perchai-cli 2.4.11 → 2.4.12

package/dist/perch.mjs

@@ -5198,8 +5198,8 @@ var require_xlsx = __commonJS({
           }
           return L.length - R.length;
         }
-        function dirname(p) {
-          if (p.charAt(p.length - 1) == "/") return p.slice(0, -1).indexOf("/") === -1 ? p : dirname(p.slice(0, -1));
+        function dirname2(p) {
+          if (p.charAt(p.length - 1) == "/") return p.slice(0, -1).indexOf("/") === -1 ? p : dirname2(p.slice(0, -1));
           var c = p.lastIndexOf("/");
           return c === -1 ? p : p.slice(0, c + 1);
         }
@@ -5620,7 +5620,7 @@ var require_xlsx = __commonJS({
             data.push([cfb.FullPaths[i2], cfb.FileIndex[i2]]);
           }
           for (i2 = 0; i2 < data.length; ++i2) {
-            var dad = dirname(data[i2][0]);
+            var dad = dirname2(data[i2][0]);
             s = fullPaths[dad];
             if (!s) {
               data.push([dad, {
@@ -5656,13 +5656,13 @@ var require_xlsx = __commonJS({
               elt.size = 0;
               elt.type = 5;
             } else if (nm.slice(-1) == "/") {
-              for (j = i2 + 1; j < data.length; ++j) if (dirname(cfb.FullPaths[j]) == nm) break;
+              for (j = i2 + 1; j < data.length; ++j) if (dirname2(cfb.FullPaths[j]) == nm) break;
               elt.C = j >= data.length ? -1 : j;
-              for (j = i2 + 1; j < data.length; ++j) if (dirname(cfb.FullPaths[j]) == dirname(nm)) break;
+              for (j = i2 + 1; j < data.length; ++j) if (dirname2(cfb.FullPaths[j]) == dirname2(nm)) break;
               elt.R = j >= data.length ? -1 : j;
               elt.type = 1;
             } else {
-              if (dirname(cfb.FullPaths[i2 + 1] || "") == dirname(nm)) elt.R = i2 + 1;
+              if (dirname2(cfb.FullPaths[i2 + 1] || "") == dirname2(nm)) elt.R = i2 + 1;
               elt.type = 2;
             }
           }
@@ -41950,11 +41950,11 @@ var require_html2canvas = __commonJS({
       };
       function __awaiter3(thisArg, _arguments, P, generator) {
         function adopt(value) {
-          return value instanceof P ? value : new P(function(resolve4) {
-            resolve4(value);
+          return value instanceof P ? value : new P(function(resolve5) {
+            resolve5(value);
           });
         }
-        return new (P || (P = Promise))(function(resolve4, reject2) {
+        return new (P || (P = Promise))(function(resolve5, reject2) {
           function fulfilled(value) {
             try {
               step(generator.next(value));
@@ -41970,7 +41970,7 @@ var require_html2canvas = __commonJS({
             }
           }
           function step(result2) {
-            result2.done ? resolve4(result2.value) : adopt(result2.value).then(fulfilled, rejected);
+            result2.done ? resolve5(result2.value) : adopt(result2.value).then(fulfilled, rejected);
           }
           step((generator = generator.apply(thisArg, _arguments || [])).next());
         });
@@ -43962,16 +43962,16 @@ var require_html2canvas = __commonJS({
           [width, 0],
           [width, height]
         ];
-        return corners.reduce(function(stat, corner) {
+        return corners.reduce(function(stat2, corner) {
           var cx = corner[0], cy = corner[1];
           var d = distance(x - cx, y - cy);
-          if (closest ? d < stat.optimumDistance : d > stat.optimumDistance) {
+          if (closest ? d < stat2.optimumDistance : d > stat2.optimumDistance) {
             return {
               optimumCorner: corner,
               optimumDistance: d
             };
           }
-          return stat;
+          return stat2;
         }, {
           optimumDistance: closest ? Infinity : -Infinity,
           optimumCorner: null
@@ -46099,10 +46099,10 @@ var require_html2canvas = __commonJS({
         return svg;
       };
       var loadSerializedSVG$1 = function(svg) {
-        return new Promise(function(resolve4, reject2) {
+        return new Promise(function(resolve5, reject2) {
           var img = new Image();
           img.onload = function() {
-            return resolve4(img);
+            return resolve5(img);
           };
           img.onerror = reject2;
           img.src = "data:image/svg+xml;charset=utf-8," + encodeURIComponent(new XMLSerializer().serializeToString(svg));
@@ -47464,24 +47464,24 @@ var require_html2canvas = __commonJS({
         return cloneIframeContainer;
       };
       var imageReady = function(img) {
-        return new Promise(function(resolve4) {
+        return new Promise(function(resolve5) {
           if (img.complete) {
-            resolve4();
+            resolve5();
             return;
           }
           if (!img.src) {
-            resolve4();
+            resolve5();
             return;
           }
-          img.onload = resolve4;
-          img.onerror = resolve4;
+          img.onload = resolve5;
+          img.onerror = resolve5;
         });
       };
       var imagesReady = function(document2) {
         return Promise.all([].slice.call(document2.images, 0).map(imageReady));
       };
       var iframeLoader = function(iframe) {
-        return new Promise(function(resolve4, reject2) {
+        return new Promise(function(resolve5, reject2) {
           var cloneWindow = iframe.contentWindow;
           if (!cloneWindow) {
             return reject2("No window assigned for iframe");
@@ -47492,7 +47492,7 @@ var require_html2canvas = __commonJS({
             var interval = setInterval(function() {
               if (documentClone.body.childNodes.length > 0 && documentClone.readyState === "complete") {
                 clearInterval(interval);
-                resolve4(iframe);
+                resolve5(iframe);
               }
             }, 50);
           };
@@ -47631,10 +47631,10 @@ var require_html2canvas = __commonJS({
                     _a.label = 2;
                   case 2:
                     this.context.logger.debug("Added image " + key.substring(0, 256));
-                    return [4, new Promise(function(resolve4, reject2) {
+                    return [4, new Promise(function(resolve5, reject2) {
                       var img = new Image();
                       img.onload = function() {
-                        return resolve4(img);
+                        return resolve5(img);
                       };
                       img.onerror = reject2;
                       if (isInlineBase64Image(src) || useCORS) {
@@ -47643,7 +47643,7 @@ var require_html2canvas = __commonJS({
                       img.src = src;
                       if (img.complete === true) {
                         setTimeout(function() {
-                          return resolve4(img);
+                          return resolve5(img);
                         }, 500);
                       }
                       if (_this._options.imageTimeout > 0) {
@@ -47671,17 +47671,17 @@ var require_html2canvas = __commonJS({
               throw new Error("No proxy defined");
             }
             var key = src.substring(0, 256);
-            return new Promise(function(resolve4, reject2) {
+            return new Promise(function(resolve5, reject2) {
               var responseType = FEATURES.SUPPORT_RESPONSE_TYPE ? "blob" : "text";
               var xhr = new XMLHttpRequest();
               xhr.onload = function() {
                 if (xhr.status === 200) {
                   if (responseType === "text") {
-                    resolve4(xhr.response);
+                    resolve5(xhr.response);
                   } else {
                     var reader_1 = new FileReader();
                     reader_1.addEventListener("load", function() {
-                      return resolve4(reader_1.result);
+                      return resolve5(reader_1.result);
                     }, false);
                     reader_1.addEventListener("error", function(e2) {
                       return reject2(e2);
@@ -49496,10 +49496,10 @@ var require_html2canvas = __commonJS({
         })(Renderer)
       );
       var loadSerializedSVG = function(svg) {
-        return new Promise(function(resolve4, reject2) {
+        return new Promise(function(resolve5, reject2) {
           var img = new Image();
           img.onload = function() {
-            resolve4(img);
+            resolve5(img);
           };
           img.onerror = reject2;
           img.src = "data:image/svg+xml;charset=utf-8," + encodeURIComponent(new XMLSerializer().serializeToString(svg));
@@ -51584,7 +51584,7 @@ var require_make_built_in = __commonJS({
     var defineProperty = Object.defineProperty;
     var stringSlice = uncurryThis("".slice);
     var replace = uncurryThis("".replace);
-    var join = uncurryThis([].join);
+    var join2 = uncurryThis([].join);
     var CONFIGURABLE_LENGTH = DESCRIPTORS && !fails(function() {
       return defineProperty(function() {
       }, "length", { value: 8 }).length !== 8;
@@ -51611,7 +51611,7 @@ var require_make_built_in = __commonJS({
       }
       var state = enforceInternalState(value);
       if (!hasOwn(state, "source")) {
-        state.source = join(TEMPLATE, typeof name == "string" ? name : "");
+        state.source = join2(TEMPLATE, typeof name == "string" ? name : "");
       }
       return value;
     };
@@ -52685,8 +52685,8 @@ var require_promise_constructor_detection = __commonJS({
       if (!GLOBAL_CORE_JS_PROMISE && V8_VERSION === 66) return true;
       if (IS_PURE && !(NativePromisePrototype["catch"] && NativePromisePrototype["finally"])) return true;
       if (!V8_VERSION || V8_VERSION < 51 || !/native code/.test(PROMISE_CONSTRUCTOR_SOURCE)) {
-        var promise = new NativePromiseConstructor(function(resolve4) {
-          resolve4(1);
+        var promise = new NativePromiseConstructor(function(resolve5) {
+          resolve5(1);
         });
         var FakePromise = function(exec3) {
           exec3(function() {
@@ -52716,13 +52716,13 @@ var require_new_promise_capability = __commonJS({
     var aCallable = require_a_callable();
     var $TypeError = TypeError;
     var PromiseCapability = function(C) {
-      var resolve4, reject2;
+      var resolve5, reject2;
       this.promise = new C(function($$resolve, $$reject) {
-        if (resolve4 !== void 0 || reject2 !== void 0) throw new $TypeError("Bad Promise constructor");
-        resolve4 = $$resolve;
+        if (resolve5 !== void 0 || reject2 !== void 0) throw new $TypeError("Bad Promise constructor");
+        resolve5 = $$resolve;
         reject2 = $$reject;
       });
-      this.resolve = aCallable(resolve4);
+      this.resolve = aCallable(resolve5);
       this.reject = aCallable(reject2);
     };
     module2.exports.f = function(C) {
@@ -52793,7 +52793,7 @@ var require_es_promise_constructor = __commonJS({
       var value = state.value;
       var ok = state.state === FULFILLED;
       var handler = ok ? reaction.ok : reaction.fail;
-      var resolve4 = reaction.resolve;
+      var resolve5 = reaction.resolve;
       var reject2 = reaction.reject;
       var domain = reaction.domain;
       var result2, then, exited;
@@ -52815,8 +52815,8 @@ var require_es_promise_constructor = __commonJS({
           if (result2 === reaction.promise) {
             reject2(new TypeError2("Promise-chain cycle"));
           } else if (then = isThenable(result2)) {
-            call(then, result2, resolve4, reject2);
-          } else resolve4(result2);
+            call(then, result2, resolve5, reject2);
+          } else resolve5(result2);
         } else reject2(value);
       } catch (error) {
         if (domain && !exited) domain.exit();
@@ -52972,8 +52972,8 @@ var require_es_promise_constructor = __commonJS({
         if (!NATIVE_PROMISE_SUBCLASSING) {
           defineBuiltIn(NativePromisePrototype, "then", function then(onFulfilled, onRejected) {
             var that = this;
-            return new PromiseConstructor(function(resolve4, reject2) {
-              call(nativeThen, that, resolve4, reject2);
+            return new PromiseConstructor(function(resolve5, reject2) {
+              call(nativeThen, that, resolve5, reject2);
             }).then(onFulfilled, onRejected);
           }, { unsafe: true });
         }
@@ -53233,7 +53233,7 @@ var require_es_promise_all = __commonJS({
       all: function all(iterable) {
         var C = this;
         var capability = newPromiseCapabilityModule.f(C);
-        var resolve4 = capability.resolve;
+        var resolve5 = capability.resolve;
         var reject2 = capability.reject;
         var result2 = perform(function() {
           var $promiseResolve = aCallable(C.resolve);
@@ -53248,10 +53248,10 @@ var require_es_promise_all = __commonJS({
               if (alreadyCalled) return;
               alreadyCalled = true;
               values2[index] = value;
-              --remaining || resolve4(values2);
+              --remaining || resolve5(values2);
             }, reject2);
           });
-          --remaining || resolve4(values2);
+          --remaining || resolve5(values2);
         });
         if (result2.error) reject2(result2.value);
         return capability.promise;
@@ -53345,8 +53345,8 @@ var require_promise_resolve = __commonJS({
       anObject(C);
       if (isObject4(x) && x.constructor === C) return x;
       var promiseCapability = newPromiseCapability.f(C);
-      var resolve4 = promiseCapability.resolve;
-      resolve4(x);
+      var resolve5 = promiseCapability.resolve;
+      resolve5(x);
       return promiseCapability.promise;
     };
   }
@@ -53365,7 +53365,7 @@ var require_es_promise_resolve = __commonJS({
     var PromiseConstructorWrapper = getBuiltIn("Promise");
     var CHECK_WRAPPER = IS_PURE && !FORCED_PROMISE_CONSTRUCTOR;
     $2({ target: "Promise", stat: true, forced: IS_PURE || FORCED_PROMISE_CONSTRUCTOR }, {
-      resolve: function resolve4(x) {
+      resolve: function resolve5(x) {
         return promiseResolve(CHECK_WRAPPER && this === PromiseConstructorWrapper ? NativePromiseConstructor : this, x);
       }
     });
@@ -54854,7 +54854,7 @@ var require_es_array_join = __commonJS({
     var ES3_STRINGS = IndexedObject !== Object;
     var FORCED = ES3_STRINGS || !arrayMethodIsStrict("join", ",");
     $2({ target: "Array", proto: true, forced: FORCED }, {
-      join: function join(separator) {
+      join: function join2(separator) {
         return nativeJoin(toIndexedObject(this), separator === void 0 ? "," : separator);
       }
     });
@@ -58983,8 +58983,8 @@ var require_lib2 = __commonJS({
           var FRAMERATE = this.FRAMERATE, mouse = this.mouse;
           var frameDuration = 1e3 / FRAMERATE;
           this.frameDuration = frameDuration;
-          this.readyPromise = new Promise(function(resolve4) {
-            _this.resolveReady = resolve4;
+          this.readyPromise = new Promise(function(resolve5) {
+            _this.resolveReady = resolve5;
           });
           if (this.isReady()) {
             this.render(element, ignoreDimensions, ignoreClear, scaleWidth, scaleHeight, offsetX, offsetY);
@@ -65022,9 +65022,9 @@ var require_lib2 = __commonJS({
                 if (anonymousCrossOrigin) {
                   image2.crossOrigin = "Anonymous";
                 }
-                return _context.abrupt("return", new Promise(function(resolve4, reject2) {
+                return _context.abrupt("return", new Promise(function(resolve5, reject2) {
                   image2.onload = function() {
-                    resolve4(image2);
+                    resolve5(image2);
                   };
                   image2.onerror = function(_event, _source, _lineno, _colno, error) {
                     reject2(error);
@@ -73320,7 +73320,7 @@ async function walk(rootPath, currentPath, files) {
       continue;
     }
     if (!entry.isFile()) continue;
-    const stat = await fs3.promises.stat(fullPath);
+    const stat2 = await fs3.promises.stat(fullPath);
     const extension2 = path3.extname(entry.name).toLowerCase();
     const role = sensitivity.sensitive ? "secret_sensitive" : classifyFileRole(entry.name, relativePath);
     const ignored = sensitivity.sensitive;
@@ -73329,11 +73329,11 @@ async function walk(rootPath, currentPath, files) {
       relativePath,
       fileName: entry.name,
       extension: extension2,
-      sizeBytes: stat.size,
+      sizeBytes: stat2.size,
       role,
       ignored,
       ignoreReason: sensitivity.reason,
-      textSnippet: ignored ? void 0 : await safeTextSnippet(fullPath, extension2, stat.size)
+      textSnippet: ignored ? void 0 : await safeTextSnippet(fullPath, extension2, stat2.size)
     });
   }
 }
@@ -75408,8 +75408,8 @@ async function listDirs(root2) {
 }
 async function fileExists(filePath) {
   try {
-    const stat = await fs7.promises.stat(filePath);
-    return stat.isFile();
+    const stat2 = await fs7.promises.stat(filePath);
+    return stat2.isFile();
   } catch {
     return false;
   }
@@ -81720,7 +81720,7 @@ function buildThreadLedgerItemsFromTurn(input) {
         kind: "context_boundary",
         ts: event.ts,
         runId: input.runId,
-        summary: `Context compacted from ${event.tokensBefore} to ${event.tokensAfter} tokens.`,
+        summary: `Context compacted from ${event.tokensBefore} to ${event.tokensAfter} tokens` + (event.targetTokens ? ` (target ${event.targetTokens}).` : "."),
         resultPreview: truncate3(event.summary, MAX_TEXT)
       });
     } else if (event.type === "live_card_end" && event.receipt) {
@@ -82300,6 +82300,8 @@ function sanitizePendingActionPayload(value) {
 }
 function parseContextCompaction(value) {
   if (!isRecord4(value)) return null;
+  const compactBoundary = parseCompactBoundary(value.compactBoundary);
+  const compactionReport = parseCompactionReport(value.compactionReport);
   return {
     compactConversation: value.compactConversation === true,
     dropNotFoundRows: value.dropNotFoundRows === true,
@@ -82310,9 +82312,38 @@ function parseContextCompaction(value) {
     autoCompactedAtIso: typeof value.autoCompactedAtIso === "string" ? value.autoCompactedAtIso : void 0,
     autoCompactedMessageCount: asFiniteNonNegativeInt(value.autoCompactedMessageCount) ?? void 0,
     compactedSummary: typeof value.compactedSummary === "string" ? value.compactedSummary : void 0,
-    effectiveContextLimitTokens: asFiniteNonNegativeInt(value.effectiveContextLimitTokens) ?? void 0
+    effectiveContextLimitTokens: asFiniteNonNegativeInt(value.effectiveContextLimitTokens) ?? void 0,
+    ...compactBoundary ? { compactBoundary } : {},
+    ...compactionReport ? { compactionReport } : {}
   };
 }
+function parseCompactBoundary(value) {
+  if (!isRecord4(value)) return void 0;
+  const kind = value.kind === "manual" ? "manual" : value.kind === "auto" ? "auto" : null;
+  const compactedAtIso = typeof value.compactedAtIso === "string" ? value.compactedAtIso : null;
+  if (!kind || !compactedAtIso) return void 0;
+  return {
+    kind,
+    compactedAtIso,
+    compactedThroughMessageId: typeof value.compactedThroughMessageId === "string" ? value.compactedThroughMessageId : null,
+    compactedThroughMessageCreatedAt: typeof value.compactedThroughMessageCreatedAt === "string" ? value.compactedThroughMessageCreatedAt : null,
+    compactedThroughWireIndex: asFiniteNonNegativeInt(value.compactedThroughWireIndex)
+  };
+}
+function parseCompactionReport(value) {
+  if (!isRecord4(value)) return void 0;
+  const parsed = {
+    tokensBefore: asFiniteNonNegativeInt(value.tokensBefore) ?? void 0,
+    tokensAfter: asFiniteNonNegativeInt(value.tokensAfter) ?? void 0,
+    targetTokens: asFiniteNonNegativeInt(value.targetTokens) ?? void 0,
+    summaryTokens: asFiniteNonNegativeInt(value.summaryTokens) ?? void 0,
+    recentTailTokens: asFiniteNonNegativeInt(value.recentTailTokens) ?? void 0,
+    recentTailMessages: asFiniteNonNegativeInt(value.recentTailMessages) ?? void 0,
+    summarizedMessages: asFiniteNonNegativeInt(value.summarizedMessages) ?? void 0,
+    restoredToolsOrFiles: asFiniteNonNegativeInt(value.restoredToolsOrFiles) ?? void 0
+  };
+  return Object.values(parsed).some((entry) => typeof entry === "number") ? parsed : void 0;
+}
 function parseWorkerRuns(value) {
   if (!Array.isArray(value)) return void 0;
   const parsed = [];
@@ -82425,6 +82456,7 @@ function parseContextMetrics(value) {
   const consecutiveAutoCompactFailures = asFiniteNonNegativeInt(value.consecutiveAutoCompactFailures);
   const lastApiUsage = parseModelUsage(value.lastApiUsage);
   const turnApiUsage = parseModelUsage(value.turnApiUsage);
+  const compactionReport = parseCompactionReport(value.compactionReport);
   return {
     threadContextTokens,
     latestSendTokens,
@@ -82448,6 +82480,7 @@ function parseContextMetrics(value) {
     ...consecutiveAutoCompactFailures !== null ? { consecutiveAutoCompactFailures } : {},
     ...typeof value.autoCompactedAtIso === "string" ? { autoCompactedAtIso: value.autoCompactedAtIso } : {},
     ...asFiniteNonNegativeInt(value.autoCompactedMessageCount) !== null ? { autoCompactedMessageCount: asFiniteNonNegativeInt(value.autoCompactedMessageCount) } : {},
+    ...compactionReport ? { compactionReport } : {},
     resetAtIso: typeof value.resetAtIso === "string" ? value.resetAtIso : null,
     updatedAtIso: typeof value.updatedAtIso === "string" ? value.updatedAtIso : (/* @__PURE__ */ new Date()).toISOString()
