mixdog 1.2.5 → 1.3.0

package/LICENSES/simple-icons-CC0-1.0.txt

@@ -0,0 +1,30 @@
+# CC0 1.0 Universal
+
+## Statement of Purpose
+
+The laws of most jurisdictions throughout the world automatically confer exclusive Copyright and Related Rights (defined below) upon the creator and subsequent owner(s) (each and all, an “owner”) of an original work of authorship and/or a database (each, a “Work”).
+
+Certain owners wish to permanently relinquish those rights to a Work for the purpose of contributing to a commons of creative, cultural and scientific works (“Commons”) that the public can reliably and without fear of later claims of infringement build upon, modify, incorporate in other works, reuse and redistribute as freely as possible in any form whatsoever and for any purposes, including without limitation commercial purposes. These owners may contribute to the Commons to promote the ideal of a free culture and the further production of creative, cultural and scientific works, or to gain reputation or greater distribution for their Work in part through the use and efforts of others.
+
+For these and/or other purposes and motivations, and without any expectation of additional consideration or compensation, the person associating CC0 with a Work (the “Affirmer”), to the extent that he or she is an owner of Copyright and Related Rights in the Work, voluntarily elects to apply CC0 to the Work and publicly distribute the Work under its terms, with knowledge of his or her Copyright and Related Rights in the Work and the meaning and intended legal effect of CC0 on those rights.
+
+1. Copyright and Related Rights. A Work made available under CC0 may be protected by copyright and related or neighboring rights (“Copyright and Related Rights”). Copyright and Related Rights include, but are not limited to, the following:
+    1. the right to reproduce, adapt, distribute, perform, display, communicate, and translate a Work;
+    2. moral rights retained by the original author(s) and/or performer(s);
+    3. publicity and privacy rights pertaining to a person’s image or likeness depicted in a Work;
+    4. rights protecting against unfair competition in regards to a Work, subject to the limitations in paragraph 4(i), below;
+    5. rights protecting the extraction, dissemination, use and reuse of data in a Work;
+    6. database rights (such as those arising under Directive 96/9/EC of the European Parliament and of the Council of 11 March 1996 on the legal protection of databases, and under any national implementation thereof, including any amended or successor version of such directive); and
+    7. other similar, equivalent or corresponding rights throughout the world based on applicable law or treaty, and any national implementations thereof.
+
+2. Waiver. To the greatest extent permitted by, but not in contravention of, applicable law, Affirmer hereby overtly, fully, permanently, irrevocably and unconditionally waives, abandons, and surrenders all of Affirmer’s Copyright and Related Rights and associated claims and causes of action, whether now known or unknown (including existing as well as future claims and causes of action), in the Work (i) in all territories worldwide, (ii) for the maximum duration provided by applicable law or treaty (including future time extensions), (iii) in any current or future medium and for any number of copies, and (iv) for any purpose whatsoever, including without limitation commercial, advertising or promotional purposes (the “Waiver”). Affirmer makes the Waiver for the benefit of each member of the public at large and to the detriment of Affirmer’s heirs and successors, fully intending that such Waiver shall not be subject to revocation, rescission, cancellation, termination, or any other legal or equitable action to disrupt the quiet enjoyment of the Work by the public as contemplated by Affirmer’s express Statement of Purpose.
+
+3. Public License Fallback. Should any part of the Waiver for any reason be judged legally invalid or ineffective under applicable law, then the Waiver shall be preserved to the maximum extent permitted taking into account Affirmer’s express Statement of Purpose. In addition, to the extent the Waiver is so judged Affirmer hereby grants to each affected person a royalty-free, non transferable, non sublicensable, non exclusive, irrevocable and unconditional license to exercise Affirmer’s Copyright and Related Rights in the Work (i) in all territories worldwide, (ii) for the maximum duration provided by applicable law or treaty (including future time extensions), (iii) in any current or future medium and for any number of copies, and (iv) for any purpose whatsoever, including without limitation commercial, advertising or promotional purposes (the “License”). The License shall be deemed effective as of the date CC0 was applied by Affirmer to the Work. Should any part of the License for any reason be judged legally invalid or ineffective under applicable law, such partial invalidity or ineffectiveness shall not invalidate the remainder of the License, and in such case Affirmer hereby affirms that he or she will not (i) exercise any of his or her remaining Copyright and Related Rights in the Work or (ii) assert any associated claims and causes of action with respect to the Work, in either case contrary to Affirmer’s express Statement of Purpose.
+
+4. Limitations and Disclaimers.
+    1. No trademark or patent rights held by Affirmer are waived, abandoned, surrendered, licensed or otherwise affected by this document.
+    2. Affirmer offers the Work as-is and makes no representations or warranties of any kind concerning the Work, express, implied, statutory or otherwise, including without limitation warranties of title, merchantability, fitness for a particular purpose, non infringement, or the absence of latent or other defects, accuracy, or the present or absence of errors, whether or not discoverable, all to the greatest extent permissible under applicable law.
+    3. Affirmer disclaims responsibility for clearing rights of other persons that may apply to the Work or any use thereof, including without limitation any person’s Copyright and Related Rights in the Work. Further, Affirmer disclaims responsibility for obtaining any necessary consents, permissions or other rights required for any use of the Work.
+    4. Affirmer understands and acknowledges that Creative Commons is not a party to this document and has no duty or obligation with respect to this CC0 or use of the Work.
+
+For more information, please see <https://creativecommons.org/publicdomain/zero/1.0>.

