mixdog 1.0.7 → 1.0.9

package/src/session-runtime/internal-tool-executor/bridge-tools.mjs

@@ -1,41 +1,22 @@
-// Browser Use and Computer Use: the environment kill switch, the once-per-
-// session first-use approval, then the bridge client.
+// Browser Use and Computer Use: the environment kill switch, then the bridge
+// client. Neither asks the user before a call.
 import { executeBrowserTool } from '../../runtime/browser-bridge/client.mjs';
 import { executeComputerTool } from '../../runtime/computer-bridge/client.mjs';
-import { createBridgeFirstUseGate } from '../bridge-first-use-gate.mjs';
 import { featureEnvOverride } from '../../runtime/agent/orchestrator/runtime-core/config-helpers.mjs';
 import { createCallerContextResolvers } from './caller-context.mjs';
 
 export function createBridgeToolHandlers({ rt }) {
-  const bridgeFirstUseGate = createBridgeFirstUseGate({ getConfig: () => rt.config });
   const { sessionIdFor, signalFor } = createCallerContextResolvers(rt);
 
-  // Browser Use and Computer Use ask the user once per session before their
-  // first live call; the answer is the tool result when it is no.
-  const firstUseDenial = async (name, args, callerCtx, callerCwd) => {
-    const denial = await bridgeFirstUseGate({
-      name,
-      args,
-      cwd: callerCwd,
-      sessionId: sessionIdFor(callerCtx),
-      toolCallId: callerCtx?.toolCallId || null,
-      toolApprovalHook: callerCtx?.toolApprovalHook,
-      invocationSource: callerCtx?.invocationSource,
-    });
-    return denial ? { content: [{ type: 'text', text: denial }], isError: true } : null;
-  };
-
   const environmentDisabled = (callerCtx, feature) =>
     callerCtx?.invocationSource === 'model-tool' && featureEnvOverride(feature) === false;
 
   // `browser` and `browser_devtools` are one bridge; the tool name only
   // scopes which actions the validator admits.
-  const browser = async (args, { name, callerCtx, callerCwd }) => {
+  const browser = async (args, { name, callerCtx }) => {
     if (environmentDisabled(callerCtx, 'MIXDOG_FEATURE_BROWSER')) {
       throw new Error('the browser tool is disabled in this environment');
     }
-    const denied = await firstUseDenial(name, args, callerCtx, callerCwd);
-    if (denied) return denied;
     return await executeBrowserTool(args, {
       tool: name,
       sessionId: sessionIdFor(callerCtx),
@@ -44,12 +25,10 @@ export function createBridgeToolHandlers({ rt }) {
     });
   };
 
-  const computer = async (args, { name, callerCtx, callerCwd }) => {
+  const computer = async (args, { callerCtx, callerCwd }) => {
     if (environmentDisabled(callerCtx, 'MIXDOG_FEATURE_COMPUTER')) {
       throw new Error('the computer tool is disabled in this environment');
     }
-    const denied = await firstUseDenial(name, args, callerCtx, callerCwd);
-    if (denied) return denied;
     return await executeComputerTool(args, {
       sessionId: sessionIdFor(callerCtx),
       cwd: callerCwd,

package/src/session-runtime/model-recency.mjs

@@ -2,6 +2,7 @@
 // construction. Pure except for the
 // injected route provider (for sort priority) and webSearchCapableFor predicate.
 import { clean } from '../runtime/agent/orchestrator/runtime-core/session-text.mjs';
+import { contextWindowRange } from '../runtime/shared/llm/default-context-window.mjs';
 
 function parsedProviderModelVersion(id) {
   const text = clean(id).toLowerCase();
@@ -106,14 +107,21 @@ export function isSelectableLlmModel(model) {
 }
 
 export function providerModelCacheRow(name, m, webSearchCapableFor) {
+  // The pickers read the default window and the slider's range straight off
+  // this row, so a default lowered by range has to be stated here.
+  const range = contextWindowRange({
+    provider: name,
+    contextWindow: m.contextWindow,
+    maxContextWindow: m.maxContextWindow,
+  });
   return {
     id: m.id,
     provider: name,
     display: m.display || m.name || m.id,
     created: typeof m.created === 'number' ? m.created : null,
     releaseDate: m.releaseDate || null,
-    contextWindow: m.contextWindow,
-    maxContextWindow: m.maxContextWindow || null,
+    contextWindow: range.defaultWindow || m.contextWindow,
+    maxContextWindow: range.maxWindow > range.defaultWindow ? range.maxWindow : m.maxContextWindow || null,
     outputTokens: m.outputTokens || null,
     family: m.family || null,
     tier: m.tier || null,

