mixdog 1.3.4 → 1.4.0

package/src/session-runtime/setup-tool/settings-contract.mjs

@@ -38,11 +38,11 @@ export const SETUP_EXTENDED_ACTION_FIELDS = Object.freeze({
   add_hook_rule: 'hookRule',
   set_hook_rule_enabled: 'ruleIndex enabled',
   delete_hook_rule: 'ruleIndex',
-  set_media_default: 'kind lane model?',
+  set_media_default: 'kind lane model? accountId?',
 });
 
 /** Mirrors RULE_ACTIONS in services/hook-bus/rule-store.mjs. */
-export const SETUP_HOOK_RULE_ACTIONS = Object.freeze(['allow', 'deny', 'block', 'modify', 'rewrite', 'ask']);
+const SETUP_HOOK_RULE_ACTIONS = Object.freeze(['allow', 'deny', 'block', 'modify', 'rewrite', 'ask']);
 
 /** Mirrors ACTIVITY_RAIL_PIN_IDS in apps/desktop/src/shared/activity-rail-pins.ts. */
 export const SETUP_ACTIVITY_RAIL_PIN_IDS = Object.freeze([
@@ -177,6 +177,10 @@ export const SETUP_EXTENDED_PROPERTIES = Object.freeze({
   entry: object(
     {
       name: text,
+      newName: {
+        ...text,
+        description: 'Schedule only, with overwrite: rename the schedule `name` to this; its history is kept.',
+      },
       description: text,
       instructions: text,
       time: { ...text, description: 'Schedule cron expression. Mutually exclusive with at.' },
@@ -220,7 +224,6 @@ export const SETUP_EXTENDED_PROPERTIES = Object.freeze({
   desktop: object({
     keepAwake: boolean,
     runInBackground: boolean,
-    turnNotifications: boolean,
     usagePinned: boolean,
     usageRailShortLong: boolean,
     usageAccountsExpanded: boolean,
@@ -228,12 +231,37 @@ export const SETUP_EXTENDED_PROPERTIES = Object.freeze({
     usageRailSlotsAll: boolean,
     computerObserveOnly: boolean,
     browserAutoSignIn: boolean,
+    saveChatLogins: boolean,
     notificationVolume: {
       type: 'integer',
       minimum: 0,
       maximum: 400,
       description: 'Windows only: notification sound volume percent.',
     },
+    botOverlay: object(
+      {
+        enabled: {
+          ...boolean,
+          description: 'Show the representative bot overlay; refused while no representative bot exists.',
+        },
+        position: {
+          type: 'string',
+          enum: ['pinned', 'pinnedHere', 'free', 'onScreen'],
+          description:
+            'pinned = pin above the message box (default); pinnedHere = pin here; free = free in the app window; onScreen = free on screen.',
+        },
+        keepAbove: { ...boolean, description: 'Keep above other windows (default off).' },
+        collapsed: { ...boolean, description: 'Collapse the bubble so only the bot shows (default off).' },
+        autoAdvance: { ...boolean, description: 'Auto-advance long replies (default on).' },
+        autoClose: { ...boolean, description: 'Close replies automatically once read (default on).' },
+        scale: {
+          type: 'integer',
+          enum: [50, 60, 70, 80, 90, 100, 110, 120, 130, 140, 150, 160, 170, 180, 190, 200],
+          description: 'Bot size in percent (default 100).',
+        },
+      },
+      []
+    ),
   }),
   appearance: object({
     theme: { type: 'string', enum: ['system', 'dark', 'white'] },
@@ -242,6 +270,35 @@ export const SETUP_EXTENDED_PROPERTIES = Object.freeze({
       description: 'Desktop UI language id from status appearance; independent of profile language.',
     },
     sidePanels: { type: 'string', enum: ['close-left', 'close-right', 'close-both', 'keep-open'] },
+    sidePanelPosition: {
+      type: 'string',
+      enum: ['right', 'bottom', 'auto'],
+      description:
+        'Where the side dock sits on desktop: beside the chat, below it, or by window shape (default right).',
+    },
+    timeFormat: {
+      type: 'string',
+      enum: ['system', '12h', '24h'],
+      description: 'Clock style for every time of day shown (default system = the UI language own clock).',
+    },
+    uiScale: {
+      type: 'number',
+      minimum: 0.85,
+      maximum: 1.2,
+      description: 'UI size multiplier, 0.85-1.2 in steps of 0.05 (default 1).',
+    },
+    codeSize: {
+      type: 'integer',
+      minimum: 10,
+      maximum: 20,
+      description: 'Code text size in px, 10-20 (default 13).',
+    },
+    codeLigatures: { ...boolean, description: 'Join symbols such as => into one glyph in code (default on).' },
+    chatTextSize: {
+      type: 'string',
+      enum: ['small', 'default', 'large', 'extra-large'],
+      description: 'Conversation and composer text size (default default).',
+    },
     markdownDefaultView: { type: 'string', enum: ['preview', 'rich', 'source'] },
     linkPreview: boolean,
     toolActivityExpansion: { type: 'string', enum: ['collapsed', 'commands', 'all'] },
@@ -290,10 +347,15 @@ export const SETUP_EXTENDED_PROPERTIES = Object.freeze({
     minimum: 0,
     description: 'set_hook_rule_enabled/delete_hook_rule: rule index from status hooks.',
   },
-  lane: { ...nonBlank, description: 'set_media_default: lane id from the media catalog.' },
+  lane: {
+    ...text,
+    description:
+      'set_media_default: lane id from the media catalog to pin as the default generator for the kind; "" clears the pin (back to Auto).',
+  },
   model: {
     ...nonBlank,
-    description: 'set_media_default: model id offered by the lane for the kind; omitted = the lane default.',
+    description:
+      'set_media_default: model id offered by the lane for the kind; omitted = the lane default. set_model_preferences: model id of the provider.',
   },
   project: object({ path: text, alias: text }, ['path']),
   projectPath: { ...text, description: 'Exact registered Project root.' },
@@ -306,7 +368,7 @@ export const SETUP_EXTENDED_PROPERTIES = Object.freeze({
   riskAccepted: {
     ...boolean,
     description:
-      "set_developer_option: the user's explicit acceptance of the option warning; required to enable an option that has one.",
+      "set_developer_option: the user's explicit acceptance of the option warning; required to enable an option that has one. Exception: allowAllActions (allow all actions except payments and permanent deletes) can only be turned on by the person in the desktop app; it is rejected regardless of riskAccepted, and remote enablement is rejected too.",
   },
 });
 

