@quanta-intellect/vessel-browser 0.1.134 → 0.1.137

package/out/main/index.js

@@ -4,11 +4,11 @@ const fs$1 = require("node:fs");
 const path = require("path");
 const fs = require("fs");
 const crypto$1 = require("crypto");
+const zod = require("zod");
 const Anthropic = require("@anthropic-ai/sdk");
 const OpenAI = require("openai");
 const crypto$2 = require("node:crypto");
 const http = require("http");
-const zod = require("zod");
 const path$1 = require("node:path");
 const node_module = require("node:module");
 const http$1 = require("node:http");
@@ -111,10 +111,10 @@ const defaults = {
     expiresAt: ""
   }
 };
-const SAVE_DEBOUNCE_MS$6 = 150;
+const SAVE_DEBOUNCE_MS$4 = 150;
 const CHAT_PROVIDER_SECRET_FILENAME = "vessel-chat-provider-secret";
 const CODEX_TOKENS_FILENAME = "vessel-codex-tokens";
-const logger$x = createLogger("Settings");
+const logger$y = createLogger("Settings");
 const SETTABLE_KEYS = new Set(Object.keys(defaults));
 let settings = null;
 let settingsIssues = [];
@@ -139,7 +139,7 @@ function canUseSafeStorage$1() {
   try {
     return electron.safeStorage.isEncryptionAvailable();
   } catch (err) {
-    logger$x.warn("safeStorage.isEncryptionAvailable() failed, assuming unavailable:", err);
+    logger$y.warn("safeStorage.isEncryptionAvailable() failed, assuming unavailable:", err);
     return false;
   }
 }
@@ -148,7 +148,7 @@ function writePrivateFile(filePath2, data) {
   try {
     fs.chmodSync(filePath2, 384);
   } catch (err) {
-    logger$x.debug("Could not chmod private file (non-POSIX filesystem):", err);
+    logger$y.debug("Could not chmod private file (non-POSIX filesystem):", err);
   }
 }
 function assertSafeStorageAvailable() {
@@ -167,7 +167,7 @@ function readStoredProviderSecret() {
     }
   } catch (err) {
     if (!isMissingFileError(err)) {
-      logger$x.warn("Could not read stored provider secret:", err);
+      logger$y.warn("Could not read stored provider secret:", err);
     }
   }
   return null;
@@ -185,7 +185,7 @@ function clearStoredProviderSecret() {
     fs.unlinkSync(getChatProviderSecretPath());
   } catch (err) {
     if (!isMissingFileError(err)) {
-      logger$x.warn("Could not delete provider secret file:", err);
+      logger$y.warn("Could not delete provider secret file:", err);
     }
   }
 }
@@ -203,7 +203,7 @@ function readStoredCodexTokens() {
     }
   } catch (err) {
     if (!isMissingFileError(err)) {
-      logger$x.warn("Could not read stored Codex tokens:", err);
+      logger$y.warn("Could not read stored Codex tokens:", err);
     }
   }
   return null;
@@ -221,7 +221,7 @@ function clearStoredCodexTokens() {
     fs.unlinkSync(getCodexTokensPath());
   } catch (err) {
     if (!isMissingFileError(err)) {
-      logger$x.warn("Could not delete Codex token file:", err);
+      logger$y.warn("Could not delete Codex token file:", err);
     }
   }
 }
@@ -352,8 +352,8 @@ function persistNow() {
       { encoding: "utf-8", mode: 384 }
     )
   ).then(() => fs.promises.chmod(getSettingsPath(), 384).catch((err) => {
-    logger$x.warn("Failed to chmod settings file:", err);
-  })).catch((err) => logger$x.error("Failed to save settings:", err));
+    logger$y.warn("Failed to chmod settings file:", err);
+  })).catch((err) => logger$y.error("Failed to save settings:", err));
 }
 function saveSettings() {
   saveDirty = true;
@@ -363,7 +363,7 @@ function saveSettings() {
     if (saveDirty) {
       void persistNow();
     }
-  }, SAVE_DEBOUNCE_MS$6);
+  }, SAVE_DEBOUNCE_MS$4);
 }
 function setSetting(key2, value) {
   loadSettings();
@@ -532,7 +532,7 @@ const urlSafety = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.definePro
 }, Symbol.toStringTag, { value: "Module" }));
 const MAX_CUSTOM_HISTORY = 50;
 const READER_MODE_DATA_URL_PREFIX = "data:text/html;charset=utf-8,";
-const logger$w = createLogger("Tab");
+const logger$x = createLogger("Tab");
 const sessionCertExceptions = /* @__PURE__ */ new WeakMap();
 const sessionsWithVerifyProc = /* @__PURE__ */ new WeakSet();
 const CERT_VERIFY_TRUST = 0;
@@ -598,7 +598,7 @@ class Tab {
   guardedLoadURL(url, options) {
     const blockReason = this.getNavigationBlockReason(url);
     if (blockReason) {
-      logger$w.warn(blockReason);
+      logger$x.warn(blockReason);
       return blockReason;
     }
     void this.view.webContents.loadURL(url, options);
@@ -682,7 +682,7 @@ class Tab {
     wc.setWindowOpenHandler(({ url, disposition }) => {
       const error = this.getNavigationBlockReason(url);
       if (error) {
-        logger$w.warn(error);
+        logger$x.warn(error);
         return { action: "deny" };
       }
       this.onOpenUrl?.({
@@ -696,7 +696,7 @@ class Tab {
       const error = this.getNavigationBlockReason(url);
       if (!error) return;
       event.preventDefault();
-      logger$w.warn(`${context}: ${error}`);
+      logger$x.warn(`${context}: ${error}`);
     };
     wc.on("will-navigate", (event, url) => {
       blockNavigation(event, url, "Blocked top-level navigation");
@@ -780,7 +780,7 @@ class Tab {
         ::-webkit-scrollbar-thumb { background: rgba(255,255,255,0.12); border-radius: 999px; }
         ::-webkit-scrollbar-thumb:hover { background: rgba(255,255,255,0.22); }
         ::-webkit-scrollbar-corner { background: transparent; }
-      `).catch((err) => logger$w.warn("Failed to inject scrollbar CSS:", err));
+      `).catch((err) => logger$x.warn("Failed to inject scrollbar CSS:", err));
     });
     wc.on("page-favicon-updated", (_, favicons) => {
       this._state.favicon = favicons[0] || "";
@@ -816,7 +816,7 @@ class Tab {
       ).then((highlightedText) => {
         this.buildContextMenu(wc, params, highlightedText.trim());
       }).catch((err) => {
-        logger$w.warn("Failed to inspect highlighted text for context menu:", err);
+        logger$x.warn("Failed to inspect highlighted text for context menu:", err);
         this.buildContextMenu(wc, params, "");
       });
     });
@@ -1017,7 +1017,7 @@ class Tab {
         "document.documentElement.outerHTML"
       );
     } catch (err) {
-      logger$w.warn("Failed to retrieve page source:", err);
+      logger$x.warn("Failed to retrieve page source:", err);
       return;
     }
     const escaped = html.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
@@ -1147,7 +1147,7 @@ class Tab {
             document.addEventListener('mouseup', window.__vesselHighlightHandler);
           }
         })()
-      `).catch((err) => logger$w.warn("Failed to inject highlight listener:", err));
+      `).catch((err) => logger$x.warn("Failed to inject highlight listener:", err));
     } else {
       void wc.executeJavaScript(`
         (function() {
@@ -1158,7 +1158,7 @@ class Tab {
             delete window.__vesselHighlightHandler;
           }
         })()
-      `).catch((err) => logger$w.warn("Failed to remove highlight listener:", err));
+      `).catch((err) => logger$x.warn("Failed to remove highlight listener:", err));
     }
   }
   get webContentsId() {
@@ -1195,7 +1195,87 @@ const SEARCH_ENGINE_PRESETS = {
   ecosia: { label: "Ecosia", url: "https://www.ecosia.org/search?q=" },
   kagi: { label: "Kagi", url: "https://kagi.com/search?q=" }
 };
-const logger$v = createLogger("JsonPersistence");
+const DownloadStateSchema = zod.z.enum([
+  "progressing",
+  "completed",
+  "cancelled",
+  "interrupted"
+]);
+const DownloadRecordSchema = zod.z.object({
+  id: zod.z.string(),
+  filename: zod.z.string(),
+  savePath: zod.z.string(),
+  url: zod.z.string().optional(),
+  mimeType: zod.z.string().optional(),
+  totalBytes: zod.z.number(),
+  receivedBytes: zod.z.number(),
+  state: DownloadStateSchema,
+  startedAt: zod.z.string(),
+  updatedAt: zod.z.string()
+});
+zod.z.object({
+  items: zod.z.array(DownloadRecordSchema)
+});
+const HistoryEntrySchema = zod.z.object({
+  url: zod.z.string(),
+  title: zod.z.string(),
+  visitedAt: zod.z.string()
+});
+zod.z.object({
+  entries: zod.z.array(HistoryEntrySchema)
+});
+const HistoryImportEntrySchema = zod.z.object({
+  url: zod.z.string(),
+  title: zod.z.string().optional(),
+  visitedAt: zod.z.string().optional()
+});
+const HistoryImportStateSchema = zod.z.object({
+  entries: zod.z.array(HistoryImportEntrySchema)
+});
+const HighlightColorSchema = zod.z.enum([
+  "yellow",
+  "red",
+  "green",
+  "blue",
+  "purple",
+  "orange"
+]);
+const HighlightSourceSchema = zod.z.enum(["agent", "user"]);
+const StoredHighlightSchema = zod.z.object({
+  id: zod.z.string(),
+  url: zod.z.string(),
+  selector: zod.z.string().optional(),
+  text: zod.z.string().optional(),
+  label: zod.z.string().optional(),
+  color: HighlightColorSchema.optional(),
+  source: HighlightSourceSchema.optional(),
+  createdAt: zod.z.string()
+});
+zod.z.object({
+  highlights: zod.z.array(StoredHighlightSchema)
+});
+function parseArrayStateWithFallback(itemSchema, data, field, fallback, label) {
+  if (!data || typeof data !== "object") return fallback;
+  const rawItems = data[field];
+  if (!Array.isArray(rawItems)) return fallback;
+  const items = [];
+  let invalid = 0;
+  for (const item of rawItems) {
+    const result = itemSchema.safeParse(item);
+    if (result.success) {
+      items.push(result.data);
+    } else {
+      invalid++;
+    }
+  }
+  if (invalid > 0) {
+    console.warn(
+      `[persistence] ${label} dropped ${invalid} invalid ${field} item${invalid === 1 ? "" : "s"}`
+    );
+  }
+  return { ...fallback, [field]: items };
+}
+const logger$w = createLogger("JsonPersistence");
 function canUseSafeStorage() {
   try {
     return electron.safeStorage.isEncryptionAvailable();
@@ -1218,14 +1298,15 @@ function encodeStoredData(payload, secure) {
 function loadJsonFile({
   filePath: filePath2,
   fallback,
-  parse: parse2,
+  parse,
   secure = false
 }) {
   try {
     const raw = fs.readFileSync(filePath2);
     const decoded = decodeStoredData(raw, secure);
-    return parse2(JSON.parse(decoded));
-  } catch {
+    return parse(JSON.parse(decoded));
+  } catch (err) {
+    logger$w.warn(`Failed to load ${filePath2}, using fallback:`, err);
     return fallback;
   }
 }
@@ -1261,8 +1342,8 @@ function createDebouncedJsonPersistence({
         typeof data === "string" ? { encoding: "utf-8", mode: 384 } : { mode: 384 }
       )
     ).then(() => fs.promises.chmod(filePath2, 384).catch((err) => {
-      logger$v.warn(`Failed to chmod ${logLabel}:`, err);
-    })).catch((err) => logger$v.error(`Failed to save ${logLabel}:`, err));
+      logger$w.warn(`Failed to chmod ${logLabel}:`, err);
+    })).catch((err) => logger$w.error(`Failed to save ${logLabel}:`, err));
   };
   const schedule = () => {
     saveDirty2 = true;
@@ -1284,50 +1365,109 @@ function createDebouncedJsonPersistence({
     flush: flush2
   };
 }
-let state$5 = null;
-const listeners$2 = /* @__PURE__ */ new Set();
-const SAVE_DEBOUNCE_MS$5 = 250;
-function getHighlightsPath() {
-  return path.join(electron.app.getPath("userData"), "vessel-highlights.json");
-}
-function createPersistence$1() {
-  return createDebouncedJsonPersistence({
-    debounceMs: SAVE_DEBOUNCE_MS$5,
-    filePath: getHighlightsPath(),
-    getValue: () => state$5,
-    logLabel: "highlights",
-    resetOnSchedule: true
-  });
-}
-let persistence$7 = null;
-function getPersistence$1() {
-  persistence$7 ??= createPersistence$1();
-  return persistence$7;
-}
-function load$4() {
-  if (state$5) return state$5;
-  state$5 = loadJsonFile({
-    filePath: getHighlightsPath(),
-    fallback: { highlights: [] },
-    parse: (raw) => {
-      const parsed = raw;
-      return {
-        highlights: Array.isArray(parsed.highlights) ? parsed.highlights : []
-      };
+class PersistentState {
+  state = null;
+  listeners = /* @__PURE__ */ new Set();
+  persistence = null;
+  config;
+  constructor(config) {
+    this.config = {
+      debounceMs: 250,
+      resetOnSchedule: false,
+      secure: false,
+      snapshot: (s) => s,
+      ...config
+    };
+  }
+  // --- State access ---
+  /** Get the current state, loading from disk if needed. */
+  getState() {
+    if (this.state) return this.state;
+    this.state = loadJsonFile({
+      filePath: this.getFilePath(),
+      fallback: this.config.fallback,
+      parse: this.config.parse,
+      secure: this.config.secure
+    });
+    return this.state;
+  }
+  /**
+   * Update state via a mutator function.
+   * The mutator receives the current state and should mutate it in place.
+   * Does NOT automatically save or emit — call save() and emit() as needed.
+   */
+  update(mutator) {
+    const s = this.getState();
+    mutator(s);
+  }
+  /**
+   * Mutate state and apply persistence/notification as one operation.
+   * The mutator may return a value, such as the item it created or removed.
