@quanta-intellect/vessel-browser 0.1.134 → 0.1.136

package/out/main/index.js

@@ -4,11 +4,11 @@ const fs$1 = require("node:fs");
 const path = require("path");
 const fs = require("fs");
 const crypto$1 = require("crypto");
+const zod = require("zod");
 const Anthropic = require("@anthropic-ai/sdk");
 const OpenAI = require("openai");
 const crypto$2 = require("node:crypto");
 const http = require("http");
-const zod = require("zod");
 const path$1 = require("node:path");
 const node_module = require("node:module");
 const http$1 = require("node:http");
@@ -111,10 +111,10 @@ const defaults = {
     expiresAt: ""
   }
 };
-const SAVE_DEBOUNCE_MS$6 = 150;
+const SAVE_DEBOUNCE_MS$4 = 150;
 const CHAT_PROVIDER_SECRET_FILENAME = "vessel-chat-provider-secret";
 const CODEX_TOKENS_FILENAME = "vessel-codex-tokens";
-const logger$x = createLogger("Settings");
+const logger$y = createLogger("Settings");
 const SETTABLE_KEYS = new Set(Object.keys(defaults));
 let settings = null;
 let settingsIssues = [];
@@ -139,7 +139,7 @@ function canUseSafeStorage$1() {
   try {
     return electron.safeStorage.isEncryptionAvailable();
   } catch (err) {
-    logger$x.warn("safeStorage.isEncryptionAvailable() failed, assuming unavailable:", err);
+    logger$y.warn("safeStorage.isEncryptionAvailable() failed, assuming unavailable:", err);
     return false;
   }
 }
@@ -148,7 +148,7 @@ function writePrivateFile(filePath2, data) {
   try {
     fs.chmodSync(filePath2, 384);
   } catch (err) {
-    logger$x.debug("Could not chmod private file (non-POSIX filesystem):", err);
+    logger$y.debug("Could not chmod private file (non-POSIX filesystem):", err);
   }
 }
 function assertSafeStorageAvailable() {
@@ -167,7 +167,7 @@ function readStoredProviderSecret() {
     }
   } catch (err) {
     if (!isMissingFileError(err)) {
-      logger$x.warn("Could not read stored provider secret:", err);
+      logger$y.warn("Could not read stored provider secret:", err);
     }
   }
   return null;
@@ -185,7 +185,7 @@ function clearStoredProviderSecret() {
     fs.unlinkSync(getChatProviderSecretPath());
   } catch (err) {
     if (!isMissingFileError(err)) {
-      logger$x.warn("Could not delete provider secret file:", err);
+      logger$y.warn("Could not delete provider secret file:", err);
     }
   }
 }
@@ -203,7 +203,7 @@ function readStoredCodexTokens() {
     }
   } catch (err) {
     if (!isMissingFileError(err)) {
-      logger$x.warn("Could not read stored Codex tokens:", err);
+      logger$y.warn("Could not read stored Codex tokens:", err);
     }
   }
   return null;
@@ -221,7 +221,7 @@ function clearStoredCodexTokens() {
     fs.unlinkSync(getCodexTokensPath());
   } catch (err) {
     if (!isMissingFileError(err)) {
-      logger$x.warn("Could not delete Codex token file:", err);
+      logger$y.warn("Could not delete Codex token file:", err);
     }
   }
 }
@@ -352,8 +352,8 @@ function persistNow() {
       { encoding: "utf-8", mode: 384 }
     )
   ).then(() => fs.promises.chmod(getSettingsPath(), 384).catch((err) => {
-    logger$x.warn("Failed to chmod settings file:", err);
-  })).catch((err) => logger$x.error("Failed to save settings:", err));
+    logger$y.warn("Failed to chmod settings file:", err);
+  })).catch((err) => logger$y.error("Failed to save settings:", err));
 }
 function saveSettings() {
   saveDirty = true;
@@ -363,7 +363,7 @@ function saveSettings() {
     if (saveDirty) {
       void persistNow();
     }
-  }, SAVE_DEBOUNCE_MS$6);
+  }, SAVE_DEBOUNCE_MS$4);
 }
 function setSetting(key2, value) {
   loadSettings();
@@ -532,7 +532,7 @@ const urlSafety = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.definePro
 }, Symbol.toStringTag, { value: "Module" }));
 const MAX_CUSTOM_HISTORY = 50;
 const READER_MODE_DATA_URL_PREFIX = "data:text/html;charset=utf-8,";
-const logger$w = createLogger("Tab");
+const logger$x = createLogger("Tab");
 const sessionCertExceptions = /* @__PURE__ */ new WeakMap();
 const sessionsWithVerifyProc = /* @__PURE__ */ new WeakSet();
 const CERT_VERIFY_TRUST = 0;
@@ -598,7 +598,7 @@ class Tab {
   guardedLoadURL(url, options) {
     const blockReason = this.getNavigationBlockReason(url);
     if (blockReason) {
-      logger$w.warn(blockReason);
+      logger$x.warn(blockReason);
       return blockReason;
     }
     void this.view.webContents.loadURL(url, options);
@@ -682,7 +682,7 @@ class Tab {
     wc.setWindowOpenHandler(({ url, disposition }) => {
       const error = this.getNavigationBlockReason(url);
       if (error) {
-        logger$w.warn(error);
+        logger$x.warn(error);
         return { action: "deny" };
       }
       this.onOpenUrl?.({
@@ -696,7 +696,7 @@ class Tab {
       const error = this.getNavigationBlockReason(url);
       if (!error) return;
       event.preventDefault();
-      logger$w.warn(`${context}: ${error}`);
+      logger$x.warn(`${context}: ${error}`);
     };
     wc.on("will-navigate", (event, url) => {
       blockNavigation(event, url, "Blocked top-level navigation");
@@ -780,7 +780,7 @@ class Tab {
         ::-webkit-scrollbar-thumb { background: rgba(255,255,255,0.12); border-radius: 999px; }
         ::-webkit-scrollbar-thumb:hover { background: rgba(255,255,255,0.22); }
         ::-webkit-scrollbar-corner { background: transparent; }
-      `).catch((err) => logger$w.warn("Failed to inject scrollbar CSS:", err));
+      `).catch((err) => logger$x.warn("Failed to inject scrollbar CSS:", err));
     });
     wc.on("page-favicon-updated", (_, favicons) => {
       this._state.favicon = favicons[0] || "";
@@ -816,7 +816,7 @@ class Tab {
       ).then((highlightedText) => {
         this.buildContextMenu(wc, params, highlightedText.trim());
       }).catch((err) => {
-        logger$w.warn("Failed to inspect highlighted text for context menu:", err);
+        logger$x.warn("Failed to inspect highlighted text for context menu:", err);
         this.buildContextMenu(wc, params, "");
       });
     });
@@ -1017,7 +1017,7 @@ class Tab {
         "document.documentElement.outerHTML"
       );
     } catch (err) {
-      logger$w.warn("Failed to retrieve page source:", err);
+      logger$x.warn("Failed to retrieve page source:", err);
       return;
     }
     const escaped = html.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
@@ -1147,7 +1147,7 @@ class Tab {
             document.addEventListener('mouseup', window.__vesselHighlightHandler);
           }
         })()
-      `).catch((err) => logger$w.warn("Failed to inject highlight listener:", err));
+      `).catch((err) => logger$x.warn("Failed to inject highlight listener:", err));
     } else {
       void wc.executeJavaScript(`
         (function() {
@@ -1158,7 +1158,7 @@ class Tab {
             delete window.__vesselHighlightHandler;
           }
         })()
-      `).catch((err) => logger$w.warn("Failed to remove highlight listener:", err));
+      `).catch((err) => logger$x.warn("Failed to remove highlight listener:", err));
     }
   }
   get webContentsId() {
@@ -1195,7 +1195,87 @@ const SEARCH_ENGINE_PRESETS = {
   ecosia: { label: "Ecosia", url: "https://www.ecosia.org/search?q=" },
   kagi: { label: "Kagi", url: "https://kagi.com/search?q=" }
 };
-const logger$v = createLogger("JsonPersistence");
+const DownloadStateSchema = zod.z.enum([
+  "progressing",
+  "completed",
+  "cancelled",
+  "interrupted"
+]);
+const DownloadRecordSchema = zod.z.object({
+  id: zod.z.string(),
+  filename: zod.z.string(),
+  savePath: zod.z.string(),
+  url: zod.z.string().optional(),
+  mimeType: zod.z.string().optional(),
+  totalBytes: zod.z.number(),
+  receivedBytes: zod.z.number(),
+  state: DownloadStateSchema,
+  startedAt: zod.z.string(),
+  updatedAt: zod.z.string()
+});
+zod.z.object({
+  items: zod.z.array(DownloadRecordSchema)
+});
+const HistoryEntrySchema = zod.z.object({
+  url: zod.z.string(),
+  title: zod.z.string(),
+  visitedAt: zod.z.string()
+});
+zod.z.object({
+  entries: zod.z.array(HistoryEntrySchema)
+});
+const HistoryImportEntrySchema = zod.z.object({
+  url: zod.z.string(),
+  title: zod.z.string().optional(),
+  visitedAt: zod.z.string().optional()
+});
+const HistoryImportStateSchema = zod.z.object({
+  entries: zod.z.array(HistoryImportEntrySchema)
+});
+const HighlightColorSchema = zod.z.enum([
+  "yellow",
+  "red",
+  "green",
+  "blue",
+  "purple",
+  "orange"
+]);
+const HighlightSourceSchema = zod.z.enum(["agent", "user"]);
+const StoredHighlightSchema = zod.z.object({
+  id: zod.z.string(),
+  url: zod.z.string(),
+  selector: zod.z.string().optional(),
+  text: zod.z.string().optional(),
+  label: zod.z.string().optional(),
+  color: HighlightColorSchema.optional(),
+  source: HighlightSourceSchema.optional(),
+  createdAt: zod.z.string()
+});
+zod.z.object({
+  highlights: zod.z.array(StoredHighlightSchema)
+});
+function parseArrayStateWithFallback(itemSchema, data, field, fallback, label) {
+  if (!data || typeof data !== "object") return fallback;
+  const rawItems = data[field];
+  if (!Array.isArray(rawItems)) return fallback;
+  const items = [];
+  let invalid = 0;
+  for (const item of rawItems) {
+    const result = itemSchema.safeParse(item);
+    if (result.success) {
+      items.push(result.data);
+    } else {
+      invalid++;
+    }
