mixdog 1.4.0 → 1.4.2

package/src/runtime/explore/tool.mjs

@@ -0,0 +1,123 @@
+// The explore tool: one read-only explorer loop per query (explorer.mjs), all
+// in parallel, merged into one bounded answer within the same tool call.
+import { resolveMaintenanceRoute } from '../agent/orchestrator/agent-runtime/maintenance-route.mjs';
+import { loadConfig } from '../agent/orchestrator/config.mjs';
+import { getProvider, initProviders } from '../agent/orchestrator/providers/registry.mjs';
+import { EXPLORE_MAX_QUERIES } from './tool-defs.mjs';
+import { runExplorer } from './explorer.mjs';
+
+// Hidden ids are reserved from user agents, so this one keeps the `-agent`
+// suffix: a plain `explorer` would hide a user's own Explorer agent.
+export const EXPLORER_AGENT = 'explore-agent';
+export const EXPLORE_TIMEOUT_MS = 120_000;
+export const EXPLORE_OUTPUT_CAP = 24_000;
+const TRUNCATED = '\n[explore: answer truncated]';
+
+function result(text, isError = false) {
+  return { content: [{ type: 'text', text }], ...(isError ? { isError: true } : {}) };
+}
+
+export function normalizeExploreQueries(raw) {
+  const list = Array.isArray(raw) ? raw : [raw];
+  return list.map((q) => (typeof q === 'string' ? q.trim() : '')).filter(Boolean);
+}
+
+function capped(text, budget) {
+  return text.length <= budget ? text : text.slice(0, Math.max(0, budget - TRUNCATED.length)) + TRUNCATED;
+}
+
+// Headings and error lines are labels, not answers: the truncation marker
+// would tell the caller that evidence was lost when none was.
+function shortened(text, max) {
+  return text.length <= max ? text : `${text.slice(0, max - 1)}…`;
+}
+
+/**
+ * @param {{ query: string|string[] }} args
+ * @param {{ cwd?: string, signal?: AbortSignal, callerSessionId?: string }} ctx
+ * @param {object} [deps] injectable for tests
+ */
+export async function runExplore(args = {}, ctx = {}, deps = {}) {
+  const {
+    load = () => loadConfig({ secrets: false }),
+    initialize = initProviders,
+    providerFor = getProvider,
+    timeoutMs = EXPLORE_TIMEOUT_MS,
+  } = deps;
+  const queries = normalizeExploreQueries(args.query);
+  if (!queries.length) return result('[explore error] query is required', true);
+  if (queries.length > EXPLORE_MAX_QUERIES) {
+    return result(`[explore error] at most ${EXPLORE_MAX_QUERIES} queries per call`, true);
+  }
+  const config = load();
+  const route = resolveMaintenanceRoute({ agent: EXPLORER_AGENT, config, includeDefault: false });
+  if (!route || typeof route !== 'object') {
+    return result('[explore error] Explore has no model; pick one under Workflows → Built-in agents → Explore', true);
+  }
+
+  // One controller per call: caller cancellation and the deadline both abort
+  // every explorer, and the call waits for each loop to settle.
+  const controller = new AbortController();
+  const parent = ctx.signal;
+  const onParentAbort = () => controller.abort(parent.reason);
+  if (parent?.aborted) return result('[explore error] cancelled', true);
+  parent?.addEventListener('abort', onParentAbort, { once: true });
+  let timedOut = false;
+  const timer = setTimeout(() => {
+    timedOut = true;
+    const reason = new Error(`explore timed out after ${Math.round(timeoutMs / 1000)}s`);
+    // Lets an explorer return the answer text it already wrote.
+    reason.salvagePartial = true;
+    controller.abort(reason);
+  }, timeoutMs);
+
+  try {
+    await initialize(config.providers || {}, { signal: controller.signal });
+    const provider = providerFor(route.provider);
+    if (!provider || typeof provider.send !== 'function') {
+      return result(`[explore error] provider "${route.provider}" is not ready`, true);
+    }
+    const settled = await Promise.all(
+      queries.map((query) =>
+        runExplorer({
+          query,
+          route,
+          provider,
+          cwd: ctx.cwd || null,
+          signal: controller.signal,
+          ownerSessionId: ctx.callerSessionId || null,
+        }).then(
+          (text) => {
+            const answer = String(text || '').trim();
+            return { ok: Boolean(answer), text: answer, late: timedOut };
+          },
+          (error) => ({ ok: false, error, late: timedOut })
+        )
+      )
+    );
+    if (parent?.aborted) return result('[explore error] cancelled', true);
+    const budget = Math.floor(EXPLORE_OUTPUT_CAP / queries.length);
+    const bodies = settled.map((entry) => {
+      if (entry.ok) return capped(entry.late ? `${entry.text}\n[explore: partial, timed out]` : entry.text, budget);
+      if (entry.late) return `[explore error] timed out after ${Math.round(timeoutMs / 1000)}s with no answer`;
+      if (entry.error) return `[explore error] ${shortened(String(entry.error?.message || entry.error), 500)}`;
+      return '[explore error] explorer returned no answer';
+    });
+    const text =
+      queries.length === 1
+        ? bodies[0]
+        : bodies
+            .map((body, i) => `## Q${i + 1}: ${shortened(queries[i].replace(/\s+/g, ' '), 100)}\n${body}`)
+            .join('\n\n');
+    return result(
+      text,
+      settled.every((entry) => !entry.ok)
+    );
+  } catch (error) {
+    if (parent?.aborted) return result('[explore error] cancelled', true);
+    return result(`[explore error] ${error?.message || error}`, true);
+  } finally {
+    clearTimeout(timer);
+    parent?.removeEventListener('abort', onParentAbort);
+  }
+}

