scream-code 0.17.5 → 0.17.6

package/README.md

@@ -56,6 +56,7 @@ When Scream wants to modify files or run commands, an approval panel pops up —
 - **Persistent Memory** — structured pain-point memory with FTS5 full-text + tag + vector retrieval, shared across sessions.
 - **Local Knowledge Graph** — SAG-based visual knowledge base for multi-hop reasoning; import your own docs anytime.
 - **RLM Mode** — persistent Python workspace for long-running tasks, with unlimited recursive sub-agents.
+- **Script Mode** — on by default: the model can run JavaScript in a sandbox that calls the other tools for it, so batch work (dozens of files/pages, filter-then-report) finishes in one round trip — only the script's summary enters the conversation; `/script` toggles it.
 - **Session Trace** — `/trace` exports any session as a self-contained, offline interactive HTML timeline.
 - **Context Search** — `/search` (Ctrl+Shift+F) full-screen keyword search over the conversation.
 - **High Cache Hit Rate** — per-session HitR in the status bar, tuned across compatible protocols to maximize cache hits without compromising quality.
@@ -65,7 +66,7 @@ When Scream wants to modify files or run commands, an approval panel pops up —
 
 ### Slash Commands
 
-Type `/` in the input to browse. All 54 commands:
+Type `/` in the input to browse. All 55 commands:
 
 <details>
 <summary>Full command reference (click to expand)</summary>
@@ -81,6 +82,7 @@ Type `/` in the input to browse. All 54 commands:
 | `/wolfpack` (`/wp`) | Toggle wolfpack mode — auto-approve + batch concurrency |
 | `/rlm` | RLM mode: persistent Python workspace, unlimited recursive subagents |
 | `/rlm-max-depth [N]` | Set RLM recursion depth limit |
+| `/script` | Script mode: run JavaScript in a sandbox that batches tool calls (on by default) |
 | `/plan` | Toggle plan mode |
 | `/fusionplan` (`/fp`) | Fusion plan mode (multi-agent parallel planning) |
 | `/btw` | Quick question without interrupting the conversation |

package/dist/{app-CujwBxt8.mjs → app-y8MJHp3H.mjs}

@@ -5,8 +5,8 @@ const __filename = __cjsShimFileURLToPath(import.meta.url);
 const __dirname = __cjsShimDirname(__filename);
 import "./suppress-sqlite-warning-C2VB0doZ.mjs";
 import { k as MemoryMemoStore } from "./src-BhZujafw.mjs";
-import { $n as encodeWorkDirKey, $t as lerpGradient, A as highlightLines, An as embeddingFailureDetail, At as isTurnElapsedEnabled, B as ActivityGroupComponent, Bn as detectShellEnvironment, Bt as ENABLE_TERMINAL_THEME_REPORTING, Cn as getLlmNotSetMessage, Ct as clearInfoPanelState, D as ToolCallComponent, Dn as sortSlashCommands, Dt as createEditorTheme, E as UserMessageComponent, En as BUILTIN_SLASH_COMMANDS, Et as resolveThemeSync, F as StatusMessageComponent, Fn as PULSE_WAVE_FRAMES, Ft as detectTerminalTheme, G as AgentGroupComponent, Gn as CLI_COMMAND_NAME, Gt as QUERY_TERMINAL_THEME, H as estimateTokens, Hn as getInputHistoryFile, Ht as OSC11_RESPONSE, I as replaceTabs, In as TuiConfigParseError, It as parseOsc11BackgroundTheme, J as getBreathingFrame, Jn as PRODUCT_NAME, Jt as TERMINAL_THEME_DARK, K as WelcomeComponent, Kn as CLI_UI_MODE, Kt as TERMINAL_FOCUS_IN, L as sanitizeShellOutput, Ln as TuiLikePreferencesSchema, Lt as DISABLE_TERMINAL_FOCUS_REPORTING, M as CachedContainer, Mn as hasEmbeddingModelCache, Mt as createThemeStyles, N as ThinkingComponent, Nn as startManualEmbeddingDownload, Nt as contrastTextHex, O as renderDiffLines, On as isExperimentalFlagEnabled, Ot as createMarkdownTheme, P as NoticeMessageComponent, Pn as PIXEL_PULSE_FRAMES, Pt as getColorPalette, Q as refineGoal, Qn as ScreamHarness, Qt as FooterComponent, R as SkillActivationComponent, Rn as loadTuiConfig, Rt as DISABLE_TERMINAL_THEME_REPORTING, S as readJsonlFile, Sn as getCtrlDHint, St as supportsBalance, Tn as buildSkillSlashCommands, U as getSharedSpeedTracker, Un as getLogDir, Ut as OSC11_RESPONSE_PREFIX, V as charsForTokenBudget, Vn as getDataDir, Vt as OSC11_QUERY, W as BackgroundAgentStatusComponent, Wn as detectInstallSource, Wt as OSC11_RESPONSE_PREFIX_NO_ESC, X as CompactionComponent, Xn as fetchCatalog, Xt as isBusy, Y as resetBreathingClock, Yn as DEFAULT_CATALOG_URL, Yt as TERMINAL_THEME_LIGHT, Z as clearGoalState, Zn as saveCatalogCache, Zt as isStreaming, _n as EXIT_CONFIRM_WINDOW_MS, a as syncDiagramCapabilityPrompt, an as printableChar, ar as isRealUserPrompt, at as toTerminalHyperlink, b as readUpdateCache, bn as TIP_ROTATION_INTERVAL_MS, c as disposeChildren, cn as appendStreamingArgsPreview, cr as log, d as isPlanExpandable, dn as isTodoItemShape, dr as isOrphanedToolCallError, en as SubagentSlots, er as normalizeWorkDir, f as MoonLoader, fn as parseStreamingArgs, fr as ErrorCodes, ft as handleFusionPlanCommand, gn as EMPTY_SESSION_HINT_URL, hn as truncateErrorMessage, i as buildRoleAdditionalText, it as isInternalMessage, j as langFromPath, jn as getKnowledgeStore, jt as toggleEmptySessionHint, k as renderDiffLinesClustered, kn as setExperimentalFlags, kt as isEmptySessionHintDismissed, l as hasDispose, ln as argsRecord, lr as resolveGlobalLogPath, mn as stringValue, mt as handlePlanCommand, n as clearEvalPanelState, nr as readSessionIndex, on as STATUS_BULLET, or as resolveScreamHome, ot as changeThinkingLevel, p as formatMemoryMemoForInjection, pn as serializeToolResultOutput, pr as SCREAM_ERROR_INFO, q as BREATHE_CYCLE_MS, qn as CLI_USER_AGENT_PRODUCT, qt as TERMINAL_FOCUS_OUT, r as openUrl, rr as removeSessionIndexEntry, sn as appendSessionHeaderHint, sr as flushDiagnosticLogs, st as getModelCycleLevel, t as dispatchInput, tr as appendSessionIndexEntry, u as isExpandable, un as formatErrorMessage, ur as isScreamError, v as selectUpdateTarget, vn as MAIN_AGENT_ID, w as getDaemonInstructions, wn as getNoActiveSessionMessage, x as appendJsonlLine, xn as getCtrlCHint, xt as refreshProviderBalance, y as refreshUpdateCache, yn as SESSION_TIPS, z as AssistantMessageComponent, zn as saveTuiConfig, zt as ENABLE_TERMINAL_FOCUS_REPORTING } from "./dispatch-DCzx4R71.mjs";
-import { a as setLocale, i as getLocale, o as t } from "./text-input-dialog-BoxTq4a3.mjs";
+import { $n as encodeWorkDirKey, $t as lerpGradient, A as highlightLines, An as embeddingFailureDetail, At as isTurnElapsedEnabled, B as ActivityGroupComponent, Bn as detectShellEnvironment, Bt as ENABLE_TERMINAL_THEME_REPORTING, Cn as getLlmNotSetMessage, Ct as clearInfoPanelState, D as ToolCallComponent, Dn as sortSlashCommands, Dt as createEditorTheme, E as UserMessageComponent, En as BUILTIN_SLASH_COMMANDS, Et as resolveThemeSync, F as StatusMessageComponent, Fn as PULSE_WAVE_FRAMES, Ft as detectTerminalTheme, G as AgentGroupComponent, Gn as CLI_COMMAND_NAME, Gt as QUERY_TERMINAL_THEME, H as estimateTokens, Hn as getInputHistoryFile, Ht as OSC11_RESPONSE, I as replaceTabs, In as TuiConfigParseError, It as parseOsc11BackgroundTheme, J as getBreathingFrame, Jn as PRODUCT_NAME, Jt as TERMINAL_THEME_DARK, K as WelcomeComponent, Kn as CLI_UI_MODE, Kt as TERMINAL_FOCUS_IN, L as sanitizeShellOutput, Ln as TuiLikePreferencesSchema, Lt as DISABLE_TERMINAL_FOCUS_REPORTING, M as CachedContainer, Mn as hasEmbeddingModelCache, Mt as createThemeStyles, N as ThinkingComponent, Nn as startManualEmbeddingDownload, Nt as contrastTextHex, O as renderDiffLines, On as isExperimentalFlagEnabled, Ot as createMarkdownTheme, P as NoticeMessageComponent, Pn as PIXEL_PULSE_FRAMES, Pt as getColorPalette, Q as refineGoal, Qn as ScreamHarness, Qt as FooterComponent, R as SkillActivationComponent, Rn as loadTuiConfig, Rt as DISABLE_TERMINAL_THEME_REPORTING, S as readJsonlFile, Sn as getCtrlDHint, St as supportsBalance, Tn as buildSkillSlashCommands, U as getSharedSpeedTracker, Un as getLogDir, Ut as OSC11_RESPONSE_PREFIX, V as charsForTokenBudget, Vn as getDataDir, Vt as OSC11_QUERY, W as BackgroundAgentStatusComponent, Wn as detectInstallSource, Wt as OSC11_RESPONSE_PREFIX_NO_ESC, X as CompactionComponent, Xn as fetchCatalog, Xt as isBusy, Y as resetBreathingClock, Yn as DEFAULT_CATALOG_URL, Yt as TERMINAL_THEME_LIGHT, Z as clearGoalState, Zn as saveCatalogCache, Zt as isStreaming, _n as EXIT_CONFIRM_WINDOW_MS, a as syncDiagramCapabilityPrompt, an as printableChar, ar as isRealUserPrompt, at as toTerminalHyperlink, b as readUpdateCache, bn as TIP_ROTATION_INTERVAL_MS, c as disposeChildren, cn as appendStreamingArgsPreview, cr as log, d as isPlanExpandable, dn as isTodoItemShape, dr as isOrphanedToolCallError, en as SubagentSlots, er as normalizeWorkDir, f as MoonLoader, fn as parseStreamingArgs, fr as ErrorCodes, ft as handleFusionPlanCommand, gn as EMPTY_SESSION_HINT_URL, hn as truncateErrorMessage, i as buildRoleAdditionalText, it as isInternalMessage, j as langFromPath, jn as getKnowledgeStore, jt as toggleEmptySessionHint, k as renderDiffLinesClustered, kn as setExperimentalFlags, kt as isEmptySessionHintDismissed, l as hasDispose, ln as argsRecord, lr as resolveGlobalLogPath, mn as stringValue, mt as handlePlanCommand, n as clearEvalPanelState, nr as readSessionIndex, on as STATUS_BULLET, or as resolveScreamHome, ot as changeThinkingLevel, p as formatMemoryMemoForInjection, pn as serializeToolResultOutput, pr as SCREAM_ERROR_INFO, q as BREATHE_CYCLE_MS, qn as CLI_USER_AGENT_PRODUCT, qt as TERMINAL_FOCUS_OUT, r as openUrl, rr as removeSessionIndexEntry, sn as appendSessionHeaderHint, sr as flushDiagnosticLogs, st as getModelCycleLevel, t as dispatchInput, tr as appendSessionIndexEntry, u as isExpandable, un as formatErrorMessage, ur as isScreamError, v as selectUpdateTarget, vn as MAIN_AGENT_ID, w as getDaemonInstructions, wn as getNoActiveSessionMessage, x as appendJsonlLine, xn as getCtrlCHint, xt as refreshProviderBalance, y as refreshUpdateCache, yn as SESSION_TIPS, z as AssistantMessageComponent, zn as saveTuiConfig, zt as ENABLE_TERMINAL_FOCUS_REPORTING } from "./dispatch-DFFuylzQ.mjs";
+import { a as setLocale, i as getLocale, o as t } from "./text-input-dialog-CD0sakGq.mjs";
 import { createRequire } from "node:module";
 import { randomBytes, randomUUID, scryptSync, timingSafeEqual } from "node:crypto";
 import { access, appendFile, chmod, mkdir, mkdtemp, readFile, readdir, realpath, rename, rm, stat, unlink, writeFile } from "node:fs/promises";
@@ -33,7 +33,7 @@ function optionalBuildString(value) {
 	return typeof value === "string" && value.length > 0 ? value : void 0;
 }
 const SCREAM_BUILD_INFO = {
-	version: optionalBuildString("0.17.5"),
+	version: optionalBuildString("0.17.6"),
 	channel: optionalBuildString(""),
 	commit: optionalBuildString(""),
 	buildTarget: optionalBuildString("darwin-arm64")
@@ -14142,7 +14142,7 @@ var ScreamTUI = class {
 		const card = new OnboardingCardComponent({
 			colors: this.state.theme.colors,
 			onConfigure: () => {
-				import("./dispatch-DjLS5cab.mjs").then(({ handleConnectCommand }) => handleConnectCommand(this, "")).finally(() => {
+				import("./dispatch-DRdBQorE.mjs").then(({ handleConnectCommand }) => handleConnectCommand(this, "")).finally(() => {
 					this.restoreEditor();
 					onDone?.();
 				});

