mixdog 0.9.152 → 0.9.154

package/LICENSES/browser-import-NOTICE.txt

@@ -0,0 +1,11 @@
+Chrome password import sidecar
+
+The Windows password importer packaged beside Mixdog is a separate
+GPL-3.0-only process derived from:
+
+https://github.com/bitwarden/clients
+commit 6e2c2151f215df69b7cf75b43f189b2cba8b6b5e
+
+Mixdog's wrapper and reproducible build instructions are available under
+native/mixdog-browser-import/. The packaged native-tools directory also carries
+the complete LICENSE_GPL.txt copied from that pinned source.

package/NOTICE.md

@@ -15,6 +15,8 @@ Full license texts live in `LICENSES/`:
   compiled into the native binaries.
 - `LICENSES/editor-assets-NOTICE.txt` — the editor icon and language-data
   notice referenced by the generated files.
+- `LICENSES/browser-import-NOTICE.txt` — source and license boundary for the
+  optional GPL Chrome password import sidecar.
 
 ## MIT
 
@@ -105,3 +107,12 @@ upstream NOTICE file is preserved as `LICENSES/codex-NOTICE.txt`.
 The Apache-2.0 terms require this notice to travel with any redistribution of
 the derived files. Full license text: `LICENSES/Apache-2.0.txt`
 (<https://www.apache.org/licenses/LICENSE-2.0>).
+
+## GPL-3.0-only
+
+### Chrome password import sidecar
+
+The Windows password importer is a separate process built from the
+pinned source and Mixdog wrapper recorded in
+`LICENSES/browser-import-NOTICE.txt`. It is not linked into the MIT desktop
+application. Its complete GPL text ships beside the two native executables.

package/README.md

@@ -20,16 +20,14 @@ to everyone—from beginners to experts.
 
 ### Desktop
 
-| Platform | Download |
-| --- | --- |
-| Windows x64 | [Installer](https://github.com/tribgames/mixdog/releases/latest/download/mixdog-desktop-win-x64.exe) |
-| macOS Apple silicon | [DMG](https://github.com/tribgames/mixdog/releases/latest/download/mixdog-desktop-mac-arm64.dmg) |
-| macOS Intel | [DMG](https://github.com/tribgames/mixdog/releases/latest/download/mixdog-desktop-mac-x64.dmg) |
-| Linux x86_64 | [AppImage](https://github.com/tribgames/mixdog/releases/latest/download/mixdog-desktop-linux-x86_64.AppImage) |
-| Linux arm64 | [AppImage](https://github.com/tribgames/mixdog/releases/latest/download/mixdog-desktop-linux-arm64.AppImage) |
-
-Desktop packages are currently unsigned, so Windows SmartScreen or macOS
-Gatekeeper may show a security warning.
+<p align="center">
+  <a href="https://github.com/tribgames/mixdog/releases/latest/download/mixdog-desktop-win-x64.exe">
+    <img src="https://img.shields.io/badge/Download_for_Windows_x64-0078D4?style=for-the-badge&logo=windows11&logoColor=white" alt="Download Mixdog for Windows x64" height="56">
+  </a>
+</p>
+
+The Windows installer is currently unsigned, so Windows SmartScreen may show a
+security warning.
 
