mixdog 1.3.3 → 1.3.5

package/LICENSES/oh-my-pi-MIT.txt

@@ -0,0 +1,23 @@
+MIT License
+
+Copyright (c) 2025 Mario Zechner
+Copyright (c) 2025-2026 Can Bölük
+Copyright (c) 2026 Stencil Labs, Inc.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/NOTICE.md

@@ -284,3 +284,18 @@ Full license text: `LICENSES/mago-MIT.txt`
 <https://github.com/posit-dev/air>
 
 Full license text: `LICENSES/air-MIT.txt`
+
+### oh-my-pi — MIT
+
+<https://github.com/can1357/oh-my-pi>
+
+The Devin provider follows its Devin integration. The model-family table in
+`src/runtime/agent/orchestrator/providers/devin-wire-families.mjs` is data
+taken from its model-collapse rules, and these files contain code derived from
+it: `devin-wire-models.mjs` (catalog discovery and family collapsing),
+`devin-wire-session.mjs` (client identity values), `devin-wire-identity.mjs`
+(model classification and thinking rendering), `devin-wire-schema.mjs` (tool
+schema normalization) and `devin-wire-tool-args.mjs` (tool-argument repair),
+all under `src/runtime/agent/orchestrator/providers/`.
+
+Full license text: `LICENSES/oh-my-pi-MIT.txt`

package/README.md

@@ -26,6 +26,7 @@ https://github.com/user-attachments/assets/af515dc9-b0fb-4b6a-aaa1-1d82db792ed0
   <a href="https://github.com/tribgames/mixdog/releases/latest"><img alt="Release" src="https://img.shields.io/github/v/release/tribgames/mixdog?style=flat-square"></a>
   <a href="https://www.npmjs.com/package/mixdog"><img alt="npm" src="https://img.shields.io/npm/v/mixdog?style=flat-square"></a>
   <a href="LICENSE"><img alt="License" src="https://img.shields.io/badge/license-Apache--2.0-blue?style=flat-square"></a>
+  <a href="https://github.com/sponsors/JYP8877"><img alt="GitHub Sponsors" src="https://img.shields.io/github/sponsors/JYP8877?style=flat-square&logo=githubsponsors&label=Sponsors"></a>
 </p>
 
 <p align="center">
@@ -174,6 +175,16 @@ Found a bug or missing a feature?
 [Open an issue](https://github.com/tribgames/mixdog/issues). If Mixdog saves
 you tokens, a star helps others find it.
 
+## Sponsor
+
+Mixdog is free and developed by one person. Sponsorship pays for development
+time and the model tokens used for testing:
+[github.com/sponsors/JYP8877](https://github.com/sponsors/JYP8877).
+
+### Supporters
+
+Your name here — [become a sponsor](https://github.com/sponsors/JYP8877).
+
 ## License
 
 Mixdog is licensed under [Apache-2.0](LICENSE). Third-party components retain

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mixdog",
-  "version": "1.3.3",
+  "version": "1.3.5",
   "private": false,
   "type": "module",
   "description": "Open-source coding agent that matches Codex on Terminal-Bench 2.1 with 63% fewer tokens.",
@@ -153,7 +153,7 @@
     "arm64"
   ],
   "dependencies": {
-    "@anthropic-ai/sdk": "^0.105.0",
+    "@anthropic-ai/sdk": "^0.135.0",
     "@formulajs/formulajs": "^4.6.1",
     "@google/generative-ai": "^0.24.1",
     "@huggingface/transformers": "^4.3.1",
@@ -181,6 +181,7 @@
     "pptxgenjs": "^4.0.1",
     "puppeteer-core": "^25.2.0",
     "react": "^19.2.7",
+    "saxes": "^6.0.0",
     "sharp": "^0.35.5",
     "string-width": "^8.2.1",
     "strip-ansi": "^7.2.0",

