@quanta-intellect/vessel-browser 0.1.26 → 0.1.28

package/out/main/index.js

@@ -2750,6 +2750,38 @@ function layoutViews(state2) {
     });
   }
 }
+function resizeSidebarViews(state2) {
+  const { mainWindow, sidebarView, devtoolsPanelView, tabManager, uiState } = state2;
+  const [width, height] = mainWindow.getContentSize();
+  const chromeHeight = uiState.focusMode ? 0 : CHROME_HEIGHT;
+  const sidebarWidth = uiState.sidebarOpen ? uiState.sidebarWidth : 0;
+  const devtoolsHeight = uiState.devtoolsPanelOpen ? uiState.devtoolsPanelHeight : 0;
+  const resizeHandleOverlap = 6;
+  const contentWidth = width - sidebarWidth;
+  sidebarView.setBounds({
+    x: width - sidebarWidth - resizeHandleOverlap,
+    y: 0,
+    width: sidebarWidth + resizeHandleOverlap,
+    height
+  });
+  if (uiState.devtoolsPanelOpen) {
+    devtoolsPanelView.setBounds({
+      x: 0,
+      y: height - devtoolsHeight,
+      width: contentWidth,
+      height: devtoolsHeight
+    });
+  }
+  const activeTab = tabManager.getActiveTab();
+  if (activeTab) {
+    activeTab.view.setBounds({
+      x: 0,
+      y: chromeHeight,
+      width: contentWidth,
+      height: height - chromeHeight - devtoolsHeight
+    });
+  }
+}
 const SEARCH_ENGINE_HOSTS = [
   "google.",
   "bing.com",
@@ -5391,8 +5423,8 @@ const PROVIDERS = {
     models: [],
     requiresApiKey: false,
     defaultBaseUrl: "http://localhost:8080/v1",
-    apiKeyPlaceholder: "",
-    apiKeyHint: "Any OpenAI-compatible API endpoint"
+    apiKeyPlaceholder: "Bearer token or API key",
+    apiKeyHint: "Optional — only if your endpoint requires authentication"
   }
 };
 function toOpenAITools(tools) {
@@ -6978,27 +7010,38 @@ function detectPageType(page) {
   const hasPasswordField = page.forms.some(
     (f) => f.fields.some((el) => el.inputType === "password")
   );
-  const hasSearchInput = page.interactiveElements.some(
+  const searchInputs = page.interactiveElements.filter(
     (el) => el.inputType === "search" || el.name === "q" || el.name === "query" || el.name === "search" || (el.placeholder || "").toLowerCase().includes("search")
-  ) || page.forms.some(
+  );
+  const hasSearchInput = searchInputs.length > 0 || page.forms.some(
     (f) => f.fields.some(
       (el) => el.inputType === "search" || el.name === "q" || el.name === "query"
     )
   );
+  const hasVisibleSearchInput = searchInputs.some(
+    (el) => el.visible === true && el.inViewport === true && el.obscured !== true && el.blockedByOverlay !== true
+  );
   const formCount = page.forms.length;
   const hasCart = page.interactiveElements.some(
     (el) => (el.text || "").toLowerCase().includes("cart") || (el.text || "").toLowerCase().includes("checkout")
   ) || url.includes("cart") || url.includes("checkout");
-  const hasResults = page.interactiveElements.filter((el) => el.type === "link").length > 10;
+  const contentLinks = page.interactiveElements.filter(
+    (el) => el.type === "link" && el.context !== "nav" && el.context !== "header" && el.context !== "sidebar" && (el.href || "").startsWith("http")
+  );
+  const hasResults = contentLinks.length > 10;
   const hasPagination = page.interactiveElements.some(
     (el) => (el.text || "").toLowerCase() === "next" || el.text === "›" || el.text === "»" || (el.label || "").toLowerCase().includes("next page")
   );
+  const listingLike = isSearchOrListingPage(page) || hasPagination || /[?&](d|q|query|search)=/.test(url) || /\/(search|results)\b/.test(url) || /\/p\/pl\b/.test(url);
   if (hasPasswordField) return "LOGIN";
-  if (hasSearchInput && !hasResults) return "SEARCH_READY";
-  if (hasResults && hasSearchInput) return "SEARCH_RESULTS";
+  if (hasSearchInput && hasVisibleSearchInput && !listingLike) {
+    return "SEARCH_READY";
+  }
+  if (hasResults && hasSearchInput && listingLike) return "SEARCH_RESULTS";
   if (hasCart) return "SHOPPING";
   if (formCount > 0 && !hasPasswordField) return "FORM";
-  if (hasPagination) return "PAGINATED_LIST";
+  if (hasPagination && listingLike) return "PAGINATED_LIST";
+  if (hasSearchInput && !listingLike) return "SEARCH_READY";
   if (page.content.length > 3e3 && page.interactiveElements.length < 10)
     return "ARTICLE";
   return "GENERAL";
@@ -7030,6 +7073,9 @@ function analyzePageIntent(page) {
       hints.push(
         "Suggested: vessel_search → auto-finds search box, types query, and submits"
       );
+      hints.push(
+        "Treat the visible site search box as the primary navigation control before jumping to direct URLs."
