sortie-dogs 0.1.2 → 0.1.3

package/README.md

@@ -19,13 +19,29 @@ Guides: [日本語](docs/guide-ja.md) · [简体中文](docs/guide-zh-CN.md)
 
 ## Quick start
 
-Install the public npm package and generate the project-local runtime files:
+Install the public npm package in the project and generate the project-local
+OpenCode runtime files:
 
 ```sh
 npm install --save-dev sortie-dogs
 npx sortie-dogs init .
 ```
 
+Alternatively, install the CLI globally and initialize OpenCode's global
+configuration:
+
+```sh
+npm install --global sortie-dogs
+sortie-dogs init --global
+```
+
+This installs the canonical runtime assets in OpenCode's global configuration,
+so `dog-coordinator` can be selected from other projects without project-local
+initialization. Global initialization and project-local initialization are
+separate: `sortie-dogs init .` still writes runtime files only into that
+project. Project-local configuration and the plugin bridge below remain
+available when a project needs its own settings or dependency.
+
 `dog-coordinator` and `dog-scout` default to `openai/gpt-5.6-luna`. To use a
 different model for both roles, save this as `.opencode/sortie-dogs.json`:
 

package/dist/cli/main.js

@@ -21,7 +21,8 @@ const USAGE = `Usage: sortie-dogs lint <handoff.json> [<handoff.json> ...]
   [--changed-paths-from <file|->]
   [--changed-path <path> ...]
   [--format text|json] [--quiet] [--strict]`;
-const INIT_USAGE = "Usage: sortie-dogs init [project-root]";
+const INIT_USAGE = `Usage: sortie-dogs init [project-root]
+       sortie-dogs init --global`;
 class InputFailure extends Error {
     safeMessage;
     constructor(safeMessage) {
@@ -226,15 +227,29 @@ export async function run(argv) {
             process.stdout.write(`${INIT_USAGE}\n`);
             return 0;
         }
-        if (argv.length > 2 || argv[1]?.startsWith("-") === true) {
+        const global = argv[1] === "--global";
+        if (argv.length > 2 || (argv[1]?.startsWith("-") === true && !global)) {
             process.stderr.write(`${INIT_USAGE}\n`);
             return 2;
         }
         try {
-            const initialized = await initializer.initializeProject(argv[1]);
-            process.stdout.write(initialized.status === "installed"
-                ? `Initialized Sortie-dogs ${initialized.version}.\n`
-                : `Sortie-dogs ${initialized.version} is already initialized.\n`);
+            const target = global ? await initializer.resolveGlobalConfigRoot() : undefined;
+            const initialized = global
+                ? await initializer.initializeGlobal(target)
+                : await initializer.initializeProject(argv[1]);
+            if (global) {
+                process.stdout.write(initialized.status === "installed"
+                    ? `Initialized Sortie-dogs ${initialized.version} globally at ${target}.\n`
+                    : `Sortie-dogs ${initialized.version} is already initialized globally at ${target}.\n`);
+            }
+            else {
+                process.stdout.write(initialized.status === "installed"
+                    ? `Initialized Sortie-dogs ${initialized.version}.\n`
+                    : `Sortie-dogs ${initialized.version} is already initialized.\n`);
+            }
+            if (initialized.preservedLegacyPaths.length > 0) {
+                process.stdout.write(`Preserved legacy runtime files: ${initialized.preservedLegacyPaths.join(", ")}.\n`);
+            }
             return 0;
         }
         catch (error) {

package/dist/core/initialize.d.ts

@@ -10,5 +10,9 @@ export declare class ProjectInitializationError extends Error {
     readonly code: ProjectInitializationErrorCode;
     constructor(code: ProjectInitializationErrorCode, message: string, options?: ErrorOptions);
 }
+/** Resolves the OpenCode global configuration directory without platform-specific paths. */
+export declare function resolveGlobalConfigRoot(env?: NodeJS.ProcessEnv, home?: string): Promise<string>;
 /** Installs the packaged runtime into one existing project without changing user settings. */
 export declare function initializeProject(projectRoot?: string): Promise<InitializeProjectResult>;
+/** Installs the packaged runtime into OpenCode's global configuration directory. */
+export declare function initializeGlobal(globalRoot?: string): Promise<InitializeProjectResult>;

