cascade-ai 0.66.2 → 0.68.0

package/dist/index.js

@@ -1,6 +1,6 @@
 import Database from 'better-sqlite3';
-import path24, { dirname } from 'path';
-import fs23, { mkdirSync, writeFileSync, existsSync, readFileSync } from 'fs';
+import path26, { dirname } from 'path';
+import fs25, { promises, mkdirSync, writeFileSync, existsSync, readFileSync } from 'fs';
 import os6 from 'os';
 import crypto4, { randomUUID, randomBytes, createHash, timingSafeEqual, webcrypto } from 'crypto';
 import EventEmitter, { setMaxListeners } from 'events';
@@ -13,7 +13,7 @@ import http, { createServer } from 'http';
 import https from 'https';
 import zlib from 'zlib';
 import { Readable } from 'stream';
-import fs4 from 'fs/promises';
+import fs5 from 'fs/promises';
 import * as ignoreFactory from 'ignore';
 import ignoreFactory__default from 'ignore';
 import { exec, execFile, execSync } from 'child_process';
@@ -61,12 +61,12 @@ var init_audit_logger = __esm({
       constructor(workspacePath, debugMode = false) {
         this.workspacePath = workspacePath;
         this.debugMode = debugMode;
-        const cascadeDir = path24.join(workspacePath, ".cascade");
-        if (!fs23.existsSync(cascadeDir)) {
-          fs23.mkdirSync(cascadeDir, { recursive: true });
+        const cascadeDir = path26.join(workspacePath, ".cascade");
+        if (!fs25.existsSync(cascadeDir)) {
+          fs25.mkdirSync(cascadeDir, { recursive: true });
         }
-        this.keyPath = path24.join(cascadeDir, "audit_log.key");
-        this.dbPath = path24.join(cascadeDir, "audit_log.db");
+        this.keyPath = path26.join(cascadeDir, "audit_log.key");
+        this.dbPath = path26.join(cascadeDir, "audit_log.db");
         this.initEncryptionKey();
         this.db = new Database(this.dbPath);
         this.db.pragma("journal_mode = WAL");
@@ -96,11 +96,11 @@ var init_audit_logger = __esm({
         return crypto4.createHash("sha256").update(`${prevHash}|${timestamp}|${eventType}|${tierId}|${encryptedPayload}`).digest("hex");
       }
       initEncryptionKey() {
-        if (fs23.existsSync(this.keyPath)) {
-          this.encryptionKey = fs23.readFileSync(this.keyPath);
+        if (fs25.existsSync(this.keyPath)) {
+          this.encryptionKey = fs25.readFileSync(this.keyPath);
         } else {
           this.encryptionKey = crypto4.randomBytes(32);
-          fs23.writeFileSync(this.keyPath, this.encryptionKey);
+          fs25.writeFileSync(this.keyPath, this.encryptionKey);
         }
       }
       encrypt(text) {
@@ -178,9 +178,9 @@ var init_audit_logger = __esm({
       dumpDebugIfNeeded() {
         if (!this.debugMode) return;
         try {
-          const dumpPath = path24.join(os6.tmpdir(), "cascade_audit_logs_debug.json");
+          const dumpPath = path26.join(os6.tmpdir(), "cascade_audit_logs_debug.json");
           const entries = this.getAllLogs();
-          fs23.writeFileSync(dumpPath, JSON.stringify(entries, null, 2), "utf-8");
+          fs25.writeFileSync(dumpPath, JSON.stringify(entries, null, 2), "utf-8");
         } catch (err) {
           console.error("Failed to dump debug audit logs", err);
         }
@@ -1862,7 +1862,7 @@ function reconcilePrice(model, live) {
 }
 
 // src/constants.ts
-var CASCADE_VERSION = "0.66.2";
+var CASCADE_VERSION = "0.68.0";
 var CASCADE_CONFIG_DIR = ".cascade";
 var CASCADE_MD_FILE = "CASCADE.md";
 var CASCADE_IGNORE_FILE = ".cascadeignore";
@@ -4617,7 +4617,7 @@ function computeDelegationSavings(stats, t1Model) {
 var DEFAULT_SNAPSHOT_URL = "https://raw.githubusercontent.com/Varun-SV/Cascade-AI/main/src/core/router/benchmark-data.json";
 var OPENROUTER_MODELS_URL = "https://openrouter.ai/api/v1/models";
 var FETCH_TIMEOUT_MS = 8e3;
-var DEFAULT_CACHE_FILE = path24.join(os6.homedir(), GLOBAL_CONFIG_DIR, "benchmarks-cache.json");
+var DEFAULT_CACHE_FILE = path26.join(os6.homedir(), GLOBAL_CONFIG_DIR, "benchmarks-cache.json");
 function normalizeModelId2(id) {
   let s = id.toLowerCase();
   const slash = s.lastIndexOf("/");
@@ -4652,7 +4652,7 @@ var LiveDataProvider = class {
     if (this.loaded) return;
     this.loaded = true;
     try {
-      const raw = await fs4.readFile(this.opts.cacheFile, "utf-8");
+      const raw = await fs5.readFile(this.opts.cacheFile, "utf-8");
       const cache = JSON.parse(raw);
       if (cache.snapshot?.families) {
         this.snapshot = cache.snapshot;
@@ -4764,14 +4764,14 @@ var LiveDataProvider = class {
   }
   async saveCache() {
     try {
-      await fs4.mkdir(path24.dirname(this.opts.cacheFile), { recursive: true });
+      await fs5.mkdir(path26.dirname(this.opts.cacheFile), { recursive: true });
       const cache = {
         fetchedAt: this.fetchedAt,
         snapshot: this.snapshot ?? void 0,
         prices: Object.fromEntries(this.prices),
         capabilities: Object.fromEntries(this.capabilities)
       };
-      await fs4.writeFile(this.opts.cacheFile, JSON.stringify(cache, null, 2), "utf-8");
+      await fs5.writeFile(this.opts.cacheFile, JSON.stringify(cache, null, 2), "utf-8");
     } catch {
     }
   }
@@ -6556,6 +6556,79 @@ function describeProviderError(c, modelId) {
   }
 }
 
+// src/core/verification/acceptance.ts
+var PATH_TOKEN = /[\w./\\-]{0,200}\w\.[A-Za-z0-9]{1,8}\b/g;
+var QUOTED_NEEDLE = /(?:contains?|includes?|mentions?)\s+["'`]([^"'`]+)["'`]/i;
+var EXISTS = /\b(?:exists?|is\s+created|is\s+present|was\s+created|be\s+created)\b/i;
+var NON_EMPTY = /\b(?:non-?empty|not\s+empty)\b/i;
+var NEGATION = /\b(?:not|no|never|without|absent|missing|does\s*n[o']t)\b/i;
+function targetFile(criterion, ownedFiles) {
