sortie-dogs 0.10.8 → 0.10.9

package/dist/asset-version.d.ts

@@ -3,5 +3,5 @@
  * installed project marker without importing every asset body.
  */
 export declare const RUNTIME_ASSET_VERSION = "0.3.89-completion-proof-v1";
-export declare const V010_RUNTIME_ASSET_VERSION = "0.10.0-v0912-language4-cost-rpt10-compaction-ref2-proposal1-review-remediation1-surface4-proposal-recovery2-quality1-terminal2-route1-path1-permission2-prerequisite1";
+export declare const V010_RUNTIME_ASSET_VERSION = "0.10.0-v0912-language4-cost-rpt10-compaction-ref2-proposal1-review-remediation1-surface4-proposal-recovery2-quality1-terminal2-route1-path1-permission2-prerequisite1-v2-bridge1-intent1";
 export type RuntimeAssetVersion = typeof RUNTIME_ASSET_VERSION | typeof V010_RUNTIME_ASSET_VERSION;

package/dist/asset-version.js

@@ -3,4 +3,4 @@
  * installed project marker without importing every asset body.
  */
 export const RUNTIME_ASSET_VERSION = "0.3.89-completion-proof-v1";
-export const V010_RUNTIME_ASSET_VERSION = "0.10.0-v0912-language4-cost-rpt10-compaction-ref2-proposal1-review-remediation1-surface4-proposal-recovery2-quality1-terminal2-route1-path1-permission2-prerequisite1";
+export const V010_RUNTIME_ASSET_VERSION = "0.10.0-v0912-language4-cost-rpt10-compaction-ref2-proposal1-review-remediation1-surface4-proposal-recovery2-quality1-terminal2-route1-path1-permission2-prerequisite1-v2-bridge1-intent1";

package/dist/plugin/profiled.js

@@ -1088,6 +1088,11 @@ export function createProfiledPlugin(profile, assetVersion) {
                 const proposal = who.role === "dog-operator" ? await proposals.read(root) : undefined;
                 const proposalChild = proposal?.phase === "investigating" && proposal.proposal_session_id === request.sessionID;
                 if (proposalChild) {
+                    // OpenCode V2 exposes server plugin tools to Code Mode through its `execute`
+                    // conduit. The nested submit tool still performs the session/grant checks below;
+                    // denying the conduit makes an otherwise read-only proposal impossible to submit.
+                    if (request.tool === "execute")
+                        return;
                     if (request.tool !== "read")
                         throw new Error("operator-proposal-readonly-role");
                     if (typeof args.filePath !== "string")

package/dist/plugin/v2.js

@@ -140,6 +140,8 @@ function legacyToolInput(name, input) {
             value.subagent_type = value.agent;
         if (typeof value.sessionID === "string")
             value.task_id = value.sessionID;
+        delete value.agent;
+        delete value.sessionID;
     }
     if (name === "read" && typeof value.path === "string" && value.filePath === undefined)
         value.filePath = value.path;
@@ -177,6 +179,7 @@ function assistantText(message) {
     const text = [...array(message.content)].reverse().find(part => record(part) && part.type === "text" && typeof part.text === "string" && part.text.trim().length > 0);
     return record(text) && typeof text.text === "string" ? text.text.trim() : undefined;
 }
+const V2_SUBAGENT_PROMPT_PREFIX = "You are a subagent spawned by another session.\n";
 function reportPanel(rendered) {
     const summary = rendered.indexOf(RETURN_REPORT_MARKER);
     if (summary < 0)
@@ -257,12 +260,16 @@ async function registerV2Hooks(context, hooks) {
             if (!record(info) || !record(event.prompt))
                 return;
             const model = modelReference(info.model) ?? { providerID: "unknown", modelID: "unknown" };
+            const nativeText = String(event.prompt.text ?? "");
+            const legacyText = typeof info.parentID === "string" && nativeText.startsWith(V2_SUBAGENT_PROMPT_PREFIX)
+                ? nativeText.slice(V2_SUBAGENT_PROMPT_PREFIX.length)
+                : nativeText;
             const output = { message: { id: String(event.messageID ?? ""), agent: string(info.agent), model },
-                parts: [{ type: "text", text: String(event.prompt.text ?? "") }] };
+                parts: [{ type: "text", text: legacyText }] };
             await hooks["chat.message"]({ sessionID: String(event.sessionID), messageID: String(event.messageID ?? ""),
                 ...(typeof info.agent === "string" ? { agent: info.agent } : {}), model }, output);
             const text = output.parts.find(part => record(part) && part.type === "text" && typeof part.text === "string");
-            if (record(text) && typeof text.text === "string")
+            if (record(text) && typeof text.text === "string" && text.text !== legacyText)
                 event.prompt.text = text.text;
             if (typeof output.message.agent === "string" && output.message.agent !== info.agent) {
                 await context.session.switchAgent({ sessionID: event.sessionID, agent: output.message.agent });

package/dist/runtime-assets-v010.js

@@ -145,6 +145,12 @@ For a nontrivial request whose source facts, unit boundaries, or exact validatio
 do not author a giant speculative plan at the root. Freeze the original request once with stable ordered requirement IDs,
 including every negative and quality condition, authoritative references, finite proposal read/submission budgets, and the
 maximum read prefixes. Call ${profile.toolPrefix}begin_operator_proposal. Dispatch its exact ${operator} Task unchanged.
+The begin intent_json has exactly this shape (proposal_budget is the only optional field):
+{"schema_version":"0.1","original_request":{"text":"complete original user request verbatim","source_ref":"user:message-id"},"requirements":[{"id":"R1","text":"exact ordered requirement","kind":"requirement"}],"authoritative_refs":["user:message-id"],"allow_read":["existing/path"]}
+Every requirement entry must include kind="requirement" | "negative" | "quality". Copy original_request.text byte-for-byte.
+Use only authoritative_refs and allow_read for begin intent scope. project_root, source_refs, max_read_prefixes,
+authoritative_references, and other aliases are invalid. Do not guess a smaller contract after rejection: use this exact
+shape, preserving all ordered requirements, and omit proposal_budget only when the deterministic host default is intended.
 Freeze product requirements from the original request, not extra implementation criteria invented from workflow
 bookkeeping. Keep proposal read/submission allowances in proposal_budget and host counters; do not turn spent
 budgets or your own reporting obligations into worker validation commands. Preserve any explicit user requirement.
@@ -336,6 +342,9 @@ When the prompt starts SORTIE_OPERATOR_PROPOSAL or the host supplies SORTIE_PROP
 perform only its bounded read investigation and submit the complete packet
 through ${profile.toolPrefix}submit_operator_proposal before returning; a prose-only return is forbidden. If it returns invalid-proposal,
 repair only the named code (using actual_reads for a budget estimate mismatch) within the finite submission budget.
+When OpenCode V2 exposes that profile tool through Code Mode, use the execute conduit only to call
+${profile.toolPrefix}submit_operator_proposal. Do not use execute for HTTP, another tool, filesystem access, or computation
+that bypasses this bounded proposal contract. Source inspection remains on the native Read tool.
 A successful status=submitted ends this investigation Task: return to the parent without further tools, even if a generic
 continuation asks for the next step. Submission is not execution admission; never call operator_next or dispatch a worker.
 For an admitted execution queue, call

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sortie-dogs",
-  "version": "0.10.8",
+  "version": "0.10.9",
   "description": "Bounded agent harness and validated orchestration loop plugin for OpenCode",
   "keywords": [
     "opencode",