package/NOTICE.md

@@ -20,6 +20,8 @@ Full license texts live in `LICENSES/`:
   notice referenced by the generated files.
 - `LICENSES/browser-import-NOTICE.txt` — source and license boundary for the
   optional GPL Chrome password import sidecar.
+- `LICENSES/simple-icons-CC0-1.0.txt` — the CC0 1.0 dedication of the Simple
+  Icons brand marks used for connectors.
 - Tidy engine license texts listed in the Tidy engines section below.
 
 ## MIT
@@ -133,6 +135,23 @@ Its training data includes requests from SWE-chat
 the Open Data Commons Attribution License 1.0, and from DataClaw exports that
 their authors published on the Hugging Face Hub under the MIT License.
 
+## CC0-1.0
+
+### Simple Icons 16.35.0
+
+<https://simpleicons.org> · <https://github.com/simple-icons/simple-icons>
+
+The connector brand marks in
+`apps/desktop/src/renderer/connectors-brand-icons.ts` carry Simple Icons path
+data and brand colours unmodified (Airtable, Blender, Confluence, Discord,
+Dropbox, Figma, GitHub, Gmail, Google Calendar, Google Drive, Hugging Face,
+Jira, Linear, Notion, PostgreSQL, Sentry, Stripe, Supabase, Telegram, Trello,
+Unity, Vercel); Unity's mark is drawn in black, as its listed colour is white.
+Simple Icons is dedicated to the public domain under CC0 1.0; each
+mark remains the trademark of its owner and is shown only to name that
+service. Slack is not in Simple Icons and its mark is not openly licensed, so
+it is shown as a letter tile. Full text: `LICENSES/simple-icons-CC0-1.0.txt`.
+
 ## GPL-3.0-only
 
 ### Chrome password import sidecar

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mixdog",
-  "version": "1.2.5",
+  "version": "1.3.0",
   "private": false,
   "type": "module",
   "description": "Open-source coding agent that matches Codex on Terminal-Bench 2.1 with 63% fewer tokens.",
@@ -60,6 +60,7 @@
     "prepack": "npm run build:shipped-history && npm run build:tui",
     "build:shipped-history": "node scripts/build-shipped-history.mjs",
     "check:shipped-history": "node scripts/build-shipped-history.mjs --check",
+    "check:model-recommendations": "node scripts/check-model-recommendations.mjs",
     "prepublishOnly": "node -e \"if(!process.env.CI){console.error('local npm publish is disabled — run npm run release:patch');process.exit(1)}\"",
     "start": "node src/cli.mjs",
     "test": "node scripts/test.mjs",
@@ -165,11 +166,13 @@
     "chalk": "^5.6.2",
     "cli-highlight": "^2.1.11",
     "diff": "^9.0.0",
+    "imapflow": "^2.5.7",
     "ink": "https://github.com/tribgames/mixdog/releases/download/ink-runtime-v7.1.0-mixdog.1/ink-7.1.0.tgz",
     "jsdom": "^27.0.0",
     "jszip": "^3.10.1",
     "marked": "^14.1.4",
     "node-cron": "^4.5.0",
+    "nodemailer": "^10.1.7",
     "onnxruntime-node": "1.30.0",
     "openai": "^6.44.0",
     "pdf-lib": "^1.17.1",