+  const mentioned = [...new Set(criterion.match(PATH_TOKEN) ?? [])];
+  if (mentioned.length > 1) return null;
+  if (mentioned.length === 1) {
+    const candidate = mentioned[0];
+    return ownedFiles.find((file) => file === candidate || file.endsWith(`/${candidate}`)) ?? candidate;
+  }
+  return ownedFiles.length === 1 ? ownedFiles[0] : null;
+}
+async function evaluateAcceptance(criteria, ownedFiles, probe) {
+  const results = [];
+  for (const criterion of criteria) {
+    const text = criterion.trim();
+    if (!text) {
+      results.push({ criterion, verdict: "undecidable" });
+      continue;
+    }
+    if (NEGATION.test(text)) {
+      results.push({ criterion, verdict: "undecidable" });
+      continue;
+    }
+    const needle = text.match(QUOTED_NEEDLE)?.[1];
+    const wantsExists = EXISTS.test(text);
+    const wantsNonEmpty = NON_EMPTY.test(text);
+    if (!needle && !wantsExists && !wantsNonEmpty) {
+      results.push({ criterion, verdict: "undecidable" });
+      continue;
+    }
+    const file = targetFile(text, ownedFiles);
+    if (!file) {
+      results.push({ criterion, verdict: "undecidable" });
+      continue;
+    }
+    const stat = await probe.stat(file);
+    if (!stat) {
+      results.push({ criterion, verdict: "failed", detail: `${file} does not exist` });
+      continue;
+    }
+    if (wantsNonEmpty && stat.size === 0) {
+      results.push({ criterion, verdict: "failed", detail: `${file} is empty` });
+      continue;
+    }
+    if (needle) {
+      const content = await probe.read(file);
+      if (content === null) {
+        results.push({ criterion, verdict: "undecidable" });
+        continue;
+      }
+      const found = content.includes(needle);
+      results.push({
+        criterion,
+        verdict: found ? "passed" : "failed",
+        detail: found ? `${file} contains ${JSON.stringify(needle)}` : `${file} does not contain ${JSON.stringify(needle)}`
+      });
+      continue;
+    }
+    results.push({ criterion, verdict: "passed", detail: `${file} exists` });
+  }
+  return results;
+}
+function undecided(results) {
+  return results.filter((r) => r.verdict === "undecidable").map((r) => r.criterion);
+}
+function failures(results) {
+  return results.filter((r) => r.verdict === "failed").map((r) => `Acceptance not met \u2014 ${r.criterion}${r.detail ? ` (${r.detail})` : ""}`);
+}
+
 // src/core/tiers/t3-worker.ts
 var CriticalToolError = class extends Error {
   constructor(message, toolName) {
@@ -6598,7 +6671,8 @@ var KNOWN_TOOLS = [
   "generate_image",
   "generate_video",
   "generate_speech",
-  "transcribe_audio"
+  "transcribe_audio",
+  "generate_document"
 ];
 var PROVIDER_BACKED_TOOLS = /* @__PURE__ */ new Set([
   "generate_image",
@@ -6615,18 +6689,45 @@ function buildWorkerRules(has) {
     canWriteFiles && "- If the task asks for a file or artifact, you must actually create it in the workspace, verify that it exists, and inspect it before claiming success.",
     has("web_search") && '- Use the "web_search" tool to find current information, documentation, news, or general web data.',
     has("pdf_create") && '- Use the "pdf_create" tool for PDF requests.',
+    // A .docx/.pptx/.xlsx is a ZIP of OOXML parts, not text with a suffix.
+    // file_write does exactly what it promises — writes the model's characters
+    // verbatim — so without this rule the worker "wrote" a Word document that
+    // Word correctly reported as corrupted. Stated as an explicit prohibition
+    // on the tool it would otherwise reach for, because "use generate_document"
+    // alone competes with a file_write habit the model already has.
+    has("generate_document") && '- For a Word (.docx), PowerPoint (.pptx) or Excel (.xlsx) deliverable you MUST call the "generate_document" tool and NEVER "file_write" or "run_code" \u2014 those formats are ZIP archives of XML, so text written straight to the path opens as a corrupted file. Pass the target path plus the source: Markdown for .docx, Markdown slides separated by --- rules for .pptx (each slide starts with a heading), CSV for .xlsx.',
+    // The alternative to this rule is not "a worse chart" — it is a paragraph
+    // describing a chart that does not exist, which is what real decks came
+    // back with. A `chart:` block is checkable, carries the exact numbers, and
+    // becomes a genuine editable PowerPoint chart object.
+    has("generate_document") && '- For any data-driven visualization (a chart, graph, trend, breakdown or comparison of numbers), emit a fenced ```chart:bar block \u2014 also chart:line, chart:pie, chart:doughnut, chart:area, chart:scatter \u2014 whose body is an optional "title: ..." line followed by CSV: a header row of "<category label>,<series name>,<series name>", then one row per category. In a PowerPoint deliverable that becomes a REAL, editable chart carrying your exact numbers; in Word and Excel the same block keeps every value as a table or worksheet. Never write prose describing a chart in place of emitting one.',
     // Without this the model "writes the image" as prose — a bracketed
     // description sitting in the deck where the picture should be — even with a
     // working image model registered. Naming the reference syntax matters as
     // much as naming the tool: a generated image nobody embeds is still a
-    // missing image.
+    // missing image. It also has to say the reference must stand ALONE on its
+    // line, because only a standalone reference is parsed as a picture (see
+    // core/documents/blocks.ts matchImageLine) — one embedded mid-sentence
+    // silently degrades to caption text.
