mixdog 0.9.101 → 0.9.103

package/README.md

@@ -4,6 +4,14 @@
 ![node](https://img.shields.io/badge/node-%3E%3D22-brightgreen)
 ![license](https://img.shields.io/badge/license-MIT-blue)
 
+**Mixdog Desktop:** [Download for Windows (x64)](https://github.com/tribgames/mixdog/releases/latest/download/mixdog-desktop-win-x64.exe)
+· [macOS / Linux preview builds](https://github.com/tribgames/mixdog/releases/latest)
+
+Windows is the primary manually tested desktop platform. macOS and Linux
+packages are built on native CI runners and pass packaged-runtime smoke tests,
+but remain preview builds. Desktop packages are currently unsigned, so Windows
+SmartScreen or macOS Gatekeeper may show a security warning.
+
 Standalone coding agent that runs an orchestrated, multi-provider agent
 workflow from one terminal — or from a full desktop workbench — built to
 get the same quality out of the same models with less time, cost, and
@@ -118,9 +126,9 @@ every number above live under `benchmarks/terminal-bench-2.1/`.
 
 - Skills, MCP servers, hooks, and plugins load through standard-compatible
   interfaces.
-- Workflow delegation through the `agent` tool and `/agents`: worker,
-  heavy-worker, reviewer, debugger, maintainer, explorer, and
-  web-researcher roles.
+- Built-in Web Search, Explorer, and Maintainer services, plus editable
+  starter agents (`worker`, `heavy-worker`, `reviewer`) and user-authored
+  custom roles.
 
 ## Run
 
@@ -160,8 +168,8 @@ mixdog --provider anthropic-oauth --model claude-opus-5 worker "fix the failing
 mixdog --provider openai-oauth --model gpt-5.6-sol reviewer "review the current diff"
 ```
 
-Roles: `explore`, `worker`, `heavy-worker`, `reviewer`, `debugger`,
-`maintainer`, `web-researcher`.
+Roles: `explore`, `worker`, `heavy-worker`, `reviewer`, `maintainer`,
+`web-researcher`.
 
 ## TUI basics
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mixdog",
-  "version": "0.9.101",
+  "version": "0.9.103",
   "private": false,
   "type": "module",
   "description": "Standalone mixdog coding-agent CLI/TUI workspace.",
@@ -112,7 +112,7 @@
     "test:workflow-editor": "node --test scripts/workflow-id-test.mjs scripts/workflow-pack-editor-test.mjs",
     "test:route-scope": "node --test scripts/route-scope-isolation-test.mjs",
     "test:schedule-reload": "node --test scripts/schedule-reload-arm-test.mjs",
-    "test:media": "node --test src/runtime/media/store.test.mjs src/runtime/media/renditions.test.mjs",
+    "test:media": "node --test src/runtime/media/store.test.mjs src/runtime/media/renditions.test.mjs src/runtime/media/adapters/codex-image.test.mjs",
     "test:shell-harness": "node --test scripts/shell-harness-regression-test.mjs",
     "failures": "node scripts/tool-failures.mjs",
     "trace:llm": "node scripts/llm-trace-summary.mjs",

package/src/defaults/agents.json

@@ -59,34 +59,6 @@
       "kind": "maintenance",
       "permission": "read",
       "stallCap": { "idleSeconds": 90, "toolRunningSeconds": 90 }
-    },
-    {
-      "agent": "scheduler-task",
-      "slot": "scheduler",
-      "systemFile": "agents/scheduler-task/AGENT.md",
-      "description": "Scheduled-task executor invoked by scheduler tick",
-      "invokedBy": "scheduler",
-      "toolSchemaProfile": "read-write-search",
-      "schemaAllowedTools": ["code_graph", "find", "glob", "list", "grep", "read", "apply_patch", "search", "web_fetch"],
-      "kind": "maintenance",
-      "permission": "read-write",
-      "inboundEvent": true,
-      "instructionDir": "schedules",
-      "stallCap": { "idleSeconds": 600, "toolRunningSeconds": 600 }
-    },
-    {
-      "agent": "webhook-handler",
-      "slot": "webhook",
-      "systemFile": "agents/webhook-handler/AGENT.md",
-      "description": "Webhook payload handler invoked by inbound webhook events",
-      "invokedBy": "webhook",
-      "toolSchemaProfile": "read-write-search",
-      "schemaAllowedTools": ["code_graph", "find", "glob", "list", "grep", "read", "apply_patch", "search", "web_fetch"],
-      "kind": "maintenance",
-      "permission": "read-write",
-      "inboundEvent": true,
-      "instructionDir": "webhooks",
-      "stallCap": { "idleSeconds": 600, "toolRunningSeconds": 600 }
     }
   ]
 }

package/src/defaults/skills/setup/SKILL.md

@@ -72,13 +72,13 @@ apply it, and verify the result.