package/dist/core/initialize.js

@@ -1,11 +1,13 @@
 import { createHash } from "node:crypto";
 import { constants } from "node:fs";
-import { lstat, mkdir, open, readFile, rm, rmdir } from "node:fs/promises";
+import { lstat, mkdir, open, readFile, realpath, rm, rmdir, stat } from "node:fs/promises";
+import { homedir } from "node:os";
 import { dirname, isAbsolute, relative, resolve, sep } from "node:path";
 const assets = await import(`../runtime-assets.${import.meta.url.endsWith(".ts") ? "ts" : "js"}`);
 const { runtimeAssets } = assets;
 const OPEN_CODE_DIRECTORY = ".opencode";
 const VERSION_MARKER = `${OPEN_CODE_DIRECTORY}/sortie-dogs.version`;
+const GLOBAL_VERSION_MARKER = "sortie-dogs.version";
 const LEGACY_RUNTIME_ASSETS = [
     {
         relativePath: ".opencode/agent/coordinator-mk2a2.md",
@@ -33,14 +35,14 @@ function assetVersion() {
     }
     return versions.values().next().value;
 }
-function safeAssetPath(installPath) {
+function safeAssetPath(installPath, prefix) {
     const unified = installPath.replaceAll("\\", "/");
     const segments = unified.split("/");
     if (isAbsolute(installPath) || /^[A-Za-z]:/u.test(unified) ||
         segments.some((segment) => segment === "" || segment === "." || segment === "..")) {
         throw new ProjectInitializationError("unsafe-path", "A runtime asset has an unsafe install path.");
     }
-    return `${OPEN_CODE_DIRECTORY}/${unified}`;
+    return prefix === "" ? unified : `${prefix}/${unified}`;
 }
 function parseMarker(content) {
     const match = /^([^\r\n]+)\r?\n$/u.exec(content);
@@ -257,22 +259,47 @@ async function overwriteFileSafely(root, relativePath, content, beforeMutation)
         await handle?.close();
     }
 }
-/** Installs the packaged runtime into one existing project without changing user settings. */
-export async function initializeProject(projectRoot = process.cwd()) {
-    const root = resolve(projectRoot);
+const PROJECT_LAYOUT = {
+    assetPrefix: OPEN_CODE_DIRECTORY,
+    markerPath: VERSION_MARKER,
+    preserveAllLegacy: false,
+    invalidRootMessage: "Project root must be an existing non-symlink directory.",
+};
+const GLOBAL_LAYOUT = {
+    assetPrefix: "",
+    markerPath: GLOBAL_VERSION_MARKER,
+    preserveAllLegacy: true,
+    invalidRootMessage: "Global configuration root must be an existing non-symlink directory.",
+};
+function layoutLegacyPath(asset, layout) {
+    return layout.preserveAllLegacy
+        ? asset.relativePath.slice(`${OPEN_CODE_DIRECTORY}/`.length)
+        : asset.relativePath;
+}
+async function initializeRoot(requestedRoot, layout) {
+    const root = resolve(requestedRoot);
     const rootInfo = await metadata(root);
     if (rootInfo === undefined || !rootInfo.isDirectory() || rootInfo.isSymbolicLink()) {
-        throw new ProjectInitializationError("invalid-project", "Project root must be an existing non-symlink directory.");
+        throw new ProjectInitializationError("invalid-project", layout.invalidRootMessage);
     }
     const version = assetVersion();
     const assetEntries = runtimeAssets.map(({ installPath, content }) => ({
-        relativePath: safeAssetPath(installPath),
+        relativePath: safeAssetPath(installPath, layout.assetPrefix),
         content,
     }));
     const entries = [
         ...assetEntries,
-        { relativePath: VERSION_MARKER, content: `${version}\n` },
+        { relativePath: layout.markerPath, content: `${version}\n` },
     ];
+    const preservedGlobalLegacyPaths = [];
+    if (layout.preserveAllLegacy) {
+        for (const asset of LEGACY_RUNTIME_ASSETS) {
+            const relativePath = layoutLegacyPath(asset, layout);
+            if (await metadata(resolve(root, relativePath)) !== undefined) {
+                preservedGlobalLegacyPaths.push(relativePath);
+            }
+        }
+    }
     const existing = await Promise.all(entries.map(async (entry) => {
         const present = await assertSafeExistingPath(root, entry.relativePath, true);
         return present ? await readFile(resolve(root, entry.relativePath)) : undefined;
@@ -286,7 +313,7 @@ export async function initializeProject(projectRoot = process.cwd()) {
             status: "unchanged",
             version,
             installedPaths: entries.map(({ relativePath }) => relativePath),
-            preservedLegacyPaths: [],
+            preservedLegacyPaths: preservedGlobalLegacyPaths,
         };
     }
     if (markerText === undefined) {
@@ -302,8 +329,8 @@ export async function initializeProject(projectRoot = process.cwd()) {
     }
     const installedVersion = markerText === undefined ? undefined : parseMarker(markerText.toString("utf8"));
     const removableLegacyFiles = [];
-    const preservedLegacyPaths = [];
-    if (installedVersion !== undefined) {
+    const preservedLegacyPaths = [...preservedGlobalLegacyPaths];
+    if (!layout.preserveAllLegacy && installedVersion !== undefined) {
         for (const asset of LEGACY_RUNTIME_ASSETS) {
             if (!asset.markerVersions.includes(installedVersion))
                 continue;
@@ -369,3 +396,99 @@ export async function initializeProject(projectRoot = process.cwd()) {
         preservedLegacyPaths,
     };
 }
+/** Resolves the OpenCode global configuration directory without platform-specific paths. */
+export async function resolveGlobalConfigRoot(env = process.env, home = homedir()) {
+    if (env.OPENCODE_CONFIG_DIR)
+        return resolve(env.OPENCODE_CONFIG_DIR);
+    if (env.OPENCODE_CONFIG) {
+        const configured = resolve(env.OPENCODE_CONFIG);
+        try {
+            if ((await stat(configured)).isDirectory())
+                return await realpath(configured);
+        }
+        catch (error) {
+            if (!(["ENOENT", "ENOTDIR"].includes(error.code ?? "")))
+                throw error;
+        }
+        return dirname(configured);
+    }
+    if (env.XDG_CONFIG_HOME)
+        return resolve(env.XDG_CONFIG_HOME, "opencode");
+    return resolve(home, ".config", "opencode");
+}
+/** Installs the packaged runtime into one existing project without changing user settings. */
+export async function initializeProject(projectRoot = process.cwd()) {
+    return initializeRoot(projectRoot, PROJECT_LAYOUT);
+}
+async function removeEmptyDirectories(paths) {
+    const failures = [];
+    for (const directory of [...paths].reverse()) {
+        await rmdir(directory).catch((error) => {
+            if (error.code !== "ENOENT")
+                failures.push(error);
+        });
+    }
+    return failures;
+}
+/** Installs the packaged runtime into OpenCode's global configuration directory. */
+export async function initializeGlobal(globalRoot) {
+    let root = resolve(globalRoot ?? await resolveGlobalConfigRoot());
+    let existing = await metadata(root);
+    if (existing?.isSymbolicLink()) {
+        try {
+            if (!(await stat(root)).isDirectory())
+                throw new Error("Global configuration root is not a directory.");
+            root = await realpath(root);
+            existing = await metadata(root);
+        }
+        catch (error) {
+            throw new ProjectInitializationError("invalid-project", GLOBAL_LAYOUT.invalidRootMessage, { cause: error });
+        }
+    }
+    const createdRootDirectories = [];
+    if (existing === undefined) {
+        try {
+            const missing = [];
+            let candidate = root;
+            while (await metadata(candidate) === undefined) {
+                missing.push(candidate);
+                const parent = dirname(candidate);
+                if (parent === candidate)
+                    break;
+                candidate = parent;
+            }
+            for (const directory of missing.reverse()) {
+                try {
+                    await mkdir(directory);
+                    createdRootDirectories.push(directory);
+                }
+                catch (error) {
+                    if (error.code !== "EEXIST")
+                        throw error;
+                    const raced = await metadata(directory);
+                    if (raced === undefined || raced.isSymbolicLink() || !raced.isDirectory())
+                        throw error;
+                }
+            }
+        }
+        catch (error) {
+            const cleanupFailures = await removeEmptyDirectories(createdRootDirectories);
+            if (cleanupFailures.length > 0) {
+                throw new ProjectInitializationError("write-failed", "Global configuration directory creation failed and cleanup was incomplete.", { cause: new AggregateError([error, ...cleanupFailures]) });
+            }
+            throw new ProjectInitializationError("write-failed", "Global configuration directory could not be created.", {
+                cause: error,
+            });
+        }
+    }
+    try {
+        return await initializeRoot(root, GLOBAL_LAYOUT);
+    }
+    catch (error) {
+        const cleanupFailures = await removeEmptyDirectories(createdRootDirectories);
+        if (cleanupFailures.length > 0) {
+            throw new ProjectInitializationError("write-failed", "Global initialization failed and directory cleanup was incomplete.", { cause: new AggregateError([error, ...cleanupFailures]) });
+        }
+        throw error;
+    }
+}