   };
@@ -82906,7 +82939,17 @@ function buildMessageHistory(recentMessages, currentInput, options) {
   const hasCompactedSummary = compactedSummary.length > 0;
   const shouldUseCompactedHistory = options?.compactConversation === true && hasCompactedSummary;
   const keepCount = options?.keepCount ?? (shouldUseCompactedHistory ? 12 : recentMessages.length);
-  const sourceMessages = shouldUseCompactedHistory ? recentMessages.slice(-keepCount) : recentMessages;
+  const sourceMessages = shouldUseCompactedHistory ? selectRecentHistoryTail(
+    filterMessagesAfterCompactBoundary(recentMessages, {
+      compactedThroughMessageId: options?.compactedThroughMessageId,
+      compactedThroughMessageCreatedAt: options?.compactedThroughMessageCreatedAt
+    }),
+    {
+      tokenTarget: options?.recentTailTokenTarget,
+      fallbackKeepCount: keepCount,
+      minMessages: Math.min(DEFAULT_COMPACTED_MIN_RECENT_MESSAGES, keepCount)
+    }
+  ) : recentMessages;
   if (hasCompactedSummary) {
     history.push({
       role: "user",
@@ -82955,6 +82998,47 @@ ${compactedSummary}`
   history.push({ role: "user", content: currentInput });
   return history;
 }
+function filterMessagesAfterCompactBoundary(messages, boundary) {
+  const boundaryId = boundary.compactedThroughMessageId?.trim();
+  if (boundaryId) {
+    const idx = messages.findIndex((message) => message.id === boundaryId);
+    if (idx >= 0) return messages.slice(idx + 1);
+  }
+  const boundaryAt = boundary.compactedThroughMessageCreatedAt?.trim();
+  if (boundaryAt) {
+    const boundaryMs = Date.parse(boundaryAt);
+    if (Number.isFinite(boundaryMs)) {
+      return messages.filter((message) => {
+        const createdMs = Date.parse(message.createdAt);
+        return !Number.isFinite(createdMs) || createdMs > boundaryMs;
+      });
+    }
+  }
+  return messages;
+}
+function selectRecentHistoryTail(messages, input) {
+  const tokenTarget = typeof input.tokenTarget === "number" && Number.isFinite(input.tokenTarget) && input.tokenTarget > 0 ? Math.floor(input.tokenTarget) : null;
+  if (!tokenTarget) {
+    return messages.slice(-Math.max(1, input.fallbackKeepCount));
+  }
+  const minMessages = Math.max(1, input.minMessages ?? DEFAULT_COMPACTED_MIN_RECENT_MESSAGES);
+  let startIndex = messages.length;
+  let tokens = 0;
+  for (let i = messages.length - 1; i >= 0; i -= 1) {
+    const msgTokens = estimateHistoryMessageTokens(messages[i]);
+    const selectedCount = messages.length - startIndex;
+    const mustKeep = selectedCount === 0;
+    if (!mustKeep && tokens + msgTokens > tokenTarget) break;
+    tokens += msgTokens;
+    startIndex = i;
+    if (selectedCount + 1 >= minMessages && tokens >= tokenTarget) break;
+  }
+  return messages.slice(startIndex);
+}
+function estimateHistoryMessageTokens(message) {
+  const text = message.kind === "text" ? messageContentForModelHistory(message) : `[Plan: ${message.plan.title}] ${message.plan.goal}`;
+  return Math.max(1, Math.ceil(`${message.kind}:${text}`.length / 4));
+}
 function messageContentForModelHistory(msg) {
   if (msg.role !== "assistant" || !msg.operatorState?.events?.length) {
     return msg.text;
@@ -82966,11 +83050,14 @@ function messageContentForModelHistory(msg) {
     turnSummary: msg.turnSummary
   });
 }
+var DEFAULT_COMPACTED_RECENT_TAIL_TOKENS, DEFAULT_COMPACTED_MIN_RECENT_MESSAGES;
 var init_messageHistory = __esm({
   "features/perchTerminal/runtime/messageContext/messageHistory.ts"() {
     "use strict";
     init_operatorTruth();
     init_wireTranscript();
+    DEFAULT_COMPACTED_RECENT_TAIL_TOKENS = 24e3;
+    DEFAULT_COMPACTED_MIN_RECENT_MESSAGES = 4;
   }
 });
 
@@ -91612,6 +91699,9 @@ function assembleContext(input) {
     {
       compactConversation: contextCompaction?.compactConversation === true,
       compactedSummary: contextCompaction?.compactedSummary ?? null,
+      compactedThroughMessageId: contextCompaction?.compactBoundary?.compactedThroughMessageId ?? null,
+      compactedThroughMessageCreatedAt: contextCompaction?.compactBoundary?.compactedThroughMessageCreatedAt ?? null,
+      recentTailTokenTarget: contextCompaction?.compactionReport?.recentTailTokens ?? DEFAULT_COMPACTED_RECENT_TAIL_TOKENS,
       wireReplayMessages: threadSession?.threadWireMessages ?? null,
       wireReplayContextLimitTokens: input.contextLimitTokens ?? threadSession?.contextMetrics?.effectiveLimitTokens ?? null,
       // Coordinator sessions reference planIds and worker completions from earlier
@@ -93571,11 +93661,11 @@ function __metadata(metadataKey, metadataValue) {
 }
 function __awaiter(thisArg, _arguments, P, generator) {
   function adopt(value) {
-    return value instanceof P ? value : new P(function(resolve4) {
-      resolve4(value);
+    return value instanceof P ? value : new P(function(resolve5) {
+      resolve5(value);
     });
   }
-  return new (P || (P = Promise))(function(resolve4, reject2) {
+  return new (P || (P = Promise))(function(resolve5, reject2) {
     function fulfilled(value) {
       try {
         step(generator.next(value));
@@ -93591,7 +93681,7 @@ function __awaiter(thisArg, _arguments, P, generator) {
       }
     }
     function step(result2) {
-      result2.done ? resolve4(result2.value) : adopt(result2.value).then(fulfilled, rejected);
+      result2.done ? resolve5(result2.value) : adopt(result2.value).then(fulfilled, rejected);
     }
     step((generator = generator.apply(thisArg, _arguments || [])).next());
   });
@@ -93782,14 +93872,14 @@ function __asyncValues(o) {
   }, i);
   function verb(n) {
     i[n] = o[n] && function(v) {
-      return new Promise(function(resolve4, reject2) {
-        v = o[n](v), settle(resolve4, reject2, v.done, v.value);
+      return new Promise(function(resolve5, reject2) {
+        v = o[n](v), settle(resolve5, reject2, v.done, v.value);
       });
     };
   }
-  function settle(resolve4, reject2, d, v) {
+  function settle(resolve5, reject2, d, v) {
     Promise.resolve(v).then(function(v2) {
-      resolve4({ value: v2, done: d });
+      resolve5({ value: v2, done: d });
     }, reject2);
   }
 }
@@ -94404,18 +94494,18 @@ var require_dist = __commonJS({
       }
     };
     function sleep2(ms, signal) {
-      return new Promise((resolve4) => {
+      return new Promise((resolve5) => {
         if (signal === null || signal === void 0 ? void 0 : signal.aborted) {
-          resolve4();
+          resolve5();
           return;
         }
         const id = setTimeout(() => {
           signal === null || signal === void 0 || signal.removeEventListener("abort", onAbort);
-          resolve4();
+          resolve5();
         }, ms);
         function onAbort() {
           clearTimeout(id);
-          resolve4();
+          resolve5();
         }
         signal === null || signal === void 0 || signal.addEventListener("abort", onAbort);
       });
@@ -102425,15 +102515,15 @@ var require_RealtimeChannel = __commonJS({
             }
           }
         } else {
-          return new Promise((resolve4) => {
+          return new Promise((resolve5) => {
             var _a2, _b2, _c;
             const push2 = this.channelAdapter.push(args.type, args, opts.timeout || this.timeout);
             if (args.type === "broadcast" && !((_c = (_b2 = (_a2 = this.params) === null || _a2 === void 0 ? void 0 : _a2.config) === null || _b2 === void 0 ? void 0 : _b2.broadcast) === null || _c === void 0 ? void 0 : _c.ack)) {
-              resolve4("ok");
+              resolve5("ok");
             }
-            push2.receive("ok", () => resolve4("ok"));
-            push2.receive("error", () => resolve4("error"));
-            push2.receive("timeout", () => resolve4("timed out"));
+            push2.receive("ok", () => resolve5("ok"));
+            push2.receive("error", () => resolve5("error"));
+            push2.receive("timeout", () => resolve5("timed out"));
           });
         }
       }
@@ -102458,8 +102548,8 @@ var require_RealtimeChannel = __commonJS({
        * @category Realtime
        */
       async unsubscribe(timeout = this.timeout) {
-        return new Promise((resolve4) => {
-          this.channelAdapter.unsubscribe(timeout).receive("ok", () => resolve4("ok")).receive("timeout", () => resolve4("timed out")).receive("error", () => resolve4("error"));
+        return new Promise((resolve5) => {
+          this.channelAdapter.unsubscribe(timeout).receive("ok", () => resolve5("ok")).receive("timeout", () => resolve5("timed out")).receive("error", () => resolve5("error"));
         });
       }
       /**
@@ -102540,8 +102630,8 @@ var require_RealtimeChannel = __commonJS({
       }
       /** @internal */
       _notThisChannelEvent(event, ref) {
-        const { close, error, leave, join } = constants_1.CHANNEL_EVENTS;
-        const events = [close, error, leave, join];
+        const { close, error, leave, join: join2 } = constants_1.CHANNEL_EVENTS;
+        const events = [close, error, leave, join2];
         return ref && events.includes(event) && ref !== this.joinPush.ref;
       }
       /** @internal */
@@ -102663,11 +102753,11 @@ var require_socketAdapter = __commonJS({
         this.socket.connect();
       }
       disconnect(callback, code, reason, timeout = 1e4) {
-        return new Promise((resolve4) => {
-          setTimeout(() => resolve4("timeout"), timeout);
+        return new Promise((resolve5) => {
+          setTimeout(() => resolve5("timeout"), timeout);
           this.socket.disconnect(() => {
             callback();
-            resolve4("ok");
+            resolve5("ok");
           }, code, reason);
         });
       }
@@ -104213,7 +104303,7 @@ var require_dist3 = __commonJS({
       return _objectSpread24(_objectSpread24({}, params), parameters);
     };
     async function _handleRequest2(fetcher, method, url, options, parameters, body, namespace) {
-      return new Promise((resolve4, reject2) => {
+      return new Promise((resolve5, reject2) => {
         fetcher(url, _getRequestParams2(method, options, parameters, body)).then((result2) => {
           if (!result2.ok) throw result2;
           if (options === null || options === void 0 ? void 0 : options.noResolveJson) return result2;
@@ -104223,7 +104313,7 @@ var require_dist3 = __commonJS({
             if (!contentType || !contentType.includes("application/json")) return {};
           }
           return result2.json();
-        }).then((data) => resolve4(data)).catch((error) => handleError2(error, reject2, options, namespace));
+        }).then((data) => resolve5(data)).catch((error) => handleError2(error, reject2, options, namespace));
       });
     }
     function createFetchApi2(namespace = "storage") {
@@ -114757,11 +114847,11 @@ var require_dist4 = __commonJS({
     };
     function __awaiter3(thisArg, _arguments, P, generator) {
       function adopt(value) {
-        return value instanceof P ? value : new P(function(resolve4) {
-          resolve4(value);
+        return value instanceof P ? value : new P(function(resolve5) {
+          resolve5(value);
         });
       }
-      return new (P || (P = Promise))(function(resolve4, reject2) {
+      return new (P || (P = Promise))(function(resolve5, reject2) {
         function fulfilled(value) {
           try {
             step(generator.next(value));
@@ -114777,7 +114867,7 @@ var require_dist4 = __commonJS({
           }
         }
         function step(result2) {
-          result2.done ? resolve4(result2.value) : adopt(result2.value).then(fulfilled, rejected);
+          result2.done ? resolve5(result2.value) : adopt(result2.value).then(fulfilled, rejected);
         }
         step((generator = generator.apply(thisArg, _arguments || [])).next());
       });
@@ -118758,18 +118848,18 @@ var init_streamNormalizer = __esm({
 
 // node_modules/@supabase/postgrest-js/dist/index.mjs
 function sleep(ms, signal) {
-  return new Promise((resolve4) => {
+  return new Promise((resolve5) => {
     if (signal === null || signal === void 0 ? void 0 : signal.aborted) {
-      resolve4();
+      resolve5();
       return;
     }
     const id = setTimeout(() => {
       signal === null || signal === void 0 || signal.removeEventListener("abort", onAbort);
-      resolve4();
+      resolve5();
     }, ms);
     function onAbort() {
       clearTimeout(id);
-      resolve4();
+      resolve5();
     }
     signal === null || signal === void 0 || signal.addEventListener("abort", onAbort);
   });
@@ -124304,7 +124394,7 @@ function normalizeHeaders(headers) {
   return result2;
 }
 async function _handleRequest(fetcher, method, url, options, parameters, body, namespace) {
-  return new Promise((resolve4, reject2) => {
+  return new Promise((resolve5, reject2) => {
     fetcher(url, _getRequestParams(method, options, parameters, body)).then((result2) => {
       if (!result2.ok) throw result2;
       if (options === null || options === void 0 ? void 0 : options.noResolveJson) return result2;
@@ -124314,7 +124404,7 @@ async function _handleRequest(fetcher, method, url, options, parameters, body, n
         if (!contentType || !contentType.includes("application/json")) return {};
       }
       return result2.json();
-    }).then((data) => resolve4(data)).catch((error) => handleError(error, reject2, options, namespace));
+    }).then((data) => resolve5(data)).catch((error) => handleError(error, reject2, options, namespace));
   });
 }
 function createFetchApi(namespace = "storage") {
@@ -126932,11 +127022,11 @@ __export(dist_exports, {
 });
 function __awaiter2(thisArg, _arguments, P, generator) {
   function adopt(value) {
-    return value instanceof P ? value : new P(function(resolve4) {
-      resolve4(value);
+    return value instanceof P ? value : new P(function(resolve5) {
+      resolve5(value);
     });
   }
-  return new (P || (P = Promise))(function(resolve4, reject2) {
+  return new (P || (P = Promise))(function(resolve5, reject2) {
     function fulfilled(value) {
       try {
         step(generator.next(value));
@@ -126952,7 +127042,7 @@ function __awaiter2(thisArg, _arguments, P, generator) {
       }
     }
     function step(result2) {
-      result2.done ? resolve4(result2.value) : adopt(result2.value).then(fulfilled, rejected);
+      result2.done ? resolve5(result2.value) : adopt(result2.value).then(fulfilled, rejected);
     }
     step((generator = generator.apply(thisArg, _arguments || [])).next());
   });
@@ -128257,12 +128347,12 @@ async function callAutoRaced(opts, parallelism) {
 }
 async function firstSuccessful(promises) {
   const pending = new Set(promises);
-  return new Promise((resolve4, reject2) => {
+  return new Promise((resolve5, reject2) => {
     promises.forEach((promise) => {
       promise.then((outcome) => {
         pending.delete(promise);
         if ("result" in outcome) {
-          resolve4(outcome);
+          resolve5(outcome);
         } else if (pending.size === 0) {
           reject2(new Error(`All ${promises.length} racers failed`));
         }
@@ -130156,7 +130246,7 @@ function createProviderAbortSignal(parent, timeoutMs = AUTO_ROUTER_PROVIDER_TIME
   };
 }
 function readStreamChunkWithIdleTimeout(reader, idleMs, abortSignal) {
-  return new Promise((resolve4, reject2) => {
+  return new Promise((resolve5, reject2) => {
     const timer = setTimeout(
       () => reject2(new Error(`stream idle timeout after ${idleMs}ms`)),
       idleMs
@@ -130177,7 +130267,7 @@ function readStreamChunkWithIdleTimeout(reader, idleMs, abortSignal) {
       (result2) => {
         clearTimeout(timer);
         if (abortSignal) abortSignal.removeEventListener("abort", onAbort);
-        resolve4(result2);
+        resolve5(result2);
       },
       (err) => {
         clearTimeout(timer);
@@ -133824,8 +133914,8 @@ function validateArgs(name, args) {
         return `${name}.path must be a safe path.`;
       return null;
     case TOOL_NAMES.writeLocalFile:
-      if (!isSafeRelativePath(args.path))
-        return "writeLocalFile.path must be a workspace-relative path such as intelligence_center_mockup.html, not an absolute /Users/... path.";
+      if (!isSafeFilePath(args.path))
+        return "writeLocalFile.path must be a safe local path.";
       if (typeof args.content !== "string")
         return "writeLocalFile.content must be a string.";
       if (args.overwrite !== void 0 && typeof args.overwrite !== "boolean")
@@ -133833,20 +133923,20 @@ function validateArgs(name, args) {
       return null;
     case TOOL_NAMES.moveLocalFile:
     case TOOL_NAMES.copyLocalFile:
-      if (!isSafeRelativePath(args.from))
-        return `${name}.from must be a safe relative path.`;
-      if (!isSafeRelativePath(args.to))
-        return `${name}.to must be a safe relative path.`;
+      if (!isSafeFilePath(args.from))
+        return `${name}.from must be a safe local path.`;
+      if (!isSafeFilePath(args.to))
+        return `${name}.to must be a safe local path.`;
       return null;
     case TOOL_NAMES.createDirectory:
     case TOOL_NAMES.deleteLocalFile:
     case TOOL_NAMES.printFile:
-      if (!isSafeRelativePath(args.path))
-        return `${name}.path must be a safe relative path.`;
+      if (!isSafeFilePath(args.path))
+        return `${name}.path must be a safe local path.`;
       return null;
     case TOOL_NAMES.editLocalFile:
-      if (!isSafeRelativePath(args.path))
-        return "editLocalFile.path must be a safe relative path.";
+      if (!isSafeFilePath(args.path))
+        return "editLocalFile.path must be a safe local path.";
       if (typeof args.oldText !== "string" || !args.oldText)
         return "editLocalFile.oldText must be a non-empty string.";
       if (typeof args.newText !== "string")
@@ -133871,8 +133961,8 @@ function validateArgs(name, args) {
         return "listLocalSources.maxResults must be a positive number.";
       return null;
     case TOOL_NAMES.readLocalSourceFile:
-      if (!isSafeLocalSourceId(args.localSourceId) && !isSafeRelativePath(args.localSourceId))
-        return "readLocalSourceFile.localSourceId must be a valid local source id or safe relative path.";
+      if (!isSafeLocalSourceId(args.localSourceId) && !isSafeFilePath(args.localSourceId))
+        return "readLocalSourceFile.localSourceId must be a valid local source id or safe local path.";
       return null;
     case TOOL_NAMES.generateAPAuditPacket:
       if (typeof args.folderPath !== "string" || !args.folderPath.trim())
@@ -134140,7 +134230,7 @@ function isSafeFilePath(value) {
   if (typeof value !== "string") return false;
   const trimmed = value.trim();
   if (!trimmed) return false;
-  if (/^file:/i.test(trimmed) || trimmed.includes("::") || trimmed === "~" || trimmed.startsWith("~/"))
+  if (/^file:/i.test(trimmed) || trimmed.includes("::"))
     return false;
   return !trimmed.split(/[\\/]+/).includes("..");
 }
@@ -134423,13 +134513,13 @@ function getDesktopToolDefinitions() {
       type: "function",
       function: {
         name: TOOL_NAMES.writeLocalFile,
-        description: "Create or overwrite a local UTF-8 text file. Permission mode controls whether it runs immediately or asks for approval.",
+        description: "Create or overwrite a local UTF-8 text file. Accepts absolute paths, ~/ paths, or paths relative to the current local working directory. Permission mode controls whether it runs immediately or asks for approval.",
         parameters: {
           type: "object",
           properties: {
             path: {
               type: "string",
-              description: "Workspace-relative path to write, such as intelligence_center_mockup.html or reports/summary.md. Do not pass an absolute /Users/... path."
+              description: "Path to write. May be absolute, ~/..., or relative to the current local working directory."
             },
             content: {
               type: "string",
@@ -134449,17 +134539,17 @@ function getDesktopToolDefinitions() {
       type: "function",
       function: {
         name: TOOL_NAMES.moveLocalFile,
-        description: "Move or rename a file within the approved workspace. Write-tier risk.",
+        description: "Move or rename a local file. Accepts absolute paths, ~/ paths, or paths relative to the current local working directory. Write-tier risk.",
         parameters: {
           type: "object",
           properties: {
             from: {
               type: "string",
-              description: "Workspace-relative source path to move."
+              description: "Source path to move."
             },
             to: {
               type: "string",
-              description: "Workspace-relative destination path."
+              description: "Destination path."
             }
           },
           required: ["from", "to"],
@@ -134471,17 +134561,17 @@ function getDesktopToolDefinitions() {
       type: "function",
       function: {
         name: TOOL_NAMES.copyLocalFile,
-        description: "Copy a file within the approved workspace. Write-tier risk.",
+        description: "Copy a local file. Accepts absolute paths, ~/ paths, or paths relative to the current local working directory. Write-tier risk.",
         parameters: {
           type: "object",
           properties: {
             from: {
               type: "string",
-              description: "Workspace-relative source path to copy."
