mixdog 1.3.4 → 1.4.0

package/src/runtime/shared/sensitive-path-rules.mjs

@@ -1,8 +1,7 @@
-// The credential / secret file deny list, shared by every lane that hands a
-// local file to someone else: the desktop's remote (paired-device) file lanes
-// (apps/desktop/src/main/remote-sensitive-paths.ts adds its registered private
-// roots and async canonicalization) and the runtime's attachment hand-offs
-// between bots and agents (session-runtime/handoff-attachments.mjs).
+// The credential / secret file deny list of the runtime's attachment
+// hand-offs between bots and agents (session-runtime/handoff-attachments.mjs):
+// an automatic transfer never carries a secret-bearing file. A paired device
+// is the user's own and gets no such list (it opens what the desktop opens).
 //
 // Matching is on SEGMENTS of a path, lower-cased on every platform, so a
 // denied name cannot hide behind letter case, trailing dots/spaces or an NTFS
@@ -113,10 +112,6 @@ const CREDENTIAL_FILES = new Set([
  *  checked in often enough with real values that no name is exempt) and
  *  `<stage>.env`. */
 const ENV_FILE = /^(?:\.env.*|[^.]{1,64}(?:\.[^.]{1,64}){0,3}\.env)$/;
-/** The dotenv templates a person may still open on purpose from a paired
- *  device (the desktop's remote file lanes, `envTemplates: true`); automatic
- *  transfers between bots and agents never get this allowance. */
-const ENV_TEMPLATES = new Set(['.env.example', '.env.sample', '.env.template', '.env.dist']);
 /** Credential JSON a cloud or OAuth client writes or downloads:
  *  `credentials.json`, `*credentials*.json`, `service-account*.json`,
  *  `client_secret*.json`. */
@@ -143,10 +138,9 @@ function backupOriginal(name) {
 
 /** A file whose own name says it holds a secret, wherever it lives: a
  *  credential file, a dotenv file, a key or keystore, or a backup of one. */
-function secretFileName(name, { envTemplates = false } = {}) {
+function secretFileName(name) {
   const original = backupOriginal(name);
-  if (CREDENTIAL_FILES.has(original) || CREDENTIAL_JSON.test(original)) return true;
-  if (ENV_FILE.test(original)) return !(envTemplates && ENV_TEMPLATES.has(original));
+  if (CREDENTIAL_FILES.has(original) || CREDENTIAL_JSON.test(original) || ENV_FILE.test(original)) return true;
   const dot = original.lastIndexOf('.');
   if (dot >= 0 && KEY_EXTENSIONS.has(original.slice(dot))) return true;
   return SSH_PRIVATE_KEY.test(original);
@@ -156,14 +150,7 @@ function secretFileName(name, { envTemplates = false } = {}) {
 // (tool results, shell output, media), which stay reachable; only the files
 // and folders that carry provider tokens, API keys, pairing and bridge secrets
 // are denied.
-const MIXDOG_SECRET_DIRECTORIES = new Set([
-  'secrets',
-  'mcp-oauth',
-  'provider-accounts',
-  'telegram',
-  'relay-data',
-  'dev-profile',
-]);
+const MIXDOG_SECRET_DIRECTORIES = new Set(['secrets', 'mcp-oauth', 'provider-accounts', 'relay-data', 'dev-profile']);
 const MIXDOG_SECRET_FILE =
   /^\.?(mixdog-config|provider-accounts|relay-hook-device|auth\.json|[a-z0-9-]+-oauth(-credentials)?\.json|[a-z0-9-]+-bridge\.json)/;
 const MIXDOG_SECRET_EXTENSIONS = new Set(['.dpapi', '.token']);
@@ -177,7 +164,7 @@ function mixdogSecret(rest) {
 
 /** The segments of a path as the rules compare them: no extended-path prefix,
  *  no NTFS stream suffix, no trailing dots or spaces, lower case. */
-export function sensitivePathSegments(path) {
+function sensitivePathSegments(path) {
   return String(path)
     .replace(/^[\\/]{2}[?.][\\/]/, '')
     .split(/[\\/]+/)
@@ -198,30 +185,21 @@ function hasRun(segments, run) {
 }
 
