browsentic 0.7.5 → 0.7.6

package/dist/daemon-main.js

@@ -66,13 +66,13 @@ var require_buffer_util = __commonJS({
     "use strict";
     var { EMPTY_BUFFER } = require_constants();
     var FastBuffer = Buffer[Symbol.species];
-    function concat(list2, totalLength) {
-      if (list2.length === 0) return EMPTY_BUFFER;
-      if (list2.length === 1) return list2[0];
+    function concat(list3, totalLength) {
+      if (list3.length === 0) return EMPTY_BUFFER;
+      if (list3.length === 1) return list3[0];
       const target = Buffer.allocUnsafe(totalLength);
       let offset = 0;
-      for (let i = 0; i < list2.length; i++) {
-        const buf = list2[i];
+      for (let i = 0; i < list3.length; i++) {
+        const buf = list3[i];
         target.set(buf, offset);
         offset += buf.length;
       }
@@ -313,30 +313,30 @@ var require_permessage_deflate = __commonJS({
        */
       acceptAsServer(offers) {
         const opts = this._options;
-        const accepted = offers.find((params) => {
+        const accepted2 = offers.find((params) => {
           if (opts.serverNoContextTakeover === false && params.server_no_context_takeover || params.server_max_window_bits && (opts.serverMaxWindowBits === false || typeof opts.serverMaxWindowBits === "number" && opts.serverMaxWindowBits > params.server_max_window_bits) || typeof opts.clientMaxWindowBits === "number" && !params.client_max_window_bits) {
             return false;
           }
           return true;
         });
-        if (!accepted) {
+        if (!accepted2) {
           throw new Error("None of the extension offers can be accepted");
         }
         if (opts.serverNoContextTakeover) {
-          accepted.server_no_context_takeover = true;
+          accepted2.server_no_context_takeover = true;
         }
         if (opts.clientNoContextTakeover) {
-          accepted.client_no_context_takeover = true;
+          accepted2.client_no_context_takeover = true;
         }
         if (typeof opts.serverMaxWindowBits === "number") {
-          accepted.server_max_window_bits = opts.serverMaxWindowBits;
+          accepted2.server_max_window_bits = opts.serverMaxWindowBits;
         }
         if (typeof opts.clientMaxWindowBits === "number") {
-          accepted.client_max_window_bits = opts.clientMaxWindowBits;
-        } else if (accepted.client_max_window_bits === true || opts.clientMaxWindowBits === false) {
-          delete accepted.client_max_window_bits;
+          accepted2.client_max_window_bits = opts.clientMaxWindowBits;
+        } else if (accepted2.client_max_window_bits === true || opts.clientMaxWindowBits === false) {
+          delete accepted2.client_max_window_bits;
         }
-        return accepted;
+        return accepted2;
       }
       /**
        * Accept the extension negotiation response.
@@ -1858,14 +1858,14 @@ var require_sender = __commonJS({
        * @param {Function} [cb] Callback
        * @private
        */
-      sendFrame(list2, cb) {
-        if (list2.length === 2) {
+      sendFrame(list3, cb) {
+        if (list3.length === 2) {
           this._socket.cork();
-          this._socket.write(list2[0]);
-          this._socket.write(list2[1], cb);
+          this._socket.write(list3[0]);
+          this._socket.write(list3[1], cb);
           this._socket.uncork();
         } else {
-          this._socket.write(list2[0], cb);
+          this._socket.write(list3[0], cb);
         }
       }
     };
@@ -3057,16 +3057,16 @@ var require_websocket = __commonJS({
         process.nextTick(cb, err);
       }
     }
-    function receiverOnConclude(code, reason) {
+    function receiverOnConclude(code, reason2) {
       const websocket = this[kWebSocket];
       websocket._closeFrameReceived = true;
-      websocket._closeMessage = reason;
+      websocket._closeMessage = reason2;
       websocket._closeCode = code;
       if (websocket._socket[kWebSocket] === void 0) return;
       websocket._socket.removeListener("data", socketOnData);
       process.nextTick(resume, websocket._socket);
       if (code === 1005) websocket.close();
-      else websocket.close(code, reason);
+      else websocket.close(code, reason2);
     }
     function receiverOnDrain() {
       const websocket = this[kWebSocket];
@@ -3722,7 +3722,7 @@ var import_websocket = __toESM(require_websocket(), 1);
 var import_websocket_server = __toESM(require_websocket_server(), 1);
 
 // ../lib/actions/protocol.ts
-var SOCKET_PROTOCOL_VERSION = 18;
+var SOCKET_PROTOCOL_VERSION = 19;
 var EXTERNAL_RUN_ID = "external";
 var DAEMON_PORTS = [8765, 8766, 8767];
 var EXTENSION_REQUEST_FRAMES = [
@@ -18536,13 +18536,13 @@ function scanStyleSheets(maxRules) {
   };
   for (const sheet of sheets) {
     if (!sheet.href) counts.inline += 1;
-    const list2 = readable(sheet);
-    if (!list2) {
+    const list3 = readable(sheet);
+    if (!list3) {
       counts.crossOrigin += 1;
       continue;
     }
     counts.readable += 1;
-    for (const rule of list2) visit(rule);
+    for (const rule of list3) visit(rule);
   }
   return {
     sheets: counts,
@@ -19369,7 +19369,7 @@ async function nativeDrag(source, plan) {
   firePointer(source, "pointerdown", "mousedown", grip, 1);
   await settle(holdMs);
   const started = fireDrag(source, "dragstart", grip, dataTransfer);
-  let accepted = false;
+  let accepted2 = false;
   let entered = null;
   await travel(grip, drop, steps, 1, (at) => {
     const over = elementAt(at);
@@ -19378,13 +19378,13 @@ async function nativeDrag(source, plan) {
       fireDrag(over, "dragenter", at, dataTransfer);
       entered = over;
     }
-    if (over && !fireDrag(over, "dragover", at, dataTransfer)) accepted = true;
+    if (over && !fireDrag(over, "dragover", at, dataTransfer)) accepted2 = true;
   });
   await settle(settleMs);
   const landing = elementAt(drop);
   fireDrag(landing, "drop", drop, dataTransfer);
   fireDrag(source, "dragend", drop, dataTransfer);
-  return { landedOn: landing ? cssPath(landing) : void 0, started, accepted };
+  return { landedOn: landing ? cssPath(landing) : void 0, started, accepted: accepted2 };
 }
 var dragElement = defineAction({
   name: "page.dragElement",
@@ -21723,7 +21723,8 @@ var AGENTS = {
     bin: "claude",
     install: "npm i -g @anthropic-ai/claude-code",
     docs: "https://claude.com/claude-code",
-    models: ["claude-fable-5", "claude-opus-5", "claude-sonnet-5", "claude-haiku-4-5"]
+    // Claude Code resolves each alias to the newest model of that family, so this list does not age.
+    models: ["fable", "opus", "sonnet", "haiku"]
   },
   codex: {
     kind: "codex",
@@ -21741,7 +21742,7 @@ var AGENTS = {
     bin: "agy",
     install: "https://antigravity.google/docs/cli/install",
     docs: "https://antigravity.google/docs/cli",
-    models: ["gemini-3-pro", "gemini-3-flash"]
+    models: ["gemini-3.1-pro-high", "gemini-3.8-flash-high", "gemini-3.8-flash-medium"]
   },
   vibe: {
     kind: "vibe",
@@ -21770,8 +21771,7 @@ var AGENTS = {
     bin: "cursor-agent",
     install: "curl https://cursor.com/install -fsS | bash",
     docs: "https://cursor.com/docs/cli/overview",
-    // `cursor-agent models` lists the account's own set, but it needs a login, so these are curated.
-    models: ["composer-2.5", "claude-opus-4-8", "gpt-5", "sonnet-4-thinking"],
+    models: ["auto", "composer-2.5", "claude-opus-5-thinking-high", "gpt-5.3-codex"],
     beta: true
   },
   qwen: {
@@ -21803,6 +21803,9 @@ var AGENT_LIST = AGENT_KINDS.map((kind) => AGENTS[kind]);
 function isAgentKind(value) {
   return typeof value === "string" && AGENT_KINDS.includes(value);
 }
+function isModelId(value) {
+  return typeof value === "string" && /^[A-Za-z0-9][^\s\p{C}]{0,199}$/u.test(value);
+}
 function activeRunner(state) {
   return state?.runners.find((runner) => runner.kind === state.active);
 }
@@ -21814,7 +21817,7 @@ import { homedir as homedir3 } from "os";
 import { basename, isAbsolute as isAbsolute2, join as join5, resolve, sep } from "path";
 
 // agent/config.ts
-import { mkdirSync as mkdirSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "fs";
+import { mkdirSync as mkdirSync3, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "fs";
 import { join as join3 } from "path";
 
 // ../lib/settings/guardrails.ts
@@ -21857,6 +21860,31 @@ function clearLockfile() {
   rmSync(lockfilePath, { force: true });
 }
 
+// log.ts
+import { appendFileSync, mkdirSync as mkdirSync2, renameSync, statSync } from "fs";
+var MAX_BYTES = 2 * 1024 * 1024;
+function log(message, detail) {
+  const line2 = `${(/* @__PURE__ */ new Date()).toISOString()} ${message}${detail === void 0 ? "" : ` ${format(detail)}`}
+`;
+  try {
+    mkdirSync2(stateDir, { recursive: true, mode: 448 });
+    rotateIfLarge();
+    appendFileSync(logPath, line2);
+  } catch {
+  }
+  if (process.env.BROWSENTIC_DEBUG) process.stderr.write(line2);
+}
+function rotateIfLarge() {
+  try {
+    if (statSync(logPath).size > MAX_BYTES) renameSync(logPath, `${logPath}.1`);
+  } catch {
+  }
+}
+function format(detail) {
+  if (detail instanceof Error) return `${detail.name}: ${detail.message}`;
+  return typeof detail === "string" ? detail : JSON.stringify(detail);
+}
+
 // agent/config.ts
 var CONCURRENT_RUNS = { fallback: 3, max: 8 };
 function maxConcurrentRuns(config5) {
@@ -21883,7 +21911,7 @@ function clamp2(value, { fallback, max }) {
 }
 var configPath = join3(stateDir, "config.json");
 var DEFAULT_MODEL = {
-  claude: "claude-sonnet-5"
+  claude: "sonnet"
 };
 var DEFAULT_APPROVALS = ["page.submitForm"];
 function readStored() {
@@ -21910,11 +21938,17 @@ function settingsFor(stored, kind) {
   const legacy = kind === "claude" ? { bin: stored.claudeBin, model: stored.model, effort: stored.effort } : {};
   return {
     bin: text(scoped.bin) ?? text(legacy.bin) ?? AGENTS[kind].bin,
-    model: text(scoped.model) ?? text(legacy.model) ?? DEFAULT_MODEL[kind],
+    model: modelOf(kind, scoped.model) ?? modelOf(kind, legacy.model) ?? DEFAULT_MODEL[kind],
     effort: text(scoped.effort) ?? text(legacy.effort)
   };
 }
 var text = (value) => typeof value === "string" && value.trim() ? value.trim() : void 0;
+function modelOf(kind, value) {
+  const model = text(value);
+  if (model === void 0 || isModelId(model)) return model;
+  log(`ignoring ${kind} model ${JSON.stringify(model)} \u2014 a model id starts with a letter or digit and has no spaces`);
+  return void 0;
+}
 function activeAgent(config5) {
   return { kind: config5.agent, ...config5.agents[config5.agent] };
 }
@@ -21923,10 +21957,11 @@ function writeActiveAgent(kind) {
   write({ ...stored, agent: kind });
 }
 function writeAgentModel(kind, model) {
+  const value = text(model);
+  if (value !== void 0 && !isModelId(value)) return false;
   const stored = readStored();
   const agents = { ...stored.agents ?? {} };
   const scoped = { ...agents[kind] ?? {} };
-  const value = text(model);
   if (value) scoped.model = value;
   else delete scoped.model;
   if (Object.keys(scoped).length) agents[kind] = scoped;
@@ -21936,6 +21971,7 @@ function writeAgentModel(kind, model) {
   else delete next.agents;
   if (kind === "claude") delete next.model;
   write(next);
+  return true;
 }
 function writeGuardrailSetting(setting, value) {
   const stored = readStored();
@@ -21959,7 +21995,7 @@ function writeGuardrailSetting(setting, value) {
   write(next);
 }
 function write(config5) {
-  mkdirSync2(stateDir, { recursive: true, mode: 448 });
+  mkdirSync3(stateDir, { recursive: true, mode: 448 });
   writeFileSync2(configPath, `${JSON.stringify(config5, null, 2)}
 `, { mode: 384 });
 }
@@ -22110,31 +22146,6 @@ function fail(message) {
   return { ok: false, message };
 }
 
