sortie-dogs 0.10.1 → 0.10.2

package/README.md

@@ -59,9 +59,13 @@ See [configuration details](#configuration) for model selection and other setup
 > **Project status: Beta.** v0.10.x is under active stabilization. Runtime
 > behavior, configuration, and runtime assets may still change before 1.0.
 
-[![npm](https://img.shields.io/npm/v/sortie-dogs)](https://www.npmjs.com/package/sortie-dogs)
-[![license](https://img.shields.io/npm/l/sortie-dogs)](LICENSE)
-[![Node.js](https://img.shields.io/node/v/sortie-dogs)](https://www.npmjs.com/package/sortie-dogs)
+[![GitHub Release](https://img.shields.io/github/v/release/zufall-upon/Sortie-dogs)](https://github.com/zufall-upon/Sortie-dogs/releases/latest)
+[![npm](https://img.shields.io/npm/v/sortie-dogs?label=npm)](https://www.npmjs.com/package/sortie-dogs)
+[![Tests](https://github.com/zufall-upon/Sortie-dogs/actions/workflows/test.yml/badge.svg)](https://github.com/zufall-upon/Sortie-dogs/actions/workflows/test.yml)
+[![OpenCode Plugin](https://img.shields.io/badge/OpenCode-Plugin-5C5CFF)](https://opencode.ai/)
+[![TypeScript](https://img.shields.io/badge/TypeScript-5.9-3178C6?logo=typescript&logoColor=white)](https://www.typescriptlang.org/)
+[![Node.js](https://img.shields.io/node/v/sortie-dogs)](https://www.npmjs.com/package/sortie-dogs)
+[![MIT License](https://img.shields.io/npm/l/sortie-dogs)](LICENSE)
 
 ![Sortie-dogs coordinating a bounded implementation workflow](https://raw.githubusercontent.com/zufall-upon/Sortie-dogs/main/docs/assets/sortie-workflow.gif)
 
@@ -70,7 +74,7 @@ bounded implementation, canonical validation, and evidence-backed completion.
 
 Guides: [日本語](docs/guide-ja.md) · [简体中文](docs/guide-zh-CN.md) · [テスト実行](docs/testing.md) · [CLI testing](docs/cli-testing.md)
 
-Release: [v0.10.1](https://github.com/zufall-upon/Sortie-dogs/releases/tag/v0.10.1)
+Release: [v0.10.2](https://github.com/zufall-upon/Sortie-dogs/releases/tag/v0.10.2)
 
 ## Latest local benchmark case study
 
@@ -110,23 +114,28 @@ time, and cost aggregates; their attempt count and estimated cost remain visible
 
 The v0.10.1 RC value is a standalone qualification-only reference, not a fourth matched run or a
 FrontierHarness leaderboard result. It used no fresh Bare control and a localized Docker-free
-verifier. The RC label identifies an unreleased working-tree snapshot; its packed metadata remained
-`0.10.0`, fixed by package SHA-256 `67582ee023c3bd57813262e292c067a3f90f30d61c01d8caf6f91f09ae78f61d`.
+verifier. The RC label identifies an unreleased working-tree snapshot; the benchmark tarball's
+package metadata remained `0.10.0`, fixed by package SHA-256
+`67582ee023c3bd57813262e292c067a3f90f30d61c01d8caf6f91f09ae78f61d`.
 
 Its estimated API-equivalent cost is **$4.478613**: $3.23 Sol and $1.25 Terra when rounded to cents.
 The audit prices all root and descendant assistant messages: 84 priced requests, 4,215,698 tokens,
 100% pricing coverage, and no unpriced requests. It uses the product's 2026-09-14 Standard schedule
 per request, including cached input, reasoning as output, and the long-context rate band. The earlier
-delivery-incomplete run used a different packed source snapshot, so it is not folded into this RC's
-same-snapshot acquisition cost. Historical Bare and v0.9.12 costs retain their 2026-07-30 schedule;
-their cost cells are not same-rate comparisons with this RC estimate.
+delivery-incomplete package was a different source snapshot (`32dea0a3…`): it spent **$4.276578**
+across 90 priced requests and 3,704,649 tokens, with no terminal outcome or verifier. It is not folded
+into this RC's same-snapshot acquisition cost. Observed spend across both distinct snapshots was
+**$8.755191**, which is development spend rather than this RC's acquisition cost. Historical Bare and
+v0.9.12 costs retain their 2026-07-30 schedule; their cost cells are not same-rate comparisons with
+this RC estimate.
 
