mixdog 1.0.0 → 1.0.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mixdog",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "private": false,
   "type": "module",
   "description": "Standalone mixdog coding-agent CLI/TUI workspace.",

package/src/defaults/skills/computer-use/SKILL.md

@@ -115,18 +115,19 @@ GNOME with the Window Calls extension); prefer accessibility refs there.
   of the shared desktop. If that surface is unavailable, use semantic refs or
   report `pixel_unavailable`; do not substitute a screen grab.
 - If the user intervenes, preserve their cursor and focus. Worker termination
-  and input cleanup must finish before resuming; a failed cleanup is not cleared
-  by a resume request. Ask the user to press `Ctrl+Alt+Esc`, or the overlay's
-  Stop control, for verified cleanup recovery.
-  If target-local release remains unconfirmed, the user must inspect/recover
-  that window; restarting the host alone does not prove release. Obtain a new
-  observation after an interruption.
-  Use `wait_for_user` to keep the task waiting without sending input. The host
-  may resume ordinary physical-input interruptions after its configured quiet
-  interval; renewed input resets that interval. Explicit pauses/stops and
-  uncertain observation/cleanup never auto-resume. The overlay's only control
-  is Stop, which cancels the task. Never operate it or the recovery controls,
-  or change the idle policy, on the user's behalf.
+  and input cleanup must finish before resuming. The user's Resume on the
+  overlay continues a pause; an ordinary physical-input pause may also resume
+  after the host's configured quiet interval (renewed input resets it), while
+  explicit pauses, stops and uncertain cleanup never auto-resume. Stop (or
+  `Ctrl+Alt+Esc`) cancels the task, which then reports the stop as a failure.
+  A cleanup that could not be confirmed is retried before the next input
+  command; if it still fails, that command returns the reason — relay it to
+  the user. If target-local release remains unconfirmed, the user must
+  inspect/recover that window; restarting the host alone does not prove
+  release. Obtain a new observation after an interruption.
+  Use `wait_for_user` to keep the task waiting without sending input. Never
+  operate Resume, Stop or the recovery controls, or change the idle policy, on
+  the user's behalf.
   While paused, only `list`, `diagnose` and `wait_for_user` are available.
   Chat text alone does not clear the host. After `resumed`, capture fresh state;
   after `timeout` or `cancelled`, no input is authorized. Never replay the

package/src/defaults/skills/setup/SKILL.md

@@ -25,7 +25,7 @@ supported `setup` action, and read its result as the change receipt.
   arguments and the transcript. Open the Providers surface and let the user
   enter them.
 - A mutation follows the active workflow's approval rules. Status, catalog,
-  definition, MCP-config and Instructions reads do not change persisted settings.
+  definition and MCP-config reads do not change persisted settings.
 - Most changes affect new sessions. Report `appliedToCurrentSession` and
   `appliesTo` exactly when the result supplies them.
 - This skill does not own source edits, builds, installation deployment,
@@ -78,9 +78,6 @@ that a call returned without transport error.
 - Read definitions before editing them; use skill-creator when authoring a
   skill. Setup persists the supported definition fields. Workflow and agent
   ids are stable identities, distinct from their display names.
-- Read Instructions before replacing them and pass the returned text as
-  `expectedContent`. `projectPath:null` means Common Instructions; otherwise
-  use an exact registered Project root. Keep the returned backup.
 - MCP servers and plugins are machine-global integrations whose visibility may
   be scoped to selected Projects.
 - User skills are machine-global. Enabled plugin skills and built-in skills are

package/src/defaults/skills/setup/references/actions.md

@@ -68,8 +68,6 @@ Read this when choosing a `setup` mutation.
 | Desktop theme, display language, side panels, or zoom | `set_appearance` |
 | Register a Project and optionally set its display alias | `save_project` |
 | Unregister a Project without deleting its files | `remove_project` |
-| Read Project/Common Instructions before editing | `get_instructions` |
-| Replace unchanged Project/Common Instructions and retain a backup | `set_instructions` |
 | Revoke one linked device; re-pairing restores access | `revoke_linked_device` |
 | Managed local model context allocation; null restores automatic | `set_local_context` |
 

package/src/defaults/skills/setup/references/surfaces.md

@@ -38,8 +38,7 @@ An attached Desktop or TUI may navigate and return `opened:true`.
 - Extensions → Plugin → Git & GitHub: Git/GitHub CLI installation and connection.
 - Settings → Connection: web-app pairing and linked devices.
 - Settings → System: update, keep-awake, and Doctor.
-- Projects: Project registration, name, Instructions, Common Instructions, and
-  Core Memories.
+- Projects: Project registration, name, Project Memories, and Common Memory.
 - Workflows: workflow packs, Main and Web Search defaults, and agent editing.
 - Extensions → Plugin: Built-in cards and plugins.
 - Extensions → Skill: skills and MCP servers.
@@ -51,7 +50,7 @@ the user to Desktop.
 