+              description: "Source path to copy."
             },
             to: {
               type: "string",
-              description: "Workspace-relative destination path."
+              description: "Destination path."
             }
           },
           required: ["from", "to"],
@@ -134493,13 +134583,13 @@ function getDesktopToolDefinitions() {
       type: "function",
       function: {
         name: TOOL_NAMES.createDirectory,
-        description: "Create a workspace-local directory recursively (mkdir -p). Write-tier risk.",
+        description: "Create a local directory recursively (mkdir -p). Accepts absolute paths, ~/ paths, or paths relative to the current local working directory. Write-tier risk.",
         parameters: {
           type: "object",
           properties: {
             path: {
               type: "string",
-              description: "Workspace-relative directory path to create."
+              description: "Directory path to create."
             }
           },
           required: ["path"],
@@ -134511,13 +134601,13 @@ function getDesktopToolDefinitions() {
       type: "function",
       function: {
         name: TOOL_NAMES.deleteLocalFile,
-        description: "Delete a single workspace-local file. Lower permission modes ask for approval; Take the Wheel runs it without asking.",
+        description: "Delete a single local file. Accepts absolute paths, ~/ paths, or paths relative to the current local working directory. Lower permission modes ask for approval; Take the Wheel runs it without asking.",
         parameters: {
           type: "object",
           properties: {
             path: {
               type: "string",
-              description: "Workspace-relative file path to delete."
+              description: "File path to delete."
             }
           },
           required: ["path"],
@@ -134529,13 +134619,13 @@ function getDesktopToolDefinitions() {
       type: "function",
       function: {
         name: TOOL_NAMES.printFile,
-        description: "Send a workspace-local file to the default printer using the system print command. Write-tier risk.",
+        description: "Send a local file to the default printer using the system print command. Write-tier risk.",
         parameters: {
           type: "object",
           properties: {
             path: {
               type: "string",
-              description: "Workspace-relative file path to print."
+              description: "File path to print."
             }
           },
           required: ["path"],
@@ -134547,13 +134637,13 @@ function getDesktopToolDefinitions() {
       type: "function",
       function: {
         name: TOOL_NAMES.editLocalFile,
-        description: "Exact find/replace edit in a workspace-local UTF-8 text file. Lower permission modes ask for approval; Take the Wheel runs it without asking.",
+        description: "Exact find/replace edit in a local UTF-8 text file. Accepts absolute paths, ~/ paths, or paths relative to the current local working directory. Lower permission modes ask for approval; Take the Wheel runs it without asking.",
         parameters: {
           type: "object",
           properties: {
             path: {
               type: "string",
-              description: "Workspace-relative path to edit."
+              description: "Path to edit."
             },
             oldText: { type: "string", description: "Exact text to replace." },
             newText: { type: "string", description: "Replacement text." },
@@ -138738,8 +138828,8 @@ var init_capabilityBus = __esm({
         }
         let resolvePromise = () => {
         };
-        const promise = new Promise((resolve4) => {
-          resolvePromise = resolve4;
+        const promise = new Promise((resolve5) => {
+          resolvePromise = resolve5;
         });
         const createdAt = (/* @__PURE__ */ new Date()).toISOString();
         const request = {
@@ -138796,7 +138886,7 @@ var init_capabilityBus = __esm({
         return true;
       }
       getPending(sessionId) {
-        return Array.from(this.pending.values()).filter((entry) => !sessionId || entry.sessionId === sessionId).map(({ resolve: resolve4, promise, ...request }) => request);
+        return Array.from(this.pending.values()).filter((entry) => !sessionId || entry.sessionId === sessionId).map(({ resolve: resolve5, promise, ...request }) => request);
       }
       dispatchBrowserEvent(type, payload) {
         if (typeof window === "undefined") return;
@@ -139236,7 +139326,7 @@ function createAbortableBrowserDriver(driver, signal, timeoutMs = DEFAULT_BROWSE
   };
 }
 function withAbortAndTimeout(promise, signal, timeoutMs, label) {
-  return new Promise((resolve4, reject2) => {
+  return new Promise((resolve5, reject2) => {
     if (signal?.aborted) {
       reject2(abortError(`${label} cancelled.`));
       return;
@@ -139262,7 +139352,7 @@ function withAbortAndTimeout(promise, signal, timeoutMs, label) {
       );
     }
     promise.then(
-      (value) => finish(() => resolve4(value)),
+      (value) => finish(() => resolve5(value)),
       (error) => finish(() => reject2(error))
     );
   });
@@ -140021,7 +140111,7 @@ async function maybeWaitForCapabilityAndRetry(failureKind, input, runtime, snaps
 function waitForAbortable(promise, signal) {
   if (!signal) return promise;
   if (signal.aborted) return Promise.reject(new DOMException("Browser action cancelled.", "AbortError"));
-  return new Promise((resolve4, reject2) => {
+  return new Promise((resolve5, reject2) => {
     const onAbort = () => {
       signal.removeEventListener("abort", onAbort);
       reject2(new DOMException("Browser action cancelled.", "AbortError"));
@@ -140030,7 +140120,7 @@ function waitForAbortable(promise, signal) {
     promise.then(
       (value) => {
         signal.removeEventListener("abort", onAbort);
-        resolve4(value);
+        resolve5(value);
       },
       (error) => {
         signal.removeEventListener("abort", onAbort);
@@ -140726,8 +140816,8 @@ function pasteShortcut() {
 }
 function browserShortcut(key) {
   const override = (typeof process !== "undefined" ? process.env?.PERCH_PLAYWRIGHT_OS : "")?.toLowerCase();
-  const platform2 = (typeof process !== "undefined" ? process.platform : "") ?? "";
-  const isMac = override === "mac" || override !== "windows" && override !== "linux" && platform2 === "darwin";
+  const platform3 = (typeof process !== "undefined" ? process.platform : "") ?? "";
+  const isMac = override === "mac" || override !== "windows" && override !== "linux" && platform3 === "darwin";
   return isMac ? `Meta+${key}` : `Control+${key}`;
 }
 function failureMessage(kind) {
@@ -140766,12 +140856,12 @@ function isAbortError(err) {
   return err instanceof DOMException && err.name === "AbortError";
 }
 function delay(ms, signal) {
-  return new Promise((resolve4, reject2) => {
+  return new Promise((resolve5, reject2) => {
     if (signal?.aborted) {
       reject2(new DOMException("Browser action cancelled.", "AbortError"));
       return;
     }
-    const timeout = globalThis.setTimeout(resolve4, ms);
+    const timeout = globalThis.setTimeout(resolve5, ms);
     signal?.addEventListener(
       "abort",
       () => {
@@ -141197,12 +141287,12 @@ function toStringArray2(value) {
   return result2.length > 0 ? result2 : void 0;
 }
 function pause(ms, signal) {
-  return new Promise((resolve4, reject2) => {
+  return new Promise((resolve5, reject2) => {
     if (signal?.aborted) {
       reject2(new DOMException("Browser research cancelled.", "AbortError"));
       return;
     }
-    const timer = setTimeout(resolve4, ms);
+    const timer = setTimeout(resolve5, ms);
     signal?.addEventListener(
       "abort",
       () => {
@@ -141589,7 +141679,7 @@ async function fetchData(url, type = "text") {
     }
     return response.text();
   }
-  return new Promise((resolve4, reject2) => {
+  return new Promise((resolve5, reject2) => {
     const request = new XMLHttpRequest();
     request.open("GET", url, true);
     request.responseType = type;
@@ -141602,10 +141692,10 @@ async function fetchData(url, type = "text") {
           case "arraybuffer":
           case "blob":
           case "json":
-            resolve4(request.response);
+            resolve5(request.response);
             return;
         }
-        resolve4(request.responseText);
+        resolve5(request.responseText);
         return;
       }
       reject2(new Error(request.statusText));
@@ -144612,7 +144702,7 @@ var init_pdf = __esm({
           var defineProperty = Object.defineProperty;
           var stringSlice = uncurryThis("".slice);
           var replace = uncurryThis("".replace);
-          var join = uncurryThis([].join);
+          var join2 = uncurryThis([].join);
           var CONFIGURABLE_LENGTH = DESCRIPTORS && !fails(function() {
             return defineProperty(function() {
             }, "length", { value: 8 }).length !== 8;
@@ -144639,7 +144729,7 @@ var init_pdf = __esm({
             }
             var state = enforceInternalState(value);
             if (!hasOwn(state, "source")) {
-              state.source = join(TEMPLATE, typeof name == "string" ? name : "");
+              state.source = join2(TEMPLATE, typeof name == "string" ? name : "");
             }
             return value;
           };
@@ -144667,13 +144757,13 @@ var init_pdf = __esm({
           var aCallable = __webpack_require__2(9306);
           var $TypeError = TypeError;
           var PromiseCapability = function(C) {
-            var resolve4, reject2;
+            var resolve5, reject2;
             this.promise = new C(function($$resolve, $$reject) {
-              if (resolve4 !== void 0 || reject2 !== void 0) throw new $TypeError("Bad Promise constructor");
-              resolve4 = $$resolve;
+              if (resolve5 !== void 0 || reject2 !== void 0) throw new $TypeError("Bad Promise constructor");
+              resolve5 = $$resolve;
               reject2 = $$reject;
             });
-            this.resolve = aCallable(resolve4);
+            this.resolve = aCallable(resolve5);
             this.reject = aCallable(reject2);
           };
           module2.exports.f = function(C) {
@@ -147791,11 +147881,11 @@ var init_pdf = __esm({
             const mustRemoveAspectRatioPromise = _ImageManager._isSVGFittingCanvas;
             const fileReader = new FileReader();
             const imageElement = new Image();
-            const imagePromise = new Promise((resolve4, reject2) => {
+            const imagePromise = new Promise((resolve5, reject2) => {
               imageElement.onload = () => {
                 data.bitmap = imageElement;
                 data.isSvg = true;
-                resolve4();
+                resolve5();
               };
               fileReader.onload = async () => {
                 const url = data.svgUrl = fileReader.result;
@@ -151644,8 +151734,8 @@ var init_pdf = __esm({
           if (this.isSyncFontLoadingSupported) {
             return;
           }
-          await new Promise((resolve4) => {
-            const request = this._queueLoadingCallback(resolve4);
+          await new Promise((resolve5) => {
+            const request = this._queueLoadingCallback(resolve5);
             this._prepareFontLoadEvent(font, request);
           });
         }
@@ -155985,8 +156075,8 @@ var init_pdf = __esm({
         this._readCapability = Promise.withResolvers();
         this._headersCapability = Promise.withResolvers();
         const fs14 = process.getBuiltinModule("fs");
-        fs14.promises.lstat(this._url).then((stat) => {
-          this._contentLength = stat.size;
+        fs14.promises.lstat(this._url).then((stat2) => {
+          this._contentLength = stat2.size;
           this._setReadableStream(fs14.createReadStream(this._url));
           this._headersCapability.resolve();
         }, (error) => {
@@ -157002,14 +157092,14 @@ var init_pdf = __esm({
           return this.getXfa().then((xfa) => XfaText.textContent(xfa));
         }
         const readableStream = this.streamTextContent(params);
-        return new Promise(function(resolve4, reject2) {
+        return new Promise(function(resolve5, reject2) {
           function pump() {
             reader.read().then(function({
               value,
               done
             }) {
               if (done) {
-                resolve4(textContent);
+                resolve5(textContent);
                 return;
               }
               textContent.lang ??= value.lang;
@@ -165106,7 +165196,7 @@ var init_pdf = __esm({
         input.type = "file";
         input.accept = _StampEditor.supportedTypesStr;
         const signal = this._uiManager._signal;
-        this.#bitmapPromise = new Promise((resolve4) => {
+        this.#bitmapPromise = new Promise((resolve5) => {
           input.addEventListener("change", async () => {
             if (!input.files || input.files.length === 0) {
               this.remove();
@@ -165121,13 +165211,13 @@ var init_pdf = __esm({
               });
               this.#getBitmapFetched(data);
             }
-            resolve4();
+            resolve5();
           }, {
             signal
           });
           input.addEventListener("cancel", () => {
             this.remove();
-            resolve4();
+            resolve5();
           }, {
             signal
           });
@@ -170434,13 +170524,13 @@ var require_thenables = __commonJS({
         promise._captureStackTrace();
         if (context) context._popContext();
         var synchronous = true;
-        var result2 = util.tryCatch(then).call(x, resolve4, reject2);
+        var result2 = util.tryCatch(then).call(x, resolve5, reject2);
         synchronous = false;
         if (promise && result2 === errorObj2) {
           promise._rejectCallback(result2.e, true, true);
           promise = null;
         }
-        function resolve4(value) {
+        function resolve5(value) {
           if (!promise) return;
           promise._resolveCallback(value);
           promise = null;
@@ -170975,9 +171065,9 @@ var require_debuggability = __commonJS({
         return false;
       }
       Promise2.prototype._fireEvent = defaultFireEvent;
-      Promise2.prototype._execute = function(executor, resolve4, reject2) {
+      Promise2.prototype._execute = function(executor, resolve5, reject2) {
         try {
-          executor(resolve4, reject2);
+          executor(resolve5, reject2);
         } catch (e) {
           return e;
         }
@@ -171000,10 +171090,10 @@ var require_debuggability = __commonJS({
         ;
         ;
       };
-      function cancellationExecute(executor, resolve4, reject2) {
+      function cancellationExecute(executor, resolve5, reject2) {
         var promise = this;
         try {
-          executor(resolve4, reject2, function(onCancel) {
+          executor(resolve5, reject2, function(onCancel) {
             if (typeof onCancel !== "function") {
               throw new TypeError("onCancel must be a function, got: " + util.toString(onCancel));
             }
@@ -173026,15 +173116,15 @@ var require_generators = __commonJS({
         var stack = new Error().stack;
         return function() {
           var generator = generatorFunction.apply(this, arguments);
-          var spawn2 = new PromiseSpawn$(
+          var spawn3 = new PromiseSpawn$(
             void 0,
             void 0,
             yieldHandler,
             stack
           );
-          var ret2 = spawn2.promise();
-          spawn2._generator = generator;
-          spawn2._promiseFulfilled(void 0);
+          var ret2 = spawn3.promise();
+          spawn3._generator = generator;
+          spawn3._promiseFulfilled(void 0);
           return ret2;
         };
       };
@@ -173049,9 +173139,9 @@ var require_generators = __commonJS({
         if (typeof generatorFunction !== "function") {
           return apiRejection("generatorFunction must be a function\n\n    See http://goo.gl/MqrFmX\n");
         }
-        var spawn2 = new PromiseSpawn(generatorFunction, this);
-        var ret2 = spawn2.promise();
-        spawn2._run(Promise2.spawn);
+        var spawn3 = new PromiseSpawn(generatorFunction, this);
+        var ret2 = spawn3.promise();
+        spawn3._run(Promise2.spawn);
         return ret2;
       };
     };
@@ -174649,14 +174739,14 @@ var require_promises = __commonJS({
       });
     };
     function defer() {
-      var resolve4;
+      var resolve5;
       var reject2;
       var promise = new bluebird.Promise(function(resolveArg, rejectArg) {
-        resolve4 = resolveArg;
+        resolve5 = resolveArg;
         reject2 = rejectArg;
       });
       return {
-        resolve: resolve4,
+        resolve: resolve5,
         reject: reject2,
         promise
       };
@@ -175345,7 +175435,7 @@ var require_BufferList = __commonJS({
         this.head = this.tail = null;
         this.length = 0;
       };
-      BufferList.prototype.join = function join(s) {
+      BufferList.prototype.join = function join2(s) {
         if (this.length === 0) return "";
         var p = this.head;
         var ret2 = "" + p.data;
@@ -177320,8 +177410,8 @@ var require_lib4 = __commonJS({
         return this;
       }
       var p = this.constructor;
-      return this.then(resolve5, reject3);
-      function resolve5(value) {
+      return this.then(resolve6, reject3);
+      function resolve6(value) {
         function yes() {
           return value;
         }
@@ -177474,8 +177564,8 @@ var require_lib4 = __commonJS({
       }
       return out;
     }
-    Promise2.resolve = resolve4;
-    function resolve4(value) {
+    Promise2.resolve = resolve5;
+    function resolve5(value) {
       if (value instanceof this) {
         return value;
       }
@@ -178006,10 +178096,10 @@ var require_utils2 = __commonJS({
       var promise = external.Promise.resolve(inputData).then(function(data) {
         var isBlob = support.blob && (data instanceof Blob || ["[object File]", "[object Blob]"].indexOf(Object.prototype.toString.call(data)) !== -1);
         if (isBlob && typeof FileReader !== "undefined") {
-          return new external.Promise(function(resolve4, reject2) {
+          return new external.Promise(function(resolve5, reject2) {
             var reader = new FileReader();
             reader.onload = function(e) {
-              resolve4(e.target.result);
+              resolve5(e.target.result);
             };
             reader.onerror = function(e) {
               reject2(e.target.error);
@@ -178564,7 +178654,7 @@ var require_StreamHelper = __commonJS({
       }
     }
     function accumulate(helper, updateCallback) {
-      return new external.Promise(function(resolve4, reject2) {
+      return new external.Promise(function(resolve5, reject2) {
         var dataArray = [];
         var chunkType = helper._internalType, resultType = helper._outputType, mimeType = helper._mimeType;
         helper.on("data", function(data, meta) {
@@ -178578,7 +178668,7 @@ var require_StreamHelper = __commonJS({
         }).on("end", function() {
           try {
             var result2 = transformZipOutput(resultType, concat(chunkType, dataArray), mimeType);
-            resolve4(result2);
+            resolve5(result2);
           } catch (e) {
             reject2(e);
           }
@@ -183370,7 +183460,7 @@ var require_ZipFileWorker = __commonJS({
     var generateDosExternalFileAttr = function(dosPermissions) {
       return (dosPermissions || 0) & 63;
     };
-    var generateZipParts = function(streamInfo, streamedContent, streamingEnded, offset, platform2, encodeFileName) {
+    var generateZipParts = function(streamInfo, streamedContent, streamingEnded, offset, platform3, encodeFileName) {
       var file = streamInfo["file"], compression = streamInfo["compression"], useCustomEncoding = encodeFileName !== utf8.utf8encode, encodedFileName = utils3.transformTo("string", encodeFileName(file.name)), utfEncodedFileName = utils3.transformTo("string", utf8.utf8encode(file.name)), comment = file.comment, encodedComment = utils3.transformTo("string", encodeFileName(comment)), utfEncodedComment = utils3.transformTo("string", utf8.utf8encode(comment)), useUTF8ForFileName = utfEncodedFileName.length !== file.name.length, useUTF8ForComment = utfEncodedComment.length !== comment.length, dosTime, dosDate, extraFields = "", unicodePathExtraField = "", unicodeCommentExtraField = "", dir = file.dir, date = file.date;
       var dataInfo = {
         crc32: 0,
@@ -183394,7 +183484,7 @@ var require_ZipFileWorker = __commonJS({
       if (dir) {
         extFileAttr |= 16;
       }
-      if (platform2 === "UNIX") {
+      if (platform3 === "UNIX") {
         versionMadeBy = 798;
         extFileAttr |= generateUnixExternalFileAttr(file.unixPermissions, dir);
       } else {
@@ -183479,11 +183569,11 @@ var require_ZipFileWorker = __commonJS({
       decToHex(streamInfo["uncompressedSize"], 4);
       return descriptor;
     };
-    function ZipFileWorker(streamFiles, comment, platform2, encodeFileName) {
+    function ZipFileWorker(streamFiles, comment, platform3, encodeFileName) {
       GenericWorker.call(this, "ZipFileWorker");
       this.bytesWritten = 0;
       this.zipComment = comment;
-      this.zipPlatform = platform2;
+      this.zipPlatform = platform3;
