mixdog 1.3.0 → 1.3.2

package/NOTICE.md

@@ -125,15 +125,58 @@ downloads it from this repository's `effort-judge-v*` GitHub releases, as
 listed in `src/runtime/effort-judge/model-manifest.json`.
 
 Statement of changes (Apache-2.0 section 4(b)): only the text encoder is kept,
-reduced to 12 of its layers; a four-level classification head is added and the
-model is fine-tuned to rate the reasoning effort a request needs; the weights
-are exported to ONNX and quantized to 4 bits. Full license text:
-`LICENSES/Apache-2.0.txt`.
-
-Its training data includes requests from SWE-chat
-(<https://huggingface.co/datasets/cfahlgren1/SWE-chat>), made available under
-the Open Data Commons Attribution License 1.0, and from DataClaw exports that
-their authors published on the Hugging Face Hub under the MIT License.
+reduced to 18 of its layers; a four-level classification head is added and the
+model is fine-tuned to rate the reasoning effort a request or an agent step
+needs; the weights are exported to ONNX and quantized to 4 bits. Full license
+text: `LICENSES/Apache-2.0.txt`.
+
+Its training data includes requests and agent steps from SWE-chat
+(<https://huggingface.co/datasets/SALT-NLP/SWE-chat>, Open Data Commons
+Attribution License 1.0); OpenAssistant oasst2
+(<https://huggingface.co/datasets/OpenAssistant/oasst2>, Apache License 2.0);
+DataClaw exports that their authors published on the Hugging Face Hub under the
+MIT License (<https://huggingface.co/datasets/di-zhang-fdu/ShareDataClaw>);
+DevGPT by Tao Xiao, Christoph Treude, Hideaki Hata and Kenichi Matsumoto
+(<https://doi.org/10.5281/zenodo.16392320>, CC BY 4.0); issue texts from the
+SWE-bench training split (<https://github.com/SWE-bench/SWE-bench>, MIT
+License); and agent steps from NVIDIA's SWE-Hero OpenHands trajectories
+(<https://huggingface.co/datasets/nvidia/SWE-Hero-openhands-trajectories>,
+CC BY 4.0).
+
+Contains information from WildChat-4.8M
+(<https://huggingface.co/datasets/allenai/WildChat-4.8M>) which is made
+available under the ODC Attribution License
+(<https://opendatacommons.org/licenses/by/1-0/>).
+
+Since `effort-judge-v7` it also includes questions from Stack Exchange sites
+(via <https://huggingface.co/datasets/HuggingFaceTB/stackexchange_2025_md>;
+each post is licensed CC BY-SA 2.5, 3.0 or 4.0 by its author, and its URL and
+author are kept with the training item); GitHub issues and pull requests of
+permissively licensed repositories (via
+<https://huggingface.co/datasets/common-pile/github_archive>, with each item's
+repository, URL, license and authors kept); issues and pull requests from
+Nebius SWE-rebench-V2 (<https://huggingface.co/datasets/nebius/SWE-rebench-V2>,
+<https://huggingface.co/datasets/nebius/SWE-rebench-V2-PRs>, CC BY 4.0,
+permissively licensed repositories only); and agent steps from Nebius
+SWE-agent trajectories
+(<https://huggingface.co/datasets/nebius/SWE-agent-trajectories>, CC BY 4.0),
+Nebius SWE-rebench OpenHands trajectories
+(<https://huggingface.co/datasets/nebius/SWE-rebench-openhands-trajectories>,
+CC BY 4.0), Kwai-Klear SWE-smith mini-swe-agent-plus trajectories
+(<https://huggingface.co/datasets/Kwai-Klear/SWE-smith-mini_swe_agent_plus-trajectories-66k>,
+MIT License), SWE-Factory DeepSWE-Agent Kimi-K2 trajectories
+(<https://huggingface.co/datasets/SWE-Factory/DeepSWE-Agent-Kimi-K2-Trajectories-2.8K>,
+MIT License), SWE-Gym OpenHands SFT trajectories
+(<https://huggingface.co/datasets/SWE-Gym/OpenHands-SFT-Trajectories>, MIT
+License), SWE-ZERO-12M trajectories
+(<https://huggingface.co/datasets/AlienKevin/SWE-ZERO-12M-trajectories>, Apache
+License 2.0), SWE-Lego real and synthetic data
+(<https://huggingface.co/datasets/Lego-X/SWE-Lego-Real-Data>,
+<https://huggingface.co/datasets/Lego-X/SWE-Lego-Synthetic-Data>, Apache
+License 2.0) and TIGER-Lab SWE-Next SFT trajectories
+(<https://huggingface.co/datasets/TIGER-Lab/SWE-Next-SFT-Trajectories>, MIT
+License). Each `effort-judge-v*` release lists its files, hashes and
+attributions.
 
