cascade-ai 0.66.1 → 0.67.0

package/dist/index.js

@@ -1,6 +1,6 @@
 import Database from 'better-sqlite3';
-import path24, { dirname } from 'path';
-import fs23, { mkdirSync, writeFileSync, existsSync, readFileSync } from 'fs';
+import path25, { dirname } from 'path';
+import fs24, { mkdirSync, writeFileSync, existsSync, readFileSync } from 'fs';
 import os6 from 'os';
 import crypto4, { randomUUID, randomBytes, createHash, timingSafeEqual, webcrypto } from 'crypto';
 import EventEmitter, { setMaxListeners } from 'events';
@@ -13,7 +13,7 @@ import http, { createServer } from 'http';
 import https from 'https';
 import zlib from 'zlib';
 import { Readable } from 'stream';
-import fs4 from 'fs/promises';
+import fs5 from 'fs/promises';
 import * as ignoreFactory from 'ignore';
 import ignoreFactory__default from 'ignore';
 import { exec, execFile, execSync } from 'child_process';
@@ -61,12 +61,12 @@ var init_audit_logger = __esm({
       constructor(workspacePath, debugMode = false) {
         this.workspacePath = workspacePath;
         this.debugMode = debugMode;
-        const cascadeDir = path24.join(workspacePath, ".cascade");
-        if (!fs23.existsSync(cascadeDir)) {
-          fs23.mkdirSync(cascadeDir, { recursive: true });
+        const cascadeDir = path25.join(workspacePath, ".cascade");
+        if (!fs24.existsSync(cascadeDir)) {
+          fs24.mkdirSync(cascadeDir, { recursive: true });
         }
-        this.keyPath = path24.join(cascadeDir, "audit_log.key");
-        this.dbPath = path24.join(cascadeDir, "audit_log.db");
+        this.keyPath = path25.join(cascadeDir, "audit_log.key");
+        this.dbPath = path25.join(cascadeDir, "audit_log.db");
         this.initEncryptionKey();
         this.db = new Database(this.dbPath);
         this.db.pragma("journal_mode = WAL");
@@ -96,11 +96,11 @@ var init_audit_logger = __esm({
         return crypto4.createHash("sha256").update(`${prevHash}|${timestamp}|${eventType}|${tierId}|${encryptedPayload}`).digest("hex");
       }
       initEncryptionKey() {
-        if (fs23.existsSync(this.keyPath)) {
-          this.encryptionKey = fs23.readFileSync(this.keyPath);
+        if (fs24.existsSync(this.keyPath)) {
+          this.encryptionKey = fs24.readFileSync(this.keyPath);
         } else {
           this.encryptionKey = crypto4.randomBytes(32);
-          fs23.writeFileSync(this.keyPath, this.encryptionKey);
+          fs24.writeFileSync(this.keyPath, this.encryptionKey);
         }
       }
       encrypt(text) {
@@ -178,9 +178,9 @@ var init_audit_logger = __esm({
       dumpDebugIfNeeded() {
         if (!this.debugMode) return;
         try {
-          const dumpPath = path24.join(os6.tmpdir(), "cascade_audit_logs_debug.json");
+          const dumpPath = path25.join(os6.tmpdir(), "cascade_audit_logs_debug.json");
           const entries = this.getAllLogs();
-          fs23.writeFileSync(dumpPath, JSON.stringify(entries, null, 2), "utf-8");
+          fs24.writeFileSync(dumpPath, JSON.stringify(entries, null, 2), "utf-8");
         } catch (err) {
           console.error("Failed to dump debug audit logs", err);
         }
@@ -1862,7 +1862,7 @@ function reconcilePrice(model, live) {
 }
 
 // src/constants.ts
-var CASCADE_VERSION = "0.66.1";
+var CASCADE_VERSION = "0.67.0";
 var CASCADE_CONFIG_DIR = ".cascade";
 var CASCADE_MD_FILE = "CASCADE.md";
 var CASCADE_IGNORE_FILE = ".cascadeignore";
@@ -4617,7 +4617,7 @@ function computeDelegationSavings(stats, t1Model) {
 var DEFAULT_SNAPSHOT_URL = "https://raw.githubusercontent.com/Varun-SV/Cascade-AI/main/src/core/router/benchmark-data.json";
 var OPENROUTER_MODELS_URL = "https://openrouter.ai/api/v1/models";
 var FETCH_TIMEOUT_MS = 8e3;
-var DEFAULT_CACHE_FILE = path24.join(os6.homedir(), GLOBAL_CONFIG_DIR, "benchmarks-cache.json");
+var DEFAULT_CACHE_FILE = path25.join(os6.homedir(), GLOBAL_CONFIG_DIR, "benchmarks-cache.json");
 function normalizeModelId2(id) {
   let s = id.toLowerCase();
   const slash = s.lastIndexOf("/");
@@ -4652,7 +4652,7 @@ var LiveDataProvider = class {
     if (this.loaded) return;
     this.loaded = true;
     try {
-      const raw = await fs4.readFile(this.opts.cacheFile, "utf-8");
+      const raw = await fs5.readFile(this.opts.cacheFile, "utf-8");
       const cache = JSON.parse(raw);
       if (cache.snapshot?.families) {
         this.snapshot = cache.snapshot;
@@ -4764,14 +4764,14 @@ var LiveDataProvider = class {
   }
   async saveCache() {
     try {
-      await fs4.mkdir(path24.dirname(this.opts.cacheFile), { recursive: true });
+      await fs5.mkdir(path25.dirname(this.opts.cacheFile), { recursive: true });
       const cache = {
         fetchedAt: this.fetchedAt,
         snapshot: this.snapshot ?? void 0,
         prices: Object.fromEntries(this.prices),
         capabilities: Object.fromEntries(this.capabilities)
       };
-      await fs4.writeFile(this.opts.cacheFile, JSON.stringify(cache, null, 2), "utf-8");
+      await fs5.writeFile(this.opts.cacheFile, JSON.stringify(cache, null, 2), "utf-8");
     } catch {
     }
   }
@@ -6590,7 +6590,16 @@ var KNOWN_TOOLS = [
   "glob",
   "grep",
   "web_fetch",
-  "generate_image"
+  // Every media tool buildMediaTools can register, not just the image one.
+  // Omitting three of the four meant a run whose ONLY tools were media ones
+  // (a video-generation subtask on an account with no file/web tools) counted
+  // as "no tools registered" and dropped all tool guidance — the worker was
+  // then told nothing about using tools at all, and wrote the video as prose.
+  "generate_image",
+  "generate_video",
+  "generate_speech",
+  "transcribe_audio",
+  "generate_document"
 ];
 var PROVIDER_BACKED_TOOLS = /* @__PURE__ */ new Set([
   "generate_image",
@@ -6607,19 +6616,55 @@ function buildWorkerRules(has) {
     canWriteFiles && "- If the task asks for a file or artifact, you must actually create it in the workspace, verify that it exists, and inspect it before claiming success.",
     has("web_search") && '- Use the "web_search" tool to find current information, documentation, news, or general web data.',
     has("pdf_create") && '- Use the "pdf_create" tool for PDF requests.',
+    // A .docx/.pptx/.xlsx is a ZIP of OOXML parts, not text with a suffix.
+    // file_write does exactly what it promises — writes the model's characters
+    // verbatim — so without this rule the worker "wrote" a Word document that
+    // Word correctly reported as corrupted. Stated as an explicit prohibition
+    // on the tool it would otherwise reach for, because "use generate_document"
+    // alone competes with a file_write habit the model already has.
+    has("generate_document") && '- For a Word (.docx), PowerPoint (.pptx) or Excel (.xlsx) deliverable you MUST call the "generate_document" tool and NEVER "file_write" or "run_code" \u2014 those formats are ZIP archives of XML, so text written straight to the path opens as a corrupted file. Pass the target path plus the source: Markdown for .docx, Markdown slides separated by --- rules for .pptx (each slide starts with a heading), CSV for .xlsx.',
+    // The alternative to this rule is not "a worse chart" — it is a paragraph
+    // describing a chart that does not exist, which is what real decks came
+    // back with. A `chart:` block is checkable, carries the exact numbers, and
+    // becomes a genuine editable PowerPoint chart object.
+    has("generate_document") && '- For any data-driven visualization (a chart, graph, trend, breakdown or comparison of numbers), emit a fenced ```chart:bar block \u2014 also chart:line, chart:pie, chart:doughnut, chart:area, chart:scatter \u2014 whose body is an optional "title: ..." line followed by CSV: a header row of "<category label>,<series name>,<series name>", then one row per category. In a PowerPoint deliverable that becomes a REAL, editable chart carrying your exact numbers; in Word and Excel the same block keeps every value as a table or worksheet. Never write prose describing a chart in place of emitting one.',
     // Without this the model "writes the image" as prose — a bracketed
     // description sitting in the deck where the picture should be — even with a
     // working image model registered. Naming the reference syntax matters as
     // much as naming the tool: a generated image nobody embeds is still a
-    // missing image.
+    // missing image. It also has to say the reference must stand ALONE on its
+    // line, because only a standalone reference is parsed as a picture (see
+    // core/documents/blocks.ts matchImageLine) — one embedded mid-sentence
+    // silently degrades to caption text.
     //
-    // Scoped to PowerPoint/Word specifically: those are the only exporters
-    // that actually embed a Markdown image reference (cloud/web/exporters.ts
-    // toPptx/toDocx). PDF and plain-text/Markdown deliverables flatten a
-    // reference straight to caption text — telling the model to call
-    // generate_image for THOSE just pays for an image nobody ever sees.
-    has("generate_image") && '- When a slide deck (PowerPoint) or Word document deliverable calls for a decorative image or illustration, you MUST call the "generate_image" tool and then reference its result using Markdown image syntax: ![description](location), where "location" is exactly the string the tool reported back. NEVER write a text placeholder or a bracketed description such as [image: a cat] in its place. Do NOT use "generate_image" for a chart, graph, or diagram that must show exact data (numbers, axes, labels) \u2014 an image model cannot guarantee those values are correct, so render that data as a Markdown table instead. For any OTHER deliverable format (PDF, plain text, code, etc.) do NOT call "generate_image" \u2014 those cannot embed the result, so describe the visual in words instead.',
-    has("run_code") && '- Use the "run_code" tool for any file types (Excel, Zip, csv, etc.) or complex processing not covered by other tools. Always cleanup after code execution.',
+    // Scoped to PowerPoint/Word specifically: those are the only renderers that
+    // actually embed a Markdown image reference. PDF and plain-text/Markdown
+    // deliverables flatten a reference straight to caption text — telling the
+    // model to call generate_image for THOSE just pays for an image nobody
+    // ever sees.
+    has("generate_image") && // Supersedes the earlier wording of this same rule: it now names the
+    // standalone-line parser constraint, says to generate BEFORE writing the
+    // document, and points data-driven visuals at a ```chart: block rather
+    // than a Markdown table, which is only the right advice now that chart
+    // blocks render as real chart objects.
+    '- When a slide deck (PowerPoint) or Word document deliverable calls for a decorative image, photo or illustration, you MUST call the "generate_image" tool \u2014 once per image the deliverable needs, BEFORE you write the document \u2014 and then put each result on a line of its OWN using Markdown image syntax: ![description](location), where "location" is exactly the string the tool reported back. A reference inside a sentence stays prose and no picture appears. NEVER write a text placeholder or a bracketed description such as [image: a cat] in its place, and never state that an image is included when you did not generate one. Do NOT use "generate_image" for a chart, graph or diagram that must show exact data (numbers, axes, labels) \u2014 an image model cannot guarantee those values are correct; emit a ```chart: block instead. For any OTHER deliverable format (PDF, plain text, code, etc.) do NOT call "generate_image" \u2014 those cannot embed the result, so describe the visual in words instead.',
+    // The other half of image reliability, and the half no amount of
+    // instruction-tightening could fix: generate_image only exists when an
+    // OpenAI or Gemini key is configured (multimodal/registry.ts CAPABILITIES).
+    // With neither, the model was never given a choice — and a model that
+    // doesn't know that writes "[illustration of a cat]" and moves on. Said out
+    // loud, up front, so the fallback is a real chart or honest prose.
+    !has("generate_image") && (has("generate_document") || canWriteFiles) && "- No image-generation model is available on this run, so there is NO tool that can draw a picture. Do not emit a Markdown image reference, a bracketed placeholder such as [image: a cat], or any claim that an illustration is included. If the request needs a data visualization use a ```chart: block, which needs no image model; otherwise describe the visual in words and say plainly that no image could be generated.",
+    // The video counterpart of the image rule above, and the fix for the
+    // reported "it writes scripts forever and never makes the video" run. The
+    // failure mode is identical — the model narrates the deliverable instead of
+    // producing it — but the stakes are not: a video subtask that ends in prose
+    // has burned the whole pre-production plan for nothing. Unlike the image
+    // rule this is NOT scoped to a document format, because the clip itself is
+    // the deliverable rather than an illustration inside one, and the reference
+    // syntax is a plain link: Markdown image syntax does not embed a video.
+    has("generate_video") && '- When the subtask deliverable is a video, you MUST call the "generate_video" tool \u2014 that call IS the deliverable, and the subtask is not done until it has returned. NEVER deliver the video as prose, a script, a storyboard, or a bracketed placeholder such as [video: a cat skating], and NEVER claim a video exists unless the tool reported a location for it. Call it exactly ONCE: it is billed per second of output and renders for minutes, so a second call charges the user again. Then report the location string the tool returned VERBATIM as your result, referencing it as [description](location) if it goes inside a document. If the tool reports a failure or a timeout, report that failure verbatim and stop \u2014 do NOT call it again, and do NOT substitute a written description of a video that was never made.',
+    has("run_code") && `- Use the "run_code" tool for data processing, archives, and file formats not covered by a dedicated tool. ${has("generate_document") ? 'Do NOT use it to build a .docx, .pptx or .xlsx \u2014 "generate_document" already produces those correctly. ' : ""}${has("pdf_create") ? 'Do NOT use it to build a PDF \u2014 "pdf_create" does that. ' : ""}Always cleanup after code execution.`,
     "- If you are not making meaningful progress, stop and escalate rather than looping or padding the response.",
     has("peer_message") && '- Use the "peer_message" tool to communicate with other T3 workers if your tasks have dependencies or shared state. You can send updates or wait for signals.',
     hasAnyTool && "- Only use tools directly relevant to THIS subtask. Do not reach for an unrelated connected-service action (e.g. creating, deleting, or modifying a repository, issue, or PR; sending a message) unless the subtask explicitly calls for it.",
@@ -6630,13 +6675,34 @@ function buildWorkerRules(has) {
 Rules:
 ${rules.filter((r) => r !== false).join("\n")}`;
 }
-var ARTIFACT_TOOLS = /* @__PURE__ */ new Set(["file_write", "file_edit", "shell"]);
+var ARTIFACT_TOOLS = /* @__PURE__ */ new Set(["file_write", "file_edit", "shell", "generate_document"]);
+var ARTIFACT_FILE_RE = /\b[\w./-]+\.(pdf|md|html|txt|json|csv|py|js|ts|tsx|jsx|docx?|pptx?|xlsx?|png|jpg|jpeg|svg|gif)\b/i;
 function shouldRequireArtifact(assignment, toolNames) {
   if (!toolNames.some((n) => ARTIFACT_TOOLS.has(n))) return false;
   if (assignment?.files?.length) return true;
   const haystack = `${assignment?.description ?? ""}
 ${assignment?.expectedOutput ?? ""}`;
-  return /\b[\w./-]+\.(pdf|md|html|txt|json|csv|py|js|ts|tsx|jsx|docx?|png|jpg|jpeg|svg|gif)\b/i.test(haystack) || /save (?:a|the)? file|create (?:a|the)? file|write (?:a|the)? file/i.test(haystack);
+  return ARTIFACT_FILE_RE.test(haystack) || /save (?:a|the)? file|create (?:a|the)? file|write (?:a|the)? file/i.test(haystack);
+}
+var VISUAL_REQUEST_RE = /\b(image|images|picture|pictures|photo|photos|illustration|illustrations|visual|visuals|visualisation|visualization|visualizations|chart|charts|graph|graphs|plot|plots|diagram|diagrams|infographic)\b/i;
+var IMAGE_REF_RE = /!\[[^\]]*\]\([^)]+\)/;
+var CHART_BLOCK_RE = /^\s*```+\s*chart\s*:/im;
+function missingVisualEvidence(assignment, output, calledTools, toolNames) {
+  const canVisualize = toolNames.includes("generate_image") || toolNames.includes("generate_document");
+  if (!canVisualize) return null;
+  const haystack = `${assignment?.description ?? ""}
+${assignment?.expectedOutput ?? ""}`;
+  if (!VISUAL_REQUEST_RE.test(haystack)) return null;
+  if (calledTools.includes("generate_image") || calledTools.includes("generate_document")) return null;
+  if (IMAGE_REF_RE.test(output) || CHART_BLOCK_RE.test(output)) return null;
+  const options = [];
+  if (toolNames.includes("generate_image")) {
+    options.push('call "generate_image" and reference the result on its own line as ![description](location)');
+  }
+  if (toolNames.includes("generate_document")) {
+    options.push("emit a fenced ```chart:bar (or chart:line / chart:pie) block whose body is CSV, for anything data-driven");
+  }
+  return `The subtask asks for a visual, but the output contains no embedded image and no chart block \u2014 only prose. ${options.join(", or ")}. Describing a picture is not producing one.`;
 }
 var T3Worker = class extends BaseTier {
   router;
@@ -6817,6 +6883,18 @@ Now execute your subtask using this context where relevant.`
           return this.buildResult("ESCALATED", output, { checksRun, passed, failed }, issues, correctionAttempts);
         }
       }
+      const visualIssue = missingVisualEvidence(
+        assignment,
+        output,
+        toolCalls.map((t) => t.name),
+        this.tools.map((t) => t.name)
+      );
+      if (visualIssue) {
+        correctionAttempts = 1;
+        issues.push(visualIssue);
+        this.sendStatusUpdate({ progressPct: 68, currentAction: "Verifying requested visuals", status: "IN_PROGRESS" });
+        output = await this.correctOutput(output, [visualIssue]);
+      }
       this.sendStatusUpdate({ progressPct: 70, currentAction: "Self-testing output", status: "IN_PROGRESS" });
       const testResult = await this.selfTest(assignment, output);
       checksRun.push(...testResult.checksRun);
@@ -7131,8 +7209,8 @@ HIERARCHY CONTEXT: ${this.hierarchyContext}` : "") + textToolSuffix,
         // Media generation can run for a minute; without this a cancelled run
         // still pays for an image nobody will see.
