sortie-dogs 0.12.23 → 0.12.24

package/dist/asset-version.d.ts

@@ -3,5 +3,5 @@
  * installed project marker without importing every asset body.
  */
 export declare const RUNTIME_ASSET_VERSION = "0.3.89-completion-proof-v1";
-export declare const V010_RUNTIME_ASSET_VERSION = "0.12.23-mission-budget-recovery-v1";
+export declare const V010_RUNTIME_ASSET_VERSION = "0.12.24-review-evidence-recovery-v1";
 export type RuntimeAssetVersion = typeof RUNTIME_ASSET_VERSION | typeof V010_RUNTIME_ASSET_VERSION;

package/dist/asset-version.js

@@ -3,4 +3,4 @@
  * installed project marker without importing every asset body.
  */
 export const RUNTIME_ASSET_VERSION = "0.3.89-completion-proof-v1";
-export const V010_RUNTIME_ASSET_VERSION = "0.12.23-mission-budget-recovery-v1";
+export const V010_RUNTIME_ASSET_VERSION = "0.12.24-review-evidence-recovery-v1";

package/dist/plugin/declared-artifacts.d.ts

@@ -1,8 +1,11 @@
 /** Explicit external artifacts are filesystem inputs, not Git pathspecs. Stream complete bytes;
  * previews are bounded independently. Follow package links only inside a declared physical root.
  */
-export declare function declaredArtifacts(paths: readonly string[], previewLimit?: number): Promise<{
+export declare function declaredArtifacts(paths: readonly string[], previewLimit?: number, options?: {
+    reportUnreadableDirectories?: boolean;
+}): Promise<{
     entries: (readonly [string, string, (string | undefined)?])[];
     excerpt: string;
     truncated: boolean;
+    unreadable: string[];
 }>;

package/dist/plugin/declared-artifacts.js

@@ -9,7 +9,7 @@ const within = (root, path) => {
 /** Explicit external artifacts are filesystem inputs, not Git pathspecs. Stream complete bytes;
  * previews are bounded independently. Follow package links only inside a declared physical root.
  */
-export async function declaredArtifacts(paths, previewLimit = 0) {
+export async function declaredArtifacts(paths, previewLimit = 0, options = {}) {
     const roots = [...new Set(paths.map(path => resolve(path)))].sort();
     const physical = await Promise.all(roots.map(path => realpath(path).catch((error) => {
         if (error.code === "ENOENT")
@@ -18,6 +18,7 @@ export async function declaredArtifacts(paths, previewLimit = 0) {
     })));
     const entries = [];
     const excerpts = [];
+    const unreadable = [];
     let remaining = previewLimit, truncated = false;
     const visited = new Set();
     const visit = async (path, ancestors) => {
@@ -47,7 +48,26 @@ export async function declaredArtifacts(paths, previewLimit = 0) {
         if (metadata.isDirectory()) {
             entries.push([label, "directory", canonical]);
             const next = new Set([...ancestors, canonical]);
-            for (const child of (await readdir(path)).sort())
+            let children;
+            try {
+                children = await readdir(path);
+            }
+            catch (error) {
+                if (!options.reportUnreadableDirectories || !["EACCES", "EPERM"].includes(error.code ?? ""))
+                    throw error;
+                entries.push([label, `unreadable:${error.code}`, canonical]);
+                unreadable.push(label);
+                const notice = `\n--- external directory: ${label} ---\n[not inspected: permission denied; select specific result files as review evidence]\n`;
+                const bytes = Buffer.from(notice), bounded = bytes.subarray(0, remaining);
+                if (bounded.length) {
+                    excerpts.push(bounded.toString("utf8"));
+                    remaining -= bounded.length;
+                }
+                if (bounded.length < bytes.length)
+                    truncated = true;
+                return;
+            }
+            for (const child of children.sort())
                 await visit(join(path, child), next);
             return;
         }
@@ -76,5 +96,5 @@ export async function declaredArtifacts(paths, previewLimit = 0) {
     };
     for (const path of roots)
         await visit(path, new Set());
-    return { entries, excerpt: excerpts.join(""), truncated };
+    return { entries, excerpt: excerpts.join(""), truncated, unreadable };
 }