package/scripts/embed-google-oauth-client.mjs

@@ -0,0 +1,49 @@
+#!/usr/bin/env node
+
+// Release packaging step: write Mixdog's Google OAuth "Desktop app" client from
+// MIXDOG_GOOGLE_OAUTH_CLIENT_ID / MIXDOG_GOOGLE_OAUTH_CLIENT_SECRET (repository
+// secrets) into the generated, gitignored file that googleOAuthClient() reads.
+// Run it before `npm pack` and before apps/desktop `prepare:runtime`, so the
+// npm package and every runtime.asar include the file.
+//
+//   --require   fail when either value is missing (release and publish jobs).
+//               Without it a missing value is skipped, so PR, fork and local
+//               builds go on without a built-in Google sign-in.
+//
+// The values are never printed.
+
+import { writeFileSync } from 'node:fs';
+import { pathToFileURL } from 'node:url';
+
+import { GOOGLE_OAUTH_CLIENT_FILE } from '../src/runtime/shared/google-oauth-client.mjs';
+
+const text = (value) => String(value || '').trim();
+
+/** Write the client file; returns false when skipped for missing values. */
+export function embedGoogleOAuthClient({ env = process.env, file = GOOGLE_OAUTH_CLIENT_FILE, required = false } = {}) {
+  const clientId = text(env.MIXDOG_GOOGLE_OAUTH_CLIENT_ID);
+  const clientSecret = text(env.MIXDOG_GOOGLE_OAUTH_CLIENT_SECRET);
+  if (!clientId || !clientSecret) {
+    if (!required) return false;
+    throw new Error(
+      'MIXDOG_GOOGLE_OAUTH_CLIENT_ID and MIXDOG_GOOGLE_OAUTH_CLIENT_SECRET must both be set: ' +
+        'a release without them ships no built-in Google sign-in. Add them as repository secrets.'
+    );
+  }
+  writeFileSync(file, `${JSON.stringify({ clientId, clientSecret }, null, 2)}\n`);
+  return true;
+}
+
+if (process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href) {
+  try {
+    const embedded = embedGoogleOAuthClient({ required: process.argv.includes('--require') });
+    console.log(
+      embedded
+        ? 'Embedded the Google OAuth client for this build.'
+        : 'No Google OAuth client configured; this build has no built-in Google sign-in.'
+    );
+  } catch (error) {
+    console.error(`::error title=Google OAuth client missing::${error.message}`);
+    process.exitCode = 1;
+  }
+}

package/scripts/lib/test-spawn-ledger.mjs

@@ -4,9 +4,54 @@
 // (scripts/lib/run-node-tests.mjs). Without the runner's environment it does
 // nothing.
 import { ChildProcess } from 'node:child_process';
-import { appendFileSync } from 'node:fs';
+import { appendFileSync, readFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { pathToFileURL } from 'node:url';
 import { FAILURE_RECORDS_ENV, spawnLedgerPath } from './test-failure-records.mjs';
 
+// --test-force-exit ends a test file's process once every test registered so
+// far has finished. A test registered after a top-level await that is still
+// pending by then (e.g. `await import()` between tests) is never run, and the
+// file would exit 0 with those tests unreported. The entry module is already
+// being evaluated by the time this runs, so importing it again only observes
+// it: if the process exits before its top-level evaluation completed, fail the
+// file instead. Stricter on purpose: an entry whose top-level evaluation never
+// completes under force-exit (e.g. an intentionally never-resolving await after
+// its last test) cannot be told apart from dropped tests, so it fails too.
+// Only ESM entries are observed: importing a CommonJS entry would run it a
+// second time and change `require.main === module`.
+const isEsmEntry = (file) => {
+  if (/\.(mjs|mts)$/.test(file)) return true;
+  if (/\.(cjs|cts)$/.test(file)) return false;
+  for (let dir = dirname(file); ; dir = dirname(dir)) {
+    try {
+      return JSON.parse(readFileSync(join(dir, 'package.json'), 'utf8')).type === 'module';
+    } catch {
+      // no readable package.json here: keep walking up
+    }
+    if (dirname(dir) === dir) return false;
+  }
+};
+if (
+  process.env.NODE_TEST_CONTEXT === 'child-v8' &&
+  process.execArgv.includes('--test-force-exit') &&
+  isEsmEntry(process.argv[1])
+) {
+  let settled = false;
+  const settle = () => {
+    settled = true;
+  };
+  import(pathToFileURL(process.argv[1]).href).then(settle, settle);
+  process.on('exit', (code) => {
+    if (settled) return;
+    console.error(
+      `${process.argv[1]}: the process was force-exited before the file's top-level evaluation completed (a top-level await was still pending); tests registered after it never ran, and an await that never settles is treated the same way`
+    );
+    // Never replace a failure code the file already set.
+    if (!code) process.exitCode = 1;
+  });
+}
+
 const ledger = spawnLedgerPath(process.env[FAILURE_RECORDS_ENV]);
 if (ledger) {
   // spawn, exec, execFile and fork all start their process here.