 /**
- * Whether `path` is denied under `within`: scopes `{ root: segments, except:
- * subfolder names, whole }` — Mixdog's home and data folders (`whole: false`,
- * only their secret subset is denied) and registered private roots (`whole:
- * true`, everything but `except`). Pass both the lexical and canonical form.
- * `envTemplates`: a user-initiated remote open may read the dotenv
- * templates; nothing else gets that allowance.
+ * Whether `path` is denied under `within`: scopes `{ root: segments }` —
+ * Mixdog's home and data folders, where only their secret subset is denied.
+ * Pass both the lexical and canonical form.
  */
-export function matchesSensitivePath(path, within = [], { envTemplates = false } = {}) {
+export function matchesSensitivePath(path, within = []) {
   const segments = sensitivePathSegments(resolve(path));
   const name = segments[segments.length - 1] ?? '';
   if (segments.some((segment) => SECRET_DIRECTORIES.has(segment))) return true;
-  if (secretFileName(name, { envTemplates }) || SECRET_SEQUENCES.some((run) => hasRun(segments, run))) return true;
-  const containing = within.filter(
-    ({ root }) => root.length > 0 && root.every((segment, index) => segments[index] === segment)
+  if (secretFileName(name) || SECRET_SEQUENCES.some((run) => hasRun(segments, run))) return true;
+  return within.some(
+    ({ root }) =>
+      root.length > 0 &&
+      root.every((segment, index) => segments[index] === segment) &&
+      mixdogSecret(segments.slice(root.length))
   );
-  // Mixdog's home and data folders follow Mixdog's own rule even inside a
-  // registered private root: a dev or isolated profile keeps them in the app
-  // profile, and the tool output and media there stay reachable.
-  const own = containing.filter(({ whole }) => !whole);
-  if (own.length) return own.some(({ root }) => mixdogSecret(segments.slice(root.length)));
-  return containing.some(({ root, except }) => {
-    const rest = segments.slice(root.length);
-    return rest.length > 0 && !except.includes(rest[0]);
-  });
 }
 
 function realOrSelf(path) {
@@ -241,7 +219,7 @@ export function mixdogSensitiveScopes(extraData = []) {
   const scopes = [];
   for (const root of roots) {
     for (const form of new Set([resolve(root), realOrSelf(resolve(root))])) {
-      scopes.push({ root: sensitivePathSegments(form), except: [], whole: false });
+      scopes.push({ root: sensitivePathSegments(form) });
     }
   }
   return scopes;

package/src/runtime/shared/session-activity-signal.mjs

@@ -13,7 +13,40 @@ export function onSessionActivityChange(listener) {
 }
 
 export function emitSessionActivityChange(sessionId = '') {
-  for (const listener of [...listeners]) {
+  emit(listeners, sessionId);
+}
+
+// A turn started on a session: the one point every turn passes through, whoever
+// started it. Unlike the activity pulse it never fires on a settle or a wait.
+const turnStartListeners = new Set();
+
+export function onSessionTurnStart(listener) {
+  if (typeof listener !== 'function') return () => {};
+  turnStartListeners.add(listener);
+  return () => turnStartListeners.delete(listener);
+}
+
+export function emitSessionTurnStart(sessionId = '') {
+  emit(turnStartListeners, sessionId);
+}
+
+// A live session started or stopped showing an approval card waiting on the
+// user (its runtime state's `toolApproval`): the session catalog, which
+// stamps that on each row, listens and re-reads.
+const approvalCardListeners = new Set();
+
+export function onSessionApprovalCardChange(listener) {
+  if (typeof listener !== 'function') return () => {};
+  approvalCardListeners.add(listener);
+  return () => approvalCardListeners.delete(listener);
+}
+
+export function emitSessionApprovalCardChange(sessionId = '') {
+  emit(approvalCardListeners, sessionId);
+}
+
+function emit(targets, sessionId) {
+  for (const listener of [...targets]) {
     try {
       listener(String(sessionId || ''));
     } catch {

package/src/runtime/shared/session-sidebar-host.d.mts

@@ -4,7 +4,7 @@ export type SessionSidebarChange =
   | { archived: true; cascade: false }
   | { forgotten: true };
 export type SessionSidebarHost = (sessionId: unknown, change: unknown) => unknown;
-export type SessionSidebarState = { archived: Record<string, number> };
+export type SessionSidebarState = { archived: Record<string, number>; favorites?: Record<string, number> };
 export function registerSessionSidebarHost(
   host: SessionSidebarHost,
   options?: { state?: (() => SessionSidebarState | Promise<SessionSidebarState>) | null }

package/src/runtime/shared/session-sidebar-host.mjs

@@ -41,11 +41,15 @@ export async function applySessionSidebarChange(sessionId, change) {
   await active.host(sessionId, change);
 }
 