package/src/session-runtime/model-route/set-route.mjs

@@ -13,6 +13,7 @@ import {
 } from '../../runtime/agent/orchestrator/runtime-core/config-helpers.mjs';
 import { getModelMetadataSync } from '../../runtime/agent/orchestrator/providers/model-catalog.mjs';
 import { workflowPresetId } from '../../runtime/agent/orchestrator/runtime-core/workflow.mjs';
+import { resolveRouteContextState } from '../route-state.mjs';
 import { writeStatuslineRoute } from '../statusline-route.mjs';
 import { sessionHasRouteHistory, shouldRecreateEmptySessionForRouteChange } from '../../runtime/agent/orchestrator/runtime-core/session-route-policy.mjs';
 import { rebuildDeferredToolSurfaceForProvider } from '../../runtime/agent/orchestrator/runtime-core/tool-catalog.mjs';
@@ -52,7 +53,12 @@ async function resolveSelectedRoute(deps, next) {
     selectedRoute.modelParameters
   );
   return {
-    selectedRoute: { ...selectedRoute, fast: fastCapable ? selectedRoute.fast === true : false },
+    selectedRoute: {
+      ...selectedRoute,
+      fast: fastCapable ? selectedRoute.fast === true : false,
+      // Lets the saved model settings tell a chosen window from the default.
+      contextDefaultPercent: resolveRouteContextState(selectedRoute, modelMeta).contextDefaultPercent,
+    },
     fastCapable,
     modelMeta,
   };

package/src/session-runtime/resource-api.mjs

@@ -8,7 +8,7 @@ import { createExtensionSync } from './resource-extension-sync.mjs';
 import { createScopeDecorators } from './resource-scope-decorate.mjs';
 import { createMcpResourceApi } from './resource-mcp-api.mjs';
 import { createSkillsResourceApi } from './resource-skills-api.mjs';
-import { createPluginsResourceApi } from './resource-plugins-api.mjs';
+import { createPluginsResourceApi, findRegisteredPlugin } from './resource-plugins-api.mjs';
 import { createRecallResourceApi } from './resource-recall-api.mjs';
 
 export function createResourceApi(deps) {
@@ -27,8 +27,14 @@ export function createResourceApi(deps) {
       if (!EXTENSION_SCOPE_KINDS.includes(scopeKind)) {
         throw new Error(`extension scope kind must be one of ${EXTENSION_SCOPE_KINDS.join(', ')}`);
       }
-      const key = clean(name);
+      let key = clean(name);
       if (!key) throw new Error('extension name is required');
+      // Plugin scopes are keyed by registry id; a name must resolve to it.
+      if (scopeKind === 'plugins') {
+        const plugin = findRegisteredPlugin(pluginsStatus, key);
+        if (!plugin) throw new Error(`plugin not registered: ${key}`);
+        key = clean(plugin.id || plugin.name);
+      }
       let list = [projects];
       if (Array.isArray(projects)) list = projects;
       else if (projects == null) list = [];

package/src/session-runtime/resource-plugins-api.mjs

@@ -10,6 +10,15 @@ import { pluginMcpServerName, pluginServerMatcher } from '../runtime/agent/orche
 
 const pluginKey = (plugin) => clean(plugin.id || plugin.name || plugin);
 
