mixdog 0.7.17 → 0.8.0

package/src/agent/orchestrator/tools/graph-binary-fetcher.mjs

@@ -1,154 +0,0 @@
-// graph-binary-fetcher.mjs — fetches the prebuilt mixdog-graph native binary
-// from the GitHub release manifest. The code graph has NO JS parse fallback,
-// so the binary is required; ensureGraphBinary downloads + sha256-verifies it
-// on first use and caches it under <dataDir>/graph-bin/. Mirrors the runtime
-// fetcher pattern (memory/lib/runtime-fetcher.mjs) but for a single binary —
-// no tar extraction.
-//
-// Public API:
-//   ensureGraphBinary(dataDir) -> absolute path to the verified binary.
-//     Throws if no asset matches the platform, or download/verify fails.
-//   findCachedGraphBinary(dataDir) -> path | null (sync, no network).
-
-import { createHash } from 'node:crypto';
-import {
-  chmodSync, createWriteStream, existsSync, mkdirSync,
-  readFileSync, readdirSync, renameSync, rmSync,
-} from 'node:fs';
-import { readFile } from 'node:fs/promises';
-import { join } from 'node:path';
-import { fileURLToPath } from 'node:url';
-import { pipeline } from 'node:stream/promises';
-
-// Bundled fallback manifest shipped with the plugin. CI rewrites this on each
-// release with the per-platform asset URLs + sha256.
-const BUNDLED_MANIFEST_PATH = fileURLToPath(new URL('./graph-manifest.json', import.meta.url));
-
-// GitHub raw fallback — only consulted when neither cached nor bundled exists.
-const MANIFEST_URL = 'https://raw.githubusercontent.com/trib-plugin/mixdog/main/src/agent/orchestrator/tools/graph-manifest.json';
-
-function binSuffix() {
-  return process.platform === 'win32' ? '.exe' : '';
-}
-
-function platformKey() {
-  const os = process.platform === 'win32' ? 'win32' : process.platform;
-  return `${os}-${process.arch}`;
-}
-
-function graphBinDir(dataDir) {
-  return join(dataDir, 'graph-bin');
-}
-
-async function loadManifest(dataDir) {
-  const cached = join(graphBinDir(dataDir), 'manifest.json');
-  if (existsSync(cached)) {
-    try { return JSON.parse(readFileSync(cached, 'utf8')); } catch { /* fall through */ }
-  }
-  if (existsSync(BUNDLED_MANIFEST_PATH)) {
-    return JSON.parse(readFileSync(BUNDLED_MANIFEST_PATH, 'utf8'));
-  }
-  const res = await fetch(MANIFEST_URL, { signal: AbortSignal.timeout(30_000) });
-  if (!res.ok) throw new Error(`[graph-fetcher] manifest fetch failed: ${res.status} ${res.statusText}`);
-  return res.json();
-}
-
-async function sha256File(filePath) {
-  return createHash('sha256').update(await readFile(filePath)).digest('hex');
-}
-
-async function downloadWithRetry(url, destPath) {
-  // 4 attempts total (1 + 3 retries); backoff 1s/3s/9s. 4xx is terminal.
-  const delays = [1000, 3000, 9000];
-  let lastErr;
-  for (let attempt = 0; attempt < 4; attempt++) {
-    try {
-      const res = await fetch(url, { signal: AbortSignal.timeout(180_000) });
-      if (res.status >= 400 && res.status < 500) {
-        throw new Error(`[graph-fetcher] asset HTTP ${res.status} (terminal) — ${url}`);
-      }
-      if (!res.ok) throw new Error(`[graph-fetcher] asset HTTP ${res.status} — ${url}`);
-      await pipeline(res.body, createWriteStream(destPath));
-      return;
-    } catch (err) {
-      lastErr = err;
-      if (String(err?.message || '').includes('(terminal)')) throw err;
-      if (attempt < 3) {
-        process.stderr.write(`[graph-fetcher] download attempt ${attempt + 1} failed (${err?.message}), retrying in ${delays[attempt]}ms…\n`);
-        await new Promise((r) => setTimeout(r, delays[attempt]));
-      }
-    }
-  }
-  throw lastErr;
-}
-
-// Remove stale binaries + tmp files, keeping the active one.
