@pi-unipi/unipi 2.5.0 → 2.6.0

package/packages/unipi/bundled.js

@@ -162,7 +162,8 @@ var init_constants = __esm({
       BADGE_GEN: "badge-gen",
       BADGE_TOGGLE: "badge-toggle",
       BADGE_SETTINGS: "badge-settings",
-      UTIL_SETTINGS: "util-settings"
+      UTIL_SETTINGS: "util-settings",
+      PREFIX_CACHE: "prefix-cache"
     };
     UTILITY_TOOLS = {
       CONTINUE: "continue_task",
@@ -206,7 +207,8 @@ var init_constants = __esm({
       SYNC_INTERVAL_MS: 864e5,
       STARTUP_TIMEOUT_MS: 1e4,
       MAX_SERVERS: 20,
-      TOOL_NAME_SEPARATOR: "__"
+      TOOL_NAME_SEPARATOR: "__",
+      MAX_MODEL_OUTPUT_BYTES: 64 * 1024
     };
     COMPACTOR_INSTRUCTION = "__compactor__";
     COMPACTOR_TOOLS = {
@@ -758,6 +760,92 @@ var init_tui_width = __esm({
   }
 });
 
+// packages/core/bounded-output.ts
+import { chmodSync, lstatSync, mkdirSync as mkdirSync3, writeFileSync as writeFileSync3 } from "node:fs";
+import { homedir } from "node:os";
+import { join as join3 } from "node:path";
+import { randomUUID } from "node:crypto";
+function byteSlice(text, start, end) {
+  return Buffer.from(text, "utf8").subarray(start, end).toString("utf8").replace(/\uFFFD+$/u, "");
+}
+function secureArtifactDir(customDir) {
+  const dir = customDir ?? join3(homedir(), ".unipi", "tool-results");
+  mkdirSync3(dir, { recursive: true, mode: 448 });
+  let stat = lstatSync(dir);
+  if (!stat.isDirectory() || stat.isSymbolicLink()) {
+    throw new Error(`Refusing unsafe tool-result directory: ${dir}`);
+  }
+  if ((stat.mode & 63) !== 0) {
+    chmodSync(dir, 448);
+    stat = lstatSync(dir);
+    if ((stat.mode & 63) !== 0) {
+      throw new Error(`Refusing non-private tool-result directory: ${dir}`);
+    }
+  }
+  return dir;
+}
+function safePrefix(prefix) {
+  const safe = prefix.replace(/[^a-zA-Z0-9_-]/g, "-").replace(/-+/g, "-").slice(0, 48);
+  return safe || "tool-result";
+}
+function boundModelOutput(text, options = {}) {
+  const maxBytes = Math.max(1024, Math.floor(options.maxBytes ?? DEFAULT_MODEL_OUTPUT_BYTES));
+  const originalBytes = Buffer.byteLength(text, "utf8");
+  if (originalBytes <= maxBytes) {
+    return { text, truncated: false, originalBytes, visibleBytes: originalBytes };
+  }
+  let artifactPath;
+  let artifactWarning;
+  if (originalBytes <= MAX_RAW_ARTIFACT_BYTES) {
+    try {
+      const dir = secureArtifactDir(options.artifactDir);
+      artifactPath = join3(dir, `${safePrefix(options.artifactPrefix ?? "tool-result")}-${randomUUID()}.txt`);
+      writeFileSync3(artifactPath, text, { encoding: "utf8", mode: 384, flag: "wx" });
+    } catch (error) {
+      artifactWarning = `Full-output artifact unavailable: ${error instanceof Error ? error.message : String(error)}`;
+      artifactPath = void 0;
+    }
+  } else {
+    artifactWarning = `Full output exceeded the ${MAX_RAW_ARTIFACT_BYTES}-byte local artifact safety cap and was not retained.`;
+  }
+  const marker = [
+    "",
+    "--- output bounded by UniPi ---",
+    artifactPath ? `Full output: ${artifactPath}` : artifactWarning,
+    `Original size: ${originalBytes} bytes; model-visible ceiling: ${maxBytes} bytes.`,
+    ...artifactPath ? ["Use the read tool with offset/limit to inspect only the needed region."] : []
+  ].join("\n");
+  const omissionReserve = 80;
+  const markerBytes = Buffer.byteLength(marker, "utf8");
+  const contentBudget = Math.max(1, maxBytes - markerBytes - omissionReserve);
+  const headBytes = Math.ceil(contentBudget * 0.75);
+  const tailBytes = Math.max(0, contentBudget - headBytes);
+  const head = byteSlice(text, 0, headBytes);
+  const tail2 = tailBytes > 0 ? byteSlice(text, originalBytes - tailBytes) : "";
+  const omission = `
+\u2026 ${Math.max(0, originalBytes - contentBudget)} bytes omitted \u2026
+`;
+  let bounded = `${head}${omission}${tail2}${marker}`;
+  if (Buffer.byteLength(bounded, "utf8") > maxBytes) {
+    bounded = byteSlice(bounded, 0, maxBytes);
+  }
+  return {
+    text: bounded,
+    truncated: true,
+    originalBytes,
+    visibleBytes: Buffer.byteLength(bounded, "utf8"),
+    artifactPath
+  };
+}
+var DEFAULT_MODEL_OUTPUT_BYTES, MAX_RAW_ARTIFACT_BYTES;
+var init_bounded_output = __esm({
+  "packages/core/bounded-output.ts"() {
+    "use strict";
+    DEFAULT_MODEL_OUTPUT_BYTES = 64 * 1024;
+    MAX_RAW_ARTIFACT_BYTES = 16 * 1024 * 1024;
+  }
+});
+
 // packages/core/index.ts
 var core_exports = {};
 __export(core_exports, {
@@ -773,6 +861,7 @@ __export(core_exports, {
   COMPACTOR_DIRS: () => COMPACTOR_DIRS,
   COMPACTOR_INSTRUCTION: () => COMPACTOR_INSTRUCTION,
   COMPACTOR_TOOLS: () => COMPACTOR_TOOLS,
+  DEFAULT_MODEL_OUTPUT_BYTES: () => DEFAULT_MODEL_OUTPUT_BYTES,
   FOOTER_COMMANDS: () => FOOTER_COMMANDS,
   IMAGE_COMMANDS: () => IMAGE_COMMANDS,
   IMAGE_DIRS: () => IMAGE_DIRS,
@@ -781,6 +870,7 @@ __export(core_exports, {
   KANBOARD_COMMANDS: () => KANBOARD_COMMANDS,
   KANBOARD_DEFAULTS: () => KANBOARD_DEFAULTS,
   KANBOARD_DIRS: () => KANBOARD_DIRS,
+  MAX_RAW_ARTIFACT_BYTES: () => MAX_RAW_ARTIFACT_BYTES,
   MCP_COMMANDS: () => MCP_COMMANDS,
   MCP_DEFAULTS: () => MCP_DEFAULTS,
   MCP_DIRS: () => MCP_DIRS,
@@ -815,6 +905,7 @@ __export(core_exports, {
   WORKFLOW_COMMANDS: () => WORKFLOW_COMMANDS,
   WidthKeyedCache: () => WidthKeyedCache,
   adaptiveInnerWidth: () => adaptiveInnerWidth,
+  boundModelOutput: () => boundModelOutput,
   boxInnerWidth: () => boxInnerWidth,
   contentWidth: () => contentWidth,
   emitEvent: () => emitEvent,
@@ -863,6 +954,7 @@ var init_core = __esm({
     init_utils();
     init_model_cache();
     init_tui_width();
+    init_bounded_output();
   }
 });
 
@@ -2330,12 +2422,12 @@ var init_embedding = __esm({
 });
 
 // packages/info-screen/usage-parser.ts
-import { readdirSync as readdirSync5, readFileSync as readFileSync8, statSync as statSync5, existsSync as existsSync9, mkdirSync as mkdirSync7, writeFileSync as writeFileSync8, renameSync as renameSync3, openSync, readSync, closeSync } from "node:fs";
-import { join as join9, dirname as dirname9 } from "node:path";
-import { homedir as homedir5 } from "node:os";
+import { readdirSync as readdirSync5, readFileSync as readFileSync8, statSync as statSync5, existsSync as existsSync9, mkdirSync as mkdirSync8, writeFileSync as writeFileSync9, renameSync as renameSync3, openSync, readSync, closeSync } from "node:fs";
+import { join as join10, dirname as dirname9 } from "node:path";
+import { homedir as homedir6 } from "node:os";
 function getCachePath() {
-  const base = process.env.UNIPI_DIR || join9(homedir5(), ".unipi");
-  return join9(base, "cache", "usage-stats.json");
+  const base = process.env.UNIPI_DIR || join10(homedir6(), ".unipi");
+  return join10(base, "cache", "usage-stats.json");
 }
 function readCache() {
   const empty = { version: CACHE_VERSION, models: [], files: {} };
@@ -2353,16 +2445,16 @@ function readCache() {
 function writeCache(cache) {
   try {
     const path28 = getCachePath();
-    mkdirSync7(dirname9(path28), { recursive: true });
+    mkdirSync8(dirname9(path28), { recursive: true });
     const tmp = `${path28}.${process.pid}.tmp`;
-    writeFileSync8(tmp, JSON.stringify(cache), "utf-8");
+    writeFileSync9(tmp, JSON.stringify(cache), "utf-8");
     renameSync3(tmp, path28);
   } catch {
   }
 }
 function getSessionsDir() {
-  const agentDir = process.env.PI_CODING_AGENT_DIR || join9(homedir5(), ".pi", "agent");
-  return join9(agentDir, "sessions");
+  const agentDir = process.env.PI_CODING_AGENT_DIR || join10(homedir6(), ".pi", "agent");
+  return join10(agentDir, "sessions");
 }
 function getPeriodBounds() {
   const now2 = /* @__PURE__ */ new Date();
@@ -2454,7 +2546,7 @@ function collectSessionFiles(dir, files) {
   try {
     const entries = readdirSync5(dir, { withFileTypes: true });
     for (const entry of entries) {
-      const entryPath = join9(dir, entry.name);
+      const entryPath = join10(dir, entry.name);
       if (entry.isDirectory()) {
         collectSessionFiles(entryPath, files);
       } else if (entry.isFile() && entry.name.endsWith(".jsonl")) {
@@ -2684,8 +2776,8 @@ __export(env_exports, {
   getEnvironmentInfo: () => getEnvironmentInfo
 });
 import { existsSync as existsSync18, readdirSync as readdirSync11 } from "node:fs";
-import { join as join18, resolve as resolve6 } from "node:path";
-import { homedir as homedir14 } from "node:os";
+import { join as join20, resolve as resolve6 } from "node:path";
+import { homedir as homedir16 } from "node:os";
 function getEnvironmentInfo() {
   const unipiModules = [];
   const configPaths = [];
@@ -2693,11 +2785,11 @@ function getEnvironmentInfo() {
   try {
     const nodeModules = resolve6(process.cwd(), "node_modules");
     if (existsSync18(nodeModules)) {
-      const scopePath = join18(nodeModules, "@pi-unipi");
+      const scopePath = join20(nodeModules, "@pi-unipi");
       if (existsSync18(scopePath)) {
         for (const entry of readdirSync11(scopePath)) {
           if (entry.startsWith(".")) continue;
-          const pkgPath = join18(scopePath, entry, "package.json");
+          const pkgPath = join20(scopePath, entry, "package.json");
           if (existsSync18(pkgPath)) {
             unipiModules.push(`@pi-unipi/${entry}`);
           }
@@ -2706,7 +2798,7 @@ function getEnvironmentInfo() {
     }
   } catch {
   }
-  const globalConfig = join18(homedir14(), ".unipi", "config");
+  const globalConfig = join20(homedir16(), ".unipi", "config");
   const projectConfig = resolve6(process.cwd(), ".unipi", "config");
   if (existsSync18(globalConfig)) {
     configPaths.push(globalConfig);
@@ -2715,7 +2807,7 @@ function getEnvironmentInfo() {
     configPaths.push(projectConfig);
   }
   try {
-    const piDir = join18(homedir14(), ".pi");
+    const piDir = join20(homedir16(), ".pi");
     if (existsSync18(piDir)) {
       extensionPaths.push(piDir);
     }
@@ -3952,11 +4044,11 @@ var init_schema = __esm({
 });
 
