchKey("stage_finish", reference, stage, projectRoot)),
+                    errorCode: "trusted_session_binding_required", operation: "Memory stage finish"
+                }).eventKey) }));
+        }
+        const protectedLifecycle = (stage === "specify" && isVnextSpecifyRun(context, { projectRoot, runId }))
+            || (stage === "protocolize" && isVnextProtocolizeRun(context, { projectRoot, runId }))
+            || (stage === "plan" && isVnextPlanRun(context, { projectRoot, runId }))
+            || (stage === "plan-review" && isVnextPlanReviewRun(context, { projectRoot, runId }))
+            || (stage === "code" && isVnextPlanRun(context, { projectRoot, runId }))
+            || (stage === "code-review" && isVnextCodeReviewRun(context, { projectRoot, runId }));
+        if (protectedLifecycle)
+            assertStageLifecycleOwner(context, { projectRoot, runId, stage, operation: "stage_finish", ...(hookEventId ? { hookEventId } : {}) });
         if (stage === "specify" && isVnextSpecifyRun(context, { projectRoot, runId })) {
             const outcome = optionalOption(parsed, "outcome");
             if (!outcome || !["specified", "failed", "cancelled"].includes(outcome)) {
@@ -893,84 +2086,92 @@ async function dispatch(args, context, io, scopeProjectRoot = null, classificati
             if (!resultFile && !resultStdin) {
                 throw new AppError("usage", "vNext SPECIFY finish requires --result-file or --result-stdin", 2);
             }
-            return finishVnextSpecifyStage(context, {
+            return controlledReply(await sdlcStageHandlers.specify.finish(context, {
                 projectRoot,
                 runId,
-                ...(resultFile ? { resultFile } : { resultJson: await readStdin(io.stdin) }),
+                ...(resultFile ? { resultFile } : prepared.stageFinish?.value ? {} : { resultJson: await readStdin(io.stdin) }),
+                ...(prepared.stageFinish?.value ? { result: prepared.stageFinish.value } : {}),
                 outcome: outcome
-            });
+            }));
         }
         if (stage === "protocolize" && isVnextProtocolizeRun(context, { projectRoot, runId })) {
             if (!resultFile || resultStdin || hasOption(parsed, "outcome")) {
                 throw new AppError("usage", "vNext PROTOCOLIZE requires exactly --result-file", 2);
             }
-            return finishVnextProtocolize(context, { projectRoot, runId, resultFile });
+            return controlledReply(await sdlcStageHandlers.protocolize.finish(context, { projectRoot, runId, resultFile, ...(prepared.stageFinish?.value ? { result: prepared.stageFinish.value } : {}) }));
         }
         if (stage === "plan" && isVnextPlanRun(context, { projectRoot, runId })) {
             if (optionalOption(parsed, "code-work-batch-file"))
                 throw new AppError("usage", "vNext PLAN derives its CODE batch from accepted semantic plans; do not supply a batch file", 2);
-            return finishVnextPlan(context, { projectRoot, runId });
+            return controlledReply(await sdlcStageHandlers.plan.finish(context, { projectRoot, runId, ...(prepared.planFinish ? { prepared: prepared.planFinish } : {}) }));
         }
         if (stage === "plan-review" && isVnextPlanReviewRun(context, { projectRoot, runId })) {
             if (resultStdin || hasOption(parsed, "outcome"))
                 throw new AppError("usage", "vNext PLAN-REVIEW uses --decision-file", 2);
             const decisionFile = optionalOption(parsed, "decision-file");
-            return finishVnextPlanReview(context, { projectRoot, runId, ...(decisionFile ? { decisionFile } : {}) });
+            return controlledReply(await sdlcStageHandlers["plan-review"].finish(context, { projectRoot, runId, ...(decisionFile ? { decisionFile } : {}), ...(prepared.stageFinish?.value ? { decision: prepared.stageFinish.value, decisionText: prepared.stageFinish.text } : {}) }));
         }
         if (stage === "code" && isVnextPlanRun(context, { projectRoot, runId })) {
             if (semanticFile || resultFile || resultStdin || hasOption(parsed, "outcome")) {
                 throw new AppError("usage", "vNext CODE finish accepts only --verification-file", 2);
             }
-            return await finishVnextCode(context, { projectRoot, runId, verificationFile: optionalOption(parsed, "verification-file") ?? path.join("<missing>", "code-verification.json"), ...(retryCheckId ? { retryCheckId, retryReason: retryReason } : {}), progress: commandProgress(io, output) });
+            return controlledReply(await sdlcStageHandlers.code.finish(context, { projectRoot, runId, verificationFile: optionalOption(parsed, "verification-file") ?? path.join("<missing>", "code-verification.json"), ...(prepared.stageFinish?.value ? { verification: prepared.stageFinish.value } : {}), ...(retryCheckId ? { retryCheckId, retryReason: retryReason } : {}), progress: commandProgress(io, output) }));
         }
         if (stage === "code-review" && isVnextCodeReviewRun(context, { projectRoot, runId })) {
             if (resultStdin || semanticFile || resultFile || hasOption(parsed, "outcome"))
                 throw new AppError("usage", "vNext CODE-REVIEW uses --decision-file", 2);
-            return await finishVnextCodeReview(context, { projectRoot, runId, ...(optionalOption(parsed, "decision-file") ? { decisionFile: optionalOption(parsed, "decision-file") } : {}), ...(retryCheckId ? { retryCheckId, retryReason: retryReason } : {}), progress: commandProgress(io, output) });
+            return controlledReply(await sdlcStageHandlers["code-review"].finish(context, { projectRoot, runId, ...(optionalOption(parsed, "decision-file") ? { decisionFile: optionalOption(parsed, "decision-file") } : {}), ...(prepared.stageFinish?.value ? { decision: prepared.stageFinish.value, decisionText: prepared.stageFinish.text } : {}), ...(retryCheckId ? { retryCheckId, retryReason: retryReason } : {}), progress: commandProgress(io, output) }));
         }
         if (stage === "merge" && isVnextMergeRun(context, { projectRoot, runId })) {
             if (resultStdin || semanticFile || resultFile || hasOption(parsed, "outcome"))
                 throw new AppError("usage", "vNext MERGE uses the Work result path returned by stage start", 2);
-            return await finishVnextMerge(context, { projectRoot, runId, requestId: requiredOption(parsed, "request"), workId: requiredOption(parsed, "work"), ...(retryCheckId ? { retryCheckId, retryReason: retryReason } : {}), progress: commandProgress(io, output) });
+            return controlledReply(await sdlcStageHandlers.merge.finish(context, { projectRoot, runId, requestId: requiredOption(parsed, "request"), workId: requiredOption(parsed, "work"), ...(retryCheckId ? { retryCheckId, retryReason: retryReason } : {}), progress: commandProgress(io, output) }, prepared.mergeFinish));
         }
         if (hasOption(parsed, "outcome") || hasOption(parsed, "result-file") || resultStdin) {
             throw new AppError("usage", "--outcome, --result-file and --result-stdin are only available for vNext SPECIFY", 2);
         }
-        return finishStage(context, {
+        return controlledReply(await finishStage(context, {
             projectRoot,
             runId,
             stage,
             ...(dir ? { dir } : {}),
             ...(semanticFile ? { semanticFile } : {})
-        });
+        }, prepared.legacyStageFinish));
     }
     if (family === "stage" && command === "pause") {
-        if (!hasOption(parsed, "question-stdin"))
-            throw new AppError("usage", "stage pause requires --question-stdin", 2);
+        const projectRoot = requiredOption(parsed, "project-root");
+        const runId = requiredPosition(parsed, 0, "run-id");
+        const stage = requiredOption(parsed, "stage");
+        const workId = requiredOption(parsed, "work");
+        const protectedLifecycle = (stage === "specify" && isVnextSpecifyRun(context, { projectRoot, runId }))
+            || (stage === "protocolize" && isVnextProtocolizeRun(context, { projectRoot, runId }))
+            || (stage === "plan" && isVnextPlanRun(context, { projectRoot, runId }))
+            || (stage === "plan-review" && isVnextPlanReviewRun(context, { projectRoot, runId }))
+            || (stage === "code" && isVnextPlanRun(context, { projectRoot, runId }))
+            || (stage === "code-review" && isVnextCodeReviewRun(context, { projectRoot, runId }));
+        if (protectedLifecycle)
+            assertStageLifecycleOwner(context, { projectRoot, runId, stage, workId, operation: "stage_pause", ...(optionalOption(parsed, "hook-event-id") ? { hookEventId: optionalOption(parsed, "hook-event-id") } : {}) });
         return pauseStageForUser(context, {
-            projectRoot: requiredOption(parsed, "project-root"),
-            runId: requiredPosition(parsed, 0, "run-id"),
-            stage: requiredOption(parsed, "stage"),
-            workId: requiredOption(parsed, "work"),
-            question: await readStdin(io.stdin)
+            projectRoot,
+            runId,
+            stage,
+            workId,
+            question: prepared.interactionText ?? await readStdin(io.stdin)
         });
     }
     if (family === "stage" && command === "resume") {
-        if (!hasOption(parsed, "answer-stdin"))
-            throw new AppError("usage", "stage resume requires --answer-stdin", 2);
         const hookEventId = optionalOption(parsed, "hook-event-id");
         return resumeStageAfterUser(context, {
             projectRoot: requiredOption(parsed, "project-root"),
             runId: requiredPosition(parsed, 0, "run-id"),
             stage: requiredOption(parsed, "stage"),
             workId: requiredOption(parsed, "work"),
-            answer: await readStdin(io.stdin),
+            answer: prepared.interactionText ?? await readStdin(io.stdin),
+            evidence: prepared.resumeEvidence,
             ...(hookEventId ? { hookEventId } : {})
         });
     }
     if (family === "stage" && command === "block") {
-        if (!hasOption(parsed, "summary-stdin"))
-            throw new AppError("usage", "stage block requires --summary-stdin", 2);
         const kind = requiredOption(parsed, "kind");
         if (kind !== "engine" && kind !== "harness" && kind !== "environment")
             throw new AppError("usage", "--kind must be engine, harness or environment", 2);
@@ -981,7 +2182,7 @@ async function dispatch(args, context, io, scopeProjectRoot = null, classificati
             workId: requiredOption(parsed, "work"),
             kind,
             code: requiredOption(parsed, "code"),
-            summary: await readStdin(io.stdin),
+            summary: prepared.interactionText ?? await readStdin(io.stdin),
             retryable: hasOption(parsed, "retryable")
         });
     }
@@ -1006,13 +2207,55 @@ async function dispatch(args, context, io, scopeProjectRoot = null, classificati
         return dispatchMergeWorker(context, command, parsed);
     }
     if (family === "cleanup") {
-        return dispatchCleanup(context, command, parsed);
+        return dispatchCleanup(context, command, parsed, prepared.cleanup);
     }
     if (family === "session") {
-        return dispatchSession(context, command, parsed);
+        return dispatchSession(context, command, parsed, prepared.sessionPayload);
     }
     if (family === "run") {
-        return dispatchRun(context, command, parsed);
+        if (command === "control") {
+            const action = requiredPosition(parsed, 0, "control action");
+            const scope = { projectRoot: requiredOption(parsed, "project-root"), runId: requiredOption(parsed, "run") };
+            if (action === "status")
+                return runControlStatus(context, scope);
+            if (action === "reconcile") {
+                if ([...parsed.options.keys()].some(key => !["run", "project-root", "control-id", "request-id"].includes(key)) || [...parsed.options.values()].some(values => values.length !== 1))
+                    throw new AppError("usage", "Use run control reconcile --run ID --project-root PATH --control-id ID --request-id ID", 2);