+   */
+  mutate(mutator, options = {}) {
+    const result = mutator(this.getState());
+    if (options.save ?? true) {
+      this.save();
     }
-  });
-  return state$5;
-}
-function save$3() {
-  getPersistence$1().schedule();
-}
-function emit$4() {
-  if (!state$5) return;
-  const snapshot2 = { highlights: [...state$5.highlights] };
-  for (const listener of listeners$2) {
-    listener(snapshot2);
+    if (options.emit ?? true) {
+      this.emit();
+    }
+    return result;
+  }
+  // --- Persistence ---
+  /** Get the file path for this state's JSON file. */
+  getFilePath() {
+    return path.join(electron.app.getPath("userData"), this.config.filename);
+  }
+  /** Schedule a debounced write to disk. */
+  save() {
+    this.getPersistence().schedule();
+  }
+  /** Flush any pending write to disk immediately. */
+  flushPersist() {
+    return this.getPersistence().flush();
+  }
+  // --- Change notification ---
+  /** Subscribe to state changes. Returns an unsubscribe function. */
+  subscribe(listener) {
+    this.listeners.add(listener);
+    return () => {
+      this.listeners.delete(listener);
+    };
+  }
+  /** Emit the current state to all subscribers. No-op if state hasn't been loaded. */
+  emit() {
+    if (!this.state) return;
+    const snapshot2 = this.config.snapshot(this.state);
+    for (const listener of this.listeners) {
+      listener(snapshot2);
+    }
+  }
+  // --- Private ---
+  getPersistence() {
+    if (!this.persistence) {
+      this.persistence = createDebouncedJsonPersistence({
+        debounceMs: this.config.debounceMs,
+        filePath: this.getFilePath(),
+        getValue: () => this.state,
+        logLabel: this.config.logLabel,
+        resetOnSchedule: this.config.resetOnSchedule,
+        secure: this.config.secure
+      });
+    }
+    return this.persistence;
   }
 }
+const HIGHLIGHTS_FALLBACK = { highlights: [] };
+const store$2 = new PersistentState({
+  filename: "vessel-highlights.json",
+  fallback: HIGHLIGHTS_FALLBACK,
+  parse: (raw) => parseArrayStateWithFallback(StoredHighlightSchema, raw, "highlights", HIGHLIGHTS_FALLBACK, "highlights"),
+  logLabel: "highlights",
+  debounceMs: 250,
+  resetOnSchedule: true,
+  snapshot: (s) => ({ highlights: [...s.highlights] })
+});
 function normalizeUrl$1(rawUrl) {
   try {
     const parsed = new URL(rawUrl);
@@ -1338,16 +1478,14 @@ function normalizeUrl$1(rawUrl) {
   }
 }
 function getState$2() {
-  load$4();
-  return { highlights: [...state$5.highlights] };
+  const s = store$2.getState();
+  return { highlights: [...s.highlights] };
 }
 function getHighlightsForUrl(url) {
-  load$4();
   const normalized = normalizeUrl$1(url);
-  return state$5.highlights.filter((h) => h.url === normalized);
+  return store$2.getState().highlights.filter((h) => h.url === normalized);
 }
 function addHighlight(url, selector, text, label, color, source) {
-  load$4();
   const highlight = {
     id: crypto$1.randomUUID(),
     url: normalizeUrl$1(url),
@@ -1358,50 +1496,66 @@ function addHighlight(url, selector, text, label, color, source) {
     source: source || void 0,
     createdAt: (/* @__PURE__ */ new Date()).toISOString()
   };
-  state$5.highlights.push(highlight);
-  save$3();
-  emit$4();
+  store$2.mutate((s) => {
+    s.highlights.push(highlight);
+  });
   return highlight;
 }
 function removeHighlight(id) {
-  load$4();
-  const index = state$5.highlights.findIndex((h) => h.id === id);
-  if (index === -1) return null;
-  const [removed] = state$5.highlights.splice(index, 1);
-  save$3();
-  emit$4();
+  const removed = store$2.mutate((s) => {
+    const index = s.highlights.findIndex((h) => h.id === id);
+    if (index === -1) return null;
+    const [removed2] = s.highlights.splice(index, 1);
+    return removed2;
+  }, {
+    save: false,
+    emit: false
+  });
+  if (removed) {
+    store$2.save();
+    store$2.emit();
+  }
   return removed;
 }
 function findHighlightByText(url, text) {
-  load$4();
   const normalized = normalizeUrl$1(url);
-  return state$5.highlights.find(
+  return store$2.getState().highlights.find(
     (h) => h.url === normalized && h.text && h.text === text
   ) ?? null;
 }
 function updateHighlightColor(id, color) {
-  load$4();
-  const highlight = state$5.highlights.find((h) => h.id === id);
-  if (!highlight) return null;
-  highlight.color = color;
-  save$3();
-  emit$4();
+  const highlight = store$2.mutate((s) => {
+    const item = s.highlights.find((h) => h.id === id) ?? null;
+    if (item) item.color = color;
+    return item;
+  }, {
+    save: false,
+    emit: false
+  });
+  if (highlight) {
+    store$2.save();
+    store$2.emit();
+  }
   return highlight;
 }
 function clearHighlightsForUrl(url) {
-  load$4();
   const normalized = normalizeUrl$1(url);
-  const before = state$5.highlights.length;
-  state$5.highlights = state$5.highlights.filter((h) => h.url !== normalized);
-  const removed = before - state$5.highlights.length;
+  const removed = store$2.mutate((s) => {
+    const before = s.highlights.length;
+    s.highlights = s.highlights.filter((h) => h.url !== normalized);
+    return before - s.highlights.length;
+  }, {
+    save: false,
+    emit: false
+  });
   if (removed > 0) {
-    save$3();
-    emit$4();
+    store$2.save();
+    store$2.emit();
   }
   return removed;
 }
 function flushPersist$4() {
-  return getPersistence$1().flush();
+  return store$2.flushPersist();
 }
 const SKIP_TAGS_JS = "var SKIP_TAGS = {SCRIPT:1,STYLE:1,NOSCRIPT:1,TEMPLATE:1,IFRAME:1,SVG:1};";
 const CONTENT_ROOTS_JS = `
@@ -2025,114 +2179,94 @@ function persistHighlight(url, text) {
   return { success: true, text: capped, id: highlight.id };
 }
 const MAX_HISTORY_ENTRIES = 5e3;
-const SAVE_DEBOUNCE_MS$4 = 250;
-let state$4 = null;
-const listeners$1 = /* @__PURE__ */ new Set();
-function getHistoryPath() {
-  return path.join(electron.app.getPath("userData"), "vessel-history.json");
-}
-function load$3() {
-  if (state$4) return state$4;
-  state$4 = loadJsonFile({
-    filePath: getHistoryPath(),
-    fallback: { entries: [] },
-    parse: (raw) => {
-      const parsed = raw;
-      return {
-        entries: Array.isArray(parsed.entries) ? parsed.entries : []
-      };
-    }
-  });
-  return state$4;
-}
-const persistence$6 = createDebouncedJsonPersistence({
-  debounceMs: SAVE_DEBOUNCE_MS$4,
-  filePath: getHistoryPath(),
-  getValue: () => state$4,
-  logLabel: "history"
-});
-function save$2() {
-  persistence$6.schedule();
-}
-function emit$3() {
-  if (!state$4) return;
-  const snapshot2 = listEntries$2();
-  for (const listener of listeners$1) {
-    listener(snapshot2);
+const HISTORY_FALLBACK = { entries: [] };
+const store$1 = new PersistentState({
+  filename: "vessel-history.json",
+  fallback: HISTORY_FALLBACK,
+  parse: (raw) => parseArrayStateWithFallback(HistoryEntrySchema, raw, "entries", HISTORY_FALLBACK, "history"),
+  logLabel: "history",
+  debounceMs: 250,
+  snapshot: (s) => {
+    const entries = s.entries.slice(0, 200);
+    return {
+      entries,
+      offset: 0,
+      limit: entries.length,
+      total: s.entries.length
+    };
   }
-}
-function getState$1() {
-  load$3();
-  return { entries: [...state$4.entries] };
-}
+});
 function listEntries$2(offset = 0, limit = 200) {
-  load$3();
+  const s = store$1.getState();
   const safeOffset = Math.max(0, Math.floor(offset));
   const safeLimit = Math.max(1, Math.min(500, Math.floor(limit)));
   return {
-    entries: state$4.entries.slice(safeOffset, safeOffset + safeLimit),
+    entries: s.entries.slice(safeOffset, safeOffset + safeLimit),
     offset: safeOffset,
     limit: safeLimit,
-    total: state$4.entries.length
+    total: s.entries.length
   };
 }
+function getState$1() {
+  const s = store$1.getState();
+  return { entries: [...s.entries] };
+}
 function subscribe$1(listener) {
-  listeners$1.add(listener);
-  return () => {
-    listeners$1.delete(listener);
-  };
+  return store$1.subscribe(listener);
 }
 function addEntry$1(url, title) {
   if (!url || url === "about:blank") return;
-  load$3();
-  const last = state$4.entries[0];
-  if (last && last.url === url) {
-    if (title && title !== last.title) {
-      last.title = title;
-      save$2();
-      emit$3();
+  const changed = store$1.mutate((s) => {
+    const last = s.entries[0];
+    if (last && last.url === url) {
+      if (title && title !== last.title) {
+        last.title = title;
+        return true;
+      }
+      return false;
     }
-    return;
-  }
-  const entry = {
-    url,
-    title: title || url,
-    visitedAt: (/* @__PURE__ */ new Date()).toISOString()
-  };
-  state$4.entries.unshift(entry);
-  if (state$4.entries.length > MAX_HISTORY_ENTRIES) {
-    state$4.entries = state$4.entries.slice(0, MAX_HISTORY_ENTRIES);
+    const entry = {
+      url,
+      title: title || url,
+      visitedAt: (/* @__PURE__ */ new Date()).toISOString()
+    };
+    s.entries.unshift(entry);
+    if (s.entries.length > MAX_HISTORY_ENTRIES) {
+      s.entries = s.entries.slice(0, MAX_HISTORY_ENTRIES);
+    }
+    return true;
+  }, { save: false, emit: false });
+  if (changed) {
+    store$1.save();
+    store$1.emit();
   }
-  save$2();
-  emit$3();
 }
 function search(query, limit = 50) {
-  load$3();
-  if (!query.trim()) return state$4.entries.slice(0, limit);
+  const s = store$1.getState();
+  if (!query.trim()) return s.entries.slice(0, limit);
   const normalized = query.toLowerCase();
-  return state$4.entries.filter(
+  return s.entries.filter(
     (e) => e.url.toLowerCase().includes(normalized) || e.title.toLowerCase().includes(normalized)
   ).slice(0, limit);
 }
 function clearAll$1() {
-  state$4 = { entries: [] };
-  save$2();
-  emit$3();
+  store$1.mutate((s) => {
+    s.entries = [];
+  });
 }
 function clearByTimeRange(timeRange) {
-  load$3();
   if (timeRange === "all") {
     clearAll$1();
     return;
   }
   const now = Date.now();
   const cutoff = new Date(now - timeRangeToMs(timeRange));
-  state$4.entries = state$4.entries.filter((entry) => {
-    const visitedAt = new Date(entry.visitedAt).getTime();
-    return Number.isNaN(visitedAt) || visitedAt < cutoff.getTime();
+  store$1.mutate((s) => {
+    s.entries = s.entries.filter((entry) => {
+      const visitedAt = new Date(entry.visitedAt).getTime();
+      return Number.isNaN(visitedAt) || visitedAt < cutoff.getTime();
+    });
   });
-  save$2();
-  emit$3();
 }
 function timeRangeToMs(range) {
   switch (range) {
@@ -2183,12 +2317,13 @@ function importHistoryFromJson(content) {
   let skipped = 0;
   let errors = 0;
   try {
-    const parsed = JSON.parse(content);
-    const entries = Array.isArray(parsed?.entries) ? parsed.entries : [];
-    load$3();
-    const existingUrls = new Set(state$4.entries.map((e) => e.url));
+    const parsed = HistoryImportStateSchema.safeParse(JSON.parse(content));
+    const entries = parsed.success ? parsed.data.entries : [];
+    if (!parsed.success) errors++;
+    const s = store$1.getState();
+    const existingUrls = new Set(s.entries.map((e) => e.url));
     for (const entry of entries) {
-      if (!entry?.url || typeof entry.url !== "string") {
+      if (!entry.url) {
         errors++;
         continue;
       }
@@ -2196,22 +2331,29 @@ function importHistoryFromJson(content) {
         skipped++;
         continue;
       }
-      state$4.entries.push({
-        url: entry.url,
-        title: typeof entry.title === "string" ? entry.title : entry.url,
-        visitedAt: typeof entry.visitedAt === "string" ? entry.visitedAt : (/* @__PURE__ */ new Date()).toISOString()
-      });
       existingUrls.add(entry.url);
       imported++;
     }
-    state$4.entries.sort(
-      (a, b) => new Date(b.visitedAt).getTime() - new Date(a.visitedAt).getTime()
-    );
-    if (state$4.entries.length > MAX_HISTORY_ENTRIES) {
-      state$4.entries = state$4.entries.slice(0, MAX_HISTORY_ENTRIES);
+    if (imported > 0) {
+      store$1.mutate((state2) => {
+        const urlSet = new Set(state2.entries.map((e) => e.url));
+        for (const entry of entries) {
+          if (!entry.url || urlSet.has(entry.url)) continue;
+          state2.entries.push({
+            url: entry.url,
+            title: entry.title || entry.url,
+            visitedAt: entry.visitedAt || (/* @__PURE__ */ new Date()).toISOString()
+          });
+          urlSet.add(entry.url);
+        }
+        state2.entries.sort(
+          (a, b) => new Date(b.visitedAt).getTime() - new Date(a.visitedAt).getTime()
+        );
+        if (state2.entries.length > MAX_HISTORY_ENTRIES) {
+          state2.entries = state2.entries.slice(0, MAX_HISTORY_ENTRIES);
+        }
+      });
     }
-    save$2();
-    emit$3();
   } catch {
     errors++;
   }
@@ -2221,9 +2363,10 @@ function importHistoryFromHtml(content) {
   let imported = 0;
   let skipped = 0;
   let errors = 0;
-  load$3();
-  const existingUrls = new Set(state$4.entries.map((e) => e.url));
+  const s = store$1.getState();
+  const existingUrls = new Set(s.entries.map((e) => e.url));
   const hrefRegex = /<A\s+[^>]*HREF="([^"]+)"[^>]*>([^<]*)<\/A>/gi;
+  const newEntries = [];
   let match;
   while ((match = hrefRegex.exec(content)) !== null) {
     const url = match[1];
@@ -2233,26 +2376,25 @@ function importHistoryFromHtml(content) {
       else errors++;
       continue;
     }
-    state$4.entries.push({
-      url,
-      title,
-      visitedAt: (/* @__PURE__ */ new Date()).toISOString()
-    });
+    newEntries.push({ url, title, visitedAt: (/* @__PURE__ */ new Date()).toISOString() });
     existingUrls.add(url);
     imported++;
   }
-  state$4.entries.sort(
-    (a, b) => new Date(b.visitedAt).getTime() - new Date(a.visitedAt).getTime()
-  );
-  if (state$4.entries.length > MAX_HISTORY_ENTRIES) {
-    state$4.entries = state$4.entries.slice(0, MAX_HISTORY_ENTRIES);
+  if (newEntries.length > 0) {
+    store$1.mutate((state2) => {
+      state2.entries.push(...newEntries);
+      state2.entries.sort(
+        (a, b) => new Date(b.visitedAt).getTime() - new Date(a.visitedAt).getTime()
+      );
+      if (state2.entries.length > MAX_HISTORY_ENTRIES) {
+        state2.entries = state2.entries.slice(0, MAX_HISTORY_ENTRIES);
+      }
+    });
   }
-  save$2();
-  emit$3();
   return { imported, skipped, errors };
 }
 function flushPersist$3() {
-  return persistence$6.flush();
+  return store$1.flushPersist();
 }
 const MAX_CONSOLE_ENTRIES = 500;
 const MAX_NETWORK_ENTRIES = 200;
@@ -2954,7 +3096,7 @@ function destroySession(tabId) {
     sessions.delete(tabId);
   }
 }
-const logger$u = createLogger("TabManager");
+const logger$v = createLogger("TabManager");
 function sanitizeFilename(title, ext) {
   const clean = title.replace(/[<>:"/\\|?*\x00-\x1f]/g, " ").replace(/\s+/g, " ").trim();
   const escapedExt = ext.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
@@ -3373,7 +3515,7 @@ class TabManager {
     }));
     if (entries.length > 0) {
       void highlightBatchOnPage(wc, entries).catch(
-        (err) => logger$u.warn("Failed to batch highlight:", err)
+        (err) => logger$v.warn("Failed to batch highlight:", err)
       );
     }
   }
@@ -3395,12 +3537,12 @@ class TabManager {
         const result = await captureSelectionHighlight(wc);
         if (result.success && result.text) {
           await highlightOnPage(wc, null, result.text, void 0, void 0, "yellow").catch(
-            (err) => logger$u.warn("Failed to capture highlight:", err)
+            (err) => logger$v.warn("Failed to capture highlight:", err)
           );
         }
         this.highlightCaptureCallback?.(result);
       } catch (err) {
-        logger$u.warn("Failed to capture highlight from page:", err);
+        logger$v.warn("Failed to capture highlight from page:", err);
         this.highlightCaptureCallback?.({
           success: false,
           message: "Could not capture selection"
@@ -3425,7 +3567,7 @@ class TabManager {
           void this.removeHighlightMarksForText(wc, text);
         }
       } catch (err) {
-        logger$u.warn("Failed to remove highlight from matching tab:", err);
+        logger$v.warn("Failed to remove highlight from matching tab:", err);
       }
     }
     this.highlightCaptureCallback?.({
@@ -3456,12 +3598,12 @@ class TabManager {
               void 0,
               color
             ).catch(
-              (err) => logger$u.warn("Failed to update highlight color:", err)
+              (err) => logger$v.warn("Failed to update highlight color:", err)
             );
           });
         }
       } catch (err) {
-        logger$u.warn("Failed to iterate highlights for color change:", err);
+        logger$v.warn("Failed to iterate highlights for color change:", err);
       }
     }
     this.highlightCaptureCallback?.({
@@ -3516,7 +3658,7 @@ class TabManager {
         });
       })()`
     ).catch(
-      (err) => logger$u.warn("Failed to remove highlight marks:", err)
+      (err) => logger$v.warn("Failed to remove highlight marks:", err)
     );
   }
   broadcastState(meta = { persistSession: false }) {
@@ -4155,7 +4297,7 @@ function load$2() {
   });
   return snapshots;
 }
-const persistence$5 = createDebouncedJsonPersistence({
+const persistence$4 = createDebouncedJsonPersistence({
   debounceMs: SAVE_DEBOUNCE_MS$3,
   filePath: getFilePath$1(),
   getValue: () => snapshots,
@@ -4184,11 +4326,11 @@ function saveSnapshot(rawUrl, title, textContent, headings) {
   };
   s.delete(key2);
   s.set(key2, snapshot2);
-  persistence$5.schedule();
+  persistence$4.schedule();
   return snapshot2;
 }
 function flushPersist$2() {
-  return persistence$5.flush();
+  return persistence$4.flush();
 }
 const SEARCH_ENGINE_HOSTS = [
   "google.",
@@ -4768,7 +4910,7 @@ async function readJsonResponse(response, fallback, onError) {
     return fallback;
   }
 }
-const logger$t = createLogger("Premium");
+const logger$u = createLogger("Premium");
 const VERIFICATION_API = process.env.VESSEL_PREMIUM_API || "https://vesselpremium.quantaintellect.com";
 const FREE_TOOL_ITERATION_LIMIT = 50;
 const REVALIDATION_INTERVAL_MS = 24 * 60 * 60 * 1e3;
@@ -4944,7 +5086,7 @@ async function verifySubscription$1(identifier) {
     });
     if (!res.ok) {
       const detail = await readApiErrorDetail(res);
-      logger$t.warn(
+      logger$u.warn(
         "Verification API returned a non-OK status:",
         res.status,
         detail
@@ -4963,7 +5105,7 @@ async function verifySubscription$1(identifier) {
     setSetting("premium", updated);
     return updated;
   } catch (err) {
-    logger$t.warn("Verification failed:", err);
+    logger$u.warn("Verification failed:", err);
     return current;
   }
 }
@@ -4984,7 +5126,7 @@ async function requestActivationCode(email) {
     const data = await readJsonResponse(
       res,
       {},
-      (msg) => logger$t.warn("Failed to parse premium activation response:", msg)
+      (msg) => logger$u.warn("Failed to parse premium activation response:", msg)
     );
     if (!res.ok || !data.challengeToken) {
       return errorResult(data.error || `HTTP ${res.status}`);
@@ -5029,7 +5171,7 @@ async function verifyActivationCode(email, code, challengeToken) {
     const data = await readJsonResponse(
       res,
       {},
-      (msg) => logger$t.warn("Failed to parse premium verification response:", msg)
+      (msg) => logger$u.warn("Failed to parse premium verification response:", msg)
     );
     if (!res.ok) {
       return errorResult(data.error || `HTTP ${res.status}`, {
@@ -5626,7 +5768,7 @@ const EXTRACT_TIMEOUT_MAX_MS = 2e4;
 const MUTATION_CAPTURE_INTERVAL_MS = 5e3;
 const MUTATION_SETTLE_AFTER_MS = 1500;
 const AGENT_STREAM_IDLE_TIMEOUT_MS = 3e4;
-const logger$s = createLogger("Extractor");
+const logger$t = createLogger("Extractor");