-/** The active desktop's flags, `{ archived }` (session id → epoch-ms stamp);
- *  null when no desktop (or one without a state reader) is attached. */
+/** The active desktop's flags, `{ archived, favorites? }` (session id →
+ *  epoch-ms stamp; `favorites` only from a desktop that reports them); null
+ *  when no desktop (or one without a state reader) is attached. */
 export async function readSessionSidebarState() {
   const active = hosts().at(-1);
   if (!active?.state) return null;
   const state = await active.state();
-  return { archived: { ...state?.archived } };
+  return {
+    archived: { ...state?.archived },
+    ...(state?.favorites && typeof state.favorites === 'object' ? { favorites: { ...state.favorites } } : {}),
+  };
 }

package/src/runtime/shared/session-turn-prelude.mjs

@@ -0,0 +1,18 @@
+// What must land in a session's transcript right before its next turn's
+// prompt, whoever starts that turn: the daemon registers one prelude
+// (agent-home-delivery.mjs postBeforeAgentTurn) and the prompt queue's drain
+// (tui/session/session-flow/drain.mjs) awaits it before presenting a batch.
+
+let prelude = null;
+
+/** Register `fn(sessionId)` (null or a promise per turn); a non-function clears it. */
+export function setSessionTurnPrelude(fn) {
+  prelude = typeof fn === 'function' ? fn : null;
+}
+
+/** The prelude's work before a turn of `sessionId`: a promise, or null when
+ *  there is none (no await, so a turn with nothing owed starts as before). */
+export function sessionTurnPrelude(sessionId) {
+  if (!prelude || !sessionId) return null;
+  return prelude(String(sessionId)) || null;
+}

package/src/runtime/shared/tool-execution-contract.mjs

@@ -195,6 +195,8 @@ const TRANSCRIPT_HIDDEN_CONTROL_TOOL_NAMES = new Set([
   'update_goal',
   'load_tool',
   'tool_search',
+  // A bot's reaction shows as its emoji under the user's message, not as a card.
+  'react',
 ]);
 // Skill loads are visible cards EXCEPT for built-in skills: those ride a
 // built-in feature whose own card (Browser Use, Document work, ...) follows

package/src/runtime/shared/tool-result-summary.mjs

@@ -526,20 +526,7 @@ function summarizeCodeGraphResult({ text, translate }) {
   return null;
 }
 
-function summarizeFetchResult({ text, trimmed, args, normalized, translate }) {
-  // Channel `fetch` (Discord message fetch — args carry channel/messageId/limit,
-  // never url/uri) is not a WEB fetch: the status/size probes would miss and
-  // the result fall to raw JSON, so it takes the generic JSON/text summarizer.
-  if (normalized === 'fetch') {
-    const a = parseToolArgs(args);
-    const isChannelFetch =
-      !firstText(a.url, a.uri) && Boolean(firstText(a.channel, a.channelId, a.chatId, a.messageId) || a.limit != null);
-    if (isChannelFetch) {
-      const n = countNonEmptyLines(text);
-      if (trimmed && looksLineOriented(text) && n > 0) return countLabel(translate, n, 'message');
-      return summarizeGenericResult(text, translate);
-    }
-  }
+function summarizeFetchResult({ text }) {
   // Status: require a status-like context (HTTP NNN, "Status: NNN",
   // or "NNN OK"/"NNN Not Found") rather than any bare 3-digit number.
   const status =

package/src/runtime/shared/transcript-metadata.mjs

@@ -2,6 +2,7 @@
 // These pure helpers keep live rows, persisted messages and restored rows on
 // the same field contract without rewriting older display-only transcripts.
 import { displayModelName } from './model-display.mjs';
+import { botChainOf } from './bot-hops.mjs';
 import { routineTriggerField } from './routine-trigger.mjs';
 
 export function transcriptRouteMetadataFields(value) {
@@ -90,6 +91,11 @@ export function persistedUserTranscriptMetadata(value) {
     ...transcriptSourceFields(value),
     // Bot-to-bot chain position of a bot's message (session-runtime/bot-hops.mjs).
     ...(Number.isInteger(value.hop) && value.hop > 0 ? { hop: value.hop } : {}),
+    // The bots that handed this message on, sender last (bot-hops.mjs botChainOf).
+    ...botChainField(value.botChain),
+    // A group-room member turn: the newest user row of the room log its prompt
+    // shows (message-reactions.mjs counts a reaction only on that row).
+    ...(typeof value.roomRow === 'string' && value.roomRow ? { roomRow: value.roomRow } : {}),
     // The turn's change-record key (the outer prompt id), so a restored user
     // row still addresses its turn's Undo/Reapply.
     ...(typeof value.checkpointId === 'string' && value.checkpointId ? { checkpointId: value.checkpointId } : {}),
@@ -104,6 +110,11 @@ export function persistedUserTranscriptMetadata(value) {
   };
 }
 