+                return await reconcileRunControl(context, { ...scope, controlId: requiredOption(parsed, "control-id"), requestId: requiredOption(parsed, "request-id") });
+            }
+            if (action === "resume") {
+                if (["force", "grace-ms", "escalate"].some(option => hasOption(parsed, option)))
+                    throw new AppError("usage", "Resume does not accept stop or pause escalation options", 2);
+                return await resumeRunController(context, { ...scope, requestId: requiredOption(parsed, "request-id"), controlId: requiredOption(parsed, "from"), ...(hasOption(parsed, "wait-ms") ? { waitMs: Number(requiredOption(parsed, "wait-ms")) } : {}) });
+            }
+            if (action === "serve")
+                return await serveRunControl(context, { ...scope, controlId: requiredOption(parsed, "control-id") });
+            if (action === "pause" || action === "stop")
+                return await requestRunControl(context, {
+                    ...scope, action, requestId: requiredOption(parsed, "request-id"),
+                    ...(hasOption(parsed, "force") ? { force: true } : {}),
+                    ...(hasOption(parsed, "grace-ms") ? { graceMs: Number(requiredOption(parsed, "grace-ms")) } : {}),
+                    ...(hasOption(parsed, "escalate") ? { escalate: requiredOption(parsed, "escalate") } : {}),
+                    ...(hasOption(parsed, "wait-ms") ? { waitMs: Number(requiredOption(parsed, "wait-ms")) } : {})
+                });
+            throw new AppError("usage", "Use: dd-flow run control pause|stop|resume|reconcile|status", 2);
+        }
+        if (command === "drive") {
+            const action = requiredPosition(parsed, 0, "drive action");
+            const scope = { projectRoot: requiredOption(parsed, "project-root"), runId: requiredOption(parsed, "run") };
+            if (action === "status")
+                return runControllerStatus(context, { ...scope, ...(optionalOption(parsed, "after") ? { after: Number(optionalOption(parsed, "after")) } : {}) });
+            if (action === "launch")
+                return await launchRunController(context, controllerLaunchInput(parsed), prepared.controllerLaunch);
+            if (action === "serve")
+                return await serveRunController(context, { ...scope, controllerId: requiredOption(parsed, "controller-id") });
+            if (action === "answer")
+                return answerRunController(context, controllerAnswerInput(parsed), prepared.controllerAnswer);
+            if (action === "context")
+                return supplyRunControllerContext(context, controllerContextInput(parsed), prepared.controllerContext);
+            throw new AppError("usage", "Use: dd-flow run drive launch|status|answer|context", 2);
+        }
+        return dispatchRun(context, command, parsed, prepared);
     }
     if (family === "stat") {
         return dispatchStat(context, command, parsed);
@@ -1027,22 +2270,122 @@ async function dispatch(args, context, io, scopeProjectRoot = null, classificati
         return dispatchDashboard(context, command, parsed);
     }
     if (family === "schema") {
-        return dispatchSchema(context, command, parsed);
+        return prepared.schemaValidation;
+    }
+    if (family === "delivery") {
+        const projectRoot = requiredOption(parsed, "project-root"), project = requireProjectByRoot(context, resolveProjectRoot(projectRoot));
+        const runId = resolveRun(context, project.id, requiredPosition(parsed, 0, "run-id")).id, stage = requiredOption(parsed, "stage");
+        const input = { projectRoot, runId, stage, command: quote(["dd-flow", ...args]) };
+        const selected = command === "inputs" ? readDeliveryStageScope(context, input) : assertDeliveryCommandOwner(context, input);
+        if (command === "checks") {
+            if (!prepared.deliveryArtifact)
+                throw new AppError("cli_input_unprepared", "Delivery artifact was not prepared", 1);
+            const checks = prepareDeliveryChecks(context, { ...input, artifact: prepared.deliveryArtifact });
+            await checks.run();
+            return { ok: true, verification: checks.evidence().receipt };
+        }
+        if (command === "execute") {
+            if (!prepared.deliveryApproval)
+                throw new AppError("cli_input_unprepared", "Delivery approval was not prepared", 1);
+            return executeDeliveryOperation(context, { ...input, approval: prepared.deliveryApproval });
+        }
+        const packet = readDescriptorStageInput(context, selected.scope, selected.bundle);
+        const previous = packet.input.predecessor ? readAcceptedStageData(context, { ...selected.scope, stage: packet.input.predecessor.stage }) : null;
+        const details = previous ? JSON.parse(previous.bytes.toString("utf8")).details : null;
+        const operation = details?.decision && details?.artifact ? deliveryApprovalScope(selected.scope, selected.bundle, { operationId: details.decision.operation_id, binding: details.decision.binding,
+            artifact: { subject_ref: details.artifact.subject_ref, version: details.artifact.version, sha256: details.artifact.sha256 } }) : null;
+        if (command === "inputs")
+            return { flow_id: selected.flowId, run_id: runId, stage, user_inputs: selected.users,
+                user_inputs_sha256: selected.userInputsSha256, operation_scope: operation, scope_sha256: operation ? hybridDigest(operation) : null };
+        if (command === "reconcile") {
+            if (!details?.decision)
+                throw new AppError("delivery_stage_invalid", "Original delivery decision is required", 2, { effect: "no_effect" });
+            const policy = prepareDeliveryProjectBinding(selected.bundle.execution.snapshot().scope.workspace, details.decision.policy, details.decision.binding.selector);
+            if (hybridDigest(policy.binding) !== hybridDigest(details.decision.binding))
+                throw new AppError("delivery_stage_invalid", "Original delivery policy changed", 2, { effect: "no_effect" });
+            return observeDeliveryResult(context, { ...selected.scope, binding: policy.binding,
+                assertCurrent() { assertDeliveryCommandOwner(context, input); policy.assertCurrent(); } });
+        }
+        throw new AppError("usage", "Unknown delivery command", 2);
+    }
+    if (family === "interactive") {
+        const projectRoot = requiredOption(parsed, "project-root"), project = requireProjectByRoot(context, resolveProjectRoot(projectRoot));
+        const runId = resolveRun(context, project.id, requiredOption(parsed, "run")).id;
+        if (command === "integrate")
+            return integrateInteractiveFinish(context, { projectRoot, runId,
+                ...(prepared.interactiveGitAgreement ? { agreement: prepared.interactiveGitAgreement } : {}) });
+        if (command === "correction")
+            return registerInteractiveReviewCorrection(context, { projectRoot, runId, reviewWorkId: requiredOption(parsed, "work") });
+        if (command === "re-review")
+            return registerInteractiveCorrectionReview(context, { projectRoot, runId, correctionWorkId: requiredOption(parsed, "work") });
+        if (command === "checks") {
+            if (!prepared.interactiveChecksProposal)
+                throw new AppError("cli_input_unprepared", "Interactive check selection was not prepared", 1);
+            let checks;
+            try {
+                checks = PreparedInteractiveChecks.prepare(context, { projectRoot, runId,
+                    stage: requiredOption(parsed, "stage"), ...prepared.interactiveChecksProposal });
+            }
+            catch (error) {
+                if (isAppError(error) && error.code === "interactive_checks_invalid"
+                    && error.details.reason === "invalid_check_selection" && error.details.effect === "no_effect") {
+                    Object.assign(error.details, { phase: "prepare", recoverable: true,
+                        retry_command: runtimeCommand(context, ["interactive", "checks", "--project-root", projectRoot, "--run", runId,
+                            "--stage", requiredOption(parsed, "stage"), "--result-file", requiredOption(parsed, "result-file"), "--json", "--progress-jsonl"]),
+                        retry_instruction: "Correct only the rejected check selection JSON: additionalChecks contains unique id,command,purpose entries; IDs match ^CHK-[A-Za-z0-9-]{1,64}$ and must not collide with policy checks. No plan or check execution was retained by this call. Keep existing obligations and use this exact retry_command; this does not authorize replay of executed checks or bypass other refusals." });
+                }
+                throw error;
+            }
+            return checks.execute(context).then(receipts => ({ plan_sha256: checks.sha256, plan: checks.value(), receipts }));
+        }
+        if (command === "register") {
+            const bundle = readFlowRunExecutionBundle(context, { projectRoot, runId });
+            if (!bundle || bundle.manifest.flow_id !== "interactive")
+                throw new AppError("interactive_stage_invalid", "Bound interactive RUN required", 2, { effect: "no_effect" });
+            return registerInteractiveStageGraph(context, { projectRoot, runId, stage: requiredOption(parsed, "stage"),
+                gitExecutable: readInteractiveWorkGit(bundle).git_executable });
+        }
+        if (command === "git-inputs")
+            return observeInteractiveOriginalGitInputs(context, { projectRoot, runId, stage: requiredOption(parsed, "stage") });
+        if (command === "inputs" || command === "turn" || command === "finish" || command === "scope") {
+            const bundle = readFlowRunExecutionBundle(context, { projectRoot, runId });
+            if (!bundle || bundle.manifest.flow_id !== "interactive")
+                throw new AppError("interactive_stage_invalid", "Bound interactive RUN required", 2, { effect: "no_effect" });
+            const scope = { projectId: project.id, runId };
+            if (command === "inputs")
+                return readInteractiveUserInputs(context, scope, bundle);
+            if (command === "scope") {
+                if (!prepared.interactiveScopeProposal)
+                    throw new AppError("cli_input_unprepared", "Interactive scope proposal was not prepared", 1);
+                const result = PreparedInteractiveMutationScope.prepare(context, scope, bundle, prepared.interactiveScopeProposal).retain(context);
+                return { changed: result.changed, scope_revision: result.scope.revision, user_inputs_sha256: result.scope.inputs.sha256,
+                    baseline_sha256: result.scope.baseline.sha256, paths: result.scope.active_paths, needs_scope_refresh: result.scope.needs_scope_refresh };
+            }
+            if (!prepared.interactiveInputBytes)
+                throw new AppError("cli_input_unprepared", "Interactive user bytes were not prepared", 1);
+            return deliverInteractiveUserInput(context, scope, bundle, { projectRoot, intakeFile: requiredOption(parsed, "intake-file"),
+                requestId: requiredOption(parsed, "request-id"), kind: command, bytes: prepared.interactiveInputBytes,
+                expectedInputsSha256: requiredOption(parsed, "expected-inputs-sha256") });
+        }
     }
     if (family === "memory") {
-        return dispatchMemory(command, parsed);
+        return dispatchMemory(context, command, parsed, prepared);
     }
     if (family === "migration") {
-        return dispatchMigration(context, command, parsed, classification);
+        return dispatchMigration(context, command, parsed, classification, prepared);
     }
     if (family === "codex" && command === "hooks") {
-        return dispatchCodexHooks(context, parsed);
+        return dispatchCodexHooks(context, parsed, prepared);
     }
     if (family === "codex" && command === "home") {
-        return dispatchCodexHome(context, parsed);
+        return dispatchCodexHome(context, parsed, prepared);
     }
     if (family === "codex" && command === "hook") {
-        return dispatchCodexHook(context, parsed, await readStdin(io.stdin));
+        // `handle` is owned by the pre-context ingress above, never generic dispatch.
