mixdog 1.0.6 → 1.0.7

package/src/session-runtime/boot/apis.mjs

@@ -20,6 +20,7 @@ import {
   normalizeSystemShellCommand,
   normalizeAutoClearConfig,
   autoClearIdleMsForProvider,
+  resolveAutoClearIdleMs,
   autoClearProviderDefaults,
   normalizeCompactionConfig,
   setModuleEnabledInConfig,
@@ -75,7 +76,10 @@ export function wireApis(boot) {
   });
   boot.lifecycleApi = lifecycleApiFor(boot);
   boot.resourceApi = resourceApiFor(boot);
-  boot.disposeGlobalExtensionSubscription = () => boot.resourceApi.disposeGlobalExtensionSubscription?.();
+  boot.disposeGlobalExtensionSubscription = () => {
+    boot.disposeConfigSync?.();
+    boot.resourceApi.disposeGlobalExtensionSubscription?.();
+  };
   boot.modelRouteApi = modelRouteApiFor(boot);
   boot.workflowAgentsApi = workflowAgentsApiFor(boot);
   boot.sessionTurnApi = sessionTurnApiFor(boot);
@@ -207,6 +211,7 @@ function settingsApiFor(boot) {
     hasOwn,
     normalizeAutoClearConfig,
     autoClearIdleMsForProvider,
+    resolveAutoClearIdleMs,
     autoClearProviderDefaults,
     normalizeCompactionConfig,
     normalizeSystemShellConfig,
@@ -229,7 +234,6 @@ function settingsApiFor(boot) {
     tidyToolEnabledFn: boot.tidyToolEnabledFn,
     localProviderEnabledFn: boot.localProviderEnabledFn,
     webSearchEnabled: boot.webSearchEnabled,
-    channelsEnabled: boot.channelsEnabled,
     autoUpdateEnabled: selfUpdate.autoUpdateEnabled,
     getUpdateCheckState: () => selfUpdate.getCheckState(),
     getUpdateProcessState: () => selfUpdate.getProcessState(),

package/src/session-runtime/boot/begin.mjs

@@ -86,7 +86,6 @@ export async function loadModules(boot) {
     localProviderEnabledFn,
     mediaToolEnabledFn,
     tidyToolEnabledFn,
-    channelsEnabled,
     featureDisallowedTools,
   } = createRuntimeFeatureGates({
     getConfig: () => rt.config,
@@ -114,7 +113,6 @@ export async function loadModules(boot) {
     localProviderEnabledFn,
     mediaToolEnabledFn,
     tidyToolEnabledFn,
-    channelsEnabled,
     featureDisallowedTools,
     getMemoryModule,
     getWebSearchModule,

package/src/session-runtime/boot/providers.mjs

@@ -71,9 +71,11 @@ function wireConfigLifecycle(boot) {
     LAZY_SECRET_PROVIDERS,
     clean,
     resolve,
+    onConfigReloaded: () => boot.invalidateContextStatusCache?.(),
     STANDALONE_DATA_DIR,
   });
   const {
+    disposeConfigSync,
     getOutputStyleStatusCached,
     invalidateOutputStyleStatusCache,
     seedOutputStyleStatusCache,
@@ -89,6 +91,7 @@ function wireConfigLifecycle(boot) {
     ensureConfigForRouteProvider,
   } = lifecycle;
   Object.assign(boot, {
+    disposeConfigSync,
     getOutputStyleStatusCached,
     invalidateOutputStyleStatusCache,
     seedOutputStyleStatusCache,

package/src/session-runtime/boot/tools.mjs

@@ -232,7 +232,6 @@ function wireInternalTools(boot) {
       officeToolsEnabled: boot.officeToolsEnabledFn,
       mediaToolEnabled: boot.mediaToolEnabledFn,
       tidyToolEnabled: boot.tidyToolEnabledFn,
-      channelsEnabled: boot.channelsEnabled,
       getWebSearchModule: boot.getWebSearchModule,
       getMemoryModule: boot.getMemoryModule,
       getCodeGraphModule: boot.getCodeGraphModule,

package/src/session-runtime/config-lifecycle.mjs

@@ -66,6 +66,7 @@ export function createConfigLifecycle({
   clean,
   resolve,
   performanceNow = () => performance.now(),
+  onConfigReloaded,
   STANDALONE_DATA_DIR,
 }) {
   const outputStyleCache = createOutputStyleStatusCache({
@@ -160,7 +161,17 @@ export function createConfigLifecycle({
     return ensureFullConfig();
   }
 