 const EXTRACTION_CACHE_TTL_MS = 1500;
 const MAX_EXTRACTION_CACHE_ENTRIES = 50;
 const extractionCache = new BoundedCache(
@@ -6391,9 +6533,9 @@ async function executeScript(webContents, script, options = {}) {
     const message = err instanceof Error ? err.message : String(err);
     const detail = `Failed to execute page script${label} on ${url}: ${message}`;
     if (options.warnOnFailure) {
-      logger$s.warn(detail);
+      logger$t.warn(detail);
     } else {
-      logger$s.debug(detail);
+      logger$t.debug(detail);
     }
     return null;
   } finally {
@@ -6502,7 +6644,7 @@ async function estimateExtractionTimeout(webContents) {
       return EXTRACT_TIMEOUT_BASE_MS + extra;
     }
   } catch (err) {
-    logger$s.warn("Failed to estimate extraction timeout, using base timeout:", err);
+    logger$t.warn("Failed to estimate extraction timeout, using base timeout:", err);
   }
   return EXTRACT_TIMEOUT_BASE_MS;
 }
@@ -6673,7 +6815,7 @@ function loadHistory() {
   }
   return recentPageDiffBursts;
 }
-const persistence$4 = createDebouncedJsonPersistence({
+const persistence$3 = createDebouncedJsonPersistence({
   debounceMs: SAVE_DEBOUNCE_MS$2,
   filePath: getHistoryFilePath(),
   getValue: () => recentPageDiffBursts,
@@ -6703,7 +6845,7 @@ function getPageDiffBursts(rawUrl) {
     } else {
       history.delete(key2);
     }
-    persistence$4.schedule();
+    persistence$3.schedule();
   }
   return bursts.slice().reverse();
 }
@@ -6724,7 +6866,7 @@ function enrichWithBurstHistory(key2, diff) {
     now: Date.parse(detectedAt)
   });
   history.set(key2, bursts);
-  persistence$4.schedule();
+  persistence$3.schedule();
   const recentBursts = bursts.slice(-5);
   return {
     ...diff,
@@ -7470,7 +7612,7 @@ function isClickReadLoop(names) {
   return clickReadPairs >= 2;
 }
 const TERMINAL_TOOL_RESULT = "__VESSEL_TERMINAL_TOOL_RESULT__";
-const logger$r = createLogger("PromptCache");
+const logger$s = createLogger("PromptCache");
 function shortHash(value) {
   return crypto$2.createHash("sha256").update(value).digest("hex").slice(0, 12);
 }
@@ -7522,7 +7664,7 @@ function logOpenAIPromptCacheUsage(usage, context) {
   const details = record.prompt_tokens_details;
   const cachedTokens = details && typeof details === "object" ? numericField(details, "cached_tokens") : null;
   if (promptTokens === null && cachedTokens === null) return;
-  logger$r.debug("OpenAI prompt cache usage", {
+  logger$s.debug("OpenAI prompt cache usage", {
     model: context.model,
     mode: context.mode,
     promptTokens,
@@ -7538,7 +7680,7 @@ function logAnthropicPromptCacheUsage(usage, context) {
   if (inputTokens === null && cacheCreationTokens === null && cacheReadTokens === null) {
     return;
   }
-  logger$r.debug("Anthropic prompt cache usage", {
+  logger$s.debug("Anthropic prompt cache usage", {
     model: context.model,
     mode: context.mode,
     inputTokens,
@@ -8431,7 +8573,7 @@ function recoverNarratedActionToolCalls(text, availableToolNames) {
   }
   return recovered;
 }
-const logger$q = createLogger("OpenAIProvider");
+const logger$r = createLogger("OpenAIProvider");
 function shouldDebugAgentLoop() {
   const value = process.env.VESSEL_DEBUG_AGENT_LOOP;
   return value === "1" || value === "true";
@@ -8699,9 +8841,9 @@ function shouldRetryCompactToolLoop(profile, text, hasToolHistory, userMessage)
 function logAgentLoopDebug(payload) {
   if (!shouldDebugAgentLoop()) return;
   try {
-    logger$q.info(`[agent-debug] ${JSON.stringify(payload)}`);
+    logger$r.info(`[agent-debug] ${JSON.stringify(payload)}`);
   } catch (err) {
-    logger$q.warn("Failed to serialize debug payload:", err);
+    logger$r.warn("Failed to serialize debug payload:", err);
   }
 }
 function formatOpenAICompatErrorMessage(providerId, message) {
@@ -9328,7 +9470,7 @@ function createLocalPkceOAuthFlow(config) {
     isInProgress: () => activeFlow !== null
   };
 }
-const logger$p = createLogger("CodexOAuth");
+const logger$q = createLogger("CodexOAuth");
 const ISSUER = "https://auth.openai.com";
 const CLIENT_ID = "app_EMoamEEZ73f0CkXaXp7hrann";
 const SCOPE = "openid profile email offline_access api.connectors.read api.connectors.invoke";
@@ -9456,7 +9598,7 @@ async function refreshAccessToken(tokens) {
 }
 const codexOAuth = createLocalPkceOAuthFlow({
   name: "Codex",
-  logger: logger$p,
+  logger: logger$q,
   preferredPorts: [PREFERRED_PORT$1, FALLBACK_PORT$1],
   timeoutMs: AUTH_TIMEOUT_MS$1,
   callbackPath: () => "/auth/callback",
@@ -9480,7 +9622,7 @@ async function startCodexOAuth(onStatus) {
 function cancelCodexOAuth() {
   codexOAuth.cancel();
 }
-const logger$o = createLogger("CodexProvider");
+const logger$p = createLogger("CodexProvider");
 const REFRESH_WINDOW_MS = 5 * 60 * 1e3;
 const CODEX_BACKEND_BASE_URL = "https://chatgpt.com/backend-api/codex";
 const CODEX_CLIENT_VERSION = "0.129.0";
@@ -9545,7 +9687,7 @@ class CodexProvider {
   async ensureFreshTokens() {
     if (Date.now() < this.tokens.expiresAt - REFRESH_WINDOW_MS) return;
     try {
-      logger$o.info("Refreshing Codex access token");
+      logger$p.info("Refreshing Codex access token");
       const fresh = await refreshAccessToken(this.tokens);
       this.tokens = fresh;
       writeStoredCodexTokens(fresh);
@@ -9693,7 +9835,7 @@ class CodexProvider {
     } catch (err) {
       if (err.name !== "AbortError") {
         const msg = err instanceof Error ? err.message : String(err);
-        logger$o.error("Codex streamQuery error:", err);
+        logger$p.error("Codex streamQuery error:", err);
         onChunk(`
 
 [Error: ${msg}]`);
@@ -9761,7 +9903,7 @@ class CodexProvider {
     } catch (err) {
       if (err.name !== "AbortError") {
         const msg = err instanceof Error ? err.message : String(err);
-        logger$o.error("Codex streamAgentQuery error:", err);
+        logger$p.error("Codex streamAgentQuery error:", err);
         onChunk(`
 
 [Error: ${msg}]`);
@@ -10995,14 +11137,17 @@ function normalizeBookmarkMetadataUpdate(input) {
   }
   return normalized;
 }
-const logger$n = createLogger("BookmarkManager");
+function unixNow() {
+  return Math.floor(Date.now() / 1e3);
+}
+const logger$o = createLogger("BookmarkManager");
 const UNSORTED_ID = "unsorted";
 const ARCHIVE_FOLDER_NAME = "Archive";
 const NETSCAPE_BOOKMARKS_DOCTYPE = "<!DOCTYPE NETSCAPE-Bookmark-file-1>";
 const SAVE_DEBOUNCE_MS$1 = 250;
 const DEFAULT_BOOKMARK_SEARCH_LIMIT = 50;
 const MAX_BOOKMARK_SEARCH_LIMIT = 200;
-let state$3 = null;
+let state$2 = null;
 const listeners = /* @__PURE__ */ new Set();
 function cloneState(current) {
   return {
@@ -11012,7 +11157,7 @@ function cloneState(current) {
 }
 function getFolderMap() {
   load$1();
-  return new Map(state$3.folders.map((folder) => [folder.id, folder]));
+  return new Map(state$2.folders.map((folder) => [folder.id, folder]));
 }
 function getBookmarksPath() {
   return path.join(electron.app.getPath("userData"), "vessel-bookmarks.json");
@@ -11021,18 +11166,18 @@ function createPersistence() {
   return createDebouncedJsonPersistence({
     debounceMs: SAVE_DEBOUNCE_MS$1,
     filePath: getBookmarksPath(),
-    getValue: () => state$3,
+    getValue: () => state$2,
     logLabel: "bookmarks"
   });
 }
-let persistence$3 = null;
+let persistence$2 = null;
 function getPersistence() {
-  persistence$3 ??= createPersistence();
-  return persistence$3;
+  persistence$2 ??= createPersistence();
+  return persistence$2;
 }
 function load$1() {
-  if (state$3) return state$3;
-  state$3 = loadJsonFile({
+  if (state$2) return state$2;
+  state$2 = loadJsonFile({
     filePath: getBookmarksPath(),
     fallback: { folders: [], bookmarks: [] },
     parse: (raw) => {
@@ -11043,7 +11188,7 @@ function load$1() {
       };
     }
   });
-  return state$3;
+  return state$2;
 }
 function save$1() {
   getPersistence().schedule();
@@ -11056,8 +11201,8 @@ function assignDefinedBookmarkFields(bookmark, fields) {
   }
 }
 function emit$2() {
-  if (!state$3) return;
-  const snapshot2 = cloneState(state$3);
+  if (!state$2) return;
+  const snapshot2 = cloneState(state$2);
   for (const listener of listeners) {
     listener(snapshot2);
   }
@@ -11066,9 +11211,9 @@ function escapeBookmarkHtml(value) {
   return value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
 }
 function toNetscapeTimestamp(value) {
-  if (!value) return Math.floor(Date.now() / 1e3);
+  if (!value) return unixNow();
   const time = Date.parse(value);
-  return Number.isNaN(time) ? Math.floor(Date.now() / 1e3) : Math.floor(time / 1e3);
+  return Number.isNaN(time) ? unixNow() : Math.floor(time / 1e3);
 }
 function getBookmarkDescription(bookmark) {
   const lines = [
@@ -11099,7 +11244,7 @@ function exportBookmarksHtml(options = {}) {
   const resolvedOptions = {
     includeNotes: options.includeNotes ?? false
   };
-  const now = Math.floor(Date.now() / 1e3);
+  const now = unixNow();
   const folders = [
     { id: UNSORTED_ID, name: "Vessel Bookmarks", createdAt: "", summary: "" },
     ...current.folders
@@ -11140,7 +11285,7 @@ function exportBookmarkFolderHtml(folderId, options = {}) {
   const resolvedOptions = {
     includeNotes: options.includeNotes ?? false
   };
-  const now = Math.floor(Date.now() / 1e3);
+  const now = unixNow();
   const items = current.bookmarks.filter(
     (bookmark) => bookmark.folderId === folder.id
   );
@@ -11179,28 +11324,28 @@ function subscribe(listener) {
   };
 }
 function clearAll() {
-  state$3 = { folders: [], bookmarks: [] };
+  state$2 = { folders: [], bookmarks: [] };
   save$1();
   emit$2();
 }
 function getBookmark(id) {
   load$1();
-  const bookmark = state$3.bookmarks.find((item) => item.id === id);
+  const bookmark = state$2.bookmarks.find((item) => item.id === id);
   return bookmark ? { ...bookmark } : null;
 }
 function getBookmarkByUrl(url) {
   load$1();
   const normalized = url.trim();
   if (!normalized) return null;
-  const bookmark = [...state$3.bookmarks].reverse().find((item) => item.url === normalized);
+  const bookmark = [...state$2.bookmarks].reverse().find((item) => item.url === normalized);
   return bookmark ? { ...bookmark } : null;
 }
 function getBookmarkByUrlInFolder(url, folderId) {
   load$1();
   const normalizedUrl = url.trim();
   if (!normalizedUrl) return null;
-  const targetFolderId = folderId && folderId !== UNSORTED_ID ? state$3.folders.find((f) => f.id === folderId)?.id ?? UNSORTED_ID : UNSORTED_ID;
-  const bookmark = [...state$3.bookmarks].reverse().find(
+  const targetFolderId = folderId && folderId !== UNSORTED_ID ? state$2.folders.find((f) => f.id === folderId)?.id ?? UNSORTED_ID : UNSORTED_ID;
+  const bookmark = [...state$2.bookmarks].reverse().find(
     (item) => item.url === normalizedUrl && item.folderId === targetFolderId
   );
   return bookmark ? { ...bookmark } : null;
@@ -11208,14 +11353,14 @@ function getBookmarkByUrlInFolder(url, folderId) {
 function getFolder(id) {
   load$1();
   if (!id || id === UNSORTED_ID) return null;
-  const folder = state$3.folders.find((item) => item.id === id);
+  const folder = state$2.folders.find((item) => item.id === id);
   return folder ? { ...folder } : null;
 }
 function findFolderByName(name) {
   load$1();
   const normalized = name.trim().toLowerCase();
   if (!normalized || normalized === "unsorted") return null;
-  const folder = state$3.folders.find(
+  const folder = state$2.folders.find(
     (item) => item.name.trim().toLowerCase() === normalized
   );
   return folder ? { ...folder } : null;
@@ -11223,7 +11368,7 @@ function findFolderByName(name) {
 function listFolderOverviews() {
   load$1();
   const counts = /* @__PURE__ */ new Map();
-  for (const bookmark of state$3.bookmarks) {
+  for (const bookmark of state$2.bookmarks) {
     counts.set(bookmark.folderId, (counts.get(bookmark.folderId) ?? 0) + 1);
   }
   return [
@@ -11232,7 +11377,7 @@ function listFolderOverviews() {
       name: "Unsorted",
       count: counts.get(UNSORTED_ID) ?? 0
     },
-    ...state$3.folders.map((folder) => ({
+    ...state$2.folders.map((folder) => ({
       id: folder.id,
       name: folder.name,
       summary: folder.summary,
@@ -11248,7 +11393,7 @@ function searchBookmarks(query, limit = DEFAULT_BOOKMARK_SEARCH_LIMIT) {
     1,
     Math.min(MAX_BOOKMARK_SEARCH_LIMIT, Math.floor(limit))
   );
-  return state$3.bookmarks.map((bookmark) => {
+  return state$2.bookmarks.map((bookmark) => {
     const folder = foldersById.get(bookmark.folderId);
     const { matchedFields, score } = getBookmarkSearchMatch({
       query,
@@ -11285,7 +11430,7 @@ function createFolderWithSummary(name, summary) {
     summary: summary?.trim() || void 0,
     createdAt: (/* @__PURE__ */ new Date()).toISOString()
   };
-  state$3.folders.push(folder);
+  state$2.folders.push(folder);
   save$1();
   emit$2();
   return folder;
@@ -11316,7 +11461,7 @@ function saveBookmarkWithPolicy(url, title, folderId, note, options) {
     throw new Error("Bookmark URL cannot be empty");
   }
   const normalizedTitle = title.trim() || normalizedUrl;
-  const targetId = folderId && folderId !== UNSORTED_ID ? state$3.folders.find((f) => f.id === folderId)?.id ?? UNSORTED_ID : UNSORTED_ID;
+  const targetId = folderId && folderId !== UNSORTED_ID ? state$2.folders.find((f) => f.id === folderId)?.id ?? UNSORTED_ID : UNSORTED_ID;
   const duplicatePolicy = options?.onDuplicate ?? "ask";
   const existing = getBookmarkByUrlInFolder(normalizedUrl, targetId);
   if (existing) {
@@ -11327,7 +11472,7 @@ function saveBookmarkWithPolicy(url, title, folderId, note, options) {
       };
     }
     if (duplicatePolicy === "update") {
-      const bookmark2 = state$3.bookmarks.find((item) => item.id === existing.id);
+      const bookmark2 = state$2.bookmarks.find((item) => item.id === existing.id);
       if (!bookmark2) {
         return {
           status: "conflict",
@@ -11357,7 +11502,7 @@ function saveBookmarkWithPolicy(url, title, folderId, note, options) {
     savedAt: (/* @__PURE__ */ new Date()).toISOString(),
     ...options?.extra
   };
-  state$3.bookmarks.push(bookmark);
+  state$2.bookmarks.push(bookmark);
   save$1();
   emit$2();
   return {
@@ -11367,9 +11512,9 @@ function saveBookmarkWithPolicy(url, title, folderId, note, options) {
 }
 function removeBookmark(id) {
   load$1();
-  const before = state$3.bookmarks.length;
-  state$3.bookmarks = state$3.bookmarks.filter((b) => b.id !== id);
-  if (state$3.bookmarks.length !== before) {
+  const before = state$2.bookmarks.length;
+  state$2.bookmarks = state$2.bookmarks.filter((b) => b.id !== id);
+  if (state$2.bookmarks.length !== before) {
     save$1();
     emit$2();
     return true;
@@ -11378,7 +11523,7 @@ function removeBookmark(id) {
 }
 function updateBookmark(id, updates) {
   load$1();
-  const bookmark = state$3.bookmarks.find((item) => item.id === id);
+  const bookmark = state$2.bookmarks.find((item) => item.id === id);
   if (!bookmark) return null;
   const metadataUpdates = normalizeBookmarkMetadataUpdate({
     intent: updates.intent,
@@ -11395,7 +11540,7 @@ function updateBookmark(id, updates) {
     bookmark.note = trimmed || void 0;
   }
   if (typeof updates.folderId === "string") {
-    bookmark.folderId = updates.folderId && updates.folderId !== UNSORTED_ID ? state$3.folders.find((item) => item.id === updates.folderId)?.id ?? UNSORTED_ID : UNSORTED_ID;
+    bookmark.folderId = updates.folderId && updates.folderId !== UNSORTED_ID ? state$2.folders.find((item) => item.id === updates.folderId)?.id ?? UNSORTED_ID : UNSORTED_ID;
   }
   if ("intent" in metadataUpdates) {
     bookmark.intent = metadataUpdates.intent;
@@ -11418,23 +11563,23 @@ function updateBookmark(id, updates) {
 }
 function removeFolder(id, deleteContents = false) {
   load$1();
-  const exists = state$3.folders.some((f) => f.id === id);
+  const exists = state$2.folders.some((f) => f.id === id);
   if (!exists) return false;
   if (deleteContents) {
-    state$3.bookmarks = state$3.bookmarks.filter((b) => b.folderId !== id);
+    state$2.bookmarks = state$2.bookmarks.filter((b) => b.folderId !== id);
   } else {
-    state$3.bookmarks = state$3.bookmarks.map(
+    state$2.bookmarks = state$2.bookmarks.map(
       (b) => b.folderId === id ? { ...b, folderId: UNSORTED_ID } : b
     );
   }
-  state$3.folders = state$3.folders.filter((f) => f.id !== id);
+  state$2.folders = state$2.folders.filter((f) => f.id !== id);
   save$1();
   emit$2();
   return true;
 }
 function renameFolder(id, newName, summary) {
   load$1();
-  const folder = state$3.folders.find((f) => f.id === id);
+  const folder = state$2.folders.find((f) => f.id === id);
   if (!folder) return null;
   const trimmed = newName.trim();
   if (!trimmed) return null;
@@ -11452,7 +11597,7 @@ function importBookmarksFromHtml(content) {
   let skipped = 0;
   let errors = 0;
   load$1();
-  const existingUrls = new Set(state$3.bookmarks.map((b) => b.url));
+  const existingUrls = new Set(state$2.bookmarks.map((b) => b.url));
   let currentFolderId = UNSORTED_ID;
   let currentFolderName = "Imported";
   const lines = content.split("\n");
@@ -11461,7 +11606,7 @@ function importBookmarksFromHtml(content) {
     const folderMatch = line.match(/<DT><H3[^>]*>([^<]+)<\/H3>/i);
     if (folderMatch) {
       currentFolderName = folderMatch[1].trim();
-      const existing = state$3.folders.find(
+      const existing = state$2.folders.find(
         (f) => f.name.toLowerCase() === currentFolderName.toLowerCase()
       );
       if (existing) {
@@ -11472,7 +11617,7 @@ function importBookmarksFromHtml(content) {
           name: currentFolderName,
           createdAt: (/* @__PURE__ */ new Date()).toISOString()
         };
-        state$3.folders.push(folder);
+        state$2.folders.push(folder);
         currentFolderId = folder.id;
       }
       continue;
@@ -11493,7 +11638,7 @@ function importBookmarksFromHtml(content) {
         else errors++;
         continue;
       }
-      state$3.bookmarks.push({
+      state$2.bookmarks.push({
         id: crypto$1.randomUUID(),
         url,
         title,
@@ -11519,14 +11664,14 @@ function importBookmarksFromJson(content) {
     const incomingFolders = Array.isArray(parsed?.folders) ? parsed.folders : [];
     const incomingBookmarks = Array.isArray(parsed?.bookmarks) ? parsed.bookmarks : [];
     load$1();
-    const existingUrls = new Set(state$3.bookmarks.map((b) => b.url));
+    const existingUrls = new Set(state$2.bookmarks.map((b) => b.url));
     const folderIdMap = /* @__PURE__ */ new Map();
     for (const folder of incomingFolders) {
       if (!folder?.id || !folder?.name) {
         errors++;
         continue;
       }
-      const existing = state$3.folders.find(
+      const existing = state$2.folders.find(
         (f) => f.name.toLowerCase() === folder.name.toLowerCase()
       );
       if (existing) {
@@ -11538,7 +11683,7 @@ function importBookmarksFromJson(content) {
           summary: folder.summary?.trim() || void 0,
           createdAt: folder.createdAt || (/* @__PURE__ */ new Date()).toISOString()
         };
-        state$3.folders.push(newFolder);
+        state$2.folders.push(newFolder);
         folderIdMap.set(folder.id, newFolder.id);
       }
     }
@@ -11552,7 +11697,7 @@ function importBookmarksFromJson(content) {
         continue;
       }
       const mappedFolderId = bookmark.folderId ? folderIdMap.get(bookmark.folderId) ?? UNSORTED_ID : UNSORTED_ID;
-      state$3.bookmarks.push({
+      state$2.bookmarks.push({
         id: crypto$1.randomUUID(),
         url: bookmark.url.trim(),
         title: typeof bookmark.title === "string" ? bookmark.title.trim() : bookmark.url,
@@ -11568,7 +11713,7 @@ function importBookmarksFromJson(content) {
       emit$2();