+  }
+  if (invalid > 0) {
+    console.warn(
+      `[persistence] ${label} dropped ${invalid} invalid ${field} item${invalid === 1 ? "" : "s"}`
+    );
+  }
+  return { ...fallback, [field]: items };
+}
+const logger$w = createLogger("JsonPersistence");
 function canUseSafeStorage() {
   try {
     return electron.safeStorage.isEncryptionAvailable();
@@ -1218,14 +1298,15 @@ function encodeStoredData(payload, secure) {
 function loadJsonFile({
   filePath: filePath2,
   fallback,
-  parse: parse2,
+  parse,
   secure = false
 }) {
   try {
     const raw = fs.readFileSync(filePath2);
     const decoded = decodeStoredData(raw, secure);
-    return parse2(JSON.parse(decoded));
-  } catch {
+    return parse(JSON.parse(decoded));
+  } catch (err) {
+    logger$w.warn(`Failed to load ${filePath2}, using fallback:`, err);
     return fallback;
   }
 }
@@ -1261,8 +1342,8 @@ function createDebouncedJsonPersistence({
         typeof data === "string" ? { encoding: "utf-8", mode: 384 } : { mode: 384 }
       )
     ).then(() => fs.promises.chmod(filePath2, 384).catch((err) => {
-      logger$v.warn(`Failed to chmod ${logLabel}:`, err);
-    })).catch((err) => logger$v.error(`Failed to save ${logLabel}:`, err));
+      logger$w.warn(`Failed to chmod ${logLabel}:`, err);
+    })).catch((err) => logger$w.error(`Failed to save ${logLabel}:`, err));
   };
   const schedule = () => {
     saveDirty2 = true;
@@ -1284,50 +1365,109 @@ function createDebouncedJsonPersistence({
     flush: flush2
   };
 }
-let state$5 = null;
-const listeners$2 = /* @__PURE__ */ new Set();
-const SAVE_DEBOUNCE_MS$5 = 250;
-function getHighlightsPath() {
-  return path.join(electron.app.getPath("userData"), "vessel-highlights.json");
-}
-function createPersistence$1() {
-  return createDebouncedJsonPersistence({
-    debounceMs: SAVE_DEBOUNCE_MS$5,
-    filePath: getHighlightsPath(),
-    getValue: () => state$5,
-    logLabel: "highlights",
-    resetOnSchedule: true
-  });
-}
-let persistence$7 = null;
-function getPersistence$1() {
-  persistence$7 ??= createPersistence$1();
-  return persistence$7;
-}
-function load$4() {
-  if (state$5) return state$5;
-  state$5 = loadJsonFile({
-    filePath: getHighlightsPath(),
-    fallback: { highlights: [] },
-    parse: (raw) => {
-      const parsed = raw;
-      return {
-        highlights: Array.isArray(parsed.highlights) ? parsed.highlights : []
-      };
+class PersistentState {
+  state = null;
+  listeners = /* @__PURE__ */ new Set();
+  persistence = null;
+  config;
+  constructor(config) {
+    this.config = {
+      debounceMs: 250,
+      resetOnSchedule: false,
+      secure: false,
+      snapshot: (s) => s,
+      ...config
+    };
+  }
+  // --- State access ---
+  /** Get the current state, loading from disk if needed. */
+  getState() {
+    if (this.state) return this.state;
+    this.state = loadJsonFile({
+      filePath: this.getFilePath(),
+      fallback: this.config.fallback,
+      parse: this.config.parse,
+      secure: this.config.secure
+    });
+    return this.state;
+  }
+  /**
+   * Update state via a mutator function.
+   * The mutator receives the current state and should mutate it in place.
+   * Does NOT automatically save or emit — call save() and emit() as needed.
+   */
+  update(mutator) {
+    const s = this.getState();
+    mutator(s);
+  }
+  /**
+   * Mutate state and apply persistence/notification as one operation.
+   * The mutator may return a value, such as the item it created or removed.
+   */
+  mutate(mutator, options = {}) {
+    const result = mutator(this.getState());
+    if (options.save ?? true) {
+      this.save();
     }
-  });
-  return state$5;
-}
-function save$3() {
-  getPersistence$1().schedule();
-}
-function emit$4() {
-  if (!state$5) return;
-  const snapshot2 = { highlights: [...state$5.highlights] };
-  for (const listener of listeners$2) {
-    listener(snapshot2);
+    if (options.emit ?? true) {
+      this.emit();
+    }
+    return result;
+  }
+  // --- Persistence ---
+  /** Get the file path for this state's JSON file. */
+  getFilePath() {
+    return path.join(electron.app.getPath("userData"), this.config.filename);
+  }
+  /** Schedule a debounced write to disk. */
+  save() {
+    this.getPersistence().schedule();
+  }
+  /** Flush any pending write to disk immediately. */
+  flushPersist() {
+    return this.getPersistence().flush();
+  }
+  // --- Change notification ---
+  /** Subscribe to state changes. Returns an unsubscribe function. */
+  subscribe(listener) {
+    this.listeners.add(listener);
+    return () => {
+      this.listeners.delete(listener);
+    };
+  }
+  /** Emit the current state to all subscribers. No-op if state hasn't been loaded. */
+  emit() {
+    if (!this.state) return;
+    const snapshot2 = this.config.snapshot(this.state);
+    for (const listener of this.listeners) {
+      listener(snapshot2);
+    }
+  }
+  // --- Private ---
+  getPersistence() {
+    if (!this.persistence) {
+      this.persistence = createDebouncedJsonPersistence({
+        debounceMs: this.config.debounceMs,
+        filePath: this.getFilePath(),
+        getValue: () => this.state,
+        logLabel: this.config.logLabel,
+        resetOnSchedule: this.config.resetOnSchedule,
+        secure: this.config.secure
+      });
+    }
+    return this.persistence;
   }
 }
+const HIGHLIGHTS_FALLBACK = { highlights: [] };
+const store$2 = new PersistentState({
+  filename: "vessel-highlights.json",
+  fallback: HIGHLIGHTS_FALLBACK,
+  parse: (raw) => parseArrayStateWithFallback(StoredHighlightSchema, raw, "highlights", HIGHLIGHTS_FALLBACK, "highlights"),
+  logLabel: "highlights",
+  debounceMs: 250,
+  resetOnSchedule: true,
+  snapshot: (s) => ({ highlights: [...s.highlights] })
+});
 function normalizeUrl$1(rawUrl) {
   try {
     const parsed = new URL(rawUrl);
@@ -1338,16 +1478,14 @@ function normalizeUrl$1(rawUrl) {
   }
 }
 function getState$2() {
-  load$4();
-  return { highlights: [...state$5.highlights] };
+  const s = store$2.getState();
+  return { highlights: [...s.highlights] };
 }
 function getHighlightsForUrl(url) {
-  load$4();
   const normalized = normalizeUrl$1(url);
-  return state$5.highlights.filter((h) => h.url === normalized);
+  return store$2.getState().highlights.filter((h) => h.url === normalized);
 }
 function addHighlight(url, selector, text, label, color, source) {
-  load$4();
   const highlight = {
     id: crypto$1.randomUUID(),
     url: normalizeUrl$1(url),
@@ -1358,50 +1496,66 @@ function addHighlight(url, selector, text, label, color, source) {
     source: source || void 0,
     createdAt: (/* @__PURE__ */ new Date()).toISOString()
   };
-  state$5.highlights.push(highlight);
-  save$3();
-  emit$4();
+  store$2.mutate((s) => {
+    s.highlights.push(highlight);
+  });
   return highlight;
 }
 function removeHighlight(id) {
-  load$4();
-  const index = state$5.highlights.findIndex((h) => h.id === id);
-  if (index === -1) return null;
-  const [removed] = state$5.highlights.splice(index, 1);
-  save$3();
-  emit$4();
+  const removed = store$2.mutate((s) => {
+    const index = s.highlights.findIndex((h) => h.id === id);
+    if (index === -1) return null;
+    const [removed2] = s.highlights.splice(index, 1);
+    return removed2;
+  }, {
+    save: false,
+    emit: false
+  });
+  if (removed) {
+    store$2.save();
+    store$2.emit();
+  }
   return removed;
 }
 function findHighlightByText(url, text) {
-  load$4();
   const normalized = normalizeUrl$1(url);
-  return state$5.highlights.find(
+  return store$2.getState().highlights.find(
     (h) => h.url === normalized && h.text && h.text === text
   ) ?? null;
 }
 function updateHighlightColor(id, color) {
-  load$4();
-  const highlight = state$5.highlights.find((h) => h.id === id);
-  if (!highlight) return null;
-  highlight.color = color;
-  save$3();
-  emit$4();
+  const highlight = store$2.mutate((s) => {
+    const item = s.highlights.find((h) => h.id === id) ?? null;
+    if (item) item.color = color;
+    return item;
+  }, {
+    save: false,
+    emit: false
+  });
+  if (highlight) {
+    store$2.save();
+    store$2.emit();
+  }
   return highlight;
 }
 function clearHighlightsForUrl(url) {
-  load$4();
   const normalized = normalizeUrl$1(url);
-  const before = state$5.highlights.length;
-  state$5.highlights = state$5.highlights.filter((h) => h.url !== normalized);
-  const removed = before - state$5.highlights.length;
+  const removed = store$2.mutate((s) => {
+    const before = s.highlights.length;
+    s.highlights = s.highlights.filter((h) => h.url !== normalized);
+    return before - s.highlights.length;
+  }, {
+    save: false,
+    emit: false
+  });
   if (removed > 0) {
-    save$3();
-    emit$4();
+    store$2.save();
+    store$2.emit();
   }
   return removed;
 }
 function flushPersist$4() {
-  return getPersistence$1().flush();
+  return store$2.flushPersist();
 }
 const SKIP_TAGS_JS = "var SKIP_TAGS = {SCRIPT:1,STYLE:1,NOSCRIPT:1,TEMPLATE:1,IFRAME:1,SVG:1};";
 const CONTENT_ROOTS_JS = `
@@ -2025,114 +2179,94 @@ function persistHighlight(url, text) {
   return { success: true, text: capped, id: highlight.id };
 }
 const MAX_HISTORY_ENTRIES = 5e3;
-const SAVE_DEBOUNCE_MS$4 = 250;