 // packages/compactor/src/config/manager.ts
-import { existsSync as existsSync31, mkdirSync as mkdirSync19, readFileSync as readFileSync29, writeFileSync as writeFileSync23 } from "node:fs";
-import { homedir as homedir20 } from "node:os";
-import { dirname as dirname24, join as join32 } from "node:path";
+import { existsSync as existsSync31, mkdirSync as mkdirSync21, readFileSync as readFileSync29, writeFileSync as writeFileSync25 } from "node:fs";
+import { homedir as homedir22 } from "node:os";
+import { dirname as dirname24, join as join34 } from "node:path";
 function projectConfigPath(cwd) {
-  return join32(cwd, ".unipi", "config", "compactor.json");
+  return join34(cwd, ".unipi", "config", "compactor.json");
 }
 function deepMerge(base, override) {
   const result = { ...base };
@@ -3992,8 +4084,8 @@ function saveConfig3(config, opts) {
   try {
     const targetPath = opts?.perProject && opts?.cwd ? projectConfigPath(opts.cwd) : COMPACTOR_CONFIG_PATH;
     const dir = dirname24(targetPath);
-    if (!existsSync31(dir)) mkdirSync19(dir, { recursive: true });
-    writeFileSync23(targetPath, `${JSON.stringify(config, null, 2)}
+    if (!existsSync31(dir)) mkdirSync21(dir, { recursive: true });
+    writeFileSync25(targetPath, `${JSON.stringify(config, null, 2)}
 `);
     return { success: true };
   } catch (err) {
@@ -4027,9 +4119,9 @@ function migrateConfig(partial) {
 function scaffoldConfig() {
   try {
     const dir = dirname24(COMPACTOR_CONFIG_PATH);
-    if (!existsSync31(dir)) mkdirSync19(dir, { recursive: true });
+    if (!existsSync31(dir)) mkdirSync21(dir, { recursive: true });
     if (!existsSync31(COMPACTOR_CONFIG_PATH)) {
-      writeFileSync23(COMPACTOR_CONFIG_PATH, `${JSON.stringify(DEFAULT_COMPACTOR_CONFIG, null, 2)}
+      writeFileSync25(COMPACTOR_CONFIG_PATH, `${JSON.stringify(DEFAULT_COMPACTOR_CONFIG, null, 2)}
 `);
     }
   } catch {
@@ -4040,7 +4132,7 @@ var init_manager = __esm({
   "packages/compactor/src/config/manager.ts"() {
     "use strict";
     init_schema();
-    COMPACTOR_CONFIG_PATH = join32(homedir20(), ".unipi", "config", "compactor", "config.json");
+    COMPACTOR_CONFIG_PATH = join34(homedir22(), ".unipi", "config", "compactor", "config.json");
     readJson3 = (path28) => {
       try {
         return JSON.parse(readFileSync29(path28, "utf-8"));
@@ -5445,7 +5537,6 @@ function buildIntentSection(intentEvents) {
 function buildResumeSnapshot(events, opts) {
   const compactCount = opts?.compactCount ?? 1;
   const searchTool = opts?.searchTool ?? "ctx_search";
-  const now2 = (/* @__PURE__ */ new Date()).toISOString();
   const fileEvents = [];
   const taskEvents = [];
   const ruleEvents = [];
@@ -5521,7 +5612,7 @@ function buildResumeSnapshot(events, opts) {
   if (skills) sections.push(skills);
   const intent = buildIntentSection(intentEvents);
   if (intent) sections.push(intent);
-  const header = `<session_resume events="${events.length}" compact_count="${compactCount}" generated_at="${now2}">`;
+  const header = `<session_resume events="${events.length}" compact_count="${compactCount}">`;
   const footer = `</session_resume>`;
   const body = sections.join("\n\n");
   if (body) {
@@ -6316,7 +6407,7 @@ __export(policy_exports, {
   readsOrCreatesPolicy: () => readsOrCreatesPolicy
 });
 import { existsSync as existsSync36, readFileSync as readFileSync31 } from "node:fs";
-import { join as join35 } from "node:path";
+import { join as join37 } from "node:path";
 function parseBashPattern(pattern) {
   const match = pattern.match(/^Bash\((.+)\)$/);
   return match ? match[1] : null;
@@ -6371,7 +6462,7 @@ function fileGlobToRegex(glob, caseInsensitive = false) {
   return new RegExp(`^${regexStr}$`, caseInsensitive ? "i" : "");
 }
 function readsOrCreatesPolicy(cwd) {
-  const settingsPath = join35(cwd, ".pi", "settings.json");
+  const settingsPath = join37(cwd, ".pi", "settings.json");
   if (!existsSync36(settingsPath)) return { allow: [], deny: [], ask: [] };
   try {
     const settings = JSON.parse(readFileSync31(settingsPath, "utf-8"));
@@ -6400,10 +6491,10 @@ __export(evaluator_exports, {
   splitChainedCommands: () => splitChainedCommands
 });
 import { realpathSync as realpathSync2, existsSync as existsSync37, readFileSync as readFileSync32 } from "node:fs";
-import { resolve as resolve12, join as join36 } from "node:path";
-import { homedir as homedir22 } from "node:os";
+import { resolve as resolve12, join as join38 } from "node:path";
+import { homedir as homedir24 } from "node:os";
 function loadProjectPermissions(cwd, basePolicy) {
-  const settingsPath = join36(cwd, ".pi", "settings.json");
+  const settingsPath = join38(cwd, ".pi", "settings.json");
   if (!existsSync37(settingsPath)) return basePolicy;
   try {
     const raw = readFileSync32(settingsPath, "utf-8");
@@ -6475,7 +6566,7 @@ function evaluateFilePath(filePath, policy, cwd = process.cwd()) {
   const resolved = resolve12(cwd, filePath);
   try {
     const real = realpathSync2(resolved);
-    const home = homedir22();
+    const home = homedir24();
     if (!real.startsWith(cwd) && !real.startsWith(home)) {
       return "deny";
     }
@@ -6649,13 +6740,13 @@ import {
 // packages/workflow/commands.ts
 init_core();
 import { readFileSync as readFileSync3, readdirSync, existsSync as existsSync3, statSync as statSync2 } from "fs";
-import { join as join3, basename } from "path";
+import { join as join4, basename } from "path";
 function suggestSpecFiles(prefix) {
-  const specsDir = join3(process.cwd(), ".unipi", "docs", "specs");
+  const specsDir = join4(process.cwd(), ".unipi", "docs", "specs");
   if (!existsSync3(specsDir)) return [];
   try {
     const search2 = prefix?.trim().split(/\s+/).pop() ?? "";
-    const files = readdirSync(specsDir).filter((f) => f.endsWith(".md")).map((f) => ({ name: f, time: statSync2(join3(specsDir, f)).mtimeMs })).sort((a, b) => b.time - a.time);
+    const files = readdirSync(specsDir).filter((f) => f.endsWith(".md")).map((f) => ({ name: f, time: statSync2(join4(specsDir, f)).mtimeMs })).sort((a, b) => b.time - a.time);
     return files.filter((f) => !search2 || f.name.includes(search2)).map((f) => ({
       value: `specs:${f.name}`,
       label: basename(f.name, ".md"),
@@ -6666,11 +6757,11 @@ function suggestSpecFiles(prefix) {
   }
 }
 function suggestPlanFiles(prefix) {
-  const plansDir = join3(process.cwd(), ".unipi", "docs", "plans");
+  const plansDir = join4(process.cwd(), ".unipi", "docs", "plans");
   if (!existsSync3(plansDir)) return [];
   try {
     const search2 = prefix?.trim().split(/\s+/).pop() ?? "";
-    const files = readdirSync(plansDir).filter((f) => f.endsWith(".md")).map((f) => ({ name: f, time: statSync2(join3(plansDir, f)).mtimeMs })).sort((a, b) => b.time - a.time);
+    const files = readdirSync(plansDir).filter((f) => f.endsWith(".md")).map((f) => ({ name: f, time: statSync2(join4(plansDir, f)).mtimeMs })).sort((a, b) => b.time - a.time);
     return files.filter((f) => !search2 || f.name.includes(search2)).map((f) => ({
       value: `plan:${f.name}`,
       label: basename(f.name, ".md"),
@@ -6681,11 +6772,11 @@ function suggestPlanFiles(prefix) {
   }
 }
 function suggestDebugFiles(prefix) {
-  const debugDir = join3(process.cwd(), ".unipi", "docs", "debug");
+  const debugDir = join4(process.cwd(), ".unipi", "docs", "debug");
   if (!existsSync3(debugDir)) return [];
   try {
     const search2 = prefix?.trim().split(/\s+/).pop() ?? "";
-    const files = readdirSync(debugDir).filter((f) => f.endsWith(".md")).map((f) => ({ name: f, time: statSync2(join3(debugDir, f)).mtimeMs })).sort((a, b) => b.time - a.time);
+    const files = readdirSync(debugDir).filter((f) => f.endsWith(".md")).map((f) => ({ name: f, time: statSync2(join4(debugDir, f)).mtimeMs })).sort((a, b) => b.time - a.time);
     return files.filter((f) => !search2 || f.name.includes(search2)).map((f) => ({
       value: `debug:${f.name}`,
       label: basename(f.name, ".md"),
@@ -6696,11 +6787,11 @@ function suggestDebugFiles(prefix) {
   }
 }
 function suggestChoreFiles(prefix) {
-  const choreDir = join3(process.cwd(), ".unipi", "docs", "chore");
+  const choreDir = join4(process.cwd(), ".unipi", "docs", "chore");
   if (!existsSync3(choreDir)) return [];
   try {
     const search2 = prefix?.trim().split(/\s+/).pop() ?? "";
-    const files = readdirSync(choreDir).filter((f) => f.endsWith(".md")).map((f) => ({ name: f, time: statSync2(join3(choreDir, f)).mtimeMs })).sort((a, b) => b.time - a.time);
+    const files = readdirSync(choreDir).filter((f) => f.endsWith(".md")).map((f) => ({ name: f, time: statSync2(join4(choreDir, f)).mtimeMs })).sort((a, b) => b.time - a.time);
     return files.filter((f) => !search2 || f.name.includes(search2)).map((f) => ({
       value: `chore:${f.name}`,
       label: basename(f.name, ".md"),
@@ -6716,7 +6807,7 @@ function suggestWorktrees() {
   if (worktreeSuggestionsCache?.cwd === cwd) {
     return worktreeSuggestionsCache.items;
   }
-  const worktreesDir = join3(cwd, ".unipi", "worktrees");
+  const worktreesDir = join4(cwd, ".unipi", "worktrees");
   if (!existsSync3(worktreesDir)) {
     worktreeSuggestionsCache = { cwd, items: [] };
     return worktreeSuggestionsCache.items;
@@ -6725,7 +6816,7 @@ function suggestWorktrees() {
     let findWorktrees2 = function(dir, relativePath) {
       const entries = readdirSync(dir, { withFileTypes: true });
       for (const entry of entries) {
-        const fullPath = join3(dir, entry.name);
+        const fullPath = join4(dir, entry.name);
         const relPath = relativePath ? `${relativePath}/${entry.name}` : entry.name;
         if (entry.name === ".git" && entry.isFile()) {
           try {
@@ -6924,7 +7015,7 @@ function registerWorkflowCommands(pi, options) {
         }
         let skillContent = "";
         try {
-          const skillPath = join3(
+          const skillPath = join4(
             new URL("./skills", import.meta.url).pathname,
             cmd.skillName,
             "SKILL.md"
@@ -7513,7 +7604,7 @@ Use /unipi:ralph-resume <name> to continue`, "info");
 // packages/ralph/tools.ts
 init_core();
 import { Type } from "typebox";
-function registerRalphTools(pi, manager2) {
+function registerRalphTools(pi, getManager2) {
   pi.registerTool({
     name: RALPH_TOOLS.START,
     label: "Start Ralph Loop",
@@ -7542,6 +7633,7 @@ function registerRalphTools(pi, manager2) {
       )
     }),
     async execute(_toolCallId, params, _signal, _onUpdate, ctx) {
+      const manager2 = getManager2(ctx);
       const taskFile = `.unipi/ralph/${params.name.replace(/[^a-zA-Z0-9_-]/g, "_")}.md`;
       if (manager2.loadState(params.name)?.status === "active") {
         return {
@@ -7582,6 +7674,7 @@ function registerRalphTools(pi, manager2) {
     ],
     parameters: Type.Object({}),
     async execute(_toolCallId, _params, _signal, _onUpdate, ctx) {
+      const manager2 = getManager2(ctx);
       if (!manager2.getCurrentLoop()) {
         return {
           content: [{ type: "text", text: "No active Ralph loop." }],
@@ -7639,6 +7732,38 @@ function registerRalphTools(pi, manager2) {
   });
 }
 
+// packages/ralph/reminder.ts
+init_core();
+var RALPH_REMINDER_TYPE = "unipi-ralph-loop-reminder";
+function buildRalphLoopReminder(state) {
+  const iterStr = `${state.iteration}${state.maxIterations > 0 ? `/${state.maxIterations}` : ""}`;
+  let instructions = "This snapshot supersedes all earlier Ralph loop reminders.\n";
+  instructions += `You are in a Ralph loop working on: ${state.taskFile}
+`;
+  if (state.itemsPerIteration > 0) {
+    instructions += `- Work on ~${state.itemsPerIteration} items this iteration
+`;
+  }
+  instructions += "- Update the task file as you progress\n";
+  instructions += `- When FULLY COMPLETE: ${RALPH_COMPLETE_MARKER}
+`;
+  instructions += "- Otherwise, call ralph_done tool to proceed to next iteration";
+  return `[RALPH LOOP - ${state.name} - Iteration ${iterStr}]
+
+${instructions}`;
+}
+function latestRalphReminder(ctx) {
+  const branch = ctx.sessionManager.getBranch();
+  for (let index = branch.length - 1; index >= 0; index--) {
+    const entry = branch[index];
+    if (entry.type === "custom_message" && entry.customType === RALPH_REMINDER_TYPE) {
+      return typeof entry.content === "string" ? entry.content : null;
+    }
+    if (entry.type === "compaction") break;
+  }
+  return null;
+}
+
 // packages/ralph/index.ts
 function getInfoRegistry() {
   return globalThis.__unipi_info_registry;
@@ -7655,6 +7780,7 @@ function getManager(ctx, pi) {
   return manager;
 }
 function ralph_default(pi) {
+  registerRalphTools(pi, (ctx) => getManager(ctx, pi));
   registerCommands(pi);
   pi.on("session_start", async (_event, ctx) => {
     manager = null;
@@ -7735,24 +7861,12 @@ function ralph_default(pi) {
     if (!currentLoop) return;
     const state = mgr.loadState(currentLoop);
     if (!state || state.status !== "active") return;
-    const iterStr = `${state.iteration}${state.maxIterations > 0 ? `/${state.maxIterations}` : ""}`;
-    let instructions = `You are in a Ralph loop working on: ${state.taskFile}
-`;
-    if (state.itemsPerIteration > 0) {
-      instructions += `- Work on ~${state.itemsPerIteration} items this iteration
-`;
-    }
-    instructions += `- Update the task file as you progress
-`;
-    instructions += `- When FULLY COMPLETE: ${RALPH_COMPLETE_MARKER}
-`;
-    instructions += `- Otherwise, call ralph_done tool to proceed to next iteration`;
+    const content = buildRalphLoopReminder(state);
+    if (latestRalphReminder(ctx) === content) return;
     return {
       message: {
-        customType: "unipi-ralph-loop-reminder",
-        content: `[RALPH LOOP - ${state.name} - Iteration ${iterStr}]
-
-${instructions}`,
+        customType: RALPH_REMINDER_TYPE,
+        content,
         display: false
       }
     };
@@ -7766,10 +7880,6 @@ ${instructions}`,
     }
     manager = null;
   });
-  pi.on("session_start", async (_event, ctx) => {
-    const mgr = getManager(ctx, pi);
-    registerRalphTools(pi, mgr);
-  });
 }
 function registerCommands(pi) {
   const HELP = `Ralph Loop \u2014 Long-running development loops
@@ -8779,6 +8889,36 @@ function getInfoRegistry2() {
   return globalThis.__unipi_info_registry;
 }
 var VERSION3 = getPackageVersion(dirname7(fileURLToPath4(import.meta.url)));
+function buildMemoryRecallReminder(input) {
+  const lines = [
+    "## \u{1F9E0} Memory System Active",
+    "",
+    `You have ${input.memories.length} memories stored for project "${input.projectName}".`
+  ];
+  if (input.canSearch && input.memories.length > 0) {
+    const titleList = input.memories.slice(0, 20).map((memory) => `- ${memory.title}`).join("\n");
+    const extra = input.memories.length > 20 ? `
+... and ${input.memories.length - 20} more` : "";
+    lines.push(
+      "**BEFORE starting work**, call `memory_search` with relevant keywords to check for existing context.",
+      "",
+      "Available memories:",
+      titleList + extra
+    );
+  }
+  if (input.canStore) {
+    lines.push(
+      "",
+      "**AFTER completing the task**, if you learned something non-obvious,",
+      "call `memory_store` to save it for future sessions."
+    );
+  }
+  lines.push(
+    "",
+    "Guardrails: read max 10 memory results per search. Update existing memories instead of creating duplicates."
+  );
+  return lines.join("\n");
+}
 var projectStorage = null;
 var orphanSyncPending = false;
 function ensureOrphanSync(storage) {
@@ -8932,41 +9072,17 @@ function memory_default(pi) {
       recallDone = true;
       return;
     }
-    const lines = [
-      "## \u{1F9E0} Memory System Active",
-      "",
-      `You have ${projectMemories.length} memories stored for project "${projectName}".`
-    ];
-    if (canSearch && projectMemories.length > 0) {
-      const titleList = projectMemories.slice(0, 20).map((m) => `- ${m.title}`).join("\n");
-      const extra = projectMemories.length > 20 ? `
-... and ${projectMemories.length - 20} more` : "";
-      lines.push(
-        "**BEFORE starting work**, call `memory_search` with relevant keywords to check for existing context.",
-        "",
-        "Available memories:",
-        titleList + extra
-      );
-    } else {
-      recallDone = true;
-    }
-    if (canStore) {
-      lines.push(
-        "",
-        "**AFTER completing the task**, if you learned something non-obvious,",
-        "call `memory_store` to save it for future sessions."
-      );
-    } else {
-      storeDone = true;
-    }
-    lines.push(
-      "",
-      "Guardrails: read max 10 memory results per search. Update existing memories instead of creating duplicates."
-    );
+    if (!canSearch || projectMemories.length === 0) recallDone = true;
+    if (!canStore) storeDone = true;
     return {
       message: {
         customType: "unipi-memory-recall-reminder",
-        content: lines.join("\n"),
+        content: buildMemoryRecallReminder({
+          projectName,
+          memories: projectMemories,
+          canSearch,
+          canStore
+        }),
         display: false
       }
     };
@@ -9004,9 +9120,9 @@ import { dirname as dirname10 } from "node:path";
 import { fileURLToPath as fileURLToPath5 } from "node:url";
 