 Setup can read and change Desktop appearance, keep-awake, usage pin,
 Computer observe-only, Browser/Computer/voice installation and toggles,
-Projects, Instructions, and linked-device revocation through the attached
+Projects, and linked-device revocation through the attached
 Desktop. A receipt identifies `scope:desktop-host`; appearance is not applied
 to the paired browser. No Desktop claimant means no confirmed change.
 

package/src/rules/shared/70-delivery.md

@@ -7,6 +7,9 @@
   absolute path, optionally `:line[:column]` (`deliverables/report.docx`,
   `src/app.ts:42`); never a bare name, a path relative to another folder, or a
   `file://` URI.
+- Deliver requested visual artifacts (SVG, diagrams, HTML pages) as saved files
+  and give their path; never paste their source as the answer unless the user
+  asks for the code.
 
 <!-- tools: git -->
 - A commit request includes selecting and staging its changes; a stage-only

package/src/runtime/agent/orchestrator/agent-trace-format.mjs

@@ -410,6 +410,11 @@ function classifyToolFailure(resultText, toolName) {
     if (/\[signal:\s*[^\]]+/i.test(leading)) return 'process/signal';
     return 'command-exit';
   }
+  // edit quotes the file around a miss (the nearest line and a current-file
+  // excerpt). That quoted text is file content, so a word in it such as
+  // "unreadable", "timeout" or "permission" must not pick the category.
+  if (toolName === 'edit' && /^edit failed \(old_string (?:not found|found \d+ times)\b/i.test(leading))
+    return 'runtime/failure';
   if (/compacted-history placeholder/.test(text)) return 'expected-preflight';
   if (/\[tool-input-validation\]/.test(text)) return 'schema/args';
   // These are emitted validation/cancellation contracts, not keywords found

package/src/runtime/agent/orchestrator/config.mjs

@@ -100,7 +100,9 @@ export function buildDefaultConfig(options = {}) {
   providers['mixdog-local'] = { enabled: false };
   return {
     providers,
-    disabledAgents: [...DEFAULT_DISABLED_AGENT_IDS],
+    // The Maintainer also starts off: background upkeep spends model calls, so
+    // it runs only once the user turns it on and picks its model.
+    disabledAgents: [...DEFAULT_DISABLED_AGENT_IDS, 'maintainer'],
     workflow: { active: 'default' },
     orchestrationMode: 'none',
   };
@@ -272,6 +274,11 @@ export function loadConfig(options = {}) {
     recap: { enabled: true },
     developer: {},
     modules: {},
+    // No stored section at all is a brand-new profile: its built-ins start
+    // uninstalled. The defaults above carry presets/recap/modules, which
+    // would otherwise read as a pre-section profile and be grandfathered.
+    // A stored section that failed to parse proves nothing and keeps that path.
+    ...(hasKeys(sectionRaw) ? {} : { builtins: {} }),
   };
 }
 /** In-lock patch of `skills.disabled` only (avoids whole-config lost-update). */

package/src/runtime/agent/orchestrator/providers/registry-errors.mjs

@@ -0,0 +1,9 @@
+// Error code for a provider init that has no enabled provider to register.
+// The registry refuses such an init to protect its live instances; readers
+// that legitimately run before any provider exists (the model catalog on a
+// fresh install) treat it as "nothing to load" instead of a failure.
+export const NO_ENABLED_PROVIDERS = 'PROVIDERS_NONE_ENABLED';
+
+export function noEnabledProvidersError(message) {
+  return Object.assign(new Error(message), { code: NO_ENABLED_PROVIDERS });
+}