 ## CC0-1.0
 

package/README.md

@@ -44,9 +44,13 @@ https://github.com/user-attachments/assets/af515dc9-b0fb-4b6a-aaa1-1d82db792ed0
 - Use the **Claude, ChatGPT, Grok, or Muse Code** subscription you already have, API
   keys, or local models on your own GPU.
 - Mix models by role and scale from **Solo to Swarm** — a strong model leads
-  while cheaper ones search, edit, and review in parallel.
+  while cheaper ones search, edit, and review in parallel. Switch the workflow
+  or mode mid-conversation, and set fallback models for usage limits.
+- **Bots and rooms** — your own bots with their own models, tools, and
+  permissions, group rooms where they talk together, and a representative bot
+  that sits above the composer on your desktop.
 - A full workspace: editor, terminals, Git and GitHub, code graph, and
-  language servers.
+  language servers, with themes and photo skins.
 - Keeps working on its own with **Goals, schedules, and webhooks** — and
   continues from your phone, end-to-end encrypted.
 - Goes beyond code with **browser and desktop control**, Office and PDF
@@ -71,8 +75,8 @@ Then sign in with a ChatGPT, Claude, Grok, or Muse Code account, or paste an API
 five-step tutorial walks you through the rest.
 
 > [!NOTE]
-> The Windows installer is not code-signed yet. If SmartScreen appears,
-> choose **More info → Run anyway**. The Mac app is signed and notarized.
+> The Windows installer and app are code-signed, and the Mac app is signed and
+> notarized. If SmartScreen still appears, choose **More info → Run anyway**.
 
 Or run it in the terminal (Node.js 22.19+ or 24+):
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mixdog",
-  "version": "1.3.0",
+  "version": "1.3.2",
   "private": false,
   "type": "module",
   "description": "Open-source coding agent that matches Codex on Terminal-Bench 2.1 with 63% fewer tokens.",
@@ -98,7 +98,7 @@
     "test:office:live:all": "node scripts/run-office-live-tests.mjs all",
     "test:office:render": "node scripts/test-direct.mjs src/runtime/office/pptx-skill-kit.slow.test.mjs",
     "office:icons": "node scripts/office/build-pptx-icons.mjs",
-    "test:media": "node scripts/test-direct.mjs src/runtime/media/catalog.test.mjs src/runtime/media/lanes.test.mjs src/runtime/media/tool.test.mjs src/runtime/media/defaults.test.mjs src/runtime/media/store.test.mjs src/runtime/media/renditions.test.mjs src/runtime/media/adapters/codex-image.test.mjs src/runtime/media/adapters/gemini-image.test.mjs",
+    "test:media": "node scripts/test-direct.mjs src/runtime/media/catalog.test.mjs src/runtime/media/lanes.test.mjs src/runtime/media/tool.test.mjs src/runtime/media/defaults.test.mjs src/runtime/media/store.test.mjs src/runtime/media/renditions.test.mjs src/runtime/media/adapters/codex-image.test.mjs src/runtime/media/adapters/gemini-image.test.mjs src/runtime/media/adapters/image-api.test.mjs src/tui/session/session-api/media-lanes.test.mjs",
     "failures": "node scripts/tool-failures.mjs",
     "trace:llm": "node scripts/llm-trace-summary.mjs",
     "bench:office": "node src/runtime/office/bench/benchmark.mjs",