package/src/session-runtime/setup-tool/tool-defs.mjs

@@ -6,9 +6,17 @@ import {
 } from './settings-contract.mjs';
 import { MEDIA_KINDS } from '../../runtime/media/tool-defs.mjs';
 import { INSTRUCTION_FILES_MODES } from '../../runtime/shared/instruction-files-mode.mjs';
+import {
+  DEFAULT_HEARTBEAT_INTERVAL_MINUTES,
+  HEARTBEAT_INTERVAL_CHOICES,
+} from '../../runtime/shared/heartbeat-interval.mjs';
 import { AUTO_EFFORT_BASES } from '../../runtime/agent/orchestrator/providers/auto-effort.mjs';
 import { WORKTREE_NEW_TASK_DEFAULTS } from '../../runtime/shared/worktrees/settings.mjs';
 import { CONNECTOR_IDS } from '../../runtime/shared/connector-catalog.mjs';
+import { COMPACTION_SUMMARY_MODES } from '../../runtime/agent/orchestrator/session/compact/summary-mode.mjs';
+import { ACTION_KINDS } from '../../runtime/agent/orchestrator/session/human-gate/outbound-policy.mjs';
+import { PERMISSION_MODES } from '../../runtime/agent/orchestrator/session/human-gate/store.mjs';
+import { CONNECTOR_PERMISSIONS } from '../../runtime/agent/orchestrator/mcp/agent-connectors.mjs';
 