package/dist/{dispatch-DCzx4R71.mjs → dispatch-DFFuylzQ.mjs}

@@ -6,7 +6,7 @@ const __dirname = __cjsShimDirname(__filename);
 import { i as __require, o as __toESM, r as __exportAll, t as __commonJSMin } from "./chunk-D90kvbyJ.mjs";
 import { A as classifyEmbeddingFailure, B as rankMemos, C as applyConsolidation, D as parseMemoryMemos, E as buildExitExtractionPrompt, F as createMemoryMemo, G as normalize, H as dirname$2, I as toSummary, J as resolve$2, K as parse$7, L as generateTags, M as createFastEmbedEngine, N as hasEmbeddingModelCache$1, O as stripMemoryTags, P as probeLocalEmbeddingSupport, R as normalizeTags, S as DreamTracker, T as EXIT_EXTRACTION_SYSTEM_PROMPT, U as isAbsolute$1, V as basename$1, W as join$1, a as isSupportedFile, b as sharedKnowledgeStoreReady, i as ingestFile, j as clearEmbeddingModelCache, k as MemoryMemoStore, q as relative$1, r as ingestDirectory, t as multiSearch, w as buildConsolidationPlan, y as sharedKnowledgeStore, z as buildProjectTagCloud } from "./src-BhZujafw.mjs";
 import { n as require_base64_js, t as XMLParser } from "./XMLParser-DFAnGqkc.mjs";
-import { a as setLocale, i as getLocale, n as assertScreamHostIdentity, o as t, r as createScreamDefaultHeaders, t as TextInputDialogComponent } from "./text-input-dialog-BoxTq4a3.mjs";
+import { a as setLocale, i as getLocale, n as assertScreamHostIdentity, o as t, r as createScreamDefaultHeaders, t as TextInputDialogComponent } from "./text-input-dialog-CD0sakGq.mjs";
 import { createRequire } from "node:module";
 import { createHash, randomBytes, randomInt, randomUUID } from "node:crypto";
 import * as fs$1 from "node:fs/promises";
@@ -38,6 +38,7 @@ import { StringDecoder } from "node:string_decoder";
 import Pi from "assert";
 import ro from "node:assert";
 import { fileURLToPath, pathToFileURL } from "node:url";
+import { CodemodeSandbox, CodemodeSourceError, parseCodemodeSource, renderDeclarations } from "@earendil-works/pi-codemode";
 import { AsyncLocalStorage } from "node:async_hooks";
 import * as posixPath from "node:path/posix";
 import * as win32Path from "node:path/win32";
@@ -76727,7 +76728,7 @@ const PY_DONE_MARKER = "__SCREAM_PY_DONE__";
 const MAX_OUTPUT_CHARS = 5e4;
 const TAIL_CHARS = 2e4;
 const TRUNCATION_MARKER = "[...truncated]";
-function truncateOutput(output) {
+function truncateOutput$1(output) {
 	if (output.length <= MAX_OUTPUT_CHARS) return output;
 	return `${output.slice(0, MAX_OUTPUT_CHARS - TAIL_CHARS)}\n${TRUNCATION_MARKER}\n${output.slice(-2e4)}`;
 }
@@ -77096,7 +77097,7 @@ except BaseException as __e:
 					this.kernel = void 0;
 					return {
 						isError: true,
-						output: `Python execution timed out after ${Math.round(timeoutMs / 1e3)}s (kernel restarted).\n${truncateOutput(merged)}`
+						output: `Python execution timed out after ${Math.round(timeoutMs / 1e3)}s (kernel restarted).\n${truncateOutput$1(merged)}`
 					};
 				}
 				if (!await this.syncKernel(proc)) {
@@ -77104,7 +77105,7 @@ except BaseException as __e:
 					this.kernel = void 0;
 					return {
 						isError: true,
-						output: `Python execution timed out after ${Math.round(timeoutMs / 1e3)}s (kernel restarted).\n${truncateOutput(merged)}`
+						output: `Python execution timed out after ${Math.round(timeoutMs / 1e3)}s (kernel restarted).\n${truncateOutput$1(merged)}`
 					};
 				}
 				await this.drainStderrQuiet(proc);
@@ -77113,11 +77114,11 @@ except BaseException as __e:
 				const timedOutMerged = [merged, interruptStderr].filter((part) => part.length > 0).join("\n");
 				return {
 					isError: true,
-					output: `Python execution timed out after ${Math.round(timeoutMs / 1e3)}s (kernel interrupted; state preserved).\n${truncateOutput(timedOutMerged)}`
+					output: `Python execution timed out after ${Math.round(timeoutMs / 1e3)}s (kernel interrupted; state preserved).\n${truncateOutput$1(timedOutMerged)}`
 				};
 			}
 			const isError = merged.includes("Traceback") || merged.toLowerCase().includes("error:");
-			const finalOutput = truncateOutput(merged);
+			const finalOutput = truncateOutput$1(merged);
 			return {
 				isError,
 				output: finalOutput.length > 0 ? finalOutput : "(no output)"
@@ -77190,6 +77191,281 @@ except BaseException as __e:
 		}
 	}
 };
+//#endregion
+//#region ../../packages/agent-core/src/tools/builtin/script/script.ts
+/** Model-facing tool name. */
+const SCRIPT_TOOL_NAME = "RunScript";
+/** Declaration budget for the tool description (≈3000 tokens at 4 chars/token). */
+const DECLARATION_BUDGET_CHARS = 12e3;
+const CHARS_PER_TOKEN = 4;
+const DEFAULT_MAX_OUTPUT_TOKENS = 1e4;
+/** QuickJS heap ceiling per execution. */
+const SANDBOX_MEMORY_LIMIT_BYTES = 256 * 1024 * 1024;
+/**
+* Nested-call *recording* caps, mirroring the reference runner: a call always
+* runs — only its record degrades. Arguments are dropped from the record once
+* the byte budgets are exhausted, and records stop once the call cap is hit.
+*/
+const MAX_NESTED_CALLS = 256;
+const MAX_NESTED_ARG_BYTES = 8 * 1024;
+const MAX_NESTED_TOTAL_ARG_BYTES = 32 * 1024;
+const MAX_NESTED_MESSAGE_CHARS = 500;
+const ARGS_PREVIEW_CHARS = 160;
+const SCRIPT_PREAMBLE = [
+	"Run JavaScript in a sandbox whose only capability is calling the tools listed below.",
+	"The tool calls the script makes never enter the conversation — only what the script",
+	"returns through `text(...)` (and `console.*`) is shown.",
+	"",
+	"When to use: several tool calls can be planned up front — batch work across many",
+	"files, chained steps that need no decision in between, or filtering/aggregating",
+	"results before reporting them.",
+	"When not to use: a single tool call is enough, or each next step depends on",
+	"observing the previous result.",
+	"",
+	"Rules:",
+	"- Call tools as `await tools.<Name>({...})`; calls are auto-awaited and resolve to the",
+	"  tool's text output. A failing call rejects with an Error carrying the failure text.",
+	"- `store(key, value)` / `load(key)` persist small JSON values across turns (only successful runs commit writes).",
+	"- `image(dataUrlOrBytes)` attaches an image to the result.",
+	"- `exit()` ends the script early.",
+	"- Optional first line: `// @options: {\"max_output_tokens\": 10000, \"timeout_ms\": 60000}`."
+].join("\n");
+const ScriptInputSchema = z.object({ code: z.string().min(1).describe("JavaScript to run. Call the available tools as `tools.<Name>(args)`; only text()/console output reaches the conversation.") });
+/** Builds the tool description including declarations for the callable tools. */
+function buildScriptToolDescription(callableTools) {
+	if (callableTools.length === 0) return `${SCRIPT_PREAMBLE}\n\nNo tools are currently available inside the script.`;
+	const full = `${SCRIPT_PREAMBLE}\n\nTool declarations:\n\n${renderDeclarations({ tools: callableTools.map((tool) => ({
+		name: tool.name,
+		description: tool.description,
+		inputSchema: tool.parameters,
+		execute: () => void 0
+	})) })}`;
+	if (full.length <= DECLARATION_BUDGET_CHARS) return full;
+	const names = callableTools.map((tool) => `- ${tool.name}: ${firstLineOf(tool.description)}`).join("\n");
+	return [
+		SCRIPT_PREAMBLE,
+		"",
+		`Tool declarations omitted (${callableTools.length} tools exceed the ${DECLARATION_BUDGET_CHARS}-character budget); call them by their exact names:`,
+		names
+	].join("\n");
+}
+/**
+* Runs model-written JavaScript in a QuickJS sandbox (worker thread) with the
+* current step's tools exposed as `tools.<Name>()`. Only the script's own
+* output enters the conversation; every nested call goes through the regular
+* tool pipeline (validation, hooks, approval) via `ctx.runNestedToolCall`.
+*/
+var ScriptTool = class {
+	store;
+	name = SCRIPT_TOOL_NAME;
+	description = buildScriptToolDescription([]);
+	parameters = toInputJsonSchema(ScriptInputSchema);
+	constructor(store) {
+		this.store = store;
+	}
+	resolveExecution(args) {
+		let parsed;
+		let parseError;
+		try {
+			parsed = parseCodemodeSource(args.code);
+		} catch (error) {
+			parseError = error instanceof CodemodeSourceError ? error.message : String(error);
+		}
+		return {
+			description: "Running a script",
+			approvalRule: this.name,
+			execute: async (ctx) => {
+				if (parsed === void 0) return {
+					output: `Script rejected: ${parseError ?? "invalid source"}`,
+					isError: true
+				};
+				return this.run(parsed, ctx);
+			}
+		};
+	}
+	async run(parsed, ctx) {
+		const runner = ctx.runNestedToolCall;
+		if (runner === void 0) return {
+			output: "RunScript is unavailable in this context: nested tool calls are not supported here.",
+			isError: true
+		};
+		const state = {
+			calls: 0,
+			argBytes: 0,
+			records: []
+		};
+		const sandbox = new CodemodeSandbox({
+			tools: runner.tools.map((tool) => this.toSandboxTool(tool, runner, ctx, state)),
+			memoryLimitBytes: SANDBOX_MEMORY_LIMIT_BYTES,
+			timeoutMs: parsed.options.timeoutMs ?? Number.POSITIVE_INFINITY
+		});
+		try {
+			const result = await sandbox.execute(parsed.code, {
+				signal: ctx.signal,
+				store: this.store.get("scriptStore") ?? {}
+			});
+			if (!result.ok) return await this.failedResult(result.error, result.output, state);
+			this.commitStoreWrites(result.storeWrites);
+			return await this.successResult(result.output, result.value, state, parsed.options);
+		} finally {
+			await sandbox.close();
+		}
+	}
+	toSandboxTool(tool, runner, ctx, state) {
+		return {
+			name: tool.name,
+			description: tool.description,
+			inputSchema: tool.parameters,
+			execute: (args) => this.runNested(runner, tool.name, args, ctx, state)
+		};
+	}
+	async runNested(runner, name, args, ctx, state) {
+		state.calls += 1;
+		const callId = `${ctx.toolCallId}/${state.calls}`;