 
 ### Workflow / agent definitions
 
-1. Workflows and agents are Markdown packs. Built-ins ship with mixdog
-   (workflows `default`, `solo`; agents worker, heavy-worker, reviewer,
-   debugger, maintainer); custom packs live at
+1. Workflows and agents are Markdown packs. Built-in services are Web Search,
+   Explore, and Maintainer. Mixdog ships editable starter agents `worker`,
+   `heavy-worker`, and `reviewer`; custom packs live at
    `<mixdogData>/workflows/<id>/WORKFLOW.md` and
    `<mixdogData>/agents/<id>/AGENT.md`.
-2. Saving a built-in id writes a user override; deleting the override
-   reverts to the built-in.
+2. Starter and user-authored agents can be edited or deleted. Built-in service
+   definitions stay protected while their model routes remain configurable.
 3. The desktop app (Workflows page) is the full editor. The TUI only
    switches the active workflow (`/workflow`) and per-agent model routes
    (`/agents`).

package/src/headless-command.mjs

@@ -9,7 +9,6 @@ const HEADLESS_ROLE_ALIASES = new Map([
   ['worker', 'worker'],
   ['heavy', 'heavy-worker'], ['heavyworker', 'heavy-worker'], ['heavy-worker', 'heavy-worker'],
   ['review', 'reviewer'], ['reviewer', 'reviewer'],
-  ['debug', 'debugger'], ['debugger', 'debugger'],
   ['web', 'web-researcher'], ['web-researcher', 'web-researcher'],
 ]);
 const HEADLESS_WORKFLOW_ERROR = 'option --workflow is not supported for headless role commands';

package/src/help.mjs

@@ -21,7 +21,7 @@ export const HELP_LINES = [
   '',
   'Headless role commands require an explicit provider/model pair and run with',
   'ephemeral config/data; host behavioral config and personal state are not loaded.',
-  'Roles: explore, worker, heavy-worker, reviewer, debugger, maintainer, web-researcher.',
+  'Roles: explore, worker, heavy-worker, reviewer, maintainer, web-researcher.',
   '',
   'Slash commands (inside mixdog):',
   '  /clear                        start a fresh chat (alias: /new)',

package/src/lib/rules-builder.cjs

@@ -9,7 +9,6 @@
  *   - buildAgentRoleContent             — BP2: agent role/system rules
  *   - buildAgentRetrievalInjectionContent — BP2: narrow read-only retrieval role
  *   - buildLeadMetaContent              — BP3: Lead memory/meta context
- *   - buildAgentRoleSpecificContent     — BP4-adjacent user/task data
  *   - buildInjectionContent             — legacy joined Lead session content
  *
  * 4-BP cache layout (composeSystemPrompt):
@@ -186,61 +185,6 @@ function loadOutputStyle({ PLUGIN_ROOT, DATA_DIR }) {
   return '';
 }
 
-/**
- * Resolve the DATA_DIR subdir whose *.md instruction tree is sent as
- * BP4-adjacent user/task data, from the agent's `instructionDir` metadata in
- * defaults/agents.json. Returns null when the agent declares none.