 // packages/info-screen/config.ts
-import { readFileSync as readFileSync7, writeFileSync as writeFileSync7, existsSync as existsSync8, mkdirSync as mkdirSync6 } from "node:fs";
-import { join as join8, dirname as dirname8 } from "node:path";
-import { homedir as homedir4 } from "node:os";
+import { readFileSync as readFileSync7, writeFileSync as writeFileSync8, existsSync as existsSync8, mkdirSync as mkdirSync7 } from "node:fs";
+import { join as join9, dirname as dirname8 } from "node:path";
+import { homedir as homedir5 } from "node:os";
 
 // packages/info-screen/types.ts
 var BOOT_MODES = ["on", "auto-close", "off"];
@@ -9018,7 +9134,7 @@ var DEFAULT_SETTINGS = {
 };
 
 // packages/info-screen/config.ts
-var SETTINGS_PATH = join8(homedir4(), ".pi", "agent", "settings.json");
+var SETTINGS_PATH = join9(homedir5(), ".pi", "agent", "settings.json");
 var SETTINGS_KEY = "unipi";
 var cachedSettings = null;
 function isRecord(value) {
@@ -9036,9 +9152,9 @@ function readSettingsFile() {
 function writeSettingsFile(data) {
   const dir = dirname8(SETTINGS_PATH);
   if (!existsSync8(dir)) {
-    mkdirSync6(dir, { recursive: true });
+    mkdirSync7(dir, { recursive: true });
   }
-  writeFileSync7(SETTINGS_PATH, JSON.stringify(data, null, 2) + "\n", "utf-8");
+  writeFileSync8(SETTINGS_PATH, JSON.stringify(data, null, 2) + "\n", "utf-8");
 }
 function getInfoSettings() {
   if (cachedSettings) return cachedSettings;
@@ -9336,16 +9452,16 @@ if (!globalThis.__unipi_info_registry) {
 // packages/info-screen/core-groups.ts
 init_core();
 import { readFileSync as readFileSync9, readdirSync as readdirSync6, existsSync as existsSync10 } from "node:fs";
-import { join as join10 } from "node:path";
-import { homedir as homedir6 } from "node:os";
+import { join as join11 } from "node:path";
+import { homedir as homedir7 } from "node:os";
 init_usage_parser();
 function discoverExtensions() {
   const extensions = [];
-  const homeDir = process.env.HOME || process.env.USERPROFILE || homedir6();
+  const homeDir = process.env.HOME || process.env.USERPROFILE || homedir7();
   const cwd = process.cwd();
   const settingsPaths = [
-    join10(homeDir, ".pi", "agent", "settings.json"),
-    join10(cwd, ".pi", "settings.json")
+    join11(homeDir, ".pi", "agent", "settings.json"),
+    join11(cwd, ".pi", "settings.json")
   ];
   const counted = /* @__PURE__ */ new Set();
   for (const settingsPath of settingsPaths) {
@@ -9390,8 +9506,8 @@ function discoverExtensions() {
     }
   }
   const extensionDirs = [
-    join10(homeDir, ".pi", "agent", "extensions"),
-    join10(cwd, ".pi", "extensions")
+    join11(homeDir, ".pi", "agent", "extensions"),
+    join11(cwd, ".pi", "extensions")
   ];
   for (const dir of extensionDirs) {
     if (!existsSync10(dir)) continue;
@@ -9458,11 +9574,11 @@ function getTotalLoadTime() {
 var extraSkillDirs = [];
 function discoverSkills() {
   const skills = [];
-  const homeDir = process.env.HOME || process.env.USERPROFILE || homedir6();
+  const homeDir = process.env.HOME || process.env.USERPROFILE || homedir7();
   const cwd = process.cwd();
   const skillDirs = [
-    join10(homeDir, ".pi", "agent", "skills"),
-    join10(cwd, ".pi", "skills"),
+    join11(homeDir, ".pi", "agent", "skills"),
+    join11(cwd, ".pi", "skills"),
     // Add extra dirs from extensions
     ...extraSkillDirs
   ];
@@ -9475,13 +9591,13 @@ function discoverSkills() {
         if (!entry.isDirectory()) continue;
         const name = entry.name;
         if (counted.has(name)) continue;
-        const skillPath = join10(dir, name, "SKILL.md");
+        const skillPath = join11(dir, name, "SKILL.md");
         if (existsSync10(skillPath)) {
           counted.add(name);
           let source = "extension";
-          if (dir.includes(join10(homeDir, ".pi"))) {
+          if (dir.includes(join11(homeDir, ".pi"))) {
             source = "global";
-          } else if (dir === join10(cwd, ".pi", "skills")) {
+          } else if (dir === join11(cwd, ".pi", "skills")) {
             source = "project";
           }
           skills.push({ name, source });
@@ -9532,7 +9648,7 @@ function registerCoreGroups() {
     },
     dataProvider: async () => {
       const cwd = process.cwd();
-      const homeDir = process.env.HOME || process.env.USERPROFILE || homedir6();
+      const homeDir = process.env.HOME || process.env.USERPROFILE || homedir7();
       const shortCwd = cwd.startsWith(homeDir) ? `~${cwd.slice(homeDir.length)}` : cwd;
       const announced = getAnnouncedModules();
       const registeredGroups = infoRegistry.getAllGroups();
@@ -10725,10 +10841,14 @@ import { defineTool } from "@earendil-works/pi-coding-agent";
 import { Text } from "@earendil-works/pi-tui";
 import { Type as Type3 } from "typebox";
 import { existsSync as existsSync13, readdirSync as readdirSync8 } from "node:fs";
-import { join as join13 } from "node:path";
-import { homedir as homedir9 } from "node:os";
+import { join as join15 } from "node:path";
+import { homedir as homedir11 } from "node:os";
 
 // packages/subagents/src/core-compat.ts
+import { chmodSync as chmodSync2, lstatSync as lstatSync2, mkdirSync as mkdirSync9, writeFileSync as writeFileSync10 } from "node:fs";
+import { homedir as homedir8 } from "node:os";
+import { join as join12 } from "node:path";
+import { randomUUID as randomUUID2 } from "node:crypto";
 var MODULES2 = { SUBAGENTS: "subagents" };
 var UNIPI_EVENTS2 = {
   MODULE_READY: "unipi:module:ready",
@@ -10742,6 +10862,61 @@ function emitEvent2(pi, eventName, payload) {
     return false;
   }
 }
+var MAX_RAW_HELPER_ARTIFACT_BYTES = 16 * 1024 * 1024;
+function boundHelperOutput(text, maxBytes = 64 * 1024, existingArtifactPath) {
+  const originalBytes = Buffer.byteLength(text, "utf8");
+  if (originalBytes <= maxBytes) return { text, truncated: false, originalBytes };
+  let artifactPath = existingArtifactPath;
+  let artifactWarning;
+  if (!artifactPath && originalBytes <= MAX_RAW_HELPER_ARTIFACT_BYTES) {
+    try {
+      const dir = join12(homedir8(), ".unipi", "tool-results");
+      mkdirSync9(dir, { recursive: true, mode: 448 });
+      let stat = lstatSync2(dir);
+      if (!stat.isDirectory() || stat.isSymbolicLink()) {
+        throw new Error(`Refusing unsafe tool-result directory: ${dir}`);
+      }
+      if ((stat.mode & 63) !== 0) {
+        chmodSync2(dir, 448);
+        stat = lstatSync2(dir);
+        if ((stat.mode & 63) !== 0) throw new Error(`Refusing non-private tool-result directory: ${dir}`);
+      }
+      artifactPath = join12(dir, `helper-${randomUUID2()}.txt`);
+      writeFileSync10(artifactPath, text, { encoding: "utf8", mode: 384, flag: "wx" });
+    } catch (error) {
+      artifactWarning = `Full-output artifact unavailable: ${error instanceof Error ? error.message : String(error)}`;
+      artifactPath = void 0;
+    }
+  } else if (!artifactPath) {
+    artifactWarning = `Full output exceeded the ${MAX_RAW_HELPER_ARTIFACT_BYTES}-byte local artifact safety cap and was not retained.`;
+  }
+  const marker = [
+    "",
+    "--- output bounded by UniPi ---",
+    artifactPath ? `Full output: ${artifactPath}` : artifactWarning,
+    `Original size: ${originalBytes} bytes; model-visible ceiling: ${maxBytes} bytes.`,
+    ...artifactPath ? ["Use the read tool with offset/limit to inspect only the needed region."] : []
+  ].join("\n");
+  const markerBytes = Buffer.byteLength(marker, "utf8");
+  const contentBudget = Math.max(1, maxBytes - markerBytes - 80);
+  const bytes = Buffer.from(text, "utf8");
+  const headBytes = Math.ceil(contentBudget * 0.75);
+  const tailBytes = Math.max(0, contentBudget - headBytes);
+  const head = bytes.subarray(0, headBytes).toString("utf8").replace(/\uFFFD+$/u, "");
+  const tail2 = bytes.subarray(originalBytes - tailBytes).toString("utf8").replace(/^\uFFFD+/u, "");
+  let bounded = `${head}
+\u2026 ${Math.max(0, originalBytes - contentBudget)} bytes omitted \u2026
+${tail2}${marker}`;
+  if (Buffer.byteLength(bounded, "utf8") > maxBytes) {
+    bounded = Buffer.from(bounded, "utf8").subarray(0, maxBytes).toString("utf8").replace(/\uFFFD+$/u, "");
+  }
+  return {
+    text: bounded,
+    truncated: true,
+    originalBytes,
+    artifactPath
+  };
+}
 async function withHerdrBlocked2(pi, label, fn) {
   emitEvent2(pi, "herdr:blocked", { active: true, label });
   try {
@@ -10752,7 +10927,7 @@ async function withHerdrBlocked2(pi, label, fn) {
 }
 
 // packages/subagents/src/agent-manager.ts
-import { randomUUID } from "node:crypto";
+import { randomUUID as randomUUID3 } from "node:crypto";
 
 // packages/subagents/src/agent-runner.ts
 import {
@@ -10805,7 +10980,7 @@ var BUILTIN_CONFIGS = {
 };
 
 // packages/subagents/src/agent-runner.ts
-var EXCLUDED_TOOL_NAMES = ["Agent", "get_result"];
+var EXCLUDED_TOOL_NAMES = ["spawn_helper", "get_helper_result", "Agent", "get_result"];
 var BUILTIN_TOOL_NAMES = ["read", "bash", "edit", "write", "grep", "find", "ls"];
 var defaultMaxTurns;
 var graceTurns = 5;
@@ -10964,9 +11139,12 @@ init_model_resolver();
 