 ![Latest local case study: Bare completed 11.1 percent of task checks at a median estimated API-equivalent cost of $3.53; Sortie completed 85.2 percent at $2.85. Sortie needed five attempts and $15.94 to collect three completed runs. Neither configuration achieved a Verified PASS.](docs/assets/quality-cost-reference.svg)
 
-Cost uses exported root and child session tokens, grouped by the model that produced each message,
-with a fixed standard short-context rate schedule. Completed-run cost shows execution efficiency;
-total acquisition cost includes the two interrupted Sortie attempts and shows reliability overhead.
-These are API-equivalent estimates, not invoices.
+Cost audits use deduplicated root and descendant session tokens, grouped by the model that produced
+each message. Historical values retain their frozen 2026-07-30 short-context schedule; the RC uses
+the product's 2026-09-14 per-request schedule described above. Completed-run cost shows execution
+efficiency; same-snapshot acquisition cost adds interrupted attempts. These are API-equivalent
+estimates, not invoices.
 
 The product objective is **more verified outcomes per unit of cost and time without weakening the
 accepted goal**. This small, single-task local case study does not establish that claim, isolate

package/dist/asset-version.d.ts

@@ -3,5 +3,5 @@
  * installed project marker without importing every asset body.
  */
 export declare const RUNTIME_ASSET_VERSION = "0.3.89-completion-proof-v1";
-export declare const V010_RUNTIME_ASSET_VERSION = "0.10.0-v0912-language4-cost-rpt10-compaction-ref1-proposal1-review-remediation1-surface3-proposal-recovery2-quality1";
+export declare const V010_RUNTIME_ASSET_VERSION = "0.10.0-v0912-language4-cost-rpt10-compaction-ref1-proposal1-review-remediation1-surface3-proposal-recovery2-quality1-terminal1";
 export type RuntimeAssetVersion = typeof RUNTIME_ASSET_VERSION | typeof V010_RUNTIME_ASSET_VERSION;

package/dist/asset-version.js

@@ -3,4 +3,4 @@
  * installed project marker without importing every asset body.
  */
 export const RUNTIME_ASSET_VERSION = "0.3.89-completion-proof-v1";
-export const V010_RUNTIME_ASSET_VERSION = "0.10.0-v0912-language4-cost-rpt10-compaction-ref1-proposal1-review-remediation1-surface3-proposal-recovery2-quality1";
+export const V010_RUNTIME_ASSET_VERSION = "0.10.0-v0912-language4-cost-rpt10-compaction-ref1-proposal1-review-remediation1-surface3-proposal-recovery2-quality1-terminal1";

