mixdog 0.7.11 → 0.7.13

package/src/agent/orchestrator/tools/builtin/glob-walk.mjs

@@ -1,4 +1,4 @@
-import { readdirSync } from 'fs';
+import { readdir } from 'fs/promises';
 import { join } from 'path';
 
 // Glob-to-RegExp compiler for name filters used by find_files and the
@@ -125,21 +125,34 @@ export const NOISE_DIR_NAMES = new Set([
     '.gradle', 'coverage',
 ]);
 
+export const MAX_WALK_ENTRIES = 200_000;
+
 // Unified directory walk used by list / tree / find_files. The visitor
 // callback owns the "should I record this entry?" decision; returning
 // literal false aborts the whole walk.
 // `onWarn(dir, err)` (optional) is invoked for any readdir failure so
 // callers can surface skipped paths instead of silently dropping them.
-export function walkDir(root, { hidden = false, maxDepth = Infinity, visit, sort, excludeDirNames, onWarn } = {}) {
+export async function walkDir(root, { hidden = false, maxDepth = Infinity, visit, sort, excludeDirNames, onWarn, maxEntries = MAX_WALK_ENTRIES, signal } = {}) {
     // Windows filesystems are case-insensitive — match exclusion names the
     // same way so e.g. Node_Modules is pruned like node_modules.
     const _exclCI = process.platform === 'win32' && excludeDirNames && excludeDirNames.size > 0
         ? new Set([...excludeDirNames].map((n) => n.toLowerCase()))
         : null;
-    const _walk = (dir, depth) => {
+    let truncated = false;
+    const cap = maxEntries;
+    let entriesVisited = 0;
+    const _walk = async (dir, depth) => {
+        if (signal?.aborted) {
+            truncated = true;
+            return false;
+        }
+        if (entriesVisited >= cap) {
+            truncated = true;
+            return false;
+        }
         if (depth > maxDepth) return true;
         let entries;
-        try { entries = readdirSync(dir, { withFileTypes: true }); }
+        try { entries = await readdir(dir, { withFileTypes: true }); }
         catch (err) {
             if (typeof onWarn === 'function') {
                 try { onWarn(dir, err); } catch { /* warning sink must not abort */ }
@@ -155,16 +168,26 @@ export function walkDir(root, { hidden = false, maxDepth = Infinity, visit, sort
         if (sort) entries.sort(sort);
         const total = entries.length;
         for (let i = 0; i < total; i++) {
+            if (signal?.aborted) {
+                truncated = true;
+                return false;
+            }
+            if (entriesVisited >= cap) {
+                truncated = true;
+                return false;
+            }
+            entriesVisited += 1;
             const ent = entries[i];
             const entPath = join(dir, ent.name);
             const ctx = { depth, index: i, total, isLast: i === total - 1 };
             const cont = visit(ent, entPath, ctx);
             if (cont === false) return false;
             if (ent.isDirectory()) {
-                if (_walk(entPath, depth + 1) === false) return false;
+                if ((await _walk(entPath, depth + 1)) === false) return false;
             }
         }
         return true;
     };
-    _walk(root, 1);
+    await _walk(root, 1);
+    return { truncated, entriesVisited };
 }

package/src/agent/orchestrator/tools/builtin/list-tool.mjs

@@ -111,10 +111,11 @@ export async function executeListTool(args, workDir, options = {}) {
     // never hit either bound, so normal behavior is unchanged.
     let truncatedByCap = false;
     const walkDeadline = Date.now() + LIST_WALK_TIMEOUT_MS;
-    walkDir(fullPath, {
+    await walkDir(fullPath, {
         hidden,
         maxDepth: depth,
         excludeDirNames: includeNoise ? null : NOISE_DIR_NAMES,
+        signal: options.signal,
         visit: (ent, entPath) => {
             if (Date.now() > walkDeadline) { truncatedByCap = true; return false; }
             const isDir = ent.isDirectory();
@@ -235,10 +236,11 @@ export async function executeTreeTool(args, workDir, options = {}) {
     const lines = [`${normalizeOutputPath(fullPath)}/`];
     const prefixStack = [''];
     const TREE_BRANCH_LINE_CAP = 500;
-    walkDir(fullPath, {
+    await walkDir(fullPath, {
         hidden,
         maxDepth: depth,
         excludeDirNames: includeNoise ? null : NOISE_DIR_NAMES,
+        signal: options.signal,
         sort: (a, b) => {
             const ad = a.isDirectory(), bd = b.isDirectory();
             if (ad !== bd) return ad ? -1 : 1;
@@ -500,10 +502,11 @@ export async function executeFindFilesTool(args, workDir, options = {}) {
     if (!handledByRgFiles && useBatchedStat) {
         const candidates = [];
         const walkDeadline1 = Date.now() + FIND_WALK_TIMEOUT_MS;
-        walkDir(fullPath, {
+        await walkDir(fullPath, {
             hidden,
             maxDepth: depth ?? Infinity,
             excludeDirNames: includeNoise ? null : NOISE_DIR_NAMES,
+            signal: options.signal,
             visit: (ent, entPath) => {
                 if (Date.now() > walkDeadline1) { truncatedByCap = true; return false; }
                 const isDir = ent.isDirectory();
@@ -532,10 +535,11 @@ export async function executeFindFilesTool(args, workDir, options = {}) {
         const effectiveTypeFilter = sizeFiltered && typeFilter === 'any' ? 'file' : typeFilter;
         const candidates = [];
         const walkDeadline2 = Date.now() + FIND_WALK_TIMEOUT_MS;
-        walkDir(fullPath, {
+        await walkDir(fullPath, {
             hidden,
             maxDepth: depth ?? Infinity,
             excludeDirNames: includeNoise ? null : NOISE_DIR_NAMES,
+            signal: options.signal,
             visit: (ent, entPath) => {
                 if (Date.now() > walkDeadline2) { truncatedByCap = true; return false; }
                 const isDir = ent.isDirectory();