+      );
       break;
     case "SEARCH_RESULTS":
       hints.push("Page type: SEARCH RESULTS");
@@ -7918,6 +7964,16 @@ const CONTEXT_HINTS = {
 function scoreForContext(toolName, pageType) {
   const def = defByName[toolName];
   if (!def) return 500;
+  if (pageType === "SEARCH_READY") {
+    if (toolName === "search") return -20;
+    if (toolName === "type_text") return 5;
+    if (toolName === "press_key") return 6;
+  }
+  if (pageType === "SEARCH_RESULTS") {
+    if (toolName === "search") return -10;
+    if (toolName === "type_text") return 12;
+    if (toolName === "press_key") return 13;
+  }
   const tier = def.tier ?? 1;
   if (tier === 0) return 0;
   const isRelevant = !def.relevance || def.relevance.includes(pageType);
@@ -11350,6 +11406,315 @@ async function submitForm$1(wc, args) {
   }
   return "Submitted form";
 }
+async function clickElementBySelector(wc, selector) {
+  return clickResolvedSelector$1(wc, selector);
+}
+async function locateSearchTarget(wc, explicitSelector) {
+  if (explicitSelector) {
+    return { selector: explicitSelector, submitSelector: null };
+  }
+  return executePageScript(
+    wc,
+    `
+      (function() {
+        function text(value) {
+          return value == null ? "" : String(value).trim();
+        }
+
+        function normalize(value) {
+          return text(value).toLowerCase();
+        }
+
+        function isVisible(el) {
+          if (!(el instanceof HTMLElement)) return true;
+          const style = window.getComputedStyle(el);
+          if (style.display === "none" || style.visibility === "hidden" || style.opacity === "0") {
+            return false;
+          }
+          if (el.hasAttribute("hidden") || el.getAttribute("aria-hidden") === "true") {
+            return false;
+          }
+          const rect = el.getBoundingClientRect();
+          return rect.width > 0 && rect.height > 0;
+        }
+
+        function inViewport(el) {
+          if (!(el instanceof HTMLElement)) return true;
+          const rect = el.getBoundingClientRect();
+          const vw = window.innerWidth || document.documentElement?.clientWidth || 0;
+          const vh = window.innerHeight || document.documentElement?.clientHeight || 0;
+          return rect.bottom > 0 && rect.right > 0 && rect.top < vh && rect.left < vw;
+        }
+
+        function escapeSelectorValue(value) {
+          if (typeof CSS !== "undefined" && typeof CSS.escape === "function") {
+            return CSS.escape(value);
+          }
+          return String(value).replace(/["\\\\]/g, "\\\\$&");
+        }
+
+        function uniqueSelector(candidate) {
+          if (!candidate) return null;
+          try {
+            return document.querySelectorAll(candidate).length === 1 ? candidate : null;
+          } catch {
+            return null;
+          }
+        }
+
+        function uniqueAttributeSelector(el, attribute) {
+          const value = text(el.getAttribute && el.getAttribute(attribute));
+          if (!value) return null;
+          const candidate = el.tagName.toLowerCase() + "[" + attribute + "=\\"" + escapeSelectorValue(value) + "\\"]";
+          return uniqueSelector(candidate);
+        }
+
+        function selectorFor(el) {
+          if (!el) return null;
+          if (el.id) return "#" + escapeSelectorValue(el.id);
+          for (const attribute of ["data-testid", "name", "form", "aria-label", "placeholder"]) {
+            const candidate = uniqueAttributeSelector(el, attribute);
+            if (candidate) return candidate;
+          }
+          const parts = [];
+          let current = el;
+          while (current) {
+            if (current.id) {
+              parts.unshift("#" + escapeSelectorValue(current.id));
+              break;
+            }
+            const tag = current.tagName.toLowerCase();
+            const parent = current.parentElement;
+            if (!parent) {
+              parts.unshift(tag);
+              break;
+            }
+            const siblings = Array.from(parent.children).filter((child) => child.tagName === current.tagName);
+            const index = siblings.indexOf(current) + 1;
+            parts.unshift(siblings.length > 1 ? tag + ":nth-of-type(" + index + ")" : tag);
+            current = parent;
+          }