-function gcGraphBin(dir, keepFile) {
-  try {
-    for (const name of readdirSync(dir)) {
-      if (name === 'manifest.json' || name === keepFile) continue;
-      if (name.startsWith('mixdog-graph')) {
-        try { rmSync(join(dir, name), { force: true }); } catch { /* best-effort */ }
-      }
-    }
-  } catch { /* dir may not exist yet */ }
-}
-
-// Sync, network-free lookup of an already-cached binary. Used by the sync
-// _graphBinaryPath() resolver before falling back to an async fetch.
-export function findCachedGraphBinary(dataDir) {
-  try {
-    const dir = graphBinDir(dataDir);
-    const hit = readdirSync(dir).find(
-      (n) => n.startsWith('mixdog-graph') && !n.endsWith('.json') && !n.includes('.tmp-'),
-    );
-    return hit ? join(dir, hit) : null;
-  } catch {
-    return null;
-  }
-}
-
-let _inflight = null;
-
-export function ensureGraphBinary(dataDir) {
-  // Single-flight: concurrent callers (prewarm + cache-miss) share one download.
-  if (_inflight) return _inflight;
-  _inflight = (async () => {
-    const manifest = await loadManifest(dataDir);
-    const pkey = platformKey();
-    const asset = manifest.assets?.[pkey];
-    if (!asset || !asset.url || !asset.sha256) {
-      // Unsupported platform/arch (e.g. win32-arm64): the manifest has no
-      // downloadable asset for this {os}-{arch}. The code graph has NO JS
-      // parsing fallback, so this is terminal — surface a single clear,
-      // actionable message instead of a cryptic crash downstream.
-      const supported = Object.keys(manifest.assets || {}).join(', ') || '(none)';
-      throw new Error(
-        `[graph-fetcher] no prebuilt mixdog-graph binary for platform ${pkey} `
-        + `(unsupported platform/arch — there is no JS parsing fallback). `
-        + `Supported platforms: ${supported}. `
-        + `Build it locally: cargo build --release in native/mixdog-graph.`,
-      );
-    }
-    const version = String(manifest.version || '0');
-    const dir = graphBinDir(dataDir);
-    mkdirSync(dir, { recursive: true });
-    const fileName = `mixdog-graph-${version}${binSuffix()}`;
-    const destPath = join(dir, fileName);
-    if (existsSync(destPath)) {
-      try { if (await sha256File(destPath) === asset.sha256) return destPath; } catch { /* re-download */ }
-    }
-    const tmpPath = `${destPath}.tmp-${process.pid}-${Date.now()}`;
-    await downloadWithRetry(asset.url, tmpPath);
-    const actual = await sha256File(tmpPath);
-    if (actual !== asset.sha256) {
-      try { rmSync(tmpPath, { force: true }); } catch { /* best-effort */ }
-      throw new Error(`[graph-fetcher] sha256 mismatch for ${pkey}: expected ${asset.sha256}, got ${actual}`);
-    }
-    renameSync(tmpPath, destPath);
-    if (process.platform !== 'win32') { try { chmodSync(destPath, 0o755); } catch { /* best-effort */ } }
-    gcGraphBin(dir, fileName);
-    return destPath;
-  })().finally(() => { _inflight = null; });
-  return _inflight;
-}

package/src/agent/orchestrator/tools/graph-manifest.json

@@ -1,26 +0,0 @@
-{
-  "version": "0.7.17",
-  "_comment": "Rewritten by .github/workflows/graph-release.yml on each tagged release. assets maps platformKey (process.platform-process.arch, e.g. win32-x64, linux-x64, darwin-arm64) to { url, sha256 } of the mixdog-graph binary on the GitHub release. A local cargo build under native/mixdog-graph/target/release always takes precedence at runtime. (v0.5.236 entries were filled manually after CI's commit step hit detached HEAD; the workflow now checks out ref: main so future releases self-update.)",
-  "assets": {
-    "darwin-arm64": {
-      "url": "https://github.com/trib-plugin/mixdog/releases/download/v0.7.17/mixdog-graph-darwin-arm64",
-      "sha256": "53f45f8373000fb55ccb49f9b03af0275ca2a663f924b68ee8ded4535e14445a"
-    },
-    "darwin-x64": {
-      "url": "https://github.com/trib-plugin/mixdog/releases/download/v0.7.17/mixdog-graph-darwin-x64",
-      "sha256": "347dc5e1b39dfc33ae07e01319b085c1f1ee775a70be1ac09f7b0d2954b36591"
-    },
-    "linux-arm64": {
-      "url": "https://github.com/trib-plugin/mixdog/releases/download/v0.7.17/mixdog-graph-linux-arm64",
-      "sha256": "7648be2c4bc89bef837b4843639a9ab38c382ba103518ad52d4439587521542f"
-    },
-    "linux-x64": {
-      "url": "https://github.com/trib-plugin/mixdog/releases/download/v0.7.17/mixdog-graph-linux-x64",
-      "sha256": "6e5a1b548c69c3a51170eb11c769985be7ca7029ede2597b19304c8dc106eded"
-    },
-    "win32-x64": {
-      "url": "https://github.com/trib-plugin/mixdog/releases/download/v0.7.17/mixdog-graph-win32-x64.exe",
-      "sha256": "cd263b6bfd3d7371857f498fb53d1d67b4b4cc06dd4d9855408337390a56cee2"
-    }
-  }
-}

package/src/agent/orchestrator/tools/host-input.mjs

@@ -1,204 +0,0 @@
-// Host-terminal input injection.