+function botChainField(value) {
+  const bots = botChainOf(value);
+  return bots.length ? { botChain: bots } : {};
+}
+
 function submissionIdsField(value) {
   const ids = Array.isArray(value) ? value.filter((id) => typeof id === 'string' && id) : [];
   return ids.length ? { submissionIds: ids } : {};
@@ -125,6 +136,33 @@ export function transcriptAttachmentFields(value) {
   return attachmentsField(value?.attachments);
 }
 
+const REACTOR_ID = /^[A-Za-z0-9._-]{1,80}$/;
+const REACTION_EMOJI_MAX_LENGTH = 16;
+
+/**
+ * The bots' reactions on a user message (`meta.transcript.reactions`):
+ * `[{ agentId, emoji, at }]`, one per bot, in the order they were left.
+ * Malformed entries and a bot's repeats are dropped.
+ */
+export function normalizeMessageReactions(value) {
+  if (!Array.isArray(value)) return [];
+  const out = [];
+  for (const raw of value) {
+    const agentId = typeof raw?.agentId === 'string' ? raw.agentId : '';
+    const emoji = typeof raw?.emoji === 'string' ? raw.emoji : '';
+    if (!REACTOR_ID.test(agentId) || !emoji || emoji.length > REACTION_EMOJI_MAX_LENGTH) continue;
+    if (out.some((entry) => entry.agentId === agentId)) continue;
+    out.push({ agentId, emoji, ...(Number.isFinite(raw.at) ? { at: raw.at } : {}) });
+  }
+  return out;
+}
+
+/** The `reactions` field of a transcript row (absent when there are none). */
+export function transcriptReactionsField(value) {
+  const reactions = normalizeMessageReactions(value?.reactions);
+  return reactions.length ? { reactions } : {};
+}
+
 export function persistedAssistantTranscriptMetadata(value, fallbackAt = Date.now()) {
   if (!value || typeof value !== 'object') return null;
   const candidateAt = Number(value.assistantAt);

package/src/runtime/shared/user-data-guard.mjs

@@ -438,13 +438,41 @@ const ensuredDataDirs = new Set();
  * data dir per process.
  */
 export function ensureUserDataInitialized(dataDir) {
-  if (!dataDir) return;
+  if (!dataDir || skipBackups()) return;
   const key = normalizeDataDir(dataDir);
   if (ensuredDataDirs.has(key)) return;
-  if (!hasUserDataInitMarker(dataDir)) backupUserData(dataDir, 'initial-snapshot');
+  // The marker alone is no proof: a first snapshot whose manifest failed left
+  // it behind. Only a published backup of this incarnation counts, so a failed
+  // or interrupted one is taken again by the next read or restart.
+  if (!hasPublishedBackup(dataDir)) {
+    backupUserData(dataDir, 'initial-snapshot');
+    if (!hasPublishedBackup(dataDir)) return;
+  }
   ensuredDataDirs.add(key);
 }
 
+/** Whether this data dir's scope holds a published backup of its current
+ *  incarnation (marker instanceId). A transient manifest read failure throws. */
+function hasPublishedBackup(dataDir) {
+  const instanceId = readInitInstanceId(dataDir);
+  if (!instanceId) return false;
+  const key = normalizeDataDir(dataDir);
+  const scopeDir = scopeDirFor(dataDir);
+  return listBackupDirsNewestFirst(scopeDir).some((name) => {
+    try {
+      const manifest = JSON.parse(readFileSync(manifestPath(scopeDir, name), 'utf8'));
+      return (
+        typeof manifest?.dataDir === 'string' &&
+        normalizeDataDir(manifest.dataDir) === key &&
+        manifest.instanceId === instanceId
+      );
+    } catch (error) {
+      if (isAbsentBackupError(error)) return false;
+      throw error;
+    }
+  });
+}
+
 function skipBackups() {
   return process.env.MIXDOG_SKIP_USER_DATA_BACKUP === '1' || process.env.MIXDOG_SKIP_USER_DATA_BACKUP === 'true';
 }