     }
   } catch (err) {
-    logger$n.warn("Failed to import bookmarks from JSON:", err);
+    logger$o.warn("Failed to import bookmarks from JSON:", err);
     errors++;
   }
   return { imported, skipped, errors };
@@ -11973,7 +12118,7 @@ async function resolveSelector(wc, index, selector) {
   if (extractedSelector) return extractedSelector;
   return null;
 }
-const logger$m = createLogger("LinkValidation");
+const logger$n = createLogger("LinkValidation");
 const DEAD_STATUS_CODES = /* @__PURE__ */ new Set([404, 410, 451]);
 const HEAD_FALLBACK_STATUS_CODES = /* @__PURE__ */ new Set([400, 403, 404, 405, 406, 500, 501]);
 function isHttpUrl(value) {
@@ -11997,7 +12142,7 @@ async function requestUrl(url, method, timeoutMs) {
       }
     });
     await response.body?.cancel().catch((err) => {
-      logger$m.debug("Failed to cancel response body:", err);
+      logger$n.debug("Failed to cancel response body:", err);
     });
     return response;
   } finally {
@@ -12061,7 +12206,7 @@ function formatDeadLinkMessage(label, result) {
   const status = result.statusCode ? `HTTP ${result.statusCode}` : "dead link";
   return `Skipped stale link "${label}" because ${destination} returned ${status}. Try a different link or URL instead.`;
 }
-const logger$l = createLogger("Screenshot");
+const logger$m = createLogger("Screenshot");
 const SCREENSHOT_RETRY_COUNT = 3;
 const SCREENSHOT_RETRY_BASE_DELAY_MS = 120;
 async function captureScreenshot(wc) {
@@ -12083,7 +12228,7 @@ async function captureScreenshot(wc) {
         }
       }
     } catch (err) {
-      logger$l.debug(
+      logger$m.debug(
         `capturePage attempt ${attempt + 1} failed; retrying if attempts remain.`,
         getErrorMessage(err)
       );
@@ -12091,6 +12236,7 @@ async function captureScreenshot(wc) {
   }
   return errorResult("Page image was empty after 3 attempts");
 }
+const logger$l = createLogger("Sessions");
 const SESSION_VERSION = 1;
 function getSessionsDir() {
   return path$1.join(electron.app.getPath("userData"), "named-sessions");
@@ -12155,7 +12301,8 @@ function readSessionFile(filePath2) {
         capturedAt: (/* @__PURE__ */ new Date()).toISOString()
       }
     };
-  } catch {
+  } catch (err) {
+    logger$l.warn(`Failed to read session file ${filePath2}:`, err);
     return null;
   }
 }
@@ -12237,7 +12384,8 @@ async function captureLocalStorageForOrigin(tabManager, origin) {
         )
       );
     }
-  } catch {
+  } catch (err) {
+    logger$l.debug(`Failed to capture localStorage for origin ${origin}:`, err);
     return {};
   }
   return {};
@@ -12327,7 +12475,8 @@ async function loadNamedSession(tabManager, name) {
   for (const cookie of saved.cookies) {
     try {
       await electron.session.defaultSession.cookies.set(cookieSetDetails(cookie));
-    } catch {
+    } catch (err) {
+      logger$l.debug(`Skipping cookie ${cookie.name} for ${cookie.domain}:`, err);
       continue;
     }
   }
@@ -20031,7 +20180,6 @@ function installAdBlockingForSession(ses, tabManager) {
     );
   });
 }
-const filePath$1 = () => path$1.join(electron.app.getPath("userData"), "vessel-downloads.json");
 const EXECUTABLE_EXTENSIONS = /* @__PURE__ */ new Set([
   ".appimage",
   ".bat",
@@ -20044,6 +20192,7 @@ const EXECUTABLE_EXTENSIONS = /* @__PURE__ */ new Set([
   ".scr",
   ".sh"
 ]);
+const DOWNLOADS_FALLBACK = { items: [] };
 function hasMisleadingDoubleExtension(filename) {
   return /\.(pdf|docx?|xlsx?|pptx?|png|jpe?g|gif|txt|zip)\.(exe|msi|bat|cmd|ps1|sh|scr|appimage)$/i.test(filename);
 }
@@ -20058,23 +20207,14 @@ function executableWarningDetail(item) {
     hasMisleadingDoubleExtension(item.filename) ? "Warning: this filename uses a misleading double extension." : null
   ].filter(Boolean).join("\n");
 }
-function parse(raw) {
-  if (!raw || typeof raw !== "object") return { items: [] };
-  const items = Array.isArray(raw.items) ? raw.items : [];
-  return { items };
-}
-const state$2 = loadJsonFile({ filePath: filePath$1(), fallback: { items: [] }, parse });
-const persistence$2 = createDebouncedJsonPersistence({
-  debounceMs: 250,
-  filePath: filePath$1(),
-  getValue: () => state$2,
-  logLabel: "downloads"
+const store = new PersistentState({
+  filename: "vessel-downloads.json",
+  fallback: DOWNLOADS_FALLBACK,
+  parse: (raw) => parseArrayStateWithFallback(DownloadRecordSchema, raw, "items", DOWNLOADS_FALLBACK, "downloads"),
+  logLabel: "downloads",
+  debounceMs: 250
 });
 let broadcaster$1 = null;
-function persist() {
-  state$2.items = state$2.items.slice(0, 200);
-  persistence$2.schedule();
-}
 function emit$1() {
   broadcaster$1?.(Channels.DOWNLOADS_UPDATE, listDownloads());
 }
@@ -20082,30 +20222,33 @@ function setDownloadBroadcaster(fn) {
   broadcaster$1 = fn;
 }
 function listDownloads() {
-  return state$2.items.map((item) => ({ ...item }));
+  return store.getState().items.map((item) => ({ ...item }));
 }
 function upsertDownload(input) {
   const now = (/* @__PURE__ */ new Date()).toISOString();
-  const existing = state$2.items.find((item) => item.savePath === input.savePath);
-  if (existing) {
-    Object.assign(existing, input, { updatedAt: now });
-    persist();
-    emit$1();
-    return existing;
-  }
-  const record = { id: crypto$2.randomUUID(), ...input, startedAt: now, updatedAt: now };
-  state$2.items = [record, ...state$2.items];
-  persist();
+  const result = store.mutate((s) => {
+    const existing = s.items.find((item) => item.savePath === input.savePath);
+    if (existing) {
+      Object.assign(existing, input, { updatedAt: now });
+      return existing;
+    } else {
+      const record = { id: crypto$2.randomUUID(), ...input, startedAt: now, updatedAt: now };
+      s.items = [record, ...s.items];
+      s.items = s.items.slice(0, 200);
+      return record;
+    }
+  });
   emit$1();
-  return record;
+  return result;
 }
 function clearDownloads() {
-  state$2.items = [];
-  persist();
+  store.mutate((s) => {
+    s.items = [];
+  });
   emit$1();
 }
 async function openDownload(id) {
-  const item = state$2.items.find((d) => d.id === id);
+  const item = store.getState().items.find((d) => d.id === id);
   if (!item || item.state !== "completed" || !fs$1.existsSync(item.savePath)) return false;
   if (isExecutableDownload(item.savePath)) {
     const result = electron.dialog.showMessageBoxSync({
@@ -20122,7 +20265,7 @@ async function openDownload(id) {
   return await electron.shell.openPath(item.savePath) === "";
 }
 async function showDownloadInFolder(id) {
-  const item = state$2.items.find((d) => d.id === id);
+  const item = store.getState().items.find((d) => d.id === id);
   if (!item || !fs$1.existsSync(item.savePath)) return false;
   electron.shell.showItemInFolder(item.savePath);
   return true;
@@ -21505,6 +21648,32 @@ function compactProviderHistory(history = []) {
   const omitted = normalized.slice(0, normalized.length - recent.length);
   return omitted.length > 0 ? [summarizeOmittedHistory(omitted), ...recent] : recent;
 }
+const AIQuerySchema = zod.z.string().min(1);
+const AIMessageSchema = zod.z.object({
+  role: zod.z.enum(["user", "assistant"]),
+  content: zod.z.string()
+});
+const AIHistorySchema = zod.z.array(AIMessageSchema).optional();
+const ReasoningEffortSchema = zod.z.enum(["off", "low", "medium", "high", "max"]);
+const ProviderConfigSchema = zod.z.object({
+  id: zod.z.enum([
+    "anthropic",
+    "openai",
+    "openai_codex",
+    "openrouter",
+    "ollama",
+    "llama_cpp",
+    "mistral",
+    "xai",
+    "google",
+    "custom"
+  ]),
+  apiKey: zod.z.string(),
+  hasApiKey: zod.z.boolean().optional(),
+  model: zod.z.string(),
+  baseUrl: zod.z.string().optional(),
+  reasoningEffort: ReasoningEffortSchema.optional()
+});
 let activeChatProvider = null;
 function registerAIHandlers(tabManager, runtime2, sendToRendererViews, getResearchOrchestrator) {
   onAIStreamIdle(() => {
@@ -21512,10 +21681,12 @@ function registerAIHandlers(tabManager, runtime2, sendToRendererViews, getResear
   });
   electron.ipcMain.handle(Channels.AI_QUERY, async (event, query, history) => {
     assertTrustedIpcSender(event);
+    const validatedQuery = parseIpc(AIQuerySchema, query, "query");
+    const validatedHistory = history !== void 0 ? parseIpc(AIHistorySchema, history, "history") : void 0;
     const settings2 = loadSettings();
     const chatConfig = settings2.chatProvider;
     if (!chatConfig) {
-      sendToRendererViews(Channels.AI_STREAM_START, query);
+      sendToRendererViews(Channels.AI_STREAM_START, validatedQuery);
       sendToRendererViews(
         Channels.AI_STREAM_CHUNK,
         "Chat provider not configured. Open Settings (Ctrl+,) to choose a provider."
@@ -21526,20 +21697,20 @@ function registerAIHandlers(tabManager, runtime2, sendToRendererViews, getResear
     if (!tryBeginAIStream("manual")) {
       return { accepted: false, reason: "busy" };
     }
-    sendToRendererViews(Channels.AI_STREAM_START, query);
+    sendToRendererViews(Channels.AI_STREAM_START, validatedQuery);
     (async () => {
       try {
         activeChatProvider = createProvider(chatConfig);
         const activeTab = tabManager.getActiveTab();
         await handleAIQuery(
-          query,
+          validatedQuery,
           activeChatProvider,
           activeTab?.view.webContents,
           (chunk) => sendToRendererViews(Channels.AI_STREAM_CHUNK, chunk),
           () => sendToRendererViews(Channels.AI_STREAM_END, "completed"),
           tabManager,
           runtime2,
-          compactProviderHistory(history),
+          compactProviderHistory(validatedHistory),
           getResearchOrchestrator()
         );
       } catch (err) {
@@ -21561,12 +21732,8 @@ function registerAIHandlers(tabManager, runtime2, sendToRendererViews, getResear
   electron.ipcMain.handle(Channels.AI_FETCH_MODELS, async (event, config) => {
     assertTrustedIpcSender(event);
     try {
-      if (!config || typeof config !== "object" || !("id" in config)) {
-        return errorResult("Invalid provider configuration", { models: [] });
-      }
-      return await fetchProviderModels(
-        config
-      );
+      const validatedConfig = parseIpc(ProviderConfigSchema, config, "providerConfig");
+      return await fetchProviderModels(validatedConfig);
     } catch (err) {
       return errorResult(getErrorMessage(err), { models: [] });
     }
@@ -21980,429 +22147,72 @@ function registerAgentRuntimeHandlers(runtime2, chromeView, sidebarView, sendToR
     }
   );
 }
-const DEFAULT_PAGE_FOLDER = "Vessel/Pages";
-const DEFAULT_NOTE_FOLDER = "Vessel/Research";
-const DEFAULT_BOOKMARK_FOLDER = "Vessel/Bookmarks";
-const PAGE_CONTENT_LIMIT = 6e3;
-const DEFAULT_LIST_LIMIT = 50;
-const DEFAULT_SEARCH_LIMIT = 20;
-function getVaultRoot() {
-  const configured = loadSettings().obsidianVaultPath.trim();
-  if (!configured) {
-    throw new Error(
-      "Obsidian not configured. Set vault path in Vessel settings to use memory capture."
-    );
-  }
-  return path$1.resolve(configured);
+function asTextResponse$1(text) {
+  return { content: [{ type: "text", text }] };
 }
-function assertInsideVault(targetPath, vaultRoot) {
-  const resolved = path$1.resolve(targetPath);
-  const relative = path$1.relative(vaultRoot, resolved);
-  if (relative.startsWith("..") || path$1.isAbsolute(relative)) {
-    throw new Error("Resolved note path is outside the configured vault.");
-  }
-  return resolved;
+const DANGEROUS_DEVTOOLS_ACTIONS = /* @__PURE__ */ new Set([
+  "devtools_execute_js",
+  "devtools_modify_dom",
+  "devtools_set_storage"
+]);
+let stateListener = null;
+const activityLog = [];
+const MAX_ACTIVITY_ENTRIES = 100;
+let activityCounter = 0;
+function setDevToolsPanelListener(listener) {
+  stateListener = listener;
 }
-function normalizeFolder(folder, fallback) {
-  const raw = (folder?.trim() || fallback).replace(/\\/g, "/");
-  if (!raw) return fallback;
-  if (path$1.isAbsolute(raw)) {
-    throw new Error("Vault note folders must be relative to the vault root.");
-  }
-  const segments = raw.split("/").filter(Boolean);
-  if (segments.some((segment) => segment === "." || segment === "..")) {
-    throw new Error("Vault note folders cannot traverse outside the vault.");
-  }
-  return segments.join(path$1.sep);
+function getDevToolsPanelState(tabId) {
+  const session = tabId ? getSession(tabId) : void 0;
+  return {
+    console: session?.getConsoleLogs() ?? [],
+    network: session?.getNetworkLog() ?? [],
+    errors: session?.getErrors() ?? [],
+    activity: activityLog
+  };
 }
-function normalizeNotePath(notePath) {
-  const raw = notePath.trim().replace(/\\/g, "/");
-  if (!raw) {
-    throw new Error("A note path is required.");
-  }
-  if (path$1.isAbsolute(raw)) {
-    throw new Error("Note paths must be relative to the vault root.");
+function broadcastState(tabManager) {
+  if (!stateListener) return;
+  const tabId = tabManager.getActiveTabId();
+  stateListener(getDevToolsPanelState(tabId));
+}
+async function withDevToolsAction(runtime2, tabManager, name, args, executor) {
+  const activityEntry = {
+    id: ++activityCounter,
+    timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+    tool: name,
+    args: JSON.stringify(args).slice(0, 200),
+    result: "",
+    durationMs: 0,
+    status: "running"
+  };
+  activityLog.push(activityEntry);
+  if (activityLog.length > MAX_ACTIVITY_ENTRIES) {
+    activityLog.splice(0, activityLog.length - MAX_ACTIVITY_ENTRIES);
   }
-  const segments = raw.split("/").filter(Boolean);
-  if (segments.some((segment) => segment === "." || segment === "..")) {
-    throw new Error("Note paths cannot traverse outside the vault.");
-  }
-  const normalized = segments.join(path$1.sep);
-  return normalized.endsWith(".md") ? normalized : `${normalized}.md`;
-}
-function escapeYaml(value) {
-  return JSON.stringify(value);
-}
-function renderFrontmatter(data) {
-  const lines = ["---"];
-  for (const [key2, value] of Object.entries(data)) {
-    if (value == null) continue;
-    if (Array.isArray(value)) {
-      if (value.length === 0) continue;
-      lines.push(`${key2}:`);
-      for (const item of value) {
-        lines.push(`  - ${escapeYaml(item)}`);
-      }
-      continue;
-    }
-    lines.push(`${key2}: ${escapeYaml(value)}`);
-  }
-  lines.push("---", "");
-  return lines.join("\n");
-}
-function slugify(value) {
-  const normalized = value.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
-  return normalized || "note";
-}
-function buildUniqueNotePath(dir, title) {
-  const datePrefix = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
-  const slug = slugify(title);
-  const base = `${datePrefix}-${slug}`;
-  let candidate = `${base}.md`;
-  let counter = 2;
-  while (fs$1.existsSync(path$1.join(dir, candidate))) {
-    candidate = `${base}-${counter}.md`;
-    counter += 1;
-  }
-  return path$1.join(dir, candidate);
-}
-function trimContent(content, limit = PAGE_CONTENT_LIMIT) {
-  const cleaned = content.trim();
-  if (cleaned.length <= limit) return cleaned;
-  return `${cleaned.slice(0, limit)}
-
-[Truncated]`;
-}
-function parseFrontmatter(content) {
-  if (!content.startsWith("---\n")) {
-    return { body: content, tags: [] };
-  }
-  const closingIndex = content.indexOf("\n---\n", 4);
-  if (closingIndex === -1) {
-    return { body: content, tags: [] };
-  }
-  const raw = content.slice(4, closingIndex);
-  const body = content.slice(closingIndex + 5);
-  const lines = raw.split("\n");
-  const result = { tags: [] };
-  let activeArrayKey = "";
-  for (const line of lines) {
-    const trimmed = line.trim();
-    if (!trimmed) continue;
-    if (trimmed.startsWith("- ") && activeArrayKey === "tags") {
-      result.tags.push(
-        trimmed.slice(2).trim().replace(/^["']|["']$/g, "")
-      );
-      continue;
-    }
-    activeArrayKey = "";
-    const separatorIndex = trimmed.indexOf(":");
-    if (separatorIndex === -1) continue;
-    const key2 = trimmed.slice(0, separatorIndex).trim();
-    const value = trimmed.slice(separatorIndex + 1).trim();
-    if (key2 === "title" && value) {
-      result.title = value.replace(/^["']|["']$/g, "");
-    } else if (key2 === "tags") {
-      activeArrayKey = "tags";
-      if (value.startsWith("[") && value.endsWith("]")) {
-        const inline = value.slice(1, -1).split(",").map((item) => item.trim().replace(/^["']|["']$/g, "")).filter(Boolean);
-        result.tags.push(...inline);
-        activeArrayKey = "";
-      }
-    }
-  }
-  return { body, title: result.title, tags: result.tags };
-}
-function collectMarkdownFiles(dir) {
-  const entries = fs$1.readdirSync(dir, { withFileTypes: true });
-  const files = [];
-  for (const entry of entries) {
-    const absolutePath = path$1.join(dir, entry.name);
-    if (entry.isDirectory()) {
-      files.push(...collectMarkdownFiles(absolutePath));
-      continue;
-    }
-    if (entry.isFile() && entry.name.toLowerCase().endsWith(".md")) {
-      files.push(absolutePath);
-    }
-  }
-  return files;
-}
-function toSummary(absolutePath, vaultRoot) {
-  const stats = fs$1.statSync(absolutePath);
-  const relativePath = path$1.relative(vaultRoot, absolutePath).split(path$1.sep).join("/");
-  const raw = fs$1.readFileSync(absolutePath, "utf-8");
-  const parsed = parseFrontmatter(raw);
-  const headingMatch = parsed.body.match(/^#\s+(.+)$/m);
-  const title = parsed.title || headingMatch?.[1]?.trim() || path$1.basename(absolutePath, ".md");
-  return {
-    title,
-    absolutePath,
-    relativePath,
-    modifiedAt: stats.mtime.toISOString(),
-    tags: parsed.tags
-  };
-}
-function renderBookmarkLinkBlock(bookmark, note) {
-  const lines = [
-    "## Linked Bookmark",
-    "",
-    `- Bookmark ID: \`${bookmark.id}\``,
-    `- Title: ${bookmark.title || bookmark.url}`,
-    `- URL: [${bookmark.url}](${bookmark.url})`,
-    `- Saved At: ${bookmark.savedAt}`
-  ];
-  if (note?.trim()) {
-    lines.push("", "### Context", "", note.trim());
-  }
-  return `${lines.join("\n")}
-`;
-}
-function writeMemoryNote({
-  title,
-  body,
-  folder,
-  tags = [],
-  frontmatter = {}
-}) {
-  const vaultRoot = getVaultRoot();
-  const relativeFolder = normalizeFolder(folder, DEFAULT_NOTE_FOLDER);
-  const targetDir = path$1.join(vaultRoot, relativeFolder);
-  fs$1.mkdirSync(targetDir, { recursive: true });
-  const absolutePath = buildUniqueNotePath(targetDir, title);
-  const relativePath = path$1.relative(vaultRoot, absolutePath);
-  const content = [
-    renderFrontmatter({
-      title,
-      created_at: (/* @__PURE__ */ new Date()).toISOString(),
-      tags,
-      ...frontmatter
-    }),
-    body.trim(),
-    ""
-  ].join("\n");
-  fs$1.writeFileSync(absolutePath, content, "utf-8");
-  return {
-    title,
-    absolutePath,
-    relativePath: relativePath.split(path$1.sep).join("/")
-  };
-}
-function appendToMemoryNote({
-  notePath,
-  content,
-  heading
-}) {
-  const vaultRoot = getVaultRoot();
-  const relativePath = normalizeNotePath(notePath);
-  const absolutePath = assertInsideVault(
-    path$1.join(vaultRoot, relativePath),
-    vaultRoot
-  );
-  if (!fs$1.existsSync(absolutePath)) {
-    throw new Error(
-      `Memory note not found: ${relativePath.split(path$1.sep).join("/")}`
-    );
-  }
-  const current = fs$1.readFileSync(absolutePath, "utf-8").trimEnd();
-  const nextParts = [current, ""];
-  if (heading?.trim()) {
-    nextParts.push(`## ${heading.trim()}`, "");
-  }
-  nextParts.push(content.trim(), "");
-  fs$1.writeFileSync(absolutePath, nextParts.join("\n"), "utf-8");
-  return {
-    title: path$1.basename(absolutePath, ".md"),
-    absolutePath,
-    relativePath: relativePath.split(path$1.sep).join("/")
-  };
-}
-function listMemoryNotes({
-  folder,
-  limit = DEFAULT_LIST_LIMIT