package/scripts/check-model-recommendations.mjs

@@ -0,0 +1,89 @@
+// Validates the setup-guide model recommendation list and exits non-zero when
+// it is older than its own staleAfterDays.
+//
+//   node scripts/check-model-recommendations.mjs
+import { readFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const file = join(
+  dirname(fileURLToPath(import.meta.url)),
+  '..',
+  'src/defaults/skills/setup-guide/model-recommendations.json'
+);
+const data = JSON.parse(readFileSync(file, 'utf8'));
+const DATE = /^\d{4}-\d{2}-\d{2}$/;
+const errors = [];
+const str = (v) => typeof v === 'string' && v.trim() !== '';
+
+if (!DATE.test(data.asOf ?? '')) errors.push('asOf must be YYYY-MM-DD');
+if (!Number.isInteger(data.staleAfterDays) || data.staleAfterDays <= 0) {
+  errors.push('staleAfterDays must be a positive integer');
+}
+if (!Array.isArray(data.roles) || data.roles.length === 0) errors.push('roles must be a non-empty array');
+for (const [i, entry] of (Array.isArray(data.roles) ? data.roles : []).entries()) {
+  const at = `roles[${i}]`;
+  if (!Array.isArray(entry.roles) || entry.roles.length === 0 || !entry.roles.every(str)) {
+    errors.push(`${at}.roles must be a non-empty string array`);
+  }
+  if (entry.preferOtherProviderThan !== undefined) {
+    const known = new Set(data.roles.flatMap((r) => r.roles ?? []));
+    const list = entry.preferOtherProviderThan;
+    if (!Array.isArray(list) || !list.length || !list.every((r) => known.has(r))) {
+      errors.push(`${at}.preferOtherProviderThan must list existing role names`);
+    }
+  }
+  if (!Array.isArray(entry.picks) || entry.picks.length === 0) errors.push(`${at}.picks must be non-empty`);
+  for (const [j, pick] of (Array.isArray(entry.picks) ? entry.picks : []).entries()) {
+    for (const key of ['provider', 'model', 'effort', 'source']) {
+      if (!str(pick[key])) errors.push(`${at}.picks[${j}].${key} is required`);
+    }
+    if (!DATE.test(pick.checkedAt ?? '')) errors.push(`${at}.picks[${j}].checkedAt must be YYYY-MM-DD`);
+    if (str(pick.source) && !/^https?:\/\//.test(pick.source)) errors.push(`${at}.picks[${j}].source must be a URL`);
+  }
+}
+const MODES = ['none', 'focused', 'balanced', 'swarm'];
+const knownRoles = new Set((Array.isArray(data.roles) ? data.roles : []).flatMap((r) => r.roles ?? []));
+const roleList = (v) => Array.isArray(v) && v.every((r) => knownRoles.has(r));
+const d = data.delegation;
+if (!d || typeof d !== 'object') errors.push('delegation is required');
+else {
+  if (!roleList(d.baseRoster) || !d.baseRoster.length) errors.push('delegation.baseRoster must list existing roles');
+  const modes = Array.isArray(d.modes) ? d.modes : [];
+  if (modes.map((m) => m.mode).join() !== MODES.join())
+    errors.push(`delegation.modes must be ${MODES.join(', ')} in order`);
+  for (const m of modes) {
+    if (!str(m.label) || !roleList(m.agents))
+      errors.push(`delegation.modes ${m.mode}: label and existing-role agents required`);
+    if (!m.plans || typeof m.plans !== 'object') errors.push(`delegation.modes ${m.mode}: plans required`);
+  }
+  const lean = d.leanReview;
+  if (
+    !lean ||
+    !roleList(lean.agentsOff) ||
+    !roleList(lean.agentsOn) ||
+    !lean.fitsModes?.every((x) => MODES.includes(x))
+  ) {
+    errors.push('delegation.leanReview needs valid fitsModes, agentsOff, agentsOn');
+  }
+}
+for (const [i, entry] of (Array.isArray(data.roles) ? data.roles : []).entries()) {
+  for (const [j, pick] of (Array.isArray(entry.picks) ? entry.picks : []).entries()) {
+    if (pick.plans !== undefined && !(pick.plans && Object.values(pick.plans).every(str))) {
+      errors.push(`roles[${i}].picks[${j}].plans must map plan to model string`);
+    }
+  }
+}
+if (errors.length) {
+  console.error(`[model-recommendations] invalid:\n- ${errors.join('\n- ')}`);
+  process.exit(1);
+}
+
+const ageDays = Math.floor((Date.now() - Date.parse(data.asOf)) / 86_400_000);
+if (ageDays > data.staleAfterDays) {
+  console.error(
+    `[model-recommendations] stale: asOf ${data.asOf} is ${ageDays} days old (limit ${data.staleAfterDays}). Re-check the picks and update the file.`
+  );
+  process.exit(1);
+}
+console.log(`[model-recommendations] ok (asOf ${data.asOf}, ${ageDays} days old)`);