+  // Settings persisted by any other runtime (or process) reach this runtime's
+  // in-memory config. reloadFullConfig keeps our own pending edits, and the
+  // shared layer coalesces bursts into one pass per subscriber.
+  const unsubscribeConfigChange = sharedCfgMod?.subscribeConfigChange?.(() => {
+    reloadFullConfig();
+    outputStyleCache.invalidateOutputStyleStatusCache();
+    onConfigReloaded?.();
+  });
+
   return {
+    disposeConfigSync: () => unsubscribeConfigChange?.(),
     // output-style cache
     ...outputStyleCache,
     // adopt / save

package/src/session-runtime/internal-tool-executor.mjs

@@ -22,7 +22,6 @@ export function createInternalToolExecutor({
   officeToolsEnabled,
   mediaToolEnabled,
   tidyToolEnabled = () => true,
-  channelsEnabled,
   getWebSearchModule,
   getMemoryModule,
   getCodeGraphModule,
@@ -68,7 +67,6 @@ export function createInternalToolExecutor({
     if (callerCtx?.invocationSource === 'model-tool') guardModelCall(name);
     if (Object.hasOwn(handlers, name)) return handlers[name](args, { name, callerCtx, callerCwd });
     if (channels.isChannelTool(name)) {
-      if (!channelsEnabled()) throw new Error('channels are disabled in settings');
       return await channels.execute(name, args || {});
     }
     throw new Error(`unknown standalone internal tool: ${name}`);

package/src/session-runtime/runtime-feature-gates.mjs

@@ -5,7 +5,7 @@
 // Key names mirror the dependency names of settings-api.mjs / the session-build
 // deps, so the runtime can hand them straight through.
 import { builtinFeatureActive, featureDisallowedToolsFor, localGitToolsActive } from '../runtime/agent/orchestrator/runtime-core/builtin-features.mjs';
-import { moduleEnabled, recapEnabled } from '../runtime/agent/orchestrator/runtime-core/config-helpers.mjs';
+import { recapEnabled } from '../runtime/agent/orchestrator/runtime-core/config-helpers.mjs';
 import { browserBridgeAvailableSync } from '../runtime/browser-bridge/client.mjs';
 import { computerBridgeAvailableSync } from '../runtime/computer-bridge/client.mjs';
 
@@ -17,12 +17,11 @@ export function createRuntimeFeatureGates({ getConfig, getToolProfile }) {
     recapEnabledFn: () => recapEnabled(getConfig(), true),
     memoryToolsEnabledFn: () => builtinFeatureActive(getConfig(), 'memory'),
     webSearchEnabled: () => builtinFeatureActive(getConfig(), 'webSearch'),
-    gitToolsEnabledFn: () => localGitToolsActive(getConfig(), getToolProfile()),
+    gitToolsEnabledFn: () => localGitToolsActive(getConfig()),
     officeToolsEnabledFn: () => builtinFeatureActive(getConfig(), 'office'),
     localProviderEnabledFn: () => builtinFeatureActive(getConfig(), 'localProvider'),
     mediaToolEnabledFn: () => builtinFeatureActive(getConfig(), 'media'),
     tidyToolEnabledFn: () => builtinFeatureActive(getConfig(), 'tidy'),
-    channelsEnabled: () => moduleEnabled(getConfig(), 'channels', true),
     // Browser/Computer activate on live desktop-bridge presence, so the probe
     // runs per call instead of being captured at boot.
     featureDisallowedTools: () =>

package/src/session-runtime/schedule-session-run.mjs

@@ -48,7 +48,6 @@ export async function runScheduleSession(schedule, { config = null, prompt: prom
     owner: 'user',
     sourceType: 'schedule',
     sourceName: schedule.name,
-    sourceDelivery: schedule.delivery || null,
     ...(cwd ? { cwd } : {}),
     desktopSession: cwd
       ? { classification: 'project', projectPath: cwd }

package/src/session-runtime/services/channel-admin.mjs

@@ -188,17 +188,13 @@ function scheduleToDisplay(s) {
     whenAt: s.whenAt || undefined,
     whenCron: s.whenCron || undefined,
     timezone: s.timezone || undefined,
-    channel: s.channelId || undefined,
     model: s.model || undefined,
     cwd: s.cwd || undefined,
     workflow: s.workflow || undefined,
     attachments: s.attachments || undefined,
-    // Delivery mode: legacy channel-target rows (pre-delivery) behaved as
-    // relay+visible, which maps to 'both'.
-    delivery: s.delivery || (s.target === 'channel' ? 'both' : 'app'),
     enabled: s.enabled !== false,
     instructions: s.prompt,
-    route: s.target === 'channel' ? `channel:${s.channelId}` : 'session',
+    route: 'session',
   };
 }
 
