mixdog 1.3.4 → 1.4.0

package/LICENSES/oh-my-pi-MIT.txt

@@ -0,0 +1,23 @@
+MIT License
+
+Copyright (c) 2025 Mario Zechner
+Copyright (c) 2025-2026 Can Bölük
+Copyright (c) 2026 Stencil Labs, Inc.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/NOTICE.md

@@ -186,9 +186,9 @@ attributions.
 
 The connector brand marks in
 `apps/desktop/src/renderer/connectors-brand-icons.ts` carry Simple Icons path
-data and brand colours unmodified (Airtable, Blender, Confluence, Discord,
+data and brand colours unmodified (Airtable, Blender, Confluence,
 Dropbox, Figma, GitHub, Gmail, Google Calendar, Google Drive, Hugging Face,
-Jira, Linear, Notion, PostgreSQL, Sentry, Stripe, Supabase, Telegram, Trello,
+Jira, Linear, Notion, PostgreSQL, Sentry, Stripe, Supabase, Trello,
 Unity, Vercel); Unity's mark is drawn in black, as its listed colour is white.
 Simple Icons is dedicated to the public domain under CC0 1.0; each
 mark remains the trademark of its owner and is shown only to name that
@@ -284,3 +284,18 @@ Full license text: `LICENSES/mago-MIT.txt`
 <https://github.com/posit-dev/air>
 
 Full license text: `LICENSES/air-MIT.txt`
+
+### oh-my-pi — MIT
+
+<https://github.com/can1357/oh-my-pi>
+
+The Devin provider follows its Devin integration. The model-family table in
+`src/runtime/agent/orchestrator/providers/devin-wire-families.mjs` is data
+taken from its model-collapse rules, and these files contain code derived from
+it: `devin-wire-models.mjs` (catalog discovery and family collapsing),
+`devin-wire-session.mjs` (client identity values), `devin-wire-identity.mjs`
+(model classification and thinking rendering), `devin-wire-schema.mjs` (tool
+schema normalization) and `devin-wire-tool-args.mjs` (tool-argument repair),
+all under `src/runtime/agent/orchestrator/providers/`.
+
+Full license text: `LICENSES/oh-my-pi-MIT.txt`

package/README.md

@@ -26,6 +26,7 @@ https://github.com/user-attachments/assets/af515dc9-b0fb-4b6a-aaa1-1d82db792ed0
   <a href="https://github.com/tribgames/mixdog/releases/latest"><img alt="Release" src="https://img.shields.io/github/v/release/tribgames/mixdog?style=flat-square"></a>
   <a href="https://www.npmjs.com/package/mixdog"><img alt="npm" src="https://img.shields.io/npm/v/mixdog?style=flat-square"></a>
   <a href="LICENSE"><img alt="License" src="https://img.shields.io/badge/license-Apache--2.0-blue?style=flat-square"></a>
+  <a href="https://github.com/sponsors/JYP8877"><img alt="GitHub Sponsors" src="https://img.shields.io/github/sponsors/JYP8877?style=flat-square&logo=githubsponsors&label=Sponsors"></a>
 </p>
 
 <p align="center">
@@ -174,6 +175,16 @@ Found a bug or missing a feature?
 [Open an issue](https://github.com/tribgames/mixdog/issues). If Mixdog saves
 you tokens, a star helps others find it.
 
+## Sponsor
+
+Mixdog is free and open source. Sponsorship pays for development time and the
+model tokens used for testing:
+[github.com/sponsors/JYP8877](https://github.com/sponsors/JYP8877).
+
+### Supporters
+
+Your name here — [become a sponsor](https://github.com/sponsors/JYP8877).
+
 ## License
 
