sortie-dogs 0.10.8 → 0.10.10

package/dist/asset-version.d.ts

@@ -3,5 +3,5 @@
  * installed project marker without importing every asset body.
  */
 export declare const RUNTIME_ASSET_VERSION = "0.3.89-completion-proof-v1";
-export declare const V010_RUNTIME_ASSET_VERSION = "0.10.0-v0912-language4-cost-rpt10-compaction-ref2-proposal1-review-remediation1-surface4-proposal-recovery2-quality1-terminal2-route1-path1-permission2-prerequisite1";
+export declare const V010_RUNTIME_ASSET_VERSION = "0.10.0-v0912-language4-cost-rpt10-compaction-ref2-proposal1-review-remediation1-surface4-proposal-recovery2-quality1-terminal2-route1-path1-permission2-prerequisite1-v2-bridge1-intent1-reflection1-cancel1";
 export type RuntimeAssetVersion = typeof RUNTIME_ASSET_VERSION | typeof V010_RUNTIME_ASSET_VERSION;

package/dist/asset-version.js

@@ -3,4 +3,4 @@
  * installed project marker without importing every asset body.
  */
 export const RUNTIME_ASSET_VERSION = "0.3.89-completion-proof-v1";
-export const V010_RUNTIME_ASSET_VERSION = "0.10.0-v0912-language4-cost-rpt10-compaction-ref2-proposal1-review-remediation1-surface4-proposal-recovery2-quality1-terminal2-route1-path1-permission2-prerequisite1";
+export const V010_RUNTIME_ASSET_VERSION = "0.10.0-v0912-language4-cost-rpt10-compaction-ref2-proposal1-review-remediation1-surface4-proposal-recovery2-quality1-terminal2-route1-path1-permission2-prerequisite1-v2-bridge1-intent1-reflection1-cancel1";

package/dist/plugin/config.js

@@ -33,7 +33,7 @@ export const DEFAULT_PLUGIN_OPTIONS = {
         capability: CONTINUATION_CAPABILITY,
         taskWatchdogMilliseconds: DEFAULT_TASK_WATCHDOG_MILLISECONDS,
     }),
-    reflection: Object.freeze({ enabled: false, layers: Object.freeze({ run: true, project: true, global: false }), maxInjectedEntries: 3, maxInjectedTokens: 500 }),
+    reflection: Object.freeze({ enabled: true, layers: Object.freeze({ run: true, project: true, global: true }), maxInjectedEntries: 3, maxInjectedTokens: 500 }),
     validationProfile: "balanced",
 };
 function isRecord(value) {