@@ -210,7 +206,7 @@ export async function listSchedules() {
 // Register or update a schedule in the PG store. Recurring input maps `time`
 // (+ optional `days`) to a cron; one-shot input maps an `at` datetime; the two
 // are mutually exclusive (also enforced by the store's when_at/when_cron XOR).
-// `channel` selects a channel target; otherwise session. Both require a model.
+// Every schedule runs as a visible app session and requires a model.
 export async function saveSchedule({
   name,
   description = '',
@@ -218,12 +214,10 @@ export async function saveSchedule({
   at,
   timezone,
   days,
-  channel,
   model,
   cwd,
   workflow,
   attachments,
-  delivery,
   enabled,
   instructions,
   overwrite = false,
@@ -233,11 +227,6 @@ export async function saveSchedule({
   if (!body) throw new Error('schedule instructions are required');
   const scheduleModel = String(model || '').trim();
   if (!scheduleModel) throw new Error('schedule model is required — choose a model before saving');
-  // 'app' → session-only; 'channel'/'both' → the run result relays to the
-  // main channel (target 'channel', channelId resolved at fire time).
-  const requestedMode = String(delivery || '').trim();
-  let mode = channel ? 'both' : 'app';
-  if (['app', 'channel', 'both'].includes(requestedMode)) mode = requestedMode;
   const hasTime = time != null && String(time).trim() !== '';
   const hasAt = at != null && String(at).trim() !== '';
   if (hasTime && hasAt) throw new Error('provide either `time` (recurring) or `at` (one-shot), not both');
@@ -254,13 +243,13 @@ export async function saveSchedule({
     whenCron,
     whenAt,
     timezone: scheduleTimezone,
-    target: mode === 'app' ? 'session' : 'channel',
-    channelId: channel ? String(channel).trim() : null,
+    target: 'session',
+    channelId: null,
     model: scheduleModel,
     cwd: cwd ? String(cwd).trim() : null,
     workflow: workflow ? String(workflow).trim() : null,
     attachments: normalizeAutomationAttachments(attachments),
-    delivery: mode,
+    delivery: 'app',
     prompt: body,
     enabled: enabled !== false,
     nextFireAt: whenAt,
@@ -294,19 +283,17 @@ async function listWebhooks() {
     name: ep.name,
     description: ep.description || '',
     parser: ep.parser || 'github',
-    ...(ep.channelId ? { channel: ep.channelId } : {}),
     ...(ep.model ? { model: ep.model } : {}),
     ...(ep.cwd ? { cwd: ep.cwd } : {}),
     ...(ep.workflow ? { workflow: ep.workflow } : {}),
     ...(ep.attachments ? { attachments: ep.attachments } : {}),
-    delivery: ep.delivery || 'app',
     enabled: ep.enabled,
     // The store never projects the plaintext secret through list paths; it
     // exposes a presence flag (secretSet) instead.
     secretSet: ep.secretSet === true,
     secret: undefined,
     instructions: ep.instructions,
-    route: ep.channelId ? `channel:${ep.channelId}` : 'session',
+    route: 'session',
   }));
 }
 