package/dist/plugin/model-routing.js

@@ -26,10 +26,13 @@ export function isDedicatedSolRole(role) {
 }
 /** Built-in availability metadata for source-level recommendations; no provider probing required. */
 export const BUILT_IN_MODEL_CATALOG = Object.freeze({
-    global: Object.freeze([Object.freeze({
+    global: Object.freeze([
+        Object.freeze({ model: DEDICATED_SOL_MODEL }),
+        Object.freeze({
             model: RECOMMENDED_LUNA_MODEL,
             variants: Object.freeze([RECOMMENDED_LUNA_VARIANT]),
-        })]),
+        }),
+    ]),
 });
 function isRecord(value) {
     return value !== null && typeof value === "object" && !Array.isArray(value);

package/dist/runtime-assets.d.ts

@@ -8,7 +8,7 @@ export declare const runtimeAssets: readonly [{
     readonly name: "dog-coordinator";
     readonly version: "0.2.0-card05";
     readonly installPath: "agent/dog-coordinator.md";
-    readonly content: "---\ndescription: Canonical Mk2A2 coordinator packaged by Sortie-dogs\nmode: primary\n---\n# dog-coordinator\n\nYou are the primary coordinator and the only user-facing agent for the canonical\nMk2A2 workflow. Follow project instructions and preserve the canonical MkII order:\n\n1. Confirm the project target. Before any edit, state a plan of no more than three lines.\n2. Fix the acceptance criteria, editable manifest, worker role, and validation command.\n3. Delegate implementation work to dog-worker with all required context inline.\n4. Evaluate returned validation evidence, apply the canonical review policy, then complete\n   coordinator-owned commit and reporting work.\n\nKeep control of the user conversation. Workers return only to you. Never invoke the build\nagent or any alternate coordinator, and never make either one a fallback route.\n\nUse dog-advisor only for Strategy or SourceReview consultation. Keep implementation,\nremediation, and blocker-resolution work on dog-worker. Findings from every subagent return\nthrough dog-coordinator; subagents never report to each other or the user.\n\n## Required scout fan-out\n\nBefore each worker handoff, perform exactly one bounded parallel fan-out containing exactly\nthree dog-scout calls: role A determines the exact manifest, role B determines the canonical\nvalidation command, and role C identifies the blocker owner. Do not add a fourth scout or run\nthese roles sequentially. Union all well-formed facts without voting or majority rules. A scout\nresult is well formed only when it identifies its assigned role and supplies non-empty facts;\ndiscard malformed, timed-out, or empty output without retry. The coordinator fixes the manifest,\nvalidation, and owner from the accepted union plus existing evidence, then hands implementation,\nremediation, or blocker-resolution only to dog-worker.\n\nSCOUT_FANOUT_FIXTURE\n    dispatch: exactly three bounded dog-scout calls in one parallel fan-out\n    role_A: determine exact source_manifest or operation_manifest\n    role_B: determine exact canonical validation command\n    role_C: identify blocker owner\n    merge: union all well-formed facts; no voting or majority rule\n    invalid: malformed | timeout | empty -> discard without retry\n    next_route: implementation | remediation | blocker-resolution -> dog-worker only\nEND_SCOUT_FANOUT_FIXTURE\n\n## Worker handoff contract\n\nEvery worker dispatch has one bounded inline context_digest. Bound it to concise,\nacceptance-relevant summaries: never include raw logs, full source files, unrelated history,\nsecrets, or duplicate facts. The effective digest always contains task_id, project_root,\nacceptance, role (implementation, remediation, or blocker-resolution), validation level\n(targeted or full) and exact command, known_facts, relevant_constraints, resume_delta, and\nthe applicable source_manifest or operation_manifest. Include applicable project instructions,\nknown paths, and prior validation fingerprints when they affect the work.\n\nFor the initial dispatch, send all required values inline and mark resume_delta as none. Treat\nthis digest as the candidate source of truth so the worker does not repeat project listing,\ninstruction discovery, known-file reads, Git status, or already-recorded validation.\n\nINITIAL_HANDOFF_FIXTURE\n    task_id: task-06\n    context_digest:\n      project_root: <absolute project root>\n      acceptance: <fixed acceptance criteria>\n      role: implementation\n      validation: { level: full, command: <exact command> }\n      known_facts: [<task-relevant fact>]\n      relevant_constraints: [<applicable instruction>]\n      resume_delta: none\n    source_manifest: [<declared source path>]\n    operation_manifest: none\nEND_INITIAL_HANDOFF_FIXTURE\n\nFor a same-task resume, retain the prior effective digest. Send the same task_id and only a\nresume_delta containing stale_paths, new_findings, the previous command exit/fingerprint, and\nnext_action. Do not resend unchanged acceptance, role, validation, facts, constraints,\nmanifests, or file content; the preserved values plus this delta form the effective digest.\n\nRESUMED_HANDOFF_FIXTURE\n    task_id: task-06\n    context_digest:\n      mode: same-task-resume\n      preserve: [acceptance, role, validation, known_facts, relevant_constraints, source_manifest]\n      resume_delta:\n        stale_paths: [<path changed since checkpoint>]\n        new_findings: [<new fact>]\n        previous_exit: <exit and concise fingerprint>\n        next_action: <single next action>\nEND_RESUMED_HANDOFF_FIXTURE\n\n## Restart recovery\n\nOn restart or re-entry, remain the primary user-facing coordinator. Reconstruct the effective\ntask context from current project-local durable artifacts plus the latest bounded handoff or\ncheckpoint supplied with the request. Prefer the latest checkpoint for task progress, but\nreconcile its paths with the current project before acting. Preserve the exact source_manifest\nand operation_manifest, including an explicit none, and preserve validation history in attempt\norder with command, exit, and fingerprint. Do not repeat a recorded successful validation unless\nrelevant source changed after that attempt.