cascade-ai 0.19.0 → 0.20.0

package/dist/index.d.cts

@@ -499,6 +499,16 @@ interface ToolsConfig {
      * 'auto' (default) = isolate when available else worker.
      */
     dynamicToolSandbox?: 'isolate' | 'worker' | 'auto';
+    /**
+     * When set, ONLY these tool names are registered — every other built-in tool
+     * (including shell/file/git, which have no other off-switch) is omitted
+     * entirely rather than merely approval-gated. Built for embedding Cascade in
+     * an untrusted/multi-tenant context (e.g. a hosted chat server) where the
+     * full tool surface must never exist for a run, not just require a click to
+     * use. `undefined`/omitted registers the full default set (unchanged
+     * behavior). An empty array registers no tools at all.
+     */
+    enabledTools?: string[];
 }
 interface HooksConfig {
     preToolUse?: HookDefinition[];

package/dist/index.d.ts

@@ -499,6 +499,16 @@ interface ToolsConfig {
      * 'auto' (default) = isolate when available else worker.
      */
     dynamicToolSandbox?: 'isolate' | 'worker' | 'auto';
+    /**
+     * When set, ONLY these tool names are registered — every other built-in tool
+     * (including shell/file/git, which have no other off-switch) is omitted
+     * entirely rather than merely approval-gated. Built for embedding Cascade in
+     * an untrusted/multi-tenant context (e.g. a hosted chat server) where the
+     * full tool surface must never exist for a run, not just require a click to
+     * use. `undefined`/omitted registers the full default set (unchanged
+     * behavior). An empty array registers no tools at all.
+     */
+    enabledTools?: string[];
 }
 interface HooksConfig {
     preToolUse?: HookDefinition[];

package/dist/index.js

@@ -190,7 +190,7 @@ var init_audit_logger = __esm({
 });
 
 // src/constants.ts
-var CASCADE_VERSION = "0.19.0";
+var CASCADE_VERSION = "0.20.0";
 var CASCADE_CONFIG_DIR = ".cascade";
 var CASCADE_MD_FILE = "CASCADE.md";
 var CASCADE_IGNORE_FILE = ".cascadeignore";
@@ -1034,14 +1034,27 @@ var AzureOpenAIProvider = class extends OpenAIProvider {
     return [fromDeployment ?? this.model];
   }
   async isAvailable() {
+    const params = {
+      model: this.model.id,
+      messages: [{ role: "user", content: "ping" }],
+      max_tokens: 1
+    };
     try {
-      await this.client.chat.completions.create({
-        model: this.model.id,
-        messages: [{ role: "user", content: "ping" }],
-        max_tokens: 1
-      });
+      await this.client.chat.completions.create(params);
       return true;
-    } catch {
+    } catch (err) {
+      if (err?.message && String(err.message).includes("max_completion_tokens")) {
+        try {
+          await this.client.chat.completions.create({
+            model: this.model.id,
+            messages: [{ role: "user", content: "ping" }],
+            max_completion_tokens: 1
+          });
+          return true;
+        } catch {
+          return false;
+        }
+      }
       return false;
     }
   }
@@ -1783,6 +1796,10 @@ var ModelSelector = class {
         actualId = parts.slice(1).join(":");
       }
     }
+    const registered = this.availableModels.get(actualId);
+    if (registered && (!providerStr || registered.provider === providerStr)) {
+      return registered;
+    }
     if (!providerStr) {
       const lower = actualId.toLowerCase();
       if (lower.includes("claude")) providerStr = "anthropic";
@@ -8028,29 +8045,32 @@ var ToolRegistry = class extends EventEmitter {
     return tool.execute(input, options);
   }
   registerDefaults() {
-    const tools = [
-      new ShellTool(this.config.shellAllowlist, this.config.shellBlocklist),
-      new FileReadTool(),
-      new FileWriteTool(),
-      new FileEditTool(),
-      new FileDeleteTool(),
-      new FileListTool(),
-      new GitTool(),
-      new GitHubTool(),
-      new ImageAnalyzeTool(),
-      new PDFCreateTool(),
-      new CodeInterpreterTool(),
-      new PeerCommunicationTool(),
-      new WebSearchTool(this.config.webSearch),
-      new GlobTool(),
-      new GrepTool(),
-      new WebFetchTool()
+    const allowlist = this.config.enabledTools;
+    const enabled = (name) => !allowlist || allowlist.includes(name);
+    const candidates = [
+      enabled("shell") && new ShellTool(this.config.shellAllowlist, this.config.shellBlocklist),
+      enabled("file_read") && new FileReadTool(),
+      enabled("file_write") && new FileWriteTool(),
+      enabled("file_edit") && new FileEditTool(),
+      enabled("file_delete") && new FileDeleteTool(),
+      enabled("file_list") && new FileListTool(),
+      enabled("git") && new GitTool(),
+      enabled("github") && new GitHubTool(),
+      enabled("image_analyze") && new ImageAnalyzeTool(),
+      enabled("pdf_create") && new PDFCreateTool(),
+      enabled("run_code") && new CodeInterpreterTool(),
+      enabled("peer_message") && new PeerCommunicationTool(),
+      enabled("web_search") && new WebSearchTool(this.config.webSearch),
+      enabled("glob") && new GlobTool(),
+      enabled("grep") && new GrepTool(),
+      enabled("web_fetch") && new WebFetchTool()
     ];
+    const tools = candidates.filter((t) => t !== false);
     for (const tool of tools) {
       tool.setWorkspaceRoot(this.workspaceRoot);
       this.register(tool);
     }
-    if (this.config.browserEnabled) {
+    if (this.config.browserEnabled && enabled("browser")) {
       const browser = new BrowserTool();
       browser.setWorkspaceRoot(this.workspaceRoot);
       this.register(browser);
@@ -8400,7 +8420,13 @@ var ToolsConfigSchema = z.object({
    * - 'worker': node:worker_threads (resource/kill limits, but not capability-confined).
    * - 'auto' (default): use the isolate when `isolated-vm` loads, else fall back to worker.
    */
-  dynamicToolSandbox: z.enum(["isolate", "worker", "auto"]).default("auto")
+  dynamicToolSandbox: z.enum(["isolate", "worker", "auto"]).default("auto"),
+  /**
+   * When set, ONLY these tool names are registered — the sole way to omit a
+   * built-in tool (shell/file/git/…) from existing at all, rather than just
+   * gating it behind approval. Omitted = full default set (unchanged).
+   */
+  enabledTools: z.array(z.string()).optional()
 });
 var HookDefinitionSchema = z.object({
   name: z.string().optional(),