package/scripts/test.mjs

@@ -56,6 +56,11 @@ export const USAGE = `Usage: node scripts/test.mjs [--lane ${LANES.join('|')}] [
                   Selection, lanes, reporting and exit codes are untouched.
   --list          print the selected files with their lane, run nothing.
 
+Test-file rule: files run with --test-force-exit, so a file's top-level
+evaluation (including any top-level await) must finish before its registered
+tests do. A file that is force-exited first fails — tests registered after the
+await would never run, and an await that never settles cannot be told apart.
+
 Every run ends with a "[failure-summary]" block, printed after all other
 output, naming each failed and flaky test by file and test name; every line of
 it carries that tag, so it survives line filtering.`;

package/src/defaults/shipped-history.json

@@ -190,6 +190,7 @@
       "af1d1b975fc4b6a50f3a1775d890582f",
       "d46676d3d80327445c36e70bb291ae52",
       "dc812114c135d1d2716b219e1009e670",
+      "f70b87761ac6a7c6f0ef39b65b1592b3",
       "ff5607144eaf51be56217319431cb90e"
     ],
     "code-tidy": [
@@ -355,6 +356,7 @@
       "242f11864abdef90fa0cc9cb4599a579",
       "29a347c4d3a2f773fa92c627260301ba",
       "336ced846a9e4f774cbb109417856c3b",
+      "3716b2d2c2d973ae022694ed5cb756ad",
       "3f72247651ad9d777b6754bfd46732aa",
       "50bdf35d06913236855080fdea6b50dc",
       "5b4586a44104b26ae7dd45da101079bf",
@@ -363,13 +365,18 @@
       "6711dbc9d84023b8eabfa928b8d33d18",
       "6f9e9338f560fa9acd839a67b5e2d1cc",
       "70c54f802c77b630863b9e17a16d8224",
+      "7254f153fd7e492e205834bc2f2781ab",
+      "7c55bebd9e28dc2e03794861dde3f775",
       "81e979463e0066e7a45cf511a31c5d68",
       "8476c811b2f02da3a434bcb23a1c3d12",
       "8af2b614e2a07b58dad6c0f1318d22e2",
+      "99d76213e70c6900d6af48ffa4045886",
       "9f90d3872b1ecd312977ce661b770b31",
       "ade615dd0f6ae6ed1601023e5b9cb692",
       "b4f9c79dcb08151e6275b5ee35c2bca4",
+      "bca9732a1cecd2ce3a26e905b57d3b25",
       "c6db973f51166fc42814808ae0001797",
+      "c82197acd9111f4a6dcda24baccffb86",
       "c8826387a65631b63e8023f55ef807a3",
       "cb6f66d14ba75b11e7470eb3fd5ec94c",
       "de9727a48e52673258bf5f9670564d56",
@@ -383,6 +390,7 @@
     ],
     "setup-guide": [
       "633e15b84dbe22f2b578b67cc35853d4",
+      "72e474711ecd18cfcae6c8365e08286e",
       "920d5b29ccfe6c88f623cf0892b29285",
       "ec88a82ab5e511c0afb1738162150648"
     ],

package/src/defaults/skills/browser-use/SKILL.md

@@ -180,6 +180,7 @@ not as two blocks joined.
 - Routing is automatic; never supply a session id.
 - A panel closed by the user stays closed until the user reopens it. Automation
   may continue on its hidden page; do not repeat `open` to override that choice.
+  A later user request to see the page reopens it with `open`.
 