package/scripts/native-release-status.mjs

@@ -0,0 +1,238 @@
+#!/usr/bin/env node
+// Native tools (patch, graph, spawn) ship as their own immutable GitHub
+// releases (`<kind>-v<version>`); the app pins one through
+// src/runtime/agent/orchestrator/tools/<kind>-manifest.json and downloads that
+// release's assets. A fix committed under native/<tool>/ therefore reaches
+// users only when a new `<kind>-v*` release is published AND the manifest pin
+// moves. This script answers, for every tool, "does the source differ from the
+// release the app pins?" and is the single definition used by:
+//   - deploy.yml plan  (refuses native=skip while a tool is unreleased)
+//   - release.yml validate (fails a release that would ship an unreleased tool)
+//   - the dev scripts  (warn / rebuild a stale local target/release binary)
+//
+//   node scripts/native-release-status.mjs            table
+//   node scripts/native-release-status.mjs --json
+//   node scripts/native-release-status.mjs --check    exit 1 when a tool is unreleased
+//   node scripts/native-release-status.mjs --warn-dev warnings for a dev build, exit 0
+//
+// native/mixdog-computer, native/mixdog-browser-import and native/gnome-extension
+// have no release/manifest: the desktop package builds them from source, keyed
+// on a hash of that source (desktop-package.yml), so they cannot go stale.
+import { spawn, spawnSync } from 'node:child_process';
+import { existsSync, readdirSync, readFileSync, statSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { fileURLToPath, pathToFileURL } from 'node:url';
+
+const TOOLS_DIR = 'src/runtime/agent/orchestrator/tools';
+
+export const NATIVE_RELEASE_TOOLS = Object.freeze(
+  ['patch', 'graph', 'spawn'].map((kind) =>
+    Object.freeze({
+      kind,
+      dir: `native/mixdog-${kind}`,
+      manifestPath: `${TOOLS_DIR}/${kind}-manifest.json`,
+      tagPrefix: `${kind}-v`,
+      binaryName: `mixdog-${kind}${process.platform === 'win32' ? '.exe' : ''}`,
+    })
+  )
+);
+
+const DEFAULT_ROOT = join(dirname(fileURLToPath(import.meta.url)), '..');
+
+function git(root, args) {
+  const result = spawnSync('git', args, { cwd: root, encoding: 'utf8', maxBuffer: 64 * 1024 * 1024 });
+  if (result.error) throw result.error;
+  return result;
+}
+
+/** Newest mtime (ms) of the files that decide a cargo build of `toolDir`. */
+export function newestSourceMtime(toolDir) {
+  let newest = 0;
+  const consider = (path) => {
+    try {
+      const stat = statSync(path);
+      if (stat.isFile() && stat.mtimeMs > newest) newest = stat.mtimeMs;
+    } catch {
+      /* absent */
+    }
+  };
+  for (const file of ['Cargo.toml', 'Cargo.lock', 'build.rs']) consider(join(toolDir, file));
+  const src = join(toolDir, 'src');
+  if (existsSync(src)) for (const entry of readdirSync(src, { recursive: true })) consider(join(src, entry));
+  return newest;
+}
+
+/** The local `cargo build --release` binary the dev resolvers prefer over the
+ *  pinned download, and whether the sources are newer than it. */
+export function localBinaryState(tool, root = DEFAULT_ROOT) {
+  const path = join(root, tool.dir, 'target', 'release', tool.binaryName);
+  if (!existsSync(path)) return { path, exists: false, stale: false };
+  const builtMs = statSync(path).mtimeMs;
+  return { path, exists: true, builtMs, stale: newestSourceMtime(join(root, tool.dir)) > builtMs };
+}
+
+/** Release status of one tool at HEAD plus the working tree of `root`. */
+export function nativeToolStatus(tool, root = DEFAULT_ROOT) {
+  const manifest = JSON.parse(readFileSync(join(root, tool.manifestPath), 'utf8'));
+  const version = String(manifest.version);
+  const tag = `${tool.tagPrefix}${version}`;
+  const tagCommit = git(root, ['rev-parse', '--verify', '--quiet', `refs/tags/${tag}^{commit}`]);
+  const tagMissing = tagCommit.status !== 0;
+  let changedFiles = [];
+  let commits = [];
+  let tagDate = '';
+  if (!tagMissing) {
+    const diff = git(root, ['diff', '--name-only', tag, 'HEAD', '--', tool.dir]);
+    if (diff.status !== 0) throw new Error(`git diff failed for ${tag}: ${diff.stderr}`);
+    changedFiles = diff.stdout.split('\n').filter(Boolean);
+    commits = git(root, ['log', '--format=%h %cs %s', `${tag}..HEAD`, '--', tool.dir])
+      .stdout.split('\n')
+      .filter(Boolean);
+    tagDate = git(root, ['log', '-1', '--format=%cs', tag]).stdout.trim();
+  }
+  const dirtyFiles = git(root, ['status', '--porcelain', '--', tool.dir]).stdout.split('\n').filter(Boolean);
+  const unreleased = tagMissing || changedFiles.length > 0 || dirtyFiles.length > 0;
+  return {
+    kind: tool.kind,
+    version,
+    tag,
+    tagMissing,
+    tagCommit: tagMissing ? '' : tagCommit.stdout.trim().slice(0, 9),
+    tagDate,
+    changedFiles,
+    commits,
+    dirtyFiles,
+    unreleased,
+    local: localBinaryState(tool, root),
+  };
+}
+
+export function nativeReleaseStatuses(root = DEFAULT_ROOT, tools = NATIVE_RELEASE_TOOLS) {
+  return tools.map((tool) => nativeToolStatus(tool, root));
+}
+