+		let record;
+		if (state.records.length < MAX_NESTED_CALLS) {
+			const serialized = tryStringify(args);
+			const bytes = serialized === void 0 ? 0 : Buffer.byteLength(serialized, "utf8");
+			const overBudget = serialized === void 0 || bytes > MAX_NESTED_ARG_BYTES || state.argBytes + bytes > MAX_NESTED_TOTAL_ARG_BYTES;
+			record = {
+				callId,
+				name,
+				status: "ok",
+				durationMs: 0,
+				...overBudget ? { incomplete: true } : { argsPreview: previewOf(serialized) }
+			};
+			if (!overBudget) state.argBytes += bytes;
+			state.records.push(record);
+		}
+		const startedAt = Date.now();
+		try {
+			const result = await runner.run({
+				name,
+				args,
+				callId
+			});
+			if (record !== void 0) {
+				record.status = result.isError === true ? "error" : "ok";
+				record.durationMs = Date.now() - startedAt;
+			}
+			return resolveNestedValue(name, result);
+		} catch (error) {
+			if (record !== void 0) {
+				record.status = "error";
+				record.durationMs = Date.now() - startedAt;
+			}
+			throw error;
+		}
+	}
+	commitStoreWrites(writes) {
+		const next = { ...this.store.get("scriptStore") };
+		for (const [key, value] of Object.entries(writes.set)) if (value === void 0) delete next[key];
+		else next[key] = value;
+		for (const key of writes.delete) delete next[key];
+		this.store.set("scriptStore", next);
+	}
+	async successResult(output, value, state, options) {
+		const textParts = output.filter((item) => item.type === "text").map((item) => item.text);
+		if (value !== void 0) textParts.push(valueText(value));
+		const { shown } = await truncateOutput(textParts.join("\n"), (options.maxOutputTokens ?? DEFAULT_MAX_OUTPUT_TOKENS) * CHARS_PER_TOKEN);
+		const parts = [];
+		if (shown.length > 0) parts.push({
+			type: "text",
+			text: shown
+		});
+		for (const item of output) if (item.type === "image") parts.push({
+			type: "image_url",
+			imageUrl: { url: `data:${item.mimeType};base64,${item.data}` }
+		});
+		if (parts.length === 0) parts.push({
+			type: "text",
+			text: "(script produced no output)"
+		});
+		return {
+			output: parts,
+			...state.records.length > 0 ? { nestedCalls: state.records } : {}
+		};
+	}
+	async failedResult(error, output, state) {
+		const lines = [`Script failed (${error.kind}): ${error.message}`];
+		const partial = output.filter((item) => item.type === "text").map((item) => item.text).join("\n");
+		if (partial.length > 0) {
+			const { shown } = await truncateOutput(partial, DEFAULT_MAX_OUTPUT_TOKENS * CHARS_PER_TOKEN);
+			lines.push("", "Partial output before the failure:", shown);
+		}
+		if (state.records.length > 0) lines.push(`(${state.records.length} nested call${state.records.length === 1 ? "" : "s"} ran before the failure)`);
+		return {
+			output: lines.join("\n"),
+			isError: true
+		};
+	}
+};
+/**
+* Provider-facing results resolve to their text for scripts; failures reject
+* with an Error so scripts can try/catch (mirroring the reference runner).
+*/
+function resolveNestedValue(name, result) {
+	const text = typeof result.output === "string" ? result.output : result.output.filter((part) => part.type === "text").map((part) => part.text).join("\n");
+	if (result.isError === true) {
+		const detail = [result.message, text].filter((part) => typeof part === "string" && part.length > 0).join("\n");
+		throw new Error(truncateChars(detail.length > 0 ? detail : `Tool "${name}" failed`, MAX_NESTED_MESSAGE_CHARS));
+	}
+	return text;
+}
+/** Renders a script's returned value as text (string as-is, everything else JSON). */
+function valueText(value) {
+	if (typeof value === "string") return value;
+	try {
+		return JSON.stringify(value, null, 2) ?? String(value);
+	} catch {
+		return String(value);
+	}
+}
+/**
+* Truncates to the character budget, keeping half the budget on each side
+* (matching the reference implementation). The full text is spilled to a
+* temp file and its path reported in the shown output.
+*/
+async function truncateOutput(text, maxChars) {
+	if (text.length <= maxChars) return { shown: text };
+	const headChars = Math.floor(maxChars / 2);
+	const tailChars = maxChars - headChars;
+	const removedChars = text.length - headChars - tailChars;
+	const path = join(tmpdir(), `scream-script-output-${randomBytes(6).toString("hex")}.txt`);
+	let spillNote;
+	try {
+		await writeFile(path, text, "utf8");
+		spillNote = `[Full output: ${path}]`;
+	} catch (error) {
+		spillNote = `[Could not save the full output: ${String(error)}]`;
+	}
+	return { shown: [
+		`Warning: truncated output (original token count: ${Math.ceil(text.length / CHARS_PER_TOKEN)})`,
+		`Total output lines: ${text.split("\n").length}`,
+		"",
+		...headChars > 0 ? [text.slice(0, headChars)] : [],
+		`… (${Math.ceil(removedChars / CHARS_PER_TOKEN)} tokens truncated) …`,
+		...tailChars > 0 ? [text.slice(-tailChars)] : [],
+		"",
+		spillNote
+	].join("\n") };
+}
+function tryStringify(args) {
+	try {
+		return JSON.stringify(args ?? {});
+	} catch {
+		return;
+	}
+}
+function previewOf(serialized) {
+	return truncateChars((serialized ?? "").replaceAll("\n", " "), ARGS_PREVIEW_CHARS);
+}
+function truncateChars(value, max) {
+	return value.length <= max ? value : `${value.slice(0, max)}…`;
+}
+function firstLineOf(description) {
+	return truncateChars(description.split("\n", 1)[0] ?? "", 120);
+}
 /** Families eligible for command-template normalization and segment matching. */
 const COMMAND_FAMILIES = new Set([
 	"git checkout",
@@ -79479,22 +79755,26 @@ var DefaultCompactionStrategy = class {
 		const reservedSize = this.config.reservedContextSize;
 		return reservedSize > 0 && reservedSize < this.maxSize && usedSize + reservedSize >= this.maxSize;
 	}
-	computeCompactCount(messages, source) {
+	computeCompactCount(messages, source, options) {
 		if (source === "manual") {
 			for (let i = messages.length - 1; i > 0; i--) if (canSplitAfter(messages, i)) return i + 1;
 			return 0;
 		}
 		let recentMessages = 1;
+		let keptMessages = 0;
 		let recentUserMessages = 0;
 		let recentSize = 0;
 		let bestN;
 		for (; recentMessages < messages.length; recentMessages++) {
 			const splitIndex = messages.length - recentMessages - 1;
 			const m2 = messages[messages.length - recentMessages];
-			if (m2.role === "user") recentUserMessages++;
-			recentSize += estimateTokensForMessage(m2);
+			if (options?.isRemoved?.(m2) !== true) {
+				keptMessages++;
+				if (m2.role === "user") recentUserMessages++;
+				recentSize += estimateTokensForMessage(m2);
+			}
 			if (canSplitAfter(messages, splitIndex)) bestN = splitIndex + 1;
-			if ((recentMessages >= this.config.maxRecentMessages || recentUserMessages >= this.config.maxRecentUserMessages || recentSize >= this.config.maxRecentTokens || recentSize >= this.maxSize * this.config.maxRecentSizeRatio) && bestN !== void 0) break;
+			if ((keptMessages >= this.config.maxRecentMessages || recentUserMessages >= this.config.maxRecentUserMessages || recentSize >= this.config.maxRecentTokens || recentSize >= this.maxSize * this.config.maxRecentSizeRatio) && bestN !== void 0) break;
 		}
 		return bestN ?? 0;
 	}
@@ -79782,7 +80062,7 @@ var FullCompaction = class {
 		else this.compactionCountInTurn += 1;
 		if (this.compactionCountInTurn > this.strategy.maxCompactionPerTurn) return;
 		if (this.agent.records.restoring) return;
-		const compactedCount = this.strategy.computeCompactCount(this.agent.context.history, data.source);
+		const compactedCount = this.strategy.computeCompactCount(this.agent.context.history, data.source, { isRemoved: (message) => this.agent.context.isMessageRemovedByEdit(message) });
 		if (compactedCount === 0) {
 			if (data.source === "manual") throw new ScreamError(ErrorCodes.COMPACTION_UNABLE, "No prefix that can be compacted in current history.");
 			return;
@@ -79936,7 +80216,7 @@ var FullCompaction = class {
 		const originalHistory = [...this.agent.context.history];
 		const systemPromptTokens = estimateTokens$1(this.agent.getRuntimeSystemPrompt());
 		const toolTokens = estimateTokensForTools(this.agent.tools.loopTools);
-		const tokensBefore = systemPromptTokens + toolTokens + estimateTokensForMessages(originalHistory);
+		const tokensBefore = systemPromptTokens + toolTokens + estimateTokensForMessages(this.agent.context.applyMessageEdits(originalHistory));
 		const model = this.agent.config.model;
 		const isUpdate = extractPreviousSummary(originalHistory) !== null;
 		let retryCount = 0;
@@ -79945,7 +80225,7 @@ var FullCompaction = class {
 			const delays = retryBackoffDelays(5);
 			const summarizeOnce = async (messagesToCompact) => {
 				const instruction = isUpdate ? COMPACTION_UPDATE_INSTRUCTION(data.instruction) : COMPACTION_INSTRUCTION(data.instruction);
-				const messages = [...project(this.agent.microCompaction.compact(messagesToCompact)), {
+				const messages = [...project(this.agent.context.applyMessageEdits(this.agent.microCompaction.compact(messagesToCompact))), {
 					role: "user",
 					content: [{
 						type: "text",
@@ -79978,7 +80258,7 @@ var FullCompaction = class {
 						}
 						this.agent.log.warn("compaction overflow at minimum split, falling back to re-summarize", {
 							compactedCount,
-							tokensBefore: estimateTokensForMessages(messagesToCompact)
+							tokensBefore: estimateTokensForMessages(this.agent.context.applyMessageEdits(messagesToCompact))
 						});
 						const result = await summarizeWithFallback(messagesToCompact, summarizeOnce);
 						summary = result.summary;
@@ -79999,6 +80279,7 @@ var FullCompaction = class {
 				return;
 			}
 			const recent = originalHistory.slice(compactedCount);
+			const projectedRecent = this.agent.context.applyMessageEdits(recent);