package/src/runtime/agent/orchestrator/providers/registry.mjs

@@ -4,6 +4,7 @@ import { refreshCatalog as refreshMetadataCatalog } from './model-catalog.mjs';
 import { wrapProviderAdmission } from './admission-scheduler.mjs';
 import { createAccountPoolProvider } from './account-pool.mjs';
 import { isInclusiveProvider } from '../../../shared/llm/cost.mjs';
+import { noEnabledProvidersError } from './registry-errors.mjs';
 // OpenAI-compat provider names are self-declared by openai-compat-presets.mjs via
 // OPENAI_COMPAT_PRESETS. No parallel list maintained here.
 const providers = new Map();
@@ -223,7 +224,7 @@ async function _initProvidersUnsynchronized(config, signal = null) {
   // here preserves whatever was already registered.
   const entries = Object.entries(config || {});
   if (entries.length === 0) {
-    throw new Error('[provider] initProviders called with empty config — refusing to clear registry');
+    throw noEnabledProvidersError('[provider] initProviders called with empty config — refusing to clear registry');
   }
   const next = new Map();
   const nextSignatures = new Map();
@@ -258,7 +259,7 @@ async function _initProvidersUnsynchronized(config, signal = null) {
   // Second guard: every entry was disabled. Same reasoning — keep the
   // existing registry rather than going dark.
   if (next.size === 0) {
-    throw new Error('[provider] all providers disabled in config — refusing to clear registry');
+    throw noEnabledProvidersError('[provider] all providers disabled in config — refusing to clear registry');
   }
   // OAuth preservation guard. anthropic-oauth / openai-oauth are NOT stored
   // in mixdog-config.json — buildDefaultConfig injects them at runtime by

package/src/runtime/agent/orchestrator/runtime-core/goal-tasks.mjs

@@ -6,11 +6,13 @@ import { clean } from '../../../shared/clean.mjs';
 // dropped on normalize rather than rejected.
 const TASK_ENTRY_FIELDS = ['id', 'text', 'status', 'kind'];
 
-// Dropped rows remain in the record but are no longer requested work.
+// Dropped rows remain in the record but are no longer requested work. Every
+// row, completed and dropped included, still fills one of the capped slots.
 export function goalTaskProgress(tasks) {
   return {
     tasksCompleted: tasks.filter((task) => task?.status === 'completed').length,
     tasksTotal: tasks.filter((task) => task?.status !== 'dropped').length,
+    taskSlotsUsed: tasks.length,
   };
 }
 
@@ -89,12 +91,18 @@ function taskInputRetains(entry, task) {
 }
 
 export function patchGoalTasks(previous, { updates, tasks } = {}) {
-  const patches = updates ?? [];
-  const additions = tasks ?? [];
-  if (!Array.isArray(patches) || !Array.isArray(additions)) throw new Error('goal updates and tasks must be arrays');
+  const requested = updates ?? [];
+  const entries = tasks ?? [];
+  if (!Array.isArray(requested) || !Array.isArray(entries)) throw new Error('goal updates and tasks must be arrays');
+  const byId = new Map(previous.map((task) => [task.id, { ...task }]));
+  // A new-task entry naming an id this Goal already has can only mean that
+  // task, so it is applied as the task's update. An id the Goal does not have
+  // is still refused below.
+  const addressesExisting = (entry) => byId.has(clean(entry?.id));
+  const patches = [...requested, ...entries.filter(addressesExisting)];
+  const additions = entries.filter((entry) => !addressesExisting(entry));
   if (!patches.length && !additions.length) throw new Error('goal update_tasks requires updates or new tasks');
   if (patches.length > MAX_GOAL_TASKS) throw new Error(`goal updates support at most ${MAX_GOAL_TASKS} entries`);
-  const byId = new Map(previous.map((task) => [task.id, { ...task }]));
   const seen = new Set();
   for (const patch of patches) {
     const id = clean(patch?.id);

package/src/runtime/agent/orchestrator/runtime-core/goal-text.mjs

@@ -3,6 +3,7 @@
 // No filesystem, no runtime coupling — values in, text out.
 
 import { goalTaskProgress } from './goal-tasks.mjs';
+import { MAX_GOAL_TASKS } from './goal-tool-defs.mjs';
 