- *
- * Mirrors internal-agents.mjs getAgentInstructionDir — rules-builder is CommonJS
- * and cannot import the ESM module, so it reads the same source of truth
- * directly. Keeps the webhook-handler→webhooks / scheduler-task→schedules
- * mapping declarative instead of a hard-coded agent-name ternary.
- *
- * @param {string} mixdogRoot
- * @param {string} agent
- * @returns {string|null}
- */
-function resolveAgentInstructionDir(mixdogRoot, agent) {
-  if (!mixdogRoot || !agent) return null;
-  const metaPath = path.join(mixdogRoot, 'defaults', 'agents.json');
-  let raw;
-  try {
-    raw = JSON.parse(fs.readFileSync(metaPath, 'utf8'));
-  } catch (e) {
-    throw new Error(`[rules-builder] failed to read/parse agents.json at ${metaPath}: ${e.message}`);
-  }
-  for (const entry of (raw.agents || [])) {
-    if (entry && entry.agent === agent) {
-      const dir = typeof entry.instructionDir === 'string' ? entry.instructionDir.trim() : '';
-      return dir || null;
-    }
-  }
-  return null;
-}
-
-/**
- * Recursively collect all `.md` files under `dir`. Returns absolute paths
- * in stack-DFS order (callers sort before use). Missing/unreadable `dir`
- * yields an empty array — matches the previous inline `try {} catch {}`
- * behavior at every call site.
- */
-function collectMarkdownFilesRecursive(dir) {
-  const collected = [];
-  try {
-    const stack = [dir];
-    while (stack.length) {
-      const current = stack.pop();
-      const entries = fs.readdirSync(current, { withFileTypes: true });
-      for (const entry of entries) {
-        const full = path.join(current, entry.name);
-        if (entry.isDirectory()) stack.push(full);
-        else if (entry.isFile() && entry.name.endsWith('.md')) collected.push(full);
-      }
-    }
-  } catch {}
-  return collected;
-}
-
 function buildSharedToolContent({ PLUGIN_ROOT }) {
   const SHARED_DIR = path.join(PLUGIN_ROOT, 'rules', 'shared');
   return readOptional(path.join(SHARED_DIR, '01-tool.md'));
@@ -365,45 +309,6 @@ function buildAgentRetrievalInjectionContent({ PLUGIN_ROOT }) {
   return parts.join('\n');
 }
 
-/**
- * BP4-adjacent role-specific data. Only the calling role's own task / tool
- * detail body emits — webhook-handler gets webhooks/<all-events>/ and
- * scheduler gets schedules/<all-tasks>/. Other roles return ''.
- *
- * NOTE: webhook-event narrowing (one event per call) requires the inbound
- * payload's event id at compose time; not implemented yet, so all webhook
- * instruction files still ride with the webhook-handler user/task context.
- *
- * @param {object} opts
- * @param {string} opts.PLUGIN_ROOT
- * @param {string} opts.DATA_DIR
- * @param {string|null} opts.currentAgent
- * @returns {string}
- */
-function buildAgentRoleSpecificContent({ PLUGIN_ROOT, DATA_DIR, currentAgent }) {
-  if (!currentAgent) return '';
-  const parts = [];
-
-  // The agent's instruction subdir (webhook-handler → webhooks, scheduler-task
-  // → schedules) is declared via `instructionDir` in defaults/agents.json
-  // rather than hard-coded here, so adding a new inbound-event agent needs only
-  // a metadata entry.