     //
-    // Scoped to PowerPoint/Word specifically: those are the only exporters
-    // that actually embed a Markdown image reference (cloud/web/exporters.ts
-    // toPptx/toDocx). PDF and plain-text/Markdown deliverables flatten a
-    // reference straight to caption text — telling the model to call
-    // generate_image for THOSE just pays for an image nobody ever sees.
-    has("generate_image") && '- When a slide deck (PowerPoint) or Word document deliverable calls for a decorative image or illustration, you MUST call the "generate_image" tool and then reference its result using Markdown image syntax: ![description](location), where "location" is exactly the string the tool reported back. NEVER write a text placeholder or a bracketed description such as [image: a cat] in its place. Do NOT use "generate_image" for a chart, graph, or diagram that must show exact data (numbers, axes, labels) \u2014 an image model cannot guarantee those values are correct, so render that data as a Markdown table instead. For any OTHER deliverable format (PDF, plain text, code, etc.) do NOT call "generate_image" \u2014 those cannot embed the result, so describe the visual in words instead.',
+    // Scoped to PowerPoint/Word specifically: those are the only renderers that
+    // actually embed a Markdown image reference. PDF and plain-text/Markdown
+    // deliverables flatten a reference straight to caption text — telling the
+    // model to call generate_image for THOSE just pays for an image nobody
+    // ever sees.
+    has("generate_image") && // Supersedes the earlier wording of this same rule: it now names the
+    // standalone-line parser constraint, says to generate BEFORE writing the
+    // document, and points data-driven visuals at a ```chart: block rather
+    // than a Markdown table, which is only the right advice now that chart
+    // blocks render as real chart objects.
+    '- When a slide deck (PowerPoint) or Word document deliverable calls for a decorative image, photo or illustration, you MUST call the "generate_image" tool \u2014 once per image the deliverable needs, BEFORE you write the document \u2014 and then put each result on a line of its OWN using Markdown image syntax: ![description](location), where "location" is exactly the string the tool reported back. A reference inside a sentence stays prose and no picture appears. NEVER write a text placeholder or a bracketed description such as [image: a cat] in its place, and never state that an image is included when you did not generate one. Do NOT use "generate_image" for a chart, graph or diagram that must show exact data (numbers, axes, labels) \u2014 an image model cannot guarantee those values are correct; emit a ```chart: block instead. For any OTHER deliverable format (PDF, plain text, code, etc.) do NOT call "generate_image" \u2014 those cannot embed the result, so describe the visual in words instead.',
+    // The other half of image reliability, and the half no amount of
+    // instruction-tightening could fix: generate_image only exists when an
+    // OpenAI or Gemini key is configured (multimodal/registry.ts CAPABILITIES).
+    // With neither, the model was never given a choice — and a model that
+    // doesn't know that writes "[illustration of a cat]" and moves on. Said out
+    // loud, up front, so the fallback is a real chart or honest prose.
+    !has("generate_image") && (has("generate_document") || canWriteFiles) && "- No image-generation model is available on this run, so there is NO tool that can draw a picture. Do not emit a Markdown image reference, a bracketed placeholder such as [image: a cat], or any claim that an illustration is included. If the request needs a data visualization use a ```chart: block, which needs no image model; otherwise describe the visual in words and say plainly that no image could be generated.",
     // The video counterpart of the image rule above, and the fix for the
     // reported "it writes scripts forever and never makes the video" run. The
     // failure mode is identical — the model narrates the deliverable instead of
@@ -6636,7 +6737,7 @@ function buildWorkerRules(has) {
     // the deliverable rather than an illustration inside one, and the reference
     // syntax is a plain link: Markdown image syntax does not embed a video.
     has("generate_video") && '- When the subtask deliverable is a video, you MUST call the "generate_video" tool \u2014 that call IS the deliverable, and the subtask is not done until it has returned. NEVER deliver the video as prose, a script, a storyboard, or a bracketed placeholder such as [video: a cat skating], and NEVER claim a video exists unless the tool reported a location for it. Call it exactly ONCE: it is billed per second of output and renders for minutes, so a second call charges the user again. Then report the location string the tool returned VERBATIM as your result, referencing it as [description](location) if it goes inside a document. If the tool reports a failure or a timeout, report that failure verbatim and stop \u2014 do NOT call it again, and do NOT substitute a written description of a video that was never made.',
-    has("run_code") && '- Use the "run_code" tool for any file types (Excel, Zip, csv, etc.) or complex processing not covered by other tools. Always cleanup after code execution.',
+    has("run_code") && `- Use the "run_code" tool for data processing, archives, and file formats not covered by a dedicated tool. ${has("generate_document") ? 'Do NOT use it to build a .docx, .pptx or .xlsx \u2014 "generate_document" already produces those correctly. ' : ""}${has("pdf_create") ? 'Do NOT use it to build a PDF \u2014 "pdf_create" does that. ' : ""}Always cleanup after code execution.`,
     "- If you are not making meaningful progress, stop and escalate rather than looping or padding the response.",
     has("peer_message") && '- Use the "peer_message" tool to communicate with other T3 workers if your tasks have dependencies or shared state. You can send updates or wait for signals.',