 function escapeGoalPromptText(value) {
   return String(value ?? '')
@@ -214,7 +215,7 @@ export function goalStateReminder(goal, { reason = '' } = {}) {
   }
   if (reason === 'deadline-reached' && goal.status === 'active') return '';
   const tasks = Array.isArray(goal.tasks) ? goal.tasks : [];
-  const { tasksCompleted, tasksTotal } = goalTaskProgress(tasks);
+  const { tasksCompleted, tasksTotal, taskSlotsUsed } = goalTaskProgress(tasks);
   // Event-specific steering: what the model could not have learned from its own
   // tool results. Standing rules stay in the cached tool description.
   let lead = 'Current durable Goal snapshot:';
@@ -233,7 +234,7 @@ export function goalStateReminder(goal, { reason = '' } = {}) {
     ...(goal.status === 'blocked' ? [BLOCKED_LINE] : []),
     '',
     `Objective: ${escapeGoalPromptText(goal.objective)}`,
-    `Status: ${escapeGoalPromptText(goal.status)} · tasks ${tasksCompleted}/${tasksTotal}`,
+    `Status: ${escapeGoalPromptText(goal.status)} · tasks ${tasksCompleted}/${tasksTotal} · task slots used ${taskSlotsUsed}/${MAX_GOAL_TASKS}`,
     ...(goal.blocker ? [`Waiting or stop reason: ${escapeGoalPromptText(goal.blocker)}`] : []),
     ...(goal.revision ? [`Revision: ${goal.revision}`] : []),
     ...goalTimeLines(goal),

package/src/runtime/agent/orchestrator/runtime-core/goal-tool-defs.mjs

@@ -16,7 +16,7 @@ const taskFields = {
     type: 'string',
     minLength: 1,
     maxLength: MAX_GOAL_TASK_TEXT_LENGTH,
-    description: 'Required work or verification outcome.',
+    description: 'Brief work/check; results go in reply.',
   },
   status: {
     type: 'string',

package/src/runtime/agent/orchestrator/runtime-core/goal-tool-exec.mjs

@@ -22,6 +22,7 @@ function toolReply(ctx, id, goal, { full = false, previousIds = null } = {}) {
       status: goal.status,
       tasksCompleted: goal.tasksCompleted,
       tasksTotal: goal.tasksTotal,
+      taskSlotsUsed: goal.taskSlotsUsed,
       tasksUpdatedAt: goal.tasksUpdatedAt,
       timeUsedMs: goal.timeUsedMs,
     };

package/src/runtime/agent/orchestrator/tools/builtin/arg-guard.mjs

@@ -174,6 +174,23 @@ function hasMultipleAbsoluteWindowsPaths(value) {
   return Array.isArray(matches) && matches.length > 1;
 }
 
+// A string that only lists absolute Windows paths ("C:\a C:\b", "C:\a,C:\b",
+// "[C:/a, C:/b]", '["C:/a", "D:/b"]') splits exactly: every piece starts at a
+// drive root, and no drive root can occur inside a Windows path, so spaces
+// within a path stay put. Any other text around the paths returns null.
+function splitListedAbsoluteWindowsPaths(value) {
+  const body = value
+    .trim()
+    .replace(/^\[([\s\S]*)\]$/, '$1')
+    .replace(/^[\s,;]+|[\s,;]+$/g, '');
+  const pieces = body
+    .split(/[\s,;]+(?=["']?[A-Za-z]:[\\/])/)
+    .map((piece) => piece.replace(/^(["'])(.*)\1$/, '$2'));
+  return pieces.every((piece) => /^[A-Za-z]:[\\/]/.test(piece) && !/[A-Za-z]:[\\/]/.test(piece.slice(3)))
+    ? pieces
+    : null;
+}
+
 function isFiniteInt(v) {
   return typeof v === 'number' && Number.isFinite(v) && Math.floor(v) === v;
 }
@@ -418,8 +435,17 @@ function guardGrep(a) {
       return `Error: grep arg "${k}" must be string (got ${describeType(a[k])})`;
     }
   }
-  // Independent explicit scopes share one request; no inferred path splitting.
+  // Independent explicit scopes share one request. A string that only lists
+  // absolute paths is those scopes; any other string holding several drive
+  // roots is refused rather than guessed at.
   for (const k of ['path', 'root']) {
+    if (hasOwn(a, k) && hasMultipleAbsoluteWindowsPaths(a[k])) {
+      const listed = splitListedAbsoluteWindowsPaths(a[k]);
+      if (!listed) {
+        return `Error: grep arg "${k}" contains multiple absolute paths in one string. Use one common parent path plus glob, or separate grep calls.`;
+      }
+      a[k] = listed;
+    }
     if (hasOwn(a, k) && Array.isArray(a[k])) {
       if (a[k].length === 0 || a[k].length > PUBLIC_PATH_BATCH_LIMIT || !a[k].every(isNonEmptyString)) {
         return `Error: grep arg "${k}" must contain 1-${PUBLIC_PATH_BATCH_LIMIT} non-empty path strings`;
@@ -429,9 +455,6 @@ function guardGrep(a) {
     if (hasOwn(a, k) && !isString(a[k])) {
       return `Error: grep arg "${k}" must be string or string[] (got ${describeType(a[k])})`;
     }
-    if (hasOwn(a, k) && hasMultipleAbsoluteWindowsPaths(a[k])) {
-      return `Error: grep arg "${k}" contains multiple absolute paths in one string. Use one common parent path plus glob, or separate grep calls.`;
-    }
   }
   for (const k of ['head_limit', 'offset']) {
     const err = checkIntInRange(a, k, 0, MAX_INT);

