perchai-cli 2.4.19 → 2.4.21

package/dist/perch.mjs

@@ -76200,6 +76200,7 @@ function getToolDisplayName(toolName) {
 var NON_MODULE_TOOL_OWNERS, TOOL_RISK, TOOL_DISPLAY_NAMES;
 var init_catalog = __esm({
   "features/perchTerminal/runtime/toolSystem/catalog.ts"() {
+    "use strict";
     init_toolNames();
     NON_MODULE_TOOL_OWNERS = {
       [TOOL_NAMES.listSources]: "lane",
@@ -78259,7 +78260,7 @@ var init_permissionModes = __esm({
 });
 
 // features/perchTerminal/runtime/perchMemoryGuidance.ts
-var VISIBLE_OUTPUT_STYLE_GUIDANCE, SAFFRON_CORE_IDENTITY, QUILL_CORE_IDENTITY, PERCH_MEMORY_GUIDANCE;
+var VISIBLE_OUTPUT_STYLE_GUIDANCE, SAFFRON_STYLE_CONTRACT, QUILL_STYLE_CONTRACT, SAFFRON_CORE_IDENTITY, QUILL_CORE_IDENTITY, PERCH_MEMORY_GUIDANCE;
 var init_perchMemoryGuidance = __esm({
   "features/perchTerminal/runtime/perchMemoryGuidance.ts"() {
     "use strict";
@@ -78274,6 +78275,31 @@ Avoid stock AI phrases: "delve," "nuanced," "robust," "seamless,"
 Be concise when the user is moving fast.
 Preserve the persona: Quill is warm, literate, and direct; Saffron is sharp,
 practical, and confident.
+`.trim();
+    SAFFRON_STYLE_CONTRACT = `
+## Voice contract \u2014 Saffron (visible output only)
+
+This contract shapes how your replies read. It never changes which tools you
+use, which tasks you take on, or how the work itself is done.
+
+- Direct, sharp, practical, operator-like, confident.
+- Lead with the finding or the action. Decoration is at most a dry aside.
+- Memory texture: use remembered facts operationally ("your close lands on the
+  5th, so this ships before it") \u2014 state the fact, use it, move on.
+- Concise. Confidence reads as economy, not volume.
+`.trim();
+    QUILL_STYLE_CONTRACT = `
+## Voice contract \u2014 Quill (visible output only)
+
+This contract shapes how your replies read. It never changes which tools you
+use, which tasks you take on, or how the work itself is done.
+
+- Warm, personable, literate, more emotionally present than a status report.
+- Lightly humorous when it arises naturally; never forced, never a bit.
+- Memory texture: when relevant personal memories are in context, weave them in
+  naturally ("you mentioned the board reads these, so I kept it tight").
+- Still concise and useful. Warmth lives in the engagement, not the word count.
+- Hard limits: not verbose, not therapeutic, not flirty, not over-familiar.
 `.trim();
     SAFFRON_CORE_IDENTITY = `
 You are Saffron \u2014 Perch's workspace operator.
@@ -78410,6 +78436,11 @@ working through a paper. Founders tightening a pitch. Anyone who wants their
 words to land. You don't try to write *for* people; you help them write
 *better*. You know the difference, and you respect the difference.
 
+Writing is your craft home, not your fence. You're a full Perch operator: when
+the user needs analysis, files, data, an audit, or delivery, you do that work
+yourself with the same tools \u2014 in your own voice. You never punt real work to
+another persona.
+
 ## How you work
 
 Read first. Before you draft a single sentence, you know what the piece is for,
@@ -80877,6 +80908,7 @@ var init_personaRegistry = __esm({
         label: "Saffron",
         shortDescription: "Operator. Direct, sharp, finds the thing.",
         identityPrompt: SAFFRON_CORE_IDENTITY,
+        styleContract: SAFFRON_STYLE_CONTRACT,
         suggestedPrompts: [
           "Audit the AP folder for duplicates and anomalies",
           "Reconcile the GL against last month's subledger",
@@ -80900,6 +80932,7 @@ var init_personaRegistry = __esm({
         label: "Quill",
         shortDescription: "Writing companion. Warm, craft-aware, reads first.",
         identityPrompt: QUILL_CORE_IDENTITY,
+        styleContract: QUILL_STYLE_CONTRACT,
         suggestedPrompts: [
           "Draft a memo on personal jurisdiction",
           "Brief Pennoyer v. Neff",
@@ -80931,12 +80964,14 @@ function buildDesktopContextSection(input) {
       "grep",
       "statPath",
       "readLocalFile",
+      "readProjectMemory",
       "listLocalSources",
       "readLocalSourceFile"
     ].filter((name) => enabledToolSet2.has(name));
     const localWriteTools = [
       "writeLocalFile",
       "editLocalFile",
+      "saveToMemory",
       "bash",
       "runBashTerminalCommand",
       "generateAPAuditPacket",
@@ -80948,16 +80983,16 @@ function buildDesktopContextSection(input) {
     return {
       id: "desktop-context",
       lane: "desktop",
-      label: "CLI workspace",
+      label: "Terminal workspace",
       content: [
-        "## CLI local workspace",
-        "Perch is running from a terminal. Local filesystem, shell, sandbox-code, and AP evidence tools are available through CLI local workspace access.",
+        "## Terminal workspace",
+        "Perch is running from a terminal. Files, shell, sandbox-code, and AP evidence tools are available for the current workspace.",
         input.activeRootPath?.trim() ? `Workspace root: ${input.activeRootPath}. Treat relative paths as relative to this root.` : "Workspace root: current terminal directory.",
-        "GUI-only services are not connected here: embedded browser, Google/Gmail/Calendar delivery, Desktop RAG indexing, MCP Desktop servers, and project memory writes are unavailable unless the desktop app is running.",
+        "App-only services are not connected here: embedded browser, Google/Gmail/Calendar delivery, attached-folder semantic source indexing, and connected desktop integrations. CLI memory can still use signed-in durable memory or local .perch project memory when available.",
         localReadTools.length > 0 ? `Read tools: ${localReadTools.join(", ")}.` : "Read tools: none exposed for this turn.",
         localWriteTools.length > 0 ? `Write/command tools: ${localWriteTools.join(", ")}. These are governed by the selected permission mode and command policy.` : "Write/command tools: none exposed for this turn."
       ].join("\n"),
-      reason: "Terminal local workspace access and CLI tool availability for this turn.",
+      reason: "Terminal workspace and tool availability for this turn.",
       sourcePath: input.activeRootPath,
       metadata: {
         desktopConnected: false,
@@ -81016,8 +81051,14 @@ function buildDesktopContextSection(input) {
     (file) => `- ${file.relativePath} (${file.matchReason})`
   ) : [];
   const hasVisionSupport = input.selectedModelVisionSupport === true;
-  const searchHints = input.folderIndexSummary && input.folderIndexSummary.retrievalReadyFiles > 0 ? [
-    "Prefer retrieveContext for questions that span multiple files (cross-file evidence, duplicates, totals).",
+  const hasIndexedSourceSearch = Boolean(
+    input.folderIndexSummary && (input.folderIndexSummary.sourceChunkCount > 0 || input.folderIndexSummary.retrievalChunkCount > 0)
+  );
+  const hasVectorSearch = Boolean(
+    input.folderIndexSummary && (input.folderIndexSummary.embeddedChunkCount > 0 || input.folderIndexSummary.vectorReadyFiles > 0)
+  );
+  const searchHints = hasIndexedSourceSearch ? [
+    hasVectorSearch ? "Prefer retrieveContext for questions that span multiple files (cross-file evidence, duplicates, totals)." : "Keyword/source search is available through retrieveContext; semantic/vector retrieval is pending until embedded chunks are created.",
     "Use glob for named files like *Screenshot* or exact extensions like *.png.",
     "Use statPath or glob before claiming a file does not exist.",
     hasVisionSupport ? "For screenshots/images/PDF pages, open the file with readLocalSourceFile/readLocalFile and read the attached visual preview directly." : "For screenshots/images/PDF pages, open the file with readLocalSourceFile/readLocalFile; if visual details matter and no usable text was extracted, call visionInspect."
@@ -81026,8 +81067,16 @@ function buildDesktopContextSection(input) {
     "Use statPath or glob before claiming a file does not exist.",
     hasVisionSupport ? "For screenshots/images/PDF pages, open the file with readLocalSourceFile/readLocalFile and read the attached visual preview directly." : "For screenshots/images/PDF pages, open the file with readLocalSourceFile/readLocalFile; if visual details matter and no usable text was extracted, call visionInspect."
   ];
-  const folderIndexLine = input.folderIndexSummary ? `Folder index: ${input.folderIndexSummary.indexedFiles}/${input.folderIndexSummary.totalFiles} indexed \xB7 ${input.folderIndexSummary.retrievalReadyFiles} retrieval-ready \xB7 ${input.folderIndexSummary.filesNeedingOcr} need OCR.` : "Folder index: not loaded for this turn.";
-  const retrievalGuidance = input.folderIndexSummary && input.folderIndexSummary.retrievalReadyFiles > 20 ? `This folder has ${input.folderIndexSummary.retrievalReadyFiles} files with semantic embeddings. Use retrieveContext for cross-file queries instead of serial readLocalSourceFile calls. The recent-files list below is a sample \u2014 not the full corpus.` : null;
+  const folderIndexLine = input.folderIndexSummary ? [
+    `Folder index: ${input.folderIndexSummary.indexedFiles}/${input.folderIndexSummary.totalFiles} indexed`,
+    `${input.folderIndexSummary.registeredSources} registered source(s)`,
+    `${input.folderIndexSummary.sourceChunkCount} text/source chunk(s)`,
+    `${input.folderIndexSummary.retrievalChunkCount} retrieval chunk(s)`,
+    `${input.folderIndexSummary.embeddedChunkCount} embedded retrieval chunk(s)`,
+    `${input.folderIndexSummary.vectorReadyFiles} vector-ready file(s)`,
+    `${input.folderIndexSummary.filesNeedingOcr} need OCR`
+  ].join(" \xB7 ") + "." : "Folder index: not loaded for this turn.";
+  const retrievalGuidance = input.folderIndexSummary && input.folderIndexSummary.vectorReadyFiles > 20 ? `This folder has ${input.folderIndexSummary.vectorReadyFiles} files with embedded retrieval chunks for semantic/vector search. Use retrieveContext for cross-file queries instead of serial readLocalSourceFile calls. The recent-files list below is a sample \u2014 not the full corpus.` : input.folderIndexSummary && input.folderIndexSummary.sourceChunkCount > 0 && input.folderIndexSummary.embeddedChunkCount === 0 ? "This folder has keyword/source chunks, but no embedded retrieval chunks yet. Use retrieveContext for keyword-backed source search; semantic/vector retrieval is pending." : null;
   const mcpToolNames = enabledToolSet.has("mcp__") ? [] : Array.from(enabledToolSet).filter((tool) => tool.startsWith("mcp__"));
   const mcpServerNames = Array.from(
     new Set(mcpToolNames.map((tool) => tool.split("__")[1]).filter(Boolean))
@@ -81060,7 +81109,7 @@ function buildDesktopContextSection(input) {
     content: [
       "## Desktop environment",
       "Local workspace access is connected. Local filesystem tools are available.",
-      input.activeRootPath?.trim() ? `Optional folder scope: ${input.activeRootPath} (you are NOT limited to it \u2014 absolute paths anywhere in the user's home work directly).` : "No folder scope is selected, and none is needed. When the user gives a file path, USE IT DIRECTLY \u2014 call readLocalFile / glob / grep / visionInspect with the absolute path (e.g. /Users/you/Desktop/shot.png). Full-access policy already allows any path in the user's home. NEVER tell the user to select or approve a folder, and NEVER refuse a file because no folder is selected.",
+      input.activeRootPath?.trim() ? `Workspace folder: ${input.activeRootPath} (optional; absolute paths anywhere in the user's home work directly).` : "No workspace folder is selected, and none is needed. When the user gives a file path, use it directly with readLocalFile / glob / grep / visionInspect and the absolute path (for example /Users/you/Desktop/shot.png).",
       `Visible local sources: ${totalVisibleFiles}`,
       input.localSourcesMeta?.refreshedAt ? `Local source snapshot refreshed: ${input.localSourcesMeta.refreshedAt}` : null,
       input.localSourcesMeta?.truncated ? `Local source snapshot is truncated at ${input.localSourcesMeta.maxSources} files. ${input.localSourcesMeta.warning ?? "Use glob with a pattern for exact discovery."}` : null,
@@ -81077,7 +81126,7 @@ function buildDesktopContextSection(input) {
       availableReadTools.length > 0 ? `Read tools: ${availableReadTools.join(", ")}.` : "Read tools: none exposed for this turn.",
       availableWriteTools.length > 0 ? `Write/command tools: ${availableWriteTools.join(", ")}. These are governed by the selected permission mode and command policy.` : "Write/command tools: none exposed for this turn."
     ].filter(Boolean).join("\n"),
-    reason: "Local workspace access, optional folder scope, and tool availability for this turn.",
+    reason: "Local workspace access, optional workspace folder, and tool availability for this turn.",
     sourcePath: input.activeRootPath,
     metadata: {
       desktopConnected: true,
@@ -85234,7 +85283,7 @@ function buildProjectMemorySections(meta) {
       lane: "project_memory",
       label: "PERCH.md",
       content: ["## PERCH.md", meta.perchMd.content].join("\n"),
-      reason: "Project operator memory loaded from the selected local folder scope.",
+      reason: "Project operator memory loaded from the selected workspace folder.",
       sourcePath: meta.perchMd.relativePath,
       metadata: {
         relativePath: meta.perchMd.relativePath,
@@ -85271,7 +85320,7 @@ function buildProjectMemorySections(meta) {
       lane: "project_memory",
       label: `Rule: ${rule.fileName}`,
       content: [`## Project rule: ${rule.fileName}`, rule.content].join("\n"),
-      reason: "Rules-style project instruction loaded from the selected local folder scope.",
+      reason: "Rules-style project instruction loaded from the selected workspace folder.",
       sourcePath: rule.relativePath,
       metadata: {
         relativePath: rule.relativePath,
@@ -85301,7 +85350,7 @@ function buildProjectMemorySections(meta) {
       content: [`## Project memory: ${memory.fileName}`, memory.content].join(
         "\n"
       ),
-      reason: "Typed project memory loaded from the selected local folder scope.",
+      reason: "Typed project memory loaded from the selected workspace folder.",
       sourcePath: memory.relativePath,
       metadata: {
         relativePath: memory.relativePath,
@@ -85412,7 +85461,7 @@ Tool strengths:
 - For PO overages, compare each invoice/payment against the specific PO number referenced by that invoice, not only vendor-level PO coverage. If duplicate PO rows share a PO number, compare against each candidate approved amount and flag any row-level overage or ambiguous approval.