-let state$4 = null;
-const listeners$1 = /* @__PURE__ */ new Set();
-function getHistoryPath() {
-  return path.join(electron.app.getPath("userData"), "vessel-history.json");
-}
-function load$3() {
-  if (state$4) return state$4;
-  state$4 = loadJsonFile({
-    filePath: getHistoryPath(),
-    fallback: { entries: [] },
-    parse: (raw) => {
-      const parsed = raw;
-      return {
-        entries: Array.isArray(parsed.entries) ? parsed.entries : []
-      };
-    }
-  });
-  return state$4;
-}
-const persistence$6 = createDebouncedJsonPersistence({
-  debounceMs: SAVE_DEBOUNCE_MS$4,
-  filePath: getHistoryPath(),
-  getValue: () => state$4,
-  logLabel: "history"
-});
-function save$2() {
-  persistence$6.schedule();
-}
-function emit$3() {
-  if (!state$4) return;
-  const snapshot2 = listEntries$2();
-  for (const listener of listeners$1) {
-    listener(snapshot2);
+const HISTORY_FALLBACK = { entries: [] };
+const store$1 = new PersistentState({
+  filename: "vessel-history.json",
+  fallback: HISTORY_FALLBACK,
+  parse: (raw) => parseArrayStateWithFallback(HistoryEntrySchema, raw, "entries", HISTORY_FALLBACK, "history"),
+  logLabel: "history",
+  debounceMs: 250,
+  snapshot: (s) => {
+    const entries = s.entries.slice(0, 200);
+    return {
+      entries,
+      offset: 0,
+      limit: entries.length,
+      total: s.entries.length
+    };
   }
-}
-function getState$1() {
-  load$3();
-  return { entries: [...state$4.entries] };
-}
+});
 function listEntries$2(offset = 0, limit = 200) {
-  load$3();
+  const s = store$1.getState();
   const safeOffset = Math.max(0, Math.floor(offset));
   const safeLimit = Math.max(1, Math.min(500, Math.floor(limit)));
   return {
-    entries: state$4.entries.slice(safeOffset, safeOffset + safeLimit),
+    entries: s.entries.slice(safeOffset, safeOffset + safeLimit),
     offset: safeOffset,
     limit: safeLimit,
-    total: state$4.entries.length
+    total: s.entries.length
   };
 }
+function getState$1() {
+  const s = store$1.getState();
+  return { entries: [...s.entries] };
+}
 function subscribe$1(listener) {
-  listeners$1.add(listener);
-  return () => {
-    listeners$1.delete(listener);
-  };
+  return store$1.subscribe(listener);
 }
 function addEntry$1(url, title) {
   if (!url || url === "about:blank") return;
-  load$3();
-  const last = state$4.entries[0];
-  if (last && last.url === url) {
-    if (title && title !== last.title) {
-      last.title = title;
-      save$2();
-      emit$3();
+  const changed = store$1.mutate((s) => {
+    const last = s.entries[0];
+    if (last && last.url === url) {
+      if (title && title !== last.title) {
+        last.title = title;
+        return true;
+      }
+      return false;
     }
-    return;
-  }
-  const entry = {
-    url,
-    title: title || url,
-    visitedAt: (/* @__PURE__ */ new Date()).toISOString()
-  };
-  state$4.entries.unshift(entry);
-  if (state$4.entries.length > MAX_HISTORY_ENTRIES) {
-    state$4.entries = state$4.entries.slice(0, MAX_HISTORY_ENTRIES);
+    const entry = {
+      url,
+      title: title || url,
+      visitedAt: (/* @__PURE__ */ new Date()).toISOString()
+    };
+    s.entries.unshift(entry);
+    if (s.entries.length > MAX_HISTORY_ENTRIES) {
+      s.entries = s.entries.slice(0, MAX_HISTORY_ENTRIES);
+    }
+    return true;
+  }, { save: false, emit: false });
+  if (changed) {
+    store$1.save();
+    store$1.emit();
   }
-  save$2();
-  emit$3();
 }
 function search(query, limit = 50) {
-  load$3();
-  if (!query.trim()) return state$4.entries.slice(0, limit);
+  const s = store$1.getState();
+  if (!query.trim()) return s.entries.slice(0, limit);
   const normalized = query.toLowerCase();
-  return state$4.entries.filter(
+  return s.entries.filter(
     (e) => e.url.toLowerCase().includes(normalized) || e.title.toLowerCase().includes(normalized)
   ).slice(0, limit);
 }
 function clearAll$1() {
-  state$4 = { entries: [] };
-  save$2();
-  emit$3();
+  store$1.mutate((s) => {
+    s.entries = [];
+  });
 }
 function clearByTimeRange(timeRange) {
-  load$3();
   if (timeRange === "all") {
     clearAll$1();
     return;
   }
   const now = Date.now();
   const cutoff = new Date(now - timeRangeToMs(timeRange));
-  state$4.entries = state$4.entries.filter((entry) => {
-    const visitedAt = new Date(entry.visitedAt).getTime();
-    return Number.isNaN(visitedAt) || visitedAt < cutoff.getTime();
+  store$1.mutate((s) => {
+    s.entries = s.entries.filter((entry) => {
+      const visitedAt = new Date(entry.visitedAt).getTime();
+      return Number.isNaN(visitedAt) || visitedAt < cutoff.getTime();
+    });
   });
-  save$2();
-  emit$3();
 }
 function timeRangeToMs(range) {
   switch (range) {
@@ -2183,12 +2317,13 @@ function importHistoryFromJson(content) {
   let skipped = 0;
   let errors = 0;
   try {
-    const parsed = JSON.parse(content);
-    const entries = Array.isArray(parsed?.entries) ? parsed.entries : [];
-    load$3();
-    const existingUrls = new Set(state$4.entries.map((e) => e.url));
+    const parsed = HistoryImportStateSchema.safeParse(JSON.parse(content));
+    const entries = parsed.success ? parsed.data.entries : [];
+    if (!parsed.success) errors++;
+    const s = store$1.getState();
+    const existingUrls = new Set(s.entries.map((e) => e.url));
     for (const entry of entries) {
-      if (!entry?.url || typeof entry.url !== "string") {
+      if (!entry.url) {
         errors++;
         continue;
       }
@@ -2196,22 +2331,29 @@ function importHistoryFromJson(content) {
         skipped++;
         continue;
       }
-      state$4.entries.push({
-        url: entry.url,
-        title: typeof entry.title === "string" ? entry.title : entry.url,
-        visitedAt: typeof entry.visitedAt === "string" ? entry.visitedAt : (/* @__PURE__ */ new Date()).toISOString()
-      });
       existingUrls.add(entry.url);
       imported++;
     }
-    state$4.entries.sort(
-      (a, b) => new Date(b.visitedAt).getTime() - new Date(a.visitedAt).getTime()
-    );
-    if (state$4.entries.length > MAX_HISTORY_ENTRIES) {
-      state$4.entries = state$4.entries.slice(0, MAX_HISTORY_ENTRIES);
+    if (imported > 0) {
+      store$1.mutate((state2) => {
+        const urlSet = new Set(state2.entries.map((e) => e.url));
+        for (const entry of entries) {
+          if (!entry.url || urlSet.has(entry.url)) continue;
+          state2.entries.push({
+            url: entry.url,
+            title: entry.title || entry.url,
+            visitedAt: entry.visitedAt || (/* @__PURE__ */ new Date()).toISOString()
+          });
+          urlSet.add(entry.url);
+        }
+        state2.entries.sort(
+          (a, b) => new Date(b.visitedAt).getTime() - new Date(a.visitedAt).getTime()
+        );
+        if (state2.entries.length > MAX_HISTORY_ENTRIES) {
+          state2.entries = state2.entries.slice(0, MAX_HISTORY_ENTRIES);
+        }
+      });
     }
-    save$2();
-    emit$3();
   } catch {
     errors++;
   }
@@ -2221,9 +2363,10 @@ function importHistoryFromHtml(content) {
   let imported = 0;
   let skipped = 0;
   let errors = 0;
-  load$3();
-  const existingUrls = new Set(state$4.entries.map((e) => e.url));
+  const s = store$1.getState();
+  const existingUrls = new Set(s.entries.map((e) => e.url));
   const hrefRegex = /<A\s+[^>]*HREF="([^"]+)"[^>]*>([^<]*)<\/A>/gi;
+  const newEntries = [];
   let match;
   while ((match = hrefRegex.exec(content)) !== null) {
     const url = match[1];
@@ -2233,26 +2376,25 @@ function importHistoryFromHtml(content) {
       else errors++;
       continue;
     }
-    state$4.entries.push({
-      url,
-      title,
-      visitedAt: (/* @__PURE__ */ new Date()).toISOString()
-    });
+    newEntries.push({ url, title, visitedAt: (/* @__PURE__ */ new Date()).toISOString() });
     existingUrls.add(url);
     imported++;
   }
-  state$4.entries.sort(
-    (a, b) => new Date(b.visitedAt).getTime() - new Date(a.visitedAt).getTime()
-  );
-  if (state$4.entries.length > MAX_HISTORY_ENTRIES) {
-    state$4.entries = state$4.entries.slice(0, MAX_HISTORY_ENTRIES);
+  if (newEntries.length > 0) {
+    store$1.mutate((state2) => {
+      state2.entries.push(...newEntries);
+      state2.entries.sort(
+        (a, b) => new Date(b.visitedAt).getTime() - new Date(a.visitedAt).getTime()
+      );
+      if (state2.entries.length > MAX_HISTORY_ENTRIES) {
+        state2.entries = state2.entries.slice(0, MAX_HISTORY_ENTRIES);
+      }
+    });
   }
-  save$2();
-  emit$3();
   return { imported, skipped, errors };
 }
 function flushPersist$3() {
-  return persistence$6.flush();
+  return store$1.flushPersist();
 }
 const MAX_CONSOLE_ENTRIES = 500;
 const MAX_NETWORK_ENTRIES = 200;
@@ -2954,7 +3096,7 @@ function destroySession(tabId) {
     sessions.delete(tabId);
   }
 }
-const logger$u = createLogger("TabManager");
+const logger$v = createLogger("TabManager");
 function sanitizeFilename(title, ext) {
   const clean = title.replace(/[<>:"/\\|?*\x00-\x1f]/g, " ").replace(/\s+/g, " ").trim();
   const escapedExt = ext.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
@@ -3373,7 +3515,7 @@ class TabManager {
     }));
     if (entries.length > 0) {
       void highlightBatchOnPage(wc, entries).catch(