package/src/runtime/agent/orchestrator/tools/builtin/read-batch.mjs

@@ -33,7 +33,9 @@ export function sliceReadBodyByLines(body, origOffset, origLimit, readOffsetBase
       if (ln < minSeen) minSeen = ln;
       if (ln > maxSeen) maxSeen = ln;
       if (ln >= firstLine && ln <= lastLine) kept.push(line);
-    } else if (kept.length === 0 && footerIdx === -1) {
+    } else if (kept.length === 0 && footerIdx === -1 && !Number.isFinite(maxSeen)) {
+      // Only a preamble before the first numbered row; a blank line or a
+      // truncation marker after the rows is not this slot's content.
       kept.push(line);
     }
   }

package/src/runtime/agent/orchestrator/tools/builtin/read-tool/batch-dispatch.mjs

@@ -42,7 +42,8 @@ async function estimateTaskBytes(entry, workDir) {
   if (!st?.isFile()) return Infinity;
   const lines = Math.max(1, st.size / AVG_LINE_BYTES);
   let need = st.size + st.size / MIN_LINE_BYTES * LINE_PREFIX_BYTES;
-  const limit = Number(entry?.limit);
+  // A coalesced entry reads its whole union window, not only its own slot.
+  const limit = Number(readEntryCoalescedDiskWindow(entry)?.limit ?? entry?.limit);
   if (Number.isFinite(limit) && limit > 0) need *= Math.min(1, limit / lines);
   return Math.ceil(need) + READ_RENDER_SLACK_BYTES;
 }

package/src/runtime/agent/orchestrator/tools/code-graph/build.mjs

@@ -100,9 +100,12 @@ function _throwIfAborted(signal) {
   if (signal?.aborted) throw new Error('aborted');
 }
 
-function codeGraphBuildInvalidatedError() {
+// `graph` is the build that finished anyway: the tree as of its own manifest,
+// never cached as current. The last retry answers from it instead of failing.
+function codeGraphBuildInvalidatedError(graph = null) {
   const error = new Error('code-graph build invalidated during prewarm');
   error.code = 'ERR_CODE_GRAPH_BUILD_INVALIDATED';
+  if (graph) error.graph = graph;
   return error;
 }
 
@@ -115,7 +118,12 @@ export async function _retryCodeGraphBuildAfterInvalidation(run, { signal = null
     try {
       return await run(attempt);
     } catch (error) {
-      if (signal?.aborted || !isCodeGraphBuildInvalidatedError(error) || attempt === 1) {
+      if (signal?.aborted || !isCodeGraphBuildInvalidatedError(error)) throw error;
+      // Files kept changing through the retry too (another session editing
+      // the same tree). The finished graph is a consistent snapshot a few
+      // seconds old; answer this query from it rather than fail it.
+      if (attempt === 1) {
+        if (error.graph) return error.graph;
         throw error;
       }
     }
@@ -159,7 +167,7 @@ async function _validateDiskCodeGraphHit({
   if (diskEntry.signature !== signature) return { graph: null, manifest, signature };
   const graph = deserializeGraph(graphCwd, diskEntry);
   if (!graph) return { graph: null, manifest, signature };
-  if (getGeneration(graphCwd) !== genAtStart) return { invalidated: true };
+  if (getGeneration(graphCwd) !== genAtStart) return { invalidated: true, graph };
   setMemoryCache(graphCwd, { ts: now, signature, graph });
   return { graph, manifest, signature };
 }
@@ -195,7 +203,7 @@ export async function _runDiskCodeGraphFastPath({
     _throwIfAborted(signal);
     const hit = await validateDiskHit({ graphCwd, diskEntry, genAtStart, signal });
     _throwIfAborted(signal);
-    if (hit?.invalidated) throw codeGraphBuildInvalidatedError();
+    if (hit?.invalidated) throw codeGraphBuildInvalidatedError(hit.graph);
     if (hit?.graph) return hit.graph;
     _throwIfAborted(signal);
     const workerPromise = spawnWorker(release, hit?.manifest || null, hit?.signature || null);
@@ -463,7 +471,7 @@ export function _spawnCodeGraphWorker(
               // manifest lock.
               setDiskCache(graphCwd, msg.graph, { persist: false });
             }
-            settle(genStillCurrent ? msg.graph : codeGraphBuildInvalidatedError());
+            settle(genStillCurrent ? msg.graph : codeGraphBuildInvalidatedError(msg.graph));
           } else {
             settle(_codeGraphWorkerFailure(msg));
           }