package/src/agent/orchestrator/tools/builtin/native-edit-runner.mjs

@@ -19,21 +19,35 @@ export function nativeEditMode() {
     return String(process.env.MIXDOG_EDIT_NATIVE || 'auto').toLowerCase();
 }
 
-export function nativeEditBinPath() {
+function nativeEditBinCandidate() {
     const override = process.env.MIXDOG_EDIT_NATIVE_BIN || process.env.MIXDOG_PATCH_NATIVE_BIN;
-    if (override) return override;
-    if (existsSync(NATIVE_EDIT_DEFAULT_BIN)) return NATIVE_EDIT_DEFAULT_BIN;
-    return findCachedPatchBinary(getPluginData()) || NATIVE_EDIT_DEFAULT_BIN;
+    if (override) return { path: override, kind: 'override' };
+    if (existsSync(NATIVE_EDIT_DEFAULT_BIN)) return { path: NATIVE_EDIT_DEFAULT_BIN, kind: 'local' };
+    const cached = findCachedPatchBinary(getPluginData());
+    if (cached) return { path: cached, kind: 'cached' };
+    return { path: NATIVE_EDIT_DEFAULT_BIN, kind: 'missing' };
+}
+
+export function nativeEditBinPath() {
+    return nativeEditBinCandidate().path;
 }
 
 export function nativeEditShouldAttempt({ editSnapshot, oldStr, newStr, preloadedContent, preloadedRawBuf }) {
     const mode = nativeEditMode();
     if (/^(0|false|no|off|js|legacy)$/i.test(mode)) return false;
-    if (!existsSync(nativeEditBinPath())) return false;
+    const forcedNative = /^(1|true|yes|on|native)$/i.test(mode);
+    const candidate = nativeEditBinCandidate();
+    if (!existsSync(candidate.path)) return false;
+    // Cached release prebuilds are guaranteed valid for apply_patch, but older
+    // manifests (currently v0.6.5 in clean CI) predate the EDIT server protocol.
+    // In auto mode, native edit is only an acceleration, so require either a
+    // local cargo build or an explicit override. If a user forces native mode,
+    // still try the cached binary and surface any protocol failure.
+    if (candidate.kind === 'cached' && !forcedNative) return false;
     if (!snapshotCoversFullFile(editSnapshot)) return false;
     if (preloadedContent !== null || preloadedRawBuf !== null) return false;
     if (typeof oldStr !== 'string' || oldStr.length === 0 || typeof newStr !== 'string') return false;
-    if (/^(1|true|yes|on|native)$/i.test(mode)) return true;
+    if (forcedNative) return true;
     // auto: the persistent server removed per-call spawn cost, so route edits to
     // native edit2 by default (B3). Same-size edits keep the JS in-place partial
     // write, which rewrites bytes in place instead of the whole file.
@@ -44,6 +58,7 @@ export function nativeEditShouldAttempt({ editSnapshot, oldStr, newStr, preloade
 }
 