         ...this.signal ? { signal: this.signal } : {},
-        saveSnapshot: async (path26, content) => {
-          this.store?.addFileSnapshot(this.taskId, path26, content);
+        saveSnapshot: async (path27, content) => {
+          this.store?.addFileSnapshot(this.taskId, path27, content);
         },
         sendPeerSync: (to, syncType, content) => {
           this.peerBus?.send(this.id, to, syncType, this.assignment?.subtaskId ?? "", content);
@@ -7161,6 +7239,12 @@ HIERARCHY CONTEXT: ${this.hierarchyContext}` : "") + textToolSuffix,
       if (isTaggedSystemic || isProviderBacked && classifyProviderError(err).systemic) {
         throw new CriticalToolError(errMsg, tc.name);
       }
+      if (isProviderBacked) {
+        throw new CriticalToolError(
+          `${tc.name} failed and was not retried \u2014 media generation is billed per attempt, so Cascade stops on the first failure instead of paying for a second. Reason: ${errMsg}`,
+          tc.name
+        );
+      }
       return await this.adaptiveFallback(tc, `Tool error: ${errMsg}`);
     }
   }
@@ -7170,6 +7254,14 @@ HIERARCHY CONTEXT: ${this.hierarchyContext}` : "") + textToolSuffix,
    *   1. Find a semantically similar registered tool and retry with same input
    *   2. Synthesize a new tool via ToolCreator (if available) and run it
    *   3. Return the original error so the agent loop can decide what to do next
+   *
+   * Scoped to CHEAP, task-scoped failures — the class of problem it was built
+   * for is a wrong or missing tool name, where a name-similar sibling plausibly
+   * does the same job for the same (near-zero) cost. PROVIDER_BACKED_TOOLS never
+   * reach it: their siblings are keyword-similar but semantically different
+   * (generate_image is not a stand-in for generate_video), and every attempt —
+   * theirs, or a synthesized replacement's — is separately billed. See the
+   * fast-fail branch in executeTool().
    */
   async adaptiveFallback(tc, originalError) {
     const altTool = this.findAlternativeTool(tc.name);
@@ -7294,7 +7386,7 @@ ${assignment.expectedOutput}`;
     const declared = (assignment.files ?? []).map((f) => f.trim()).filter((f) => f.includes("."));
     const haystack = `${assignment.description}
 ${assignment.expectedOutput}`;
-    const matches = haystack.match(/\b[\w./-]+\.(pdf|md|html|txt|json|csv|py|js|ts|tsx|jsx|docx?|png|jpg|jpeg|svg|gif)\b/gi) ?? [];
+    const matches = haystack.match(new RegExp(ARTIFACT_FILE_RE.source, "gi")) ?? [];
     return [.../* @__PURE__ */ new Set([...declared, ...matches.map((m) => m.trim())])];
   }
   async verifyArtifacts(assignment) {
@@ -7305,9 +7397,9 @@ ${assignment.expectedOutput}`;
     const { promisify: promisify4 } = await import('util');
     const execAsync2 = promisify4(exec2);
     for (const artifactPath of artifactPaths) {
-      const absolutePath = path24.resolve(process.cwd(), artifactPath);
+      const absolutePath = path25.resolve(process.cwd(), artifactPath);
       try {
-        const stat = await fs4.stat(absolutePath);
+        const stat = await fs5.stat(absolutePath);
         if (!stat.isFile()) {
           issues.push(`Expected artifact is not a file: ${artifactPath}`);
           continue;
@@ -7316,8 +7408,22 @@ ${assignment.expectedOutput}`;
           issues.push(`Artifact is empty: ${artifactPath}`);
           continue;
         }
-        if (!/\.pdf$/i.test(artifactPath)) {
-          const content = await fs4.readFile(absolutePath, "utf-8");
+        if (/\.(docx|pptx|xlsx)$/i.test(artifactPath)) {
+          const head = Buffer.alloc(4);
+          const fh = await fs5.open(absolutePath, "r");
+          try {
+            await fh.read(head, 0, 4, 0);
+          } finally {
+            await fh.close();
+          }
+          if (head.toString("latin1") !== "PK") {
+            issues.push(
+              `${artifactPath} is not a valid Office file \u2014 it must be written with the generate_document tool, which renders the real OOXML archive. Plain text saved under that extension opens as corrupted.`
+            );
+            continue;
+          }
+        } else if (!/\.pdf$/i.test(artifactPath)) {
+          const content = await fs5.readFile(absolutePath, "utf-8");
           if (!content.trim()) {
             issues.push(`Artifact content is empty: ${artifactPath}`);
             continue;
@@ -7326,7 +7432,7 @@ ${assignment.expectedOutput}`;
           issues.push(`PDF artifact looks too small to be valid: ${artifactPath}`);
           continue;
         }
-        const ext = path24.extname(absolutePath).toLowerCase();
+        const ext = path25.extname(absolutePath).toLowerCase();
         try {
           if (ext === ".ts" || ext === ".tsx") {
             await execAsync2(`npx tsc --noEmit ${absolutePath}`, { timeout: 1e4 });
@@ -7922,15 +8028,244 @@ _(incomplete: ${t2Result.issues.join("; ")})_`;
   return output;
 }
 
+// src/core/multimodal/registry.ts
+var CAPABILITIES = [
+  // ── Image ──
+  {
+    modality: "image",
+    provider: "openai",
+    modelId: "dall-e-3",
+    api: "openai-images"
+  },
+  {
+    // Was `imagen-4.0-generate-001` on `:predict`, which now 404s for new keys
+    // ("no longer available to new users") — Imagen's :predict API is deprecated
+    // and shuts down 2026-08-17. Google's own migration path is this model on
+    // the ordinary generateContent endpoint, so the fix was never another Imagen
+    // id: the whole request/response SHAPE changes, which is why `api` moved to
+    // 'gemini-generate-content' rather than just the modelId moving.
+    // https://ai.google.dev/gemini-api/docs/imagen
+    modality: "image",
+    provider: "gemini",
+    modelId: "gemini-2.5-flash-image",
+    api: "gemini-generate-content"
+  },
+  // ── Speech (text → audio) ──
+  {
+    modality: "speech",
+    provider: "openai",
+    modelId: "tts-1",
+    api: "openai-speech"
+  },
+  {
+    // The only quality claim in this table that needs no leaderboard: OpenAI
+    // ships these as the same voice at two fidelities and charges double for
+    // this one. That is the vendor's own ordering, not an inference.
+    modality: "speech",
+    provider: "openai",
+    modelId: "tts-1-hd",
+    api: "openai-speech",
+    quality: 70,
+    qualityBasis: "OpenAI's own hd variant of tts-1, priced 2x"
+  },
+  // ── Transcription (audio → text) ──
+  {
+    modality: "transcription",
+    provider: "openai",
+    modelId: "whisper-1",
+    api: "openai-transcriptions"
+  },
+  // ── Video ──
+  {
+    // Long-running: submit returns an operation name, the video lands minutes
+    // later, and the bytes come from a short-lived signed URL. generate.ts owns
+    // that polling loop; the registry only records the shape via `api`.
+    //
+    // `veo-3.1-generate-001` (no "-preview") is VERTEX AI's id for this model,
+    // not the Gemini Developer API's — this file calls
+    // generativelanguage.googleapis.com (see generate.ts), which 404s on it:
+    // "models/veo-3.1-generate-001 is not found for API version v1beta". On the
+    // Gemini API specifically, Veo 3.1 is still preview-only, so the correct id
+    // there is `veo-3.1-generate-preview`.
+    // https://ai.google.dev/gemini-api/docs/veo
+    modality: "video",
+    provider: "gemini",
+    modelId: "veo-3.1-generate-preview",
+    api: "gemini-predict-lro"
+  }
+];
+function capabilityCost(cap) {
+  const match = findPricing(cap.modelId, cap.provider, {
+    fallbackProviders: cap.provider === "gemini" ? ["vertex"] : []
+  });
+  const rate = match?.entry.rates?.[0];
+  if (!rate) return null;
+  const unitLabel = {
+    per_image: "per image",
+    per_second: "per second of video",
+    per_character: "per character",
+    per_audio_minute: "per audio minute"
+  };
+  const unit = unitLabel[rate.unit] ?? rate.unit;
+  const amount = rate.amount;
+  const shown = amount < 1e-3 ? amount.toExponential(2) : amount.toFixed(4);
+  return { label: `$${shown} ${unit}`, amount, unit };
+}
+function explainChoice(c, cost, modality, isBest) {
+  const priced = cost ? ` ${cost.label}.` : "";
+  if (c.quality !== void 0) {
+    return isBest ? `${c.modelId} (${c.provider}) \u2014 ranked highest for ${modality}: ${c.qualityBasis}.${priced}` : `${c.modelId} (${c.provider}) \u2014 ranked alternative for ${modality}: ${c.qualityBasis}.${priced}`;
+  }
+  const noRanking = ". No published quality ranking is applied for this modality, so this is a cost choice, not a quality one.";
+  return isBest ? `${c.modelId} (${c.provider}) \u2014 cheapest usable ${modality} model` + (cost ? ` at ${cost.label}` : "") + noRanking : `${c.modelId} (${c.provider}) \u2014 alternative usable ${modality} model` + (cost ? ` at ${cost.label}` : "") + noRanking;
+}
+var MultimodalRegistry = class {
+  /** Provider types the user has actually configured a key for. */
+  available;
+  constructor(availableProviders) {
+    this.available = new Set(availableProviders);
+  }
+  /** Every capability whose provider is configured AND which Cascade can call. */
+  usable(modality) {
+    return CAPABILITIES.filter(
+      (c) => !c.unsupported && this.available.has(c.provider) && (!modality || c.modality === modality)
+    );
+  }
+  /** Modalities this account can actually generate right now. */
+  availableModalities() {
+    return [...new Set(this.usable().map((c) => c.modality))];
+  }
+  /**
+   * Every usable capability for a modality, best first.
+   *
+   * Ranked models beat unranked ones, then higher quality, then lower unit
+   * price. An explicit `preferModel` is moved to the head when it is usable —
+   * the user naming a model is a stronger signal than any prior.
+   *
+   * `select()` is just the head of this list. The TAIL is the point: a systemic
+   * provider failure (dead key, 404, exhausted quota) is scoped to one
+   * provider+model, so "this model cannot draw" is not the same fact as "this
+   * account cannot draw". A caller holding the ordered alternatives can try the
+   * next provider instead of aborting the whole run — see generate-media.ts.
+   */
+  rank(modality, opts = {}) {
+    const scored = this.usable(modality).map((c) => ({ c, cost: capabilityCost(c) })).sort((a, b) => {
+      const qa = a.c.quality ?? -1;
+      const qb = b.c.quality ?? -1;
+      if (qa !== qb) return qb - qa;
+      const pa = a.cost?.amount ?? Number.POSITIVE_INFINITY;
+      const pb = b.cost?.amount ?? Number.POSITIVE_INFINITY;
+      return pa - pb;
+    });
+    const results = scored.map(({ c, cost }, i) => ({
+      capability: c,
+      cost,
+      reason: explainChoice(c, cost, modality, i === 0)
+    }));
+    if (opts.preferModel) {
+      const i = results.findIndex((r) => r.capability.modelId === opts.preferModel);
+      if (i > -1) {
+        const [wanted] = results.splice(i, 1);
+        results.unshift({ ...wanted, reason: `Requested explicitly: ${wanted.capability.modelId}.` });
+      }
+    }
+    return results;
+  }
+  /**
+   * Pick a model for a modality — the best usable one, or null if there is none.
+   */
+  select(modality, opts = {}) {
+    return this.rank(modality, opts)[0] ?? null;
+  }
+  /**
+   * A plain-language account of what this account can and cannot generate —
+   * including the things it cannot, and why.
+   *
+   * This is the USER-facing inventory (model ids and unit prices), keyed on
+   * which providers are configured. It is deliberately NOT what the planner
+   * reads: see `describeGenerationForPlanner()` below for that, and the note
+   * there for why the two cannot be the same string.
+   */
+  describe() {
+    const lines = [];
+    const usable = this.usable();
+    if (usable.length) {
+      lines.push("Generation models available on your configured providers:");
+      for (const modality of ["image", "speech", "transcription", "video"]) {
+        const forModality = usable.filter((c) => c.modality === modality);
+        if (!forModality.length) continue;
+        const shown = forModality.map((c) => {
+          const cost = capabilityCost(c);
+          return `${c.modelId}${cost ? ` (${cost.label})` : ""}`;
+        });
+        lines.push(`  ${modality}: ${shown.join(", ")}`);
+      }
+    } else {
+      lines.push("No generation models are available \u2014 none of your configured providers offers one.");
+    }
+    const blocked = CAPABILITIES.filter((c) => c.unsupported && this.available.has(c.provider));
+    for (const c of blocked) {
+      lines.push(`  ${c.modality}: ${c.modelId} exists on your account but is not callable. ${c.unsupported}`);
+    }
+    lines.push(
+      "  music: no supported provider exposes a music-generation API, so Cascade cannot generate music."
+    );
+    return lines.join("\n");
+  }
+};
+var PLANNER_FACTS = [
+  { tool: "generate_image", modality: "image", shape: "one call returns one finished image" },
+  { tool: "generate_speech", modality: "speech", shape: "one call returns one finished audio file" },
+  {
+    tool: "generate_video",
+    modality: "video",
+    shape: "one call returns one finished clip, after rendering for 1-3 minutes (Cascade stops waiting at 8)"
+  },
+  {
+    tool: "transcribe_audio",
+    modality: "transcription",
+    shape: "one call returns the transcript of one audio file"
+  }
+];
+function plannerPriceNote(modality) {
+  const costs = CAPABILITIES.filter((c) => c.modality === modality && !c.unsupported).map((c) => capabilityCost(c)).filter((c) => c !== null);
+  if (!costs.length) return "";
+  const labels = new Set(costs.map((c) => c.label));
+  if (labels.size === 1) return ` Billed ${costs[0].label}.`;
+  const units = new Set(costs.map((c) => c.unit));
+  return units.size === 1 ? ` Billed ${[...units][0]}.` : "";
+}
+function describeGenerationForPlanner(has) {
+  const present = PLANNER_FACTS.filter((f) => has(f.tool));
+  if (!present.length) return "";
+  const lines = ["MEDIA GENERATION \u2014 the only generation tools this run can call:"];
+  for (const f of present) {
+    lines.push(`- "${f.tool}" (${f.modality}): ${f.shape}.${plannerPriceNote(f.modality)}`);
+  }
+  lines.push(
+    "Each one is a single ATOMIC tool call, made by ONE T3 worker, that produces the finished file. It is never a multi-step pipeline, and no worker can satisfy it by describing the result in words.",
+    "No other modality has a tool here \u2014 never plan a step that generates music, 3D or anything not listed above."