package/src/runtime/local-provider/server-process.mjs

@@ -4,13 +4,14 @@ import { setTimeout as delay } from 'node:timers/promises';
 import { redactedLog, spawnServerState } from './server-process/child-state.mjs';
 import { awaitServerReady } from './server-process/readiness.mjs';
 import { createSerialChain } from './serial-chain.mjs';
+import { listenOnFetchSafePort } from '../shared/fetch-safe-listen.mjs';
 
 async function freeLoopbackPort() {
   return new Promise((resolve, reject) => {
     const probe = createServer();
     probe.unref();
     probe.once('error', reject);
-    probe.listen(0, '127.0.0.1', () => {
+    listenOnFetchSafePort(probe, '127.0.0.1', () => {
       const port = probe.address().port;
       probe.close((error) => (error ? reject(error) : resolve(port)));
     });

package/src/runtime/media/adapters/gemini-video.mjs

@@ -120,7 +120,10 @@ async function generateViaVeo({ model, prompt, options, references = [], signal,
     // Veo reports no usage; it bills per generated second. The response does
     // not echo the length, so the requested one (default 8s) is the billed one.
     // A failed download still leaves the generated seconds billed.
-    const usage = { seconds: parameters.durationSeconds || VEO_DEFAULT_SECONDS, resolution: parameters.resolution || '720p' };
+    const usage = {
+      seconds: parameters.durationSeconds || VEO_DEFAULT_SECONDS,
+      resolution: parameters.resolution || '720p',
+    };
     // The download is part of the generation budget: unbounded, it held an
     // active job slot (and the upstream connection) open indefinitely after
     // the poll loop finished.

package/src/runtime/media/adapters/xai-media.mjs

@@ -120,7 +120,8 @@ export async function generateVideo({ lane, model, prompt, options = {}, referen
       // let the catalog's per-second rate price it otherwise.
       const seconds = Number(data?.video?.duration) || duration;
       const usage = { ...xaiUsage(data?.usage), seconds, resolution };
-      if (!url) throw withReportedUsage(mediaError('xAI video finished without a URL', 'MEDIA_EMPTY_RESULT', 502), usage);
+      if (!url)
+        throw withReportedUsage(mediaError('xAI video finished without a URL', 'MEDIA_EMPTY_RESULT', 502), usage);
       const bytes = await downloadPublicMedia(url, { signal, label: 'xAI video' }).catch((error) => {
         throw withReportedUsage(error, usage);
       });