+/** Operator-facing explanation for every unreleased tool, or []. */
+export function unreleasedProblems(statuses) {
+  return statuses
+    .filter((status) => status.unreleased)
+    .map((status) => {
+      if (status.tagMissing) {
+        return `${status.kind}: the pinned release tag ${status.tag} does not exist, so the source it ships cannot be compared.`;
+      }
+      const what = [
+        status.changedFiles.length &&
+          `${status.changedFiles.length} file(s) changed since ${status.tag} (${status.changedFiles.slice(0, 3).join(', ')}${status.changedFiles.length > 3 ? ', ...' : ''})`,
+        status.dirtyFiles.length && `${status.dirtyFiles.length} uncommitted file(s)`,
+      ]
+        .filter(Boolean)
+        .join(' and ');
+      return (
+        `${status.kind}: ${what}, but users still get ${status.tag}. ` +
+        `Publish a new ${status.kind}-v release and bump ${TOOLS_DIR}/${status.kind}-manifest.json: ` +
+        `run Deploy with native=auto (or force); it bumps native/mixdog-${status.kind}/Cargo.toml, tags and syncs the manifest.`
+      );
+    });
+}
+
+/** Warnings for a local dev build, which ships the pinned download rather than the working tree. */
+export function devWarnings(statuses) {
+  const warnings = [];
+  for (const status of statuses) {
+    if (status.unreleased && !status.tagMissing) {
+      warnings.push(
+        `native ${status.kind}: source differs from the pinned ${status.tag} ` +
+          `(${status.changedFiles.length} committed, ${status.dirtyFiles.length} uncommitted file(s)). ` +
+          `A packaged dev build downloads the released binary, so these changes are NOT in it until a ${status.kind}-v release is published.`
+      );
+    }
+    if (status.local.stale) {
+      warnings.push(
+        `native ${status.kind}: ${status.local.path} is older than its sources and is preferred by source checkouts. ` +
+          `Rebuild: cargo build --release --manifest-path native/mixdog-${status.kind}/Cargo.toml`
+      );
+    }
+  }
+  return warnings;
+}
+
+function cargoBuild(root, tool) {
+  return new Promise((resolve) => {
+    const child = spawn(
+      'cargo',
+      ['build', '--locked', '--release', '--manifest-path', join(root, tool.dir, 'Cargo.toml')],
+      { stdio: 'inherit' }
+    );
+    child.once('error', () => resolve(null));
+    child.once('exit', resolve);
+  });
+}
+
+/** Dev launch hook: rebuild every existing-but-stale local release binary.
+ *  A tool with no local binary resolves to the pinned download instead, so it
+ *  is left alone. Never throws: a failed build only warns. */
+export async function refreshStaleLocalBinaries({
+  root = DEFAULT_ROOT,
+  tools = NATIVE_RELEASE_TOOLS,
+  build = cargoBuild,
+  log = console.log,
+} = {}) {
+  const results = [];
+  for (const tool of tools) {
+    if (!localBinaryState(tool, root).stale) continue;
+    log(`native ${tool.kind}: local target/release binary is older than its sources; rebuilding.`);
+    const code = await build(root, tool);
+    const stale = code !== 0 || localBinaryState(tool, root).stale;
+    if (stale)
+      log(`native ${tool.kind}: rebuild failed (cargo missing or build error); the stale binary stays in use.`);
+    results.push({ kind: tool.kind, rebuilt: !stale });
+  }
+  return results;
+}
+
+function localBinState(local) {
+  if (!local.exists) return 'none';
+  return local.stale ? 'STALE' : 'fresh';
+}
+
+function formatTable(statuses) {
+  const rows = [['tool', 'pinned tag', 'tag commit', 'tag date', 'committed', 'uncommitted', 'local bin', 'state']];
+  for (const status of statuses) {
+    rows.push([
+      status.kind,
+      status.tag,
+      status.tagCommit || '(missing)',
+      status.tagDate || '-',
+      String(status.changedFiles.length),
+      String(status.dirtyFiles.length),
+      localBinState(status.local),
+      status.unreleased ? 'UNRELEASED' : 'released',
+    ]);
+  }
+  const widths = rows[0].map((_, column) => Math.max(...rows.map((row) => row[column].length)));
+  return rows.map((row) => row.map((cell, column) => cell.padEnd(widths[column])).join('  ')).join('\n');
+}
+
+async function main(argv) {
+  const statuses = nativeReleaseStatuses();
+  if (argv.includes('--json')) {
+    console.log(JSON.stringify(statuses, null, 2));
+    return 0;
+  }
+  if (argv.includes('--warn-dev')) {
+    // stdout on purpose: PowerShell callers treat native stderr as an error.
+    for (const warning of devWarnings(statuses)) console.log(`WARNING: ${warning}`);
+    return 0;
+  }
+  console.log(formatTable(statuses));
+  const problems = unreleasedProblems(statuses);
+  for (const problem of problems) console.log(`\n${problem}`);
+  if (argv.includes('--check') && problems.length) {
+    console.error('\nNative release check failed: native sources differ from the releases the app pins.');
+    return 1;
+  }
+  return 0;
+}
+
+if (process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href) {
+  process.exitCode = await main(process.argv.slice(2));
+}