package/scripts/gate-local.mjs

@@ -32,6 +32,13 @@ if (failedPreChecks.length) {
   process.exit(1);
 }
 
+// Warning-level: a stale model list never blocks the gate.
+if (
+  spawnSync('node scripts/check-model-recommendations.mjs', { cwd: root, stdio: 'inherit', shell: true }).status !== 0
+) {
+  console.warn('[gate:local] warning: model recommendations stale or invalid (not blocking)');
+}
+
 const build = spawnSync('npm run build:spawn:test', { cwd: root, stdio: 'inherit', shell: true });
 if (build.status !== 0) {
   console.error('[gate:local] build:spawn:test failed');

package/scripts/lib/gate-scheduler.mjs

@@ -2,9 +2,9 @@ import { availableParallelism } from 'node:os';
 import { testConcurrencyArg } from './run-node-tests.mjs';
 
 // A local gate has one budget, not a full machine's worth of workers per lane.
-// Six is the interactive-desktop default; explicit and shell budgets still win.
+// Six is the interactive-desktop default; an explicit budget still wins.
 export function gateTestBudget(env = process.env, parallelism = availableParallelism()) {
-  const argument = testConcurrencyArg([], env, parallelism);
+  const argument = testConcurrencyArg([], env);
   return argument ? Number(argument.split('=')[1]) : Math.min(6, parallelism);
 }
 

package/scripts/lib/isolated-test-env.mjs

@@ -0,0 +1,16 @@
+// Side-effect import for tests that touch Mixdog user data. Import it FIRST (ESM
+// evaluates imports in order) so the data/home dirs resolve to a scratch dir
+// before any module under test reads them, even under plain `node --test` from a
+// shell that exports the signed-in profile's MIXDOG_DATA_DIR.
+import { mkdtempSync, rmSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+
+const root = mkdtempSync(join(tmpdir(), 'mixdog-test-profile-'));
+process.env.MIXDOG_DATA_DIR = join(root, 'data');
+process.env.MIXDOG_HOME = join(root, 'home');
+process.on('exit', () => {
+  try {
+    rmSync(root, { recursive: true, force: true });
+  } catch {}
+});

package/scripts/lib/run-node-tests.mjs

@@ -67,22 +67,13 @@ const positiveInt = (value) => {
   return Number.isInteger(n) && n > 0 ? n : null;
 };
 
-// `node --test` defaults to availableParallelism()-1 file processes. When the
-// run is one of several concurrent shell commands (the Mixdog shell tool
-// exports the admission cap as MIXDOG_SHELL_CONCURRENCY_CAP), that multiplies
-// across peers, so a capped run leaves `cap` cores to them: cores - cap, never
-// below 4. Dividing the cores by the cap left a 20-core machine with 2 file
-// processes and tripled the wall time (desktop 289 s vs 63.5 s). Precedence: an
-// explicit --test-concurrency flag, then MIXDOG_TEST_CONCURRENCY, then the
-// capped share; with none of them Node's default (cores-1) stands.
-// Returns the flag to add, or null.
-export function testConcurrencyArg(nodeArgs, env = process.env, parallelism = availableParallelism()) {
+// `node --test` defaults to availableParallelism()-1 file processes. Precedence:
+// an explicit --test-concurrency flag, then MIXDOG_TEST_CONCURRENCY; with
+// neither, Node's default (cores-1) stands. Returns the flag to add, or null.
+export function testConcurrencyArg(nodeArgs, env = process.env) {
   if (nodeArgs.some(concurrencyFlag)) return null;
   const explicit = positiveInt(env.MIXDOG_TEST_CONCURRENCY);
-  if (explicit) return `--test-concurrency=${explicit}`;
-  const cap = positiveInt(env.MIXDOG_SHELL_CONCURRENCY_CAP);
-  if (!cap) return null;
-  return `--test-concurrency=${Math.max(4, parallelism - cap)}`;
+  return explicit ? `--test-concurrency=${explicit}` : null;
 }
 