-  const subdirForAgent = resolveAgentInstructionDir(PLUGIN_ROOT, currentAgent);
-  if (subdirForAgent) {
-    const dir = path.join(DATA_DIR, subdirForAgent);
-    const collected = collectMarkdownFilesRecursive(dir);
-    if (collected.length > 0) {
-      collected.sort();
-      const blocks = collected.map(f => stripFrontmatter(readOptional(f))).filter(Boolean);
-      if (blocks.length > 0) {
-        parts.push([`# Agent ${subdirForAgent}`, '', blocks.join('\n\n')].join('\n'));
-      }
-    }
-  }
-
-  return parts.join('\n\n');
-}
-
 module.exports = {
   buildSharedToolContent,
   buildLeadRoleContent,
@@ -412,5 +317,4 @@ module.exports = {
   buildInjectionContent,
   buildAgentInjectionContent,
   buildAgentRetrievalInjectionContent,
-  buildAgentRoleSpecificContent,
 };

package/src/rules/shared/01-tool.md

@@ -1,35 +1,37 @@
 # Tool Use
 
-- Call `explore`, when exposed, only to locate unknown coordinates in
-  repository source — it is plain search over source trees and files; it
-  returns locations, not analysis or solutions; never batch another
-  exploration tool onto a facet already sent to `explore` in the same turn —
-  narrow first, then route. Then route each anchored facet
-  exactly once by the evidence required to determine the complete edit:
-  path/name only→`find`; exact directory entries→`list`; wildcard paths→`glob`;
-  source content/value/`path:line`→`grep`; known file/range→`read`; exact
-  symbol/relation→`code_graph`;
-  web/current→`search` when exposed; returned URL body→`web_fetch` when exposed;
-  prior work→`recall` when exposed; durable compact English memory→`memory`
-  when exposed;
+- Retrieval narrows one way, repository→path→content; enter at the deepest
+  anchored tier and never widen back. Call `explore`, when exposed, only to
+  locate unknown coordinates in repository source — plain search over source
+  trees and files; it returns locations, not analysis or solutions. Then
+  route each anchored facet exactly once by the evidence required to
+  determine the complete edit:
+  path/name only→`find`; wildcard paths→`glob`; exact directory entries→`list`;
+  source content/value/`path:line`→`grep`; exact symbol/relation→`code_graph`;
+  known file/range→`read`;
+  web/current→`search`, returned URL body→`web_fetch`, prior work→`recall`,
+  durable compact English memory→`memory`, each when exposed;
   explicit project change→`cwd`; explicit user-requested conversation reset→
-  `session_manage`. Use only named tools present in the current tool surface.
+  `session_manage`. `shell` is never an exploration or editing tool. Use only
+  named tools present in the current tool surface.
 - Use verified paths (cwd/project/user/tool); explicit paths may be outside cwd;
-  guessed path/name fragments use `find`. Before each tool batch, extract
-  every independent facet, deduplicate overlap, assign exactly ONE routed tool
-  per facet, and launch all independent calls, whatever the tool, together in
-  one maximum-fanout turn — independence alone decides batching. Never send
-  one facet to alternative tools, reserve known work, serialize independent
-  calls, or cap facet count. Take the cheapest sufficient evidence per facet:
+  before every tool batch, extract every independent facet, deduplicate
+  overlap, assign exactly ONE routed tool per facet, and launch all
+  independent calls, whatever the tool, together in one maximum-fanout turn —
+  every turn, widest probe to last; independence alone decides batching.
+  Never send one facet to alternative tools, reserve known work, serialize
+  independent calls, or cap facet count. Take the cheapest sufficient
+  evidence per facet:
   symbol relations end at `code_graph`, values/locations end at the context
   grep returns; `read` covers only what returned spans cannot, as an anchored
-  offset/limit window — never a full-file read when a window suffices.
-  Adjacent context around an edit point counts as needed evidence. A batch
-  carries only the evidence needed to determine the edit; the moment evidence
-  determines it, stop retrieving and patch. Known state is never re-acquired —
-  neither content already read nor the effect of your own successful call.
-- Once the edit is determined, finish in one assistant turn with one
-  `apply_patch` for all edits.
+  offset/limit window — never a full-file read when a window suffices;
+  adjacent context around an edit point counts as needed evidence. The moment
+  evidence determines the edit, stop retrieving and patch. Known state is
+  never re-acquired or reconfirmed — a credible result is final: never
+  re-read, re-verify, or cross-check it.
+- Once the edit is determined, finish in one assistant turn: submit every
+  edit as one `apply_patch` envelope per file or cohesive unit — never one
+  envelope for all edits; on failure re-send only the failed envelope.
 - After a call returns a background `task_id`, end the turn; its completion
   notification resumes work. Never poll; use task control only for recovery or
   a required blocking result.