 - Model-written code should emit useful output first. The sandbox workspace has stdlib Python, input_manifest.json, sandbox_runtime.json, and perch_helpers. pandas/pdfplumber may not be installed, so use stdlib CSV parsing and perch_helpers.extract_invoice_fields() for invoice PDFs unless sandbox_runtime.json says package installs are enabled and an install is truly needed. Host paths like /Users/... are not readable inside the sandbox unless passed as sources and copied under input/. If output/report.json is present, it can be used as structured evidence; if not, use stdout/stderr and produced files honestly. If the sandbox run errors, say that plainly and iterate.
 - Cite sources for every reported figure. If a figure can't be traced to a document, mark it [UNSOURCED] rather than omitting it
-- For a Mac folder: use glob and grep with the path; use listLocalSources/readLocalSourceFile only when a folder scope is already selected
+- For a Mac folder: use glob and grep with the path; use listLocalSources/readLocalSourceFile only when a workspace folder is already selected
 - Do not run a tool just because a keyword matches; reason from the user's current request and the existing thread state
 - Do not redo an audit, document, or email draft that is already done unless the user asks for a revision
 - Summarize tool outputs; don't stream raw JSON to the user
@@ -85426,9 +85475,9 @@ var QUILL_SPECIALIST_AGENTS_PROMPT;
 var init_quillSpecialistPrompt = __esm({
   "features/perchTerminal/agentPlatform/quillSpecialistPrompt.ts"() {
     QUILL_SPECIALIST_AGENTS_PROMPT = `
-## Quill \u2014 Specialist Delegation
+## Writing & Research \u2014 Specialist Delegation
 
-You are Quill, the writing persona. You do not run playbooks or suites. You write and deliver in your own loop, dispatching specialists ONLY for research/verification fan-out \u2014 never for delivery.
+This task is writing/research/legal shaped. You write and deliver in your own loop, dispatching specialists ONLY for research/verification fan-out \u2014 never for delivery.
 
 Use specialists (dispatch_agent) when independent research or verification benefits from separation:
 - general_writer: drafts polished letters, memos, essays, emails, and revisions from the user's request plus provided context. It does NOT research \u2014 only give it general_writer work once you already have the sources/facts it needs.
@@ -85466,7 +85515,6 @@ Success rules:
 - Do not say a Google Doc was created or an email was sent unless you have a verified receipt (URL / sent confirmation) or a screenshot showing the result.
 - Safety: never click anything that grants access or changes sharing/permissions, such as "Share & send", "Share", or "Grant access". If a share/permission dialog appears, choose the option that sends without changing permissions, such as "Send without sharing" or "Send anyway".
 - If delivery hits a problem, recover in the same loop. Try the next reasonable path, or ask the user for permission/choice; do not silently stop or skip the requested delivery. Never claim success without proof.
-- If the user asks for finance, AP, payroll, KYC, market, meeting, or close work, suggest Saffron unless the task is purely writing the prose.
 `.trim();
   }
 });
@@ -91867,6 +91915,7 @@ function buildCoreSystemSection(input) {
       ].join("\n")
     );
   }
+  lines.push("", persona.styleContract);
   return lines.join("\n");
 }
 function appendAgentsModeGuidance(input) {
@@ -91899,9 +91948,8 @@ function appendAgentsModeGuidance(input) {
     });
     return;
   }
-  const isQuill = personaId === "quill";
   lines.push(
-    isQuill ? "You're in Quill mode. Get writing, research, legal, and delivery work done by orchestrating specialist sub-agents, not by running suites or playbooks." : "You're in Agents mode. Get the work done.",
+    "You're in Agents mode. Get the work done.",
     "Execute directly when the task is clear and bounded.",
     "For greetings, thanks, quick check-ins, or explanation-only questions, answer directly without tools unless the user asks you to inspect, search, run, create, send, or change something.",
     "For delivery, write/send/change, filesystem, browser, or other external action turns, call the appropriate tool in the same turn and never end with only a promise, preamble, apology, or status line. For chat-only drafts, summaries, opinions, or answers, once evidence is available, synthesize directly in chat and stop.",
@@ -91921,9 +91969,10 @@ function appendAgentsModeGuidance(input) {
   if (approvedPlanBlock) {
     lines.push("", approvedPlanBlock);
   }
-  if (isQuill) {
+  if (personaId === "quill" && isWritingResearchIntent(assemblyInput.trimmedInput)) {
     lines.push("", QUILL_SPECIALIST_AGENTS_PROMPT);
-  } else if (assemblyInput.coordinatorMode || isFinancialOperatorIntent(assemblyInput.trimmedInput)) {
+  }
+  if (assemblyInput.coordinatorMode || isFinancialOperatorIntent(assemblyInput.trimmedInput)) {
     lines.push("", FINANCIAL_OPERATOR_AGENTS_PROMPT);
   }
   lines.push("", PLATFORM_DELIVERY_GUIDANCE);
@@ -92036,6 +92085,11 @@ function isFinancialOperatorIntent(input) {
     input
   );
 }
+function isWritingResearchIntent(input) {
+  return /\b(writ(?:e|ing|ten)|draft|redraft|rewrite|revise|edit|proofread|polish|memo(?:randum)?|essay|letter|brief|motion|paper|article|blog|post|thesis|abstract|summar(?:y|ize|ise)|cit(?:e|ation|ations)|research|sources?|irac|case[-\s]?law|statute|regulation|legal|law\s+review)\b/i.test(
+    input
+  );
+}
 function buildApprovedGeneralPlanBlock(session) {
   const approvedPlan = session?.approvedGeneralPlan;
   if (!approvedPlan) return null;
@@ -92427,7 +92481,7 @@ function buildContextSummary(input, rows) {
     `mode=${input.chatMode}`,
     `messages=${input.recentMessages.length}`,
     `source=${input.selectedSourceId ?? "none"}`,
-    `desktop=${input.desktopConnected ? "connected" : input.cliLocalTools === true ? "cli-local" : "browser"}`,
+    `desktop=${input.desktopConnected ? "connected" : input.cliLocalTools === true ? "terminal" : "browser"}`,
     `sent=${sentCount}`,
     `compacted=${compactedCount}`,
     `not_found=${notFoundCount}`,
@@ -92786,9 +92840,15 @@ function createEmbeddingProviderFromEnv(env4 = readEnv()) {
   };
 }
 function createBrowserEmbeddingProvider(route = "/api/perch-terminal/embeddings") {
+  let resolvedModel = "server-configured";
+  let resolvedDimensions = DEFAULT_RETRIEVAL_EMBEDDING_DIMENSIONS;
   return {
-    model: "server-configured",
-    dimensions: DEFAULT_RETRIEVAL_EMBEDDING_DIMENSIONS,
+    get model() {
+      return resolvedModel;
+    },
+    get dimensions() {
+      return resolvedDimensions;
+    },
     async embed(text) {
       return (await this.embedBatch([text]))[0];
     },
@@ -92811,6 +92871,12 @@ function createBrowserEmbeddingProvider(route = "/api/perch-terminal/embeddings"
       if (!Array.isArray(payload.embeddings)) {
         throw new EmbeddingProviderError("Embedding route returned no embeddings.");
       }
+      if (typeof payload.model === "string" && payload.model.trim()) {
+        resolvedModel = payload.model;
+      }
+      if (typeof payload.dimensions === "number" && Number.isFinite(payload.dimensions)) {
+        resolvedDimensions = payload.dimensions;
+      }
       return payload.embeddings;
     }
   };
@@ -92885,7 +92951,7 @@ var init_embeddingProvider = __esm({
 
 // features/perchTerminal/persistence/permanentMemoryPersistence.ts
 function createPermanentMemoryPersistence(supabase, options = {}) {
-  const embeddingProvider = options.embeddingProvider ?? createBrowserEmbeddingProvider();
+  const embeddingProvider = options.embeddingProvider ?? createDefaultPermanentMemoryEmbeddingProvider();
   const selectColumns = "id, user_id, workspace_id, project_id, scope, type, title, description, body, why, how_to_apply, source_kind, source_thread_id, source_message_id, source_run_id, confidence, created_at, updated_at, last_confirmed_at, stale_after_days, archived_at, tags, metadata";
   const api2 = {
     async listPermanentMemories({
@@ -93145,6 +93211,21 @@ function createPermanentMemoryPersistence(supabase, options = {}) {
   };
   return api2;
 }
+function createDefaultPermanentMemoryEmbeddingProvider() {
+  if (typeof window !== "undefined") return createBrowserEmbeddingProvider();
+  const status = getEmbeddingProviderStatus();
+  let provider = null;
+  const load = () => {
+    provider ??= createEmbeddingProviderFromEnv();
+    return provider;
+  };
+  return {
+    model: status.configured ? status.model : DEFAULT_RETRIEVAL_EMBEDDING_MODEL,
+    dimensions: status.configured ? status.dimensions : DEFAULT_RETRIEVAL_EMBEDDING_DIMENSIONS,
+    embed: async (text) => load().embed(text),
+    embedBatch: async (texts) => load().embedBatch(texts)
+  };
+}
 async function findSimilarPermanentMemoryForInput(input) {
   const queryEmbedding = await input.embeddingProvider.embed(canonicalMemoryEmbeddingText(input.input));
   const { data, error } = await input.supabase.rpc("perch_ai_match_permanent_memories", {
@@ -117025,7 +117106,7 @@ function createSourcePersistence(supabase) {
       return count ?? 0;
     },
     async countEmbeddedRetrievalChunks(workspaceId) {
-      const { count, error } = await supabase.from("perch_ai_retrieval_chunks").select("*", { count: "exact", head: true }).eq("workspace_id", workspaceId).eq("is_stale", false).not("embedding", "is", null);
+      const { count, error } = await supabase.from("perch_ai_retrieval_chunks").select("*", { count: "exact", head: true }).eq("workspace_id", workspaceId).eq("is_stale", false).not("embedding", "is", null).not("embedding_model", "is", null).not("embedded_at", "is", null);
       if (error) throw error;
       return count ?? 0;
     },
@@ -117131,18 +117212,30 @@ function createSourcePersistence(supabase) {
       return data ?? [];
     },
     async listIndexedSourceIds(workspaceId) {
-      const [chunks, retrieval, memory] = await Promise.all([
+      const [chunks, retrieval, embeddedRetrieval, memory] = await Promise.all([
         supabase.from("perch_ai_source_chunks").select("source_id").eq("workspace_id", workspaceId),
         supabase.from("perch_ai_retrieval_chunks").select("source_id").eq("workspace_id", workspaceId).eq("is_stale", false),
+        supabase.from("perch_ai_retrieval_chunks").select("source_id").eq("workspace_id", workspaceId).eq("is_stale", false).not("embedding", "is", null).not("embedding_model", "is", null).not("embedded_at", "is", null),
         supabase.from("perch_ai_source_memory").select("source_id").eq("workspace_id", workspaceId)
       ]);
       if (chunks.error) throw chunks.error;
       if (retrieval.error) throw retrieval.error;
+      if (embeddedRetrieval.error) throw embeddedRetrieval.error;
       if (memory.error) throw memory.error;
+      const sourceChunkSourceIds = sourceIdsFromRows(chunks.data);
+      const retrievalChunkSourceIds = sourceIdsFromRows(retrieval.data);
+      const embeddedRetrievalSourceIds = sourceIdsFromRows(embeddedRetrieval.data);
       return {
-        sourceChunkIds: new Set((chunks.data ?? []).map((r) => r.source_id)),
-        retrievalChunkIds: new Set((retrieval.data ?? []).map((r) => r.source_id)),
-        memorySourceIds: new Set((memory.data ?? []).map((r) => r.source_id))
+        sourceChunkIds: new Set(sourceChunkSourceIds),
+        retrievalChunkIds: new Set(retrievalChunkSourceIds),
+        embeddedRetrievalChunkIds: new Set(embeddedRetrievalSourceIds),
+        memorySourceIds: new Set((memory.data ?? []).map((r) => r.source_id)),
+        sourceChunkCountsBySourceId: countBySourceId(sourceChunkSourceIds),
+        retrievalChunkCountsBySourceId: countBySourceId(retrievalChunkSourceIds),
+        embeddedRetrievalChunkCountsBySourceId: countBySourceId(embeddedRetrievalSourceIds),
+        totalSourceChunks: sourceChunkSourceIds.length,
+        totalRetrievalChunks: retrievalChunkSourceIds.length,
+        totalEmbeddedRetrievalChunks: embeddedRetrievalSourceIds.length
       };
     },
     async keywordSearchSourcesMetadata(workspaceId, query, limit) {
@@ -117198,6 +117291,16 @@ function createSourcePersistence(supabase) {
 function escapeIlike2(value) {
   return value.replace(/[%_\\]/g, (ch) => `\\${ch}`);
 }
+function sourceIdsFromRows(rows) {
+  return (rows ?? []).map((row) => row.source_id).filter((sourceId) => typeof sourceId === "string" && sourceId.trim().length > 0);
+}
+function countBySourceId(sourceIds) {
+  const counts = /* @__PURE__ */ new Map();
+  for (const sourceId of sourceIds) {
+    counts.set(sourceId, (counts.get(sourceId) ?? 0) + 1);
+  }
+  return counts;
+}
 var SOURCE_LIST_COLUMNS;
 var init_sourcePersistence = __esm({
   "features/perchTerminal/persistence/sourcePersistence.ts"() {
@@ -117875,21 +117978,22 @@ function getSourceRetrievalToolDefinitions() {
     }
   ];
 }
-async function dispatchSourceRetrievalTool(toolName, args, session) {
-  if (!isSupabaseConfigured()) {
-    return sessionError("Supabase is not configured for this environment.");
+async function dispatchSourceRetrievalTool(toolName, args, session, options = {}) {
+  if (!options.supabase && !isSupabaseConfigured()) {
+    return sessionError("Workspace source search is unavailable in this session.");
   }
   if (!session.workspaceId) {
-    return sessionError("workspace_id is required from the authenticated session.");
+    return sessionError("Sign in to a workspace before using workspace source search.");
   }
   let supabase;
   try {
-    supabase = createClient();
+    supabase = options.supabase ?? createClient();
   } catch (err) {