+  );
+  if (has("generate_video")) {
+    lines.push(
+      'VIDEO PLANS MUST END IN THE TOOL CALL. Creative pre-production \u2014 a script, a shot list, direction notes \u2014 is expected and worth planning, but it is NOT the video. Any plan that involves video MUST contain exactly ONE subtask whose deliverable is the "generate_video" call itself; it MUST be the last subtask on that path (dependsOn the pre-production ones), and nothing after it may be required to produce the clip. Never end a video plan on a script, a storyboard or a review step. Never split one clip across several "generate_video" subtasks, and never plan a render \u2192 critique \u2192 re-render loop: every render is billed again and takes minutes.'
+    );
+  }
+  return lines.join("\n");
+}
+
 // src/core/tiers/t2-manager.ts
-function buildT2SystemPrompt(hasPeerMessage) {
+function buildT2SystemPrompt(has) {
+  const generation = describeGenerationForPlanner(has);
   return [
     "You are a T2 Manager agent in the Cascade AI system.",
     "Your role is to analyze a section of a task and decompose it into 2-5 discrete subtasks for T3 Workers.",
     'If subtasks have dependencies, you can specify "executionMode": "sequential" for the section.',
-    hasPeerMessage && 'Provide "peerT3Ids" to subtasks so they can coordinate using the peer_message tool.',
-    "Return ONLY valid JSON matching the T3 subtask array schema \u2014 no other text."
-  ].filter((l) => l !== false).join("\n");
+    has("peer_message") && 'Provide "peerT3Ids" to subtasks so they can coordinate using the peer_message tool.',
+    "Return ONLY valid JSON matching the T3 subtask array schema \u2014 no other text.",
+    generation && `
+${generation}`
+  ].filter((l) => l !== false && l !== "").join("\n");
 }
 var T2Manager = class extends BaseTier {
   router;
@@ -8227,7 +8562,7 @@ Return ONLY the JSON array.`;
     const messages = [{ role: "user", content: prompt }];
     const result = await this.router.generate("T2", {
       messages,
-      systemPrompt: this.systemPromptOverride + buildT2SystemPrompt(this.toolRegistry.hasTool("peer_message")) + (this.hierarchyContext ? `
+      systemPrompt: this.systemPromptOverride + buildT2SystemPrompt((name) => this.toolRegistry.hasTool(name)) + (this.hierarchyContext ? `
 
 HIERARCHY CONTEXT: ${this.hierarchyContext}` : ""),
       maxTokens: 2e3,
@@ -8777,6 +9112,7 @@ function isStrongKeywordOverlap(a = [], b = []) {
 }
 function buildT1SystemPrompt(has) {
   const canWriteArtifacts = has("file_write") || has("file_edit") || has("run_code") || has("pdf_create");
+  const generation = describeGenerationForPlanner(has);
   const rules = [
     "- Simple \u2192 1 T3, Moderate \u2192 2-3 T2s, Complex \u2192 3-5 T2s, Highly Complex \u2192 5+ T2s",
     "- Return ONLY valid JSON \u2014 no other text",
@@ -8811,7 +9147,9 @@ DEPENDENCY GUIDANCE:
 QUALITY RULES:
 - Each section must have a clear, testable "expectedOutput" so T2 knows when it is done.
 - Do NOT create trivial sections that only move files or print summaries \u2014 fold those into adjacent sections.
-- If the plan would naturally produce fewer than 2 independent sections, prefer Moderate routing (single T2).`;
+- If the plan would naturally produce fewer than 2 independent sections, prefer Moderate routing (single T2).${generation ? `
+
+${generation}` : ""}`;
 }
 var T1Administrator = class extends BaseTier {
   router;
@@ -9472,219 +9810,37 @@ Instructions:
     return result.content;
   }
   /**
-   * T1-level permission evaluator.
-   * Uses T1's model with full task context.
-   * Returns null only when the model explicitly says UNSURE (triggers user prompt).
-   */
-  async evaluatePermissionAtT1(req) {
-    const prompt = `You are T1 Administrator. Overall task goal:
-${this.taskGoal}
-
-A T3 Worker (inside section "${req.sectionContext}") wants to:
-Tool: ${req.toolName}
-Target: ${JSON.stringify(req.input)}
-Reason: ${req.subtaskContext}
-
-T2 Manager was uncertain about this. Given the overall task goal, should this be allowed?
-Reply with exactly one word: YES, NO, or UNSURE.
-(UNSURE = escalate to the human user for a final decision.)`;
-    try {
-      const result = await this.router.generate("T1", {
-        messages: [{ role: "user", content: prompt }],
-        systemPrompt: this.systemPromptOverride + "You are a T1 Administrator evaluating permissions.",
-        maxTokens: 10,
-        temperature: 0
-      });
-      const answer = result.content.trim().toUpperCase();
-      const verdict = answer.includes("YES") ? "approve" : answer.includes("NO") ? "deny" : "unsure";
-      (req.trail ??= []).push({ tier: "T1", verdict, reason: `T1: ${verdict === "approve" ? "consistent with overall task goal" : verdict === "deny" ? "not consistent with overall task goal" : "unsure"}` });
-      return null;
-    } catch {
-      (req.trail ??= []).push({ tier: "T1", verdict: "unsure", reason: "T1 evaluation failed" });
-      return null;
-    }
-  }
-};
-
-// src/core/multimodal/registry.ts
-var CAPABILITIES = [
-  // ── Image ──
-  {
-    modality: "image",
-    provider: "openai",
-    modelId: "dall-e-3",
-    api: "openai-images"
-  },
-  {
-    // Was `imagen-4.0-generate-001` on `:predict`, which now 404s for new keys
-    // ("no longer available to new users") — Imagen's :predict API is deprecated
-    // and shuts down 2026-08-17. Google's own migration path is this model on
-    // the ordinary generateContent endpoint, so the fix was never another Imagen
-    // id: the whole request/response SHAPE changes, which is why `api` moved to
-    // 'gemini-generate-content' rather than just the modelId moving.
-    // https://ai.google.dev/gemini-api/docs/imagen
-    modality: "image",
-    provider: "gemini",
-    modelId: "gemini-2.5-flash-image",
-    api: "gemini-generate-content"
-  },
-  // ── Speech (text → audio) ──
-  {
-    modality: "speech",
-    provider: "openai",
-    modelId: "tts-1",
-    api: "openai-speech"
-  },
-  {
-    // The only quality claim in this table that needs no leaderboard: OpenAI
-    // ships these as the same voice at two fidelities and charges double for
-    // this one. That is the vendor's own ordering, not an inference.
-    modality: "speech",
-    provider: "openai",
-    modelId: "tts-1-hd",
-    api: "openai-speech",
-    quality: 70,
-    qualityBasis: "OpenAI's own hd variant of tts-1, priced 2x"
-  },
-  // ── Transcription (audio → text) ──
-  {
-    modality: "transcription",
-    provider: "openai",
-    modelId: "whisper-1",
-    api: "openai-transcriptions"
-  },
-  // ── Video ──
-  {
-    // Long-running: submit returns an operation name, the video lands minutes
-    // later, and the bytes come from a short-lived signed URL. generate.ts owns
-    // that polling loop; the registry only records the shape via `api`.
-    //
-    // `veo-3.1-generate-001` (no "-preview") is VERTEX AI's id for this model,
-    // not the Gemini Developer API's — this file calls
-    // generativelanguage.googleapis.com (see generate.ts), which 404s on it:
-    // "models/veo-3.1-generate-001 is not found for API version v1beta". On the
-    // Gemini API specifically, Veo 3.1 is still preview-only, so the correct id
-    // there is `veo-3.1-generate-preview`.
-    // https://ai.google.dev/gemini-api/docs/veo
-    modality: "video",
-    provider: "gemini",
-    modelId: "veo-3.1-generate-preview",
-    api: "gemini-predict-lro"
-  }
-];
-function capabilityCost(cap) {
-  const match = findPricing(cap.modelId, cap.provider, {
-    fallbackProviders: cap.provider === "gemini" ? ["vertex"] : []
-  });
-  const rate = match?.entry.rates?.[0];
-  if (!rate) return null;
-  const unitLabel = {
-    per_image: "per image",
-    per_second: "per second of video",
-    per_character: "per character",
-    per_audio_minute: "per audio minute"
-  };
-  const unit = unitLabel[rate.unit] ?? rate.unit;
-  const amount = rate.amount;
-  const shown = amount < 1e-3 ? amount.toExponential(2) : amount.toFixed(4);
-  return { label: `$${shown} ${unit}`, amount, unit };
-}
-function explainChoice(c, cost, modality, isBest) {
-  const priced = cost ? ` ${cost.label}.` : "";
-  if (c.quality !== void 0) {
-    return isBest ? `${c.modelId} (${c.provider}) \u2014 ranked highest for ${modality}: ${c.qualityBasis}.${priced}` : `${c.modelId} (${c.provider}) \u2014 ranked alternative for ${modality}: ${c.qualityBasis}.${priced}`;
-  }
-  const noRanking = ". No published quality ranking is applied for this modality, so this is a cost choice, not a quality one.";
-  return isBest ? `${c.modelId} (${c.provider}) \u2014 cheapest usable ${modality} model` + (cost ? ` at ${cost.label}` : "") + noRanking : `${c.modelId} (${c.provider}) \u2014 alternative usable ${modality} model` + (cost ? ` at ${cost.label}` : "") + noRanking;
-}
-var MultimodalRegistry = class {
-  /** Provider types the user has actually configured a key for. */
-  available;
-  constructor(availableProviders) {
-    this.available = new Set(availableProviders);
-  }
-  /** Every capability whose provider is configured AND which Cascade can call. */
-  usable(modality) {
-    return CAPABILITIES.filter(
-      (c) => !c.unsupported && this.available.has(c.provider) && (!modality || c.modality === modality)
-    );
-  }
-  /** Modalities this account can actually generate right now. */
-  availableModalities() {
-    return [...new Set(this.usable().map((c) => c.modality))];
-  }
-  /**
-   * Every usable capability for a modality, best first.
-   *
-   * Ranked models beat unranked ones, then higher quality, then lower unit
-   * price. An explicit `preferModel` is moved to the head when it is usable —
-   * the user naming a model is a stronger signal than any prior.
-   *
-   * `select()` is just the head of this list. The TAIL is the point: a systemic
-   * provider failure (dead key, 404, exhausted quota) is scoped to one
-   * provider+model, so "this model cannot draw" is not the same fact as "this
-   * account cannot draw". A caller holding the ordered alternatives can try the
-   * next provider instead of aborting the whole run — see generate-media.ts.
-   */
-  rank(modality, opts = {}) {
-    const scored = this.usable(modality).map((c) => ({ c, cost: capabilityCost(c) })).sort((a, b) => {
-      const qa = a.c.quality ?? -1;
-      const qb = b.c.quality ?? -1;
-      if (qa !== qb) return qb - qa;
-      const pa = a.cost?.amount ?? Number.POSITIVE_INFINITY;
-      const pb = b.cost?.amount ?? Number.POSITIVE_INFINITY;
-      return pa - pb;
-    });
-    const results = scored.map(({ c, cost }, i) => ({
-      capability: c,
-      cost,
-      reason: explainChoice(c, cost, modality, i === 0)
-    }));
-    if (opts.preferModel) {
-      const i = results.findIndex((r) => r.capability.modelId === opts.preferModel);
-      if (i > -1) {
-        const [wanted] = results.splice(i, 1);
-        results.unshift({ ...wanted, reason: `Requested explicitly: ${wanted.capability.modelId}.` });
-      }
-    }
-    return results;
-  }
-  /**
-   * Pick a model for a modality — the best usable one, or null if there is none.
-   */
-  select(modality, opts = {}) {
-    return this.rank(modality, opts)[0] ?? null;
-  }
-  /**
-   * A plain-language account of what this account can and cannot generate —
-   * including the things it cannot, and why. The planner sees this, so being
-   * candid here is what stops it inventing a `generate_music` call.
-   */
-  describe() {
-    const lines = [];
-    const usable = this.usable();
-    if (usable.length) {
-      lines.push("Generation models available on your configured providers:");
-      for (const modality of ["image", "speech", "transcription", "video"]) {
-        const forModality = usable.filter((c) => c.modality === modality);
-        if (!forModality.length) continue;
-        const shown = forModality.map((c) => {
-          const cost = capabilityCost(c);
-          return `${c.modelId}${cost ? ` (${cost.label})` : ""}`;
-        });
-        lines.push(`  ${modality}: ${shown.join(", ")}`);
-      }
-    } else {
-      lines.push("No generation models are available \u2014 none of your configured providers offers one.");
-    }
-    const blocked = CAPABILITIES.filter((c) => c.unsupported && this.available.has(c.provider));
-    for (const c of blocked) {
-      lines.push(`  ${c.modality}: ${c.modelId} exists on your account but is not callable. ${c.unsupported}`);
+   * T1-level permission evaluator.
+   * Uses T1's model with full task context.
+   * Returns null only when the model explicitly says UNSURE (triggers user prompt).
+   */
+  async evaluatePermissionAtT1(req) {
+    const prompt = `You are T1 Administrator. Overall task goal:
+${this.taskGoal}
+
+A T3 Worker (inside section "${req.sectionContext}") wants to:
+Tool: ${req.toolName}
+Target: ${JSON.stringify(req.input)}
+Reason: ${req.subtaskContext}
+
+T2 Manager was uncertain about this. Given the overall task goal, should this be allowed?
+Reply with exactly one word: YES, NO, or UNSURE.
+(UNSURE = escalate to the human user for a final decision.)`;
+    try {
+      const result = await this.router.generate("T1", {
+        messages: [{ role: "user", content: prompt }],
+        systemPrompt: this.systemPromptOverride + "You are a T1 Administrator evaluating permissions.",
+        maxTokens: 10,
+        temperature: 0
+      });
+      const answer = result.content.trim().toUpperCase();
+      const verdict = answer.includes("YES") ? "approve" : answer.includes("NO") ? "deny" : "unsure";
+      (req.trail ??= []).push({ tier: "T1", verdict, reason: `T1: ${verdict === "approve" ? "consistent with overall task goal" : verdict === "deny" ? "not consistent with overall task goal" : "unsure"}` });
+      return null;
+    } catch {
+      (req.trail ??= []).push({ tier: "T1", verdict: "unsure", reason: "T1 evaluation failed" });
+      return null;
     }
-    lines.push(
-      "  music: no supported provider exposes a music-generation API, so Cascade cannot generate music."