-} = {}) {
-  const vaultRoot = getVaultRoot();
-  const relativeFolder = normalizeFolder(folder, "");
-  const targetDir = relativeFolder ? path$1.join(vaultRoot, relativeFolder) : vaultRoot;
-  if (!fs$1.existsSync(targetDir)) {
-    return [];
-  }
-  return collectMarkdownFiles(targetDir).map((absolutePath) => toSummary(absolutePath, vaultRoot)).sort((a, b) => b.modifiedAt.localeCompare(a.modifiedAt)).slice(0, Math.max(1, limit));
-}
-function searchMemoryNotes({
-  query,
-  folder,
-  tags = [],
-  limit = DEFAULT_SEARCH_LIMIT
-}) {
-  const loweredQuery = query.trim().toLowerCase();
-  if (!loweredQuery) {
-    throw new Error("A non-empty memory search query is required.");
-  }
-  const vaultRoot = getVaultRoot();
-  const relativeFolder = normalizeFolder(folder, "");
-  const targetDir = relativeFolder ? path$1.join(vaultRoot, relativeFolder) : vaultRoot;
-  if (!fs$1.existsSync(targetDir)) {
-    return [];
-  }
-  const loweredTags = tags.map((tag) => tag.trim().toLowerCase()).filter(Boolean);
-  return collectMarkdownFiles(targetDir).map((absolutePath) => {
-    const raw = fs$1.readFileSync(absolutePath, "utf-8");
-    const parsed = parseFrontmatter(raw);
-    const summary = toSummary(absolutePath, vaultRoot);
-    const haystack = `${summary.title}
-${summary.relativePath}
-${parsed.body}`.toLowerCase();
-    const hasQuery = haystack.includes(loweredQuery);
-    const hasTags = loweredTags.length === 0 || loweredTags.every(
-      (tag) => summary.tags.some((noteTag) => noteTag.toLowerCase() === tag)
-    );
-    return hasQuery && hasTags ? summary : null;
-  }).filter((item) => item !== null).sort((a, b) => b.modifiedAt.localeCompare(a.modifiedAt)).slice(0, Math.max(1, limit));
-}
-function capturePageToVault({
-  page,
-  title,
-  folder,
-  summary,
-  note,
-  tags = []
-}) {
-  const noteTitle = title?.trim() || page.title.trim() || page.url;
-  const bodyLines = [
-    `# ${noteTitle}`,
-    "",
-    `Source: [${page.title || page.url}](${page.url})`,
-    `Captured: ${(/* @__PURE__ */ new Date()).toISOString()}`
-  ];
-  if (page.byline) {
-    bodyLines.push(`Byline: ${page.byline}`);
-  }
-  bodyLines.push("");
-  if (summary?.trim()) {
-    bodyLines.push("## Summary", "", summary.trim(), "");
-  }
-  if (note?.trim()) {
-    bodyLines.push("## Research Note", "", note.trim(), "");
-  }
-  if (page.excerpt.trim()) {
-    bodyLines.push("## Excerpt", "", page.excerpt.trim(), "");
-  }
-  const snapshot2 = trimContent(page.content);
-  if (snapshot2) {
-    bodyLines.push("## Page Snapshot", "", snapshot2, "");
-  }
-  return writeMemoryNote({
-    title: noteTitle,
-    body: bodyLines.join("\n"),
-    folder: folder || DEFAULT_PAGE_FOLDER,
-    tags,
-    frontmatter: {
-      source_url: page.url,
-      source_title: page.title || page.url
-    }
-  });
-}
-function linkBookmarkToMemory({
-  bookmark,
-  notePath,
-  title,
-  folder,
-  note,
-  tags = []
-}) {
-  if (notePath?.trim()) {
-    return appendToMemoryNote({
-      notePath,
-      heading: "Linked Bookmark",
-      content: [
-        `- Bookmark ID: \`${bookmark.id}\``,
-        `- Title: ${bookmark.title || bookmark.url}`,
-        `- URL: [${bookmark.url}](${bookmark.url})`,
-        `- Saved At: ${bookmark.savedAt}`,
-        note?.trim() ? `- Note: ${note.trim()}` : ""
-      ].filter(Boolean).join("\n")
-    });
-  }
-  const noteTitle = title?.trim() || bookmark.title || bookmark.url;
-  return writeMemoryNote({
-    title: noteTitle,
-    body: renderBookmarkLinkBlock(bookmark, note),
-    folder: folder || DEFAULT_BOOKMARK_FOLDER,
-    tags,
-    frontmatter: {
-      bookmark_id: bookmark.id,
-      source_url: bookmark.url,
-      source_title: bookmark.title || bookmark.url
-    }
-  });
-}
-function asTextResponse$1(text) {
-  return { content: [{ type: "text", text }] };
-}
-const DANGEROUS_DEVTOOLS_ACTIONS = /* @__PURE__ */ new Set([
-  "devtools_execute_js",
-  "devtools_modify_dom",
-  "devtools_set_storage"
-]);
-let stateListener = null;
-const activityLog = [];
-const MAX_ACTIVITY_ENTRIES = 100;
-let activityCounter = 0;
-function setDevToolsPanelListener(listener) {
-  stateListener = listener;
-}
-function getDevToolsPanelState(tabId) {
-  const session = tabId ? getSession(tabId) : void 0;
-  return {
-    console: session?.getConsoleLogs() ?? [],
-    network: session?.getNetworkLog() ?? [],
-    errors: session?.getErrors() ?? [],
-    activity: activityLog
-  };
-}
-function broadcastState(tabManager) {
-  if (!stateListener) return;
-  const tabId = tabManager.getActiveTabId();
-  stateListener(getDevToolsPanelState(tabId));
-}
-async function withDevToolsAction(runtime2, tabManager, name, args, executor) {
-  const activityEntry = {
-    id: ++activityCounter,
-    timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-    tool: name,
-    args: JSON.stringify(args).slice(0, 200),
-    result: "",
-    durationMs: 0,
-    status: "running"
-  };
-  activityLog.push(activityEntry);
-  if (activityLog.length > MAX_ACTIVITY_ENTRIES) {
-    activityLog.splice(0, activityLog.length - MAX_ACTIVITY_ENTRIES);
-  }
-  broadcastState(tabManager);
-  const startTime = Date.now();
-  try {
-    const result = await runtime2.runControlledAction({
-      source: "mcp",
-      name,
-      args,
-      tabId: tabManager.getActiveTabId(),
-      dangerous: DANGEROUS_DEVTOOLS_ACTIONS.has(name),
-      executor
-    });
-    activityEntry.status = "completed";
-    activityEntry.result = result.slice(0, 200);
-    activityEntry.durationMs = Date.now() - startTime;
-    broadcastState(tabManager);
-    return asTextResponse$1(result);
-  } catch (error) {
-    const message = error instanceof Error ? error.message : "Unknown error";
-    activityEntry.status = "failed";
-    activityEntry.result = message.slice(0, 200);
-    activityEntry.durationMs = Date.now() - startTime;
-    broadcastState(tabManager);
-    return asTextResponse$1(`Error: ${message}`);
+  broadcastState(tabManager);
+  const startTime = Date.now();
+  try {
+    const result = await runtime2.runControlledAction({
+      source: "mcp",
+      name,
+      args,
+      tabId: tabManager.getActiveTabId(),
+      dangerous: DANGEROUS_DEVTOOLS_ACTIONS.has(name),
+      executor
+    });
+    activityEntry.status = "completed";
+    activityEntry.result = result.slice(0, 200);
+    activityEntry.durationMs = Date.now() - startTime;
+    broadcastState(tabManager);
+    return asTextResponse$1(result);
+  } catch (error) {
+    const message = error instanceof Error ? error.message : "Unknown error";
+    activityEntry.status = "failed";
+    activityEntry.result = message.slice(0, 200);
+    activityEntry.durationMs = Date.now() - startTime;
+    broadcastState(tabManager);
+    return asTextResponse$1(`Error: ${message}`);
   }
 }
 function registerDevTools(server, tabManager, runtime2) {
@@ -22441,334 +22251,709 @@ function registerDevTools(server, tabManager, runtime2) {
       title: "DevTools: Clear Console Logs",
       description: "Clear the captured console log buffer for the active tab."
     },
-    async () => {
+    async () => {
+      return withDevToolsAction(
+        runtime2,
+        tabManager,
+        "devtools_console_clear",
+        {},
+        async () => {
+          const session = getOrCreateSession(tabManager);
+          const count = session.clearConsoleLogs();
+          return `Cleared ${count} console entries.`;
+        }
+      );
+    }
+  );
+  server.registerTool(
+    "vessel_devtools_network_log",
+    {
+      title: "DevTools: Get Network Log",
+      description: "Get captured network requests/responses from the active tab. Returns method, URL, status, timing, headers, and size. Automatically starts capturing on first use.",
+      inputSchema: {
+        url_pattern: zod.z.string().optional().describe("Filter by URL pattern (regex or substring match)"),
+        method: zod.z.string().optional().describe("Filter by HTTP method (GET, POST, etc.)"),
+        status_min: zod.z.number().optional().describe("Minimum HTTP status code (e.g., 400 for errors)"),
+        status_max: zod.z.number().optional().describe("Maximum HTTP status code"),
+        limit: zod.z.number().optional().describe("Maximum number of entries to return (default: all)")
+      }
+    },
+    async ({ url_pattern, method, status_min, status_max, limit }) => {
+      return withDevToolsAction(
+        runtime2,
+        tabManager,
+        "devtools_network_log",
+        { url_pattern, method, status_min, status_max, limit },
+        async () => {
+          const session = getOrCreateSession(tabManager);
+          await session.ensureNetworkDomain();
+          const entries = session.getNetworkLog({
+            urlPattern: url_pattern,
+            method,
+            statusRange: status_min != null || status_max != null ? { min: status_min, max: status_max } : void 0,
+            limit
+          });
+          if (entries.length === 0) {
+            return "No network requests captured yet. Network monitoring is now active — new requests will be captured as they occur.";
+          }
+          return JSON.stringify(entries, null, 2);
+        }
+      );
+    }
+  );
+  server.registerTool(
+    "vessel_devtools_network_response_body",
+    {
+      title: "DevTools: Get Network Response Body",
+      description: "Get the response body for a specific network request by its request ID. Use vessel_devtools_network_log first to find the request ID.",
+      inputSchema: {
+        request_id: zod.z.string().describe("The requestId from a network log entry")
+      }
+    },
+    async ({ request_id }) => {
+      return withDevToolsAction(
+        runtime2,
+        tabManager,
+        "devtools_network_response_body",
+        { request_id },
+        async () => {
+          const session = getOrCreateSession(tabManager);
+          const result = await session.getNetworkResponseBody(request_id);
+          if ("error" in result) return `Error: ${result.error}`;
+          if (result.base64Encoded) {
+            return `[Base64-encoded body, ${result.body.length} chars. Likely binary content.]`;
+          }
+          const body = result.body;
+          return body.length > 2e4 ? body.slice(0, 2e4) + `
+... [truncated, total ${body.length} chars]` : body;
+        }
+      );
+    }
+  );
+  server.registerTool(
+    "vessel_devtools_network_clear",
+    {
+      title: "DevTools: Clear Network Log",
+      description: "Clear the captured network request buffer for the active tab."
+    },
+    async () => {
+      return withDevToolsAction(
+        runtime2,
+        tabManager,
+        "devtools_network_clear",
+        {},
+        async () => {
+          const session = getOrCreateSession(tabManager);
+          const count = session.clearNetworkLog();
+          return `Cleared ${count} network entries.`;
+        }
+      );
+    }
+  );
+  server.registerTool(
+    "vessel_devtools_query_dom",
+    {
+      title: "DevTools: Query DOM",
+      description: "Query the DOM of the active tab using a CSS selector. Returns matching elements with their attributes, node type, and optionally their HTML content. Limited to 50 results.",
+      inputSchema: {
+        selector: zod.z.string().describe("CSS selector to query"),
+        include_html: zod.z.boolean().optional().describe("Include outerHTML of matched elements (default: false)")
+      }
+    },
+    async ({ selector, include_html }) => {
+      return withDevToolsAction(
+        runtime2,
+        tabManager,
+        "devtools_query_dom",
+        { selector, include_html },
+        async () => {
+          const session = getOrCreateSession(tabManager);
+          const nodes = await session.queryDom(selector, {
+            includeHtml: include_html
+          });
+          if (nodes.length === 0) {
+            return `No elements found matching "${selector}"`;
+          }
+          return JSON.stringify(nodes, null, 2);
+        }
+      );
+    }
+  );
+  server.registerTool(
+    "vessel_devtools_get_styles",
+    {
+      title: "DevTools: Get Computed Styles",
+      description: "Get computed CSS styles for an element matching a CSS selector. Optionally filter to specific properties.",
+      inputSchema: {
+        selector: zod.z.string().describe("CSS selector for the target element"),
+        properties: zod.z.array(zod.z.string()).optional().describe(
+          'Specific CSS properties to return (e.g., ["color", "font-size", "display"]). Omit for all properties.'
+        )
+      }
+    },
+    async ({ selector, properties }) => {
+      return withDevToolsAction(
+        runtime2,
+        tabManager,
+        "devtools_get_styles",
+        { selector, properties },
+        async () => {
+          const session = getOrCreateSession(tabManager);
+          const styles = await session.getComputedStyles(selector, properties);
+          if (styles.length === 0) {
+            return `No computed styles found for "${selector}"`;
+          }
+          return JSON.stringify(styles, null, 2);
+        }
+      );
+    }
+  );
+  server.registerTool(
+    "vessel_devtools_modify_dom",
+    {
+      title: "DevTools: Modify DOM Attribute",
+      description: "Set or remove an HTML attribute on an element matching a CSS selector. This is a dangerous action that modifies the page.",
+      inputSchema: {
+        selector: zod.z.string().describe("CSS selector for the target element"),
+        attribute: zod.z.string().describe("Attribute name to set or remove"),
+        value: zod.z.string().nullable().describe("Attribute value to set, or null to remove the attribute")
+      }
+    },
+    async ({ selector, attribute, value }) => {
+      return withDevToolsAction(
+        runtime2,
+        tabManager,
+        "devtools_modify_dom",
+        { selector, attribute, value },
+        async () => {
+          const session = getOrCreateSession(tabManager);
+          return session.modifyDomAttribute(selector, attribute, value);
+        }
+      );
+    }
+  );
+  server.registerTool(
+    "vessel_devtools_execute_js",
+    {
+      title: "DevTools: Execute JavaScript",
+      description: "Execute a JavaScript expression in the context of the active tab's page via the Runtime.evaluate CDP method. Supports async/await. This is a dangerous action — it can modify page state.",
+      inputSchema: {
+        expression: zod.z.string().describe("JavaScript expression to evaluate in the page context")
+      }
+    },
+    async ({ expression }) => {
       return withDevToolsAction(
         runtime2,
         tabManager,
-        "devtools_console_clear",
-        {},
+        "devtools_execute_js",
+        { expression: expression.slice(0, 200) },
         async () => {
           const session = getOrCreateSession(tabManager);
-          const count = session.clearConsoleLogs();
-          return `Cleared ${count} console entries.`;
+          const result = await session.executeJs(expression);
+          const parts = [`[${result.type}] ${result.result}`];
+          if (result.exceptionDetails) {
+            parts.push(`
+Exception: ${result.exceptionDetails}`);
+          }
+          return parts.join("");
         }
       );
     }
   );
   server.registerTool(
-    "vessel_devtools_network_log",
+    "vessel_devtools_get_storage",
     {
-      title: "DevTools: Get Network Log",
-      description: "Get captured network requests/responses from the active tab. Returns method, URL, status, timing, headers, and size. Automatically starts capturing on first use.",
+      title: "DevTools: Get Storage",
+      description: "Read browser storage for the active tab's origin. Supports localStorage, sessionStorage, cookies, and IndexedDB database listing.",
       inputSchema: {
-        url_pattern: zod.z.string().optional().describe("Filter by URL pattern (regex or substring match)"),
-        method: zod.z.string().optional().describe("Filter by HTTP method (GET, POST, etc.)"),
-        status_min: zod.z.number().optional().describe("Minimum HTTP status code (e.g., 400 for errors)"),
-        status_max: zod.z.number().optional().describe("Maximum HTTP status code"),
-        limit: zod.z.number().optional().describe("Maximum number of entries to return (default: all)")
+        type: zod.z.enum(["localStorage", "sessionStorage", "cookie", "indexedDB"]).describe("Storage type to read")
       }
     },
-    async ({ url_pattern, method, status_min, status_max, limit }) => {
+    async ({ type }) => {
       return withDevToolsAction(
         runtime2,
         tabManager,
-        "devtools_network_log",
-        { url_pattern, method, status_min, status_max, limit },
+        "devtools_get_storage",
+        { type },
         async () => {
           const session = getOrCreateSession(tabManager);
-          await session.ensureNetworkDomain();
-          const entries = session.getNetworkLog({
-            urlPattern: url_pattern,
-            method,
-            statusRange: status_min != null || status_max != null ? { min: status_min, max: status_max } : void 0,
-            limit
-          });
-          if (entries.length === 0) {
-            return "No network requests captured yet. Network monitoring is now active — new requests will be captured as they occur.";
+          const data = await session.getStorage(type);
+          const count = Object.keys(data.entries).length;
+          if (count === 0) {
+            return `No ${type} entries found for ${data.origin}`;
           }
-          return JSON.stringify(entries, null, 2);
+          return JSON.stringify(data, null, 2);
         }
       );
     }
   );
   server.registerTool(
-    "vessel_devtools_network_response_body",
+    "vessel_devtools_set_storage",
     {
-      title: "DevTools: Get Network Response Body",
-      description: "Get the response body for a specific network request by its request ID. Use vessel_devtools_network_log first to find the request ID.",
+      title: "DevTools: Set Storage",
+      description: "Set or remove a key in localStorage or sessionStorage for the active tab. This is a dangerous action that modifies page state.",
       inputSchema: {
-        request_id: zod.z.string().describe("The requestId from a network log entry")
+        type: zod.z.enum(["localStorage", "sessionStorage"]).describe("Storage type to modify"),
+        key: zod.z.string().describe("Storage key"),
+        value: zod.z.string().nullable().describe("Value to set, or null to remove the key")
       }
     },
-    async ({ request_id }) => {
+    async ({ type, key: key2, value }) => {
       return withDevToolsAction(
         runtime2,
         tabManager,
-        "devtools_network_response_body",
-        { request_id },
+        "devtools_set_storage",
+        { type, key: key2, value: value ? value.slice(0, 100) : null },
         async () => {
           const session = getOrCreateSession(tabManager);
-          const result = await session.getNetworkResponseBody(request_id);
-          if ("error" in result) return `Error: ${result.error}`;
-          if (result.base64Encoded) {
-            return `[Base64-encoded body, ${result.body.length} chars. Likely binary content.]`;
-          }
-          const body = result.body;
-          return body.length > 2e4 ? body.slice(0, 2e4) + `
-... [truncated, total ${body.length} chars]` : body;
+          return session.setStorage(type, key2, value);
         }
       );
     }
   );
   server.registerTool(
-    "vessel_devtools_network_clear",
+    "vessel_devtools_performance",
     {
-      title: "DevTools: Clear Network Log",
-      description: "Clear the captured network request buffer for the active tab."