@@ -315,12 +302,10 @@ export async function saveWebhook({
   description = '',
   parser = 'github',
   secret,
-  channel,
   model,
   cwd,
   workflow,
   attachments,
-  delivery,
   enabled,
   instructions,
   overwrite = false,
@@ -334,7 +319,6 @@ export async function saveWebhook({
   }
   const body = String(instructions || '').trim();
   if (!body) throw new Error('webhook instructions are required');
-  if (channel && !model) throw new Error('model is required when channel is set');
   if (overwrite !== true && (await dbLoadEndpoint(id))) {
     throw new Error(`webhook "${id}" already exists`);
   }
@@ -350,12 +334,12 @@ export async function saveWebhook({
     name: id,
     description: String(description || '').trim(),
     parser: nextParser,
-    channelId: channel ? String(channel).trim() : null,
+    channelId: null,
     model: model ? String(model).trim() : null,
     cwd: cwd ? String(cwd).trim() : null,
     workflow: workflow ? String(workflow).trim() : null,
     attachments: normalizeAutomationAttachments(attachments),
-    delivery: ['app', 'channel', 'both'].includes(String(delivery || '').trim()) ? String(delivery).trim() : 'app',
+    delivery: 'app',
     secret: secretValue,
     instructions: body,
     enabled: enabled !== false,
@@ -365,12 +349,10 @@ export async function saveWebhook({
     name: id,
     description: saved.description,
     parser: saved.parser,
-    ...(saved.channelId ? { channel: saved.channelId } : {}),
     ...(saved.model ? { model: saved.model } : {}),
     ...(saved.cwd ? { cwd: saved.cwd } : {}),
     ...(saved.workflow ? { workflow: saved.workflow } : {}),
     ...(saved.attachments ? { attachments: saved.attachments } : {}),
-    delivery: saved.delivery || 'app',
     ...(enabled === false ? { enabled: false } : {}),
     secret: secretValue,
     instructions: body,

package/src/session-runtime/settings-compaction-api.mjs

@@ -39,6 +39,7 @@ export function createCompactionSettings({
   hasOwn,
   normalizeAutoClearConfig,
   autoClearIdleMsForProvider,
+  resolveAutoClearIdleMs,
   normalizeCompactionConfig,
   autoClearProviderDefaults,
   parseDurationMs,
@@ -96,7 +97,9 @@ export function createCompactionSettings({
       const normalized = normalizeAutoClearConfig(config.autoClear);
       const provider = route?.provider || null;
       const providerDefault = autoClearIdleMsForProvider(provider, normalized.providerIdleMs);
-      const idleMs = normalized.custom ? normalized.idleMs : providerDefault;
+      const idleMs = resolveAutoClearIdleMs(config, provider);
+      const key = String(provider || '').toLowerCase();
+      const providerCustom = Boolean(key && key !== 'default' && normalized.providerIdleMs?.[key]);
       // Advanced picker shows only providers the user actually has enabled
       // (config.providers[*].enabled), plus the active route provider, any
       // provider with a custom override, and the 'default' fallback row —
@@ -114,6 +117,7 @@ export function createCompactionSettings({
         enabled: normalized.enabled,
         idleMs,
         custom: normalized.custom,
+        providerCustom,
         providerDefault,
         provider,
         providerDefaults,

package/src/session-runtime/settings-system-api.mjs

@@ -1,39 +1,21 @@
-// Channels, the system shell and self-update settings.
+// Automation worker status, the system shell and self-update settings.
 export function createSystemSettings({
   getConfig,
   saveConfigAndAdopt,
   normalizeSystemShellConfig,
   normalizeSystemShellCommand,
   setConfiguredShell,
-  setModuleEnabledInConfig,
   localPackageVersion,
-  channelsEnabled,
   autoUpdateEnabled,
   getUpdateCheckState,
   getUpdateProcessState,
-  invalidatePreSessionToolSurface,
   channels,
-  clearChannelStartTimer,
   checkForUpdateInternal,
   runUpdateNowInternal,
 }) {
   return {
     getChannelSettings(options = {}) {
-      return {
-        enabled: channelsEnabled(),
-        ...(options?.includeStatus === false ? {} : { status: channels.status() }),
-      };
-    },
-    async setChannelsEnabled(enabled) {
-      const config = getConfig();
-      const nextConfig = setModuleEnabledInConfig({ ...config }, 'channels', enabled !== false);
-      saveConfigAndAdopt(nextConfig);
-      if (!channelsEnabled()) {
-        clearChannelStartTimer();
-        await channels.stop('settings-disabled', { waitForExit: false }).catch(() => {});
-      }
-      invalidatePreSessionToolSurface();
-      return this.getChannelSettings();
+      return options?.includeStatus === false ? {} : { status: channels.status() };
     },
     getSystemShell() {
       const config = getConfig();

package/src/session-runtime/setup-tool/executor.mjs

@@ -18,6 +18,12 @@ import {
 } from './tool-defs.mjs';
 import { schemaValueError } from '../../runtime/shared/schema-value-error.mjs';
 import { clean } from '../../runtime/agent/orchestrator/runtime-core/session-text.mjs';
+import profileConfig from '../../runtime/shared/profile-config.cjs';
+
+const PROFILE_VALUE_IDS = Object.freeze({
+  language: profileConfig.PROFILE_LANGUAGES.map((entry) => entry.id),
+  experienceLevel: ['', ...profileConfig.PROFILE_EXPERIENCE_LEVELS.map((entry) => entry.id)],
+});
 