 // packages/subagents/src/custom-agents.ts
 import { existsSync as existsSync11, readdirSync as readdirSync7, readFileSync as readFileSync10, renameSync as renameSync4 } from "node:fs";
-import { join as join11 } from "node:path";
-import { homedir as homedir7 } from "node:os";
+import { join as join13 } from "node:path";
+import { homedir as homedir9 } from "node:os";
 import { parseFrontmatter } from "@earendil-works/pi-coding-agent";
+function compareCodeUnits(a, b) {
+  return a < b ? -1 : a > b ? 1 : 0;
+}
 function backupCorrupted(filePath) {
   const backupPath = filePath + ".bak";
   try {
@@ -10975,10 +11153,10 @@ function backupCorrupted(filePath) {
   }
 }
 function getProjectAgentsDir(cwd) {
-  return join11(cwd, ".unipi", "config", "agents");
+  return join13(cwd, ".unipi", "config", "agents");
 }
 function getGlobalAgentsDir() {
-  return join11(homedir7(), ".unipi", "config", "agents");
+  return join13(homedir9(), ".unipi", "config", "agents");
 }
 var BUILTIN_TOOL_NAMES2 = ["read", "bash", "edit", "write", "grep", "find", "ls"];
 function loadAgentFromFile(filePath, source) {
@@ -11019,9 +11197,9 @@ function loadCustomAgents(cwd) {
   const agents = /* @__PURE__ */ new Map();
   const globalDir = getGlobalAgentsDir();
   if (existsSync11(globalDir)) {
-    const files = readdirSync7(globalDir).filter((f) => f.endsWith(".md"));
+    const files = readdirSync7(globalDir).filter((f) => f.endsWith(".md")).sort(compareCodeUnits);
     for (const file of files) {
-      const agent = loadAgentFromFile(join11(globalDir, file), "global");
+      const agent = loadAgentFromFile(join13(globalDir, file), "global");
       if (agent) {
         agents.set(agent.name, agent);
       }
@@ -11029,9 +11207,9 @@ function loadCustomAgents(cwd) {
   }
   const projectDir = getProjectAgentsDir(cwd);
   if (existsSync11(projectDir)) {
-    const files = readdirSync7(projectDir).filter((f) => f.endsWith(".md"));
+    const files = readdirSync7(projectDir).filter((f) => f.endsWith(".md")).sort(compareCodeUnits);
     for (const file of files) {
-      const agent = loadAgentFromFile(join11(projectDir, file), "project");
+      const agent = loadAgentFromFile(join13(projectDir, file), "project");
       if (agent) {
         agents.set(agent.name, agent);
       }
@@ -11124,6 +11302,9 @@ var FileLock = class {
 };
 
 // packages/subagents/src/agent-manager.ts
+function compareCodeUnits2(a, b) {
+  return a < b ? -1 : a > b ? 1 : 0;
+}
 var DEFAULT_MAX_CONCURRENT = 4;
 var AgentManager = class {
   agents = /* @__PURE__ */ new Map();
@@ -11157,7 +11338,7 @@ var AgentManager = class {
       ...Object.keys(BUILTIN_CONFIGS).filter((type) => type !== "name-gen"),
       ...this.customAgents.keys(),
       ...Object.keys(this.typeSettings)
-    ])];
+    ])].sort(compareCodeUnits2);
   }
   /** A type is enabled only when both JSON config and agent frontmatter allow it. */
   isTypeEnabled(type) {
@@ -11181,7 +11362,7 @@ var AgentManager = class {
    */
   spawn(pi, ctx, type, prompt, options) {
     this.assertTypeEnabled(type);
-    const id = randomUUID().slice(0, 17);
+    const id = randomUUID3().slice(0, 17);
     const abortController = new AbortController();
     const record = {
       id,
@@ -11384,9 +11565,9 @@ var AgentManager = class {
 };
 
 // packages/subagents/src/config.ts
-import { existsSync as existsSync12, mkdirSync as mkdirSync8, readFileSync as readFileSync11, renameSync as renameSync5, writeFileSync as writeFileSync9 } from "node:fs";
-import { join as join12 } from "node:path";
-import { homedir as homedir8 } from "node:os";
+import { existsSync as existsSync12, mkdirSync as mkdirSync10, readFileSync as readFileSync11, renameSync as renameSync5, writeFileSync as writeFileSync11 } from "node:fs";
+import { join as join14 } from "node:path";
+import { homedir as homedir10 } from "node:os";
 var DEFAULT_CONFIG2 = {
   maxConcurrent: 4,
   enabled: true,
@@ -11396,19 +11577,19 @@ var DEFAULT_CONFIG2 = {
   }
 };
 function getGlobalConfigPath() {
-  return join12(homedir8(), ".unipi", "config", "subagents.json");
+  return join14(homedir10(), ".unipi", "config", "subagents.json");
 }
 function getWorkspaceConfigPath(cwd) {
-  return join12(cwd, ".unipi", "config", "subagents.json");
+  return join14(cwd, ".unipi", "config", "subagents.json");
 }
 function ensureDirExists(dirPath) {
   if (!existsSync12(dirPath)) {
-    mkdirSync8(dirPath, { recursive: true });
+    mkdirSync10(dirPath, { recursive: true });
   }
 }
 function writeConfigAtomic(filePath, config) {
   const tmpPath = filePath + ".tmp";
-  writeFileSync9(tmpPath, JSON.stringify(config, null, 2), "utf-8");
+  writeFileSync11(tmpPath, JSON.stringify(config, null, 2), "utf-8");
   renameSync5(tmpPath, filePath);
 }
 function loadConfigFromPath(filePath) {
@@ -11433,17 +11614,17 @@ function repairCorrupted(filePath) {
 }
 function initConfig(cwd) {
   const globalPath = getGlobalConfigPath();
-  const globalDir = join12(homedir8(), ".unipi", "config");
-  const globalAgentsDir = join12(homedir8(), ".unipi", "config", "agents");
+  const globalDir = join14(homedir10(), ".unipi", "config");
+  const globalAgentsDir = join14(homedir10(), ".unipi", "config", "agents");
   ensureDirExists(globalDir);
   ensureDirExists(globalAgentsDir);
   let globalConfig = loadConfigFromPath(globalPath);
   if (globalConfig === null) {
     globalConfig = repairCorrupted(globalPath);
   }
-  const workspaceDir = join12(cwd, ".unipi", "config");
-  const workspaceAgentsDir = join12(cwd, ".unipi", "config", "agents");
-  if (cwd && !cwd.startsWith(homedir8())) {
+  const workspaceDir = join14(cwd, ".unipi", "config");
+  const workspaceAgentsDir = join14(cwd, ".unipi", "config", "agents");
+  if (cwd && !cwd.startsWith(homedir10())) {
     ensureDirExists(workspaceDir);
     ensureDirExists(workspaceAgentsDir);
   }
@@ -12107,10 +12288,10 @@ function getStatusLabel(status2, error) {
 function src_default(pi) {
   const config = initConfig(process.cwd());
   if (!config.enabled) return;
-  const homeDir = homedir9();
+  const homeDir = homedir11();
   const cwd = process.cwd();
-  const globalAgentsDir = join13(homeDir, ".unipi", "config", "agents");
-  const workspaceAgentsDir = join13(cwd, ".unipi", "config", "agents");
+  const globalAgentsDir = join15(homeDir, ".unipi", "config", "agents");
+  const workspaceAgentsDir = join15(cwd, ".unipi", "config", "agents");
   const agentActivity = /* @__PURE__ */ new Map();
   let sessionEnded = false;
   const manager2 = new AgentManager(
@@ -12590,17 +12771,22 @@ Use get_result to retrieve full results.`,
             error: record.error
           });
         }
+        const output = boundHelperOutput(record.result?.trim() || "No output.");
+        record.resultArtifactPath = output.artifactPath;
         return textResult(
           `Agent completed in ${(durationMs / 1e3).toFixed(1)}s (${record.toolUses} tool uses${tokenText ? `, ${tokenText} tokens` : ""}).
 
-` + (record.result?.trim() || "No output."),
+` + output.text,
           {
             status: "completed",
             toolUses: record.toolUses,
             tokens: tokenText,
             durationMs,
             turnCount: fgState.turnCount,
-            maxTurns: fgState.maxTurns
+            maxTurns: fgState.maxTurns,
+            truncated: output.truncated,
+            originalBytes: output.originalBytes,
+            artifactPath: output.artifactPath
           }
         );
       }
@@ -12676,7 +12862,13 @@ Description: ${record.description}
         } else if (record.status === "error") {
           output += `Error: ${record.error}`;
         } else {
-          output += record.result?.trim() || "No output.";
+          const bounded = boundHelperOutput(
+            record.result?.trim() || "No output.",
+            64 * 1024,
+            record.resultArtifactPath
+          );
+          record.resultArtifactPath = bounded.artifactPath;
+          output += bounded.text;
         }
         if (record.status !== "running" && record.status !== "queued") {
           record.resultConsumed = true;
@@ -16929,8 +17121,8 @@ init_core();
 
 // packages/utility/src/lifecycle/cleanup.ts
 import { existsSync as existsSync16, statSync as statSync8, readdirSync as readdirSync10, unlinkSync as unlinkSync5, rmdirSync } from "node:fs";
-import { join as join16 } from "node:path";
-import { homedir as homedir12, tmpdir } from "node:os";
+import { join as join18 } from "node:path";
+import { homedir as homedir14, tmpdir } from "node:os";
 var DEFAULTS = {
   dbMaxAgeDays: 14,
   tempMaxAgeDays: 7,
@@ -16939,7 +17131,7 @@ var DEFAULTS = {
 };
 function expandHome(path28) {
   if (path28.startsWith("~/")) {
-    return join16(homedir12(), path28.slice(2));
+    return join18(homedir14(), path28.slice(2));
   }
   return path28;
 }
@@ -16983,7 +17175,7 @@ function cleanDbs(options) {
       return;
     }
     for (const entry of entries) {
-      const fullPath = join16(dir, entry);
+      const fullPath = join18(dir, entry);
       try {
         const stats = statSync8(fullPath);
         if (stats.isDirectory()) {
@@ -17019,6 +17211,36 @@ function cleanDbs(options) {
   scanDir(unipiDir);
   return result;
 }
+function cleanToolResults(options) {
+  const result = {
+    category: "tool-results",
+    removed: 0,
+    bytesFreed: 0,
+    paths: []
+  };
+  const dir = expandHome("~/.unipi/tool-results");
+  if (!existsSync16(dir)) return result;
+  let entries;
+  try {
+    entries = readdirSync10(dir);
+  } catch {
+    return result;
+  }
+  for (const entry of entries) {
+    if (!/^(?:tool-result|mcp-[a-zA-Z0-9_-]+|helper)-[a-f0-9-]+\.txt$/.test(entry)) continue;
+    const path28 = join18(dir, entry);
+    try {
+      const stats = statSync8(path28);
+      if (!stats.isFile() || !isStale(path28, options.tempMaxAgeDays)) continue;
+      result.paths.push(path28);
+      result.bytesFreed += stats.size;
+      if (!options.dryRun) unlinkSync5(path28);
+      result.removed++;
+    } catch {
+    }
+  }
+  return result;
+}
 function cleanTemps(options) {
   const result = {
     category: "temp",
@@ -17036,7 +17258,7 @@ function cleanTemps(options) {
   }
   for (const entry of entries) {
     if (!patterns.some((p) => p.test(entry))) continue;
-    const fullPath = join16(tmpDir, entry);
+    const fullPath = join18(tmpDir, entry);
     try {
       const stats = statSync8(fullPath);
       if (!stats.isFile()) continue;
@@ -17066,7 +17288,7 @@ function cleanSessions(options) {
     paths: []
   };
   const unipiDir = expandHome("~/.unipi");
-  const sessionsDir = join16(unipiDir, "sessions");
+  const sessionsDir = join18(unipiDir, "sessions");
   if (!existsSync16(sessionsDir)) return result;
   let entries;
   try {
@@ -17075,7 +17297,7 @@ function cleanSessions(options) {
     return result;
   }
   for (const entry of entries) {
-    const fullPath = join16(sessionsDir, entry);
+    const fullPath = join18(sessionsDir, entry);
     try {
       const stats = statSync8(fullPath);
       if (!stats.isDirectory()) continue;
@@ -17087,7 +17309,7 @@ function cleanSessions(options) {
             const removeRecursive = (dir) => {
               const items = readdirSync10(dir);
               for (const item of items) {
-                const itemPath = join16(dir, item);
+                const itemPath = join18(dir, item);
                 const itemStats = statSync8(itemPath);
                 if (itemStats.isDirectory()) {
                   removeRecursive(itemPath);
@@ -17126,7 +17348,7 @@ function cleanCache(options) {
     return result;
   }
   for (const entry of entries) {
-    const fullPath = join16(cacheDir, entry);
+    const fullPath = join18(cacheDir, entry);
     try {
       const stats = statSync8(fullPath);
       if (!stats.isFile()) continue;
@@ -17153,6 +17375,7 @@ function cleanupStale(options = {}) {
   const results = [
     cleanDbs(opts),
     cleanTemps(opts),
+    cleanToolResults(opts),
     cleanSessions(opts),
     cleanCache(opts)
   ];
@@ -17193,11 +17416,11 @@ function formatCleanupReport(report) {
 
 // packages/utility/src/diagnostics/engine.ts
 import { existsSync as existsSync17, accessSync as accessSync2, constants as constants2 } from "node:fs";
-import { join as join17 } from "node:path";
-import { homedir as homedir13 } from "node:os";
+import { join as join19 } from "node:path";
+import { homedir as homedir15 } from "node:os";
 function expandHome2(path28) {
   if (path28.startsWith("~/")) {
-    return join17(homedir13(), path28.slice(2));
+    return join19(homedir15(), path28.slice(2));
   }
   return path28;
 }
@@ -19263,7 +19486,7 @@ function getLifecycle(options) {
 }
 
 // packages/utility/src/analytics/collector.ts
-import { randomUUID as randomUUID2 } from "node:crypto";
+import { randomUUID as randomUUID4 } from "node:crypto";
 var DEFAULTS3 = {
   dbPath: "~/.unipi/analytics/events.db",
   maxEvents: 1e4,
@@ -19272,7 +19495,7 @@ var DEFAULTS3 = {
 var eventBuffer = [];
 var bufferFlushTimer = null;
 function generateId() {
-  return randomUUID2();
+  return randomUUID4();
 }
 function today() {
   return (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
@@ -19480,6 +19703,187 @@ function registerInfoScreen(pi) {
   });
 }
 