+      title: "DevTools: Performance Snapshot",
+      description: "Get a performance snapshot for the active tab including navigation timing, paint metrics, memory usage, and resource loading statistics."
     },
     async () => {
       return withDevToolsAction(
         runtime2,
         tabManager,
-        "devtools_network_clear",
+        "devtools_performance",
         {},
         async () => {
           const session = getOrCreateSession(tabManager);
-          const count = session.clearNetworkLog();
-          return `Cleared ${count} network entries.`;
+          const snapshot2 = await session.getPerformanceSnapshot();
+          return JSON.stringify(snapshot2, null, 2);
         }
       );
     }
   );
   server.registerTool(
-    "vessel_devtools_query_dom",
+    "vessel_devtools_get_errors",
     {
-      title: "DevTools: Query DOM",
-      description: "Query the DOM of the active tab using a CSS selector. Returns matching elements with their attributes, node type, and optionally their HTML content. Limited to 50 results.",
+      title: "DevTools: Get Errors",
+      description: "Get captured JavaScript errors and unhandled promise rejections from the active tab. Automatically starts capturing on first use.",
       inputSchema: {
-        selector: zod.z.string().describe("CSS selector to query"),
-        include_html: zod.z.boolean().optional().describe("Include outerHTML of matched elements (default: false)")
+        type: zod.z.enum(["exception", "unhandled-rejection"]).optional().describe("Filter by error type"),
+        limit: zod.z.number().optional().describe("Maximum number of entries to return (default: all)")
       }
     },
-    async ({ selector, include_html }) => {
+    async ({ type, limit }) => {
       return withDevToolsAction(
         runtime2,
         tabManager,
-        "devtools_query_dom",
-        { selector, include_html },
+        "devtools_get_errors",
+        { type, limit },
         async () => {
           const session = getOrCreateSession(tabManager);
-          const nodes = await session.queryDom(selector, {
-            includeHtml: include_html
-          });
-          if (nodes.length === 0) {
-            return `No elements found matching "${selector}"`;
+          await session.ensureErrorCapture();
+          const entries = session.getErrors({ type, limit });
+          if (entries.length === 0) {
+            return "No errors captured yet. Error monitoring is now active — exceptions and unhandled rejections will be captured as they occur.";
           }
-          return JSON.stringify(nodes, null, 2);
+          return JSON.stringify(entries, null, 2);
         }
       );
     }
   );
   server.registerTool(
-    "vessel_devtools_get_styles",
+    "vessel_devtools_clear_errors",
     {
-      title: "DevTools: Get Computed Styles",
-      description: "Get computed CSS styles for an element matching a CSS selector. Optionally filter to specific properties.",
-      inputSchema: {
-        selector: zod.z.string().describe("CSS selector for the target element"),
-        properties: zod.z.array(zod.z.string()).optional().describe(
-          'Specific CSS properties to return (e.g., ["color", "font-size", "display"]). Omit for all properties.'
-        )
-      }
+      title: "DevTools: Clear Errors",
+      description: "Clear the captured error buffer for the active tab."
     },
-    async ({ selector, properties }) => {
+    async () => {
       return withDevToolsAction(
         runtime2,
         tabManager,
-        "devtools_get_styles",
-        { selector, properties },
+        "devtools_clear_errors",
+        {},
         async () => {
           const session = getOrCreateSession(tabManager);
-          const styles = await session.getComputedStyles(selector, properties);
-          if (styles.length === 0) {
-            return `No computed styles found for "${selector}"`;
-          }
-          return JSON.stringify(styles, null, 2);
+          const count = session.clearErrors();
+          return `Cleared ${count} error entries.`;
         }
       );
     }
-  );
-  server.registerTool(
-    "vessel_devtools_modify_dom",
-    {
-      title: "DevTools: Modify DOM Attribute",
-      description: "Set or remove an HTML attribute on an element matching a CSS selector. This is a dangerous action that modifies the page.",
-      inputSchema: {
-        selector: zod.z.string().describe("CSS selector for the target element"),
-        attribute: zod.z.string().describe("Attribute name to set or remove"),
-        value: zod.z.string().nullable().describe("Attribute value to set, or null to remove the attribute")
+  );
+}
+const DEFAULT_PAGE_FOLDER = "Vessel/Pages";
+const DEFAULT_NOTE_FOLDER = "Vessel/Research";
+const DEFAULT_BOOKMARK_FOLDER = "Vessel/Bookmarks";
+const PAGE_CONTENT_LIMIT = 6e3;
+const DEFAULT_LIST_LIMIT = 50;
+const DEFAULT_SEARCH_LIMIT = 20;
+const { access: access$1, mkdir: mkdir$1, readFile: readFile$1, readdir: readdir$1, stat, writeFile: writeFile$1 } = fs$1.promises;
+function getVaultRoot() {
+  const configured = loadSettings().obsidianVaultPath.trim();
+  if (!configured) {
+    throw new Error(
+      "Obsidian not configured. Set vault path in Vessel settings to use memory capture."
+    );
+  }
+  return path$1.resolve(configured);
+}
+function assertInsideVault(targetPath, vaultRoot) {
+  const resolved = path$1.resolve(targetPath);
+  const relative = path$1.relative(vaultRoot, resolved);
+  if (relative.startsWith("..") || path$1.isAbsolute(relative)) {
+    throw new Error("Resolved note path is outside the configured vault.");
+  }
+  return resolved;
+}
+function normalizeFolder(folder, fallback) {
+  const raw = (folder?.trim() || fallback).replace(/\\/g, "/");
+  if (!raw) return fallback;
+  if (path$1.isAbsolute(raw)) {
+    throw new Error("Vault note folders must be relative to the vault root.");
+  }
+  const segments = raw.split("/").filter(Boolean);
+  if (segments.some((segment) => segment === "." || segment === "..")) {
+    throw new Error("Vault note folders cannot traverse outside the vault.");
+  }
+  return segments.join(path$1.sep);
+}
+function normalizeNotePath(notePath) {
+  const raw = notePath.trim().replace(/\\/g, "/");
+  if (!raw) {
+    throw new Error("A note path is required.");
+  }
+  if (path$1.isAbsolute(raw)) {
+    throw new Error("Note paths must be relative to the vault root.");
+  }
+  const segments = raw.split("/").filter(Boolean);
+  if (segments.some((segment) => segment === "." || segment === "..")) {
+    throw new Error("Note paths cannot traverse outside the vault.");
+  }
+  const normalized = segments.join(path$1.sep);
+  return normalized.endsWith(".md") ? normalized : `${normalized}.md`;
+}
+function escapeYaml(value) {
+  return JSON.stringify(value);
+}
+function renderFrontmatter(data) {
+  const lines = ["---"];
+  for (const [key2, value] of Object.entries(data)) {
+    if (value == null) continue;
+    if (Array.isArray(value)) {
+      if (value.length === 0) continue;
+      lines.push(`${key2}:`);
+      for (const item of value) {
+        lines.push(`  - ${escapeYaml(item)}`);
+      }
+      continue;
+    }
+    lines.push(`${key2}: ${escapeYaml(value)}`);
+  }
+  lines.push("---", "");
+  return lines.join("\n");
+}
+function slugify(value) {
+  const normalized = value.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
+  return normalized || "note";
+}
+async function pathExists$1(filePath2) {
+  try {
+    await access$1(filePath2);
+    return true;
+  } catch {
+    return false;
+  }
+}
+async function buildUniqueNotePath(dir, title) {
+  const datePrefix = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
+  const slug = slugify(title);
+  const base = `${datePrefix}-${slug}`;
+  let candidate = `${base}.md`;
+  let counter = 2;
+  while (await pathExists$1(path$1.join(dir, candidate))) {
+    candidate = `${base}-${counter}.md`;
+    counter += 1;
+  }
+  return path$1.join(dir, candidate);
+}
+function trimContent(content, limit = PAGE_CONTENT_LIMIT) {
+  const cleaned = content.trim();
+  if (cleaned.length <= limit) return cleaned;
+  return `${cleaned.slice(0, limit)}
+
+[Truncated]`;
+}
+function parseFrontmatter(content) {
+  if (!content.startsWith("---\n")) {
+    return { body: content, tags: [] };
+  }
+  const closingIndex = content.indexOf("\n---\n", 4);
+  if (closingIndex === -1) {
+    return { body: content, tags: [] };
+  }
+  const raw = content.slice(4, closingIndex);
+  const body = content.slice(closingIndex + 5);
+  const lines = raw.split("\n");
+  const result = { tags: [] };
+  let activeArrayKey = "";
+  for (const line of lines) {
+    const trimmed = line.trim();
+    if (!trimmed) continue;
+    if (trimmed.startsWith("- ") && activeArrayKey === "tags") {
+      result.tags.push(
+        trimmed.slice(2).trim().replace(/^["']|["']$/g, "")
+      );
+      continue;
+    }
+    activeArrayKey = "";
+    const separatorIndex = trimmed.indexOf(":");
+    if (separatorIndex === -1) continue;
+    const key2 = trimmed.slice(0, separatorIndex).trim();
+    const value = trimmed.slice(separatorIndex + 1).trim();
+    if (key2 === "title" && value) {
+      result.title = value.replace(/^["']|["']$/g, "");
+    } else if (key2 === "tags") {
+      activeArrayKey = "tags";
+      if (value.startsWith("[") && value.endsWith("]")) {
+        const inline = value.slice(1, -1).split(",").map((item) => item.trim().replace(/^["']|["']$/g, "")).filter(Boolean);
+        result.tags.push(...inline);
+        activeArrayKey = "";
       }
-    },
-    async ({ selector, attribute, value }) => {
-      return withDevToolsAction(
-        runtime2,
-        tabManager,
-        "devtools_modify_dom",
-        { selector, attribute, value },
-        async () => {
-          const session = getOrCreateSession(tabManager);
-          return session.modifyDomAttribute(selector, attribute, value);
-        }
-      );
     }
-  );
-  server.registerTool(
-    "vessel_devtools_execute_js",
-    {
-      title: "DevTools: Execute JavaScript",
-      description: "Execute a JavaScript expression in the context of the active tab's page via the Runtime.evaluate CDP method. Supports async/await. This is a dangerous action — it can modify page state.",
-      inputSchema: {
-        expression: zod.z.string().describe("JavaScript expression to evaluate in the page context")
+  }
+  return { body, title: result.title, tags: result.tags };
+}
+async function collectMarkdownFiles(dir) {
+  const entries = await readdir$1(dir, { withFileTypes: true });
+  const nestedFiles = await Promise.all(
+    entries.map(async (entry) => {
+      const absolutePath = path$1.join(dir, entry.name);
+      if (entry.isDirectory()) {
+        return collectMarkdownFiles(absolutePath);
       }
-    },
-    async ({ expression }) => {
-      return withDevToolsAction(
-        runtime2,
-        tabManager,
-        "devtools_execute_js",
-        { expression: expression.slice(0, 200) },
-        async () => {
-          const session = getOrCreateSession(tabManager);
-          const result = await session.executeJs(expression);
-          const parts = [`[${result.type}] ${result.result}`];
-          if (result.exceptionDetails) {
-            parts.push(`
-Exception: ${result.exceptionDetails}`);
-          }
-          return parts.join("");
-        }
-      );
-    }
-  );
-  server.registerTool(
-    "vessel_devtools_get_storage",
-    {
-      title: "DevTools: Get Storage",
-      description: "Read browser storage for the active tab's origin. Supports localStorage, sessionStorage, cookies, and IndexedDB database listing.",
-      inputSchema: {
-        type: zod.z.enum(["localStorage", "sessionStorage", "cookie", "indexedDB"]).describe("Storage type to read")
+      if (entry.isFile() && entry.name.toLowerCase().endsWith(".md")) {
+        return [absolutePath];
       }
-    },
-    async ({ type }) => {
-      return withDevToolsAction(
-        runtime2,
-        tabManager,
-        "devtools_get_storage",
-        { type },
-        async () => {
-          const session = getOrCreateSession(tabManager);
-          const data = await session.getStorage(type);
-          const count = Object.keys(data.entries).length;
-          if (count === 0) {
-            return `No ${type} entries found for ${data.origin}`;
-          }
-          return JSON.stringify(data, null, 2);
-        }
-      );
-    }
+      return [];
+    })
   );
-  server.registerTool(
-    "vessel_devtools_set_storage",
-    {
-      title: "DevTools: Set Storage",
-      description: "Set or remove a key in localStorage or sessionStorage for the active tab. This is a dangerous action that modifies page state.",
-      inputSchema: {
-        type: zod.z.enum(["localStorage", "sessionStorage"]).describe("Storage type to modify"),
-        key: zod.z.string().describe("Storage key"),
-        value: zod.z.string().nullable().describe("Value to set, or null to remove the key")
-      }
-    },
-    async ({ type, key: key2, value }) => {
-      return withDevToolsAction(
-        runtime2,
-        tabManager,
-        "devtools_set_storage",
-        { type, key: key2, value: value ? value.slice(0, 100) : null },
-        async () => {
-          const session = getOrCreateSession(tabManager);
-          return session.setStorage(type, key2, value);
-        }
-      );
-    }
+  return nestedFiles.flat();
+}
+async function toSummary(absolutePath, vaultRoot, raw) {
+  const stats = await stat(absolutePath);
+  const relativePath = path$1.relative(vaultRoot, absolutePath).split(path$1.sep).join("/");
+  const noteContent = raw ?? await readFile$1(absolutePath, "utf-8");
+  const parsed = parseFrontmatter(noteContent);
+  const headingMatch = parsed.body.match(/^#\s+(.+)$/m);
+  const title = parsed.title || headingMatch?.[1]?.trim() || path$1.basename(absolutePath, ".md");
+  return {
+    title,
+    absolutePath,
+    relativePath,
+    modifiedAt: stats.mtime.toISOString(),
+    tags: parsed.tags
+  };
+}
+function renderBookmarkLinkBlock(bookmark, note) {
+  const lines = [
+    "## Linked Bookmark",
+    "",
+    `- Bookmark ID: \`${bookmark.id}\``,
+    `- Title: ${bookmark.title || bookmark.url}`,
+    `- URL: [${bookmark.url}](${bookmark.url})`,
+    `- Saved At: ${bookmark.savedAt}`
+  ];
+  if (note?.trim()) {
+    lines.push("", "### Context", "", note.trim());
+  }
+  return `${lines.join("\n")}
+`;
+}
+async function writeMemoryNote({
+  title,
+  body,
+  folder,
+  tags = [],
+  frontmatter = {}
+}) {
+  const vaultRoot = getVaultRoot();
+  const relativeFolder = normalizeFolder(folder, DEFAULT_NOTE_FOLDER);
+  const targetDir = path$1.join(vaultRoot, relativeFolder);
+  await mkdir$1(targetDir, { recursive: true });
+  const absolutePath = await buildUniqueNotePath(targetDir, title);
+  const relativePath = path$1.relative(vaultRoot, absolutePath);
+  const content = [
+    renderFrontmatter({
+      title,
+      created_at: (/* @__PURE__ */ new Date()).toISOString(),
+      tags,
+      ...frontmatter
+    }),
+    body.trim(),
+    ""
+  ].join("\n");
+  await writeFile$1(absolutePath, content, "utf-8");
+  return {
+    title,
+    absolutePath,
+    relativePath: relativePath.split(path$1.sep).join("/")
+  };
+}
+async function appendToMemoryNote({
+  notePath,
+  content,
+  heading
+}) {
+  const vaultRoot = getVaultRoot();
+  const relativePath = normalizeNotePath(notePath);
+  const absolutePath = assertInsideVault(
+    path$1.join(vaultRoot, relativePath),
+    vaultRoot
   );
-  server.registerTool(
-    "vessel_devtools_performance",
-    {
-      title: "DevTools: Performance Snapshot",
-      description: "Get a performance snapshot for the active tab including navigation timing, paint metrics, memory usage, and resource loading statistics."