package/src/runtime/memory/index.mjs

@@ -71,6 +71,7 @@ import {
 } from './lib/trace-store.mjs';
 import { writeJsonAtomicSync } from '../shared/atomic-file.mjs';
 import { safeIpcSend } from '../shared/safe-ipc-send.mjs';
+import { adoptSystemProxy } from '../shared/llm/system-proxy.mjs';
 import { resolvePluginData, mixdogHome } from '../shared/plugin-paths.mjs';
 import { scheduledCycle1Signature } from './lib/cycle-signatures.mjs';
 import { createTranscriptIngest } from './lib/transcript-ingest.mjs';
@@ -96,6 +97,9 @@ import {
 } from './lib/memory-config-flags.mjs';
 const IS_MEMORY_ENTRY = !!process.argv[1] && import.meta.url === pathToFileURL(path.resolve(process.argv[1])).href;
 if (IS_MEMORY_ENTRY) {
+  // Runtime and model downloads follow the system proxy the launching daemon
+  // handed over (removed from this env so child processes never see it).
+  adoptSystemProxy();
   // Node's own warning printer stays off in this runtime, but a listener leak
   // is still logged, with the stack that names its source.
   process.removeAllListeners('warning');

package/src/runtime/memory/lib/embedding-provider.mjs

@@ -12,6 +12,7 @@ import { writeProfilePoint } from './model-profile.mjs';
 import { createCompactVectorCache } from './compact-vector-cache.mjs';
 import { EMBED_KEEP_WARM_MS } from './embedding-idle-lease.mjs';
 import { workerExecArgv } from '../../shared/worker-exec-argv.mjs';
+import { systemProxyHandoffEnv } from '../../shared/llm/system-proxy.mjs';
 import {
   getConfiguredEmbeddingModelId,
   getDefaultEmbeddingDtype,
@@ -69,7 +70,9 @@ function ensureWorker() {
   _lastRestartMs = now;
   const execArgv = embeddingWorkerExecArgv();
   const created = new Worker(WORKER_PATH, {
-    env: { ...process.env },
+    // The model download runs in this worker: it gets the system proxy
+    // decision explicitly (and removes it from its own env on start).
+    env: { ...process.env, ...systemProxyHandoffEnv() },
     execArgv,
     workerData: { dtype: _configuredDtype },
   });

package/src/runtime/memory/lib/embedding-worker.mjs

@@ -8,6 +8,7 @@ import os from 'node:os';
 import { execFile } from 'node:child_process';
 import { promisify } from 'node:util';
 import { resolvePluginData } from '../../shared/plugin-paths.mjs';
+import { adoptSystemProxy } from '../../shared/llm/system-proxy.mjs';
 import { compressEmbeddingModelCache } from './embedding-model-cache-compression.mjs';
 import { createIdleLease } from './embedding-idle-lease.mjs';
 import { ensureModelFile, ensureModelGraph } from './embedding-model-files.mjs';
@@ -24,6 +25,9 @@ import {
   prepareEmbeddingInput,
 } from './embedding-model-config.mjs';
 
+// The model download goes through the system proxy the parent handed over.
+adoptSystemProxy();
+
 const MODEL_ID = getConfiguredEmbeddingModelId();
 
 // Reroute ALL worker-thread stdio through parentPort. Without stdout:true/
@@ -300,7 +304,11 @@ async function loadTokenizer() {
 async function createExtractor(device) {
   const ort = loadOrt();
   const encode = await loadTokenizer();
-  const graphPath = await ensureModelGraph(MODEL_CACHE_DIR, MODEL_ID, getEmbeddingModelGraphFile(MODEL_ID, configuredDtype));
+  const graphPath = await ensureModelGraph(
+    MODEL_CACHE_DIR,
+    MODEL_ID,
+    getEmbeddingModelGraphFile(MODEL_ID, configuredDtype)
+  );
   const session = await ort.InferenceSession.create(graphPath, {
     executionProviders: [device],
     intraOpNumThreads: INTRA_OP_THREADS,
@@ -397,8 +405,7 @@ async function loadExtractor() {
             } catch (e) {
               // Unprivileged processes cannot raise priority back (EACCES/EPERM);
               // on Linux that is expected, not a stuck state worth warning about.
-              const expectedOnLinux =
-                process.platform === 'linux' && /EACCES|EPERM/.test(`${e?.code} ${e?.message}`);
+              const expectedOnLinux = process.platform === 'linux' && /EACCES|EPERM/.test(`${e?.code} ${e?.message}`);
               if (!expectedOnLinux) {
                 __mixdogMemoryLog(
                   `[embed-worker] WARN: process priority stuck below normal (restore failed: ${e?.message || e})\n`

package/src/runtime/memory/lib/memory-action-handlers/cycle-backfill-action.mjs

@@ -6,13 +6,7 @@
 import { runFullBackfill } from '../memory-ops-policy.mjs';
 import { throwIfAborted } from '../memory-cycle-shared.mjs';
 