+/** The registered status row a caller means by `plugin` (row, id, name, or
+ *  title), or null. Callers such as the setup tool pass only a name, while
+ *  MCP entry names and scope keys come from the registered record. */
+export function findRegisteredPlugin(pluginsStatus, plugin) {
+  const key = pluginKey(plugin);
+  if (!key) return null;
+  return (pluginsStatus()?.plugins || []).find((row) => [row.id, row.name, row.title].map(clean).includes(key)) || null;
+}
+
 export function createPluginsResourceApi({ deps, sync, decorate }) {
   const {
     getConfig,
@@ -52,8 +61,9 @@ export function createPluginsResourceApi({ deps, sync, decorate }) {
       return { plugin: updated, status: pluginsStatus() };
     },
     async setPluginEnabled(plugin = {}, enabled = true) {
+      const owner = findRegisteredPlugin(pluginsStatus, plugin) || plugin;
       const updated = registrySetPluginEnabled(pluginKey(plugin), enabled, { dataDir: pluginData() });
-      await rewritePluginServers(plugin, (servers, owned) => {
+      await rewritePluginServers(owner, (servers, owned) => {
         const next = {};
         for (const [name, value] of Object.entries(servers)) {
           const config = value && typeof value === 'object' && !Array.isArray(value) ? { ...value } : value;
@@ -69,8 +79,10 @@ export function createPluginsResourceApi({ deps, sync, decorate }) {
       return { plugin: updated, status: pluginsStatus() };
     },
     async removePlugin(plugin = {}) {
+      // Resolve before the registry forgets the plugin and its manifest name.
+      const owner = findRegisteredPlugin(pluginsStatus, plugin) || plugin;
       const removed = registryRemovePlugin(pluginKey(plugin), { dataDir: pluginData() });
-      await rewritePluginServers(plugin, (servers, owned) => {
+      await rewritePluginServers(owner, (servers, owned) => {
         const next = { ...servers };
         for (const name of Object.keys(next)) {
           if (owned(name)) delete next[name];

package/src/session-runtime/route-state.mjs

@@ -5,6 +5,7 @@ import { clean, hasOwn } from '../runtime/agent/orchestrator/runtime-core/sessio
 import { coerceEffortFor } from '../runtime/agent/orchestrator/runtime-core/effort.mjs';
 import { fastCapableFor } from '../runtime/agent/orchestrator/runtime-core/model-capabilities.mjs';
 import { providerCachedModelMetadataSync } from '../runtime/agent/orchestrator/providers/provider-catalog-cache.mjs';
+import { contextWindowRange } from '../runtime/shared/llm/default-context-window.mjs';
 
 export function resolveRouteEffortState(targetRoute = {}, modelMeta = null) {
   const requested = hasOwn(targetRoute, 'effort') ? targetRoute.effort : targetRoute.preset?.effort || null;
@@ -49,8 +50,11 @@ export function resolveRouteContextState(targetRoute = {}, modelMeta = null, win
     Number(modelMeta?.contextWindow) > 0 || Number(modelMeta?.maxContextWindow) > 0
       ? modelMeta
       : windowLookup?.(clean(targetRoute?.provider), clean(targetRoute?.model)) || modelMeta;
-  const defaultWindow = Math.max(0, Number(windowMeta?.contextWindow) || 0);
-  const maxWindow = Math.max(defaultWindow, Number(windowMeta?.maxContextWindow) || 0);
+  const { defaultWindow, maxWindow } = contextWindowRange({
+    provider: clean(targetRoute?.provider),
+    contextWindow: windowMeta?.contextWindow,
+    maxContextWindow: windowMeta?.maxContextWindow,
+  });
   if (!maxWindow) {
     return { contextPercent: undefined, contextDefaultPercent: undefined, selectedContextWindow: undefined };
   }

package/src/session-runtime/schedule-session-run.mjs

@@ -11,6 +11,7 @@ import { createSession } from '../runtime/agent/orchestrator/session/manager/ses
 import { askSession } from '../runtime/agent/orchestrator/session/manager/ask-session.mjs';
 import { modelRouteFields, parseScheduleModelRef } from '../runtime/shared/schedule-model-ref.mjs';
 import { automationWorkflowOpts } from './automation-workflow.mjs';
+import { runAutomationTurns } from './automation-agents.mjs';
 import { automationPromptContent } from '../runtime/shared/automation-attachments.mjs';
 