-    );
-    return lines.join("\n");
   }
 };
 
@@ -9708,10 +9864,17 @@ var BaseTool = class {
 
 // src/core/multimodal/generate.ts
 var DEFAULT_TIMEOUT_MS = 12e4;
+var GenerationGaveUpError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "GenerationGaveUpError";
+  }
+};
 async function callProvider(fn, modelId) {
   try {
     return await fn();
   } catch (err) {
+    if (err instanceof GenerationGaveUpError) throw err;
     const classified = classifyProviderError(err);
     throw new Error(describeProviderError(classified, modelId));
   }
@@ -9909,8 +10072,8 @@ async function generateVideo(cap, cfg, req, signal, onProgress) {
       onProgress?.("Still rendering\u2026");
     }
     if (!operation.done) {
-      throw new Error(
-        `Video was still rendering after ${Math.round(VIDEO_TIMEOUT_MS / 6e4)} minutes. It may still complete on the provider side, but Cascade stopped waiting.`
+      throw new GenerationGaveUpError(
+        `${cap.modelId} timed out after ${Math.round(VIDEO_TIMEOUT_MS / 6e4)} minutes \u2014 no video was produced. Cascade stopped waiting; the render may still finish on the provider side, but nothing was saved. Try again with a shorter clip or a simpler prompt.`
       );
     }
     if (operation.error?.message) throw new Error(operation.error.message);
@@ -10216,6 +10379,705 @@ function buildMediaTools(deps, readFile) {
   if (modalities.has("transcription") && readFile) tools.push(new TranscribeAudioTool(deps, readFile));
   return tools;
 }
+var WorkspaceSandboxError = class extends Error {
+  constructor(attempted, workspaceRoot) {
+    super(`Refusing access to "${attempted}" \u2014 outside workspace root "${workspaceRoot}".`);
+    this.name = "WorkspaceSandboxError";
+  }
+};
+function resolveInWorkspace(workspaceRoot, input) {
+  if (typeof input !== "string" || input.length === 0) {
+    throw new WorkspaceSandboxError(String(input), workspaceRoot);
+  }
+  const root = path25.resolve(workspaceRoot);
+  const abs = path25.isAbsolute(input) ? path25.resolve(input) : path25.resolve(root, input);
+  const rel = path25.relative(root, abs);
+  if (rel === "" || rel === ".") ; else if (rel.startsWith("..") || path25.isAbsolute(rel)) {
+    throw new WorkspaceSandboxError(input, root);
+  }
+  try {
+    const real = fs24.realpathSync(abs);
+    const realRel = path25.relative(root, real);
+    if (realRel !== "" && realRel !== "." && (realRel.startsWith("..") || path25.isAbsolute(realRel))) {
+      throw new WorkspaceSandboxError(input, root);
+    }
+  } catch (e) {
+    if (e instanceof WorkspaceSandboxError) throw e;
+  }
+  return abs;
+}
+
+// src/core/documents/blocks.ts
+function fileExt(name) {
+  const base = name.split(/[\\/]/).pop() ?? name;
+  const dot = base.lastIndexOf(".");
+  return dot > 0 ? base.slice(dot + 1).toLowerCase() : "";
+}
+function parseDelimited(text, name = "") {
+  const delim = fileExt(name) === "tsv" || text.indexOf("	") !== -1 && text.indexOf(",") === -1 ? "	" : ",";
+  const rows = [];
+  let row = [];
+  let cell = "";
+  let quoted = false;
+  for (let i = 0; i < text.length; i++) {
+    const ch = text[i];
+    if (quoted) {
+      if (ch === '"') {
+        if (text[i + 1] === '"') {
+          cell += '"';
+          i++;
+        } else quoted = false;
+      } else cell += ch;
+    } else if (ch === '"') {
+      quoted = true;
+    } else if (ch === delim) {
+      row.push(cell);
+      cell = "";
+    } else if (ch === "\n") {
+      row.push(cell);
+      rows.push(row);
+      row = [];
+      cell = "";
+    } else if (ch === "\r") ; else {
+      cell += ch;
+    }
+    if (rows.length > 5e3) break;
+  }
+  if (cell !== "" || row.length) {
+    row.push(cell);
+    rows.push(row);
+  }
+  return rows.filter((r) => r.length > 1 || (r[0] ?? "") !== "");
+}
+var CHART_ALIASES = {
+  bar: "bar",
+  column: "bar",
+  bars: "bar",
+  barchart: "bar",
+  horizontalbar: "bar",
+  line: "line",
+  lines: "line",
+  linechart: "line",
+  pie: "pie",
+  piechart: "pie",
+  doughnut: "doughnut",
+  donut: "doughnut",
+  area: "area",
+  areachart: "area",
+  scatter: "scatter",
+  xy: "scatter"
+};
+function chartKind(raw) {
+  return CHART_ALIASES[raw.trim().toLowerCase().replace(/[\s_-]/g, "")] ?? null;
+}
+function toNumber(cell) {
+  const cleaned = cell.replace(/[$£€¥,\s%]/g, "").replace(/^\((.*)\)$/, "-$1");
+  const n = Number.parseFloat(cleaned);
+  return Number.isFinite(n) ? n : 0;
+}
+function parseChartSpec(kind, body) {
+  const lines = body.replace(/\r\n/g, "\n").split("\n");
+  let title;
+  while (lines.length && !lines[0].trim()) lines.shift();
+  const titleMatch = lines[0]?.match(/^\s*title\s*:\s*(.+)$/i);
+  if (titleMatch) {
+    title = titleMatch[1].trim();
+    lines.shift();
+  }
+  const rows = parseDelimited(lines.join("\n").trim());
+  if (rows.length < 2) return null;
+  const header = rows[0].map((c) => c.trim());
+  if (header.length < 2) return null;
+  const dataRows = rows.slice(1).filter((r) => r.some((c) => c.trim() !== ""));
+  if (!dataRows.length) return null;
+  const categories = dataRows.map((r, i) => (r[0] ?? "").trim() || `Item ${i + 1}`);
+  const series = header.slice(1).map((name, col) => ({
+    name: name || `Series ${col + 1}`,
+    values: dataRows.map((r) => toNumber((r[col + 1] ?? "").trim()))
+  }));
+  if (!series.length) return null;
+  return {
+    kind,
+    ...title ? { title } : {},
+    categoryName: header[0] || "Category",
+    categories,
+    series
+  };
+}
+function chartToTableRows(spec) {
+  return [
+    [spec.categoryName, ...spec.series.map((s) => s.name)],
+    ...spec.categories.map((cat, i) => [cat, ...spec.series.map((s) => String(s.values[i] ?? 0))])
+  ];
+}
+function parseBlocks(md) {
+  const out = [];
+  const lines = md.replace(/\r\n/g, "\n").split("\n");
+  let i = 0;
+  let ordinal = 0;
+  const reset = () => {
+    ordinal = 0;
+  };
+  while (i < lines.length) {
+    const line = lines[i] ?? "";
+    const fence = line.match(/^```+\s*(.*)$/);
+    if (fence) {
+      const info = (fence[1] ?? "").trim();
+      i++;
+      const code = [];
+      while (i < lines.length && !/^```/.test(lines[i] ?? "")) {
+        code.push(lines[i] ?? "");
+        i++;
+      }
+      i++;
+      const chartInfo = info.match(/^chart\s*:\s*(.+)$/i);
+      const kind = chartInfo ? chartKind(chartInfo[1]) : null;
+      const spec = kind ? parseChartSpec(kind, code.join("\n")) : null;
+      out.push(spec ? { t: "chart", spec } : { t: "code", lines: code });
+      reset();
+      continue;
+    }
+    if (!line.trim()) {
+      i++;
+      reset();
+      continue;
+    }
+    const h = line.match(/^(#{1,6})\s+(.*)$/);
+    if (h) {
+      out.push({ t: "heading", level: h[1].length, text: h[2] });
+      i++;
+      reset();
+      continue;
+    }
+    if (/^\s*([-*_])\s*(\1\s*){2,}$/.test(line)) {
+      out.push({ t: "hr" });
+      i++;
+      reset();
+      continue;
+    }
+    const li = line.match(/^(\s*)([-*+]|\d+[.)])\s+(.*)$/);
+    if (li) {
+      const ordered = /\d/.test(li[2]);
+      ordinal = ordered ? ordinal + 1 : 0;
+      out.push({ t: "bullet", ordered, index: ordered ? ordinal : 0, text: li[3] });
+      i++;
+      continue;
+    }
+    if (/^>\s?/.test(line)) {
+      out.push({ t: "quote", text: line.replace(/^>\s?/, "") });
+      i++;
+      reset();
+      continue;
+    }
+    if (/^\|.*\|/.test(line)) {
+      const rows = [];
+      while (i < lines.length && /^\|.*\|/.test(lines[i] ?? "")) {
+        const r = lines[i];
+        if (!/^\|[\s:|-]+\|?\s*$/.test(r)) rows.push(r.replace(/^\||\|\s*$/g, "").split("|").map((c) => c.trim()));
+        i++;
+      }
+      out.push({ t: "table", rows });
+      reset();
+      continue;
+    }
+    out.push({ t: "para", text: line });
+    i++;
+    reset();
+  }
+  return out;
+}
+var IMAGE_LINE = /^!\[([^\]]*)\]\(([^)]+)\)$/;
+function matchImageLine(s) {
+  const m = s.trim().match(IMAGE_LINE);
+  return m ? { alt: m[1].trim(), url: m[2].trim() } : null;
+}
+function sniffImage(b) {
+  const dv = new DataView(b.buffer, b.byteOffset, b.byteLength);
+  if (b.length > 24 && b[0] === 137 && b[1] === 80 && b[2] === 78 && b[3] === 71) {
+    return { type: "png", mime: "image/png", width: dv.getUint32(16), height: dv.getUint32(20) };
+  }
+  if (b.length > 10 && b[0] === 71 && b[1] === 73 && b[2] === 70) {
+    return { type: "gif", mime: "image/gif", width: dv.getUint16(6, true), height: dv.getUint16(8, true) };
+  }
+  if (b.length > 26 && b[0] === 66 && b[1] === 77) {
+    return { type: "bmp", mime: "image/bmp", width: Math.abs(dv.getInt32(18, true)), height: Math.abs(dv.getInt32(22, true)) };
+  }
+  if (b.length > 4 && b[0] === 255 && b[1] === 216) {
+    let i = 2;
+    while (i + 9 < b.length) {
+      if (b[i] !== 255) {
+        i++;
+        continue;
+      }
+      const marker = b[i + 1];
+      if (marker >= 192 && marker <= 207 && marker !== 196 && marker !== 200 && marker !== 204) {
+        return { type: "jpg", mime: "image/jpeg", height: dv.getUint16(i + 5), width: dv.getUint16(i + 7) };
+      }
+      i += 2 + dv.getUint16(i + 2);
+    }
+  }
+  return null;
+}
+function bytesToBase64(bytes) {
+  const g = globalThis;
+  if (g.Buffer) return g.Buffer.from(bytes).toString("base64");
+  const CHUNK = 32768;
+  let binary = "";
+  for (let i = 0; i < bytes.length; i += CHUNK) {
+    binary += String.fromCharCode(...bytes.subarray(i, i + CHUNK));
+  }
+  return g.btoa(binary);
+}
+function stripInline(s) {
+  return s.replace(/\*\*(.+?)\*\*/g, "$1").replace(/(^|[^*])\*(?!\s)(.+?)\*/g, "$1$2").replace(/`([^`]+)`/g, "$1").replace(/\[(.+?)\]\((.+?)\)/g, "$1 ($2)");
+}
+function inlineRuns(text) {
+  const acc = [];
+  const re = /(\*\*[^*]+\*\*|`[^`]+`|\[[^\]]{1,500}\]\([^)]{1,2000}\)|\*[^*\s][^*]*\*)/g;
+  let last = 0;
+  let m;
+  while ((m = re.exec(text)) !== null) {
+    if (m.index > last) acc.push({ text: text.slice(last, m.index) });
+    const tok = m[0];
+    if (tok.startsWith("**")) acc.push({ text: tok.slice(2, -2), bold: true });
+    else if (tok.startsWith("`")) acc.push({ text: tok.slice(1, -1), code: true });
+    else if (tok.startsWith("[")) {
+      const l = tok.match(/\[([^\]]{1,500})\]\(([^)]{1,2000})\)/);
+      acc.push({ text: l ? `${l[1]} (${l[2]})` : tok });
+    } else acc.push({ text: tok.slice(1, -1), italic: true });
+    last = re.lastIndex;
+  }
+  if (last < text.length) acc.push({ text: text.slice(last) });
+  return acc.length ? acc : [{ text }];
+}
+function splitSlides(md) {
+  const norm = md.replace(/\r\n/g, "\n").trim();
+  let chunks = norm.split(/\n\s*-{3,}\s*\n/);
+  if (chunks.length === 1) {
+    const lines = norm.split("\n");
+    const sections = [];
+    let cur = [];
+    for (const ln of lines) {
+      if (/^#{1,2}\s+/.test(ln) && cur.some((l) => l.trim())) {
+        sections.push(cur.join("\n"));
+        cur = [];
+      }
+      cur.push(ln);
+    }
+    if (cur.length) sections.push(cur.join("\n"));
+    if (sections.length > 1) chunks = sections;
+  }
+  return chunks.map(parseSlide).filter((s) => s.title || s.body.length || s.images.length || s.charts.length);
+}
+function parseSlide(chunk) {
+  let title = "";
+  const body = [];
+  const images = [];
+  const charts = [];
+  const lines = chunk.split("\n");
+  for (let i = 0; i < lines.length; i++) {
+    const raw = lines[i] ?? "";
+    const fence = raw.match(/^[ \t]*```+[ \t]*chart[ \t]*:(.*)/i);
+    if (fence) {
+      const kind = chartKind(fence[1]);
+      const bodyLines = [];
+      i++;
+      while (i < lines.length && !/^\s*```/.test(lines[i] ?? "")) {
+        bodyLines.push(lines[i] ?? "");
+        i++;
+      }
+      const spec = kind ? parseChartSpec(kind, bodyLines.join("\n")) : null;
+      if (spec) charts.push(spec);
+      else for (const bl of bodyLines) if (bl.trim()) body.push(stripInline(bl.trim()));
+      continue;
+    }
+    const line = raw.trim();
+    if (!line) continue;
+    const h = line.match(/^#{1,6}[ \t]+(.*)/);
+    if (h) {
+      if (!title) title = stripInline(h[1]);
+      else body.push(stripInline(h[1]));
+      continue;
+    }
+    const img = matchImageLine(line);
+    if (img) {
+      images.push(img);
+      continue;
+    }
+    const li = line.match(/^([-*+]|\d+[.)])[ \t]+(.*)/);
+    if (li) {
+      const bulletImg = matchImageLine(li[2]);
+      if (bulletImg) {
+        images.push(bulletImg);
+        continue;
+      }
+      body.push(stripInline(li[2]));
+      continue;
+    }
+    if (/^>\s?/.test(line)) {
+      body.push(stripInline(line.replace(/^>\s?/, "")));
+      continue;
+    }
+    body.push(stripInline(line));
+  }
+  return { title, body, images, charts };
+}
+function extractCharts(source) {
+  const lines = source.replace(/\r\n/g, "\n").split("\n");
+  const charts = [];
+  const rest = [];
+  for (let i = 0; i < lines.length; i++) {
+    const fence = lines[i].match(/^[ \t]*```+[ \t]*chart[ \t]*:(.*)/i);
+    if (!fence) {
+      rest.push(lines[i]);
+      continue;
+    }
+    const kind = chartKind(fence[1]);
+    const body = [];
+    i++;
+    while (i < lines.length && !/^\s*```/.test(lines[i] ?? "")) {
+      body.push(lines[i] ?? "");
+      i++;
+    }
+    const spec = kind ? parseChartSpec(kind, body.join("\n")) : null;
+    if (spec) charts.push(spec);
+    else rest.push(...body);
+  }
+  return { charts, rest: rest.join("\n") };
+}
+
+// src/core/documents/render.ts
+var DOCUMENT_MIME = {