-// log.ts
-import { appendFileSync, mkdirSync as mkdirSync3, renameSync, statSync } from "fs";
-var MAX_BYTES = 2 * 1024 * 1024;
-function log(message, detail) {
-  const line2 = `${(/* @__PURE__ */ new Date()).toISOString()} ${message}${detail === void 0 ? "" : ` ${format(detail)}`}
-`;
-  try {
-    mkdirSync3(stateDir, { recursive: true, mode: 448 });
-    rotateIfLarge();
-    appendFileSync(logPath, line2);
-  } catch {
-  }
-  if (process.env.BROWSENTIC_DEBUG) process.stderr.write(line2);
-}
-function rotateIfLarge() {
-  try {
-    if (statSync(logPath).size > MAX_BYTES) renameSync(logPath, `${logPath}.1`);
-  } catch {
-  }
-}
-function format(detail) {
-  if (detail instanceof Error) return `${detail.name}: ${detail.message}`;
-  return typeof detail === "string" ? detail : JSON.stringify(detail);
-}
-
 // agent/skills.ts
 var bundledDir = join4(dirname2(fileURLToPath2(import.meta.url)), "..", "skills");
 var userDir2 = join4(stateDir, "skills");
@@ -23111,16 +23122,16 @@ function decide(request, policy = POLICY) {
     "allow"
   );
   const decisive = matched.filter((rule) => rule.effect === worst);
-  const reason = decisive.map((rule) => rule.reason).join(" ");
+  const reason2 = decisive.map((rule) => rule.reason).join(" ");
   if (worst === "confirm" && request.caller === "external") {
     if (policy.unattended === "allow") return { effect: "allow", matched: decisive, reason: "" };
     return {
       effect: "deny",
       matched: decisive,
-      reason: `${reason} Actions that need approval are only available from the Browsentic side panel, where the user can see and answer them.`
+      reason: `${reason2} Actions that need approval are only available from the Browsentic side panel, where the user can see and answer them.`
     };
   }
-  return { effect: worst, matched: decisive, reason };
+  return { effect: worst, matched: decisive, reason: reason2 };
 }
 function describe4(decision) {
   return decision.matched.map((rule) => rule.id).join(", ");
@@ -23457,6 +23468,9 @@ function vetPlan(kind, mode, plan, home) {
       problems.push(`${label2} is spawned with ${arg}, which disables its own containment.`);
     }
   }
+  for (const model of everyValueOf(plan.args, "--model")) {
+    if (!isModelId(model)) problems.push(`${label2} is spawned with the model ${JSON.stringify(model)}, which it could read as a flag.`);
+  }
   if (!within(plan.cwd, home)) problems.push(`${label2} would run in ${plan.cwd}, which is outside ${home}.`);
   return problems;
 }
@@ -23630,7 +23644,7 @@ function adoptDownload(item, hosts) {
     return failure("DOWNLOAD_SAVE_FAILED", error51 instanceof Error ? error51.message : String(error51));
   }
   chmodSync3(savedTo, 384);
-  const record2 = {
+  const record3 = {
     id,
     name: item.name,
     mime: item.mime,
@@ -23641,9 +23655,9 @@ function adoptDownload(item, hosts) {
     savedTo,
     capturedAt: (/* @__PURE__ */ new Date()).toISOString()
   };
-  writeIndex([record2, ...readIndex()]);
+  writeIndex([record3, ...readIndex()]);
   log(`captured ${item.name} (${describeSize(size)}) from ${item.host ?? "unknown host"} \u2192 ${savedTo}`);
-  return success(record2);
+  return success(record3);
 }
 function relocate(from, to) {
   try {
@@ -23664,7 +23678,7 @@ function listDownloads2(input2) {
   sweepDownloads();
   const filter = input2?.nameContains;
   const needle = typeof filter === "string" ? filter.toLowerCase() : null;
-  const downloads = readIndex().filter((record2) => existsSync3(record2.savedTo)).filter((record2) => !needle || record2.name.toLowerCase().includes(needle)).map(({ id, name, mime, size, host, notes, savedTo, capturedAt }) => ({
+  const downloads = readIndex().filter((record3) => existsSync3(record3.savedTo)).filter((record3) => !needle || record3.name.toLowerCase().includes(needle)).map(({ id, name, mime, size, host, notes, savedTo, capturedAt }) => ({
     id,
     name,
     mime,
@@ -23677,26 +23691,26 @@ function listDownloads2(input2) {
   return success({ downloads });
 }
 function readDownloadBytes(id) {
-  const record2 = readIndex().find((entry) => entry.id === id);
-  if (!record2) {
+  const record3 = readIndex().find((entry) => entry.id === id);
+  if (!record3) {
     return failure(
       "DOWNLOAD_NOT_FOUND",
       `No captured download with id "${id}". Call page.listDownloads to see what has been captured.`
     );
   }
-  if (!existsSync3(record2.savedTo)) {
-    return failure("DOWNLOAD_MISSING", `\u201C${record2.name}\u201D is no longer in the download folder \u2014 capture it again.`);
+  if (!existsSync3(record3.savedTo)) {
+    return failure("DOWNLOAD_MISSING", `\u201C${record3.name}\u201D is no longer in the download folder \u2014 capture it again.`);
   }
-  if (record2.size > MAX_ATTACH_BYTES) {
+  if (record3.size > MAX_ATTACH_BYTES) {
     return failure(
       "DOWNLOAD_TOO_LARGE",
-      `\u201C${record2.name}\u201D is ${describeSize(record2.size)}; files over ${describeSize(MAX_ATTACH_BYTES)} cannot be attached to a page.`
+      `\u201C${record3.name}\u201D is ${describeSize(record3.size)}; files over ${describeSize(MAX_ATTACH_BYTES)} cannot be attached to a page.`
     );
   }
   return success({
-    name: record2.name,
-    mime: record2.mime || "application/octet-stream",
-    content: readFileSync4(record2.savedTo).toString("base64")
+    name: record3.name,
+    mime: record3.mime || "application/octet-stream",
+    content: readFileSync4(record3.savedTo).toString("base64")
   });
 }
 function resolveAttachment(action, input2) {
@@ -23712,10 +23726,10 @@ function resolveAttachment(action, input2) {
 function sweepDownloads() {
   const cutoff = Date.now() - ttlDays() * 24 * 60 * 60 * 1e3;
   const records = readIndex();
-  const keep = records.filter((record2) => {
-    if (!existsSync3(record2.savedTo)) return false;
-    if (Date.parse(record2.capturedAt) >= cutoff) return true;
-    discard(record2.savedTo);
+  const keep = records.filter((record3) => {
+    if (!existsSync3(record3.savedTo)) return false;
+    if (Date.parse(record3.capturedAt) >= cutoff) return true;
+    discard(record3.savedTo);
     return false;
   });
   if (keep.length !== records.length) writeIndex(keep);
@@ -24077,12 +24091,12 @@ function isMappableHost(host) {
 
 // agent/agent-skills.ts
 import { createHash } from "crypto";
-import { readFileSync as readFileSync10, readdirSync as readdirSync3, statSync as statSync4 } from "fs";
-import { join as join19, sep as sep2 } from "path";
+import { readFileSync as readFileSync11, readdirSync as readdirSync3, statSync as statSync4 } from "fs";
+import { join as join21, sep as sep2 } from "path";
 
 // agent/runners/index.ts
-import { spawn as spawn2 } from "child_process";
-import { dirname as dirname5, join as join18 } from "path";
+import { spawn as spawn4 } from "child_process";
+import { dirname as dirname6, join as join20 } from "path";
 import { fileURLToPath as fileURLToPath3 } from "url";
 
 // agent/runners/antigravity.ts
@@ -24120,11 +24134,11 @@ function sweepRunDirs(base, ttlMs = RUN_DIR_TTL_MS) {
 function conversationDir(base, key) {
   return join9(base, key.replace(/[^\w-]/g, "_"));
 }
-function effortOf(settings, accepted) {
+function effortOf(settings, accepted2) {
   const effort = settings.effort;
   if (!effort) return void 0;
-  if (accepted.includes(effort)) return effort;
-  log(`ignoring effort "${effort}" \u2014 accepted values are ${accepted.join(", ")}`);
+  if (accepted2.includes(effort)) return effort;
+  log(`ignoring effort "${effort}" \u2014 accepted values are ${accepted2.join(", ")}`);
   return void 0;
 }
 function parseJsonLine(line2) {
@@ -24321,6 +24335,7 @@ var antigravityRunner = {
   versionArgs: ["--version"],
   efforts: ["low", "medium", "high"],
   workspace: (mode) => join11(stateDir, "agents", "antigravity", mode),
+  models: { args: ["models"], parse: listedModels },
   skillDirs: () => {
     try {
       return readFileSync6(skillsIndexPath, "utf8").split("\n").map((line2) => line2.trim()).filter(Boolean).map((root) => join11(root, "skills"));
@@ -24500,6 +24515,13 @@ function lastFrame(stdout) {
   return null;
 }
 var ownTool = (name) => /browsentic|^mcp/i.test(name);
+function listedModels({ stdout, code }) {
+  if (code !== 0) return null;
+  return stdout.split("\n").flatMap((line2) => {
+    const [id, label2] = line2.split("	");
+    return label2 !== void 0 && id.trim() ? [id.trim()] : [];
+  });
+}
 