+          const candidate = parts.join(" > ");
+          return uniqueSelector(candidate) || candidate;
+        }
+
+        function isDisabled(el) {
+          return !!(el && el.hasAttribute && (el.hasAttribute("disabled") || el.getAttribute("aria-disabled") === "true"));
+        }
+
+        function nearestSearchScope(input) {
+          return input.closest('[role="search"], form, header, nav, [class*="search" i], [id*="search" i]');
+        }
+
+        function collectCandidates() {
+          const seen = new Set();
+          const ordered = [];
+          const specific = document.querySelectorAll(
+            'input[type="search"], input[name="q"], input[name="query"], input[name="search"], input[role="searchbox"], input[aria-label*="search" i], input[placeholder*="search" i]'
+          );
+          specific.forEach((el) => {
+            if (!seen.has(el)) {
+              seen.add(el);
+              ordered.push(el);
+            }
+          });
+          document.querySelectorAll('input[type="text"], input:not([type])').forEach((el) => {
+            if (seen.has(el)) return;
+            const scope = nearestSearchScope(el);
+            if (!scope) return;
+            seen.add(el);
+            ordered.push(el);
+          });
+          return ordered;
+        }
+
+        function scoreInput(el) {
+          if (!(el instanceof HTMLInputElement)) return -1;
+          if (isDisabled(el) || !isVisible(el)) return -1;
+          const type = normalize(el.getAttribute("type") || el.type);
+          if (type && !["search", "text", ""].includes(type)) return -1;
+
+          let score = 0;
+          if (inViewport(el)) score += 120;
+          const rect = el.getBoundingClientRect();
+          score += Math.max(0, 40 - Math.min(40, Math.floor(Math.max(0, rect.top) / 20)));
+
+          const name = normalize(el.name);
+          const placeholder = normalize(el.getAttribute("placeholder"));
+          const aria = normalize(el.getAttribute("aria-label"));
+          if (type === "search") score += 80;
+          if (name === "q" || name === "query" || name === "search") score += 70;
+          if (placeholder.includes("search")) score += 55;
+          if (aria.includes("search")) score += 55;
+
+          const scope = nearestSearchScope(el);
+          if (scope) {
+            score += 35;
+            const scopeRole = normalize(scope.getAttribute && scope.getAttribute("role"));
+            const scopeLabel = normalize(
+              [
+                scope.id,
+                scope.className,
+                scope.getAttribute && scope.getAttribute("aria-label"),
+                scope.getAttribute && scope.getAttribute("action"),
+              ].filter(Boolean).join(" ")
+            );
+            if (scopeRole === "search") score += 35;
+            if (scopeLabel.includes("search")) score += 30;
+            const tag = normalize(scope.tagName);
+            if (tag === "header" || tag === "nav") score += 20;
+          }
+
+          return score;
+        }
+
+        function pickSearchButton(input) {
+          const scopes = [
+            input.closest('[role="search"]'),
+            input.closest('form'),
+            nearestSearchScope(input),
+            input.parentElement,
+          ].filter(Boolean);
+          const seen = new Set();
+          let best = null;
+          let bestScore = -1;
+
+          for (const scope of scopes) {
+            scope.querySelectorAll('button, input[type="submit"], input[type="button"], [role="button"]').forEach((candidate) => {
+              if (seen.has(candidate)) return;
+              seen.add(candidate);
+              if (!(candidate instanceof HTMLElement)) return;
+              if (candidate === input || isDisabled(candidate) || !isVisible(candidate)) return;
+
+              const label = normalize(
+                candidate.getAttribute("aria-label") ||
+                  candidate.textContent ||
+                  candidate.getAttribute("title") ||
+                  candidate.getAttribute("value")
+              );
+              const rect = candidate.getBoundingClientRect();
+              const inputRect = input.getBoundingClientRect();
+              const closeToInput =
+                Math.abs(rect.top - inputRect.top) < 80 &&