+// packages/utility/src/prefix-cache.ts
+import { createHmac, randomBytes } from "node:crypto";
+var EMPTY_SNAPSHOT = {
+  epoch: 0,
+  requests: 0,
+  prefixExtensions: 0,
+  identicalRetries: 0,
+  boundaries: 0,
+  lastTransition: "none",
+  requestFingerprint: "none",
+  envelopeFingerprint: "none",
+  sequenceField: "none",
+  sequenceItems: 0,
+  route: "unknown",
+  usage: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0, responses: 0 }
+};
+function canonicalize(value, seen = /* @__PURE__ */ new WeakSet()) {
+  if (value === void 0) return { $type: "undefined" };
+  if (typeof value === "bigint") return { $type: "bigint", value: value.toString() };
+  if (typeof value === "number" && !Number.isFinite(value)) {
+    return { $type: "number", value: String(value) };
+  }
+  if (typeof value !== "object" || value === null) return value;
+  if (seen.has(value)) return { $type: "cycle" };
+  seen.add(value);
+  if (Array.isArray(value)) {
+    const result2 = value.map((item) => canonicalize(item, seen));
+    seen.delete(value);
+    return result2;
+  }
+  if (value instanceof Uint8Array) {
+    seen.delete(value);
+    return { $type: "bytes", length: value.byteLength };
+  }
+  const record = value;
+  const result = {};
+  for (const key of Object.keys(record).sort((a, b) => a < b ? -1 : a > b ? 1 : 0)) {
+    result[key] = canonicalize(record[key], seen);
+  }
+  seen.delete(value);
+  return result;
+}
+function canonicalJson(value) {
+  return JSON.stringify(canonicalize(value));
+}
+function routeLabel(model) {
+  if (!model || typeof model !== "object") return "unknown";
+  const value = model;
+  return [value.provider, value.id, value.api].filter((part) => typeof part === "string" && part.length > 0).join("/") || "unknown";
+}
+function findSequence(payload) {
+  for (const field of ["messages", "input", "contents"]) {
+    if (Array.isArray(payload[field])) return { field, items: payload[field] };
+  }
+  return { field: "none", items: [] };
+}
+function isPrefix(previous, current) {
+  return previous.length <= current.length && previous.every((item, index) => current[index] === item);
+}
+function usageNumber(value) {
+  return typeof value === "number" && Number.isFinite(value) && value > 0 ? value : 0;
+}
+var PrefixCacheTracker = class {
+  key;
+  previous = null;
+  seenResponses = /* @__PURE__ */ new WeakSet();
+  snapshot = structuredClone(EMPTY_SNAPSHOT);
+  constructor(key = randomBytes(32)) {
+    this.key = key;
+  }
+  reset() {
+    this.previous = null;
+    this.seenResponses = /* @__PURE__ */ new WeakSet();
+    this.snapshot = structuredClone(EMPTY_SNAPSHOT);
+  }
+  fingerprint(value) {
+    return createHmac("sha256", this.key).update(canonicalJson(value)).digest("hex").slice(0, 16);
+  }
+  observeRequest(payload, model) {
+    const object = payload && typeof payload === "object" && !Array.isArray(payload) ? payload : { payload };
+    const { field, items } = findSequence(object);
+    const route = routeLabel(model);
+    const envelope = { route };
+    for (const [key, value] of Object.entries(object)) {
+      if (key !== field) envelope[key] = value;
+    }
+    const current = {
+      envelopeFingerprint: this.fingerprint(envelope),
+      requestFingerprint: this.fingerprint(object),
+      sequenceField: field,
+      sequenceItemFingerprints: items.map((item) => this.fingerprint(item))
+    };
+    let transition;
+    let epoch = this.snapshot.epoch;
+    if (!this.previous) {
+      transition = "first_request";
+      epoch = Math.max(1, epoch);
+    } else if (current.envelopeFingerprint !== this.previous.envelopeFingerprint) {
+      transition = "envelope_changed";
+      epoch++;
+    } else if (current.sequenceField !== this.previous.sequenceField) {
+      transition = "payload_shape_changed";
+      epoch++;
+    } else if (current.requestFingerprint === this.previous.requestFingerprint) {
+      transition = "identical_retry";
+    } else if (isPrefix(this.previous.sequenceItemFingerprints, current.sequenceItemFingerprints)) {
+      transition = "prefix_extended";
+    } else {
+      transition = "history_rewritten";
+      epoch++;
+    }
+    this.snapshot = {
+      ...this.snapshot,
+      epoch,
+      requests: this.snapshot.requests + 1,
+      prefixExtensions: this.snapshot.prefixExtensions + (transition === "prefix_extended" ? 1 : 0),
+      identicalRetries: this.snapshot.identicalRetries + (transition === "identical_retry" ? 1 : 0),
+      boundaries: this.snapshot.boundaries + (transition === "envelope_changed" || transition === "history_rewritten" || transition === "payload_shape_changed" ? 1 : 0),
+      lastTransition: transition,
+      requestFingerprint: current.requestFingerprint,
+      envelopeFingerprint: current.envelopeFingerprint,
+      sequenceField: current.sequenceField,
+      sequenceItems: current.sequenceItemFingerprints.length,
+      route
+    };
+    this.previous = current;
+    return this.getSnapshot();
+  }
+  observeMessages(messages) {
+    for (const message of messages) {
+      if (!message || typeof message !== "object") continue;
+      const value = message;
+      if (value.role !== "assistant" || !value.usage || typeof value.usage !== "object") continue;
+      if (value.stopReason === "error" || value.stopReason === "aborted") continue;
+      if (this.seenResponses.has(message)) continue;
+      this.seenResponses.add(message);
+      const usage = value.usage;
+      this.snapshot.usage.input += usageNumber(usage.input);
+      this.snapshot.usage.output += usageNumber(usage.output);
+      this.snapshot.usage.cacheRead += usageNumber(usage.cacheRead);
+      this.snapshot.usage.cacheWrite += usageNumber(usage.cacheWrite);
+      this.snapshot.usage.responses++;
+    }
+    return this.getSnapshot();
+  }
+  markBoundary(transition) {
+    if (this.previous) {
+      this.snapshot.epoch++;
+      this.snapshot.boundaries++;
+    }
+    this.snapshot.lastTransition = transition;
+    this.previous = null;
+  }
+  getSnapshot() {
+    return structuredClone(this.snapshot);
+  }
+};
+function formatPrefixCacheStats(snapshot) {
+  const usage = snapshot.usage;
+  const totalPrompt = usage.input + usage.cacheRead + usage.cacheWrite;
+  const readRate = totalPrompt > 0 ? `${(usage.cacheRead / totalPrompt * 100).toFixed(1)}%` : "n/a";
+  return [
+    "## Provider Prefix Cache",
+    "",
+    `- Epoch: ${snapshot.epoch || "not observed"}`,
+    `- Requests observed: ${snapshot.requests}`,
+    `- Prefix extensions: ${snapshot.prefixExtensions}`,
+    `- Explicit boundaries: ${snapshot.boundaries}`,
+    `- Last transition: ${snapshot.lastTransition}`,
+    `- Route: ${snapshot.route}`,
+    `- Request fingerprint: ${snapshot.requestFingerprint}`,
+    `- Envelope fingerprint: ${snapshot.envelopeFingerprint}`,
+    `- Provider cache read: ${usage.cacheRead} tokens`,
+    `- Provider cache write: ${usage.cacheWrite} tokens`,
+    `- Observed cache-read share: ${readRate}`,
+    "",
+    "Fingerprints are session-local keyed HMACs. Raw prompts, messages, tool arguments, and payloads are not retained or logged.",
+    "A prefix extension indicates structural eligibility only; provider cache retention and routing still determine actual hits."
+  ].join("\n");
+}
+
 // packages/utility/src/index.ts
 var VERSION6 = getPackageVersion(dirname14(fileURLToPath7(import.meta.url)));
 var firstMessageSeen = false;
@@ -19496,12 +19900,44 @@ var ALL_COMMANDS = [
   UTILITY_COMMANDS.BADGE_GEN,
   UTILITY_COMMANDS.BADGE_TOGGLE,
   UTILITY_COMMANDS.BADGE_SETTINGS,
-  UTILITY_COMMANDS.UTIL_SETTINGS
+  UTILITY_COMMANDS.UTIL_SETTINGS,
+  UTILITY_COMMANDS.PREFIX_CACHE
 ].map((cmd) => `unipi:${cmd}`);
 var ALL_TOOLS2 = [UTILITY_TOOLS.BATCH, UTILITY_TOOLS.ENV, UTILITY_TOOLS.SET_SESSION_NAME];
 function src_default3(pi) {
   const lifecycle = getLifecycle();
   const analytics = getAnalyticsCollector();
+  const prefixCache = new PrefixCacheTracker();
+  pi.registerCommand(`unipi:${UTILITY_COMMANDS.PREFIX_CACHE}`, {
+    description: "Show privacy-safe provider prefix-cache diagnostics",
+    handler: async (_args, ctx) => {
+      const report = formatPrefixCacheStats(prefixCache.getSnapshot());
+      if (ctx.hasUI) {
+        ctx.ui.notify(report, "info");
+      } else {
+        pi.sendMessage({ customType: "unipi-response", content: report, display: true }, { deliverAs: "followUp" });
+      }
+    }
+  });
+  pi.on("session_start", () => {
+    prefixCache.reset();
+  });
+  pi.on("before_provider_request", (event, ctx) => {
+    prefixCache.observeRequest(event.payload, ctx.model);
+  });
+  pi.on("agent_end", (event) => {
+    prefixCache.observeMessages(event.messages);
+  });
+  pi.on("model_select", (event) => {
+    if (event.previousModel && (event.previousModel.provider !== event.model.provider || event.previousModel.id !== event.model.id || event.previousModel.api !== event.model.api)) {
+      prefixCache.markBoundary("envelope_changed");
+    }
+  });
+  pi.on("thinking_level_select", (event) => {
+    if (event.previousLevel !== event.level) prefixCache.markBoundary("envelope_changed");
+  });
+  pi.on("session_compact", () => prefixCache.markBoundary("history_rewritten"));
+  pi.on("session_tree", () => prefixCache.markBoundary("history_rewritten"));
   lifecycle.registerCleanup(async () => {
     analytics.disable();
   });
@@ -20349,9 +20785,9 @@ function renderLauncherUI(params) {
 }
 
 // packages/ask-user/config.ts
-import { readFileSync as readFileSync16, writeFileSync as writeFileSync14, existsSync as existsSync21 } from "node:fs";
-import { join as join19 } from "node:path";
-import { homedir as homedir15 } from "node:os";
+import { readFileSync as readFileSync16, writeFileSync as writeFileSync16, existsSync as existsSync21 } from "node:fs";
+import { join as join21 } from "node:path";
+import { homedir as homedir17 } from "node:os";
 var DEFAULT_SETTINGS3 = {
   enabled: true,
   allowedFormats: {
@@ -20361,7 +20797,7 @@ var DEFAULT_SETTINGS3 = {
   },
   notifyOnAsk: true
 };
-var SETTINGS_PATH2 = join19(homedir15(), ".pi", "agent", "settings.json");
+var SETTINGS_PATH2 = join21(homedir17(), ".pi", "agent", "settings.json");
 var SETTINGS_KEY2 = "unipi";
 var cachedSettings2 = null;
 function isRecord3(value) {
@@ -20381,7 +20817,7 @@ function writeSettingsFile2(data) {
   if (!existsSync21(dir)) {
     __require("node:fs").mkdirSync(dir, { recursive: true });
   }
-  writeFileSync14(SETTINGS_PATH2, JSON.stringify(data, null, 2) + "\n", "utf-8");
+  writeFileSync16(SETTINGS_PATH2, JSON.stringify(data, null, 2) + "\n", "utf-8");
 }
 function getAskUserSettings() {
   if (cachedSettings2) return cachedSettings2;
@@ -21807,7 +22243,7 @@ Stderr: ${this.stderrBuffer}`
 