 // agent/runners/codex.ts
 import { randomUUID as randomUUID4 } from "crypto";
@@ -24532,6 +24554,11 @@ var codexRunner = {
   efforts: ["low", "medium", "high", "xhigh"],
   workspace: () => stateDir,
   skillDirs: () => [join12(homedir7(), ".codex", "skills"), join12(homedir7(), ".codex", "prompts")],
+  // Codex keeps the account's models in a cache it refreshes itself, so reading them spawns nothing.
+  models: {
+    file: () => join12(process.env.CODEX_HOME || join12(homedir7(), ".codex"), "models_cache.json"),
+    parse: listedModels2
+  },
   stream(context) {
     const { settings, mcp, research } = context;
     const server2 = `mcp_servers.${MCP_SERVER_NAME}`;
@@ -24711,6 +24738,12 @@ function kindOf(item) {
 var tomlString = (value) => JSON.stringify(value);
 var tomlArray = (values) => `[${values.map(tomlString).join(",")}]`;
 var tomlTable = (values) => `{${Object.entries(values).map(([key, value]) => `${key}=${tomlString(value)}`).join(",")}}`;
+function listedModels2(content) {
+  const models = parseJsonLine(content)?.models;
+  if (!Array.isArray(models)) return null;
+  return models.filter((model) => model.visibility === "list" && typeof model.slug === "string").sort((a, b) => rank2(a) - rank2(b)).map((model) => model.slug);
+}
+var rank2 = (model) => typeof model.priority === "number" ? model.priority : Number.MAX_SAFE_INTEGER;
 
 // agent/runners/cursor.ts
 import { spawn } from "child_process";
@@ -24732,6 +24765,7 @@ var cursorRunner = {
   efforts: [],
   workspace: (mode) => join13(stateDir, "agents", "cursor", mode),
   skillDirs: () => [join13(cursorHome(), "skills"), join13(homedir8(), ".agents", "skills")],
+  models: { args: ["models"], parse: listedModels3 },
   stream(context) {
     const { settings, research } = context;
     const base = this.workspace("run");
@@ -24929,6 +24963,13 @@ function lastResult(stdout) {
   }
   return null;
 }
+function listedModels3({ stdout, code }) {
+  if (code !== 0) return null;
+  const lines = plain(stdout).split("\n");
+  const heading = lines.findIndex((line2) => /^available models$/i.test(line2.trim()));
+  if (heading === -1) return null;
+  return lines.slice(heading + 1).flatMap((line2) => /^(\S+) - \S/.exec(line2.trim())?.slice(1, 2) ?? []);
+}
 
 // agent/runners/grok.ts
 import { randomUUID as randomUUID5 } from "crypto";
@@ -24952,6 +24993,7 @@ var grokRunner = {
   versionArgs: ["--version"],
   efforts: ["low", "medium", "high", "xhigh"],
   workspace: (mode) => join14(stateDir, "agents", "grok", mode),
+  models: { args: ["models"], parse: listedModels4 },
   skillDirs: () => [join14(grokHome(), "skills"), join14(homedir9(), ".agents", "skills"), join14(homedir9(), ".claude", "skills")],
   stream(context) {
     const { settings, research } = context;
@@ -25140,12 +25182,367 @@ function lastLine(stdout) {
   }
   return null;
 }
+function listedModels4({ stdout, stderr, code }) {
+  if (code !== 0 || /not authenticated/i.test(`${stdout}
+${stderr}`)) return null;
+  const lines = stdout.split("\n");
+  const heading = lines.findIndex((line2) => /^available models:?$/i.test(line2.trim()));
+  if (heading === -1) return null;
+  return lines.slice(heading + 1).flatMap((line2) => /^\s+[*-]\s+(\S+)/.exec(line2)?.slice(1, 2) ?? []);
+}
+
+// agent/runners/models.ts
+import { spawn as spawn3 } from "child_process";
+import { mkdirSync as mkdirSync9, readFileSync as readFileSync8, renameSync as renameSync3, writeFileSync as writeFileSync8 } from "fs";
+import { basename as basename4, join as join16 } from "path";
+
+// agent/runners/drive.ts
+import { spawn as spawn2 } from "child_process";
+import { mkdirSync as mkdirSync8, utimesSync, writeFileSync as writeFileSync7 } from "fs";
+import { dirname as dirname4, join as join15 } from "path";
+import { createInterface } from "readline";
+
+// agent/runners/types.ts
+var RunError = class extends Error {
+  constructor(code, message) {
+    super(message);
+    this.code = code;
+    this.name = "RunError";
+  }
+  code;
+};
+
+// agent/runners/drive.ts
+var KILL_GRACE_MS = 5e3;
+var STRIPPED = ["CLAUDECODE", "CLAUDE_CODE_ENTRYPOINT", "BROWSENTIC_AGENT_RUN"];
+function launch(kind, mode, settings, plan, signal) {
+  const problems = vetPlan(kind, mode, plan, stateDir);
+  if (problems.length) {
+    throw new RunError(
+      "AGENT_UNSAFE",
+      `Browsentic refused to start ${AGENTS[kind].label}: ${problems.join(" ")} This is a bug in Browsentic, not something you did \u2014 please report it.`
+    );
+  }
+  log(describeContainment(kind));
+  mkdirSync8(plan.cwd, { recursive: true, mode: 448 });
+  for (const file2 of plan.files ?? []) {
+    const path = join15(plan.cwd, file2.path);
+    mkdirSync8(dirname4(path), { recursive: true, mode: 448 });
+    writeFileSync7(path, file2.content, { mode: 384 });
+  }
+  const now = /* @__PURE__ */ new Date();
+  utimesSync(plan.cwd, now, now);
+  const dropped = sealedAway(kind, process.env);
+  if (dropped.length) log(`sealed ${dropped.length} credential-shaped variables out of the ${kind} environment`);
+  const env = { ...childEnv(kind), ...plan.env };
+  const child = spawn2(settings.bin, plan.args, {
+    cwd: plan.cwd,
+    env,
+    stdio: ["ignore", "pipe", "pipe"]
+  });
+  const kill = () => {
+    child.kill("SIGTERM");
+    const hardKill = setTimeout(() => child.kill("SIGKILL"), KILL_GRACE_MS);
+    hardKill.unref();
+  };
+  if (signal.aborted) kill();
+  else signal.addEventListener("abort", kill, { once: true });
+  return { child, release: () => signal.removeEventListener("abort", kill), stop: kill };
+}
+function childEnv(kind) {
+  const env = sealEnv(kind, process.env);
+  for (const key of STRIPPED) delete env[key];
+  return env;
+}
+function notInstalled(runner, settings) {
+  const agent = AGENTS[runner.kind];
+  return new RunError(
+    "AGENT_MISSING",
+    `Could not run "${settings.bin}" \u2014 ${agent.label} is not installed, or not on the daemon's PATH. Install it (${agent.install}), or set {"agents":{"${runner.kind}":{"bin":"/absolute/path/to/${agent.bin}"}}} in ${configPath}.`
+  );
+}
+function spawnError(runner, settings, error51) {
+  return error51.code === "ENOENT" ? notInstalled(runner, settings) : new RunError("AGENT_FAILED", error51.message);
+}
+function runStream(runner, context, signal, emit) {
+  const plan = runner.stream(context);
+  const label2 = AGENTS[runner.kind].label;
+  return new Promise((resolve4, reject) => {
+    const { child, release, stop } = launch(runner.kind, "run", context.settings, plan, signal);
+    let sessionId2 = null;
+    let settled = false;
+    let stderrTail = "";
+    const settle2 = (outcome) => {
+      if (settled) return;
+      settled = true;
+      outcome();
+    };
+    const outbound = sealingStream();
+    const say = (delta) => delta && emit({ kind: "text", delta });
+    const flush = () => say(outbound.flush());
+    const sink = {
+      text: (delta) => delta && say(outbound.push(delta)),
+      tool: (toolId, name) => emit({ kind: "tool", toolId, action: name, input: {} }),
+      session: (id) => {
+        if (id) sessionId2 = id;
+      },
+      usage: (usage) => emit({ kind: "usage", usage }),
+      done: (stopReason) => settle2(() => {
+        flush();
+        resolve4({ stopReason, sessionId: sessionId2 });
+      }),
+      // A run the reader has failed is over, and its process would otherwise go on spending and acting.
+      fail: (code, message) => settle2(() => {
+        flush();
+        stop();
+        reject(new RunError(code, message));
+      })
+    };
+    child.stderr.on("data", (chunk) => {
+      stderrTail = (stderrTail + chunk.toString()).slice(-2e3);
+    });
+    const read4 = runner.reader();
+    const lines = createInterface({ input: child.stdout });
+    lines.on("line", (line2) => {
+      if (!line2.trim()) return;
+      try {
+        read4(line2, sink);
+      } catch (error51) {
+        log(`${runner.kind} runner could not read a stream line: ${String(error51)}`);
+      }
+    });
+    child.on(
+      "error",
+      (error51) => settle2(() => reject(spawnError(runner, context.settings, error51)))
+    );
+    child.on("close", (exitCode) => {
+      release();
+      if (settled) return;
+      if (signal.aborted) return settle2(() => reject(new RunError("CANCELLED", "Run cancelled.")));
+      if (runner.endsOnExit && exitCode === 0) return sink.done("end_turn");
+      const hint = runner.hint?.(stderrTail);
+      settle2(
+        () => reject(
+          new RunError(
+            "AGENT_FAILED",
+            hint ?? `${label2} exited with code ${exitCode} before finishing${tail(stderrTail)}`
+          )
+        )
+      );
+    });
+  });
+}
+function runJson(runner, context, signal, { timedOut, empty, accept }) {
+  const plan = runner.json(context);
+  const label2 = AGENTS[runner.kind].label;
+  return new Promise((resolve4, reject) => {
+    const { child, release, stop } = launch(runner.kind, "task", context.settings, plan, signal);
+    let stdout = "";
+    let stderrTail = "";
+    let settled = false;
+    const settle2 = (outcome) => {
+      if (settled) return;
+      settled = true;
+      release();
+      outcome();
+    };
+    child.stdout.on("data", (chunk) => {
+      stdout += chunk.toString();
+      if (!accept || settled) return;
+      const text2 = runner.answer(stdout).text?.trim();
+      if (text2 && accept(text2)) {
+        settle2(() => {
+          stop();
+          resolve4(text2);
+        });
+      }
+    });
+    child.stderr.on("data", (chunk) => {
+      stderrTail = (stderrTail + chunk.toString()).slice(-2e3);
+    });
+    child.on("error", (error51) => settle2(() => reject(spawnError(runner, context.settings, error51))));
+    child.on(
+      "close",
+      () => settle2(() => {
+        if (signal.aborted) return reject(signal.reason instanceof RunError ? signal.reason : new RunError("TIMEOUT", timedOut));
+        const answer = runner.answer(stdout);
+        if (answer.error) return reject(new RunError("AGENT_FAILED", answer.error));
+        const text2 = answer.text?.trim();
+        if (!text2) {
+          const hint = runner.hint?.(stderrTail);
+          return reject(new RunError("AGENT_FAILED", hint ?? (stderrTail.trim() ? `${label2}: ${stderrTail.trim()}` : empty)));
+        }
+        resolve4(text2);
+      })
+    );
+  });
+}
+var tail = (stderr) => stderr.trim() ? `: ${stderr.trim()}` : "";
+
+// agent/runners/models.ts
+var FRESH_MS = 6 * 60 * 6e4;
+var RETRY_MS = 10 * 6e4;
+var LIST_TIMEOUT_MS = 1e4;
+var MAX_OUTPUT_BYTES = 512 * 1024;
+var MAX_MODELS = 500;
+var storePath = join16(stateDir, "models.json");
+var inFlight = /* @__PURE__ */ new Map();
+function modelsFor(kind) {
+  const entry = readStore()[kind];
+  const curated = AGENTS[kind].models;
+  if (entry?.ids?.length) return { ids: suggestedFirst(entry.ids, curated), from: "cli", at: entry.at, error: entry.error };
+  return { ids: curated, from: "catalog", error: entry?.error };
+}
+function refreshModels(runner, settings, version3, { force = false } = {}) {
+  const lister = runner.models;
+  if (!lister) return Promise.resolve(false);
+  const running = inFlight.get(runner.kind);
+  if (running) return running;
+  if (!force && !due(readStore()[runner.kind], settings.bin, version3, lister)) return Promise.resolve(false);
+  const reading = read2(runner.kind, settings.bin, lister).catch((error51) => ({ error: String(error51) })).then((outcome) => record2(runner.kind, settings.bin, version3, outcome)).catch((error51) => {
+    log(`could not keep ${AGENTS[runner.kind].label}'s model list: ${String(error51)}`);
+    return false;
+  }).finally(() => inFlight.delete(runner.kind));
+  inFlight.set(runner.kind, reading);
+  return reading;
+}
+function due(entry, bin, version3, lister) {
+  if (!entry || entry.bin !== bin || entry.version !== version3) return true;
+  const age = Date.now() - entry.triedAt;
+  if (entry.error) return age >= RETRY_MS;
+  return "file" in lister || age >= FRESH_MS;
+}
+async function read2(kind, bin, lister) {
+  if ("file" in lister) {
+    const path = lister.file();
+    let content;
+    try {
+      content = readFileSync8(path, "utf8");
+    } catch {
+      return { error: `${AGENTS[kind].label} has not written ${basename4(path)} yet. It does the first time it runs.` };
+    }
+    return accepted(() => lister.parse(content)) ?? { error: `${basename4(path)} holds no model Browsentic could read.` };
+  }
+  const listing = await list2(kind, bin, lister.args);
+  if ("error" in listing) return listing;
+  return accepted(() => lister.parse(listing)) ?? { error: reason(listing) };
+}
+function accepted(parse5) {
+  let parsed2;
+  try {
+    parsed2 = parse5();
+  } catch {
+    return null;
+  }
+  const ids = [...new Set((parsed2 ?? []).filter(isModelId))].slice(0, MAX_MODELS);
+  return ids.length ? { ids } : null;
+}
+function reason({ stdout, stderr, code }) {
+  const lines = plain2(`${stderr}
+${stdout}`).split("\n").map((line2) => line2.trim()).filter(Boolean);
+  const said = lines.find((line2) => /error|sign in|log ?in|authenticat/i.test(line2));
+  if (said) return said.replace(/^error:\s*/i, "").slice(0, 200);
+  return code === 0 ? "It printed no model list Browsentic could read." : `It exited with code ${code}.`;
+}
+function list2(kind, bin, args) {
+  const cwd = join16(stateDir, "agents", kind, "models");
+  mkdirSync9(cwd, { recursive: true, mode: 448 });
+  const command = `"${[basename4(bin), ...args].join(" ")}"`;
+  const group = process.platform !== "win32";
+  return new Promise((resolve4) => {
+    let stdout = "";
+    let stderr = "";
+    let size = 0;
+    let settled = false;
+    const done = (result) => {
+      if (settled) return;
+      settled = true;
+      clearTimeout(timer);
+      resolve4(result);
+    };
+    const child = spawn3(bin, args, {
+      cwd,
+      env: { ...childEnv(kind), NO_COLOR: "1" },
+      stdio: ["ignore", "pipe", "pipe"],
+      detached: group
+    });
+    const stop = (error51) => {
+      try {
+        if (group && child.pid) process.kill(-child.pid, "SIGKILL");
+        else child.kill("SIGKILL");
+      } catch {
+        child.kill("SIGKILL");
+      }
+      done({ error: error51 });
+    };
+    const timer = setTimeout(() => stop(`${command} did not answer within ${LIST_TIMEOUT_MS / 1e3} s.`), LIST_TIMEOUT_MS);
+    timer.unref();
+    const collect3 = (append) => (chunk) => {
+      size += chunk.length;
+      if (size > MAX_OUTPUT_BYTES) return stop(`${command} printed more than ${MAX_OUTPUT_BYTES / 1024} KB.`);
+      append(chunk.toString());
+    };
+    child.stdout.on("data", collect3((text2) => stdout += text2));
+    child.stderr.on("data", collect3((text2) => stderr += text2));
+    child.on("error", (error51) => done({ error: error51.message }));
+    child.on("close", (code) => done({ stdout, stderr, code }));
+  });
+}
+function record2(kind, bin, version3, outcome) {
+  const store = readStore();
+  const before = store[kind];
+  const now = Date.now();
+  const entry = "ids" in outcome ? { bin, version: version3, ids: outcome.ids, at: now, triedAt: now } : { bin, version: version3, ids: before?.ids, at: before?.at, triedAt: now, error: outcome.error };
+  if ("error" in outcome) log(`could not list ${AGENTS[kind].label}'s models: ${outcome.error}`);
+  store[kind] = entry;
+  writeStore(store);
+  return JSON.stringify([before?.ids, before?.error]) !== JSON.stringify([entry.ids, entry.error]);
+}
+function readStore() {
+  let parsed2;
+  try {
+    parsed2 = JSON.parse(readFileSync8(storePath, "utf8"));
+  } catch {
+    return {};
+  }
+  if (!parsed2 || typeof parsed2 !== "object") return {};
+  const store = {};
+  for (const [kind, value] of Object.entries(parsed2)) {
+    const entry = entryOf(value);
+    if (entry && kind in AGENTS) store[kind] = entry;
+  }
+  return store;
+}
+function entryOf(value) {
+  if (!value || typeof value !== "object") return null;
+  const raw = value;
+  if (typeof raw.bin !== "string" || typeof raw.triedAt !== "number") return null;
+  const ids = Array.isArray(raw.ids) ? raw.ids.filter(isModelId) : void 0;
+  return {
+    bin: raw.bin,
+    version: typeof raw.version === "string" ? raw.version : void 0,
+    ids: ids?.length ? ids : void 0,
+    at: typeof raw.at === "number" ? raw.at : void 0,
+    triedAt: raw.triedAt,
+    error: typeof raw.error === "string" ? raw.error.slice(0, 200) : void 0
+  };
+}
+function writeStore(store) {
+  const temporary = `${storePath}.${process.pid}.tmp`;
+  writeFileSync8(temporary, `${JSON.stringify(store, null, 2)}
+`, { mode: 384 });
+  renameSync3(temporary, storePath);
+}
+function suggestedFirst(ids, curated) {
+  return [...curated.filter((id) => ids.includes(id)), ...ids.filter((id) => !curated.includes(id))];
+}
+var plain2 = (text2) => text2.replace(/\u001B\[[0-9;]*[A-Za-z]/g, "");
 