 /** Resolve schedule.model into a {provider,model,effort?,fast?} route. */
@@ -58,6 +59,11 @@ export async function runScheduleSession(schedule, { config = null, prompt: prom
   // title/preview derive from it, so no "[Scheduled task: …]" header noise.
   // Stored attachments ride along as composer-style content parts.
   const content = automationPromptContent(prompt, schedule.attachments);
-  const result = await askSession(session.id, content, null, null, cwd || undefined);
+  // Agents the run delegates to report back; each result is the next turn.
+  const result = await runAutomationTurns(
+    session.id,
+    () => askSession(session.id, content, null, null, cwd || undefined),
+    (completions) => askSession(session.id, completions, null, null, cwd || undefined)
+  );
   return { sessionId: session.id, result: String(result?.content || '') };
 }

package/src/session-runtime/services/agent-tool/render.mjs

@@ -17,13 +17,8 @@ export function abnormalEmptyFinishError(result, agent) {
   if (!reason) return null;
   const iterations = result?.iterations ?? 0;
   const toolCallsTotal = result?.toolCallsTotal ?? 0;
-  const maxLoopIterations = result?.maxLoopIterations ?? 0;
   const stopReason = result?.stopReason ?? result?.stop_reason ?? null;
   switch (reason) {
-    case 'iteration_cap':
-      // Preserve failure reporting for stored results from older runtimes.
-      // Current execution no longer applies a loop iteration ceiling.
-      return `agent '${agent}' hit the loop iteration ceiling (${maxLoopIterations} iterations, ${toolCallsTotal} tool calls) without producing a final answer`;
     case 'truncated':
       return `agent '${agent}' response was truncated (stopReason=${stopReason}) before a final answer (${iterations} iterations, ${toolCallsTotal} tool calls)`;
     case 'empty':

package/src/session-runtime/settings-builtin-tools-api.mjs

@@ -1,12 +1,9 @@
 // Built-in tool modules: the enable/install toggles (web search, memory, git,
 // office, tidy, local provider), the recap switch and the Code Tidy card.
 import {
-  BRIDGE_FIRST_USE_IDS,
   INSTALLABLE_BUILTIN_IDS,
   builtinFeatureActive,
-  builtinFirstUseApproval,
   builtinInstalled,
-  setBuiltinFirstUseApprovalInConfig,
   setBuiltinInstalledInConfig,
 } from '../runtime/agent/orchestrator/runtime-core/builtin-features.mjs';
 import { LOCAL_PROVIDER_ID } from '../runtime/local-provider/managed-runtime.mjs';
@@ -115,19 +112,6 @@ export function createBuiltinToolSettings(
       await refreshEmptySessionToolPolicy?.();
       return this.getToolModuleSettings();
     },
-    /** Once-per-session approval before the first Browser Use or Computer Use
-     *  call. The setting is read at each call, so it applies at once. */
-    async setBridgeFirstUseApproval(name, enabled) {
-      if (!BRIDGE_FIRST_USE_IDS.includes(name)) {
-        throw new TypeError('First-use approval applies to browser or computer.');
-      }
-      saveConfigAndAdopt(setBuiltinFirstUseApprovalInConfig({ ...getConfig() }, name, enabled !== false));
-      return {
-        name,
-        firstUseApproval: builtinFirstUseApproval(getConfig(), name),
-        appliesTo: 'the next first use in any session, including this one',
-      };
-    },
     async setBuiltinToolEnabled(name, enabled) {
       if (name !== 'git' && name !== 'office' && name !== 'tidy' && name !== 'localProvider') {
         throw new TypeError('Built-in tool must be git, office, tidy, or localProvider.');

