@deksden-com/dd-flow-cli 0.9.0-beta.93 → 0.9.0-beta.94

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @deksden-com/dd-flow-cli
 
+## 0.9.0-beta.94
+
+### Patch Changes
+
+- Admit public ZCode lifecycle commands through their native receipt without exposing runtime-owned invocation IDs.
+
 ## 0.9.0-beta.93
 
 ### Patch Changes

package/dist/build-info.json

@@ -1,8 +1,8 @@
 {
   "cli_package": "@deksden-com/dd-flow-cli",
-  "cli_version": "0.9.0-beta.93",
-  "cli_commit": "4af4acb64cbb4a27697a9de92a74ab6848745b17",
-  "built_at": "2026-09-22T05:53:32.684Z",
+  "cli_version": "0.9.0-beta.94",
+  "cli_commit": "852591e0c29473e4bc7bef90aa2f83d66b8792de",
+  "built_at": "2026-09-22T06:20:13.963Z",
   "built_with_canon": {
     "version": "4.1.1",
     "commit": "d1a6081ab15ab92ac917ff5d037121a40c709db1",

package/dist/harness-runtime/DD-ZCODE.md

@@ -33,9 +33,12 @@ The adapter consumes `zcode/session/resolve`, `read`, `subagents`, `usage`,
 operations. Resolution must preserve the session's trusted workspace.
 Residency and retained-tree reads after close must not implicitly resume it.
 Cancellation must target owned sessions and verify resulting tree state.
-Profile facts must come from native readback. Session updates supply tool events;
-the adapter forwards them to `dd-flow zcode event handle`, where trusted
-invocation/lifecycle receipts are enforced.
+Profile facts must come from native readback. Session updates supply tool events.
+The adapter forwards a standalone public lifecycle command to `dd-flow zcode
+event handle`; native Session/tool identity binds it to the one exact issued
+assignment in that daemon scope. The command never exposes the runtime-owned
+invocation ID. Its shell inherits `DD_FLOW_DAEMON_ID`, finds the assignment and
+waits for the committed receipt before any lifecycle mutation can execute.
 
 The execution-scoped daemon preserves the live native handles needed for
 background children. Inspection remains available during productive operations;

package/dist/harness-runtime/lib/dd-zcode-daemon.mjs

@@ -602,7 +602,7 @@ export async function serveDaemon(stateDir) {
   const paths = locations(stateDir);
   const state = await readState(paths.dir);
   if (!state || state.schema_id !== STATE_SCHEMA) throw new DaemonError("daemon_state_missing", "daemon state is missing or incompatible");
-  const bridge = new AcpBridge(state.config);
+  const bridge = new AcpBridge({ ...state.config, env: { ...state.config.env, DD_FLOW_DAEMON_ID: state.daemon_id } });
   const initialized = await bridge.start();
   const runtime = new DaemonRuntime(paths, state, bridge, initialized);
   await removeSocket(paths.socket, paths.dir);

package/dist/harness-runtime/lib/dd-zcode.mjs

@@ -710,7 +710,7 @@ export async function zcodeInvocationObserver(options, rootProviderSessionId, se
     const { update, native, session } = facts;
     const command = update.rawInput?.command ?? update.rawInput?.cmd;
     const toolName = update._meta?.claudeCode?.toolName;
-    if (!["Bash", "bash", "execute"].includes(toolName) || typeof command !== "string" || !/(?:^|\s)--invocation-id\s/.test(command)) return;
+    if (!["Bash", "bash", "execute"].includes(toolName) || typeof command !== "string") return;
     const parent = session === rootProviderSessionId ? null : owners.get(native.parentToolCallId);
     if (session !== rootProviderSessionId && !parent) throw Object.assign(new Error("Native child has no confirmed immediate parent tool owner"), { code: "zcode_parent_identity_missing" });
     await send({ bin: options.ddFlowBin, home: options.ddFlowHome,

package/dist/services/hooks.js

@@ -493,7 +493,7 @@ export function handleZcodeEvent(context, input) {
         return { ok: true, observed: false, reason: "non_bash_tool" };
     const command = stringValue(rawInput.command) ?? stringValue(rawInput.cmd);
     const parsed = command ? parseLifecycleCommand(command) : { kind: "none" };
-    if (parsed.kind === "none" || !commandOption(parsed.invocation, "invocation-id"))
+    if (parsed.kind === "none")
         return { ok: true, observed: false, reason: "acp_evidence_only" };
     const controlled = objectRecord(objectRecord(notification._meta).ddZcode);
     const providerSessionId = stringValue(native.childSessionId) ?? stringValue(controlled.rootProviderSessionId);

package/dist/services/lifecycle-invocations.js

@@ -920,7 +920,9 @@ export function observedLifecycleInvocation(context, command, daemonId) {
     const analysis = parseLifecycleCommand(command);
     if (analysis.kind !== "standalone" || analysis.invocation.wrapped)
         return null;
-    const matches = context.db.all("SELECT * FROM lifecycle_invocations WHERE status IN ('observed','executing') ORDER BY rowid DESC")
+    // `issued` is a rendezvous, not authority: the CLI still blocks in
+    // awaitLifecycleInvocation until the native observer commits the receipt.
+    const matches = context.db.all("SELECT * FROM lifecycle_invocations WHERE status IN ('issued','observed','executing') ORDER BY rowid DESC")
         .filter(row => {
         try {
             const scope = JSON.parse(row.scope_json);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@deksden-com/dd-flow-cli",
-  "version": "0.9.0-beta.93",
+  "version": "0.9.0-beta.94",
   "description": "Mechanical runtime CLI for dd-flow workflows.",
   "type": "module",
   "bin": {