-export function createBackfillAction({
-  getDb,
-  dataDir,
-  awaitCycle1Run,
-  ingestTranscriptFile,
-  cwdFromTranscriptPath,
-}) {
+export function createBackfillAction({ getDb, dataDir, awaitCycle1Run, ingestTranscriptFile, cwdFromTranscriptPath }) {
   // Whole-action backfill mutex (transport-agnostic). memory-cycle1's
   // _runCycle1InFlight only protects cycle1; ingest workers
   // (memory-ops-policy.mjs) can still overlap if a second backfill

package/src/runtime/memory/lib/memory-chunk-quality.mjs

@@ -315,12 +315,7 @@ function createCycle1PacketGenerator({ callLlm, request, signal, inputTokenBudge
 
 export async function generateCycle1Chunks(
   rows,
-  {
-    callLlm,
-    request = {},
-    inputTokenBudget = CYCLE1_INPUT_TOKEN_BUDGET,
-    signal = request.signal,
-  } = {}
+  { callLlm, request = {}, inputTokenBudget = CYCLE1_INPUT_TOKEN_BUDGET, signal = request.signal } = {}
 ) {
   const startedAt = Date.now();
   const stats = { groupingCalls: 0, verificationCalls: 0, llmMs: 0, verificationMs: 0, retries: 0, fragments: 0 };

package/src/runtime/office/authoring/pdf-author-action.mjs

@@ -22,12 +22,7 @@ import {
 } from '../core/office-sessions.mjs';
 import { snapshotPdf } from '../pdf/pdf-adapter.mjs';
 import { inlineOfficeAudit } from '../quality/inline-audit.mjs';
-import {
-  factsGate,
-  parseAuthoringBrief,
-  reviewBriefPromises,
-  reviewSourceGrounding,
-} from './pptx-brief.mjs';
+import { factsGate, parseAuthoringBrief, reviewBriefPromises, reviewSourceGrounding } from './pptx-brief.mjs';
 import { editsReplacedByAuthor, markAuthoredFromHtml } from './html-source-drift.mjs';
 import { hasSlideSections, htmlBriefScript, runPptxHtmlAuthoring } from './pptx-html-runner.mjs';
 import {

package/src/runtime/office/design/design-art-direction.mjs

@@ -236,34 +236,36 @@ export function resolveOfficeArtDirection(
     String(format || '').toLowerCase() === 'xlsx'
       ? DIRECTION_BLUEPRINTS.filter((blueprint) => blueprint.backgroundMode !== 'dark')
       : DIRECTION_BLUEPRINTS;
-  const candidates = blueprints.map((blueprint) => {
-    const palette = directionPalette(baseHue, blueprint);
-    const motif = rawSubject ? `${blueprint.motif} · ${rawSubject}` : blueprint.motif;
-    return {
-      id: blueprint.id,
-      label: blueprint.label,
-      rationale: `${blueprint.label} fits ${purpose} through ${blueprint.motif}.`,
-      motif,
-      palette,
-      typography: { ...blueprint.typography },
-      style: { ...blueprint.style, pageRhythm: [...blueprint.style.pageRhythm] },
-      creativeSystem: creativeSystemOf(blueprint),
-      deck: {
-        backgroundMode: blueprint.backgroundMode,
+  const candidates = blueprints
+    .map((blueprint) => {
+      const palette = directionPalette(baseHue, blueprint);
+      const motif = rawSubject ? `${blueprint.motif} · ${rawSubject}` : blueprint.motif;
+      return {
+        id: blueprint.id,
+        label: blueprint.label,
+        rationale: `${blueprint.label} fits ${purpose} through ${blueprint.motif}.`,
         motif,
-        imageTreatment: blueprint.imageTreatment,
-        layoutBias: [...blueprint.layoutBias],
-        ...creativeSystemOf(blueprint),
-      },
-      score: directionScore(blueprint, {
-        purpose,
-        expressionMode,
-        tone: String(request.tone || ''),
-        requestedId: String(requested.id || ''),
-        seed,
-      }),
-    };
-  }).sort((left, right) => right.score - left.score || left.id.localeCompare(right.id));
+        palette,
+        typography: { ...blueprint.typography },
+        style: { ...blueprint.style, pageRhythm: [...blueprint.style.pageRhythm] },
+        creativeSystem: creativeSystemOf(blueprint),
+        deck: {
+          backgroundMode: blueprint.backgroundMode,
+          motif,
+          imageTreatment: blueprint.imageTreatment,
+          layoutBias: [...blueprint.layoutBias],
+          ...creativeSystemOf(blueprint),
+        },
+        score: directionScore(blueprint, {
+          purpose,
+          expressionMode,
+          tone: String(request.tone || ''),
+          requestedId: String(requested.id || ''),
+          seed,
+        }),
+      };
+    })
+    .sort((left, right) => right.score - left.score || left.id.localeCompare(right.id));
   const selected = candidates[0];
   const hasSubject = Boolean(rawSubject || requested.seed || requested.id);
   const disabled = request.artDirection === false || requested.enabled === false;