     const message = err instanceof Error ? err.message : String(err);
     return sessionError(message);
   }
   const store = createSourcePersistence(supabase);
+  const retrievalStore = createRetrievalPersistence(supabase);
   const workspaceId = session.workspaceId;
   switch (toolName) {
     case TOOL_NAMES.listSources:
@@ -117905,9 +118009,9 @@ async function dispatchSourceRetrievalTool(toolName, args, session) {
     case TOOL_NAMES.resolveSourceCandidates:
       return resolveSourceCandidatesHandler(store, workspaceId, session, args);
     case TOOL_NAMES.retrieveContext:
-      return retrieveContextHandler(store, workspaceId, session, args);
+      return retrieveContextHandler(store, retrievalStore, workspaceId, session, args);
     case TOOL_NAMES.semanticSearch:
-      return semanticSearchHandler(store, workspaceId, args);
+      return semanticSearchHandler(store, retrievalStore, workspaceId, args);
     case TOOL_NAMES.diagnoseWorkspaceAccess:
       return diagnoseWorkspaceAccessHandler(store, workspaceId, session);
     default:
@@ -118170,7 +118274,7 @@ async function resolveSourceCandidatesHandler(store, workspaceId, session, args)
     schemaVersion: "perch-tool-result-v1"
   };
 }
-async function retrieveContextHandler(store, workspaceId, session, args) {
+async function retrieveContextHandler(store, retrievalStore, workspaceId, session, args) {
   const query = stringArg(args.query)?.trim();
   if (!query) {
     return { ok: false, error: "query is required", toolName: TOOL_NAMES.retrieveContext };
@@ -118196,7 +118300,6 @@ async function retrieveContextHandler(store, workspaceId, session, args) {
   let searchMode = "keyword_only";
   let fallbackUsed = false;
   let semanticError = null;
-  const retrievalStore = createRetrievalPersistence(createClient());
   const embeddedCount = await store.countEmbeddedRetrievalChunks(workspaceId).catch(() => 0);
   retrievalAttempts.push("semantic_first");
   try {
@@ -118394,7 +118497,7 @@ async function retrieveContextHandler(store, workspaceId, session, args) {
     schemaVersion: "perch-tool-result-v1"
   };
 }
-async function semanticSearchHandler(store, workspaceId, args) {
+async function semanticSearchHandler(store, retrievalStore, workspaceId, args) {
   const query = stringArg(args.query)?.trim();
   if (!query) {
     return { ok: false, error: "query is required", toolName: TOOL_NAMES.semanticSearch };
@@ -118403,7 +118506,7 @@ async function semanticSearchHandler(store, workspaceId, args) {
   const sourceIds = Array.isArray(args.sourceIds) ? args.sourceIds.map(String) : void 0;
   const includeStale = args.includeStale === true;
   const embeddedCount = await store.countEmbeddedRetrievalChunks(workspaceId);
-  const result2 = await createRetrievalPersistence(createClient()).matchRetrievalChunks({
+  const result2 = await retrievalStore.matchRetrievalChunks({
     workspaceId,
     query,
     limit,
@@ -118448,7 +118551,7 @@ async function semanticSearchHandler(store, workspaceId, args) {
       return {
         rankSignals: signals,
         reason: result2.searchMode === "hybrid" ? "hybrid_sparse_vector_rrf" : result2.searchMode === "sparse" ? "postgres_full_text_rank" : "semantic_similarity",
-        scoreExplanation: result2.searchMode === "hybrid" ? `hybrid RRF rank${typeof signals.semanticRank === "number" ? `; semantic rank ${signals.semanticRank}` : ""}${typeof signals.sparseRank === "number" ? `; sparse rank ${signals.sparseRank}` : ""}` : result2.searchMode === "sparse" ? "Postgres full-text rank; semantic embeddings unavailable or not needed" : `cosine similarity ${hit.similarity.toFixed(3)} from ${hit.embedding_model ?? "indexed embedding"}`
+        scoreExplanation: result2.searchMode === "hybrid" ? `hybrid rank${typeof signals.semanticRank === "number" ? `; vector rank ${signals.semanticRank}` : ""}${typeof signals.sparseRank === "number" ? `; text rank ${signals.sparseRank}` : ""}` : result2.searchMode === "sparse" ? "Workspace text-search rank; vector retrieval unavailable for this result" : `cosine similarity ${hit.similarity.toFixed(3)} from ${hit.embedding_model ?? "indexed embedding"}`
       };
     })(),
     rank: index + 1,
@@ -118488,7 +118591,7 @@ async function semanticSearchHandler(store, workspaceId, args) {
       semanticAvailable: result2.embeddingProviderConfigured,
       sparseAvailable: result2.sparseProviderConfigured,
       fallbackUsed: result2.fallbackUsed,
-      ranking: result2.searchMode === "hybrid" ? "reciprocal rank fusion over semantic vector and Postgres full-text ranks" : result2.searchMode === "sparse" ? "Postgres full-text rank; vector embeddings not required" : "semantic cosine similarity from perch_ai_match_retrieval_chunks"
+      ranking: result2.searchMode === "hybrid" ? "combined vector and text-search ranks" : result2.searchMode === "sparse" ? "workspace text-search rank; vector retrieval not required" : "vector similarity over indexed source chunks"
     },
     schemaVersion: "perch-tool-result-v1"
   };
@@ -118497,7 +118600,7 @@ async function diagnoseWorkspaceAccessHandler(store, workspaceId, session) {
   const workspace = await store.getWorkspaceRow(workspaceId);
   const blockers = [];
   if (!workspace) {
-    blockers.push("Workspace row not found or not accessible under RLS.");
+    blockers.push("Workspace is not available to this signed-in session.");
   }
   let sourcesCount = 0;
   let sourceChunksCount = 0;
@@ -133500,6 +133603,8 @@ var init_toolPermissionPolicy = __esm({
       TOOL_NAMES.deleteLocalFile,
       TOOL_NAMES.editLocalFile,
       TOOL_NAMES.statPath,
+      TOOL_NAMES.readProjectMemory,
+      TOOL_NAMES.saveToMemory,
       TOOL_NAMES.listLocalSources,
       TOOL_NAMES.readLocalSourceFile,
       TOOL_NAMES.generateAPAuditPacket,
@@ -135197,7 +135302,7 @@ function getDesktopToolDefinitions() {
       type: "function",
       function: {
         name: TOOL_NAMES.readProjectMemory,
-        description: "Read project memory metadata for the active folder scope.",
+        description: "Read local project memory for the active workspace folder when .perch memory is present. Signed-in durable memory is admitted automatically at turn start.",
         parameters: {
           type: "object",
           properties: {},
@@ -135209,7 +135314,7 @@ function getDesktopToolDefinitions() {
       type: "function",
       function: {
         name: TOOL_NAMES.saveToMemory,
-        description: "Save something to a memory file in this project (.perch/memory/). Use when the user asks you to remember something or when you learn a durable fact about the project worth keeping across sessions. Prefer mode='merge' with a sectionHeading so existing memory isn't overwritten.",
+        description: "Save durable memory when the user asks you to remember something or when you learn a stable user/project preference. In signed-in CLI sessions this writes server memory; in a .perch project folder it can also write local project memory. Prefer mode='merge' with a sectionHeading for local project memory.",
         parameters: {
           type: "object",
           properties: {
@@ -135225,6 +135330,15 @@ function getDesktopToolDefinitions() {
             sectionHeading: {
               type: "string",
               description: "Required for merge mode \u2014 markdown heading to upsert under."
+            },
+            scope: {
+              type: "string",
+              enum: ["private_user", "workspace", "project"],
+              description: "Optional durable-memory scope for signed-in server memory. Defaults from fileName."
+            },
+            title: {
+              type: "string",
+              description: "Optional short title for signed-in durable memory."
             }
           },
           required: ["fileName", "mode", "content"],
@@ -135280,7 +135394,7 @@ function getDesktopToolDefinitions() {
       type: "function",
       function: {
         name: TOOL_NAMES.getProjectRules,
-        description: "Read PERCH.md and small .perch/rules/*.md or *.txt project rule files for the active folder scope.",
+        description: "Read PERCH.md and small .perch/rules/*.md or *.txt project rule files for the active workspace folder.",
         parameters: {
           type: "object",
           properties: {},
@@ -135298,7 +135412,7 @@ function getDesktopToolDefinitions() {
           properties: {
             path: {
               type: "string",
-              description: "Absolute directory path to list (e.g. /Users/you/Desktop). Works with no folder scope selected."
+              description: "Absolute directory path to list (e.g. /Users/you/Desktop). Works with no workspace folder selected."
             },
             query: {
               type: "string",
@@ -136486,7 +136600,7 @@ function getNativeToolDefinitions() {
       type: "function",
       function: {
         name: TOOL_NAMES.ctxInspect,
-        description: "Inspect current execution context: desktop connection status, selected folder scope, permission mode, tool counts, and available tools.",
+        description: "Inspect current execution context: desktop connection status, selected workspace folder, permission mode, tool counts, and available tools.",
         parameters: {
           type: "object",
           properties: {},
@@ -136520,7 +136634,7 @@ function getNativeToolDefinitions() {
       type: "function",
       function: {
         name: TOOL_NAMES.configInspect,
-        description: "Inspect the Perch Terminal configuration: local workspace access, optional folder scope, permission mode, and capabilities.",
+        description: "Inspect the Perch Terminal configuration: local workspace access, optional workspace folder, permission mode, and capabilities.",
         parameters: {
           type: "object",
           properties: {},
@@ -199835,6 +199949,7 @@ function containsBrowserDeliveryTask(tasks) {
 var BROWSER_DELIVERY_ROLE_IDS;
 var init_browserDeliveryLock = __esm({
   "features/perchTerminal/agentPlatform/browserDeliveryLock.ts"() {
+    "use strict";
     BROWSER_DELIVERY_ROLE_IDS = /* @__PURE__ */ new Set([
       "doc_writer",
       "email_sender",
@@ -202460,8 +202575,6 @@ async function dispatchAgentHandler(args, ctx) {
     parentToolCallId: ctx.parentToolCallId,
     mcpTools: ctx.mcpTools ?? []
   };
-  const isQuillNormalTurn = ctx.personaId === "quill" && ctx.chatMode !== "coordinator" && !ctx.allowedCallableAgents?.length;
-  void isQuillNormalTurn;
   if (Array.isArray(args.tasks) && args.tasks.length > 0) {
     const tasks = args.tasks.map(
       (t) => ({
@@ -206113,7 +206226,7 @@ async function requireMemoryRootId(ctx, surface) {
   if (!rootId) {
     return {
       ok: false,
-      error: `No selected folder scope is available for ${surface}.`
+      error: `No selected workspace folder is available for ${surface}.`
     };
   }
   return { ok: true, rootId };
@@ -206138,14 +206251,86 @@ var init_readProjectMemory = __esm({
       classification: { native: false },
       handler: async (_args, ctx) => {
         const root2 = await requireMemoryRootId(ctx, "project memory");
-        if (!root2.ok) return root2;
-        return readProjectMemory(root2.rootId);
+        if (!root2.ok) {
+          return ctx.cliServerAppUrl?.trim() && ctx.cliServerAccessToken?.trim() ? {
+            ok: true,
+            backend: "server_memory",
+            message: "Signed-in durable memory is available. Relevant memories are added automatically at the start of each CLI turn."
+          } : {
+            ok: false,
+            errorCode: "memory_unavailable",
+            error: "Project memory is unavailable in this CLI session. Run from a project folder with .perch memory or sign in for durable memory."
+          };
+        }
+        const result2 = await readProjectMemory(root2.rootId);
+        if (!result2.ok && ctx.cliServerAppUrl?.trim() && ctx.cliServerAccessToken?.trim()) {
+          return {
+            ok: true,
+            backend: "server_memory",
+            localProjectMemory: result2,
+            message: "Signed-in durable memory is available. Relevant memories are added automatically at the start of each CLI turn."
+          };
+        }
+        return result2;
       }
     };
   }
 });
 
 // features/perchTerminal/runtime/toolSystem/tools/projectMemory/saveToMemory.ts
+function hasCliServerMemory(ctx) {
+  return Boolean(
+    ctx.cliServerAppUrl?.trim() && ctx.cliServerAccessToken?.trim()
+  );
+}
+async function saveMemoryThroughCliServer(args, ctx) {
+  const appUrl = ctx.cliServerAppUrl?.trim();
+  const accessToken = ctx.cliServerAccessToken?.trim();
+  if (!appUrl || !accessToken) return memoryUnavailable();
+  try {
+    const response = await fetch(`${appUrl.replace(/\/+$/, "")}/api/perch-terminal/cli-memory`, {
+      method: "POST",
+      headers: {
+        Accept: "application/json",
+        "Content-Type": "application/json",
+        Authorization: `Bearer ${accessToken}`
+      },
+      body: JSON.stringify({
+        action: "save",
+        args,
+        threadId: ctx.threadId ?? null,
+        runId: ctx.runId ?? null,
+        workspaceRoot: ctx.activeRootPath ?? ctx.workspaceRoot ?? null
+      }),
+      signal: ctx.signal
+    });
+    const payload = await response.json().catch(() => ({}));
+    if (!response.ok) {
+      return {
+        ok: false,
+        backend: "server_memory",
+        errorCode: typeof payload.errorCode === "string" ? payload.errorCode : "memory_save_unavailable",
+        error: typeof payload.message === "string" ? payload.message : "Durable memory is unavailable right now. Try again shortly or update Perch."