     hasAnyTool && "- Only use tools directly relevant to THIS subtask. Do not reach for an unrelated connected-service action (e.g. creating, deleting, or modifying a repository, issue, or PR; sending a message) unless the subtask explicitly calls for it.",
@@ -6647,13 +6748,34 @@ function buildWorkerRules(has) {
 Rules:
 ${rules.filter((r) => r !== false).join("\n")}`;
 }
-var ARTIFACT_TOOLS = /* @__PURE__ */ new Set(["file_write", "file_edit", "shell"]);
+var ARTIFACT_TOOLS = /* @__PURE__ */ new Set(["file_write", "file_edit", "shell", "generate_document"]);
+var ARTIFACT_FILE_RE = /\b[\w./-]+\.(pdf|md|html|txt|json|csv|py|js|ts|tsx|jsx|docx?|pptx?|xlsx?|png|jpg|jpeg|svg|gif)\b/i;
 function shouldRequireArtifact(assignment, toolNames) {
   if (!toolNames.some((n) => ARTIFACT_TOOLS.has(n))) return false;
   if (assignment?.files?.length) return true;
   const haystack = `${assignment?.description ?? ""}
 ${assignment?.expectedOutput ?? ""}`;
-  return /\b[\w./-]+\.(pdf|md|html|txt|json|csv|py|js|ts|tsx|jsx|docx?|png|jpg|jpeg|svg|gif)\b/i.test(haystack) || /save (?:a|the)? file|create (?:a|the)? file|write (?:a|the)? file/i.test(haystack);
+  return ARTIFACT_FILE_RE.test(haystack) || /save (?:a|the)? file|create (?:a|the)? file|write (?:a|the)? file/i.test(haystack);
+}
+var VISUAL_REQUEST_RE = /\b(image|images|picture|pictures|photo|photos|illustration|illustrations|visual|visuals|visualisation|visualization|visualizations|chart|charts|graph|graphs|plot|plots|diagram|diagrams|infographic)\b/i;
+var IMAGE_REF_RE = /!\[[^\]]*\]\([^)]+\)/;
+var CHART_BLOCK_RE = /^\s*```+\s*chart\s*:/im;
+function missingVisualEvidence(assignment, output, calledTools, toolNames) {
+  const canVisualize = toolNames.includes("generate_image") || toolNames.includes("generate_document");
+  if (!canVisualize) return null;
+  const haystack = `${assignment?.description ?? ""}
+${assignment?.expectedOutput ?? ""}`;
+  if (!VISUAL_REQUEST_RE.test(haystack)) return null;
+  if (calledTools.includes("generate_image") || calledTools.includes("generate_document")) return null;
+  if (IMAGE_REF_RE.test(output) || CHART_BLOCK_RE.test(output)) return null;
+  const options = [];
+  if (toolNames.includes("generate_image")) {
+    options.push('call "generate_image" and reference the result on its own line as ![description](location)');
+  }
+  if (toolNames.includes("generate_document")) {
+    options.push("emit a fenced ```chart:bar (or chart:line / chart:pie) block whose body is CSV, for anything data-driven");
+  }
+  return `The subtask asks for a visual, but the output contains no embedded image and no chart block \u2014 only prose. ${options.join(", or ")}. Describing a picture is not producing one.`;
 }
 var T3Worker = class extends BaseTier {
   router;
@@ -6823,7 +6945,7 @@ Now execute your subtask using this context where relevant.`
       }
       const artifactCheck = mustProduceArtifact ? await this.verifyArtifacts(assignment) : { ok: true, issues: [] };
       if (!artifactCheck.ok) {
-        correctionAttempts = 1;
+        correctionAttempts++;
         issues.push(...artifactCheck.issues);
         output = await this.correctOutput(output, artifactCheck.issues);
         const retryArtifactCheck = await this.verifyArtifacts(assignment);
@@ -6834,13 +6956,47 @@ Now execute your subtask using this context where relevant.`
           return this.buildResult("ESCALATED", output, { checksRun, passed, failed }, issues, correctionAttempts);
         }
       }
+      const visualIssue = missingVisualEvidence(
+        assignment,
+        output,
+        toolCalls.map((t) => t.name),
+        this.tools.map((t) => t.name)
+      );
+      if (visualIssue) {
+        correctionAttempts++;
+        issues.push(visualIssue);
+        this.sendStatusUpdate({ progressPct: 68, currentAction: "Verifying requested visuals", status: "IN_PROGRESS" });
+        output = await this.correctOutput(output, [visualIssue]);
+      }
+      const acceptanceResults = await this.checkAcceptance(assignment);
+      const acceptanceFailures = failures(acceptanceResults);
+      if (acceptanceFailures.length > 0) {
+        correctionAttempts++;
+        issues.push(...acceptanceFailures);
+        this.sendStatusUpdate({ progressPct: 69, currentAction: "Acceptance checks failed \u2014 correcting", status: "IN_PROGRESS" });
+        output = await this.correctOutput(output, acceptanceFailures);
+        const recheck = failures(await this.checkAcceptance(assignment));
+        if (recheck.length > 0) {
+          issues.push(...recheck);
+          checksRun.push(...acceptanceResults.map((r) => r.criterion));
+          failed.push(...recheck);
+          this.setStatus("FAILED");
+          this.peerBus?.publish(this.id, assignment.subtaskId, output, "ESCALATED");
+          return this.buildResult("ESCALATED", output, { checksRun, passed, failed }, issues, correctionAttempts);
+        }
+      }
+      for (const result2 of acceptanceResults) {
+        if (result2.verdict === "undecidable") continue;
+        checksRun.push(result2.criterion);
+        if (result2.verdict === "passed") passed.push(result2.criterion);
+      }
       this.sendStatusUpdate({ progressPct: 70, currentAction: "Self-testing output", status: "IN_PROGRESS" });
-      const testResult = await this.selfTest(assignment, output);
+      const testResult = await this.selfTest(assignment, output, undecided(acceptanceResults));
       checksRun.push(...testResult.checksRun);
       passed.push(...testResult.passed);
       failed.push(...testResult.failed);
       if (testResult.failed.length > 0) {
-        correctionAttempts = 1;
+        correctionAttempts++;
         issues.push(`Initial check failed: ${testResult.failed.join(", ")}`);
         const corrected = await this.correctOutput(output, testResult.failed);
         output = corrected;
@@ -7148,8 +7304,8 @@ HIERARCHY CONTEXT: ${this.hierarchyContext}` : "") + textToolSuffix,
         // Media generation can run for a minute; without this a cancelled run
         // still pays for an image nobody will see.