+  docx: "application/vnd.openxmlformats-officedocument.wordprocessingml.document",
+  pptx: "application/vnd.openxmlformats-officedocument.presentationml.presentation",
+  xlsx: "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet"
+};
+function isDocumentFormat(ext) {
+  return ext === "docx" || ext === "pptx" || ext === "xlsx";
+}
+async function loadImage(ref, load) {
+  if (!load) return null;
+  try {
+    const bytes = await load(ref.url);
+    if (!bytes || !bytes.length) return null;
+    const info = sniffImage(bytes);
+    if (!info || info.width <= 0 || info.height <= 0) return null;
+    return { ...info, bytes, alt: ref.alt };
+  } catch {
+    return null;
+  }
+}
+async function renderXlsx(source, opts = {}) {
+  const XLSX = await import('xlsx');
+  const { charts, rest } = extractCharts(source);
+  const name = opts.name ?? "";
+  const rows = parseDelimited(rest, name.toLowerCase().endsWith(".tsv") ? "x.tsv" : "x.csv");
+  const wb = XLSX.utils.book_new();
+  XLSX.utils.book_append_sheet(wb, XLSX.utils.aoa_to_sheet(rows.length ? rows : [[""]]), "Sheet1");
+  const used = /* @__PURE__ */ new Set(["Sheet1"]);
+  charts.forEach((spec, i) => {
+    const base = (spec.title || `Chart ${i + 1}`).replace(/[:\\/?*[\]]/g, " ").trim().slice(0, 28) || `Chart ${i + 1}`;
+    let sheetName = base;
+    let n = 2;
+    while (used.has(sheetName)) sheetName = `${base} ${n++}`.slice(0, 31);
+    used.add(sheetName);
+    const aoa = [
+      [spec.categoryName, ...spec.series.map((s) => s.name)],
+      ...spec.categories.map((cat, r) => [cat, ...spec.series.map((s) => s.values[r] ?? 0)])
+    ];
+    XLSX.utils.book_append_sheet(wb, XLSX.utils.aoa_to_sheet(aoa), sheetName);
+  });
+  return new Uint8Array(XLSX.write(wb, { type: "array", bookType: "xlsx" }));
+}
+var DOCX_MAX_W = 600;
+var DOCX_MAX_H = 864;
+async function renderDocx(md, opts = {}) {
+  const d = await import('docx');
+  const {
+    Document,
+    Packer,
+    Paragraph,
+    TextRun,
+    ImageRun,
+    HeadingLevel,
+    Table,
+    TableRow,
+    TableCell,
+    WidthType,
+    BorderStyle,
+    AlignmentType
+  } = d;
+  const HEADINGS = [
+    HeadingLevel.HEADING_1,
+    HeadingLevel.HEADING_2,
+    HeadingLevel.HEADING_3,
+    HeadingLevel.HEADING_4,
+    HeadingLevel.HEADING_5,
+    HeadingLevel.HEADING_6
+  ];
+  const runs = (text) => inlineRuns(text).map((r) => new TextRun({
+    text: r.text,
+    ...r.bold ? { bold: true } : {},
+    ...r.italic ? { italics: true } : {},
+    ...r.code ? { font: "Courier New" } : {}
+  }));
+  const tableOf = (rows) => new Table({
+    width: { size: 100, type: WidthType.PERCENTAGE },
+    rows: rows.map((r) => new TableRow({
+      children: r.map((c) => new TableCell({ children: [new Paragraph({ children: runs(c) })] }))
+    }))
+  });
+  const imageParagraph = (img) => {
+    const scale = Math.min(1, DOCX_MAX_W / img.width, DOCX_MAX_H / img.height);
+    return new Paragraph({
+      children: [new ImageRun({
+        type: img.type,
+        data: img.bytes,
+        transformation: { width: Math.round(img.width * scale), height: Math.round(img.height * scale) },
+        ...img.alt ? { altText: { name: img.alt, description: img.alt, title: img.alt } } : {}
+      })]
+    });
+  };
+  const asImage = async (text) => {
+    const ref = matchImageLine(text);
+    return ref ? await loadImage(ref, opts.loadImageBytes) : null;
+  };
+  const children = [];
+  for (const b of parseBlocks(md)) {
+    switch (b.t) {
+      case "heading":
+        children.push(new Paragraph({ heading: HEADINGS[Math.min(b.level, 6) - 1], children: runs(b.text) }));
+        break;
+      case "para": {
+        const img = await asImage(b.text);
+        children.push(img ? imageParagraph(img) : new Paragraph({ children: runs(b.text) }));
+        break;
+      }
+      case "bullet": {
+        const img = await asImage(b.text);
+        children.push(img ? imageParagraph(img) : new Paragraph({
+          children: runs(b.text),
+          ...b.ordered ? { numbering: { reference: "ol", level: 0 } } : { bullet: { level: 0 } }
+        }));
+        break;
+      }
+      case "code":
+        for (const cl of b.lines) {
+          children.push(new Paragraph({ children: [new TextRun({ text: cl || " ", font: "Courier New", size: 18 })] }));
+        }
+        break;
+      case "quote":
+        children.push(new Paragraph({ indent: { left: 360 }, children: [new TextRun({ text: stripInline(b.text), italics: true })] }));
+        break;
+      case "table":
+        children.push(tableOf(b.rows));
+        break;
+      case "chart":
+        if (b.spec.title) {
+          children.push(new Paragraph({ children: [new TextRun({ text: b.spec.title, bold: true })] }));
+        }
+        children.push(tableOf(chartToTableRows(b.spec)));
+        break;
+      case "hr":
+        children.push(new Paragraph({
+          children: [],
+          border: { bottom: { color: "CCCCCC", space: 1, style: BorderStyle.SINGLE, size: 6 } }
+        }));
+        break;
+    }
+  }
+  const doc = new Document({
+    numbering: {
+      config: [{ reference: "ol", levels: [{ level: 0, format: "decimal", text: "%1.", alignment: AlignmentType.START }] }]
+    },
+    sections: [{ children: children.length ? children : [new Paragraph({ children: [new TextRun("")] })] }]
+  });
+  return new Uint8Array(await Packer.toArrayBuffer(doc));
+}
+function pptxConstructor(mod) {
+  let c = mod;
+  for (let i = 0; i < 3 && c && typeof c !== "function"; i++) c = c.default;
+  if (typeof c !== "function") throw new Error("pptxgenjs did not export a constructor.");
+  return c;
+}
+var SLIDE_H = 7.5;
+var CONTENT_X = 0.6;
+var CONTENT_W = 12.1;
+var CONTENT_BOTTOM = 0.4;
+async function renderPptx(md, opts = {}) {
+  const PptxGen = pptxConstructor(await import('pptxgenjs'));
+  const pptx = new PptxGen();
+  pptx.layout = "LAYOUT_WIDE";
+  const CHART_TYPES = {
+    bar: pptx.ChartType["bar"],
+    line: pptx.ChartType["line"],
+    pie: pptx.ChartType["pie"],
+    doughnut: pptx.ChartType["doughnut"],
+    area: pptx.ChartType["area"],
+    scatter: pptx.ChartType["scatter"]
+  };
+  const slides = splitSlides(md);
+  const blank = { title: "", body: [""], images: [], charts: [] };
+  for (const s of slides.length ? slides : [blank]) {
+    const slide = pptx.addSlide();
+    if (s.title) slide.addText(s.title, { x: 0.5, y: 0.35, w: 12.3, h: 0.9, fontSize: 28, bold: true, color: "1F2937" });
+    const top = s.title ? 1.5 : 0.5;
+    const pics = (await Promise.all(s.images.map((r) => loadImage(r, opts.loadImageBytes)))).filter((p) => p !== null);
+    const visuals = [
+      ...s.charts.map((spec) => ({ kind: "chart", spec })),
+      ...pics.map((img) => ({ kind: "image", img }))
+    ];
+    const bodyH = visuals.length ? 2.2 : 5.4;
+    if (s.body.length) {
+      slide.addText(
+        s.body.map((t) => ({ text: t, options: { bullet: true, breakLine: true } })),
+        { x: CONTENT_X, y: top, w: CONTENT_W, h: bodyH, fontSize: 16, color: "374151", valign: "top" }
+      );
+    }
+    if (visuals.length) {
+      const y = top + (s.body.length ? bodyH + 0.2 : 0);
+      const h = Math.max(1, SLIDE_H - CONTENT_BOTTOM - y);
+      const gap = 0.3;
+      const w = (CONTENT_W - gap * (visuals.length - 1)) / visuals.length;
+      visuals.forEach((v, i) => {
+        const x = CONTENT_X + i * (w + gap);
+        if (v.kind === "image") {
+          slide.addImage({
+            data: `data:${v.img.mime};base64,${bytesToBase64(v.img.bytes)}`,
+            x,
+            y,
+            w,
+            h,
+            // 'contain' keeps the aspect ratio inside the box — a stretched
+            // render looks worse than a smaller correct one.
+            sizing: { type: "contain", w, h },
+            ...v.img.alt ? { altText: v.img.alt } : {}
+          });
+        } else {
+          slide.addChart(CHART_TYPES[v.spec.kind], chartData(v.spec), {
+            x,
+            y,
+            w,
+            h,
+            showLegend: v.spec.series.length > 1 || v.spec.kind === "pie" || v.spec.kind === "doughnut",
+            legendPos: "b",
+            showTitle: !!v.spec.title,
+            ...v.spec.title ? { title: v.spec.title } : {},
+            showValue: v.spec.kind === "pie" || v.spec.kind === "doughnut"
+          });
+        }
+      });
+    }
+  }
+  return new Uint8Array(await pptx.write({ outputType: "arraybuffer" }));
+}
+function chartData(spec) {
+  const series = spec.kind === "pie" || spec.kind === "doughnut" ? spec.series.slice(0, 1) : spec.series;
+  return series.map((s) => ({ name: s.name, labels: spec.categories, values: s.values }));
+}
+async function renderDocument(format, source, opts = {}) {
+  if (format === "docx") return renderDocx(source, opts);
+  if (format === "pptx") return renderPptx(source, opts);
+  return renderXlsx(source, opts);
+}
+
+// src/tools/generate-document.ts
+var SOURCE_HINT = {
+  docx: "Markdown",
+  pptx: "Markdown slides (separate slides with a --- rule; each slide starts with a heading)",
+  xlsx: "CSV (one header row, then data rows)"
+};
+var GenerateDocumentTool = class extends BaseTool {
+  /**
+   * `readFile` is injected so the image loader is testable and so a host with a
+   * different workspace (not plain disk) can supply its own reader.
+   */
+  constructor(readFile = async (p) => new Uint8Array(await fs5.readFile(p))) {
+    super();
+    this.readFile = readFile;
+  }
+  readFile;
+  name = "generate_document";
+  description = "Create a REAL Microsoft Office file (.docx Word, .pptx PowerPoint, .xlsx Excel) in the workspace. You write the SOURCE and this tool renders the actual binary: Markdown for .docx, Markdown slides (separated by --- rules) for .pptx, CSV for .xlsx. ALWAYS use this instead of file_write for those three extensions \u2014 file_write stores your text verbatim, which Office reports as a corrupted file. Supports embedded images (reference a generated image as ![alt](path-the-image-tool-returned) on its own line) and real, data-accurate charts (a ```chart:bar / chart:line / chart:pie fenced block whose body is CSV). Use pdf_create for PDFs.";
+  inputSchema = {
+    type: "object",
+    properties: {
+      path: {
+        type: "string",
+        description: "Where to write the file, relative to the workspace root. The extension decides the format: .docx, .pptx or .xlsx."
+      },
+      content: {
+        type: "string",
+        description: 'The document source. Markdown for .docx; Markdown slides separated by --- rules for .pptx (each slide starts with a heading); CSV for .xlsx. A standalone ![alt](path) line embeds that image. A fenced ```chart:bar (or chart:line, chart:pie, chart:area, chart:doughnut, chart:scatter) block whose body is CSV \u2014 an optional "title: \u2026" line, then a header row of "<category>,<series1>,<series2>", then data rows \u2014 becomes a real chart.'
+      },
+      format: {
+        type: "string",
+        description: 'Optional override: "docx", "pptx" or "xlsx". Normally inferred from the path extension.'
+      }
+    },
+    required: ["path", "content"]
+  };
+  isDangerous() {
+    return true;
+  }
+  async execute(input, options) {
+    const filePath = String(input["path"] ?? "").trim();
+    if (!filePath) return 'Provide a "path" for the document, e.g. "report.docx".';
+    const content = typeof input["content"] === "string" ? input["content"] : "";
+    if (!content.trim()) return 'Provide "content" \u2014 the Markdown (docx/pptx) or CSV (xlsx) source for the document.';
+    const requested = String(input["format"] ?? "").trim().toLowerCase().replace(/^\./, "");
+    const ext = requested || fileExt(filePath);
+    if (!isDocumentFormat(ext)) {
+      return `generate_document renders .docx, .pptx and .xlsx. "${filePath}" is not one of those \u2014 use pdf_create for a PDF, or file_write for a text file.`;
+    }
+    const absPath = resolveInWorkspace(this.workspaceRoot, filePath);
+    const embedded = [];
+    const skipped = [];
+    const loadImageBytes = async (url) => {
+      if (/^(https?|ftp):\/\//i.test(url)) {
+        skipped.push(`${url} (remote URL \u2014 download it into the workspace first)`);
+        return null;
+      }
+      const local = url.replace(/^file:\/\//i, "").split("?")[0].split("#")[0];
+      try {
+        const bytes2 = await this.readFile(resolveInWorkspace(this.workspaceRoot, decodeURIComponent(local)));
+        embedded.push(local);
+        return bytes2;
+      } catch {
+        skipped.push(`${local} (not found in the workspace)`);
+        return null;
+      }
+    };
+    if (options.saveSnapshot) {
+      try {
+        const old = await fs5.readFile(absPath, "utf-8");
+        await options.saveSnapshot(absPath, old);
+      } catch {
+      }
+    }
+    const bytes = await renderDocument(ext, content, { name: filePath, loadImageBytes });
+    await fs5.mkdir(path25.dirname(absPath), { recursive: true });
+    await fs5.writeFile(absPath, bytes);
+    const charts = countCharts(content);
+    return [
+      `Wrote a real ${LABEL[ext]} file to ${filePath} (${bytes.length} bytes) from ${SOURCE_HINT[ext]}.`,
+      embedded.length ? `Embedded ${embedded.length} image(s): ${embedded.join(", ")}.` : "",
+      // Named, not counted: a dropped image is the failure the user actually
+      // notices, and the model can only fix it if it is told which reference died.