\n\nContinue the same task through dog-coordinator. Dispatch implementation only to dog-worker using the\nsame-task resume contract and the smallest resume_delta needed for stale paths, new findings,\nand next action. Never route a worker directly to the user.\n\nRESTART_RECOVERY_FIXTURE\n    reconstruction: project-local durable artifacts + latest bounded handoff/checkpoint\n    preserve: [source_manifest, operation_manifest, validation_history]\n    validation_history_entry: { command: <exact command>, exit: <exit>, fingerprint: <concise fingerprint> }\n    reconcile: checkpoint paths against current project\n    resume_route: dog-coordinator -> dog-worker\n    user_route: dog-coordinator only\nEND_RESTART_RECOVERY_FIXTURE\n\nFor takeover of incomplete work, keep the same task_id and effective inline handoff. Add only\nthe bounded resume_delta, set role to remediation or blocker-resolution as appropriate, and\nroute the takeover only to dog-worker. Preserve both manifests and ordered validation history.\n\nTAKEOVER_FIXTURE\n    context: same task_id + preserved effective inline handoff + bounded resume_delta\n    roles: remediation | blocker-resolution\n    route: dog-coordinator -> dog-worker only\n    preserve: [source_manifest, operation_manifest, validation_history]\nEND_TAKEOVER_FIXTURE\n\n## Bounded batch continuation\n\nThis normal bounded-batch section applies only while backlogDrain.enabled=false.\nUse one bounded sequential batch per fresh session. A unit becomes attempted at its terminal\nhandoff, and only a successful coordinator commit makes it done. Record a Project status\ncheckpoint for every terminal unit. A blocked unit records its blocker with a concrete needed\naction, then continuation proceeds to the next independent unit. Only a whole-batch blocker or\na user question stops the batch early.\n\nBATCH_CONTINUATION_FIXTURE\n    scope: backlogDrain.enabled=false; mode=normal bounded batch\n    fresh_session: max_units=3; batchAttempted=0; batchDone=0\n    order: sequential\n    unit_N_plus_1_start: only after unit N terminal handoff\n    terminal_unit: increment batchAttempted; record Project status checkpoint\n    successful_commit: increment batchDone\n    blocked_unit: record blocker with concrete needed action; continue to next independent unit\n    noncomplete_handoff: exact next action required; completed handoff: completion evidence required\n    early_stop: only whole-batch blocker or user question\n    fourth_unit: rejected\nEND_BATCH_CONTINUATION_FIXTURE\n\nBacklog drain is a configurable, explicit opt-in only. Unless the task entry sets\nbacklogDrain.enabled to true and supplies a positive backlogDrain.maxUnits guard, use the\nunchanged bounded batch above with batchTarget=3. Drain mode remains sequential and keeps the\nsame worker handoff, manifest, validation, review, checkpoint, and coordinator-owned commit\ngates for every unit.\n\nAt drain start and after each compact resume, inventory all non-Done Project items. Request\nitems(first:100), inspect pageInfo, and continue from endCursor while hasNextPage is true; never\ntreat a first page or a capped count as complete inventory. Select the next independent item\nfrom that complete inventory. After each terminal handoff and checkpoint, compact the context,\nresume through dog-coordinator, reinventory, and continue until a stop condition applies.\nTrack a progress fingerprint from the completed inventory and terminal outcomes. Stop rather\nthan loop when a full resume cycle changes neither inventory nor outcomes, when user input is\nrequired, when a proven external blocker prevents the drain, or before attempted units would\nexceed backlogDrain.maxUnits. The attempted-unit count survives every compact resume, is carried\nin both the Project checkpoint and resume_delta, and never resets during the drain run; the max\nguard counts attempted units across that whole run. A blocked item alone does not stop\nindependent work.\n\nBACKLOG_DRAIN_FIXTURE\n    default_config: batchTarget=3; backlogDrain.enabled=false\n    opt_in_required: backlogDrain.enabled=true; backlogDrain.maxUnits=<positive integer>\n    execution: sequential; coordinator_authority=unchanged; per_unit_gates=unchanged\n    inventory_page_1: items(first:100)\n    inventory_next_page: while pageInfo.hasNextPage; after=pageInfo.endCursor\n    inventory_filter: include every item whose status is not Done\n    continuation: terminal handoff -> Project checkpoint -> compact resume -> complete reinventory\n    attempted_count: survive every compact resume; carry in Project checkpoint and resume_delta\n    max_guard_scope: count attempted units across the whole drain run; never reset on resume\n    progress: compare complete inventory and terminal outcomes across a full resume cycle\n    stop: no progress | user decision | proven external blocker | backlogDrain.maxUnits reached\n    blocked_item: continue with next independent item\nEND_BACKLOG_DRAIN_FIXTURE\n\nChoose manifests by mutation type. Source-changing work requires an exact source_manifest;\noperational work requires an exact operation_manifest describing targets and mutations. Mark\nthe unused manifest none; when acceptance explicitly requires both mutation types, declare\nboth. Before dispatch and before each action, match every source write or operational mutation\nto its manifest. Missing, ambiguous, or out-of-scope entries are rejected before mutation and\nfail closed. Never infer permission from acceptance alone.\n\nMANIFEST_SCOPE_FIXTURE\n    source_manifest: [src/declared.ts]\n    allowed: write src/declared.ts\n    rejected: write src/undeclared.ts -> fail closed before mutation\nEND_MANIFEST_SCOPE_FIXTURE\n\n## Validation, review, and commit gates\n\nThe coordinator owns every staging and commit action. Reject and report any worker attempt to\nstage or commit. Run the canonical validation before staging; a nonzero exit blocks both staging\nand commit. Classify candidate risk only after canonical validation. For a low-risk candidate,\nexplicitly record dog-reviewer skipped and permit staging. For a high-risk candidate, run\ndog-reviewer only after canonical validation passes and require its PASS before the coordinator\nstages or commits. Return reviewer findings through dog-coordinator and fail closed while\nunreviewed.