-        (err) => logger$u.warn("Failed to batch highlight:", err)
+        (err) => logger$v.warn("Failed to batch highlight:", err)
       );
     }
   }
@@ -3395,12 +3537,12 @@ class TabManager {
         const result = await captureSelectionHighlight(wc);
         if (result.success && result.text) {
           await highlightOnPage(wc, null, result.text, void 0, void 0, "yellow").catch(
-            (err) => logger$u.warn("Failed to capture highlight:", err)
+            (err) => logger$v.warn("Failed to capture highlight:", err)
           );
         }
         this.highlightCaptureCallback?.(result);
       } catch (err) {
-        logger$u.warn("Failed to capture highlight from page:", err);
+        logger$v.warn("Failed to capture highlight from page:", err);
         this.highlightCaptureCallback?.({
           success: false,
           message: "Could not capture selection"
@@ -3425,7 +3567,7 @@ class TabManager {
           void this.removeHighlightMarksForText(wc, text);
         }
       } catch (err) {
-        logger$u.warn("Failed to remove highlight from matching tab:", err);
+        logger$v.warn("Failed to remove highlight from matching tab:", err);
       }
     }
     this.highlightCaptureCallback?.({
@@ -3456,12 +3598,12 @@ class TabManager {
               void 0,
               color
             ).catch(
-              (err) => logger$u.warn("Failed to update highlight color:", err)
+              (err) => logger$v.warn("Failed to update highlight color:", err)
             );
           });
         }
       } catch (err) {
-        logger$u.warn("Failed to iterate highlights for color change:", err);
+        logger$v.warn("Failed to iterate highlights for color change:", err);
       }
     }
     this.highlightCaptureCallback?.({
@@ -3516,7 +3658,7 @@ class TabManager {
         });
       })()`
     ).catch(
-      (err) => logger$u.warn("Failed to remove highlight marks:", err)
+      (err) => logger$v.warn("Failed to remove highlight marks:", err)
     );
   }
   broadcastState(meta = { persistSession: false }) {
@@ -4155,7 +4297,7 @@ function load$2() {
   });
   return snapshots;
 }
-const persistence$5 = createDebouncedJsonPersistence({
+const persistence$4 = createDebouncedJsonPersistence({
   debounceMs: SAVE_DEBOUNCE_MS$3,
   filePath: getFilePath$1(),
   getValue: () => snapshots,
@@ -4184,11 +4326,11 @@ function saveSnapshot(rawUrl, title, textContent, headings) {
   };
   s.delete(key2);
   s.set(key2, snapshot2);
-  persistence$5.schedule();
+  persistence$4.schedule();
   return snapshot2;
 }
 function flushPersist$2() {
-  return persistence$5.flush();
+  return persistence$4.flush();
 }
 const SEARCH_ENGINE_HOSTS = [
   "google.",
@@ -4768,7 +4910,7 @@ async function readJsonResponse(response, fallback, onError) {
     return fallback;
   }
 }
-const logger$t = createLogger("Premium");
+const logger$u = createLogger("Premium");
 const VERIFICATION_API = process.env.VESSEL_PREMIUM_API || "https://vesselpremium.quantaintellect.com";
 const FREE_TOOL_ITERATION_LIMIT = 50;
 const REVALIDATION_INTERVAL_MS = 24 * 60 * 60 * 1e3;
@@ -4944,7 +5086,7 @@ async function verifySubscription$1(identifier) {
     });
     if (!res.ok) {
       const detail = await readApiErrorDetail(res);
-      logger$t.warn(
+      logger$u.warn(
         "Verification API returned a non-OK status:",
         res.status,
         detail
@@ -4963,7 +5105,7 @@ async function verifySubscription$1(identifier) {
     setSetting("premium", updated);
     return updated;
   } catch (err) {
-    logger$t.warn("Verification failed:", err);
+    logger$u.warn("Verification failed:", err);
     return current;
   }
 }
@@ -4984,7 +5126,7 @@ async function requestActivationCode(email) {
     const data = await readJsonResponse(
       res,
       {},
-      (msg) => logger$t.warn("Failed to parse premium activation response:", msg)
+      (msg) => logger$u.warn("Failed to parse premium activation response:", msg)
     );
     if (!res.ok || !data.challengeToken) {
       return errorResult(data.error || `HTTP ${res.status}`);
@@ -5029,7 +5171,7 @@ async function verifyActivationCode(email, code, challengeToken) {
     const data = await readJsonResponse(
       res,
       {},
-      (msg) => logger$t.warn("Failed to parse premium verification response:", msg)
+      (msg) => logger$u.warn("Failed to parse premium verification response:", msg)
     );
     if (!res.ok) {
       return errorResult(data.error || `HTTP ${res.status}`, {
@@ -5626,7 +5768,7 @@ const EXTRACT_TIMEOUT_MAX_MS = 2e4;
 const MUTATION_CAPTURE_INTERVAL_MS = 5e3;
 const MUTATION_SETTLE_AFTER_MS = 1500;
 const AGENT_STREAM_IDLE_TIMEOUT_MS = 3e4;
-const logger$s = createLogger("Extractor");
+const logger$t = createLogger("Extractor");
 const EXTRACTION_CACHE_TTL_MS = 1500;
 const MAX_EXTRACTION_CACHE_ENTRIES = 50;
 const extractionCache = new BoundedCache(
@@ -6391,9 +6533,9 @@ async function executeScript(webContents, script, options = {}) {
     const message = err instanceof Error ? err.message : String(err);
     const detail = `Failed to execute page script${label} on ${url}: ${message}`;
     if (options.warnOnFailure) {
-      logger$s.warn(detail);
+      logger$t.warn(detail);
     } else {
-      logger$s.debug(detail);
+      logger$t.debug(detail);
     }
     return null;
   } finally {
@@ -6502,7 +6644,7 @@ async function estimateExtractionTimeout(webContents) {
       return EXTRACT_TIMEOUT_BASE_MS + extra;
     }
   } catch (err) {
-    logger$s.warn("Failed to estimate extraction timeout, using base timeout:", err);
+    logger$t.warn("Failed to estimate extraction timeout, using base timeout:", err);
   }
   return EXTRACT_TIMEOUT_BASE_MS;
 }
@@ -6673,7 +6815,7 @@ function loadHistory() {
   }
   return recentPageDiffBursts;
 }
-const persistence$4 = createDebouncedJsonPersistence({
+const persistence$3 = createDebouncedJsonPersistence({
   debounceMs: SAVE_DEBOUNCE_MS$2,
   filePath: getHistoryFilePath(),
   getValue: () => recentPageDiffBursts,
@@ -6703,7 +6845,7 @@ function getPageDiffBursts(rawUrl) {
     } else {
       history.delete(key2);
     }
-    persistence$4.schedule();
+    persistence$3.schedule();
   }
   return bursts.slice().reverse();
 }
@@ -6724,7 +6866,7 @@ function enrichWithBurstHistory(key2, diff) {
     now: Date.parse(detectedAt)
   });
   history.set(key2, bursts);
-  persistence$4.schedule();
+  persistence$3.schedule();
   const recentBursts = bursts.slice(-5);
   return {
     ...diff,
@@ -7470,7 +7612,7 @@ function isClickReadLoop(names) {
   return clickReadPairs >= 2;
 }
 const TERMINAL_TOOL_RESULT = "__VESSEL_TERMINAL_TOOL_RESULT__";
-const logger$r = createLogger("PromptCache");
+const logger$s = createLogger("PromptCache");
 function shortHash(value) {
   return crypto$2.createHash("sha256").update(value).digest("hex").slice(0, 12);
 }
@@ -7522,7 +7664,7 @@ function logOpenAIPromptCacheUsage(usage, context) {
   const details = record.prompt_tokens_details;
   const cachedTokens = details && typeof details === "object" ? numericField(details, "cached_tokens") : null;
   if (promptTokens === null && cachedTokens === null) return;
-  logger$r.debug("OpenAI prompt cache usage", {
+  logger$s.debug("OpenAI prompt cache usage", {
     model: context.model,
     mode: context.mode,
     promptTokens,
@@ -7538,7 +7680,7 @@ function logAnthropicPromptCacheUsage(usage, context) {
   if (inputTokens === null && cacheCreationTokens === null && cacheReadTokens === null) {
     return;
   }
-  logger$r.debug("Anthropic prompt cache usage", {
+  logger$s.debug("Anthropic prompt cache usage", {
     model: context.model,
     mode: context.mode,
     inputTokens,
@@ -8431,7 +8573,7 @@ function recoverNarratedActionToolCalls(text, availableToolNames) {
   }
   return recovered;
 }
-const logger$q = createLogger("OpenAIProvider");
+const logger$r = createLogger("OpenAIProvider");
 function shouldDebugAgentLoop() {
   const value = process.env.VESSEL_DEBUG_AGENT_LOOP;
   return value === "1" || value === "true";
@@ -8699,9 +8841,9 @@ function shouldRetryCompactToolLoop(profile, text, hasToolHistory, userMessage)
 function logAgentLoopDebug(payload) {
   if (!shouldDebugAgentLoop()) return;
   try {
-    logger$q.info(`[agent-debug] ${JSON.stringify(payload)}`);
+    logger$r.info(`[agent-debug] ${JSON.stringify(payload)}`);
   } catch (err) {
-    logger$q.warn("Failed to serialize debug payload:", err);
+    logger$r.warn("Failed to serialize debug payload:", err);
   }
 }
 function formatOpenAICompatErrorMessage(providerId, message) {
@@ -9328,7 +9470,7 @@ function createLocalPkceOAuthFlow(config) {
     isInProgress: () => activeFlow !== null
   };
 }
-const logger$p = createLogger("CodexOAuth");
+const logger$q = createLogger("CodexOAuth");
 const ISSUER = "https://auth.openai.com";
 const CLIENT_ID = "app_EMoamEEZ73f0CkXaXp7hrann";
 const SCOPE = "openid profile email offline_access api.connectors.read api.connectors.invoke";
@@ -9456,7 +9598,7 @@ async function refreshAccessToken(tokens) {
 }
 const codexOAuth = createLocalPkceOAuthFlow({
   name: "Codex",
-  logger: logger$p,
+  logger: logger$q,
   preferredPorts: [PREFERRED_PORT$1, FALLBACK_PORT$1],
   timeoutMs: AUTH_TIMEOUT_MS$1,
   callbackPath: () => "/auth/callback",