package/dist/plugin/profiled.js

@@ -40,7 +40,7 @@ const PREVIEW_ROUTES = Object.freeze([
 ]);
 export function processRemediationReplacementPacket(code, packet, cancelTool, prepareTool) {
     return { status: "operator-process-remediation-replacement-required", code, packet,
-        next_action: `Call ${cancelTool} without a reason, then call ${prepareTool} with the exact same ordered acceptance, ` +
+        next_action: `Call ${cancelTool} with reason=plain, then call ${prepareTool} with the exact same ordered acceptance, ` +
             "the same unit and write scope, and the remaining cumulative budget. Do not call resume_operator again, " +
             "claim evidence, reset spend, or widen scope." };
 }
@@ -546,7 +546,7 @@ export function createProfiledPlugin(profile, assetVersion) {
                 const proposal = await proposals.read(context.sessionID);
                 const proposalNextAction = proposal?.phase === "investigating"
                     ? proposal.proposal_call_id !== null
-                        ? "proposal Task is already admitted; do not redispatch it or call operator_next. Continue submission repairs only in the same active claimed child. If that child terminated without submission, report the terminal proposal failure; remaining read or submission capacity does not authorize a new Task, budget reset, or replacement child. Only an explicit root decision to retry may call cancel_operator with no reason to release this grant, which discards the spent proposal accounting and never reuses the terminated child"
+                        ? "proposal Task is already admitted; do not redispatch it or call operator_next. Continue submission repairs only in the same active claimed child. If that child terminated without submission, report the terminal proposal failure; remaining read or submission capacity does not authorize a new Task, budget reset, or replacement child. Only an explicit root decision to retry may call cancel_operator with reason=plain to release this grant, which discards the spent proposal accounting and never reuses the terminated child"
                         : proposal.submission_count >= proposal.intent.proposal_budget.max_submissions
                             ? "proposal submission budget exhausted; do not call operator_next; report the bounded proposal failure"
                             : "proposal is not submitted; do not call operator_next; complete or repair the bounded proposal submission"
@@ -562,10 +562,11 @@ export function createProfiledPlugin(profile, assetVersion) {
                             next_action: proposalNextAction }
                             : { status: "absent", profile: profile.id });
             } };
-        tools[cancel] = { description: "Revoke this root's operator grant and stop only its owned children before releasing core state. Before approval it instead releases the bounded proposal grant, including one whose admitted child already terminated, so the root can begin a new investigation; it never reuses that child or restores spent proposal budget. reason is a closed set: omit it for a plain cancellation, including replanning, contract revision, and any pre-approval proposal release, and never send free text such as a written justification. Use reason=acceptance-remediation only for decision=operator-acceptance-remediation-required. At awaiting-acceptance, reason=review-blocking authorizes a same-goal review-remediation replacement only within the exact acceptance, committed head, approved write union, and retained remaining budget.",
-            args: { reason: optionalStringSchema }, execute: async (args, context) => {
+        tools[cancel] = { description: "Revoke this root's operator grant and stop only its owned children before releasing core state. Before approval it instead releases the bounded proposal grant, including one whose admitted child already terminated, so the root can begin a new investigation; it never reuses that child or restores spent proposal budget. reason is a required closed set: use reason=plain for a plain cancellation, including replanning, contract revision, and any pre-approval proposal release, and never send free text such as a written justification. Use reason=acceptance-remediation only for decision=operator-acceptance-remediation-required. At awaiting-acceptance, reason=review-blocking authorizes a same-goal review-remediation replacement only within the exact acceptance, committed head, approved write union, and retained remaining budget.",
+            args: { reason: { type: "string", enum: ["plain", "review-blocking", "acceptance-remediation"] } }, execute: async (args, context) => {
                 await requireRoot(context.sessionID);
-                const requestedReason = args.reason;
+                const rawReason = args.reason;
+                const requestedReason = rawReason === "plain" || rawReason === undefined ? undefined : rawReason;
                 if (requestedReason !== undefined && requestedReason !== "review-blocking" && requestedReason !== "acceptance-remediation")
                     throw new Error("operator-cancel-reason-invalid");
                 const pending = await operators.read(context.sessionID);
@@ -1088,6 +1089,11 @@ export function createProfiledPlugin(profile, assetVersion) {
                 const proposal = who.role === "dog-operator" ? await proposals.read(root) : undefined;
                 const proposalChild = proposal?.phase === "investigating" && proposal.proposal_session_id === request.sessionID;
                 if (proposalChild) {
+                    // OpenCode V2 exposes server plugin tools to Code Mode through its `execute`
+                    // conduit. The nested submit tool still performs the session/grant checks below;
+                    // denying the conduit makes an otherwise read-only proposal impossible to submit.
+                    if (request.tool === "execute")
+                        return;
                     if (request.tool !== "read")
                         throw new Error("operator-proposal-readonly-role");
                     if (typeof args.filePath !== "string")

package/dist/plugin/v2.js

@@ -140,6 +140,8 @@ function legacyToolInput(name, input) {
             value.subagent_type = value.agent;
         if (typeof value.sessionID === "string")
             value.task_id = value.sessionID;
+        delete value.agent;
+        delete value.sessionID;
     }
     if (name === "read" && typeof value.path === "string" && value.filePath === undefined)
         value.filePath = value.path;
@@ -177,6 +179,7 @@ function assistantText(message) {
     const text = [...array(message.content)].reverse().find(part => record(part) && part.type === "text" && typeof part.text === "string" && part.text.trim().length > 0);
     return record(text) && typeof text.text === "string" ? text.text.trim() : undefined;
 }
+const V2_SUBAGENT_PROMPT_PREFIX = "You are a subagent spawned by another session.\n";
 function reportPanel(rendered) {
     const summary = rendered.indexOf(RETURN_REPORT_MARKER);
     if (summary < 0)
@@ -257,12 +260,16 @@ async function registerV2Hooks(context, hooks) {
             if (!record(info) || !record(event.prompt))
                 return;
             const model = modelReference(info.model) ?? { providerID: "unknown", modelID: "unknown" };
+            const nativeText = String(event.prompt.text ?? "");
+            const legacyText = typeof info.parentID === "string" && nativeText.startsWith(V2_SUBAGENT_PROMPT_PREFIX)
+                ? nativeText.slice(V2_SUBAGENT_PROMPT_PREFIX.length)
+                : nativeText;
             const output = { message: { id: String(event.messageID ?? ""), agent: string(info.agent), model },
-                parts: [{ type: "text", text: String(event.prompt.text ?? "") }] };
+                parts: [{ type: "text", text: legacyText }] };
             await hooks["chat.message"]({ sessionID: String(event.sessionID), messageID: String(event.messageID ?? ""),
                 ...(typeof info.agent === "string" ? { agent: info.agent } : {}), model }, output);
             const text = output.parts.find(part => record(part) && part.type === "text" && typeof part.text === "string");
-            if (record(text) && typeof text.text === "string")
+            if (record(text) && typeof text.text === "string" && text.text !== legacyText)
                 event.prompt.text = text.text;
             if (typeof output.message.agent === "string" && output.message.agent !== info.agent) {
                 await context.session.switchAgent({ sessionID: event.sessionID, agent: output.message.agent });