 // Every test file process is bounded: node:test fails a file (and records it

package/scripts/provider-pingpong-live.mjs

@@ -289,15 +289,15 @@ const routes = [
   ['openrouter-deepseek', 'openrouter', 'deepseek/deepseek-v4.1-flash', ['low', 'max']],
   ['deepseek', 'deepseek', 'deepseek-flash', ['low', 'max']],
   ['deepseek-pro', 'deepseek', 'deepseek-v4-pro', ['high']],
-  ['opencode-go-gemini', 'opencode-go', 'gemini-4-argon-contributor', ['low', 'high']],
-  ['opencode-go-deepseek', 'opencode-go', 'deepseek-v4.1-flash', ['low', 'max']],
-  ['opencode-go-claude', 'opencode-go', 'claude-haiku-5-5', ['low', 'max']],
-  ['opencode-go-gpt', 'opencode-go', 'gpt-6-luna', ['none', 'xhigh']],
-  ['opencode-go-glm', 'opencode-go', 'glm-5.3-flash', ['low', 'max']],
-  ['opencode-go-qwen', 'opencode-go', 'qwen3.8-flash', ['low', 'xhigh']],
-  ['opencode-go-kimi', 'opencode-go', 'kimi-k3', ['max']],
-  ['opencode-go-minimax', 'opencode-go', 'minimax-m3', [null]],
-  ['opencode-go-grok', 'opencode-go', 'grok-4.7', ['low']],
+  ['opencode-go-gemini', 'opencode-go-oauth', 'gemini-4-argon-contributor', ['low', 'high']],
+  ['opencode-go-deepseek', 'opencode-go-oauth', 'deepseek-v4.1-flash', ['low', 'max']],
+  ['opencode-go-claude', 'opencode-go-oauth', 'claude-haiku-5-5', ['low', 'max']],
+  ['opencode-go-gpt', 'opencode-go-oauth', 'gpt-6-luna', ['none', 'xhigh']],
+  ['opencode-go-glm', 'opencode-go-oauth', 'glm-5.3-flash', ['low', 'max']],
+  ['opencode-go-qwen', 'opencode-go-oauth', 'qwen3.8-flash', ['low', 'xhigh']],
+  ['opencode-go-kimi', 'opencode-go-oauth', 'kimi-k3', ['max']],
+  ['opencode-go-minimax', 'opencode-go-oauth', 'minimax-m3', [null]],
+  ['opencode-go-grok', 'opencode-go-oauth', 'grok-4.7', ['low']],
   ['anthropic-api', 'anthropic', 'claude-haiku-5-5', ['low', 'max']],
   ['gemini-api', 'gemini', 'gemini-3.5-flash-lite', ['minimal', 'high']],
   ['grok-oauth', 'grok-oauth', 'grok-4.7', ['low', 'xhigh']],

package/src/agents/advisor/AGENT.md

@@ -1,12 +1,12 @@
 ---
 name: Advisor
-description: "Use by difficulty: on any work beyond a simple one- or two-step change, after orientation and before committing to an approach, when errors recur or results stop converging, before changing approach, and for requested second opinions."
+description: "Use when the approach is genuinely unclear, when errors recur or results stop converging, before changing approach, or when the user asks for a second opinion. Never for final verification."
 ---
 
 Independent technical advisor.
 
-You are consulted at decision points: once orientation is done and before an
-approach is committed, when errors recur or results stop converging, before a
+You are consulted at decision points: when the approach is genuinely
+unclear, when errors recur or results stop converging, before a
 change of approach, and when the user asks for a second opinion or
 cross-validation. You do not see the Lead's conversation; work from the brief
 and verify its evidence against the source yourself.
@@ -31,7 +31,7 @@ blockers rather than inventing certainty.
 
 Do not implement fixes, modify project files or settings, stage or commit
 changes, deploy, or delegate work. Keep checks non-destructive and isolate any
-test fixtures from existing user data. The final check belongs to Reviewer.
+test fixtures from existing user data. Final verification is not yours; never take it over.
 
 Lead with the recommendation, then actionable findings ordered by severity, with
 evidence located by project-relative path and function or symbol. If no issue

package/src/agents/advisor/agent.json

@@ -1,6 +1,6 @@
 {
   "id": "advisor",
   "name": "Advisor",
-  "description": "Use by difficulty: on any work beyond a simple one- or two-step change, after orientation and before committing to an approach, when errors recur or results stop converging, before changing approach, and for requested second opinions.",
+  "description": "Use when the approach is genuinely unclear, when errors recur or results stop converging, before changing approach, or when the user asks for a second opinion. Never for final verification.",
   "entry": "AGENT.md"
 }

package/src/agents/reviewer/AGENT.md

@@ -1,16 +1,17 @@
 ---
 name: Reviewer
-description: Use only at the end, as the final check of non-trivial work: after the implementation is written and verified, before reporting completion, to independently verify correctness, regressions, risks, and acceptance criteria. Skip for low-difficulty work.
+description: Use once at the end, as the single final independent check of non-trivial work, never a second full pass over work already reviewed; otherwise Lead's own review suffices.
 ---
 
 Independent final-check review agent.
 