         ...this.signal ? { signal: this.signal } : {},
-        saveSnapshot: async (path26, content) => {
-          this.store?.addFileSnapshot(this.taskId, path26, content);
+        saveSnapshot: async (path28, content) => {
+          this.store?.addFileSnapshot(this.taskId, path28, content);
         },
         sendPeerSync: (to, syncType, content) => {
           this.peerBus?.send(this.id, to, syncType, this.assignment?.subtaskId ?? "", content);
@@ -7325,7 +7481,7 @@ ${assignment.expectedOutput}`;
     const declared = (assignment.files ?? []).map((f) => f.trim()).filter((f) => f.includes("."));
     const haystack = `${assignment.description}
 ${assignment.expectedOutput}`;
-    const matches = haystack.match(/\b[\w./-]+\.(pdf|md|html|txt|json|csv|py|js|ts|tsx|jsx|docx?|png|jpg|jpeg|svg|gif)\b/gi) ?? [];
+    const matches = haystack.match(new RegExp(ARTIFACT_FILE_RE.source, "gi")) ?? [];
     return [.../* @__PURE__ */ new Set([...declared, ...matches.map((m) => m.trim())])];
   }
   async verifyArtifacts(assignment) {
@@ -7336,9 +7492,9 @@ ${assignment.expectedOutput}`;
     const { promisify: promisify4 } = await import('util');
     const execAsync2 = promisify4(exec2);
     for (const artifactPath of artifactPaths) {
-      const absolutePath = path24.resolve(process.cwd(), artifactPath);
+      const absolutePath = path26.resolve(process.cwd(), artifactPath);
       try {
-        const stat = await fs4.stat(absolutePath);
+        const stat = await fs5.stat(absolutePath);
         if (!stat.isFile()) {
           issues.push(`Expected artifact is not a file: ${artifactPath}`);
           continue;
@@ -7347,8 +7503,22 @@ ${assignment.expectedOutput}`;
           issues.push(`Artifact is empty: ${artifactPath}`);
           continue;
         }
-        if (!/\.pdf$/i.test(artifactPath)) {
-          const content = await fs4.readFile(absolutePath, "utf-8");
+        if (/\.(docx|pptx|xlsx)$/i.test(artifactPath)) {
+          const head = Buffer.alloc(4);
+          const fh = await fs5.open(absolutePath, "r");
+          try {
+            await fh.read(head, 0, 4, 0);
+          } finally {
+            await fh.close();
+          }
+          if (head.toString("latin1") !== "PK") {
+            issues.push(
+              `${artifactPath} is not a valid Office file \u2014 it must be written with the generate_document tool, which renders the real OOXML archive. Plain text saved under that extension opens as corrupted.`
+            );
+            continue;
+          }
+        } else if (!/\.pdf$/i.test(artifactPath)) {
+          const content = await fs5.readFile(absolutePath, "utf-8");
           if (!content.trim()) {
             issues.push(`Artifact content is empty: ${artifactPath}`);
             continue;
@@ -7357,7 +7527,7 @@ ${assignment.expectedOutput}`;
           issues.push(`PDF artifact looks too small to be valid: ${artifactPath}`);
           continue;
         }
-        const ext = path24.extname(absolutePath).toLowerCase();
+        const ext = path26.extname(absolutePath).toLowerCase();
         try {
           if (ext === ".ts" || ext === ".tsx") {
             await execAsync2(`npx tsc --noEmit ${absolutePath}`, { timeout: 1e4 });
@@ -7443,14 +7613,42 @@ HIERARCHY CONTEXT: ${this.hierarchyContext}` : ""),
     }
     return current;
   }
-  async selfTest(assignment, output) {
+  /**
+   * Run the acceptance criteria that can be settled by looking at the workspace.
+   * Reads go through the same workspace-relative resolution verifyArtifacts uses.
+   */
+  async checkAcceptance(assignment) {
+    const criteria = assignment.acceptance ?? [];
+    if (!criteria.length) return [];
+    const resolve2 = (target) => path26.resolve(process.cwd(), target);
+    return evaluateAcceptance(criteria, assignment.files ?? [], {
+      stat: async (target) => {
+        try {
+          const stat = await fs5.stat(resolve2(target));
+          return stat.isFile() ? { size: stat.size } : null;
+        } catch {
+          return null;
+        }
+      },
+      read: async (target) => {
+        try {
+          const content = await fs5.readFile(resolve2(target), "utf-8");
+          return content.includes("\uFFFD") ? null : content;
+        } catch {
+          return null;
+        }
+      }
+    });
+  }
+  async selfTest(assignment, output, pendingAcceptance) {
+    const acceptance = pendingAcceptance ?? assignment.acceptance ?? [];
     const prompt = `Self-test this output against the assignment requirements.
 
 Assignment: ${assignment.description}
 Expected output: ${assignment.expectedOutput}
 Constraints: ${assignment.constraints.join("; ")}
-${assignment.acceptance?.length ? `Acceptance criteria \u2014 ALL must be satisfied for "completeness" to pass:
-${assignment.acceptance.map((a) => `- ${a}`).join("\n")}
+${acceptance.length ? `Acceptance criteria \u2014 ALL must be satisfied for "completeness" to pass:
+${acceptance.map((a) => `- ${a}`).join("\n")}
 ` : ""}
 Output to test:
 ${output}
@@ -7517,8 +7715,8 @@ ${output.slice(0, 4e3)}`;
     } catch {
     }
   }
-  async correctOutput(originalOutput, failures) {
-    const correctionPrompt = `The following output failed these checks: ${failures.join(", ")}.
+  async correctOutput(originalOutput, failures2) {
+    const correctionPrompt = `The following output failed these checks: ${failures2.join(", ")}.