package/src/runtime/agent/orchestrator/agent-runtime/agent-dispatch.mjs

@@ -110,7 +110,7 @@ export function agentCompactEventDetail(event = {}) {
 //      recursion break)
 // Hidden-agent exceptions are declarative: defaults/agents.json may set
 // toolSchemaProfile when first-turn routing quality is worth a separate tool
-// prefix. Standard profiles are none/read/full/read-write-search.
+// prefix. Standard profiles are none/read/full.
 // See manager.mjs resolveSessionTools for the single source of truth;
 // agent visibility is declared via annotations.agentHidden on each tool def.
 const HIDDEN_ROLE_TOOL_SCHEMA_PROFILES = Object.freeze({
@@ -124,17 +124,6 @@ const HIDDEN_ROLE_TOOL_SCHEMA_PROFILES = Object.freeze({
         'grep',
         'read',
     ]),
-    'read-write-search': Object.freeze([
-        'code_graph',
-        'find',
-        'glob',
-        'list',
-        'grep',
-        'read',
-        'apply_patch',
-        'search',
-        'web_fetch',
-    ]),
 });
 
 export function resolveHiddenRoleSchemaAllowedTools(hidden) {
@@ -191,7 +180,7 @@ function maintenanceRouteToPreset(routeOrName, agent) {
  * Build an agent-backed dispatch callback.
  *
  * @param {object} opts
- * @param {string} opts.agent       — REQUIRED; canonical agent name (worker, cycle1-agent, scheduler-task, ...)
+ * @param {string} opts.agent       — REQUIRED; canonical agent name (worker, cycle1-agent, ...)
  * @param {string} [opts.taskType]  — optional internal classification stamped on the session
  * @param {string} [opts.preset]    — explicit preset override (bypasses agent → preset lookup)
  * @param {string} [opts.parentSessionId] — parent agent session for trace aggregation

package/src/runtime/agent/orchestrator/agent-runtime/cache-strategy.mjs

@@ -47,15 +47,10 @@ import { getHiddenAgent } from '../internal-agents.mjs';
  * premium for content read back 0 times. Identified by the declarative
  * (kind:'maintenance' + toolSchemaProfile:'none') pair rather than
  * hardcoded names, so new roles sharing the pattern are covered for free.
- * Multi-turn maintenance roles (scheduler-task / webhook-handler) are
- * read-write-search and therefore excluded — they run a tool loop whose tail
- * caches legitimately reuse across iterations.
  */
 function isOneShotMaintenanceAgent(agent) {
     const hidden = getHiddenAgent(agent);
-    // Shipped cycle1/2/3 declare toolSchemaProfile:'none' (no tool schema at
-    // all). Multi-turn maintenance roles (scheduler-task/webhook-handler) are
-    // 'read-write-search' and stay excluded.
+    // Shipped one-shot maintenance roles declare toolSchemaProfile:'none'.
     return Boolean(
         hidden
         && hidden.kind === 'maintenance'

package/src/runtime/agent/orchestrator/config.mjs

@@ -26,9 +26,7 @@ export function getPluginData() {
 // Main route. Their explicit routes live canonically in `agents.explore` and
 // `agents.maintainer`; load-time migration still accepts the older workflow /
 // maintenance aliases.
-// scheduler/webhook still let a per-entry config.json model win first (the
-// caller passes it explicitly via opts.preset); the haiku default below only
-// applies when an entry omits its own model.
+// Webhook endpoints may omit a model and use the fallback route below.