 // agent/runners/opencode.ts
 import { randomUUID as randomUUID6 } from "crypto";
-import { readFileSync as readFileSync8 } from "fs";
+import { readFileSync as readFileSync9 } from "fs";
 import { homedir as homedir10 } from "os";
-import { dirname as dirname4, join as join15, relative } from "path";
+import { dirname as dirname5, join as join17, relative } from "path";
 var AGENT = "browsentic-contained";
 var INSTRUCTIONS2 = "instructions.md";
 var WEB_TOOLS3 = ["webfetch", "websearch"];
@@ -25153,8 +25550,8 @@ var RESULT_BYTES = 1e5;
 var TOOL_TIMEOUT_MS = 30 * 6e4;
 var TRUNCATION = `A tool result over ${RESULT_BYTES / 1e3} KB comes back cut, and the saved copy OpenCode points to cannot be opened in this run, so ask for less at a time \u2014 \`page_getPageInfo\` with a small \`maxPerKind\`, \`page_extractText\` with the cursor it hands back.`;
 var SEALED2 = { OPENCODE_DISABLE_PROJECT_CONFIG: "1", OPENCODE_DISABLE_CLAUDE_CODE: "1", OPENCODE_DISABLE_SHARE: "1" };
-var sessionsDb = () => join15(stateDir, "agents", "opencode", "sessions.db");
-var configHome = () => join15(process.env.XDG_CONFIG_HOME || join15(homedir10(), ".config"), "opencode");
+var sessionsDb = () => join17(stateDir, "agents", "opencode", "sessions.db");
+var configHome = () => join17(process.env.XDG_CONFIG_HOME || join17(homedir10(), ".config"), "opencode");
 var INSTALL = "npm i -g opencode-ai";
 var opencodeRunner = {
   kind: "opencode",
@@ -25162,13 +25559,13 @@ var opencodeRunner = {
   // Passed as --variant, whose names each model defines; a model ignores one it lacks.
   efforts: ["none", "minimal", "low", "medium", "high", "xhigh", "max"],
   endsOnExit: true,
-  workspace: (mode) => join15(stateDir, "agents", "opencode", mode),
+  workspace: (mode) => join17(stateDir, "agents", "opencode", mode),
   skillDirs: () => [
-    join15(configHome(), "skills"),
-    join15(configHome(), "skill"),
-    join15(homedir10(), ".opencode", "skills"),
-    join15(homedir10(), ".agents", "skills"),
-    join15(homedir10(), ".claude", "skills")
+    join17(configHome(), "skills"),
+    join17(configHome(), "skill"),
+    join17(homedir10(), ".opencode", "skills"),
+    join17(homedir10(), ".agents", "skills"),
+    join17(homedir10(), ".claude", "skills")
   ],
   stream(context) {
     const { settings, research } = context;
@@ -25184,7 +25581,7 @@ var opencodeRunner = {
         OPENCODE_DB: sessionsDb(),
         OPENCODE_CONFIG_CONTENT: config3({
           mcp: { [MCP_SERVER_NAME]: server(context.mcp) },
-          instructions: [join15(cwd, INSTRUCTIONS2)],
+          instructions: [join17(cwd, INSTRUCTIONS2)],
           permission: { "*": "deny", ...Object.fromEntries(allowed2.map((tool) => [tool, "allow"])) }
         }),
         BROWSENTIC_AGENT_RUN: context.runId
@@ -25304,11 +25701,11 @@ function config3({ mcp, instructions, permission }) {
   });
 }
 function scratchReads(workspace) {
-  const scratch = join15(workspace, "tmp");
+  const scratch = join17(workspace, "tmp");
   const rules = { "*": "deny" };
-  for (let root = dirname4(workspace); ; root = dirname4(root)) {
+  for (let root = dirname5(workspace); ; root = dirname5(root)) {
     rules[`${relative(root, scratch)}/*`] = "allow";
-    if (root === dirname4(root)) return rules;
+    if (root === dirname5(root)) return rules;
   }
 }
 function explain3(failure2) {
@@ -25327,10 +25724,10 @@ function explain3(failure2) {
   return message;
 }
 var oneLine2 = (message) => message.replace(/\s+/g, " ").trim().slice(0, 240);
-var dataHome = () => join15(process.env.XDG_DATA_HOME || join15(homedir10(), ".local", "share"), "opencode");
+var dataHome = () => join17(process.env.XDG_DATA_HOME || join17(homedir10(), ".local", "share"), "opencode");
 function signedIn2() {
   try {
-    return Object.keys(JSON.parse(readFileSync8(join15(dataHome(), "auth.json"), "utf8"))).length > 0;
+    return Object.keys(JSON.parse(readFileSync9(join17(dataHome(), "auth.json"), "utf8"))).length > 0;
   } catch (error51) {
     return error51.code !== "ENOENT";
   }
@@ -25338,7 +25735,7 @@ function signedIn2() {
 function declaresProvider() {
   return ["opencode.json", "opencode.jsonc", "config.json"].some((name) => {
     try {
-      return /"provider"\s*:/.test(readFileSync8(join15(configHome(), name), "utf8"));
+      return /"provider"\s*:/.test(readFileSync9(join17(configHome(), name), "utf8"));
     } catch {
       return false;
     }
@@ -25347,9 +25744,9 @@ function declaresProvider() {
 