package/src/defaults/shipped-history.json

@@ -116,6 +116,7 @@
       "8d343d0a406fd5817b7fd98a3ac47010",
       "a1b73ce404125d3ce0a5762e4a1e1555",
       "a28fb01bb21ceebbde1bc6c4a02d3db6",
+      "c7fdabb946eed7283db656493d95749b",
       "d40c23517c4803afdac3fc056bb65cda",
       "db1af5417849abc2f6bb1d1d2b63939f"
     ],
@@ -312,6 +313,7 @@
       "48247c1645fd94aad7711082d4512c49",
       "4f94016363acccd788a724a2d414744e",
       "56e474f78faafae39aebe921ccff112d",
+      "60a1e22fd0c32aa283c64a2cc05b7889",
       "6358ad25dd07a2f92ad65c249a4f360b",
       "7fb12aeb07b79ae113c0deb0a90c6da7",
       "804afd71ebc3f68614a4dc419af4b98e",
@@ -344,6 +346,7 @@
       "0d6926aaca2890da9347f15a826546e3",
       "0f14ba0a3d8b3896b717dc144bbe49a4",
       "15d86146cfbd58d85adf0c25cf1d683f",
+      "18dc665b96ee0ba5a1645180e173b1af",
       "1c317db86e1ff80a5c4102e09e36f5fb",
       "242f11864abdef90fa0cc9cb4599a579",
       "29a347c4d3a2f773fa92c627260301ba",
@@ -352,6 +355,7 @@
       "50bdf35d06913236855080fdea6b50dc",
       "5b4586a44104b26ae7dd45da101079bf",
       "6101786127a1e68778eafcd2bf2c9ce0",
+      "64a85678fbe08d4653ab78c55ee22c7c",
       "6711dbc9d84023b8eabfa928b8d33d18",
       "6f9e9338f560fa9acd839a67b5e2d1cc",
       "70c54f802c77b630863b9e17a16d8224",
@@ -374,7 +378,9 @@
       "ff18ac1a9f5961925aec27ffb870bae0"
     ],
     "setup-guide": [
-      "633e15b84dbe22f2b578b67cc35853d4"
+      "633e15b84dbe22f2b578b67cc35853d4",
+      "920d5b29ccfe6c88f623cf0892b29285",
+      "ec88a82ab5e511c0afb1738162150648"
     ],
     "skill-creator": [
       "020817866da73a69544ba35086bdcd5f",
@@ -396,6 +402,7 @@
     ],
     "visualize": [
       "8320fedd9dd745a332621c325a8bf355",
+      "9c9fba19647b67d75a600137e38c02b8",
       "aa3531bfc4fd6ec3820493d0c190cc75",
       "f65924f0691284ad31000469a9855b62"
     ],

package/src/defaults/skills/pptx/scripts/qc-pages.mjs

@@ -28,7 +28,8 @@ const number = (value) => (Number.isFinite(value) ? Number(value.toFixed(2)) : n
 // pointed at a per-page working copy beside the deck.
 export function workingCopyPath(deck, page) {
   const extension = extname(deck);
-  return join(dirname(deck), `.${basename(deck, extension)}.qc-page-${page}${extension}`);
+  // Not dot-prefixed: Windows cloud-sync drives refuse to create such names.
+  return join(dirname(deck), `${basename(deck, extension)}.qc-page-${page}${extension}`);
 }
 
 async function fileExists(path) {
@@ -202,7 +203,7 @@ async function defaultMeasure() {
 // missing renderer leaves the page to the geometry read.
 async function renderPage(office, deck, page) {
   const cwd = dirname(deck);
-  const scratch = join(dirname(deck), `.${basename(deck, extname(deck))}.qc-render${extname(deck)}`);
+  const scratch = join(dirname(deck), `${basename(deck, extname(deck))}.qc-render${extname(deck)}`);
   const opened = await office(
     { action: 'open', path: deck, mode: 'portable', output: scratch, snapshotAfter: false },
     cwd