package/dist/plugin/profiled.js

@@ -380,6 +380,14 @@ export function createProfiledPlugin(profile, assetVersion) {
                 catch (error) {
                     if (error instanceof OperatorContractError)
                         return JSON.stringify({ status: "invalid-plan", diagnostics: error.diagnostics, diagnostics_truncated: error.diagnostics_truncated });
+                    // An immutable active contract is a local routing defect, not an external blocker. Return the
+                    // existing durable state and its next action so the root continues instead of retrying prepare.
+                    if (error instanceof Error && error.message === "operator-active-contract-immutable") {
+                        return JSON.stringify({ status: "active-contract-immutable", code: error.message,
+                            packet: await operatorPacket(await operators.required(context.sessionID)),
+                            next_action: `This root already owns an immutable active contract. Do not resend a plan or cancel an unchanged contract: ` +
+                                `read ${status} and continue the existing run's next_task_ref or next_action. Cancel only for an actual scope change or explicit stop.` });
+                    }
                     throw error;
                 }
                 await registerPreparedGoal(context.sessionID, state);
@@ -510,8 +518,14 @@ export function createProfiledPlugin(profile, assetVersion) {
                     await control.authorizeOperatorContractRepairValidation(context.sessionID, taskID, unit.childSessionID, args.repair_fingerprint);
                 }
                 catch (error) {
+                    // The repair is aborted and the run keeps a durable decision. Return that preserved state so an
+                    // unauthorized resume cannot leave the root without a recognizable terminal or next action.
                     applied = await operators.abortAppliedContractRepair(context.sessionID, "operator-contract-repair-validation-resume-unavailable");
-                    throw error;
+                    return JSON.stringify({ status: "contract-repair-validation-unavailable",
+                        code: error instanceof Error ? error.message : "operator-contract-repair-validation-resume-unavailable",
+                        packet: await operatorPacket(applied),
+                        next_action: `The validation-only resume was not authorized and this repair is closed. Do not retry ${resolveContractRepair} or ` +
+                            `${resume} for the same fingerprint: read ${status}, then either continue the reported decision or return one terminal checkpoint naming this refusal.` });
                 }
                 return JSON.stringify({ status: "repair-applied", run_id: applied.runID, unit_id: unit.unit.id,
                     repair_generation: applied.repairGeneration, task: operators.nextWorkerTask(applied) });

package/dist/runtime-assets-v010.d.ts

@@ -1,4 +1,5 @@
 import { type RuntimeAsset } from "./runtime-assets.ts";
 export declare const PREVIEW_PRESENTATION_POLICY: string;
+export declare const PREVIEW_TERMINAL_REPORT_POLICY: string;
 export declare const COMMUNICATION_LANGUAGE_POLICY = "\n## Communication language continuity\n\nUse the language of the user's latest instruction sentences for all user-visible communication,\nincluding progress, Task descriptions/titles, delegated questions, handoff prose, findings and final replies.\nJapanese instructions require Japanese communication; English instructions require English communication.\nMixed-language identifiers or quoted English documents do not change the user's instruction language.\nIf the latest message supplies no detectable language, preserve the previous instruction language.\n\nBefore delegating, write the question and every prose field in that same language and explicitly ask the\nchild to reply in it. Do not translate a Japanese request into English merely because these agent instructions\nor examples are English. Child sessions and their prompts are visible to the user: parent-only translation\nafter an English exchange is not sufficient. All descendants preserve the requested language; it takes\nprecedence over the language of protocol boilerplate. Do not add a separate translation pass or model call.\n\nKeep protocol keys, enums, commands, paths, identifiers, model names, exact quoted evidence and code verbatim.\nFor example strategy_trigger, architecture-choice, review_phase and PASS must not be localized. Translate\ntheir explanatory prose, not these tokens. Preserve immutable criteria and host-generated Task packets\nverbatim; author their user-controlled prose in the correct language before the contract is frozen.\nGenerated control labels are not a reason to switch the surrounding explanation to English.\n";
 export declare const runtimeAssets: readonly RuntimeAsset[];

package/dist/runtime-assets-v010.js

@@ -8,10 +8,14 @@ const coordinator = profileAgent(profile, "dog-coordinator");
 const operator = profileAgent(profile, "dog-operator");
 const worker = profileAgent(profile, "dog-worker");
 const canonicalCoordinator = canonicalAssets.find(asset => asset.name === "dog-coordinator").content;
-const presentationStart = canonicalCoordinator.indexOf("READABLE_OUTPUT_FIXTURE\n");
-const presentationEnd = canonicalCoordinator.indexOf("END_READABLE_OUTPUT_FIXTURE", presentationStart);
-if (presentationStart < 0 || presentationEnd < 0)
-    throw new Error("canonical-presentation-fixture-missing");
+/** Reuse the canonical fixture bodies so this profile cannot drift from the shared terminal vocabulary. */
+function canonicalFixture(marker) {
+    const start = canonicalCoordinator.indexOf(`${marker}\n`);
+    const end = start < 0 ? -1 : canonicalCoordinator.indexOf(`END_${marker}`, start);
+    if (start < 0 || end < 0)
+        throw new Error(`canonical-fixture-missing:${marker}`);
+    return canonicalCoordinator.slice(start, end + `END_${marker}`.length);
+}
 export const PREVIEW_PRESENTATION_POLICY = `
 ## Sortie presentation continuity
 
@@ -20,7 +24,34 @@ Use the user's language for prose, concise icon-led plan/progress/evidence block
 after the host accepts the result. The host supplies the 🐾 return report, mission/proof, cost/pack and career panels;
 do not fabricate scores, counts, medals or success, and do not suppress these panels as redundant decoration.
 