 ## Finish or hand off
 
@@ -212,15 +213,26 @@ not as two blocks joined.
 
 ## Common flows
 
-**Log in** — navigate to the sign-in form (or its password step) → `fill`
-with `savedAccount:"<email or masked label>"` when the user has stored logins
-for that HTTPS site; the host fills user + password itself and the password
-never appears in any reply. Without a stored login, use the returned refs and
-`fill.fields` for user + password. Then `click` submit (or `submit:true`) with
-`expect.url` or `expect.text`. A `savedAccount` miss lists the site's stored
-logins as masked labels; the user chooses which to use. If the page shows a
-CAPTCHA, 2FA prompt, or identity check, stop and hand control to the user;
-never try to solve or bypass it.
+**Log in** — navigate to the sign-in form (or its password step). When the
+user has exactly one stored login for that HTTPS site, the host signs in by
+itself right after the command that shows the form: it waits for the page's
+human check (Turnstile, reCAPTCHA, hCaptcha) to hold its token, fills user +
+password, submits, and replies with one line — `Saved sign-in: signed in to
+<site>` (done: verify with the returned page, do not fill or submit again) or
+`Saved sign-in: the site still needs the user at <site>` (a check that did not
+finish, a code, CAPTCHA, passkey, or an error: hand the sign-in to the user,
+do not retry). It tries once per site per turn, and the password never
+appears in any reply. When the host did not sign in by itself (several
+stored logins, or automatic sign-in did not run), call `fill` with
+`savedAccount:"<email or masked label>"` (and `submit:true` to sign in). Do
+not press Enter or click submit yourself after a `savedAccount` fill that
+already used `submit:true`. A
+`savedAccount` miss lists the site's stored logins as masked labels; the user
+chooses which to use. Without a stored login, use the returned refs and
+`fill.fields` for user + password, then `click` submit (or `submit:true`) with
+`expect.url` or `expect.text`. If the page shows a CAPTCHA, 2FA prompt, or
+identity check, stop and hand control to the user; never try to solve or
+bypass it.
 
 **Form** — use the latest returned refs → `fill.fields` (text, `values` for selects, `checked`
 for boxes) → submit via `click` or `fill` with `submit:true` → verify with

package/src/defaults/skills/setup/SKILL.md

@@ -20,10 +20,15 @@ supported `setup` action, and read its result as the change receipt.
 
 - Use the `setup` tool for persisted Mixdog configuration. Never edit
   `mixdog-config.json` or internal stores directly; if the tool and UI expose no
-  supported path, report that limitation.
+  supported path, report that limitation. The one exception is the definition
+  file a workflow or agent `read_definition` returns as `path`.
 - API keys, OAuth credentials, tokens, and usage sign-ins stay out of tool
   arguments and the transcript. Open the Providers surface and let the user
   enter them.
+- Developer option "Allow all actions" (`allowAllActions`) can only be turned
+  on by the person in the desktop app; the tool refuses it even with
+  `riskAccepted:true`, and remote enablement is refused too. Open `developer`
+  instead.
 - A mutation follows the active workflow's approval rules. Status, catalog,
   definition and MCP-config reads do not change persisted settings.
 - Most changes affect new sessions. Report `appliedToCurrentSession` and
@@ -70,7 +75,7 @@ that a call returned without transport error.
   background cycles. Core Memory entries
   are read and changed with the `memory` tool, not setup.
 - Built-ins have installation state separate from enabled state; Visualize
-  is toggle-only (on by default, no install step). Browser Use,
+  (on by default) and Media generation are toggle-only (no install step). Browser Use,
   Computer Use actions require this conversation open in the local Desktop
   window; voice runs on the runtime and needs no Desktop.
 - Hook rules are before-tool policy, separate from MCP and plugins. Deleting a