package/src/defaults/skills/setup/SKILL.md

@@ -74,10 +74,32 @@ that a call returned without transport error.
   Computer Use actions require this conversation open in the local Desktop
   window; voice runs on the runtime and needs no Desktop.
 - Hook rules are before-tool policy, separate from MCP and plugins. Deleting a
-  rule is destructive; disabling preserves it.
+  rule is destructive; disabling preserves it. A rule change reaches open
+  sessions and their sub-agents on the next tool call.
+- Auto-clear is per provider and can be `unlimited` (`never`). Built-in
+  windows: Codex/ChatGPT login unlimited, OpenAI API 30 min, Anthropic 1h.
+  Unlimited stops idle clearing only: compaction still runs at the context
+  limit, and finished sub-agent sessions are still released, never kept
+  forever: after the provider's own window (OpenAI API 30 min, Anthropic 1h,
+  DeepSeek 24h), or 1h for Codex/ChatGPT logins; an unlimited override does
+  not stop that.
 - Desktop appearance changes affect the Desktop host, not a paired phone.
+  Fonts, imported color themes and skin transparency are saved per device.
   Display language is independent of profile response language. A required
   reload is reported, never performed automatically.
+- A routine or webhook run has no user and no approval prompts: it may change
+  only its own bot's automations and route, and payment and permanent-delete
+  connectors are refused (trash moves are allowed). Bot permission "block"
+  still applies. In an attended bot conversation (home or direct chat, group
+  room, or a sub-agent/task session working for one) a payment or permanent
+  delete connector call always asks first: allow once or deny, never "항상
+  허용", whatever was stored before. Coding sessions are not asked.
+- Prompt-affecting changes land without rewriting the cached prompt: a
+  workflow switch arrives as a reminder on the next turn; a bot's
+  instruction, persona or name applies on 적용 (one cache break); connector
+  and built-in feature changes take effect at once (tool availability and
+  call-time refusal), and only the prompt text about them waits for the cache
+  to expire.
 - Read definitions before editing them; use skill-creator when authoring a
   skill. Setup persists the supported definition fields. Workflow and agent
   ids are stable identities, distinct from their display names.

package/src/defaults/skills/setup/references/actions.md

@@ -28,12 +28,13 @@ Read this when choosing a `setup` mutation.
 | Active workflow pack | `set_workflow` |
 | Output style | `set_output_style` |
 | User title, language, or experience level | `set_profile` |
-| Idle session clearing | `set_autoclear` |
+| Idle session clearing, per provider, including `unlimited` | `set_autoclear` |
 | Automatic context compaction | `set_compaction` |
 | Memory capability | `set_memory_enabled` |
 | Background memory cycles | `set_recap_enabled` |
 | Web Search tool exposure | `set_web_search_enabled` |
 | Which user instruction files (AGENTS.md / CLAUDE.md) new sessions load: all, agents, claude, or off | `set_instruction_files` |
+| The reasoning effort Auto works around: low, medium (default), or high | `set_auto_effort_base` |
 | Git, Office, Code Tidy, Local Provider, Auto Effort, Browser, Computer, voice, or Visualize enabled state | `set_builtin_enabled` |
 | Git, Memory, Office, Code Tidy, Local Provider, Auto Effort, Browser, Computer, or voice preparation | `install_builtin` |
 | Managed local model installation | `install_local_model` |
@@ -52,7 +53,7 @@ Read this when choosing a `setup` mutation.
 | Remove stored provider authentication (one OAuth account at a time) | `forget_provider_auth` |
 | Select, rename, or reorder OAuth accounts, set the switching policy, or allow paid credits | `set_provider_account` |
 | Developer options such as risk-gated OAuth providers | `set_developer_option` |
-| Connect a catalog service (Slack, Notion, GitHub, …) for the user: shows a one-click connect card | `connect_connector` |
+| Connect a catalog service (Notion, Linear, Gmail, …; not GitHub, which is the GitHub CLI) for the user: shows a one-click connect card | `connect_connector` |
 | Add an MCP server | `add_mcp_server` |
 | Edit or rename an MCP server | `save_mcp_server` |
 | Remove an MCP server | `remove_mcp_server` |
@@ -78,7 +79,7 @@ Read this when choosing a `setup` mutation.
 | Run a schedule once now, or re-run a webhook on its latest received payload; the result posts into the owning agent's thread | `run_automation` |
 | Webhook listener enabled state, port, or domain | `set_webhook_config` |
 | Desktop keep-awake, run in background after window close, turn-completion notifications, notification volume (Windows), usage pin, usage rail short + long bars, or Computer observe-only state | `set_desktop_settings` |
-| Desktop theme, display language, side panels, markdown default view, link previews, or tool activity expansion | `set_appearance` |
+| Desktop theme, imported color theme, UI/code font, skin transparency (outer or main panels), display language, side panels, markdown default view, link previews, or tool activity expansion | `set_appearance` |
 | Add a before-tool hook rule | `add_hook_rule` |
 | Enable or disable a hook rule by its `status hooks` index | `set_hook_rule_enabled` |
 | Delete a hook rule by its `status hooks` index | `delete_hook_rule` |
@@ -109,10 +110,26 @@ workflow` before changing the corresponding domain.
 - Definition actions use `definitionKind` (workflow, agent, skill).
   Workflow/agent ids cannot be renamed through
   a save; change their display name instead. User skills may be renamed with
-  `originalName` and `name`. Skill deletion is not exposed; disable it instead.
+  `originalName` and `name`. A user skill's trigger line (`when_to_use`) is
+  `definition.whenToUse` on create and save. Skill deletion is not exposed;
+  disable it instead.
   Built-in and plugin skills accept only `toolDependencies` edits (`null`
   restores their declared dependencies).
+- A created agent is a bot (`definition.kind: "bot"`) or a workflow agent
+  (`"agent"`); omitted, the representative bot's chat creates a bot and any other chat a
+  workflow agent. The kind is fixed after creation.
 - Changing orchestration does not rewrite workflow instructions or agents.
+- `set_route` is the Lead default for new sessions. A model chosen in New Task
+  changes that default only when the user actually picks one there.
+  `route.fallbacks` (ordered models on other providers; `[]` clears) works the
+  same on `set_route` (Lead), `set_agent_route` (agents and bots, Mixy included).
+- A workflow switch reaches a running conversation as a reminder on its next
+  turn (the cached prompt is not swapped). A bot definition's instruction,
+  persona or name applies when the user presses 적용, with one cache break.
+  Connector and built-in feature changes reach a bot's open chat at once for
+  availability: opened tools join the deferred catalog, removed ones are
+  refused at call time, and the next turn's notice names both. Only the prompt
+  text describing them waits until the cache next expires.
 