 Mixdog is licensed under [Apache-2.0](LICENSE). Third-party components retain

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mixdog",
-  "version": "1.3.4",
+  "version": "1.4.0",
   "private": false,
   "type": "module",
   "description": "Open-source coding agent that matches Codex on Terminal-Bench 2.1 with 63% fewer tokens.",
@@ -71,8 +71,6 @@
     "smoke:all": "npm run smoke && npm run smoke:boot && npm run smoke:patch && npm run smoke:compact",
     "smoke:boot": "node scripts/boot-smoke.mjs",
     "smoke:compact": "node scripts/compact-smoke.mjs",
-    "test:compact": "node scripts/test-direct.mjs scripts/suite-compact-test.mjs src/runtime/agent/orchestrator/session/compact-fresh-context.test.mjs src/runtime/agent/orchestrator/session/compaction-read-reset.test.mjs src/runtime/agent/orchestrator/session/token-estimate.test.mjs",
-    "test:markdown": "node scripts/test-direct.mjs scripts/markdown-surface-test.mjs",
     "smoke:loop": "node scripts/smoke-loop.mjs",
     "smoke:loop:final": "node scripts/smoke-loop-report.mjs --require-complete --min-elapsed 5h --min-iterations 400 --max-gap 60s --max-smoke-ms 10000 --max-avg-smoke-ms 8500 --max-step-ms smoke.mjs=4000 --max-step-ms boot-smoke.mjs=8000 --max-rss-mb 140 --max-rss-growth-mb 50",
     "smoke:loop:report": "node scripts/smoke-loop-report.mjs",
@@ -87,18 +85,12 @@
     "test:release-critical": "npm run test:release-assets && npm run smoke:patch && npm run test:providers",
     "test:spec-advisory": "node scripts/run-advisory-spec.mjs && npm run test:spec-advisory --prefix apps/desktop",
     "test:session-transport": "node scripts/test-direct.mjs \"scripts/session-transport/*.test.mjs\" scripts/daemon-bootstrap-test.mjs src/standalone/session-runtime-inline-host.test.mjs",
-    "test:session": "node scripts/test-direct.mjs scripts/runtime-turn-contract-test.mjs scripts/session-save-fault-store.slow.test.mjs scripts/turn-review-revert.slow.test.mjs src/runtime/shared/tool-surface.test.mjs src/runtime/bridge-clients.test.mjs src/runtime/browser-bridge/action-schema.test.mjs src/runtime/computer-bridge/client-semantic-error.test.mjs src/runtime/agent/orchestrator/session/tool-envelope.test.mjs src/runtime/agent/orchestrator/session/eager-dispatch.test.mjs",
-    "test:quick": "npm run test:session && npm run test:session-transport && npm run test:desktop-main --prefix apps/desktop",
     "test:office": "node scripts/test-direct.mjs scripts/run-office-live-tests.test.mjs src/runtime/office/office-runtime-contract.test.mjs src/runtime/office/office-runtime-com.test.mjs src/runtime/office/office-runtime-portable.slow.test.mjs src/runtime/office/xlsx-formula-audit.test.mjs src/runtime/office/xlsx-portable-snapshot.test.mjs src/runtime/office/office-runtime-pdf.slow.test.mjs src/runtime/office/office-runtime-design.test.mjs