+        throw new AppError("usage", "Use: dd-flow codex hook handle --event EVENT", 2);
+    }
+    if (family === "zcode" && command === "hook") {
+        return dispatchZcodeHook(context, parsed, await readStdin(io.stdin));
     }
     if (family === "zcode" && command === "event") {
         return dispatchZcodeEvent(context, parsed, await readStdin(io.stdin));
@@ -1068,6 +2411,16 @@ async function dispatch(args, context, io, scopeProjectRoot = null, classificati
             throw new AppError("usage", "Unknown opencode usage action", 2);
         return ingestOpenCodeUsage(context, { projectRoot: requiredOption(parsed, "project-root"), stdin: await readStdin(io.stdin) });
     }
+    if (family === "droid" && command === "event") {
+        if (requiredPosition(parsed, 0, "droid event action") !== "handle")
+            throw new AppError("usage", "Unknown droid event action", 2);
+        return handleDroidEvent(context, { projectRoot: requiredOption(parsed, "project-root"), stdin: await readStdin(io.stdin) });
+    }
+    if (family === "droid" && command === "usage") {
+        if (requiredPosition(parsed, 0, "droid usage action") !== "ingest")
+            throw new AppError("usage", "Unknown droid usage action", 2);
+        return ingestDroidUsage(context, { projectRoot: requiredOption(parsed, "project-root"), stdin: await readStdin(io.stdin) });
+    }
     if (family === "agy" && command === "event")
         return dispatchAgyEvent(context, parsed, await readStdin(io.stdin));
     if (family === "agy" && command === "usage") {
@@ -1076,11 +2429,14 @@ async function dispatch(args, context, io, scopeProjectRoot = null, classificati
         return ingestAgyUsage(context, { projectRoot: requiredOption(parsed, "project-root"), stdin: await readStdin(io.stdin) });
     }
     if (family === "worktree") {
-        return dispatchWorktree(context, command, parsed, requiredScopeProjectRoot(scopeProjectRoot, `worktree ${command ?? ""}`));
+        return dispatchWorktree(context, command, parsed, requiredScopeProjectRoot(scopeProjectRoot, `worktree ${command ?? ""}`), prepared);
     }
     throw new AppError("usage", `Unknown command: ${args.join(" ") || "<empty>"}`, 2);
 }
-function dispatchEngine(context, command, parsed, classification) {
+function engineBindInput(parsed) {
+    return { projectRoot: requiredOption(parsed, "project-root"), runId: requiredPosition(parsed, 0, "run-id"), packageName: optionalOption(parsed, "package"), engineVersion: requiredOption(parsed, "engine-version"), integrityChecksum: optionalOption(parsed, "integrity-checksum"), reason: requiredOption(parsed, "reason") };
+}
+function dispatchEngine(context, command, parsed, classification, prepared) {
     if (command === "install") {
         return installCurrentEngine(context, { force: hasOption(parsed, "force") });
     }
@@ -1105,20 +2461,20 @@ function dispatchEngine(context, command, parsed, classification) {
         });
     }
     if (command === "bind-run") {
-        return bindRunEngine(context, {
-            projectRoot: requiredOption(parsed, "project-root"),
-            runId: requiredPosition(parsed, 0, "run-id"),
-            packageName: optionalOption(parsed, "package"),
-            engineVersion: requiredOption(parsed, "engine-version"),
-            integrityChecksum: optionalOption(parsed, "integrity-checksum"),
-            reason: requiredOption(parsed, "reason")
-        });
+        return bindRunEngine(context, engineBindInput(parsed), prepared.engineBind);
     }
     throw new AppError("usage", `Unknown engine command: ${command ?? "<empty>"}`, 2);
 }
-function dispatchMigration(context, command, parsed, classification) {
+function dispatchMigration(context, command, parsed, classification, prepared) {
     if (command === "impact")
         return assessMigrationImpact(context, { projectRoot: requiredOption(parsed, "project-root"), ...(optionalOption(parsed, "target-version") ? { targetVersion: optionalOption(parsed, "target-version") } : {}), ...(optionalOption(parsed, "mode") ? { mode: optionalOption(parsed, "mode") } : {}) });
+    if (command === "readiness") {
+        if (!prepared.upgradeStorageScope)
+            throw new AppError("validation", "Upgrade storage scope must be prepared before publication", 2);
+        // Unlike the initial readonly syntax pass, this connection is admitted
+        // prepared-existing. Physical writer checks still precede receipt writes.
+        return { ok: true, ...PreparedUpgradeStorageReadiness.prepare(context, prepared.upgradeStorageScope).apply(context) };
+    }
     if (command === "plan" || command === "report") {
         return planMigration(context, {
             projectRoot: requiredOption(parsed, "project-root"),
@@ -1132,26 +2488,42 @@ function dispatchMigration(context, command, parsed, classification) {
         });
     }
     if (command === "verify") {
-        return verifyMigrationReport(context, { file: requiredOption(parsed, "file") });
+        return prepared.migrationVerification ?? verifyMigrationReport(context, { file: requiredOption(parsed, "file") });
     }
     if (command === "apply") {
-        return applyMigration(context, {
-            projectRoot: requiredOption(parsed, "project-root"),
-            sourceVersion: optionalOption(parsed, "source-version"),
-            targetVersion: optionalOption(parsed, "target-version"),
-            runId: optionalOption(parsed, "run"),
-            backupPath: optionalOption(parsed, "backup-path"),
-            backupCreatedAt: optionalOption(parsed, "backup-created-at"),
-            reportFile: optionalOption(parsed, "file"),
-            allowActive: false,
-            classification
-        });
+        return applyMigration(context, migrationApplyInput(parsed, classification), prepared.migrationApply);
     }
     throw new AppError("usage", `Unknown migration command: ${command ?? "<empty>"}`, 2);
 }
-function dispatchCanon(context, command, parsed) {
+function protocolTransitionInput(parsed, scopeProjectRoot) {
+    const reason = optionalOption(parsed, "reason");
+    return { protocolId: requiredPosition(parsed, 0, "protocol-id"), projectRoot: requiredScopeProjectRoot(scopeProjectRoot, "protocol transition"), to: requiredOption(parsed, "to"), jsonFile: requiredOptionAlias(parsed, ["payload-file", "json-file"]), force: hasOption(parsed, "force"), ...(reason ? { reason } : {}) };
+}
+function controllerAnswerInput(parsed) {
+    return { projectRoot: requiredOption(parsed, "project-root"), runId: requiredOption(parsed, "run"), requestId: requiredOption(parsed, "request-id"), pauseId: requiredOption(parsed, "pause-id"), answerFile: requiredOption(parsed, "answer-file") };
+}
+function controllerLaunchInput(parsed) {
+    return { projectRoot: requiredOption(parsed, "project-root"), runId: requiredOption(parsed, "run"), requestId: requiredOption(parsed, "request-id"), contextFile: requiredOption(parsed, "context-file"), contextSha256: requiredOption(parsed, "context-sha256"), ...(optionalOption(parsed, "stop-after") ? { stopAfter: optionalOption(parsed, "stop-after") } : {}), ...(optionalOption(parsed, "capture-root") ? { captureRoot: optionalOption(parsed, "capture-root") } : {}) };
+}
+function controllerContextInput(parsed) {
+    return { projectRoot: requiredOption(parsed, "project-root"), runId: requiredOption(parsed, "run"), controllerId: requiredOption(parsed, "controller-id"), requestId: requiredOption(parsed, "request-id"), stage: requiredOption(parsed, "stage"), contextFile: requiredOption(parsed, "context-file"), contextSha256: requiredOption(parsed, "context-sha256") };
+}
+function migrationApplyInput(parsed, classification) {
+    return {
+        projectRoot: requiredOption(parsed, "project-root"),
+        sourceVersion: optionalOption(parsed, "source-version"),
+        targetVersion: optionalOption(parsed, "target-version"),
+        runId: optionalOption(parsed, "run"),
+        backupPath: optionalOption(parsed, "backup-path"),
+        backupCreatedAt: optionalOption(parsed, "backup-created-at"),
+        reportFile: optionalOption(parsed, "file"),
+        allowActive: false,
+        classification
+    };
+}
+function dispatchCanon(context, command, parsed, prepared) {
     if (command === "register") {
-        return registerCanonRoot(context, { root: requiredOption(parsed, "root") });
+        return registerCanonRoot(context, { root: requiredOption(parsed, "root") }, prepared.canonRegistration);
     }
     if (command === "status") {
         return getCanonStatus(context, { root: optionalOption(parsed, "root") });
@@ -1161,6 +2533,15 @@ function dispatchCanon(context, command, parsed) {
     }
     throw new AppError("usage", `Unknown canon command: ${command ?? "<empty>"}`, 2);
 }
+function mergeJobTarget(parsed, scopeProjectRoot) {
+    return { protocolId: requiredPosition(parsed, 0, "protocol-id"), projectRoot: requiredScopeProjectRoot(scopeProjectRoot, "merge-queue"), workerId: requiredWorkerId(parsed), workspacePath: workspacePathOption(parsed) };
+}
+function mergeCancellationInput(parsed, scopeProjectRoot) {
+    return { protocolId: requiredPosition(parsed, 0, "protocol-id"), projectRoot: requiredScopeProjectRoot(scopeProjectRoot, "merge-queue cancel"), reason: requiredOption(parsed, "reason"), workerId: optionalOption(parsed, "worker-id"), workspacePath: optionalOption(parsed, "path"), force: hasOption(parsed, "force") };
+}
+function mergeWaitInput(parsed, scopeProjectRoot) {
+    return { projectRoot: requiredOptionOrScope(parsed, scopeProjectRoot, "project-root"), workerId: requiredWorkerId(parsed), timeoutSeconds: optionalNumber(parsed, "timeout"), pollIntervalSeconds: optionalNumber(parsed, "poll-interval"), workspacePath: workspacePathOption(parsed), acquireLock: parseOptionalBoolean(optionalOption(parsed, "acquire-lock"), "acquire-lock") ?? false };
+}
 function dispatchMergeQueue(context, command, parsed, scopeProjectRoot) {
     if (hasOption(parsed, "session-id")) {
         throw new AppError("usage", "--session-id is no longer accepted on merge-queue commands; use --worker-id", 2);
@@ -1184,32 +2565,17 @@ function dispatchMergeQueue(context, command, parsed, scopeProjectRoot) {
         });
     }
     if (command === "wait-next") {
-        return waitNextMergeJob(context, {
-            projectRoot: requiredOptionOrScope(parsed, scopeProjectRoot, "project-root"),
-            workerId: requiredWorkerId(parsed),
-            timeoutSeconds: optionalNumber(parsed, "timeout"),
-            pollIntervalSeconds: optionalNumber(parsed, "poll-interval"),
-            workspacePath: workspacePathOption(parsed),
-            acquireLock: parseOptionalBoolean(optionalOption(parsed, "acquire-lock"), "acquire-lock") ?? false
-        });
+        return waitNextMergeJob(context, mergeWaitInput(parsed, scopeProjectRoot));
     }
     if (command === "complete") {
-        const protocolId = requiredPosition(parsed, 0, "protocol-id");
         return completeMergeJob(context, {
-            protocolId,
-            projectRoot: requiredScopeProjectRoot(scopeProjectRoot, "merge-queue complete"),
-            workerId: requiredWorkerId(parsed),
-            workspacePath: workspacePathOption(parsed),
+            ...mergeJobTarget(parsed, scopeProjectRoot),
             summary: requiredOption(parsed, "summary")
         });
     }
     if (command === "fail") {
-        const protocolId = requiredPosition(parsed, 0, "protocol-id");
         return failMergeJob(context, {
-            protocolId,
-            projectRoot: requiredScopeProjectRoot(scopeProjectRoot, "merge-queue fail"),
-            workerId: requiredWorkerId(parsed),
-            workspacePath: workspacePathOption(parsed),
+            ...mergeJobTarget(parsed, scopeProjectRoot),
             reason: requiredOption(parsed, "reason"),
             requeue: parseBoolean(requiredOption(parsed, "requeue"), "requeue")
         });
@@ -1224,15 +2590,7 @@ function dispatchMergeQueue(context, command, parsed, scopeProjectRoot) {
         });
     }
     if (command === "cancel") {