+                Math.abs(rect.left - inputRect.right) < 260;
+
+              let score = 0;
+              if (inViewport(candidate)) score += 40;
+              if (closeToInput) score += 35;
+              if (label.includes("search") || label.includes("go") || label.includes("submit")) score += 45;
+              if (candidate.getAttribute("type") === "submit") score += 20;
+              if (candidate.closest('[role="search"]') === input.closest('[role="search"]')) score += 20;
+              if (candidate.closest('form') && candidate.closest('form') === input.closest('form')) score += 15;
+
+              if (score > bestScore) {
+                best = candidate;
+                bestScore = score;
+              }
+            });
+          }
+
+          return bestScore >= 35 ? best : null;
+        }
+
+        let bestInput = null;
+        let bestScore = -1;
+        for (const candidate of collectCandidates()) {
+          const score = scoreInput(candidate);
+          if (score > bestScore) {
+            bestInput = candidate;
+            bestScore = score;
+          }
+        }
+
+        if (!bestInput) return null;
+        const selector = selectorFor(bestInput);
+        if (!selector) return null;
+        const submit = pickSearchButton(bestInput);
+        return {
+          selector: selector,
+          submitSelector: submit ? selectorFor(submit) : null,
+        };
+      })()
+    `,
+    {
+      timeoutMs: 2200,
+      label: "find search input"
+    }
+  );
+}
+async function searchPage(wc, args) {
+  const query = String(args.query || "");
+  if (!query) return "Error: No search query provided.";
+  const queryLower = query.toLowerCase().trim();
+  const buttonLikePatterns = [
+    "add to cart",
+    "add to bag",
+    "add to basket",
+    "buy now",
+    "buy it now",
+    "purchase",
+    "continue shopping",
+    "keep shopping",
+    "view cart",
+    "view bag",
+    "view basket",
+    "go to cart",
+    "go to checkout",
+    "checkout",
+    "check out",
+    "proceed to checkout",
+    "place order",
+    "submit",
+    "subscribe",
+    "sign up",
+    "sign in",
+    "log in",
+    "register",
+    "continue"
+  ];
+  if (buttonLikePatterns.some((p) => queryLower.includes(p))) {
+    return `Error: "${query}" looks like a button label, not a search query. Use the click tool to interact with this element instead.`;
+  }
+  const searchInfo = await locateSearchTarget(
+    wc,
+    typeof args.selector === "string" ? args.selector : void 0
+  );
+  if (searchInfo === PAGE_SCRIPT_TIMEOUT) {
+    return pageBusyError("search");
+  }
+  if (!searchInfo?.selector) {
+    return 'Error: Could not find a visible search input. Try read_page(mode="visible_only") or provide a selector.';
+  }
+  const fillResult = await setElementValue$1(wc, searchInfo.selector, query);
+  if (fillResult.startsWith("Error:")) {
+    return fillResult;
+  }
+  await sleep$1(100);
+  const beforeUrl = wc.getURL();
+  const keyResult = await pressKey$1(wc, {
+    key: "Enter",
+    selector: searchInfo.selector
+  });
+  if (keyResult.startsWith("Error:")) {
+    return keyResult;
+  }
+  await waitForPotentialNavigation$1(wc, beforeUrl, 3e3);
+  let afterUrl = wc.getURL();
+  if (afterUrl !== beforeUrl) {
+    return `Searched "${query}" → ${afterUrl}`;
+  }
+  if (searchInfo.submitSelector) {
+    const clickResult = await clickElementBySelector(wc, searchInfo.submitSelector);
+    if (!clickResult.startsWith("Error:")) {
+      await waitForPotentialNavigation$1(wc, beforeUrl, 3e3);
+      afterUrl = wc.getURL();
+      if (afterUrl !== beforeUrl) {
+        return `Searched "${query}" (via search button) → ${afterUrl}`;
+      }
+    }
+  }
+  return `Searched "${query}" (same page — results may have loaded dynamically; inspect with read_page(mode="results_only") or read_page(mode="visible_only") before navigating directly elsewhere)`;
+}
 async function pressKey$1(wc, args) {
   const key = typeof args.key === "string" ? args.key.trim() : "";
   if (!key) return "Error: No key provided";
@@ -12396,164 +12761,7 @@ ${steps.join("\n")}`;
         }
         case "search": {
           if (!wc) return "Error: No active tab";
-          const query = String(args.query || "");
-          if (!query) return "Error: No search query provided.";