package/src/session-runtime/setup-tool/executor.mjs

@@ -3,7 +3,7 @@
  *  reconnects, and the empty-session tool-policy refresh all apply exactly as
  *  they do for a UI click. The facade is read lazily because runtime-core
  *  registers the tool executor before it finishes assembling the API object. */
-import { builtinFeatureActive, builtinFirstUseApproval } from '../../runtime/agent/orchestrator/runtime-core/builtin-features.mjs';
+import { builtinFeatureActive } from '../../runtime/agent/orchestrator/runtime-core/builtin-features.mjs';
 import { ORCHESTRATION_MODES } from '../../runtime/shared/orchestration.mjs';
 import { SETUP_DESKTOP_DOMAINS, SETUP_HANDOFFS } from './settings-contract.mjs';
 import { executeExtendedSetupAction, publicAutomation, validateMcpInput } from './extended-actions.mjs';
@@ -253,14 +253,8 @@ const SETUP_STATUS_READERS = {
     const config = getConfig();
     return {
       ...featureFlags(rt),
-      browser: {
-        active: builtinFeatureActive(config, 'browser'),
-        firstUseApproval: builtinFirstUseApproval(config, 'browser'),
-      },
-      computer: {
-        active: builtinFeatureActive(config, 'computer'),
-        firstUseApproval: builtinFirstUseApproval(config, 'computer'),
-      },
+      browser: { active: builtinFeatureActive(config, 'browser') },
+      computer: { active: builtinFeatureActive(config, 'computer') },
     };
   },
   shell: (rt) => rt.getSystemShell?.() || {},
@@ -398,10 +392,6 @@ const SETUP_ACTION_HANDLERS = {
     if (DESKTOP_HOSTED_FEATURES.includes(name)) return requestDesktop(args);
     return rt.setBuiltinToolEnabled(name, requireBoolean(args.enabled));
   },
-  set_first_use_approval: (rt, args) => {
-    const name = requireEnum(args.name, ['browser', 'computer'], 'name');
-    return rt.setBridgeFirstUseApproval(name, requireBoolean(args.enabled));
-  },
   install_builtin: async (rt, args, { requestDesktop }) => {
     const name = requireEnum(args.name, SETUP_INSTALLABLE_FEATURES, 'name');
     if (DESKTOP_HOSTED_FEATURES.includes(name)) return requestDesktop(args);
@@ -596,6 +586,10 @@ export function createSetupToolExecutor({ getApi, getConfig, notifySessionUi, ge
       const result = await execute(args, options);
       if (READ_ONLY_SETUP_ACTIONS.has(args.action)) return JSON.stringify(result ?? {}, null, 2);
       await flushSettings?.();
+      // Attached surfaces re-read what changed instead of waiting for their
+      // next open or cache expiry.
+      const sessionId = clean(getSessionId?.());
+      if (sessionId) notifySessionUi?.(sessionId, 'Settings changed', { kind: 'setup-changed', action: args.action });
       return setupMutationReceipt(args.action, result);
     },
   };

package/src/session-runtime/setup-tool/tool-defs.mjs

@@ -78,7 +78,6 @@ export const SETUP_ACTION_FIELDS = Object.freeze({
   set_recap_enabled: 'enabled',
   set_web_search_enabled: 'enabled',
   set_builtin_enabled: 'name enabled',
-  set_first_use_approval: 'name enabled',
   install_builtin: 'name',
   install_local_model: 'modelId',
   start_local_installation: 'phase modelId?',
@@ -209,11 +208,11 @@ export const SETUP_TOOL_DEFS = Object.freeze([
         enabled: {
           type: 'boolean',
           description:
-            'Boolean setters (set_*_enabled, set_first_use_approval, set_compaction, set_auto_update, set_mcp_enabled, set_plugin_enabled).',
+            'Boolean setters (set_*_enabled, set_compaction, set_auto_update, set_mcp_enabled, set_plugin_enabled).',
         },
         name: {
           type: 'string',
-          description: `set_builtin_enabled: ${SETUP_BUILTIN_TOGGLE_FEATURES.join('|')}; install_builtin also accepts memory. Memory toggles use set_memory_enabled. set_first_use_approval: browser|computer; revoke_linked_device: client id from status connection, not its display name; set_developer_option: option id from status developer; else MCP/plugin/provider id.`,
+          description: `set_builtin_enabled: ${SETUP_BUILTIN_TOGGLE_FEATURES.join('|')}; install_builtin also accepts memory. Memory toggles use set_memory_enabled. revoke_linked_device: client id from status connection, not its display name; set_developer_option: option id from status developer; read_definition/delete_definition: the definition id; else MCP/plugin/provider id.`,
         },
         accountId: {
           type: 'string',

package/src/session-runtime/tool-policy-refresh.mjs

@@ -71,7 +71,6 @@ export function createToolPolicyRefresh({
   getDataDir,
   modelStandaloneTools,
   featureDisallowedTools,
-  memoryToolsEnabled,
   loadCoreMemoryContext,
   activeWorkflowContext,
   invalidatePreSessionToolSurface,
@@ -94,7 +93,6 @@ export function createToolPolicyRefresh({
   }
 
   async function leadCoreMemoryContext() {
-    if (!memoryToolsEnabled()) return '';
     try {
       return await loadCoreMemoryContext();
     } catch {

package/src/session-runtime/webhook-session-run.mjs

@@ -10,12 +10,16 @@ import { createSession } from '../runtime/agent/orchestrator/session/manager/ses
 import { askSession } from '../runtime/agent/orchestrator/session/manager/ask-session.mjs';
 import { modelRouteFields, parseScheduleModelRef } from '../runtime/shared/schedule-model-ref.mjs';
 import { automationWorkflowOpts } from './automation-workflow.mjs';
+import { runAutomationTurns } from './automation-agents.mjs';
 import { automationPromptContent } from '../runtime/shared/automation-attachments.mjs';
 