 // packages/mcp/src/bridge/translator.ts
 init_core();
-function compareCodeUnits(left, right) {
+function compareCodeUnits3(left, right) {
   return left < right ? -1 : left > right ? 1 : 0;
 }
 function isObject(value) {
@@ -21817,13 +22253,13 @@ var LITERAL_VALUE_KEYWORDS = /* @__PURE__ */ new Set(["const", "default", "enum"
 function canonicalizeValue(value, key, normalizeSchemaKeywords = true) {
   if (Array.isArray(value)) {
     if (normalizeSchemaKeywords && key === "required" && value.every((item) => typeof item === "string")) {
-      return [...new Set(value)].sort(compareCodeUnits);
+      return [...new Set(value)].sort(compareCodeUnits3);
     }
     return value.map((item) => canonicalizeValue(item, void 0, normalizeSchemaKeywords));
   }
   if (!isObject(value)) return value;
   const canonical = {};
-  for (const objectKey of Object.keys(value).sort(compareCodeUnits)) {
+  for (const objectKey of Object.keys(value).sort(compareCodeUnits3)) {
     const childNormalizesSchemaKeywords = normalizeSchemaKeywords && !LITERAL_VALUE_KEYWORDS.has(objectKey);
     canonical[objectKey] = canonicalizeValue(
       value[objectKey],
@@ -21873,19 +22309,26 @@ function translateMcpTool(mcpTool, serverName, client) {
           });
         }
       }
-      if (result.isError) {
-        const errorText = blocks.map((b) => b.text).join("\n") || "Unknown error";
-        return {
-          content: [{ type: "text", text: `MCP tool error from ${serverName}: ${errorText}` }],
-          details: { error: true, server: serverName, tool: mcpTool.name }
-        };
-      }
       if (blocks.length === 0) {
-        blocks.push({ type: "text", text: "(no output)" });
+        blocks.push({ type: "text", text: result.isError ? "Unknown error" : "(no output)" });
       }
+      const rawText = blocks.map((block2) => block2.text).join("\n");
+      const wrapper = result.isError ? `MCP tool error from ${serverName}: ` : "";
+      const output = boundModelOutput(rawText, {
+        maxBytes: Math.max(1024, MCP_DEFAULTS.MAX_MODEL_OUTPUT_BYTES - Buffer.byteLength(wrapper, "utf8")),
+        artifactPrefix: `mcp-${serverName}-${mcpTool.name}`
+      });
+      const visibleText = `${wrapper}${output.text}`;
       return {
-        content: blocks,
-        details: { server: serverName, tool: mcpTool.name }
+        content: [{ type: "text", text: visibleText }],
+        details: {
+          error: result.isError || void 0,
+          server: serverName,
+          tool: mcpTool.name,
+          truncated: output.truncated,
+          originalBytes: output.originalBytes,
+          artifactPath: output.artifactPath
+        }
       };
     } catch (err) {
       const message = err instanceof Error ? err.message : String(err);
@@ -21970,7 +22413,7 @@ var ServerRegistry = class {
     );
     const prepared = settled.filter((result) => result.status === "fulfilled").map((result) => result.value);
     if (prepared.length === 0) return;
-    const registrations = prepared.flatMap(({ entry, tools }) => tools.map((tool) => ({ entry, tool }))).sort((left, right) => compareCodeUnits(left.tool.name, right.tool.name));
+    const registrations = prepared.flatMap(({ entry, tools }) => tools.map((tool) => ({ entry, tool }))).sort((left, right) => compareCodeUnits3(left.tool.name, right.tool.name));
     try {
       this.assertUniqueFinalToolNames(registrations.map(({ tool }) => tool.name));
     } catch (error) {
@@ -21995,7 +22438,7 @@ var ServerRegistry = class {
       } else {
         const message = `${error instanceof Error ? error.message : String(error)}; some MCP tools remain registered until Pi restarts`;
         for (const { entry, client, tools } of prepared) {
-          const toolNames = tools.map((tool) => tool.name).filter((name) => registeredNames.includes(name)).sort(compareCodeUnits);
+          const toolNames = tools.map((tool) => tool.name).filter((name) => registeredNames.includes(name)).sort(compareCodeUnits3);
           entry.toolNames = toolNames;
           entry.state = {
             ...entry.state,
@@ -22012,8 +22455,8 @@ var ServerRegistry = class {
       }
       throw error;
     }
-    for (const { entry, client, tools } of [...prepared].sort((left, right) => compareCodeUnits(left.entry.name, right.entry.name))) {
-      const toolNames = tools.map((tool) => tool.name).sort(compareCodeUnits);
+    for (const { entry, client, tools } of [...prepared].sort((left, right) => compareCodeUnits3(left.entry.name, right.entry.name))) {
+      const toolNames = tools.map((tool) => tool.name).sort(compareCodeUnits3);
       entry.toolNames = toolNames;
       entry.state = {
         ...entry.state,
@@ -22065,7 +22508,7 @@ var ServerRegistry = class {
       await connectedClient.connect(safeCommand, safeArgs, safeEnv);
       entry.client = connectedClient;
       const mcpTools = await connectedClient.listTools();
-      const tools = mcpTools.map((tool) => translateMcpTool(tool, name, connectedClient)).sort((left, right) => compareCodeUnits(left.name, right.name));
+      const tools = mcpTools.map((tool) => translateMcpTool(tool, name, connectedClient)).sort((left, right) => compareCodeUnits3(left.name, right.name));
       return { entry, client: connectedClient, tools };
     } catch (error) {
       const message = error instanceof Error ? error.message : String(error);
@@ -22091,7 +22534,7 @@ var ServerRegistry = class {
     }
     if (duplicates.size > 0) {
       throw new Error(
-        `Duplicate final MCP tool name(s): ${[...duplicates].sort(compareCodeUnits).join(", ")}`
+        `Duplicate final MCP tool name(s): ${[...duplicates].sort(compareCodeUnits3).join(", ")}`
       );
     }
   }
@@ -23038,7 +23481,7 @@ function src_default4(pi) {
         `unipi:${MCP_COMMANDS.STATUS}`,
         `unipi:${MCP_COMMANDS.RELOAD}`
       ],
-      tools: activeServers.flatMap((server) => registry2?.getEntry(server.name)?.toolNames ?? []).sort(compareCodeUnits)
+      tools: activeServers.flatMap((server) => registry2?.getEntry(server.name)?.toolNames ?? []).sort(compareCodeUnits3)
     });
   });
   pi.on("session_shutdown", async (_event, _ctx) => {
@@ -23175,12 +23618,12 @@ import { Type as Type6 } from "typebox";
 
 // packages/notify/settings.ts
 init_core();
-import { readFileSync as readFileSync19, writeFileSync as writeFileSync17, mkdirSync as mkdirSync15, existsSync as existsSync24 } from "fs";
-import { dirname as dirname19, join as join22 } from "path";
-import { homedir as homedir17 } from "os";
+import { readFileSync as readFileSync19, writeFileSync as writeFileSync19, mkdirSync as mkdirSync17, existsSync as existsSync24 } from "fs";
+import { dirname as dirname19, join as join24 } from "path";
+import { homedir as homedir19 } from "os";
 function resolveConfigPath() {
-  const base = NOTIFY_DIRS.CONFIG.replace("~", homedir17());
-  return join22(base, "config.json");
+  const base = NOTIFY_DIRS.CONFIG.replace("~", homedir19());
+  return join24(base, "config.json");
 }
 var DEFAULT_CONFIG4 = {
   defaultPlatforms: ["native"],
@@ -23231,8 +23674,8 @@ function loadConfig2() {
 function saveConfig2(config) {
   const configPath = resolveConfigPath();
   const dir = dirname19(configPath);
-  mkdirSync15(dir, { recursive: true });
-  writeFileSync17(configPath, JSON.stringify(config, null, 2) + "\n", "utf-8");
+  mkdirSync17(dir, { recursive: true });
+  writeFileSync19(configPath, JSON.stringify(config, null, 2) + "\n", "utf-8");
 }
 function updateConfig(partial) {
   const current = loadConfig2();
@@ -23290,19 +23733,19 @@ function mergeWithDefaults(loaded) {
 init_core();
 
 // packages/notify/ntfy-config.ts
-import { readFileSync as readFileSync20, writeFileSync as writeFileSync18, mkdirSync as mkdirSync16, existsSync as existsSync25 } from "fs";
-import { dirname as dirname20, join as join23 } from "path";
-import { homedir as homedir18 } from "os";
+import { readFileSync as readFileSync20, writeFileSync as writeFileSync20, mkdirSync as mkdirSync18, existsSync as existsSync25 } from "fs";
+import { dirname as dirname20, join as join25 } from "path";
+import { homedir as homedir20 } from "os";
 var DEFAULT_NTFY_CONFIG = {
   enabled: false,
   serverUrl: "https://ntfy.sh",
   priority: 3
 };
 function getGlobalNtfyPath() {
-  return join23(homedir18(), ".unipi", "config", "notify", "ntfy.json");
+  return join25(homedir20(), ".unipi", "config", "notify", "ntfy.json");
 }
 function getProjectNtfyPath(cwd) {
-  return join23(cwd, ".unipi", "config", "notify", "ntfy.json");
+  return join25(cwd, ".unipi", "config", "notify", "ntfy.json");
 }
 function readNtfyJson(filePath) {
   try {
@@ -23332,8 +23775,8 @@ function loadNtfyConfig(cwd) {
 function saveNtfyConfig(scope, cwd, config) {
   const filePath = scope === "project" ? getProjectNtfyPath(cwd) : getGlobalNtfyPath();
   const dir = dirname20(filePath);
-  mkdirSync16(dir, { recursive: true });
-  writeFileSync18(filePath, JSON.stringify(config, null, 2) + "\n", "utf-8");
+  mkdirSync18(dir, { recursive: true });
+  writeFileSync20(filePath, JSON.stringify(config, null, 2) + "\n", "utf-8");
 }
 function getNtfyConfigScope(cwd) {
   if (existsSync25(getProjectNtfyPath(cwd))) {
@@ -23349,8 +23792,8 @@ function migrateFromLegacyConfig() {
   if (existsSync25(globalNtfyPath)) {
     return;
   }
-  const legacyConfigPath = join23(
-    homedir18(),
+  const legacyConfigPath = join25(
+    homedir20(),
     ".unipi",
     "config",
     "notify",
@@ -23372,8 +23815,8 @@ function migrateFromLegacyConfig() {
       priority: ntfySection.priority ?? 3
     };
     const dir = dirname20(globalNtfyPath);
-    mkdirSync16(dir, { recursive: true });
-    writeFileSync18(
+    mkdirSync18(dir, { recursive: true });
+    writeFileSync20(
       globalNtfyPath,
       JSON.stringify(migratedConfig, null, 2) + "\n",
       "utf-8"
@@ -23387,8 +23830,8 @@ import notifier from "node-notifier";
 
 // packages/notify/platforms/focus-win.ts
 import { execFile } from "child_process";
-import { writeFileSync as writeFileSync19, rmSync as rmSync2, mkdtempSync } from "fs";
-import { join as join24 } from "path";
+import { writeFileSync as writeFileSync21, rmSync as rmSync2, mkdtempSync } from "fs";
+import { join as join26 } from "path";
 import { tmpdir as tmpdir2 } from "os";
 var POWERCHECK_SCRIPT = `
 param($targetPid)
@@ -23424,9 +23867,9 @@ async function isWindowFocusedOnWindows() {
   }
   let tmpDir = null;
   try {
-    tmpDir = mkdtempSync(join24(tmpdir2(), "pi-focus-"));
-    const scriptPath = join24(tmpDir, "check.ps1");
-    writeFileSync19(scriptPath, POWERCHECK_SCRIPT, "utf-8");
+    tmpDir = mkdtempSync(join26(tmpdir2(), "pi-focus-"));
+    const scriptPath = join26(tmpDir, "check.ps1");
+    writeFileSync21(scriptPath, POWERCHECK_SCRIPT, "utf-8");
     const stdout = await new Promise((resolve14, reject) => {
       execFile(
         "powershell.exe",
@@ -26588,13 +27031,13 @@ function registerSessionEndHook(pi) {
 
 // packages/milestone/commands.ts
 init_core();
-import { dirname as dirname22, join as join26 } from "node:path";
+import { dirname as dirname22, join as join28 } from "node:path";
 import { fileURLToPath as fileURLToPath11 } from "node:url";
 import { readFileSync as readFileSync21 } from "node:fs";
-var SKILLS_DIR = join26(dirname22(fileURLToPath11(import.meta.url)), "skills");
+var SKILLS_DIR = join28(dirname22(fileURLToPath11(import.meta.url)), "skills");
 function loadSkill(skillName) {
   try {
-    return readFileSync21(join26(SKILLS_DIR, skillName, "SKILL.md"), "utf-8");
+    return readFileSync21(join28(SKILLS_DIR, skillName, "SKILL.md"), "utf-8");
   } catch {
     return "";
   }
@@ -26647,7 +27090,7 @@ ${skillContent}
     },
     getArgumentCompletions: () => {
       const cwd = process.cwd();
-      const milestonesPath = join26(cwd, MILESTONE_DIRS.MILESTONES);
+      const milestonesPath = join28(cwd, MILESTONE_DIRS.MILESTONES);
       const doc = parseMilestones(milestonesPath);
       const suggestions = doc.phases.map((phase) => ({
         value: phase.name,
@@ -27103,6 +27546,7 @@ var COMMAND_REGISTRY = {
   "unipi:worktree-list": "workflow",
   "unipi:worktree-merge": "workflow",
   "unipi:consultant": "workflow",
+  "unipi:prefix-cache": "utility",
   "unipi:quick-work": "workflow",
   "unipi:gather-context": "workflow",
   "unipi:document": "workflow",
@@ -27210,6 +27654,7 @@ var COMMAND_DESCRIPTIONS = {
   "unipi:worktree-list": "List all unipi worktrees",
   "unipi:worktree-merge": "Merge worktree branches back to main",
   "unipi:consultant": "Expert consultation \u2014 advisory analysis",
+  "unipi:prefix-cache": "Show privacy-safe provider prefix-cache diagnostics",
   "unipi:quick-work": "Fast single-task execution \u2014 one shot",
   "unipi:gather-context": "Research codebase \u2014 surface patterns",
   "unipi:document": "Generate documentation \u2014 README, API docs",
@@ -27791,9 +28236,9 @@ function markAutoCompactionError(state, nowMs) {
 // packages/compactor/src/session/db.ts
 import { createHash as createHash3 } from "node:crypto";
 import { execFileSync } from "node:child_process";
-import { existsSync as existsSync32, mkdirSync as mkdirSync20 } from "node:fs";
-import { homedir as homedir21 } from "node:os";
-import { dirname as dirname25, join as join33 } from "node:path";
+import { existsSync as existsSync32, mkdirSync as mkdirSync22 } from "node:fs";
+import { homedir as homedir23 } from "node:os";
+import { dirname as dirname25, join as join35 } from "node:path";
 function getWorktreeSuffix() {
   const envSuffix = process.env.COMPACTOR_SESSION_SUFFIX;
   if (envSuffix !== void 0) {
@@ -27815,7 +28260,7 @@ function getWorktreeSuffix() {
   return "";
 }
 function defaultDBPath(name) {
-  return join33(homedir21(), ".unipi", "db", "compactor", `${name}.db`);
+  return join35(homedir23(), ".unipi", "db", "compactor", `${name}.db`);
 }
 var sqliteLib = null;
 async function getSQLite() {
@@ -27839,7 +28284,7 @@ var SessionDB = class {
   }
   async init() {
     const dir = dirname25(this.dbPath);
-    if (!existsSync32(dir)) mkdirSync20(dir, { recursive: true });
+    if (!existsSync32(dir)) mkdirSync22(dir, { recursive: true });
     const sqlite = await getSQLite();
     const Database2 = sqlite.Database ?? sqlite.default?.Database ?? sqlite.default ?? sqlite;
     this.db = new Database2(this.dbPath);
@@ -28232,8 +28677,8 @@ async function buildResumeContextMessage(db, sessionId) {
 