-          const queryLower = query.toLowerCase().trim();
-          const buttonLikePatterns = [
-            "add to cart",
-            "add to bag",
-            "add to basket",
-            "buy now",
-            "buy it now",
-            "purchase",
-            "continue shopping",
-            "keep shopping",
-            "view cart",
-            "view bag",
-            "view basket",
-            "go to cart",
-            "go to checkout",
-            "checkout",
-            "check out",
-            "proceed to checkout",
-            "place order",
-            "submit",
-            "subscribe",
-            "sign up",
-            "sign in",
-            "log in",
-            "register",
-            "continue"
-          ];
-          if (buttonLikePatterns.some((p) => queryLower.includes(p))) {
-            return `Error: "${query}" looks like a button label, not a search query. Use the click tool to interact with this element instead.`;
-          }
-          const searchInfo = args.selector ? { selector: args.selector, formAction: null, formMethod: null } : await executePageScript(
-            wc,
-            `
-              (function() {
-                var SELECTORS = 'input[type="search"], input[name="q"], input[name="query"], input[name="search"], input[role="searchbox"], input[aria-label*="search" i], input[placeholder*="search" i]';
-                function find() {
-                  var el = document.querySelector(SELECTORS);
-                  if (!el) {
-                    var inputs = document.querySelectorAll('input[type="text"]');
-                    for (var i = 0; i < inputs.length; i++) {
-                      var form = inputs[i].closest('form');
-                      if (form && (form.getAttribute('role') === 'search' || (form.action && form.action.includes('search')))) {
-                        el = inputs[i];
-                        break;
-                      }
-                    }
-                  }
-                  if (!el) return null;
-                  var sel = el.id ? '#' + CSS.escape(el.id) : el.name ? 'input[name="' + el.name + '"]' : null;
-                  var form = el.closest('form');
-                  return {
-                    selector: sel,
-                    formAction: form ? form.action : null,
-                    formMethod: form ? (form.method || 'GET').toUpperCase() : null,
-                    inputName: el.name || 'q',
-                  };
-                }
-                return new Promise(function(resolve) {
-                  var result = find();
-                  if (result) { resolve(result); return; }
-                  var attempts = 0;
-                  var timer = setInterval(function() {
-                    result = find();
-                    if (result || ++attempts >= 20) {
-                      clearInterval(timer);
-                      resolve(result);
-                    }
-                  }, 250);
-                });
-              })()
-            `,
-            {
-              timeoutMs: 1800,
-              label: "find search input"
-            }
-          );
-          if (searchInfo === PAGE_SCRIPT_TIMEOUT) {
-            return pageBusyError("search");
-          }
-          if (!searchInfo?.selector)
-            return "Error: Could not find search input. Try providing a selector.";
-          const fillResult = await setElementValue$1(
-            wc,
-            searchInfo.selector,
-            query
-          );
-          if (fillResult.startsWith("Error:")) {
-            return fillResult;
-          }
-          await sleep$1(100);
-          const focusResult = await executePageScript(
-            wc,
-            `
-            (function() {
-              var el = document.querySelector(${JSON.stringify(searchInfo.selector)});
-              if (el) el.focus();
-            })()
-          `,
-            {
-              label: "focus search input"
-            }
-          );
-          if (focusResult === PAGE_SCRIPT_TIMEOUT) {
-            return pageBusyError("search");
-          }
-          await sleep$1(50);
-          const beforeUrl = wc.getURL();
-          wc.sendInputEvent({ type: "keyDown", keyCode: "Return" });
-          await sleep$1(16);
-          wc.sendInputEvent({ type: "keyUp", keyCode: "Return" });