package/src/defaults/skills/setup/references/actions.md

@@ -24,18 +24,21 @@ Read this when choosing a `setup` mutation.
 |---|---|
 | Main model route | `set_route` |
 | Agent-specific route or inheritance | `set_agent_route` |
-| Web Search model route | `set_web_search_route` |
+| Web Search model route (and its `route.fallbacks`) | `set_web_search_route` |
 | Active workflow pack | `set_workflow` |
 | Output style | `set_output_style` |
 | User title, language, or experience level | `set_profile` |
 | Idle session clearing, per provider, including `unlimited` | `set_autoclear` |
-| Automatic context compaction | `set_compaction` |
+| Automatic context compaction, compaction on model change, summary model | `set_compaction` |
+| Context → Let AI rename sessions | `set_ai_session_titles` |
+| Providers → Usage limits → Resume automatically when the limit resets | `set_quota_auto_resume` |
+| Model management: "Show in /model" and favorites, per provider model | `set_model_preferences` |
 | Memory capability | `set_memory_enabled` |
 | Background memory cycles | `set_recap_enabled` |
 | Web Search tool exposure | `set_web_search_enabled` |
 | Which user instruction files (AGENTS.md / CLAUDE.md) new sessions load: all, agents, claude, or off | `set_instruction_files` |
 | The reasoning effort Auto works around: low, medium (default), or high | `set_auto_effort_base` |
-| Git, Office, Code Tidy, Local Provider, Auto Effort, Browser, Computer, voice, or Visualize enabled state | `set_builtin_enabled` |
+| Git, Office, Code Tidy, Local Provider, Auto Effort, Browser, Computer, voice, Visualize, or Media generation enabled state | `set_builtin_enabled` |
 | Git, Memory, Office, Code Tidy, Local Provider, Auto Effort, Browser, Computer, or voice preparation | `install_builtin` |
 | Managed local model installation | `install_local_model` |
 | Start or resume a background runtime/model download | `start_local_installation` |
@@ -49,11 +52,13 @@ Read this when choosing a `setup` mutation.
 | Permanently delete confirmed, unchanged, unused model files | `delete_local_model` |
 | TUI system shell | `set_system_shell` |
 | Automatic updates | `set_auto_update` |
+| Mixy's heartbeat: a check every 30 minutes that wakes her only when something needs attention (on by default; `status features` reports `heartbeat.enabled`) | `set_heartbeat_enabled` |
+| Bots' emoji reactions on the user's messages (on by default; `status features` reports `reactions.enabled`) | `set_reactions_enabled` |
 | Worktree defaults: new tasks on the current branch or a new worktree, branch prefix, large-repository warning size, automatic cleanup | `set_worktree_settings` |
-| Remove stored provider authentication (one OAuth account at a time) | `forget_provider_auth` |
-| Select, rename, or reorder OAuth accounts, set the switching policy, or allow paid credits | `set_provider_account` |
-| Developer options such as risk-gated OAuth providers | `set_developer_option` |
-| Connect a catalog service (Notion, Linear, Gmail, …; not GitHub, which is the GitHub CLI) for the user: shows a one-click connect card | `connect_connector` |
+| Remove stored provider authentication (one OAuth account at a time, or an API-key provider's key) | `forget_provider_auth` |
+| Select, rename, or reorder OAuth accounts, set automatic switching or the switching policy, or allow paid credits | `set_provider_account` |
+| Developer options (approvals, risk-gated providers); `allowAllActions` can only be turned off | `set_developer_option` |
+| Connect a catalog service (Notion, Linear, Gmail, …; not GitHub, which is the GitHub CLI) for the user: shows a connect card (sign-in, key sheet, or app-password dialog) | `connect_connector` |
 | Add an MCP server | `add_mcp_server` |
 | Edit or rename an MCP server | `save_mcp_server` |