+      skipped.length ? `Could NOT embed ${skipped.length} image reference(s): ${skipped.join("; ")}.` : "",
+      charts && ext === "pptx" ? `Rendered ${charts} chart block(s) as real, editable PowerPoint charts.` : "",
+      charts && ext === "docx" ? `Rendered ${charts} chart block(s) as data tables \u2014 Word documents cannot hold a native chart object.` : "",
+      charts && ext === "xlsx" ? `Wrote ${charts} chart block(s) onto their own worksheets as real rows the user can chart in Excel.` : ""
+    ].filter(Boolean).join("\n");
+  }
+};
+var LABEL = { docx: "Word", pptx: "PowerPoint", xlsx: "Excel" };
+function countCharts(source) {
+  return (source.match(/^\s*```+\s*chart\s*:/gim) ?? []).length;
+}
+function buildDocumentTools(readFile) {
+  return readFile ? [new GenerateDocumentTool(readFile)] : [];
+}
 
 // src/core/run-breaker.ts
 var DEFAULT_FAILURE_THRESHOLD = 3;
@@ -10538,35 +11400,6 @@ ${[e.stdout, e.stderr].filter(Boolean).join("\n").trim()}`;
     }
   }
 };
-var WorkspaceSandboxError = class extends Error {
-  constructor(attempted, workspaceRoot) {
-    super(`Refusing access to "${attempted}" \u2014 outside workspace root "${workspaceRoot}".`);
-    this.name = "WorkspaceSandboxError";
-  }
-};
-function resolveInWorkspace(workspaceRoot, input) {
-  if (typeof input !== "string" || input.length === 0) {
-    throw new WorkspaceSandboxError(String(input), workspaceRoot);
-  }
-  const root = path24.resolve(workspaceRoot);
-  const abs = path24.isAbsolute(input) ? path24.resolve(input) : path24.resolve(root, input);
-  const rel = path24.relative(root, abs);
-  if (rel === "" || rel === ".") ; else if (rel.startsWith("..") || path24.isAbsolute(rel)) {
-    throw new WorkspaceSandboxError(input, root);
-  }
-  try {
-    const real = fs23.realpathSync(abs);
-    const realRel = path24.relative(root, real);
-    if (realRel !== "" && realRel !== "." && (realRel.startsWith("..") || path24.isAbsolute(realRel))) {
-      throw new WorkspaceSandboxError(input, root);
-    }
-  } catch (e) {
-    if (e instanceof WorkspaceSandboxError) throw e;
-  }
-  return abs;
-}
-
-// src/tools/file.ts
 var FileReadTool = class extends BaseTool {
   name = "file_read";
   description = "Read the contents of a file. Returns the file content as a string.";
@@ -10584,7 +11417,7 @@ var FileReadTool = class extends BaseTool {
     const absPath = resolveInWorkspace(this.workspaceRoot, filePath);
     const offset = input["offset"] ?? 1;
     const limit = input["limit"];
-    const content = await fs4.readFile(absPath, "utf-8");
+    const content = await fs5.readFile(absPath, "utf-8");
     const lines = content.split("\n");
     const start = Math.max(0, offset - 1);
     const end = limit ? start + limit : lines.length;
@@ -10613,13 +11446,13 @@ var FileWriteTool = class extends BaseTool {
     const content = input["content"];
     if (options.saveSnapshot) {
       try {
-        const oldContent = await fs4.readFile(absPath, "utf-8");
+        const oldContent = await fs5.readFile(absPath, "utf-8");
         await options.saveSnapshot(absPath, oldContent);
       } catch {
       }
     }
-    await fs4.mkdir(path24.dirname(absPath), { recursive: true });
-    await fs4.writeFile(absPath, content, "utf-8");
+    await fs5.mkdir(path25.dirname(absPath), { recursive: true });
+    await fs5.writeFile(absPath, content, "utf-8");
     return `Written ${content.length} characters to ${filePath}`;
   }
 };
@@ -10645,7 +11478,7 @@ var FileEditTool = class extends BaseTool {
     const oldString = input["old_string"];
     const newString = input["new_string"];
     const replaceAll = input["replace_all"] ?? false;
-    const rawContent = await fs4.readFile(absPath, "utf-8");
+    const rawContent = await fs5.readFile(absPath, "utf-8");
     if (options.saveSnapshot) {
       await options.saveSnapshot(absPath, rawContent);
     }
@@ -10657,7 +11490,7 @@ var FileEditTool = class extends BaseTool {
       );
     }
     const updated = replaceAll ? content.split(normalizedOld).join(newString) : content.replace(normalizedOld, newString);
-    await fs4.writeFile(absPath, updated, "utf-8");
+    await fs5.writeFile(absPath, updated, "utf-8");
     const count = replaceAll ? content.split(normalizedOld).length - 1 : 1;
     return `Replaced ${count} occurrence(s) in ${filePath}`;
   }
@@ -10680,12 +11513,12 @@ var FileDeleteTool = class extends BaseTool {
     const absPath = resolveInWorkspace(this.workspaceRoot, filePath);
     if (options.saveSnapshot) {
       try {
-        const oldContent = await fs4.readFile(absPath, "utf-8");
+        const oldContent = await fs5.readFile(absPath, "utf-8");
         await options.saveSnapshot(absPath, oldContent);
       } catch {
       }
     }
-    await fs4.rm(absPath, { recursive: false });
+    await fs5.rm(absPath, { recursive: false });
     return `Deleted ${filePath}`;
   }
 };
@@ -10702,7 +11535,7 @@ var FileListTool = class extends BaseTool {
   async execute(input, _options) {
     const inputPath = input["path"] || ".";
     const absPath = resolveInWorkspace(this.workspaceRoot, inputPath);
-    const entries = await fs4.readdir(absPath, { withFileTypes: true });
+    const entries = await fs5.readdir(absPath, { withFileTypes: true });
     return entries.map((e) => `${e.isDirectory() ? "[DIR] " : "      "}${e.name}`).join("\n") || "(empty directory)";
   }
 };
@@ -11115,8 +11948,8 @@ var ImageAnalyzeTool = class extends BaseTool {
   }
 };
 async function fileToImageAttachment(filePath) {
-  const data = await fs4.readFile(filePath);
-  const ext = path24.extname(filePath).toLowerCase();
+  const data = await fs5.readFile(filePath);
+  const ext = path25.extname(filePath).toLowerCase();
   const mimeMap = {
     ".jpg": "image/jpeg",
     ".jpeg": "image/jpeg",
@@ -11150,14 +11983,14 @@ var PDFCreateTool = class extends BaseTool {
     const filePath = input["path"];
     const content = input["content"];
     const title = input["title"];
-    const dir = path24.dirname(filePath);
-    if (!fs23.existsSync(dir)) {
-      fs23.mkdirSync(dir, { recursive: true });
+    const dir = path25.dirname(filePath);
+    if (!fs24.existsSync(dir)) {
+      fs24.mkdirSync(dir, { recursive: true });
     }
     return new Promise((resolve2, reject) => {
       try {
         const doc = new PDFDocument({ margin: 50 });
-        const stream = fs23.createWriteStream(filePath);
+        const stream = fs24.createWriteStream(filePath);
         doc.pipe(stream);
         if (title) {
           doc.info["Title"] = title;
@@ -11235,22 +12068,22 @@ var CodeInterpreterTool = class extends BaseTool {
       }
       cmdPrefix = NODE_CMD;
     }
-    const tmpDir = path24.join(this.workspaceRoot, ".cascade", "tmp");
-    if (!fs23.existsSync(tmpDir)) {
-      fs23.mkdirSync(tmpDir, { recursive: true });
+    const tmpDir = path25.join(this.workspaceRoot, ".cascade", "tmp");
+    if (!fs24.existsSync(tmpDir)) {
+      fs24.mkdirSync(tmpDir, { recursive: true });
     }
     const extension = language === "python" ? "py" : "js";
     const fileName = `intp_${randomUUID().slice(0, 8)}.${extension}`;
-    const filePath = path24.join(tmpDir, fileName);
-    fs23.writeFileSync(filePath, code, "utf-8");
+    const filePath = path25.join(tmpDir, fileName);
+    fs24.writeFileSync(filePath, code, "utf-8");
     const execArgs = [filePath, ...args];
     return new Promise((resolve2) => {
       const startMs = Date.now();
       execFile(cmdPrefix, execArgs, { cwd: this.workspaceRoot, timeout: 3e4 }, (error, stdout, stderr) => {
         const duration = Date.now() - startMs;
         try {
-          if (fs23.existsSync(filePath)) {
-            fs23.unlinkSync(filePath);
+          if (fs24.existsSync(filePath)) {
+            fs24.unlinkSync(filePath);
           }
         } catch (cleanupErr) {
           console.error(`Failed to cleanup interpreter script ${filePath}:`, cleanupErr);
@@ -11562,7 +12395,7 @@ var GlobTool = class extends BaseTool {
   };
   async execute(input, _options) {
     const pattern = input["pattern"];
-    const searchPath = input["path"] ? path24.resolve(this.workspaceRoot, input["path"]) : this.workspaceRoot;
+    const searchPath = input["path"] ? path25.resolve(this.workspaceRoot, input["path"]) : this.workspaceRoot;
     const matches = await glob(pattern, {
       cwd: searchPath,
       ignore: ["node_modules/**", ".git/**", "dist/**", "build/**"],
@@ -11575,7 +12408,7 @@ var GlobTool = class extends BaseTool {
     const withMtime = await Promise.all(
       matches.map(async (rel) => {
         try {
-          const stat = await fs4.stat(path24.join(searchPath, rel));
+          const stat = await fs5.stat(path25.join(searchPath, rel));
           return { rel, mtime: stat.mtimeMs };
         } catch {
           return { rel, mtime: 0 };
@@ -11624,7 +12457,7 @@ var GrepTool = class extends BaseTool {
   };
   async execute(input, _options) {
     const pattern = input["pattern"];
-    const searchPath = input["path"] ? path24.resolve(this.workspaceRoot, input["path"]) : this.workspaceRoot;
+    const searchPath = input["path"] ? path25.resolve(this.workspaceRoot, input["path"]) : this.workspaceRoot;
     const globPattern = input["glob"];
     const outputMode = input["output_mode"] ?? "content";
     const context = input["context"] ?? 0;
@@ -11678,15 +12511,15 @@ var GrepTool = class extends BaseTool {
         nodir: true
       });
     } catch {
-      files = [path24.relative(searchPath, searchPath) || "."];
+      files = [path25.relative(searchPath, searchPath) || "."];
     }
     const results = [];
     let totalCount = 0;
     for (const rel of files) {
-      const abs = path24.join(searchPath, rel);
+      const abs = path25.join(searchPath, rel);
       let content;
       try {
-        content = await fs4.readFile(abs, "utf-8");
+        content = await fs5.readFile(abs, "utf-8");
       } catch {
         continue;
       }
@@ -12070,10 +12903,10 @@ var ToolRegistry = class extends EventEmitter {
   }
   isIgnored(filePath) {
     if (!filePath) return false;
-    const abs = path24.resolve(this.workspaceRoot, filePath);
-    const rel = path24.relative(this.workspaceRoot, abs);
-    if (!rel || rel.startsWith("..") || path24.isAbsolute(rel)) return true;
-    const posixRel = rel.split(path24.sep).join("/");
+    const abs = path25.resolve(this.workspaceRoot, filePath);
+    const rel = path25.relative(this.workspaceRoot, abs);
+    if (!rel || rel.startsWith("..") || path25.isAbsolute(rel)) return true;
+    const posixRel = rel.split(path25.sep).join("/");
     return this.ignoreMatcher.ignores(posixRel);
   }
 };
@@ -12307,22 +13140,22 @@ var FileMcpOAuthStore = class {
   filePath;
   load() {
     try {
-      return JSON.parse(fs23.readFileSync(this.filePath, "utf-8"));
+      return JSON.parse(fs24.readFileSync(this.filePath, "utf-8"));
     } catch {
       return void 0;
     }
   }
   save(state) {
-    fs23.mkdirSync(path24.dirname(this.filePath), { recursive: true, mode: 448 });
-    fs23.writeFileSync(this.filePath, JSON.stringify(state, null, 2), { mode: 384 });
+    fs24.mkdirSync(path25.dirname(this.filePath), { recursive: true, mode: 448 });
+    fs24.writeFileSync(this.filePath, JSON.stringify(state, null, 2), { mode: 384 });
     try {
-      fs23.chmodSync(this.filePath, 384);
+      fs24.chmodSync(this.filePath, 384);
     } catch {
     }
   }
   clear() {
     try {
-      fs23.rmSync(this.filePath);
+      fs24.rmSync(this.filePath);
     } catch {
     }
   }
@@ -13361,7 +14194,7 @@ var TaskAnalyzer = class {
     analysisCache.clear();
   }
 };
-var DEFAULT_STATS_FILE = path24.join(os6.homedir(), ".cascade", "model-perf.json");
+var DEFAULT_STATS_FILE = path25.join(os6.homedir(), ".cascade", "model-perf.json");
 var ModelPerformanceTracker = class {
   stats = /* @__PURE__ */ new Map();
   featureStats = /* @__PURE__ */ new Map();
@@ -13381,7 +14214,7 @@ var ModelPerformanceTracker = class {
     if (this.loaded) return;
     this.loaded = true;
     try {
-      const raw = await fs4.readFile(this.statsFile, "utf-8");
+      const raw = await fs5.readFile(this.statsFile, "utf-8");
       const parsed = JSON.parse(raw);
       if (parsed.models) {
         for (const [key, stat] of Object.entries(parsed.models)) this.stats.set(key, stat);
@@ -13401,15 +14234,15 @@ var ModelPerformanceTracker = class {
   async save() {
     if (this.readOnly) return;
     try {
-      await fs4.mkdir(path24.dirname(this.statsFile), { recursive: true });
+      await fs5.mkdir(path25.dirname(this.statsFile), { recursive: true });
       const modelsObj = {};
       const featuresObj = {};
       for (const [key, stat] of this.stats) modelsObj[key] = stat;
       for (const [key, stat] of this.featureStats) featuresObj[key] = stat;
       const json = JSON.stringify({ models: modelsObj, features: featuresObj }, null, 2);
       const tmp = `${this.statsFile}.${process.pid}.${Date.now()}.tmp`;
-      await fs4.writeFile(tmp, json, "utf-8");
-      await fs4.rename(tmp, this.statsFile);
+      await fs5.writeFile(tmp, json, "utf-8");
+      await fs5.rename(tmp, this.statsFile);
     } catch {
     }
   }
@@ -13949,9 +14782,9 @@ Required capability: ${description.slice(0, 300)}`;
    *  any dangerous action, so a silently-reloaded tool can't act without approval. */
   async loadPersistedTools() {
     if (!this.workspacePath || !this.persistEnabled) return;
-    const file = path24.join(this.workspacePath, ".cascade", DYNAMIC_TOOLS_FILE);
+    const file = path25.join(this.workspacePath, ".cascade", DYNAMIC_TOOLS_FILE);
     try {
-      const raw = await fs4.readFile(file, "utf-8");
+      const raw = await fs5.readFile(file, "utf-8");
       const specs = JSON.parse(raw);
       if (!Array.isArray(specs)) return;
       let loaded = 0;
@@ -13973,11 +14806,11 @@ Required capability: ${description.slice(0, 300)}`;
   }
   async persist() {
     if (!this.workspacePath || !this.persistEnabled) return;
-    const dir = path24.join(this.workspacePath, ".cascade");
-    const file = path24.join(dir, DYNAMIC_TOOLS_FILE);
+    const dir = path25.join(this.workspacePath, ".cascade");
+    const file = path25.join(dir, DYNAMIC_TOOLS_FILE);
     try {
-      await fs4.mkdir(dir, { recursive: true });
-      await fs4.writeFile(file, JSON.stringify(Array.from(this.specs.values()), null, 2), "utf-8");
+      await fs5.mkdir(dir, { recursive: true });
+      await fs5.writeFile(file, JSON.stringify(Array.from(this.specs.values()), null, 2), "utf-8");
     } catch (err) {
       this.log(`[tool-creator] Failed to persist tools: ${err instanceof Error ? err.message : String(err)}`);
     }
@@ -13994,12 +14827,12 @@ var WorldStateDB = class {
   constructor(workspacePath, debugMode = false) {
     this.workspacePath = workspacePath;
     this.debugMode = debugMode;
-    const cascadeDir = path24.join(workspacePath, ".cascade");
-    if (!fs23.existsSync(cascadeDir)) {
-      fs23.mkdirSync(cascadeDir, { recursive: true });
+    const cascadeDir = path25.join(workspacePath, ".cascade");
+    if (!fs24.existsSync(cascadeDir)) {
+      fs24.mkdirSync(cascadeDir, { recursive: true });
     }
-    this.keyPath = path24.join(cascadeDir, "world_state.key");
-    this.dbPath = path24.join(cascadeDir, "world_state.db");
+    this.keyPath = path25.join(cascadeDir, "world_state.key");
+    this.dbPath = path25.join(cascadeDir, "world_state.db");
     this.initEncryptionKey();
     this.db = new Database(this.dbPath);
     this.db.pragma("journal_mode = WAL");
@@ -14056,11 +14889,11 @@ var WorldStateDB = class {
     ).run(e, r, row.encrypted_value, row.source_worker, row.timestamp, validTo, change);
   }
   initEncryptionKey() {
-    if (fs23.existsSync(this.keyPath)) {
-      this.encryptionKey = fs23.readFileSync(this.keyPath);
+    if (fs24.existsSync(this.keyPath)) {
+      this.encryptionKey = fs24.readFileSync(this.keyPath);
     } else {
       this.encryptionKey = crypto4.randomBytes(32);
-      fs23.writeFileSync(this.keyPath, this.encryptionKey);
+      fs24.writeFileSync(this.keyPath, this.encryptionKey);
     }
   }
   encrypt(text) {
@@ -14346,9 +15179,9 @@ var WorldStateDB = class {
   dumpDebugIfNeeded() {
     if (!this.debugMode) return;
     try {
-      const dumpPath = path24.join(os6.tmpdir(), "cascade_world_state_debug.json");
+      const dumpPath = path25.join(os6.tmpdir(), "cascade_world_state_debug.json");
       const entries = this.getAllEntries();
-      fs23.writeFileSync(dumpPath, JSON.stringify(entries, null, 2), "utf-8");
+      fs24.writeFileSync(dumpPath, JSON.stringify(entries, null, 2), "utf-8");
     } catch (err) {
       console.error("Failed to dump debug world state", err);
     }
@@ -14403,9 +15236,9 @@ var CascadeIgnore = class {
     ]);
   }
   async load(workspacePath) {
-    const filePath = path24.join(workspacePath, ".cascadeignore");
+    const filePath = path25.join(workspacePath, ".cascadeignore");
     try {
-      const content = await fs4.readFile(filePath, "utf-8");
+      const content = await fs5.readFile(filePath, "utf-8");
       const lines = content.split("\n").filter((l) => l.trim() && !l.startsWith("#"));
       this.ig.add(lines);
       this.loaded = true;
@@ -14414,7 +15247,7 @@ var CascadeIgnore = class {
   }
   isIgnored(filePath, workspacePath) {
     try {
-      const relative = workspacePath ? path24.relative(workspacePath, filePath) : filePath;
+      const relative = workspacePath ? path25.relative(workspacePath, filePath) : filePath;
       return this.ig.ignores(relative);
     } catch {
       return false;
@@ -14757,7 +15590,7 @@ var WorkspaceIndex = class {
   isIgnored;
   chunker;
   constructor(opts) {
-    this.root = path24.resolve(opts.root);
+    this.root = path25.resolve(opts.root);
     this.db = opts.db;
     this.namespace = opts.namespace ?? "code";
     this.extensions = new Set((opts.extensions ?? DEFAULT_EXTENSIONS).map((e) => e.replace(/^\./, "").toLowerCase()));
@@ -14784,19 +15617,19 @@ var WorkspaceIndex = class {
     const walk = async (dir) => {
       let entries;
       try {
-        entries = await fs4.readdir(dir, { withFileTypes: true });
+        entries = await fs5.readdir(dir, { withFileTypes: true });
       } catch {
         return;
       }
       for (const entry of entries) {
-        const abs = path24.join(dir, entry.name);
+        const abs = path25.join(dir, entry.name);
         if (entry.isDirectory()) {
           if (HARD_SKIP_DIRS.has(entry.name) || this.isIgnored(abs)) continue;
           await walk(abs);
         } else if (entry.isFile()) {
-          const ext = path24.extname(entry.name).slice(1).toLowerCase();
+          const ext = path25.extname(entry.name).slice(1).toLowerCase();
           if (!this.extensions.has(ext) || this.isIgnored(abs)) continue;
-          out.push(path24.relative(this.root, abs));
+          out.push(path25.relative(this.root, abs));
         }
       }
     };
@@ -14826,10 +15659,10 @@ var WorkspaceIndex = class {
     const entries = [];
     for (const rel of rels) {
       try {
-        const abs = path24.join(this.root, rel);
-        const stat = await fs4.stat(abs);
+        const abs = path25.join(this.root, rel);
+        const stat = await fs5.stat(abs);
         if (stat.size > this.maxFileBytes) continue;
-        const buf = await fs4.readFile(abs);
+        const buf = await fs5.readFile(abs);
         if (buf.includes(0)) continue;
         entries.push({ path: rel, hash: hashContent(buf), text: buf.toString("utf8") });
       } catch {
@@ -15398,7 +16231,7 @@ var Cascade = class _Cascade extends EventEmitter {
     this.toolRegistry = new ToolRegistry(this.config.tools, workspacePath);
     try {
       this.router.setDeadModelStore(new DeadModelStore(
-        fileDeadModelPersistence(path24.join(workspacePath, ".cascade", "dead-models.json"))
+        fileDeadModelPersistence(path25.join(workspacePath, ".cascade", "dead-models.json"))
       ));
     } catch {
     }
@@ -15406,6 +16239,7 @@ var Cascade = class _Cascade extends EventEmitter {
       (this.config.providers ?? []).map((p) => p.type)
     );
     this.registerMediaTools(workspacePath);
+    this.registerDocumentTools(workspacePath);
     this.telemetry = config.telemetry?.enabled ? new Telemetry(config.telemetry, config.telemetry.distinctId ?? "anonymous") : noopTelemetry;
     this.worldStateDB = new WorldStateDB(this.workspacePath, this.config.workspace?.debugWorldState ?? false);
     this.router.setWorldStateDB(this.worldStateDB);
@@ -15485,8 +16319,8 @@ var Cascade = class _Cascade extends EventEmitter {
       this.emit("log", { level: "warn", message: "Code index enabled but no embeddings-capable provider is configured \u2014 skipping." });
       return;
     }
-    const dbPath = ci.dbPath || path24.join(this.workspacePath, ".cascade", "code-index.db");
-    fs23.mkdirSync(path24.dirname(dbPath), { recursive: true });
+    const dbPath = ci.dbPath || path25.join(this.workspacePath, ".cascade", "code-index.db");
+    fs24.mkdirSync(path25.dirname(dbPath), { recursive: true });
     const db = new Database(dbPath);
     db.pragma("journal_mode = WAL");
     const complete = chatCompleterFromProviders(this.config.providers);
@@ -15826,6 +16660,35 @@ ${input}` }],
       this.toolRegistry.register(tool);
     }
   }
+  /**
+   * Register `generate_document` where there is a real workspace to write into.