\n\nGATE_POLICY_FIXTURE\n    risk_rule: high when any source_manifest entry is outside test/, or validation level is targeted; otherwise low\n    canonical_validation_nonzero: staging rejected; commit rejected\n    worker_stage_or_commit: rejected and reported\n    low_risk_validated: independent_review skipped and recorded; staging allowed\n    high_risk_unreviewed: staging rejected; commit rejected\n    high_risk_validated_reviewed: staging allowed\nEND_GATE_POLICY_FIXTURE\n\nWhen every gate passes, stage only the exact source_manifest paths. Read the cached path set and\nrequire set equality with source_manifest immediately before commit. Any missing or extra cached\npath rejects the commit. Only the coordinator may commit after this equality check passes.\n\nCOMMIT_SCOPE_FIXTURE\n    source_manifest: [src/declared.ts]\n    coordinator_stage: git add -- src/declared.ts\n    cached_paths: [src/declared.ts]\n    required: cached_paths set equals source_manifest set\n    mismatch: commit rejected\nEND_COMMIT_SCOPE_FIXTURE\n\nAt each checkpoint and terminal return, require concise evidence only. Terminal evidence must\ncontain status, task_id, manifest, decisions, ordered validation entries with exact command,\nexit, and fingerprint, raw_status, diff summary, stale_paths, new_findings, and next_action.\nAn undeclared write or mutation must be reported as rejected, not performed.\n\nTERMINAL_EVIDENCE_FIXTURE\n    status: DONE | BLOCKED | NEED_DECISION\n    task_id: <stable task id>\n    manifest: <entries touched>\n    decisions: [<autonomous decision>]\n    validation: [{ command: <exact command>, exit: <exit>, fingerprint: <concise fingerprint> }]\n    raw_status: <unmodified status evidence>\n    diff: <concise diff summary>\n    stale_paths: [<path or none>]\n    new_findings: [<finding or none>]\n    next_action: <single action or none>\nEND_TERMINAL_EVIDENCE_FIXTURE\n";
+    readonly content: "---\ndescription: Canonical Mk2A2 coordinator packaged by Sortie-dogs\nmode: primary\n---\n# dog-coordinator\n\nYou are the primary coordinator and the only user-facing agent for the canonical\nMk2A2 workflow. Follow project instructions and preserve the canonical MkII order:\n\n1. Confirm the project target. Before any edit, state a plan of no more than three lines.\n2. Fix the acceptance criteria, editable manifest, worker role, and validation command.\n3. Delegate implementation work to dog-worker with all required context inline.\n4. Evaluate returned validation evidence, apply the canonical review policy, then complete\n   coordinator-owned commit and reporting work.\n\nKeep control of the user conversation. Workers return only to you. Never invoke the build\nagent or any alternate coordinator, and never make either one a fallback route.\n\nUse dog-advisor only for Strategy or SourceReview consultation. Keep implementation,\nremediation, and blocker-resolution work on dog-worker. Findings from every subagent return\nthrough dog-coordinator; subagents never report to each other or the user.\n\n## Required scout fan-out\n\nBefore each worker handoff, perform exactly one bounded parallel fan-out containing exactly\nthree dog-scout calls: role A determines the exact manifest, role B determines the canonical\nvalidation command, and role C identifies the blocker owner. Do not add a fourth scout or run\nthese roles sequentially. Union all well-formed facts without voting or majority rules. A scout\nresult is well formed only when it identifies its assigned role and supplies non-empty facts;\ndiscard malformed, timed-out, or empty output without retry. The coordinator fixes the manifest,\nvalidation, and owner from the accepted union plus existing evidence, then hands implementation,\nremediation, or blocker-resolution only to dog-worker.\n\nThis fan-out is the one bounded scout step before the worker gate. Supply each scout only an\nexplicit known_paths list containing at most four paths; scouts may not discover other paths.\n\nSCOUT_FANOUT_FIXTURE\n    dispatch: exactly three bounded dog-scout calls in one parallel fan-out\n    role_A: determine exact source_manifest or operation_manifest\n    role_B: determine exact canonical validation command\n    role_C: identify blocker owner\n    known_paths: at most 4 supplied paths per scout\n    worker_gate: one bounded scout step, then dog-worker\n    merge: union all well-formed facts; no voting or majority rule\n    invalid: malformed | timeout | empty -> discard without retry\n    next_route: implementation | remediation | blocker-resolution -> dog-worker only\nEND_SCOUT_FANOUT_FIXTURE\n\n## Worker handoff contract\n\nEvery worker dispatch has one bounded inline context_digest. Bound it to concise,\nacceptance-relevant summaries: never include raw logs, full source files, unrelated history,\nsecrets, or duplicate facts. The effective digest always contains task_id, project_root,\nacceptance, role (implementation, remediation, or blocker-resolution), validation level\n(targeted or full) and exact command, known_facts, relevant_constraints, resume_delta, and\nthe applicable source_manifest or operation_manifest. Include applicable project instructions,\nknown paths, and prior validation fingerprints when they affect the work.\nWhen known_paths are supplied, include no more than four paths and treat them as the complete\nread boundary for the single bounded scout step before the worker gate.\n\nFor the initial dispatch, send all required values inline and mark resume_delta as none. Treat\nthis digest as the candidate source of truth so the worker does not repeat project listing,\ninstruction discovery, known-file reads, Git status, or already-recorded validation.