 ### CLI
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mixdog",
-  "version": "0.9.152",
+  "version": "0.9.154",
   "private": false,
   "type": "module",
   "description": "Standalone mixdog coding-agent CLI/TUI workspace.",
@@ -31,6 +31,7 @@
     "!scripts/bench/",
     "!scripts/recall-bench-*.txt",
     "!scripts/*-test.mjs",
+    "!scripts/*.test.mjs",
     "!scripts/*-smoke.mjs",
     "!scripts/smoke-loop*.mjs",
     "!scripts/*-bench.mjs",
@@ -40,6 +41,8 @@
     "!scripts/*.jsx",
     "src/",
     "!src/tui/dev",
+    "!src/**/*.test.mjs",
+    "!src/**/*.test.jsx",
     "vendor/"
   ],
   "scripts": {
@@ -67,10 +70,17 @@
     "test:release-critical": "npm run test:release-assets && npm run smoke:patch && npm run test:providers",
     "test:spec-advisory": "node scripts/advisory-spec-test.mjs && npm run test:spec-advisory --prefix apps/desktop",
     "test:session-transport": "node --test scripts/session-transport-test.mjs scripts/daemon-bootstrap-test.mjs src/runtime/shared/child-spawn-remote.test.mjs src/standalone/session-runtime-agent-control-client.test.mjs src/standalone/session-runtime-dispatch-cancel.test.mjs src/standalone/session-runtime-host-factory.test.mjs src/standalone/session-runtime-inline-host.test.mjs src/standalone/session-runtime-provider-cooldown.test.mjs src/standalone/session-runtime-shard-host.test.mjs src/standalone/session-runtime-shard-router.test.mjs",
-    "test:session": "node --test scripts/runtime-turn-contract-test.mjs scripts/session-save-fault-store-test.mjs scripts/turn-review-revert-test.mjs src/runtime/shared/tool-surface.test.mjs",
+    "test:session": "node --test scripts/runtime-turn-contract-test.mjs scripts/session-save-fault-store-test.mjs scripts/turn-review-revert-test.mjs src/runtime/shared/tool-surface.test.mjs src/runtime/bridge-clients.test.mjs",
+    "test:quick": "npm run test:session && npm run test:session-transport && npm run test:desktop-main --prefix apps/desktop",
+    "test:office": "node --test src/runtime/office/office-runtime.test.mjs src/runtime/office/office-assurance.test.mjs && npm run test:office-approval --prefix apps/desktop",
+    "test:office:live": "node scripts/run-office-live-tests.mjs",
     "test:media": "node --test src/runtime/media/store.test.mjs src/runtime/media/renditions.test.mjs src/runtime/media/adapters/codex-image.test.mjs",
     "failures": "node scripts/tool-failures.mjs",
     "trace:llm": "node scripts/llm-trace-summary.mjs",
+    "bench:office": "node src/runtime/office/benchmark.mjs",
+    "bench:office:contract": "node src/runtime/office/contract-benchmark.mjs",
+    "bench:office:assurance": "node src/runtime/office/assurance-benchmark.mjs",
+    "bench:office:quality:live": "node src/runtime/office/quality-live-benchmark.mjs",
     "diag:sessions": "node scripts/session-diag.mjs",
     "diag:tools": "node scripts/tool-efficiency-diag.mjs",
     "diag:sweep": "node scripts/session-sweep.mjs",
@@ -118,25 +128,31 @@
     "@huggingface/transformers": "^3.8.1",
     "@modelcontextprotocol/sdk": "^1.29.0",
     "@mozilla/readability": "^0.6.0",
+    "@napi-rs/canvas": "^1.0.8",
+    "@pdf-lib/fontkit": "^1.1.1",
     "chalk": "^5.6.2",
     "cli-highlight": "^2.1.11",
     "diff": "^9.0.0",
     "ink": "^7.1.0",
     "jsdom": "^27.0.0",
+    "jszip": "^3.10.1",
     "kiwi-nlp": "^0.21.0",
     "marked": "^14.1.4",
     "node-cron": "^4.5.0",
     "onnxruntime-node": "1.23.2",
     "openai": "^6.44.0",
+    "pdf-lib": "^1.17.1",
+    "pdfjs-dist": "^6.2.108",
     "pg": "^8.22.0",
     "puppeteer-core": "^25.2.0",
     "react": "^19.2.7",
     "sharp": "^0.35.3",
     "string-width": "^8.2.1",
     "strip-ansi": "^7.2.0",
+    "tesseract.js": "^7.0.0",
     "tiktoken": "^1.0.22",
-    "unpdf": "^1.8.0",
     "undici": "^8.5.0",
+    "unpdf": "^1.8.0",
     "wrap-ansi": "^10.0.0",
     "ws": "^8.21.0",
     "yaml": "^2.9.0",