 const ACTION_APPLIES_TO = {
   set_recap_enabled: 'background Memory cycles; no restart required',
@@ -49,6 +55,9 @@ const OPEN_TARGET_HINTS = Object.freeze({
   usage: 'Desktop: /usage in the composer · TUI: /usage',
   doctor: 'Desktop: Settings → System → Doctor, or /doctor in the composer · TUI: /doctor',
   context: 'Desktop: /context in the composer · TUI: /context',
+  developer: 'Desktop: Settings → Developer options · TUI: /setting → Developer',
+  voice: 'Desktop: Extensions → Plugin → Built-in (Voice) · TUI: /setting → Voice',
+  connection: 'Desktop only: Settings → Connection',
 });
 
 function requireEnum(value, allowed, label) {
@@ -123,6 +132,20 @@ function publicProviderRows(setup) {
   };
 }
 
+/** OAuth account roster without usage meters or provider-side identities. */
+function publicAccounts(pool) {
+  return {
+    selectedId: pool.selectedId,
+    auto: pool.auto,
+    accounts: pool.accounts.map(({ id, label, authenticated, reauthRequired }) => ({
+      id,
+      label,
+      authenticated,
+      reauthRequired,
+    })),
+  };
+}
+
 function mcpRows(status) {
   return {
     connectedCount: Number(status?.connectedCount || 0),
@@ -241,7 +264,14 @@ const SETUP_STATUS_READERS = {
     };
   },
   shell: (rt) => rt.getSystemShell?.() || {},
-  providers: async (rt) => publicProviderRows(await rt.getProviderSetup?.({})),
+  providers: async (rt) => {
+    const rows = publicProviderRows(await rt.getProviderSetup?.({}));
+    rows.oauth = rows.oauth.map((row) =>
+      row.authenticated ? { ...row, accounts: publicAccounts(rt.getProviderAccounts(row.id)) } : row
+    );
+    return rows;
+  },
+  developer: (rt) => rt.getDeveloperSettings(),
   mcp: (rt) => mcpRows(rt.mcpStatus?.()),
   skills: (rt) => ({ ...(rt.skillsStatus?.() || {}), disabled: rt.getDisabledSkills?.()?.disabled || [] }),
   plugins: (rt) => rt.pluginsStatus?.() || {},
@@ -274,7 +304,7 @@ function validateSetupInput(args) {
       throw new Error('route.contextPercent is only accepted by set_route');
     }
   }
-  for (const field of ['desktop', 'appearance', 'webhook', 'compaction']) {
+  for (const field of ['desktop', 'appearance', 'webhook', 'compaction', 'providerAccount']) {
     if (args[field] && !Object.keys(args[field]).length) throw new Error(`${field} requires at least one setting`);
   }
   return action;
@@ -326,6 +356,11 @@ const SETUP_ACTION_HANDLERS = {
     const profile = args.profile && typeof args.profile === 'object' ? args.profile : null;
     if (!profile || !Object.keys(profile).length)
       throw new Error('profile with title, language, or experienceLevel is required');
+    for (const [field, ids] of Object.entries(PROFILE_VALUE_IDS)) {
+      if (Object.hasOwn(profile, field) && !ids.includes(profile[field])) {
+        throw new Error(`profile.${field} must be one of ${ids.map((id) => JSON.stringify(id)).join(', ')}`);
+      }
+    }
     const result = rt.setProfile(profile);
     return {
       title: result.title || '',
@@ -414,7 +449,23 @@ const SETUP_ACTION_HANDLERS = {
     rt.deleteLocalProviderModel(requireText(args.confirmationToken, 'confirmationToken')),
   set_system_shell: (rt, args) => rt.setSystemShell({ command: clean(args.command) }),
   set_auto_update: (rt, args) => rt.setAutoUpdate(requireBoolean(args.enabled)),
-  forget_provider_auth: (rt, args) => rt.forgetProviderAuth(requireText(args.name, 'name')),
+  forget_provider_auth: async (rt, args) => {
+    const name = requireText(args.name, 'name');
+    const setup = await rt.getProviderSetup({});
+    if (!(setup?.oauth || []).some((row) => row.id === name)) {
+      if (Object.hasOwn(args, 'accountId')) throw new Error('accountId applies only to OAuth providers');
+      return rt.forgetProviderAuth(name);
+    }
+    const { accounts } = rt.getProviderAccounts(name);
+    if (!accounts.length) throw new Error(`${name} has no connected account`);
+    if (!Object.hasOwn(args, 'accountId') && accounts.length > 1) {
+      throw new Error(`${name} has ${accounts.length} accounts; pass accountId from status providers`);
+    }
+    const accountId = Object.hasOwn(args, 'accountId') ? requireText(args.accountId, 'accountId') : accounts[0].id;
+    return { ...(await rt.forgetProviderAuth(name, accountId)), accountId };
+  },
+  set_provider_account: async (rt, args) =>
+    publicAccounts(await rt.updateProviderAccounts(requireText(args.name, 'name'), args.providerAccount)),
   add_mcp_server: async (rt, args) => {
     const server = mcpServerInput(args);
     requireText(server.name, 'server.name');
@@ -456,6 +507,13 @@ const SETUP_ACTION_HANDLERS = {
   remove_plugin: async (rt, args) => ({
     plugin: (await rt.removePlugin(requireText(args.name, 'name')))?.plugin || null,
   }),
+  enable_plugin_mcp: async (rt, args) => {
+    const name = requireText(args.name, 'name');
+    const plugin = ((await rt.pluginsStatus())?.plugins || []).find((row) => row.name === name || row.id === name);
+    if (!plugin) throw new Error(`plugin "${name}" not found`);
+    const result = await rt.enablePluginMcp(plugin);
+    return { serverName: result.serverName, mcp: mcpRows(result.status) };
+  },
 };
 