 
 Original output:
 ${originalOutput}
@@ -8179,12 +8377,220 @@ function describeGenerationForPlanner(has) {
   return lines.join("\n");
 }
 
+// src/core/orchestration/task-graph.ts
+var TaskGraphValidationError = class extends Error {
+  constructor(issues) {
+    super(issues.map((issue) => issue.message).join("; "));
+    this.issues = issues;
+    this.name = "TaskGraphValidationError";
+  }
+  issues;
+};
+function normalizeDependencies(input) {
+  if (!input?.length) return [];
+  return [...new Set(input.map((dependency) => dependency.trim()).filter(Boolean))];
+}
+function cycleNodes(nodes) {
+  const adjacency = new Map(
+    nodes.map((node) => [node.id, node.dependsOn])
+  );
+  const index = /* @__PURE__ */ new Map();
+  const lowlink = /* @__PURE__ */ new Map();
+  const onStack = /* @__PURE__ */ new Set();
+  const stack = [];
+  const inCycle = /* @__PURE__ */ new Set();
+  let counter = 0;
+  const open = (id) => {
+    index.set(id, counter);
+    lowlink.set(id, counter);
+    counter++;
+    stack.push(id);
+    onStack.add(id);
+  };
+  for (const root of nodes) {
+    if (index.has(root.id)) continue;
+    open(root.id);
+    const frames = [{ id: root.id, edge: 0 }];
+    while (frames.length > 0) {
+      const frame = frames[frames.length - 1];
+      const neighbours = adjacency.get(frame.id) ?? [];
+      if (frame.edge < neighbours.length) {
+        const next = neighbours[frame.edge];
+        frame.edge++;
+        if (!adjacency.has(next)) continue;
+        if (!index.has(next)) {
+          open(next);
+          frames.push({ id: next, edge: 0 });
+        } else if (onStack.has(next)) {
+          lowlink.set(frame.id, Math.min(lowlink.get(frame.id), index.get(next)));
+        }
+        continue;
+      }
+      frames.pop();
+      const parent = frames[frames.length - 1];
+      if (parent) {
+        lowlink.set(parent.id, Math.min(lowlink.get(parent.id), lowlink.get(frame.id)));
+      }
+      if (lowlink.get(frame.id) === index.get(frame.id)) {
+        const component = [];
+        for (; ; ) {
+          const member = stack.pop();
+          onStack.delete(member);
+          component.push(member);
+          if (member === frame.id) break;
+        }
+        const cyclic = component.length > 1 || (adjacency.get(component[0]) ?? []).includes(component[0]);
+        if (cyclic) for (const member of component) inCycle.add(member);
+      }
+    }
+  }
+  return inCycle;
+}
+function throwIfStrict(mode, issues) {
+  if (mode === "strict" && issues.length > 0) {
+    throw new TaskGraphValidationError(issues);
+  }
+}
+function compileTaskGraph(inputNodes, options = {}) {
+  const mode = options.mode ?? "strict";
+  const issues = [];
+  if (inputNodes.length === 0) {
+    issues.push({ code: "INVALID_NODE", message: "Task graph requires at least one node" });
+    throwIfStrict(mode, issues);
+  }
+  const seen = /* @__PURE__ */ new Set();
+  const nodes = [];
+  for (let ordinal = 0; ordinal < inputNodes.length; ordinal++) {
+    const input = inputNodes[ordinal];
+    const id = input.id?.trim();
+    const title = input.title?.trim();
+    if (!id || !title) {
+      issues.push({
+        code: "INVALID_NODE",
+        nodeId: id || void 0,
+        message: `Task graph node at index ${ordinal} requires a non-empty id and title`
+      });
+      continue;
+    }
+    if (seen.has(id)) {
+      issues.push({
+        code: "DUPLICATE_NODE_ID",
+        nodeId: id,
+        message: `Duplicate task graph node id: ${id}`
+      });
+      continue;
+    }
+    seen.add(id);
+    nodes.push({
+      id,
+      title,
+      kind: input.kind,
+      dependsOn: normalizeDependencies(input.dependsOn),
+      payload: input.payload,
+      ordinal
+    });
+  }
+  throwIfStrict(mode, issues);
+  const ids = new Set(nodes.map((node) => node.id));
+  const sanitized = nodes.map((node) => {
+    const dependsOn = [];
+    for (const dependencyId of node.dependsOn) {
+      if (dependencyId === node.id) {
+        issues.push({
+          code: "SELF_DEPENDENCY",
+          nodeId: node.id,
+          dependencyId,
+          message: `Task graph node ${node.id} cannot depend on itself`
+        });
+        continue;
+      }
+      if (!ids.has(dependencyId)) {
+        issues.push({
+          code: "UNKNOWN_DEPENDENCY",
+          nodeId: node.id,
+          dependencyId,
+          message: `Task graph node ${node.id} depends on unknown node ${dependencyId}`
+        });
+        continue;
+      }
+      dependsOn.push(dependencyId);
+    }
+    return { ...node, dependsOn };
+  });
+  throwIfStrict(mode, issues);
+  const cyclic = cycleNodes(sanitized);
+  let repaired = sanitized;
+  if (cyclic.size > 0) {
+    const cycleIssues = [];
+    repaired = sanitized.map((node) => {
+      if (!cyclic.has(node.id)) return node;
+      const dependsOn = node.dependsOn.filter((dependencyId) => {
+        if (!cyclic.has(dependencyId)) return true;
+        cycleIssues.push({
+          code: "CYCLE_EDGE_REMOVED",
+          nodeId: node.id,
+          dependencyId,
+          message: `Removed cyclic dependency ${dependencyId} -> ${node.id}`
+        });
+        return false;
+      });
+      return { ...node, dependsOn };
+    });
+    issues.push(...cycleIssues);
+    throwIfStrict(mode, cycleIssues);
+  }
+  const remainingCycle = cycleNodes(repaired);
+  if (remainingCycle.size > 0) {
+    throw new TaskGraphValidationError([
+      {
+        code: "INVALID_NODE",
+        message: `Task graph remained cyclic after repair: ${[...remainingCycle].join(", ")}`
+      }
+    ]);
+  }
+  return {
+    graph: { nodes: repaired.sort((a, b) => a.ordinal - b.ordinal) },
+    issues
+  };
+}
+
+// src/core/orchestration/adapters.ts
+function compileSectionGraph(sections) {
+  return compileTaskGraph(
+    sections.map((section) => ({
+      id: section.sectionId,
+      title: section.sectionTitle,
+      kind: "section",
+      dependsOn: section.dependsOn,
+      payload: section
+    })),
+    { mode: "repair" }
+  );
+}
+function compileSubtaskGraph(subtasks) {
+  return compileTaskGraph(
+    subtasks.map((subtask) => ({
+      id: subtask.subtaskId,
+      title: subtask.subtaskTitle,
+      kind: "subtask",
+      dependsOn: subtask.dependsOn,
+      payload: subtask
+    })),
+    { mode: "repair" }
+  );
+}
+
 // src/core/tiers/t2-manager.ts
 function buildT2SystemPrompt(has) {
   const generation = describeGenerationForPlanner(has);
   return [
     "You are a T2 Manager agent in the Cascade AI system.",
-    "Your role is to analyze a section of a task and decompose it into 2-5 discrete subtasks for T3 Workers.",
+    // Must agree with the decomposition prompt in decomposeSection(), which is
+    // the one carrying the actual instruction. It said 1-4 and "the FEWEST that
+    // fully cover it"; this said 2-5. The model received both, so its floor was
+    // simultaneously one and two, and the cheaper reading — pad to two — costs a
+    // real worker call on every small section.