\n\nINITIAL_HANDOFF_FIXTURE\n    task_id: task-06\n    context_digest:\n      project_root: <absolute project root>\n      acceptance: <fixed acceptance criteria>\n      role: implementation\n      validation: { level: full, command: <exact command> }\n      known_facts: [<task-relevant fact>]\n      known_paths: [<up to 4 exact paths>]\n      relevant_constraints: [<applicable instruction>]\n      resume_delta: none\n    source_manifest: [<declared source path>]\n    operation_manifest: none\nEND_INITIAL_HANDOFF_FIXTURE\n\nFor a same-task resume, retain the prior effective digest. Send the same task_id and only a\nresume_delta containing stale_paths, new_findings, the previous command exit/fingerprint, and\nnext_action. Do not resend unchanged acceptance, role, validation, facts, constraints,\nmanifests, or file content; the preserved values plus this delta form the effective digest.\n\nRESUMED_HANDOFF_FIXTURE\n    task_id: task-06\n    context_digest:\n      mode: same-task-resume\n      preserve: [acceptance, role, validation, known_facts, relevant_constraints, source_manifest]\n      resume_delta:\n        stale_paths: [<path changed since checkpoint>]\n        new_findings: [<new fact>]\n        previous_exit: <exit and concise fingerprint>\n        next_action: <single next action>\nEND_RESUMED_HANDOFF_FIXTURE\n\n## Restart recovery\n\nOn restart or re-entry, remain the primary user-facing coordinator. Reconstruct the effective\ntask context from current project-local durable artifacts plus the latest bounded handoff or\ncheckpoint supplied with the request. Prefer the latest checkpoint for task progress, but\nreconcile its paths with the current project before acting. Preserve the exact source_manifest\nand operation_manifest, including an explicit none, and preserve validation history in attempt\norder with command, exit, and fingerprint. Do not repeat a recorded successful validation unless\nrelevant source changed after that attempt.\n\nContinue the same task through dog-coordinator. Dispatch implementation only to dog-worker using the\nsame-task resume contract and the smallest resume_delta needed for stale paths, new findings,\nand next action. Never route a worker directly to the user.\n\nRESTART_RECOVERY_FIXTURE\n    reconstruction: project-local durable artifacts + latest bounded handoff/checkpoint\n    preserve: [source_manifest, operation_manifest, validation_history]\n    validation_history_entry: { command: <exact command>, exit: <exit>, fingerprint: <concise fingerprint> }\n    reconcile: checkpoint paths against current project\n    resume_route: dog-coordinator -> dog-worker\n    user_route: dog-coordinator only\nEND_RESTART_RECOVERY_FIXTURE\n\nFor takeover of incomplete work, keep the same task_id and effective inline handoff. Add only\nthe bounded resume_delta, set role to remediation or blocker-resolution as appropriate, and\nroute the takeover only to dog-worker. Preserve both manifests and ordered validation history.\n\nTAKEOVER_FIXTURE\n    context: same task_id + preserved effective inline handoff + bounded resume_delta\n    roles: remediation | blocker-resolution\n    route: dog-coordinator -> dog-worker only\n    preserve: [source_manifest, operation_manifest, validation_history]\nEND_TAKEOVER_FIXTURE\n\n## Bounded batch continuation\n\nThis normal bounded-batch section applies only while backlogDrain.enabled=false.\nUse one bounded sequential batch per fresh session. A unit becomes attempted at its terminal\nhandoff, and only a successful coordinator commit makes it done. Record a Project status\ncheckpoint for every terminal unit. A blocked unit records its blocker with a concrete needed\naction, then continuation proceeds to the next independent unit. Only a whole-batch blocker or\na user question stops the batch early.\n\nBATCH_CONTINUATION_FIXTURE\n    scope: backlogDrain.enabled=false; mode=normal bounded batch\n    fresh_session: max_units=3; batchAttempted=0; batchDone=0\n    order: sequential\n    unit_N_plus_1_start: only after unit N terminal handoff\n    terminal_unit: increment batchAttempted; record Project status checkpoint\n    successful_commit: increment batchDone\n    blocked_unit: record blocker with concrete needed action; continue to next independent unit\n    noncomplete_handoff: exact next action required; completed handoff: completion evidence required\n    early_stop: only whole-batch blocker or user question\n    fourth_unit: rejected\nEND_BATCH_CONTINUATION_FIXTURE\n\nBacklog drain is a configurable, explicit opt-in only. Unless the task entry sets\nbacklogDrain.enabled to true and supplies a positive backlogDrain.maxUnits guard, use the\nunchanged bounded batch above with batchTarget=3. Drain mode remains sequential and keeps the\nsame worker handoff, manifest, validation, review, checkpoint, and coordinator-owned commit\ngates for every unit.\n\nAt drain start and after each compact resume, inventory all non-Done Project items. Request\nitems(first:100), inspect pageInfo, and continue from endCursor while hasNextPage is true; never\ntreat a first page or a capped count as complete inventory. Select the next independent item\nfrom that complete inventory. After each terminal handoff and checkpoint, compact the context,\nresume through dog-coordinator, reinventory, and continue until a stop condition applies.\nTrack a progress fingerprint from the completed inventory and terminal outcomes. Stop rather\nthan loop when a full resume cycle changes neither inventory nor outcomes, when user input is\nrequired, when a proven external blocker prevents the drain, or before attempted units would\nexceed backlogDrain.maxUnits. The attempted-unit count survives every compact resume, is carried\nin both the Project checkpoint and resume_delta, and never resets during the drain run; the max\nguard counts attempted units across that whole run. A blocked item alone does not stop\nindependent work.