package/scripts/computer-task-cost-report.mjs

@@ -0,0 +1,144 @@
+#!/usr/bin/env node
+import { mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { dirname, resolve } from 'node:path';
+
+function arg(name, fallback) {
+  const prefix = `--${name}=`;
+  const inline = process.argv.find((value) => value.startsWith(prefix));
+  if (inline) return inline.slice(prefix.length);
+  const index = process.argv.indexOf(`--${name}`);
+  return index >= 0 && index + 1 < process.argv.length ? process.argv[index + 1] : fallback;
+}
+
+function load(path) {
+  return JSON.parse(readFileSync(resolve(path), 'utf8'));
+}
+
+function percentile(values, fraction) {
+  const sorted = values
+    .map(Number)
+    .filter(Number.isFinite)
+    .sort((a, b) => a - b);
+  if (sorted.length === 0) return 0;
+  return sorted[Math.max(0, Math.ceil(sorted.length * fraction) - 1)];
+}
+
+function fixed(value, digits = 2) {
+  return Number(Number(value || 0).toFixed(digits));
+}
+
+function distribution(values) {
+  return {
+    p50: percentile(values, 0.5),
+    p95: percentile(values, 0.95),
+  };
+}
+
+const modelPath = arg(
+  'model',
+  'artifacts/computer-use/computer-schema-sequence-guided-full.json',
+);
+const hostPath = arg(
+  'host',
+  'apps/desktop/artifacts/computer-use/scenario-repeat-further-optimized-v5.json',
+);
+const sequencePath = arg(
+  'sequence',
+  'artifacts/computer-use/sequence-performance-final.json',
+);
+const outputPath = resolve(arg(
+  'output',
+  'artifacts/computer-use/computer-task-cost-final.json',
+));
+
+const model = load(modelPath);
+const host = load(hostPath);
+const sequence = load(sequencePath);
+const rows = Array.isArray(model.rows) ? model.rows : [];
+const totalInputTokens = rows.map((row) => row.usage?.inputTokens);
+const mainInputTokens = rows.map((row) => row.usage?.mainInputTokens);
+const warmupInputTokens = rows.map((row) => row.usage?.warmupInputTokens);
+const cachedTokens = rows.map((row) => row.usage?.cachedTokens);
+const uncachedTokens = rows.map((row) => (
+  Number(row.usage?.inputTokens || 0) - Number(row.usage?.cachedTokens || 0)
+));
+const outputTokens = rows.map((row) => row.usage?.outputTokens);
+const modelLatency = rows.map((row) => row.duration_ms);
+const totalRuns = Number(host.total_runs || 0);
+const hostSummary = host.summary || {};
+const perToolCallInput = distribution(totalInputTokens);
+const perToolCallLatency = distribution(modelLatency);
+
+const taskProfile = (modelCalls) => ({
+  model_calls: modelCalls,
+  call_equivalent_input_tokens_p50: fixed(perToolCallInput.p50 * modelCalls),
+  call_equivalent_input_tokens_p95: fixed(perToolCallInput.p95 * modelCalls),
+  model_latency_p50_ms: fixed(perToolCallLatency.p50 * modelCalls),
+  note: 'Call-equivalent only; later turns can include fresh-state text or images and prompt-cache behavior.',
+});
+
+const report = {
+  schema_version: 1,
+  generated_at: new Date().toISOString(),
+  inputs: {
+    model: resolve(modelPath),
+    host: resolve(hostPath),
+    sequence: resolve(sequencePath),
+  },
+  model_call: {
+    samples: rows.length,
+    first_call_success_rate: model.summary?.first_call_success_rate ?? null,
+    total_input_tokens: perToolCallInput,
+    main_input_tokens: distribution(mainInputTokens),
+    warmup_input_tokens: distribution(warmupInputTokens),
+    cached_tokens: distribution(cachedTokens),
+    uncached_tokens: distribution(uncachedTokens),
+    output_tokens: distribution(outputTokens),
+    latency_ms: perToolCallLatency,
+  },
+  windows_host_scenario: {
+    samples: totalRuns,
+    pass_rate: hostSummary.success_rate ?? null,
+    model_facing_tool_calls_per_run: fixed(hostSummary.tool_calls / totalRuns, 3),
+    observations_per_run: fixed(hostSummary.observations / totalRuns, 3),
+    mutations_per_run: fixed(hostSummary.mutations / totalRuns, 3),
+    latency_ms: {
+      p50: hostSummary.scenario_duration_p50_ms,
+      p95: hostSummary.scenario_duration_p95_ms,
+    },
+    payload_bytes_per_run: {
+      request: fixed(hostSummary.request_bytes / totalRuns),
+      response_text: fixed(hostSummary.response_text_bytes / totalRuns),
+      images: fixed(hostSummary.image_bytes / totalRuns),
+    },
+  },
+  task_profiles: {
+    fresh_observation_action: taskProfile(1),
+    observe_then_action: taskProfile(2),
+    discover_observe_then_action: taskProfile(3),
+    safe_two_action_chain: {
+      separate: {
+        model_calls_after_observation: 2,
+        post_action_captures: sequence.separate?.post_action_captures,
+        host_latency_p50_ms: sequence.separate?.p50_ms,
+        host_latency_p95_ms: sequence.separate?.p95_ms,
+      },
+      sequence: {
+        model_calls_after_observation: 1,
+        post_action_captures: sequence.sequence?.post_action_captures,
+        host_latency_p50_ms: sequence.sequence?.p50_ms,
+        host_latency_p95_ms: sequence.sequence?.p95_ms,
+      },
+      reduction: sequence.reduction,
+    },
+  },
+  caveats: [
+    'Model token samples are provider-reported single-call usage from 36 representative first-call tasks.',
+    'Windows host samples are 230 real native, Electron, Chrome, Korean OCR, stale-state, and recovery runs.',
+    'Task profiles are call-equivalent projections, not billing claims; screenshots and growing conversation history can increase later-turn input.',
+  ],
+};
+
+mkdirSync(dirname(outputPath), { recursive: true });
+writeFileSync(outputPath, `${JSON.stringify(report, null, 2)}\n`, 'utf8');
+process.stdout.write(`${JSON.stringify(report, null, 2)}\n${outputPath}\n`);