 // agent/runners/qwen.ts
 import { randomUUID as randomUUID7 } from "crypto";
-import { readFileSync as readFileSync9 } from "fs";
+import { readFileSync as readFileSync10 } from "fs";
 import { homedir as homedir11 } from "os";
-import { join as join16 } from "path";
+import { join as join18 } from "path";
 var MACHINE = ["Bash", "exec", "Edit", "Read", "zoom_image", "monitor", "lsp", "save_memory"];
 var ESCAPES = [
   "skill",
@@ -25375,7 +25772,7 @@ var READ_TOOL2 = "read_file";
 var OTHER_READS = ["grep_search", "glob", "list_directory"];
 var APPROVAL = "default";
 var DANGEROUS = /^(run_shell_command|exec|edit|write_file|notebook_edit|read_file|grep_search|glob|list_directory|agent|skill|monitor|save_memory|lsp|zoom_image|image_gen|workflow|send_message|create_sub_session|propose_goal|cron_|team_|computer_use__|omni_)/;
-var qwenHome = () => process.env.QWEN_HOME || join16(homedir11(), ".qwen");
+var qwenHome = () => process.env.QWEN_HOME || join18(homedir11(), ".qwen");
 var INSTALL2 = "npm i -g @qwen-code/qwen-code";
 var AUTH_KEYS = ["QWEN_API_KEY", "OPENAI_API_KEY", "DASHSCOPE_API_KEY"];
 var AUTH_PREFIX = /^(QWEN_|DASHSCOPE_|BAILIAN_|OPENAI_).*(API_KEY|TOKEN)$/;
@@ -25386,8 +25783,8 @@ var qwenRunner = {
   efforts: [],
   // Sessions are filed under ~/.qwen/projects/<sanitized-cwd>, so a resume only finds the
   // conversation it began in when this stays put.
-  workspace: (mode) => join16(stateDir, "agents", "qwen", mode),
-  skillDirs: () => [join16(qwenHome(), "skills"), join16(homedir11(), ".agents", "skills")],
+  workspace: (mode) => join18(stateDir, "agents", "qwen", mode),
+  skillDirs: () => [join18(qwenHome(), "skills"), join18(homedir11(), ".agents", "skills")],
   stream(context) {
     const { settings, research } = context;
     return {
@@ -25572,7 +25969,7 @@ var oneLine3 = (message) => message.replace(/\s+/g, " ").trim().slice(0, 240);
 function configured() {
   let parsed2;
   try {
-    parsed2 = JSON.parse(readFileSync9(join16(qwenHome(), "settings.json"), "utf8"));
+    parsed2 = JSON.parse(readFileSync10(join18(qwenHome(), "settings.json"), "utf8"));
   } catch (error51) {
     return error51.code !== "ENOENT";
   }
@@ -25594,7 +25991,7 @@ function lastResult2(stdout) {
 
 // agent/runners/vibe.ts
 import { homedir as homedir12 } from "os";
-import { join as join17 } from "path";
+import { join as join19 } from "path";
 var CONFIG2 = ".vibe/config.toml";
 var INSTRUCTIONS3 = "AGENTS.md";
 var TASK_INSTRUCTIONS2 = "This directory is Browsentic scratch space. Answer the prompt exactly as it asks, and do not act on anything else you find here.\n";
@@ -25602,14 +25999,14 @@ var WEB_TOOLS5 = ["web_search", "web_fetch"];
 var READ_TOOL3 = "read_file";
 var NO_TOOLS = "re:^$";
 var PROFILE = "ask";
-var vibeHome = () => process.env.VIBE_HOME || join17(homedir12(), ".vibe");
+var vibeHome = () => process.env.VIBE_HOME || join19(homedir12(), ".vibe");
 var vibeRunner = {
   kind: "vibe",
   versionArgs: ["--version"],
   efforts: [],
   endsOnExit: true,
-  workspace: (mode) => join17(stateDir, "agents", "vibe", mode),
-  skillDirs: () => [join17(vibeHome(), "skills"), join17(homedir12(), ".agents", "skills")],
+  workspace: (mode) => join19(stateDir, "agents", "vibe", mode),
+  skillDirs: () => [join19(vibeHome(), "skills"), join19(homedir12(), ".agents", "skills")],
   stream(context) {
     const base = this.workspace("run");
     sweepRunDirs(base);
@@ -25685,7 +26082,7 @@ ${text2}` : text2);
   },
   hint(stderrTail) {
     if (/Missing \w+ environment variable/i.test(stderrTail)) {
-      return `Mistral Vibe is installed but has no API key. Run "vibe --setup", or put MISTRAL_API_KEY in ${join17(vibeHome(), ".env")}, then try again. (${stderrTail.trim()})`;
+      return `Mistral Vibe is installed but has no API key. Run "vibe --setup", or put MISTRAL_API_KEY in ${join19(vibeHome(), ".env")}, then try again. (${stderrTail.trim()})`;
     }
     if (/unrecognized arguments|invalid choice/i.test(stderrTail)) {
       return `Your Mistral Vibe does not understand the flags Browsentic uses. Update it, then try again. (${stderrTail.trim()})`;
@@ -25727,7 +26124,7 @@ var RUNNERS = {
   qwen: qwenRunner,
   opencode: opencodeRunner
 };
-var cliPath = join18(dirname5(fileURLToPath3(import.meta.url)), "cli.js");
+var cliPath = join20(dirname6(fileURLToPath3(import.meta.url)), "cli.js");
 function mcpServerFor(runId) {
   return { command: process.execPath, args: [cliPath, "mcp"], env: { BROWSENTIC_AGENT_RUN: runId } };
 }
@@ -25751,6 +26148,13 @@ async function agentState(config5, { refresh = false } = {}) {
 function forgetProbes() {
   cached2 = null;
 }
+async function refreshModelLists(config5, { force = false, only } = {}) {
+  const state = await agentState(config5);
+  const reads = state.runners.filter((status) => (status.ready || status.problem?.code === "AGENT_NEEDS_PERMISSION") && (!only || status.kind === only)).map((status) => refreshModels(RUNNERS[status.kind], config5.agents[status.kind], status.version, { force }));
+  const changed = (await Promise.all(reads)).some(Boolean);
+  if (changed || force) forgetProbes();
+  return changed;
+}
 async function grantRunner(kind) {
   const problem = await RUNNERS[kind].grant?.() ?? null;
   forgetProbes();
@@ -25794,6 +26198,7 @@ async function probe2(runner, settings) {
     model: settings.model,
     ready: !problem,
     version: found.detail,
+    models: modelsFor(runner.kind),
     problem: problem ?? void 0
   };
 }
@@ -25807,7 +26212,7 @@ function version2(bin, args) {
       clearTimeout(timer);
       resolve4(result);
     };
-    const child = spawn2(bin, args, { stdio: ["ignore", "pipe", "pipe"] });
+    const child = spawn4(bin, args, { stdio: ["ignore", "pipe", "pipe"] });
     const timer = setTimeout(() => {
       child.kill("SIGKILL");
       done({ ok: false, detail: "timed out" });
@@ -25872,7 +26277,7 @@ function resolveAgentSkill(id, config5) {
         }
       };
     }
-    const body = splitFrontMatter(readFileSync10(entry.path, "utf8")).body.trim();
+    const body = splitFrontMatter(readFileSync11(entry.path, "utf8")).body.trim();
     if (!body) return unknown2();
     return { skill: { name: entry.name, body } };
   } catch {
@@ -25898,11 +26303,11 @@ function scan(dir, agent, out) {
     return;
   }
   for (const entry of entries) {
-    const path = entry.name.endsWith(".md") ? join19(dir, entry.name) : join19(dir, entry.name, SKILL_FILE);
+    const path = entry.name.endsWith(".md") ? join21(dir, entry.name) : join21(dir, entry.name, SKILL_FILE);
     try {
       const stats = statSync4(path);
       if (!stats.isFile() || stats.size > MAX_SKILL_BYTES) continue;
-      const { fields, body } = splitFrontMatter(readFileSync10(path, "utf8"));
+      const { fields, body } = splitFrontMatter(readFileSync11(path, "utf8"));
       if (!body.trim()) continue;
       const name = clean(unquote(fields.name) || entry.name.replace(/\.md$/, ""), MAX_NAME);
       if (!name) continue;
@@ -25923,13 +26328,13 @@ function idOf(path) {
 }
 
 // agent/approvals.ts
-import { chmodSync as chmodSync5, mkdirSync as mkdirSync8, readFileSync as readFileSync11, writeFileSync as writeFileSync7 } from "fs";
-import { join as join20 } from "path";
-var approvalsPath = join20(stateDir, "approvals.json");
+import { chmodSync as chmodSync5, mkdirSync as mkdirSync10, readFileSync as readFileSync12, writeFileSync as writeFileSync9 } from "fs";
+import { join as join22 } from "path";
+var approvalsPath = join22(stateDir, "approvals.json");
 var MAX_GRANTS = 200;
-function read2() {
+function read3() {
   try {
-    const parsed2 = JSON.parse(readFileSync11(approvalsPath, "utf8"));
+    const parsed2 = JSON.parse(readFileSync12(approvalsPath, "utf8"));
     if (!Array.isArray(parsed2.grants)) return [];
     return parsed2.grants.filter(
       (grant) => !!grant && typeof grant.action === "string" && typeof grant.host === "string" && typeof grant.at === "string"
@@ -25939,16 +26344,16 @@ function read2() {
   }
 }
 function write3(grants) {
-  mkdirSync8(stateDir, { recursive: true, mode: 448 });
-  writeFileSync7(approvalsPath, `${JSON.stringify({ grants }, null, 2)}
+  mkdirSync10(stateDir, { recursive: true, mode: 448 });
+  writeFileSync9(approvalsPath, `${JSON.stringify({ grants }, null, 2)}
 `, { mode: 384 });
   chmodSync5(approvalsPath, 384);
 }
 function isGranted(action, host) {
-  return read2().some((grant) => grant.action === action && grant.host === host);
+  return read3().some((grant) => grant.action === action && grant.host === host);
 }
 function rememberGrant(action, host, at) {
-  const kept = read2().filter((grant) => !(grant.action === action && grant.host === host));
+  const kept = read3().filter((grant) => !(grant.action === action && grant.host === host));
   write3([{ action, host, at }, ...kept].slice(0, MAX_GRANTS));
   log(`remembered approval: ${action} on ${host}`);
 }
@@ -26104,9 +26509,9 @@ function validateFileReport(input2) {
   const agent = AGENT_KINDS.find((known2) => known2 === raw.agent);
   const kind = FILE_KINDS.find((known2) => known2 === raw.kind);
   if (verdict !== "analyzed") {
-    const reason = reasonOf(raw.reason);
-    if (!reason) return { ok: false, message: "A report that did not read the file has to say why." };
-    return { ok: true, report: { verdict, agent, kind, reason } };
+    const reason2 = reasonOf(raw.reason);
+    if (!reason2) return { ok: false, message: "A report that did not read the file has to say why." };
+    return { ok: true, report: { verdict, agent, kind, reason: reason2 } };
   }
   const summary2 = line(raw.summary, REPORT_LIMITS.summary);
   if (!summary2) return { ok: false, message: "The report has no summary." };
@@ -26379,189 +26784,7 @@ ${overlay.body.trim()}`;
 }
 