 | Remove an MCP server | `remove_mcp_server` |
@@ -78,12 +83,12 @@ Read this when choosing a `setup` mutation.
 | Enable/disable (pause/resume) a schedule/webhook | `set_automation_enabled` |
 | Run a schedule once now, or re-run a webhook on its latest received payload; the result posts into the owning agent's thread | `run_automation` |
 | Webhook listener enabled state, port, or domain | `set_webhook_config` |
-| Desktop keep-awake, run in background after window close, turn-completion notifications, notification volume (Windows), usage pin, usage rail short + long bars, or Computer observe-only state | `set_desktop_settings` |
-| Desktop theme, imported color theme, UI/code font, skin transparency (outer or main panels), display language, side panels, markdown default view, link previews, or tool activity expansion | `set_appearance` |
+| Desktop keep-awake, run in background after window close, turn-completion notifications, notification volume (Windows), usage pin, usage rail short + long bars, expanded usage accounts, usage rail slots (three / all), Computer observe-only, Browser auto sign-in, or the representative bot overlay (`desktop.botOverlay`) | `set_desktop_settings` |
+| Desktop theme, imported color theme, UI/code font, UI scale, code size and ligatures, chat text size, skin transparency (outer or main panels), display language, time format, side panels and their position, markdown default view, link previews, or tool activity expansion | `set_appearance` |
 | Add a before-tool hook rule | `add_hook_rule` |
 | Enable or disable a hook rule by its `status hooks` index | `set_hook_rule_enabled` |
 | Delete a hook rule by its `status hooks` index | `delete_hook_rule` |
-| Remembered image/video lane and model used when a generation omits them | `set_media_default` |
+| Settings "Default generator" pin per kind (image/video): lane, model, account; `lane: ""` clears it (Auto) | `set_media_default` |
 | Which activity rail items are pinned, in order (current list in `status desktop`) | `set_activity_rail_pins` |
 | Register a Project and optionally set its display alias | `save_project` |
 | Unregister a Project without deleting its files | `remove_project` |
@@ -108,6 +113,11 @@ workflow` before changing the corresponding domain.
 - A Web Search route must support native web search; tool exposure is changed
   separately.
 - Definition actions use `definitionKind` (workflow, agent, skill).
+  A workflow or agent `read_definition` returns `path` when a user copy exists:
+  to change part of its body, edit that file with the ordinary file edit tool
+  instead of re-sending the whole body; keep its frontmatter as it is. Without
+  `path` (a shipped-only definition), make the change with `save_definition`:
+  a save equal to the shipped copy keeps no user file.
   Workflow/agent ids cannot be renamed through
   a save; change their display name instead. User skills may be renamed with
   `originalName` and `name`. A user skill's trigger line (`when_to_use`) is
@@ -122,7 +132,9 @@ workflow` before changing the corresponding domain.
 - `set_route` is the Lead default for new sessions. A model chosen in New Task
   changes that default only when the user actually picks one there.
   `route.fallbacks` (ordered models on other providers; `[]` clears) works the
-  same on `set_route` (Lead), `set_agent_route` (agents and bots, Mixy included).
+  same on `set_route` (Lead), `set_agent_route` (agents and bots, Mixy included)
+  and `set_web_search_route`. `status model` returns `route.autoEffort` and
+  `route.fallbacks`.
 - A workflow switch reaches a running conversation as a reminder on its next
   turn (the cached prompt is not swapped). A bot definition's instruction,
   persona or name applies when the user presses 적용, with one cache break.
@@ -138,7 +150,21 @@ key's source.
 