+      };
+    }
+    return payload;
+  } catch (error) {
+    const aborted = error instanceof DOMException && error.name === "AbortError";
+    return {
+      ok: false,
+      backend: "server_memory",
+      errorCode: aborted ? "memory_save_cancelled" : "memory_save_unavailable",
+      error: aborted ? "Memory save was stopped." : "Durable memory is unavailable right now. Try again shortly or update Perch."
+    };
+  }
+}
+function memoryUnavailable() {
+  return {
+    ok: false,
+    errorCode: "memory_unavailable",
+    error: "Memory is unavailable in this CLI session. Sign in with `perch login` or run from a project folder with .perch memory."
+  };
+}
 var saveToMemoryTool;
 var init_saveToMemory = __esm({
   "features/perchTerminal/runtime/toolSystem/tools/projectMemory/saveToMemory.ts"() {
@@ -206157,14 +206342,24 @@ var init_saveToMemory = __esm({
       name: TOOL_NAMES.saveToMemory,
       classification: { native: false },
       handler: async (args, ctx) => {
+        const serverResult = hasCliServerMemory(ctx) ? await saveMemoryThroughCliServer(args, ctx) : null;
+        if (serverResult?.ok) return serverResult;
         const root2 = await requireMemoryRootId(ctx, "project memory");
-        if (!root2.ok) return root2;
-        return writeMemoryFile(root2.rootId, {
+        if (!root2.ok) return serverResult ?? memoryUnavailable();
+        const localResult = await writeMemoryFile(root2.rootId, {
           fileName: String(args.fileName),
           mode: String(args.mode),
           content: String(args.content ?? ""),
           sectionHeading: typeof args.sectionHeading === "string" ? args.sectionHeading : void 0
         });
+        if (localResult.ok === true) {
+          return {
+            ...localResult,
+            backend: "local_project_memory",
+            message: serverResult ? "Saved to local project memory. Signed-in durable memory was unavailable, so this save is scoped to the current project folder." : "Saved to local project memory."
+          };
+        }
+        return serverResult ?? localResult ?? memoryUnavailable();
       }
     };
   }
@@ -207133,7 +207328,7 @@ var init_sendWorkerMessage2 = __esm({
 });
 
 // features/perchTerminal/runtime/toolSystem/tools/workers/spawnWorker.ts
-var QUILL_BLOCKED_DELIVERY_WORKER_IDS, spawnWorkerTool;
+var spawnWorkerTool;
 var init_spawnWorker2 = __esm({
   "features/perchTerminal/runtime/toolSystem/tools/workers/spawnWorker.ts"() {
     "use strict";
@@ -207142,11 +207337,6 @@ var init_spawnWorker2 = __esm({
     init_agentDispatch();
     init_localScope();
     init_toolNames();
-    QUILL_BLOCKED_DELIVERY_WORKER_IDS = /* @__PURE__ */ new Set([
-      "doc_writer",
-      "email_sender",
-      "calendar_scheduler"
-    ]);
     spawnWorkerTool = {
       name: TOOL_NAMES.spawnWorker,
       classification: { native: false },
@@ -207164,8 +207354,6 @@ var init_spawnWorker2 = __esm({
             errorCode: "worker_event_sink_missing"
           };
         }
-        if (ctx.personaId === "quill" && ctx.chatMode !== "coordinator" && !ctx.allowedCallableAgents?.length && QUILL_BLOCKED_DELIVERY_WORKER_IDS.has(workerId)) {
-        }
         const enrichedContext = await threadPriorSpecialistContext({
           threadId: ctx.threadId,
           roleId: workerId,
@@ -213219,7 +213407,7 @@ var init_localSources = __esm({
           return {
             ok: true,
             sources: [],
-            warning: "No folder scope and no path given. To read or search a file, call readLocalFile / glob / grep / visionInspect with its absolute path (e.g. /Users/you/Desktop/file.png) \u2014 no folder selection is needed."
+            warning: "Local workspace access is unavailable in this chat. Open Perch Desktop or attach a workspace folder, then try again."
           };
         }
         const maxResults = sanitizeListLocalSourcesMaxResults(args.maxResults);
@@ -216703,6 +216891,8 @@ async function executeToolCall(call, opts) {
         workspaceId: opts.workspaceId,
         threadId: opts.threadId,
         supabase: opts.supabase,
+        cliServerAppUrl: opts.cliServerAppUrl,
+        cliServerAccessToken: opts.cliServerAccessToken,
         marketDeskProxyAppUrl: opts.marketDeskProxyAppUrl,
         marketDeskProxyAccessToken: opts.marketDeskProxyAccessToken,
         chatMode: opts.chatMode ?? null,
@@ -216762,7 +216952,7 @@ async function executeToolCall(call, opts) {
       const result2 = {
         ok: false,
         errorCode: "supabase_session_required",
-        error: isSupabaseConfigured() ? "Source retrieval tools require an authenticated workspace session." : "Supabase is not configured for source retrieval tools.",
+        error: isSupabaseConfigured() ? "Source retrieval tools require an authenticated workspace session." : "Workspace source search is unavailable in this session.",
         schemaVersion: "perch-tool-result-v1",
         toolName: call.name
       };
@@ -216843,6 +217033,8 @@ async function executeToolCall(call, opts) {
         workspaceRoot: opts.workspaceRoot,
         threadId: opts.threadId,
         runId: opts.runId,
+        cliServerAppUrl: opts.cliServerAppUrl,
+        cliServerAccessToken: opts.cliServerAccessToken,
         marketDeskProxyAppUrl: opts.marketDeskProxyAppUrl,
         marketDeskProxyAccessToken: opts.marketDeskProxyAccessToken,
         onEvent: runtime.onEvent,
@@ -219043,6 +219235,8 @@ async function runModelToolLoop(input) {
           selectedSourceId: input.selectedSourceId,
           supabaseConfigured: input.supabaseConfigured,
           supabase: input.supabase,
+          cliServerAppUrl: input.cliServerAppUrl,
+          cliServerAccessToken: input.cliServerAccessToken,
           marketDeskProxyAppUrl: input.marketDeskProxyAppUrl,
           marketDeskProxyAccessToken: input.marketDeskProxyAccessToken,
           runId: input.runId,
@@ -219459,6 +219653,8 @@ async function executeInitialToolCall(input) {
     selectedSourceId: input.input.selectedSourceId,
     supabaseConfigured: input.input.supabaseConfigured,
     supabase: input.input.supabase,
+    cliServerAppUrl: input.input.cliServerAppUrl,
+    cliServerAccessToken: input.input.cliServerAccessToken,
     marketDeskProxyAppUrl: input.input.marketDeskProxyAppUrl,
     marketDeskProxyAccessToken: input.input.marketDeskProxyAccessToken,
     runId: input.input.runId,
@@ -220320,52 +220516,15 @@ var init_toolLoop = __esm({
   }
 });
 
-// features/perchTerminal/runtime/personas/quillToolPolicy.ts
-function isQuillBlockedToolName(toolName) {
-  return QUILL_BLOCKED_TOOL_NAMES.has(toolName);
-}
-function filterToolsForQuill(toolDefinitions) {
-  return toolDefinitions.filter((tool) => !isQuillBlockedToolName(tool.function.name));
-}
-var QUILL_BLOCKED_TOOL_NAMES;
-var init_quillToolPolicy = __esm({
-  "features/perchTerminal/runtime/personas/quillToolPolicy.ts"() {
-    "use strict";
-    init_toolNames();
-    QUILL_BLOCKED_TOOL_NAMES = /* @__PURE__ */ new Set([
-      TOOL_NAMES.runSuite,
-      TOOL_NAMES.runManagedPlaybook,
-      TOOL_NAMES.listSuiteCatalog,
-      TOOL_NAMES.proposeSuitePlan,
-      TOOL_NAMES.executeSuitePlan,
-      TOOL_NAMES.proposeWork,
-      TOOL_NAMES.executeWork,
-      TOOL_NAMES.generateAPAuditPacket,
-      TOOL_NAMES.safeBrowserAction,
-      // Deprecated non-verified shortcuts — superseded by the verified surface tools.
-      TOOL_NAMES.gmailSendEmail,
-      TOOL_NAMES.gmailSaveDraft,
-      TOOL_NAMES.googleDocsCreate,
-      TOOL_NAMES.googleDocsAppend,
-      TOOL_NAMES.googleCalendarCreateEvent,
-      TOOL_NAMES.googleSheetsCreate,
-      TOOL_NAMES.googleSheetsAppendRows
-    ]);
-  }
-});
-
-// features/perchTerminal/runtime/personas/saffronToolPolicy.ts
+// features/perchTerminal/runtime/personas/sharedToolPolicy.ts
 function filterSuiteRelayTools(toolDefinitions, opts = {}) {
   if (opts.allowSuiteRelay) return toolDefinitions;
   return toolDefinitions.filter(
     (tool) => !SUITE_RELAY_TOOL_NAMES.has(tool.function.name)
   );
 }
-function filterToolsForSaffron(toolDefinitions, opts = {}) {
-  return filterSuiteRelayTools(toolDefinitions, opts);
-}
-var init_saffronToolPolicy = __esm({
-  "features/perchTerminal/runtime/personas/saffronToolPolicy.ts"() {
+var init_sharedToolPolicy = __esm({
+  "features/perchTerminal/runtime/personas/sharedToolPolicy.ts"() {
     "use strict";
     init_suiteRelayKillSwitch();
   }
@@ -220483,10 +220642,7 @@ async function runLiveAgentsLoop(input) {
       PLAN_MODE_ALLOWED_TOOL_NAMES
     ) : effectiveChatMode === "ask" ? [] : getReadOnlyToolDefinitions(toolOpts);
     const suiteRelayEnabled = isSuiteRelayEnabled();
-    const personaFilteredTools = turn.personaId === "quill" ? filterToolsForQuill(baseAgentsTools) : turn.personaId === "saffron" ? filterToolsForSaffron(baseAgentsTools, {
-      allowSuiteRelay: suiteRelayEnabled
-    }) : baseAgentsTools;
-    const suiteRelayFilteredTools = filterSuiteRelayTools(personaFilteredTools, {
+    const suiteRelayFilteredTools = filterSuiteRelayTools(baseAgentsTools, {
       allowSuiteRelay: suiteRelayEnabled
     });
     const deliveryPolicyDeliveryOperatorOnly = turn.deliveryOperatorOnly === true;
@@ -220520,7 +220676,7 @@ async function runLiveAgentsLoop(input) {
       const onEv = onEvent ?? deps.onEvent;
       onEv({
         type: "activity_delta",
-        text: "Workspace preflight: no folder scope selected \u2014 continuing with Desktop tools.",
+        text: "Workspace preflight: no workspace folder selected; continuing with Desktop tools.",
         ts: (/* @__PURE__ */ new Date()).toISOString()
       });
     }
@@ -220559,6 +220715,8 @@ async function runLiveAgentsLoop(input) {
       untrustedContextPresent: context.untrustedContextPresent,
       supabaseConfigured: turn.supabaseConfigured,
       supabase: turn.supabase,
+      cliServerAppUrl: turn.cliServerAppUrl ?? null,
+      cliServerAccessToken: turn.cliServerAccessToken ?? null,
       marketDeskProxyAppUrl: turn.marketDeskProxyAppUrl ?? null,
       marketDeskProxyAccessToken: turn.marketDeskProxyAccessToken ?? null,
       onEvent: onEvent ?? deps.onEvent,
@@ -220937,8 +221095,7 @@ var init_liveAgentsLoop = __esm({
     init_toolNames();
     init_planModeStateMachine();
     init_toolPermissionPolicy();
-    init_quillToolPolicy();
-    init_saffronToolPolicy();
+    init_sharedToolPolicy();
     init_deliveryToolPolicy();
     init_threadSession();
     init_sandboxProvenance();
@@ -221925,7 +222082,12 @@ async function ensureLocalSourceIndexed(input) {
     contentHash: null,
     chunksBuilt: 0,
     chunksUpserted: 0,
-    embeddingConfigured: getEmbeddingProviderStatus().configured,
+    sourceChunksUpserted: 0,
+    retrievalChunksBuilt: 0,
+    retrievalChunksUpserted: 0,
+    embeddedChunksUpserted: 0,
+    vectorReady: false,
+    embeddingConfigured: isBrowserRuntime() ? true : getEmbeddingProviderStatus().configured,
     errors: [],
     warnings: []
   };
@@ -221958,7 +222120,12 @@ async function ensureLocalSourceIndexed(input) {
         contentHash,
         chunksBuilt: 0,
         chunksUpserted: 0,
-        embeddingConfigured: getEmbeddingProviderStatus().configured,
+        sourceChunksUpserted: 0,
+        retrievalChunksBuilt: 0,
+        retrievalChunksUpserted: 0,
+        embeddedChunksUpserted: 0,
+        vectorReady: true,
+        embeddingConfigured: isBrowserRuntime() ? true : getEmbeddingProviderStatus().configured,
         errors: [],
         warnings: []
       };
@@ -222056,12 +222223,15 @@ async function ensureLocalSourceIndexed(input) {
       threadId: input.threadId ?? null,
       chunks: sourceTextChunks
     });
-    const embeddingStatus = getEmbeddingProviderStatus();
     let chunksBuilt = textChunks.length;
     let chunksUpserted = 0;
     const warnings = [...extracted.truncated ? ["Source text was truncated before indexing."] : []];
-    if (!embeddingStatus.configured) {
-      warnings.push(embeddingStatus.message);
+    let embeddingProvider;
+    try {
+      embeddingProvider = input.embeddingProvider ?? createDefaultLocalSourceEmbeddingProvider();
+    } catch (error) {
+      const message = error instanceof Error ? error.message : String(error);
+      warnings.push(message);
       return {
         ok: true,
         status: "indexed",
@@ -222071,38 +222241,69 @@ async function ensureLocalSourceIndexed(input) {
         contentHash: indexedContentHash,
         chunksBuilt,
         chunksUpserted: 0,
+        sourceChunksUpserted: sourceTextChunks.length,
+        retrievalChunksBuilt: chunksBuilt,
+        retrievalChunksUpserted: 0,
+        embeddedChunksUpserted: 0,
+        vectorReady: false,
+        embeddingConfigured: false,
+        errors: [],
+        warnings
+      };
+    }
+    let indexResult;
+    try {
+      const indexer = createRetrievalIndexer(input.supabase, { embeddingProvider });
+      indexResult = pdfPages ? await indexer.indexLocalFilePages({
+        workspaceId: input.workspaceId,
+        sourceId: source.id,
+        fileName: source.file_name,
+        fileType: extracted.fileType,
+        mimeType: source.mime_type,
+        provenanceType: "desktop_local",
+        contentHash: indexedContentHash,
+        threadId: input.threadId ?? null,
+        pages: pdfPages,
+        blocks: pdfBlocks,
+        tables: pdfTables,
+        facts: factPageEntries.length ? factPageEntries : void 0
+      }) : await indexer.indexLocalFileText({
+        workspaceId: input.workspaceId,
+        sourceId: source.id,
+        fileName: source.file_name,
+        fileType: extracted.fileType,
+        mimeType: source.mime_type,
+        provenanceType: "desktop_local",
+        contentHash: indexedContentHash,
+        threadId: input.threadId ?? null,
+        text: extracted.text
+      });
+    } catch (error) {
+      if (!isEmbeddingProviderNotConfigured(error)) throw error;
+      warnings.push(error.message);
+      return {
+        ok: true,
+        status: "indexed",
+        localSourceId: input.localSourceId,
+        supabaseSourceId: source.id,