package/src/runtime/office/pdf/pdf-writer.mjs

@@ -890,7 +890,12 @@ function drawChartBlock(flow, block, following) {
       });
       flow.y -= rowH;
     });
-    page.drawLine({ start: { x: left, y: top }, end: { x: left, y: flow.y }, thickness: 0.6, color: color(flow.ink.line) });
+    page.drawLine({
+      start: { x: left, y: top },
+      end: { x: left, y: flow.y },
+      thickness: 0.6,
+      color: color(flow.ink.line),
+    });
   } else {
     const baseline = flow.y - size * 1.6 - layout.plotH;
     values.forEach((value, index) => {

package/src/runtime/office/portable/portable-snapshot-docx.mjs

@@ -12,7 +12,13 @@ import {
   xmlDecode,
 } from './portable-xml.mjs';
 import { countDocxPropertyChanges, docxRevisionTree, flattenDocxRevisions } from './docx-revisions.mjs';
-import { docxParagraphSpacing, docxRunFont, nextPageOffset, softBreakFacts, statedRunFont } from './portable-snapshot-shared.mjs';
+import {
+  docxParagraphSpacing,
+  docxRunFont,
+  nextPageOffset,
+  softBreakFacts,
+  statedRunFont,
+} from './portable-snapshot-shared.mjs';
 
 const REVISION_TYPES = Object.freeze({
   ins: 'insertion',

package/src/runtime/office/portable/portable-snapshot-shared.mjs

@@ -123,7 +123,12 @@ export function populatedCellPagination({ options, page, selectedSheets, sheets,
 
 export function statedRunFont(xml) {
   const direct = docxRunFont(xml);
-  return direct.size || direct.bold || direct.name || direct.color || direct.caps !== undefined || direct.letterSpacing !== undefined
+  return direct.size ||
+    direct.bold ||
+    direct.name ||
+    direct.color ||
+    direct.caps !== undefined ||
+    direct.letterSpacing !== undefined
     ? { font: direct }
     : {};
 }

package/src/runtime/office/quality/assurance-rendered.mjs

@@ -152,7 +152,13 @@ export async function reviewRenderedOfficePages(
     // The cover/title page is short by design, and a page followed by a deliberate forced break ends where the
     // author ended it.
     const endsBeforeForcedBreak = forcedBreaks?.has(metric.page + 1) === true;
-    if (flowing && metric.page > 1 && !endsBeforeForcedBreak && metric.page < lastPage && metric.bodyEnd < PAGE_BODY_END_MIN) {
+    if (
+      flowing &&
+      metric.page > 1 &&
+      !endsBeforeForcedBreak &&
+      metric.page < lastPage &&
+      metric.bodyEnd < PAGE_BODY_END_MIN
+    ) {
       const empty = Math.round((1 - metric.bodyEnd) * 100);
       issues.push(
         issue(
@@ -166,7 +172,8 @@ export async function reviewRenderedOfficePages(
       continue;
     }
     // A short chapter is the author's: the page ends before a forced break, or it is the last page and opens with one.
-    const deliberateShort = endsBeforeForcedBreak || (forcedBreaks?.has(metric.page) === true && metric.page >= lastPage);
+    const deliberateShort =
+      endsBeforeForcedBreak || (forcedBreaks?.has(metric.page) === true && metric.page >= lastPage);
     if (
       ['docx', 'pdf'].includes(normalized) &&
       metric.page > 1 &&