-    },
-    async () => {
-      return withDevToolsAction(
-        runtime2,
-        tabManager,
-        "devtools_performance",
-        {},
-        async () => {
-          const session = getOrCreateSession(tabManager);
-          const snapshot2 = await session.getPerformanceSnapshot();
-          return JSON.stringify(snapshot2, null, 2);
-        }
-      );
-    }
+  if (!await pathExists$1(absolutePath)) {
+    throw new Error(
+      `Memory note not found: ${relativePath.split(path$1.sep).join("/")}`
+    );
+  }
+  const current = (await readFile$1(absolutePath, "utf-8")).trimEnd();
+  const nextParts = [current, ""];
+  if (heading?.trim()) {
+    nextParts.push(`## ${heading.trim()}`, "");
+  }
+  nextParts.push(content.trim(), "");
+  await writeFile$1(absolutePath, nextParts.join("\n"), "utf-8");
+  return {
+    title: path$1.basename(absolutePath, ".md"),
+    absolutePath,
+    relativePath: relativePath.split(path$1.sep).join("/")
+  };
+}
+async function listMemoryNotes({
+  folder,
+  limit = DEFAULT_LIST_LIMIT
+} = {}) {
+  const vaultRoot = getVaultRoot();
+  const relativeFolder = normalizeFolder(folder, "");
+  const targetDir = relativeFolder ? path$1.join(vaultRoot, relativeFolder) : vaultRoot;
+  if (!await pathExists$1(targetDir)) {
+    return [];
+  }
+  const notes = await Promise.all(
+    (await collectMarkdownFiles(targetDir)).map(
+      (absolutePath) => toSummary(absolutePath, vaultRoot)
+    )
   );
-  server.registerTool(
-    "vessel_devtools_get_errors",
-    {
-      title: "DevTools: Get Errors",
-      description: "Get captured JavaScript errors and unhandled promise rejections from the active tab. Automatically starts capturing on first use.",
-      inputSchema: {
-        type: zod.z.enum(["exception", "unhandled-rejection"]).optional().describe("Filter by error type"),
-        limit: zod.z.number().optional().describe("Maximum number of entries to return (default: all)")
-      }
-    },
-    async ({ type, limit }) => {
-      return withDevToolsAction(
-        runtime2,
-        tabManager,
-        "devtools_get_errors",
-        { type, limit },
-        async () => {
-          const session = getOrCreateSession(tabManager);
-          await session.ensureErrorCapture();
-          const entries = session.getErrors({ type, limit });
-          if (entries.length === 0) {
-            return "No errors captured yet. Error monitoring is now active — exceptions and unhandled rejections will be captured as they occur.";
-          }
-          return JSON.stringify(entries, null, 2);
-        }
+  return notes.sort((a, b) => b.modifiedAt.localeCompare(a.modifiedAt)).slice(0, Math.max(1, limit));
+}
+async function searchMemoryNotes({
+  query,
+  folder,
+  tags = [],
+  limit = DEFAULT_SEARCH_LIMIT
+}) {
+  const loweredQuery = query.trim().toLowerCase();
+  if (!loweredQuery) {
+    throw new Error("A non-empty memory search query is required.");
+  }
+  const vaultRoot = getVaultRoot();
+  const relativeFolder = normalizeFolder(folder, "");
+  const targetDir = relativeFolder ? path$1.join(vaultRoot, relativeFolder) : vaultRoot;
+  if (!await pathExists$1(targetDir)) {
+    return [];
+  }
+  const loweredTags = tags.map((tag) => tag.trim().toLowerCase()).filter(Boolean);
+  const matches = await Promise.all(
+    (await collectMarkdownFiles(targetDir)).map(async (absolutePath) => {
+      const raw = await readFile$1(absolutePath, "utf-8");
+      const parsed = parseFrontmatter(raw);
+      const summary = await toSummary(absolutePath, vaultRoot, raw);
+      const haystack = `${summary.title}
+${summary.relativePath}
+${parsed.body}`.toLowerCase();
+      const hasQuery = haystack.includes(loweredQuery);
+      const hasTags = loweredTags.length === 0 || loweredTags.every(
+        (tag) => summary.tags.some((noteTag) => noteTag.toLowerCase() === tag)
       );
-    }
+      return hasQuery && hasTags ? summary : null;
+    })
   );
-  server.registerTool(
-    "vessel_devtools_clear_errors",
-    {
-      title: "DevTools: Clear Errors",
-      description: "Clear the captured error buffer for the active tab."
-    },
-    async () => {
-      return withDevToolsAction(
-        runtime2,
-        tabManager,
-        "devtools_clear_errors",
-        {},
-        async () => {
-          const session = getOrCreateSession(tabManager);
-          const count = session.clearErrors();
-          return `Cleared ${count} error entries.`;
-        }
-      );
+  return matches.filter((item) => item !== null).sort((a, b) => b.modifiedAt.localeCompare(a.modifiedAt)).slice(0, Math.max(1, limit));
+}
+async function capturePageToVault({
+  page,
+  title,
+  folder,
+  summary,
+  note,
+  tags = []
+}) {
+  const noteTitle = title?.trim() || page.title.trim() || page.url;
+  const bodyLines = [
+    `# ${noteTitle}`,
+    "",
+    `Source: [${page.title || page.url}](${page.url})`,
+    `Captured: ${(/* @__PURE__ */ new Date()).toISOString()}`
+  ];
+  if (page.byline) {
+    bodyLines.push(`Byline: ${page.byline}`);
+  }
+  bodyLines.push("");
+  if (summary?.trim()) {
+    bodyLines.push("## Summary", "", summary.trim(), "");
+  }
+  if (note?.trim()) {
+    bodyLines.push("## Research Note", "", note.trim(), "");
+  }
+  if (page.excerpt.trim()) {
+    bodyLines.push("## Excerpt", "", page.excerpt.trim(), "");
+  }
+  const snapshot2 = trimContent(page.content);
+  if (snapshot2) {
+    bodyLines.push("## Page Snapshot", "", snapshot2, "");
+  }
+  return await writeMemoryNote({
+    title: noteTitle,
+    body: bodyLines.join("\n"),
+    folder: folder || DEFAULT_PAGE_FOLDER,
+    tags,
+    frontmatter: {
+      source_url: page.url,
+      source_title: page.title || page.url
     }
-  );
+  });
+}
+async function linkBookmarkToMemory({
+  bookmark,
+  notePath,
+  title,
+  folder,
+  note,
+  tags = []
+}) {
+  if (notePath?.trim()) {
+    return await appendToMemoryNote({
+      notePath,
+      heading: "Linked Bookmark",
+      content: [
+        `- Bookmark ID: \`${bookmark.id}\``,
+        `- Title: ${bookmark.title || bookmark.url}`,
+        `- URL: [${bookmark.url}](${bookmark.url})`,
+        `- Saved At: ${bookmark.savedAt}`,
+        note?.trim() ? `- Note: ${note.trim()}` : ""
+      ].filter(Boolean).join("\n")
+    });
+  }
+  const noteTitle = title?.trim() || bookmark.title || bookmark.url;
+  return await writeMemoryNote({
+    title: noteTitle,
+    body: renderBookmarkLinkBlock(bookmark, note),
+    folder: folder || DEFAULT_BOOKMARK_FOLDER,
+    tags,
+    frontmatter: {
+      bookmark_id: bookmark.id,
+      source_url: bookmark.url,
+      source_title: bookmark.title || bookmark.url
+    }
+  });
 }
 const logger$f = createLogger("MCP");
 function asTextResponse(text) {
@@ -23485,95 +23670,246 @@ function registerBookmarkTools(server, tabManager, runtime2) {
         )
       }
     },
-    async ({ folder_id, delete_contents }) => {
+    async ({ folder_id, delete_contents }) => {
+      return withAction(
+        runtime2,
+        tabManager,
+        "remove_bookmark_folder",
+        { folder_id, delete_contents },
+        async () => {
+          const removed = removeFolder(
+            folder_id,
+            delete_contents
+          );
+          if (!removed) return `Folder ${folder_id} not found`;
+          return composeFolderAwareResponse$1(
+            delete_contents ? `Removed folder ${folder_id} and deleted its bookmarks.` : `Removed folder ${folder_id}. Bookmarks moved to Unsorted.`
+          );
+        }
+      );
+    }
+  );
+  server.registerTool(
+    "folder_rename",
+    {
+      title: "Rename Bookmark Folder",
+      description: "Rename an existing bookmark folder.",
+      inputSchema: {
+        folder_id: zod.z.string().describe("ID of the folder to rename"),
+        new_name: zod.z.string().describe("New name for the folder"),
+        summary: zod.z.string().optional().describe("Optional one-sentence summary for the folder")
+      }
+    },
+    async ({ folder_id, new_name, summary }) => {
+      return withAction(
+        runtime2,
+        tabManager,
+        "rename_bookmark_folder",
+        { folder_id, new_name, summary },
+        async () => {
+          const existing = findFolderByName(new_name);
+          if (existing && existing.id !== folder_id) {
+            return composeFolderAwareResponse$1(
+              `Folder "${existing.name}" already exists (id=${existing.id})`
+            );
+          }
+          const folder = renameFolder(
+            folder_id,
+            new_name,
+            summary
+          );
+          return folder ? composeFolderAwareResponse$1(`Renamed folder to "${folder.name}"`) : `Folder ${folder_id} not found`;
+        }
+      );
+    }
+  );
+  server.registerTool(
+    "memory_link_bookmark",
+    {
+      title: "Link Bookmark To Memory",
+      description: "Create a note for a bookmark or append bookmark details into an existing memory note.",
+      inputSchema: {
+        bookmark_id: zod.z.string().describe("Bookmark ID to link"),
+        note_path: zod.z.string().optional().describe("Existing relative note path to append into"),
+        title: zod.z.string().optional().describe("Optional title when creating a new note"),
+        folder: zod.z.string().optional().describe("Relative folder when creating a new note"),
+        note: zod.z.string().optional().describe(
+          "Optional rationale or breadcrumb to store with the bookmark"
+        ),
+        tags: zod.z.array(zod.z.string()).optional().describe("Optional tags when creating a new note")
+      }
+    },
+    async ({ bookmark_id, note_path, title, folder, note, tags }) => {
+      return withAction(
+        runtime2,
+        tabManager,
+        "memory_link_bookmark",
+        { bookmark_id, note_path, title, folder, tags },
+        async () => {
+          const bookmark = getBookmark(bookmark_id);
+          if (!bookmark) {
+            return `Bookmark ${bookmark_id} not found`;
+          }
+          const saved = await linkBookmarkToMemory({
+            bookmark,
+            notePath: note_path,
+            title,
+            folder,
+            note,
+            tags
+          });
+          return `Linked bookmark "${bookmark.title}" to memory note ${saved.relativePath}`;
+        }
+      );
+    }
+  );
+}
+function registerMemoryTools(server, tabManager, runtime2) {
+  server.registerTool(
+    "memory_note_create",
+    {
+      title: "Create Memory Note",
+      description: "Write a markdown note into the configured Obsidian vault for research notes, breadcrumbs, or synthesis.",
+      inputSchema: {
+        title: zod.z.string().describe("Title of the note"),
+        body: zod.z.string().describe("Markdown body for the note"),
+        folder: zod.z.string().optional().describe(
+          "Relative folder inside the vault (default: Vessel/Research)"
+        ),
+        tags: zod.z.array(zod.z.string()).optional().describe("Optional tags to store in frontmatter")
+      }
+    },
+    async ({ title, body, folder, tags }) => {
+      return withAction(
+        runtime2,
+        tabManager,
+        "memory_note_create",
+        { title, folder, tags },
+        async () => {
+          const saved = await writeMemoryNote({ title, body, folder, tags });
+          return `Saved memory note "${saved.title}" to ${saved.relativePath}`;
+        }
+      );
+    }
+  );
+  server.registerTool(
+    "memory_append",
+    {
+      title: "Append Memory Note",
+      description: "Append markdown content to an existing note in the configured Obsidian vault.",
+      inputSchema: {
+        note_path: zod.z.string().describe("Relative path to an existing note inside the vault"),
+        content: zod.z.string().describe("Markdown content to append"),
+        heading: zod.z.string().optional().describe("Optional section heading to add before the content")
+      }
+    },
+    async ({ note_path, content, heading }) => {
+      return withAction(
+        runtime2,
+        tabManager,
+        "memory_note_append",
+        { note_path, heading },
+        async () => {
+          const saved = await appendToMemoryNote({
+            notePath: note_path,
+            content,
+            heading
+          });
+          return `Appended memory note at ${saved.relativePath}`;
+        }
+      );
+    }
+  );
+  server.registerTool(
+    "memory_list",
+    {
+      title: "List Memory Notes",
+      description: "List recent markdown notes in the configured Obsidian vault.",
+      inputSchema: {
+        folder: zod.z.string().optional().describe("Optional relative folder inside the vault"),
+        limit: zod.z.number().int().positive().max(200).optional().describe("Maximum number of notes to return")
+      }
+    },
+    async ({ folder, limit }) => {
       return withAction(
         runtime2,
         tabManager,
-        "remove_bookmark_folder",
-        { folder_id, delete_contents },
+        "memory_note_list",
+        { folder, limit },
         async () => {
-          const removed = removeFolder(
-            folder_id,
-            delete_contents
-          );
-          if (!removed) return `Folder ${folder_id} not found`;
-          return composeFolderAwareResponse$1(
-            delete_contents ? `Removed folder ${folder_id} and deleted its bookmarks.` : `Removed folder ${folder_id}. Bookmarks moved to Unsorted.`
-          );
+          const notes = await listMemoryNotes({ folder, limit });
+          if (notes.length === 0) {
+            return "No memory notes found.";
+          }
+          return notes.map(
+            (note) => `- ${note.title} | path=${note.relativePath} | modified=${note.modifiedAt}${note.tags.length ? ` | tags=${note.tags.join(",")}` : ""}`
+          ).join("\n");
         }
       );
     }
   );
   server.registerTool(
-    "folder_rename",
+    "memory_search",
     {
-      title: "Rename Bookmark Folder",
-      description: "Rename an existing bookmark folder.",
+      title: "Search Memory Notes",
+      description: "Search markdown notes in the configured Obsidian vault by title, path, body, and optional tags.",
       inputSchema: {
-        folder_id: zod.z.string().describe("ID of the folder to rename"),
-        new_name: zod.z.string().describe("New name for the folder"),
-        summary: zod.z.string().optional().describe("Optional one-sentence summary for the folder")
+        query: zod.z.string().describe("Search query"),
+        folder: zod.z.string().optional().describe("Optional relative folder inside the vault"),
+        tags: zod.z.array(zod.z.string()).optional().describe("Optional tags that matching notes must contain"),
+        limit: zod.z.number().int().positive().max(100).optional().describe("Maximum number of matching notes to return")
       }
     },
-    async ({ folder_id, new_name, summary }) => {
+    async ({ query, folder, tags, limit }) => {
       return withAction(
         runtime2,
         tabManager,
-        "rename_bookmark_folder",
-        { folder_id, new_name, summary },
+        "memory_note_search",
+        { query, folder, tags, limit },
         async () => {
-          const existing = findFolderByName(new_name);
-          if (existing && existing.id !== folder_id) {
-            return composeFolderAwareResponse$1(
-              `Folder "${existing.name}" already exists (id=${existing.id})`
-            );
+          const notes = await searchMemoryNotes({ query, folder, tags, limit });
+          if (notes.length === 0) {
+            return `No memory notes matched "${query}".`;
           }
-          const folder = renameFolder(
-            folder_id,
-            new_name,
-            summary
-          );
-          return folder ? composeFolderAwareResponse$1(`Renamed folder to "${folder.name}"`) : `Folder ${folder_id} not found`;
+          return notes.map(
+            (note) => `- ${note.title} | path=${note.relativePath} | modified=${note.modifiedAt}${note.tags.length ? ` | tags=${note.tags.join(",")}` : ""}`
+          ).join("\n");
         }
       );
     }
   );
   server.registerTool(
-    "memory_link_bookmark",
+    "memory_page_capture",
     {
-      title: "Link Bookmark To Memory",
-      description: "Create a note for a bookmark or append bookmark details into an existing memory note.",
+      title: "Capture Page To Memory",
+      description: "Capture the current page into the configured Obsidian vault as a markdown note with URL, excerpt, and content snapshot.",
       inputSchema: {
-        bookmark_id: zod.z.string().describe("Bookmark ID to link"),
-        note_path: zod.z.string().optional().describe("Existing relative note path to append into"),
-        title: zod.z.string().optional().describe("Optional title when creating a new note"),
-        folder: zod.z.string().optional().describe("Relative folder when creating a new note"),
-        note: zod.z.string().optional().describe(
-          "Optional rationale or breadcrumb to store with the bookmark"
-        ),
-        tags: zod.z.array(zod.z.string()).optional().describe("Optional tags when creating a new note")
+        title: zod.z.string().optional().describe("Optional note title override"),
+        folder: zod.z.string().optional().describe("Relative folder inside the vault (default: Vessel/Pages)"),
+        summary: zod.z.string().optional().describe("Optional summary written into the note"),
+        note: zod.z.string().optional().describe("Optional research note or breadcrumb"),
+        tags: zod.z.array(zod.z.string()).optional().describe("Optional tags to store in frontmatter")
       }
     },
-    async ({ bookmark_id, note_path, title, folder, note, tags }) => {
+    async ({ title, folder, summary, note, tags }) => {
+      const tab = tabManager.getActiveTab();
+      if (!tab) return asNoActiveTabResponse();
       return withAction(
         runtime2,
         tabManager,
-        "memory_link_bookmark",
-        { bookmark_id, note_path, title, folder, tags },
+        "memory_page_capture",
+        { title, folder, tags },
         async () => {
-          const bookmark = getBookmark(bookmark_id);
-          if (!bookmark) {
-            return `Bookmark ${bookmark_id} not found`;
-          }
-          const saved = linkBookmarkToMemory({
-            bookmark,
-            notePath: note_path,
+          const page = await extractContent$1(tab.view.webContents);
+          const saved = await capturePageToVault({
+            page,
             title,
             folder,
+            summary,
             note,
             tags
           });
-          return `Linked bookmark "${bookmark.title}" to memory note ${saved.relativePath}`;
+          return `Captured page "${saved.title}" to ${saved.relativePath}`;
         }
       );
     }
@@ -23822,7 +24158,7 @@ function domainMatches(pattern, hostname) {
   return isWildcard ? h.endsWith("." + p) : p === h;
 }
 function generateTotpCode(secret) {
-  const epoch = Math.floor(Date.now() / 1e3);
+  const epoch = unixNow();
   const counter = Math.floor(epoch / 30);
   const base32Chars = "ABCDEFGHIJKLMNOPQRSTUVWXYZ234567";
   const cleanSecret = secret.replace(/[\s=-]/g, "").toUpperCase();
@@ -23867,7 +24203,8 @@ function createAuditLog(filename, maxEntries) {
           });
           fs$1.chmodSync(auditPath, 384);
         }
-      } catch {
+      } catch (err) {
+        logger$e.warn("Failed to trim audit log:", err);
       }
     } catch (err) {
       logger$e.error("Failed to write audit log:", err);
@@ -25436,7 +25773,7 @@ To analyze visually, call vision_analyze with image_url="${screenshotPath}"`
         )
       }
     },
-    async ({ index, selector, text, label, durationMs, persist: persist2, color }) => {
+    async ({ index, selector, text, label, durationMs, persist, color }) => {
       const tab = tabManager.getActiveTab();
       if (!tab) return asNoActiveTabResponse();
       const normalizedText = normalizeLooseString(text);
@@ -25450,7 +25787,7 @@ To analyze visually, call vision_analyze with image_url="${screenshotPath}"`
           text: normalizedText,
           label,
           durationMs,
-          persist: persist2,
+          persist,
           color
         },
         async () => {
@@ -25464,7 +25801,7 @@ To analyze visually, call vision_analyze with image_url="${screenshotPath}"`
             durationMs,
             color
           );
-          if (persist2 && !durationMs && !result.startsWith("Error") && !result.includes("not found")) {
