@deksden-com/dd-flow-cli 0.9.0-beta.40 → 0.9.0-beta.42

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # @deksden-com/dd-flow-cli
 
+## 0.9.0-beta.42
+
+### Patch Changes
+
+- 3e1f87f: Reuse an already accepted RUN pause or stop when draining its EVAL scope, preserving the exact control identity and options without weakening stop or replaying work.
+
+## 0.9.0-beta.41
+
+### Patch Changes
+
+- c30ae89: Run generated Codex hooks with the explicitly selected CLI, or the isolated runtime shim before global installations. Preserve hook input and fail without a global fallback when the selected CLI is unavailable.
+
 ## 0.9.0-beta.40
 
 ### Patch Changes

package/dist/build-info.json

@@ -1,8 +1,8 @@
 {
   "cli_package": "@deksden-com/dd-flow-cli",
-  "cli_version": "0.9.0-beta.40",
-  "cli_commit": "652524c6f370aa17c75474de5ebb7b3b9bf0b3a2",
-  "built_at": "2026-09-09T17:31:05.981Z",
+  "cli_version": "0.9.0-beta.42",
+  "cli_commit": "fb9736bf2af837404a43027631113232f0134b58",
+  "built_at": "2026-09-09T19:11:00.722Z",
   "built_with_canon": {
     "version": "4.1.0",
     "commit": "ef349bf47cba1c987468e51d73a0dbadbd48dc1f",

package/dist/services/hooks.js

@@ -1178,7 +1178,8 @@ function commandHook(command, statusMessage) {
     return { type: "command", command, timeout: 5, statusMessage };
 }
 function hookCommand(event) {
-    const handler = `PATH="\${HOME}/Library/pnpm:/opt/homebrew/bin:/usr/local/bin:\${PATH}" dd-flow codex hook handle --event ${event} --json`;
+    const args = `codex hook handle --event ${event} --json`;
+    const handler = `if [ -n "\${DD_FLOW_BIN:-}" ]; then "$DD_FLOW_BIN" ${args}; else PATH="\${DD_FLOW_HOME:+\${DD_FLOW_HOME}/bin:}\${PATH}:\${HOME}/Library/pnpm:/opt/homebrew/bin:/usr/local/bin" dd-flow ${args}; fi`;
     return `/bin/bash -c 'log_dir="\${DD_FLOW_HOME:-\${HOME}/.dd-flow}/logs"; mkdir -p "$log_dir"; log="$log_dir/codex-hook.log"; printf "%s event=${event} phase=start pid=%s\\n" "$(date -u +%Y-%m-%dT%H:%M:%SZ)" "$$" >>"$log"; ${handler} 2> >(tee -a "$log" >&2); status=$?; printf "%s event=${event} phase=finish pid=%s exit=%s\\n" "$(date -u +%Y-%m-%dT%H:%M:%SZ)" "$$" "$status" >>"$log"; exit "$status"'`;
 }
 function resolveHookTarget(target) {

package/dist/services/runtime-scope-control.js

@@ -316,7 +316,7 @@ export async function controlRuntimeScopeRuns(context, scopeId, requestId, mode)
             if (!owner || owner.process_id !== record.id || owner.process_lease_token !== record.lease_token || manifest?.resource_home !== resourceHome(context) || manifest.budget?.scope_id !== scopeId || !project?.root)
                 throw new AppError("runtime_scope_owner_unknown", "Scope RUN registration does not match the retained controller", 1);
             const runRequestId = `scope:${crypto.createHash("sha256").update(JSON.stringify([scopeId, control.generation, key])).digest("hex")}`;
-            const input = { projectRoot: project.root, runId: record.run_id, requestId: runRequestId, action: mode };
+            let input = { projectRoot: project.root, runId: record.run_id, requestId: runRequestId, action: mode };
             // Lock order is resource registry then RUN database. No provider or await
             // occurs here; a newer scope request cannot interleave RUN intent creation.
             registry.exec("BEGIN IMMEDIATE");
@@ -326,6 +326,13 @@ export async function controlRuntimeScopeRuns(context, scopeId, requestId, mode)
                     throw new AppError("runtime_scope_control_superseded", "Scope request no longer owns admission", 1);
                 if (!registry.get("SELECT 1 FROM managed_processes WHERE id = ? AND lease_token = ? AND owner_id = ? AND project_id = ? AND run_id = ? AND metadata_json = ?", [record.id, record.lease_token, record.owner_id, record.project_id, record.run_id, record.metadata_json]))
                     throw new AppError("runtime_scope_owner_changed", "RUN owner changed before scope intent dispatch", 1);
+                // A narrower caller may already have fenced this RUN. Reuse its exact
+                // intent; a scope stop still escalates a pause through the RUN arbiter.
+                const active = runControlStatus(target, input).control;
+                if (active?.current && ["requested", "settled"].includes(active.status) && (active.requested_mode === mode || active.requested_mode === "stop")) {
+                    input = { ...input, requestId: active.request_id, action: active.requested_mode,
+                        ...(active.requested_mode === "stop" ? { force: active.request.force ?? false } : { graceMs: active.request.grace_ms ?? 30_000, ...(active.request.escalate ? { escalate: active.request.escalate } : {}) }) };
+                }
                 recordRunControlIntent(target, input);
                 registry.exec("COMMIT");
             }
@@ -335,7 +342,7 @@ export async function controlRuntimeScopeRuns(context, scopeId, requestId, mode)
             }
             seen.add(key);
             const receipt = await requestRunControl(target, { ...input, waitMs: 0 });
-            runs.push({ runtime_home: metadata.dd_flow_home, project_id: record.project_id, run_id: record.run_id, request_id: runRequestId, receipt });
+            runs.push({ runtime_home: metadata.dd_flow_home, project_id: record.project_id, run_id: record.run_id, request_id: input.requestId, receipt });
         }
         catch (error) {
             runs.push({ process_id: record.id, run_id: record.run_id, pending: true, reason: error instanceof AppError ? error.code : "runtime_scope_control_failed", message: String(error) });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@deksden-com/dd-flow-cli",
-  "version": "0.9.0-beta.40",
+  "version": "0.9.0-beta.42",
   "description": "Mechanical runtime CLI for dd-flow workflows.",
   "type": "module",
   "bin": {