 export async function runNativeExactEdit({ fullPath, oldStr, newStr, replaceAll, signal = null }) {
+    const forcedNative = /^(1|true|yes|on|native)$/i.test(nativeEditMode());
     if (signal?.aborted) {
         return { ok: false, fallback: false, error: signal.reason?.message || signal.reason || 'native edit aborted' };
     }
@@ -82,8 +97,14 @@ export async function runNativeExactEdit({ fullPath, oldStr, newStr, replaceAll,
         }
         const msg = String(err?.message || err);
         // Tier misses and not-found map to a JS fallback; transport/spawn errors
-        // also fall back so a server hiccup never blocks an edit.
-        const fallback = /old_string (?:not found|found \d+ times)|not valid UTF-8|no exact match|not found|server/i.test(msg);
+        // also fall back so a server hiccup never blocks an edit. Older cached
+        // mixdog-patch binaries (for example the v0.6.5 release prebuilds used
+        // by clean CI before a local cargo build exists) support APPLY but not
+        // the EDIT server protocol, and answer EDIT with the APPLY parser's
+        // "bad header" error. In auto mode that means "native edit unavailable",
+        // not "the edit is invalid", so fall through to the JS editor. When the
+        // user explicitly forces native mode, keep surfacing the native failure.
+        const fallback = !forcedNative && /old_string (?:not found|found \d+ times)|not valid UTF-8|no exact match|not found|server|bad header|bad edit header/i.test(msg);
         return { ok: false, fallback, error: msg };
     }
 }

package/src/agent/orchestrator/tools/builtin.mjs

@@ -361,6 +361,9 @@ function capToolOutput(result, options = {}) {
 }
 
 export async function executeBuiltinTool(name, args, cwd, options = {}) {
+    if (options.abortSignal && !options.signal) {
+        options = { ...options, signal: options.abortSignal };
+    }
     const toolName = canonicalizeBuiltinToolName(name);
     const argError = validateBuiltinArgs(toolName, args);
     if (argError) return argError;
@@ -414,9 +417,9 @@ export async function executeBuiltinTool(name, args, cwd, options = {}) {
         case 'list':
             return executeListTool(args, workDir, options);
         case 'tree':
-            return executeTreeTool(args, workDir);
+            return executeTreeTool(args, workDir, options);
         case 'find_files':
-            return executeFindFilesTool(args, workDir);
+            return executeFindFilesTool(args, workDir, options);
         case 'head':
             return executeHeadTool(args, workDir, readStateScope, _readModeHelpers);
         case 'tail':

package/src/agent/orchestrator/tools/cwd-tool.mjs

@@ -58,15 +58,14 @@ const PRUNED_DIR_NAMES = new Set([...NOISE_DIR_NAMES, ...EXTRA_NOISE_DIR_NAMES])
 
 let _listCache = null
 
-// Per-scan set used by the visitor to mark repos whose subtree must not
-// be descended. walkDir does not natively support "stop descent into
-// this dir but keep the walk going", so we approximate by checking
-// ancestry on every visit and bailing early when the entry lives under
-// a previously-recorded repo.
-const _recordedRepos = new Set()
-
-function _scanReposUnderFiltered(root) {
-  _recordedRepos.clear()
+async function _scanReposUnderFiltered(root, signal) {
+  // Per-scan set used by the visitor to mark repos whose subtree must not be
+  // descended. walkDir does not natively support "stop descent into this dir
+  // but keep the walk going", so we approximate by checking ancestry on every
+  // visit and bailing early when the entry lives under a previously-recorded
+  // repo. MUST be local per-call: walkDir is async, so a module-global set
+  // would race across concurrent/background scans suspended in `await readdir`.
+  const recordedRepos = new Set()
   const repos = []
   if (!root || !existsSync(root)) return repos
   try {
@@ -79,17 +78,18 @@ function _scanReposUnderFiltered(root) {
     return repos
   }
 
-  walkDir(root, {
+  await walkDir(root, {
     hidden: true,
     maxDepth: 4,
     excludeDirNames: PRUNED_DIR_NAMES,
+    signal,
     visit: (ent, entPath) => {
       if (!ent.isDirectory()) return
       // Skip subtree of a previously-recorded repo. walkDir invokes
       // visit before recursing, so flipping ent.isDirectory() here
       // would not stop descent. Instead, check ancestry on every
       // visit and bail early.
-      for (const recorded of _recordedRepos) {
+      for (const recorded of recordedRepos) {
         if (entPath === recorded || entPath.startsWith(recorded + '/') || entPath.startsWith(recorded + '\\')) {
           return
         }
@@ -97,7 +97,7 @@ function _scanReposUnderFiltered(root) {
       try {
         if (existsSync(`${entPath}/.git`)) {
           repos.push(entPath)
-          _recordedRepos.add(entPath)
+          recordedRepos.add(entPath)
         }
       } catch { /* ignore stat races */ }
     },
@@ -151,7 +151,7 @@ function _authoredByIdentity(repoPath, emails) {
   }
 }
 