       this.encodeFileName = encodeFileName;
       this.streamFiles = streamFiles;
       this.accumulate = false;
@@ -184691,7 +184781,7 @@ var require_load = __commonJS({
     var Crc32Probe = require_Crc32Probe();
     var nodejsUtils = require_nodejsUtils();
     function checkEntryCRC32(zipEntry) {
-      return new external.Promise(function(resolve4, reject2) {
+      return new external.Promise(function(resolve5, reject2) {
         var worker = zipEntry.decompressed.getContentWorker().pipe(new Crc32Probe());
         worker.on("error", function(e) {
           reject2(e);
@@ -184699,7 +184789,7 @@ var require_load = __commonJS({
           if (worker.streamInfo.crc32 !== zipEntry.decompressed.crc32) {
             reject2(new Error("Corrupted zip : CRC32 mismatch"));
           } else {
-            resolve4();
+            resolve5();
           }
         }).resume();
       });
@@ -194523,7 +194613,7 @@ var require_files = __commonJS({
     var fs14 = __require("fs");
     var url = __require("url");
     var os6 = __require("os");
-    var dirname = __require("path").dirname;
+    var dirname2 = __require("path").dirname;
     var resolvePath2 = __require("path").resolve;
     var isAbsolutePath2 = require_path_is_absolute();
     var promises = require_promises();
@@ -194538,10 +194628,10 @@ var require_files = __commonJS({
           }
         };
       }
-      var base = options.relativeToFile ? dirname(options.relativeToFile) : null;
+      var base = options.relativeToFile ? dirname2(options.relativeToFile) : null;
       function read(uri, encoding) {
         return resolveUri(uri).then(function(path14) {
-          return readFile3(path14, encoding).caught(function(error) {
+          return readFile4(path14, encoding).caught(function(error) {
             var message = "could not open external image: '" + uri + "' (document directory: '" + base + "')\n" + error.message;
             return promises.reject(new Error(message));
           });
@@ -194561,15 +194651,15 @@ var require_files = __commonJS({
         read
       };
     }
-    var readFile3 = promises.promisify(fs14.readFile.bind(fs14));
-    function uriToPath(uriString, platform2) {
-      if (!platform2) {
-        platform2 = os6.platform();
+    var readFile4 = promises.promisify(fs14.readFile.bind(fs14));
+    function uriToPath(uriString, platform3) {
+      if (!platform3) {
+        platform3 = os6.platform();
       }
       var uri = url.parse(uriString);
       if (isLocalFileUri(uri) || isRelativeUri(uri)) {
         var path14 = decodeURIComponent(uri.path);
-        if (platform2 === "win32" && /^\/[a-z]:/i.test(path14)) {
+        if (platform3 === "win32" && /^\/[a-z]:/i.test(path14)) {
           return path14.slice(1);
         } else {
           return path14;
@@ -197278,10 +197368,10 @@ var require_unzip = __commonJS({
     var promises = require_promises();
     var zipfile = require_zipfile();
     exports2.openZip = openZip;
-    var readFile3 = promises.promisify(fs14.readFile);
+    var readFile4 = promises.promisify(fs14.readFile);
     function openZip(options) {
       if (options.path) {
-        return readFile3(options.path).then(zipfile.openArrayBuffer);
+        return readFile4(options.path).then(zipfile.openArrayBuffer);
       } else if (options.buffer) {
         return promises.resolve(zipfile.openArrayBuffer(options.buffer));
       } else if (options.file) {
@@ -198417,9 +198507,9 @@ async function resolveScopedLocalSourceId(localSourceIdOrRelativePath, scopedWor
   if (localSourceIdOrRelativePath.includes("::")) return localSourceIdOrRelativePath;
   const scope = await resolveLocalSourceScope(scopedWorkspaceRoot);
   if (!scope) return localSourceIdOrRelativePath;
-  const relative = normalizeRelativePath(localSourceIdOrRelativePath);
+  const relative2 = normalizeRelativePath(localSourceIdOrRelativePath);
   const prefix = normalizeRelativePath(scope.relativePrefix);
-  const scopedRelative = [prefix, relative].filter(Boolean).join("/");
+  const scopedRelative = [prefix, relative2].filter(Boolean).join("/");
   return `${scope.rootId}::${scopedRelative}`;
 }
 async function resolveApprovedLocalSourceIdForAbsolutePath(pathValue) {
@@ -201827,8 +201917,8 @@ function buildWorkerSourceManifest(input) {
   const exactNames = extractExplicitFileNames(input.objective);
   const maxEntries = Math.max(1, Math.min(200, input.maxEntries ?? 80));
   const candidates = sources.filter((source) => !isExcludedPath(source.relativePath)).filter((source) => {
-    const relative = normalize2(source.relativePath);
-    if (selectedPrefixes.length > 0 && selectedPrefixes.some((prefix) => relative.startsWith(`${prefix}/`) || relative === prefix)) {
+    const relative2 = normalize2(source.relativePath);
+    if (selectedPrefixes.length > 0 && selectedPrefixes.some((prefix) => relative2.startsWith(`${prefix}/`) || relative2 === prefix)) {
       return true;
     }
     if (exactNames.size > 0 && exactNames.has(source.fileName.toLowerCase())) {
@@ -201893,17 +201983,17 @@ function extractExplicitFileNames(objective) {
   return names;
 }
 function sourceSortScore(source, objective) {
-  const relative = normalize2(source.relativePath);
+  const relative2 = normalize2(source.relativePath);
   const file = source.fileName.toLowerCase();
   let score = 0;
   if (objective.includes(file)) score += 100;
-  if (relative.includes("perch-output") || relative.includes("perch-artifacts")) score -= 1e3;
+  if (relative2.includes("perch-output") || relative2.includes("perch-artifacts")) score -= 1e3;
   if (/_\d{3}\.(?:txt|csv|md)$/i.test(file)) score -= 15;
   if (file.endsWith(".csv")) score += 8;
   if (file.endsWith(".txt") || file.endsWith(".md")) score += 5;
   if (file.endsWith(".pdf")) score -= 3;
   for (const token of objective.split(/[^a-z0-9]+/i).filter((t) => t.length >= 4)) {
-    if (relative.includes(token.toLowerCase())) score += 2;
+    if (relative2.includes(token.toLowerCase())) score += 2;
   }
   return score;
 }
@@ -202331,13 +202421,13 @@ function clamp2(value, min2, max2) {
   return Math.max(min2, Math.min(max2, value));
 }
 function loadImage(dataUrl) {
-  return new Promise((resolve4, reject2) => {
+  return new Promise((resolve5, reject2) => {
     if (typeof Image === "undefined") {
       reject2(new Error("Image API unavailable"));
       return;
     }
     const image2 = new Image();
-    image2.onload = () => resolve4(image2);
+    image2.onload = () => resolve5(image2);
     image2.onerror = () => reject2(new Error("Failed to decode screenshot"));
     image2.src = dataUrl;
   });
@@ -202465,9 +202555,9 @@ function fitInside(width, height, maxWidth, maxHeight) {
   };
 }
 async function loadImageElement(dataUrl) {
-  return new Promise((resolve4, reject2) => {
+  return new Promise((resolve5, reject2) => {
     const img = new Image();
-    img.onload = () => resolve4(img);
+    img.onload = () => resolve5(img);
     img.onerror = () => reject2(new Error("Failed to decode screenshot data URL"));
     img.src = dataUrl;
   });
@@ -203689,14 +203779,14 @@ function adapterDriver(ctx) {
   );
 }
 function adapterDelay(ms, signal) {
-  return new Promise((resolve4, reject2) => {
+  return new Promise((resolve5, reject2) => {
     if (signal?.aborted) {
       reject2(new DOMException("Adapter wait cancelled.", "AbortError"));
       return;
     }
     const timeout = setTimeout(() => {
       signal?.removeEventListener("abort", onAbort);
-      resolve4();
+      resolve5();
     }, ms);
     const onAbort = () => {
       clearTimeout(timeout);
@@ -205289,8 +205379,8 @@ var init_GoogleDocsAdapter = __esm({
 
 // features/perchTerminal/runtime/playwright/adapters/GoogleSheetsAdapter.ts
 function shortcut2(key) {
-  const platform2 = typeof navigator === "undefined" ? "" : navigator.platform;
-  return /mac/i.test(platform2) ? `Meta+${key}` : `Control+${key}`;
+  const platform3 = typeof navigator === "undefined" ? "" : navigator.platform;
+  return /mac/i.test(platform3) ? `Meta+${key}` : `Control+${key}`;
 }
 var GoogleSheetsAdapter;
 var init_GoogleSheetsAdapter = __esm({
@@ -210307,6 +210397,7 @@ function buildContextSnapshotFromMetrics(threadId, metrics) {
     consecutiveAutoCompactFailures: metrics.consecutiveAutoCompactFailures ?? 0,
     autoCompactedAtIso: metrics.autoCompactedAtIso ?? null,
     autoCompactedMessageCount: metrics.autoCompactedMessageCount,
+    compactionReport: metrics.compactionReport,
     contextResetAtIso: metrics.resetAtIso ?? null,
     builtAtIso: builtAt,
     createdAt: builtAt
@@ -212685,6 +212776,29 @@ var init_localSources = __esm({
       classification: { native: false },
       handler: async (args, ctx) => {
         const workspaceRoot = effectiveWorkspaceRoot(ctx);
+        const explicitPath = typeof args.path === "string" && args.path.trim() ? args.path.trim() : "";
+        if (explicitPath) {
+          const query2 = typeof args.query === "string" ? args.query.trim().toLowerCase() : "";
+          const maxResults2 = sanitizeListLocalSourcesMaxResults(args.maxResults);
+          const globbed = await listWorkspaceFilesGlob({
+            workspaceRoot: explicitPath,
+            pattern: "*",
+            maxResults: MAX_LIST_LOCAL_SOURCES_MAX_RESULTS,
+            fsAccessOverride: "allow_once"
+          });
+          const allMatches = globbed?.matches ?? [];
+          const filtered = (query2 ? allMatches.filter((m) => m.toLowerCase().includes(query2)) : allMatches).slice(0, maxResults2);
+          return {
+            ok: true,
+            scopedFolderPath: explicitPath,
+            viaGlob: true,
+            query: query2 || null,
+            sources: filtered,
+            matches: filtered,
+            totalFound: globbed?.totalFound ?? allMatches.length,
+            truncated: allMatches.length > maxResults2
+          };
+        }
         const scope = await resolveLocalSourceScope(workspaceRoot);
         if (!scope) {
           const globRoot = typeof args.path === "string" && args.path.trim() || workspaceRoot?.trim() || "";
@@ -212746,7 +212860,7 @@ var init_localSources = __esm({
         const requestedLocalSourceId = String(
           args.localSourceId ?? args.path ?? args.filePath ?? ""
         );
-        const looksLikePath = isAbsolute3(requestedLocalSourceId.trim()) || !requestedLocalSourceId.includes("::") && requestedLocalSourceId.includes("/");
+        const looksLikePath = isAbsolute3(requestedLocalSourceId.trim()) || requestedLocalSourceId.trim().startsWith("~/") || !requestedLocalSourceId.includes("::") && requestedLocalSourceId.includes("/");
         if (looksLikePath) {
           const r = await readWorkspaceFile({
             workspaceRoot,
@@ -214051,7 +214165,7 @@ async function resolveFsAccessForTool(input) {
 function waitForCapabilityResolution(promise, signal) {
   if (!signal) return promise;
   if (signal.aborted) return Promise.reject(new DOMException("Capability wait cancelled.", "AbortError"));
-  return new Promise((resolve4, reject2) => {
+  return new Promise((resolve5, reject2) => {
     const onAbort = () => {
       signal.removeEventListener("abort", onAbort);
       reject2(new DOMException("Capability wait cancelled.", "AbortError"));
@@ -214060,7 +214174,7 @@ function waitForCapabilityResolution(promise, signal) {
     promise.then(
       (value) => {
         signal.removeEventListener("abort", onAbort);
-        resolve4(value);
+        resolve5(value);
       },
       (error) => {
         signal.removeEventListener("abort", onAbort);
@@ -214799,14 +214913,103 @@ function pruneBrowserArtifactsInMessages(messages) {
   }
   return pruned;
 }
-function splitMessagesForCompaction(wireMessages, keepCount) {
-  if (wireMessages.length <= keepCount) {
-    return { toSummarize: [], recent: wireMessages };
+function resolvePostCompactTargetTokens(contextLimitTokens) {
+  const limit = Number.isFinite(contextLimitTokens) && contextLimitTokens > 0 ? Math.floor(contextLimitTokens) : 128e3;
+  const windowScaled = Math.floor(limit * 0.25);
+  return Math.max(
+    POST_COMPACT_MIN_TARGET_TOKENS,
+    Math.min(
+      POST_COMPACT_MAX_TARGET_TOKENS,
+      POST_COMPACT_TARGET_TOKENS,
+      windowScaled
+    )
+  );
+}
+function estimateSingleMessageTokens(message, modelContext) {
+  const content = typeof message.content === "string" ? message.content : JSON.stringify(message.content ?? "");
+  let tokens = tokenizeText(`${message.role}: ${content}`, modelContext).tokenCount;
+  if (message.tool_calls?.length) {
+    tokens += tokenizeText(JSON.stringify(message.tool_calls), modelContext).tokenCount;
+  }
+  return Math.max(1, tokens);
+}
+function adjustTailStartForToolPairs(messages, startIndex) {
+  if (startIndex <= 0) return startIndex;
+  const missingToolCallIds = /* @__PURE__ */ new Set();
+  for (let i = startIndex; i < messages.length; i += 1) {
+    const msg = messages[i];
+    if (msg?.role === "tool" && msg.tool_call_id) {
+      missingToolCallIds.add(msg.tool_call_id);
+    }
+    if (msg?.role === "assistant" && msg.tool_calls?.length) {
+      for (const call of msg.tool_calls) missingToolCallIds.delete(call.id);
+    }
+  }
+  if (missingToolCallIds.size === 0) return startIndex;
+  let nextStart = startIndex;
+  for (let i = startIndex - 1; i >= 0 && missingToolCallIds.size > 0; i -= 1) {
+    const msg = messages[i];
+    if (msg.role !== "assistant" || !msg.tool_calls?.length) continue;
+    const matches = msg.tool_calls.some((call) => missingToolCallIds.has(call.id));
+    if (!matches) continue;
+    nextStart = i;
+    for (const call of msg.tool_calls) missingToolCallIds.delete(call.id);
+  }
+  return nextStart;
+}
+function selectRecentWireMessagesByTokenBudget(wireMessages, input) {
+  if (wireMessages.length === 0) {
+    return { recent: [], recentTailTokens: 0, startIndex: 0 };
+  }
+  const minMessages = Math.max(1, input.minMessages ?? RECENT_MESSAGES_KEEP_COUNT);
+  const tokenBudget = Math.max(1, Math.floor(input.tokenBudget));
+  let startIndex = wireMessages.length;
+  let tokens = 0;
+  for (let i = wireMessages.length - 1; i >= 0; i -= 1) {
+    const messageTokens = estimateSingleMessageTokens(wireMessages[i], input.modelContext);
+    const selectedCount = wireMessages.length - startIndex;
+    const mustKeep = selectedCount === 0;
+    if (!mustKeep && tokens + messageTokens > tokenBudget) break;
+    tokens += messageTokens;
+    startIndex = i;
+    if (selectedCount + 1 >= minMessages && tokens >= tokenBudget) break;
+  }
+  const adjustedStart = adjustTailStartForToolPairs(wireMessages, startIndex);
+  if (adjustedStart !== startIndex) {
+    startIndex = adjustedStart;
+    tokens = wireMessages.slice(startIndex).reduce(
+      (sum, message) => sum + estimateSingleMessageTokens(message, input.modelContext),
+      0
+    );
   }
-  const splitAt = wireMessages.length - keepCount;
   return {
-    toSummarize: wireMessages.slice(0, splitAt),
-    recent: wireMessages.slice(splitAt)
+    recent: wireMessages.slice(startIndex),
+    recentTailTokens: tokens,
+    startIndex
+  };
+}
+function resolveRecentTailBudgetTokens(input) {
+  const nonMessageTokens = input.breakdownAfterPrune.system + input.breakdownAfterPrune.tools + input.breakdownAfterPrune.overhead;
+  const available = input.postCompactTargetTokens - nonMessageTokens - COMPACT_SUMMARY_RESERVE_TOKENS;
+  return Math.max(
+    POST_COMPACT_RECENT_TAIL_MIN_TOKENS,
+    Math.min(POST_COMPACT_RECENT_TAIL_MAX_TOKENS, available)
+  );
+}
+function splitMessagesForCompaction(wireMessages, input) {
+  const { recent, recentTailTokens, startIndex } = selectRecentWireMessagesByTokenBudget(
+    wireMessages,
+    {
+      modelContext: input.modelContext,
+      tokenBudget: input.recentTailTokenBudget,
+      minMessages: input.minMessages
+    }
+  );
+  return {
+    toSummarize: wireMessages.slice(0, startIndex),
+    recent,
+    recentTailTokens,
+    compactedThroughWireIndex: startIndex > 0 ? startIndex - 1 : null
   };
 }
 function formatMessagesForSummary(messages) {
@@ -214901,6 +215104,11 @@ async function prepareLoopMessagesForSend(input) {
   });
   const contextLimitTokens = resolveEffectiveContextLimit(input.option);
   const compactThreshold = getAutoCompactThreshold(input.option);
+  const postCompactTargetTokens = resolvePostCompactTargetTokens(contextLimitTokens);
+  const recentTailTokenBudget = resolveRecentTailBudgetTokens({
+    postCompactTargetTokens,
+    breakdownAfterPrune
+  });
   let breakdown = breakdownAfterPrune;
   const calibrationRatio = typeof input.priorApiContextTokens === "number" && input.priorApiContextTokens > 0 && typeof input.priorEstimateTokens === "number" && input.priorEstimateTokens > 0 ? Math.min(4, Math.max(1, input.priorApiContextTokens / input.priorEstimateTokens)) : 1;
   const anchoredTokens = (estimateTotal) => Math.ceil(estimateTotal * calibrationRatio);
@@ -214929,10 +215137,16 @@ async function prepareLoopMessagesForSend(input) {
     }
   }
   if (autoCompactEnabled && anchoredTokens(breakdown.total) >= compactThreshold) {
-    const { toSummarize, recent } = splitMessagesForCompaction(
-      working,
-      RECENT_MESSAGES_KEEP_COUNT
-    );
+    const {
+      toSummarize,
+      recent,
+      recentTailTokens,
+      compactedThroughWireIndex
+    } = splitMessagesForCompaction(working, {
+      modelContext,
+      recentTailTokenBudget,
+      minMessages: RECENT_MESSAGES_KEEP_COUNT
+    });
     if (toSummarize.length > 0) {
       const summary = await summarizeMessagesForCompaction({
         priorSummary: input.compactedSummary,
@@ -214946,6 +215160,7 @@ async function prepareLoopMessagesForSend(input) {
         signal: input.signal
       });
       if (summary) {
+        const compactedAtIso = (/* @__PURE__ */ new Date()).toISOString();
         const compactedMessages = buildCompactedWireMessages(summary, recent);
         working.length = 0;
         working.push(...compactedMessages);
@@ -214956,20 +215171,45 @@ async function prepareLoopMessagesForSend(input) {
           toolDefinitionsJson,
           modelContext
         });
+        const tokensAfter = anchoredTokens(breakdown.total);
+        const summaryTokens = tokenizeText(summary, modelContext).tokenCount;
+        const compactionReport = {
+          tokensBefore: tokensBeforeCompact,
+          tokensAfter,
+          targetTokens: postCompactTargetTokens,
+          summaryTokens,
+          recentTailTokens,
+          recentTailMessages: recent.length,
+          summarizedMessages: toSummarize.length,
+          restoredToolsOrFiles: 0
+        };
         compactionState = {
           compactedSummary: summary,
           tokensBefore: tokensBeforeCompact,
-          tokensAfter: anchoredTokens(breakdown.total),
+          tokensAfter,
           autoCompactEnabled: true,
           effectiveContextLimitTokens: contextLimitTokens,
-          compactedAtIso: (/* @__PURE__ */ new Date()).toISOString()
+          compactedAtIso,
+          compactBoundary: {
+            kind: "auto",
+            compactedAtIso,
+            compactedThroughWireIndex
+          },
+          compactionReport
         };
         input.onEvent?.({
           type: "context_compacted",
           tokensBefore: tokensBeforeCompact,
-          tokensAfter: anchoredTokens(breakdown.total),
+          tokensAfter,
           summary,
-          ts: (/* @__PURE__ */ new Date()).toISOString()
+          compactionKind: "auto",
+          targetTokens: postCompactTargetTokens,
+          summaryTokens,
+          recentTailTokens,
+          recentTailMessages: recent.length,
+          summarizedMessages: toSummarize.length,
+          restoredToolsOrFiles: 0,
+          ts: compactedAtIso
         });
       }
     }
@@ -215005,7 +215245,7 @@ async function prepareLoopMessagesForSend(input) {
     microcompactedToolResults
   };
 }
-var OPERATOR_SCREENSHOT_MARKER2, KEPT_SNAPSHOT_MAX_CHARS, KEPT_SNAPSHOT_TRUNCATED_MARKER, BROWSER_TOOL_NAMES, RECENT_MESSAGES_KEEP_COUNT, RECENT_TOOL_RESULTS_KEEP_COUNT, MICROCOMPACT_CLEARED_MARKER, COMPACT_SUMMARY_RESERVE_TOKENS, COMPACT_SYSTEM_PROMPT;
+var OPERATOR_SCREENSHOT_MARKER2, KEPT_SNAPSHOT_MAX_CHARS, KEPT_SNAPSHOT_TRUNCATED_MARKER, BROWSER_TOOL_NAMES, RECENT_MESSAGES_KEEP_COUNT, RECENT_TOOL_RESULTS_KEEP_COUNT, POST_COMPACT_TARGET_TOKENS, POST_COMPACT_MIN_TARGET_TOKENS, POST_COMPACT_MAX_TARGET_TOKENS, POST_COMPACT_RECENT_TAIL_MIN_TOKENS, POST_COMPACT_RECENT_TAIL_MAX_TOKENS, MICROCOMPACT_CLEARED_MARKER, COMPACT_SUMMARY_RESERVE_TOKENS, COMPACT_SYSTEM_PROMPT;
 var init_contextLoopCompaction = __esm({
   "features/perchTerminal/runtime/services/contextLoopCompaction.ts"() {
     "use strict";
@@ -215035,6 +215275,11 @@ var init_contextLoopCompaction = __esm({
     ]);
     RECENT_MESSAGES_KEEP_COUNT = 12;
     RECENT_TOOL_RESULTS_KEEP_COUNT = 6;
+    POST_COMPACT_TARGET_TOKENS = 32e3;
+    POST_COMPACT_MIN_TARGET_TOKENS = 2e4;
+    POST_COMPACT_MAX_TARGET_TOKENS = 4e4;
+    POST_COMPACT_RECENT_TAIL_MIN_TOKENS = 4e3;
+    POST_COMPACT_RECENT_TAIL_MAX_TOKENS = 24e3;
     MICROCOMPACT_CLEARED_MARKER = "[Old tool result content cleared to free context]";
     COMPACT_SUMMARY_RESERVE_TOKENS = 4096;
     COMPACT_SYSTEM_PROMPT = `You summarize conversation history for a delivery assistant using Google Docs, Gmail, Calendar, and browser tools.