 ## Providers and authentication
 
@@ -123,6 +140,8 @@ key's source.
   authentication in the visible UI.
 - Custom providers are registered, tested, and removed in the Providers UI;
   `status providers` with `detail: true` lists them as API rows with `custom: true`.
+  Their model list (Nano-GPT included) loads there with up to a 60 s wait; the
+  user can skip it and type model ids by hand.
 - Local Provider is installed and enabled as a Built-in. Its endpoint is
   Mixdog-managed and is never configured by the user.
   Use the `local-provider` skill for hardware checks, model selection, downloads,
@@ -152,6 +171,18 @@ key's source.
   duration; `provider: "default"` sets the fallback for providers without a
   built-in window. A reset and a duration are mutually exclusive; provider
   reset requires a provider.
+- `duration: "unlimited"` (or `"never"`) stops idle clearing for a provider;
+  without `provider` it applies to the current route's provider. `status
+  autoclear` reports `unlimited`, `label` and per-provider `providerDefaults`
+  (`builtInUnlimited` marks a built-in unlimited window); a provider reset
+  restores its built-in window. Built-ins follow each provider's cache: Codex/
+  ChatGPT login unlimited, OpenAI API 30 min, Anthropic and Gemini 1h. The
+  OpenAI API caches a Lead-class session's stable prefix for 12h and its
+  moving tail for 30 min (Lead, bot chats, bot task sessions, routine and
+  webhook runs), so the 30 min window clears only a cold tail. Finished
+  sub-agent sessions are always released on a finite timer (the provider's
+  window, e.g. DeepSeek 24h; 1h for Codex/ChatGPT logins); unlimited does not
+  disable it.
 - Compaction supports `enabled` and a `compaction` object with either
   `mainBufferTokens` or `mainBufferPercent`. Changing representation replaces the previous budget.
 - If no supported action exposes a requested Memory interval, report it as
@@ -204,6 +235,8 @@ markers are read with `status desktop`.
 - `add_hook_rule` with modify/rewrite needs exactly one of `patch` or `args`.
 - `delete_hook_rule` is destructive and requires explicit approval for the
   named rule; disabling with `set_hook_rule_enabled` preserves it.
+- Hook rule changes apply to open sessions and their sub-agents on the next
+  tool call; no new session or restart is needed.
 - `status media` shows the remembered lane/model per kind. `set_media_default`
   accepts only a signed-in lane that offers the kind (and the model, when
   given) in the live media catalog; the media tool's `list` reads that catalog.
@@ -253,6 +286,15 @@ markers are read with `status desktop`.
 - Desktop-only operations require the owning conversation visible in the local
   Desktop app. Never claim a persisted change from merely delivering a request.
 - A display-language change returns `requiresReload`.
+- `set_appearance` also takes `uiFont` / `codeFont` (a family name, `""` =
+  built-in; text it lacks falls back to the built-in fonts), skin transparency
+  (0–100, defaults outer 20 / main 40; higher shows more of the skin picture):
+  `skinOuterTransparency` (window frame, titlebar, rail, sidebar, side dock),
+  `skinMainTransparency` (conversation area and its cards), or `skinTransparency`
+  to set both; and `colorTheme`
+  (an imported theme id from `status appearance` `colorThemes`, or `"builtin"`).
+  All are stored on that Desktop device only. Importing a theme file and
+  choosing a skin or custom picture stay in the UI.
 - A Project removal unregisters it only.
 - Inspect schedules/webhooks before editing. `overwrite:true` updates an
   existing named entry and preserves omitted fields; a new schedule needs
@@ -261,6 +303,14 @@ markers are read with `status desktop`.
   Omitted attachments and existing webhook secrets are preserved. A saved
   secret is never shown again: tell the user to open the Webhooks panel, edit
   the webhook, press Regenerate secret, copy the new value, and save.
+- A routine run (schedule or webhook) is a turn in the owning bot's chat with
+  nobody to approve: it never prompts, refuses payment and permanent-delete
+  connectors (trash moves are allowed), and still honors bot permission
+  "block". It can change only its own bot's automations and route. A webhook
+  answers "accepted" at once and a delivery that arrives while its run is
+  active is skipped. In an attended bot conversation (chat, room, or work a
+  bot started) the same payment and permanent-delete connectors ask first,
+  allow once or deny only; a coding session is not asked.
 - Enabling or creating automation may start its background worker. This is a
   persisted automation change, not permission to run an unrelated task now.
 