 // agent/runner.ts
-import { join as join22 } from "path";
-
-// agent/runners/drive.ts
-import { spawn as spawn3 } from "child_process";
-import { mkdirSync as mkdirSync9, utimesSync, writeFileSync as writeFileSync8 } from "fs";
-import { dirname as dirname6, join as join21 } from "path";
-import { createInterface } from "readline";
-
-// agent/runners/types.ts
-var RunError = class extends Error {
-  constructor(code, message) {
-    super(message);
-    this.code = code;
-    this.name = "RunError";
-  }
-  code;
-};
-
-// agent/runners/drive.ts
-var KILL_GRACE_MS = 5e3;
-var STRIPPED = ["CLAUDECODE", "CLAUDE_CODE_ENTRYPOINT", "BROWSENTIC_AGENT_RUN"];
-function launch(kind, mode, settings, plan, signal) {
-  const problems = vetPlan(kind, mode, plan, stateDir);
-  if (problems.length) {
-    throw new RunError(
-      "AGENT_UNSAFE",
-      `Browsentic refused to start ${AGENTS[kind].label}: ${problems.join(" ")} This is a bug in Browsentic, not something you did \u2014 please report it.`
-    );
-  }
-  log(describeContainment(kind));
-  mkdirSync9(plan.cwd, { recursive: true, mode: 448 });
-  for (const file2 of plan.files ?? []) {
-    const path = join21(plan.cwd, file2.path);
-    mkdirSync9(dirname6(path), { recursive: true, mode: 448 });
-    writeFileSync8(path, file2.content, { mode: 384 });
-  }
-  const now = /* @__PURE__ */ new Date();
-  utimesSync(plan.cwd, now, now);
-  const dropped = sealedAway(kind, process.env);
-  if (dropped.length) log(`sealed ${dropped.length} credential-shaped variables out of the ${kind} environment`);
-  const env = sealEnv(kind, process.env);
-  for (const key of STRIPPED) delete env[key];
-  Object.assign(env, plan.env);
-  const child = spawn3(settings.bin, plan.args, {
-    cwd: plan.cwd,
-    env,
-    stdio: ["ignore", "pipe", "pipe"]
-  });
-  const kill = () => {
-    child.kill("SIGTERM");
-    const hardKill = setTimeout(() => child.kill("SIGKILL"), KILL_GRACE_MS);
-    hardKill.unref();
-  };
-  if (signal.aborted) kill();
-  else signal.addEventListener("abort", kill, { once: true });
-  return { child, release: () => signal.removeEventListener("abort", kill), stop: kill };
-}
-function notInstalled(runner, settings) {
-  const agent = AGENTS[runner.kind];
-  return new RunError(
-    "AGENT_MISSING",
-    `Could not run "${settings.bin}" \u2014 ${agent.label} is not installed, or not on the daemon's PATH. Install it (${agent.install}), or set {"agents":{"${runner.kind}":{"bin":"/absolute/path/to/${agent.bin}"}}} in ${configPath}.`
-  );
-}
-function spawnError(runner, settings, error51) {
-  return error51.code === "ENOENT" ? notInstalled(runner, settings) : new RunError("AGENT_FAILED", error51.message);
-}
-function runStream(runner, context, signal, emit) {
-  const plan = runner.stream(context);
-  const label2 = AGENTS[runner.kind].label;
-  return new Promise((resolve4, reject) => {
-    const { child, release, stop } = launch(runner.kind, "run", context.settings, plan, signal);
-    let sessionId2 = null;
-    let settled = false;
-    let stderrTail = "";
-    const settle2 = (outcome) => {
-      if (settled) return;
-      settled = true;
-      outcome();
-    };
-    const outbound = sealingStream();
-    const say = (delta) => delta && emit({ kind: "text", delta });
-    const flush = () => say(outbound.flush());
-    const sink = {
-      text: (delta) => delta && say(outbound.push(delta)),
-      tool: (toolId, name) => emit({ kind: "tool", toolId, action: name, input: {} }),
-      session: (id) => {
-        if (id) sessionId2 = id;
-      },
-      usage: (usage) => emit({ kind: "usage", usage }),
-      done: (stopReason) => settle2(() => {
-        flush();
-        resolve4({ stopReason, sessionId: sessionId2 });
-      }),
-      // A run the reader has failed is over, and its process would otherwise go on spending and acting.
-      fail: (code, message) => settle2(() => {
-        flush();
-        stop();
-        reject(new RunError(code, message));
-      })
-    };
-    child.stderr.on("data", (chunk) => {
-      stderrTail = (stderrTail + chunk.toString()).slice(-2e3);
-    });
-    const read3 = runner.reader();
-    const lines = createInterface({ input: child.stdout });
-    lines.on("line", (line2) => {
-      if (!line2.trim()) return;
-      try {
-        read3(line2, sink);
-      } catch (error51) {
-        log(`${runner.kind} runner could not read a stream line: ${String(error51)}`);
-      }
-    });
-    child.on(
-      "error",
-      (error51) => settle2(() => reject(spawnError(runner, context.settings, error51)))
-    );
-    child.on("close", (exitCode) => {
-      release();
-      if (settled) return;
-      if (signal.aborted) return settle2(() => reject(new RunError("CANCELLED", "Run cancelled.")));
-      if (runner.endsOnExit && exitCode === 0) return sink.done("end_turn");
-      const hint = runner.hint?.(stderrTail);
-      settle2(
-        () => reject(
-          new RunError(
-            "AGENT_FAILED",
-            hint ?? `${label2} exited with code ${exitCode} before finishing${tail(stderrTail)}`
-          )
-        )
-      );
-    });
-  });
-}
-function runJson(runner, context, signal, { timedOut, empty, accept }) {
-  const plan = runner.json(context);
-  const label2 = AGENTS[runner.kind].label;
-  return new Promise((resolve4, reject) => {
-    const { child, release, stop } = launch(runner.kind, "task", context.settings, plan, signal);
-    let stdout = "";
-    let stderrTail = "";
-    let settled = false;
-    const settle2 = (outcome) => {
-      if (settled) return;
-      settled = true;
-      release();
-      outcome();
-    };
-    child.stdout.on("data", (chunk) => {
-      stdout += chunk.toString();
-      if (!accept || settled) return;
-      const text2 = runner.answer(stdout).text?.trim();
-      if (text2 && accept(text2)) {
-        settle2(() => {
-          stop();
-          resolve4(text2);
-        });
-      }
-    });
-    child.stderr.on("data", (chunk) => {
-      stderrTail = (stderrTail + chunk.toString()).slice(-2e3);
-    });
-    child.on("error", (error51) => settle2(() => reject(spawnError(runner, context.settings, error51))));
-    child.on(
-      "close",
-      () => settle2(() => {
-        if (signal.aborted) return reject(signal.reason instanceof RunError ? signal.reason : new RunError("TIMEOUT", timedOut));
-        const answer = runner.answer(stdout);
-        if (answer.error) return reject(new RunError("AGENT_FAILED", answer.error));
-        const text2 = answer.text?.trim();
-        if (!text2) {
-          const hint = runner.hint?.(stderrTail);
-          return reject(new RunError("AGENT_FAILED", hint ?? (stderrTail.trim() ? `${label2}: ${stderrTail.trim()}` : empty)));
-        }
-        resolve4(text2);
-      })
-    );
-  });
-}
-var tail = (stderr) => stderr.trim() ? `: ${stderr.trim()}` : "";
-
-// agent/runner.ts
+import { join as join23 } from "path";
 function runInstruction(request) {
   const { runner, settings } = runnerFor(request.config);
   return runStream(
@@ -26587,13 +26810,13 @@ function runAgentJson(prompt, config5, signal, { reads = false, ...options }) {
   return runJson(runner, { prompt, settings, reads, workspace: runner.workspace("task") }, signal, options);
 }
 function taskDir(config5) {
-  return join22(runnerFor(config5).runner.workspace("task"), "tmp");
+  return join23(runnerFor(config5).runner.workspace("task"), "tmp");
 }
 
 // agent/site-map-store.ts
 import { randomUUID as randomUUID9 } from "crypto";
-import { existsSync as existsSync5, mkdirSync as mkdirSync10, readFileSync as readFileSync12, readdirSync as readdirSync4, renameSync as renameSync3, rmSync as rmSync5, writeFileSync as writeFileSync9 } from "fs";
-import { dirname as dirname7, join as join23, resolve as resolve2, sep as sep3 } from "path";
+import { existsSync as existsSync5, mkdirSync as mkdirSync11, readFileSync as readFileSync13, readdirSync as readdirSync4, renameSync as renameSync4, rmSync as rmSync5, writeFileSync as writeFileSync10 } from "fs";
+import { dirname as dirname7, join as join24, resolve as resolve2, sep as sep3 } from "path";
 var STAGING = ".staging";
 function mapTargetFor(url2) {
   let parsed2;
@@ -26626,33 +26849,33 @@ function mapTargetFor(url2) {
   return { ok: true, target: { host, origin: parsed2.origin, domain: domain2, name } };
 }
 function uniqueName(domain2, host) {
-  const plain2 = skillNameForHost(domain2);
-  if (!SKILL_NAME_RE.test(plain2)) return null;
-  const owner = mappedHostOf(plain2);
-  if (owner === null || owner === host) return plain2;
+  const plain3 = skillNameForHost(domain2);
+  if (!SKILL_NAME_RE.test(plain3)) return null;
+  const owner = mappedHostOf(plain3);
+  if (owner === null || owner === host) return plain3;
   const disambiguated = skillNameForHost(domain2, { disambiguate: true });
   return SKILL_NAME_RE.test(disambiguated) ? disambiguated : null;
 }
 function mappedHostOf(name) {
   try {
-    const meta4 = JSON.parse(readFileSync12(join23(uploadedSkillsDir(), name, "meta.json"), "utf8"));
+    const meta4 = JSON.parse(readFileSync13(join24(uploadedSkillsDir(), name, "meta.json"), "utf8"));
     return typeof meta4.host === "string" ? meta4.host : "";
   } catch {
-    return existsSync5(join23(uploadedSkillsDir(), name, SKILL_FILE)) ? "" : null;
+    return existsSync5(join24(uploadedSkillsDir(), name, SKILL_FILE)) ? "" : null;
   }
 }
 function prepareStaging() {
   const id = randomUUID9();
-  const dir = join23(uploadedSkillsDir(), STAGING, id);
+  const dir = join24(uploadedSkillsDir(), STAGING, id);
   const staging = {
     id,
     dir,
-    screenshots: join23(dir, "screenshots"),
-    evidence: join23(dir, "evidence"),
-    pages: join23(dir, "pages")
+    screenshots: join24(dir, "screenshots"),
+    evidence: join24(dir, "evidence"),
+    pages: join24(dir, "pages")
   };
   for (const path of [dir, staging.screenshots, staging.evidence, staging.pages]) {
-    mkdirSync10(path, { recursive: true, mode: 448 });
+    mkdirSync11(path, { recursive: true, mode: 448 });
   }
   return staging;
 }
@@ -26665,7 +26888,7 @@ function stagedScreenshots(staging) {
 }
 function writeEvidence(staging, name, body) {
   if (!body.trim()) return;
-  writeFileSync9(join23(staging.evidence, name), body, { mode: 384 });
+  writeFileSync10(join24(staging.evidence, name), body, { mode: 384 });
 }
 function stageSiteMap(args) {
   const { staging, target, report, index, background, warnings, runId } = args;
@@ -26684,17 +26907,17 @@ generatedAt: ${generatedAt}
 ---
 