 - API-key and OAuth providers: `open providers`, then the user completes
   authentication in the visible UI.
-- Custom providers are registered, tested, and removed in the Providers UI;
+- An SSH server's models run on this PC's logins by default. A server can use
+  its own instead (Settings → Connection → the server → Model login → Server
+  accounts); its logins are then managed in "Manage server logins" (a
+  subscription login opens in this PC's browser; an API key is stored on the
+  server, in an owner-only private file where it has no keychain, as on
+  Linux). No setup action exists for this. Changing the model login restarts
+  the server's Mixdog and stops its running sessions, so say so before the
+  user confirms. The login key file (Advanced options of the connect dialog,
+  or the server's settings) is also UI-only; it applies to every connection
+  to that server. The connect dialog refuses a different key or folder for a
+  server that is connected already (disconnect first); the server's own
+  settings accept and save a changed key file while connected, and it applies
+  from the next connection.
+- Custom providers are registered, edited (non-secret fields too), tested, and
+  removed in the Providers UI; no setup action exists yet;
   `status providers` with `detail: true` lists them as API rows with `custom: true`.
   Their model list (Nano-GPT included) loads there with up to a 60 s wait; the
   user can skip it and type model ids by hand.
@@ -148,9 +174,11 @@ key's source.
   and recovery. Its narrow status domain exposes installed models and progress;
   the detail dialog lists installed models rather than the download catalog.
 - Forgetting authentication is destructive and requires explicit approval.
-  It removes one OAuth account; a provider with several accounts requires
-  `accountId` from the account list in `status providers` with `detail: true`.
-- `set_provider_account` changes the selected account, paid-credit use after
+  It removes one OAuth account (a provider with several accounts requires
+  `accountId` from the account list in `status providers` with `detail: true`)
+  or an API-key provider's key (no `accountId`).
+- `set_provider_account` changes the selected account, automatic switching
+  when one is exhausted (`auto`), paid-credit use after
   plan limits (`useCredits`), account order (every account id exactly once),
   an account label, or the switching `policy`: `manual` stays on the selected
   account, `limit` switches when it hits a limit, `headroom` starts each new
@@ -159,7 +187,14 @@ key's source.
   happens in the Providers UI.
 - `status developer` lists developer options. An option with a `warning` is
   enabled only after the user explicitly accepts that warning, passed as
-  `riskAccepted:true`; never assume acceptance.
+  `riskAccepted:true`; never assume acceptance. `allowAllActions` ("Allow all
+  actions") can be turned off here, but turning it on is refused even then:
+  only the person turns it on, so `open developer`.
+- `set_quota_auto_resume` is read back as `quotaAutoResume` in `status
+  providers`; turning it off cancels pending resumes.
+- `set_model_preferences` (`hidden`, `favorite`; omitted = unchanged) matches
+  Model management. `list_models` rows show `hidden` / `favorite`; a hidden
+  custom-provider model no longer appears in `list_models`.
 
