@deksden-com/dd-flow-cli 0.9.0-beta.62 → 0.9.0-beta.63

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @deksden-com/dd-flow-cli
 
+## 0.9.0-beta.63
+
+### Patch Changes
+
+- Accept the qualified retained-subagent ZCode bridge and settle a control only
+  when a durable startup rejection proves that it created no native resources.
+
 ## 0.9.0-beta.62
 
 ### Patch Changes

package/dist/build-info.json

@@ -1,8 +1,8 @@
 {
   "cli_package": "@deksden-com/dd-flow-cli",
-  "cli_version": "0.9.0-beta.62",
-  "cli_commit": "a496c8a3b9781cd1808bd4a49fe314f0ef17c52c",
-  "built_at": "2026-09-14T08:57:06.311Z",
+  "cli_version": "0.9.0-beta.63",
+  "cli_commit": "4975ba184bd847fd34db995cd3d9e1feb3db9f9f",
+  "built_at": "2026-09-14T10:36:19.793Z",
   "built_with_canon": {
     "version": "4.1.1",
     "commit": "97f811d33c212ae3497020178b1ed825c7c3ebac",

package/dist/harness-runtime/lib/dd-zcode-daemon.mjs

@@ -154,7 +154,7 @@ export async function startDaemon(options) {
   await removeSocket(paths.socket, paths.dir);
   const versions = await doctor({ bin: config.bin, zcodePath: config.zcodePath });
   if (hasFlowContext && versions.compatible !== true) {
-    throw new DaemonError("zcode_lifecycle_unqualified", "ZCode native event identity is not qualified for managed CLI admission; inspect lifecycle_qualification before starting E2E.", false, { observed_runtime: versions.observed_runtime, lifecycle_qualification: versions.lifecycle_qualification });
+    throw new DaemonError("zcode_lifecycle_unqualified", "ZCode native event identity is not qualified for managed CLI admission; inspect lifecycle_qualification before starting E2E.", false, { startup_resources: "not_created", observed_runtime: versions.observed_runtime, lifecycle_qualification: versions.lifecycle_qualification });
   }
   const resourceProcess = await registerDaemonProcess(config, {
     kind: "zcode-daemon", owner: `zcode:${path.basename(paths.dir)}`, operation: `zcode-daemon:${path.basename(paths.dir)}`,

package/dist/harness-runtime/lib/dd-zcode.mjs

@@ -681,8 +681,9 @@ async function forwardUsage(options, providerSessionId, usage, toolCalls) {
 export function zcodeLifecycleQualification(sha256, bridgeCommit, harnessContract) {
   // Behavioural evidence: dd-eval production-invocations probe, 2026-09-13.
   // Pin both providers of native event identity, not a string in the bundle.
+  // 60af0d3 adds retainedSubagents without changing native event forwarding.
   const qualified = sha256 === "e9f1868c0fdb863537ed910ee3828b9be96b8c2fd805473f63b439e1113266b8"
-    && bridgeCommit === "e0600fe3c46e215695f257e65aa6f674ced998d8" && harnessContract === ZCODE_HARNESS_CONTRACT;
+    && ["e0600fe3c46e215695f257e65aa6f674ced998d8", "60af0d31e13076a313d9770f10aa70f7c94742cf"].includes(bridgeCommit) && harnessContract === ZCODE_HARNESS_CONTRACT;
   return { status: qualified ? "qualified" : "unqualified", mechanism: "cli-invocation@1", sha256,
     capabilities: qualified ? ["root", "concurrent_children", "child_continuation"] : [],
     native_nested_children: false, reason: qualified ? null : "native_event_contract_unqualified" };