src/runtime/office/office-assurance.slow.test.mjs src/runtime/office/office-design-aesthetics.test.mjs src/runtime/office/portable-authoring.slow.test.mjs src/runtime/office/slide-quality.test.mjs src/runtime/office/authoring/pptx-brief.test.mjs src/runtime/office/authoring/pptx-receipt.test.mjs src/runtime/office/quality/render-air.test.mjs src/runtime/office/quality/pptx-deck-rubric.test.mjs && npm run test:office-approval --prefix apps/desktop",
     "test:office:live": "node scripts/run-office-live-tests.mjs",
-    "test:office:preview": "node scripts/test-direct.mjs src/runtime/office/office-render-preview.test.mjs",
-    "test:office:review": "node scripts/test-direct.mjs src/runtime/office/pptx-independent-review.test.mjs src/runtime/office/pptx-chart-styling.test.mjs",
-    "test:office:cleanup": "node scripts/test-direct.mjs src/runtime/office/com/office-cleanup.test.mjs src/runtime/office/office-runtime-com.test.mjs",
     "test:office:compat": "node scripts/run-office-live-tests.mjs compat",
     "test:office:live:all": "node scripts/run-office-live-tests.mjs all",
     "test:office:render": "node scripts/test-direct.mjs src/runtime/office/pptx-skill-kit.slow.test.mjs",
     "office:icons": "node scripts/office/build-pptx-icons.mjs",
-    "test:media": "node scripts/test-direct.mjs src/runtime/media/catalog.test.mjs src/runtime/media/lanes.test.mjs src/runtime/media/tool.test.mjs src/runtime/media/defaults.test.mjs src/runtime/media/store.test.mjs src/runtime/media/renditions.test.mjs src/runtime/media/adapters/codex-image.test.mjs src/runtime/media/adapters/gemini-image.test.mjs src/runtime/media/adapters/image-api.test.mjs src/tui/session/session-api/media-lanes.test.mjs",
     "failures": "node scripts/tool-failures.mjs",
     "trace:llm": "node scripts/llm-trace-summary.mjs",
     "bench:office": "node src/runtime/office/bench/benchmark.mjs",
@@ -117,8 +109,6 @@
     "bench:run": "node scripts/bench-run.mjs",
     "bench:recall": "node scripts/recall-bench.mjs",
     "bench:recall:strict": "node scripts/recall-bench.mjs --strict",
-    "test:recall-validator": "node scripts/test-direct.mjs scripts/recall-bench-test.mjs",
-    "test:suite-health": "node scripts/test-direct.mjs scripts/suite-health.test.mjs",
     "bench:tui-load": "node scripts/tui-runtime-load-bench.mjs",
     "bench:output-style": "node scripts/output-style-bench.mjs",
     "bench:session-context": "node scripts/session-context-bench.mjs",
@@ -181,10 +171,12 @@
     "pptxgenjs": "^4.0.1",
     "puppeteer-core": "^25.2.0",
     "react": "^19.2.7",
+    "saxes": "^6.0.0",
     "sharp": "^0.35.5",
     "string-width": "^8.2.1",
     "strip-ansi": "^7.2.0",
     "tesseract.js": "^7.0.0",
+    "tldts": "^7.4.18",
     "undici": "^8.10.2",
     "unpdf": "^1.8.0",
     "wrap-ansi": "^10.0.0",