 /** Built-in `setup` tool: the model's handle on a Mixdog user's persisted
  *  configuration. The description is a contract only; how to use each action
@@ -99,6 +107,12 @@ export const SETUP_ACTION_FIELDS = Object.freeze({
   delete_local_model: 'confirmationToken',
   set_system_shell: 'command',
   set_auto_update: 'enabled',
+  set_ai_session_titles: 'enabled',
+  set_quota_auto_resume: 'enabled',
+  set_model_preferences: 'provider model hidden? favorite?',
+  set_heartbeat_enabled: 'enabled',
+  set_heartbeat_interval: 'minutes',
+  set_reactions_enabled: 'enabled',
   forget_provider_auth: 'name accountId?',
   set_provider_account: 'name providerAccount',
   add_mcp_server: 'server',
@@ -115,6 +129,19 @@ export const SETUP_ACTION_FIELDS = Object.freeze({
   enable_plugin_mcp: 'name',
   connect_connector: 'connector',
   set_worktree_settings: 'worktree',
+  reset_route_fallback: 'sessionId? agent?',
+  continue_in_model: 'sessionId route',
+  schedule_quota_resume: 'sessionId',
+  cancel_quota_resume: 'sessionId',
+  set_cache_warming_enabled: 'enabled',
+  read_agent_settings: 'agent',
+  read_project_connectors: 'projectPath',
+  set_agent_permission: 'agent actionKind permissionMode',
+  set_agent_connector: 'agent name enabled',
+  set_agent_connector_tool: 'agent name tool permission',
+  set_project_connector: 'projectPath name enabled',
+  restore_definition: 'definitionKind name',
+  set_bot_order: 'botOrder',
   ...SETUP_EXTENDED_ACTION_FIELDS,
 });
 
@@ -130,6 +157,7 @@ export const SETUP_BUILTIN_TOGGLE_FEATURES = Object.freeze([
   'computer',
   'voice',
   'visualize',
+  'media',
 ]);
 