package/src/runtime/computer-bridge/error-recovery.mjs

@@ -79,7 +79,7 @@ function recoveryForCode(code, args) {
       code,
       next: 'wait_for_user',
       guidance:
-        'Computer Use yielded to the user. Call wait_for_user for bounded waiting. Ordinary physical input may resume after the host-configured quiet interval (default 5 seconds); explicit stops and uncertain cleanup/observation require the user. Timeout does not authorize input. After resumed, capture fresh state; never replay interrupted input. Manual Resume is also available on the overlay.',
+        "Computer Use yielded to the user. Call wait_for_user for bounded waiting. The user's Resume on the overlay continues the pause, and ordinary physical input may also resume after the host-configured quiet interval (default 5 seconds); explicit stops and uncertain cleanup/observation require the user. Stop cancels the task. Timeout does not authorize input. After resumed, capture fresh state; never replay interrupted input.",
     };
   }
   if (DIAGNOSE_CODES.has(code)) {

package/src/runtime/shared/config-patch.mjs

@@ -25,6 +25,8 @@ function applyField(current, path, change) {
   const next = isPlainObject(current) ? { ...current } : {};
   const [key, ...rest] = path;
   if (change.remove && rest.length && !Object.hasOwn(next, key)) return next;
+  // Seed-only field: written where it is missing, never over a stored value.
+  if (change.ifAbsent && !rest.length && Object.hasOwn(next, key)) return next;
   if (!rest.length && change.remove) {
     delete next[key];
   } else {

package/src/runtime/shared/user-data-guard.mjs

@@ -28,7 +28,7 @@ function getBackupRoot() {
   return process.env.MIXDOG_USER_DATA_BACKUP_ROOT || join(mixdogConfigBaseDir(), 'backups', 'user-data');
 }
 
-const USER_DATA_FILES = ['mixdog-config.json', 'instructions.md', 'user-workflow.md'];
+const USER_DATA_FILES = ['mixdog-config.json'];
 
 const USER_DATA_DIRS = ['schedules', 'webhooks', 'workflows'];
 

package/src/session-runtime/config-lifecycle.mjs

@@ -102,10 +102,20 @@ export function createConfigLifecycle({
     const adopted = adoptConfig(nextConfig, { hasSecrets });
     const changes = cfgMod.createConfigPatch(configSaveBaseline, adopted);
     configSaveBaseline = structuredClone(adopted);
-    if (changes.length) writers.queueConfigChanges(changes);
+    if (changes.length) writers.queueConfigChanges([...changes, ...seedChanges(adopted, changes)]);
     return adopted;
   }
 
+  // A fresh profile's install markers (an empty `builtins`) and off-by-default
+  // agents equal the defaults, so no diff ever carries them — yet on disk
+  // their absence reads as a grandfathered profile with every agent on. The
+  // first write seeds them where the stored section lacks them.
+  function seedChanges(config, changes) {
+    return ['builtins', 'disabledAgents']
+      .filter((key) => config[key] !== undefined && !changes.some((change) => change.path[0] === key))
+      .map((key) => ({ path: [key], value: structuredClone(config[key]), ifAbsent: true }));
+  }
+
   function scheduleSkillsSave(names) {
     // This field belongs to its dedicated writer, not a later unrelated save.
     configSaveBaseline.skills = structuredClone(getConfig().skills);

package/src/session-runtime/cwd-plugins/core-memory-context.mjs

@@ -24,7 +24,7 @@ export function createCoreMemoryContext({ getCurrentCwd, getConfig, bootProfile,
   async function loadCoreMemoryContext() {
     // User-curated core memory injects into new sessions by default. The
     // Memory toggle (settings → General) OFF skips ONLY this accumulated
-    // core-memory block — profile and Project Instructions inject regardless.
+    // core-memory block — the profile injects regardless.
     if (!(featureEnvOverride('MIXDOG_FEATURE_MEMORY') ?? memoryToolsEnabled(getConfig(), true))) {
       bootProfile('core-memory:disabled');
       return '';

package/src/session-runtime/native-web-search/tool-shape.mjs

@@ -17,6 +17,18 @@ export function normalizeWebSearchAllowedDomain(site) {
   }
 }
 