-function _buildRepoList(includeAll = false) {
+async function _buildRepoList(includeAll = false, signal) {
   const cfg = _cwdConfig()
   const user = rawUserCwd()
   const roots = []
@@ -169,7 +169,7 @@ function _buildRepoList(includeAll = false) {
 
   const repoSet = new Map() // canonical → original path
   for (const root of roots) {
-    for (const repo of _scanReposUnderFiltered(root)) {
+    for (const repo of await _scanReposUnderFiltered(root, signal)) {
       const key = _canonicalSessionCwd(repo)
       if (!repoSet.has(key)) repoSet.set(key, repo)
     }
@@ -257,9 +257,9 @@ export async function executeCwdTool(name, args, callerCwd, opts = {}) {
   if (action === 'list') {
     // `all:true` bypasses the owned-project filter and transient prune — a
     // raw scan of every .git repo under the roots. Not cached (rare).
-    if (args?.all === true) return _formatList(_buildRepoList(true))
+    if (args?.all === true) return _formatList(await _buildRepoList(true, opts.signal))
     if (args?.refresh === true) _listCache = null
-    if (!_listCache) _listCache = _buildRepoList(false)
+    if (!_listCache) _listCache = await _buildRepoList(false, opts.signal)
     return _formatList(_listCache)
   }
 
@@ -293,6 +293,6 @@ export const CWD_TOOL_DEFS = [
 // and unref'd so it never blocks startup or keeps the process alive.
 try {
   setTimeout(() => {
-    try { if (!_listCache) _listCache = _buildRepoList(false) } catch { /* best-effort */ }
+    try { if (!_listCache) _buildRepoList(false).then((r) => { _listCache = r }) } catch { /* best-effort */ }
   }, 1000).unref?.()
 } catch { /* environments without setTimeout */ }

package/src/agent/orchestrator/tools/graph-manifest.json

@@ -1,26 +1,26 @@
 {
-  "version": "0.6.5",
+  "version": "0.7.13",
   "_comment": "Rewritten by .github/workflows/graph-release.yml on each tagged release. assets maps platformKey (process.platform-process.arch, e.g. win32-x64, linux-x64, darwin-arm64) to { url, sha256 } of the mixdog-graph binary on the GitHub release. A local cargo build under native/mixdog-graph/target/release always takes precedence at runtime. (v0.5.236 entries were filled manually after CI's commit step hit detached HEAD; the workflow now checks out ref: main so future releases self-update.)",
   "assets": {
     "darwin-arm64": {
-      "url": "https://github.com/trib-plugin/mixdog/releases/download/v0.6.5/mixdog-graph-darwin-arm64",
-      "sha256": "7016c273a07d19ca9e2f56e8fa7f273fdd40fc41bdc7fef206bf23e31a21a736"
+      "url": "https://github.com/trib-plugin/mixdog/releases/download/v0.7.13/mixdog-graph-darwin-arm64",
+      "sha256": "75bfdd200b2f8553b72dc877ec2637208f581800083d1ee5f9caf33f87792bf7"
     },
     "darwin-x64": {
-      "url": "https://github.com/trib-plugin/mixdog/releases/download/v0.6.5/mixdog-graph-darwin-x64",
-      "sha256": "d076e97da4420f49a6c726bc088a3321e2e7f6a9bfb32d39162c8c53045cfcdb"
+      "url": "https://github.com/trib-plugin/mixdog/releases/download/v0.7.13/mixdog-graph-darwin-x64",
+      "sha256": "04742fbb4cbe09bb76943f312ee129c05814543e7bc9d37e1241fb4e65b97137"
     },
     "linux-arm64": {
-      "url": "https://github.com/trib-plugin/mixdog/releases/download/v0.6.5/mixdog-graph-linux-arm64",
-      "sha256": "74754562b3c080868738c032c5b6e0e13bc53d7a5277002176b036f8d6681f39"
+      "url": "https://github.com/trib-plugin/mixdog/releases/download/v0.7.13/mixdog-graph-linux-arm64",
+      "sha256": "4b3edcd7be1ffec7184c48fe6bc7d6bce42f2ea67d4709f44d4402e6b48564f2"
     },
     "linux-x64": {
-      "url": "https://github.com/trib-plugin/mixdog/releases/download/v0.6.5/mixdog-graph-linux-x64",
-      "sha256": "0d8e8bbdd49b18746ed3f972fc3719731a1143ee03ac9e6d86586788b0b431f8"
+      "url": "https://github.com/trib-plugin/mixdog/releases/download/v0.7.13/mixdog-graph-linux-x64",
+      "sha256": "4394bb7884a8706dd6a4eea55f8755c76ba584cd02248863802d94acc3e1413c"
     },
     "win32-x64": {
-      "url": "https://github.com/trib-plugin/mixdog/releases/download/v0.6.5/mixdog-graph-win32-x64.exe",
-      "sha256": "1a671558e5a5f13c7429ff9987a46ad72a71e52241e200d2da820a13d7cbdae7"
+      "url": "https://github.com/trib-plugin/mixdog/releases/download/v0.7.13/mixdog-graph-win32-x64.exe",
+      "sha256": "2acf1fc9040cfc78a643daa477b15c8eaa0f520fd8addd1cf6f2f8cddd5c914c"
     }
   }
 }