package/src/runtime/shared/worktrees/activity-gate.mjs

@@ -15,9 +15,11 @@ const overlaps = (a, b) => isWithin(a, b) || isWithin(b, a);
 /**
  * The admission policy's external exception: a linked checkout Mixdog did not
  * create (not a project's main folder, not a registered managed worktree) is
- * never lock-blocked. Management takes no lease on it and its readers are
- * admitted whatever is held elsewhere; its running readers still refuse a
- * management action that touches it.
+ * not lock-blocked by what is held elsewhere. Management takes no lease on it
+ * and its readers are admitted whatever is held outside it; its running
+ * readers still refuse a management action that touches it. A management lease
+ * published inside the checkout itself (another profile, or a registry
+ * recovered empty) still refuses its readers.
  */
 export function isExternalCheckout(folder) {
   const layout = findGitLayout(folder, { strict: true });
@@ -291,7 +293,8 @@ function release(commonDir, token) {
 
 /**
  * Readers share a checkout freely. Null means a management writer currently
- * owns it; a reader in an external checkout is never held back. Throws
+ * owns it; a reader in an external checkout is admitted whatever is held
+ * outside that checkout, but refused by a management lease inside it. Throws
  * `workspace-admission-unreadable` when the ledger cannot be read, was
  * written by a newer build, or the grant could not be made durable in both
  * copies: no work may run unrecorded.
@@ -304,8 +307,12 @@ export function tryAdmitWorkspaceActivity(sessionId, cwd, { pid = process.pid, k
   const path = canonicalPath(cwd);
   const token = randomUUID();
   const lease = { kind, sessionId, pid, token, path };
+  // External is this profile's registry view: management another profile (or
+  // a registry recovered empty) published inside this very checkout still holds.
+  const checkout = canonicalPath(layout.topLevel);
+  const held = (other) => (external ? isWithin(checkout, other.path) : overlaps(other.path, path));
   const admitted = mutate(layout.commonDir, (leases) => {
-    if (!external && leases.some((other) => other.kind === 'management' && overlaps(other.path, path))) return false;
+    if (leases.some((other) => other.kind === 'management' && held(other))) return false;
     leases.push(lease);
     return true;
   });

package/src/runtime/shared/worktrees/test-support.mjs

@@ -1,6 +1,7 @@
 // Temporary git repositories and data dirs for the worktree suites.
+import '../git-direct.test-support.mjs';
 import { execFileSync } from 'node:child_process';
-import { chmodSync, cpSync, existsSync, mkdtempSync, rmSync, writeFileSync, mkdirSync } from 'node:fs';
+import { appendFileSync, chmodSync, cpSync, existsSync, mkdtempSync, rmSync, writeFileSync, mkdirSync } from 'node:fs';
 import { tmpdir } from 'node:os';
 import { dirname, join } from 'node:path';
 
@@ -67,9 +68,13 @@ function repoTemplate(commit) {
   if (existing && existsSync(existing)) return existing;
   const dir = tempDir('mixdog-wt-template-');
   git(dir, 'init', '-q', '-b', 'main');
-  git(dir, 'config', 'user.name', 'Mixdog Test');
-  git(dir, 'config', 'user.email', 'mixdog@example.com');
-  git(dir, 'config', 'core.autocrlf', 'false');
+  // One config write instead of a `git config` process per key. Auto
+  // maintenance is off, so no commit (the test's or a merge's) starts a
+  // `git maintenance run` child.
+  appendFileSync(
+    join(dir, '.git', 'config'),
+    '[user]\n\tname = Mixdog Test\n\temail = mixdog@example.com\n[core]\n\tautocrlf = false\n[maintenance]\n\tauto = false\n'
+  );
   if (commit) commitFile(dir, 'README.md', 'hello\n', 'initial');
   templates.set(commit, dir);
   return dir;