+    "Your role is to analyze a section of a task and decompose it into 1-4 discrete subtasks for T3 Workers \u2014 the fewest that fully cover it.",
     'If subtasks have dependencies, you can specify "executionMode": "sequential" for the section.',
     has("peer_message") && 'Provide "peerT3Ids" to subtasks so they can coordinate using the peer_message tool.',
     "Return ONLY valid JSON matching the T3 subtask array schema \u2014 no other text.",
@@ -8580,21 +8986,30 @@ HIERARCHY CONTEXT: ${this.hierarchyContext}` : ""),
    *     then reduce in-degrees of their dependents and repeat.
    */
   async runWithDependencies(assignments, workerMap, taskId) {
+    const compiled = compileSubtaskGraph(assignments);
+    for (const issue of compiled.issues) {
+      this.log(`\u26A0 Subtask graph: ${issue.message}`);
+    }
+    const sanitizedAssignments = compiled.graph.nodes.map((node) => {
+      const assignment = node.payload;
+      const original = assignment.dependsOn ?? [];
+      const repaired = node.dependsOn;
+      const unchanged = repaired.length === original.length && repaired.every((dependencyId, index) => dependencyId === original[index]);
+      return unchanged ? assignment : { ...assignment, dependsOn: [...repaired] };
+    });
     const adj = /* @__PURE__ */ new Map();
     const inDegree = /* @__PURE__ */ new Map();
     const resultMap = /* @__PURE__ */ new Map();
-    for (const a of assignments) {
+    for (const a of sanitizedAssignments) {
       if (!adj.has(a.subtaskId)) adj.set(a.subtaskId, /* @__PURE__ */ new Set());
       inDegree.set(a.subtaskId, 0);
     }
-    for (const a of assignments) {
-      const deps = a.dependsOn ?? [];
-      for (const dep of deps) {
+    for (const a of sanitizedAssignments) {
+      for (const dep of a.dependsOn ?? []) {
         adj.get(dep).add(a.subtaskId);
         inDegree.set(a.subtaskId, (inDegree.get(a.subtaskId) ?? 0) + 1);
       }
     }
-    const sanitizedAssignments = this.breakCycles(assignments, adj, inDegree);
     let remaining = new Set(sanitizedAssignments.map((a) => a.subtaskId));
     let wave = 0;
     let respawnBudget = 1;
@@ -8801,49 +9216,6 @@ HIERARCHY CONTEXT: ${this.hierarchyContext}` : ""),
     }
     return [...resultMap.values()];
   }
-  /**
-   * Detects cyclic dependencies using Kahn's algorithm and breaks them
-   * by removing back-edges. Returns a sanitized copy of assignments.
-   *
-   * A cycle like t1→t2→t3→t1 is broken at the last edge (t3→t1),
-   * meaning t3 will start without waiting for t1, preventing deadlock.
-   */
-  breakCycles(assignments, adj, inDegree) {
-    const degree = new Map(inDegree);
-    const queue = [];
-    const visited = /* @__PURE__ */ new Set();
-    for (const [id, d] of degree) {
-      if (d === 0) queue.push(id);
-    }
-    while (queue.length > 0) {
-      const id = queue.shift();
-      visited.add(id);
-      for (const dep of adj.get(id) ?? []) {
-        const newDeg = (degree.get(dep) ?? 1) - 1;
-        degree.set(dep, newDeg);
-        if (newDeg === 0) queue.push(dep);
-      }
-    }
-    const cycleNodes = [...inDegree.keys()].filter((id) => !visited.has(id));
-    if (cycleNodes.length === 0) return assignments;
-    this.log(
-      `\u26A0 Circular dependency detected among subtasks: [${cycleNodes.join(", ")}]. Breaking cycles \u2014 affected tasks will run without their cyclic dependencies.`
-    );
-    return assignments.map((a) => {
-      if (!cycleNodes.includes(a.subtaskId)) return a;
-      const safeDeps = (a.dependsOn ?? []).filter((d) => !cycleNodes.includes(d));
-      if (safeDeps.length !== (a.dependsOn ?? []).length) {
-        this.log(
-          `  \u2192 Breaking cycle: removed ${(a.dependsOn ?? []).filter((d) => cycleNodes.includes(d)).join(", ")} from "${a.subtaskTitle}" dependsOn`
-        );
-        for (const removed of (a.dependsOn ?? []).filter((d) => cycleNodes.includes(d))) {
-          inDegree.set(a.subtaskId, Math.max(0, (inDegree.get(a.subtaskId) ?? 1) - 1));
-          adj.get(removed)?.delete(a.subtaskId);
-        }
-      }
-      return { ...a, dependsOn: safeDeps };
-    });
-  }
   async retryT3(assignment, taskId) {
     this.log(`Retrying T3 for subtask: ${assignment.subtaskTitle}`);
     const worker = new T3Worker(this.router, this.toolRegistry, this.id);
@@ -8979,6 +9351,57 @@ HIERARCHY CONTEXT: ${this.hierarchyContext}` : ""),
   }
 };
 
+// src/core/orchestration/scheduler.ts
+var DependencyScheduler = class {
+  constructor(graph, hooks, options = {}) {
+    this.graph = graph;
+    this.hooks = hooks;
+    this.options = options;
+  }
+  graph;
+  hooks;
+  options;
+  async run() {
+    const nodes = [...this.graph.nodes].sort((a, b) => a.ordinal - b.ordinal);
+    const inDegree = new Map(nodes.map((node) => [node.id, node.dependsOn.length]));
+    const dependents = /* @__PURE__ */ new Map();
+    for (const node of nodes) dependents.set(node.id, []);
+    for (const node of nodes) {
+      for (const dependencyId of node.dependsOn) {
+        dependents.get(dependencyId)?.push(node.id);
+      }
+    }
+    const completed = /* @__PURE__ */ new Set();
+    const results = /* @__PURE__ */ new Map();
+    const waves = [];
+    let wave = 0;
+    while (completed.size < nodes.length) {
+      const ready = nodes.filter((node) => !completed.has(node.id) && (inDegree.get(node.id) ?? 0) === 0);
+      if (ready.length === 0) {
+        throw new Error("Dependency scheduler received a cyclic or incomplete task graph");
+      }
+      waves.push(ready.map((node) => node.id));
+      await this.hooks.onWaveStart?.(ready, wave);
+      const runOne = async (node) => {
+        const result = await this.hooks.execute(node);
+        results.set(node.id, result);
+        completed.add(node.id);