 // packages/compactor/src/executor/executor.ts
 import { spawn as spawn3, execSync, execFileSync as execFileSync2 } from "node:child_process";
-import { mkdtempSync as mkdtempSync2, writeFileSync as writeFileSync24, rmSync as rmSync3 } from "node:fs";
-import { join as join34, resolve as resolve11 } from "node:path";
+import { mkdtempSync as mkdtempSync2, writeFileSync as writeFileSync26, rmSync as rmSync3 } from "node:fs";
+import { join as join36, resolve as resolve11 } from "node:path";
 import { tmpdir as tmpdir3 } from "node:os";
 
 // packages/compactor/src/executor/runtime.ts
@@ -28414,7 +28859,7 @@ var PolyglotExecutor = class {
   }
   async execute(opts) {
     const { language, code, timeout = 3e4, background = false } = opts;
-    const tmpDir = mkdtempSync2(join34(OS_TMPDIR, ".compactor-"));
+    const tmpDir = mkdtempSync2(join36(OS_TMPDIR, ".compactor-"));
     try {
       const filePath = this.#writeScript(tmpDir, code, language);
       const cmd = buildCommand(this.#runtimes, language, filePath);
@@ -28464,8 +28909,8 @@ var PolyglotExecutor = class {
       elixir: "ex"
     };
     const ext = extensions[language];
-    const filePath = join34(tmpDir, `script.${ext}`);
-    writeFileSync24(filePath, code, "utf-8");
+    const filePath = join36(tmpDir, `script.${ext}`);
+    writeFileSync26(filePath, code, "utf-8");
     return filePath;
   }
   async #spawn(cmd, cwd, tmpDir, timeout, background) {
@@ -28523,7 +28968,7 @@ var PolyglotExecutor = class {
     });
   }
   async #compileAndRun(filePath, tmpDir, timeout) {
-    const binPath = join34(tmpDir, "script");
+    const binPath = join36(tmpDir, "script");
     try {
       execSync(`rustc "${filePath}" -o "${binPath}"`, {
         cwd: tmpDir,
@@ -28633,15 +29078,29 @@ function searchEntries(blocks, query, opts) {
 }
 
 // packages/compactor/src/tools/vcc-recall.ts
+var MAX_RECALL_RESULTS = 50;
+var MAX_EXPANDED_HIT_BYTES = 16 * 1024;
+function truncateExpandedHit(text) {
+  const bytes = Buffer.from(text, "utf8");
+  if (bytes.byteLength <= MAX_EXPANDED_HIT_BYTES) return text;
+  const omitted = bytes.byteLength - MAX_EXPANDED_HIT_BYTES;
+  const visible = bytes.subarray(0, MAX_EXPANDED_HIT_BYTES).toString("utf8").replace(/\uFFFD+$/u, "");
+  return `${visible}
+\u2026 ${omitted} bytes omitted from this hit; narrow the query to inspect more specific context \u2026`;
+}
 function vccRecall(blocks, input) {
-  const { query, mode = "bm25", limit = 10, offset = 0, expand = false } = input;
+  const { query, mode = "bm25", expand = false } = input;
+  const requestedLimit = Number.isFinite(input.limit) ? Math.floor(input.limit) : 10;
+  const requestedOffset = Number.isFinite(input.offset) ? Math.floor(input.offset) : 0;
+  const limit = Math.min(MAX_RECALL_RESULTS, Math.max(1, requestedLimit));
+  const offset = Math.max(0, requestedOffset);
   let hits = [];
   if (mode === "bm25") {
     const results = searchEntries(blocks, query, { limit: limit + offset, offset: 0 });
     hits = results.map((r, i) => ({
       index: r.docId,
       score: r.score,
-      text: expand ? r.text : r.text.slice(0, 200),
+      text: expand ? truncateExpandedHit(r.text) : r.text.slice(0, 200),
       kind: r.kind
     }));
   } else {
@@ -28653,7 +29112,7 @@ function vccRecall(blocks, input) {
         hits.push({
           index: i,
           score: 1,
-          text: expand ? text : text.slice(0, 200),
+          text: expand ? truncateExpandedHit(text) : text.slice(0, 200),
           kind: b.kind
         });
       }
@@ -29135,7 +29594,11 @@ var RecallParams = Type7.Object({
   mode: Type7.Optional(Type7.Union([Type7.Literal("bm25"), Type7.Literal("regex")], {
     description: "Search mode: bm25 (default) or regex fallback"
   })),
-  limit: Type7.Optional(Type7.Number({ description: "Max results to return (default 10)", minimum: 1 })),
+  limit: Type7.Optional(Type7.Number({
+    description: `Max results to return (default 10, hard cap ${MAX_RECALL_RESULTS})`,
+    minimum: 1,
+    maximum: MAX_RECALL_RESULTS
+  })),
   offset: Type7.Optional(Type7.Number({ description: "Pagination offset", minimum: 0 })),
   expand: Type7.Optional(Type7.Boolean({ description: "Return full message content for hits" }))
 });
@@ -29560,13 +30023,13 @@ function compactorExtension(pi) {
     debug("before_agent_start", { sessionId: currentSessionId, configDebug: config.debug });
     try {
       const { existsSync: existsSync48 } = await import("node:fs");
-      const { join: join48 } = await import("node:path");
+      const { join: join50 } = await import("node:path");
       const strategies = [
         { key: "commits", config: config.commits }
       ];
       for (const { key, config: strat } of strategies) {
         if (strat.autoDetect === "git") {
-          const gitDir = join48(cwd, ".git");
+          const gitDir = join50(cwd, ".git");
           if (!existsSync48(gitDir)) {
             debug("autoDetect_disable", { strategy: key, reason: "no .git dir" });
             strat.enabled = false;
@@ -33083,7 +33546,7 @@ init_core();
 import { dirname as dirname27 } from "node:path";
 import { fileURLToPath as fileURLToPath12 } from "node:url";
 import { existsSync as existsSync39, readFileSync as readFileSync34 } from "fs";
-import { join as join38 } from "path";
+import { join as join40 } from "path";
 var PACKAGE_MAP = {
   core: MODULES.CORE,
   workflow: MODULES.WORKFLOW,
@@ -33109,11 +33572,11 @@ var PACKAGE_MAP = {
 function resolveUnipiRoot() {
   const dir = dirname27(fileURLToPath12(import.meta.url));
   const root = findPackageRoot(dir, "@pi-unipi/unipi");
-  return root ?? join38(dir, "..");
+  return root ?? join40(dir, "..");
 }
 function getPackageVersion2(dir) {
   try {
-    const pkgPath = join38(dir, "package.json");
+    const pkgPath = join40(dir, "package.json");
     if (existsSync39(pkgPath)) {
       const raw = readFileSync34(pkgPath, "utf-8");
       const pkg = JSON.parse(raw);
@@ -33126,7 +33589,7 @@ function getPackageVersion2(dir) {
 function discoverReadmes() {
   const root = resolveUnipiRoot();
   const entries = [];
-  const rootReadme = join38(root, "README.md");
+  const rootReadme = join40(root, "README.md");
   if (existsSync39(rootReadme)) {
     entries.push({
       name: "unipi",
@@ -33136,16 +33599,16 @@ function discoverReadmes() {
     });
   }
   for (const [shortName, fullName] of Object.entries(PACKAGE_MAP)) {
-    const workspacePath = join38(root, "packages", shortName, "README.md");
-    const nodeModulesPath = join38(root, "node_modules", fullName, "README.md");
+    const workspacePath = join40(root, "packages", shortName, "README.md");
+    const nodeModulesPath = join40(root, "node_modules", fullName, "README.md");
     let readmePath = null;
     let versionDir = null;
     if (existsSync39(workspacePath)) {
       readmePath = workspacePath;
-      versionDir = join38(root, "packages", shortName);
+      versionDir = join40(root, "packages", shortName);
     } else if (existsSync39(nodeModulesPath)) {
       readmePath = nodeModulesPath;
-      versionDir = join38(root, "node_modules", fullName);
+      versionDir = join40(root, "node_modules", fullName);
     }
     if (readmePath && versionDir) {
       entries.push({
@@ -33161,14 +33624,14 @@ function discoverReadmes() {
 function resolveReadmePath(packageName) {
   const root = resolveUnipiRoot();
   if (!packageName || packageName === "unipi") {
-    const rootReadme = join38(root, "README.md");
+    const rootReadme = join40(root, "README.md");
     return existsSync39(rootReadme) ? rootReadme : null;
   }
   const fullName = PACKAGE_MAP[packageName];
   if (!fullName) return null;
-  const workspacePath = join38(root, "packages", packageName, "README.md");
+  const workspacePath = join40(root, "packages", packageName, "README.md");
   if (existsSync39(workspacePath)) return workspacePath;
-  const nodeModulesPath = join38(root, "node_modules", fullName, "README.md");
+  const nodeModulesPath = join40(root, "node_modules", fullName, "README.md");
   if (existsSync39(nodeModulesPath)) return nodeModulesPath;
   return null;
 }
@@ -33444,7 +33907,7 @@ import { Key as Key7, matchesKey as matchesKey15, truncateToWidth as truncateToW
 // packages/updater/src/changelog.ts
 init_core();
 import { existsSync as existsSync40, readFileSync as readFileSync36 } from "fs";
-import { dirname as dirname28, join as join39 } from "node:path";
+import { dirname as dirname28, join as join41 } from "node:path";
 import { fileURLToPath as fileURLToPath13 } from "node:url";
 
 // packages/updater/src/version.ts
@@ -33472,12 +33935,12 @@ function resolveChangelogPath() {
     const dir = dirname28(fileURLToPath13(import.meta.url));
     const root = findPackageRoot(dir, "@pi-unipi/unipi");
     if (root) {
-      const packaged = join39(root, "CHANGELOG.md");
+      const packaged = join41(root, "CHANGELOG.md");
       if (existsSync40(packaged)) return packaged;
     }
   } catch {
   }
-  return join39(process.cwd(), "CHANGELOG.md");
+  return join41(process.cwd(), "CHANGELOG.md");
 }
 var VERSION_HEADER_RE = /^## \[(.+?)\](?:\s*[-—–]\s*(.+))?$/;
 var SECTION_HEADER_RE = /^### (.+)$/;
@@ -33729,9 +34192,9 @@ function renderChangelogOverlay() {
 
 // packages/updater/src/settings.ts
 init_core();
-import { readFileSync as readFileSync37, writeFileSync as writeFileSync26, mkdirSync as mkdirSync22, existsSync as existsSync42 } from "fs";
-import { dirname as dirname29, join as join40 } from "path";
-import { homedir as homedir24 } from "os";
+import { readFileSync as readFileSync37, writeFileSync as writeFileSync28, mkdirSync as mkdirSync24, existsSync as existsSync42 } from "fs";
+import { dirname as dirname29, join as join42 } from "path";
+import { homedir as homedir26 } from "os";
 var DEFAULT_CONFIG6 = {
   checkIntervalMs: 36e5,
   // 1 hour
@@ -33745,8 +34208,8 @@ var VALID_INTERVALS = {
 };
 var VALID_MODES = ["disabled", "notify", "auto"];
 function resolveConfigPath2() {
-  const base = UPDATER_DIRS.CONFIG.replace("~", homedir24());
-  return join40(base, "config.json");
+  const base = UPDATER_DIRS.CONFIG.replace("~", homedir26());
+  return join42(base, "config.json");
 }
 function loadConfig5() {
   const configPath = resolveConfigPath2();
@@ -33763,8 +34226,8 @@ function loadConfig5() {
 function saveConfig4(config) {
   const configPath = resolveConfigPath2();
   const dir = dirname29(configPath);
-  mkdirSync22(dir, { recursive: true });
-  writeFileSync26(configPath, JSON.stringify(config, null, 2) + "\n", "utf-8");
+  mkdirSync24(dir, { recursive: true });
+  writeFileSync28(configPath, JSON.stringify(config, null, 2) + "\n", "utf-8");
 }
 function getIntervalLabel(ms) {
   for (const [label, value] of Object.entries(VALID_INTERVALS)) {
@@ -33997,12 +34460,12 @@ init_core();
 
 // packages/updater/src/cache.ts
 init_core();
-import { readFileSync as readFileSync38, writeFileSync as writeFileSync27, mkdirSync as mkdirSync23, existsSync as existsSync43 } from "fs";
-import { dirname as dirname30, join as join41 } from "path";
-import { homedir as homedir25 } from "os";
+import { readFileSync as readFileSync38, writeFileSync as writeFileSync29, mkdirSync as mkdirSync25, existsSync as existsSync43 } from "fs";
+import { dirname as dirname30, join as join43 } from "path";
+import { homedir as homedir27 } from "os";
 function resolveCachePath() {
-  const base = UPDATER_DIRS.CACHE.replace("~", homedir25());
-  return join41(base, "last-check.json");
+  const base = UPDATER_DIRS.CACHE.replace("~", homedir27());
+  return join43(base, "last-check.json");
 }
 function readLastCheck() {
   const cachePath = resolveCachePath();
@@ -34021,8 +34484,8 @@ function readLastCheck() {
 function writeLastCheck(cache) {
   const cachePath = resolveCachePath();
   const dir = dirname30(cachePath);
-  mkdirSync23(dir, { recursive: true });
-  writeFileSync27(cachePath, JSON.stringify(cache, null, 2) + "\n", "utf-8");
+  mkdirSync25(dir, { recursive: true });
+  writeFileSync29(cachePath, JSON.stringify(cache, null, 2) + "\n", "utf-8");
 }
 function isCheckDue(intervalMs) {
   const cache = readLastCheck();
@@ -34430,8 +34893,8 @@ init_core();
 import { Key as Key10 } from "@earendil-works/pi-tui";
 
 // packages/input-shortcuts/src/registers.ts
-import { existsSync as existsSync44, mkdirSync as mkdirSync24, readFileSync as readFileSync39, renameSync as renameSync8, writeFileSync as writeFileSync28 } from "node:fs";
-import { dirname as dirname31, join as join42 } from "node:path";
+import { existsSync as existsSync44, mkdirSync as mkdirSync26, readFileSync as readFileSync39, renameSync as renameSync8, writeFileSync as writeFileSync30 } from "node:fs";
+import { dirname as dirname31, join as join44 } from "node:path";
 