@@ -217109,15 +217354,15 @@ async function dumpModelPayloadIfRequested(input) {
   const dumpDir = process.env.PERCH_MODEL_PAYLOAD_DUMP_DIR;
   if (process.env.PERCH_DUMP_MODEL_PAYLOAD !== "1" && !dumpDir) return;
   try {
-    const [{ mkdir, writeFile: writeFile2 }, { join }] = await Promise.all([
+    const [{ mkdir: mkdir2, writeFile: writeFile3 }, { join: join2 }] = await Promise.all([
       import("node:fs/promises"),
       import("node:path")
     ]);
-    const dir = dumpDir || join(process.cwd(), ".perch", "debug", "model-payloads");
-    await mkdir(dir, { recursive: true });
-    const safeRunId = (input.runId || "local").replace(/[^a-zA-Z0-9_.-]/g, "_").slice(0, 80);
-    await writeFile2(
-      join(dir, `${safeRunId}-iter-${input.iteration}.json`),
+    const dir = dumpDir || join2(process.cwd(), ".perch", "debug", "model-payloads");
+    await mkdir2(dir, { recursive: true });
+    const safeRunId2 = (input.runId || "local").replace(/[^a-zA-Z0-9_.-]/g, "_").slice(0, 80);
+    await writeFile3(
+      join2(dir, `${safeRunId2}-iter-${input.iteration}.json`),
       JSON.stringify({
         dumpedAt: (/* @__PURE__ */ new Date()).toISOString(),
         runId: input.runId,
@@ -217605,13 +217850,18 @@ async function runLiveAgentsLoop(input) {
               effectiveContextLimitTokens: state.effectiveContextLimitTokens,
               compactedAtIso: state.compactedAtIso,
               autoCompactedAtIso: state.compactedAtIso,
+              autoCompactedMessageCount: state.compactionReport.summarizedMessages,
+              compactBoundary: state.compactBoundary,
+              compactionReport: state.compactionReport,
               consecutiveAutoCompactFailures: 0
             },
             contextMetrics: latest?.contextMetrics ? {
               ...latest.contextMetrics,
               effectiveLimitTokens: state.effectiveContextLimitTokens,
               autoCompactEnabled: state.autoCompactEnabled,
-              autoCompactedAtIso: state.compactedAtIso
+              autoCompactedAtIso: state.compactedAtIso,
+              autoCompactedMessageCount: state.compactionReport.summarizedMessages,
+              compactionReport: state.compactionReport
             } : latest?.contextMetrics,
             updatedAt: (/* @__PURE__ */ new Date()).toISOString()
           },
@@ -219818,7 +220068,13 @@ function emitProgressForRuntimeEvent(event, emit, state = {
     case "context_compacted":
       emitInstantItem(emit, state, turnId, "context", itemId(turnId, "context-compacted", ts), "Context compacted", event.summary, ts, {
         tokensBefore: event.tokensBefore,
-        tokensAfter: event.tokensAfter
+        tokensAfter: event.tokensAfter,
+        targetTokens: event.targetTokens,
+        summaryTokens: event.summaryTokens,
+        recentTailTokens: event.recentTailTokens,
+        recentTailMessages: event.recentTailMessages,
+        summarizedMessages: event.summarizedMessages,
+        restoredToolsOrFiles: event.restoredToolsOrFiles
       });
       break;
     case "plan_card_generated": {
@@ -221003,6 +221259,7 @@ function resolveThreadContextAccounting(input) {
     consecutiveAutoCompactFailures: priorCompaction?.consecutiveAutoCompactFailures ?? priorMetrics?.consecutiveAutoCompactFailures ?? 0,
     autoCompactedAtIso: priorCompaction?.autoCompactedAtIso ?? priorMetrics?.autoCompactedAtIso ?? null,
     autoCompactedMessageCount: priorCompaction?.autoCompactedMessageCount ?? priorMetrics?.autoCompactedMessageCount,
+    compactionReport: priorCompaction?.compactionReport ?? priorMetrics?.compactionReport,
     tokenCountMethod: fill.tokenCountMethod,
     accountingMethod: "thread_fill_v4: headline = retained window fill high-water until compaction; provider usage is last-call detail; workers off-thread only.",
     resetAtIso: compactedAtIso,
@@ -221126,6 +221383,7 @@ function buildClientContextSnapshot(input) {
     consecutiveAutoCompactFailures: accounting.consecutiveAutoCompactFailures ?? 0,
     autoCompactedAtIso: accounting.autoCompactedAtIso ?? null,
     autoCompactedMessageCount: accounting.autoCompactedMessageCount,
+    compactionReport: accounting.compactionReport,
     builtAtIso: input.builtAtIso,
     createdAt: input.builtAtIso,
     ...wireDisplay ? {
@@ -222671,8 +222929,849 @@ var init_runOperatorTurn = __esm({
   }
 });
 
-// features/perchTerminal/runtime/cliHost/nodeLocalBridge.ts
+// electron/localSandboxHost.ts
+import { copyFile, mkdir, mkdtemp, readdir, readFile as readFile3, rm, stat, writeFile as writeFile2 } from "node:fs/promises";
+import { createHash as createHash2, randomUUID } from "node:crypto";
+import { basename, dirname, extname, join, relative, resolve as resolve4 } from "node:path";
+import { homedir, platform, tmpdir } from "node:os";
 import { spawn } from "node:child_process";
+function buildSandboxRuntimeInfo(networkPolicy) {
+  return {
+    networkPolicy,
+    packageInstalls: networkPolicy === "disabled" ? "disabled" : "enabled",
+    pythonCommand: "python3",
+    pipCommand: "python3 -m pip",
+    inputManifestPath: "input_manifest.json",
+    helperModule: "perch_helpers",
+    helperFunctions: [
+      "input_files",
+      "load_tabular",
+      "extract_pdf_text",
+      "extract_invoice_fields",
+      "extract_pdf_tables",
+      "find_duplicates",
+      "write_report",
+      "sandbox_runtime_info"
+    ],
+    notes: [
+      "Read copied sources from paths listed in input_manifest.json.",
+      networkPolicy === "disabled" ? "Package installs and network egress are disabled for this run." : "Package installs are allowed for this run; use python3 -m pip install <package> when needed.",
+      "perch_helpers.extract_pdf_text has a stdlib raw-stream fallback for simple invoice PDFs, so PDF parsing should not require pdfplumber/pypdf for text fields."
+    ]
+  };
+}
+async function writeSandboxManifestFiles(input) {
+  const payload = {
+    ...input.inputManifest,
+    runtime: input.runtimeInfo
+  };
+  const text = JSON.stringify(payload, null, 2);
+  await writeFile2(join(input.workspaceRoot, "input_manifest.json"), text, "utf-8");
+  await writeFile2(join(input.workspaceRoot, "sandbox_runtime.json"), JSON.stringify(input.runtimeInfo, null, 2), "utf-8");
+}
+async function runDesktopSandboxCodeJob(spec, deps) {
+  const runId = safeRunId(spec.runId) ?? makeRunId2("sandbox-code");
+  const startedAt = Date.now();
+  const now13 = () => (deps.now?.() ?? /* @__PURE__ */ new Date()).toISOString();
+  const emitLive = (type, payload) => {
+    deps.onEvent?.({ runId, type, payload, ts: now13() });
+  };
+  const commandText = typeof spec.command === "string" ? spec.command.trim() : "";
+  const code = typeof spec.code === "string" ? spec.code : "";
+  const language = spec.language === "node" ? "node" : "python";
+  const executionMode = commandText ? "command" : "script";
+  const executableText = executionMode === "command" ? commandText : code;
+  const codeSha256 = createHash2("sha256").update(executableText).digest("hex");
+  const networkPolicy = spec.networkPolicy ?? "disabled";
+  if (!executableText.trim()) {
+    return { ok: false, kind: "blocked", message: "run_sandbox_code requires either command or code.", executionHost: "electron-main", runId, codeSha256 };
+  }
+  emitLive("sandbox_started", {
+    executionHost: "electron-main",
+    runnerKind: "dev-local",
+    networkPolicy,
+    label: spec.label ?? null,
+    codeSha256,
+    language: executionMode === "command" ? "shell" : language
+  });
+  const validationReasons = executionMode === "script" ? validateScript(code, language) : [];
+  if (validationReasons.length > 0) {
+    emitLive("sandbox_failed", {
+      stopReason: "validation_rejected",
+      message: "The model-written sandbox code was rejected by validation.",
+      validationReasons,
+      codeSha256
+    });
+    return {
+      ok: false,
+      kind: "failed",
+      message: "The model-written sandbox code was rejected by validation.",
+      runnerKind: "dev-local",
+      executionHost: "electron-main",
+      runId,
+      error: validationReasons.join("; "),
+      validationReasons,
+      codeSha256
+    };
+  }
+  let resolved = [];
+  if (Array.isArray(spec.sources) && spec.sources.length > 0) {
+    try {
+      emitLive("inputs_preparing", { sourceCount: spec.sources.length });
+      resolved = await resolveApprovedInputs(spec.sources, deps);
+    } catch (err) {
+      const message = err instanceof Error ? err.message : String(err);
+      emitLive("sandbox_failed", { message, stopReason: "input_resolution_failed" });
+      return { ok: false, kind: "blocked", message, executionHost: "electron-main", runId, error: message, codeSha256 };
+    }
+  }
+  const workspaceKey = safeWorkspaceKey(spec.workspaceKey) ?? runId;
+  const workspaceRoot = await ensureCodeWorkspace(workspaceKey);
+  const scriptName = language === "python" ? `run-${runId}.py` : `run-${runId}.js`;
+  const command = executionMode === "command" ? commandText : language === "python" ? buildPythonCommand(scriptName) : `"$PERCH_ELECTRON_EXEC" "${scriptName}"`;
+  emitLive("script_planned", {
+    source: "model",
+    fallbackReason: null,
+    script: redactUserVisibleText(executableText),
+    publicPlan: spec.label ?? (executionMode === "command" ? "Sandbox shell command." : "Model-written sandbox code."),
+    plannerContent: null,
+    provider: null,
+    codeSha256,
+    language: executionMode === "command" ? "shell" : language
+  });
+  emitLive("command_started", { command: redactUserVisibleText(command), language: executionMode === "command" ? "shell" : language, codeSha256 });
+  const runResult = await runCodeSandbox({
+    runId,
+    command,
+    workspaceRoot,
+    inputs: resolved,
+    timeoutMs: Math.min(spec.timeoutMs ?? DEFAULT_TIMEOUT_MS2, DEFAULT_TIMEOUT_MS2),
+    onEvent: emitLive,
+    networkPolicy,
+    scriptFile: executionMode === "script" ? { name: scriptName, content: code } : null
+  });
+  const outputBundle = buildOutputBundle(runResult);
+  const hasReport = runResult.structuredOutput?.reportJson != null;
+  const completedWithoutReport = runResult.status === "completed" && !hasReport;
+  const eventKind = runResult.status === "completed" ? "completed" : "failed";
+  const stopReason = hasReport ? "completed" : completedWithoutReport ? "completed_unstructured" : runResult.status === "timed_out" ? "run_timed_out" : "run_failed";
+  emitLive(eventKind === "completed" ? "sandbox_completed" : "sandbox_failed", {
+    stopReason,
+    runnerKind: "dev-local",
+    executionHost: "electron-main",
+    codeSha256,
+    outputSummary: {
+      files: outputBundle?.files.length ?? 0,
+      tables: outputBundle?.tables.length ?? 0,
+      charts: outputBundle?.charts.length ?? 0,
+      logs: outputBundle?.logs.length ?? 0,
+      reportJsonPresent: hasReport
+    }
+  });
+  if (runResult.status !== "completed") {
+    return {
+      ok: false,
+      kind: "failed",
+      message: "Model-written sandbox code failed.",
+      runnerKind: "dev-local",
+      executionHost: "electron-main",
+      runId,
+      error: runResult.stderr || stopReason,
+      codeSha256,
+      status: runResult.status,
+      exitCode: runResult.exitCode,
+      durationMs: Date.now() - startedAt,
+      stdout: runResult.stdout,
+      stderr: runResult.stderr,
+      stdoutTruncated: runResult.stdoutTruncated,
+      stderrTruncated: runResult.stderrTruncated,
+      producedFiles: runResult.producedFiles,
+      inputManifest: runResult.inputManifest,
+      runtimeInfo: runResult.runtimeInfo,
+      structuredOutput: runResult.structuredOutput,
+      workspacePath: runResult.workspacePath,
+      language,
+      reportJsonPresent: hasReport,
+      warnings: runResult.warnings
+    };
+  }
+  const kind = "completed";
+  return {
+    ok: true,
+    kind,
+    message: hasReport ? "Sandbox execution completed and emitted output/report.json." : "Sandbox execution completed; stdout/stderr and produced files were captured.",
+    runnerKind: "dev-local",
+    executionHost: "electron-main",
+    runId,
+    status: runResult.status,
+    exitCode: runResult.exitCode,
+    durationMs: Date.now() - startedAt,
+    stdout: runResult.stdout,
+    stderr: runResult.stderr,
+    stdoutTruncated: runResult.stdoutTruncated,
+    stderrTruncated: runResult.stderrTruncated,
+    producedFiles: runResult.producedFiles,
+    inputManifest: runResult.inputManifest,
+    runtimeInfo: runResult.runtimeInfo,
+    structuredOutput: runResult.structuredOutput,
+    workspacePath: runResult.workspacePath,
+    codeSha256,
+    language: executionMode === "command" ? "shell" : language,
+    reportJsonPresent: hasReport,
+    warnings: runResult.warnings
+  };
+}
+async function resolveApprovedInputs(sources, deps) {
+  const out = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const source of sources.slice(0, MAX_SOURCES)) {
+    if (!source.localSourceId || seen.has(source.localSourceId)) continue;
+    seen.add(source.localSourceId);
+    const resolved = resolveSandboxInputRef(source.localSourceId, deps);
+    if (!resolved) continue;
+    const { absPath, relPath } = resolved;
+    const fileName = basename(absPath);
+    if (deps.shouldIgnore(fileName)) continue;
+    const s = await stat(absPath);
+    if (!s.isFile()) continue;
+    if (s.size > MAX_SOURCE_BYTES) continue;
+    out.push({
+      localSourceId: source.localSourceId,
+      fileName: safeRelativeName(source.fileName || fileName),
+      fileType: source.fileType || guessFileTypeFromExt(extname(fileName).toLowerCase()),
+      sizeBytes: s.size,
+      description: source.description,
+      relativePath: safeRelativeName(relPath),
+      sourcePath: absPath
+    });
+  }
+  return out;
+}
+function resolveSandboxInputRef(inputRef, deps) {
+  const sep = inputRef.indexOf("::");
+  if (sep >= 0) {
+    const rootId = inputRef.slice(0, sep);
+    const relPath2 = inputRef.slice(sep + 2);
+    const root3 = deps.getApprovedRoot(rootId);
+    if (!root3) return null;
+    if (!deps.isPathSafe(root3.path, relPath2)) return null;
+    const absPath2 = resolve4(root3.path, relPath2);
+    if (!deps.isInsideApprovedRoot(absPath2)) return null;
+    return { absPath: absPath2, relPath: relPath2 };
+  }
+  const absPath = resolve4(inputRef);
+  const root2 = deps.isInsideApprovedRoot(absPath);
+  if (!root2) return null;
+  const relPath = relative(root2.path, absPath);
+  if (!deps.isPathSafe(root2.path, relPath)) return null;
+  return { absPath, relPath };
+}
+function validateScript(script, language = "node") {
+  if (language === "python") return validatePythonScript(script);
+  const reasons = [];
+  const blocked3 = [
+    "child_process",
+    "exec(",
+    "spawn(",
+    "process.env",
+    "require('http')",
+    'require("http")',
+    "require('https')",
+    'require("https")',
+    "fetch(",
+    "eval(",
+    "Function("
+  ];
+  for (const token of blocked3) {
+    if (script.includes(token)) reasons.push(`blocked token: ${token}`);
+  }
+  return reasons;
+}
+function validatePythonScript(script) {
+  const reasons = [];
+  const blocked3 = [
+    "subprocess",
+    "os.system(",
+    "os.popen(",
+    "os.exec",
+    "shutil.rmtree",
+    "__import__(",
+    "importlib",
+    "ctypes",
+    "requests.get",
+    "requests.post",
+    "urllib.request",
+    "http.client",
+    "socket.",
+    "open('/etc",
+    "open('/proc",
+    "open('/sys"
+  ];
+  for (const token of blocked3) {
+    if (script.includes(token)) reasons.push(`blocked token: ${token}`);
+  }
+  return reasons;
+}
+function buildPythonCommand(scriptPath) {
+  return `python3 "${scriptPath}"`;
+}
+async function ensureCodeWorkspace(workspaceKey) {
+  const existing = codeWorkspaces.get(workspaceKey);
+  if (existing) {
+    try {
+      const s = await stat(existing);
+      if (s.isDirectory()) return existing;
+    } catch {
+      codeWorkspaces.delete(workspaceKey);
+    }
+  }
+  const workspaceRoot = await mkdtemp(join(tmpdir(), `perch-code-${workspaceKey.slice(0, 16)}-`));
+  await mkdir(join(workspaceRoot, "input"), { recursive: true });
+  await mkdir(join(workspaceRoot, "output"), { recursive: true });
+  await writeFile2(join(workspaceRoot, "perch_helpers.py"), PYTHON_HELPERS_SOURCE, "utf-8");
+  codeWorkspaces.set(workspaceKey, workspaceRoot);
+  return workspaceRoot;
+}
+async function runCodeSandbox(opts) {
+  const warnings = [];
+  const copiedInputFiles = [];
+  const skippedInputFiles = [];
+  const inputManifestFiles = [];
+  const skippedManifestEntries = [];
+  const runtimeInfo = buildSandboxRuntimeInfo(opts.networkPolicy);
+  const inputDir = join(opts.workspaceRoot, "input");
+  const outputDir = join(opts.workspaceRoot, "output");
+  await rm(inputDir, { recursive: true, force: true });
+  await rm(outputDir, { recursive: true, force: true });
+  await mkdir(inputDir, { recursive: true });
+  await mkdir(outputDir, { recursive: true });
+  if (opts.scriptFile) {
+    await writeFile2(join(opts.workspaceRoot, opts.scriptFile.name), opts.scriptFile.content, "utf-8");
+  }
+  await writeFile2(join(opts.workspaceRoot, "perch_helpers.py"), PYTHON_HELPERS_SOURCE, "utf-8");
+  for (const input of opts.inputs) {
+    const safeRel = safeRelativeName(input.relativePath || input.fileName);
+    if (!safeRel) {
+      skippedInputFiles.push(input.fileName);
+      skippedManifestEntries.push({
+        sourcePath: input.sourcePath,
+        localSourceId: input.localSourceId,
+        fileName: input.fileName,
+        sizeBytes: input.sizeBytes,
+        fileType: input.fileType,
+        reason: "invalid_sandbox_relative_path"
+      });
+      continue;
+    }
+    try {
+      const dest = join(inputDir, safeRel);
+      await mkdir(dirname(dest), { recursive: true });
+      await copyFile(input.sourcePath, dest);
+      copiedInputFiles.push(safeRel);
+      inputManifestFiles.push({
+        sandboxPath: `input/${safeRel}`,
+        sourcePath: input.sourcePath,
+        localSourceId: input.localSourceId,
+        fileName: input.fileName || basename(safeRel),
+        sizeBytes: input.sizeBytes,
+        fileType: input.fileType || null
+      });
+      opts.onEvent?.("input_copied", {
+        relativePath: safeRel,
+        fileName: input.fileName,
+        fileType: input.fileType,
+        sizeBytes: input.sizeBytes
+      });
+    } catch (err) {
+      const msg = err instanceof Error ? err.message : String(err);
+      skippedInputFiles.push(safeRel);
+      skippedManifestEntries.push({
+        sandboxPath: `input/${safeRel}`,
+        sourcePath: input.sourcePath,
+        localSourceId: input.localSourceId,
+        fileName: input.fileName || basename(safeRel),
+        sizeBytes: input.sizeBytes,
+        fileType: input.fileType,
+        reason: msg
+      });
+      warnings.push(`Failed to copy input ${safeRel}: ${msg}`);
+    }
+  }
+  opts.onEvent?.("inputs_ready", {
+    requestedInputFileCount: opts.inputs.length,
+    copiedInputFiles,
+    skippedInputFiles,
+    workspacePath: redactUserVisibleText(opts.workspaceRoot),
+    inputManifestPath: "input_manifest.json",
+    runtimeInfo
+  });
+  const inputManifest = {
+    root: "input",
+    files: inputManifestFiles,
+    skipped: skippedManifestEntries
+  };
+  await writeSandboxManifestFiles({
+    workspaceRoot: opts.workspaceRoot,
+    inputManifest,
+    runtimeInfo
+  });
+  const execResult = await executeCommand(
+    opts.command,
+    opts.workspaceRoot,
+    opts.timeoutMs,
+    opts.networkPolicy,
+    opts.onEvent
+  );
+  const producedFiles = await collectOutputFiles(outputDir, warnings, opts.onEvent);
+  opts.onEvent?.("outputs_collected", { producedFiles });
+  const structuredOutput = await readStructuredOutput(outputDir, execResult.stdout);
+  if (structuredOutput?.reportJson) opts.onEvent?.("report_detected", { source: "report.json" });
+  return {
+    runId: opts.runId,
+    status: execResult.timedOut ? "timed_out" : execResult.exitCode === 0 ? "completed" : "failed",
+    exitCode: execResult.exitCode,
+    stdout: execResult.stdout,
+    stderr: execResult.stderr,
+    stdoutTruncated: execResult.stdoutTruncated,
+    stderrTruncated: execResult.stderrTruncated,
+    producedFiles,
+    inputManifest,
+    runtimeInfo,
+    structuredOutput,
+    warnings,
+    durationMs: 0,
+    workspacePath: opts.workspaceRoot,
+    cleanedUp: false,
+    executionEvidence: {
+      requestedInputFileCount: opts.inputs.length,
+      copiedInputFiles,
+      skippedInputFiles,
+      command: opts.command
+    }
+  };
+}
+async function executeCommand(command, cwd2, timeoutMs, networkPolicy, onEvent) {
+  const launch = await prepareSandboxLaunch(command, cwd2, networkPolicy);
+  if ("error" in launch) {
+    return {
+      stdout: "",
+      stderr: launch.error,
+      exitCode: 126,
+      timedOut: false,
+      stdoutTruncated: false,
+      stderrTruncated: false
+    };
+  }
+  return new Promise((resolvePromise) => {
+    let stdout = "";
+    let stderr = "";
+    let stdoutBytes = 0;
+    let stderrBytes = 0;
+    let stdoutTruncated = false;
+    let stderrTruncated = false;
+    let timedOut = false;
+    const childEnv = {
+      NODE_ENV: "sandbox",
+      PERCH_SANDBOX_NETWORK: networkPolicy,
+      LANG: "en_US.UTF-8",
+      HOME: cwd2,
+      TMPDIR: join(cwd2, "tmp"),
+      PYTHONDONTWRITEBYTECODE: "1",
+      PATH: process.env.PATH ?? "/usr/local/bin:/usr/bin:/bin",
+      ELECTRON_RUN_AS_NODE: "1",
+      PERCH_ELECTRON_EXEC: process.execPath,
+      ...launch.env
+    };
+    const child = spawn(launch.command, launch.args, {
+      cwd: cwd2,
+      env: childEnv,
+      stdio: ["ignore", "pipe", "pipe"]
+    });
+    const timer = setTimeout(() => {
+      timedOut = true;
+      child.kill("SIGKILL");
+    }, timeoutMs);
+    child.stdout?.on("data", (data) => {
+      stdoutBytes += data.length;
+      const chunk2 = data.toString("utf8");
+      onEvent?.("stdout", { chunk: redactUserVisibleText(chunk2) });
+      if (stdoutBytes <= MAX_STDOUT_BYTES) stdout += chunk2;
+      else stdoutTruncated = true;
+    });
+    child.stderr?.on("data", (data) => {
+      stderrBytes += data.length;
+      const chunk2 = data.toString("utf8");
+      onEvent?.("stderr", { chunk: redactUserVisibleText(chunk2) });
+      if (stderrBytes <= MAX_STDERR_BYTES) stderr += chunk2;
+      else stderrTruncated = true;
+    });
+    child.on("close", (code) => {
+      clearTimeout(timer);
+      resolvePromise({ stdout, stderr, exitCode: code, timedOut, stdoutTruncated, stderrTruncated });
+    });
+    child.on("error", (err) => {
+      clearTimeout(timer);
+      resolvePromise({ stdout, stderr: err.message, exitCode: 1, timedOut: false, stdoutTruncated, stderrTruncated });
+    });
+  });
+}
+async function prepareSandboxLaunch(command, cwd2, networkPolicy) {
+  await mkdir(join(cwd2, "tmp"), { recursive: true });
+  if (networkPolicy !== "disabled") {
+    return { command: "bash", args: ["-c", command] };
+  }
+  if (platform() !== "darwin") {
+    return {
+      error: "Sandbox execution requires macOS sandbox-exec for disabled-network local code runs in this build."