 const ROUTE_SCHEMA = {
@@ -163,7 +191,7 @@ const ROUTE_SCHEMA = {
 ROUTE_SCHEMA.properties.fallbacks = {
   type: 'array',
   description:
-    'Lead (set_route), agent (bots included) and Web Search routes only: ordered fallback models tried when the model hits its usage limit or is unavailable; [] clears the list.',
+    'Lead (set_route), agent (bots included) and Web Search routes only: ordered fallback models tried when the model hits its usage limit or is unavailable, each on another provider; [] clears the list. Running sessions on that route read it at their next hop.',
   items: {
     type: 'object',
     additionalProperties: false,
@@ -212,7 +240,11 @@ export const SETUP_TOOL_DEFS = Object.freeze([
           description:
             'Partial route update; omitted fields are preserved. Agent or Web Search provider "" restores Main inheritance. contextPercent and contextTokens apply to Main and agent routes only.',
         },
-        agent: { type: 'string', description: 'set_agent_route: agent id.' },
+        agent: {
+          type: 'string',
+          description:
+            'Agent or bot id (lead = Mixy): set_agent_route, read_agent_settings, set_agent_permission, set_agent_connector(_tool); reset_route_fallback: every chat of that bot.',
+        },
         workflow: { type: 'string', description: 'set_workflow: pack id.' },
         style: { type: 'string', description: 'set_output_style: style id.' },
         profile: {
@@ -248,13 +280,33 @@ export const SETUP_TOOL_DEFS = Object.freeze([
           properties: {
             mainBufferTokens: { type: 'integer', minimum: 0 },
             mainBufferPercent: { type: 'number', minimum: 0, maximum: 100 },
+            onModelChange: {
+              type: 'boolean',
+              description: 'Auto-compact a conversation on its current model before it switches to another one.',
+            },
+            summaryMode: {
+              type: 'string',
+              enum: [...COMPACTION_SUMMARY_MODES],
+              description:
+                'Which model writes compaction summaries: smart (default), maintainer (the Maintainer), self (the conversation model).',
+            },
           },
-          description: 'set_compaction: reserved Main context budget. Give tokens OR percent, not both.',
+          description:
+            'set_compaction: reserved Main context budget (give tokens OR percent, not both), onModelChange and summaryMode; read back with status compaction.',
         },
         enabled: {
           type: 'boolean',
           description:
-            'Boolean setters (set_*_enabled, set_compaction, set_auto_update, set_mcp_enabled, set_plugin_enabled).',
+            'Boolean setters (set_*_enabled, set_compaction, set_auto_update, set_ai_session_titles, set_quota_auto_resume, set_heartbeat_enabled, set_mcp_enabled, set_plugin_enabled, set_agent_connector, set_project_connector).',
+        },
+        provider: { type: 'string', description: 'set_model_preferences: provider id.' },
+        hidden: {
+          type: 'boolean',
+          description: 'set_model_preferences: false lists the model in /model, true hides it; omitted = unchanged.',
+        },
+        favorite: {
+          type: 'boolean',
+          description: 'set_model_preferences: favorite star on or off; omitted = unchanged.',
         },
         instructionFiles: {
           type: 'string',
@@ -270,12 +322,12 @@ export const SETUP_TOOL_DEFS = Object.freeze([
         },
         name: {
           type: 'string',
-          description: `set_builtin_enabled: ${SETUP_BUILTIN_TOGGLE_FEATURES.join('|')}; install_builtin also accepts memory. Memory toggles use set_memory_enabled. revoke_linked_device: client id from status connection, not its display name; set_developer_option: option id from status developer; read_definition/delete_definition: the definition id; reconnect_mcp: optional MCP server name (omit for all); else MCP/plugin/provider id.`,
+          description: `set_builtin_enabled: ${SETUP_BUILTIN_TOGGLE_FEATURES.join('|')}; install_builtin also accepts memory. Memory toggles use set_memory_enabled. revoke_linked_device: client id from status connection, not its display name; set_developer_option: option id from status developer; read_definition/delete_definition: the definition id; reconnect_mcp: optional MCP server name (omit for all); set_agent_connector(_tool)/set_project_connector: connector (MCP server) id from read_agent_settings; restore_definition: archived agent id; else MCP/plugin/provider id.`,
         },
         accountId: {
           type: 'string',
           description:
-            'forget_provider_auth: OAuth account id from status providers with detail:true; required when the provider has several accounts.',
+            "forget_provider_auth: OAuth account id from status providers with detail:true; required when the provider has several accounts. set_media_default: optional account of the OAuth lane to pin; omitted = the lane provider's selected account.",
         },
         providerAccount: {
           type: 'object',
@@ -323,6 +375,11 @@ export const SETUP_TOOL_DEFS = Object.freeze([
           maximum: 86400,
           description: 'set_local_idle_ttl: unload after this many idle seconds, 0 disables; default 3600.',
         },
+        minutes: {
+          type: 'integer',
+          enum: [...HEARTBEAT_INTERVAL_CHOICES],
+          description: `set_heartbeat_interval: minutes between Mixy's heartbeat checks; default ${DEFAULT_HEARTBEAT_INTERVAL_MINUTES}.`,
+        },
         query: { type: 'string', description: 'search_local_models: Hugging Face GGUF search query.' },
         repository: { type: 'string', description: 'inspect_hf_model: public Hugging Face owner/model repository.' },
         filename: {
@@ -400,6 +457,35 @@ export const SETUP_TOOL_DEFS = Object.freeze([
           },
           description: 'set_worktree_settings: only the given fields change.',
         },
+        sessionId: {
+          type: 'string',
+          description:
+            'reset_route_fallback (default: this session), continue_in_model, schedule_quota_resume, cancel_quota_resume: session id from status model/agents or the session tool. The last three take another session.',
+        },
+        actionKind: {
+          type: 'string',
+          enum: [...ACTION_KINDS],
+          description: "set_agent_permission: the action kind row of the agent's permission table.",
+        },
+        permissionMode: {
+          type: 'string',
+          enum: [...PERMISSION_MODES],
+          description:
+            'set_agent_permission: block or ask; allow (and any change that lets an agent do more without asking) is made by the person in the desktop app.',
+        },
+        tool: { type: 'string', description: 'set_agent_connector_tool: tool name within the connector `name`.' },
+        permission: {
+          type: 'string',
+          enum: [...CONNECTOR_PERMISSIONS],
+          description: 'set_agent_connector_tool: needs_approval or disabled; auto is made in the desktop app.',
+        },
+        botOrder: {
+          type: 'array',
+          items: { type: 'string', minLength: 1, pattern: '\\S' },
+          maxItems: 500,
+          description:
+            'set_bot_order: bot ids in display order (Mixy is always first and not listed); [] = default order.',
+        },
         ...SETUP_EXTENDED_PROPERTIES,
       },
     },