 You are called only at the end, after the deliverable is written and the
-Lead's own verification has run, before completion is reported.
+Lead's own verification has run, before completion is reported. You run once.
+When the work was already reviewed scope by scope, check the integrated
+result and its highest-risk changes instead of repeating those reviews.
 
 Inspect the diff, affected boundaries, existing tests, and stated acceptance
-criteria with independent judgment. Run the necessary builds, tests, lint, or
-runtime checks and actively seek regressions, unsupported assumptions, security
+criteria with independent judgment. Reuse still-valid passing results; rerun failed or invalidated checks. Actively seek regressions, unsupported assumptions, security
 risks, and counterexamples.
 
 Do not modify files or reimplement the change. Result lists actionable

package/src/agents/reviewer/agent.json

@@ -1,6 +1,6 @@
 {
   "id": "reviewer",
   "name": "Reviewer",
-  "description": "Use only at the end, as the final check of non-trivial work: after the implementation is written and verified, before reporting completion, to independently verify correctness, regressions, risks, and acceptance criteria. Skip for low-difficulty work.",
+  "description": "Use once at the end, as the single final independent check of non-trivial work, never a second full pass over work already reviewed; otherwise Lead's own review suffices.",
   "entry": "AGENT.md"
 }

package/src/defaults/shipped-history.json

@@ -2,6 +2,7 @@
   "agents": {
     "advisor": [
       "6bd0318995f70547c162efda92795e79",
+      "895c5f4311dcbebc0c8756c9ec61a02a",
       "d3b4a7926c9484833fe8ddba70260f9d"
     ],
     "debugger": [
@@ -28,6 +29,8 @@
     "reviewer": [
       "07643b62440d3eba29b7360b8a33f09f",
       "0d45f8d9a2a67373462840e8bf930694",
+      "1593af04edd24cdd5f05fe89a7386407",
+      "1a8115cec6ae4414f8637b1765948cdd",
       "25b44b46269490e26ca31c1852925171",
       "a60ea68f9287d55489e92e5450432f62",
       "a61cb4557def4e7ed647d4bdacbb72e4",
@@ -62,6 +65,7 @@
       "08d03484742e51d90961bcc3efe0acfa",
       "0afe17998c52bf57dcb8f3e8ebcec26f",
       "33205f4956124396b7e80882fbbedd18",
+      "37872608fe389a263c384298271aecfc",
       "4aaa7fa1f071c092733fda61380822c9",
       "4e133eaf5f209ea9c5eda74fe8d810e9",
       "56355187d05762ef50579d6285636c71",
@@ -105,6 +109,7 @@
   "outputStyles": {
     "common.md": [
       "2abd510eaeb6c83702b97a0ce215d348",
+      "3f5915d27c7659ad82cdbda064acfbfa",
       "4e6134d60ee5c54c2888e874653bcdad",
       "4ecd89b0c07ad8a81aa1f84882cf1b00",
       "899529696b7d6d3373ae83a76976ab48",
@@ -123,6 +128,7 @@
       "822498e7a6f11fa724fbf56a3498b21d",
       "9b6b57fa5fc86b445b47b743d5249335",
       "cf4dc49981a68a7b34990e6ba740e35b",
+      "d95e65d47329a3408fc009104c286036",
       "f768eba35712c51ed741782cc91f23f3",
       "f7ec059f73568252528a6a343f4e14d9"
     ],
@@ -142,6 +148,7 @@
       "05778bbf2481be70d4501543af6a7f44",
       "0beee3927bc1b4c7ccf3f2cbea50d1c4",
       "0c11f14731376cc80b0fd63a9dc4d4bf",
+      "101171a29ab8f16c465f6a3421ddc6ab",
       "10827dae8146a8e924e85f88a57d1e22",
       "68ab17dda19d69ddba3cb3d4f2c319fa",
       "6b102ba38f0fc9907a8e6a85b7bdc817",
@@ -151,6 +158,7 @@
       "eccd0524091bed441229a75c5eb803ff"
     ],
     "simple.md": [
+      "07c197ff8f20e24c65d844cd91711216",
       "16d8b5e7757001c614dae62f18f63aa1",
       "56b61d99f3179018f65b530d9b1491d7",
       "6e1749aa66d4416cadad4bcd26eb807a",
@@ -168,6 +176,8 @@
     "browser-use": [
       "00085086a7649ec6631f5cf0a3bbbf60",
       "08eee52328524eb032fd14f342742c41",
+      "25a6744e7591ea5597abbda008d123fe",
+      "43eeb0b9c5792f08f2223c76846926cb",
       "4ab5316454013712cedb25d9b75f4e43",
       "646365a3f7041a3da3d7d7d896a0c3b6",
       "8766650e61891e910b44bb2591c88f48",
@@ -204,6 +214,7 @@
       "398b50b687206544149feeb0a5b02c09",
       "3f8b7b4cd798dba866eccd7d09c76248",
       "733d30c3ca6745c96a69f7e237f3d8c0",
+      "75bdf20949f1e125f82b51ebca6a2ab4",
       "7b9ce58540ed4609f290dc981a7e1719",
       "8236330f56f27dd283bda6da1239285d",
       "8bc93c9320b83de81baa8cf242af5c0b",
@@ -271,6 +282,7 @@
       "bdf26b0f2ac9f3126bfa74ced15a7d73"
     ],
     "memory-management": [
+      "1533630b81ebace2bc9ece6fda02bb11",
       "261a34fce0fb0f73abfd1b1e2add3602",
       "356bf57f7087fe2c40c5dcd99622c3e9",
       "a8ffffd02f438cdd6005e09cfe6cf42f",
@@ -356,10 +368,14 @@
       "e04e6abe9a54e7d07b37f8fc32b5ad30",
       "e38d606df69865a9cf1cc48386535e8b",
       "e5ac8ea16905815e36e88d883195a617",
+      "e848b92962dee0d4c3d7e3721d2e3294",
       "e9b89f9193bd9d9c80ba6cf4419e58ff",
       "feabe973080344c4d52787a96043ab68",
       "ff18ac1a9f5961925aec27ffb870bae0"
     ],
+    "setup-guide": [
+      "633e15b84dbe22f2b578b67cc35853d4"
+    ],
     "skill-creator": [
       "020817866da73a69544ba35086bdcd5f",
       "2f3f44805618783fbcca9a56652a5e91",
@@ -379,6 +395,7 @@
       "fe0512acbb2fc8f80c5961b9f44aa5e2"
     ],
     "visualize": [
+      "8320fedd9dd745a332621c325a8bf355",
       "aa3531bfc4fd6ec3820493d0c190cc75",
       "f65924f0691284ad31000469a9855b62"
     ],