+    };
+  }
+  const sandboxExec = "/usr/bin/sandbox-exec";
+  try {
+    const s = await stat(sandboxExec);
+    if (!s.isFile()) throw new Error("not a file");
+  } catch {
+    return {
+      error: "macOS sandbox-exec is unavailable; refusing to run model-written code without OS-level isolation."
+    };
+  }
+  const profilePath = join(cwd2, ".perch-sandbox.sb");
+  await writeFile2(profilePath, buildSeatbeltProfile(cwd2), "utf-8");
+  return {
+    command: sandboxExec,
+    args: ["-f", profilePath, "/bin/bash", "-c", command],
+    env: { PERCH_SANDBOX_PROFILE: profilePath }
+  };
+}
+function buildSeatbeltProfile(workspaceRoot) {
+  const home = homedir();
+  const deniedUserDataRoots = Array.from(/* @__PURE__ */ new Set([
+    home,
+    "/Users/Shared",
+    "/Volumes"
+  ])).map((path14) => `(subpath ${seatbeltString(path14)})`).join("\n    ");
+  return `
+(version 1)
+(allow default)
+(deny network*)
+(deny file-read*
+    ${deniedUserDataRoots})
+(deny file-write*
+    ${deniedUserDataRoots})
+(allow file-read*
+    (subpath ${seatbeltString(workspaceRoot)})
+    (subpath ${seatbeltString(dirname(process.execPath))}))
+(allow file-write*
+    (subpath ${seatbeltString(workspaceRoot)}))
+`.trim();
+}
+function seatbeltString(value) {
+  return `"${value.replace(/\\/g, "\\\\").replace(/"/g, '\\"')}"`;
+}
+async function collectOutputFiles(outputDir, warnings, onEvent) {
+  const files = [];
+  let totalBytes = 0;
+  async function walk2(dir, base) {
+    let entries;
+    try {
+      entries = await readdir(dir, { withFileTypes: true });
+    } catch {
+      return;
+    }
+    for (const entry of entries) {
+      if (files.length >= MAX_OUTPUT_FILES) return;
+      const rel = base ? `${base}/${entry.name}` : entry.name;
+      const full = join(dir, entry.name);
+      if (entry.isDirectory()) {
+        await walk2(full, rel);
+        continue;
+      }
+      const s = await stat(full);
+      totalBytes += s.size;
+      if (totalBytes > MAX_OUTPUT_BYTES) {
+        warnings.push("Produced file byte limit exceeded");
+        return;
+      }
+      const file = { relativePath: rel, sizeBytes: s.size, mimeType: guessMimeTypeFromName(entry.name) };
+      files.push(file);
+      onEvent?.("output_detected", file);
+    }
+  }
+  await walk2(outputDir, "");
+  return files;
+}
+async function readStructuredOutput(outputDir, stdout) {
+  let parsedStdout = null;
+  const line = stdout.trim().split(/\r?\n/).reverse().find((candidate) => candidate.trim().startsWith("{"));
+  if (line) {
+    try {
+      parsedStdout = JSON.parse(line);
+    } catch {
+      parsedStdout = null;
+    }
+  }
+  let reportJson = parsedStdout?.reportJson;
+  if (!reportJson) {
+    try {
+      reportJson = JSON.parse(await readFile3(join(outputDir, "report.json"), "utf8"));
+    } catch {
+      reportJson = void 0;
+    }
+  }
+  const tables = Array.isArray(parsedStdout?.tables) ? parsedStdout.tables : [];
+  const charts = Array.isArray(parsedStdout?.charts) ? parsedStdout.charts : [];
+  const logs = Array.isArray(parsedStdout?.logs) ? parsedStdout.logs.filter((x) => typeof x === "string") : [];
+  if (!reportJson && tables.length === 0 && charts.length === 0 && logs.length === 0) return null;
+  return { reportJson, tables, charts, logs };
+}
+function buildOutputBundle(run) {
+  const structured = run.structuredOutput;
+  if (!structured && run.producedFiles.length === 0) return null;
+  return {
+    status: run.status,
+    files: run.producedFiles.map((file) => ({
+      fileName: safeRelativeName(file.relativePath),
+      sizeBytes: file.sizeBytes,
+      mimeType: file.mimeType
+    })),
+    tables: structured?.tables ?? [],
+    charts: structured?.charts ?? [],
+    logs: structured?.logs ?? [],
+    reportJson: structured?.reportJson ?? null
+  };
+}
+function makeRunId2(prefix) {
+  try {
+    return `${prefix}-${randomUUID().slice(0, 12)}`;
+  } catch {
+    return `${prefix}-${Date.now().toString(36)}`;
+  }
+}
+function safeRunId(value) {
+  if (!value) return null;
+  return /^[a-zA-Z0-9_-]{1,80}$/.test(value) ? value : null;
+}
+function safeWorkspaceKey(value) {
+  if (!value) return null;
+  const cleaned = value.replace(/[^a-zA-Z0-9_-]/g, "_").slice(0, 80);
+  return cleaned || null;
+}
+function safeRelativeName(value) {
+  return value.split(/[\\/]+/).filter((part) => part && part !== "." && part !== "..").join("/") || "unnamed";
+}
+function redactUserVisibleText(text) {
+  if (!text) return "";
+  return text.replace(/\/Users\/[^/\s"'`]+/g, "[home]").replace(/\/home\/[^/\s"'`]+/g, "[home]").replace(/\/private\/var\/folders\/[^\s"'`]+/g, "[temp]").replace(/\/var\/folders\/[^\s"'`]+/g, "[temp]").replace(/\/tmp\/perch-sandbox-[^\s"'`]+/g, "[sandbox]").replace(/\/var\/tmp\/perch-sandbox-[^\s"'`]+/g, "[sandbox]");
+}
+function guessFileTypeFromExt(ext) {
+  if ([".xlsx", ".xls"].includes(ext)) return "spreadsheet";
+  if (ext === ".csv" || ext === ".tsv") return "csv";
+  if (ext === ".pdf") return "pdf";
+  if ([".png", ".jpg", ".jpeg", ".gif", ".webp", ".svg"].includes(ext)) return "image";
+  if ([".doc", ".docx", ".txt", ".md", ".rtf"].includes(ext)) return "document";
+  return "unknown";
+}
+function guessMimeTypeFromName(fileName) {
+  const ext = extname(fileName).toLowerCase();
+  const map2 = {
+    ".json": "application/json",
+    ".csv": "text/csv",
+    ".tsv": "text/tab-separated-values",
+    ".txt": "text/plain",
+    ".md": "text/markdown",
+    ".html": "text/html"
+  };
+  return map2[ext] ?? "application/octet-stream";
+}
+var MAX_SOURCES, MAX_SOURCE_BYTES, MAX_STDOUT_BYTES, MAX_STDERR_BYTES, MAX_OUTPUT_FILES, MAX_OUTPUT_BYTES, DEFAULT_TIMEOUT_MS2, codeWorkspaces, PYTHON_HELPERS_SOURCE;
+var init_localSandboxHost = __esm({
+  "electron/localSandboxHost.ts"() {
+    MAX_SOURCES = 20;
+    MAX_SOURCE_BYTES = 20 * 1024 * 1024;
+    MAX_STDOUT_BYTES = 512 * 1024;
+    MAX_STDERR_BYTES = 128 * 1024;
+    MAX_OUTPUT_FILES = 50;
+    MAX_OUTPUT_BYTES = 50 * 1024 * 1024;
+    DEFAULT_TIMEOUT_MS2 = 3e4;
+    codeWorkspaces = /* @__PURE__ */ new Map();
+    PYTHON_HELPERS_SOURCE = `
+import csv
+import json
+import re
+import sys
+import zlib
+from pathlib import Path
+from collections import Counter
+
+def sandbox_runtime_info(path="sandbox_runtime.json"):
+    p = Path(path)
+    if p.exists():
+        return json.loads(p.read_text(encoding="utf-8"))
+    return {
+        "networkPolicy": "unknown",
+        "packageInstalls": "unknown",
+        "pythonCommand": sys.executable,
+        "helperModule": "perch_helpers",
+    }
+
+def input_manifest(path="input_manifest.json"):
+    p = Path(path)
+    if not p.exists():
+        return {"root": "input", "files": [], "skipped": []}
+    return json.loads(p.read_text(encoding="utf-8"))
+
+def input_files(root="input"):
+    base = Path(root)
+    if not base.exists():
+        return []
+    return [str(p) for p in base.rglob("*") if p.is_file()]
+
+def load_tabular(path):
+    p = Path(path)
+    suffix = p.suffix.lower()
+    if suffix in {".csv", ".tsv"}:
+        try:
+            import pandas as pd
+            return pd.read_csv(p, sep="\\t" if suffix == ".tsv" else ",")
+        except Exception:
+            with p.open(newline="", encoding="utf-8-sig") as fh:
+                return list(csv.DictReader(fh, delimiter="\\t" if suffix == ".tsv" else ","))
+    if suffix in {".xlsx", ".xls"}:
+        try:
+            import pandas as pd
+            return pd.read_excel(p)
+        except Exception as exc:
+            raise RuntimeError("Excel loading requires pandas/openpyxl in the local Python environment") from exc
+    raise ValueError(f"Unsupported tabular file type: {p.suffix}")
+
+def extract_pdf_tables(path):
+    try:
+        import pdfplumber
+    except Exception as exc:
+        raise RuntimeError("PDF table extraction requires pdfplumber in the local Python environment") from exc
+    rows = []
+    with pdfplumber.open(path) as pdf:
+        for page_index, page in enumerate(pdf.pages, start=1):
+            for table in page.extract_tables() or []:
+                rows.append({"page": page_index, "table": table})
+    return rows
+
+def _pdf_literal_unescape(value):
+    out = []
+    i = 0
+    while i < len(value):
+        ch = value[i]
+        if ch != "\\\\":
+            out.append(ch)
+            i += 1
+            continue
+        i += 1
+        if i >= len(value):
+            break
+        esc = value[i]
+        i += 1
+        mapping = {"n": "\\n", "r": "\\r", "t": "\\t", "b": "\\b", "f": "\\f", "\\\\": "\\\\", "(": "(", ")": ")"}
+        if esc in mapping:
+            out.append(mapping[esc])
+        elif esc in "01234567":
+            octal = esc
+            for _ in range(2):
+                if i < len(value) and value[i] in "01234567":
+                    octal += value[i]
+                    i += 1
+                else:
+                    break
+            try:
+                out.append(chr(int(octal, 8)))
+            except Exception:
+                pass
+        else:
+            out.append(esc)
+    return "".join(out)
+
+def _extract_pdf_text_raw(path):
+    data = Path(path).read_bytes()
+    chunks = []
+    for match in re.finditer(rb"stream\\r?\\n(.*?)\\r?\\nendstream", data, re.S):
+        raw = match.group(1)
+        candidates = [raw]
+        try:
+            candidates.insert(0, zlib.decompress(raw))
+        except Exception:
+            pass
+        for candidate in candidates:
+            try:
+                decoded = candidate.decode("latin-1", errors="ignore")
+            except Exception:
+                continue
+            literals = [_pdf_literal_unescape(x) for x in re.findall(r"\\((.*?)\\)", decoded, re.S)]
+            if literals:
+                chunks.extend(literals)
+                break
+    return " ".join(part.strip() for part in chunks if part and part.strip())
+
+def extract_pdf_text(path):
+    p = Path(path)
+    if not p.exists():
+        raise FileNotFoundError(str(p))
+    errors = []
+    for module_name in ("pypdf", "PyPDF2"):
+        try:
+            module = __import__(module_name)
+            reader_cls = getattr(module, "PdfReader")
+            reader = reader_cls(str(p))
+            text = "\\n".join((page.extract_text() or "") for page in reader.pages)
+            if text.strip():
+                return text
+        except Exception as exc:
+            errors.append(f"{module_name}: {exc}")
+    try:
+        from pdfminer.high_level import extract_text
+        text = extract_text(str(p))
+        if text.strip():
+            return text
+    except Exception as exc:
+        errors.append(f"pdfminer: {exc}")
+    raw = _extract_pdf_text_raw(p)
+    if raw.strip():
+        return raw
+    raise RuntimeError("No extractable PDF text found; tried pypdf, PyPDF2, pdfminer, and raw PDF streams. " + "; ".join(errors))
+
+def extract_invoice_fields(path):
+    text = extract_pdf_text(path)
+    def find(pattern):
+        m = re.search(pattern, text, re.I)
+        return m.group(1).strip() if m else None
+    amount = find(r"Amount\\s+Due:\\s*(?:USD\\s*)?([0-9,]+(?:\\.\\d+)?)")