package/src/runtime/terminal-bridge/client.mjs

@@ -262,10 +262,19 @@ function oldestRowsOverCap(rows) {
 function formatRun(value) {
   const cursor = Number.isSafeInteger(value?.cursor) ? value.cursor : 0;
   const tab = value?.tab !== undefined ? ` tab=${value.tab}` : '';
+  let where = '';
+  if (value?.shown === true) where = 'The terminal is shown in the desktop window.';
+  else if (value?.shown === false) {
+    where =
+      'The terminal is not shown in the desktop window right now (a paired phone may still show it); it keeps running.';
+  }
   return [
     `Terminal run: ${value?.id || `tab ${value?.tab}`} · ${tabLabel(value)} · cursor=${cursor}`,
     `Command sent to the side terminal. Read its output with action=read${tab} since=${cursor}.`,
-  ].join('\n');
+    where,
+  ]
+    .filter(Boolean)
+    .join('\n');
 }
 
 async function readJson(response) {

package/src/runtime/visualize-bridge/client.mjs

@@ -6,6 +6,7 @@
  * Response: { ok:true, text, tabs?, path? } | { ok:false, error }.
  */
 import { bridgeDiscoveryChanged, readBridgeDiscovery, readBridgeDiscoveryDetail } from '../bridge-discovery.mjs';
+import { visualizeOwnerToolMeta } from './tool-meta.mjs';
 
 const DISCOVERY_FILE = 'visualize-bridge.json';
 const REQUEST_TIMEOUT_MS = 30_000;
@@ -38,12 +39,14 @@ export function validateVisualizeArgs(args) {
   if (!args || typeof args !== 'object' || Array.isArray(args)) {
     return { ok: false, error: 'visualize arguments must be an object' };
   }
-  if (!ACTIONS.has(args.action)) return { ok: false, error: 'action must be open, close, annotate, capture, export, check, or inspect' };
+  if (!ACTIONS.has(args.action))
+    return { ok: false, error: 'action must be open, close, annotate, capture, export, check, or inspect' };
   const input = args.input ?? {};
   if (typeof input !== 'object' || Array.isArray(input)) return { ok: false, error: 'input must be an object' };
   if (args.action === 'open' && input.content != null) {
     const content = input.content;
-    if (input.targets != null) return { ok: false, error: 'open takes either input.targets or input.content, not both' };
+    if (input.targets != null)
+      return { ok: false, error: 'open takes either input.targets or input.content, not both' };
     if (typeof content !== 'object' || Array.isArray(content)) {
       return { ok: false, error: 'open input.content must be { kind, source, title? }' };
     }
@@ -79,7 +82,10 @@ export function validateVisualizeArgs(args) {
       return { ok: false, error: 'open input.version must be a positive integer (a kept version number)' };
     }
   }
-  if (['annotate', 'capture', 'export', 'check', 'inspect'].includes(args.action) && (typeof input.tab !== 'string' || !input.tab)) {
+  if (
+    ['annotate', 'capture', 'export', 'check', 'inspect'].includes(args.action) &&
+    (typeof input.tab !== 'string' || !input.tab)
+  ) {
     return { ok: false, error: `${args.action} requires input.tab` };
   }
   if (args.action === 'inspect') {
@@ -92,7 +98,10 @@ export function validateVisualizeArgs(args) {
         !sized(viewport.width, 200, 3000) ||
         (viewport.height != null && !sized(viewport.height, 200, 4000))
       ) {
-        return { ok: false, error: 'inspect input.viewport must be { width: 200-3000, height?: 200-4000 } in whole pixels' };
+        return {
+          ok: false,
+          error: 'inspect input.viewport must be { width: 200-3000, height?: 200-4000 } in whole pixels',
+        };
       }
     }
     if (selector != null && (typeof selector !== 'string' || !selector.trim() || selector.length > 500)) {
@@ -103,7 +112,8 @@ export function validateVisualizeArgs(args) {
     return { ok: false, error: 'capture requires input.output ending in .png' };
   }
   if (args.action === 'export') {
-    if (input.format !== 'png' && input.format !== 'pdf') return { ok: false, error: 'export requires input.format png or pdf' };
+    if (input.format !== 'png' && input.format !== 'pdf')
+      return { ok: false, error: 'export requires input.format png or pdf' };
     if (typeof input.output !== 'string' || !new RegExp('\\.' + input.format + '$', 'i').test(input.output.trim())) {
       return { ok: false, error: `export requires input.output ending in .${input.format}` };
     }
@@ -160,7 +170,11 @@ export async function executeVisualizeTool(args, options = {}) {
   for (let attempt = 0; attempt < 2; attempt += 1) {
     const timeout = AbortSignal.timeout(validated.action === 'export' ? EXPORT_REQUEST_TIMEOUT_MS : REQUEST_TIMEOUT_MS);
     try {
-      result = await requestBridge(discovery, payload, options.signal ? AbortSignal.any([timeout, options.signal]) : timeout);
+      result = await requestBridge(
+        discovery,
+        payload,
+        options.signal ? AbortSignal.any([timeout, options.signal]) : timeout
+      );
       break;
     } catch (error) {
       if (error?.name === 'TimeoutError') return toolError('visualize bridge timed out');
@@ -175,7 +189,12 @@ export async function executeVisualizeTool(args, options = {}) {
   }
   const { body, status } = result;
   if (!body?.ok) {
-    return toolError(String(body?.error || `visualize bridge request failed (HTTP ${status})`).replace(/^Error:\s*/, ''));
+    return toolError(
+      String(body?.error || `visualize bridge request failed (HTTP ${status})`).replace(/^Error:\s*/, '')
+    );
   }
-  return { content: [{ type: 'text', text: formatSuccess(body) }] };
+  // The host ran it for another session's panel: the owner rides as a field
+  // (toolMeta, kept with the stored result), never only as prose.
+  const toolMeta = visualizeOwnerToolMeta(body.ownerSessionId);
+  return { content: [{ type: 'text', text: formatSuccess(body) }], ...(toolMeta ? { toolMeta } : {}) };
 }