package/src/runtime/office/quality/assurance-structure-docx.mjs

@@ -12,7 +12,9 @@ function paragraphSize(paragraph) {
 }
 
 const median = (values) => {
-  const sorted = values.filter((value) => value !== '' && value !== undefined && value !== null).sort((left, right) => (left < right ? -1 : left > right ? 1 : 0));
+  const sorted = values
+    .filter((value) => value !== '' && value !== undefined && value !== null)
+    .sort((left, right) => (left < right ? -1 : left > right ? 1 : 0));
   return sorted.length ? sorted[Math.floor(sorted.length / 2)] : undefined;
 };
 // Automatic colour is the effective default, black.
@@ -233,7 +235,7 @@ function shortTableSplitIssues(tables, issues) {
 }
 
 // A total row is a total by its label; it reads as one only when it is set apart from the rows it sums.
-export const TOTAL_LABEL = /^(?:(?:grand\s+total|sub\s*total|total)\b|(?:합계|총계|소계|계)(?:\s|$))/i;
+const TOTAL_LABEL = /^(?:(?:grand\s+total|sub\s*total|total)\b|(?:합계|총계|소계|계)(?:\s|$))/i;
 const FIGURE_TEXT = /^[\s+\-−₩$€¥]*[\d,.]+\s*(?:%|%p|[가-힣A-Za-z]{0,3})?\s*$/;
 const DISPLAY_SIZE = 18;
 

package/src/runtime/office/quality/design-review.mjs

@@ -12,11 +12,7 @@ import {
   saturatedHueFamilies,
 } from '../design/design-discipline.mjs';
 import { authoredBackgroundLadder, isCardGridSlide, isOrnamentalStripe, slideSize } from './design-review-authored.mjs';
-import {
-  reviewBriefPromises,
-  reviewFactCoverage,
-  reviewSourceGrounding,
-} from '../authoring/pptx-brief.mjs';
+import { reviewBriefPromises, reviewFactCoverage, reviewSourceGrounding } from '../authoring/pptx-brief.mjs';
 import { isAdvisoryOfficeIssue } from './quality-pipeline.mjs';
 import { issue } from './assurance-issue.mjs';
 import { isPptxSpecimenSlide, isPptxStatementSlide } from './pptx-slide-roles.mjs';

package/src/runtime/office/quality/document-brief.mjs

@@ -1,11 +1,7 @@
 // A Word document or workbook held to its brief, as an authored deck is: every figure its words show has a fact with
 // a source, and a fact cites where a reader can open it. The brief is the deck's (`design.brief`, key: value lines);
 // the readings are the deck's own (pptx-brief.mjs), over the document's text instead of its slides.
-import {
-  parseAuthoringBrief,
-  reviewFactCoverage,
-  reviewSourceGrounding,
-} from '../authoring/pptx-brief.mjs';
+import { parseAuthoringBrief, reviewFactCoverage, reviewSourceGrounding } from '../authoring/pptx-brief.mjs';
 import { htmlBriefScript } from '../authoring/pptx-html-runner.mjs';
 
 /** The brief a docx/xlsx call names in design.brief (the HTML BRIEF's key: value lines), or null. */

package/src/runtime/office/quality/forced-break-pages.mjs

@@ -25,9 +25,7 @@ const visibleText = (html) =>
 
 // A media query list reaches the printed page unless every query is screen-only.
 const appliesToPrint = (queries) =>
-  queries
-    .split(',')
-    .some((query) => !/^\s*(?:only\s+)?screen\b/i.test(query) && !/^\s*not\s+print\b/i.test(query));
+  queries.split(',').some((query) => !/^\s*(?:only\s+)?screen\b/i.test(query) && !/^\s*not\s+print\b/i.test(query));
 