 ## Profile, session, and Memory
 
@@ -184,7 +219,11 @@ key's source.
   window, e.g. DeepSeek 24h; 1h for Codex/ChatGPT logins); unlimited does not
   disable it.
 - Compaction supports `enabled` and a `compaction` object with either
-  `mainBufferTokens` or `mainBufferPercent`. Changing representation replaces the previous budget.
+  `mainBufferTokens` or `mainBufferPercent` (changing representation replaces
+  the previous budget), `onModelChange` (compact before switching models) and
+  `summaryMode`: `smart`, `maintainer`, or `self` (Conversation model).
+  `status compaction` returns them plus `aiSessionTitles`
+  (`set_ai_session_titles`).
 - If no supported action exposes a requested Memory interval, report it as
   unavailable rather than editing configuration.
 
@@ -209,8 +248,8 @@ markers are read with `status desktop`.
   reasoning effort with a local judge model downloaded in the background.
   Enabling or installing it fails on unsupported machines; `status features`
   reports `supported`, `installing` (judge download running) and `ready`.
-- Visualize is toggle-only through `set_builtin_enabled` (on by default);
-  `install_builtin` does not accept it.
+- Visualize (on by default) and Media generation are toggle-only through
+  `set_builtin_enabled`; `install_builtin` does not accept them.
 - Terminal follows the live Desktop terminal bridge and has no toggle.
 - Environment feature overrides (`MIXDOG_FEATURE_*`) win over these toggles;
   they are diagnostics for headless or benchmark environments, not user
@@ -237,9 +276,13 @@ markers are read with `status desktop`.
   named rule; disabling with `set_hook_rule_enabled` preserves it.
 - Hook rule changes apply to open sessions and their sub-agents on the next
   tool call; no new session or restart is needed.
-- `status media` shows the remembered lane/model per kind. `set_media_default`
-  accepts only a signed-in lane that offers the kind (and the model, when
-  given) in the live media catalog; the media tool's `list` reads that catalog.
+- `status media` returns `pinned` and `remembered` ({image, video} each). The
+  pin is the Settings "Default generator"; the remembered entry is the last-used
+  generator, and the pin wins over it. A generation naming no lane/model uses
+  the pin, else the remembered one. `set_media_default` takes
+  `{kind, lane, model?, accountId?}` and accepts only a signed-in lane that
+  offers the kind (and the model, when given) in the live media catalog; the
+  media tool's `list` reads that catalog. `lane: ""` clears the pin (Auto).
 
 ## Skills, MCP, and plugins
 
@@ -272,8 +315,8 @@ markers are read with `status desktop`.
   `declarationErrors` and `warnings`.
 - `connect_connector` is how to connect a catalog service the user asks for
   ("Slack 연결해 줘"): it leaves a connect card in the conversation whose
-  press runs the browser sign-in (or the key sheet) in Desktop; nothing
-  connects until the user presses it, so tell them to press the card and read
+  press runs the service's sign-in, key sheet or (Gmail: app password only)
+  dialog in Desktop; nothing connects until the user presses it, so tell them to press the card and read
   `status mcp` afterwards. `add_mcp_server` with the service URL is not the
   sign-in flow; never use it for a catalog service.
 - `enable_plugin_mcp` turns every server the plugin declares back on and
@@ -285,7 +328,9 @@ markers are read with `status desktop`.
 - `status capabilities` lists supported actions and deliberate handoffs.
 - Desktop-only operations require the owning conversation visible in the local
   Desktop app. Never claim a persisted change from merely delivering a request.
-- A display-language change returns `requiresReload`.
+- A display-language change returns `requiresReload`; so does a changed
+  `timeFormat` (already-shown times update after the window reloads, which is
+  never automatic).
 - `set_appearance` also takes `uiFont` / `codeFont` (a family name, `""` =
   built-in; text it lacks falls back to the built-in fonts), skin transparency
   (0–100, defaults outer 20 / main 40; higher shows more of the skin picture):
@@ -293,8 +338,18 @@ markers are read with `status desktop`.
   `skinMainTransparency` (conversation area and its cards), or `skinTransparency`
   to set both; and `colorTheme`
   (an imported theme id from `status appearance` `colorThemes`, or `"builtin"`).
-  All are stored on that Desktop device only. Importing a theme file and
-  choosing a skin or custom picture stay in the UI.
+  Also `timeFormat` (system|12h|24h), `sidePanelPosition` (right|bottom|auto),
+  `uiScale` (0.85–1.2, step 0.05), `codeSize` (10–20), `codeLigatures`
+  (bool) and `chatTextSize` (small|default|large|extra-large). The UI label
+  "Light" is `theme: "white"`.
+  Importing, exporting or removing a theme file and choosing a skin picture
+  or its plate/accent/photo stay in the UI.
+- `set_desktop_settings` `desktop.botOverlay` takes `enabled`, `position`
+  (`pinned` above the message box, `pinnedHere`, `free` in the app window,
+  `onScreen` free on screen), `keepAbove`, `collapsed`, `autoAdvance`,
+  `autoClose` and `scale` (50–200, step 10). Enabling needs the
+  representative bot; `status desktop` returns `botOverlay`. Reset position
+  stays in the UI.
 - A Project removal unregisters it only.
 - Inspect schedules/webhooks before editing. `overwrite:true` updates an
   existing named entry and preserves omitted fields; a new schedule needs