@@ -9480,7 +9622,7 @@ async function startCodexOAuth(onStatus) {
 function cancelCodexOAuth() {
   codexOAuth.cancel();
 }
-const logger$o = createLogger("CodexProvider");
+const logger$p = createLogger("CodexProvider");
 const REFRESH_WINDOW_MS = 5 * 60 * 1e3;
 const CODEX_BACKEND_BASE_URL = "https://chatgpt.com/backend-api/codex";
 const CODEX_CLIENT_VERSION = "0.129.0";
@@ -9545,7 +9687,7 @@ class CodexProvider {
   async ensureFreshTokens() {
     if (Date.now() < this.tokens.expiresAt - REFRESH_WINDOW_MS) return;
     try {
-      logger$o.info("Refreshing Codex access token");
+      logger$p.info("Refreshing Codex access token");
       const fresh = await refreshAccessToken(this.tokens);
       this.tokens = fresh;
       writeStoredCodexTokens(fresh);
@@ -9693,7 +9835,7 @@ class CodexProvider {
     } catch (err) {
       if (err.name !== "AbortError") {
         const msg = err instanceof Error ? err.message : String(err);
-        logger$o.error("Codex streamQuery error:", err);
+        logger$p.error("Codex streamQuery error:", err);
         onChunk(`
 
 [Error: ${msg}]`);
@@ -9761,7 +9903,7 @@ class CodexProvider {
     } catch (err) {
       if (err.name !== "AbortError") {
         const msg = err instanceof Error ? err.message : String(err);
-        logger$o.error("Codex streamAgentQuery error:", err);
+        logger$p.error("Codex streamAgentQuery error:", err);
         onChunk(`
 
 [Error: ${msg}]`);
@@ -10995,14 +11137,17 @@ function normalizeBookmarkMetadataUpdate(input) {
   }
   return normalized;
 }
-const logger$n = createLogger("BookmarkManager");
+function unixNow() {
+  return Math.floor(Date.now() / 1e3);
+}
+const logger$o = createLogger("BookmarkManager");
 const UNSORTED_ID = "unsorted";
 const ARCHIVE_FOLDER_NAME = "Archive";
 const NETSCAPE_BOOKMARKS_DOCTYPE = "<!DOCTYPE NETSCAPE-Bookmark-file-1>";
 const SAVE_DEBOUNCE_MS$1 = 250;
 const DEFAULT_BOOKMARK_SEARCH_LIMIT = 50;
 const MAX_BOOKMARK_SEARCH_LIMIT = 200;
-let state$3 = null;
+let state$2 = null;
 const listeners = /* @__PURE__ */ new Set();
 function cloneState(current) {
   return {
@@ -11012,7 +11157,7 @@ function cloneState(current) {
 }
 function getFolderMap() {
   load$1();
-  return new Map(state$3.folders.map((folder) => [folder.id, folder]));
+  return new Map(state$2.folders.map((folder) => [folder.id, folder]));
 }
 function getBookmarksPath() {
   return path.join(electron.app.getPath("userData"), "vessel-bookmarks.json");
@@ -11021,18 +11166,18 @@ function createPersistence() {
   return createDebouncedJsonPersistence({
     debounceMs: SAVE_DEBOUNCE_MS$1,
     filePath: getBookmarksPath(),
-    getValue: () => state$3,
+    getValue: () => state$2,
     logLabel: "bookmarks"
   });
 }
-let persistence$3 = null;
+let persistence$2 = null;
 function getPersistence() {
-  persistence$3 ??= createPersistence();
-  return persistence$3;
+  persistence$2 ??= createPersistence();
+  return persistence$2;
 }
 function load$1() {
-  if (state$3) return state$3;
-  state$3 = loadJsonFile({
+  if (state$2) return state$2;
+  state$2 = loadJsonFile({
     filePath: getBookmarksPath(),
     fallback: { folders: [], bookmarks: [] },
     parse: (raw) => {
@@ -11043,7 +11188,7 @@ function load$1() {
       };
     }
   });
-  return state$3;
+  return state$2;
 }
 function save$1() {
   getPersistence().schedule();
@@ -11056,8 +11201,8 @@ function assignDefinedBookmarkFields(bookmark, fields) {
   }
 }
 function emit$2() {
-  if (!state$3) return;
-  const snapshot2 = cloneState(state$3);
+  if (!state$2) return;
+  const snapshot2 = cloneState(state$2);
   for (const listener of listeners) {
     listener(snapshot2);
   }
@@ -11066,9 +11211,9 @@ function escapeBookmarkHtml(value) {
   return value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
 }
 function toNetscapeTimestamp(value) {
-  if (!value) return Math.floor(Date.now() / 1e3);
+  if (!value) return unixNow();
   const time = Date.parse(value);
-  return Number.isNaN(time) ? Math.floor(Date.now() / 1e3) : Math.floor(time / 1e3);
+  return Number.isNaN(time) ? unixNow() : Math.floor(time / 1e3);
 }
 function getBookmarkDescription(bookmark) {
   const lines = [
@@ -11099,7 +11244,7 @@ function exportBookmarksHtml(options = {}) {
   const resolvedOptions = {
     includeNotes: options.includeNotes ?? false
   };
-  const now = Math.floor(Date.now() / 1e3);
+  const now = unixNow();
   const folders = [
     { id: UNSORTED_ID, name: "Vessel Bookmarks", createdAt: "", summary: "" },
     ...current.folders
@@ -11140,7 +11285,7 @@ function exportBookmarkFolderHtml(folderId, options = {}) {
   const resolvedOptions = {
     includeNotes: options.includeNotes ?? false
   };
-  const now = Math.floor(Date.now() / 1e3);
+  const now = unixNow();
   const items = current.bookmarks.filter(
     (bookmark) => bookmark.folderId === folder.id
   );
@@ -11179,28 +11324,28 @@ function subscribe(listener) {
   };
 }
 function clearAll() {
-  state$3 = { folders: [], bookmarks: [] };
+  state$2 = { folders: [], bookmarks: [] };
   save$1();
   emit$2();
 }
 function getBookmark(id) {
   load$1();
-  const bookmark = state$3.bookmarks.find((item) => item.id === id);
+  const bookmark = state$2.bookmarks.find((item) => item.id === id);
   return bookmark ? { ...bookmark } : null;
 }
 function getBookmarkByUrl(url) {
   load$1();
   const normalized = url.trim();
   if (!normalized) return null;
-  const bookmark = [...state$3.bookmarks].reverse().find((item) => item.url === normalized);
+  const bookmark = [...state$2.bookmarks].reverse().find((item) => item.url === normalized);
   return bookmark ? { ...bookmark } : null;
 }
 function getBookmarkByUrlInFolder(url, folderId) {
   load$1();
   const normalizedUrl = url.trim();
   if (!normalizedUrl) return null;
-  const targetFolderId = folderId && folderId !== UNSORTED_ID ? state$3.folders.find((f) => f.id === folderId)?.id ?? UNSORTED_ID : UNSORTED_ID;
-  const bookmark = [...state$3.bookmarks].reverse().find(
+  const targetFolderId = folderId && folderId !== UNSORTED_ID ? state$2.folders.find((f) => f.id === folderId)?.id ?? UNSORTED_ID : UNSORTED_ID;
+  const bookmark = [...state$2.bookmarks].reverse().find(
     (item) => item.url === normalizedUrl && item.folderId === targetFolderId
   );
   return bookmark ? { ...bookmark } : null;
@@ -11208,14 +11353,14 @@ function getBookmarkByUrlInFolder(url, folderId) {
 function getFolder(id) {
   load$1();
   if (!id || id === UNSORTED_ID) return null;
-  const folder = state$3.folders.find((item) => item.id === id);
+  const folder = state$2.folders.find((item) => item.id === id);
   return folder ? { ...folder } : null;
 }
 function findFolderByName(name) {
   load$1();
   const normalized = name.trim().toLowerCase();
   if (!normalized || normalized === "unsorted") return null;
-  const folder = state$3.folders.find(
+  const folder = state$2.folders.find(
     (item) => item.name.trim().toLowerCase() === normalized
   );
   return folder ? { ...folder } : null;
@@ -11223,7 +11368,7 @@ function findFolderByName(name) {
 function listFolderOverviews() {
   load$1();
   const counts = /* @__PURE__ */ new Map();
-  for (const bookmark of state$3.bookmarks) {
+  for (const bookmark of state$2.bookmarks) {
     counts.set(bookmark.folderId, (counts.get(bookmark.folderId) ?? 0) + 1);
   }
   return [
@@ -11232,7 +11377,7 @@ function listFolderOverviews() {
       name: "Unsorted",
       count: counts.get(UNSORTED_ID) ?? 0
     },
-    ...state$3.folders.map((folder) => ({
+    ...state$2.folders.map((folder) => ({
       id: folder.id,
       name: folder.name,
       summary: folder.summary,
@@ -11248,7 +11393,7 @@ function searchBookmarks(query, limit = DEFAULT_BOOKMARK_SEARCH_LIMIT) {
     1,
     Math.min(MAX_BOOKMARK_SEARCH_LIMIT, Math.floor(limit))
   );
-  return state$3.bookmarks.map((bookmark) => {
+  return state$2.bookmarks.map((bookmark) => {
     const folder = foldersById.get(bookmark.folderId);
     const { matchedFields, score } = getBookmarkSearchMatch({
       query,
@@ -11285,7 +11430,7 @@ function createFolderWithSummary(name, summary) {
     summary: summary?.trim() || void 0,
     createdAt: (/* @__PURE__ */ new Date()).toISOString()
   };
-  state$3.folders.push(folder);
+  state$2.folders.push(folder);
   save$1();
   emit$2();
   return folder;
@@ -11316,7 +11461,7 @@ function saveBookmarkWithPolicy(url, title, folderId, note, options) {
     throw new Error("Bookmark URL cannot be empty");
   }
   const normalizedTitle = title.trim() || normalizedUrl;
-  const targetId = folderId && folderId !== UNSORTED_ID ? state$3.folders.find((f) => f.id === folderId)?.id ?? UNSORTED_ID : UNSORTED_ID;
+  const targetId = folderId && folderId !== UNSORTED_ID ? state$2.folders.find((f) => f.id === folderId)?.id ?? UNSORTED_ID : UNSORTED_ID;
   const duplicatePolicy = options?.onDuplicate ?? "ask";
   const existing = getBookmarkByUrlInFolder(normalizedUrl, targetId);
   if (existing) {
@@ -11327,7 +11472,7 @@ function saveBookmarkWithPolicy(url, title, folderId, note, options) {
       };
     }
     if (duplicatePolicy === "update") {
-      const bookmark2 = state$3.bookmarks.find((item) => item.id === existing.id);
+      const bookmark2 = state$2.bookmarks.find((item) => item.id === existing.id);