+        retrievalSourceId: null,
+        contentHash: indexedContentHash,
+        chunksBuilt,
+        chunksUpserted: 0,
+        sourceChunksUpserted: sourceTextChunks.length,
+        retrievalChunksBuilt: chunksBuilt,
+        retrievalChunksUpserted: 0,
+        embeddedChunksUpserted: 0,
+        vectorReady: false,
         embeddingConfigured: false,
         errors: [],
         warnings
       };
     }
-    const indexer = createRetrievalIndexer(input.supabase);
-    const indexResult = pdfPages ? await indexer.indexLocalFilePages({
-      workspaceId: input.workspaceId,
-      sourceId: source.id,
-      fileName: source.file_name,
-      fileType: extracted.fileType,
-      mimeType: source.mime_type,
-      provenanceType: "desktop_local",
-      contentHash: indexedContentHash,
-      threadId: input.threadId ?? null,
-      pages: pdfPages,
-      blocks: pdfBlocks,
-      tables: pdfTables,
-      facts: factPageEntries.length ? factPageEntries : void 0
-    }) : await indexer.indexLocalFileText({
-      workspaceId: input.workspaceId,
-      sourceId: source.id,
-      fileName: source.file_name,
-      fileType: extracted.fileType,
-      mimeType: source.mime_type,
-      provenanceType: "desktop_local",
-      contentHash: indexedContentHash,
-      threadId: input.threadId ?? null,
-      text: extracted.text
-    });
     chunksBuilt = indexResult.chunksBuilt;
     chunksUpserted = indexResult.chunksUpserted;
+    const embeddedChunksUpserted = indexResult.chunksEmbedded;
+    const vectorReady = embeddedChunksUpserted > 0;
     if (!indexResult.ok) {
       return {
         ok: false,
@@ -222113,6 +222314,11 @@ async function ensureLocalSourceIndexed(input) {
         contentHash: indexedContentHash,
         chunksBuilt,
         chunksUpserted,
+        sourceChunksUpserted: sourceTextChunks.length,
+        retrievalChunksBuilt: indexResult.chunksBuilt,
+        retrievalChunksUpserted: indexResult.chunksUpserted,
+        embeddedChunksUpserted,
+        vectorReady,
         embeddingConfigured: true,
         errors: indexResult.errors,
         warnings: [...warnings, ...indexResult.warnings]
@@ -222123,10 +222329,15 @@ async function ensureLocalSourceIndexed(input) {
       status: "indexed",
       localSourceId: input.localSourceId,
       supabaseSourceId: source.id,
-      retrievalSourceId: source.id,
+      retrievalSourceId: vectorReady ? source.id : null,
       contentHash: indexedContentHash,
       chunksBuilt,
       chunksUpserted,
+      sourceChunksUpserted: sourceTextChunks.length,
+      retrievalChunksBuilt: indexResult.chunksBuilt,
+      retrievalChunksUpserted: indexResult.chunksUpserted,
+      embeddedChunksUpserted,
+      vectorReady,
       embeddingConfigured: true,
       errors: [],
       warnings
@@ -222142,6 +222353,12 @@ async function ensureLocalSourceIndexed(input) {
     };
   }
 }
+function createDefaultLocalSourceEmbeddingProvider() {
+  return isBrowserRuntime() ? createBrowserEmbeddingProvider() : createEmbeddingProviderFromEnv();
+}
+function isBrowserRuntime() {
+  return typeof window !== "undefined";
+}
 async function resolveRetrievalSourceIdForTurn(input) {
   const selected = input.selectedSourceId?.trim() ?? null;
   if (!selected) return { retrievalSourceId: null, indexOutcome: null };
@@ -222417,7 +222634,11 @@ async function loadFolderIndexSummary(input) {
   }
   const files = input.localSources.filter((entry) => entry.rootId === input.rootId && isAutoIndexableLocalSource(entry)).map((entry) => {
     const row = rowByLocalId.get(entry.localSourceId) ?? null;
-    const retrievalReady = row ? indexSets.retrievalChunkIds.has(row.id) : false;
+    const sourceChunkCount2 = row ? indexSets.sourceChunkCountsBySourceId.get(row.id) ?? 0 : 0;
+    const retrievalChunkCount2 = row ? indexSets.retrievalChunkCountsBySourceId.get(row.id) ?? 0 : 0;
+    const embeddedChunkCount2 = row ? indexSets.embeddedRetrievalChunkCountsBySourceId.get(row.id) ?? 0 : 0;
+    const retrievalReady = retrievalChunkCount2 > 0;
+    const vectorReady = embeddedChunkCount2 > 0;
     const stale = row ? Date.parse(entry.modifiedAt) > Date.parse(row.updated_at) : true;
     return {
       localSourceId: entry.localSourceId,
@@ -222426,19 +222647,30 @@ async function loadFolderIndexSummary(input) {
       mimeType: entry.mimeType,
       modifiedAt: entry.modifiedAt,
       sizeBytes: entry.sizeBytes,
-      status: row ? retrievalReady ? "indexed" : "pending" : "pending",
+      status: row ? sourceChunkCount2 > 0 || retrievalReady ? "indexed" : "pending" : "pending",
       supabaseSourceId: row?.id ?? null,
       retrievalReady,
+      vectorReady,
+      sourceChunkCount: sourceChunkCount2,
+      retrievalChunkCount: retrievalChunkCount2,
+      embeddedChunkCount: embeddedChunkCount2,
       contentHash: row?.content_hash ?? null,
       message: stale && row ? "Changed since last indexing pass." : void 0
     };
   });
   const staleFiles = files.filter((file) => file.message?.includes("Changed since last indexing pass")).length;
   const retrievalReadySourceIds = files.filter((file) => file.retrievalReady && file.supabaseSourceId).map((file) => file.supabaseSourceId);
+  const vectorReadySourceIds = files.filter((file) => file.vectorReady && file.supabaseSourceId).map((file) => file.supabaseSourceId);
   const indexedFiles = files.filter((file) => file.status === "indexed").length;
+  const sourceChunkCount = sumFiles(files, "sourceChunkCount");
+  const retrievalChunkCount = sumFiles(files, "retrievalChunkCount");
+  const embeddedChunkCount = sumFiles(files, "embeddedChunkCount");
   const lastIndexedAt = rows[0]?.updated_at ?? null;
   const diagnostics = [
+    rows.length > 0 ? `${rows.length} registered source(s).` : null,
+    sourceChunkCount > 0 ? `${sourceChunkCount} text/source chunk(s) available for keyword search.` : null,
     retrievalReadySourceIds.length > 0 ? `${retrievalReadySourceIds.length} file(s) have fresh retrieval chunks.` : "No retrieval-ready files yet for this folder.",
+    vectorReadySourceIds.length > 0 ? `${vectorReadySourceIds.length} file(s) have embedded retrieval chunks for vector search.` : sourceChunkCount > 0 ? "Keyword/source search is available; semantic/vector retrieval is pending." : null,
     staleFiles > 0 ? `${staleFiles} file(s) changed since the last index update.` : null
   ].filter(Boolean);
   return {
@@ -222448,8 +222680,14 @@ async function loadFolderIndexSummary(input) {
     indexedFiles,
     skippedFiles: 0,
     failedFiles: 0,
+    registeredSources: rows.length,
+    sourceChunkCount,
+    sourceChunkFiles: files.filter((file) => file.sourceChunkCount > 0).length,
+    retrievalChunkCount,
     staleFiles,
     retrievalReadyFiles: retrievalReadySourceIds.length,
+    embeddedChunkCount,
+    vectorReadyFiles: vectorReadySourceIds.length,
     filesNeedingOcr: files.filter((file) => needsOcrHint(file)).length,
     lastIndexedAt,
     status: files.length === 0 ? "idle" : staleFiles > 0 || indexedFiles < files.length ? "partial" : "ready",
@@ -222457,6 +222695,7 @@ async function loadFolderIndexSummary(input) {
     localOnlyEmbeddingsEnabled: false,
     remoteIndexArtifacts: [...DEFAULT_REMOTE_INDEX_ARTIFACTS],
     retrievalReadySourceIds,
+    vectorReadySourceIds,
     diagnostics,
     manifestPath: DEFAULT_MANIFEST_PATH,
     files
@@ -222476,6 +222715,9 @@ function needsOcrHint(file) {
   const message = file.message?.toLowerCase() ?? "";
   return message.includes("ocr") || message.includes("scanned") || message.includes("no readable text");
 }
+function sumFiles(files, field) {
+  return files.reduce((total, file) => total + file[field], 0);
+}
 var DEFAULT_MANIFEST_PATH, AUTO_INDEX_EXCLUDED_PATH_PREFIXES, AUTO_INDEX_EXCLUDED_EXACT_PATHS, DEFAULT_STORAGE_MODE, DEFAULT_REMOTE_INDEX_ARTIFACTS;
 var init_folderIndexing = __esm({
   "features/perchTerminal/runtime/folderIndexing.ts"() {
@@ -224731,6 +224973,54 @@ var init_objectiveClassifier = __esm({
 });
 
 // features/perchTerminal/runtime/turn/runOperatorTurn.ts
+function buildTurnMemoryRetriever(input) {
+  if (input.supabase) {
+    return async ({ userId, workspaceId, limitPerScope, query }) => createPermanentMemoryPersistence(
+      input.supabase
+    ).retrievePermanentMemoriesForTurn({
+      userId,
+      workspaceId,
+      limitPerScope,
+      query
+    });
+  }
+  const appUrl = input.cliServerAppUrl?.trim();
+  const accessToken = input.cliServerAccessToken?.trim();
+  if (!appUrl || !accessToken) return null;
+  return createCliServerMemoryRetriever({
+    appUrl,
+    accessToken,
+    threadId: input.threadId
+  });
+}
+function createCliServerMemoryRetriever(input) {
+  return async ({ limitPerScope, query }) => {
+    const response = await fetch(`${input.appUrl.replace(/\/+$/, "")}/api/perch-terminal/cli-context`, {
+      method: "POST",
+      headers: {
+        Accept: "application/json",
+        "Content-Type": "application/json",
+        Authorization: `Bearer ${input.accessToken}`
+      },
+      body: JSON.stringify({
+        query,
+        threadId: input.threadId,
+        limitPerScope
+      })
+    });
+    const payload = await response.json().catch(() => ({}));
+    if (!response.ok || payload.ok !== true) {
+      throw new Error("Durable memory is unavailable right now.");
+    }
+    const memories = Array.isArray(payload.permanentMemories) ? payload.permanentMemories.filter(isPermanentMemoryLike) : [];
+    return memories;
+  };
+}
+function isPermanentMemoryLike(value) {
+  if (!value || typeof value !== "object") return false;
+  const memory = value;
+  return typeof memory.id === "string" && typeof memory.user_id === "string" && (memory.workspace_id === null || typeof memory.workspace_id === "string") && typeof memory.scope === "string" && typeof memory.type === "string" && typeof memory.title === "string" && typeof memory.body === "string" && typeof memory.source_kind === "string" && typeof memory.confidence === "number" && typeof memory.created_at === "string" && typeof memory.updated_at === "string" && Array.isArray(memory.tags) && Boolean(memory.metadata && typeof memory.metadata === "object");
+}
 async function runOperatorTurn(input, deps) {
   const runId = input.clientRunId?.trim() || makeRunId();
   const startMs = Date.now();
@@ -224796,21 +225086,15 @@ async function runOperatorTurn(input, deps) {
     });
   }
   try {
+    const memoryRetriever = buildTurnMemoryRetriever(input);
     const memoryContext = await buildMemoryContext({
       query: input.trimmedInput,
-      userId: input.userId,
+      userId: input.userId ?? (memoryRetriever && input.cliServerAccessToken?.trim() ? "cli_authenticated_user" : null),
       workspaceId: input.workspaceId,
       threadId: input.threadId,
       permanentMemories: input.permanentMemories,
       userMemories: input.userMemories,
-      retriever: input.supabase ? async ({ userId, workspaceId, limitPerScope, query }) => createPermanentMemoryPersistence(
-        input.supabase
-      ).retrievePermanentMemoriesForTurn({
-        userId,
-        workspaceId,
-        limitPerScope,
-        query
-      }) : null
+      retriever: memoryRetriever
     });
     const earlySession = input.threadId ? await loadThreadSession(input.threadId, { supabase: input.supabase ?? null }) : null;
     const persona = getPersona(input.personaId ?? earlySession?.personaId);
@@ -224949,10 +225233,7 @@ async function runOperatorTurn(input, deps) {
       getEnabledToolDefinitions(toolOpts),
       PLAN_MODE_ALLOWED_TOOL_NAMES
     ) : effectiveChatMode === "agents" ? getExecutableToolDefinitions(toolOpts) : effectiveChatMode === "ask" ? [] : getReadOnlyToolDefinitions(toolOpts);
-    const personaFilteredTools = enrichedInput.personaId === "quill" ? filterToolsForQuill(baseTurnToolDefinitions) : enrichedInput.personaId === "saffron" ? filterToolsForSaffron(baseTurnToolDefinitions, {
-      allowSuiteRelay: suiteRelayEnabled
-    }) : baseTurnToolDefinitions;
-    const suiteRelayFilteredTools = filterSuiteRelayTools(personaFilteredTools, {
+    const suiteRelayFilteredTools = filterSuiteRelayTools(baseTurnToolDefinitions, {
       allowSuiteRelay: suiteRelayEnabled
     });
     const turnToolDefinitions = filterMainPersonaDeliveryTools(suiteRelayFilteredTools, {
@@ -225098,8 +225379,15 @@ ${planStateLines}`
       if (perchMdRow?.status === "not_found") {
         extendedWarnings.push("No PERCH.md \u2014 add an operator playbook to .perch/PERCH.md to customise behaviour.");
       }
-      if (!enrichedInput.supabase) {
-        extendedWarnings.push("Memory retrieval skipped \u2014 no Supabase session available.");
+      const hostedMemoryAvailable = Boolean(
+        enrichedInput.cliServerAppUrl?.trim() && enrichedInput.cliServerAccessToken?.trim()
+      );
+      const memoryDiagnostics = enrichedInput.memoryContext?.diagnostics ?? null;
+      if (memoryDiagnostics?.warnings.length) {
+        extendedWarnings.push(...memoryDiagnostics.warnings);
+      }
+      if (!enrichedInput.supabase && !hostedMemoryAvailable && memoryDiagnostics?.retrieval.attempted !== true) {
+        extendedWarnings.push("Memory retrieval skipped \u2014 sign in to use durable memory.");
       }
       const contextJob = resolveJobContextTokens({
         threadContextTokens: threadContextAccounting.threadContextTokens,
@@ -225633,8 +225921,7 @@ var init_runOperatorTurn = __esm({
     init_folderIndexing();
     init_approvalResume();
     init_personaRegistry();
-    init_quillToolPolicy();
-    init_saffronToolPolicy();
+    init_sharedToolPolicy();
     init_deliveryToolPolicy();
     init_voiceFilters();
     init_progressEventBridge();
@@ -226511,6 +226798,21 @@ function installCliNodeLocalBridge(input) {
     }
   };
 }
+function readCliProjectMemoryState(workspaceRoot) {
+  const root2 = path11.resolve(expandHome4(workspaceRoot));
+  if (!isCliProjectMemoryAvailable(root2)) {
+    return {
+      available: false,
+      meta: null,
+      reason: "Local project memory is unavailable in this folder."