-        const protocolId = requiredPosition(parsed, 0, "protocol-id");
-        return cancelMergeQueueJob(context, {
-            protocolId,
-            projectRoot: requiredScopeProjectRoot(scopeProjectRoot, "merge-queue cancel"),
-            reason: requiredOption(parsed, "reason"),
-            workerId: optionalOption(parsed, "worker-id"),
-            workspacePath: optionalOption(parsed, "path"),
-            force: hasOption(parsed, "force")
-        });
+        return cancelMergeQueueJob(context, mergeCancellationInput(parsed, scopeProjectRoot));
     }
     throw new AppError("usage", `Unknown merge-queue command: ${command ?? "<empty>"}`, 2);
 }
@@ -1331,7 +2689,7 @@ function dispatchMergeWorker(context, command, parsed) {
     }
     throw new AppError("usage", `Unknown merge-worker command: ${command ?? "<empty>"}`, 2);
 }
-function dispatchMemory(command, parsed) {
+function dispatchMemory(context, command, parsed, prepared) {
     const subcommand = requiredPosition(parsed, 0, "memory subcommand");
     if (command === "permissions" && subcommand === "preflight") {
         return preflightMemoryPermissions({
@@ -1342,6 +2700,128 @@ function dispatchMemory(command, parsed) {
             mode: requiredOption(parsed, "mode")
         });
     }
+    const scope = () => {
+        const projectRoot = requiredOption(parsed, "project-root");
+        const project = requireProjectByRoot(context, resolveProjectRoot(projectRoot));
+        return { projectRoot, runId: resolveRun(context, project.id, requiredOption(parsed, "run")).id };
+    };
+    if (command === "repair") {
+        const wave = requiredOption(parsed, "wave");
+        if (wave !== "1" && wave !== "2")
+            throw new AppError("usage", "Memory repairs support only waves 1 and 2", 2);
+        const work = { ...scope(), workId: requiredOption(parsed, "work") };
+        if (subcommand === "baseline")
+            return (wave === "1" ? registerMemoryRepairBaselineFromStage : registerMemorySecondRepairBaselineFromStage)(context, work);
+        if (subcommand === "copy-reserve")
+            return (wave === "1" ? reserveMemoryRepairWriterCopyFromStage : reserveMemorySecondRepairCopyFromStage)(context, work);
+        if (subcommand === "copy-materialize")
+            return (wave === "1" ? materializeMemoryRepairWriterCopyFromStage : materializeMemorySecondRepairCopyFromStage)(context, work);
+        if (subcommand === "copy-dispatch")
+            return (wave === "1" ? prepareMemoryRepairDispatchFromStage : prepareMemorySecondRepairDispatchFromStage)(context, work);
+        const workspaceRoot = requiredOption(parsed, "workspace-root");
+        if (wave === "2") {
+            const bundle = readFlowRunExecutionBundle(context, work);
+            if (!bundle || !["mb-init", "mb-upgrade"].includes(bundle.descriptor.descriptor.id) || bundle.execution.snapshot().scope.workspace !== workspaceRoot)
+                throw new AppError("memory_repair_scope_invalid", "Repair workspace does not match its frozen memory RUN", 2, { phase: "prepare", effect: "no_effect" });
+        }
+        if (subcommand === "current-view")
+            return wave === "1"
+                ? registerMemoryRepairCurrentViewFromStage(context, { ...work, workspaceRoot })
+                : registerMemorySecondRepairCurrentViewFromStage(context, work);
+        const output = { ...work, workspaceRoot, workSessionId: requiredOption(parsed, "work-session") };
+        if (subcommand === "publication-source" && wave === "1")
+            return registerMemoryRepairPublicationSourceFromStage(context, output);
+        if (subcommand === "publication-reserve") {
+            if (!prepared.memoryOperationBytes)
+                throw new AppError("cli_input_unprepared", "Memory repair output bytes were not prepared", 1);
+            return (wave === "1" ? reserveMemoryRepairPublicationAgainstSourceFromStage : reserveMemorySecondRepairPublicationFromStage)(context, { ...output, bytes: prepared.memoryOperationBytes });
+        }
+        if (subcommand === "publication-apply")
+            return (wave === "1" ? applyMemoryRepairPublicationFromStage : applyMemorySecondRepairPublicationFromStage)(context, output);
+        if (subcommand === "publication-finish")
+            return (wave === "1" ? finishMemoryRepairPublicationFromStage : finishMemorySecondRepairPublicationFromStage)(context, output);
+    }
+    if (command === "compose" && subcommand === "register") {
+        if (!prepared.memoryOperationBytes)
+            throw new AppError("cli_input_unprepared", "Memory composition bytes were not prepared", 1);
+        try {
+            return registerMemoryCompositionFromStage(context, { ...scope(), requestKey: requiredOption(parsed, "request-key"), bytes: prepared.memoryOperationBytes });
+        }
+        catch (error) {
+            if (error instanceof AppError && (error.code === "memory_stage_result_invalid"
+                || error.code === "memory_preflight_handler_invalid" && ["unselected_preflight_source", "proposed_source_sha256_mismatch"].includes(String(error.details.reason))) && error.details.phase === "prepare"
+                && error.details.effect === "no_effect" && error.details.recoverable === true) {
+                Object.assign(error.details, compositionProposalRetry(context, parsed));
+            }
+            throw error;
+        }
+    }
+    if (command === "upgrade" && subcommand === "publish")
+        return publishMemoryUpgradeFromStage(context, scope());
+    if (command === "distill" && subcommand === "inputs") {
+        const inputs = readDistillUserInputs(context, scope());
+        return { ...inputs, user_inputs_sha256: hybridDigest(inputs) };
+    }
+    if (command === "fix" && subcommand === "context") {
+        const intake = readMemoryFixSourceIntake(context, scope()), users = readMemoryFixUserInputs(context, scope());
+        return { ...intake, user_inputs: users, user_inputs_sha256: hybridDigest(users) };
+    }
+    if (command === "fix" && subcommand === "scope") {
+        const proposal = prepared.memoryFixProposal;
+        if (!proposal || Object.keys(proposal).sort().join() !== "routing,write_scope")
+            throw new AppError("usage", "Repair scope proposal requires routing and write_scope", 2, { effect: "no_effect" });
+        return prepareMemoryFixScopeEvidence(context, { ...scope(), routing: proposal.routing, writeScope: proposal.write_scope }).snapshot();
+    }
+    if (command === "fix" && subcommand === "publish") {
+        if (!prepared.memoryFixProposal)
+            throw new AppError("cli_input_unprepared", "Repair proposal was not prepared", 1);
+        return prepareMemoryFixPublication(context, { ...scope(), proposal: prepared.memoryFixProposal }).apply();
+    }
+    if (command === "fix" && subcommand === "integrate")
+        return integrateMemoryFixFinish(context, { ...scope(), ...(prepared.memoryFixProposal ? { agreement: prepared.memoryFixProposal } : {}) });
+    if (command === "distill" && subcommand === "publish") {
+        if (!prepared.memoryOperationBytes)
+            throw new AppError("cli_input_unprepared", "Distillation proposal bytes were not prepared", 1);
+        return publishDistillFromStage(context, { ...scope(), bytes: prepared.memoryOperationBytes });
+    }
+    if (command === "verify" && subcommand === "checks")
+        return runMemoryVerificationChecks(context, scope());
+    if (command === "review" && subcommand === "register")
+        return registerMemoryReviewFromStage(context, scope());
+    if (command === "review" && subcommand === "collect") {
+        const wave = collectMemoryInitialReviewFromStage(context, scope());
+        const selected = scope(), bundle = readFlowRunExecutionBundle(context, selected);
+        if (!bundle)
+            throw new AppError("memory_review_handler_invalid", "Registered Memory bundle required", 2);
+        const project = requireProjectByRoot(context, resolveProjectRoot(selected.projectRoot));
+        const retained = PreparedRetainedMemoryReviewResults.prepare(context, PreparedRetainedMemoryReviewAuthority.prepare(context, { projectId: project.id, runId: selected.runId }, bundle));
+        return { references: wave.references(), projection: wave.resultProjection(),
+            correction_plan_binding: { schema_id: "dd-flow/memory-review-correction-plan@1", run_id: selected.runId, wave: 1, review_sha256: retained.sha256 } };
+    }
+    if (command === "finish" && subcommand === "evidence")
+        return registerMemoryFinishEvidenceFromStage(context, scope());
+    if (command === "finish" && subcommand === "integrate")
+        return integrateMemoryFinishFromStage(context, scope());
+    if (command === "corrections" || command === "review" && ["selective-register", "selective-collect"].includes(subcommand)) {
+        const wave = requiredOption(parsed, "wave");
+        if (wave !== "1" && wave !== "2")
+            throw new AppError("usage", "Memory corrections support only waves 1 and 2", 2);
+        if (command === "corrections" && subcommand === "register") {
+            if (!prepared.memoryOperationBytes)
+                throw new AppError("cli_input_unprepared", "Memory correction plan bytes were not prepared", 1);
+            const register = wave === "1" ? registerMemoryCorrectionsFromStage : registerMemorySecondCorrectionsFromStage;
+            return register(context, { ...scope(), bytes: prepared.memoryOperationBytes });
+        }
+        if (command === "corrections" && subcommand === "checks")
+            return (wave === "1" ? runMemoryCorrectionChecksFromStage : runMemorySecondCorrectionChecksFromStage)(context, scope());
+        if (command === "review" && subcommand === "selective-register")
+            return (wave === "1" ? registerCorrectedMemoryReviewFromStage : registerSecondCorrectedMemoryReviewFromStage)(context, scope());
+        if (command === "review" && subcommand === "selective-collect") {
+            const accepted = (wave === "1" ? collectCorrectedMemoryReviewFromStage : collectSecondCorrectedMemoryReviewFromStage)(context, scope());
+            return { wave: Number(wave), references: accepted.references(), projection: accepted.resultProjection(),
+                ...(wave === "1" ? { correction_plan_binding: { schema_id: "dd-flow/memory-review-correction-plan@1", run_id: scope().runId, wave: 2, review_sha256: accepted.sha256 } } : {}) };
+        }
+    }
     throw new AppError("usage", `Unknown memory command: ${["memory", command, subcommand].filter(Boolean).join(" ")}`, 2);
 }
 function completedCommandExitCode(payload) {
@@ -1350,7 +2830,7 @@ function completedCommandExitCode(payload) {
     const exitCode = payload.exit_code;
     return typeof exitCode === "number" && Number.isInteger(exitCode) ? exitCode : 0;
 }
-function dispatchCleanup(context, command, parsed) {
+function dispatchCleanup(context, command, parsed, prepared) {
     if (command === "scan") {
         return cleanupScan(context, { projectRoot: requiredOption(parsed, "project-root") });
     }
@@ -1358,6 +2838,7 @@ function dispatchCleanup(context, command, parsed) {
         return cleanupApply(context, {
             projectRoot: requiredOption(parsed, "project-root"),
             planFile: requiredOption(parsed, "plan-file"),
+            prepared,
             reason: requiredOption(parsed, "reason"),
             force: hasOption(parsed, "force")
         });
@@ -1378,12 +2859,14 @@ function dispatchProjectConfig(context, parsed) {
     }
     throw new AppError("usage", `Unknown project config action: ${action}`, 2);
 }
-function dispatchSession(context, command, parsed) {
+function dispatchSession(context, command, parsed, preparedPayload) {
     if (command === "register") {
         return registerFlowSession(context, {
+            ...(preparedPayload ? { preparedPayload } : {}),
             payloadBase64: optionalOption(parsed, "payload-base64"),
             payloadJson: optionalOption(parsed, "payload-json"),
             payloadFile: optionalOption(parsed, "payload-file"),