       if (!bookmark2) {
         return {
           status: "conflict",
@@ -11357,7 +11502,7 @@ function saveBookmarkWithPolicy(url, title, folderId, note, options) {
     savedAt: (/* @__PURE__ */ new Date()).toISOString(),
     ...options?.extra
   };
-  state$3.bookmarks.push(bookmark);
+  state$2.bookmarks.push(bookmark);
   save$1();
   emit$2();
   return {
@@ -11367,9 +11512,9 @@ function saveBookmarkWithPolicy(url, title, folderId, note, options) {
 }
 function removeBookmark(id) {
   load$1();
-  const before = state$3.bookmarks.length;
-  state$3.bookmarks = state$3.bookmarks.filter((b) => b.id !== id);
-  if (state$3.bookmarks.length !== before) {
+  const before = state$2.bookmarks.length;
+  state$2.bookmarks = state$2.bookmarks.filter((b) => b.id !== id);
+  if (state$2.bookmarks.length !== before) {
     save$1();
     emit$2();
     return true;
@@ -11378,7 +11523,7 @@ function removeBookmark(id) {
 }
 function updateBookmark(id, updates) {
   load$1();
-  const bookmark = state$3.bookmarks.find((item) => item.id === id);
+  const bookmark = state$2.bookmarks.find((item) => item.id === id);
   if (!bookmark) return null;
   const metadataUpdates = normalizeBookmarkMetadataUpdate({
     intent: updates.intent,
@@ -11395,7 +11540,7 @@ function updateBookmark(id, updates) {
     bookmark.note = trimmed || void 0;
   }
   if (typeof updates.folderId === "string") {
-    bookmark.folderId = updates.folderId && updates.folderId !== UNSORTED_ID ? state$3.folders.find((item) => item.id === updates.folderId)?.id ?? UNSORTED_ID : UNSORTED_ID;
+    bookmark.folderId = updates.folderId && updates.folderId !== UNSORTED_ID ? state$2.folders.find((item) => item.id === updates.folderId)?.id ?? UNSORTED_ID : UNSORTED_ID;
   }
   if ("intent" in metadataUpdates) {
     bookmark.intent = metadataUpdates.intent;
@@ -11418,23 +11563,23 @@ function updateBookmark(id, updates) {
 }
 function removeFolder(id, deleteContents = false) {
   load$1();
-  const exists = state$3.folders.some((f) => f.id === id);
+  const exists = state$2.folders.some((f) => f.id === id);
   if (!exists) return false;
   if (deleteContents) {
-    state$3.bookmarks = state$3.bookmarks.filter((b) => b.folderId !== id);
+    state$2.bookmarks = state$2.bookmarks.filter((b) => b.folderId !== id);
   } else {
-    state$3.bookmarks = state$3.bookmarks.map(
+    state$2.bookmarks = state$2.bookmarks.map(
       (b) => b.folderId === id ? { ...b, folderId: UNSORTED_ID } : b
     );
   }
-  state$3.folders = state$3.folders.filter((f) => f.id !== id);
+  state$2.folders = state$2.folders.filter((f) => f.id !== id);
   save$1();
   emit$2();
   return true;
 }
 function renameFolder(id, newName, summary) {
   load$1();
-  const folder = state$3.folders.find((f) => f.id === id);
+  const folder = state$2.folders.find((f) => f.id === id);
   if (!folder) return null;
   const trimmed = newName.trim();
   if (!trimmed) return null;
@@ -11452,7 +11597,7 @@ function importBookmarksFromHtml(content) {
   let skipped = 0;
   let errors = 0;
   load$1();
-  const existingUrls = new Set(state$3.bookmarks.map((b) => b.url));
+  const existingUrls = new Set(state$2.bookmarks.map((b) => b.url));
   let currentFolderId = UNSORTED_ID;
   let currentFolderName = "Imported";
   const lines = content.split("\n");
@@ -11461,7 +11606,7 @@ function importBookmarksFromHtml(content) {
     const folderMatch = line.match(/<DT><H3[^>]*>([^<]+)<\/H3>/i);
     if (folderMatch) {
       currentFolderName = folderMatch[1].trim();
-      const existing = state$3.folders.find(
+      const existing = state$2.folders.find(
         (f) => f.name.toLowerCase() === currentFolderName.toLowerCase()
       );
       if (existing) {
@@ -11472,7 +11617,7 @@ function importBookmarksFromHtml(content) {
           name: currentFolderName,
           createdAt: (/* @__PURE__ */ new Date()).toISOString()
         };
-        state$3.folders.push(folder);
+        state$2.folders.push(folder);
         currentFolderId = folder.id;
       }
       continue;
@@ -11493,7 +11638,7 @@ function importBookmarksFromHtml(content) {
         else errors++;
         continue;
       }
-      state$3.bookmarks.push({
+      state$2.bookmarks.push({
         id: crypto$1.randomUUID(),
         url,
         title,
@@ -11519,14 +11664,14 @@ function importBookmarksFromJson(content) {
     const incomingFolders = Array.isArray(parsed?.folders) ? parsed.folders : [];
     const incomingBookmarks = Array.isArray(parsed?.bookmarks) ? parsed.bookmarks : [];
     load$1();
-    const existingUrls = new Set(state$3.bookmarks.map((b) => b.url));
+    const existingUrls = new Set(state$2.bookmarks.map((b) => b.url));
     const folderIdMap = /* @__PURE__ */ new Map();
     for (const folder of incomingFolders) {
       if (!folder?.id || !folder?.name) {
         errors++;
         continue;
       }
-      const existing = state$3.folders.find(
+      const existing = state$2.folders.find(
         (f) => f.name.toLowerCase() === folder.name.toLowerCase()
       );
       if (existing) {
@@ -11538,7 +11683,7 @@ function importBookmarksFromJson(content) {
           summary: folder.summary?.trim() || void 0,
           createdAt: folder.createdAt || (/* @__PURE__ */ new Date()).toISOString()
         };
-        state$3.folders.push(newFolder);
+        state$2.folders.push(newFolder);
         folderIdMap.set(folder.id, newFolder.id);
       }
     }
@@ -11552,7 +11697,7 @@ function importBookmarksFromJson(content) {
         continue;
       }
       const mappedFolderId = bookmark.folderId ? folderIdMap.get(bookmark.folderId) ?? UNSORTED_ID : UNSORTED_ID;
-      state$3.bookmarks.push({
+      state$2.bookmarks.push({
         id: crypto$1.randomUUID(),
         url: bookmark.url.trim(),
         title: typeof bookmark.title === "string" ? bookmark.title.trim() : bookmark.url,
@@ -11568,7 +11713,7 @@ function importBookmarksFromJson(content) {
       emit$2();
     }
   } catch (err) {
-    logger$n.warn("Failed to import bookmarks from JSON:", err);
+    logger$o.warn("Failed to import bookmarks from JSON:", err);
     errors++;
   }
   return { imported, skipped, errors };
@@ -11973,7 +12118,7 @@ async function resolveSelector(wc, index, selector) {
   if (extractedSelector) return extractedSelector;
   return null;
 }
-const logger$m = createLogger("LinkValidation");
+const logger$n = createLogger("LinkValidation");
 const DEAD_STATUS_CODES = /* @__PURE__ */ new Set([404, 410, 451]);
 const HEAD_FALLBACK_STATUS_CODES = /* @__PURE__ */ new Set([400, 403, 404, 405, 406, 500, 501]);
 function isHttpUrl(value) {
@@ -11997,7 +12142,7 @@ async function requestUrl(url, method, timeoutMs) {
       }
     });
     await response.body?.cancel().catch((err) => {
-      logger$m.debug("Failed to cancel response body:", err);
+      logger$n.debug("Failed to cancel response body:", err);
     });
     return response;
   } finally {
@@ -12061,7 +12206,7 @@ function formatDeadLinkMessage(label, result) {
   const status = result.statusCode ? `HTTP ${result.statusCode}` : "dead link";
   return `Skipped stale link "${label}" because ${destination} returned ${status}. Try a different link or URL instead.`;
 }
-const logger$l = createLogger("Screenshot");
+const logger$m = createLogger("Screenshot");
 const SCREENSHOT_RETRY_COUNT = 3;
 const SCREENSHOT_RETRY_BASE_DELAY_MS = 120;
 async function captureScreenshot(wc) {
@@ -12083,7 +12228,7 @@ async function captureScreenshot(wc) {
         }
       }
     } catch (err) {
-      logger$l.debug(
+      logger$m.debug(
         `capturePage attempt ${attempt + 1} failed; retrying if attempts remain.`,
         getErrorMessage(err)
       );
@@ -12091,6 +12236,7 @@ async function captureScreenshot(wc) {
   }
   return errorResult("Page image was empty after 3 attempts");
 }
+const logger$l = createLogger("Sessions");
 const SESSION_VERSION = 1;
 function getSessionsDir() {
   return path$1.join(electron.app.getPath("userData"), "named-sessions");
@@ -12155,7 +12301,8 @@ function readSessionFile(filePath2) {
         capturedAt: (/* @__PURE__ */ new Date()).toISOString()
       }
     };
-  } catch {
+  } catch (err) {
+    logger$l.warn(`Failed to read session file ${filePath2}:`, err);
     return null;
   }
 }
@@ -12237,7 +12384,8 @@ async function captureLocalStorageForOrigin(tabManager, origin) {
         )
       );
     }
-  } catch {
+  } catch (err) {
+    logger$l.debug(`Failed to capture localStorage for origin ${origin}:`, err);
     return {};
   }
   return {};
@@ -12327,7 +12475,8 @@ async function loadNamedSession(tabManager, name) {
   for (const cookie of saved.cookies) {
     try {
       await electron.session.defaultSession.cookies.set(cookieSetDetails(cookie));
-    } catch {
+    } catch (err) {
+      logger$l.debug(`Skipping cookie ${cookie.name} for ${cookie.domain}:`, err);
       continue;
     }
   }
@@ -20031,7 +20180,6 @@ function installAdBlockingForSession(ses, tabManager) {
     );
   });
 }
-const filePath$1 = () => path$1.join(electron.app.getPath("userData"), "vessel-downloads.json");
 const EXECUTABLE_EXTENSIONS = /* @__PURE__ */ new Set([
   ".appimage",
   ".bat",
@@ -20044,6 +20192,7 @@ const EXECUTABLE_EXTENSIONS = /* @__PURE__ */ new Set([