 			const messagesToCompactForOps = originalHistory.slice(0, compactedCount);
 			const fileOps = createFileOps();
 			if (this.lastCompactionFiles !== void 0 && extractPreviousSummary(originalHistory) !== null) {
@@ -80009,11 +80290,12 @@ var FullCompaction = class {
 			const toolCallHistory = formatToolCallHistory(messagesToCompactForOps);
 			const skillCandidateSummary = summary;
 			const processedSummary = this.postProcessSummary(summary, fileOps, toolCallHistory, compactedCount);
-			const tokensAfter = systemPromptTokens + toolTokens + estimateTokens$1(processedSummary) + estimateTokensForMessages(recent);
+			const tokensAfter = systemPromptTokens + toolTokens + estimateTokens$1(processedSummary) + estimateTokensForMessages(projectedRecent);
 			const fileLists = computeFileLists(fileOps);
 			const MAX_PERSISTED_FILES = 100;
 			const readFiles = fileLists.readFiles.slice(0, MAX_PERSISTED_FILES);
 			const modifiedFiles = fileLists.modifiedFiles.slice(0, MAX_PERSISTED_FILES);
+			const firstKeptMessageId = originalHistory[compactedCount]?.id;
 			const result = {
 				summary: processedSummary,
 				compactedCount,
@@ -80021,7 +80303,8 @@ var FullCompaction = class {
 				tokensAfter,
 				...readFiles.length > 0 ? { readFiles } : {},
 				...modifiedFiles.length > 0 ? { modifiedFiles } : {},
-				...isUpdate ? { isUpdate: true } : {}
+				...isUpdate ? { isUpdate: true } : {},
+				...firstKeptMessageId !== void 0 ? { firstKeptMessageId } : {}
 			};
 			this.markCompleted();
 			this.agent.emitEvent({
@@ -81734,6 +82017,16 @@ var ContextMemory = class {
 	pendingToolResultIds = /* @__PURE__ */ new Set();
 	deferredMessages = [];
 	/**
+	* Persisted projection edits keyed by message id: `null` removes the
+	* message from the projection, an array replaces its content. The raw
+	* history is never modified — every LLM-bound read path funnels through
+	* {@link applyMessageEdits}.
+	*/
+	_messageEdits = /* @__PURE__ */ new Map();
+	/** Counter behind {@link assignMessageId}. Never reset: ids must stay
+	*  unique for the whole session lifetime, including across clear/undo. */
+	_nextMessageId = 0;
+	/**
 	* Per-message fingerprints captured from the last message list handed to
 	* the LLM via {@link messagesForLLM}. Used to measure prefix stability
 	* across calls: a provider prompt cache only hits when the leading
@@ -81755,7 +82048,8 @@ var ContextMemory = class {
 			tokenCountCoveredMessageCount: this.tokenCountCoveredMessageCount,
 			openSteps: new Map(this.openSteps),
 			pendingToolResultIds: new Set(this.pendingToolResultIds),
-			deferredMessages: [...this.deferredMessages]
+			deferredMessages: [...this.deferredMessages],
+			messageEdits: new Map(this._messageEdits)
 		};
 	}
 	restore(snapshot) {
@@ -81765,6 +82059,9 @@ var ContextMemory = class {
 		this.openSteps = new Map(snapshot.openSteps);
 		this.pendingToolResultIds = new Set(snapshot.pendingToolResultIds);
 		this.deferredMessages = [...snapshot.deferredMessages];
+		this._messageEdits = new Map(snapshot.messageEdits ?? []);
+		for (const message of this._history) this.assignMessageId(message);
+		for (const message of this.deferredMessages) this.assignMessageId(message);
 	}
 	/**
 	* JSON-safe snapshot for wire persistence. `openSteps` values are recorded as
@@ -81779,7 +82076,8 @@ var ContextMemory = class {
 			tokenCountCoveredMessageCount: this.tokenCountCoveredMessageCount,
 			openSteps: [...this.openSteps.entries()].map(([uuid, message]) => [uuid, this._history.indexOf(message)]),
 			pendingToolResultIds: [...this.pendingToolResultIds],
-			deferredMessages: [...this.deferredMessages]
+			deferredMessages: [...this.deferredMessages],
+			...this._messageEdits.size > 0 ? { messageEdits: [...this._messageEdits.entries()] } : {}
 		};
 	}
 	/**
@@ -81801,6 +82099,9 @@ var ContextMemory = class {
 		this.openSteps = openSteps;
 		this.pendingToolResultIds = new Set(snapshot.pendingToolResultIds);
 		this.deferredMessages = [...snapshot.deferredMessages];
+		this._messageEdits = new Map(snapshot.messageEdits ?? []);
+		for (const message of this._history) this.assignMessageId(message);
+		for (const message of this.deferredMessages) this.assignMessageId(message);
 	}
 	appendUserMessage(content, origin = USER_PROMPT_ORIGIN) {
 		this.appendMessage({
@@ -81830,6 +82131,7 @@ var ContextMemory = class {
 		this.openSteps.clear();
 		this.pendingToolResultIds.clear();
 		this.deferredMessages = [];
+		this._messageEdits.clear();
 		this.lastSentFingerprints = [];
 		this.agent.injection.onContextClear();
 		this.agent.microCompaction.reset();
@@ -81898,7 +82200,7 @@ var ContextMemory = class {
 			type: "context.apply_compaction",
 			...summary
 		});
-		this._history = [{
+		const summaryMessage = {
 			role: "assistant",
 			content: [{
 				type: "text",
@@ -81906,13 +82208,20 @@ var ContextMemory = class {
 			}],
 			toolCalls: [],
 			origin: { kind: "compaction_summary" }
-		}, ...this._history.slice(summary.compactedCount)];
+		};
+		this.assignMessageId(summaryMessage);
+		let cut = summary.compactedCount;
+		if (summary.firstKeptMessageId !== void 0) {
+			const byId = this._history.findIndex((m) => m.id === summary.firstKeptMessageId);
+			if (byId >= 0) cut = byId;
+		}
+		this._history = [summaryMessage, ...this._history.slice(cut)];
 		const survivingMessages = new Set(this._history);
 		for (const [uuid, message] of this.openSteps) if (!survivingMessages.has(message)) this.openSteps.delete(uuid);
 		this.flushDeferredMessagesIfToolExchangeClosed();
 		this._tokenCount = summary.tokensAfter;
 		this.tokenCountCoveredMessageCount = this._history.length;
-		this.agent.injection.onContextCompacted(summary.compactedCount);
+		this.agent.injection.onContextCompacted(cut);
 		this.agent.emitStatusUpdated();
 		this.agent.microCompaction.reset();
 		if (!this.agent.records.restoring) this.agent.records.logRecord({
@@ -81921,6 +82230,100 @@ var ContextMemory = class {
 			compactedHistory: [...this.agent.fullCompaction.compactedHistory]
 		});
 	}
+	/**
+	* Apply persisted projection edits to a message list: messages edited to
+	* `null` are dropped; messages with a replacement get a *copy* carrying the
+	* new content (a fresh object keeps the token-estimate WeakMap from
+	* returning the stale count). Messages without an edit — and every message
+	* when no edits exist — pass through unchanged.
+	*
+	* Only what the model sees is affected: the raw history (UI, export, trace,
+	* resume) keeps the original content.
+	*/
+	applyMessageEdits(messages) {
+		if (this._messageEdits.size === 0) return messages;
+		const result = [];
+		for (const message of messages) {
+			const id = message.id;
+			const edit = id === void 0 ? void 0 : this._messageEdits.get(id);
+			if (edit === void 0) result.push(message);
+			else if (edit !== null) result.push({
+				...message,
+				content: [...edit]
+			});
+		}
+		return result;
+	}
+	/** Whether a persisted edit removes this message from the projection. */
+	isMessageRemovedByEdit(message) {
+		const id = message.id;
+		return id !== void 0 && this._messageEdits.get(id) === null;
+	}
+	/**
+	* Persist a projection edit for the message with `targetId`:
+	* `replacement: null` removes the message from every future provider
+	* request; an array replaces its content. The edit is recorded, so it
+	* replays on resume and survives restarts; the raw history message is never
+	* rewritten.
+	*
+	* Live writes validate strictly (the target must exist and be editable).
+	* During replay the same method runs for records read from the wire and
+	* silently skips targets that no longer exist (e.g. the message was
+	* compacted away before the edit replayed) — a newer wire must never fail
+	* to load.
+	*/
+	applyMessageEdit(targetId, replacement) {
+		const index = this._history.findIndex((message) => message.id === targetId);
+		const message = index === -1 ? this.deferredMessages.find((candidate) => candidate.id === targetId) : this._history[index];
+		if (message === void 0) {
+			if (this.agent.records.restoring) return;
+			throw new Error(`context.edit_message: no message with id '${targetId}'`);
+		}
+		if (message.role === "system" || message.origin?.kind === "compaction_summary") {
+			if (this.agent.records.restoring) return;
+			throw new Error(`context.edit_message: message '${targetId}' is not editable`);
+		}
+		const previousEdit = this._messageEdits.get(targetId);
+		const normalized = replacement === null ? null : replacement.map((part) => ({ ...part }));
+		this._messageEdits.set(targetId, normalized);
+		this.agent.records.logRecord({
+			type: "context.edit_message",
+			targetId,
+			replacement: normalized
+		});
+		if (index !== -1 && index < this.tokenCountCoveredMessageCount) {
+			const before = previousEdit === void 0 ? estimateTokensForMessages([message]) : previousEdit === null ? 0 : estimateTokensForMessages([{
+				...message,
+				content: [...previousEdit]
+			}]);
+			const after = normalized === null ? 0 : estimateTokensForMessages([{
+				...message,
+				content: normalized
+			}]);
+			this._tokenCount = Math.max(0, this._tokenCount + after - before);
+		}
+		this.agent.emitStatusUpdated();
+	}
+	/**
+	* Assign a stable id the first time a message enters the history (or when
+	* it is restored from the wire). Mutates the message in place — object
+	* identity is load-bearing: open steps, deferred messages and the history
+	* array all reference the same object. Messages that already carry an id
+	* only advance the counter past it.
+	*/
+	assignMessageId(message) {
+		const existing = message.id;
+		if (existing !== void 0) {
+			const match = /^m(\d+)$/.exec(existing);
+			if (match !== null) {