package/src/session-runtime/task-session-route.mjs

@@ -0,0 +1,99 @@
+/**
+ * task-session-route.mjs — the model and reasoning effort a bot asks of a
+ * task session (the session tool's `model` / `effort`), checked against the
+ * provider catalog the desktop model menu lists (listProviderModels rows:
+ * provider, id, display, effortOptions).
+ */
+import { clean } from '../runtime/agent/orchestrator/runtime-core/session-text.mjs';
+import { normalizeEffortInput } from '../runtime/agent/orchestrator/runtime-core/effort.mjs';
+
+// Choices an error names: a short list, never the whole catalog.
+const CHOICE_LIMIT = 6;
+
+const lower = (value) => clean(value).toLowerCase();
+const rowId = (row) => clean(row.id || row.model);
+const sameModel = (row, route) => row.provider === route.provider && lower(rowId(row)) === lower(route.model);
+const effortsOf = (row) => (Array.isArray(row?.effortOptions) ? row.effortOptions.map((option) => option.value) : []);
+const choiceLabel = (row) => `${row.display || rowId(row)} (${row.provider}/${rowId(row)})`;
+
+function choices(rows) {
+  const shown = rows.slice(0, CHOICE_LIMIT).map(choiceLabel).join('; ');
+  return rows.length > CHOICE_LIMIT ? `${shown}; … (${rows.length} total)` : shown;
+}
+
+/** An effort level word ("max") or null; "auto" is no level. */
+function effortWord(word) {
+  try {
+    return normalizeEffortInput(word);
+  } catch {
+    return null;
+  }
+}
+
+/** The catalog rows of the model menu, read through session `sessionId`'s runtime. */
+export async function readModelCatalog(service, sessionId) {
+  const result = await service.readSession({ sessionId, action: 'listProviderModels', args: [{}] });
+  return Array.isArray(result?.value) ? result.value : [];
+}
+
+/** The route of a catalog display name (case-insensitive, exact), with a
+ *  trailing effort word ("Claude Opus 5.5 max", or auto) read as the effort
+ *  only when the whole text names no model. With `explicitEffort` the word
+ *  only selects the name: the caller applies its own effort. Throws with the
+ *  choices when the text names no model or several. */
+export function routeByDisplayName(text, rows, explicitEffort = false) {
+  const wanted = lower(text);
+  const cut = wanted.lastIndexOf(' ');
+  const word = cut > 0 ? wanted.slice(cut + 1) : '';
+  const suffix = word === 'auto' || effortWord(word) ? word : null;
+  let hits = rows.filter((row) => lower(row.display) === wanted);
+  let effort = null;
+  if (!hits.length && suffix) {
+    const base = wanted.slice(0, cut).trim();
+    hits = rows.filter((row) => lower(row.display) === base);
+    effort = suffix;
+  }
+  if (!hits.length) {
+    const words = wanted.split(/\s+/).filter(Boolean);
+    const near = rows.filter((row) => words.every((word) => lower(row.display).includes(word)));
+    throw new Error(
+      `session: model "${clean(text)}" is neither a provider/model route, a preset name nor a model display name. ` +
+        `Choices: ${choices(near.length ? near : rows)}${suffix ? '. To set the reasoning effort, pass it as the effort field' : ''}`
+    );
+  }
+  const distinct = [...new Map(hits.map((row) => [`${row.provider}/${rowId(row)}`, row])).values()];
+  if (distinct.length > 1) {
+    throw new Error(`session: model "${clean(text)}" is ambiguous; use provider/model: ${choices(distinct)}`);
+  }
+  const route = { provider: distinct[0].provider, model: rowId(distinct[0]) };
+  return effort && !explicitEffort ? withEffort(route, effort, rows) : route;
+}
+
+/** `route` with the effort level `value`, checked against the levels its
+ *  model supports ("auto" clears it). A chosen level turns the route's Auto
+ *  effort off, as the menu's effort pick does, or Auto would replace it. */
+export function withEffort(route, value, rows) {
+  const level = checkEffort(value, route, rows);
+  const { effort: _previous, ...rest } = route;
+  return level ? { ...rest, effort: level, autoEffort: false } : rest;
+}
+
+/** The effort level `value` names for `route` ("auto" is null); throws with
+ *  the model's levels when it is unknown or unsupported. */
+export function checkEffort(value, route, rows) {
+  const row = rows.find((candidate) => sameModel(candidate, route));
+  const allowed = row ? effortsOf(row) : null;
+  const offer = allowed
+    ? `; ${route.provider}/${route.model} supports: auto${allowed.map((level) => `, ${level}`).join('')}`
+    : '';
+  let level;
+  try {
+    level = normalizeEffortInput(value);
+  } catch (error) {
+    throw new Error(`session: ${error.message}${offer}`);
+  }
+  if (level && allowed && !allowed.includes(level)) {
+    throw new Error(`session: effort "${level}" is not supported${offer}`);
+  }
+  return level;
+}