+// A site filter may name several domains the way a search box takes them
+// ("a.com OR b.com", "a.com, b.com", "site:a.com site:b.com"); each becomes its
+// own allowed domain instead of one invalid combined entry.
+export function normalizeWebSearchAllowedDomains(site) {
+  const domains = clean(site)
+    .split(/[\s,|]+/)
+    .filter((part) => part && part.toUpperCase() !== 'OR')
+    .map((part) => normalizeWebSearchAllowedDomain(part.replace(/^site:/i, '')))
+    .filter(Boolean);
+  return [...new Set(domains)];
+}
+
 export function nativeWebSearchUserLocation(locale) {
   if (!locale || typeof locale !== 'object' || Array.isArray(locale)) return null;
   const location = { type: 'approximate' };
@@ -28,7 +40,7 @@ export function nativeWebSearchUserLocation(locale) {
 }
 
 export function nativeWebSearchTool(args = {}, toolType = 'web_search', providerName = '') {
-  const domain = normalizeWebSearchAllowedDomain(args.site);
+  const domains = normalizeWebSearchAllowedDomains(args.site);
   const type = clean(toolType) || 'web_search';
   const location = nativeWebSearchUserLocation(args.locale);
   if (providerName === 'gemini') {
@@ -40,19 +52,19 @@ export function nativeWebSearchTool(args = {}, toolType = 'web_search', provider
       name: 'web_search',
       max_uses: Math.max(1, Math.min(10, Number(args.maxResults) || 5)),
     };
-    if (domain) tool.allowed_domains = [domain];
+    if (domains.length) tool.allowed_domains = domains;
     if (location) tool.user_location = location;
     return tool;
   }
   if (providerName === 'grok-oauth' || providerName === 'xai') {
     const tool = { type };
-    if (domain) tool.filters = { allowed_domains: [domain] };
+    if (domains.length) tool.filters = { allowed_domains: domains };
     return tool;
   }
   const tool = { type };
   if (type === 'web_search') {
     tool.search_context_size = clean(args.contextSize) || 'low';
-    if (domain) tool.filters = { allowed_domains: [domain] };
+    if (domains.length) tool.filters = { allowed_domains: domains };
     if (location) tool.user_location = location;
   }
   return tool;

package/src/session-runtime/provider-models/catalog-load.mjs

@@ -4,6 +4,7 @@
 // catalog flattened into deduplicated rows with per-provider profiling.
 import { isSelectableLlmModel } from '../model-recency.mjs';
 import { sharedProviderCatalog } from '../provider-catalog-cache.mjs';
+import { NO_ENABLED_PROVIDERS } from '../../runtime/agent/orchestrator/providers/registry-errors.mjs';
 
 export function createCatalogLoader({
   caches,
@@ -36,7 +37,9 @@ export function createCatalogLoader({
    *  for. ensureProvidersReady starts the daemon-wide force refresh without
    *  blocking boot; a foreground full picker load must join that refresh,
    *  otherwise it can snapshot yesterday's provider cache moments before the
-   *  refresh invalidates it, leaving the UI on the stale first-open rows. */
+   *  refresh invalidates it, leaving the UI on the stale first-open rows.
+   *  Resolves false when no provider is enabled: a fresh install has nothing
+   *  to load, and the registry refuses an all-disabled init by design. */
   async function prepare({ forceRefresh, loadSecrets }) {
     if (loadSecrets) {
       const secretsStartedAt = performance.now();
@@ -45,7 +48,12 @@ export function createCatalogLoader({
       profile('secrets-ready', { ms: (performance.now() - secretsStartedAt).toFixed(1) });
     }
     const providersStartedAt = performance.now();
-    await ensureProvidersReady(config().providers || {});
+    try {
+      await ensureProvidersReady(config().providers || {});
+    } catch (error) {
+      if (error?.code === NO_ENABLED_PROVIDERS) return false;
+      throw error;
+    }
     profile('providers-ready', { ms: (performance.now() - providersStartedAt).toFixed(1) });
     const refreshStartedAt = performance.now();
     if (!forceRefresh && typeof reg().refreshProviderCatalogsOnStartup === 'function') {
@@ -55,6 +63,7 @@ export function createCatalogLoader({
       await reg().refreshCatalogs({ force: true });
     }
     profile('catalog-refresh-ready', { ms: (performance.now() - refreshStartedAt).toFixed(1) });
+    return true;
   }
 
