sortie-dogs 0.15.2 → 0.15.3

package/README.md

@@ -19,8 +19,8 @@ evidence-backed result, not more agents for their own sake.
 [![Node.js](https://img.shields.io/node/v/sortie-dogs)](https://www.npmjs.com/package/sortie-dogs)
 [![MIT License](https://img.shields.io/npm/l/sortie-dogs)](LICENSE)
 
-**Current release: [v0.15.2](https://github.com/zufall-upon/Sortie-dogs/releases/tag/v0.15.2)**
-· [Release notes](docs/release-v0.15.2.md)
+**Current release: [v0.15.3](https://github.com/zufall-upon/Sortie-dogs/releases/tag/v0.15.3)**
+· [Release notes](docs/release-v0.15.3.md)
 · [Execution vision](docs/v0.14.0-execution-vision.md)
 
 [When to use](#when-to-use-sortie-dogs) · [Quick start](#quick-start) · [Workflow](#mission-workflow) · [Models](#default-models) ·
@@ -78,7 +78,7 @@ Use an existing Codex CLI signed in with **ChatGPT**. On Windows, PowerShell **7
 available; POSIX uses bash. Sortie does not install Codex, start login or use a metered API fallback.
 
 ```sh
-npm install --save-dev sortie-dogs@0.15.2
+npm install --save-dev sortie-dogs@0.15.3
 npx --no-install sortie-dogs codex init .
 ```
 
@@ -107,7 +107,7 @@ bridge. [Codex guide: SDK, permissions, progress, resume and manifest route](doc
 Use **OpenCode V2**. In the target project:
 
 ```sh
-npm install --save-dev sortie-dogs@0.15.2
+npm install --save-dev sortie-dogs@0.15.3
 npx --no-install sortie-dogs init .
 ```
 
@@ -127,7 +127,7 @@ v0.10 is installed. [OpenCode setup and configuration](docs/configuration.md) ·
 
 ### Project Memory (OpenCode v010, opt-in)
 
-With v0.15.2 installed, run `sortie-dogs memory on .` once and reload
+With v0.15.3 installed, run `sortie-dogs memory on .` once and reload
 the project plugin. Ordinary public turns then become pending sources; the existing
 Operator records semantic additions, corrections, withdrawals and decisions without
 another save request or a dedicated model call per turn. New sessions recall the
@@ -284,7 +284,7 @@ Install the desired package version and rerun **your host's** initializer:
 
 An OpenCode config-local bridge may resolve a separate package; npm-global update alone does not
 update it. [Global/update instructions](docs/configuration.md#global-availability).
-The current Mission asset marker is `0.15.2-tactical-return-v1`; the Codex skill marker is
+The current Mission asset marker is `0.15.3-external-review-links-v1`; the Codex skill marker is
 `0.14.6-codex-skill-v1`. Installed markers alone do not prove a running host reloaded the new version.
 
 There is no supported uninstall command. Remove the dependency and only known Sortie-owned paths;
@@ -300,6 +300,7 @@ follow the [manual removal guide](docs/uninstall.md), never delete the entire `.
   [SWE-bench history](docs/benchmarks/swebench-lite-history.md) · [Historical local case study](docs/benchmark-reference.md).
 - **Development:** [Testing](docs/testing.md) · [CLI testing](docs/cli-testing.md) ·
   [Windows tests](docs/windows-tests.md) · [Release routine](docs/release-batch.md).
+- **Current release:** [v0.15.3](docs/release-v0.15.3.md).
 - **Releases:** [v0.15.2](docs/release-v0.15.2.md) · [v0.15.1](docs/v0.15.1-migration.md) · [v0.15.0](docs/release-v0.15.0.md) · [v0.14.9](docs/release-v0.14.9.md) · [v0.14.8](docs/release-v0.14.8.md) · [v0.14.7](docs/release-v0.14.7.md) · [v0.14.6](docs/release-v0.14.6.md) · [v0.14.5](docs/release-v0.14.5.md) · [v0.14.4](docs/release-v0.14.4.md) · [v0.14.3](docs/release-v0.14.3.md) · [v0.14.2](docs/release-v0.14.2.md) · [v0.14.1](docs/release-v0.14.1.md) · [v0.14.0](docs/release-v0.14.0.md) · [v0.13.22](docs/release-v0.13.22.md) · [v0.13.21](docs/release-v0.13.21.md) · [v0.13.20](docs/release-v0.13.20.md) · [v0.13.19](docs/release-v0.13.19.md) · [v0.13.18](docs/release-v0.13.18.md) · [v0.13.17](docs/release-v0.13.17.md) · [v0.13.16](docs/release-v0.13.16.md) · [v0.13.15](docs/release-v0.13.15.md) · [v0.13.14](docs/release-v0.13.14.md) · [v0.13.13](docs/release-v0.13.13.md) · [v0.13.12](docs/release-v0.13.12.md) · [v0.13.11](docs/release-v0.13.11.md) · [v0.13.10](docs/release-v0.13.10.md) ·
   [v0.13.9](docs/release-v0.13.9.md) · [All GitHub releases](https://github.com/zufall-upon/Sortie-dogs/releases).
 