+    return {
+        "file": str(path),
+        "text": text,
+        "vendor_name": text.split(" EIN")[0].strip() if " EIN" in text else None,
+        "ein": find(r"EIN:\\s*([0-9-]+)"),
+        "invoice_number": find(r"Invoice\\s+Number:\\s*(INV-[0-9]+)"),
+        "invoice_date": find(r"Date:\\s*([0-9]{4}-[0-9]{2}-[0-9]{2})"),
+        "po_number": find(r"Purchase\\s+Order:\\s*(PO-[0-9]+)"),
+        "amount_due": float(amount.replace(",", "")) if amount else None,
+    }
+
+def find_duplicates(rows, keys):
+    if hasattr(rows, "to_dict"):
+        records = rows.to_dict("records")
+    else:
+        records = list(rows)
+    counts = Counter(tuple(str(row.get(k, "")).strip().lower() for k in keys) for row in records)
+    return [row for row in records if counts[tuple(str(row.get(k, "")).strip().lower() for k in keys)] > 1]
+
+def write_report(report, path="output/report.json"):
+    out = Path(path)
+    out.parent.mkdir(parents=True, exist_ok=True)
+    out.write_text(json.dumps(report, indent=2, default=str), encoding="utf-8")
+    return str(out)
+`.trim();
+  }
+});
+
+// features/perchTerminal/runtime/cliHost/nodeLocalBridge.ts
+import { spawn as spawn2 } from "node:child_process";
 import fs9 from "node:fs";
 import fsp from "node:fs/promises";
 import os from "node:os";
@@ -222692,6 +223791,12 @@ function installCliNodeLocalBridge(input) {
 function createCliNodeLocalBridge(input) {
   const workspaceRoot = path10.resolve(input.workspaceRoot);
   const now13 = () => (/* @__PURE__ */ new Date()).toISOString();
+  const sandboxHandlers = /* @__PURE__ */ new Map();
+  const emitSandboxEvent = (event) => {
+    const handlers = sandboxHandlers.get(event.runId);
+    if (!handlers) return;
+    for (const handler of handlers) handler(event);
+  };
   const terminalSession = () => ({
     sessionId: "cli-terminal",
     title: "Perch CLI",
@@ -222726,17 +223831,9 @@ function createCliNodeLocalBridge(input) {
     }),
     checkFsAccess: async (request) => {
       const absolutePath = path10.resolve(expandHome4(request.absolutePath));
-      if (request.fsAccessOverride === "allow_once" || isInside(workspaceRoot, absolutePath)) {
-        return {
-          decision: "allow",
-          reason: "Allowed by Perch CLI local workspace.",
-          absolutePath,
-          approvalPath: absolutePath
-        };
-      }
       return {
-        decision: "block",
-        reason: `Path is outside the Perch CLI workspace: ${workspaceRoot}`,
+        decision: "allow",
+        reason: "Allowed by Perch CLI local filesystem access.",
         absolutePath,
         approvalPath: absolutePath
       };
@@ -222762,7 +223859,7 @@ function createCliNodeLocalBridge(input) {
       executionHost: "electron_desktop"
     }),
     runLocalBash: async (request) => runShellCommand({
-      workspaceRoot,
+      workspaceRoot: resolveRequestRoot(workspaceRoot, request.workspaceRoot),
       command: request.command,
       cwd: request.cwd,
       timeoutMs: request.timeoutMs
@@ -222798,45 +223895,45 @@ function createCliNodeLocalBridge(input) {
     offBashTerminalEvent: () => {
     },
     readWorkspaceFile: async (request) => {
-      const target = resolveReadPath(workspaceRoot, request.relativePath);
-      if (!isInside(workspaceRoot, target)) return { ok: false, error: `Path is outside the CLI workspace: ${target}` };
-      const stat = await safeStat(target);
-      if (!stat?.isFile()) return { ok: false, error: `File does not exist: ${target}` };
-      if (stat.size > MAX_READ_BYTES && request.encoding !== "base64") {
-        return { ok: false, error: `File is too large for direct text read (${stat.size} bytes). Use grep or a narrower file.` };
+      const baseRoot = resolveRequestRoot(workspaceRoot, request.workspaceRoot);
+      const target = resolveReadPath(baseRoot, request.relativePath);
+      const stat2 = await safeStat(target);
+      if (!stat2?.isFile()) return { ok: false, error: `File does not exist: ${target}` };
+      if (stat2.size > MAX_READ_BYTES && request.encoding !== "base64") {
+        return { ok: false, error: `File is too large for direct text read (${stat2.size} bytes). Use grep or a narrower file.` };
       }
       const buffer = await fsp.readFile(target);
       return {
         ok: true,
-        relativePath: path10.relative(workspaceRoot, target) || path10.basename(target),
+        relativePath: displayPath(baseRoot, target, request.relativePath),
         content: request.encoding === "base64" ? buffer.toString("base64") : buffer.toString("utf8"),
-        sizeBytes: stat.size,
+        sizeBytes: stat2.size,
         ...request.encoding === "base64" ? { encoding: "base64" } : {}
       };
     },
     writeWorkspaceFile: async (request) => {
-      const target = resolveWritePath(workspaceRoot, request.relativePath);
-      if (!isInside(workspaceRoot, target)) return { ok: false, error: `Refusing to write outside CLI workspace: ${target}` };
+      const baseRoot = resolveRequestRoot(workspaceRoot, request.workspaceRoot);
+      const target = resolveWritePath(baseRoot, request.relativePath);
       await fsp.mkdir(path10.dirname(target), { recursive: true });
       const flag = request.overwrite === true ? "w" : "wx";
+      const payload = request.encoding === "base64" && typeof request.contentBase64 === "string" ? Buffer.from(request.contentBase64, "base64") : request.content ?? "";
       try {
-        await fsp.writeFile(target, request.content ?? "", { encoding: "utf8", flag });
+        await fsp.writeFile(target, payload, typeof payload === "string" ? { encoding: "utf8", flag } : { flag });
       } catch (error) {
         if (error.code === "EEXIST") {
-          return { ok: false, error: `File already exists: ${path10.relative(workspaceRoot, target)}. Pass overwrite=true to replace it.` };
+          return { ok: false, error: `File already exists: ${displayPath(baseRoot, target, request.relativePath)}. Pass overwrite=true to replace it.` };
         }
         throw error;
       }
       return {
         ok: true,
-        relativePath: path10.relative(workspaceRoot, target),
-        bytesWritten: Buffer.byteLength(request.content ?? "", "utf8")
+        relativePath: displayPath(baseRoot, target, request.relativePath),
+        bytesWritten: Buffer.byteLength(payload)
       };
     },
     moveLocalFile: async (request) => {
       const src = resolveReadPath(workspaceRoot, request.src);
       const dest = resolveWritePath(workspaceRoot, request.dest);
-      if (!isInside(workspaceRoot, src) || !isInside(workspaceRoot, dest)) return { ok: false, error: "Move paths must stay inside the CLI workspace." };
       await fsp.mkdir(path10.dirname(dest), { recursive: true });
       await fsp.rename(src, dest);
       return { ok: true, fromPath: src, toPath: dest };
@@ -222844,37 +223941,32 @@ function createCliNodeLocalBridge(input) {
     copyLocalFile: async (request) => {
       const src = resolveReadPath(workspaceRoot, request.src);
       const dest = resolveWritePath(workspaceRoot, request.dest);
-      if (!isInside(workspaceRoot, src) || !isInside(workspaceRoot, dest)) return { ok: false, error: "Copy paths must stay inside the CLI workspace." };
       await fsp.mkdir(path10.dirname(dest), { recursive: true });
       await fsp.copyFile(src, dest);
       return { ok: true, fromPath: src, toPath: dest };
     },
     createDirectory: async (request) => {
       const target = resolveWritePath(workspaceRoot, request.path);
-      if (!isInside(workspaceRoot, target)) return { ok: false, error: `Refusing to create directory outside CLI workspace: ${target}` };
       await fsp.mkdir(target, { recursive: true });
       return { ok: true, path: target };
     },
     deleteLocalFile: async (request) => {
       const target = resolveWritePath(workspaceRoot, request.path);
-      if (!isInside(workspaceRoot, target)) return { ok: false, error: `Refusing to delete outside CLI workspace: ${target}` };
-      const stat = await safeStat(target);
-      if (!stat) return { ok: false, error: `File does not exist: ${target}` };
-      if (!stat.isFile() && !stat.isSymbolicLink()) return { ok: false, error: "deleteLocalFile only deletes files, not directories." };
+      const stat2 = await safeStat(target);
+      if (!stat2) return { ok: false, error: `File does not exist: ${target}` };
+      if (!stat2.isFile() && !stat2.isSymbolicLink()) return { ok: false, error: "deleteLocalFile only deletes files, not directories." };
       await fsp.rm(target);
       return { ok: true, path: target };
     },
     printFile: async () => ({ ok: false, error: "Printing is not supported from Perch CLI local mode." }),
     listWorkspaceFilesGlob: async (request) => {
-      const root2 = request.path ? resolveReadPath(workspaceRoot, request.path) : workspaceRoot;
-      if (!isInside(workspaceRoot, root2)) {
-        return { ok: false, matches: [], totalFound: 0, truncated: false, resolvedRoot: workspaceRoot, executionHost: "electron_desktop", errorCode: "path_outside_workspace", errorMessage: `Path is outside CLI workspace: ${root2}` };
-      }
+      const baseRoot = resolveRequestRoot(workspaceRoot, request.workspaceRoot);
+      const root2 = request.path ? resolveReadPath(baseRoot, request.path) : baseRoot;
       const maxResults = sanitizeMaxResults(request.maxResults);
       const pattern = request.pattern?.trim() || "**/*";
       const regex2 = globToRegex(pattern);
       const files = await collectFiles(root2, { maxVisits: Math.max(maxResults * 20, 1e3) });
-      const matches = files.map((file) => path10.relative(root2, file).replace(/\\/g, "/")).filter((relative) => regex2.test(relative)).slice(0, maxResults);
+      const matches = files.map((file) => path10.relative(root2, file).replace(/\\/g, "/")).filter((relative2) => regex2.test(relative2)).slice(0, maxResults);
       return {
         ok: true,
         matches,
@@ -222884,23 +223976,21 @@ function createCliNodeLocalBridge(input) {
         dirsVisited: 0,
         pattern,
         searchPath: root2,
-        resolvedRoot: workspaceRoot,
+        resolvedRoot: root2,
         executionHost: "electron_desktop"
       };
     },
     searchWorkspaceFilesGrep: async (request) => {
-      const root2 = request.path ? resolveReadPath(workspaceRoot, request.path) : workspaceRoot;
-      if (!isInside(workspaceRoot, root2)) {
-        return { ok: false, matches: [], totalMatches: 0, truncated: false, resolvedRoot: workspaceRoot, executionHost: "electron_desktop", errorCode: "path_outside_workspace", errorMessage: `Path is outside CLI workspace: ${root2}` };
-      }
+      const baseRoot = resolveRequestRoot(workspaceRoot, request.workspaceRoot);
+      const root2 = request.path ? resolveReadPath(baseRoot, request.path) : baseRoot;
       const maxResults = sanitizeMaxResults(request.maxResults);
       const includeRegex = request.include ? globToRegex(request.include) : null;
       const queryRegex = compileQueryRegex(request.query, request.caseSensitive !== false);
       const files = await collectFiles(root2, { maxVisits: 5e3 });
       const matches = [];
       for (const file of files) {
-        const relative = path10.relative(root2, file).replace(/\\/g, "/");
-        if (includeRegex && !includeRegex.test(relative)) continue;
+        const relative2 = path10.relative(root2, file).replace(/\\/g, "/");
+        if (includeRegex && !includeRegex.test(relative2)) continue;
         const text = await readTextFileIfReasonable(file);
         if (text === null) continue;
         const lines = text.split(/\r?\n/);
@@ -222910,7 +224000,7 @@ function createCliNodeLocalBridge(input) {
           queryRegex.lastIndex = 0;
           if (!match) continue;
           matches.push({
-            file: relative,
+            file: relative2,
             line: index + 1,
             column: match.index + 1,
             match: match[0],
@@ -222928,35 +224018,34 @@ function createCliNodeLocalBridge(input) {
         filesSearched: files.length,
         query: request.query,
         searchPath: root2,
-        resolvedRoot: workspaceRoot,
+        resolvedRoot: root2,
         executionHost: "electron_desktop"
       };
     },
     statWorkspacePath: async (request) => {
-      const target = resolveReadPath(workspaceRoot, request.relativePath);
-      if (!isInside(workspaceRoot, target)) {
-        return { ok: false, relativePath: request.relativePath, exists: false, executionHost: "electron_desktop", errorCode: "path_outside_workspace", errorMessage: `Path is outside CLI workspace: ${target}` };
-      }
-      const stat = await safeStat(target);
+      const baseRoot = resolveRequestRoot(workspaceRoot, request.workspaceRoot);
+      const target = resolveReadPath(baseRoot, request.relativePath);
+      const stat2 = await safeStat(target);
       return {
         ok: true,
-        relativePath: path10.relative(workspaceRoot, target) || ".",
-        exists: Boolean(stat),
-        isFile: stat?.isFile() ?? false,
-        isDirectory: stat?.isDirectory() ?? false,
-        sizeBytes: stat?.size,
-        modifiedAt: stat?.mtime.toISOString(),
+        relativePath: path10.isAbsolute(request.relativePath) || request.relativePath.startsWith("~") ? target : path10.relative(baseRoot, target) || ".",
+        exists: Boolean(stat2),
+        isFile: stat2?.isFile() ?? false,
+        isDirectory: stat2?.isDirectory() ?? false,
+        sizeBytes: stat2?.size,
+        modifiedAt: stat2?.mtime.toISOString(),
         executionHost: "electron_desktop"
       };
     },
     listLocalSources: async (request) => {
       const query = typeof request === "object" && request ? request.query?.toLowerCase().trim() ?? "" : "";
       const maxResults = typeof request === "object" && request ? sanitizeMaxResults(request.maxResults) : DEFAULT_MAX_RESULTS;
-      const files = await collectFiles(workspaceRoot, { maxVisits: Math.max(maxResults * 20, 1e3) });
-      const entries = files.map((file) => localSourceEntry(workspaceRoot, file)).filter((entry) => !query || entry.relativePath.toLowerCase().includes(query) || entry.fileName.toLowerCase().includes(query)).slice(0, maxResults);
+      const root2 = typeof request === "object" && request?.path ? resolveReadPath(workspaceRoot, request.path) : workspaceRoot;
+      const files = await collectFiles(root2, { maxVisits: Math.max(maxResults * 20, 1e3) });
+      const entries = files.map((file) => localSourceEntry(root2, file, root2 !== workspaceRoot)).filter((entry) => !query || entry.relativePath.toLowerCase().includes(query) || entry.fileName.toLowerCase().includes(query)).slice(0, maxResults);
       return {
         ok: true,
-        rootId: CLI_ROOT_ID,
+        rootId: root2 === workspaceRoot ? CLI_ROOT_ID : "cli-absolute-root",
         entries,
         totalFound: files.length,
         truncated: files.length > maxResults,
@@ -222967,16 +224056,15 @@ function createCliNodeLocalBridge(input) {
     },
     readLocalFile: async (localSourceId) => {
       const target = resolveLocalSourceId(workspaceRoot, localSourceId);
-      if (!isInside(workspaceRoot, target)) return { ok: false, error: `Path is outside CLI workspace: ${target}` };
-      const stat = await safeStat(target);
-      if (!stat?.isFile()) return { ok: false, error: `File does not exist: ${target}` };
+      const stat2 = await safeStat(target);
+      if (!stat2?.isFile()) return { ok: false, error: `File does not exist: ${target}` };
       const buffer = await fsp.readFile(target);
       return {
         ok: true,
         data: buffer.toString("base64"),
         fileName: path10.relative(workspaceRoot, target) || path10.basename(target),
         mimeType: inferMimeType(target),
-        sizeBytes: stat.size,
+        sizeBytes: stat2.size,
         encoding: "base64"
       };
     },
@@ -222992,34 +224080,282 @@ function createCliNodeLocalBridge(input) {
     listMcpTools: async () => [],
     callMcpTool: async () => ({ ok: false, error: "MCP tools are not available in CLI local mode." }),
     reconnectMcp: async () => ({ ok: false, error: "MCP tools are not available in CLI local mode." }),
-    prepareSandboxInputs: async () => ({ ok: false, error: "Sandbox input staging is not available in CLI local mode." }),
-    onSandboxEvent: () => () => {
+    runLocalAPAuditPacket: async (request) => runCliAPAuditPacket(workspaceRoot, request),
+    runLocalPrepareAPEvidence: async (request) => runCliPrepareAPEvidence(workspaceRoot, request),
+    runLocalQueryAPCases: async (request) => runCliQueryAPCases(workspaceRoot, request),
+    runLocalRenderAPControlGraph: async (request) => runCliRenderAPControlGraph(workspaceRoot, request),
+    prepareSandboxInputs: async (request) => prepareCliSandboxInputs(workspaceRoot, request),
+    runSandboxCodeJob: async (request) => runCliSandboxCodeJob(workspaceRoot, request, emitSandboxEvent),
+    onSandboxEvent: (runId, handler) => {
+      const handlers = sandboxHandlers.get(runId) ?? /* @__PURE__ */ new Set();
+      handlers.add(handler);
+      sandboxHandlers.set(runId, handlers);
+      return () => {
+        handlers.delete(handler);
+        if (handlers.size === 0) sandboxHandlers.delete(runId);
+      };
     },
     offSandboxEvent: () => {
     }
   };
 }
-async function runShellCommand(input) {
-  const startedAt = Date.now();
-  const cwd2 = input.cwd ? resolveReadPath(input.workspaceRoot, input.cwd) : input.workspaceRoot;
-  if (!isInside(input.workspaceRoot, cwd2)) {
+async function runCliAPAuditPacket(workspaceRoot, request) {
+  const startMs = Date.now();
+  try {
+    const result2 = await generateAPCorePacket({
+      folderPath: resolveReadPath(workspaceRoot, request.folderPath),
+      outputRoot: request.outputRoot ? resolveWritePath(workspaceRoot, request.outputRoot) : void 0,
+      timestamp: request.timestamp,
+      writingStudioNarrativeHtml: request.writingStudioNarrativeHtml,
+      writingStudioNarrativeText: request.writingStudioNarrativeText,
+      writingStudioNarrativeDiagnostic: request.writingStudioNarrativeDiagnostic,
+      requireWritingStudioNarrative: request.requireWritingStudioNarrative
+    });
     return {
-      ok: false,
-      stdout: "",
-      stderr: "",
-      exitCode: null,
-      durationMs: Date.now() - startedAt,
-      timedOut: false,
-      command: input.command,
-      cwd: cwd2,
+      ok: true,
+      data: {
+        packet: result2.payload.packet,
+        outputDir: result2.run.outputDir,
+        outputFiles: result2.payload.packet.outputFiles,
+        summary: result2.summary
+      },
       executionHost: "electron_desktop",
-      errorCode: "cwd_outside_workspace",
-      errorMessage: `Command cwd is outside CLI workspace: ${cwd2}`
+      durationMs: Date.now() - startMs
     };
+  } catch (error) {
+    return cliAPAuditError(startMs, error);
   }
+}
+async function runCliPrepareAPEvidence(workspaceRoot, request) {
+  const startMs = Date.now();
+  try {
+    const result2 = await prepareAPCoreEvidence({
+      folderPath: resolveReadPath(workspaceRoot, request.folderPath),
+      artifactRoot: request.artifactRoot ? resolveWritePath(workspaceRoot, request.artifactRoot) : void 0,
+      timestamp: request.timestamp,
+      mode: request.mode
+    });
+    const artifact = result2.payload.artifact;
+    return {
+      ok: true,
+      data: {
+        artifactId: artifact.artifactId,
+        outputDir: artifact.outputDir,
+        outputFiles: artifact.outputFiles,
+        coverage: artifact.coverage,
+        metrics: artifact.metrics,
+        caseSummary: summarizeCliCases(artifact.cases ?? []),
+        topCases: (artifact.cases ?? []).slice(0, 12),
+        duplicateCases: result2.payload.duplicateCases,
+        controlGraph: result2.payload.controlGraph,
+        relativeOutputDir: typeof artifact.outputDir === "string" ? path10.basename(artifact.outputDir) : null,
+        approvedRootMatch: true
+      },
+      executionHost: "electron_desktop",
+      durationMs: Date.now() - startMs
+    };
+  } catch (error) {
+    return cliAPError(startMs, error);
+  }
+}
+async function runCliQueryAPCases(workspaceRoot, request) {
+  const startMs = Date.now();
+  try {
+    const result2 = await queryAPCases(
+      normalizeCliArtifactRequest(workspaceRoot, request)
+    );
+    return {
+      ok: result2.ok,
+      data: result2,
+      error: result2.ok ? void 0 : result2.error,
+      errorCode: result2.ok ? void 0 : result2.errorCode,
+      executionHost: "electron_desktop",
+      durationMs: Date.now() - startMs
+    };
+  } catch (error) {
+    return cliAPError(startMs, error);
+  }
+}
+async function runCliRenderAPControlGraph(workspaceRoot, request) {
+  const startMs = Date.now();
+  try {
+    const result2 = await renderAPControlGraph(normalizeCliArtifactRequest(workspaceRoot, request));
+    return {
+      ok: result2.ok,
+      data: result2,
+      error: result2.ok ? void 0 : result2.error,
+      errorCode: result2.ok ? void 0 : result2.errorCode,
+      executionHost: "electron_desktop",
+      durationMs: Date.now() - startMs
+    };
+  } catch (error) {
+    return cliAPError(startMs, error);
+  }
+}
+function normalizeCliArtifactRequest(workspaceRoot, request) {
+  return {
+    ...request,
+    folderPath: request.folderPath ? resolveReadPath(workspaceRoot, request.folderPath) : void 0,
+    artifactRoot: request.artifactRoot ? resolveWritePath(workspaceRoot, request.artifactRoot) : void 0
+  };
+}
+function cliAPError(startMs, error) {
+  const message = error instanceof Error ? error.message : String(error);
+  return {
+    ok: false,
+    error: message,
+    errorCode: classifyCliAPError(message),
+    executionHost: "electron_desktop",
+    durationMs: Date.now() - startMs
+  };
+}
+function cliAPAuditError(startMs, error) {
+  const message = error instanceof Error ? error.message : String(error);
+  return {
+    ok: false,
+    error: message,
+    errorCode: classifyCliAPError(message),
+    executionHost: "electron_desktop",
+    durationMs: Date.now() - startMs
+  };
+}
+function classifyCliAPError(message) {
+  if (/folderPath is required|invalid/i.test(message)) return "invalid_input";
+  if (/not a directory/i.test(message)) return "invalid_folder";
+  if (/not found|ENOENT/i.test(message)) return "folder_not_found";
+  return "execution_failed";
+}
+function summarizeCliCases(cases) {
+  const counts = {};
+  for (const item of cases) {