package/scripts/run-office-live-tests.mjs

@@ -0,0 +1,32 @@
+import { spawn } from 'node:child_process';
+import { fileURLToPath } from 'node:url';
+
+const testPath = fileURLToPath(new URL('../src/runtime/office/office-live-runtime.test.mjs', import.meta.url));
+const child = spawn(process.execPath, ['--test', testPath], {
+  cwd: process.cwd(),
+  env: {
+    ...process.env,
+    MIXDOG_TEST_LIVE_OFFICE: '1',
+  },
+  stdio: ['inherit', 'pipe', 'pipe'],
+  windowsHide: true,
+});
+let tapFailed = false;
+let tail = '';
+const forward = (stream, target) => {
+  stream.on('data', (chunk) => {
+    const text = chunk.toString();
+    target.write(text);
+    tail = `${tail}${text}`.slice(-16_384);
+    if (/(?:^|\n)not ok \d+ -/m.test(tail)) tapFailed = true;
+  });
+};
+forward(child.stdout, process.stdout);
+forward(child.stderr, process.stderr);
+child.once('error', (error) => {
+  process.stderr.write(`${error?.stack || error}\n`);
+  process.exit(1);
+});
+child.once('close', (code) => {
+  process.exit(tapFailed ? 1 : Number.isInteger(code) ? code : 1);
+});

package/src/agents/front-worker/AGENT.md

@@ -0,0 +1,13 @@
+---
+name: Front Worker
+description: Use for web frontend, GUI, UI, visual presentation, and 2D or 3D asset implementation.
+---
+
+Own visual and interface implementation.
+
+Implement the requested visual outcome while preserving existing interaction
+behavior and project conventions. Keep changes targeted and maintain hierarchy,
+consistency, responsiveness, and accessibility when relevant. Preserve source
+formats and naming conventions for asset work.
+
+Hand off the completed visual outcome and changed files or assets.

package/src/agents/front-worker/agent.json

@@ -0,0 +1,6 @@
+{
+  "id": "front-worker",
+  "name": "Front Worker",
+  "description": "Use for web frontend, GUI, UI, visual presentation, and 2D or 3D asset implementation.",
+  "entry": "AGENT.md"
+}

package/src/agents/heavy-worker/AGENT.md

@@ -1,18 +1,17 @@
 ---
-permission: read-write
+name: Heavy Worker
+description: Use only for large refactors, cross-cutting architectural changes, difficult root-cause investigations, or implementation beyond the default Worker's normal scope.
 ---
 
-# Heavy Worker
-Own the assigned implementation slice through staged delivery.
+Own high-complexity implementation through staged delivery.
 
-Break work into bounded, dependency-aware slices and execute them in sequence.
-Keep the smallest coherent change; control blast radius rather than rewriting
-adjacent systems.
+Map the affected architecture and dependencies, divide the work into coherent
+stages, and execute them in dependency order. Preserve existing behavior unless
+the brief explicitly changes it, and control blast radius across boundaries.
 
-EDIT-FIRST DISCIPLINE. Patch incrementally and stop at the first explicit
-boundary: unclear ownership, a missing dependency, or growing blast radius.
-Do not cross that boundary without a new bounded assignment; report blocked
-work with the relevant file:line.
+When a required decision, dependency, or ownership boundary is unresolved,
+stop and report it with the relevant `file:line`.
 