-//
-// Exposes `inject_input` as an MCP tool that types text into the *host*
-// terminal currently running Claude Code (and therefore this MCP server,
-// which Claude Code spawned as a child).
-//
-// Strategy:
-//   1. Walk the parent-process chain starting at this Node process.
-//   2. Find the first ancestor whose image name identifies a supported
-//      terminal host (currently: powershell / pwsh).
-//   3. Dispatch via a per-host handler map. Adding cmd / Windows Terminal /
-//      VS Code / Claude Desktop later means dropping a new entry into
-//      `HOST_HANDLERS` — no branching surgery in the dispatcher.
-//
-// The PowerShell handler reuses the proven helper script
-// `scripts/inject-input.ps1` (AttachConsole + CreateFileW("CONIN$") +
-// WriteConsoleInputW, with the stale-STD_INPUT_HANDLE workaround). We
-// shell out to the script rather than reimplementing the FFI in Node so
-// the C# console-input typedef stays in one place.
-//
-// Returned JSON shape: { ok, host, pid, exitCode, stderr? }.
-
-import { spawnSync, execFileSync } from 'node:child_process'
-import { writeFileSync, mkdtempSync, rmSync } from 'node:fs'
-import { join, dirname } from 'node:path'
-import { tmpdir } from 'node:os'
-import { fileURLToPath } from 'node:url'
-
-const __dirname = dirname(fileURLToPath(import.meta.url))
-// trib-plugin/src/agent/orchestrator/tools/host-input.mjs
-//   __dirname = .../trib-plugin/src/agent/orchestrator/tools
-//   → trib-plugin requires four `..` (orchestrator → agent → src → root).
-const PLUGIN_ROOT = join(__dirname, '..', '..', '..', '..')
-const PS_HELPER = join(PLUGIN_ROOT, 'scripts', 'inject-input.ps1')
-
-// ── Parent-chain walker (Windows) ─────────────────────────────────────
-//
-// Uses one wmic / Get-CimInstance call to read the full Win32_Process
-// table once, then walks PPID links in-process. Keeps the cost to one
-// process spawn regardless of chain depth.
-function readProcessTable() {
-  // Prefer PowerShell + Get-CimInstance — wmic.exe is deprecated and
-  // missing on newer Windows builds.
-  try {
-    const out = execFileSync(
-      'powershell.exe',
-      [
-        '-NoProfile', '-NonInteractive', '-Command',
-        "Get-CimInstance Win32_Process | Select-Object ProcessId,ParentProcessId,Name | ConvertTo-Json -Compress",
-      ],
-      { encoding: 'utf8', windowsHide: true, timeout: 8000, maxBuffer: 16 * 1024 * 1024 },
-    )
-    const parsed = JSON.parse(out)
-    const rows = Array.isArray(parsed) ? parsed : [parsed]
-    const byPid = new Map()
-    for (const row of rows) {
-      if (!row || row.ProcessId == null) continue
-      byPid.set(Number(row.ProcessId), {
-        pid: Number(row.ProcessId),
-        ppid: Number(row.ParentProcessId ?? 0),
-        name: String(row.Name ?? ''),
-      })
-    }
-    return byPid
-  } catch (e) {
-    throw new Error(`failed to read process table: ${e?.message || e}`)
-  }
-}
-
-// Image-name → host-tag map. Lower-case match.