+    const severity = item.severity ?? "unknown";
+    counts[severity] = (counts[severity] ?? 0) + 1;
+  }
+  return counts;
+}
+async function prepareCliSandboxInputs(workspaceRoot, request) {
+  const jobId = request.jobId?.trim() || `cli-sandbox-${Date.now()}`;
+  const maxFiles = Math.max(1, Math.min(request.maxFiles ?? 20, 100));
+  const maxBytesPerFile = Math.max(1, Math.min(request.maxBytesPerFile ?? 20 * 1024 * 1024, 50 * 1024 * 1024));
+  const tempDir = await fsp.mkdtemp(path10.join(os.tmpdir(), `${jobId}-`));
+  const entries = [];
+  const skipped = [];
+  for (const localSourceId of request.localSourceIds.slice(0, maxFiles)) {
+    const sourcePath = resolveLocalSourceId(workspaceRoot, localSourceId);
+    const stat2 = await safeStat(sourcePath);
+    if (!stat2?.isFile()) {
+      skipped.push({ localSourceId, reason: `File does not exist: ${sourcePath}` });
+      continue;
+    }
+    if (stat2.size > maxBytesPerFile) {
+      skipped.push({ localSourceId, reason: `File is too large: ${stat2.size} bytes.` });
+      continue;
+    }
+    const relativePath = safeSandboxRelativePath(path10.isAbsolute(localSourceId) || localSourceId.startsWith("~") ? path10.basename(sourcePath) : path10.relative(workspaceRoot, sourcePath));
+    const tempPath = path10.join(tempDir, relativePath);
+    await fsp.mkdir(path10.dirname(tempPath), { recursive: true });
+    await fsp.copyFile(sourcePath, tempPath);
+    entries.push({
+      localSourceId,
+      fileName: path10.basename(sourcePath),
+      relativePath,
+      tempPath,
+      sizeBytes: stat2.size,
+      mimeType: inferMimeType(sourcePath),
+      fileType: guessCliFileType(sourcePath)
+    });
+  }
+  return { ok: true, jobId, tempDir, entries, skipped };
+}
+async function runCliSandboxCodeJob(workspaceRoot, request, onEvent) {
+  const hasCommand = typeof request?.command === "string" && request.command.trim().length > 0;
+  const hasCode = typeof request?.code === "string" && request.code.trim().length > 0;
+  if (!request || !hasCommand && !hasCode) {
+    return {
+      ok: false,
+      kind: "blocked",
+      message: "run_sandbox_code requires either command or code.",
+      error: "invalid_input",
+      executionHost: "electron-main"
+    };
+  }
+  const hostResult = await runDesktopSandboxCodeJob(
+    {
+      runId: request.runId,
+      workspaceKey: request.workspaceKey ?? request.runId ?? null,
+      command: request.command,
+      language: request.language,
+      code: request.code,
+      label: request.label ?? null,
+      sources: Array.isArray(request.sources) ? request.sources : [],
+      timeoutMs: request.timeoutMs,
+      networkPolicy: request.networkPolicy ?? "disabled"
+    },
+    {
+      getApprovedRoot: (rootId) => rootId === CLI_ROOT_ID ? { id: CLI_ROOT_ID, path: workspaceRoot, approvedAt: (/* @__PURE__ */ new Date()).toISOString() } : null,
+      isPathSafe: (_rootPath, targetPath) => !targetPath.split(/[\\/]+/).includes(".."),
+      isInsideApprovedRoot: (filePath) => {
+        const absolute = path10.resolve(expandHome4(filePath));
+        if (isInside(workspaceRoot, absolute)) {
+          return { id: CLI_ROOT_ID, path: workspaceRoot, approvedAt: (/* @__PURE__ */ new Date()).toISOString() };
+        }
+        return { id: "cli-absolute-root", path: path10.dirname(absolute), approvedAt: (/* @__PURE__ */ new Date()).toISOString() };
+      },
+      shouldIgnore: (fileName) => IGNORED_DIRS.has(fileName),
+      guessMimeType: inferMimeType,
+      onEvent
+    }
+  );
+  const data = sandboxHostData(hostResult);
+  return {
+    ok: hostResult.ok,
+    kind: hostResult.kind,
+    message: hostResult.message,
+    error: hostResult.ok ? void 0 : "execution_failed",
+    executionHost: "electron-main",
+    runId: hostResult.runId,
+    data
+  };
+}
+function sandboxHostData(result2) {
+  return {
+    status: result2.status,
+    exitCode: result2.exitCode,
+    durationMs: result2.durationMs,
+    stdout: result2.stdout,
+    stderr: result2.stderr,
+    stdoutTruncated: result2.stdoutTruncated,
+    stderrTruncated: result2.stderrTruncated,
+    producedFiles: result2.producedFiles,
+    inputManifest: result2.inputManifest,
+    runtimeInfo: result2.runtimeInfo,
+    structuredOutput: result2.structuredOutput,
+    workspacePath: result2.workspacePath,
+    language: result2.language,
+    reportJsonPresent: result2.reportJsonPresent,
+    codeSha256: result2.codeSha256,
+    warnings: result2.warnings
+  };
+}
+function safeSandboxRelativePath(value) {
+  const clean = value.replace(/\\/g, "/").split("/").filter((part) => part && part !== "." && part !== "..").join("/");
+  return clean || "input";
+}
+function guessCliFileType(filePath) {
+  const ext = path10.extname(filePath).toLowerCase();
+  if ([".xlsx", ".xls"].includes(ext)) return "spreadsheet";
+  if (ext === ".csv" || ext === ".tsv") return "csv";
+  if (ext === ".pdf") return "pdf";
+  if ([".png", ".jpg", ".jpeg", ".gif", ".webp", ".svg"].includes(ext)) return "image";
+  if ([".doc", ".docx", ".txt", ".md", ".rtf"].includes(ext)) return "document";
+  return "unknown";
+}
+async function runShellCommand(input) {
+  const startedAt = Date.now();
+  const cwd2 = input.cwd ? resolveReadPath(input.workspaceRoot, input.cwd) : input.workspaceRoot;
   const timeoutMs = Math.max(1e3, Math.min(input.timeoutMs ?? 3e4, 12e4));
-  return new Promise((resolve4) => {
-    const child = spawn(process.env.SHELL || "/bin/zsh", ["-lc", input.command], {
+  return new Promise((resolve5) => {
+    const child = spawn2(process.env.SHELL || "/bin/zsh", ["-lc", input.command], {
       cwd: cwd2,
       env: process.env,
       stdio: ["ignore", "pipe", "pipe"]
@@ -223039,7 +224375,7 @@ async function runShellCommand(input) {
     });
     child.on("error", (error) => {
       clearTimeout(timer);
-      resolve4({
+      resolve5({
         ok: false,
         stdout,
         stderr,
@@ -223056,7 +224392,7 @@ async function runShellCommand(input) {
     child.on("close", (code, signal) => {
       clearTimeout(timer);
       const capped = capOutput(stdout, stderr);
-      resolve4({
+      resolve5({
         ok: code === 0 && !timedOut,
         stdout: capped.stdout,
         stderr: capped.stderr,
@@ -223077,8 +224413,18 @@ function resolveReadPath(root2, inputPath) {
   const expanded = expandHome4(inputPath || ".");
   return path10.resolve(path10.isAbsolute(expanded) ? expanded : path10.join(root2, expanded));
 }
+function resolveRequestRoot(defaultRoot, requestRoot) {
+  const trimmed = requestRoot?.trim();
+  return trimmed ? resolveReadPath(defaultRoot, trimmed) : defaultRoot;
+}
 function resolveWritePath(root2, inputPath) {
-  return path10.resolve(root2, inputPath || ".");
+  const expanded = expandHome4(inputPath || ".");
+  return path10.resolve(path10.isAbsolute(expanded) ? expanded : path10.join(root2, expanded));
+}
+function displayPath(root2, target, requestedPath) {
+  const expanded = expandHome4(requestedPath || ".");
+  if (path10.isAbsolute(expanded) || requestedPath.startsWith("~")) return target;
+  return path10.relative(root2, target) || path10.basename(target);
 }
 function resolveLocalSourceId(root2, localSourceId) {
   const raw = localSourceId.includes("::") ? localSourceId.split("::").slice(1).join("::") : localSourceId;
@@ -223090,8 +224436,8 @@ function expandHome4(inputPath) {
   return inputPath;
 }
 function isInside(root2, candidate) {
-  const relative = path10.relative(path10.resolve(root2), path10.resolve(candidate));
-  return relative === "" || !relative.startsWith("..") && !path10.isAbsolute(relative);
+  const relative2 = path10.relative(path10.resolve(root2), path10.resolve(candidate));
+  return relative2 === "" || !relative2.startsWith("..") && !path10.isAbsolute(relative2);
 }
 async function safeStat(target) {
   try {
@@ -223154,8 +224500,8 @@ function escapeRegex2(value) {
   return value.replace(/[|\\{}()[\]^$+*?.]/g, "\\$&");
 }
 async function readTextFileIfReasonable(file) {
-  const stat = await safeStat(file);
-  if (!stat?.isFile() || stat.size > 1e6) return null;
+  const stat2 = await safeStat(file);
+  if (!stat2?.isFile() || stat2.size > 1e6) return null;
   const buffer = await fsp.readFile(file);
   if (buffer.includes(0)) return null;
   return buffer.toString("utf8");
@@ -223163,18 +224509,18 @@ async function readTextFileIfReasonable(file) {
 function sanitizeMaxResults(value) {
   return Math.max(1, Math.min(typeof value === "number" ? Math.floor(value) : DEFAULT_MAX_RESULTS, 1e3));
 }
-function localSourceEntry(root2, file) {
-  const stat = fs9.statSync(file);
+function localSourceEntry(root2, file, absoluteId = false) {
+  const stat2 = fs9.statSync(file);
   const relativePath = path10.relative(root2, file);
   const extension2 = path10.extname(file).toLowerCase();
   return {
-    localSourceId: `${CLI_ROOT_ID}::${relativePath}`,
-    rootId: CLI_ROOT_ID,
+    localSourceId: absoluteId ? file : `${CLI_ROOT_ID}::${relativePath}`,
+    rootId: absoluteId ? "cli-absolute-root" : CLI_ROOT_ID,
     relativePath,
     fileName: path10.basename(file),
     extension: extension2,
-    sizeBytes: stat.size,
-    modifiedAt: stat.mtime.toISOString(),
+    sizeBytes: stat2.size,
+    modifiedAt: stat2.mtime.toISOString(),
     mimeType: inferMimeType(file),
     isDirectory: false
   };
@@ -223214,6 +224560,9 @@ var CLI_ROOT_ID, DEFAULT_MAX_RESULTS, MAX_READ_BYTES, IGNORED_DIRS;
 var init_nodeLocalBridge = __esm({
   "features/perchTerminal/runtime/cliHost/nodeLocalBridge.ts"() {
     "use strict";
+    init_perchCore();
+    init_perchBusinessTools();
+    init_localSandboxHost();
     CLI_ROOT_ID = "cli-root";
     DEFAULT_MAX_RESULTS = 200;
     MAX_READ_BYTES = 2e6;
@@ -223867,8 +225216,8 @@ function createMemoryAuthStorage() {
 }
 async function createOAuthCallbackServer(input) {
   let resolveResult = null;
-  const resultPromise = new Promise((resolve4) => {
-    resolveResult = resolve4;
+  const resultPromise = new Promise((resolve5) => {
+    resolveResult = resolve5;
   });
   const server = http.createServer((request, response) => {
     const requestUrl = new URL(request.url ?? "/", `http://${input.host}`);
@@ -223895,11 +225244,11 @@ async function createOAuthCallbackServer(input) {
     resolveResult?.({ ok: true, code });
     resolveResult = null;
   });
-  await new Promise((resolve4, reject2) => {
+  await new Promise((resolve5, reject2) => {
     server.once("error", reject2);
     server.listen(0, input.host, () => {
       server.off("error", reject2);
-      resolve4();
+      resolve5();
     });
   });
   const address = server.address();
@@ -223917,7 +225266,7 @@ async function createOAuthCallbackServer(input) {
     waitForCode: async () => resultPromise,
     close: async () => {
       clearTimeout(timeout);
-      await new Promise((resolve4) => server.close(() => resolve4()));
+      await new Promise((resolve5) => server.close(() => resolve5()));
     }
   };
 }
@@ -224871,21 +226220,21 @@ var require_react_development = __commonJS({
         );
         actScopeDepth = prevActScopeDepth;
       }
-      function recursivelyFlushAsyncActWork(returnValue, resolve4, reject2) {
+      function recursivelyFlushAsyncActWork(returnValue, resolve5, reject2) {
         var queue2 = ReactSharedInternals.actQueue;
         if (null !== queue2)
           if (0 !== queue2.length)
             try {
               flushActQueue(queue2);
               enqueueTask(function() {
-                return recursivelyFlushAsyncActWork(returnValue, resolve4, reject2);
+                return recursivelyFlushAsyncActWork(returnValue, resolve5, reject2);
               });
               return;
             } catch (error) {
               ReactSharedInternals.thrownErrors.push(error);
             }
           else ReactSharedInternals.actQueue = null;
-        0 < ReactSharedInternals.thrownErrors.length ? (queue2 = aggregateErrors(ReactSharedInternals.thrownErrors), ReactSharedInternals.thrownErrors.length = 0, reject2(queue2)) : resolve4(returnValue);
+        0 < ReactSharedInternals.thrownErrors.length ? (queue2 = aggregateErrors(ReactSharedInternals.thrownErrors), ReactSharedInternals.thrownErrors.length = 0, reject2(queue2)) : resolve5(returnValue);
       }
       function flushActQueue(queue2) {
         if (!isFlushing) {
@@ -225072,7 +226421,7 @@ var require_react_development = __commonJS({
             ));
           });
           return {
-            then: function(resolve4, reject2) {
+            then: function(resolve5, reject2) {
               didAwaitActCall = true;
               thenable.then(
                 function(returnValue) {
@@ -225082,7 +226431,7 @@ var require_react_development = __commonJS({
                       flushActQueue(queue2), enqueueTask(function() {
                         return recursivelyFlushAsyncActWork(
                           returnValue,
-                          resolve4,
+                          resolve5,
                           reject2
                         );
                       });
@@ -225096,7 +226445,7 @@ var require_react_development = __commonJS({
                       ReactSharedInternals.thrownErrors.length = 0;
                       reject2(_thrownError);
                     }
-                  } else resolve4(returnValue);
+                  } else resolve5(returnValue);
                 },
                 function(error) {
                   popActScope(prevActQueue, prevActScopeDepth);
@@ -225118,15 +226467,15 @@ var require_react_development = __commonJS({
         if (0 < ReactSharedInternals.thrownErrors.length)
           throw callback = aggregateErrors(ReactSharedInternals.thrownErrors), ReactSharedInternals.thrownErrors.length = 0, callback;
         return {
-          then: function(resolve4, reject2) {
+          then: function(resolve5, reject2) {
             didAwaitActCall = true;
             0 === prevActScopeDepth ? (ReactSharedInternals.actQueue = queue2, enqueueTask(function() {
               return recursivelyFlushAsyncActWork(
                 returnValue$jscomp$0,
-                resolve4,
+                resolve5,
                 reject2
               );
-            })) : resolve4(returnValue$jscomp$0);
+            })) : resolve5(returnValue$jscomp$0);
           }
         };
       };
@@ -225553,7 +226902,7 @@ var init_compat = __esm({
 });
 
 // node_modules/environment/index.js
-var isBrowser, isNode2, isBun, isDeno, isElectron, isJsDom, isWebWorker, isDedicatedWorker, isSharedWorker, isServiceWorker, platform, isMacOs, isWindows, isLinux, isIos, isAndroid;
+var isBrowser, isNode2, isBun, isDeno, isElectron, isJsDom, isWebWorker, isDedicatedWorker, isSharedWorker, isServiceWorker, platform2, isMacOs, isWindows, isLinux, isIos, isAndroid;
 var init_environment = __esm({
   "node_modules/environment/index.js"() {
     isBrowser = globalThis.window?.document !== void 0;
@@ -225566,12 +226915,12 @@ var init_environment = __esm({
     isDedicatedWorker = typeof DedicatedWorkerGlobalScope !== "undefined" && globalThis instanceof DedicatedWorkerGlobalScope;
     isSharedWorker = typeof SharedWorkerGlobalScope !== "undefined" && globalThis instanceof SharedWorkerGlobalScope;
     isServiceWorker = typeof ServiceWorkerGlobalScope !== "undefined" && globalThis instanceof ServiceWorkerGlobalScope;
-    platform = globalThis.navigator?.userAgentData?.platform;
-    isMacOs = platform === "macOS" || globalThis.navigator?.platform === "MacIntel" || globalThis.navigator?.userAgent?.includes(" Mac ") === true || globalThis.process?.platform === "darwin";
-    isWindows = platform === "Windows" || globalThis.navigator?.platform === "Win32" || globalThis.process?.platform === "win32";
-    isLinux = platform === "Linux" || globalThis.navigator?.platform?.startsWith("Linux") === true || globalThis.navigator?.userAgent?.includes(" Linux ") === true || globalThis.process?.platform === "linux";
-    isIos = platform === "iOS" || globalThis.navigator?.platform === "MacIntel" && globalThis.navigator?.maxTouchPoints > 1 || /iPad|iPhone|iPod/.test(globalThis.navigator?.platform);
-    isAndroid = platform === "Android" || globalThis.navigator?.platform === "Android" || globalThis.navigator?.userAgent?.includes(" Android ") === true || globalThis.process?.platform === "android";
+    platform2 = globalThis.navigator?.userAgentData?.platform;
+    isMacOs = platform2 === "macOS" || globalThis.navigator?.platform === "MacIntel" || globalThis.navigator?.userAgent?.includes(" Mac ") === true || globalThis.process?.platform === "darwin";
+    isWindows = platform2 === "Windows" || globalThis.navigator?.platform === "Win32" || globalThis.process?.platform === "win32";
+    isLinux = platform2 === "Linux" || globalThis.navigator?.platform?.startsWith("Linux") === true || globalThis.navigator?.userAgent?.includes(" Linux ") === true || globalThis.process?.platform === "linux";
+    isIos = platform2 === "iOS" || globalThis.navigator?.platform === "MacIntel" && globalThis.navigator?.maxTouchPoints > 1 || /iPad|iPhone|iPod/.test(globalThis.navigator?.platform);
+    isAndroid = platform2 === "Android" || globalThis.navigator?.platform === "Android" || globalThis.navigator?.userAgent?.includes(" Android ") === true || globalThis.process?.platform === "android";
   }
 });
 
@@ -229888,8 +231237,8 @@ var require_react_reconciler_production = __commonJS({
           currentEntangledActionThenable = {
             status: "pending",
             value: void 0,
-            then: function(resolve4) {
-              entangledListeners.push(resolve4);
+            then: function(resolve5) {
+              entangledListeners.push(resolve5);
             }
           };
         }
@@ -229912,8 +231261,8 @@ var require_react_reconciler_production = __commonJS({
           status: "pending",
           value: null,
           reason: null,
-          then: function(resolve4) {
-            listeners.push(resolve4);
+          then: function(resolve5) {
+            listeners.push(resolve5);
           }
         };
         thenable.then(
@@ -239512,8 +240861,8 @@ var require_react_reconciler_development = __commonJS({
           currentEntangledActionThenable = {
             status: "pending",
             value: void 0,
-            then: function(resolve4) {
-              entangledListeners.push(resolve4);
+            then: function(resolve5) {
+              entangledListeners.push(resolve5);
             }
           };
         }
@@ -239536,8 +240885,8 @@ var require_react_reconciler_development = __commonJS({
           status: "pending",
           value: null,
           reason: null,
-          then: function(resolve4) {
-            listeners.push(resolve4);
+          then: function(resolve5) {
+            listeners.push(resolve5);
           }
         };
         thenable.then(
@@ -254995,7 +256344,7 @@ var require_websocket = __commonJS({
     var http2 = __require("http");
     var net = __require("net");
     var tls = __require("tls");
-    var { randomBytes, createHash: createHash2 } = __require("crypto");
+    var { randomBytes, createHash: createHash3 } = __require("crypto");
     var { Duplex, Readable } = __require("stream");
     var { URL: URL2 } = __require("url");
     var PerMessageDeflate2 = require_permessage_deflate();
@@ -255663,7 +257012,7 @@ var require_websocket = __commonJS({
           abortHandshake(websocket, socket, "Invalid Upgrade header");
           return;
         }
-        const digest = createHash2("sha1").update(key + GUID).digest("base64");
+        const digest = createHash3("sha1").update(key + GUID).digest("base64");
         if (res.headers["sec-websocket-accept"] !== digest) {
           abortHandshake(websocket, socket, "Invalid Sec-WebSocket-Accept header");
           return;
@@ -256032,7 +257381,7 @@ var require_websocket_server = __commonJS({
     var EventEmitter3 = __require("events");
     var http2 = __require("http");
     var { Duplex } = __require("stream");
-    var { createHash: createHash2 } = __require("crypto");
+    var { createHash: createHash3 } = __require("crypto");
     var extension2 = require_extension();
     var PerMessageDeflate2 = require_permessage_deflate();
     var subprotocol2 = require_subprotocol();
@@ -256339,7 +257688,7 @@ var require_websocket_server = __commonJS({
           );
         }
         if (this._state > RUNNING) return abortHandshake(socket, 503);
-        const digest = createHash2("sha1").update(key + GUID).digest("base64");
+        const digest = createHash3("sha1").update(key + GUID).digest("base64");
         const headers = [
           "HTTP/1.1 101 Switching Protocols",
           "Upgrade: websocket",
@@ -277257,8 +278606,8 @@ var init_ink = __esm({
         }
       }
       async waitUntilExit() {
-        this.exitPromise ||= new Promise((resolve4, reject2) => {
-          this.resolveExitPromise = resolve4;
+        this.exitPromise ||= new Promise((resolve5, reject2) => {
+          this.resolveExitPromise = resolve5;
           this.rejectExitPromise = reject2;
         });
         if (!this.beforeExitHandler) {
@@ -279641,7 +280990,7 @@ async function runAuthCommand(parsed, writer) {
 `);
       return 0;
     }
-    await new Promise((resolve4) => setTimeout(resolve4, 1500));
+    await new Promise((resolve5) => setTimeout(resolve5, 1500));
   }
   writer.stderr("No CLI session arrived. Try `perch login` again after confirming the browser sign-in completed.\n");
   return 2;
@@ -279774,14 +281123,14 @@ function writeAPScenarioResult(result2, json, writer) {
 }
 function resolveFolderPath(input) {
   const resolved = resolvePath(input);
-  const stat = fs13.existsSync(resolved) ? fs13.statSync(resolved) : null;
-  if (!stat?.isDirectory()) throw new Error(`Folder does not exist: ${resolved}`);
+  const stat2 = fs13.existsSync(resolved) ? fs13.statSync(resolved) : null;
+  if (!stat2?.isDirectory()) throw new Error(`Folder does not exist: ${resolved}`);
   return resolved;
 }
 function resolveExistingDirectory(input) {
   const resolved = resolvePath(input);
-  const stat = fs13.existsSync(resolved) ? fs13.statSync(resolved) : null;
-  if (!stat?.isDirectory()) throw new Error(`Directory does not exist: ${resolved}`);
+  const stat2 = fs13.existsSync(resolved) ? fs13.statSync(resolved) : null;
+  if (!stat2?.isDirectory()) throw new Error(`Directory does not exist: ${resolved}`);
   return resolved;
 }
 function resolvePath(input) {