package/src/runtime/visualize-bridge/tool-defs.mjs

@@ -10,8 +10,8 @@ export const TOOL_DEFS = [
     name: 'visualize',
     title: 'Mixdog Visualize',
     description:
-      "Show the user any artifact you produced or changed (mockups, docs, decks, sheets, PDFs, images, video, local dev pages) in the desktop side panel beside the chat. Panel tabs auto-reload when a file changes, so re-opening after edits is unnecessary. " +
-      'open: input.targets (1-3 file paths, 2-3 = side-by-side comparison; or a single http(s) URL alone, never mixed with files or other URLs), optional label, optional version (show that kept version of a file tab read-only; each open/reload that changes the files keeps a version). close: optional tab (omit = all). ' +
+      'Show the user any artifact you produced or changed (mockups, docs, decks, sheets, PDFs, images, video, local dev pages) in the desktop side panel beside the chat. Panel tabs auto-reload when a file changes, so re-opening after edits is unnecessary. ' +
+      'open: input.targets (1-3 file paths, relative to the working directory or absolute anywhere on this machine; 2-3 = side-by-side comparison; or a single http(s) URL alone, never mixed with files or other URLs), optional label, optional version (show that kept version of a file tab read-only; each open/reload that changes the files keeps a version). close: optional tab (omit = all). ' +
       'annotate: tab + add [{selector,label?}] | remove [selector] | clear; HTML pages only, never edits the file. capture: tab + output (.png path). ' +
       'export: tab + format (png|pdf) + output (project-relative path ending .png/.pdf) + optional version (a kept version of the tab) + optional overwrite (true replaces an existing file, only under design/; otherwise an existing file is refused). Writes a record of the approved page inside the project and returns its project-relative path, size/dimensions and the page problems seen while rendering. A single HTML page (file, or inline html/chart) is rendered whole in a hidden window, so the tab need not be on screen (PDF: HTML pages only; PNG has a pixel cap, over it export pdf or shorten the page); any other tab exports as capture does (the displayed tab, PNG only). Same project containment as capture: links and paths outside the working directory are refused. ' +
       'check: tab; HTML pages only; waits briefly for the page to settle and returns only its runtime problems (uncaught errors, unhandled rejections, CSP violations, console errors/warnings, missing local assets). ' +
@@ -36,7 +36,8 @@ export const TOOL_DEFS = [
               items: { type: 'string' },
               minItems: 1,
               maxItems: 3,
-              description: 'open: 1-3 project-relative/absolute file paths (side by side), or exactly one http(s) URL as the only target.',
+              description:
+                'open: 1-3 file paths (side by side), relative to the working directory or absolute in any folder, or exactly one http(s) URL as the only target.',
             },
             content: {
               type: 'object',
@@ -57,7 +58,8 @@ export const TOOL_DEFS = [
             version: {
               type: 'integer',
               minimum: 1,
-              description: 'open (file tabs): kept version number to show read-only instead of the live files. export: kept version number to render instead of the live page.',
+              description:
+                'open (file tabs): kept version number to show read-only instead of the live files. export: kept version number to render instead of the live page.',
             },
             tab: { type: 'string', description: 'Tab id from open (close: omit for all).' },
             add: {
@@ -72,9 +74,16 @@ export const TOOL_DEFS = [
             },
             remove: { type: 'array', items: { type: 'string' }, description: 'annotate: selectors to un-outline.' },
             clear: { type: 'boolean', description: 'annotate: remove all outlines.' },
-            output: { type: 'string', description: 'capture: project path ending .png. export: project path ending .png or .pdf (matching format).' },
+            output: {
+              type: 'string',
+              description:
+                'capture: project path ending .png. export: project path ending .png or .pdf (matching format).',
+            },
             format: { type: 'string', enum: ['png', 'pdf'], description: 'export: file format.' },
-            overwrite: { type: 'boolean', description: 'export: replace an existing output file; honored only for paths under design/.' },
+            overwrite: {
+              type: 'boolean',
+              description: 'export: replace an existing output file; honored only for paths under design/.',
+            },
             viewport: {
               type: 'object',
               properties: {
@@ -83,9 +92,14 @@ export const TOOL_DEFS = [
               },
               required: ['width'],
               additionalProperties: false,
-              description: 'inspect: size to lay the page out at (height defaults to 800); omit for the panel\'s current size.',
+              description:
+                "inspect: size to lay the page out at (height defaults to 800); omit for the panel's current size.",
+            },
+            selector: {
+              type: 'string',
+              maxLength: 500,
+              description: 'inspect: CSS selector scoping the read-out to one subtree.',
             },
-            selector: { type: 'string', maxLength: 500, description: 'inspect: CSS selector scoping the read-out to one subtree.' },
           },
           additionalProperties: false,
         },