+    };
+  }
+  return {
+    available: true,
+    meta: enrichCliProjectMeta(root2, loadCliStoredMeta(root2)),
+    reason: "Local project memory is available."
+  };
+}
 function createCliNodeLocalBridge(input) {
   const workspaceRoot = path11.resolve(input.workspaceRoot);
   const now13 = () => (/* @__PURE__ */ new Date()).toISOString();
@@ -226793,10 +227095,20 @@ function createCliNodeLocalBridge(input) {
         encoding: "base64"
       };
     },
-    getProjectRules: async () => [],
-    readProjectMemory: async () => ({ ok: false, error: "Project memory is not available in this CLI package yet." }),
-    writeProjectMemory: async () => ({ ok: false, error: "Project memory writes are not available in this CLI package yet." }),
-    writeMemoryFile: async () => ({ ok: false, error: "Project memory files are not available in this CLI package yet." }),
+    getProjectRules: async () => {
+      const state = readCliProjectMemoryState(workspaceRoot);
+      return state.meta ? [{
+        rootId: CLI_ROOT_ID,
+        perchMd: state.meta.perchMd?.content ?? null,
+        rules: state.meta.rules.map((rule) => ({
+          fileName: rule.fileName,
+          content: rule.content
+        }))
+      }] : [];
+    },
+    readProjectMemory: async () => readCliProjectMemoryBridge(workspaceRoot),
+    writeProjectMemory: async (request) => writeCliProjectMemory(workspaceRoot, request.meta),
+    writeMemoryFile: async (request) => writeCliMemoryFile(workspaceRoot, request),
     writeRule: async () => ({ ok: false, error: "Project rule writes are not available in this CLI package yet." }),
     writePerchMd: async () => ({ ok: false, error: "PERCH.md writes are not available in this CLI package yet." }),
     readGlobalPerchMd: async () => ({ ok: false, error: "Global PERCH.md is not available in this CLI package yet." }),
@@ -227075,6 +227387,292 @@ function guessCliFileType(filePath) {
   if ([".doc", ".docx", ".txt", ".md", ".rtf"].includes(ext)) return "document";
   return "unknown";
 }
+async function readCliProjectMemoryBridge(workspaceRoot) {
+  const state = readCliProjectMemoryState(workspaceRoot);
+  if (!state.available || !state.meta) {
+    return {
+      ok: false,
+      error: "Local project memory is unavailable in this folder. Run from a project folder with .perch memory or sign in for durable memory."
+    };
+  }
+  return { ok: true, meta: state.meta };
+}
+async function writeCliProjectMemory(workspaceRoot, patch) {
+  const root2 = path11.resolve(expandHome4(workspaceRoot));
+  if (!isCliProjectMemoryAvailable(root2)) {
+    return {
+      ok: false,
+      error: "Local project memory is unavailable in this folder. Run from a project folder with .perch memory or sign in for durable memory."
+    };
+  }
+  const current = loadCliStoredMeta(root2);
+  const next = {
+    ...current,
+    projectName: patch.projectName !== void 0 ? patch.projectName : current.projectName,
+    notes: patch.notes !== void 0 ? patch.notes : current.notes,
+    preferredRoot: patch.preferredRoot !== void 0 ? patch.preferredRoot : current.preferredRoot,
+    lastOpenedThreadId: patch.lastOpenedThreadId !== void 0 ? patch.lastOpenedThreadId : current.lastOpenedThreadId,
+    memorySummary: patch.memorySummary !== void 0 ? patch.memorySummary : current.memorySummary
+  };
+  await fsp.mkdir(path11.join(root2, PERCH_DIR), { recursive: true });
+  await atomicWriteCliUtf8(getCliProjectFilePath(root2), JSON.stringify(next, null, 2));
+  return { ok: true, meta: enrichCliProjectMeta(root2, next) };
+}
+async function writeCliMemoryFile(workspaceRoot, request) {
+  const root2 = path11.resolve(expandHome4(workspaceRoot));
+  if (!isCliProjectMemoryAvailable(root2)) {
+    return {
+      ok: false,
+      error: "Local project memory is unavailable in this folder. Run from a project folder with .perch memory or sign in for durable memory."
+    };
+  }
+  if (request.rootId && request.rootId !== CLI_ROOT_ID) {
+    return { ok: false, error: "Local project memory is unavailable for that workspace root." };
+  }
+  const fileName = normalizeCliMemoryFileName(request.fileName);
+  if (!fileName) return { ok: false, error: "Invalid memory file name." };
+  const relativePath = path11.join(PERCH_DIR, MEMORY_DIR, fileName);
+  const fullPath = path11.join(root2, relativePath);
+  const existing = await fsp.readFile(fullPath, "utf8").catch(() => "");
+  let nextContent;
+  try {
+    nextContent = applyCliMemoryWrite(existing, request);
+  } catch (error) {
+    return {
+      ok: false,
+      error: error instanceof Error ? error.message : "Failed to merge memory content."
+    };
+  }
+  const capError = assertCliMemoryWithinCap(nextContent);
+  if (capError) return { ok: false, error: capError };
+  await fsp.mkdir(path11.dirname(fullPath), { recursive: true });
+  await atomicWriteCliUtf8(fullPath, nextContent);
+  const updatedFile = readCliTextMemoryFile(root2, relativePath, MAX_MEMORY_BYTES);
+  return {
+    ok: true,
+    meta: enrichCliProjectMeta(root2, loadCliStoredMeta(root2)),
+    updatedFile
+  };
+}
+function defaultCliProjectMeta() {
+  return {
+    projectName: null,
+    notes: null,
+    preferredRoot: null,
+    lastOpenedThreadId: null,
+    memorySummary: null,
+    perchMd: null,
+    rules: [],
+    memoryFiles: [],
+    missingMemoryFiles: [],
+    projectMemoryEmpty: true,
+    evidenceOnly: true
+  };
+}
+function isCliProjectMemoryAvailable(root2) {
+  try {
+    return fs10.statSync(path11.join(root2, PERCH_DIR)).isDirectory();
+  } catch {
+    return false;
+  }
+}
+function getCliProjectFilePath(root2) {
+  return path11.join(root2, PERCH_DIR, PROJECT_FILE);
+}
+function loadCliStoredMeta(root2) {
+  try {
+    const raw = fs10.readFileSync(getCliProjectFilePath(root2), "utf8");
+    return { ...defaultCliProjectMeta(), ...JSON.parse(raw) };
+  } catch {
+    return defaultCliProjectMeta();
+  }
+}
+function enrichCliProjectMeta(root2, base) {
+  const perchMd = readCliFirstExisting(root2, [
+    path11.join(PERCH_DIR, PERCH_INDEX_FILE),
+    PERCH_INDEX_FILE
+  ], MAX_TEXT_BYTES);
+  const rules = readCliRules(root2);
+  const { memoryFiles, missingMemoryFiles } = readCliMemoryFiles(root2);
+  const projectMemoryEmpty = !perchMd?.found && rules.length === 0 && memoryFiles.filter((file) => file.found).length === 0;
+  return {
+    ...base,
+    perchMd,
+    rules,
+    memoryFiles,
+    missingMemoryFiles,
+    projectMemoryEmpty,
+    evidenceOnly: projectMemoryEmpty
+  };
+}
+function normalizeCliMemoryFileName(fileName) {
+  if (typeof fileName !== "string") return null;
+  const trimmed = fileName.trim();
+  if (trimmed.includes("..") || trimmed.includes("/") || trimmed.includes("\\")) return null;
+  return EXPECTED_MEMORY_FILES.includes(trimmed) ? trimmed : null;
+}
+function applyCliMemoryWrite(existing, request) {
+  const incoming = request.content ?? "";
+  if (request.mode === "replace") return incoming;
+  if (request.mode === "append") {
+    if (request.sectionHeading?.trim()) {
+      return upsertCliMarkdownSection(existing, request.sectionHeading, incoming, "append");
+    }
+    if (!existing.trim()) return incoming;
+    return `${existing}${existing.endsWith("\n") ? "" : "\n"}${incoming}`;
+  }
+  if (!request.sectionHeading?.trim()) {
+    throw new Error('mode "merge" requires sectionHeading.');
+  }
+  return upsertCliMarkdownSection(existing, request.sectionHeading, incoming, "replace");
+}
+function upsertCliMarkdownSection(existing, sectionHeading, body, mode) {
+  const heading = sectionHeading.trim().startsWith("#") ? sectionHeading.trim() : `## ${sectionHeading.trim()}`;
+  const targetKey = normalizeCliHeadingKey(heading);
+  const sections = parseCliMarkdownSections(existing);
+  const index = sections.findIndex((section) => normalizeCliHeadingKey(section.heading) === targetKey);
+  if (index >= 0) {
+    const prior = sections[index];
+    sections[index] = {
+      heading: prior.heading || heading,
+      body: mode === "append" && prior.body.trim() ? `${prior.body.trim()}
+${body.trim()}` : body.trim()
+    };
+  } else {
+    sections.push({ heading, body: body.trim() });
+  }
+  return sections.map((section) => {
+    if (!section.heading) return section.body.trim();
+    return `${section.heading}
+
+${section.body.trim()}`.trim();
+  }).filter(Boolean).join("\n\n").concat("\n");
+}
+function parseCliMarkdownSections(content) {
+  const sections = [];
+  let current = null;
+  for (const line of content.split(/\r?\n/)) {
+    if (/^#{1,6}\s+/.test(line)) {
+      if (current) sections.push(current);
+      current = { heading: line.trimEnd(), body: "" };
+      continue;
+    }
+    if (!current) {
+      if (!line.trim()) continue;
+      current = { heading: "", body: line };
+      continue;
+    }
+    current.body = current.body ? `${current.body}
+${line}` : line;
+  }
+  if (current) sections.push(current);
+  return sections;
+}
+function normalizeCliHeadingKey(heading) {
+  return heading.replace(/^#+\s*/, "").trim().toLowerCase();
+}
+function assertCliMemoryWithinCap(content) {
+  return Buffer.byteLength(content, "utf8") > MAX_MEMORY_BYTES ? "Memory file exceeds 128KB cap." : null;
+}
+async function atomicWriteCliUtf8(filePath, content) {
+  const tmpPath = `${filePath}.tmp`;
+  await fsp.writeFile(tmpPath, content, "utf8");
+  try {
+    await fsp.rename(tmpPath, filePath);
+  } catch (error) {
+    await fsp.rm(tmpPath, { force: true }).catch(() => void 0);
+    throw error;
+  }
+}
+function readCliFirstExisting(root2, relativePaths, maxBytes) {
+  for (const relativePath of relativePaths) {
+    const file = readCliTextMemoryFile(root2, relativePath, maxBytes);
+    if (file.found) {
+      return {
+        relativePath: file.relativePath,
+        content: file.content,
+        found: true,
+        sizeBytes: file.sizeBytes,
+        modifiedAt: file.modifiedAt
+      };
+    }
+  }
+  return null;
+}
+function readCliRules(root2) {
+  const dirPath = path11.join(root2, PERCH_DIR, RULES_DIR);
+  try {
+    return fs10.readdirSync(dirPath).filter((name) => [".md", ".txt"].includes(path11.extname(name).toLowerCase())).slice(0, 40).map((name) => readCliTextMemoryFile(root2, path11.join(PERCH_DIR, RULES_DIR, name), MAX_TEXT_BYTES)).filter((file) => file.found).map((file) => ({
+      fileName: path11.basename(file.relativePath),
+      relativePath: file.relativePath,
+      content: file.content,
+      sizeBytes: file.sizeBytes,
+      modifiedAt: file.modifiedAt
+    }));
+  } catch {
+    return [];
+  }
+}
+function readCliMemoryFiles(root2) {
+  const memoryDir = path11.join(root2, PERCH_DIR, MEMORY_DIR);
+  const discovered = /* @__PURE__ */ new Set();
+  const memoryFiles = [];
+  try {
+    for (const name of fs10.readdirSync(memoryDir).slice(0, MAX_MEMORY_FILES)) {
+      const ext = path11.extname(name).toLowerCase();
+      if (ext !== ".md" && ext !== ".txt") continue;
+      discovered.add(name);
+      memoryFiles.push(readCliTextMemoryFile(root2, path11.join(PERCH_DIR, MEMORY_DIR, name), MAX_MEMORY_BYTES));
+    }
+  } catch {
+  }
+  return {
+    memoryFiles,
+    missingMemoryFiles: EXPECTED_MEMORY_FILES.filter((name) => !discovered.has(name)).map((name) => ({
+      fileName: name,
+      relativePath: path11.join(PERCH_DIR, MEMORY_DIR, name),
+      reason: "expected project memory file was not found"
+    }))
+  };
+}
+function readCliTextMemoryFile(root2, relativePath, maxBytes) {
+  const fullPath = path11.join(root2, relativePath);
+  const fileName = path11.basename(relativePath);
+  try {
+    const stat2 = fs10.statSync(fullPath);
+    if (!stat2.isFile()) {