+   *
+   * A `.docx`/`.pptx`/`.xlsx` is a ZIP of OOXML parts, so `file_write` — which
+   * does exactly what it says and writes the model's text verbatim — produced
+   * files Word/Excel/PowerPoint correctly reported as corrupted. This tool owns
+   * the conversion (see tools/generate-document.ts for why it isn't folded into
+   * file_write).
+   *
+   * Registered OUTSIDE `enabledTools` for the same reason the media tools are:
+   * that allowlist is a blast-radius control for tools that reach the machine
+   * or the network, and this one only writes the artifact the user asked for,
+   * into the workspace the run already owns. `disabledTools` still removes it.
+   * A host with no filesystem (the cloud) has its own browser-side exporter and
+   * simply never reaches this path — `buildDocumentTools` returns nothing
+   * without a file reader, mirroring `transcribe_audio`.
+   */
+  registerDocumentTools(workspacePath) {
+    const denied = new Set(this.config.tools?.disabledTools ?? []);
+    const tools = buildDocumentTools(async (p) => {
+      const fsp = await import('fs/promises');
+      return new Uint8Array(await fsp.readFile(p));
+    });
+    for (const tool of tools) {
+      if (denied.has(tool.name)) continue;
+      tool.setWorkspaceRoot(workspacePath);
+      this.toolRegistry.register(tool);
+    }
+  }
   /**
    * Supply per-model thumbs-up/down counts so Auto routing can weigh how models
    * have actually performed for this user, on top of public benchmarks.
@@ -16774,7 +17637,7 @@ var Keystore = class {
       const creds = await this.keytar.findCredentials(KEYTAR_SERVICE);
       this.cache = Object.fromEntries(creds.map((c) => [c.account, c.password]));
       this.backend = "keytar";
-      if (password && fs23.existsSync(this.storePath)) {
+      if (password && fs24.existsSync(this.storePath)) {
         try {
           const fileEntries = this.decryptFile(password);
           for (const [k, v] of Object.entries(fileEntries)) {
@@ -16793,7 +17656,7 @@ var Keystore = class {
         "Keystore unlock requires a password because the OS keychain (keytar) is not available on this system."
       );
     }
-    if (!fs23.existsSync(this.storePath)) {
+    if (!fs24.existsSync(this.storePath)) {
       const salt = crypto4.randomBytes(SALT_LEN);
       this.masterKey = this.deriveKey(password, salt);
       this.writeWithSalt({}, salt);
@@ -16807,7 +17670,7 @@ var Keystore = class {
   }
   /** Synchronous legacy unlock kept for AES-only environments. */
   unlockSync(password) {
-    if (!fs23.existsSync(this.storePath)) {
+    if (!fs24.existsSync(this.storePath)) {
       const salt = crypto4.randomBytes(SALT_LEN);
       this.masterKey = this.deriveKey(password, salt);
       this.writeWithSalt({}, salt);
@@ -16865,7 +17728,7 @@ var Keystore = class {
     }
   }
   decryptFile(password, knownSalt) {
-    if (!fs23.existsSync(this.storePath)) return {};
+    if (!fs24.existsSync(this.storePath)) return {};
     try {
       const { salt, ciphertext, iv, tag } = this.readRaw();
       const useSalt = knownSalt ?? salt;
@@ -16887,8 +17750,8 @@ var Keystore = class {
     const ciphertext = Buffer.concat([cipher.update(plaintext), cipher.final()]);
     const tag = cipher.getAuthTag();
     const out = Buffer.concat([raw.salt, iv, tag, ciphertext]);
-    fs23.mkdirSync(path24.dirname(this.storePath), { recursive: true });
-    fs23.writeFileSync(this.storePath, out, { mode: 384 });
+    fs24.mkdirSync(path25.dirname(this.storePath), { recursive: true });
+    fs24.writeFileSync(this.storePath, out, { mode: 384 });
   }
   writeWithSalt(data, salt) {
     if (!this.masterKey) throw new Error("writeWithSalt called before masterKey was set");
@@ -16898,11 +17761,11 @@ var Keystore = class {
     const ciphertext = Buffer.concat([cipher.update(plaintext), cipher.final()]);
     const tag = cipher.getAuthTag();
     const out = Buffer.concat([salt, iv, tag, ciphertext]);
-    fs23.mkdirSync(path24.dirname(this.storePath), { recursive: true });
-    fs23.writeFileSync(this.storePath, out, { mode: 384 });
+    fs24.mkdirSync(path25.dirname(this.storePath), { recursive: true });
+    fs24.writeFileSync(this.storePath, out, { mode: 384 });
   }
   readRaw() {
-    const buf = fs23.readFileSync(this.storePath);
+    const buf = fs24.readFileSync(this.storePath);
     let offset = 0;
     const salt = buf.subarray(offset, offset + SALT_LEN);
     offset += SALT_LEN;
@@ -16918,9 +17781,9 @@ var Keystore = class {
   }
 };
 async function loadCascadeMd(workspacePath) {
-  const filePath = path24.join(workspacePath, "CASCADE.md");
+  const filePath = path25.join(workspacePath, "CASCADE.md");
   try {
-    const raw = await fs4.readFile(filePath, "utf-8");
+    const raw = await fs5.readFile(filePath, "utf-8");
     return parseCascadeMd(raw);
   } catch {
     return null;
@@ -16949,7 +17812,7 @@ ${raw.trim()}`;
 var MemoryStore = class _MemoryStore {
   db;
   constructor(dbPath) {
-    fs23.mkdirSync(path24.dirname(dbPath), { recursive: true });
+    fs24.mkdirSync(path25.dirname(dbPath), { recursive: true });
     try {
       this.db = new Database(dbPath, { timeout: 5e3 });
       this.db.pragma("journal_mode = WAL");
@@ -17785,7 +18648,7 @@ Original error: ${err.message}`
   }
 };
 function credentialsPath(globalDir2) {
-  return path24.join(globalDir2, GLOBAL_CREDENTIALS_FILE);
+  return path25.join(globalDir2, GLOBAL_CREDENTIALS_FILE);
 }
 function providerKey(p) {
   if (p.type === "azure") {
@@ -17798,7 +18661,7 @@ function isPersistable(p) {
 }
 function loadGlobalCredentials(globalDir2) {
   try {
-    const raw = fs23.readFileSync(credentialsPath(globalDir2), "utf-8");
+    const raw = fs24.readFileSync(credentialsPath(globalDir2), "utf-8");
     const parsed = JSON.parse(raw);
     if (!Array.isArray(parsed.providers)) return [];
     return parsed.providers.filter(
@@ -17810,13 +18673,13 @@ function loadGlobalCredentials(globalDir2) {
 }
 function saveGlobalCredentials(globalDir2, providers) {
   const filePath = credentialsPath(globalDir2);
-  fs23.mkdirSync(globalDir2, { recursive: true, mode: 448 });
+  fs24.mkdirSync(globalDir2, { recursive: true, mode: 448 });
   const body = { version: 1, providers: providers.filter(isPersistable) };
   const tmp = `${filePath}.tmp`;
-  fs23.writeFileSync(tmp, JSON.stringify(body, null, 2), { encoding: "utf-8", mode: 384 });
-  fs23.renameSync(tmp, filePath);
+  fs24.writeFileSync(tmp, JSON.stringify(body, null, 2), { encoding: "utf-8", mode: 384 });
+  fs24.renameSync(tmp, filePath);
   try {
-    fs23.chmodSync(filePath, 384);
+    fs24.chmodSync(filePath, 384);
   } catch {
   }
 }
@@ -17851,7 +18714,7 @@ var ConfigManager = class {
   /** `globalDirOverride` exists for tests — never point it at the real home dir there. */
   constructor(workspacePath = process.cwd(), globalDirOverride) {
     this.workspacePath = workspacePath;
-    this.globalDir = globalDirOverride ?? path24.join(os6.homedir(), GLOBAL_CONFIG_DIR);
+    this.globalDir = globalDirOverride ?? path25.join(os6.homedir(), GLOBAL_CONFIG_DIR);
   }
   async load() {
     this.config = await this.loadConfig();
@@ -17865,8 +18728,8 @@ var ConfigManager = class {
     this.ignore = new CascadeIgnore();
     await this.ignore.load(this.workspacePath);
     this.cascadeMd = await loadCascadeMd(this.workspacePath);
-    this.keystore = new Keystore(path24.join(this.globalDir, GLOBAL_KEYSTORE_FILE));
-    this.store = new MemoryStore(path24.join(this.workspacePath, CASCADE_DB_FILE));
+    this.keystore = new Keystore(path25.join(this.globalDir, GLOBAL_KEYSTORE_FILE));
+    this.store = new MemoryStore(path25.join(this.workspacePath, CASCADE_DB_FILE));
     await this.injectEnvKeys();
     this.config.providers = mergeGlobalCredentials(this.config.providers, loadGlobalCredentials(this.globalDir));
     await this.ensureDefaultIdentity();
@@ -17891,9 +18754,9 @@ var ConfigManager = class {
     return this.workspacePath;
   }
   async save() {
-    const configPath = path24.join(this.workspacePath, CASCADE_CONFIG_FILE);
-    await fs4.mkdir(path24.dirname(configPath), { recursive: true });
-    await fs4.writeFile(configPath, JSON.stringify(this.config, null, 2), "utf-8");
+    const configPath = path25.join(this.workspacePath, CASCADE_CONFIG_FILE);
+    await fs5.mkdir(path25.dirname(configPath), { recursive: true });
+    await fs5.writeFile(configPath, JSON.stringify(this.config, null, 2), "utf-8");
     try {
       saveGlobalCredentials(this.globalDir, this.config.providers);
     } catch (err) {
@@ -17928,9 +18791,9 @@ var ConfigManager = class {
     return configProvider?.apiKey;
   }
   async loadConfig() {
-    const configPath = path24.join(this.workspacePath, CASCADE_CONFIG_FILE);
+    const configPath = path25.join(this.workspacePath, CASCADE_CONFIG_FILE);
     try {
-      const raw = await fs4.readFile(configPath, "utf-8");
+      const raw = await fs5.readFile(configPath, "utf-8");
       return validateConfig(JSON.parse(raw));
     } catch (err) {
       if (err.code === "ENOENT") {
@@ -18460,7 +19323,7 @@ function aggregateCostStats(sessions, opts = {}) {
 }
 
 // src/dashboard/server.ts
-var __dirname$1 = path24.dirname(fileURLToPath(import.meta.url));
+var __dirname$1 = path25.dirname(fileURLToPath(import.meta.url));
 var ORPHANED_ESCALATION_GRACE_MS = 3e4;
 var DashboardServer = class {
   app;
@@ -18740,14 +19603,14 @@ var DashboardServer = class {
    */
   persistConfig() {
     try {
-      const configPath = path24.join(this.workspacePath, CASCADE_CONFIG_FILE);
-      fs23.mkdirSync(path24.dirname(configPath), { recursive: true });
-      fs23.writeFileSync(configPath, JSON.stringify(this.config, null, 2), "utf-8");
+      const configPath = path25.join(this.workspacePath, CASCADE_CONFIG_FILE);
+      fs24.mkdirSync(path25.dirname(configPath), { recursive: true });
+      fs24.writeFileSync(configPath, JSON.stringify(this.config, null, 2), "utf-8");
     } catch (err) {
       console.warn(`[dashboard] Failed to persist config: ${err instanceof Error ? err.message : String(err)}`);
     }
     try {
-      saveGlobalCredentials(path24.join(os6.homedir(), GLOBAL_CONFIG_DIR), this.config.providers ?? []);
+      saveGlobalCredentials(path25.join(os6.homedir(), GLOBAL_CONFIG_DIR), this.config.providers ?? []);
     } catch (err) {
       console.warn(`[dashboard] Failed to sync global credentials: ${err instanceof Error ? err.message : String(err)}`);
     }
@@ -18762,15 +19625,15 @@ var DashboardServer = class {
   resolveDashboardSecret() {
     const fromConfig = this.config.dashboard.secret ?? process.env["CASCADE_DASHBOARD_SECRET"];
     if (fromConfig) return fromConfig;
-    const secretPath = path24.join(this.workspacePath, CASCADE_DASHBOARD_SECRET_FILE);
+    const secretPath = path25.join(this.workspacePath, CASCADE_DASHBOARD_SECRET_FILE);
     try {
-      if (fs23.existsSync(secretPath)) {
-        const existing = fs23.readFileSync(secretPath, "utf-8").trim();
+      if (fs24.existsSync(secretPath)) {
+        const existing = fs24.readFileSync(secretPath, "utf-8").trim();
         if (existing.length >= 16) return existing;
       }
       const generated = randomUUID();
-      fs23.mkdirSync(path24.dirname(secretPath), { recursive: true });
-      fs23.writeFileSync(secretPath, generated, { encoding: "utf-8", mode: 384 });
+      fs24.mkdirSync(path25.dirname(secretPath), { recursive: true });
+      fs24.writeFileSync(secretPath, generated, { encoding: "utf-8", mode: 384 });
       if (this.config.dashboard.auth) {
         console.warn(
           `Dashboard auth enabled with no secret configured; persisted a generated secret to ${secretPath}. Set CASCADE_DASHBOARD_SECRET or config.dashboard.secret to override.`
@@ -18797,7 +19660,7 @@ var DashboardServer = class {
   // ── Setup ─────────────────────────────────────
   getGlobalStore() {
     if (!this.globalStore) {
-      const globalDbPath = path24.join(os6.homedir(), GLOBAL_CONFIG_DIR, GLOBAL_RUNTIME_DB_FILE);
+      const globalDbPath = path25.join(os6.homedir(), GLOBAL_CONFIG_DIR, GLOBAL_RUNTIME_DB_FILE);
       this.globalStore = new MemoryStore(globalDbPath);