 // Legacy route slots accepted only at config ingress for migration.
 const MAINTENANCE_SLOTS = Object.freeze(['explore', 'memory']);
 
@@ -124,7 +122,6 @@ const _HAIKU_ROUTE = Object.freeze({
     model: resolveAnthropicFamilyModel('haiku'),
 });
 export const DEFAULT_MAINTENANCE = Object.freeze({
-    scheduler: { ..._HAIKU_ROUTE },
     webhook: { ..._HAIKU_ROUTE },
 });
 
@@ -484,8 +481,8 @@ export function loadConfig(options = {}) {
                 }
             }
             // Drop unknown maintenance keys (e.g. truly legacy slot names from
-            // pre-removal installs). Every valid slot — incl. scheduler/webhook —
-            // lives in DEFAULT_MAINTENANCE, so the allow-list below is the single
+            // pre-removal installs). Every valid fallback slot lives in
+            // DEFAULT_MAINTENANCE, so the allow-list below is the single
             // ingress gate and unknown keys are dropped here.
             const allowedMaintKeys = new Set([...Object.keys(DEFAULT_MAINTENANCE), ...MAINTENANCE_SLOTS]);
             const rawMaint = {};

package/src/runtime/agent/orchestrator/context/collect.mjs

@@ -555,7 +555,6 @@ import {
     listHiddenAgentsByKind,
     isHiddenAgent,
     getAgentCatalogShareAgents,
-    isInboundEventAgent,
 } from '../internal-agents.mjs';
 
 function loadAgentClassification() {
@@ -617,9 +616,8 @@ function agentSectionDirs(pluginRoot) {
 }
 
 function loadAgentSections(pluginRoot) {
-    // agents/ holds two layouts that must BOTH be loaded:
-    //   - flat:    agents/<agent>.md                (legacy: scheduler-task, webhook-handler)
-    //   - nested:  agents/<agent>/AGENT.md          (current: worker, heavy-worker, reviewer, …)
+    // agents/ accepts both the compatibility flat layout and the current
+    // nested agents/<agent>/AGENT.md layout.
     // The previous flat-only readdir silently dropped every nested agent, so a
     // public agent like heavy-worker produced an EMPTY scoped instruction block
     // (BP2) — the model lost its agent contract and the tool smoke's
@@ -659,14 +657,6 @@ function loadAgentSections(pluginRoot) {
 // provider-specific experiment without changing today's cache layout.
 const EXPLICIT_CACHE_PROVIDERS = new Set();
 
-// Inbound-event maintenance agents that report results back to Lead are
-// declared via `inboundEvent: true` in defaults/agents.json and read
-// through isInboundEventAgent(). Such agents must follow
-// rules/agent/20-skip-protocol.md so genuine no-ops (label-only events,
-// dedup, "nothing to report") prefix their output with `[meta:silent]` and the
-// dispatch layer suppresses the Lead inject. Other agents (cycle1/cycle2 memory
-// maintenance, retrieval agents) never emit toward Lead.
-
 export function loadScopedRoleInstructions(agent, provider = null) {
     const useUnified = !!(provider && EXPLICIT_CACHE_PROVIDERS.has(provider));
     const cacheKey = useUnified ? '__unified__' : (agent || '__all__');
@@ -704,10 +694,6 @@ export function loadScopedRoleInstructions(agent, provider = null) {
     const agentSharesCatalog = agent && classification.retrieval.has(agent)
         ? new Set(getAgentCatalogShareAgents(agent))
         : new Set();
-    const agentIsInboundEvent = agent && classification.maintenance.has(agent)
-        ? isInboundEventAgent(agent)
-        : false;
-
     try {
         const agentSections = loadAgentSections(pluginRoot);
         const hiddenPairs = loadHiddenAgentSnippets(pluginRoot);
@@ -743,13 +729,6 @@ export function loadScopedRoleInstructions(agent, provider = null) {
                 const fromAgent = agentSections.find(s => s.startsWith(`## ${agent}\n`));
                 if (fromAgent) agentRuleSectionsToEmit.push(fromAgent);
             }
-            // Inbound-event agents also need the skip-protocol rule so they
-            // can opt their no-op outputs out of the Lead inject (BP1 would
-            // waste the bytes on unrelated agents).
-            if (agentIsInboundEvent) {
-                const skip = hiddenPairs.find(p => p.name === 'skip-protocol');
-                if (skip) agentRuleSectionsToEmit.push(`## ${skip.name}\n\n${skip.body}`);
-            }
             agentSectionsToEmit = [];
         } else if (agent) {
             // Public/custom agent — self-only agents/<agent>.md when present,

package/src/runtime/agent/orchestrator/internal-agents.mjs

@@ -21,31 +21,18 @@
  *
  * Kind classification:
  *   - 'retrieval'   : short-lived hidden retrieval agents (explore).