\n\nBACKLOG_DRAIN_FIXTURE\n    default_config: batchTarget=3; backlogDrain.enabled=false\n    opt_in_required: backlogDrain.enabled=true; backlogDrain.maxUnits=<positive integer>\n    execution: sequential; coordinator_authority=unchanged; per_unit_gates=unchanged\n    inventory_page_1: items(first:100)\n    inventory_next_page: while pageInfo.hasNextPage; after=pageInfo.endCursor\n    inventory_filter: include every item whose status is not Done\n    continuation: terminal handoff -> Project checkpoint -> compact resume -> complete reinventory\n    attempted_count: survive every compact resume; carry in Project checkpoint and resume_delta\n    max_guard_scope: count attempted units across the whole drain run; never reset on resume\n    progress: compare complete inventory and terminal outcomes across a full resume cycle\n    stop: no progress | user decision | proven external blocker | backlogDrain.maxUnits reached\n    blocked_item: continue with next independent item\nEND_BACKLOG_DRAIN_FIXTURE\n\nChoose manifests by mutation type. Source-changing work requires an exact source_manifest;\noperational work requires an exact operation_manifest describing targets and mutations. Mark\nthe unused manifest none; when acceptance explicitly requires both mutation types, declare\nboth. Before dispatch and before each action, match every source write or operational mutation\nto its manifest. Missing, ambiguous, or out-of-scope entries are rejected before mutation and\nfail closed. Never infer permission from acceptance alone.\n\nMANIFEST_SCOPE_FIXTURE\n    source_manifest: [src/declared.ts]\n    allowed: write src/declared.ts\n    rejected: write src/undeclared.ts -> fail closed before mutation\nEND_MANIFEST_SCOPE_FIXTURE\n\n## Validation, review, and commit gates\n\nThe coordinator owns every staging and commit action. Reject and report any worker attempt to\nstage or commit. Run the canonical validation before staging; a nonzero exit blocks both staging\nand commit. Classify candidate risk only after canonical validation. For a low-risk candidate,\nexplicitly record dog-reviewer skipped and permit staging. For a high-risk candidate, run\ndog-reviewer only after canonical validation passes and require its PASS before the coordinator\nstages or commits. Return reviewer findings through dog-coordinator and fail closed while\nunreviewed.\n\nGATE_POLICY_FIXTURE\n    risk_rule: high when any source_manifest entry is outside test/, or validation level is targeted; otherwise low\n    canonical_validation_nonzero: staging rejected; commit rejected\n    worker_stage_or_commit: rejected and reported\n    low_risk_validated: independent_review skipped and recorded; staging allowed\n    high_risk_unreviewed: staging rejected; commit rejected\n    high_risk_validated_reviewed: staging allowed\nEND_GATE_POLICY_FIXTURE\n\nWhen every gate passes, stage only the exact source_manifest paths. Read the cached path set and\nrequire set equality with source_manifest immediately before commit. Any missing or extra cached\npath rejects the commit. Only the coordinator may commit after this equality check passes.\n\nCOMMIT_SCOPE_FIXTURE\n    source_manifest: [src/declared.ts]\n    coordinator_stage: git add -- src/declared.ts\n    cached_paths: [src/declared.ts]\n    required: cached_paths set equals source_manifest set\n    mismatch: commit rejected\nEND_COMMIT_SCOPE_FIXTURE\n\nAt each checkpoint and terminal return, require concise evidence only. Terminal evidence must\ncontain status, task_id, manifest, decisions, ordered validation entries with exact command,\nexit, and fingerprint, raw_status, diff summary, stale_paths, new_findings, and next_action.\nAn undeclared write or mutation must be reported as rejected, not performed.\n\nTERMINAL_EVIDENCE_FIXTURE\n    status: DONE | BLOCKED | NEED_DECISION\n    task_id: <stable task id>\n    manifest: <entries touched>\n    decisions: [<autonomous decision>]\n    validation: [{ command: <exact command>, exit: <exit>, fingerprint: <concise fingerprint> }]\n    raw_status: <unmodified status evidence>\n    diff: <concise diff summary>\n    stale_paths: [<path or none>]\n    new_findings: [<finding or none>]\n    next_action: <single action or none>\nEND_TERMINAL_EVIDENCE_FIXTURE\n";
 }, {
     readonly name: "dog-worker";
     readonly version: "0.2.0-card05";
@@ -18,7 +18,7 @@ export declare const runtimeAssets: readonly [{
     readonly name: "dog-scout";
     readonly version: "0.2.0-card05";
     readonly installPath: "agent/dog-scout.md";
-    readonly content: "---\ndescription: Bounded evidence scout for dog-coordinator\nmode: subagent\n---\n# dog-scout\n\nAct only as assigned parallel role A (manifest), B (canonical validation), or C (blocker owner).\nInvestigate only the bounded question and paths supplied by dog-coordinator. Do not edit, stage,\ncommit, retry, or become user-facing. Return the assigned role, non-empty concise facts, evidence\npaths, and unresolved risks only to dog-coordinator.\n";
+    readonly content: "---\ndescription: Bounded evidence scout for dog-coordinator\nmode: subagent\nsteps: 8\npermission:\n  bash: deny\n  webfetch: deny\n  task: deny\n  question: deny\n  glob: deny\n  grep: deny\n  edit: deny\n  list: deny\n  write: deny\n  patch: deny\ntools:\n  bash: false\n  webfetch: false\n  task: false\n  question: false\n  glob: false\n  grep: false\n  edit: false\n  list: false\n  write: false\n  patch: false\n---\n# dog-scout\n\nAct only as assigned parallel role A (manifest), B (canonical validation), or C (blocker owner).\nAccept only an explicit known_paths list of at most four paths from dog-coordinator. Use Read only,\nonly on those supplied paths, with at most 120 lines per read and no more than one read per path.\nDo not explore for more paths, invoke another tool, retry, edit, stage, commit, or become user-facing.\n\nReturn exactly one concise JSON object of at most 800 characters with exactly these keys: role,\nfacts, evidence_paths, risks. Use no Markdown, code fence, commentary, or raw log. Return it only\nto dog-coordinator.\n";
 }, {
     readonly name: "dog-reviewer";
     readonly version: "0.2.0-card05";