-const HOST_BY_IMAGE = {
-  'pwsh.exe': 'powershell',
-  'powershell.exe': 'powershell',
-  // Future:
-  // 'cmd.exe': 'cmd',
-  // 'windowsterminal.exe': 'windows-terminal',
-  // 'code.exe': 'vscode-terminal',
-  // 'claude.exe': 'claude-desktop',
-}
-
-function classifyHost(imageName) {
-  if (!imageName) return null
-  return HOST_BY_IMAGE[imageName.toLowerCase()] ?? null
-}
-
-// Walk parent chain from the given pid, returning the first ancestor whose
-// image maps to a known host. Bounded to 32 hops and skips PID 0 / orphan.
-function findHostAncestor(startPid) {
-  const table = readProcessTable()
-  let cur = table.get(Number(startPid))
-  let hops = 0
-  const trail = []
-  while (cur && hops < 32) {
-    trail.push({ pid: cur.pid, name: cur.name })
-    const tag = classifyHost(cur.name)
-    if (tag) return { host: tag, pid: cur.pid, name: cur.name, trail }
-    if (!cur.ppid || cur.ppid === cur.pid) break
-    cur = table.get(cur.ppid)
-    hops += 1
-  }
-  return { host: null, pid: null, name: null, trail }
-}
-
-// ── Per-host handlers ─────────────────────────────────────────────────
-
-function handlePowerShell(text, pid) {
-  // Pass the payload via a temp file rather than a command-line arg so
-  // arbitrary characters (quotes, backticks, $, newlines) survive without
-  // any shell or PowerShell parsing pitfalls. The .ps1 helper is invoked
-  // directly via powershell.exe -File, no -Command interpolation.
-  const tmpDir = mkdtempSync(join(tmpdir(), 'mixdog-inject-'))
-  const payloadPath = join(tmpDir, 'payload.txt')
-  let result
-  try {
-    writeFileSync(payloadPath, String(text), 'utf8')
-    // The helper script's -Text param expects a single string. Read the
-    // payload file inside a tiny -Command shim so we don't have to touch
-    // the existing helper. -Raw preserves embedded newlines and trailing
-    // whitespace exactly as the caller wrote them.
-    const psCommand =
-      `$ErrorActionPreference='Stop'; ` +
-      `$txt = Get-Content -LiteralPath ${psQuote(payloadPath)} -Raw -Encoding UTF8; ` +
-      `& ${psQuote(PS_HELPER)} -TargetPid ${Number(pid)} -Text $txt`
-    result = spawnSync(
-      'powershell.exe',
-      ['-NoProfile', '-NonInteractive', '-ExecutionPolicy', 'Bypass', '-Command', psCommand],
-      { encoding: 'utf8', windowsHide: true, timeout: 15000 },
-    )
-  } finally {
-    try { rmSync(tmpDir, { recursive: true, force: true }) } catch {}
-  }
-  const exitCode = result.status ?? -1
-  const stderr = (result.stderr || '').trim()
-  const ok = exitCode === 0
-  const out = { ok, exitCode }
-  if (!ok && stderr) out.stderr = stderr
-  return out
-}
-
-// PowerShell single-quoted literal: escape ' as ''. Wraps the whole value
-// in single quotes so $ / backtick / parentheses are taken literally.
-function psQuote(s) {
-  return `'${String(s).replace(/'/g, "''")}'`
-}
-
-const HOST_HANDLERS = {
-  powershell: handlePowerShell,
-  // cmd: handleCmd,
-  // 'windows-terminal': handleWT,
-  // 'vscode-terminal': handleVSCode,
-  // 'claude-desktop': handleClaudeDesktop,
-}
-
-// ── Public entry ──────────────────────────────────────────────────────
-
-export const HOST_INPUT_TOOL_DEFS = [
-  {
-    name: 'inject_input',
-    title: 'Inject Input',
-    annotations: { title: 'Inject Input', readOnlyHint: false, destructiveHint: true, idempotentHint: false, openWorldHint: true, compressible: false },
-    description: 'Inject text into the host session as if the user typed it at the prompt. Requires text.',
-    inputSchema: {
-      type: 'object',
-      properties: {
-        text: { type: 'string', minLength: 1 },
-      },
-      required: ['text'],
-      additionalProperties: false,
-    },
-  },
-]
-
-export async function executeHostInputTool(name, args /*, cwd */) {
-  if (name !== 'inject_input') throw new Error(`Unknown host-input tool: ${name}`)
-  const text = args?.text
-  if (typeof text !== 'string' || text.length === 0) {
-    throw new Error('inject_input: `text` (string, non-empty) is required')
-  }
-  if (process.platform !== 'win32') {
-    throw new Error(`inject_input: only supported on Windows (got platform=${process.platform})`)
-  }
-
-  // Always submit: append a trailing newline if the caller didn't.