 const READ_ONLY_SETUP_ACTIONS = new Set([

package/src/session-runtime/setup-tool/extended-actions.mjs

@@ -1,4 +1,3 @@
-import { parseSkillDocument } from '../../runtime/shared/skill-document.mjs';
 import { SETUP_EXTENDED_PROPERTIES, SETUP_DESKTOP_ACTIONS } from './settings-contract.mjs';
 
 const own = (value, key) => Object.hasOwn(value || {}, key);
@@ -76,15 +75,16 @@ export function validateMcpInput(server) {
 async function readDefinition(rt, kind, name) {
   if (kind === 'workflow') return rt.getWorkflowPack(name);
   if (kind === 'agent') return rt.getAgentDefinition(name);
+  // skillContent already returns the SKILL.md body without frontmatter; the
+  // frontmatter fields come from the catalog row.
   const resource = await rt.skillContent(name);
   const metadata = (await rt.skillsStatus()).skills.find((row) => row.name === name) || {};
-  const parsed = parseSkillDocument(resource.content);
   return {
     name,
     originalName: name,
-    description: metadata.description || parsed.description || '',
-    whenToUse: metadata.whenToUse || parsed.whenToUse || '',
-    body: parsed.body,
+    description: metadata.description || '',
+    whenToUse: metadata.whenToUse || '',
+    body: resource.content,
     toolDependencies: metadata.toolDependencies || [],
     editable: metadata.editable === true,
   };
@@ -103,6 +103,19 @@ async function saveDefinition(rt, args) {
   const id = input.originalName || input.id || input.name;
   if (!creating && !String(id || '').trim()) throw new Error('An existing definition identity is required');
   const current = creating ? {} : await readDefinition(rt, kind, id);
+  if (kind === 'skill' && !creating && !current.editable) {
+    // Built-in and plugin skills keep their document; like the Skills editor,
+    // only their tool dependencies are user-editable (null restores them).
+    const edits = Object.keys(input).filter((key) => key !== 'originalName' && key !== 'name');
+    if (edits.length !== 1 || edits[0] !== 'toolDependencies' || (own(input, 'name') && input.name !== current.name)) {
+      throw new Error('Built-in and plugin skills accept only toolDependencies edits');
+    }
+    return rt.saveSkill({
+      originalName: current.originalName,
+      dependenciesOnly: true,
+      toolDependencies: input.toolDependencies,
+    });
+  }
   const next = { ...pick(current, definitionKeys), ...input };
   if (!String(next.body || '').trim()) throw new Error('definition.body must not be empty');
   if (kind === 'workflow') {
@@ -115,7 +128,6 @@ async function saveDefinition(rt, args) {
     }
     return rt.saveAgentDefinition(creating ? next : { ...next, id: current.id });
   }
-  if (!creating && !current.editable) throw new Error('Only machine-global user skills can be edited');
   return creating ? rt.addSkill(next) : rt.saveSkill({ ...next, originalName: current.originalName });
 }
 