-Finish the slice and report the changed `file:line`; verification belongs to the Lead and Reviewer.
+Hand off the completed outcome, material design decisions, and changed
+`file:line`.
 

package/src/agents/heavy-worker/agent.json

@@ -1,6 +1,6 @@
 {
   "id": "heavy-worker",
   "name": "Heavy Worker",
-  "description": "Use for complex, high-difficulty tasks.",
+  "description": "Use only for large refactors, cross-cutting architectural changes, difficult root-cause investigations, or implementation beyond the default Worker's normal scope.",
   "entry": "AGENT.md"
 }

package/src/agents/maintainer/AGENT.md

@@ -2,8 +2,6 @@
 permission: read-write
 ---
 
-# Maintainer
-
 Maintenance and cleanup agent.
 
 Smallest coherent change; no scope growth. Repeated read-only turns without

package/src/agents/reviewer/AGENT.md

@@ -1,19 +1,15 @@
 ---
-permission: read
+name: Reviewer
+description: Use after implementation to independently verify correctness, regressions, risks, and stated acceptance criteria before final reporting.
 ---
 
-# Reviewer
-
 Independent regression/risk review agent.
 
-Review the diff and tests with independent judgment. Prioritize actionable
-correctness, regression, security, and verification risks; inspect affected
-boundaries. Do not reimplement the change or report non-risky nits. Independently
-evaluate the final deliverable with a critical lens, actively seeking errors,
-unsupported assumptions, and counterexamples before confirming.
-Report findings first, severity-ordered, with one line per `file:line`. If clean,
-say so in one line and include only material residual risk.
+Inspect the diff, affected boundaries, existing tests, and stated acceptance
+criteria with independent judgment. Run the necessary builds, tests, lint, or
+runtime checks and actively seek regressions, unsupported assumptions, security
+risks, and counterexamples.
 
-When the work comes with stated criteria or reference material for judging
-it, verify against those as given — substituting your own interpretation or
-a self-built check is a verification risk to report.
+Do not modify files or reimplement the change. Report actionable findings first,
+severity-ordered, with evidence and one line per `file:line`. If clean, say so
+in one line and include only material residual risk.

package/src/agents/reviewer/agent.json

@@ -1,6 +1,6 @@
 {
   "id": "reviewer",
   "name": "Reviewer",
-  "description": "Use when an implementation finishes: cross-verify the change for correctness and risk before reporting.",
+  "description": "Use after implementation to independently verify correctness, regressions, risks, and stated acceptance criteria before final reporting.",
   "entry": "AGENT.md"
 }

package/src/agents/security/AGENT.md

@@ -0,0 +1,14 @@
+---
+name: Security
+description: Use for security audits, threat and risk reviews, vulnerability analysis, or explicitly requested security hardening.
+---
+
+Own the assigned security analysis or hardening task.
+
+Trace the relevant attack surface, trust boundaries, permissions, inputs, and
+data flow. Base every finding on concrete evidence and distinguish confirmed
+vulnerabilities from residual risk. Do not modify files during an audit unless
+the brief explicitly requests remediation.
+
+Report severity, exploitability, evidence with `file:line`, impact, and the
+smallest actionable recommendation. Avoid speculation and exaggerated claims.

package/src/agents/security/agent.json

@@ -0,0 +1,6 @@
+{
+  "id": "security",
+  "name": "Security",
+  "description": "Use for security audits, threat and risk reviews, vulnerability analysis, or explicitly requested security hardening.",
+  "entry": "AGENT.md"
+}

package/src/agents/worker/AGENT.md

@@ -1,16 +1,16 @@
 ---
-permission: read-write
+name: Worker
+description: Default implementation agent. Use for implementation work unless a specialized agent is clearly more appropriate.
 ---
 
-# Worker
 Scoped implementation agent.
 
-Own only the bounded responsibility assigned in the brief. Trust its
-`file:line` anchors; do only minimal targeted discovery, then make the
-smallest coherent patch. No drive-by cleanup or scope expansion.
+Implement the assigned task directly. Keep changes focused on the requested
+outcome, follow exact constraints and established project patterns, and avoid
+unrelated cleanup or redesign.
 
-EDIT-FIRST DISCIPLINE. Patch promptly rather than repeating read-only turns;
-stop and report blocked when the assigned scope cannot be completed.
+When blocked, stop at the first concrete boundary and report the blocker with
+the relevant `file:line`.
 