package/dist/plugin/mission-review.d.ts

@@ -13,4 +13,5 @@ export declare function completedMissionReviewPrompts(mission: OperatorMission |
 export declare function missionReviewSource(directory: string, run: OperatorState, evidence?: readonly MissionEvidenceExcerpt[], baseline?: string, priorScope?: MissionReviewScope): Promise<{
     fingerprint: string;
     excerpt: string;
+    truncatedEvidence: string[];
 }>;

package/dist/plugin/mission-review.js

@@ -214,9 +214,11 @@ export async function missionReviewSource(directory, run, evidence = [], baselin
         if (needsNotice[index])
             selected += truncated(item.entry);
     }
+    const truncatedEvidence = focused.flatMap(({ entry }, index) => needsNotice[index] ? [`${entry.path}:${entry.offset}`] : []);
     if (writes.length === 0)
         return { fingerprint: `sha256:${hash.digest("hex")}`,
-            excerpt: selected + "[Read-only units: no declared output files. Review the supplied observations, traces and validation evidence.]" };
+            excerpt: selected + "[Read-only units: no declared output files. Review the supplied observations, traces and validation evidence.]",
+            truncatedEvidence };
     // The shared dependency environment is local tooling, never reviewed or pinned source.
     const external = [], local = [];
     for (const path of writes) {
@@ -230,12 +232,15 @@ export async function missionReviewSource(directory, run, evidence = [], baselin
     const git = async (args) => (await exec("git", args, { cwd: directory, maxBuffer: 8 * 1024 * 1024 })).stdout;
     const names = local.length ? await git(["ls-files", "-z", "--cached", "--others", "--exclude-standard", "--", ...scopes]) : "";
     const untracked = new Set((local.length ? await git(["ls-files", "-z", "--others", "--exclude-standard", "--", ...scopes]) : "").split("\0").filter(Boolean));
-    // Explicitly declared outputs are review evidence even when gitignored (for example a probe
-    // JSON in _testenv). Their bytes must participate in staleness checks as well as the excerpt.
-    const ignored = local.length ? await git(["ls-files", "-z", "--others", "--ignored", "--exclude-standard", "--", ...scopes]) : "";
+    // Go's ignored in-project caches may be writable during validation but are not candidate
+    // output. Keep every other ignored declared output visible and fingerprinted, including
+    // directories of generated artifacts; focused references can still pin a cache file.
+    const ignored = local.length ? await git(["ls-files", "-z", "--others", "--ignored", "--exclude-standard", "--",
+        ...scopes, ...[".gocache", ".gomodcache", ".gopath"].map(path => `:(exclude)${path}`)]) : "";
     for (const path of ignored.split("\0").filter(Boolean))
         untracked.add(path);
     const omitted = [];
+    const unreadable = [];
     let diff = "";
     if (local.length && baseline) {
         // HEAD-only diffs are empty once the Worker commits. Show bounded changes from the
@@ -305,13 +310,19 @@ export async function missionReviewSource(directory, run, evidence = [], baselin
         }
     }
     if (external.length) {
-        const artifacts = await declaredArtifacts(external, Math.max(1, 24_000 - Buffer.byteLength(excerpt)));
+        // A declared write scope can also be a host-managed runtime directory (e.g. Docker's data root).
+        // Do not make review depend on listing it; record the missing coverage instead. Protected
+        // validation still requires readable outputs and does not use this review-only option.
+        const artifacts = await declaredArtifacts(external, Math.max(1, 24_000 - Buffer.byteLength(excerpt)), { reportUnreadableDirectories: true });
         hash.update(JSON.stringify(artifacts.entries));
         excerpt += artifacts.excerpt;
         if (artifacts.truncated)
             omitted.push("external artifacts");
+        unreadable.push(...artifacts.unreadable);
     }
     const bytes = Buffer.from(excerpt);
     return { fingerprint: `sha256:${hash.digest("hex")}`, excerpt: (bytes.length > 24_000 ? bytes.subarray(0, 24_000).toString("utf8") : excerpt) +
-            (bytes.length > 24_000 || omitted.length ? `\n[EXCERPT TRUNCATED: ${omitted.slice(0, 20).join(", ")}; supply focused traces for missing sections, not another implementation unit]` : "") };
+            (bytes.length > 24_000 || omitted.length ? `\n[EXCERPT TRUNCATED: ${omitted.slice(0, 20).join(", ")}; supply focused traces for missing sections, not another implementation unit]` : "") +
+            (unreadable.length ? `\n[UNINSPECTED EXTERNAL DIRECTORIES: ${unreadable.slice(0, 20).join(", ")}; select specific result files as review evidence]` : ""),
+        truncatedEvidence };
 }