 // Webhook payloads are authenticated transport data, not trusted user intent.
 // Keep their sessions on the deterministic read-only bundle even when a
-// preset or workflow would otherwise resolve to full tools.
-export const WEBHOOK_SESSION_TOOLS = Object.freeze(['tools:readonly']);
+// preset or workflow would otherwise resolve to full tools. `tools:mcp` adds
+// only the automation scope's internal tools — the agent tool, offered when the
+// user's orchestration mode allows delegation (user decision: automations may
+// delegate); the scope connects no MCP servers.
+export const WEBHOOK_SESSION_TOOLS = Object.freeze(['tools:readonly', 'tools:mcp']);
 
 /** Endpoint model ref wins; the maintenance.webhook route is the fallback. */
 function webhookRoute(modelRef) {
@@ -66,14 +70,9 @@ export async function runWebhookSession({
   // askOpts.signal is the parent-abort link: it is cascaded onto the turn
   // controller, so aborting it stops the in-flight provider/tool work instead
   // of leaving a timed-out delivery's session running with live side effects.
-  const result = await askSession(
-    session.id,
-    content,
-    null,
-    null,
-    projectCwd || undefined,
-    undefined,
-    signal ? { signal } : {}
-  );
+  const ask = (turnContent) =>
+    askSession(session.id, turnContent, null, null, projectCwd || undefined, undefined, signal ? { signal } : {});
+  // Agents the run delegates to report back; each result is the next turn.
+  const result = await runAutomationTurns(session.id, () => ask(content), ask);
   return { sessionId: session.id, result: String(result?.content || '') };
 }

package/src/session-runtime/workflow-agents-api/agent-route.mjs

@@ -73,6 +73,11 @@ export function createAgentRouteApi(deps) {
     const keepOff = requested.disabled === true;
     if (keepOff && !(clean(requested.provider) && clean(requested.model))) {
       saveDisabled(id, true);
+      // An explicitly empty provider still asks to drop the override, as it
+      // does for an agent that stays on: off and inheriting Main.
+      if (hasOwn(requested, 'provider') && !clean(requested.provider)) {
+        return { ...clearOverride(id), id, disabled: true };
+      }
       return { ...stored, id, disabled: true };
     }
     if (requested.disabled === false && Object.keys(requested).length === 1) {

package/src/standalone/daemon-agent-control.mjs

@@ -8,6 +8,8 @@
 // this control exists — the host takes `execute` as a constructor option), and
 // `cwd`. Output: { canonicalAgentTool, execute }.
 
+import { deliverAutomationCompletion } from '../session-runtime/automation-agents.mjs';
+
 export function createCanonicalAgentControl({ getSessionService, getSessionRuntimeHost, cwd }) {
   let canonicalAgentToolPromise = null;
 
@@ -32,7 +34,12 @@ export function createCanonicalAgentControl({ getSessionService, getSessionRunti
           isKeychainPrewarmReady: () => true,
           sessionSurface: sessionService.agentSurface,
           notifySessionCompletion(ownerSessionId, text, meta = {}) {
-            return getSessionRuntimeHost()?.notifySessionCompletion?.(ownerSessionId, text, meta) === true;
+            // A schedule/webhook run owns no session runtime; its own
+            // agent-result waiter takes the completions it is owed.
+            return (
+              getSessionRuntimeHost()?.notifySessionCompletion?.(ownerSessionId, text, meta) === true ||
+              deliverAutomationCompletion(ownerSessionId, text, meta)
+            );
           },
         });
       })