package/src/defaults/skills/browser-use/SKILL.md

@@ -192,7 +192,8 @@ not as two blocks joined.
 - **Screen is the deliverable / user continues** — leave the relevant foreground
   page visible using `open` with its `tab`; clean up only disposable support
   pages. A CAPTCHA, 2FA, or identity check is a handoff, not completion: retain
-  that exact page with `open` and wait.
+  that exact page with `open`. The Lead may wait; an agent preserves the
+  state, reports the required user action, and stops.
 - Preserve pre-existing user tabs, unfinished forms, and pages needed for
   recovery. If ownership or disposability is unclear, preserve the page;
   never clear cookies/storage as cleanup. Do not hide a screen the user asked
@@ -315,9 +316,14 @@ in the page instead of retrying the same `navigate`.
 - A refused or restricted action stays refused; do not reach the same effect
   through another page, tool, or `evaluate`.
 - Tool-side confirmation does not replace the user's approved scope.
+  Submitting a form (`submit`, Enter) or clicking a send/post control asks the
+  user once in the desktop app; a denial dispatches nothing.
   `MIXDOG_BROWSER_CONFIRM_ACTIONS` and
   `MIXDOG_BROWSER_DENY_ACTIONS` optionally name comma-separated public actions
   (or `*`) the desktop app confirms once or refuses; denial takes precedence.
+- For a password or token, focus the field and call `ask_user` with
+  `handoff: { kind: 'secret', surface: 'browser' }`; for sign-in, CAPTCHA or
+  2FA use `kind: 'takeover'` with instructions. Never ask for secrets in chat.
 - Cookie listings never expose values. Registered secret values remain
   redacted across redirects. A blocked result is not success; an inconclusive
   postcondition is not proof.

package/src/defaults/skills/computer-use/SKILL.md

@@ -125,7 +125,9 @@ GNOME with Mixdog's own shell extension, which the app sets up); prefer accessib
   the user. If target-local release remains unconfirmed, the user must
   inspect/recover that window; restarting the host alone does not prove
   release. Obtain a new observation after an interruption.
-  Use `wait_for_user` to keep the task waiting without sending input. Never
+  The Lead may use `wait_for_user` to keep the task waiting without sending
+  input; an agent preserves the state, reports the required user action, and
+  stops. Never
   operate Resume, Stop or the recovery controls, or change the idle policy, on
   the user's behalf.
   While paused, only `list`, `diagnose` and `wait_for_user` are available.

package/src/defaults/skills/memory-management/SKILL.md

@@ -32,7 +32,10 @@ as preferences; automatic history already preserves them.
 