package/src/session-runtime/tool-policy/agent-profile-fold.mjs

@@ -19,6 +19,8 @@ import {
 } from '../../runtime/agent/orchestrator/mcp/agent-connectors.mjs';
 import { agentListEntries } from '../../runtime/agent/orchestrator/session/manager/prompt-utils.mjs';
 import { markToolSurfaceMigrated } from '../../runtime/agent/orchestrator/session/loop/tool-exposure-migration.mjs';
+import { resetBp2StableContext } from '../../runtime/agent/orchestrator/context/collect.mjs';
+import { requestPrefixIdentity } from '../../runtime/agent/orchestrator/session/thinking-binding.mjs';
 import {
   agentProfileRevision,
   leadRosterRevision,
@@ -40,15 +42,6 @@ const PROMPT_FOLD_INTENT = 'prompt_fold';
 // Cache-break intents that already rebuild the conversation's cached prefix.
 const COLD_INTENTS = new Set(['post_turn_compaction', 'manual_compaction']);
 
-// What the next request sends ahead of the conversation: the system blocks and tools.
-const promptPrefix = (session) =>
-  JSON.stringify([
-    (Array.isArray(session.messages) ? session.messages : [])
-      .filter((message) => message?.role === 'system')
-      .map((message) => message.content),
-    session.tools,
-  ]);
-
 // A bot thread built from other shipped rules than these (a release changed one).
 const rulesStale = (session) =>
   sessionModeOf(session) === AGENT_MODE && session.rulesRevision !== promptRulesRevision();
@@ -208,7 +201,10 @@ export function createAgentProfileFold({
     const config = configForSession(getConfig(), session.workflow?.id, currentMode(session));
     const staged = await stagePolicy(session, identity, config, { conversation: true });
     if (getSession?.() !== session) return false;
-    const before = promptPrefix(session);
+    const before = requestPrefixIdentity(session);
+    // BP2 (profile meta, skill manifest) from current sources too; applyPolicy
+    // re-appends its deferred manifest.
+    if (typeof staged.stableContext === 'string') resetBp2StableContext(session, staged.stableContext);
     applyPolicy(session, staged);
     rewriteConversationBp3Core(session, staged.core);
     if (session.agentProfileRevision !== undefined) {
@@ -218,17 +214,25 @@ export function createAgentProfileFold({
     }
     if (agentMode) session.rulesRevision = promptRulesRevision();
     session.updatedAt = Date.now();
-    if (promptPrefix(session) === before) return false;
+    if (requestPrefixIdentity(session) === before) return false;
     markToolSurfaceMigrated(session, session.pendingCacheBreakIntent || intent);
     return true;
   }
 