-  const payload = text.endsWith('\n') ? text : text + '\n'
-
-  const { host, pid, name: imageName, trail } = findHostAncestor(process.pid)
-  if (!host) {
-    const trailStr = trail.map(t => `${t.pid}:${t.name}`).join(' → ')
-    throw new Error(`inject_input: no supported terminal host found in parent chain (${trailStr || '<empty>'})`)
-  }
-  const handler = HOST_HANDLERS[host]
-  if (typeof handler !== 'function') {
-    throw new Error(`inject_input: host "${host}" not supported yet (resolved image=${imageName} pid=${pid})`)
-  }
-
-  const result = handler(payload, pid)
-  return JSON.stringify({
-    ok: !!result.ok,
-    host,
-    pid,
-    exitCode: result.exitCode,
-    ...(result.stderr ? { stderr: result.stderr } : {}),
-  })
-}

package/src/agent/orchestrator/tools/patch-binary-fetcher.mjs

@@ -1,143 +0,0 @@
-// patch-binary-fetcher.mjs — fetches the prebuilt mixdog-patch native binary
-// from the GitHub release manifest. apply_patch is native-only, so callers
-// surface fetch failures as clean tool errors rather than silently switching
-// engines. Caches under <dataDir>/patch-bin/. Mirrors graph-binary-fetcher.mjs.
-//
-// Public API:
-//   ensurePatchBinary(dataDir) -> absolute path to the verified binary.
-//     Throws on no-asset / download / verify failure.
-//   findCachedPatchBinary(dataDir) -> path | null (sync, no network).
-
-import { createHash } from 'node:crypto';
-import {
-  chmodSync, createWriteStream, existsSync, mkdirSync,
-  readFileSync, readdirSync, renameSync, rmSync,
-} from 'node:fs';
-import { readFile } from 'node:fs/promises';
-import { join } from 'node:path';
-import { fileURLToPath } from 'node:url';
-import { pipeline } from 'node:stream/promises';
-
-const BUNDLED_MANIFEST_PATH = fileURLToPath(new URL('./patch-manifest.json', import.meta.url));
-const MANIFEST_URL = 'https://raw.githubusercontent.com/trib-plugin/mixdog/main/src/agent/orchestrator/tools/patch-manifest.json';
-
-function binSuffix() {
-  return process.platform === 'win32' ? '.exe' : '';
-}
-
-function platformKey() {
-  const os = process.platform === 'win32' ? 'win32' : process.platform;
-  return `${os}-${process.arch}`;
-}
-
-function patchBinDir(dataDir) {
-  return join(dataDir, 'patch-bin');
-}
-
-async function loadManifest(dataDir) {
-  const cached = join(patchBinDir(dataDir), 'manifest.json');
-  if (existsSync(cached)) {
-    try { return JSON.parse(readFileSync(cached, 'utf8')); } catch { /* fall through */ }
-  }
-  if (existsSync(BUNDLED_MANIFEST_PATH)) {
-    return JSON.parse(readFileSync(BUNDLED_MANIFEST_PATH, 'utf8'));
-  }
-  const res = await fetch(MANIFEST_URL, { signal: AbortSignal.timeout(30_000) });
-  if (!res.ok) throw new Error(`[patch-fetcher] manifest fetch failed: ${res.status} ${res.statusText}`);
-  return res.json();
-}
-
-async function sha256File(filePath) {
-  return createHash('sha256').update(await readFile(filePath)).digest('hex');
-}
-
-async function downloadWithRetry(url, destPath) {
-  const delays = [1000, 3000, 9000];
-  let lastErr;
-  for (let attempt = 0; attempt < 4; attempt++) {
-    try {
-      const res = await fetch(url, { signal: AbortSignal.timeout(180_000) });
-      if (res.status >= 400 && res.status < 500) {
-        throw new Error(`[patch-fetcher] asset HTTP ${res.status} (terminal) — ${url}`);
-      }
-      if (!res.ok) throw new Error(`[patch-fetcher] asset HTTP ${res.status} — ${url}`);
-      await pipeline(res.body, createWriteStream(destPath));
-      return;
-    } catch (err) {
-      lastErr = err;
-      if (String(err?.message || '').includes('(terminal)')) throw err;
-      if (attempt < 3) {