package/src/defaults/skills/setup/references/surfaces.md

@@ -33,14 +33,26 @@ An attached Desktop or TUI may navigate and return `opened:true`.
 
 ## Desktop map
 
-- Settings → General: profile, Web Search exposure, display language, theme,
+- Settings → General: profile, Web Search exposure, display language,
   side panels, and notifications.
 - Settings → Context: auto-compact and auto-clear.
 - Settings → Output style: output style selection, plus the desktop-only
   "Expand tool activity" choice (collapsed / commands and edits / everything),
   saved per device; Ctrl+O toggles everything open for the current window.
+- Settings → Theme (one page): System / Dark / Light or a skin picture
+  (plate, accent, transparency), imported JSON color themes (about 26 color
+  roles), installed fonts, font sizes and chat text size. Saved on this device
+  only. First-run setup has a Theme step with the same System / Dark /
+  Light / skin choice.
+- Settings → Bots (desktop only): the representative bot overlay, a small
+  window with the representative bot that opens a quick message to it. On
+  by default; options to pin it above the message box (default on), keep it
+  above other windows (default off: it follows the app window's layer),
+  collapse its bubble and reset its position. The overlay's right-click
+  menu has the same options. Saved on this PC.
 - Settings → Providers: API-key, OAuth, custom provider registration, local
-  providers, and usage sign-in.
+  providers, and usage sign-in. A custom provider's model list waits up to
+  60 s, can be skipped, and then takes model ids typed by hand.
 - Extensions → Plugin → Git & GitHub: Git/GitHub CLI installation and connection.
 - Settings → Connection: web-app pairing and linked devices.
 - Settings → System: update, keep-awake, run in background after the window
@@ -78,7 +90,15 @@ The setup tool does not mutate:
   `/mcp login` and `/mcp logout`; remote windows paste the redirect address);
 - notification permission and subscription on the receiving device;
 - web-app pairing credentials and OS permission dialogs;
-- TUI-local theme palettes (use `/theme`; Desktop themes are separate).
+- TUI-local theme palettes (use `/theme`; Desktop themes are separate);
+- importing or exporting a JSON color theme file, choosing a skin or custom
+  skin picture, and the Lead's pixel face (stored on the host as `leadAvatar`,
+  edited from the Desktop or a paired client, and shared by all of them; every
+  Lead-class row and agent wears it, and the agent edit dialog has no avatar);
+- approval grants ("항상 허용" is per feature and per bot, never for payment,
+  permanent delete, Lead, workflow, Mixy link, group rooms or schedules) and
+  browser action confirmations (`MIXDOG_BROWSER_CONFIRM_ACTIONS`,
+  `MIXDOG_BROWSER_CONFIRM_SUBMIT`; see the browser-use skill).
 
 Use `open` where a target exists, then let the user act.