 // Style rules in source order, flattened out of @media blocks that do not apply in print.
 function cssRules(css, active, rules) {
@@ -38,7 +36,10 @@ function cssRules(css, active, rules) {
     let depth = 1;
     let close = open + 1;
     for (; close < css.length && depth > 0; close += 1) depth += css[close] === '{' ? 1 : css[close] === '}' ? -1 : 0;
-    const head = css.slice(index, open).replace(/^(?:\s*@[^{;]*;)+/, '').trim();
+    const head = css
+      .slice(index, open)
+      .replace(/^(?:\s*@[^{;]*;)+/, '')
+      .trim();
     const inner = css.slice(open + 1, close - 1);
     if (/^@media\b/i.test(head)) cssRules(inner, active && appliesToPrint(head.slice(6)), rules);
     else if (active && head && !head.startsWith('@')) rules.push({ head, body: inner });
@@ -64,7 +65,8 @@ function breakDeclaration(body, rank) {
 }
 
 const beats = (a, b) => {
-  for (let index = 0; index < a.rank.length; index += 1) if (a.rank[index] !== b.rank[index]) return a.rank[index] > b.rank[index];
+  for (let index = 0; index < a.rank.length; index += 1)
+    if (a.rank[index] !== b.rank[index]) return a.rank[index] > b.rank[index];
   return true;
 };
 
@@ -80,7 +82,8 @@ function breakSelectors(html) {
         const classes = match[3].split('.').filter(Boolean);
         const specificity = (match[2] ? 100 : 0) + classes.length * 10 + (match[1] ? 1 : 0);
         const declaration = breakDeclaration(body, [0, specificity, order]);
-        if (declaration) selectors.push({ tag: (match[1] || '').toLowerCase(), id: match[2] || '', classes, declaration });
+        if (declaration)
+          selectors.push({ tag: (match[1] || '').toLowerCase(), id: match[2] || '', classes, declaration });
       }
     }
   }

package/src/runtime/office/quality/quality-pipeline.mjs

@@ -289,7 +289,7 @@ const POLISH_GUIDANCE = Object.freeze({
   theme_background_drift:
     'Use only the ladder backgrounds (paper, paperAlt, dark, darkAlt); recolor the drifting slide.',
   theme_body_backgrounds:
-    'Advisory: body slides use several background colours; keep them to the concept\'s declared palette ladder, or declare the concept or palette in the brief when the colour fields are the design.',
+    "Advisory: body slides use several background colours; keep them to the concept's declared palette ladder, or declare the concept or palette in the brief when the colour fields are the design.",
   excessive_slide_text: "Cut the copy to the reading mode's budget (composition.md §4) or split the slide.",
   decorative_stripe: 'Remove the ornamental bar; a stripe that encodes nothing is decoration (composition.md §10).',
   // Visual critique contract (finalize).

package/src/runtime/shared/agent-route-config.mjs

@@ -12,9 +12,16 @@ export const DEFAULT_DISABLED_AGENT_IDS = Object.freeze([
   'writer',
 ]);
 
+export const EXPLORE_AGENT_ID = 'explore';
+
 // The Maintainer also starts off: background upkeep spends model calls, so it
-// runs only once the user turns it on and picks its model.
-export const DEFAULT_DISABLED_AGENT_ROSTER = Object.freeze([...DEFAULT_DISABLED_AGENT_IDS, 'maintainer']);
+// runs only once the user turns it on and picks its model. Explore likewise:
+// its tool reaches the model only once the user picks its model.
+export const DEFAULT_DISABLED_AGENT_ROSTER = Object.freeze([
+  ...DEFAULT_DISABLED_AGENT_IDS,
+  'maintainer',
+  EXPLORE_AGENT_ID,
+]);
 
 /** The AGENT.md frontmatter `kind` the Workflows page writes when it creates
  *  an agent: a workflow delegation role, never a contact (봇). */
@@ -149,6 +156,14 @@ export function configuredAgentRouteCandidates(config, agentId) {
   return route ? [route] : [];
 }
 
+/** The explore tool runs only on Explore's own model (never Main) while it is on. */
+export function exploreRouteConfigured(config) {
+  return (
+    !isAgentDisabled(config, EXPLORE_AGENT_ID) &&
+    configuredAgentRouteCandidates(config, EXPLORE_AGENT_ID).some(isCompleteAgentRoute)
+  );
+}
+
 function canonicalizeAgentRoutes(config = {}) {
   const agents = Object.fromEntries(
     Object.entries(record(config.agents)).filter(([, route]) => isCompleteAgentRoute(route))