+				const n = Number(match[1]);
+				if (n >= this._nextMessageId) this._nextMessageId = n + 1;
+			}
+			return;
+		}
+		message.id = `m${this._nextMessageId}`;
+		this._nextMessageId += 1;
+	}
 	data() {
 		return {
 			history: this.history,
@@ -81932,14 +82335,14 @@ var ContextMemory = class {
 	}
 	get tokenCountWithPending() {
 		const pendingMessages = this._history.slice(this.tokenCountCoveredMessageCount);
-		return this._tokenCount + estimateTokensForMessages(project(pendingMessages));
+		return this._tokenCount + estimateTokensForMessages(project(this.applyMessageEdits(pendingMessages)));
 	}
 	get history() {
 		return this._history;
 	}
 	get messages() {
 		this.agent.microCompaction.detect();
-		return project(this.agent.microCompaction.compact(this.history));
+		return project(this.applyMessageEdits(this.agent.microCompaction.compact(this.history)));
 	}
 	/**
 	* Build the message list for an LLM call, with prefix-stability
@@ -81961,7 +82364,7 @@ var ContextMemory = class {
 	*/
 	messagesForLLM() {
 		this.agent.microCompaction.detect();
-		const messages = project(this.agent.microCompaction.compact(this.history), { synthesizeMissing: true });
+		const messages = project(this.applyMessageEdits(this.agent.microCompaction.compact(this.history)), { synthesizeMissing: true });
 		this.observePrefixStability(messages);
 		return messages;
 	}
@@ -82054,6 +82457,7 @@ var ContextMemory = class {
 		}
 	}
 	appendMessage(message) {
+		this.assignMessageId(message);
 		this.agent.records.logRecord({
 			type: "context.append_message",
 			message
@@ -82098,6 +82502,7 @@ var ContextMemory = class {
 		return interruptedToolCallIds.length;
 	}
 	pushHistory(...messages) {
+		for (const message of messages) this.assignMessageId(message);
 		this._history.push(...messages);
 		for (const message of messages) {
 			if (message.origin?.kind === "background_task") this.agent.background.markDeliveredNotification(message.origin);
@@ -85363,7 +85768,11 @@ const WRITE_TOOLS = new Set([
 	"Write"
 ]);
 /** Tools that execute commands. */
-const EXECUTE_TOOLS = new Set(["Bash", "python"]);
+const EXECUTE_TOOLS = new Set([
+	"Bash",
+	"python",
+	"RunScript"
+]);
 /** Nesting/coordination tools — only `all` mode keeps them. A restricted
 *  child must not be able to spawn an unrestricted grandchild (that would
 *  bypass the tool filtering entirely). WolfPack is batch-spawn sugar over
@@ -87370,6 +87779,7 @@ const SNAPSHOT_FOLDED_CONTEXT_TYPES = new Set([
 	"context.append_message",
 	"context.append_loop_event",
 	"context.apply_compaction",
+	"context.edit_message",
 	"micro_compaction.apply",
 	"full_compaction.complete",
 	"request.header"
@@ -88140,9 +88550,9 @@ function asMediaContainer(value) {
 /**
 * Record types whose state is fully captured by a `context.snapshot` record.
 * When a snapshot exists, every one of these that predates it is skipped during
-* replay because the snapshot already holds the folded context memory. Note
-* `micro_compaction.apply` is written with an `as never` cast (it is not part of
-* the AgentRecord union), so it is matched here by its literal type string.
+* replay because the snapshot already holds the folded context memory —
+* including `context.edit_message`, whose edits ride inside the snapshot
+* payload (`messageEdits`).
 *
 * `full_compaction.complete` is included because its only lasting effect is
 * pushing onto `compactedHistory` — a debug trail rendered from the pre-fold
@@ -88244,6 +88654,9 @@ function restoreAgentRecord(agent, input) {
 			agent.context.applyCompaction(input);
 			recoverMemosFromCompactionSummary(agent, input.summary);
 			return;
+		case "context.edit_message":
+			agent.context.applyMessageEdit(input.targetId, input.replacement);
+			return;
 		case "context.snapshot":
 			agent.context.restoreJSONSnapshot(input.snapshot);
 			agent.fullCompaction.restoreCompactedHistory(input.compactedHistory);
@@ -96377,7 +96790,8 @@ async function prepareToolCall(step, call) {
 				toolCallId: call.toolCall.id,
 				toolName: call.toolName,
 				args: call.args,
-				rawArguments: call.toolCall.arguments
+				rawArguments: call.toolCall.arguments,
+				nested: step.nested === true
 			});
 		} catch {
 			reminder = null;
@@ -96448,7 +96862,8 @@ async function runPrepareToolExecutionHook(step, call) {
 			turnId,
 			stepNumber: currentStep,
 			signal,
-			llm
+			llm,
+			nested: step.nested === true
 		});
 	} catch (error) {
 		if (isAbortError$1(error) || signal.aborted) return {
@@ -96491,7 +96906,8 @@ async function runAuthorizeToolExecutionHook(step, call, args, execution) {
 			turnId,
 			stepNumber: currentStep,
 			signal,
-			llm
+			llm,
+			nested: step.nested === true
 		});
 	} catch (error) {
 		if (isAbortError$1(error) || signal.aborted) return {
@@ -96545,7 +96961,8 @@ async function finalizePendingToolResult(step, pendingResult) {
 			turnId,
 			stepNumber: currentStep,
 			signal,
-			llm
+			llm,
+			nested: step.nested === true
 		}) ?? pendingResult.result, pendingResult.toolName);
 		return {
 			...pendingResult,
@@ -96578,6 +96995,10 @@ async function executeTool(step, execution, toolCall, toolName, metadata) {
 		toolCallId: toolCall.id,
 		metadata,
 		signal,
+		runNestedToolCall: {
+			tools: (step.tools ?? []).filter((tool) => tool.name !== toolName),
+			run: (request) => executeNestedToolCall(step, toolName, request)
+		},
 		onUpdate: (update) => {
 			if (signal.aborted) return;
 			dispatchEvent({
@@ -96653,10 +97074,16 @@ function normalizeToolResult(r) {
 		const textJoined = r.output.filter((c) => c.type === "text").map((c) => c.text).join("");
 		output = textJoined.length > 0 ? textJoined : TOOL_OUTPUT_EMPTY;
 	}
+	const nestedCalls = r.isError === true ? void 0 : r.nestedCalls;
+	const nested = nestedCalls !== void 0 ? { nestedCalls } : {};
 	return r.isError === true ? {
 		output,
-		isError: true
-	} : { output };
+		isError: true,
+		...nested
+	} : {
+		output,
+		...nested
+	};
 }
 function makeToolResult(call, args, result) {
 	return {
@@ -96682,6 +97109,7 @@ function makeErrorToolResult(call, args, output) {
 */
 async function dispatchToolCall(step, call, args, displayFields) {
 	const { toolCall, toolName } = call;
+	if (step.nested === true) return;
 	const index = step.toolCallBlockIndex.value++;
 	await step.dispatchEvent({
 		type: "block.start",
@@ -96714,6 +97142,34 @@ async function dispatchToolCall(step, call, args, displayFields) {
 		blockType: "tool-call"
 	});
 }
+/**
+* Run a tool call issued by *another tool* (the script sandbox) through the
+* same pipeline as model-issued calls: preflight validation → prepare and
+* authorize hooks (host hooks + approval) → `resolveExecution` → execution
+* with grace timeout → finalize/normalize.
+*
+* Only the model-visible recording is suppressed: no `block.start` /
+* `tool.call` / `tool.result` events are dispatched, so the orchestrating
+* tool's own result stays the single transcript entry for the whole batch.
+* Everything else — argument validation, hooks, approval, aborts and the
+* grace timeout — behaves exactly like a direct call.
+*/
+async function executeNestedToolCall(step, parentToolName, request) {
+	const tools = (step.tools ?? []).filter((tool) => tool.name !== parentToolName);
+	const toolCall = {
+		type: "function",
+		id: request.callId,
+		name: request.name,
+		arguments: JSON.stringify(request.args ?? {})
+	};
+	const nestedStep = {
+		...step,
+		tools,
+		nested: true,
+		dispatchEvent: async () => {}
+	};
+	return (await finalizePendingToolResult(nestedStep, await (await (await prepareToolCall(nestedStep, preflightToolCall(tools, toolCall))).task.start()).result)).result;
+}
 //#endregion
 //#region ../../packages/agent-core/src/loop/turn-step.ts
 /**
@@ -101279,7 +101735,7 @@ function normalizeSourcePath(path) {
 }
 //#endregion
 //#region ../../packages/agent-core/src/profile/default/agent.yaml
-var agent_default = "name: agent\ndescription: Default Scream Code agent\n\nsystemPromptPath: ./system.md\npromptVars:\n  roleAdditional: ''\n\ntools:\n  - Read\n  - Write\n  - Edit\n  - Grep\n  - Glob\n  - Bash\n  - LSP\n  - TaskList\n  - TaskOutput\n  - TaskStop\n  - CronCreate\n  - CronList\n  - CronDelete\n  - CreateGoal\n  - GetGoal\n  - SetGoalBudget\n  - UpdateGoal\n  - ReadMediaFile\n  - TodoList\n  - MemoryLookup\n  - MemoryConsolidatePlan\n  - MemoryConsolidateApply\n  - MemoryWrite\n  - KnowledgeLookup\n  # Image generation. Like ManagePlugin, registered for main agents only —\n  # subagents inherit the name but never receive the tool.\n  - ImageGenerate\n  - InspectOwnAssets\n  - Skill\n  - MakeSkillPlan\n  - MakeSkillApply\n  # Main-agent capability management. Subagent profiles inherit this list, but\n  # the tool is only registered for main agents, so it never reaches their\n  # model-visible tool set.\n  - ManagePlugin\n  - WebSearch\n  - PaperSearch\n  - Agent\n  - SendSubagentMessage\n  - WolfPack\n\n  - FetchURL\n  - AskUserQuestion\n  - EnterPlanMode\n  - FusionPlan\n  - ExitPlanMode\n  - mcp__*\n\n# Routing text for the parent's `Agent` tool: the description is the \"what\",\n# the profile's own `whenToUse` supplies the \"call me when / do not call me\n# for\" triggers. Keep both short and trigger-shaped so all types stay\n# comparable when the model picks one. This map is the single source of truth:\n# system.md must not restate it.\nsubagents:\n  coder:\n    description: Edits files and runs commands for non-trivial engineering work, then reports a compact, technically complete summary.\n  explore:\n    description: Read-only reconnaissance across files; returns a structured map (summary, inventory, architecture) and never edits.\n  plan:\n    description: Read-only architect; turns a request into a step-by-step, file-level implementation plan with trade-offs.\n  verify:\n    description: Runs the project's real gates (build, test, lint, typecheck) and reports pass/fail with raw command evidence.\n  reviewer:\n    description: Adversarial review of a diff; reports bugs, contract violations and integration risk by severity.\n  oracle:\n    description: Large-scope review of code that already exists — architecture soundness, tech debt, long-term maintainability, dead or redundant code — with evidence and a concrete fix per finding; does not edit unless asked.\n  worker:\n    description: Office and document automation worker; format conversion, batch file processing and file organization, and never code or prose.\n  writer:\n    description: Professional writing and document specialist; drafts, rewrites, translates, summarizes and produces document artifacts.\n  designer:\n    description: 'Visual-layer specialist: UI/UX/TUI design direction, code-grade specs, screen polish, and design audits.'\n";