-${canonicalCoordinator.slice(presentationStart, presentationEnd + "END_READABLE_OUTPUT_FIXTURE".length)}
+${canonicalFixture("READABLE_OUTPUT_FIXTURE")}
+`;
+export const PREVIEW_TERMINAL_REPORT_POLICY = `
+## Terminal report contract
+
+A task turn that ends without another tool call is a terminal return. Its first non-empty line must be one
+machine checkpoint: exactly one of DONE, INTERRUPTED, BLOCKED, or NEED_DECISION with that status icon,
+followed by a short conclusion in the user's language. Never close a task turn with bare prose, an unlabeled
+summary, a plan, a progress note, or a preamble, and never leave the run without one of these four tokens.
+The status token, its icon, TRUE_INTERRUPTION and TRUE_BLOCKER are protocol tokens: keep them verbatim
+even when the surrounding conclusion is translated. Translate only the display labels and keep their order.
+
+DONE requires a succeeded ${profile.toolPrefix}complete_operator receipt for the accepted goal; the host renders
+the measured return report from that receipt. Without it, return INTERRUPTED, BLOCKED, or NEED_DECISION naming
+the exact unresolved condition. An exhausted budget, an unapproved or failed proposal, a terminated child, a
+refused contract operation, or an unreachable acceptance is an INTERRUPTED return, never a silent stop.
+A genuine interruption also requires the canonical machine line \`TRUE_INTERRUPTION: user: <condition>\` or
+\`TRUE_INTERRUPTION: internal: <condition>\`; without it the host keeps the run on its same-session continuation path.
+
+A refused control operation is a local process defect, not a terminal blocker. Read the returned status and
+next_action, apply that one correction, and continue in the same turn. Never reissue an unchanged refused
+request: an active contract returns ${profile.toolPrefix}operator_status and the existing next Task, and an
+unavailable contract-repair validation resume returns the preserved run state and its decision. When the same
+refusal repeats with unchanged state, stop retrying and return one INTERRUPTED checkpoint naming that refusal.
+
+${canonicalFixture("TERMINAL_STATUS_SEMANTICS_FIXTURE")}
+
+${canonicalFixture("TERMINAL_OUTPUT_TEMPLATE")}
 `;
 export const COMMUNICATION_LANGUAGE_POLICY = `
 ## Communication language continuity
@@ -255,7 +286,7 @@ Use ${profile.toolPrefix}cancel_operator to stop an active grant before changing
 operator-acceptance-remediation-required replacement action, or performing the bounded awaiting-acceptance
 reason=review-blocking replacement above. Agent switching revokes this
 runtime's ownership; do not restart it from a stale summary. The initial preview supports the serial lane only.
-${PREVIEW_PRESENTATION_POLICY}
+${PREVIEW_PRESENTATION_POLICY}${PREVIEW_TERMINAL_REPORT_POLICY}
 `;
 const operatorContent = `---
 description: Sortie-dogs ${V010_RUNTIME_ASSET_VERSION} hidden dogs-coordinator operations delegate; no source or acceptance authority.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sortie-dogs",
-  "version": "0.10.1",
+  "version": "0.10.2",
   "description": "Bounded agent harness and validated orchestration loop plugin for OpenCode",
   "keywords": [
     "opencode",
@@ -23,7 +23,7 @@
   "homepage": "https://github.com/zufall-upon/Sortie-dogs#readme",
   "publishConfig": {
     "access": "public",
-    "tag": "beta"
+    "tag": "latest"
   },
   "type": "module",
   "engines": {