-        process.stderr.write(`[patch-fetcher] download attempt ${attempt + 1} failed (${err?.message}), retrying in ${delays[attempt]}ms…\n`);
-        await new Promise((r) => setTimeout(r, delays[attempt]));
-      }
-    }
-  }
-  throw lastErr;
-}
-
-function gcPatchBin(dir, keepFile) {
-  try {
-    for (const name of readdirSync(dir)) {
-      if (name === 'manifest.json' || name === keepFile) continue;
-      if (name.startsWith('mixdog-patch')) {
-        try { rmSync(join(dir, name), { force: true }); } catch { /* best-effort */ }
-      }
-    }
-  } catch { /* dir may not exist yet */ }
-}
-
-export function findCachedPatchBinary(dataDir) {
-  try {
-    const dir = patchBinDir(dataDir);
-    const hit = readdirSync(dir).find(
-      (n) => n.startsWith('mixdog-patch') && !n.endsWith('.json') && !n.includes('.tmp-'),
-    );
-    return hit ? join(dir, hit) : null;
-  } catch {
-    return null;
-  }
-}
-
-let _inflight = null;
-
-export function ensurePatchBinary(dataDir) {
-  if (_inflight) return _inflight;
-  _inflight = (async () => {
-    const manifest = await loadManifest(dataDir);
-    const pkey = platformKey();
-    const asset = manifest.assets?.[pkey];
-    if (!asset || !asset.url || !asset.sha256) {
-      // Unsupported platform/arch (e.g. win32-arm64): the manifest has no
-      // downloadable asset for this {os}-{arch}. apply_patch is native-only
-      // (no JS apply fallback), so this is terminal — surface a single clear,
-      // actionable message instead of a cryptic crash downstream.
-      const supported = Object.keys(manifest.assets || {}).join(', ') || '(none)';
-      throw new Error(
-        `[patch-fetcher] no prebuilt mixdog-patch binary for platform ${pkey} `
-        + `(unsupported platform/arch — apply_patch is native-only, no JS apply fallback). `
-        + `Supported platforms: ${supported}. `
-        + `Build it locally: cargo build --release in native/mixdog-patch.`,
-      );
-    }
-    const version = String(manifest.version || '0');
-    const dir = patchBinDir(dataDir);
-    mkdirSync(dir, { recursive: true });
-    const fileName = `mixdog-patch-${version}${binSuffix()}`;
-    const destPath = join(dir, fileName);
-    if (existsSync(destPath)) {
-      try { if (await sha256File(destPath) === asset.sha256) return destPath; } catch { /* re-download */ }
-    }
-    const tmpPath = `${destPath}.tmp-${process.pid}-${Date.now()}`;
-    await downloadWithRetry(asset.url, tmpPath);
-    const actual = await sha256File(tmpPath);
-    if (actual !== asset.sha256) {
-      try { rmSync(tmpPath, { force: true }); } catch { /* best-effort */ }
-      throw new Error(`[patch-fetcher] sha256 mismatch for ${pkey}: expected ${asset.sha256}, got ${actual}`);
-    }
-    renameSync(tmpPath, destPath);
-    if (process.platform !== 'win32') { try { chmodSync(destPath, 0o755); } catch { /* best-effort */ } }
-    gcPatchBin(dir, fileName);
-    return destPath;
-  })().finally(() => { _inflight = null; });
-  return _inflight;
-}

package/src/agent/orchestrator/tools/patch-manifest.json

@@ -1,26 +0,0 @@
-{
-  "version": "0.7.17",
-  "_comment": "Rewritten by .github/workflows/patch-release.yml on each tagged release. assets maps platformKey (process.platform-process.arch, e.g. win32-x64, linux-x64, darwin-arm64) to { url, sha256 } of the mixdog-patch binary on the GitHub release. A local cargo build under native/mixdog-patch/target/release always takes precedence; otherwise the binary is fetched per this manifest into the data dir (apply is native-only — no JS apply engine).",
-  "assets": {
-    "darwin-arm64": {
-      "url": "https://github.com/trib-plugin/mixdog/releases/download/v0.7.17/mixdog-patch-darwin-arm64",