package/src/standalone/daemon.mjs

@@ -71,6 +71,7 @@ import { createLagProfiler } from './daemon-lag-profiler.mjs';
 import { createChannelsRuntimeLoader } from './daemon-channels-loader.mjs';
 import { createDesktopRuntime } from './daemon-desktop-runtime.mjs';
 import { createCanonicalAgentControl } from './daemon-agent-control.mjs';
+import { registerAutomationAgentTool } from '../session-runtime/automation-agents.mjs';
 import {
   compareRuntimeVersions,
   SESSION_CAPABILITY_FINGERPRINT,
@@ -666,6 +667,9 @@ async function main() {
     getSessionRuntimeHost: () => sessionRuntimeHost,
     cwd: CWD,
   });
+  // Schedules and webhooks run headless here; their sessions reach the same
+  // canonical agent control through the automation tool scope.
+  registerAutomationAgentTool(agentControl.execute);
   const requestedRuntimeMode = String(process.env.MIXDOG_SESSION_RUNTIME_MODE || '')
     .trim()
     .toLowerCase();

package/src/tui/dist/index.mjs

@@ -44194,7 +44194,6 @@ import { dirname as dirname2, join as join2, resolve as resolve2 } from "node:pa
 import { homedir } from "node:os";
 import { dirname, join } from "node:path";
 import { fileURLToPath } from "node:url";
-var DEFAULT_ROOT = join(dirname(fileURLToPath(import.meta.url)), "..", "..");
 var homeBase = null;
 var homePath = null;
 var dataBase = null;
@@ -47687,7 +47686,9 @@ var LITELLM_FLAG_FIELDS = [
   "supports_web_search",
   "supports_websearch",
   "supports_prompt_caching",
-  "supports_reasoning"
+  "supports_reasoning",
+  // Reader: supportsAnthropicFastMode (anthropic-betas.mjs).
+  "supports_fast_mode"
 ];
 var LITELLM_STRING_FIELDS = ["mode", "litellm_provider", "reasoning_content_field"];
 function projectLitellmRow(row) {

package/src/tui/session/agent-job-feed/notification-router.mjs

@@ -15,8 +15,15 @@ export function createNotificationRouter({
   modelNotification,
 }) {
   let uiOpenSeq = 0;
+  let setupChangeSeq = 0;
   const uiActions = {
     'setup-ui': (delivery) => set({ setupUiRequest: { id: delivery.id, at: Date.now() } }),
+    'setup-changed': (delivery) => {
+      // Monotonic like ui-open: consecutive changes by the same action must
+      // each refresh the attached surfaces.
+      setupChangeSeq += 1;
+      set({ setupChanged: { action: delivery.setupAction, seq: setupChangeSeq, at: Date.now() } });
+    },
     'ui-open': (delivery) => {
       // Monotonic seq: the same command requested twice must fire twice, and
       // the consuming App effect keys on the object identity + seq.

package/src/tui/session/live-share.mjs

@@ -13,9 +13,17 @@
  * pipe is down. Ownership/promotion semantics are unchanged — the pipe is a
  * transport, never a second writer.
  */
+import { createHash } from 'node:crypto';
+import { join } from 'node:path';
 import { createOwnerLeg } from './live-share/owner.mjs';
 import { createViewerLeg } from './live-share/viewer.mjs';
 
+// A unix socket path is a fixed sun_path buffer: 104 bytes on macOS and the
+// BSDs, 108 on Linux, NUL included. A desktop session id alone is 64 hex, so
+// the path beside its session file runs past the macOS limit and listen()
+// failed there for every desktop session.
+const UNIX_SOCKET_PATH_MAX_BYTES = 103;
+
 // Session entry is latency-sensitive: the owner pipe can be a few event-loop
 // turns behind the viewer resume. Retry locally instead of waiting for the
 // coarse 3s session runtime safety tick.
@@ -23,7 +31,14 @@ const LIVE_CONNECT_RETRY_MIN_MS = 10;
 const LIVE_CONNECT_RETRY_MAX_MS = 160;
 