-          await waitForPotentialNavigation$1(wc, beforeUrl, 3e3);
-          let afterUrl = wc.getURL();
-          if (afterUrl !== beforeUrl) {
-            return `Searched "${query}" → ${afterUrl}`;
-          }
-          const clickedSubmit = await executePageScript(
-            wc,
-            `
-            (function() {
-              var form = document.querySelector(${JSON.stringify(searchInfo.selector)})?.closest('form');
-              if (!form) return false;
-              var btn = form.querySelector('button[type="submit"], input[type="submit"], button:not([type])');
-              if (btn) { btn.click(); return true; }
-              // Try any button in the form
-              var anyBtn = form.querySelector('button');
-              if (anyBtn) { anyBtn.click(); return true; }
-              return false;
-            })()
-          `,
-            {
-              label: "click search submit"
-            }
-          );
-          if (clickedSubmit === PAGE_SCRIPT_TIMEOUT) {
-            return pageBusyError("search");
-          }
-          if (clickedSubmit) {
-            await waitForPotentialNavigation$1(wc, beforeUrl, 3e3);
-            afterUrl = wc.getURL();
-            if (afterUrl !== beforeUrl) {
-              return `Searched "${query}" (via submit button) → ${afterUrl}`;
-            }
-          }
-          if (searchInfo.formAction && searchInfo.formMethod === "GET") {
-            try {
-              const url = new URL(searchInfo.formAction);
-              url.searchParams.set(searchInfo.inputName || "q", query);
-              assertSafeURL(url.toString());
-              wc.loadURL(url.toString());
-              await waitForPotentialNavigation$1(wc, beforeUrl);
-              afterUrl = wc.getURL();
-              return `Searched "${query}" (via direct URL) → ${afterUrl}`;
-            } catch {
-            }
-          }
-          return `Searched "${query}" (same page — results may have loaded dynamically)`;
+          return searchPage(wc, args);
         }
         case "paginate": {
           if (!wc) return "Error: No active tab";
@@ -12808,6 +13016,7 @@ Instructions:
 - Use save_session after completing a login flow you may need again later, and load_session to resume that authenticated state in future runs.
 - Prefer select_option for dropdowns and submit_form for forms instead of guessing with clicks.
 - After navigating to a new site, DO NOT call read_page immediately. Instead, act on what you already know: use the search tool to search the site, type_text to enter queries in search bars, or click on known navigation patterns. You know what major sites look like — use that knowledge. Only call read_page if you're genuinely stuck and need to discover unfamiliar page structure.
+- On retail and marketplace sites (like Newegg, Amazon, Walmart, Etsy, eBay), prefer the site's visible search box, filters, and result pages over direct product URLs. Only navigate directly to a product page if the user gave you that URL or the site's own search UI is clearly unavailable after a reasonable attempt.
 - The page brief you start with is intentionally sparse. It is optimized for navigation speed, not completeness.
 - When you only need detail on one product/result/card/form section, use inspect_element instead of reading the page.
 - Escalate page reads progressively: read_page(mode="glance") for a fast viewport snapshot on heavy/slow pages, then read_page(mode="visible_only"), read_page(mode="results_only"), read_page(mode="forms_only"), read_page(mode="summary"), or read_page(mode="text_only") depending on what you need.
@@ -13755,6 +13964,23 @@ function getMcpAuthFilePath() {
   );
   return path$1.join(configDir, MCP_AUTH_FILENAME);
 }
+function readMcpAuthFile() {
+  try {
+    const raw = fs$1.readFileSync(getMcpAuthFilePath(), "utf8");
+    const parsed = JSON.parse(raw);
+    return parsed && typeof parsed === "object" ? parsed : null;
+  } catch {
+    return null;
+  }
+}
+const MIN_TOKEN_LENGTH = 32;
+function getPersistentMcpAuthToken() {
+  const existingToken = readMcpAuthFile()?.token?.trim();
+  if (existingToken && existingToken.length >= MIN_TOKEN_LENGTH) {
+    return existingToken;
+  }
+  return crypto$2.randomBytes(32).toString("hex");
+}