package/src/agent/orchestrator/tools/patch-manifest.json

@@ -1,26 +1,26 @@
 {
-  "version": "0.6.5",
+  "version": "0.7.13",
   "_comment": "Rewritten by .github/workflows/patch-release.yml on each tagged release. assets maps platformKey (process.platform-process.arch, e.g. win32-x64, linux-x64, darwin-arm64) to { url, sha256 } of the mixdog-patch binary on the GitHub release. A local cargo build under native/mixdog-patch/target/release always takes precedence; otherwise the binary is fetched per this manifest into the data dir (apply is native-only — no JS apply engine).",
   "assets": {
     "darwin-arm64": {
-      "url": "https://github.com/trib-plugin/mixdog/releases/download/v0.6.5/mixdog-patch-darwin-arm64",
-      "sha256": "d37afb583cd597a9599ea9feac76a853d215ffaadc2bb2b54cf71ef28848f7ae"
+      "url": "https://github.com/trib-plugin/mixdog/releases/download/v0.7.13/mixdog-patch-darwin-arm64",
+      "sha256": "836a0b60a443b0a6a8c1bbe24d15a79ed70ee92c2f0fbc05374c4e9ed2536415"
     },
     "darwin-x64": {
-      "url": "https://github.com/trib-plugin/mixdog/releases/download/v0.6.5/mixdog-patch-darwin-x64",
-      "sha256": "bc4dad6a7fdc2fcdfceb850bcaae43757ae304740ca503be955eb57cf8cd07e3"
+      "url": "https://github.com/trib-plugin/mixdog/releases/download/v0.7.13/mixdog-patch-darwin-x64",
+      "sha256": "cab10c4e1e8b72d3958241dffdff764712ed74f4861d105bafa8258961215c98"
     },
     "linux-arm64": {
-      "url": "https://github.com/trib-plugin/mixdog/releases/download/v0.6.5/mixdog-patch-linux-arm64",
-      "sha256": "ebe3fd45aaed0f383f7b7940733fd141dd0b93c4c44e08fbffab10a3e43b788c"
+      "url": "https://github.com/trib-plugin/mixdog/releases/download/v0.7.13/mixdog-patch-linux-arm64",
+      "sha256": "a90c32ce3417a7d853f2723f82f3613cf2cd030fe885cf710cfc9f8e4b193264"
     },
     "linux-x64": {
-      "url": "https://github.com/trib-plugin/mixdog/releases/download/v0.6.5/mixdog-patch-linux-x64",
-      "sha256": "627289a3b5c0156bc299d4ff7563e4e4536a5a5bf6329e7c9151e811c795928f"
+      "url": "https://github.com/trib-plugin/mixdog/releases/download/v0.7.13/mixdog-patch-linux-x64",
+      "sha256": "0fea40ab98acd35bfb47515756024d1882a2abbaddce8a0b51642d20ac405577"
     },
     "win32-x64": {
-      "url": "https://github.com/trib-plugin/mixdog/releases/download/v0.6.5/mixdog-patch-win32-x64.exe",
-      "sha256": "4282546719a8c149597d3afe21eaf31aab3079a371876bf7f91ff0bccbe316b2"
+      "url": "https://github.com/trib-plugin/mixdog/releases/download/v0.7.13/mixdog-patch-win32-x64.exe",
+      "sha256": "24b3c2b2b95a2e3b15e0e089ca41297056be7c12df8c4c7524fa91a4833b1f68"
     }
   }
 }