 export function liveSharePipePath(sessionId, sessionFilePath) {
-  return process.platform === 'win32' ? `\\\\.\\pipe\\mixdog-live-${sessionId}` : `${sessionFilePath}.live.sock`;
+  if (process.platform === 'win32') return `\\\\.\\pipe\\mixdog-live-${sessionId}`;
+  const beside = `${sessionFilePath}.live.sock`;
+  if (Buffer.byteLength(beside) <= UNIX_SOCKET_PATH_MAX_BYTES) return beside;
+  // Owner and viewer derive the same short name from the same session file.
+  // /tmp, not os.tmpdir(): TMPDIR is itself long on macOS and may differ
+  // between the desktop daemon and a terminal, which would split the pair.
+  const digest = createHash('sha256').update(beside).digest('hex').slice(0, 24);
+  return join('/tmp', `mixdog-live-${process.getuid()}-${digest}.sock`);
 }
 
 export function createLiveShare({

package/src/tui/session/notification-plan.mjs

@@ -89,6 +89,10 @@ export function resolveTuiRuntimeNotificationDelivery(event, text) {
   if (meta.kind === 'setup-ui') {
     return meta.id ? { action: 'setup-ui', id: String(meta.id) } : { action: 'ignore' };
   }
+  if (meta.kind === 'setup-changed') {
+    const setupAction = String(meta.action || '').trim();
+    return setupAction ? { action: 'setup-changed', setupAction } : { action: 'ignore' };
+  }
   if (meta.kind === 'ui-open') {
     const command = String(meta.command || '')
       .trim()

package/src/session-runtime/bridge-first-use-gate.mjs

@@ -1,72 +0,0 @@
-// One approval per session before the first live browser or desktop call.
-//
-// Claude Code asks per app and per session before it controls a screen; here
-// the ask is per capability (Browser Use, Computer Use), answered once, and
-// remembered for the session in memory only, so a restart asks again. Without
-// an approval UI (headless runs, agent-owned sessions) nobody can answer, so
-// the gate stands aside and the workflow's own policies govern.
-import { approvalGranted, approvalReason } from '../runtime/agent/orchestrator/session/loop/tool-helpers.mjs';
-import { builtinFirstUseApproval } from '../runtime/agent/orchestrator/runtime-core/builtin-features.mjs';
-
-const FAMILY_BY_TOOL = Object.freeze({
-  browser: 'browser',
-  browser_devtools: 'browser',
-  computer: 'computer',
-});
-const FAMILY_LABEL = Object.freeze({
-  browser: 'Browser Use',
-  computer: 'Computer Use',
-});
-
-export function bridgeToolFamily(name) {
-  return FAMILY_BY_TOOL[String(name || '')] || null;
-}
-
-function callSummary(args) {
-  const action = typeof args?.action === 'string' ? args.action : '';
-  const input = args?.input && typeof args.input === 'object' ? args.input : args;
-  const target = input?.url || input?.app || input?.window_id || input?.tab || '';
-  return (
-    [action, target]
-      .filter(Boolean)
-      .map((part) => String(part).slice(0, 120))
-      .join(' ') || 'call'
-  );
-}
-
-/** `getConfig` reads the live profile; the returned `gate` resolves to null
- *  when the call may proceed, or to the error text the model receives. */
-export function createBridgeFirstUseGate({ getConfig }) {
-  const granted = new Set();
-  return async function gate({ name, args, cwd, sessionId, toolCallId, toolApprovalHook, invocationSource }) {
-    const family = bridgeToolFamily(name);
-    if (!family || invocationSource !== 'model-tool') return null;
-    if (typeof toolApprovalHook !== 'function') return null;
-    if (!builtinFirstUseApproval(getConfig?.(), family)) return null;
-    const key = `${String(sessionId || '')}:${family}`;
-    if (granted.has(key)) return null;
-    const label = FAMILY_LABEL[family];
-    const reason = `first ${label} call in this session (${callSummary(args)}); allowing it covers the rest of the session`;
-    let approval;
-    try {
-      approval = await toolApprovalHook({
-        name,
-        args,
-        cwd,
-        sessionId: sessionId || null,
-        toolCallId: toolCallId || null,
-        reason,
-      });
-    } catch (error) {
-      return `Error: ${label} first-use approval failed: ${error?.message || String(error || 'approval failed')}`;
-    }
-    if (!approvalGranted(approval)) {
-      return (
-        `Error: ${label} was not approved for this session: ${approvalReason(approval, 'the user declined')}. ` +
-        'Do not retry it; reach the goal another way or ask the user.'
-      );
-    }
-    granted.add(key);
-    return null;
-  };
-}