 `);
-  writeFileSync9(join23(staging.dir, SKILL_FILE), markdown, { mode: 384 });
-  writeFileSync9(join23(staging.dir, "map.json"), JSON.stringify(report, null, 2), { mode: 384 });
-  writeFileSync9(
-    join23(staging.dir, "meta.json"),
+  writeFileSync10(join24(staging.dir, SKILL_FILE), markdown, { mode: 384 });
+  writeFileSync10(join24(staging.dir, "map.json"), JSON.stringify(report, null, 2), { mode: 384 });
+  writeFileSync10(
+    join24(staging.dir, "meta.json"),
     JSON.stringify({ name: target.name, host: target.host, domain: target.domain, generatedAt, runId }, null, 2),
     { mode: 384 }
   );
   for (const [index_, page] of report.pages.entries()) {
     if (!page.notes) continue;
     const file2 = `${String(index_ + 1).padStart(2, "0")}-${skillNameForHost(page.path) || "page"}.md`;
-    writeFileSync9(join23(staging.pages, file2), `# ${page.title}
+    writeFileSync10(join24(staging.pages, file2), `# ${page.title}
 
 ${page.path}
 
@@ -26706,7 +26929,7 @@ ${page.notes}
     name: target.name,
     host: target.host,
     domain: target.domain,
-    directory: join23(uploadedSkillsDir(), target.name),
+    directory: join24(uploadedSkillsDir(), target.name),
     markdown,
     pages: report.pages.length,
     screenshots: stagedScreenshots(staging).length,
@@ -26757,7 +26980,7 @@ function renderSiteMapBody(args) {
   }
   const shots = report.pages.filter((page) => page.screenshot).length;
   if (shots) {
-    out.push("", "## Screenshots", "", `Full-size captures: ${join23(uploadedSkillsDir(), target.name, "screenshots")}`);
+    out.push("", "## Screenshots", "", `Full-size captures: ${join24(uploadedSkillsDir(), target.name, "screenshots")}`);
   }
   const body = out.join("\n");
   return body.length > MAX_MAP_BODY_BYTES ? `${body.slice(0, MAX_MAP_BODY_BYTES - 40)}
@@ -26769,7 +26992,7 @@ function commitStaging(stagingId, exactHost = false) {
   if (!staging) return failure("NOT_FOUND", "That mapping run is no longer staged.");
   let meta4;
   try {
-    meta4 = JSON.parse(readFileSync12(join23(staging, "meta.json"), "utf8"));
+    meta4 = JSON.parse(readFileSync13(join24(staging, "meta.json"), "utf8"));
   } catch {
     return failure("NOT_FOUND", "That staged map is incomplete.");
   }
@@ -26781,17 +27004,17 @@ function commitStaging(stagingId, exactHost = false) {
     return failure("NAME_TAKEN", `"${name}" is now a skill you wrote by hand. Remove it first, or discard this map.`);
   }
   if (exactHost && host !== domain2) {
-    const path = join23(staging, SKILL_FILE);
-    writeFileSync9(path, readFileSync12(path, "utf8").replace(`domains: [${domain2}]`, `domains: [${host}]`), {
+    const path = join24(staging, SKILL_FILE);
+    writeFileSync10(path, readFileSync13(path, "utf8").replace(`domains: [${domain2}]`, `domains: [${host}]`), {
       mode: 384
     });
   }
-  const destination = join23(uploadedSkillsDir(), name);
+  const destination = join24(uploadedSkillsDir(), name);
   if (!contained(destination)) return failure("INVALID_INPUT", "Refusing to write outside the skills directory.");
   if (existsSync5(destination)) {
-    renameSync3(destination, join23(uploadedSkillsDir(), STAGING, `${name}-replaced-${randomUUID9().slice(0, 8)}`));
+    renameSync4(destination, join24(uploadedSkillsDir(), STAGING, `${name}-replaced-${randomUUID9().slice(0, 8)}`));
   }
-  renameSync3(staging, destination);
+  renameSync4(staging, destination);
   log(`activated site map ${name} (${host})`);
   return success({ name, path: destination });
 }
@@ -26804,9 +27027,9 @@ function discardStaging(stagingId) {
 }
 function stagingDirFor(stagingId) {
   if (!/^[0-9a-f-]{36}$/i.test(stagingId)) return null;
-  const dir = resolve2(join23(uploadedSkillsDir(), STAGING, stagingId));
-  if (dirname7(dir) !== resolve2(join23(uploadedSkillsDir(), STAGING))) return null;
-  return existsSync5(join23(dir, SKILL_FILE)) ? dir : null;
+  const dir = resolve2(join24(uploadedSkillsDir(), STAGING, stagingId));
+  if (dirname7(dir) !== resolve2(join24(uploadedSkillsDir(), STAGING))) return null;
+  return existsSync5(join24(dir, SKILL_FILE)) ? dir : null;
 }
 function contained(path) {
   const root = resolve2(uploadedSkillsDir());
@@ -26814,7 +27037,7 @@ function contained(path) {
   return target === root || target.startsWith(root + sep3);
 }
 function sweepStaging(maxAgeMs = 24 * 60 * 60 * 1e3, now = Date.now()) {
-  const root = join23(uploadedSkillsDir(), STAGING);
+  const root = join24(uploadedSkillsDir(), STAGING);
   let entries;
   try {
     entries = readdirSync4(root);
@@ -26823,12 +27046,12 @@ function sweepStaging(maxAgeMs = 24 * 60 * 60 * 1e3, now = Date.now()) {
   }
   for (const entry of entries) {
     try {
-      const meta4 = JSON.parse(readFileSync12(join23(root, entry, "meta.json"), "utf8"));
+      const meta4 = JSON.parse(readFileSync13(join24(root, entry, "meta.json"), "utf8"));
       const at = typeof meta4.generatedAt === "string" ? Date.parse(meta4.generatedAt) : 0;
       if (at && now - at < maxAgeMs) continue;
     } catch {
     }
-    rmSync5(join23(root, entry), { recursive: true, force: true });
+    rmSync5(join24(root, entry), { recursive: true, force: true });
     log(`swept abandoned staging ${entry}`);
   }
 }
@@ -27687,8 +27910,8 @@ function clip2(text2) {
 
 // agent/captcha-analyst.ts
 import { randomUUID as randomUUID11 } from "crypto";
-import { mkdirSync as mkdirSync11, unlinkSync as unlinkSync2, writeFileSync as writeFileSync10 } from "fs";
-import { join as join24 } from "path";
+import { mkdirSync as mkdirSync12, unlinkSync as unlinkSync2, writeFileSync as writeFileSync11 } from "fs";
+import { join as join25 } from "path";
 var MAX_POINTS = 16;
 var ANSWER_TIMEOUT_MS = 45e3;
 var OPEN2 = "=== ANSWER ===";
@@ -27698,9 +27921,9 @@ async function answerChallenge(challenge, config5, signal) {
   const picture = decodeImage(challenge.image);
   if (!picture || !analystSees(config5) || signal.aborted) return null;
   const dir = taskDir(config5);
-  mkdirSync11(dir, { recursive: true, mode: 448 });
-  const path = join24(dir, `${randomUUID11()}-captcha.${picture.extension}`);
-  writeFileSync10(path, picture.bytes, { mode: 384 });
+  mkdirSync12(dir, { recursive: true, mode: 448 });
+  const path = join25(dir, `${randomUUID11()}-captcha.${picture.extension}`);
+  writeFileSync11(path, picture.bytes, { mode: 384 });
   const stop = new AbortController();
   const timer = setTimeout(() => stop.abort(new RunError("TIMEOUT", "The captcha analyst took too long.")), ANSWER_TIMEOUT_MS);
   const cancelled = () => stop.abort(signal.reason);
@@ -27884,8 +28107,8 @@ function handBack(result, rounds, why) {
 
 // agent/file-analyst.ts
 import { randomUUID as randomUUID12 } from "crypto";
-import { mkdirSync as mkdirSync12, unlinkSync as unlinkSync3, writeFileSync as writeFileSync11 } from "fs";
-import { join as join25 } from "path";
+import { mkdirSync as mkdirSync13, unlinkSync as unlinkSync3, writeFileSync as writeFileSync12 } from "fs";
+import { join as join26 } from "path";
 
 // agent/file-screen.ts
 var SAMPLE_BYTES = 64 * 1024;
@@ -28067,9 +28290,9 @@ async function analyzeFile(req, config5, signal) {
   }
   const { kind, extension: extension2 } = screened;
   const tmpDir = taskDir(config5);
-  mkdirSync12(tmpDir, { recursive: true, mode: 448 });
-  const path = join25(tmpDir, `${randomUUID12()}-${safeName2(req.name)}.${extension2}`);
-  writeFileSync11(path, bytes, { mode: 384 });
+  mkdirSync13(tmpDir, { recursive: true, mode: 448 });
+  const path = join26(tmpDir, `${randomUUID12()}-${safeName2(req.name)}.${extension2}`);
+  writeFileSync12(path, bytes, { mode: 384 });
   const stop = new AbortController();
   const timer = setTimeout(() => stop.abort(new RunError("TIMEOUT", "Reading the file took too long.")), ANALYZE_TIMEOUT_MS);
   const cancelled = () => stop.abort(signal.reason);
@@ -28161,8 +28384,8 @@ function safeName2(name) {
 
 // agent/recording.ts
 import { randomUUID as randomUUID13 } from "crypto";
-import { mkdirSync as mkdirSync13, unlinkSync as unlinkSync4, writeFileSync as writeFileSync12 } from "fs";
-import { join as join26 } from "path";
+import { mkdirSync as mkdirSync14, unlinkSync as unlinkSync4, writeFileSync as writeFileSync13 } from "fs";
+import { join as join27 } from "path";
 