package/scripts/daemon-stub.mjs

@@ -1,7 +1,7 @@
 // Stub channel service for the flip smoke: same lifecycle contract as
 // src/standalone/daemon.mjs (pid-verified singleton claim, HTTP+SSE
 // transport, discovery file, ready handshake, client-grace self-shutdown) but
-// with a STUB runtime instead of worker-main — no Discord token needed. The
+// with a STUB runtime instead of worker-main. The
 // real channel-worker.mjs spawn-or-attach path forks THIS via
 // MIXDOG_DAEMON_ENTRY, so the flip is exercised end to end.
 process.env.MIXDOG_WORKER_MODE = process.env.MIXDOG_WORKER_MODE || '1';

package/scripts/embed-google-oauth-client.mjs

@@ -0,0 +1,49 @@
+#!/usr/bin/env node
+
+// Release packaging step: write Mixdog's Google OAuth "Desktop app" client from
+// MIXDOG_GOOGLE_OAUTH_CLIENT_ID / MIXDOG_GOOGLE_OAUTH_CLIENT_SECRET (repository
+// secrets) into the generated, gitignored file that googleOAuthClient() reads.
+// Run it before `npm pack` and before apps/desktop `prepare:runtime`, so the
+// npm package and every runtime.asar include the file.
+//
+//   --require   fail when either value is missing (release and publish jobs).
+//               Without it a missing value is skipped, so PR, fork and local
+//               builds go on without a built-in Google sign-in.
+//
+// The values are never printed.
+
+import { writeFileSync } from 'node:fs';
+import { pathToFileURL } from 'node:url';
+
+import { GOOGLE_OAUTH_CLIENT_FILE } from '../src/runtime/shared/google-oauth-client.mjs';
+
+const text = (value) => String(value || '').trim();
+
+/** Write the client file; returns false when skipped for missing values. */
+export function embedGoogleOAuthClient({ env = process.env, file = GOOGLE_OAUTH_CLIENT_FILE, required = false } = {}) {
+  const clientId = text(env.MIXDOG_GOOGLE_OAUTH_CLIENT_ID);
+  const clientSecret = text(env.MIXDOG_GOOGLE_OAUTH_CLIENT_SECRET);
+  if (!clientId || !clientSecret) {
+    if (!required) return false;
+    throw new Error(
+      'MIXDOG_GOOGLE_OAUTH_CLIENT_ID and MIXDOG_GOOGLE_OAUTH_CLIENT_SECRET must both be set: ' +
+        'a release without them ships no built-in Google sign-in. Add them as repository secrets.'
+    );
+  }
+  writeFileSync(file, `${JSON.stringify({ clientId, clientSecret }, null, 2)}\n`);
+  return true;
+}
+
+if (process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href) {
+  try {
+    const embedded = embedGoogleOAuthClient({ required: process.argv.includes('--require') });
+    console.log(
+      embedded
+        ? 'Embedded the Google OAuth client for this build.'
+        : 'No Google OAuth client configured; this build has no built-in Google sign-in.'
+    );
+  } catch (error) {
+    console.error(`::error title=Google OAuth client missing::${error.message}`);
+    process.exitCode = 1;
+  }
+}

package/scripts/gate-local.mjs

@@ -10,7 +10,9 @@
 // Not covered locally: runtime-macos, computer-backend (cargo + Linux X11),
 // desktop-tests `computer` lane (windows-latest, src/main/computer/ only),
 // relay (apps/relay tests), graph (cargo test), patch (cargo test of the
-// checked-out engine), mobile-scripts (Python unittest). The gate's path
+// checked-out engine), browser-import (windows-latest cargo test of the Chrome
+// importer against a fetched upstream checkout), mobile-scripts (Python
+// unittest). The gate's path
 // filtering is not applied: every check and leg always runs. Run `npm ci`
 // (root and apps/desktop) first.
 import { spawn, spawnSync } from 'node:child_process';
@@ -112,7 +114,7 @@ for (const leg of legs) {
   }
 }
 console.log(
-  'Not covered locally: runtime-macos, computer-backend, desktop-tests computer lane (Windows-only), relay, graph, patch, mobile-scripts'
+  'Not covered locally: runtime-macos, computer-backend, desktop-tests computer lane (Windows-only), relay, graph, patch, browser-import, mobile-scripts'
 );
 console.log(`Total: ${((Date.now() - started) / 1000).toFixed(1)}s`);
 process.exit(legs.every((l) => l.ok) ? 0 : 1);

package/scripts/lib/test-spawn-ledger.mjs

@@ -4,9 +4,54 @@
 // (scripts/lib/run-node-tests.mjs). Without the runner's environment it does
 // nothing.
 import { ChildProcess } from 'node:child_process';
-import { appendFileSync } from 'node:fs';
+import { appendFileSync, readFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { pathToFileURL } from 'node:url';
 import { FAILURE_RECORDS_ENV, spawnLedgerPath } from './test-failure-records.mjs';
 