+            hookEventId: optionalOption(parsed, "hook-event-id"),
             sessionId: optionalOption(parsed, "session-id")
         });
     }
@@ -1416,7 +2899,47 @@ function dispatchSession(context, command, parsed) {
     }
     throw new AppError("usage", `Unknown session command: ${command ?? "<empty>"}`, 2);
 }
-function dispatchRun(context, command, parsed) {
+function snapshotCreateInput(parsed) {
+    const recoveryId = optionalOption(parsed, "recovery-id"), stageEntry = optionalOption(parsed, "stage-entry");
+    return { projectRoot: requiredOption(parsed, "project-root"), runId: requiredPosition(parsed, 1, "run-id"), output: requiredOption(parsed, "output"), candidate: parsed.options.has("candidate"), incomplete: parsed.options.has("incomplete"), ...(recoveryId !== undefined ? { recoveryId } : {}), ...(stageEntry !== undefined ? { stageEntry } : {}) };
+}
+function snapshotRestoreInput(parsed) {
+    return { snapshot: requiredOption(parsed, "snapshot"), projectRoot: requiredOption(parsed, "project-root"), executionRoutingFile: optionalOption(parsed, "execution-routing-file"), operationalDecisionFile: optionalOption(parsed, "operational-decision-file"), ...(optionalOption(parsed, "recovery-id") ? { recoveryId: requiredOption(parsed, "recovery-id") } : {}) };
+}
+function runStartInput(parsed) {
+    const protocolOverrides = readOptionalJsonFile(optionalOption(parsed, "protocol-override-file"));
+    return { projectRoot: requiredOption(parsed, "project-root"), workspaceRoot: optionalOption(parsed, "workspace-root"), flowKind: requiredOption(parsed, "flow-kind"), subjectType: requiredOption(parsed, "subject-type"), subjectId: requiredOption(parsed, "subject-id"), slug: requiredOption(parsed, "slug"), nextAction: optionalOption(parsed, "next-action"), preset: optionalOption(parsed, "preset"), taskProfile: readOptionalJsonFile(optionalOption(parsed, "task-profile-file")), executionRoutingFile: optionalOption(parsed, "execution-routing-file"), ...(protocolOverrides !== undefined ? { protocolOverrides } : {}), runOverrides: parseFlowFlagOverrides(allOptions(parsed, "flag")) };
+}
+function runForkInput(parsed) {
+    return { snapshot: requiredOption(parsed, "from"), output: requiredOption(parsed, "output"), engineVersion: requiredOption(parsed, "engine-version"), requestId: requiredOption(parsed, "request-id"), ...(optionalOption(parsed, "integrity-checksum") ? { integrityChecksum: optionalOption(parsed, "integrity-checksum") } : {}), ...(optionalOption(parsed, "operational-decision-file") ? { operationalDecisionFile: optionalOption(parsed, "operational-decision-file") } : {}) };
+}
+function recoveryCaptureInput(parsed) {
+    return { projectRoot: requiredOption(parsed, "project-root"), runId: requiredPosition(parsed, 1, "run-id"), recoveryId: requiredOption(parsed, "recovery-id"), capturePath: requiredOption(parsed, "capture-path") };
+}
+function recoveryResumeInput(parsed) {
+    return { projectRoot: requiredOption(parsed, "project-root"), runId: requiredPosition(parsed, 1, "run-id"), recoveryId: requiredOption(parsed, "recovery-id"), daemonId: requiredOption(parsed, "daemon-id"), harness: requiredOption(parsed, "harness"), nativeSessionId: requiredOption(parsed, "native-session-id") };
+}
+function dispatchRun(context, command, parsed, prepared = {}) {
+    if (command === "reconcile")
+        return reconcileFlowRunHealth(context, { runId: parsed.positional[0], projectRoot: optionalOption(parsed, "project-root"), apply: hasOption(parsed, "apply"), noProgressMs: optionalNumber(parsed, "no-progress-ms") });
+    if (command === "recovery") {
+        const action = requiredPosition(parsed, 0, "recovery action");
+        const projectRoot = requiredOption(parsed, "project-root");
+        const runId = requiredPosition(parsed, 1, "run-id");
+        if (action === "inspect")
+            return inspectRunRecovery(context, { projectRoot, runId });
+        if (action === "begin")
+            return beginRunRecovery(context, { projectRoot, runId, interruption: requiredOption(parsed, "interruption-json") }, prepared.recoveryPayload);
+        if (action === "seal")
+            return sealRunRecovery(context, { projectRoot, runId, recoveryId: requiredOption(parsed, "recovery-id"), settlement: requiredOption(parsed, "settlement-json") }, prepared.recoveryPayload);
+        if (action === "capture")
+            return recordRecoveryCapture(context, recoveryCaptureInput(parsed), prepared.recoveryCapture);
+        if (action === "resume")
+            return resumeRunRecovery(context, recoveryResumeInput(parsed), prepared.recoveryResume);
+        if (action === "accept")
+            return acceptRunRecovery(context, { projectRoot, runId, recoveryId: requiredOption(parsed, "recovery-id"), ...(optionalOption(parsed, "hook-event-id") ? { hookEventId: optionalOption(parsed, "hook-event-id") } : {}) });
+        throw new AppError("usage", "Use: dd-flow run recovery inspect|begin|seal|capture|resume|accept", 2);
+    }
     if (command === "snapshot") {
         const action = requiredPosition(parsed, 0, "snapshot action");
         if (action === "bootstrap") {
@@ -1424,59 +2947,31 @@ function dispatchRun(context, command, parsed) {
             if (bootstrapAction === "create")
                 return createEvalBootstrapSnapshot(context, {
                     projectRoot: requiredOption(parsed, "project-root"),
-                    output: requiredOption(parsed, "output")
+                    output: requiredOption(parsed, "output"),
+                    flow: optionalOption(parsed, "flow")
                 });
             if (bootstrapAction === "restore")
-                return restoreEvalBootstrapSnapshot(context, {
-                    snapshot: requiredOption(parsed, "snapshot"),
-                    projectRoot: requiredOption(parsed, "project-root")
-                });
+                return restoreEvalBootstrapSnapshot(context, snapshotRestoreInput(parsed), prepared.bootstrapRestore);
             throw new AppError("usage", "Use: dd-flow run snapshot bootstrap create|restore", 2);
         }
         if (action === "create") {
-            const candidate = parsed.options.has("candidate");
-            const stageEntry = optionalOption(parsed, "stage-entry");
-            if (candidate && stageEntry !== undefined)
-                throw new AppError("usage", "Use either --candidate or --stage-entry, not both", 2);
-            if (!candidate && stageEntry === undefined)
-                throw new AppError("usage", "Snapshot create requires --candidate or --stage-entry", 2);
-            const input = {
-                projectRoot: requiredOption(parsed, "project-root"),
-                runId: requiredPosition(parsed, 1, "run-id"),
-                output: requiredOption(parsed, "output")
-            };
-            return candidate
-                ? createEvalRunSnapshot(context, { ...input, candidate: true })
-                : createEvalRunSnapshot(context, { ...input, stageEntry: stageEntry });
+            return createEvalRunSnapshot(context, snapshotCreateInput(parsed));
         }
         if (action === "restore")
-            return restoreEvalRunSnapshot(context, {
-                snapshot: requiredOption(parsed, "snapshot"),
-                projectRoot: requiredOption(parsed, "project-root")
-            });
+            return restoreEvalRunSnapshot(context, snapshotRestoreInput(parsed), prepared.snapshotRestore);
         throw new AppError("usage", "Use: dd-flow run snapshot bootstrap create|restore | dd-flow run snapshot create <RUN> (--stage-entry <stage>|--candidate) --project-root <path> --output <directory> | dd-flow run snapshot restore --snapshot <directory> --project-root <path>", 2);
     }
+    if (command === "fork") {
+        return forkRunFromSnapshot(context, runForkInput(parsed), prepared.runFork);
+    }
     if (command === "prepare-vnext-specify") {
-        return prepareVnextSpecifyRun(context, { projectRoot: requiredOption(parsed, "project-root"), slug: requiredOption(parsed, "slug") });
+        return prepareVnextSpecifyRun(context, { projectRoot: requiredOption(parsed, "project-root"), slug: requiredOption(parsed, "slug"), executionRoutingFile: optionalOption(parsed, "execution-routing-file") });
     }
     if (command === "start") {
         if (optionalOption(parsed, "flow-kind") === "mb-upgrade") {
             assertUpgradeRunStorageReady(context, requiredOption(parsed, "project-root"));
         }
-        const protocolOverrides = readOptionalJsonFile(optionalOption(parsed, "protocol-override-file"));
-        return startFlowRun(context, {
-            projectRoot: requiredOption(parsed, "project-root"),
-            workspaceRoot: optionalOption(parsed, "workspace-root"),
-            flowKind: requiredOption(parsed, "flow-kind"),
-            subjectType: requiredOption(parsed, "subject-type"),
-            subjectId: requiredOption(parsed, "subject-id"),
-            slug: requiredOption(parsed, "slug"),
-            nextAction: optionalOption(parsed, "next-action"),
-            preset: optionalOption(parsed, "preset"),
-            taskProfile: readOptionalJsonFile(optionalOption(parsed, "task-profile-file")),
-            ...(protocolOverrides ? { protocolOverrides } : {}),
-            runOverrides: parseFlowFlagOverrides(allOptions(parsed, "flag"))
-        });
+        return startFlowRun(context, prepared.runStart?.input ?? runStartInput(parsed), prepared.runStart?.value);
     }
     if (command === "status") {
         return getFlowRunStatus(context, {
@@ -1546,88 +3041,84 @@ function dispatchRun(context, command, parsed) {
         throw new AppError("usage", `Unknown run flags command: ${action}`, 2);
     }
     if (command === "attach-stage") {
-        return attachFlowRunStage(context, {
-            projectRoot: requiredOption(parsed, "project-root"),
-            runId: requiredPosition(parsed, 0, "run-id"),
-            stage: requiredOption(parsed, "stage"),
-            dir: requiredOption(parsed, "dir"),
-            status: requiredOption(parsed, "status"),
-            dataSchemaId: optionalOption(parsed, "data-schema-id")
-        });
+        return attachFlowRunStage(context, stageAttachmentInput(parsed));
     }
     if (command === "complete-stage") {
-        const stageReport = optionalOption(parsed, "stage-report") ?? optionalOption(parsed, "dashboard");
-        return completeFlowRunStage(context, {
-            projectRoot: requiredOption(parsed, "project-root"),
-            runId: requiredPosition(parsed, 0, "run-id"),
-            stage: requiredOption(parsed, "stage"),
-            status: requiredOption(parsed, "status"),
-            stageReport,
-            data: optionalOption(parsed, "data"),
-            dataSchemaId: optionalOption(parsed, "data-schema-id"),
-            report: optionalOption(parsed, "report"),
-            aliases: allOptions(parsed, "alias")
-        });
+        const input = stageCompletionInput(parsed);
+        return completeFlowRunStage(context, input, prepareRawFlowRunStageCompletion(context, input));
     }
     if (command === "complete") {
         throw new AppError("usage", "run complete is retired; only an operator may use run override", 2);
     }
     if (command === "override") {
-        const status = requiredOption(parsed, "status");
-        if (!['cancelled', 'failed'].includes(status)) {
-            throw new AppError("usage", "run override status must be cancelled or failed", 2, { status });
-        }
-        return completeFlowRun(context, {
-            projectRoot: requiredOption(parsed, "project-root"),
-            runId: requiredPosition(parsed, 0, "run-id"),
-            status,
-            verdict: optionalOption(parsed, "verdict"),
-            nextAction: optionalOption(parsed, "next-action"),
-            manualOverrideReason: requiredOption(parsed, "reason")
-        });
+        return completeFlowRun(context, runOverrideInput(parsed));
     }
     throw new AppError("usage", `Unknown run command: ${command ?? "<empty>"}`, 2);
 }