   /** Fold pending prompt changes (a switched workflow, a bot's moved tool
-   *  gates, changed shipped rules) when the cache is cold anyway. */
+   *  gates, changed shipped rules) when the cache is cold anyway. A
+   *  compaction rebuilds the prompt from current sources whether or not
+   *  anything is known pending (an update can change shipped rules, skills
+   *  and manifests no stamp tracks); an unchanged prompt stays byte-identical
+   *  and adds no break. */
   async function foldPromptIfCold() {
     const session = getSession?.();
+    // Scope exception: delegated worker sessions (`owner: 'agent'`) keep the
+    // prompt they were created with; they are task-scoped, and their skill
+    // bodies are still restored from current sources at Compact.
     if (!session?.id || !session.promptIdentity || isAgentOwner(session)) return false;
-    if (!foldPending(session) || !cacheCold(session)) return false;
+    const compacted = COLD_INTENTS.has(session.pendingCacheBreakIntent);
+    if (!compacted && !(foldPending(session) && cacheCold(session))) return false;
     return foldPrompt(session, PROMPT_FOLD_INTENT);
   }
 

package/src/session-runtime/tool-policy/policy-stage.mjs

@@ -11,14 +11,21 @@ import {
 import { deferredSurfaceModeForLead } from '../../runtime/agent/orchestrator/runtime-core/effort.mjs';
 import {
   applyInitialDeferredToolManifestToBp2,
+  buildSkillManifest,
+  collectPromptSkillsCached,
   composeSystemPrompt,
 } from '../../runtime/agent/orchestrator/context/collect.mjs';
-import { _buildBaseRules } from '../../runtime/agent/orchestrator/session/manager/rules-cache.mjs';
+import {
+  _buildBaseRules,
+  _buildLeadMetaContext,
+} from '../../runtime/agent/orchestrator/session/manager/rules-cache.mjs';
 import { sessionRolePromptFields } from '../../runtime/agent/orchestrator/session/manager/session-prompt-composition.mjs';
 import {
   delegationDisabled,
   honoredSchemaAllowlist,
+  reactionDisabled,
 } from '../../runtime/agent/orchestrator/session/manager/session-tool-surface.mjs';
+import { REACTION_TOOL_NAME } from '../../runtime/agent/orchestrator/runtime-core/reaction-tool-defs.mjs';
 import { finalizeSessionToolList } from '../../runtime/agent/orchestrator/session/manager/tool-resolution.mjs';
 import { isAgentOwner } from '../../runtime/agent/orchestrator/agent-owner.mjs';
 import { AGENT_MODE, sessionModeOf } from '../../runtime/agent/orchestrator/session/agent-mode.mjs';
@@ -40,14 +47,15 @@ export function createPolicyStage({
   activeWorkflowContext,
 }) {
   // The tools `session` is denied now: its caller's denials, the feature gates
-  // as they stand, and an agent-mode Lead's agent tool when its workflow
+  // as they stand, an agent-mode Lead's agent tool when its workflow
   // delegates to no one (a coding Lead keeps it: workflow.mjs
-  // workflowDisallowsAgentTool).
+  // workflowDisallowsAgentTool), and react outside a bot's chat with the user.
   function liveDeniedTools(session, workflow) {
     return [
       ...session.callerDisallowedTools,
       ...featureDisallowedTools(),
       ...(workflowDisallowsAgentTool(workflow, { agentMode: sessionModeOf(session) === AGENT_MODE }) ? ['agent'] : []),
+      ...(reactionDisabled(session, isAgentOwner(session)) ? [REACTION_TOOL_NAME] : []),
     ]
       .map((name) => String(name || ''))
       .filter(Boolean);
@@ -131,7 +139,12 @@ export function createPolicyStage({
             model: getRoute()?.model,
           });
     const coreMemoryContext = conversation ? '' : await leadCoreMemoryContext();
-    const { sessionMarkerCore } = composeSystemPrompt({
+    // BP2's stable part as session creation composes it
+    // (session-prompt-composition.mjs): the Lead meta context and the skill
+    // manifest of the skills in scope now.
+    const skipRules = identity.skipAgentRules || toolFreeRole;
+    const skills = schemaAllowedTools?.length === 0 ? [] : collectPromptSkillsCached(session.cwd);
+    const { sessionMarkerCore, stableSystemContext } = composeSystemPrompt({
       ...sessionRolePromptFields(identity, {
         ownerIsAgent,
         toolFreeRole,
@@ -146,6 +159,8 @@ export function createPolicyStage({
       // setting; agent mode carries none.
       instructionFilesContext:
         conversation || toolFreeRole || agentMode ? null : loadInstructionFilesContext?.(session) || null,
+      metaContext: skipRules || ownerIsAgent ? undefined : _buildLeadMetaContext({ includeOutputStyle: !agentMode }),
+      skillManifest: buildSkillManifest(skills),
     });
     return {
       workflow,
@@ -156,6 +171,8 @@ export function createPolicyStage({
       ownerIsAgent,
       baseRules,
       core: conversation ? withPresentedWorkspaceSlices(session, sessionMarkerCore) : sessionMarkerCore,
+      // Without BP1 the BP2 block cannot be located: null leaves it as it is.
+      stableContext: skipRules ? null : stableSystemContext,
     };
   }
 