+var agent_default = "name: agent\ndescription: Default Scream Code agent\n\nsystemPromptPath: ./system.md\npromptVars:\n  roleAdditional: ''\n\ntools:\n  - Read\n  - Write\n  - Edit\n  - Grep\n  - Glob\n  - Bash\n  # Script execution mode (enabled by default): runs model-written JavaScript\n  # in a QuickJS sandbox and calls the tools above from inside the script.\n  # Toggle per session with /script. Main agent only — subagent profiles keep\n  # their own restricted tool lists.\n  - RunScript\n  - LSP\n  - TaskList\n  - TaskOutput\n  - TaskStop\n  - CronCreate\n  - CronList\n  - CronDelete\n  - CreateGoal\n  - GetGoal\n  - SetGoalBudget\n  - UpdateGoal\n  - ReadMediaFile\n  - TodoList\n  - MemoryLookup\n  - MemoryConsolidatePlan\n  - MemoryConsolidateApply\n  - MemoryWrite\n  - KnowledgeLookup\n  # Image generation. Like ManagePlugin, registered for main agents only —\n  # subagents inherit the name but never receive the tool.\n  - ImageGenerate\n  - InspectOwnAssets\n  - Skill\n  - MakeSkillPlan\n  - MakeSkillApply\n  # Main-agent capability management. Subagent profiles inherit this list, but\n  # the tool is only registered for main agents, so it never reaches their\n  # model-visible tool set.\n  - ManagePlugin\n  - WebSearch\n  - PaperSearch\n  - Agent\n  - SendSubagentMessage\n  - WolfPack\n\n  - FetchURL\n  - AskUserQuestion\n  - EnterPlanMode\n  - FusionPlan\n  - ExitPlanMode\n  - mcp__*\n\n# Routing text for the parent's `Agent` tool: the description is the \"what\",\n# the profile's own `whenToUse` supplies the \"call me when / do not call me\n# for\" triggers. Keep both short and trigger-shaped so all types stay\n# comparable when the model picks one. This map is the single source of truth:\n# system.md must not restate it.\nsubagents:\n  coder:\n    description: Edits files and runs commands for non-trivial engineering work, then reports a compact, technically complete summary.\n  explore:\n    description: Read-only reconnaissance across files; returns a structured map (summary, inventory, architecture) and never edits.\n  plan:\n    description: Read-only architect; turns a request into a step-by-step, file-level implementation plan with trade-offs.\n  verify:\n    description: Runs the project's real gates (build, test, lint, typecheck) and reports pass/fail with raw command evidence.\n  reviewer:\n    description: Adversarial review of a diff; reports bugs, contract violations and integration risk by severity.\n  oracle:\n    description: Large-scope review of code that already exists — architecture soundness, tech debt, long-term maintainability, dead or redundant code — with evidence and a concrete fix per finding; does not edit unless asked.\n  worker:\n    description: Office and document automation worker; format conversion, batch file processing and file organization, and never code or prose.\n  writer:\n    description: Professional writing and document specialist; drafts, rewrites, translates, summarizes and produces document artifacts.\n  designer:\n    description: 'Visual-layer specialist: UI/UX/TUI design direction, code-grade specs, screen polish, and design audits.'\n";
 //#endregion
 //#region ../../packages/agent-core/src/profile/default/coder.yaml
 var coder_default = "extends: agent\nname: coder\npromptVars:\n  roleAdditional: |\n    You are now running as a subagent. All the `user` messages are sent by the main agent. The main agent cannot see your context, it can only see your last message when you finish the task. You must treat the parent agent as your caller. Do not directly ask the end user questions. If something is unclear, explain the ambiguity in your final summary to the parent agent.\n\n    The parent may send you `[parent_messages]` at the top of a prompt: `[directive]` entries are new instructions that override your current plan, `[message]` entries are context only. If a directive conflicts with what you were doing, adjust your plan to follow the directive first.\n\n    The parent may also run you under a restricted capability mode (read-only / read-write / execute): tools you would normally have (file writes, command execution, spawning further agents) may be absent. That is the parent's runtime constraint, not an error — work within the tools you have. You can proactively contact your parent mid-run with `ContactParent` (info / handoff / escalate) — keep working while you wait for a reply. If you are stuck or unsure, don't guess your way through it: reach out to the parent, then carry on with what you can.\nwhenToUse: >-\n  USE WHEN: the task needs files edited or commands run in the workspace, spans more than ~3 files, or is mechanical multi-file propagation (rename, migration, type sweep). NOT FOR: read-only investigation (explore), planning (plan), verification-only requests on code you did not change (verify), reviewing a diff (reviewer).\ntools:\n  - ContactParent\n  - Bash\n  - Read\n  - ReadMediaFile\n  - Glob\n  - Grep\n  - Write\n  - Edit\n  - LSP\n  - WebSearch\n  - PaperSearch\n  - FetchURL\n  - MemoryLookup\n  - MemoryConsolidatePlan\n  - MemoryConsolidateApply\n  - mcp__*\n";
@@ -102309,7 +102765,22 @@ var ToolManager = class {
 	loopToolsFor(filter) {
 		const mcpNames = [...this.mcpTools.keys()].filter((name) => filter.mcpPatterns.some((pattern) => import_picomatch.default.isMatch(name, pattern)));
 		const hideGoalMutationTools = this.agent.goal.getGoal().goal === null;
-		return uniq([...filter.names, ...mcpNames]).toSorted((a, b) => a.localeCompare(b)).filter((name) => !(hideGoalMutationTools && (name === "SetGoalBudget" || name === "UpdateGoal" || name === "WriteGoalNote"))).map((name) => this.userTools.get(name) ?? this.mcpTools.get(name)?.tool ?? this.builtinTools.get(name)).filter((tool) => !!tool);
+		const tools = uniq([...filter.names, ...mcpNames]).toSorted((a, b) => a.localeCompare(b)).filter((name) => !(hideGoalMutationTools && (name === "SetGoalBudget" || name === "UpdateGoal" || name === "WriteGoalNote"))).map((name) => this.userTools.get(name) ?? this.mcpTools.get(name)?.tool ?? this.builtinTools.get(name)).filter((tool) => !!tool);
+		return this.decorateScriptOffering(tools);
+	}
+	/**
+	* The script sandbox advertises exactly the tools a script may call, so its
+	* description is rebuilt against this step's offered set (the class-level
+	* description is the empty-set fallback). Matches the built-in instance by
+	* identity on purpose: a user tool that happens to reuse the name must not
+	* be re-decorated or lose its own description.
+	*/
+	decorateScriptOffering(tools) {
+		const scriptTool = this.builtinTools.get(SCRIPT_TOOL_NAME);
+		if (scriptTool === void 0 || !tools.includes(scriptTool)) return tools;
+		const callable = tools.filter((tool) => tool !== scriptTool);
+		const decorated = Object.assign(Object.create(Object.getPrototypeOf(scriptTool)), scriptTool, { description: buildScriptToolDescription(callable) });
+		return tools.map((tool) => tool === scriptTool ? decorated : tool);
 	}
 	*toolInfos() {
 		for (const tool of this.builtinTools.values()) yield {
@@ -102364,6 +102835,7 @@ var ToolManager = class {
 				availableTools: this.enabledTools
 			}),
 			new PythonTool(cwd, { hostHandlers: createRlmHostHandlers(this.agent) }),
+			new ScriptTool(this.toolStore),
 			(modelCapabilities.image_in || modelCapabilities.video_in) && new ReadMediaFileTool(jian, workspace, modelCapabilities, videoUploader),
 			new EnterPlanModeTool(this.agent),
 			new ExitPlanModeTool(this.agent),
@@ -102535,7 +103007,8 @@ function mapLoopEvent(event, turnId) {
 			output: event.result.output,
 			isError: event.result.isError,
 			display: event.result.isError === true ? void 0 : event.result.display,
-			message: event.result.message
+			message: event.result.message,
+			nestedCalls: event.result.isError === true ? void 0 : event.result.nestedCalls
 		};
 		case "turn.interrupted":
 			if (event.activeStep === void 0) return void 0;
@@ -103480,6 +103953,7 @@ var TurnFlow = class {
 							return { continue: false };
 						},
 						prepareToolExecution: async (ctx) => {
+							if (ctx.nested === true) return void 0;
 							const cached = deduper.checkSameStep(ctx.toolCall.id, ctx.toolCall.name, ctx.args);
 							if (cached !== null) return { syntheticResult: cached };
 							if (ctx.toolCall.name === "Bash" && typeof ctx.args.command === "string") {
@@ -103495,9 +103969,9 @@ var TurnFlow = class {
 						authorizeToolExecution: async (ctx) => {
 							return this.agent.permission.beforeToolCall(ctx);
 						},
-						onToolCallRejected: async ({ toolCallId, toolName, args, rawArguments }) => deduper.registerSkipped(toolCallId, toolName, args, rawArguments),