-async function dispatchRuntime(context, command, parsed, progress) {
+function stageAttachmentInput(parsed) {
+    return { projectRoot: requiredOption(parsed, "project-root"), runId: requiredPosition(parsed, 0, "run-id"), stage: requiredOption(parsed, "stage"), dir: requiredOption(parsed, "dir"), status: requiredOption(parsed, "status"), dataSchemaId: optionalOption(parsed, "data-schema-id") };
+}
+function runOverrideInput(parsed) {
+    return { projectRoot: requiredOption(parsed, "project-root"), runId: requiredPosition(parsed, 0, "run-id"), status: requiredOption(parsed, "status"), verdict: optionalOption(parsed, "verdict"), nextAction: optionalOption(parsed, "next-action"), manualOverrideReason: requiredOption(parsed, "reason") };
+}
+function stageCompletionInput(parsed) {
+    return { projectRoot: requiredOption(parsed, "project-root"), runId: requiredPosition(parsed, 0, "run-id"), stage: requiredOption(parsed, "stage"), status: requiredOption(parsed, "status"), stageReport: optionalOption(parsed, "stage-report") ?? optionalOption(parsed, "dashboard"), data: optionalOption(parsed, "data"), dataSchemaId: optionalOption(parsed, "data-schema-id"), report: optionalOption(parsed, "report"), aliases: allOptions(parsed, "alias") };
+}
+function runtimeServiceInput(parsed) {
+    return { projectRoot: requiredOption(parsed, "project-root"), runId: requiredOption(parsed, "run"), command: requiredOption(parsed, "command"), ports: requiredOption(parsed, "ports").split(","), readyPort: requiredOption(parsed, "ready-port"), readyPath: optionalOption(parsed, "ready-path") ?? "/", timeoutMs: optionalPositiveNumber(parsed, "ready-timeout-ms", true) ?? 30_000 };
+}
+function runtimeScopeResumeInput(parsed) {
+    return { scopeId: requiredOption(parsed, "scope-id"), requestId: requiredOption(parsed, "request-id"), generation: Number(requiredOption(parsed, "generation")), captureKey: requiredOption(parsed, "capture-key") };
+}
+async function dispatchRuntime(context, command, parsed, progress, prepared = {}) {
+    if (command === "scope") {
+        if (parsed.positional.length === 1 && parsed.positional[0] === "reconcile") {
+            if ([...parsed.options.keys()].some(key => !["scope-id", "request-id", "generation"].includes(key)) || [...parsed.options.values()].some(values => values.length !== 1))
+                throw new AppError("usage", "Use runtime scope reconcile --scope-id ID --generation N --request-id ID", 2);
+            return { ok: true, ...await reconcileRuntimeScopeControl(context, requiredOption(parsed, "scope-id"), Number(requiredOption(parsed, "generation")), requiredOption(parsed, "request-id")) };
+        }
+        if (parsed.positional.length === 1 && parsed.positional[0] === "resume") {
+            if ([...parsed.options.keys()].some(key => !["scope-id", "request-id", "generation", "capture-key"].includes(key)) || [...parsed.options.values()].some(values => values.length !== 1))
+                throw new AppError("usage", "Use runtime scope resume --scope-id ID --request-id ID --generation N --capture-key SHA256", 2);
+            return { ok: true, ...await launchRuntimeScopeResume(context, runtimeScopeResumeInput(parsed)) };
+        }
+        if (parsed.positional.length === 1 && parsed.positional[0] === "control") {
+            if ([...parsed.options.keys()].some(key => !["scope-id", "request-id", "mode", "manifest-json"].includes(key)) || [...parsed.options.values()].some(values => values.length !== 1))
+                throw new AppError("usage", "Use runtime scope control --scope-id ID --request-id ID --mode pause|stop [--manifest-json JSON]", 2);
+            const mode = requiredOption(parsed, "mode");
+            if (mode !== "pause" && mode !== "stop")
+                throw new AppError("usage", "Scope control mode must be pause or stop", 2);
+            return { ok: true, ...await launchRuntimeScopeControl(context, requiredOption(parsed, "scope-id"), requiredOption(parsed, "request-id"), mode, undefined, undefined, undefined, prepared.runtimeManifest) };
+        }
+        if (parsed.positional.length === 1 && parsed.positional[0] === "serve") {
+            if ([...parsed.options.keys()].some(key => !["scope-id", "generation"].includes(key)) || [...parsed.options.values()].some(values => values.length !== 1))
+                throw new AppError("usage", "Invalid internal scope worker arguments", 2);
+            return { ok: true, ...await serveRuntimeScopeControl(context, requiredOption(parsed, "scope-id"), Number(requiredOption(parsed, "generation"))) };
+        }
+        if (parsed.positional.length === 1 && parsed.positional[0] === "stop") {
+            if ([...parsed.options.keys()].some(key => !["scope-id", "request-id"].includes(key)) || [...parsed.options.values()].some(values => values.length !== 1))
+                throw new AppError("usage", "Usage: dd-flow runtime scope stop --scope-id EVAL_ID --request-id ID", 2);
+            return { ok: true, ...await stopRuntimeScope(context, requiredOption(parsed, "scope-id"), requiredOption(parsed, "request-id")) };
+        }
+        if (parsed.positional.length === 1 && parsed.positional[0] === "status") {
+            if ([...parsed.options.keys()].some(key => !["scope-id", "scope-ids-json"].includes(key)) || parsed.options.size !== 1 || [...parsed.options.values()].some(values => values.length !== 1))
+                throw new AppError("usage", "Use exactly one of --scope-id or --scope-ids-json", 2);
+            const ids = prepareRuntimeScopeStatus(optionalOption(parsed, "scope-id"), optionalOption(parsed, "scope-ids-json"));
+            if (parsed.options.has("scope-ids-json")) {
+                return { ok: true, scopes: ids.map(id => runtimeBudgetStatus(context, id)) };
+            }
+            return { ok: true, ...runtimeBudgetStatus(context, requiredOption(parsed, "scope-id")) };
+        }
+        if (parsed.positional.length !== 1 || parsed.positional[0] !== "fence" || [...parsed.options.keys()].some(key => !["scope-id", "request-id"].includes(key)) || [...parsed.options.values()].some(values => values.length !== 1))
+            throw new AppError("usage", "Usage: dd-flow runtime scope fence --scope-id EVAL_ID --request-id ID", 2);
+        return { ok: true, ...fenceRuntimeBudget(context, requiredOption(parsed, "scope-id"), requiredOption(parsed, "request-id")) };
+    }
     if (command !== "process")
-        throw new AppError("usage", "Usage: dd-flow runtime process <start|stop|register|confirm|heartbeat|finish|status|reconcile>", 2);
+        throw new AppError("usage", "Usage: dd-flow runtime <scope|process>; see dd-flow runtime scope --help", 2);
     const action = requiredPosition(parsed, 0, "runtime process action");
     if (action === "start")
-        return await startRuntimeService(context, { projectRoot: requiredOption(parsed, "project-root"), runId: requiredOption(parsed, "run"), command: requiredOption(parsed, "command"), ports: requiredOption(parsed, "ports").split(","), readyPort: requiredOption(parsed, "ready-port"), readyPath: optionalOption(parsed, "ready-path") ?? "/", timeoutMs: optionalPositiveNumber(parsed, "ready-timeout-ms", true) ?? 30_000, progress });
-    if (action === "stop")
-        return { ok: true, process: await stopManagedProcess(context, { id: requiredOption(parsed, "id"), leaseToken: requiredOption(parsed, "lease-token"), ...(optionalPositiveNumber(parsed, "grace-ms", true) ? { graceMs: optionalPositiveNumber(parsed, "grace-ms", true) } : {}) }) };
-    if (action === "register") {
-        const leaseMs = optionalPositiveNumber(parsed, "lease-ms", true);
-        const process = registerManagedProcess(context, {
-            kind: requiredOption(parsed, "kind"), ownerId: requiredOption(parsed, "owner"),
-            ownerPid: optionalPositiveNumber(parsed, "owner-pid", true),
-            projectId: optionalOption(parsed, "project-id") ?? null, runId: optionalOption(parsed, "run") ?? null,
-            workId: optionalOption(parsed, "work") ?? null, checkId: optionalOption(parsed, "check") ?? null,
-            operationId: optionalOption(parsed, "operation") ?? null, stdoutPath: optionalOption(parsed, "stdout") ?? null,
-            stderrPath: optionalOption(parsed, "stderr") ?? null, ...(leaseMs ? { leaseMs } : {})
-        });
-        return { ok: true, process };
-    }
-    if (action === "confirm") {
-        const leaseMs = optionalPositiveNumber(parsed, "lease-ms", true);
-        const processGroupId = optionalPositiveNumber(parsed, "process-group-id", true);
-        return { ok: true, process: confirmManagedProcess(context, { id: requiredOption(parsed, "id"), leaseToken: requiredOption(parsed, "lease-token"), ownerPid: optionalPositiveNumber(parsed, "owner-pid", true), pid: optionalPositiveNumber(parsed, "pid", true) ?? 0, ...(processGroupId ? { processGroupId } : {}), ...(leaseMs ? { leaseMs } : {}) }) };
-    }
-    if (action === "heartbeat") {
-        const leaseMs = optionalPositiveNumber(parsed, "lease-ms", true);
-        return { ok: heartbeatManagedProcess(context, { id: requiredOption(parsed, "id"), leaseToken: requiredOption(parsed, "lease-token"), ...(leaseMs ? { leaseMs } : {}) }) };
-    }
-    if (action === "finish") {
-        const state = requiredOption(parsed, "state");
-        if (state !== "stopped" && state !== "failed")
-            throw new AppError("validation", "--state must be stopped or failed", 2);
-        return { ok: finishManagedProcess(context, { id: requiredOption(parsed, "id"), leaseToken: requiredOption(parsed, "lease-token"), state: state, reason: optionalOption(parsed, "reason") ?? null }) };
-    }
-    if (action === "status")
-        return { ok: true, processes: managedProcessStatus(context) };
-    if (action === "reconcile")
-        return { ok: true, processes: await reconcileExpiredManagedProcesses(context, requiredOption(parsed, "owner"), optionalPositiveNumber(parsed, "grace-ms", true)) };
-    throw new AppError("usage", "Usage: dd-flow runtime process <start|stop|register|confirm|heartbeat|finish|status|reconcile>", 2);
+        return await startRuntimeService(context, { ...runtimeServiceInput(parsed), progress });
+    return await dispatchRuntimeProcess(context, action, parsed, prepared);
 }
 function dispatchStat(context, command, parsed) {
     if (command === "usage") {
@@ -1661,7 +3152,7 @@ function dispatchCmux(context, parsed) {
     }
     throw new AppError("usage", `Unknown integration cmux action: ${action}`, 2);
 }
-function dispatchDashboard(context, command, parsed) {
+async function dispatchDashboard(context, command, parsed) {
     const action = dashboardAction(command);
     if (command === "data") {
         const target = resolveDashboardTarget(context, {
@@ -1696,7 +3187,7 @@ function dispatchDashboard(context, command, parsed) {
             projectRoot: optionalOption(parsed, "project-root"),
             protocol: optionalOption(parsed, "protocol")
         });
-        return withDashboardGuidance(action, target, openDashboardForResolvedTarget(context, target, parsed));
+        return withDashboardGuidance(action, target, await openDashboardForResolvedTarget(context, target, parsed));
     }
     if (command === "refresh") {
         const open = optionalOption(parsed, "open");
@@ -1710,7 +3201,7 @@ function dispatchDashboard(context, command, parsed) {
             protocol: optionalOption(parsed, "protocol"),
             all: hasOption(parsed, "all")
         });
-        return withDashboardGuidance(action, target, refreshDashboardForResolvedTarget(context, target, parsed, open));
+        return withDashboardGuidance(action, target, await refreshDashboardForResolvedTarget(context, target, parsed, open));
     }
     if (command === "refresh-global") {
         const target = resolveDashboardTarget(context, { action: "refresh", global: true });
@@ -1814,7 +3305,9 @@ function dispatchSchema(context, command, parsed) {
         // searching project directories: run_id is a structural field in the
         // submitted artifact and the database owns its materialized run_root.