package/src/agent/tool-defs.mjs

@@ -18,7 +18,7 @@ export const TOOL_DEFS = [
     title: 'Explore',
     aiWrapped: true,
     annotations: { title: 'Explore', readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: false },
-    description: 'Read-only codebase EXPLORATION — fact-finding only: locate/map where and how things are implemented, for open-ended/unknown scope (for a known or partial identifier use code_graph; recall=memory, search=web). NOT a reviewer/auditor: explorers LOCATE and DESCRIBE code, never judge it — bug/quality/risk claims in explore output are UNVERIFIED leads; verify them (reviewer role or direct reads) before acting on or reporting them. Shape every query as a LOCATION/INVENTORY question ("where is X handled", "which files implement Y", "what does Z read/write") — NEVER a verdict question ("is X correct/missing/inconsistent?", "are there gaps/bugs?"); the judgment stays with the caller, applied to the coordinates explore returns. Query shaping (one-line, one topic per item, decompose a multi-part brief) is specified on the query parameter — follow it. Fan-out runs items in parallel; wall-clock = the slowest item. LEAD: default background:true (answer pushed via channel, avoids the 120s sync cap). BRIDGE WORKERS run it sync and SHOULD prefer it for a tree-wide enumeration or broad/unanchored exploration — ONE call offloads the whole sweep into a sub-agent instead of a long grep/code_graph storm; a bounded/known-anchor lookup stays a direct code_graph/grep call.',
+    description: 'Read-only codebase EXPLORATION — fact-finding only: locate/map where and how things are implemented, for open-ended/unknown scope (for a known or partial identifier use code_graph; recall=memory, search=web). NOT a reviewer/auditor: explorers LOCATE and DESCRIBE code, never judge it — bug/quality/risk claims in explore output are UNVERIFIED leads; verify them (reviewer role or direct reads) before acting on or reporting them. Shape every query as a LOCATION/INVENTORY question ("where is X handled", "which files implement Y", "what does Z read/write") — NEVER a verdict question ("is X correct/missing/inconsistent?", "are there gaps/bugs?"); the judgment stays with the caller, applied to the coordinates explore returns. Query shaping rules are on the query parameter — follow them. Fan-out runs items in parallel; wall-clock = the slowest item. LEAD: default background:true (answer pushed via channel, avoids the 120s sync cap). BRIDGE WORKERS run it sync and SHOULD prefer it for a tree-wide enumeration or broad/unanchored exploration — ONE call offloads the whole sweep into a sub-agent instead of a long grep/code_graph storm; a bounded/known-anchor lookup stays a direct code_graph/grep call.',
     inputSchema: {
       type: 'object',
       properties: {

package/src/channels/index.mjs

@@ -183,10 +183,18 @@ const _bootLogEarly = path.join(
   process.env.CLAUDE_PLUGIN_DATA || path.join(os.tmpdir(), "mixdog"),
   "boot.log"
 );
+const {
+  isMixdogDebugEnabled: isMixdogDebug,
+  pruneStalePluginDataLogSiblings,
+  appendSessionStartCriticalLog,
+  DEFAULT_STALE_LOG_SIBLING_MAX,
+} = _require("../../lib/mixdog-debug.cjs");
 // One-shot log rotation at worker boot (10 MB threshold, .1 suffix overwrite).
-try { if (fs.statSync(_bootLogEarly).size > 10 * 1024 * 1024) fs.renameSync(_bootLogEarly, _bootLogEarly + '.1') } catch {}
-fs.appendFileSync(_bootLogEarly, `[${localTimestamp()}] bootstrap start pid=${process.pid}
+if (isMixdogDebug()) {
+  try { if (fs.statSync(_bootLogEarly).size > 10 * 1024 * 1024) fs.renameSync(_bootLogEarly, _bootLogEarly + '.1') } catch {}
+  fs.appendFileSync(_bootLogEarly, `[${localTimestamp()}] bootstrap start pid=${process.pid}
 `);
+}
 const _bootLog = path.join(DATA_DIR, "boot.log");
 let config = loadConfig();
 let backend = createBackend(config);
@@ -238,6 +246,11 @@ try {
     try { if (_now - fs.statSync(_p).mtimeMs > _STALE_SESSION_TTL_MS) fs.unlinkSync(_p); } catch {}
   }
 } catch {}
+// Count-based cap: drop oldest *.log siblings when plugin-data accumulates
+// hundreds of per-process files (doctor warns above 300).
+try {
+  pruneStalePluginDataLogSiblings(DATA_DIR, DEFAULT_STALE_LOG_SIBLING_MAX);
+} catch {}
 