package/src/session-runtime/tool-policy/surface-helpers.mjs

@@ -2,7 +2,6 @@
 // rewriting its system blocks (BP1 heading, BP3 core), and the configs a
 // session's workflow and orchestration mode give.
 import { AGENT_MODE, resolveSessionMode, sessionModeOf } from '../../runtime/agent/orchestrator/session/agent-mode.mjs';
-import { MIXY_AGENT_ID } from '../../runtime/agent/orchestrator/session/agent-home.mjs';
 import { refreshSessionBp3Environment } from '../../runtime/agent/orchestrator/session/manager/prompt-utils.mjs';
 import { promptOrchestrationModeOf } from '../../runtime/agent/orchestrator/session/manager/orchestration-mode-switch-notice.mjs';
 import { sessionOrchestrationMode } from '../../runtime/shared/orchestration.mjs';
@@ -77,11 +76,11 @@ export function rewriteBp3Core(session, nextCore) {
 }
 
 // A Lead's workflow slices (orchestration, agent and contact catalogs) for its
-// mode, Mixy's with the contacts.
+// mode; an agent-mode Lead's contacts are every bot but itself.
 export function leadPartsFor(session, leadPromptParts) {
   return leadPromptParts({
     agentMode: sessionModeOf(session) === AGENT_MODE,
-    mixy: resolveSessionMode({ session }).agentId === MIXY_AGENT_ID,
+    agentId: resolveSessionMode({ session }).agentId,
   });
 }
 

package/src/session-runtime/tool-surface.mjs

@@ -18,6 +18,9 @@ import { workflowDisallowsAgentTool } from '../runtime/agent/orchestrator/runtim
 import { promptWorkflowOf } from '../runtime/agent/orchestrator/session/manager/workflow-switch-notice.mjs';
 import { configuredOrchestrationMode } from '../runtime/shared/orchestration.mjs';
 import { isAgentModeSession } from '../runtime/agent/orchestrator/session/agent-mode.mjs';
+import { isAgentOwner } from '../runtime/agent/orchestrator/agent-owner.mjs';
+import { reactionDisabled } from '../runtime/agent/orchestrator/session/manager/session-tool-surface.mjs';
+import { REACTION_TOOL_NAME } from '../runtime/agent/orchestrator/runtime-core/reaction-tool-defs.mjs';
 
 export function createToolSurface({
   mgr,
@@ -78,6 +81,7 @@ export function createToolSurface({
       ...disallowedModelToolNamesForProfile(profileCandidates, getToolProfile()),
       ...getFeatureDisallowedTools(),
       ...(workflowAllowsAgents() ? [] : [...agentToolNames]),
+      ...(reactionDisabled(session, isAgentOwner(session)) ? [REACTION_TOOL_NAME] : []),
     ];
   }
 

package/src/session-runtime/turn/turn-run/ask-callbacks.mjs

@@ -80,6 +80,7 @@ export function createAskCallbacks({ transcript, notifyFnForSession, scheduleSea
       beforeToolExecution: () => turn.snapshot.promise || Promise.resolve(),
       transcriptMeta: stampCheckpoint(options),
       promptSource: options.promptSource,
+      ...(options.promptOrigin ? { promptOrigin: options.promptOrigin } : {}),
       // A routine turn's trusted selection text (its instructions only).
       ...(typeof options.skillSelection === 'string' ? { skillSelection: options.skillSelection } : {}),
       retryFailedTurn: options.retryFailedTurn === true,