   ".scr",
   ".sh"
 ]);
+const DOWNLOADS_FALLBACK = { items: [] };
 function hasMisleadingDoubleExtension(filename) {
   return /\.(pdf|docx?|xlsx?|pptx?|png|jpe?g|gif|txt|zip)\.(exe|msi|bat|cmd|ps1|sh|scr|appimage)$/i.test(filename);
 }
@@ -20058,23 +20207,14 @@ function executableWarningDetail(item) {
     hasMisleadingDoubleExtension(item.filename) ? "Warning: this filename uses a misleading double extension." : null
   ].filter(Boolean).join("\n");
 }
-function parse(raw) {
-  if (!raw || typeof raw !== "object") return { items: [] };
-  const items = Array.isArray(raw.items) ? raw.items : [];
-  return { items };
-}
-const state$2 = loadJsonFile({ filePath: filePath$1(), fallback: { items: [] }, parse });
-const persistence$2 = createDebouncedJsonPersistence({
-  debounceMs: 250,
-  filePath: filePath$1(),
-  getValue: () => state$2,
-  logLabel: "downloads"
+const store = new PersistentState({
+  filename: "vessel-downloads.json",
+  fallback: DOWNLOADS_FALLBACK,
+  parse: (raw) => parseArrayStateWithFallback(DownloadRecordSchema, raw, "items", DOWNLOADS_FALLBACK, "downloads"),
+  logLabel: "downloads",
+  debounceMs: 250
 });
 let broadcaster$1 = null;
-function persist() {
-  state$2.items = state$2.items.slice(0, 200);
-  persistence$2.schedule();
-}
 function emit$1() {
   broadcaster$1?.(Channels.DOWNLOADS_UPDATE, listDownloads());
 }
@@ -20082,30 +20222,33 @@ function setDownloadBroadcaster(fn) {
   broadcaster$1 = fn;
 }
 function listDownloads() {
-  return state$2.items.map((item) => ({ ...item }));
+  return store.getState().items.map((item) => ({ ...item }));
 }
 function upsertDownload(input) {
   const now = (/* @__PURE__ */ new Date()).toISOString();
-  const existing = state$2.items.find((item) => item.savePath === input.savePath);
-  if (existing) {
-    Object.assign(existing, input, { updatedAt: now });
-    persist();
-    emit$1();
-    return existing;
-  }
-  const record = { id: crypto$2.randomUUID(), ...input, startedAt: now, updatedAt: now };
-  state$2.items = [record, ...state$2.items];
-  persist();
+  const result = store.mutate((s) => {
+    const existing = s.items.find((item) => item.savePath === input.savePath);
+    if (existing) {
+      Object.assign(existing, input, { updatedAt: now });
+      return existing;
+    } else {
+      const record = { id: crypto$2.randomUUID(), ...input, startedAt: now, updatedAt: now };
+      s.items = [record, ...s.items];
+      s.items = s.items.slice(0, 200);
+      return record;
+    }
+  });
   emit$1();
-  return record;
+  return result;
 }
 function clearDownloads() {
-  state$2.items = [];
-  persist();
+  store.mutate((s) => {
+    s.items = [];
+  });
   emit$1();
 }
 async function openDownload(id) {
-  const item = state$2.items.find((d) => d.id === id);
+  const item = store.getState().items.find((d) => d.id === id);
   if (!item || item.state !== "completed" || !fs$1.existsSync(item.savePath)) return false;
   if (isExecutableDownload(item.savePath)) {
     const result = electron.dialog.showMessageBoxSync({
@@ -20122,7 +20265,7 @@ async function openDownload(id) {
   return await electron.shell.openPath(item.savePath) === "";
 }
 async function showDownloadInFolder(id) {
-  const item = state$2.items.find((d) => d.id === id);
+  const item = store.getState().items.find((d) => d.id === id);
   if (!item || !fs$1.existsSync(item.savePath)) return false;
   electron.shell.showItemInFolder(item.savePath);
   return true;
@@ -21505,6 +21648,32 @@ function compactProviderHistory(history = []) {
   const omitted = normalized.slice(0, normalized.length - recent.length);
   return omitted.length > 0 ? [summarizeOmittedHistory(omitted), ...recent] : recent;
 }
+const AIQuerySchema = zod.z.string().min(1);
+const AIMessageSchema = zod.z.object({
+  role: zod.z.enum(["user", "assistant"]),
+  content: zod.z.string()
+});
+const AIHistorySchema = zod.z.array(AIMessageSchema).optional();
+const ReasoningEffortSchema = zod.z.enum(["off", "low", "medium", "high", "max"]);
+const ProviderConfigSchema = zod.z.object({
+  id: zod.z.enum([
+    "anthropic",
+    "openai",
+    "openai_codex",
+    "openrouter",
+    "ollama",
+    "llama_cpp",
+    "mistral",
+    "xai",
+    "google",
+    "custom"
+  ]),
+  apiKey: zod.z.string(),
+  hasApiKey: zod.z.boolean().optional(),
+  model: zod.z.string(),
+  baseUrl: zod.z.string().optional(),
+  reasoningEffort: ReasoningEffortSchema.optional()
+});
 let activeChatProvider = null;
 function registerAIHandlers(tabManager, runtime2, sendToRendererViews, getResearchOrchestrator) {
   onAIStreamIdle(() => {
@@ -21512,10 +21681,12 @@ function registerAIHandlers(tabManager, runtime2, sendToRendererViews, getResear
   });
   electron.ipcMain.handle(Channels.AI_QUERY, async (event, query, history) => {
     assertTrustedIpcSender(event);
+    const validatedQuery = parseIpc(AIQuerySchema, query, "query");
+    const validatedHistory = history !== void 0 ? parseIpc(AIHistorySchema, history, "history") : void 0;
     const settings2 = loadSettings();
     const chatConfig = settings2.chatProvider;
     if (!chatConfig) {
-      sendToRendererViews(Channels.AI_STREAM_START, query);
+      sendToRendererViews(Channels.AI_STREAM_START, validatedQuery);
       sendToRendererViews(
         Channels.AI_STREAM_CHUNK,
         "Chat provider not configured. Open Settings (Ctrl+,) to choose a provider."
@@ -21526,20 +21697,20 @@ function registerAIHandlers(tabManager, runtime2, sendToRendererViews, getResear
     if (!tryBeginAIStream("manual")) {
       return { accepted: false, reason: "busy" };
     }
-    sendToRendererViews(Channels.AI_STREAM_START, query);
+    sendToRendererViews(Channels.AI_STREAM_START, validatedQuery);
     (async () => {
       try {
         activeChatProvider = createProvider(chatConfig);
         const activeTab = tabManager.getActiveTab();
         await handleAIQuery(
-          query,
+          validatedQuery,
           activeChatProvider,
           activeTab?.view.webContents,
           (chunk) => sendToRendererViews(Channels.AI_STREAM_CHUNK, chunk),
           () => sendToRendererViews(Channels.AI_STREAM_END, "completed"),
           tabManager,
           runtime2,
-          compactProviderHistory(history),
+          compactProviderHistory(validatedHistory),
           getResearchOrchestrator()
         );
       } catch (err) {
@@ -21561,12 +21732,8 @@ function registerAIHandlers(tabManager, runtime2, sendToRendererViews, getResear
   electron.ipcMain.handle(Channels.AI_FETCH_MODELS, async (event, config) => {
     assertTrustedIpcSender(event);
     try {
-      if (!config || typeof config !== "object" || !("id" in config)) {
-        return errorResult("Invalid provider configuration", { models: [] });
-      }
-      return await fetchProviderModels(
-        config
-      );
+      const validatedConfig = parseIpc(ProviderConfigSchema, config, "providerConfig");
+      return await fetchProviderModels(validatedConfig);
     } catch (err) {
       return errorResult(getErrorMessage(err), { models: [] });
     }
@@ -23822,7 +23989,7 @@ function domainMatches(pattern, hostname) {
   return isWildcard ? h.endsWith("." + p) : p === h;
 }
 function generateTotpCode(secret) {
-  const epoch = Math.floor(Date.now() / 1e3);
+  const epoch = unixNow();
   const counter = Math.floor(epoch / 30);
   const base32Chars = "ABCDEFGHIJKLMNOPQRSTUVWXYZ234567";
   const cleanSecret = secret.replace(/[\s=-]/g, "").toUpperCase();
@@ -23867,7 +24034,8 @@ function createAuditLog(filename, maxEntries) {
           });
           fs$1.chmodSync(auditPath, 384);
         }
-      } catch {
+      } catch (err) {
+        logger$e.warn("Failed to trim audit log:", err);
       }
     } catch (err) {
       logger$e.error("Failed to write audit log:", err);
@@ -25436,7 +25604,7 @@ To analyze visually, call vision_analyze with image_url="${screenshotPath}"`
         )
       }
     },
-    async ({ index, selector, text, label, durationMs, persist: persist2, color }) => {
+    async ({ index, selector, text, label, durationMs, persist, color }) => {
       const tab = tabManager.getActiveTab();
       if (!tab) return asNoActiveTabResponse();
       const normalizedText = normalizeLooseString(text);
@@ -25450,7 +25618,7 @@ To analyze visually, call vision_analyze with image_url="${screenshotPath}"`
           text: normalizedText,
           label,
           durationMs,
-          persist: persist2,
+          persist,
           color
         },
         async () => {
@@ -25464,7 +25632,7 @@ To analyze visually, call vision_analyze with image_url="${screenshotPath}"`
             durationMs,
             color
           );
-          if (persist2 && !durationMs && !result.startsWith("Error") && !result.includes("not found")) {
+          if (persist && !durationMs && !result.startsWith("Error") && !result.includes("not found")) {
             const url = normalizeUrl$1(wc.getURL());
             addHighlight(
               url,
@@ -27984,6 +28152,25 @@ function registerSystemHandlers(windowState2, sendToRendererViews) {
     return togglePictureInPicture(tabManager);
   });
 }
+const FolderNameSchema = zod.z.string().min(1);
+const BookmarkUrlSchema = zod.z.string().min(1);