 // ── Buffered drop-trace writer (channels/index) ──────────────────────────────
 // Flushes every 1 s OR when buffer reaches 64 KB — whichever fires first.
@@ -2030,8 +2043,12 @@ backend.onInteraction = (interaction) => {
     const [, uuid, action] = match;
     const access = config.access;
     if (!access) {
-      fs.appendFileSync(_bootLog, `[${localTimestamp()}] perm interaction dropped: no access config
-`);
+      const _permDropLine = `[${localTimestamp()}] perm interaction dropped: no access config\n`;
+      if (isMixdogDebug()) {
+        fs.appendFileSync(_bootLog, _permDropLine);
+      } else {
+        appendSessionStartCriticalLog(DATA_DIR, `[channels] ${_permDropLine}`);
+      }
       return;
     }
     if (access.allowFrom?.length > 0 && !access.allowFrom.includes(interaction.userId)) {
@@ -2566,7 +2583,18 @@ async function handleToolCall(name, args, signal) {
         }
       case "reload_config": {
           await reloadRuntimeConfig();
-          result = { content: [{ type: "text", text: "config reloaded \u2014 schedules, webhooks, and events re-registered" }] };
+          // Extend reload to the agent module so providers/presets/maintenance
+          // hot-reload on the same call (dynamic import: agent/index.mjs does not
+          // import channels, so this stays acyclic and tolerant of load order).
+          let agentReloadMsg = "";
+          try {
+            const { reloadAgentConfig } = await import("../agent/index.mjs");
+            await reloadAgentConfig("reload_config tool");
+            agentReloadMsg = ", agent providers/presets/maintenance";
+          } catch (err) {
+            process.stderr.write(`[reload_config] agent reload failed: ${err?.message || String(err)}\n`);
+          }
+          result = { content: [{ type: "text", text: `config reloaded — schedules, webhooks, events${agentReloadMsg} re-registered` }] };
           break;
         }
       case "inject_command": {
@@ -3016,12 +3044,14 @@ async function stop() {
     return false;
   };
   _channelFlagDetected = detectChannelFlag();
-  fs.appendFileSync(_bootLog, `[${localTimestamp()}] channelFlag: ${_channelFlagDetected}
-`);
+  if (isMixdogDebug()) {
+    fs.appendFileSync(_bootLog, `[${localTimestamp()}] channelFlag: ${_channelFlagDetected}\n`);
+    if (_channelFlagDetected) {
+      fs.appendFileSync(_bootLog, `[${localTimestamp()}] channel mode detected — bridge auto-activated\n`);
+    }
+  }
   if (_channelFlagDetected) {
     channelBridgeActive = true;
-    fs.appendFileSync(_bootLog, `[${localTimestamp()}] channel mode detected \u2014 bridge auto-activated
-`);
   }
   writeBridgeState(channelBridgeActive);
   const previousOwner = readActiveInstance();

package/src/channels/lib/event-queue.mjs

@@ -1,4 +1,4 @@
-import { readdirSync, readFileSync, existsSync as fsExistsSync } from "fs";
+import { readdirSync, readFileSync, existsSync as fsExistsSync, statSync, unlinkSync } from "fs";
 import { join } from "path";
 import { DATA_DIR } from "./config.mjs";
 import { ensureDir } from "./state-file.mjs";
@@ -7,6 +7,27 @@ import { renameWithRetrySync, writeJsonAtomicSync } from "../../shared/atomic-fi
 const QUEUE_DIR = join(DATA_DIR, "events", "queue");
 const IN_PROGRESS_DIR = join(DATA_DIR, "events", "in-progress");
 const PROCESSED_DIR = join(DATA_DIR, "events", "processed");
+const PROCESSED_DIR_MAX_ENTRIES = 200;
+function pruneProcessedDir() {
+  try {
+    if (!fsExistsSync(PROCESSED_DIR)) return;
+    const names = readdirSync(PROCESSED_DIR);
+    if (names.length <= PROCESSED_DIR_MAX_ENTRIES) return;
+    const ranked = [];
+    for (const name of names) {
+      try {
+        const st = statSync(join(PROCESSED_DIR, name));
+        ranked.push({ name, mtime: st.mtimeMs });
+      } catch {}
+    }
+    ranked.sort((a, b) => b.mtime - a.mtime);
+    for (let i = PROCESSED_DIR_MAX_ENTRIES; i < ranked.length; i++) {
+      try {
+        unlinkSync(join(PROCESSED_DIR, ranked[i].name));
+      } catch {}
+    }
+  } catch {}
+}
 function finiteInt(value, { min, max, def }) {
   const n = Number(value);
   if (!Number.isFinite(n)) return def;
@@ -290,6 +311,7 @@ ${p.item.prompt}`).join("\n\n")}`;
       const fromQueue = join(QUEUE_DIR, file);
       const src = this.existsSync(fromInProgress) ? fromInProgress : fromQueue;
       renameWithRetrySync(src, join(PROCESSED_DIR, `${status}-${file}`));
+      pruneProcessedDir();
     } catch {
     }
   }
@@ -297,6 +319,7 @@ ${p.item.prompt}`).join("\n\n")}`;
     try {
       ensureDir(PROCESSED_DIR);
       renameWithRetrySync(join(IN_PROGRESS_DIR, file), join(PROCESSED_DIR, `${status}-${file}`));
+      pruneProcessedDir();
     } catch {
     }
   }

package/src/channels/lib/hook-pipe-server.mjs

@@ -24,6 +24,11 @@ import { request as httpsRequest } from 'node:https'
 import { createRequire } from 'node:module'
 
 const moduleRequire = createRequire(import.meta.url)
+const {
+  isMixdogDebugEnabled,
+  pruneStalePluginDataLogSiblings,
+  DEFAULT_STALE_LOG_SIBLING_MAX,
+} = moduleRequire('../../../lib/mixdog-debug.cjs')
 