+// --test-force-exit ends a test file's process once every test registered so
+// far has finished. A test registered after a top-level await that is still
+// pending by then (e.g. `await import()` between tests) is never run, and the
+// file would exit 0 with those tests unreported. The entry module is already
+// being evaluated by the time this runs, so importing it again only observes
+// it: if the process exits before its top-level evaluation completed, fail the
+// file instead. Stricter on purpose: an entry whose top-level evaluation never
+// completes under force-exit (e.g. an intentionally never-resolving await after
+// its last test) cannot be told apart from dropped tests, so it fails too.
+// Only ESM entries are observed: importing a CommonJS entry would run it a
+// second time and change `require.main === module`.
+const isEsmEntry = (file) => {
+  if (/\.(mjs|mts)$/.test(file)) return true;
+  if (/\.(cjs|cts)$/.test(file)) return false;
+  for (let dir = dirname(file); ; dir = dirname(dir)) {
+    try {
+      return JSON.parse(readFileSync(join(dir, 'package.json'), 'utf8')).type === 'module';
+    } catch {
+      // no readable package.json here: keep walking up
+    }
+    if (dirname(dir) === dir) return false;
+  }
+};
+if (
+  process.env.NODE_TEST_CONTEXT === 'child-v8' &&
+  process.execArgv.includes('--test-force-exit') &&
+  isEsmEntry(process.argv[1])
+) {
+  let settled = false;
+  const settle = () => {
+    settled = true;
+  };
+  import(pathToFileURL(process.argv[1]).href).then(settle, settle);
+  process.on('exit', (code) => {
+    if (settled) return;
+    console.error(
+      `${process.argv[1]}: the process was force-exited before the file's top-level evaluation completed (a top-level await was still pending); tests registered after it never ran, and an await that never settles is treated the same way`
+    );
+    // Never replace a failure code the file already set.
+    if (!code) process.exitCode = 1;
+  });
+}
+
 const ledger = spawnLedgerPath(process.env[FAILURE_RECORDS_ENV]);
 if (ledger) {
   // spawn, exec, execFile and fork all start their process here.

package/scripts/native-release-status.mjs

@@ -15,8 +15,8 @@
 //   node scripts/native-release-status.mjs --check    exit 1 when a tool is unreleased
 //   node scripts/native-release-status.mjs --warn-dev warnings for a dev build, exit 0
 //
-// native/mixdog-computer, native/mixdog-browser-import and native/gnome-extension
-// have no release/manifest: the desktop package builds them from source, keyed
+// native/mixdog-computer, native/mixdog-browser-import, native/mixdog-secure-desktop
+// and native/gnome-extension have no release/manifest: the desktop package builds them from source, keyed
 // on a hash of that source (desktop-package.yml), so they cannot go stale.
 import { spawn, spawnSync } from 'node:child_process';
 import { existsSync, readdirSync, readFileSync, statSync } from 'node:fs';

package/scripts/recall-history-cases.json

@@ -289,7 +289,7 @@
     "id": "history-network-3",
     "label": "network interruption natural paraphrase 3",
     "args": {
-      "query": "Discord 게이트웨이 재연결 때문에 실패 화면이 나온 사건 결론은?",
+      "query": "웹소켓 게이트웨이 재연결 때문에 실패 화면이 나온 사건 결론은?",
       "period": "2026-08-02 17:35~18:15",
       "projectScope": "mixdog",
       "limit": 10