 // ../lib/recordings/workflow.ts
 var MAX_STEPS = 80;
@@ -28327,9 +28550,9 @@ async function analyzeRecording(req, config5) {
     return failure("RECORDING_TOO_LARGE", "The recorded trace is too large to summarize.");
   }
   const tmpDir = taskDir(config5);
-  mkdirSync13(tmpDir, { recursive: true, mode: 448 });
-  const path = join26(tmpDir, `${randomUUID13()}-recording.json`);
-  writeFileSync12(path, trace, { mode: 384 });
+  mkdirSync14(tmpDir, { recursive: true, mode: 448 });
+  const path = join27(tmpDir, `${randomUUID13()}-recording.json`);
+  writeFileSync13(path, trace, { mode: 384 });
   const controller = new AbortController();
   const timer = setTimeout(() => controller.abort(), ANALYZE_TIMEOUT_MS2);
   log(`analyzing recording ${recording.name} (${recording.events.length} events on ${recording.host})`);
@@ -28440,8 +28663,8 @@ function clamp3(output) {
 }
 
 // agent/skill-store.ts
-import { existsSync as existsSync6, mkdirSync as mkdirSync14, readdirSync as readdirSync5, renameSync as renameSync4, rmSync as rmSync6, writeFileSync as writeFileSync13, chmodSync as chmodSync6 } from "fs";
-import { dirname as dirname8, join as join27, resolve as resolve3 } from "path";
+import { existsSync as existsSync6, mkdirSync as mkdirSync15, readdirSync as readdirSync5, renameSync as renameSync5, rmSync as rmSync6, writeFileSync as writeFileSync14, chmodSync as chmodSync6 } from "fs";
+import { dirname as dirname8, join as join28, resolve as resolve3 } from "path";
 var MAX_SKILL_FILES = 50;
 function saveSkill(draft) {
   const checked = validateSkillDraft(draft, { reservedNames: bundledSkillNames() });
@@ -28456,7 +28679,7 @@ function saveSkill(draft) {
   const dir = uploadedSkillsDir();
   const path = pathIn(dir, skill.name);
   if (!path) return failure("INVALID_INPUT", `"${skill.name}" is not a usable skill name.`);
-  if (existsSync6(join27(dir, skill.name, SKILL_FILE))) {
+  if (existsSync6(join28(dir, skill.name, SKILL_FILE))) {
     return failure(
       "NAME_TAKEN",
       `"${skill.name}" is a mapped site. Remove that map first, or give this skill another name.`
@@ -28467,11 +28690,11 @@ function saveSkill(draft) {
     return failure("TOO_MANY_SKILLS", `There are already ${MAX_SKILL_FILES} uploaded skills. Remove one first.`);
   }
   try {
-    mkdirSync14(dir, { recursive: true, mode: 448 });
+    mkdirSync15(dir, { recursive: true, mode: 448 });
     const temp = `${path}.tmp`;
-    writeFileSync13(temp, serializeSkillFile(skill), { mode: 384 });
+    writeFileSync14(temp, serializeSkillFile(skill), { mode: 384 });
     chmodSync6(temp, 384);
-    renameSync4(temp, path);
+    renameSync5(temp, path);
   } catch (error51) {
     log(`failed to save skill ${skill.name}`, error51);
     return failure("WRITE_FAILED", `Could not write ${path}: ${String(error51)}`);
@@ -28497,7 +28720,7 @@ function deleteSiteMap(name) {
   const path = pathIn(dir, name);
   if (!path) return failure("INVALID_INPUT", `"${name}" is not a usable skill name.`);
   const mapDir = path.replace(/\.md$/, "");
-  if (!existsSync6(join27(mapDir, SKILL_FILE))) {
+  if (!existsSync6(join28(mapDir, SKILL_FILE))) {
     return failure("NOT_FOUND", `No mapped site called "${name}".`);
   }
   try {
@@ -28511,13 +28734,13 @@ function deleteSiteMap(name) {
 }
 function pathIn(dir, name) {
   if (!SKILL_NAME_RE.test(name)) return null;
-  const candidate = resolve3(join27(dir, `${name}.md`));
+  const candidate = resolve3(join28(dir, `${name}.md`));
   return dirname8(candidate) === resolve3(dir) ? candidate : null;
 }
 function countSkills(dir) {
   try {
     return readdirSync5(dir, { withFileTypes: true }).filter(
-      (entry) => !entry.name.startsWith(".") && (entry.isFile() ? entry.name.endsWith(".md") : entry.isDirectory() && existsSync6(join27(dir, entry.name, SKILL_FILE)))
+      (entry) => !entry.name.startsWith(".") && (entry.isFile() ? entry.name.endsWith(".md") : entry.isDirectory() && existsSync6(join28(dir, entry.name, SKILL_FILE)))
     ).length;
   } catch {
     return 0;
@@ -28585,10 +28808,10 @@ var ExtensionLink = class {
       log("failed to send frame to extension", error51);
     }
   }
-  close(reason) {
-    this.dispose(reason);
+  close(reason2) {
+    this.dispose(reason2);
     try {
-      this.socket.close(1e3, reason);
+      this.socket.close(1e3, reason2);
     } catch {
     }
   }
@@ -28623,13 +28846,13 @@ var ExtensionLink = class {
     if (frame.t === "result") waiting.resolve(frame.result);
     else if (frame.t === "manifest") waiting.resolve({ ok: true, data: frame.tools });
   }
-  dispose(reason) {
+  dispose(reason2) {
     if (this.closed) return;
     this.closed = true;
     clearInterval(this.ping);
     for (const [, waiting] of this.pending) {
       clearTimeout(waiting.timer);
-      waiting.resolve(failure("EXTENSION_OFFLINE", `Connection lost: ${reason}`));
+      waiting.resolve(failure("EXTENSION_OFFLINE", `Connection lost: ${reason2}`));
     }
     this.pending.clear();
     this.onClose(this);
@@ -28710,8 +28933,8 @@ async function startDaemon({ version: version3, idleExit = true }) {
   const bundledHash = hashManifest(bundled);
   const bundledByHash = new Map(
     ["chromium", "firefox"].map((target) => {
-      const list2 = describeActions(target);
-      return [hashManifest(list2), list2];
+      const list3 = describeActions(target);
+      return [hashManifest(list3), list3];
     })
   );
   let offered = bundled;
@@ -28786,10 +29009,10 @@ async function startDaemon({ version: version3, idleExit = true }) {
     });
   }
   async function greet(ws, req) {
-    const reject = (reason, retryable) => {
-      log(`rejected extension: ${reason}`);
+    const reject = (reason2, retryable) => {
+      log(`rejected extension: ${reason2}`);
       try {
-        ws.send(JSON.stringify({ t: "unauthorized", reason, retryable }));
+        ws.send(JSON.stringify({ t: "unauthorized", reason: reason2, retryable }));
       } catch {
       }
       ws.close(4401, "unauthorized");
@@ -28876,7 +29099,7 @@ async function startDaemon({ version: version3, idleExit = true }) {
     links.get(install.installId)?.close("superseded by a newer connection");
     const known2 = bundledByHash.get(hello.manifestHash);
     const manifestInSync = known2 !== void 0;
-    const accepted = new ExtensionLink(
+    const accepted2 = new ExtensionLink(
       ws,
       { ...hello, ...install },
       (closing) => {
@@ -28956,21 +29179,22 @@ async function startDaemon({ version: version3, idleExit = true }) {
         session(source).handle(request);
       }
     );
-    links.set(accepted.id, accepted);
-    accepted.tools = known2 ?? bundled;
+    links.set(accepted2.id, accepted2);
+    accepted2.tools = known2 ?? bundled;
     settleOffer();
-    log(`extension ${hello.extensionVersion} connected from ${accepted.label} (manifest ${manifestInSync ? "in sync" : "DRIFTED"})`);
+    log(`extension ${hello.extensionVersion} connected from ${accepted2.label} (manifest ${manifestInSync ? "in sync" : "DRIFTED"})`);
     const welcome = {
       daemonVersion: version3,
       manifestHash: known2 ? hello.manifestHash : bundledHash,
       manifestInSync,
       sealedSessionKey
     };
-    accepted.send({ t: "welcome", ...welcome, proof: await serverProof(secret, transcript, welcome) });
+    accepted2.send({ t: "welcome", ...welcome, proof: await serverProof(secret, transcript, welcome) });
     scheduleIdleExit();
-    void pushAgentState(accepted);
-    pushSkillCatalog(accepted);
-    if (!known2) await adoptExtensionManifest(accepted);
+    void pushAgentState(accepted2);
+    watchModels();
+    pushSkillCatalog(accepted2);
+    if (!known2) await adoptExtensionManifest(accepted2);
   }
   function openLinks() {
     return [...links.values()].filter((link) => link.isOpen);
@@ -29008,12 +29232,21 @@ async function startDaemon({ version: version3, idleExit = true }) {
     }
     if (request.t === "setAgentModel") {
       const model = typeof request.model === "string" ? request.model : null;
-      writeAgentModel(request.agent, model);
+      if (!writeAgentModel(request.agent, model)) {
+        return failure("INVALID_INPUT", `"${String(model)}" is not a model id: it has to start with a letter or digit and hold no spaces.`);
+      }
       log(`${AGENTS[request.agent].label} model set to ${model?.trim() || "the default"}`);
     }
     if (request.t === "grantAgent") await grantRunner(request.agent);
-    const refresh = request.t !== "agentState" || request.refresh === true;
-    return success(await agentState(readAgentConfig(), { refresh }));
+    const recheck = request.t === "agentState" && request.refresh === true;
+    const state = await agentState(readAgentConfig(), { refresh: request.t !== "agentState" || recheck });
+    watchModels({ force: recheck });
+    return success(state);
+  }
+  function watchModels({ force = false } = {}) {
+    void refreshModelLists(readAgentConfig(), { force }).then((changed) => {
+      if (changed || force) for (const link of openLinks()) void pushAgentState(link);
+    }).catch((error51) => log(`could not refresh the model lists: ${String(error51)}`));
   }
   function settleGuardrail(request) {
     if (request.t === "setGuardrail") {
@@ -29161,8 +29394,11 @@ async function startDaemon({ version: version3, idleExit = true }) {
           log(`control ${client} set the agent to ${AGENTS[request.set].label}`);
         }
         if (request.grant) await grantRunner(request.grant);
-        const state = await agentState(readAgentConfig(), { refresh: !!changed });
-        if (changed) announceAgent();
+        const listed = isAgentKind(request.models);
+        if (listed) await refreshModelLists(readAgentConfig(), { force: true, only: request.models });
+        const state = await agentState(readAgentConfig(), { refresh: !!changed || listed });
+        if (changed || listed) announceAgent();
+        else watchModels();
         return send2(ws, { id: request.id, op: "agent", state });
       }
       if (request.op === "revoke") {
@@ -29326,11 +29562,11 @@ function nextFrame(ws) {
     ws.once("message", onMessage);
   });
 }
-function refuseUpgrade(socket, reason) {
+function refuseUpgrade(socket, reason2) {
   socket.write(`HTTP/1.1 403 Forbidden\r
 Content-Length: 0\r
 Connection: close\r
-X-Browsentic-Reason: ${reason}\r
+X-Browsentic-Reason: ${reason2}\r
 \r
 `);
   socket.destroy();
@@ -29340,7 +29576,7 @@ X-Browsentic-Reason: ${reason}\r
 var package_default = {
   name: "browsentic",
   mcpName: "io.github.imshaikot/browsentic",
-  version: "0.7.5",
+  version: "0.7.6",
   description: "A browser extension with an AI side panel that hands your real, logged-in browser to the AI agent you already run. Installs the extension, runs the local daemon, and optionally speaks MCP.",
   type: "module",
   license: "MIT",