         const explicitRunId = optionalOption(parsed, "run");
-        const declaredRunId = explicitRunId ?? readRunId(file);
+        const data = prepareJsonFile(file, "schema input").value;
+        const declared = data && typeof data === "object" && "run_id" in data ? data.run_id : undefined;
+        const declaredRunId = explicitRunId ?? (typeof declared === "string" && declared.trim() ? declared : undefined);
         const fileRunRoot = path.basename(file) === "run.json" ? path.dirname(path.resolve(file)) : undefined;
         const bound = projectRoot
             ? context.db.get("SELECT r.id, r.run_root FROM runs r JOIN projects p ON p.id = r.project_id WHERE p.root = ? AND (r.id = ? OR r.run_root = ?) LIMIT 1", [fs.realpathSync(projectRoot), declaredRunId ?? "", fileRunRoot ?? ""])
@@ -1822,6 +3315,7 @@ function dispatchSchema(context, command, parsed) {
         return validateSchema({
             schemaName: requiredOption(parsed, "schema"),
             file,
+            data,
             ...(schemaDir ? { schemaDir } : {}),
             ...(projectRoot ? { projectRoot } : {}),
             ...(declaredRunId || bound?.id ? { runId: declaredRunId ?? bound.id } : {}),
@@ -1831,14 +3325,11 @@ function dispatchSchema(context, command, parsed) {
     }
     throw new AppError("usage", `Unknown schema command: ${command ?? "<empty>"}`, 2);
 }
-function readRunId(file) {
-    try {
-        const value = JSON.parse(fs.readFileSync(file, "utf8"));
-        return typeof value.run_id === "string" && value.run_id.trim() ? value.run_id : undefined;
-    }
-    catch {
-        return undefined;
-    }
+function laneWorkspaceInput(parsed) {
+    return { projectRoot: requiredOption(parsed, "project-root"), lane: requiredOption(parsed, "lane"), workspacePath: requiredOption(parsed, "path"), branch: optionalOption(parsed, "branch") };
+}
+function laneWaiterCancelInput(parsed) {
+    return { projectRoot: requiredOption(parsed, "project-root"), lane: requiredOption(parsed, "lane"), workerId: requiredOption(parsed, "worker-id"), reason: requiredOption(parsed, "reason") };
 }
 async function dispatchLane(context, command, parsed) {
     if (command === "status") {
@@ -1850,24 +3341,14 @@ async function dispatchLane(context, command, parsed) {
     if (command === "waiter") {
         const action = requiredPosition(parsed, 0, "lane waiter action");
         if (action === "cancel") {
-            return cancelLaneWaiter(context, {
-                projectRoot: requiredOption(parsed, "project-root"),
-                lane: requiredOption(parsed, "lane"),
-                workerId: requiredOption(parsed, "worker-id"),
-                reason: requiredOption(parsed, "reason")
-            });
+            return cancelLaneWaiter(context, laneWaiterCancelInput(parsed));
         }
         throw new AppError("usage", `Unknown lane waiter action: ${action}`, 2);
     }
     if (command === "workspace") {
         const action = requiredPosition(parsed, 0, "lane workspace action");
         if (action === "set") {
-            return setLaneWorkspace(context, {
-                projectRoot: requiredOption(parsed, "project-root"),
-                lane: requiredOption(parsed, "lane"),
-                workspacePath: requiredOption(parsed, "path"),
-                branch: optionalOption(parsed, "branch")
-            });
+            return setLaneWorkspace(context, laneWorkspaceInput(parsed));
         }
         if (action === "check") {
             return checkLaneWorkspace(context, {
@@ -1939,7 +3420,7 @@ async function dispatchLane(context, command, parsed) {
     }
     throw new AppError("usage", `Unknown lane command: ${command ?? "<empty>"}`, 2);
 }
-function dispatchCodexHooks(context, parsed) {
+function dispatchCodexHooks(context, parsed, prepared) {
     const action = requiredPosition(parsed, 0, "codex hooks action");
     if (action === "print") {
         return printCodexHooks(context, {
@@ -1961,7 +3442,7 @@ function dispatchCodexHooks(context, parsed) {
             target: optionalOption(parsed, "target"),
             profile: optionalOption(parsed, "profile"),
             yes: hasOption(parsed, "yes")
-        });
+        }, prepared.codexHooks);
     }
     if (action === "remove") {
         return removeCodexHooks(context, {
@@ -1969,11 +3450,14 @@ function dispatchCodexHooks(context, parsed) {
             target: optionalOption(parsed, "target"),
             profile: optionalOption(parsed, "profile"),
             yes: hasOption(parsed, "yes")
-        });
+        }, prepared.codexHooks);
     }
     throw new AppError("usage", `Unknown codex hooks action: ${action}`, 2);
 }
-function dispatchCodexHome(context, parsed) {
+function codexHomeInput(parsed) {
+    return { projectRoot: requiredOption(parsed, "project-root"), profile: optionalOption(parsed, "profile"), sourceHome: optionalOption(parsed, "source-home"), targetHome: optionalOption(parsed, "target-home") };
+}
+function dispatchCodexHome(context, parsed, prepared) {
     const action = requiredPosition(parsed, 0, "codex home action");
     if (action === "plan") {
         return planCodexHome(context, {
@@ -1984,12 +3468,7 @@ function dispatchCodexHome(context, parsed) {
         });
     }
     if (action === "init") {
-        return initCodexHome(context, {
-            projectRoot: requiredOption(parsed, "project-root"),
-            profile: optionalOption(parsed, "profile"),
-            sourceHome: optionalOption(parsed, "source-home"),
-            targetHome: optionalOption(parsed, "target-home")
-        });
+        return initCodexHome(context, codexHomeInput(parsed), prepared.codexHome);
     }
     if (action === "status") {
         return getCodexHomeStatus(context, {
@@ -2012,23 +3491,6 @@ function dispatchCodexHome(context, parsed) {
     }
     throw new AppError("usage", `Unknown codex home action: ${action}`, 2);
 }
-function dispatchCodexHook(context, parsed, stdin) {
-    const action = requiredPosition(parsed, 0, "codex hook action");
-    if (action === "handle") {
-        const isolatedHome = isolatedDdFlowHomeFromHookStdin(stdin);
-        const hookContext = isolatedHome ? createContext({ ...context.env, DD_FLOW_HOME: isolatedHome }) : context;
-        const result = handleCodexHook(hookContext, {
-            event: requiredOption(parsed, "event"),
-            projectRoot: optionalOption(parsed, "project-root"),
-            stdin
-        });
-        if (result && typeof result === "object" && !Array.isArray(result) && "hookSpecificOutput" in result) {
-            return { hookSpecificOutput: result.hookSpecificOutput };
-        }
-        return {};
-    }
-    throw new AppError("usage", `Unknown codex hook action: ${action}`, 2);
-}
 function dispatchZcodeEvent(context, parsed, stdin) {
     const action = requiredPosition(parsed, 0, "zcode event action");
     if (action === "handle") {
@@ -2039,6 +3501,15 @@ function dispatchZcodeEvent(context, parsed, stdin) {
     }
     throw new AppError("usage", `Unknown zcode event action: ${action}`, 2);
 }
+function dispatchZcodeHook(context, parsed, stdin) {
+    if (requiredPosition(parsed, 0, "zcode hook action") !== "handle")
+        throw new AppError("usage", "Unknown zcode hook action", 2);
+    const result = handleZcodeHook(context, { projectRoot: requiredOption(parsed, "project-root"), stdin });
+    if (result && typeof result === "object" && !Array.isArray(result) && "hookSpecificOutput" in result) {
+        return { hookSpecificOutput: result.hookSpecificOutput };
+    }
+    return {};
+}
 function dispatchGrokEvent(context, parsed, stdin) {
     const action = requiredPosition(parsed, 0, "grok event action");
     if (action === "handle") {
@@ -2062,7 +3533,7 @@ function dispatchAgyEvent(context, parsed, stdin) {
         return handleAgyEvent(context, { projectRoot: requiredOption(parsed, "project-root"), stdin });
     throw new AppError("usage", `Unknown agy event action: ${action}`, 2);
 }
-function dispatchWorktree(context, command, parsed, scopeProjectRoot) {
+function dispatchWorktree(context, command, parsed, scopeProjectRoot, prepared) {
     if (command === "plan") {
         return planWorktree(context, { protocolId: requiredOption(parsed, "protocol-id"), projectRoot: scopeProjectRoot });
     }
@@ -2073,13 +3544,13 @@ function dispatchWorktree(context, command, parsed, scopeProjectRoot) {
             branch: requiredOption(parsed, "branch"),
             base: requiredOption(parsed, "base"),
             path: requiredOption(parsed, "path")
-        });
+        }, prepared.worktreeCreate);
     }
     if (command === "status") {
         return getWorktreeStatus(context, { protocolId: requiredOption(parsed, "protocol-id"), projectRoot: scopeProjectRoot });
     }
     if (command === "bootstrap") {
-        return bootstrapWorktree(context, { protocolId: requiredOption(parsed, "protocol-id"), projectRoot: scopeProjectRoot });
+        return bootstrapWorktree(context, { protocolId: requiredOption(parsed, "protocol-id"), projectRoot: scopeProjectRoot }, prepared.worktreeBootstrap);
     }
     if (command === "close") {
         return closeWorktree(context, {
@@ -2091,52 +3562,50 @@ function dispatchWorktree(context, command, parsed, scopeProjectRoot) {
     throw new AppError("usage", `Unknown worktree command: ${command ?? "<empty>"}`, 2);
 }
 function dispatchPlanItem(context, parsed, projectRoot) {
+    return updatePlanItem(context, planItemInput(parsed, projectRoot));
+}
+function planItemInput(parsed, projectRoot) {
     const action = requiredPosition(parsed, 0, "plan item action");
     const protocolId = requiredPosition(parsed, 1, "protocol-id");
     const itemId = requiredPosition(parsed, 2, "item-id");
     if (action === "start") {
-        return startPlanItem(context, { protocolId, projectRoot, itemId });
+        return { protocolId, projectRoot, itemId, action };
     }
     if (action === "done") {
-        return completePlanItem(context, {
+        return {
+            action,
             protocolId,
             projectRoot,
             itemId,
             summary: requiredOption(parsed, "summary"),
             evidence: parsed.options.get("evidence") ?? []
-        });
+        };
     }
     if (action === "block") {
-        return blockPlanItem(context, {
+        return {
+            action,
             protocolId,
             projectRoot,
             itemId,
             reason: requiredOption(parsed, "reason"),
             userRequired: parseBoolean(requiredOption(parsed, "user-required"), "user-required")