package/scripts/suite-health.mjs

@@ -15,6 +15,8 @@ export const WORKSPACES = [
       test: 'the release gate runtime job runs the default lane on every gated push',
       'test:slow': 'the release gate runtime-slow job runs it on every gated push',
       'smoke:all': 'aggregate; its components run individually',
+      'test:release-critical':
+        'aggregate of test:release-assets, smoke:patch and test:providers, each swept on its own',
       'smoke:loop': 'long-running local endurance harness',
       'smoke:loop:final': 'endurance-harness gate, needs hours of loop data',
       'smoke:loop:report': 'report reader, not a suite',
@@ -28,12 +30,19 @@ export const WORKSPACES = [
     exclusions: {
       test: 'the release gate desktop-tests fast leg runs it on every gated push',
       'test:slow': 'the release gate desktop-tests slow leg runs it on every gated push',
-      'test:all': 'aggregate of the fast, slow, and live lanes',
+      'test:all': 'aggregate of the fast, slow, live, and electron lanes',
+      'test:electron': 'needs a real Electron window and graphics device, which the Linux sweep runner lacks',
       'test:live': 'needs built artifacts; the packaging workflow owns it',
       'test:daemon:e2e': 'needs the built daemon; the release gate desktop job owns it',
       'test:spec-advisory': 'advisory by design (MIXDOG_TEST_ADVISORY)',
       'test:browser-host:integration': 'live desktop integration harness',
+      'test:browser-login-persistence:integration':
+        'live desktop integration harness; launches real Electron, which needs a display the Linux sweep runner lacks',
+      'test:browser-login-popup:integration':
+        'live desktop integration harness; launches real Electron, which needs a display the Linux sweep runner lacks',
       'test:browser-profile-import:integration': 'live desktop integration harness',
+      'test:remote-webrtc-sender:integration':
+        'live desktop integration harness; launches real Electron, which needs a display the Linux sweep runner lacks',
       'test:computer-host:integration': 'live desktop integration harness',
       'test:computer-host:scenarios': 'live desktop scenario harness',
       'test:computer-host:repeats': 'live desktop scenario harness',

package/scripts/test.mjs

@@ -8,9 +8,9 @@
 //   *.electron.test.mjs  electron need a real Electron or window-capture
 //                                 surface, so two runs of them cannot overlap
 //
-// The electron lane rides the default lane (a plain run still covers it) and
-// `--exclude-lane electron` is the explicit opt-out that lets a second run
-// proceed concurrently; `--lane electron` runs those files alone.
+// The electron lane is not part of the default lane: `--lane electron` runs
+// those files alone, and `--lane all` includes them unless `--exclude-lane
+// electron` lets a second run proceed concurrently.
 //
 // Usage — see USAGE below (`node scripts/test.mjs --help`).
 //
@@ -35,11 +35,11 @@ export const USAGE = `Usage: node scripts/test.mjs [--lane ${LANES.join('|')}] [
                   that differs from HEAD (edits and untracked files). A changed
                   file no test references (a path joined at run time) is listed,
                   so a path filter can add its tests.
-  --lane          fast (default) also covers the electron lane, so a plain run
-                  keeps testing it; --lane electron runs those files alone.
+  --lane          fast is the default; electron needs a real desktop and only
+                  runs with --lane electron or --lane all.
   --exclude-lane  drop one lane from the selection, repeatable. Electron and
                   window-capture tests cannot run twice at once, so a second
-                  concurrent run uses --exclude-lane electron.
+                  concurrent --lane all run uses --exclude-lane electron.
   --rerun-failed <n>  re-run the failed files up to n times. Default: 1 for a
                   local run, 0 (off) when CI is set; MIXDOG_TEST_RERUN_FAILED
                   overrides the default. A test that passes on a re-run is
@@ -56,6 +56,11 @@ export const USAGE = `Usage: node scripts/test.mjs [--lane ${LANES.join('|')}] [
                   Selection, lanes, reporting and exit codes are untouched.
   --list          print the selected files with their lane, run nothing.
 
+Test-file rule: files run with --test-force-exit, so a file's top-level
+evaluation (including any top-level await) must finish before its registered
+tests do. A file that is force-exited first fails — tests registered after the
+await would never run, and an await that never settles cannot be told apart.
+
 Every run ends with a "[failure-summary]" block, printed after all other
 output, naming each failed and flaky test by file and test name; every line of
 it carries that tag, so it survives line filtering.`;
@@ -149,12 +154,8 @@ export async function discoverTestFiles(cwd = process.cwd()) {
   return [...files].sort();
 }
 
-// The electron lane rides the default lane so a plain `npm test` keeps
-// covering an Electron/window-capture surface that no other lane owns;
-// `--exclude-lane electron` is the explicit way to drop it.
 export function laneSelected(lane, fileLane) {
-  if (lane === 'all' || lane === fileLane) return true;
-  return lane === 'fast' && fileLane === 'electron';
+  return lane === 'all' || lane === fileLane;
 }
 
 export function selectTestFiles(files, { lane, filters, excludeLanes = [] }) {

package/src/agents/reviewer/AGENT.md

@@ -1,16 +1,12 @@
 ---
 name: Reviewer
-description: Use one per worker scope, after that worker reports, reviewing only its diff; edits the Lead made itself need only Lead's review.
+description: One fresh Reviewer per non-trivial feature after its last worker reports, any author; not for docs/copy/style or one-line changes.
 ---
 
-Independent per-scope review agent.
+Independent feature reviewer.
 