@@ -188,6 +200,19 @@ export const EXTENDED_SETUP_HANDLERS = Object.freeze({
     args.automationKind === 'schedule'
       ? rt.setScheduleEnabled(args.name, args.enabled)
       : rt.setWebhookEnabled(args.name, args.enabled),
+  async set_developer_option(rt, args) {
+    const option = rt
+      .getDeveloperSettings()
+      .sections.flatMap((section) => section.options)
+      .find((row) => row.id === args.name);
+    if (!option) throw new Error(`Unknown developer option "${args.name}"; read status developer`);
+    if (args.enabled && option.warning && args.riskAccepted !== true) {
+      throw new Error(
+        `Enabling ${option.label} requires riskAccepted:true after the user explicitly accepts: ${option.warning}`
+      );
+    }
+    return { developer: await rt.setDeveloperOption(option.id, args.enabled) };
+  },
   async set_webhook_config(rt, args) {
     await rt.setWebhookConfig(args.webhook);
     const status = await rt.getChannelSetup();

package/src/session-runtime/setup-tool/settings-contract.mjs

@@ -31,10 +31,26 @@ export const SETUP_EXTENDED_ACTION_FIELDS = Object.freeze({
   save_project: 'project',
   remove_project: 'projectPath',
   revoke_linked_device: 'name',
+  set_activity_rail_pins: 'activityRailPins',
+  set_developer_option: 'name enabled riskAccepted?',
 });
 
+/** Mirrors ACTIVITY_RAIL_PIN_IDS in apps/desktop/src/shared/activity-rail-pins.ts. */
+export const SETUP_ACTIVITY_RAIL_PIN_IDS = Object.freeze([
+  'sessions',
+  'agents',
+  'schedules',
+  'workflows',
+  'projects',
+  'extensions',
+  'source-control',
+  'search',
+  'webhooks',
+]);
+
 export const SETUP_EXTENDED_DOMAINS = Object.freeze([
   'capabilities',
+  'developer',
   'desktop',
   'appearance',
   'projects',
@@ -49,6 +65,7 @@ export const SETUP_DESKTOP_ACTIONS = Object.freeze([
   'save_project',
   'remove_project',
   'revoke_linked_device',
+  'set_activity_rail_pins',
 ]);
 export const SETUP_DESKTOP_DOMAINS = Object.freeze(['desktop', 'appearance', 'projects', 'connection']);
 
@@ -128,7 +145,6 @@ export const SETUP_EXTENDED_PROPERTIES = Object.freeze({
       timezone: text,
       days: { ...text, description: 'Schedule day selector, e.g. weekdays or mon,wed,fri.' },
       parser: { type: 'string', enum: ['github', 'generic', 'stripe', 'sentry'] },
-      channel: text,
       model: {
         ...text,
         description:
@@ -153,7 +169,6 @@ export const SETUP_EXTENDED_PROPERTIES = Object.freeze({
           ['kind', 'data']
         ),
       },
-      delivery: { type: 'string', enum: ['app', 'channel', 'both'] },
       enabled: boolean,
       overwrite: { ...boolean, description: 'Explicitly update an existing entry; omitted fields are preserved.' },
     },
@@ -178,10 +193,19 @@ export const SETUP_EXTENDED_PROPERTIES = Object.freeze({
       description: 'Desktop UI language id from status appearance; independent of profile language.',
     },
     sidePanels: { type: 'string', enum: ['close-left', 'close-right', 'close-both', 'keep-open'] },
-    zoom: { type: 'number', minimum: 0.5, maximum: 2 },
   }),
   project: object({ path: text, alias: text }, ['path']),
   projectPath: { ...text, description: 'Exact registered Project root.' },
+  activityRailPins: {
+    type: 'array',
+    items: { type: 'string', enum: [...SETUP_ACTIVITY_RAIL_PIN_IDS] },
+    description: 'set_activity_rail_pins: complete ordered list of pinned activity rail items; it replaces the current list.',
+  },
+  riskAccepted: {
+    ...boolean,
+    description:
+      "set_developer_option: the user's explicit acceptance of the option warning; required to enable an option that has one.",
+  },
 });
 
 export const SETUP_HANDOFFS = Object.freeze({