+          if (persist && !durationMs && !result.startsWith("Error") && !result.includes("not found")) {
             const url = normalizeUrl$1(wc.getURL());
             addHighlight(
               url,
@@ -25637,155 +25974,7 @@ ${JSON.stringify(otherHighlights, null, 2)}`
   );
   registerBookmarkTools(server, tabManager, runtime2);
   registerSessionTools(server, tabManager, runtime2);
-  server.registerTool(
-    "memory_note_create",
-    {
-      title: "Create Memory Note",
-      description: "Write a markdown note into the configured Obsidian vault for research notes, breadcrumbs, or synthesis.",
-      inputSchema: {
-        title: zod.z.string().describe("Title of the note"),
-        body: zod.z.string().describe("Markdown body for the note"),
-        folder: zod.z.string().optional().describe(
-          "Relative folder inside the vault (default: Vessel/Research)"
-        ),
-        tags: zod.z.array(zod.z.string()).optional().describe("Optional tags to store in frontmatter")
-      }
-    },
-    async ({ title, body, folder, tags }) => {
-      return withAction(
-        runtime2,
-        tabManager,
-        "memory_note_create",
-        { title, folder, tags },
-        async () => {
-          const saved = writeMemoryNote({ title, body, folder, tags });
-          return `Saved memory note "${saved.title}" to ${saved.relativePath}`;
-        }
-      );
-    }
-  );
-  server.registerTool(
-    "memory_append",
-    {
-      title: "Append Memory Note",
-      description: "Append markdown content to an existing note in the configured Obsidian vault.",
-      inputSchema: {
-        note_path: zod.z.string().describe("Relative path to an existing note inside the vault"),
-        content: zod.z.string().describe("Markdown content to append"),
-        heading: zod.z.string().optional().describe("Optional section heading to add before the content")
-      }
-    },
-    async ({ note_path, content, heading }) => {
-      return withAction(
-        runtime2,
-        tabManager,
-        "memory_note_append",
-        { note_path, heading },
-        async () => {
-          const saved = appendToMemoryNote({
-            notePath: note_path,
-            content,
-            heading
-          });
-          return `Appended memory note at ${saved.relativePath}`;
-        }
-      );
-    }
-  );
-  server.registerTool(
-    "memory_list",
-    {
-      title: "List Memory Notes",
-      description: "List recent markdown notes in the configured Obsidian vault.",
-      inputSchema: {
-        folder: zod.z.string().optional().describe("Optional relative folder inside the vault"),
-        limit: zod.z.number().int().positive().max(200).optional().describe("Maximum number of notes to return")
-      }
-    },
-    async ({ folder, limit }) => {
-      return withAction(
-        runtime2,
-        tabManager,
-        "memory_note_list",
-        { folder, limit },
-        async () => {
-          const notes = listMemoryNotes({ folder, limit });
-          if (notes.length === 0) {
-            return "No memory notes found.";
-          }
-          return notes.map(
-            (note) => `- ${note.title} | path=${note.relativePath} | modified=${note.modifiedAt}${note.tags.length ? ` | tags=${note.tags.join(",")}` : ""}`
-          ).join("\n");
-        }
-      );
-    }
-  );
-  server.registerTool(
-    "memory_search",
-    {
-      title: "Search Memory Notes",
-      description: "Search markdown notes in the configured Obsidian vault by title, path, body, and optional tags.",
-      inputSchema: {
-        query: zod.z.string().describe("Search query"),
-        folder: zod.z.string().optional().describe("Optional relative folder inside the vault"),
-        tags: zod.z.array(zod.z.string()).optional().describe("Optional tags that matching notes must contain"),
-        limit: zod.z.number().int().positive().max(100).optional().describe("Maximum number of matching notes to return")
-      }
-    },
-    async ({ query, folder, tags, limit }) => {
-      return withAction(
-        runtime2,
-        tabManager,
-        "memory_note_search",
-        { query, folder, tags, limit },
-        async () => {
-          const notes = searchMemoryNotes({ query, folder, tags, limit });
-          if (notes.length === 0) {
-            return `No memory notes matched "${query}".`;
-          }
-          return notes.map(
-            (note) => `- ${note.title} | path=${note.relativePath} | modified=${note.modifiedAt}${note.tags.length ? ` | tags=${note.tags.join(",")}` : ""}`
-          ).join("\n");
-        }
-      );
-    }
-  );
-  server.registerTool(
-    "memory_page_capture",
-    {
-      title: "Capture Page To Memory",
-      description: "Capture the current page into the configured Obsidian vault as a markdown note with URL, excerpt, and content snapshot.",
-      inputSchema: {
-        title: zod.z.string().optional().describe("Optional note title override"),
-        folder: zod.z.string().optional().describe("Relative folder inside the vault (default: Vessel/Pages)"),
-        summary: zod.z.string().optional().describe("Optional summary written into the note"),
-        note: zod.z.string().optional().describe("Optional research note or breadcrumb"),
-        tags: zod.z.array(zod.z.string()).optional().describe("Optional tags to store in frontmatter")
-      }
-    },
-    async ({ title, folder, summary, note, tags }) => {
-      const tab = tabManager.getActiveTab();
-      if (!tab) return asNoActiveTabResponse();
-      return withAction(
-        runtime2,
-        tabManager,
-        "memory_page_capture",
-        { title, folder, tags },
-        async () => {
-          const page = await extractContent$1(tab.view.webContents);
-          const saved = capturePageToVault({
-            page,
-            title,
-            folder,
-            summary,
-            note,
-            tags
-          });
-          return `Captured page "${saved.title}" to ${saved.relativePath}`;
-        }
-      );
-    }
-  );
+  registerMemoryTools(server, tabManager, runtime2);
   server.registerTool(
     "flow_start",
     {
@@ -27464,15 +27653,21 @@ function isSafeAutomationKitId(id) {
   return id.length > 0 && !KIT_ID_UNSAFE_CHAR_PATTERN.test(id);
 }
 const logger$9 = createLogger("KitRegistry");
+const { access, mkdir, readFile, readdir, unlink, writeFile } = fs$1.promises;
 function getUserKitsDir() {
   return path$1.join(electron.app.getPath("userData"), "kits");
 }
-function ensureKitsDir() {
-  const dir = getUserKitsDir();
-  if (!fs$1.existsSync(dir)) {
-    fs$1.mkdirSync(dir, { recursive: true });
+async function pathExists(filePath2) {
+  try {
+    await access(filePath2);
+    return true;
+  } catch {
+    return false;
   }
 }
+async function ensureKitsDir() {
+  await mkdir(getUserKitsDir(), { recursive: true });
+}
 function getKitFilePath(id) {
   if (!isSafeAutomationKitId(id)) return null;
   const kitsDir = path$1.resolve(getUserKitsDir());
@@ -27484,12 +27679,12 @@ function isValidKit(value) {
   const k = value;
   return typeof k.id === "string" && isSafeAutomationKitId(k.id) && typeof k.name === "string" && k.name.length > 0 && typeof k.description === "string" && typeof k.category === "string" && VALID_KIT_CATEGORIES.has(k.category) && typeof k.icon === "string" && typeof k.promptTemplate === "string" && k.promptTemplate.length > 0 && Array.isArray(k.inputs);
 }
-function getInstalledKits() {
-  ensureKitsDir();
+async function getInstalledKits() {
+  await ensureKitsDir();
   const dir = getUserKitsDir();
   let files;
   try {
-    files = fs$1.readdirSync(dir).filter((f) => f.endsWith(".kit.json"));
+    files = (await readdir(dir)).filter((f) => f.endsWith(".kit.json"));
   } catch (err) {
     logger$9.warn("Failed to read kit directory:", err);
     return [];
@@ -27497,7 +27692,7 @@ function getInstalledKits() {
   const kits = [];
   for (const file of files) {
     try {
-      const raw = fs$1.readFileSync(path$1.join(dir, file), "utf-8");
+      const raw = await readFile(path$1.join(dir, file), "utf-8");
       const parsed = JSON.parse(raw);
       if (isValidKit(parsed)) {
         kits.push(parsed);
@@ -27521,7 +27716,7 @@ async function installKitFromFile() {
   }
   let raw;
   try {
-    raw = fs$1.readFileSync(filePaths[0], "utf-8");
+    raw = await readFile(filePaths[0], "utf-8");
   } catch (err) {
     logger$9.warn("Failed to read selected kit file:", err);
     return errorResult("Could not read the selected file.");
@@ -27543,20 +27738,20 @@ async function installKitFromFile() {
       `Kit id "${parsed.id}" conflicts with a built-in kit and cannot be overwritten.`
     );
   }
-  ensureKitsDir();
+  await ensureKitsDir();
   const dest = getKitFilePath(parsed.id);
   if (!dest) {
     return errorResult("Kit id contains unsupported characters.");
   }
   try {
-    fs$1.writeFileSync(dest, JSON.stringify(parsed, null, 2), "utf-8");
+    await writeFile(dest, JSON.stringify(parsed, null, 2), "utf-8");
   } catch (err) {
     logger$9.warn("Failed to save kit file:", err);
     return errorResult("Failed to save the kit file.");
   }
   return okResult({ kit: parsed });
 }
-function uninstallKit(id, scheduledKitIds) {
+async function uninstallKit(id, scheduledKitIds) {
   if (BUNDLED_KIT_IDS.has(id)) {
     return errorResult("Built-in kits cannot be removed.");
   }
@@ -27565,16 +27760,16 @@ function uninstallKit(id, scheduledKitIds) {
       "This kit has active scheduled jobs. Delete or reassign them first."
     );
   }
-  ensureKitsDir();
+  await ensureKitsDir();
   const target = getKitFilePath(id);
   if (!target) {
     return errorResult("Kit id contains unsupported characters.");
   }
-  if (!fs$1.existsSync(target)) {
+  if (!await pathExists(target)) {
     return errorResult("Kit not found.");
   }
   try {
-    fs$1.unlinkSync(target);
+    await unlink(target);
     return okResult();
   } catch (err) {
     logger$9.warn("Failed to remove kit file:", err);
@@ -27910,17 +28105,20 @@ function registerSystemHandlers(windowState2, sendToRendererViews) {
     layoutViews(windowState2);
     return clamped;
   });
-  electron.ipcMain.handle(Channels.AUTOMATION_GET_INSTALLED, (event) => {
+  electron.ipcMain.handle(Channels.AUTOMATION_GET_INSTALLED, async (event) => {
     assertTrustedIpcSender(event);
-    return getInstalledKits();
+    return await getInstalledKits();
   });
   electron.ipcMain.handle(Channels.AUTOMATION_INSTALL_FROM_FILE, async (event) => {
     assertTrustedIpcSender(event);
     return await installKitFromFile();
   });
-  electron.ipcMain.handle(Channels.AUTOMATION_UNINSTALL, (event, id) => {
+  electron.ipcMain.handle(Channels.AUTOMATION_UNINSTALL, async (event, id) => {
     assertTrustedIpcSender(event);
-    return uninstallKit(parseIpc(KitIdSchema, id, "id"), getScheduledKitIds());
+    return await uninstallKit(
+      parseIpc(KitIdSchema, id, "id"),
+      getScheduledKitIds()
+    );
   });
   electron.ipcMain.handle(Channels.CLEAR_BROWSING_DATA, async (event, options) => {
     assertTrustedIpcSender(event);
@@ -27984,6 +28182,25 @@ function registerSystemHandlers(windowState2, sendToRendererViews) {
     return togglePictureInPicture(tabManager);
   });
 }
+const FolderNameSchema = zod.z.string().min(1);
+const BookmarkUrlSchema = zod.z.string().min(1);
+const BookmarkIdSchema = zod.z.string().min(1);
+const OptionalStringSchema = zod.z.string().optional();
+const OptionalStringArraySchema = zod.z.array(zod.z.string()).optional();
+const OptionalRecordSchema = zod.z.record(zod.z.string(), zod.z.string()).optional();
+const OptionalBooleanSchema = zod.z.boolean().optional();
+const BookmarkUpdateSchema = zod.z.object({
+  title: zod.z.string().optional(),
+  note: zod.z.string().optional(),
+  folderId: zod.z.string().optional(),
+  intent: zod.z.string().optional(),
+  expectedContent: zod.z.string().optional(),
+  keyFields: zod.z.array(zod.z.string()).optional(),
+  agentHints: zod.z.record(zod.z.string(), zod.z.string()).optional()
+});
+const ExportOptionsSchema = zod.z.object({
+  includeNotes: zod.z.boolean().optional()
+}).optional();
 function getSafeBookmarkExportName(name) {
   const safeName = name.trim().toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
   return safeName || "folder";
@@ -27997,23 +28214,33 @@ function registerBookmarkHandlers() {
     Channels.FOLDER_CREATE,
     (event, name, summary) => {
       assertTrustedIpcSender(event);
+      const validatedName = parseIpc(FolderNameSchema, name, "name");
+      const validatedSummary = parseIpc(OptionalStringSchema, summary, "summary");
       trackBookmarkAction("folder_create");
-      return createFolderWithSummary(name, summary);
+      return createFolderWithSummary(validatedName, validatedSummary);
     }
   );
   electron.ipcMain.handle(
     Channels.BOOKMARK_SAVE,
     (event, url, title, folderId, note, intent, expectedContent, keyFields, agentHints) => {
       assertTrustedIpcSender(event);
+      const validatedUrl = parseIpc(BookmarkUrlSchema, url, "url");
+      const validatedTitle = parseIpc(zod.z.string(), title, "title");
+      const validatedFolderId = parseIpc(OptionalStringSchema, folderId, "folderId");
+      const validatedNote = parseIpc(OptionalStringSchema, note, "note");
+      const validatedIntent = parseIpc(OptionalStringSchema, intent, "intent");
+      const validatedExpectedContent = parseIpc(OptionalStringSchema, expectedContent, "expectedContent");
+      const validatedKeyFields = parseIpc(OptionalStringArraySchema, keyFields, "keyFields");
+      const validatedAgentHints = parseIpc(OptionalRecordSchema, agentHints, "agentHints");
       trackBookmarkAction("save");
-      const result = saveBookmarkWithPolicy(url, title, folderId, note, {
+      const result = saveBookmarkWithPolicy(validatedUrl, validatedTitle, validatedFolderId, validatedNote, {
         onDuplicate: "update",
         extra: {
           ...normalizeBookmarkMetadata({
-            intent,
-            expectedContent,
-            keyFields,
-            agentHints
+            intent: validatedIntent,
+            expectedContent: validatedExpectedContent,
+            keyFields: validatedKeyFields,
+            agentHints: validatedAgentHints
           })
         }
       });
@@ -28027,19 +28254,23 @@ function registerBookmarkHandlers() {
     Channels.BOOKMARK_UPDATE,
     (event, id, updates) => {
       assertTrustedIpcSender(event);
+      const validatedId = parseIpc(BookmarkIdSchema, id, "id");
+      const validatedUpdates = parseIpc(BookmarkUpdateSchema, updates, "updates");
       trackBookmarkAction("save");
-      return updateBookmark(id, updates);
+      return updateBookmark(validatedId, validatedUpdates);
     }
   );
   electron.ipcMain.handle(Channels.BOOKMARK_REMOVE, (event, id) => {
     assertTrustedIpcSender(event);
+    const validatedId = parseIpc(BookmarkIdSchema, id, "id");
     trackBookmarkAction("remove");
-    return removeBookmark(id);
+    return removeBookmark(validatedId);
   });
   electron.ipcMain.handle(
     Channels.BOOKMARKS_EXPORT_HTML,
     async (event, options) => {
       assertTrustedIpcSender(event);
+      const validatedOptions = parseIpc(ExportOptionsSchema, options, "options");
       const { canceled, filePath: filePath2 } = await electron.dialog.showSaveDialog({
         title: "Export Bookmarks",
         defaultPath: "vessel-bookmarks.html",
@@ -28047,7 +28278,7 @@ function registerBookmarkHandlers() {
       });
       if (canceled || !filePath2) return null;
       const content = exportBookmarksHtml({
-        includeNotes: options?.includeNotes ?? false
+        includeNotes: validatedOptions?.includeNotes ?? false
       });
       await fs.promises.writeFile(filePath2, content, "utf-8");
       trackBookmarkAction("export");
@@ -28077,7 +28308,9 @@ function registerBookmarkHandlers() {
     Channels.FOLDER_EXPORT_HTML,
     async (event, folderId, options) => {
       assertTrustedIpcSender(event);
-      const folder = getFolder(folderId);
+      const validatedFolderId = parseIpc(BookmarkIdSchema, folderId, "folderId");
+      const validatedOptions = parseIpc(ExportOptionsSchema, options, "options");
+      const folder = getFolder(validatedFolderId);
       if (!folder) return null;
       const { canceled, filePath: filePath2 } = await electron.dialog.showSaveDialog({
         title: `Export ${folder.name}`,
@@ -28085,8 +28318,8 @@ function registerBookmarkHandlers() {
         filters: [{ name: "HTML Bookmarks", extensions: ["html"] }]
       });
       if (canceled || !filePath2) return null;
-      const result = exportBookmarkFolderHtml(folderId, {
-        includeNotes: options?.includeNotes ?? true
+      const result = exportBookmarkFolderHtml(validatedFolderId, {
+        includeNotes: validatedOptions?.includeNotes ?? true
       });
       if (!result) return null;
       await fs.promises.writeFile(filePath2, result.content, "utf-8");
@@ -28127,14 +28360,23 @@ function registerBookmarkHandlers() {
   });
   electron.ipcMain.handle(Channels.FOLDER_REMOVE, (event, id, deleteContents) => {
     assertTrustedIpcSender(event);
+    const validatedId = parseIpc(BookmarkIdSchema, id, "id");
+    const validatedDeleteContents = parseIpc(
+      OptionalBooleanSchema,
+      deleteContents,
+      "deleteContents"
+    );
     trackBookmarkAction("folder_remove");
-    return removeFolder(id, deleteContents ?? false);
+    return removeFolder(validatedId, validatedDeleteContents ?? false);
   });
   electron.ipcMain.handle(
     Channels.FOLDER_RENAME,
     (event, id, newName, summary) => {
       assertTrustedIpcSender(event);
-      return renameFolder(id, newName, summary);
+      const validatedId = parseIpc(BookmarkIdSchema, id, "id");
+      const validatedName = parseIpc(FolderNameSchema, newName, "newName");
+      const validatedSummary = parseIpc(OptionalStringSchema, summary, "summary");
+      return renameFolder(validatedId, validatedName, validatedSummary);
     }
   );
 }
@@ -28399,6 +28641,7 @@ function registerPremiumHandlers(tabManager, sendToRendererViews) {
     return result;
   });
 }
+const SessionNameSchema = zod.z.string().min(1);
 function registerSessionHandlers(tabManager) {
   electron.ipcMain.handle(Channels.SESSION_LIST, (event) => {
     assertTrustedIpcSender(event);
@@ -28406,18 +28649,18 @@ function registerSessionHandlers(tabManager) {
   });
   electron.ipcMain.handle(Channels.SESSION_SAVE, async (event, name) => {
     assertTrustedIpcSender(event);
-    assertString(name, "name");
-    return await saveNamedSession(tabManager, name);
+    const validatedName = parseIpc(SessionNameSchema, name, "name");
+    return await saveNamedSession(tabManager, validatedName);
   });
   electron.ipcMain.handle(Channels.SESSION_LOAD, async (event, name) => {
     assertTrustedIpcSender(event);
-    assertString(name, "name");
-    return await loadNamedSession(tabManager, name);
+    const validatedName = parseIpc(SessionNameSchema, name, "name");
+    return await loadNamedSession(tabManager, validatedName);
   });
   electron.ipcMain.handle(Channels.SESSION_DELETE, (event, name) => {
     assertTrustedIpcSender(event);
-    assertString(name, "name");
-    return deleteNamedSession(name);
+    const validatedName = parseIpc(SessionNameSchema, name, "name");
+    return deleteNamedSession(validatedName);
   });
 }
 const esc = (s) => s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
@@ -30507,7 +30750,8 @@ ${progress}
       const raw = fs$1.readFileSync(getRuntimeStatePath(), "utf-8");
       const parsed = JSON.parse(raw);
       return sanitizePersistence(parsed);
-    } catch {
+    } catch (err) {
+      logger$3.warn("Failed to load persisted runtime state, starting fresh:", err);
       return sanitizePersistence(null);
     }
   }
@@ -30766,7 +31010,7 @@ function findIconBase64() {
   return "";
 }
 function buildSplashHTML(iconSrc) {
-  const imgTag = iconSrc ? `<img class="logo" src="${iconSrc}" alt="" />` : `<div class="logo-fallback">V</div>`;
+  const imgTag = iconSrc ? `<img class="logo" src="${escapeHtml(iconSrc)}" alt="" />` : `<div class="logo-fallback">V</div>`;
   return `<!DOCTYPE html>
 <html>
 <head>
@@ -30906,7 +31150,8 @@ function createSplashWindow() {
     splash.once("closed", () => {
       try {
         fs$1.rmSync(tmpDir, { recursive: true, force: true });
-      } catch {
+      } catch (err) {
+        logger$1.debug("Failed to clean up splash temp dir:", err);
       }
     });
     fs$1.writeFileSync(tmpPath, html, "utf-8");