-You review one scope's diff once, after its implementer reports; the Lead
-owns cross-scope checks.
-
-Inspect the diff, affected boundaries, existing tests, and stated acceptance
-criteria with independent judgment. Reuse still-valid passing results; rerun only failed or invalidated checks. Actively seek regressions, unsupported assumptions, security
-risks, and counterexamples.
-
-Do not modify files or reimplement the change. Result lists actionable
-findings first, severity-ordered, one line each; if clean, say so in one line.
+Probe what the worker's checks missed: edge cases, error paths, contracts;
+do not rerun valid passing checks. Report only defects this change provably
+introduces, severity-ordered with path/symbol evidence, ending PASS or FAIL
+with one probe you ran. After a fix, recheck only the fix. Do not modify
+files. Lead owns cross-feature checks.

package/src/agents/reviewer/agent.json

@@ -1,6 +1,6 @@
 {
   "id": "reviewer",
   "name": "Reviewer",
-  "description": "Use one per worker scope, after that worker reports, reviewing only its diff; edits the Lead made itself need only Lead's review.",
+  "description": "One fresh Reviewer per non-trivial feature after its last worker reports, any author; not for docs/copy/style or one-line changes.",
   "entry": "AGENT.md"
 }

package/src/defaults/shipped-history.json

@@ -33,6 +33,7 @@
       "1a8115cec6ae4414f8637b1765948cdd",
       "25b44b46269490e26ca31c1852925171",
       "43d2ad531c7b821fa1f24b4f83c12e6f",
+      "60ef154c1d6c9fb936fd7a3167f41203",
       "a60ea68f9287d55489e92e5450432f62",
       "a61cb4557def4e7ed647d4bdacbb72e4",
       "de860d4111b61985f3b59eb1011fa421"
@@ -181,15 +182,23 @@
       "25a6744e7591ea5597abbda008d123fe",
       "43eeb0b9c5792f08f2223c76846926cb",
       "4ab5316454013712cedb25d9b75f4e43",
+      "4f042de090d853ed38aaa82b88d301ac",
       "646365a3f7041a3da3d7d7d896a0c3b6",
       "662f730d603b1e583dc777a1984b9134",
+      "814b0820a05119a049cf4262dc35301b",
+      "85876f6f5aa4f9253d0f5f3f1836dd1a",
+      "8691fb728207188e5277611ab8ee739f",
       "8766650e61891e910b44bb2591c88f48",
       "87c15aa8b84c6924598926295b3f7829",
       "949c457b38fa2c9b7d9e684bf67e1470",
       "a2538714c422b39a32d0eb9f27893b32",
       "af1d1b975fc4b6a50f3a1775d890582f",
+      "afbbddfab9fdddb5437c045ec23dcad4",
       "d46676d3d80327445c36e70bb291ae52",
       "dc812114c135d1d2716b219e1009e670",
+      "eb1bf3ae8e0bca2647ac2a10ab8ad40c",
+      "ecbaff5fb04bdf95cc2eeb27c14bda8c",
+      "f70b87761ac6a7c6f0ef39b65b1592b3",
       "ff5607144eaf51be56217319431cb90e"
     ],
     "code-tidy": [
@@ -201,6 +210,7 @@
       "65fc2984f2a7ead790d527f8e9940aee",
       "74a70988e5ee5704f85fd1250b7d0bb6",