 // IPC transport path. Windows uses a named pipe (`\\.\pipe\…`); Unix uses a
 // Unix domain socket under XDG_RUNTIME_DIR (or /tmp as fallback). Node's
@@ -57,9 +62,13 @@ const POLL_INTERVAL_MS = 2000
 const SUBAGENT_TIMEOUT_MS = 120_000
 const DEFAULT_DISPATCH_TIMEOUT_MS = 15_000
 const SESSION_START_MEMORY_DISPATCH_TIMEOUT_MS = 125_000
-const SESSION_START_TRACE_ENABLED =
-  process.env.MIXDOG_DEBUG_SESSION_START === '1' ||
-  process.env.MIXDOG_DEBUG_SESSION_START === 'true'
+const MIXDOG_DEBUG_ENABLED = isMixdogDebugEnabled()
+let _hookPipeLogsPruned = false
+
+function hookPipeDebugStderr(line) {
+  if (!MIXDOG_DEBUG_ENABLED) return
+  try { process.stderr.write(line) } catch {}
+}
 
 let _started = false
 let _server = null
@@ -82,13 +91,17 @@ function formatError(err) {
 }
 
 function traceSessionStart(message) {
-  if (!SESSION_START_TRACE_ENABLED) return
+  if (!MIXDOG_DEBUG_ENABLED) return
   const line = `[${new Date().toISOString()}] [hook-pipe][session-start] ${message}\n`
   try { process.stderr.write(line) } catch {}
   try {
     const dataDir = process.env.CLAUDE_PLUGIN_DATA ||
       join(homedir(), '.claude', 'plugins', 'data', 'mixdog-trib-plugin')
     mkdirSync(dataDir, { recursive: true })
+    if (!_hookPipeLogsPruned) {
+      _hookPipeLogsPruned = true
+      pruneStalePluginDataLogSiblings(dataDir, DEFAULT_STALE_LOG_SIBLING_MAX)
+    }
     appendFileSync(join(dataDir, 'session-start.log'), line)
   } catch {}
 }
@@ -320,10 +333,10 @@ async function handlePreToolSubagent(payload) {
   }
   const route = routeMod.shouldRoutePermissionToDiscord()
   if (route.route !== 'discord') {
-    process.stderr.write(`[hook-pipe] pre-tool-subagent discord-route=off agent=${agentIdRaw || 'unknown'} tool=${toolName} reason=${route.reason || 'inactive'}\n`)
+    hookPipeDebugStderr(`[hook-pipe] pre-tool-subagent discord-route=off agent=${agentIdRaw || 'unknown'} tool=${toolName} reason=${route.reason || 'inactive'}\n`)
     return null
   }
-  process.stderr.write(`[hook-pipe] pre-tool-subagent discord-route=on agent=${agentIdRaw || 'unknown'} tool=${toolName}\n`)
+  hookPipeDebugStderr(`[hook-pipe] pre-tool-subagent discord-route=on agent=${agentIdRaw || 'unknown'} tool=${toolName}\n`)
 
   let getDiscordToken
   try {
@@ -715,7 +728,7 @@ export function startHookPipeServer() {
   _server.on('error', (err) => {
     const msg = String(err?.message || err || '')
     if (err?.code === 'EADDRINUSE' || msg.includes('EADDRINUSE') || msg.includes('Failed to listen')) {
-      process.stderr.write(`[hook-pipe] ${PIPE_PATH} already owned by a peer daemon; standby for hook IPC\n`)
+      hookPipeDebugStderr(`[hook-pipe] ${PIPE_PATH} already owned by a peer daemon; standby for hook IPC\n`)
       _server = null
       _started = false
       return
@@ -727,7 +740,7 @@ export function startHookPipeServer() {
     try {
       _server.listen(PIPE_PATH, () => {
         _started = true
-        process.stderr.write(`[hook-pipe] listening on ${PIPE_PATH}\n`)
+        hookPipeDebugStderr(`[hook-pipe] listening on ${PIPE_PATH}\n`)
       })
     } catch (err) {
       process.stderr.write(`[hook-pipe] listen failed: ${err?.message || err}\n`)