-        });
+        };
     }
     if (action === "skip") {
-        return skipPlanItem(context, {
+        return {
+            action,
             protocolId,
             projectRoot,
             itemId,
             reason: requiredOption(parsed, "reason")
-        });
+        };
     }
     throw new AppError("usage", `Unknown plan item action: ${action}`, 2);
 }
 function readOptionalJsonFile(file) {
     if (!file)
         return undefined;
-    if (!fs.existsSync(file)) {
-        throw new AppError("not_found", `JSON file does not exist: ${file}`, 1);
-    }
-    try {
-        return JSON.parse(fs.readFileSync(file, "utf8"));
-    }
-    catch {
-        throw new AppError("validation", `JSON file is malformed: ${file}`, 2);
-    }
+    return prepareJsonFile(file, "JSON input").value;
 }
 function parseFlowFlagOverrides(values) {
     const result = {};
@@ -2164,29 +3633,17 @@ function parseArgs(args) {
 function requiredPosition(parsed, index, label) {
     const value = parsed.positional[index];
     if (!value) {
-        throw new AppError("usage", `Missing required argument: ${label}`, 2);
+        throw new AppError("usage", `Missing required argument: ${label}`, 2, { parameter: label, reason: "missing_required_argument" });
     }
     return value;
 }
-function optionalOption(parsed, key) {
-    const values = parsed.options.get(key);
-    const value = values?.[values.length - 1];
-    return value === flagValue ? undefined : value;
-}
 function allOptions(parsed, key) {
     return (parsed.options.get(key) ?? []).filter((value) => value !== flagValue);
 }
-function requiredOption(parsed, key) {
-    const value = optionalOption(parsed, key);
-    if (!value) {
-        throw new AppError("usage", `Missing required option: --${key}`, 2);
-    }
-    return value;
-}
 function requiredScopeProjectRoot(root, operation) {
     if (root)
         return root;
-    throw new AppError("usage", `${operation} requires --project-root or a unique protocol context`, 2);
+    throw new AppError("usage", `${operation} requires --project-root or a unique protocol context`, 2, { parameter: "project-root", reason: "missing_required_option" });
 }
 function requiredOptionOrScope(parsed, root, key) {
     return root ?? requiredOption(parsed, key);
@@ -2205,7 +3662,7 @@ function requiredOptionAlias(parsed, keys) {
         if (value)
             return value;
     }
-    throw new AppError("usage", `Missing required option: ${keys.map((key) => `--${key}`).join(" or ")}`, 2);
+    throw new AppError("usage", `Missing required option: ${keys.map((key) => `--${key}`).join(" or ")}`, 2, { parameter: [...keys].sort(), reason: "missing_required_option" });
 }
 function hasOption(parsed, key) {
     return parsed.options.has(key);
@@ -2222,26 +3679,6 @@ function parseBoolean(value, key) {
 function parseOptionalBoolean(value, key) {
     return typeof value === "string" ? parseBoolean(value, key) : undefined;
 }
-function optionalNumber(parsed, key) {
-    const value = optionalOption(parsed, key);
-    if (typeof value === "undefined") {
-        return undefined;
-    }
-    const parsedNumber = Number(value);
-    if (!Number.isFinite(parsedNumber)) {
-        throw new AppError("validation", `--${key} must be a number`, 2);
-    }
-    return parsedNumber;
-}
-function optionalPositiveNumber(parsed, key, integer = false) {
-    const value = optionalNumber(parsed, key);
-    if (typeof value === "undefined")
-        return undefined;
-    if (value <= 0 || (integer && !Number.isInteger(value))) {
-        throw new AppError("validation", `--${key} must be a positive${integer ? " integer" : ""} number`, 2);
-    }
-    return value;
-}
 function requiredWorkerId(parsed) {
     return requiredOption(parsed, "worker-id");
 }
@@ -2255,16 +3692,21 @@ function parseWorktreePolicy(value) {
     }
     throw new AppError("validation", "--worktree must be keep or remove", 2);
 }
-async function readStdin(stream) {
+async function readStdin(stream, maxBytes) {
     if (!stream) {
         return "";
     }
     let data = "";
-    stream.setEncoding("utf8");
+    if (maxBytes !== undefined)
+        return readBoundedUtf8Stream(stream, maxBytes);
+    const hash = createHash("sha256"), decoder = new TextDecoder("utf-8", { ignoreBOM: true });
     for await (const chunk of stream) {
-        data += chunk;
+        const bytes = typeof chunk === "string" ? Buffer.from(chunk) : chunk;
+        hash.update(bytes);
+        data += decoder.decode(bytes, { stream: true });
     }
-    return data;
+    recordConsumedInputDigest(hash.digest("hex"));
+    return data + decoder.decode();
 }
 function refreshDashboardsAfterMutation(context, args, result, resolvedScope) {
     try {
@@ -2275,7 +3717,8 @@ function refreshDashboardsAfterMutation(context, args, result, resolvedScope) {
         const projectRoot = projectRootForMutation(context, args, result, resolvedScope);
         if (!projectRoot)
             return [];
-        autoRefreshDashboards(context, { projectRoot });
+        const runId = result && typeof result === "object" && "run_id" in result && typeof result.run_id === "string" ? result.run_id : undefined;
+        autoRefreshDashboards(context, { projectRoot, ...(runId ? { runId } : {}) });
         return [];
     }
     catch (error) {
@@ -2337,7 +3780,7 @@ function projectRootForMutation(context, args, result, resolvedScope) {
         return projectRootForMergeQueueMutation(context, command, parsed);
     }
     if (family === "merge" && ["one-shot", "apply", "repair", "request"].includes(command ?? "")) {
-        return requiredOption(parsed, "project-root");
+        return resolvedScope ?? requiredOption(parsed, "project-root");
     }
     if (family === "merge-worker" && ["start", "stop"].includes(command ?? "")) {
         return requiredOption(parsed, "project-root");
@@ -2355,7 +3798,7 @@ function projectRootForMutation(context, args, result, resolvedScope) {
         return requiredOption(parsed, "project-root");
     }
     if (family === "stage" && ["start", "pause", "resume", "finish"].includes(command ?? "")) {
-        return requiredOption(parsed, "project-root");
+        return resolvedScope ?? requiredOption(parsed, "project-root");
     }
     if (family === "worktree" && ["create", "bootstrap", "close"].includes(command ?? "")) {
         return protocolProjectRoot(context, requiredOption(parsed, "protocol-id"));
@@ -2369,7 +3812,7 @@ function projectRootForMutation(context, args, result, resolvedScope) {
     if (family === "opencode" && ((command === "event" && requiredPosition(parsed, 0, "opencode event action") === "handle") || command === "usage")) {
         return requiredOption(parsed, "project-root");
     }
-    if (family === "agy" && ((command === "event" && requiredPosition(parsed, 0, "agy event action") === "handle") || command === "usage"))
+    if (["agy", "droid"].includes(family ?? "") && ((command === "event" && requiredPosition(parsed, 0, `${family} event action`) === "handle") || command === "usage"))
         return requiredOption(parsed, "project-root");
     if (family === "codex" && command === "hooks") {
         const action = requiredPosition(parsed, 0, "codex hooks action");
@@ -2406,14 +3849,36 @@ function projectRootForMergeQueueMutation(context, command, parsed) {
 function protocolProjectRoot(context, protocolId) {
     return requireProtocol(context, protocolId).project_root;
 }
+function prepareCliWorkRepair(context, parsed, objective, scopeProjectRoot) {
+    const origins = parsed.options.get("origin-work") ?? [], findings = parsed.options.get("from-finding") ?? [], unresolved = parsed.options.get("from-unresolved") ?? [], receipts = parsed.options.get("from-check") ?? [];
+    if ([findings.length > 0, unresolved.length > 0, receipts.length > 0].filter(Boolean).length !== 1)
+        throw new AppError("usage", "Repair requires exactly one source: --from-check, --from-finding or --from-unresolved", 2);
+    const scope = { projectRoot: requiredScopeProjectRoot(scopeProjectRoot, "work repair add"), runId: requiredOption(parsed, "run"), objective };
+    if (findings.length) {
+        if (origins.length || hasOption(parsed, "verification-file"))
+            throw new AppError("usage", "Finding repair derives its origins and cannot accept --origin-work or --verification-file", 2);
+        return prepareVnextCodeReviewRepair(context, { ...scope, findingIds: findings, checkRefsByFinding: Object.fromEntries(findings.map(finding => [finding, parsed.options.get("check-ref") ?? []])) });
+    }
+    if (!origins.length)
+        throw new AppError("usage", "Repair requires at least one --origin-work", 2);
+    if (hasOption(parsed, "check-ref"))
+        throw new AppError("usage", "--check-ref is only supported with --from-finding", 2);
+    if (receipts.length > 1)
+        throw new AppError("usage", "Create one repair Work per --from-check receipt", 2);
+    if (!unresolved.length && hasOption(parsed, "verification-file"))
+        throw new AppError("usage", "--verification-file is only supported with --from-unresolved", 2);
+    const input = { ...scope, originWorkIds: origins, ...(unresolved.length ? { semanticUnresolved: unresolved, verificationPath: requiredOption(parsed, "verification-file") } : { checkReceiptId: receipts[0] }) };
+    return { input, value: prepareVnextCodeRepair(context, input) };
+}
+function workerPromptInput(parsed) {
+    const workspaceRoot = optionalOption(parsed, "workspace-root"), taskFile = optionalOption(parsed, "task-file");
+    return { projectRoot: requiredOption(parsed, "project-root"), runId: requiredOption(parsed, "run"), stage: requiredOption(parsed, "stage"), profile: requiredOption(parsed, "profile"), ...(taskFile ? { taskFile } : { planItemId: requiredOption(parsed, "plan-item") }), ...(workspaceRoot ? { workspaceRoot } : {}) };
+}
 function runnerIntake(context) {
     const input = context.value.task_input?.[0];
     if (!input?.path)
         throw new AppError("validation", "Runner SPECIFY context requires one ordered task_input file", 2);
-    const file = path.resolve(input.path);
-    if (!fs.existsSync(file) || !fs.statSync(file).isFile())
-        throw new AppError("not_found", "Runner SPECIFY task input is missing", 2, { task_input: file });
-    return fs.readFileSync(file, "utf8");
+    return prepareTextFile(input.path, "Runner SPECIFY task input").text;
 }
 /** Stage services install context before their lifecycle transition.  Keeping
  * this check here makes an incomplete service migration fail closed instead of