   /** `request` ({ seq }) identifies the caller's load; `request.complete`
@@ -62,7 +71,13 @@ export function createCatalogLoader({
   return async function loadProviderModelsFresh({ forceRefresh = false, loadSecrets = true, request = null } = {}) {
     const startedAt = performance.now();
     profile('load:start', { forceRefresh, loadSecrets });
-    await prepare({ forceRefresh, loadSecrets });
+    // No enabled provider is an empty catalog, not a failure. The request
+    // stays incomplete so this answer is never cached: connecting a provider
+    // is picked up by the next read.
+    if (!(await prepare({ forceRefresh, loadSecrets }))) {
+      profile('load:done', { ms: (performance.now() - startedAt).toFixed(1), providers: 0, rows: 0 });
+      return [];
+    }
     const ownsLoad = request !== null && request.seq === caches.providerModelsLoadSeq;
     const revision = meta.syncCatalogRevision();
     // Preparation may legitimately refresh the catalog. Carry that revision

package/src/session-runtime/setup-tool/executor.mjs

@@ -464,7 +464,6 @@ const READ_ONLY_SETUP_ACTIONS = new Set([
   'list_models',
   'get_mcp_server',
   'read_definition',
-  'get_instructions',
   'search_local_models',
   'inspect_hf_model',
   'local_model_details',

package/src/session-runtime/setup-tool/settings-contract.mjs

@@ -30,8 +30,6 @@ export const SETUP_EXTENDED_ACTION_FIELDS = Object.freeze({
   set_appearance: 'appearance',
   save_project: 'project',
   remove_project: 'projectPath',
-  get_instructions: 'projectPath',
-  set_instructions: 'projectPath content expectedContent',
   revoke_linked_device: 'name',
 });
 
@@ -50,8 +48,6 @@ export const SETUP_DESKTOP_ACTIONS = Object.freeze([
   'set_appearance',
   'save_project',
   'remove_project',
-  'get_instructions',
-  'set_instructions',
   'revoke_linked_device',
 ]);
 export const SETUP_DESKTOP_DOMAINS = Object.freeze(['desktop', 'appearance', 'projects', 'connection']);
@@ -166,6 +162,7 @@ export const SETUP_EXTENDED_PROPERTIES = Object.freeze({
   }),
   desktop: object({
     keepAwake: boolean,
+    runInBackground: boolean,
     usagePinned: boolean,
     computerObserveOnly: boolean,
   }),
@@ -179,15 +176,7 @@ export const SETUP_EXTENDED_PROPERTIES = Object.freeze({
     zoom: { type: 'number', minimum: 0.5, maximum: 2 },
   }),
   project: object({ path: text, alias: text }, ['path']),
-  projectPath: {
-    type: ['string', 'null'],
-    description: 'Exact registered Project root; null means Common Instructions (instruction actions only).',
-  },
-  content: { ...text, description: 'Complete new Instructions content. Preserve unrelated instructions.' },
-  expectedContent: {
-    ...text,
-    description: 'Unchanged content returned by get_instructions; prevents overwriting a concurrent edit.',
-  },
+  projectPath: { ...text, description: 'Exact registered Project root.' },
 });
 
 export const SETUP_HANDOFFS = Object.freeze({

package/src/tui/dist/index.mjs

@@ -57382,7 +57382,7 @@ function mixdogConfigBaseDir() {
 function getBackupRoot() {
   return process.env.MIXDOG_USER_DATA_BACKUP_ROOT || join10(mixdogConfigBaseDir(), "backups", "user-data");
 }
-var USER_DATA_FILES = ["mixdog-config.json", "instructions.md", "user-workflow.md"];
+var USER_DATA_FILES = ["mixdog-config.json"];
 var USER_DATA_DIRS = ["schedules", "webhooks", "workflows"];
 function stamp() {
   return (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");

package/src/workflows/default/WORKFLOW.md

@@ -4,8 +4,6 @@ name: Default
 description: "Handle tasks as requested."
 ---
 
-# Default
-
 Consult the user and build the work plan together. Explicit read-only requests
 proceed immediately. When file edits, state mutation, or delegation are
 required, investigate and plan only until the user approves the latest plan.

package/src/workflows/headless/WORKFLOW.md

@@ -5,7 +5,5 @@ description: "No user mid-run; requests are approved. Complete, then report."
 hidden: true
 ---
 
-# Headless
-
 The user does not intervene during the run. Treat the request as approved,
 carry it out to the end, and report the result.