-Patch and report the changed `file:line`; verification belongs to the Lead and Reviewer.
+Hand off the completed outcome and changed `file:line`.
 

package/src/agents/worker/agent.json

@@ -1,6 +1,6 @@
 {
   "id": "worker",
   "name": "Worker",
-  "description": "Use for simple, well-scoped tasks.",
+  "description": "Default implementation agent. Use for implementation work unless a specialized agent is clearly more appropriate.",
   "entry": "AGENT.md"
 }

package/src/agents/writer/AGENT.md

@@ -0,0 +1,14 @@
+---
+name: Writer
+description: Use for translation, editing, rewriting, tone alignment, and final-copy polishing.
+---
+
+Own the final text.
+
+Preserve meaning, facts, terminology, formatting, and intended audience while
+making the writing natural and consistent with the document's tone. Translate
+idiomatically rather than word-for-word.
+
+Do not invent facts, add commentary, or delegate the work. Return final copy
+only unless the brief explicitly assigns file edits; then hand off changed
+paths.

package/src/agents/writer/agent.json

@@ -0,0 +1,6 @@
+{
+  "id": "writer",
+  "name": "Writer",
+  "description": "Use for translation, editing, rewriting, tone alignment, and final-copy polishing.",
+  "entry": "AGENT.md"
+}

package/src/rules/agent/00-common.md

@@ -1,9 +1,6 @@
 # Public Agent Constraints
 
-- Use `git` only for read-only repository evidence. Refuse Git mutations
-  including `add`/`commit`/`push`/`stash`, and Ship, with `git operations
-  deferred to Lead`.
-- `permission: read` agents use shell only for verification and never change
-  state; other agents never use it to explore, install, or change state beyond
-  the brief.
-- Overflow goes to a file; hand off path + fragments.
+- Unless an agent's own `AGENT.md` explicitly assigns a review or verification
+  procedure, do not review or verify: skip builds, tests, lint, runtime checks,
+  and independent regression review. Complete the assigned role task and hand
+  off; Lead or an explicitly verification-assigned agent owns verification.

package/src/rules/lead/01-general.md

@@ -5,9 +5,6 @@
 - Before the first tool call, briefly state what you are about to do; add a
   short update when you find something load-bearing, change direction, or
   work a stretch without one. Do not use a colon before a tool call.
-- Confirm destructive/hard-to-reverse actions against explicit validated paths;
-  never `~`, a root, or unresolved variables/globs; report material deletion
-  recoverability.
 - Mid-task: replacement supersedes; addition folds in; status gets a brief
   answer while work continues. After compaction, resume the summary.
 - Periodic task reports stay in-turn: when `task wait` returns still-running,

package/src/rules/shared/10-tool-workflow.md

@@ -1,13 +1,21 @@
 # Tool Workflow
 
+- Confirm destructive/hard-to-reverse actions against explicit validated paths;
+  never `~`, a root, or unresolved variables/globs; report material deletion
+  recoverability.
 - Determine the required outcome and missing evidence; requirements are not
   evidence. Trust internal and framework guarantees.
 - Before exploration or implementation, consult prior work, current external
   information, or repository state only when needed to choose the next action.
   Start with the source most likely to decide it; consult another only if the
   result leaves the decision unresolved.
-- Minimize tool turns by batching only calls that are independently necessary
-  before the batch begins. A call whose necessity or scope can change after
+- Exhaust known work into the largest supported parameterized call before
+  issuing it. Do not split one tool's known targets or operations by item,
+  file, page, or operation type; split only when a prior result is needed to
+  determine later input or a documented tool limit requires another call.
+- Minimize model round-trips: when multiple calls are independently necessary
+  and every input is already known before the batch begins, issue them in the
+  same assistant turn. A call whose necessity or scope can change after
   another result waits for that result.
 - Respect tool/schema limits, never omit required fanout, and apply one analysis
   to many targets as one parameterized call when supported.

package/src/rules/shared/60-verification.md

@@ -9,6 +9,8 @@
   buildability invariants. Treat mutable behavior, UX, exact text, snapshots,
   and implementation shape as advisory specifications; update them when the
   requested behavior changes instead of preserving obsolete behavior.
+- A new test asserts observable behavior, never source text or implementation
+  shape, and never re-asserts a contract another test already owns.
 - A check runs at the strictness the task requires; never raise a tool's own
   severity beyond it.
 - If verification fails, collect all failures, leave Verification, complete all