     }
     return this.globalStore;
@@ -19177,12 +20040,12 @@ ${prompt}`;
     }
   }
   watchRuntimeChanges() {
-    const workspaceDbPath = path24.join(this.workspacePath, CASCADE_DB_FILE);
-    const globalDbPath = path24.join(os6.homedir(), GLOBAL_CONFIG_DIR, GLOBAL_RUNTIME_DB_FILE);
+    const workspaceDbPath = path25.join(this.workspacePath, CASCADE_DB_FILE);
+    const globalDbPath = path25.join(os6.homedir(), GLOBAL_CONFIG_DIR, GLOBAL_RUNTIME_DB_FILE);
     const watchPaths = [workspaceDbPath, globalDbPath].filter((p, index, arr) => arr.indexOf(p) === index);
     for (const watchPath of watchPaths) {
-      if (!fs23.existsSync(watchPath)) continue;
-      fs23.watchFile(watchPath, { interval: 3e3 }, () => {
+      if (!fs24.existsSync(watchPath)) continue;
+      fs24.watchFile(watchPath, { interval: 3e3 }, () => {
         this.throttledBroadcast(watchPath === globalDbPath ? "global" : "workspace");
       });
     }
@@ -19304,7 +20167,7 @@ ${prompt}`;
       const sessionId = req.params.id;
       this.store.deleteSession(sessionId);
       this.store.deleteRuntimeSession(sessionId);
-      const globalDbPath = path24.join(os6.homedir(), GLOBAL_CONFIG_DIR, GLOBAL_RUNTIME_DB_FILE);
+      const globalDbPath = path25.join(os6.homedir(), GLOBAL_CONFIG_DIR, GLOBAL_RUNTIME_DB_FILE);
       const globalStore = new MemoryStore(globalDbPath);
       try {
         globalStore.deleteRuntimeSession(sessionId);
@@ -19397,7 +20260,7 @@ ${prompt}`;
     });
     this.app.delete("/api/sessions", auth2, (req, res) => {
       const body = req.body;
-      const globalDbPath = path24.join(os6.homedir(), GLOBAL_CONFIG_DIR, GLOBAL_RUNTIME_DB_FILE);
+      const globalDbPath = path25.join(os6.homedir(), GLOBAL_CONFIG_DIR, GLOBAL_RUNTIME_DB_FILE);
       if (body?.ids && Array.isArray(body.ids) && body.ids.length > 0) {
         const globalStore = new MemoryStore(globalDbPath);
         try {
@@ -19420,7 +20283,7 @@ ${prompt}`;
     });
     this.app.delete("/api/runtime", auth2, (_req, res) => {
       this.store.deleteAllRuntimeNodes();
-      const globalDbPath = path24.join(os6.homedir(), GLOBAL_CONFIG_DIR, GLOBAL_RUNTIME_DB_FILE);
+      const globalDbPath = path25.join(os6.homedir(), GLOBAL_CONFIG_DIR, GLOBAL_RUNTIME_DB_FILE);
       const globalStore = new MemoryStore(globalDbPath);
       try {
         globalStore.deleteAllRuntimeNodes();
@@ -19506,12 +20369,12 @@ ${prompt}`;
       if (body["tierLimits"]) this.config.tierLimits = { ...this.config.tierLimits, ...body["tierLimits"] };
       if (body["budget"]) this.config.budget = { ...this.config.budget, ...body["budget"] };
       try {
-        const configPath = path24.join(this.workspacePath, CASCADE_CONFIG_FILE);
-        const existing = fs23.existsSync(configPath) ? JSON.parse(fs23.readFileSync(configPath, "utf-8")) : {};
+        const configPath = path25.join(this.workspacePath, CASCADE_CONFIG_FILE);
+        const existing = fs24.existsSync(configPath) ? JSON.parse(fs24.readFileSync(configPath, "utf-8")) : {};
         const updated = { ...existing, tierLimits: this.config.tierLimits, budget: this.config.budget };
         const tmp = configPath + ".tmp";
-        fs23.writeFileSync(tmp, JSON.stringify(updated, null, 2), "utf-8");
-        fs23.renameSync(tmp, configPath);
+        fs24.writeFileSync(tmp, JSON.stringify(updated, null, 2), "utf-8");
+        fs24.renameSync(tmp, configPath);
         res.json({ ok: true });
       } catch (err) {
         res.status(500).json({ error: `Failed to save config: ${err instanceof Error ? err.message : String(err)}` });
@@ -19539,7 +20402,7 @@ ${prompt}`;
     this.app.get("/api/runtime", auth2, (req, res) => {
       const scope = req.query["scope"] ?? "workspace";
       if (scope === "global") {
-        const globalDbPath = path24.join(os6.homedir(), GLOBAL_CONFIG_DIR, GLOBAL_RUNTIME_DB_FILE);
+        const globalDbPath = path25.join(os6.homedir(), GLOBAL_CONFIG_DIR, GLOBAL_RUNTIME_DB_FILE);
         const globalStore = new MemoryStore(globalDbPath);
         try {
           res.json({
@@ -19880,13 +20743,13 @@ ${prompt}`;
         res.status(500).json({ error: err instanceof Error ? err.message : String(err) });
       }
     });
-    const prodPath = path24.resolve(__dirname$1, "../web/dist");
-    const devPath = path24.resolve(__dirname$1, "../../web/dist");
-    const webDistPath = fs23.existsSync(prodPath) ? prodPath : devPath;
-    if (fs23.existsSync(webDistPath)) {
+    const prodPath = path25.resolve(__dirname$1, "../web/dist");
+    const devPath = path25.resolve(__dirname$1, "../../web/dist");
+    const webDistPath = fs24.existsSync(prodPath) ? prodPath : devPath;
+    if (fs24.existsSync(webDistPath)) {
       this.app.use(express.static(webDistPath));
       this.app.get("*", (_req, res) => {
-        res.sendFile(path24.join(webDistPath, "index.html"));
+        res.sendFile(path25.join(webDistPath, "index.html"));
       });
     } else {
       this.app.get("/", (_req, res) => {
@@ -20073,14 +20936,14 @@ function planRetrieval(ctx) {
 }
 var CLOUD_SESSION_FILE = "cloud-session.json";
 function globalDir(homeDir = os6.homedir()) {
-  return path24.join(homeDir, GLOBAL_CONFIG_DIR);
+  return path25.join(homeDir, GLOBAL_CONFIG_DIR);
 }
 function cloudSessionPath(dir = globalDir()) {
-  return path24.join(dir, CLOUD_SESSION_FILE);
+  return path25.join(dir, CLOUD_SESSION_FILE);
 }
 function loadCloudSession(dir = globalDir()) {
   try {
-    const raw = fs23.readFileSync(cloudSessionPath(dir), "utf-8");
+    const raw = fs24.readFileSync(cloudSessionPath(dir), "utf-8");
     const parsed = JSON.parse(raw);
     if (!parsed?.refreshToken || !parsed?.serverUrl) return null;
     return parsed;
@@ -20089,17 +20952,17 @@ function loadCloudSession(dir = globalDir()) {
   }
 }
 function saveCloudSession(session, dir = globalDir()) {
-  fs23.mkdirSync(dir, { recursive: true, mode: 448 });
+  fs24.mkdirSync(dir, { recursive: true, mode: 448 });
   const file = cloudSessionPath(dir);
-  fs23.writeFileSync(file, JSON.stringify(session, null, 2), { mode: 384 });
+  fs24.writeFileSync(file, JSON.stringify(session, null, 2), { mode: 384 });
   try {
-    fs23.chmodSync(file, 384);
+    fs24.chmodSync(file, 384);
   } catch {
   }
 }
 function clearCloudSession(dir = globalDir()) {
   try {
-    fs23.rmSync(cloudSessionPath(dir));
+    fs24.rmSync(cloudSessionPath(dir));
   } catch {
   }
 }
@@ -20271,16 +21134,16 @@ var CloudClient = class _CloudClient {
     return (await this.refresh()).accessToken;
   }
   /** Authenticated request that refreshes once on a 401 (e.g. server-side revoke). */
-  async authed(path26, init = {}) {
-    const call = (token) => fetch(this.url(path26), { ...init, headers: { ...init.headers ?? {}, Authorization: `Bearer ${token}` } });
+  async authed(path27, init = {}) {
+    const call = (token) => fetch(this.url(path27), { ...init, headers: { ...init.headers ?? {}, Authorization: `Bearer ${token}` } });
     let res = await call(await this.accessToken());
     if (res.status === 401) res = await call((await this.refresh()).accessToken);
     if (!res.ok) throw new Error(`Request failed (${res.status}).`);
     const text = await res.text();
     return text ? JSON.parse(text) : {};
   }
-  authedGet(path26) {
-    return this.authed(path26);
+  authedGet(path27) {
+    return this.authed(path27);
   }
   async fetchMe(token) {
     const res = await fetch(this.url("/api/me"), { headers: { Authorization: `Bearer ${token}` } });
@@ -20617,6 +21480,6 @@ function applySyncBundle(bundle, config) {
   return next;
 }
 
-export { AZURE_BASE_MODELS, AZURE_BASE_URL_TEMPLATE, AuditLogger, CASCADE_AUDIT_FILE, CASCADE_CONFIG_DIR, CASCADE_CONFIG_FILE, CASCADE_DASHBOARD_SECRET_FILE, CASCADE_DB_FILE, CASCADE_IGNORE_FILE, CASCADE_KEYSTORE_FILE, CASCADE_MD_FILE, CASCADE_VERSION, CHARS_PER_TOKEN, COMPLEXITY_T2_COUNT, Cascade, CascadeCancelledError, CascadeIgnore, CascadeRouter, CascadeToolError, CloudClient, CodeSearchTool, ConfigManager, CurrentPageTool, DEFAULT_API_PORT, DEFAULT_APPROVAL_REQUIRED, DEFAULT_AUTO_SUMMARIZE_AT, DEFAULT_CLOUD_URL, DEFAULT_CONTEXT_LIMIT, DEFAULT_DASHBOARD_PORT, DEFAULT_MAX_SESSION_MESSAGES, DEFAULT_RETENTION_DAYS, DEFAULT_THEME, DashboardServer, FileMcpOAuthStore, GITHUB_MODELS_API_VERSION, GITHUB_MODELS_CATALOG_URL, GITHUB_MODELS_INFERENCE_URL, GLOBAL_CONFIG_DIR, GLOBAL_CREDENTIALS_FILE, GLOBAL_DB_FILE, GLOBAL_KEYSTORE_FILE, GLOBAL_RUNTIME_DB_FILE, GraphRetriever, GraphSearchTool, HooksRunner, Keystore, LLMReranker, LM_STUDIO_BASE_URL, MAX_PAGE_TEXT_CHARS, MCP_TOOL_PREFIX, MODELS, McpClient, McpOAuthProvider, MemoryStore, OLLAMA_BASE_URL, OpenAICompatibleEmbedder, PROVIDER_DISPLAY_NAMES, Retriever, SqliteVectorStore, T1Administrator, T1_MODEL_PRIORITY, T2Manager, T2_MODEL_PRIORITY, T3Worker, T3_MODEL_PRIORITY, THEME_NAMES, TOOL_NAMES, TaskScheduler, Telemetry, ToolRegistry, VISION_MODEL_PRIORITY, WorkspaceIndex, applySyncBundle, azureModelForDeployment, beginMcpOAuth, buildManifest, buildSessionTranscript, cagCharBudget, chatCompleterFromProviders, chunkCode, chunkText2 as chunkText, completeMcpOAuth, connectMcpWithLoopbackOAuth, createCascade, decryptJSON as decryptSyncBlob, diffManifest, disambiguateMcpServerNames, discoverMcpAuthServer, discoverMcpTools, distillSessionFacts, embedderFromProviders, encryptJSON as encryptSyncBlob, fileOAuthProvider, gatherSyncBundle, hashContent, heuristicCodeChunker, inferAzureBaseModel, isMcpToolName, mcpServerPrefix, mcpToolName, nodeHttpFetch, parseRankOrder, planRetrieval, preferIpv4Host, reciprocalRankFusion, refreshMcpToken, removeMcpServerDenials, runCascade, sessionWorthRemembering, streamCascade, uniqueMcpServerName };
+export { AZURE_BASE_MODELS, AZURE_BASE_URL_TEMPLATE, AuditLogger, CASCADE_AUDIT_FILE, CASCADE_CONFIG_DIR, CASCADE_CONFIG_FILE, CASCADE_DASHBOARD_SECRET_FILE, CASCADE_DB_FILE, CASCADE_IGNORE_FILE, CASCADE_KEYSTORE_FILE, CASCADE_MD_FILE, CASCADE_VERSION, CHARS_PER_TOKEN, COMPLEXITY_T2_COUNT, Cascade, CascadeCancelledError, CascadeIgnore, CascadeRouter, CascadeToolError, CloudClient, CodeSearchTool, ConfigManager, CurrentPageTool, DEFAULT_API_PORT, DEFAULT_APPROVAL_REQUIRED, DEFAULT_AUTO_SUMMARIZE_AT, DEFAULT_CLOUD_URL, DEFAULT_CONTEXT_LIMIT, DEFAULT_DASHBOARD_PORT, DEFAULT_MAX_SESSION_MESSAGES, DEFAULT_RETENTION_DAYS, DEFAULT_THEME, DOCUMENT_MIME, DashboardServer, FileMcpOAuthStore, GITHUB_MODELS_API_VERSION, GITHUB_MODELS_CATALOG_URL, GITHUB_MODELS_INFERENCE_URL, GLOBAL_CONFIG_DIR, GLOBAL_CREDENTIALS_FILE, GLOBAL_DB_FILE, GLOBAL_KEYSTORE_FILE, GLOBAL_RUNTIME_DB_FILE, GenerateDocumentTool, GraphRetriever, GraphSearchTool, HooksRunner, Keystore, LLMReranker, LM_STUDIO_BASE_URL, MAX_PAGE_TEXT_CHARS, MCP_TOOL_PREFIX, MODELS, McpClient, McpOAuthProvider, MemoryStore, OLLAMA_BASE_URL, OpenAICompatibleEmbedder, PROVIDER_DISPLAY_NAMES, Retriever, SqliteVectorStore, T1Administrator, T1_MODEL_PRIORITY, T2Manager, T2_MODEL_PRIORITY, T3Worker, T3_MODEL_PRIORITY, THEME_NAMES, TOOL_NAMES, TaskScheduler, Telemetry, ToolRegistry, VISION_MODEL_PRIORITY, WorkspaceIndex, applySyncBundle, azureModelForDeployment, beginMcpOAuth, buildDocumentTools, buildManifest, buildSessionTranscript, bytesToBase64, cagCharBudget, chartKind, chartToTableRows, chatCompleterFromProviders, chunkCode, chunkText2 as chunkText, completeMcpOAuth, connectMcpWithLoopbackOAuth, createCascade, decryptJSON as decryptSyncBlob, diffManifest, disambiguateMcpServerNames, discoverMcpAuthServer, discoverMcpTools, distillSessionFacts, embedderFromProviders, encryptJSON as encryptSyncBlob, extractCharts, fileExt, fileOAuthProvider, gatherSyncBundle, hashContent, heuristicCodeChunker, inferAzureBaseModel, inlineRuns, isDocumentFormat, isMcpToolName, matchImageLine, mcpServerPrefix, mcpToolName, nodeHttpFetch, parseBlocks, parseChartSpec, parseDelimited, parseRankOrder, parseSlide, planRetrieval, preferIpv4Host, reciprocalRankFusion, refreshMcpToken, removeMcpServerDenials, renderDocument, renderDocx, renderPptx, renderXlsx, runCascade, sessionWorthRemembering, sniffImage, splitSlides, streamCascade, stripInline, uniqueMcpServerName };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map