       "7c3ce81e504b46e01a9256576f3b4dca",
+      "8a5a68ec13a7414b35e7f3b0089e2208",
       "9728f28dc5b23eb1bb1924213d3ffddd",
       "9a8789b3b4f5f6b3ba02f407cdfb92f7",
       "b50e9c0ba5e8228583eab4f0e0573838",
@@ -230,7 +240,9 @@
       "cb3b95673998c6f44ae68533a49fd891",
       "d086c0ddd6ab4cdfd6a93221b93596b3",
       "e10367dd4291a0b3d8ee8e8dd60eae36",
-      "e1f2526aaf123fb77072aa8975f890de"
+      "e1f2526aaf123fb77072aa8975f890de",
+      "e67f30ec5bbdd36d7feaabd35b7504b3",
+      "f0798c546c172a742e3384d82322ede4"
     ],
     "docx": [
       "25180dffff54178bcc336250f58ba7db",
@@ -355,27 +367,37 @@
       "242f11864abdef90fa0cc9cb4599a579",
       "29a347c4d3a2f773fa92c627260301ba",
       "336ced846a9e4f774cbb109417856c3b",
+      "3716b2d2c2d973ae022694ed5cb756ad",
+      "3dc990c29cdce1aca4b112d735ad5917",
       "3f72247651ad9d777b6754bfd46732aa",
       "50bdf35d06913236855080fdea6b50dc",
+      "5a77e4fafded94d6bf6fa949796570fe",
       "5b4586a44104b26ae7dd45da101079bf",
       "6101786127a1e68778eafcd2bf2c9ce0",
       "64a85678fbe08d4653ab78c55ee22c7c",
       "6711dbc9d84023b8eabfa928b8d33d18",
       "6f9e9338f560fa9acd839a67b5e2d1cc",
       "70c54f802c77b630863b9e17a16d8224",
+      "7254f153fd7e492e205834bc2f2781ab",
+      "7c55bebd9e28dc2e03794861dde3f775",
       "81e979463e0066e7a45cf511a31c5d68",
       "8476c811b2f02da3a434bcb23a1c3d12",
       "8af2b614e2a07b58dad6c0f1318d22e2",
+      "99d76213e70c6900d6af48ffa4045886",
       "9f90d3872b1ecd312977ce661b770b31",
       "ade615dd0f6ae6ed1601023e5b9cb692",
+      "b21681ecfeb523c0d7dd89a299ec05a9",
       "b4f9c79dcb08151e6275b5ee35c2bca4",
+      "bca9732a1cecd2ce3a26e905b57d3b25",
       "c6db973f51166fc42814808ae0001797",
+      "c82197acd9111f4a6dcda24baccffb86",
       "c8826387a65631b63e8023f55ef807a3",
       "cb6f66d14ba75b11e7470eb3fd5ec94c",
       "de9727a48e52673258bf5f9670564d56",
       "e04e6abe9a54e7d07b37f8fc32b5ad30",
       "e38d606df69865a9cf1cc48386535e8b",
       "e5ac8ea16905815e36e88d883195a617",
+      "e7957096bcf6cb5c5833f4e98e1f7110",
       "e848b92962dee0d4c3d7e3721d2e3294",
       "e9b89f9193bd9d9c80ba6cf4419e58ff",
       "feabe973080344c4d52787a96043ab68",
@@ -383,6 +405,7 @@
     ],
     "setup-guide": [
       "633e15b84dbe22f2b578b67cc35853d4",
+      "72e474711ecd18cfcae6c8365e08286e",
       "920d5b29ccfe6c88f623cf0892b29285",
       "ec88a82ab5e511c0afb1738162150648"
     ],
@@ -408,6 +431,7 @@
       "8320fedd9dd745a332621c325a8bf355",
       "9c9fba19647b67d75a600137e38c02b8",
       "aa3531bfc4fd6ec3820493d0c190cc75",
+      "f24ff77670e5aa43ce901dec1e0055ac",
       "f65924f0691284ad31000469a9855b62"
     ],
     "xlsx": [