 Omit `project_id` for the current Project, use `common` for shared memory,
 or an explicit Project slug for another Project. The `*` scope is read-only.
-Confirm the target before destructive changes.
+`agent_id: "self"` selects your own agent memory instead: only you read it,
+and it is the only pool an unattended run (schedule, webhook, group room,
+delegated agent) may write; common and Project memory change only while the
+user is chatting. Confirm the target before destructive changes.
 
 Memory indices start at 1 independently in common memory and each Project.
 Deletion and movement compact the affected scope's indices; new memories

package/src/defaults/skills/setup/references/actions.md

@@ -52,6 +52,7 @@ Read this when choosing a `setup` mutation.
 | Remove stored provider authentication (one OAuth account at a time) | `forget_provider_auth` |
 | Select, rename, or reorder OAuth accounts, set the switching policy, or allow paid credits | `set_provider_account` |
 | Developer options such as risk-gated OAuth providers | `set_developer_option` |
+| Connect a catalog service (Slack, Notion, GitHub, …) for the user: shows a one-click connect card | `connect_connector` |
 | Add an MCP server | `add_mcp_server` |
 | Edit or rename an MCP server | `save_mcp_server` |
 | Remove an MCP server | `remove_mcp_server` |
@@ -71,9 +72,10 @@ Read this when choosing a `setup` mutation.
 | Create a workflow, agent, or machine-global user skill | `create_definition` |
 | Partially edit a workflow, agent, or machine-global user skill | `save_definition` |
 | Delete a user workflow/agent definition or override | `delete_definition` |
-| Save a schedule/webhook; explicitly overwrite to edit | `save_automation` |
+| Save a schedule/webhook; explicitly overwrite to edit. A new one belongs to the calling thread's agent (Mixy = `lead`); `entry.owner` moves it to another agent | `save_automation` |
 | Delete an existing schedule/webhook | `delete_automation` |
-| Enable/disable a schedule/webhook | `set_automation_enabled` |
+| Enable/disable (pause/resume) a schedule/webhook | `set_automation_enabled` |
+| Run a schedule once now, or re-run a webhook on its latest received payload; the result posts into the owning agent's thread | `run_automation` |
 | Webhook listener enabled state, port, or domain | `set_webhook_config` |
 | Desktop keep-awake, run in background after window close, turn-completion notifications, notification volume (Windows), usage pin, usage rail short + long bars, or Computer observe-only state | `set_desktop_settings` |
 | Desktop theme, display language, side panels, markdown default view, link previews, or tool activity expansion | `set_appearance` |
@@ -235,6 +237,12 @@ markers are read with `status desktop`.
   `add_mcp_server`, `save_mcp_server`, and `remove_mcp_server` refuse plugin
   servers. Declaration problems and naming conflicts are reported as
   `declarationErrors` and `warnings`.
+- `connect_connector` is how to connect a catalog service the user asks for
+  ("Slack 연결해 줘"): it leaves a connect card in the conversation whose
+  press runs the browser sign-in (or the key sheet) in Desktop; nothing
+  connects until the user presses it, so tell them to press the card and read
+  `status mcp` afterwards. `add_mcp_server` with the service URL is not the
+  sign-in flow; never use it for a catalog service.
 - `enable_plugin_mcp` turns every server the plugin declares back on and
   reconnects them; a disabled plugin stays disabled, and it fails for a plugin
   that declares no MCP servers.
@@ -248,8 +256,7 @@ markers are read with `status desktop`.
 - A Project removal unregisters it only.
 - Inspect schedules/webhooks before editing. `overwrite:true` updates an
   existing named entry and preserves omitted fields; a new schedule needs
-  instructions, a `model` (no default-model fallback), and exactly one of cron
-  `time` or one-shot `at`.
+  instructions and exactly one of cron `time` or one-shot `at`.
 - Attachment contents and webhook signing secrets are not returned by setup.
   Omitted attachments and existing webhook secrets are preserved. A saved
   secret is never shown again: tell the user to open the Webhooks panel, edit