+      return { fileName, relativePath, content: "", found: false, error: "not a regular file" };
+    }
+    const content = fs10.readFileSync(fullPath, "utf8");
+    if (stat2.size > maxBytes) {
+      return {
+        fileName,
+        relativePath,
+        content: `${content.slice(0, maxBytes)}
+[truncated: file exceeds ${maxBytes} bytes]`,
+        found: true,
+        sizeBytes: stat2.size,
+        modifiedAt: stat2.mtime.toISOString()
+      };
+    }
+    return {
+      fileName,
+      relativePath,
+      content,
+      found: true,
+      sizeBytes: stat2.size,
+      modifiedAt: stat2.mtime.toISOString()
+    };
+  } catch (error) {
+    return {
+      fileName,
+      relativePath,
+      content: "",
+      found: false,
+      error: error instanceof Error ? error.message : "read failed"
+    };
+  }
+}
 async function runShellCommand(input) {
   const startedAt = Date.now();
   const cwd2 = input.cwd ? resolveReadPath(input.workspaceRoot, input.cwd) : input.workspaceRoot;
@@ -227312,7 +227910,7 @@ function capOutput(stdout, stderr) {
 function shellQuote(parts) {
   return parts.map((part) => `'${part.replace(/'/g, "'\\''")}'`).join(" ");
 }
-var CLI_ROOT_ID, DEFAULT_MAX_RESULTS, MAX_READ_BYTES, IGNORED_DIRS;
+var CLI_ROOT_ID, DEFAULT_MAX_RESULTS, MAX_READ_BYTES, IGNORED_DIRS, PERCH_DIR, PROJECT_FILE, PERCH_INDEX_FILE, MEMORY_DIR, RULES_DIR, MAX_TEXT_BYTES, MAX_MEMORY_BYTES, MAX_MEMORY_FILES, EXPECTED_MEMORY_FILES;
 var init_nodeLocalBridge = __esm({
   "features/perchTerminal/runtime/cliHost/nodeLocalBridge.ts"() {
     "use strict";
@@ -227323,6 +227921,20 @@ var init_nodeLocalBridge = __esm({
     DEFAULT_MAX_RESULTS = 200;
     MAX_READ_BYTES = 2e6;
     IGNORED_DIRS = /* @__PURE__ */ new Set([".git", "node_modules", "dist", "build", ".next", "release"]);
+    PERCH_DIR = ".perch";
+    PROJECT_FILE = "project.json";
+    PERCH_INDEX_FILE = "PERCH.md";
+    MEMORY_DIR = "memory";
+    RULES_DIR = "rules";
+    MAX_TEXT_BYTES = 64e3;
+    MAX_MEMORY_BYTES = 128e3;
+    MAX_MEMORY_FILES = 80;
+    EXPECTED_MEMORY_FILES = [
+      "project.md",
+      "preferences.md",
+      "decisions.md",
+      "permanent.md"
+    ];
   }
 });
 
@@ -227404,10 +228016,13 @@ function buildCliTurnInput(input, resolved) {
     activeRootPath: input.activeRootPath ?? resolved.cwd,
     localSources: [],
     localSourcesMeta: null,
+    projectMeta: readCliProjectMemoryState(resolved.cwd).meta,
     permanentMemories: input.permanentMemories ?? [],
     userMemories: input.userMemories ?? [],
     supabase: null,
     supabaseConfigured: false,
+    cliServerAppUrl: input.cliServerAppUrl ?? input.marketDeskProxyAppUrl ?? input.appUrl ?? null,
+    cliServerAccessToken: input.cliServerAccessToken ?? input.marketDeskProxyAccessToken ?? null,
     marketDeskProxyAppUrl: input.marketDeskProxyAppUrl ?? input.appUrl ?? null,
     marketDeskProxyAccessToken: input.marketDeskProxyAccessToken ?? null,
     permissionMode: normalizePermissionMode(input.permissionMode ?? "default"),
@@ -227483,6 +228098,7 @@ var init_runCliTurn = __esm({
     init_personaRegistry();
     init_runOperatorTurn();
     init_nodeLocalBridge();
+    init_nodeLocalBridge();
   }
 });
 
@@ -227652,12 +228268,12 @@ import os2 from "node:os";
 import path13 from "node:path";
 import { promisify } from "node:util";
 async function readStoredCliAuthSession() {
-  const raw = process.platform === "darwin" ? await readKeychainSecret().catch(() => null) : await readFallbackSecret().catch(() => null);
+  const raw = shouldUseFallbackAuthFile() ? await readFallbackSecret().catch(() => null) : process.platform === "darwin" ? await readKeychainSecret().catch(() => null) : await readFallbackSecret().catch(() => null);
   return parseStoredCliAuthSession(raw);
 }
 async function writeStoredCliAuthSession(session) {
   const raw = JSON.stringify(session);
-  if (process.platform === "darwin") {
+  if (process.platform === "darwin" && !shouldUseFallbackAuthFile()) {
     await execFileAsync("security", [
       "add-generic-password",
       "-U",
@@ -227673,7 +228289,7 @@ async function writeStoredCliAuthSession(session) {
   await writeFallbackSecret(raw);
 }
 async function clearStoredCliAuthSession() {
-  if (process.platform === "darwin") {
+  if (process.platform === "darwin" && !shouldUseFallbackAuthFile()) {
     await execFileAsync("security", [
       "delete-generic-password",
       "-s",
@@ -227685,6 +228301,9 @@ async function clearStoredCliAuthSession() {
   }
   await fs11.rm(fallbackSessionPath(), { force: true }).catch(() => void 0);
 }
+function shouldUseFallbackAuthFile() {
+  return Boolean(process.env.PERCH_CLI_AUTH_DIR?.trim());
+}
 function isStoredCliAuthSessionUsable(session, nowSeconds = Math.floor(Date.now() / 1e3)) {
   if (!session?.accessToken?.trim()) return false;
   if (!session.appUrl?.trim()) return false;
@@ -283213,7 +283832,7 @@ async function runInkInteractivePerchCli(writer, deps, options) {
                       text: `bash \xB7 ${truncateMiddle(commandText, 54)} \xB7 running`,
                       tone: "muted",
                       detailLines: [
-                        { tone: "command", text: `$ ${commandText}` },
+                        { tone: "command", text: `$ ${commandText}`, language: "bash" },
                         { tone: "meta", text: `cwd ${event.cwd || "."}` }
                       ],
                       expanded: false
@@ -283261,7 +283880,7 @@ async function runInkInteractivePerchCli(writer, deps, options) {
                     richToolIds.current.add(itemId2);
                     const commandText = renderCommandLine(event.command, event.args);
                     const details = [
-                      { tone: "command", text: `$ ${commandText}` },
+                      { tone: "command", text: `$ ${commandText}`, language: "bash" },
                       { tone: "meta", text: `cwd ${event.cwd || "."}` },
                       ...outputChunkToDetailLines(event.stdout, "stdout"),
                       ...outputChunkToDetailLines(event.stderr, "stderr")
@@ -283294,9 +283913,10 @@ async function runInkInteractivePerchCli(writer, deps, options) {
                       detailLines: [
                         {
                           tone: "command",
-                          text: event.language === "shell" ? `$ ${event.command}` : `${event.language} cell`
+                          text: event.language === "shell" ? `$ ${event.command}` : `${event.language} cell`,
+                          language: event.language === "shell" ? "bash" : void 0
                         },
-                        ...event.language === "shell" ? [] : codePreviewDetailLines(event.command)
+                        ...event.language === "shell" ? [] : codePreviewDetailLines(event.command, cliLanguageForSandbox(event.language))
                       ],
                       expanded: false
                     });
@@ -283489,14 +284109,7 @@ async function runInkInteractivePerchCli(writer, deps, options) {
           React11.createElement(
             Ink2.Box,
             { flexGrow: 1 },
-            React11.createElement(
-              Ink2.Text,
-              {
-                color: colorForInkDetailTone(line.tone),
-                dimColor: line.tone === "meta"
-              },
-              formatInkDetailLine(line)
-            )
+            renderInkDetailContent(React11, Ink2, line)
           )
         );
         const renderTranscriptItem = (item, index) => {
@@ -283805,6 +284418,7 @@ function parseInteractiveSlashCommand(input) {
 }
 function renderInteractiveStatus(state, connection, session, workspaceId) {
   const storedAuth = session === void 0 ? renderCliAuthSummary(connection) : isStoredCliAuthSessionUsable(session) ? `signed in${session.email ? ` as ${session.email}` : ""}` : "not signed in";
+  const signedIn = session === void 0 ? isCliModelConnectionReady(connection) : isStoredCliAuthSessionUsable(session);
   const connectionStatus = isCliModelConnectionReady(connection) ? "connected" : "locked \xB7 run /login";
   const color = shouldUseCliColor();
   const lines = [
@@ -283812,6 +284426,7 @@ function renderInteractiveStatus(state, connection, session, workspaceId) {
     ["cwd", state.cwd],
     ["auth", storedAuth],
     ["connection", connectionStatus],
+    ["memory", renderCliMemoryAvailability(state.cwd, workspaceId ?? null, signedIn)],
     ["tools", renderCliCapabilityCount(state, workspaceId ?? null)],
     ["permission", state.permissionMode],
     ["mode", state.chatMode],
@@ -283823,6 +284438,15 @@ function renderInteractiveStatus(state, connection, session, workspaceId) {
   ];
   return lines.map(([key, value]) => `${paint(key.padEnd(11), "muted", color)} ${value}`).join("\n") + "\n";
 }
+function renderCliMemoryAvailability(cwd2, workspaceId, signedIn) {
+  const local = readCliProjectMemoryState(cwd2).available;
+  const parts = [];
+  if (signedIn && workspaceId) parts.push("server memory");
+  if (local) parts.push("local project memory");
+  if (parts.length) return parts.join(" + ");
+  if (signedIn) return "unavailable until a workspace is available";
+  return "unavailable; sign in or run from a .perch project";
+}
 function renderCliCapabilityCount(state, workspaceId) {
   const count = getExecutableToolDefinitions({
     surface: "cli",
@@ -284017,7 +284641,21 @@ async function fetchCliHostedContext(connection, input) {
   return {
     userId: typeof context.session?.userId === "string" ? context.session.userId : session.userId ?? null,
     workspaceId: typeof context.session?.workspaceId === "string" ? context.session.workspaceId : null,
-    permanentMemories: Array.isArray(context.permanentMemories) ? context.permanentMemories.filter(isPermanentMemoryLike) : []
+    permanentMemories: Array.isArray(context.permanentMemories) ? context.permanentMemories.filter(isPermanentMemoryLike2) : []
+  };
+}
+async function fetchCliHostedContextForSession(session) {
+  if (!isStoredCliAuthSessionUsable(session)) return null;
+  const body = await postCliJson(session.appUrl, session, "/api/perch-terminal/cli-context", {
+    query: "/status",
+    threadId: "cli-status",
+    limitPerScope: 1
+  });
+  if (!body || body.ok !== true) return null;
+  const context = body;
+  return {
+    userId: typeof context.session?.userId === "string" ? context.session.userId : session.userId ?? null,
+    workspaceId: typeof context.session?.workspaceId === "string" ? context.session.workspaceId : null
   };
 }
 async function resolveCliMarketDeskProxy(connection) {
@@ -284025,6 +284663,8 @@ async function resolveCliMarketDeskProxy(connection) {
   const session = await readStoredCliAuthSession();
   if (!isStoredCliAuthSessionUsable(session)) return {};
   return {
+    cliServerAppUrl: session.appUrl || connection.appUrl,
+    cliServerAccessToken: session.accessToken,
     marketDeskProxyAppUrl: session.appUrl || connection.appUrl,
     marketDeskProxyAccessToken: session.accessToken
   };
@@ -284069,7 +284709,7 @@ async function postCliJson(appUrl, session, pathname, payload) {
     clearTimeout(timeout);
   }
 }
-function isPermanentMemoryLike(value) {
+function isPermanentMemoryLike2(value) {
   if (!value || typeof value !== "object") return false;
   const memory = value;
   return typeof memory.id === "string" && typeof memory.title === "string" && typeof memory.body === "string";
@@ -284156,6 +284796,53 @@ function bodyColorForInkTone(tone) {
       return "#fff8f0";
   }
 }
+function renderInkDetailContent(React11, Ink2, line) {
+  const prefix = inkDetailPrefix(line.tone);
+  const baseColor = colorForInkDetailTone(line.tone);
+  const language = normalizeCliDetailLanguage(line.language);