package/dist/plugin/profiled.js

@@ -666,7 +666,7 @@ export function createProfiledPlugin(profile, assetVersion) {
             if (mission.phase === "submitted" && mission.submission?.status === "blocked" &&
                 run?.units.some(unit => unit.status === "running")) {
                 return { ...packet, next_action: `If the native Worker Task is still active, wait for it; do not start a duplicate. ` +
-                        `If its parent Task was interrupted and the user chose to stop/replan, Operator root (not Coordinator): ` +
+                        `If the parent Coordinator Task has finished or was interrupted, and the user chose to stop/replan, Operator root (not Coordinator): ` +
                         `call ${profile.toolPrefix}cancel_operator with reason=plain to stop owned children, then ` +
                         `${profile.toolPrefix}start_mission with intent=replace and the saved requirements. ` +
                         `Use the returned Coordinator Task; the previous Mission is archived and cumulative spend is retained.` };
@@ -1825,7 +1825,7 @@ export function createProfiledPlugin(profile, assetVersion) {
                     return declareMissionUnits(root, context.sessionID, mission, units, args.reason);
                 });
             } };
-        tools[reviewMission] = { description: "Coordinator: prepare the independent Reviewer task from current source, requirements and observed checks. Supply risk_tags (empty only for genuinely low risk) and concise criterion-level changed-code/test traces. Host supplies diff, IDs, manifest, mappings and evidence; keep candidate lineage across corrections. A low-risk skip is recorded, never inferred from a missing review.",
+        tools[reviewMission] = { description: "Coordinator: prepare the independent Reviewer task from current source, requirements and observed checks. Supply risk_tags (empty only for genuinely low risk) and concise criterion-level changed-code/test traces. Host supplies diff, IDs, manifest, mappings and evidence; if truncated_evidence is returned, narrow those ranges before dispatching the Reviewer. Keep candidate lineage across corrections. A low-risk skip is recorded, never inferred from a missing review.",
             args: { risk_tags: { type: "array", items: { type: "string", enum: SOURCE_REVIEW_RISK_TAGS } },
                 evidence: { type: "array", maxItems: 6, items: { type: "object", additionalProperties: false,
                         properties: { path: { type: "string" }, offset: { type: "integer", minimum: 1 }, limit: { type: "integer", minimum: 1, maximum: 200 } },
@@ -1881,7 +1881,10 @@ export function createProfiledPlugin(profile, assetVersion) {
                         ...(initialPrompt ? { initialPrompt } : {}),
                         ...(mission.review?.evidenceGapReviews ? { evidenceGapReviews: mission.review.evidenceGapReviews } : {}) };
                 });
-                return JSON.stringify(task ? { status: "review-required", task: missionReviewTask(reviewed) } : { status: "skipped-low-risk" });
+                return JSON.stringify(task ? { status: "review-required", task: missionReviewTask(reviewed),
+                    ...(source.truncatedEvidence.length ? { truncated_evidence: source.truncatedEvidence,
+                        next_action: "Narrow these focused evidence ranges with review_mission before dispatching the Reviewer; no Worker or new validation is needed." } : {}) }
+                    : { status: "skipped-low-risk" });
             } };
         async function assertMissionReview(root, mission) {
             const run = await operators.required(root), review = mission.review;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sortie-dogs",
-  "version": "0.12.23",
+  "version": "0.12.24",
   "description": "Bounded agent harness and validated orchestration loop plugin for OpenCode",
   "keywords": [
     "opencode",