 function writeMcpAuthFile(endpoint, token) {
   try {
     const filePath = getMcpAuthFilePath();
@@ -13769,9 +13995,28 @@ function writeMcpAuthFile(endpoint, token) {
   }
 }
 function clearMcpAuthFile() {
+  const existingToken = readMcpAuthFile()?.token?.trim();
+  if (!existingToken) {
+    try {
+      fs$1.unlinkSync(getMcpAuthFilePath());
+    } catch {
+    }
+    return;
+  }
   try {
-    fs$1.unlinkSync(getMcpAuthFilePath());
-  } catch {
+    const filePath = getMcpAuthFilePath();
+    fs$1.mkdirSync(path$1.dirname(filePath), { recursive: true });
+    fs$1.writeFileSync(
+      filePath,
+      JSON.stringify(
+        { endpoint: "", token: existingToken, pid: null },
+        null,
+        2
+      ) + "\n",
+      { mode: 384 }
+    );
+  } catch (err) {
+    console.warn("[Vessel MCP] Failed to clear auth file:", err);
   }
 }
 function asTextResponse(text) {
@@ -18310,7 +18555,7 @@ function startMcpServer(tabManager, runtime2, port) {
     status: "starting",
     message: `Starting MCP server on port ${port}.`
   });
-  mcpAuthToken = crypto$2.randomBytes(32).toString("hex");
+  mcpAuthToken = getPersistentMcpAuthToken();
   return new Promise((resolve) => {
     const server = http.createServer(async (req, res) => {
       const url = new URL(req.url || "/", `http://localhost:${port}`);
@@ -18337,7 +18582,11 @@ function startMcpServer(tabManager, runtime2, port) {
         return;
       }
       const authHeader = req.headers.authorization;
-      if (!authHeader || authHeader !== `Bearer ${mcpAuthToken}`) {
+      const expected = `Bearer ${mcpAuthToken}`;
+      const headerBuf = Buffer.from(authHeader ?? "");
+      const expectedBuf = Buffer.from(expected);
+      const tokenValid = headerBuf.length === expectedBuf.length && crypto$2.timingSafeEqual(headerBuf, expectedBuf);
+      if (!authHeader || !tokenValid) {
         res.writeHead(401, { "Content-Type": "application/json" });
         res.end(JSON.stringify({ error: "Unauthorized — missing or invalid bearer token" }));
         return;
@@ -18964,29 +19213,31 @@ function registerIpcHandlers(windowState, runtime2) {
       return { accepted: false, reason: "busy" };
     }
     sendToRendererViews(Channels.AI_STREAM_START, query);
-    try {
-      activeChatProvider = createProvider(chatConfig);
-      trackProviderConfigured(chatConfig.id);
-      const activeTab = tabManager.getActiveTab();
-      await handleAIQuery(
-        query,
-        activeChatProvider,
-        activeTab?.view.webContents,
-        (chunk) => sendToRendererViews(Channels.AI_STREAM_CHUNK, chunk),
-        () => sendToRendererViews(Channels.AI_STREAM_END),
-        tabManager,
-        runtime2,
-        history
-      );
-    } catch (err) {
-      const msg = err instanceof Error ? err.message : "Unknown error";
-      sendToRendererViews(Channels.AI_STREAM_CHUNK, `
+    (async () => {
+      try {
+        activeChatProvider = createProvider(chatConfig);
+        trackProviderConfigured(chatConfig.id);
+        const activeTab = tabManager.getActiveTab();
+        await handleAIQuery(
+          query,
+          activeChatProvider,
+          activeTab?.view.webContents,
+          (chunk) => sendToRendererViews(Channels.AI_STREAM_CHUNK, chunk),
+          () => sendToRendererViews(Channels.AI_STREAM_END),
+          tabManager,
+          runtime2,
+          history
+        );
+      } catch (err) {
+        const msg = err instanceof Error ? err.message : "Unknown error";
+        sendToRendererViews(Channels.AI_STREAM_CHUNK, `
 [Error: ${msg}]`);
-      sendToRendererViews(Channels.AI_STREAM_END);
-    } finally {
-      activeChatProvider = null;
-      endAIStream("manual");
-    }
+        sendToRendererViews(Channels.AI_STREAM_END);
+      } finally {
+        activeChatProvider = null;
+        endAIStream("manual");
+      }
+    })();
     return { accepted: true };
   });
   electron.ipcMain.handle(Channels.AI_CANCEL, () => {
@@ -19043,6 +19294,7 @@ function registerIpcHandlers(windowState, runtime2) {
     assertNumber(width, "width");
     const clamped = Math.max(240, Math.min(800, Math.round(width)));
     windowState.uiState.sidebarWidth = clamped;
+    resizeSidebarViews(windowState);
     return clamped;
   });
   electron.ipcMain.handle(Channels.SIDEBAR_RESIZE_COMMIT, () => {