- *   - 'maintenance' : background-trigger hidden agents (memory cycle, scheduler,
- *                     webhook). Receive only their own self section in BP2.
+ *   - 'maintenance' : background-trigger hidden agents (memory cycle and
+ *                     title generation). Receive only their own self section.
  *
  * Permission classification:
  *   - 'read'       : read-only — apply_patch/shell blocked at loop.mjs runtime
  *                    guard with the same error string public read-only agents see.
- *   - 'read-write' : full tool surface — used by hidden agents that legitimately
- *                    mutate state (scheduler-task launches commands,
- *                    webhook-handler persists payloads). agent-dispatch honors this
- *                    declaratively instead of forcing every hidden agent to 'read'.
+ *   - 'read-write' : full tool surface for any future mutating hidden role.
  *
  * Tool schema profile:
  *   - 'none' : no tools exposed; pure transform/classifier agents.
  *   - 'read' : read/search/code-navigation tools only.
  *   - 'full' : shared agent tool schema for provider cache reuse.
- *
- * Agent-specific instruction metadata (consumed by rules-builder.cjs
- * buildAgentRoleSpecificContent + collect.mjs):
- *   - inboundEvent   : agent reports results back to Lead and must carry the
- *                      skip-protocol rule (rules/agent/20-skip-protocol.md)
- *                      in its BP2 agent-rule block so no-op outputs opt out of the Lead
- *                      inject.
- *   - instructionDir : DATA_DIR subdir whose *.md tree is folded into the
- *                      agent's BP4-adjacent user/task data (webhook-handler →
- *                      webhooks, scheduler-task → schedules).
  */
 
 import { readFileSync, statSync } from 'fs'
@@ -97,16 +84,9 @@ function _mergeHiddenAgentFrontmatter(entry) {
   const merged = { ...entry }
   const permission = normalizeAgentPermissionOrNone(fm.permission)
   if (permission) merged.permission = permission
-  for (const key of ['toolSchemaProfile', 'kind', 'slot', 'maintKey', 'instructionDir']) {
+  for (const key of ['toolSchemaProfile', 'kind', 'slot', 'maintKey']) {
     if (typeof fm[key] === 'string' && fm[key].trim()) merged[key] = fm[key].trim()
   }
-  for (const key of ['inboundEvent']) {
-    if (typeof fm[key] === 'string' && fm[key].trim()) {
-      const raw = fm[key].trim().toLowerCase()
-      if (raw === 'true') merged[key] = true
-      else if (raw === 'false') merged[key] = false
-    }
-  }
   return merged
 }
 
@@ -213,24 +193,3 @@ export function getAgentCatalogShareAgents(name) {
   if (!hidden || !Array.isArray(hidden.catalogShareAgents)) return []
   return hidden.catalogShareAgents.map((n) => String(n || '').trim()).filter(Boolean)
 }
-
-/**
- * True when a hidden agent reports results back to Lead and must carry the
- * skip-protocol rule in its BP2 agent-rule block. Replaces the hard-coded
- * INBOUND_EVENT_ROLES set in collect.mjs.
- */
-export function isInboundEventAgent(name) {
-  const hidden = getHiddenAgent(name)
-  return !!(hidden && hidden.inboundEvent === true)
-}
-
-/**
- * Return the DATA_DIR subdir whose *.md tree rides as BP4-adjacent
- * user/task data, or null when the agent declares none. Replaces the
- * webhook/scheduler ternary in rules-builder.cjs buildAgentRoleSpecificContent.