+const BookmarkIdSchema = zod.z.string().min(1);
+const OptionalStringSchema = zod.z.string().optional();
+const OptionalStringArraySchema = zod.z.array(zod.z.string()).optional();
+const OptionalRecordSchema = zod.z.record(zod.z.string(), zod.z.string()).optional();
+const OptionalBooleanSchema = zod.z.boolean().optional();
+const BookmarkUpdateSchema = zod.z.object({
+  title: zod.z.string().optional(),
+  note: zod.z.string().optional(),
+  folderId: zod.z.string().optional(),
+  intent: zod.z.string().optional(),
+  expectedContent: zod.z.string().optional(),
+  keyFields: zod.z.array(zod.z.string()).optional(),
+  agentHints: zod.z.record(zod.z.string(), zod.z.string()).optional()
+});
+const ExportOptionsSchema = zod.z.object({
+  includeNotes: zod.z.boolean().optional()
+}).optional();
 function getSafeBookmarkExportName(name) {
   const safeName = name.trim().toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
   return safeName || "folder";
@@ -27997,23 +28184,33 @@ function registerBookmarkHandlers() {
     Channels.FOLDER_CREATE,
     (event, name, summary) => {
       assertTrustedIpcSender(event);
+      const validatedName = parseIpc(FolderNameSchema, name, "name");
+      const validatedSummary = parseIpc(OptionalStringSchema, summary, "summary");
       trackBookmarkAction("folder_create");
-      return createFolderWithSummary(name, summary);
+      return createFolderWithSummary(validatedName, validatedSummary);
     }
   );
   electron.ipcMain.handle(
     Channels.BOOKMARK_SAVE,
     (event, url, title, folderId, note, intent, expectedContent, keyFields, agentHints) => {
       assertTrustedIpcSender(event);
+      const validatedUrl = parseIpc(BookmarkUrlSchema, url, "url");
+      const validatedTitle = parseIpc(zod.z.string(), title, "title");
+      const validatedFolderId = parseIpc(OptionalStringSchema, folderId, "folderId");
+      const validatedNote = parseIpc(OptionalStringSchema, note, "note");
+      const validatedIntent = parseIpc(OptionalStringSchema, intent, "intent");
+      const validatedExpectedContent = parseIpc(OptionalStringSchema, expectedContent, "expectedContent");
+      const validatedKeyFields = parseIpc(OptionalStringArraySchema, keyFields, "keyFields");
+      const validatedAgentHints = parseIpc(OptionalRecordSchema, agentHints, "agentHints");
       trackBookmarkAction("save");
-      const result = saveBookmarkWithPolicy(url, title, folderId, note, {
+      const result = saveBookmarkWithPolicy(validatedUrl, validatedTitle, validatedFolderId, validatedNote, {
         onDuplicate: "update",
         extra: {
           ...normalizeBookmarkMetadata({
-            intent,
-            expectedContent,
-            keyFields,
-            agentHints
+            intent: validatedIntent,
+            expectedContent: validatedExpectedContent,
+            keyFields: validatedKeyFields,
+            agentHints: validatedAgentHints
           })
         }
       });
@@ -28027,19 +28224,23 @@ function registerBookmarkHandlers() {
     Channels.BOOKMARK_UPDATE,
     (event, id, updates) => {
       assertTrustedIpcSender(event);
+      const validatedId = parseIpc(BookmarkIdSchema, id, "id");
+      const validatedUpdates = parseIpc(BookmarkUpdateSchema, updates, "updates");
       trackBookmarkAction("save");
-      return updateBookmark(id, updates);
+      return updateBookmark(validatedId, validatedUpdates);
     }
   );
   electron.ipcMain.handle(Channels.BOOKMARK_REMOVE, (event, id) => {
     assertTrustedIpcSender(event);
+    const validatedId = parseIpc(BookmarkIdSchema, id, "id");
     trackBookmarkAction("remove");
-    return removeBookmark(id);
+    return removeBookmark(validatedId);
   });
   electron.ipcMain.handle(
     Channels.BOOKMARKS_EXPORT_HTML,
     async (event, options) => {
       assertTrustedIpcSender(event);
+      const validatedOptions = parseIpc(ExportOptionsSchema, options, "options");
       const { canceled, filePath: filePath2 } = await electron.dialog.showSaveDialog({
         title: "Export Bookmarks",
         defaultPath: "vessel-bookmarks.html",
@@ -28047,7 +28248,7 @@ function registerBookmarkHandlers() {
       });
       if (canceled || !filePath2) return null;
       const content = exportBookmarksHtml({
-        includeNotes: options?.includeNotes ?? false
+        includeNotes: validatedOptions?.includeNotes ?? false
       });
       await fs.promises.writeFile(filePath2, content, "utf-8");
       trackBookmarkAction("export");
@@ -28077,7 +28278,9 @@ function registerBookmarkHandlers() {
     Channels.FOLDER_EXPORT_HTML,
     async (event, folderId, options) => {
       assertTrustedIpcSender(event);
-      const folder = getFolder(folderId);
+      const validatedFolderId = parseIpc(BookmarkIdSchema, folderId, "folderId");
+      const validatedOptions = parseIpc(ExportOptionsSchema, options, "options");
+      const folder = getFolder(validatedFolderId);
       if (!folder) return null;
       const { canceled, filePath: filePath2 } = await electron.dialog.showSaveDialog({
         title: `Export ${folder.name}`,
@@ -28085,8 +28288,8 @@ function registerBookmarkHandlers() {
         filters: [{ name: "HTML Bookmarks", extensions: ["html"] }]
       });
       if (canceled || !filePath2) return null;
-      const result = exportBookmarkFolderHtml(folderId, {
-        includeNotes: options?.includeNotes ?? true
+      const result = exportBookmarkFolderHtml(validatedFolderId, {
+        includeNotes: validatedOptions?.includeNotes ?? true
       });
       if (!result) return null;
       await fs.promises.writeFile(filePath2, result.content, "utf-8");
@@ -28127,14 +28330,23 @@ function registerBookmarkHandlers() {
   });
   electron.ipcMain.handle(Channels.FOLDER_REMOVE, (event, id, deleteContents) => {
     assertTrustedIpcSender(event);
+    const validatedId = parseIpc(BookmarkIdSchema, id, "id");
+    const validatedDeleteContents = parseIpc(
+      OptionalBooleanSchema,
+      deleteContents,
+      "deleteContents"
+    );
     trackBookmarkAction("folder_remove");
-    return removeFolder(id, deleteContents ?? false);
+    return removeFolder(validatedId, validatedDeleteContents ?? false);
   });
   electron.ipcMain.handle(
     Channels.FOLDER_RENAME,
     (event, id, newName, summary) => {
       assertTrustedIpcSender(event);
-      return renameFolder(id, newName, summary);
+      const validatedId = parseIpc(BookmarkIdSchema, id, "id");
+      const validatedName = parseIpc(FolderNameSchema, newName, "newName");
+      const validatedSummary = parseIpc(OptionalStringSchema, summary, "summary");
+      return renameFolder(validatedId, validatedName, validatedSummary);
     }
   );
 }
@@ -28399,6 +28611,7 @@ function registerPremiumHandlers(tabManager, sendToRendererViews) {
     return result;
   });
 }
+const SessionNameSchema = zod.z.string().min(1);
 function registerSessionHandlers(tabManager) {
   electron.ipcMain.handle(Channels.SESSION_LIST, (event) => {
     assertTrustedIpcSender(event);
@@ -28406,18 +28619,18 @@ function registerSessionHandlers(tabManager) {
   });
   electron.ipcMain.handle(Channels.SESSION_SAVE, async (event, name) => {
     assertTrustedIpcSender(event);
-    assertString(name, "name");
-    return await saveNamedSession(tabManager, name);
+    const validatedName = parseIpc(SessionNameSchema, name, "name");
+    return await saveNamedSession(tabManager, validatedName);
   });
   electron.ipcMain.handle(Channels.SESSION_LOAD, async (event, name) => {
     assertTrustedIpcSender(event);
-    assertString(name, "name");
-    return await loadNamedSession(tabManager, name);
+    const validatedName = parseIpc(SessionNameSchema, name, "name");
+    return await loadNamedSession(tabManager, validatedName);
   });
   electron.ipcMain.handle(Channels.SESSION_DELETE, (event, name) => {
     assertTrustedIpcSender(event);
-    assertString(name, "name");
-    return deleteNamedSession(name);
+    const validatedName = parseIpc(SessionNameSchema, name, "name");
+    return deleteNamedSession(validatedName);
   });
 }
 const esc = (s) => s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
@@ -30507,7 +30720,8 @@ ${progress}
       const raw = fs$1.readFileSync(getRuntimeStatePath(), "utf-8");
       const parsed = JSON.parse(raw);
       return sanitizePersistence(parsed);
-    } catch {
+    } catch (err) {
+      logger$3.warn("Failed to load persisted runtime state, starting fresh:", err);
       return sanitizePersistence(null);
     }
   }
@@ -30766,7 +30980,7 @@ function findIconBase64() {
   return "";
 }
 function buildSplashHTML(iconSrc) {
-  const imgTag = iconSrc ? `<img class="logo" src="${iconSrc}" alt="" />` : `<div class="logo-fallback">V</div>`;
+  const imgTag = iconSrc ? `<img class="logo" src="${escapeHtml(iconSrc)}" alt="" />` : `<div class="logo-fallback">V</div>`;
   return `<!DOCTYPE html>
 <html>
 <head>
@@ -30906,7 +31120,8 @@ function createSplashWindow() {
     splash.once("closed", () => {
       try {
         fs$1.rmSync(tmpDir, { recursive: true, force: true });
-      } catch {
+      } catch (err) {
+        logger$1.debug("Failed to clean up splash temp dir:", err);
       }
     });
     fs$1.writeFileSync(tmpPath, html, "utf-8");