+						onToolCallRejected: async ({ toolCallId, toolName, args, rawArguments, nested }) => nested === true ? void 0 : deduper.registerSkipped(toolCallId, toolName, args, rawArguments),
 						finalizeToolResult: async (ctx) => {
-							const finalResult = await deduper.finalizeResult(ctx.toolCall.id, ctx.toolCall.name, ctx.args, ctx.result);
+							const finalResult = ctx.nested === true ? ctx.result : await deduper.finalizeResult(ctx.toolCall.id, ctx.toolCall.name, ctx.args, ctx.result);
 							const { isError, output } = finalResult;
 							this.agent.sessionMemory.recordToolExecution(ctx.toolCall.name, summarizeToolArgs(ctx.args), isError === true, ctx.stepNumber);
 							this.recordWorkingSetPaths(ctx.toolCall.name, ctx.args, Number(ctx.turnId));
@@ -104242,6 +104716,29 @@ var Agent = class {
 		return this.rlmEnabled;
 	}
 	/**
+	* Enables or disables the script execution mode (`undefined` toggles) and
+	* returns the resulting state. On enable, the `RunScript` tool joins the
+	* active tools; on disable it is removed.
+	*
+	* The main agent's profile enables `RunScript` by default, so the agent-level
+	* default (not in the active list) only applies to callers that build their
+	* own tool list. No dedicated enter/exit record is needed (unlike RLM): the
+	* tool list itself is replayed from `tools.set_active_tools`, so resume
+	* restores the state automatically.
+	*/
+	setScriptEnabled(enabled) {
+		const current = this.tools.getActiveTools();
+		const next = enabled ?? !current.includes("RunScript");
+		if (next) {
+			if (!current.includes("RunScript")) this.tools.setActiveTools([...current, "RunScript"]);
+		} else {
+			const withoutScript = current.filter((name) => name !== "RunScript");
+			if (withoutScript.length !== current.length) this.tools.setActiveTools(withoutScript);
+		}
+		this.emitStatusUpdated();
+		return next;
+	}
+	/**
 	* Lets a subagent inherit RLM mode from its parent at spawn time: mounts
 	* the python tool (so the child can keep recursing) and records rlm.enter,
 	* mirroring setRlmEnabled(true). The rlm.enter record keeps enter/exit
@@ -104494,6 +104991,7 @@ var Agent = class {
 			setRlmEnabled: (payload) => {
 				this.setRlmEnabled(payload.enabled);
 			},
+			setScriptEnabled: (payload) => this.setScriptEnabled(payload.enabled),
 			setRlmMaxDepth: (payload) => {
 				this.setRlmMaxDepth(payload.maxDepth);
 			},
@@ -125954,6 +126452,9 @@ var SessionAPIImpl = class {
 	setRlmEnabled({ agentId, ...payload }) {
 		return this.getAgent(agentId).setRlmEnabled(payload);
 	}
+	setScriptEnabled({ agentId, ...payload }) {
+		return this.getAgent(agentId).setScriptEnabled(payload);
+	}
 	setRlmMaxDepth({ agentId, ...payload }) {
 		return this.getAgent(agentId).setRlmMaxDepth(payload);
 	}
@@ -126965,6 +127466,9 @@ var ScreamCore = class {
 	setRlmEnabled({ sessionId, ...payload }) {
 		return this.sessionApi(sessionId).setRlmEnabled(payload);
 	}
+	setScriptEnabled({ sessionId, ...payload }) {
+		return this.sessionApi(sessionId).setScriptEnabled(payload);
+	}
 	setRlmMaxDepth({ sessionId, ...payload }) {
 		return this.sessionApi(sessionId).setRlmMaxDepth(payload);
 	}
@@ -128045,6 +128549,13 @@ var SDKRpcClient = class {
 			enabled: input.enabled
 		});
 	}
+	async setScriptEnabled(input) {
+		return (await this.getRpc()).setScriptEnabled({
+			sessionId: input.sessionId,
+			agentId: this.interactiveAgentId,
+			enabled: input.enabled
+		});
+	}
 	async setRlmMaxDepth(input) {
 		return (await this.getRpc()).setRlmMaxDepth({
 			sessionId: input.sessionId,
@@ -128501,6 +129012,20 @@ var Session = class {
 			enabled
 		});
 	}
+	/**
+	* Enables or disables the `/script` execution mode (no argument toggles)
+	* and resolves to the resulting state. When enabled, the `RunScript` tool
+	* (QuickJS sandbox that batches tool calls) joins the active tools; when
+	* disabled it is removed. The main agent starts with it enabled
+	* (`profile/default/agent.yaml`).
+	*/
+	async setScriptEnabled(enabled) {
+		this.ensureOpen();
+		return this.rpc.setScriptEnabled({
+			sessionId: this.id,
+			enabled
+		});
+	}
 	/** Sets the maximum RLM recursion depth (default 1). Depth 1 means the root
 	* kernel may spawn rlm() children but they cannot spawn grandchildren. */
 	async setRlmMaxDepth(maxDepth) {
@@ -129674,6 +130199,13 @@ const BUILTIN_SLASH_COMMANDS = [
 		priority: 215,
 		availability: "always"
 	},
+	{
+		name: "script",
+		aliases: ["script"],
+		description: "registry.script_desc",
+		priority: 214,
+		availability: "always"
+	},
 	{
 		name: "rlm-max-depth",
 		aliases: [],
@@ -135099,6 +135631,27 @@ async function handleRlmCommand(host, args) {
 		host.showError(`Failed to set rlm mode: ${msg}`);
 	}
 }
+/** /script [on|off] — toggle the script execution mode (sandboxed batch tool). */
+async function handleScriptCommand(host, args) {
+	const session = host.session;
+	if (session === void 0) {
+		host.showError(getNoActiveSessionMessage());
+		return;
+	}
+	const subcmd = args.trim().toLowerCase();
+	if (subcmd !== "" && subcmd !== "on" && subcmd !== "off") {
+		host.showError("Usage: /script [on|off]");
+		return;
+	}
+	const requested = subcmd === "" ? void 0 : subcmd === "on";
+	try {
+		const enabled = await session.setScriptEnabled(requested);
+		host.showNotice(t(enabled ? "config.script_on" : "config.script_off"));
+	} catch (error) {
+		const msg = formatErrorMessage(error);
+		host.showError(`Failed to set script mode: ${msg}`);
+	}
+}
 /** /rlm-max-depth [N] — query or set the maximum RLM recursion depth.
 * N=0 or no limit means unlimited (the default). */
 async function handleRlmMaxDepthCommand(host, args) {
@@ -136367,7 +136920,7 @@ async function guidedGoalSetup(host) {
 		host.showNotice(t("goal.storm_breaker"), t("goal.conflict_loop"));
 		return;
 	}
-	const { TextInputDialogComponent } = await import("./text-input-dialog-DQaJf2zB.mjs");
+	const { TextInputDialogComponent } = await import("./text-input-dialog-DcjQLJFz.mjs");
 	const initialDesc = await promptText(host, TextInputDialogComponent, {
 		title: t("goal.setup_title_initial"),
 		subtitle: t("goal.setup_desc_hint"),
@@ -136388,7 +136941,7 @@ async function guidedGoalSetup(host) {
 	await showGoalConfigWizard(host, session, confirmed.trim() || objective, false);
 }
 async function showGoalConfigWizard(host, session, objective, replace) {
-	const { TextInputDialogComponent } = await import("./text-input-dialog-DQaJf2zB.mjs");
+	const { TextInputDialogComponent } = await import("./text-input-dialog-DcjQLJFz.mjs");
 	const turnInput = await promptNumber(host, TextInputDialogComponent, {
 		title: t("goal.wizard_title", { objective }),
 		subtitle: t("goal.budget_turns_hint"),
@@ -137579,11 +138132,12 @@ const BRANCH_PIPE = "  │  ";
 const TREE_PIPE_ROW = "  │";
 const THINKING_BODY_PREFIX = "     ";
 /**
-* Extra indent for reasoning rows. Tool bodies carry their own three-cell
-* line-number gutter (`   1  /**`), so reasoning text needs the same offset to
-* land in one column with them instead of three cells to their left.
+* Extra indent shared by every body row of a block. File and diff bodies
+* reserve three cells for their line-number gutter (`   1  /**`), so tool
+* bodies, reasoning rows and hints all start at that same content column
+* instead of sitting three cells to its left.
 */
-const THINKING_TEXT_INDENT = "   ";
+const BODY_TEXT_INDENT = "   ";
 /** Cells of a background task notice bullet (`⠋ ` / `✓ ` / `✗ `). */
 const NOTICE_BULLET_WIDTH = 2;
 const THROTTLE_MS = 200;
@@ -138053,7 +138607,7 @@ var ActivityGroupComponent = class extends Container {
 		}
 		if (hidden > 0) {
 			const summary = t("activitygroup.segments_hidden", { count: String(hidden) });
-			this.bodyContainer.addChild(new Text(`${BRANCH_PIPE}${chalk.dim(summary)}`, 0, 0));
+			this.bodyContainer.addChild(new Text(`${BRANCH_PIPE}${BODY_TEXT_INDENT}${chalk.dim(summary)}`, 0, 0));
 		}
 	}
 	/** Renders one step of the timeline: its branch row plus its own body rows. */
@@ -138062,7 +138616,7 @@ var ActivityGroupComponent = class extends Container {
 			const row = this.toolRow(segment.tc, width, getActivityLines().expandedTool, !this.running);
 			const components = [new Text(`${isLast ? BRANCH_LAST : BRANCH_FIRST}${this.statusGlyph(row)} ${row.header}`, 0, 0)];
 			const continuation = isLast ? THINKING_BODY_PREFIX : BRANCH_PIPE;
-			for (const line of row.body) components.push(new Text(`${continuation}${line}`, 0, 0));
+			for (const line of row.body) components.push(new Text(`${continuation}${BODY_TEXT_INDENT}${line}`, 0, 0));
 			return {
 				components,
 				cost: 1 + row.body.length
@@ -138111,7 +138665,7 @@ var ActivityGroupComponent = class extends Container {
 		const components = [new Text(`${isLast ? BRANCH_LAST : BRANCH_FIRST}${this.thinkingGlyph(segment)}${chalk.hex(colors.roleThinking)(t("activitygroup.thinking_label"))}`, 0, 0)];
 		let cost = 1;
 		const budget = getActivityLines().expandedThinking;
-		const textPrefix = `${continuation}${THINKING_TEXT_INDENT}`;
+		const textPrefix = `${continuation}${BODY_TEXT_INDENT}`;
 		const inner = Math.max(1, width - visibleWidth(textPrefix));
 		const height = (line) => new WrappedLine(textPrefix, textPrefix, line).render(inner).length;
 		let selected = segment.live ? lines.slice(-budget) : lines.slice(0, budget);
@@ -148080,6 +148634,9 @@ async function handleBuiltInSlashCommand(host, name, args) {
 		case "rlm":
 			await handleRlmCommand(host, args);
 			return;
+		case "script":
+			await handleScriptCommand(host, args);
+			return;
 		case "rlm-max-depth":
 			await handleRlmMaxDepthCommand(host, args);
 			return;