package/dist/asset-version.d.ts

@@ -3,6 +3,6 @@
  * installed project marker without importing every asset body.
  */
 export declare const RUNTIME_ASSET_VERSION = "0.3.89-completion-proof-v1";
-export declare const V010_RUNTIME_ASSET_VERSION = "0.15.2-tactical-return-v1";
+export declare const V010_RUNTIME_ASSET_VERSION = "0.15.3-external-review-links-v1";
 export declare const CODEX_SKILL_ASSET_VERSION = "0.14.6-codex-skill-v1";
 export type RuntimeAssetVersion = typeof RUNTIME_ASSET_VERSION | typeof V010_RUNTIME_ASSET_VERSION | typeof CODEX_SKILL_ASSET_VERSION;

package/dist/asset-version.js

@@ -3,5 +3,5 @@
  * installed project marker without importing every asset body.
  */
 export const RUNTIME_ASSET_VERSION = "0.3.89-completion-proof-v1";
-export const V010_RUNTIME_ASSET_VERSION = "0.15.2-tactical-return-v1";
+export const V010_RUNTIME_ASSET_VERSION = "0.15.3-external-review-links-v1";
 export const CODEX_SKILL_ASSET_VERSION = "0.14.6-codex-skill-v1";

package/dist/plugin/declared-artifacts.d.ts

@@ -3,6 +3,7 @@
  */
 export declare function declaredArtifacts(paths: readonly string[], previewLimit?: number, options?: {
     reportUnreadableDirectories?: boolean;
+    reportOutsideLinks?: boolean;
 }): Promise<{
     entries: (readonly [string, string, (string | undefined)?])[];
     excerpt: string;

package/dist/plugin/declared-artifacts.js

@@ -62,8 +62,22 @@ export async function declaredArtifacts(paths, previewLimit = 0, options = {}) {
                 return;
             }
             entries.push([label, `symlink:${target}`, canonical]);
-            if (!physical.some(root => within(root, canonical)))
-                throw new Error("declared-artifact-link-outside-scope");
+            if (!physical.some(root => within(root, canonical))) {
+                if (!options.reportOutsideLinks)
+                    throw new Error("declared-artifact-link-outside-scope");
+                // Review records the link entry, not authority to inspect its target. Keep the
+                // strict default for validation snapshots and never recurse beyond declared roots.
+                entries.push([label, "target-not-inspected:outside-scope", canonical]);
+                const notice = Buffer.from(`\n--- external symlink: ${label} ---\n${target}\n[target not inspected: outside declared scope]\n`);
+                const bounded = notice.subarray(0, remaining);
+                if (bounded.length) {
+                    excerpts.push(bounded.toString("utf8"));
+                    remaining -= bounded.length;
+                }
+                if (bounded.length < notice.length)
+                    truncated = true;
+                return;
+            }
             if (ancestors.has(canonical))
                 return; // The link identity is recorded; do not traverse cycles.
             await visit(canonical, ancestors);

package/dist/plugin/mission-review.js

@@ -761,6 +761,7 @@ export async function missionReviewSource(directory, run, evidence = [], baselin
         untracked.add(path);
     const omitted = [];
     const unreadable = [];
+    const outsideLinks = [];
     let diff = scopedDiff;
     if (repository && local.length && displayBaseline) {
         // HEAD-only diffs are empty once the author commits. Display the original mission delta
@@ -881,19 +882,25 @@ export async function missionReviewSource(directory, run, evidence = [], baselin
         // A declared write scope can also be a host-managed runtime directory (e.g. Docker's data root).
         // Do not make review depend on listing it; record the missing coverage instead. Protected
         // validation still requires readable outputs and does not use this review-only option.
-        const artifacts = await declaredArtifacts(external, Math.max(1, 24_000 - Buffer.byteLength(excerpt)), { reportUnreadableDirectories: true });
+        const artifacts = await declaredArtifacts(external, Math.max(1, 24_000 - Buffer.byteLength(excerpt)), { reportUnreadableDirectories: true, reportOutsideLinks: true });
         sourceUpdate(JSON.stringify(artifacts.entries));
         excerpt += artifacts.excerpt;
         if (artifacts.truncated)
             omitted.push("external artifacts");
         unreadable.push(...artifacts.unreadable);
+        outsideLinks.push(...artifacts.entries.filter(([, kind]) => kind === "target-not-inspected:outside-scope").map(([path]) => path));
     }
     const bytes = Buffer.from(excerpt);
     const truncatedSource = [...new Set(omitted)];
     if (bytes.length > 24_000 && truncatedSource.length === 0)
         truncatedSource.push("(source diff exceeds excerpt budget)");
+    // Missing coverage is not a clipped source preview: disclose it even after that
+    // budget is exhausted. Full link identities remain in the fingerprint above.
+    const outsideNotice = outsideLinks.length ? `\n[UNINSPECTED EXTERNAL LINK TARGETS: ${outsideLinks.length} link(s); outside declared artifact roots; ` +
+        `target contents not inspected or fingerprinted through these links. Link entries (first 20, clipped preview): ` +
+        `${Buffer.from(JSON.stringify(outsideLinks.slice(0, 20))).subarray(0, 2_000).toString("utf8")}]` : "";
     return { fingerprint: `sha256:${hash.digest("hex")}`, candidateFingerprint: `sha256:${candidateHash.digest("hex")}`, excerpt: (bytes.length > 24_000 ? bytes.subarray(0, 24_000).toString("utf8") : excerpt) +
             (truncatedSource.length ? `\n[EXCERPT TRUNCATED: ${truncatedSource.slice(0, 20).join(", ")}; Reviewer can read/search the relevant source directly]` : "") +
-            (unreadable.length ? `\n[UNINSPECTED EXTERNAL DIRECTORIES: ${unreadable.slice(0, 20).join(", ")}; select specific result files as review evidence]` : ""),
+            (unreadable.length ? `\n[UNINSPECTED EXTERNAL DIRECTORIES: ${unreadable.slice(0, 20).join(", ")}; select specific result files as review evidence]` : "") + outsideNotice,
         truncatedEvidence, truncatedSource };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sortie-dogs",
-  "version": "0.15.2",
+  "version": "0.15.3",
   "description": "Adaptive execution harness for OpenCode and Codex: goal retention, validation, review, and evidence-backed handoff",
   "keywords": [
     "opencode",