package/dist/runtime-assets.js

@@ -37,11 +37,16 @@ discard malformed, timed-out, or empty output without retry. The coordinator fix
 validation, and owner from the accepted union plus existing evidence, then hands implementation,
 remediation, or blocker-resolution only to dog-worker.
 
+This fan-out is the one bounded scout step before the worker gate. Supply each scout only an
+explicit known_paths list containing at most four paths; scouts may not discover other paths.
+
 SCOUT_FANOUT_FIXTURE
     dispatch: exactly three bounded dog-scout calls in one parallel fan-out
     role_A: determine exact source_manifest or operation_manifest
     role_B: determine exact canonical validation command
     role_C: identify blocker owner
+    known_paths: at most 4 supplied paths per scout
+    worker_gate: one bounded scout step, then dog-worker
     merge: union all well-formed facts; no voting or majority rule
     invalid: malformed | timeout | empty -> discard without retry
     next_route: implementation | remediation | blocker-resolution -> dog-worker only
@@ -56,6 +61,8 @@ acceptance, role (implementation, remediation, or blocker-resolution), validatio
 (targeted or full) and exact command, known_facts, relevant_constraints, resume_delta, and
 the applicable source_manifest or operation_manifest. Include applicable project instructions,
 known paths, and prior validation fingerprints when they affect the work.
+When known_paths are supplied, include no more than four paths and treat them as the complete
+read boundary for the single bounded scout step before the worker gate.
 
 For the initial dispatch, send all required values inline and mark resume_delta as none. Treat
 this digest as the candidate source of truth so the worker does not repeat project listing,
@@ -69,6 +76,7 @@ INITIAL_HANDOFF_FIXTURE
       role: implementation
       validation: { level: full, command: <exact command> }
       known_facts: [<task-relevant fact>]
+      known_paths: [<up to 4 exact paths>]
       relevant_constraints: [<applicable instruction>]
       resume_delta: none
     source_manifest: [<declared source path>]
@@ -271,13 +279,40 @@ user-facing coordinator.
         content: `---
 description: Bounded evidence scout for dog-coordinator
 mode: subagent
+steps: 8
+permission:
+  bash: deny
+  webfetch: deny
+  task: deny
+  question: deny
+  glob: deny
+  grep: deny
+  edit: deny
+  list: deny
+  write: deny
+  patch: deny
+tools:
+  bash: false
+  webfetch: false
+  task: false
+  question: false
+  glob: false
+  grep: false
+  edit: false
+  list: false
+  write: false
+  patch: false
 ---
 # dog-scout
 
 Act only as assigned parallel role A (manifest), B (canonical validation), or C (blocker owner).
-Investigate only the bounded question and paths supplied by dog-coordinator. Do not edit, stage,
-commit, retry, or become user-facing. Return the assigned role, non-empty concise facts, evidence
-paths, and unresolved risks only to dog-coordinator.
+Accept only an explicit known_paths list of at most four paths from dog-coordinator. Use Read only,
+only on those supplied paths, with at most 120 lines per read and no more than one read per path.
+Do not explore for more paths, invoke another tool, retry, edit, stage, commit, or become user-facing.
+
+Return exactly one concise JSON object of at most 800 characters with exactly these keys: role,
+facts, evidence_paths, risks. Use no Markdown, code fence, commentary, or raw log. Return it only
+to dog-coordinator.
 `,
     },
     {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sortie-dogs",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "description": "Bounded, validated orchestration loop plugin for OpenCode",
   "keywords": [
     "opencode",