- */
-export function getAgentInstructionDir(name) {
-  const hidden = getHiddenAgent(name)
-  const dir = hidden && typeof hidden.instructionDir === 'string' ? hidden.instructionDir.trim() : ''
-  return dir || null
-}

package/src/runtime/agent/orchestrator/session/agent-loop.mjs

@@ -211,7 +211,7 @@ export async function agentLoop(provider, messages, model, tools, onToolCall, cw
     const isExplorerSession = sessionAgent === 'explorer' || sessionAgent === 'explore';
     const loopUsageMetricsEpoch = () => Number(sessionRef?.usageMetricsEpoch) || 0;
     const loopUsageMetricsTurnId = () => Number(sessionRef?.usageMetricsTurnId) || 0;
-    // Sub-agent (worker/heavy-worker/reviewer/debugger/explore/…) sessions
+    // Sub-agent (worker/heavy-worker/reviewer/explore/…) sessions
     // drop mid-turn assistant preamble text outright. Only the final
     // <final-answer> reply is consumed by Lead, so any "Now let me…" prose
     // that precedes a tool call is pure noise — both for live surfacing AND
@@ -798,9 +798,8 @@ export async function agentLoop(provider, messages, model, tools, onToolCall, cw
         // Opus 4.6 emits 'Now I'll polish…' preamble before its first tool
         // call) and used to leave the session idle until the idle sweep
         // collected it. Re-prompt the worker with a contract reminder on each
-        // empty turn (hard iteration cap bounds total turns). Hidden roles
-        // (cycle1-agent / cycle2-agent / explorer /
-        // scheduler-task / webhook-handler) are exempt:
+        // empty turn (hard iteration cap bounds total turns). Hidden roles are
+        // exempt:
         // their own role rules define a different output contract (pipe-
         // separated chunker output, structured pipe-format, etc.) and a
         // text-only terminal turn is the correct shape — nudging them

package/src/runtime/agent/orchestrator/session/manager/rules-cache.mjs

@@ -5,7 +5,6 @@ import { createRequire } from 'module';
 import { join } from 'path';
 import { resolvePluginData, mixdogRoot } from '../../../../shared/plugin-paths.mjs';
 import { maxMtimeRecursive } from '../../cache-mtime.mjs';
-import { getAgentInstructionDir } from '../../internal-agents.mjs';
 
 // Phase B: Pool B Tier 2 content builder (common rules only).
 // Loaded once per process via createRequire so the CJS module reaches us.
@@ -122,34 +121,3 @@ export function _buildLeadMetaContext() {
         throw new Error(`[session] lead meta context build failed: ${e.message}`);
     }
 }
-
-// BP4-adjacent agent-specific data cache — keyed by agent. webhook / schedule
-// agents each have their own scoped instruction set; other agents return ''.
-const _roleSpecificCache = new Map(); // agent → { value, mtime }
-export function _buildAgentSpecific(currentAgent) {
-    if (!_rulesBuilder || typeof _rulesBuilder.buildAgentRoleSpecificContent !== 'function') return '';
-    if (!currentAgent) return '';
-    const PLUGIN_ROOT = mixdogRoot();
-    const DATA_DIR = resolvePluginData();
-    const RULES_DIR = join(PLUGIN_ROOT, 'rules');
-    const roleInstructionDir = getAgentInstructionDir(currentAgent);
-    const mtime = maxMtimeRecursive([
-        join(RULES_DIR, 'shared'),
-        join(DATA_DIR, 'mixdog-config.json'),
-        join(DATA_DIR, 'webhooks'),
-        join(DATA_DIR, 'schedules'),
-        ...(roleInstructionDir ? [join(DATA_DIR, roleInstructionDir)] : []),
-        join(PLUGIN_ROOT, 'defaults', 'agents.json'),
-    ]);
-    const entry = _roleSpecificCache.get(currentAgent);
-    if (entry && mtime <= entry.mtime) {
-        return entry.value;
-    }
-    try {
-        const built = _rulesBuilder.buildAgentRoleSpecificContent({ PLUGIN_ROOT, DATA_DIR, currentAgent });
-        _roleSpecificCache.set(currentAgent, { mtime, value: built });
-        return built;
-    } catch (e) {
-        throw new Error(`[session] agent-specific rules build failed (agent: ${currentAgent}): ${e.message}`);
-    }
-}