+  const tokens = shouldSyntaxHighlightDetail(line) ? tokenizeCliDetailSyntax(language, line.text) : [{ text: line.text, tone: "plain" }];
+  return React11.createElement(
+    Ink2.Text,
+    null,
+    prefix ? React11.createElement(
+      Ink2.Text,
+      { color: baseColor, bold: line.tone === "add" || line.tone === "remove" },
+      prefix
+    ) : null,
+    ...tokens.map(
+      (token, index) => React11.createElement(
+        Ink2.Text,
+        {
+          key: `${line.tone}-${index}-${token.tone}`,
+          color: colorForCliSyntaxTone(token.tone, line.tone),
+          dimColor: line.tone === "meta" || token.tone === "comment"
+        },
+        token.text
+      )
+    )
+  );
+}
+function shouldSyntaxHighlightDetail(line) {
+  if (line.tone === "meta" || line.tone === "hunk") return false;
+  if (line.tone === "stdout" || line.tone === "stderr") return false;
+  return Boolean(normalizeCliDetailLanguage(line.language)) || line.tone === "command";
+}
+function inkDetailPrefix(tone) {
+  switch (tone) {
+    case "add":
+      return "+ ";
+    case "remove":
+      return "- ";
+    case "stderr":
+      return "! ";
+    case "meta":
+      return "# ";
+    case "stdout":
+      return "  ";
+    default:
+      return "";
+  }
+}
 function colorForInkDetailTone(tone) {
   switch (tone) {
     case "add":
@@ -284174,21 +284861,168 @@ function colorForInkDetailTone(tone) {
       return CLI_BRAND.cream;
   }
 }
-function formatInkDetailLine(line) {
-  switch (line.tone) {
-    case "add":
-      return `+ ${line.text}`;
-    case "remove":
-      return `- ${line.text}`;
-    case "stderr":
-      return `! ${line.text}`;
-    case "meta":
-      return `# ${line.text}`;
-    case "stdout":
-      return `  ${line.text}`;
-    default:
-      return line.text;
+function colorForCliSyntaxTone(tone, lineTone) {
+  if (lineTone === "remove") {
+    switch (tone) {
+      case "comment":
+        return "#8e6a55";
+      case "string":
+        return "#c48656";
+      case "keyword":
+      case "flag":
+        return CLI_BRAND.bronzeGlint;
+      case "number":
+        return "#c77952";
+      case "operator":
+        return CLI_BRAND.bronzeDeep;
+      default:
+        return CLI_BRAND.bronzeGlint;
+    }
+  }
+  if (lineTone === "add") {
+    switch (tone) {
+      case "comment":
+        return "#7f9586";
+      case "string":
+        return "#b7c989";
+      case "keyword":
+      case "flag":
+        return CLI_BRAND.patinaActive;
+      case "number":
+        return "#8fd19c";
+      case "operator":
+        return "#7e9f87";
+      default:
+        return CLI_BRAND.cream;
+    }
+  }
+  if (lineTone === "command") {
+    switch (tone) {
+      case "comment":
+        return "#7a6f66";
+      case "string":
+      case "path":
+        return "#e5bc75";
+      case "keyword":
+        return CLI_BRAND.bronzeGlint;
+      case "flag":
+        return CLI_BRAND.patinaActive;
+      case "number":
+        return "#8fd19c";
+      case "operator":
+        return CLI_BRAND.muted;
+      default:
+        return CLI_BRAND.cream;
+    }
+  }
+  return colorForInkDetailTone(lineTone);
+}
+function tokenizeCliDetailSyntax(language, text) {
+  const normalized = language ?? "text";
+  const pattern = cliSyntaxPatternForLanguage(normalized);
+  if (!pattern) return [{ text, tone: "plain" }];
+  const tokens = [];
+  let lastIndex = 0;
+  pattern.lastIndex = 0;
+  for (let match = pattern.exec(text); match; match = pattern.exec(text)) {
+    if (match.index > lastIndex) {
+      tokens.push({ text: text.slice(lastIndex, match.index), tone: "plain" });
+    }
+    tokens.push({ text: match[0], tone: cliToneForSyntaxToken(normalized, match[0]) });
+    lastIndex = match.index + match[0].length;
+  }
+  if (lastIndex < text.length) {
+    tokens.push({ text: text.slice(lastIndex), tone: "plain" });
   }
+  return tokens.length ? tokens : [{ text, tone: "plain" }];
+}
+function cliSyntaxPatternForLanguage(language) {
+  if (["javascript", "typescript", "jsx", "tsx"].includes(language)) {
+    return /(\/\/.*$|\/\*.*?\*\/|`(?:\\.|[^`])*`|'(?:\\.|[^'])*'|"(?:\\.|[^"])*"|\b(?:const|let|var|function|return|if|else|for|while|import|export|from|class|extends|new|await|async|try|catch|throw|type|interface|implements|switch|case|break|continue|null|undefined|true|false)\b|\b\d+(?:\.\d+)?\b|=>|===|!==|==|!=|\|\||&&|[{}()[\].,:;<>/+*=-])/g;
+  }
+  if (language === "python") {
+    return /(#.*$|'''[\s\S]*?'''|"""[\s\S]*?"""|'(?:\\.|[^'])*'|"(?:\\.|[^"])*"|\b(?:def|class|return|if|elif|else|for|while|import|from|as|try|except|raise|with|yield|lambda|None|True|False|async|await|pass|break|continue|and|or|not)\b|\b\d+(?:\.\d+)?\b|[{}()[\].,:;<>/+*=-])/g;
+  }
+  if (language === "bash" || language === "shell") {
+    return /(#.*$|'[^']*'|"(?:\\.|[^"])*"|\$(?:\w+|\{[^}]+\})|(?:^|\s)-{1,2}[A-Za-z0-9][\w-]*|\b(?:if|then|fi|for|do|done|case|esac|function|export|local|sudo|cd|echo|grep|sed|awk|find|cat|ls|mkdir|rm|mv|cp|npm|node|tsx|python|git|rg)\b|\b\d+\b|[|&;()<>])/g;
+  }
+  if (language === "json" || language === "yaml") {
+    return /("(?:\\.|[^"\\])*"(?=\s*:)|"(?:\\.|[^"\\])*"|\b(?:true|false|null)\b|\b\d+(?:\.\d+)?\b|[:{}\[\],-])/g;
+  }
+  if (language === "css") {
+    return /(\/\*.*?\*\/|"(?:\\.|[^"])*"|'(?:\\.|[^'])*'|#[0-9a-fA-F]{3,8}\b|\b\d+(?:\.\d+)?(?:px|rem|em|%)?\b|[{}:;(),])/g;
+  }
+  if (language === "html" || language === "xml") {
+    return /(<!--.*?-->|<\/?[A-Za-z0-9:-]+|"(?:\\.|[^"])*"|'(?:\\.|[^'])*'|\/?>)/g;
+  }
+  return null;
+}
+function cliToneForSyntaxToken(language, text) {
+  if (text.startsWith("//") || text.startsWith("/*") || text.startsWith("#") || text.startsWith("<!--")) {
+    return "comment";
+  }
+  if (text.startsWith("'") || text.startsWith('"') || text.startsWith("`")) {
+    return language === "json" && text.endsWith(":") ? "keyword" : "string";
+  }
+  if (/^\s*-{1,2}[A-Za-z0-9]/.test(text)) return "flag";
+  if (/^\$/.test(text)) return "keyword";
+  if (/^\d/.test(text)) return "number";
+  if (/^[{}()[\].,:;<>/+*=\-|&]+$/.test(text)) return "operator";
+  if (/[\\/]/.test(text) && !/\s/.test(text)) return "path";
+  return "keyword";
+}
+function normalizeCliDetailLanguage(language) {
+  const value = language?.trim().toLowerCase();
+  if (!value) return null;
+  const map2 = {
+    js: "javascript",
+    mjs: "javascript",
+    cjs: "javascript",
+    jsx: "jsx",
+    ts: "typescript",
+    mts: "typescript",
+    cts: "typescript",
+    tsx: "tsx",
+    py: "python",
+    python3: "python",
+    sh: "bash",
+    shell: "bash",
+    zsh: "bash",
+    yml: "yaml",
+    htm: "html"
+  };
+  return map2[value] ?? value;
+}
+function cliLanguageForSandbox(language) {
+  if (language === "node") return "javascript";
+  if (language === "shell") return "bash";
+  return normalizeCliDetailLanguage(language) ?? "text";
+}
+function inferCliLanguageFromPath(filePath) {
+  const extension2 = filePath.split(/[./\\]/).pop()?.toLowerCase();
+  if (!extension2 || extension2 === filePath.toLowerCase()) return null;
+  const map2 = {
+    js: "javascript",
+    mjs: "javascript",
+    cjs: "javascript",
+    jsx: "jsx",
+    ts: "typescript",
+    mts: "typescript",
+    cts: "typescript",
+    tsx: "tsx",
+    py: "python",
+    sh: "bash",
+    zsh: "bash",
+    json: "json",
+    jsonc: "json",
+    yml: "yaml",
+    yaml: "yaml",
+    css: "css",
+    html: "html",
+    htm: "html",
+    xml: "xml"
+  };
+  return map2[extension2] ?? null;
 }
 function buildFileToolDisplay(toolName, input, phase, summary) {
   const normalizedName = toolName.toLowerCase();
@@ -284199,12 +285033,13 @@ function buildFileToolDisplay(toolName, input, phase, summary) {
   const filePath = stringValue8(input.path) ?? stringValue8(input.filePath) ?? summary?.filePath ?? "file";
   const short = shortFilePath(filePath);
   const status = phase === "running" ? "running" : summary?.changeKind ?? "done";
+  const language = inferCliLanguageFromPath(filePath);
   if (isWrite) {
     const content = stringValue8(input.content) ?? "";
     const added = summary?.linesAdded ?? countTextLines(content);
     const detailLines = [
       { tone: "hunk", text: `@@ ${short}` },
-      ...textToDetailLines(content, "add")
+      ...textToDetailLines(content, "add", language)
     ];
     if (detailLines.length === 1 && summary) {
       detailLines.push({ tone: "meta", text: describeChangeSummary(summary) });
@@ -284221,8 +285056,8 @@ function buildFileToolDisplay(toolName, input, phase, summary) {
     const added = summary?.linesAdded ?? countTextLines(newText);
     const detailLines = [
       { tone: "hunk", text: `@@ ${short}` },
-      ...textToDetailLines(oldText, "remove"),
-      ...textToDetailLines(newText, "add")
+      ...textToDetailLines(oldText, "remove", language),
+      ...textToDetailLines(newText, "add", language)
     ];
     if (detailLines.length === 1 && summary) {
       detailLines.push({ tone: "meta", text: describeChangeSummary(summary) });
@@ -284248,18 +285083,23 @@ function describeChangeSummary(summary) {
   const removed = summary.linesRemoved ?? 0;
   return `${kind} \xB7 +${added} -${removed}`;
 }
-function textToDetailLines(text, tone) {
+function textToDetailLines(text, tone, language) {
   if (!text) return [];
   const lines = text.split(/\r?\n/);
-  const preview = lines.slice(0, 38).map((line) => ({ tone, text: line }));
+  const normalizedLanguage = normalizeCliDetailLanguage(language);
+  const preview = lines.slice(0, 38).map((line) => ({
+    tone,
+    text: line,
+    ...normalizedLanguage ? { language: normalizedLanguage } : {}
+  }));
   if (lines.length > preview.length) {
     preview.push({ tone: "meta", text: `${lines.length - preview.length} more line(s)` });
   }
   return preview;
 }
-function codePreviewDetailLines(code) {
+function codePreviewDetailLines(code, language) {
   if (!code.trim()) return [];
-  return textToDetailLines(code, "command").slice(0, 18);
+  return textToDetailLines(code, "command", language).slice(0, 18);
 }
 function outputChunkToDetailLines(text, tone) {
   if (!text) return [];
@@ -284369,12 +285209,17 @@ async function runAuthCommand(parsed, writer) {
   if (parsed.action === "status") {
     const session = await readStoredCliAuthSession();
     if (isStoredCliAuthSessionUsable(session)) {
-      writer.stdout(`Perch CLI ${CLI_PACKAGE_VERSION} \xB7 Signed in${session.email ? ` as ${session.email}` : ""} \xB7 ${session.appUrl}
-`);
+      const hostedContext = await fetchCliHostedContextForSession(session).catch(() => null);
+      writer.stdout([
+        `Perch CLI ${CLI_PACKAGE_VERSION} \xB7 Signed in${session.email ? ` as ${session.email}` : ""} \xB7 ${session.appUrl}`,
+        `Memory: ${renderCliMemoryAvailability(process.cwd(), hostedContext?.workspaceId ?? null, true)}`
+      ].join("\n") + "\n");
       return 0;
     }
-    writer.stdout(`Perch CLI ${CLI_PACKAGE_VERSION} \xB7 Not signed in. Run \`perch login\`.
-`);
+    writer.stdout([
+      `Perch CLI ${CLI_PACKAGE_VERSION} \xB7 Not signed in. Run \`perch login\`.`,
+      `Memory: ${renderCliMemoryAvailability(process.cwd(), null, false)}`
+    ].join("\n") + "\n");
     return 2;
   }
   const appUrl = resolveCliAppUrl(parsed.appUrl, DEFAULT_CLI_LOGIN_APP_URL) ?? DEFAULT_CLI_LOGIN_APP_URL;
@@ -284634,6 +285479,7 @@ var init_perch_cli = __esm({
     init_runRegistry();
     init_learningMemory();
     init_toolDefinitions();
+    init_nodeLocalBridge();
     execFileAsync3 = promisify3(execFile3);
     DEFAULT_CLI_LOGIN_APP_URL = "https://app.perchai.app";
     CLI_PACKAGE_VERSION = readCliPackageVersion();