package/src/runtime/visualize-bridge/tool-meta.d.mts

@@ -0,0 +1,5 @@
+export declare const VISUALIZE_OWNER_META_CODE: 'visualize_owner';
+export declare function visualizeOwnerMetaSessionId(value: unknown): string;
+export declare function visualizeOwnerToolMeta(
+  ownerSessionId: unknown
+): { code: typeof VISUALIZE_OWNER_META_CODE; missing: string[]; ownerSessionId: string } | undefined;

package/src/runtime/visualize-bridge/tool-meta.mjs

@@ -0,0 +1,22 @@
+/**
+ * The structured twin of a `visualize` result (the tool result's `toolMeta`,
+ * kept with the stored message and restored onto its transcript item): the
+ * desktop host ran the call for another session's work (a sub-agent, a room
+ * member) and keeps its tabs in that owner conversation's panel. Chat cards
+ * read the owner from here, never from the result text.
+ */
+export const VISUALIZE_OWNER_META_CODE = 'visualize_owner';
+
+const SESSION_ID = /^[A-Za-z0-9_.:-]{1,128}$/;
+
+/** A session id fit for `toolMeta.ownerSessionId`; '' for anything else. */
+export function visualizeOwnerMetaSessionId(value) {
+  return typeof value === 'string' && SESSION_ID.test(value) ? value : '';
+}
+
+/** The `toolMeta` of a result run for `ownerSessionId`'s panel; undefined when
+ *  the id is not a session id. */
+export function visualizeOwnerToolMeta(ownerSessionId) {
+  const id = visualizeOwnerMetaSessionId(ownerSessionId);
+  return id ? { code: VISUALIZE_OWNER_META_CODE, missing: [], ownerSessionId: id } : undefined;
+}

package/src/runtime/web-search/lib/fetch-pipeline.mjs

@@ -81,7 +81,7 @@ function fetchFailureKind(error) {
 
 export async function runFetchPipeline(
   url,
-  { http, browser, signal, timeoutMs = 30000, hostPacer = pacer, onAttempt = () => {} } = {}
+  { http, browser, signal, timeoutMs = 30000, hostPacer = pacer, onAttempt = () => {}, sleep: pause = sleep } = {}
 ) {
   const budget = Number.isFinite(timeoutMs) && timeoutMs > 0 ? timeoutMs : 30000;
   const deadline = Date.now() + budget;
@@ -150,7 +150,7 @@ export async function runFetchPipeline(
         if (!transient || retry === 1) break;
         const delay = Math.max(400, error.retryAfterMs || 0);
         if (Date.now() + delay >= deadline) throw error;
-        await sleep(delay, undefined, { signal: overall });
+        await pause(delay, undefined, { signal: overall });
       }
     }
     // Rendering does not fix a rate limit or a failing upstream server.