package/dist/services/run-control.js

@@ -413,10 +413,29 @@ async function reconcileOwnedSessions(context, input, interrupt, boundary) {
         }
         unresolved.push({ check_id: check.id, status: "pending", reason });
     }
+    const uncreatedDirectories = new Map();
     const sessionNodes = Promise.all([...targets.values()].map(async ({ session, executable, harness }) => {
         const env = { ...context.env, DD_FLOW_HOME: context.ddFlowHome };
         delete env.DD_FLOW_CONTROLLER_TOKEN;
         delete env.DD_FLOW_CONTROL_TOKEN;
+        // An explicit pre-registration rejection proves there is no Session to
+        // cancel. A missing id or an arbitrary startup failure does not.
+        if (!session.id && !session.create_operation_id && !daemonInventories.has(session.state_dir) && !unsafeDaemons.has(canonicalPath(session.state_dir, false)) && !fs.existsSync(path.join(session.state_dir, "daemon.json"))) {
+            const operations = context.db.all("SELECT o.operation_id, o.input_json FROM run_controller_operations o JOIN run_controllers c ON c.controller_id = o.controller_id WHERE c.project_id = ? AND c.run_id = ? AND json_extract(o.input_json, '$.state_dir') = ?", [project.id, input.runId, session.state_dir]);
+            if (operations.length === 1)
+                try {
+                    const operation = operations[0];
+                    const saved = JSON.parse(operation.input_json);
+                    const journal = retainedDaemonOperations(session.state_dir);
+                    const receipt = journal.length === 1 ? journal[0] : null;
+                    const error = receipt?.error;
+                    if (saved.executable === executable && saved.owner === session.owner.owner_id && saved.args?.[0] === "daemon" && saved.args?.[1] === "start" && receipt?.operation_id === operation.operation_id && receipt.operation === "daemon.start" && receipt.predecessor_daemon_id === null && receipt.state === "failed" && error?.details?.startup_resources === "not_created" && !registeredProcesses.some(({ record }) => JSON.parse(record.metadata_json).state_dir === session.state_dir)) {
+                        uncreatedDirectories.set(session.state_dir, JSON.stringify(journal));
+                        return { state_dir: session.state_dir, status: "completed", receipt: { source: "startup_resources_not_created", operation_id: operation.operation_id, error } };
+                    }
+                }
+                catch { /* Incomplete evidence retains the normal unknown outcome. */ }
+        }
         if (!session.id && session.create_operation_id) {
             try {
                 assertCurrent();
@@ -622,7 +641,7 @@ async function reconcileOwnedSessions(context, input, interrupt, boundary) {
         };
         bindings = readBindings();
         for (const target of targets.values())
-            if (!daemonInventories.has(target.session.state_dir))
+            if (!daemonInventories.has(target.session.state_dir) && !uncreatedDirectories.has(target.session.state_dir))
                 unresolved.push({ state_dir: target.session.state_dir, status: "pending", reason: "runtime_inventory_unverified" });
         for (const node of nodes)
             if ("harness" in node && "session_id" in node && typeof node.session_id === "string" && bindings.some(binding => foreign(binding) && underRoot(binding, node.session_id, node.harness ?? null)))
@@ -647,6 +666,9 @@ async function reconcileOwnedSessions(context, input, interrupt, boundary) {
         const processVersion = (items) => JSON.stringify(items.map(({ home, record }) => [home, record.id, record.kind, record.owner_id, record.project_id, record.run_id, record.work_id, record.check_id, record.operation_id, record.pid, record.pid_started_at, record.lease_token, record.state, record.metadata_json]).sort((left, right) => JSON.stringify(left).localeCompare(JSON.stringify(right))));
         verifyInventory = () => {
             assertCurrent();
+            for (const [directory, journal] of uncreatedDirectories)
+                if (fs.existsSync(path.join(directory, "daemon.json")) || JSON.stringify(retainedDaemonOperations(directory)) !== journal)
+                    throw new AppError("owned_inventory_changed", "Rejected startup acquired new runtime evidence", 1);
             const currentProcesses = [...resourceHomes].flatMap(home => managedProcessStatus({ ...context, env: { ...context.env, DD_FLOW_RESOURCE_HOME: home } }).filter(record => record.project_id === project.id && record.run_id === input.runId && [null, context.ddFlowHome].includes(managedProcessRuntimeHome(record, context))).map(record => ({ home, record })));
             if (initialDatabaseVersion !== databaseVersion() || processVersion(registeredProcesses) !== processVersion(currentProcesses) || [...nativeVersions].some(([directory, version]) => version !== nativeInventoryVersion(directory)) || [...importVersions].some(([file, version]) => crypto.createHash("sha256").update(fs.readFileSync(file)).digest("hex") !== version))
                 throw new AppError("owned_inventory_changed", "Owned writers changed after their settlement observation", 1);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@deksden-com/dd-flow-cli",
-  "version": "0.9.0-beta.62",
+  "version": "0.9.0-beta.63",
   "description": "Mechanical runtime CLI for dd-flow workflows.",
   "type": "module",
   "bin": {