 // packages/input-shortcuts/src/types.ts
 var DEFAULT_CONFIG7 = {
@@ -34453,7 +34916,7 @@ var RegisterStore = class {
   filePath;
   loaded = false;
   constructor(baseDir) {
-    this.filePath = baseDir ? join42(baseDir, REGISTERS_FILE) : REGISTERS_FILE;
+    this.filePath = baseDir ? join44(baseDir, REGISTERS_FILE) : REGISTERS_FILE;
   }
   /** Get the stash register contents. */
   getStash() {
@@ -34503,10 +34966,10 @@ var RegisterStore = class {
     try {
       const dir = dirname31(this.filePath);
       if (!existsSync44(dir)) {
-        mkdirSync24(dir, { recursive: true });
+        mkdirSync26(dir, { recursive: true });
       }
       const tmpPath = this.filePath + ".tmp";
-      writeFileSync28(tmpPath, JSON.stringify(this.data, null, 2), "utf-8");
+      writeFileSync30(tmpPath, JSON.stringify(this.data, null, 2), "utf-8");
       renameSync8(tmpPath, this.filePath);
     } catch {
     }
@@ -34728,8 +35191,8 @@ var ChordOverlay = class extends Container2 {
 
 // packages/input-shortcuts/src/settings-overlay.ts
 import { SettingsList as SettingsList3 } from "@earendil-works/pi-tui";
-import { existsSync as existsSync45, mkdirSync as mkdirSync25, readFileSync as readFileSync40, renameSync as renameSync9, writeFileSync as writeFileSync29 } from "node:fs";
-import { dirname as dirname32, join as join43 } from "node:path";
+import { existsSync as existsSync45, mkdirSync as mkdirSync27, readFileSync as readFileSync40, renameSync as renameSync9, writeFileSync as writeFileSync31 } from "node:fs";
+import { dirname as dirname32, join as join45 } from "node:path";
 var ALT_KEY_OPTIONS = [
   "alt+a",
   "alt+b",
@@ -34761,7 +35224,7 @@ var ALT_KEY_OPTIONS = [
 var CONFLICTS = /* @__PURE__ */ new Set(["alt+e"]);
 var FREE_ALT_KEYS = ALT_KEY_OPTIONS.filter((k) => !CONFLICTS.has(k));
 function loadConfig6(baseDir) {
-  const filePath = baseDir ? join43(baseDir, CONFIG_FILE) : CONFIG_FILE;
+  const filePath = baseDir ? join45(baseDir, CONFIG_FILE) : CONFIG_FILE;
   try {
     if (existsSync45(filePath)) {
       const raw = readFileSync40(filePath, "utf-8");
@@ -34776,14 +35239,14 @@ function loadConfig6(baseDir) {
   return { ...DEFAULT_CONFIG7 };
 }
 function saveConfig5(config, baseDir) {
-  const filePath = baseDir ? join43(baseDir, CONFIG_FILE) : CONFIG_FILE;
+  const filePath = baseDir ? join45(baseDir, CONFIG_FILE) : CONFIG_FILE;
   try {
     const dir = dirname32(filePath);
     if (!existsSync45(dir)) {
-      mkdirSync25(dir, { recursive: true });
+      mkdirSync27(dir, { recursive: true });
     }
     const tmpPath = filePath + ".tmp";
-    writeFileSync29(tmpPath, JSON.stringify(config, null, 2), "utf-8");
+    writeFileSync31(tmpPath, JSON.stringify(config, null, 2), "utf-8");
     renameSync9(tmpPath, filePath);
   } catch {
   }
@@ -35212,9 +35675,9 @@ import { Type as Type8 } from "typebox";
 // packages/cocoindex/bridge.ts
 init_core();
 import { execFileSync as execFileSync3, spawn as spawn4 } from "node:child_process";
-import { existsSync as existsSync46, mkdirSync as mkdirSync26, readFileSync as readFileSync41, writeFileSync as writeFileSync30, readdirSync as readdirSync14, statSync as statSync9 } from "node:fs";
-import { homedir as homedir26 } from "node:os";
-import { join as join44 } from "node:path";
+import { existsSync as existsSync46, mkdirSync as mkdirSync28, readFileSync as readFileSync41, writeFileSync as writeFileSync32, readdirSync as readdirSync14, statSync as statSync9 } from "node:fs";
+import { homedir as homedir28 } from "node:os";
+import { join as join46 } from "node:path";
 var DEFAULT_PIPELINE_DIR = ".unipi/cocoindex";
 var DEFAULT_UPDATE_TIMEOUT_MS = 15 * 60 * 1e3;
 var DEFAULT_LEXICAL_SCAN_LIMIT = 5e4;
@@ -35284,13 +35747,13 @@ function resolveCocoindexBin() {
     if (resolved) return resolved;
   } catch {
   }
-  const uvToolBin = join44(homedir26(), ".local", "bin", "cocoindex");
+  const uvToolBin = join46(homedir28(), ".local", "bin", "cocoindex");
   if (existsSync46(uvToolBin)) return uvToolBin;
-  const miseRoot = join44(homedir26(), ".local", "share", "mise", "installs", "python");
+  const miseRoot = join46(homedir28(), ".local", "share", "mise", "installs", "python");
   try {
     const versions = readdirSync14(miseRoot).sort().reverse();
     for (const ver of versions) {
-      const binPath = join44(miseRoot, ver, "bin", "cocoindex");
+      const binPath = join46(miseRoot, ver, "bin", "cocoindex");
       if (existsSync46(binPath)) return binPath;
     }
   } catch {
@@ -35298,13 +35761,13 @@ function resolveCocoindexBin() {
   return "cocoindex";
 }
 function getPipelineDir(projectDir) {
-  return join44(projectDir, DEFAULT_PIPELINE_DIR);
+  return join46(projectDir, DEFAULT_PIPELINE_DIR);
 }
 async function isPipelineInitialized(pipelineDir) {
-  return existsSync46(join44(pipelineDir, "main.py"));
+  return existsSync46(join46(pipelineDir, "main.py"));
 }
 function detectTargetStore(pipelineDir) {
-  const mainPyPath = join44(pipelineDir, "main.py");
+  const mainPyPath = join46(pipelineDir, "main.py");
   if (!existsSync46(mainPyPath)) return "unknown";
   try {
     const content = readFileSync41(mainPyPath, "utf-8");
@@ -35320,14 +35783,14 @@ function detectTargetStore(pipelineDir) {
 async function initPipeline(projectDir) {
   const pipelineDir = getPipelineDir(projectDir);
   if (!existsSync46(pipelineDir)) {
-    mkdirSync26(pipelineDir, { recursive: true });
+    mkdirSync28(pipelineDir, { recursive: true });
   }
-  if (existsSync46(join44(pipelineDir, "main.py"))) {
+  if (existsSync46(join46(pipelineDir, "main.py"))) {
     return { success: true };
   }
   const embeddingConfig = loadEmbeddingConfig2();
   const template = generatePipelineTemplate(projectDir, embeddingConfig);
-  writeFileSync30(join44(pipelineDir, "main.py"), template, "utf-8");
+  writeFileSync32(join46(pipelineDir, "main.py"), template, "utf-8");
   return { success: true };
 }
 async function indexProject(projectDir) {
@@ -35341,7 +35804,7 @@ async function indexProject(projectDir) {
     };
   }
   const pipelineDir = getPipelineDir(projectDir);
-  if (!existsSync46(join44(pipelineDir, "main.py"))) {
+  if (!existsSync46(join46(pipelineDir, "main.py"))) {
     return {
       success: false,
       chunksProcessed: 0,
@@ -35452,11 +35915,11 @@ function parseChunksProcessed(output) {
 async function status(projectDir) {
   const pipelineDir = getPipelineDir(projectDir);
   const cliAvailable = await isAvailable();
-  const pipelineConfigured = existsSync46(join44(pipelineDir, "main.py"));
+  const pipelineConfigured = existsSync46(join46(pipelineDir, "main.py"));
   const targetStore = detectTargetStore(pipelineDir);
   let docCount = 0;
   let lastRun = null;
-  const lancedbPath = join44(pipelineDir, ".lancedb");
+  const lancedbPath = join46(pipelineDir, ".lancedb");
   if (existsSync46(lancedbPath)) {
     try {
       const stat = statSync9(lancedbPath);
@@ -35479,7 +35942,7 @@ async function search(projectDir, query, options) {
   const limit = options?.limit ?? 10;
   const offset = options?.offset ?? 0;
   try {
-    const lancedbPath = join44(getPipelineDir(projectDir), ".lancedb");
+    const lancedbPath = join46(getPipelineDir(projectDir), ".lancedb");
     if (!existsSync46(lancedbPath)) {
       return [];
     }
@@ -35594,7 +36057,7 @@ function countOccurrences(value, needle) {
 }
 function loadEmbeddingConfig2() {
   const envKey = process.env.OPENROUTER_API_KEY ?? null;
-  const configPath = join44(homedir26(), ".unipi", "memory", "config.json");
+  const configPath = join46(homedir28(), ".unipi", "memory", "config.json");
   try {
     if (existsSync46(configPath)) {
       const raw = readFileSync41(configPath, "utf-8");
@@ -35801,9 +36264,22 @@ app = coco.App(
 }
 
 // packages/cocoindex/tools.ts
+var MAX_SEARCH_RESULTS = 50;
+function normalizeSearchPage(limit, offset) {
+  const requestedLimit = Number.isFinite(limit) ? Math.floor(limit) : 10;
+  const requestedOffset = Number.isFinite(offset) ? Math.floor(offset) : 0;
+  return {
+    limit: Math.min(MAX_SEARCH_RESULTS, Math.max(1, requestedLimit)),
+    offset: Math.max(0, requestedOffset)
+  };
+}
 var SearchParams = Type8.Object({
   query: Type8.String({ description: "Search query against indexed content" }),
-  limit: Type8.Optional(Type8.Number({ description: "Max results (default 10)", minimum: 1 })),
+  limit: Type8.Optional(Type8.Number({
+    description: `Max results (default 10, hard cap ${MAX_SEARCH_RESULTS})`,
+    minimum: 1,
+    maximum: MAX_SEARCH_RESULTS
+  })),
   offset: Type8.Optional(Type8.Number({ description: "Pagination offset", minimum: 0 }))
 });
 var StatusParams = Type8.Object({});
@@ -35819,7 +36295,7 @@ function registerCocoindexTools(pi, deps) {
     label: "CocoIndex Search",
     description: "Search indexed content using semantic vector search when available, with full-text/lexical fallbacks. Diagnostic/search only: this tool never installs CocoIndex. Use /unipi:cocoindex-init to set up/install, then /unipi:cocoindex-update to index.",
     parameters: SearchParams,
-    async execute(_toolCallId, params) {
+    async execute(_toolCallId, params, _signal, _onUpdate, ctx) {
       try {
         const available = await isAvailable();
         if (!available) {
@@ -35828,9 +36304,10 @@ function registerCocoindexTools(pi, deps) {
             { cliAvailable: false }
           );
         }
-        const results = await search(deps.projectDir, params.query, {
-          limit: params.limit,
-          offset: params.offset
+        const { limit, offset } = normalizeSearchPage(params.limit, params.offset);
+        const results = await search(deps.getProjectDir(ctx), params.query, {
+          limit,
+          offset
         });
         if (results.length === 0) {
           return textResult3(
@@ -35845,7 +36322,8 @@ ${r.content.slice(0, 300)}`
           `Found ${results.length} results for "${params.query}":
 
 ${lines.join("\n\n")}`,
-          { results }
+          // Avoid duplicating full result content in model-visible details.
+          { count: results.length, query: params.query, limit, offset }
         );
       } catch (err) {
         return textResult3(`CocoIndex search error: ${err}`, { error: true });
@@ -35857,9 +36335,9 @@ ${lines.join("\n\n")}`,
     label: "CocoIndex Status",
     description: "Check CocoIndex indexing status. Diagnostic only; use commands for interactive install/update.",
     parameters: StatusParams,
-    async execute() {
+    async execute(_toolCallId, _params, _signal, _onUpdate, ctx) {
       try {
-        const info = await status(deps.projectDir);
+        const info = await status(deps.getProjectDir(ctx));
         const lines = [
           `\u{1F4E6} CocoIndex Status`,
           `CLI available: ${info.cliAvailable ? "\u2705" : "\u274C"}`,
@@ -35892,8 +36370,8 @@ init_core();
 // packages/cocoindex/installer.ts
 init_core();
 import { execFileSync as execFileSync4, spawn as spawn5 } from "node:child_process";
-import { homedir as homedir27 } from "node:os";
-import { delimiter, join as join45 } from "node:path";
+import { homedir as homedir29 } from "node:os";
+import { delimiter, join as join47 } from "node:path";
 var DEFAULT_STEP_TIMEOUT_MS = 10 * 60 * 1e3;
 function detectShell() {
   const shell = process.env.SHELL ?? "";
@@ -36154,10 +36632,10 @@ Timed out after ${step.timeoutMs ?? DEFAULT_STEP_TIMEOUT_MS}ms.`;
   });
 }
 function installerEnv() {
-  const home = homedir27();
+  const home = homedir29();
   const extraPaths = [
-    join45(home, ".local", "bin"),
-    join45(home, ".local", "share", "mise", "shims")
+    join47(home, ".local", "bin"),
+    join47(home, ".local", "share", "mise", "shims")
   ];
   const currentPath = process.env.PATH ?? "";
   return {
@@ -36322,15 +36800,11 @@ ${lines.join("\n\n")}`,
 // packages/cocoindex/index.ts
 function cocoindexExtension(pi) {
   registerCocoindexCommands(pi);
+  registerCocoindexTools(pi, {
+    getProjectDir: (ctx) => ctx.cwd ?? process.cwd()
+  });
   pi.on("session_start", async (_event, ctx) => {
     const projectDir = ctx.cwd ?? process.cwd();
-    const pipelineDir = getPipelineDir(projectDir);
-    const initialized = await isPipelineInitialized(pipelineDir);
-    registerCocoindexTools(pi, {
-      projectDir,
-      pipelineDir,
-      initialized
-    });
     emitEvent(pi, UNIPI_EVENTS.MODULE_READY, {
       name: MODULES.COCOINDEX,
       version: "0.1.0",