-      "sha256": "836a0b60a443b0a6a8c1bbe24d15a79ed70ee92c2f0fbc05374c4e9ed2536415"
-    },
-    "darwin-x64": {
-      "url": "https://github.com/trib-plugin/mixdog/releases/download/v0.7.17/mixdog-patch-darwin-x64",
-      "sha256": "cab10c4e1e8b72d3958241dffdff764712ed74f4861d105bafa8258961215c98"
-    },
-    "linux-arm64": {
-      "url": "https://github.com/trib-plugin/mixdog/releases/download/v0.7.17/mixdog-patch-linux-arm64",
-      "sha256": "a90c32ce3417a7d853f2723f82f3613cf2cd030fe885cf710cfc9f8e4b193264"
-    },
-    "linux-x64": {
-      "url": "https://github.com/trib-plugin/mixdog/releases/download/v0.7.17/mixdog-patch-linux-x64",
-      "sha256": "0fea40ab98acd35bfb47515756024d1882a2abbaddce8a0b51642d20ac405577"
-    },
-    "win32-x64": {
-      "url": "https://github.com/trib-plugin/mixdog/releases/download/v0.7.17/mixdog-patch-win32-x64.exe",
-      "sha256": "af92ae25c2434f9b2999df0186e11f6a8802d70bcbc4b91290cfd92f3e143466"
-    }
-  }
-}

package/src/agent/orchestrator/tools/patch-tool-defs.mjs

@@ -1,20 +0,0 @@
-export const PATCH_TOOL_DEFS = [
-  {
-    name: 'apply_patch',
-    title: 'Mixdog Apply Patch',
-    annotations: { title: 'Mixdog Apply Patch', readOnlyHint: false, destructiveHint: true, idempotentHint: false, openWorldHint: false, compressible: false, compressibleLossless: true },
-    description: 'The default editor for existing files — prefer over write/edit for any non-trivial change: self-validating — the hunk context lines ARE the match proof, so they must match the CURRENT file bytes EXACTLY (indentation included). If you have not read the target region this turn, read it first; guessed or stale context is the top cause of "context not found". Apply a patch (unified or V4A); set base_path to the repo root so a/... paths resolve. Multi-hunk/multi-file; dry_run validates without writing. Prefer V4A; see patch field for hunk syntax.',
-    inputSchema: {
-      type: 'object',
-      properties: {
-        patch: { type: 'string', description: 'Patch text; match `format`. V4A (preferred): `*** Begin Patch`…`*** End Patch`; per file `*** Update/Add/Delete File: <real path>` (no `a/`·`b/`); body lines ` `=context/`-`=del/`+`=add. Include ~3 UNCHANGED context lines above AND below each change, copied verbatim from the current file (indentation included). If 3 lines do not uniquely locate the snippet, add `@@ <enclosing class/function>` immediately above it; if a block repeats so often that one `@@`+3 lines is still ambiguous, stack multiple `@@` (e.g. `@@ class Foo` then `@@ def bar():`). `@@ <ctx>` anchors must quote a UNIQUE line ABOVE the whole context block — NOT a line you also include in the hunk body, and never below the edit (→ "context not found"). For files without classes/functions (JSON, config), prefer extra context lines over `@@`, or anchor on the enclosing key (e.g. `@@   "items": [`). No line counts. Unified: counted `@@ -A,B +C,D @@` headers required (bare `@@` rejected); `a/`·`b/` prefixes stripped on apply.' },
-        format: { type: 'string', enum: ['unified', 'v4a'], description: 'Auto-detected if omitted. Prefer v4a (`*** Begin Patch` envelope, `@@ <ctx>` anchors, no line counts); unified needs counted `@@ -A,B +C,D @@` headers.' },
-        base_path: { type: 'string', description: 'Repo root so a/... paths resolve.' },
-        dry_run: { type: 'boolean', description: 'Default false. true = validate only, no write.' },
-        reject_partial: { type: 'boolean', description: 'Default true (all-or-nothing). false = apply landed hunks, skip failures.' },
-        fuzzy: { type: 'boolean', description: 'Default true: tolerate minor context drift; false = exact match.' },
-      },
-      required: ['patch'],
-    },
-  },
-];