package/dist/runtime-assets-v010.js

@@ -145,13 +145,19 @@ For a nontrivial request whose source facts, unit boundaries, or exact validatio
 do not author a giant speculative plan at the root. Freeze the original request once with stable ordered requirement IDs,
 including every negative and quality condition, authoritative references, finite proposal read/submission budgets, and the
 maximum read prefixes. Call ${profile.toolPrefix}begin_operator_proposal. Dispatch its exact ${operator} Task unchanged.
+The begin intent_json has exactly this shape (proposal_budget is the only optional field):
+{"schema_version":"0.1","original_request":{"text":"complete original user request verbatim","source_ref":"user:message-id"},"requirements":[{"id":"R1","text":"exact ordered requirement","kind":"requirement"}],"authoritative_refs":["user:message-id"],"allow_read":["existing/path"]}
+Every requirement entry must include kind="requirement" | "negative" | "quality". Copy original_request.text byte-for-byte.
+Use only authoritative_refs and allow_read for begin intent scope. project_root, source_refs, max_read_prefixes,
+authoritative_references, and other aliases are invalid. Do not guess a smaller contract after rejection: use this exact
+shape, preserving all ordered requirements, and omit proposal_budget only when the deterministic host default is intended.
 Freeze product requirements from the original request, not extra implementation criteria invented from workflow
 bookkeeping. Keep proposal read/submission allowances in proposal_budget and host counters; do not turn spent
 budgets or your own reporting obligations into worker validation commands. Preserve any explicit user requirement.
 That child remains the same logical operations role: it may inspect only the host-approved read prefixes and submit one
 requirement-mapped proposal; it cannot edit, use shell, dispatch a worker/advisor/scout, widen read scope, or execute work.
 An admitted proposal child is never redispatched or replaced. If it terminates without a submitted proposal, report that
-terminal failure first; only an explicit decision to retry may call ${profile.toolPrefix}cancel_operator with no reason to
+terminal failure first; only an explicit decision to retry may call ${profile.toolPrefix}cancel_operator with reason=plain to
 release the grant before freezing the requirements again. Spent proposal reads and submissions are never restored.
 Do not cancel/reinvestigate the same known contract defect merely to get another draft. Preserve exact observed
 commands and correction evidence. If a user-only acceptance condition cannot be expressed by the existing contract,
@@ -336,6 +342,9 @@ When the prompt starts SORTIE_OPERATOR_PROPOSAL or the host supplies SORTIE_PROP
 perform only its bounded read investigation and submit the complete packet
 through ${profile.toolPrefix}submit_operator_proposal before returning; a prose-only return is forbidden. If it returns invalid-proposal,
 repair only the named code (using actual_reads for a budget estimate mismatch) within the finite submission budget.
+When OpenCode V2 exposes that profile tool through Code Mode, use the execute conduit only to call
+${profile.toolPrefix}submit_operator_proposal. Do not use execute for HTTP, another tool, filesystem access, or computation
+that bypasses this bounded proposal contract. Source inspection remains on the native Read tool.
 A successful status=submitted ends this investigation Task: return to the parent without further tools, even if a generic
 continuation asks for the next step. Submission is not execution admission; never call operator_next or dispatch a worker.
 For an admitted execution queue, call

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sortie-dogs",
-  "version": "0.10.8",
+  "version": "0.10.10",
   "description": "Bounded agent harness and validated orchestration loop plugin for OpenCode",
   "keywords": [
     "opencode",