package/dist/{dispatch-DjLS5cab.mjs → dispatch-DRdBQorE.mjs}

@@ -3,5 +3,5 @@ import { fileURLToPath as __cjsShimFileURLToPath } from 'node:url';
 import { dirname as __cjsShimDirname } from 'node:path';
 const __filename = __cjsShimFileURLToPath(import.meta.url);
 const __dirname = __cjsShimDirname(__filename);
-import { rn as handleConnectCommand } from "./dispatch-DCzx4R71.mjs";
+import { rn as handleConnectCommand } from "./dispatch-DFFuylzQ.mjs";
 export { handleConnectCommand };

package/dist/main.mjs

@@ -6,7 +6,7 @@ const __dirname = __cjsShimDirname(__filename);
 import "./suppress-sqlite-warning-C2VB0doZ.mjs";
 //#region src/main.ts
 try {
-	(await import("./app-CujwBxt8.mjs")).main();
+	(await import("./app-y8MJHp3H.mjs")).main();
 } catch (error) {
 	process.stderr.write(`${error instanceof Error ? error.stack ?? error.message : String(error)}\n`);
 	process.exit(1);

package/dist/{text-input-dialog-BoxTq4a3.mjs → text-input-dialog-CD0sakGq.mjs}

@@ -1171,6 +1171,8 @@ const dictionaries = {
 		"config.ask_already_on": "ASK 模式已开启",
 		"config.ask_already_off": "ASK 模式已关闭",
 		"config.rlm_on": "RLM 模式已开启 — 持久化 Python 内核可用",
+		"config.script_on": "脚本模式已开启 — RunScript 可在沙箱中批量调用工具",
+		"config.script_off": "脚本模式已关闭 — RunScript 已从工具中移除",
 		"config.rlm_off": "RLM 模式已关闭",
 		"config.rlm_usage": "用法: /rlm (切换) | /rlm on | /rlm off",
 		"config.auto_already_on": "自动模式已开启",
@@ -1221,6 +1223,7 @@ const dictionaries = {
 		"registry.bot_desc": "切换无人值守 Bot 模式(bot)",
 		"registry.ask_desc": "切换至只读问答模式(ask)",
 		"registry.rlm_desc": "RLM 模式：面向长任务的持久 Python 工作环境，支持无限递归子代理(/rlm 切换开关)",
+		"registry.script_desc": "脚本模式：在沙箱中运行 JavaScript 批量调用工具(/script 切换)",
 		"registry.rlm_max_depth_desc": "设置 RLM 递归深度上限(/rlm-max-depth N)",
 		"registry.wolfpack_desc": "切换群狼协作模式，自动批准+批量并发",
 		"registry.sessions_desc": "浏览并恢复会话",
@@ -2478,6 +2481,8 @@ const dictionaries = {
 		"config.ask_already_on": "ASK mode is already on",
 		"config.ask_already_off": "ASK mode is already off",
 		"config.rlm_on": "RLM mode enabled — persistent python kernel available",
+		"config.script_on": "Script mode enabled — RunScript can batch tool calls from a sandbox",
+		"config.script_off": "Script mode disabled — RunScript removed from the tools",
 		"config.rlm_off": "RLM mode disabled",
 		"config.rlm_usage": "Usage: /rlm (toggle) | /rlm on | /rlm off",
 		"config.auto_already_on": "Auto mode is already on",
@@ -2528,6 +2533,7 @@ const dictionaries = {
 		"registry.bot_desc": "Toggle unattended bot mode (bot)",
 		"registry.ask_desc": "Toggle read-only Q&A mode (ask)",
 		"registry.rlm_desc": "RLM mode: a persistent Python workspace for long-running tasks with unlimited recursive subagents (/rlm toggles)",
+		"registry.script_desc": "Script mode: run JavaScript in a sandbox that batches tool calls (/script toggles)",
 		"registry.rlm_max_depth_desc": "Set RLM recursion depth limit (/rlm-max-depth N)",
 		"registry.wolfpack_desc": "Toggle wolfpack mode, auto-approve + batch concurrency",
 		"registry.sessions_desc": "Browse and restore sessions",

package/dist/{text-input-dialog-DQaJf2zB.mjs → text-input-dialog-DcjQLJFz.mjs}

@@ -3,5 +3,5 @@ import { fileURLToPath as __cjsShimFileURLToPath } from 'node:url';
 import { dirname as __cjsShimDirname } from 'node:path';
 const __filename = __cjsShimFileURLToPath(import.meta.url);
 const __dirname = __cjsShimDirname(__filename);
-import { t as TextInputDialogComponent } from "./text-input-dialog-BoxTq4a3.mjs";
+import { t as TextInputDialogComponent } from "./text-input-dialog-CD0sakGq.mjs";
 export { TextInputDialogComponent };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "scream-code",
-  "version": "0.17.5",
+  "version": "0.17.6",
   "description": "A terminal-native AI agent for builders",
   "license": "MIT",
   "author": "ScreamCli",
@@ -55,6 +55,7 @@
     "smoke": "node dist/main.mjs --version"
   },
   "dependencies": {
+    "@earendil-works/pi-codemode": "0.99.1",
     "@fontsource-variable/inter": "^5.3.0",
     "@fontsource-variable/jetbrains-mono": "^5.3.0",
     "@liutod-scream/pi-tui": "^0.87.1",