+        for (const dependentId of dependents.get(node.id) ?? []) {
+          inDegree.set(dependentId, Math.max(0, (inDegree.get(dependentId) ?? 1) - 1));
+        }
+        await this.hooks.onNodeComplete?.(node, result);
+      };
+      if ((this.options.mode ?? "parallel") === "sequential") {
+        for (const node of ready) await runOne(node);
+      } else {
+        await Promise.all(ready.map(runOne));
+      }
+      wave++;
+    }
+    return { results, waves };
+  }
+};
+
 // src/utils/json-extract.ts
 function extractFirstJsonObject(input) {
   if (!input) return null;
@@ -9050,7 +9473,7 @@ function buildT1SystemPrompt(has) {
 Your responsibilities:
 1. Analyze task complexity: Simple | Moderate | Complex | Highly Complex
 2. Decompose the task into logical sections (one per T2 Manager)
-3. For each section, define 2-5 subtasks for T3 Workers
+3. For each section, define 1-4 subtasks for T3 Workers \u2014 the fewest that fully cover it
 4. Return a structured plan as JSON
 
 CRITICAL PATH RULE: If the user specifies a target directory (e.g. "inside python_exclusive",
@@ -9465,7 +9888,11 @@ SPEC RULES \u2014 each subtask is a self-contained spec slice (workers execute f
       }
     }
     const [min, max] = COMPLEXITY_T2_COUNT[plan.complexity] ?? [1, 8];
-    if (plan.sections.length < min) ;
+    if (plan.sections.length < min || plan.sections.length > max) {
+      this.log(
+        `\u26A0 Plan has ${plan.sections.length} section(s) but complexity "${plan.complexity}" expects ${min}-${max}. Keeping the plan as written \u2014 a right-sized plan is better than one padded to hit a floor.`
+      );
+    }
   }
   async dispatchT2Managers(sections) {
     for (const section of sections) {
@@ -9577,114 +10004,91 @@ SPEC RULES \u2014 each subtask is a self-contained spec slice (workers execute f
     return t2Results;
   }
   /**
-   * Runs T2 managers respecting dependsOn declarations using Kahn's algorithm.
+   * Runs T2 managers respecting dependsOn declarations.
+   *
+   * Graph construction, validation and cycle repair now live in
+   * compileSectionGraph (orchestration/adapters.ts), and wave execution in
+   * DependencyScheduler — the same pair T2 uses for its subtasks, so a plan is
+   * ordered by one implementation rather than two that drifted.
+   *
+   * The hand-rolled Kahn pass this replaces treated every node it could not
+   * reach as part of a cycle. That set also contains everything DOWNSTREAM of a
+   * cycle, whose in-degree can never fall to zero while its dependency is stuck,
+   * so breaking a cycle here also cut the dependencies of innocent later
+   * sections and started them immediately — before the sections they consume.
+   * compileTaskGraph uses strongly connected components, so only real cycle
+   * members are touched.
    */
   async runT2sWithDependencies(sections, managers, taskId) {
-    const adj = /* @__PURE__ */ new Map();
-    const inDegree = /* @__PURE__ */ new Map();
-    const resultMap = /* @__PURE__ */ new Map();
-    const allKeys = new Set(sections.map((s) => s.sectionId));
-    for (const s of sections) {
-      if (!adj.has(s.sectionId)) adj.set(s.sectionId, /* @__PURE__ */ new Set());
-      inDegree.set(s.sectionId, 0);
-      s.dependsOn = (s.dependsOn ?? []).filter((d) => allKeys.has(d));
-    }
-    for (const s of sections) {
-      for (const dep of s.dependsOn ?? []) {
-        adj.get(dep).add(s.sectionId);
-        inDegree.set(s.sectionId, (inDegree.get(s.sectionId) ?? 0) + 1);
-      }
+    const compiled = compileSectionGraph(sections);
+    for (const issue of compiled.issues) {
+      this.log(`\u26A0 Section graph: ${issue.message}`);
     }
-    const queue = [];
-    const degree = new Map(inDegree);
-    for (const [id, deg] of degree.entries()) if (deg === 0) queue.push(id);
-    const visited = /* @__PURE__ */ new Set();
-    while (queue.length > 0) {
-      const u = queue.shift();
-      visited.add(u);
-      for (const v of adj.get(u) ?? /* @__PURE__ */ new Set()) {
-        const newDeg = (degree.get(v) ?? 1) - 1;
-        degree.set(v, newDeg);
-        if (newDeg === 0) queue.push(v);
-      }
-    }
-    const cycleNodes = [...inDegree.keys()].filter((id) => !visited.has(id));
-    if (cycleNodes.length > 0) {
-      this.log(`\u26A0 Circular dependency detected among sections: [${cycleNodes.join(", ")}]. Breaking cycles.`);
-      for (const s of sections) {
-        if (cycleNodes.includes(s.sectionId)) {
-          const safeDeps = (s.dependsOn ?? []).filter((d) => !cycleNodes.includes(d));
-          for (const removed of (s.dependsOn ?? []).filter((d) => cycleNodes.includes(d))) {
-            inDegree.set(s.sectionId, Math.max(0, (inDegree.get(s.sectionId) ?? 1) - 1));
-            adj.get(removed)?.delete(s.sectionId);
-          }
-          s.dependsOn = safeDeps;
-        }
-      }
+    const byId = new Map(compiled.graph.nodes.map((node) => [node.id, node]));
+    for (const section of sections) {
+      const node = byId.get(section.sectionId);
+      if (node) section.dependsOn = [...node.dependsOn];
     }
-    const totalSections = sections.length;
+    const resultMap = /* @__PURE__ */ new Map();
+    const totalSections = compiled.graph.nodes.length;
     let completedSections = 0;
-    const executeWave = async () => {
-      const readyIds = [];
-      for (const [id, deg] of inDegree.entries()) {
-        if (deg === 0 && !resultMap.has(id)) {
-          readyIds.push(id);
-        }
-      }
-      if (readyIds.length === 0) return;
-      const runOne = async (id) => {
-        resultMap.set(id, null);
-        const index = sections.findIndex((s) => s.sectionId === id);
-        const section = sections[index];
-        const manager = managers[index];
-        const progressPct = 10 + Math.floor(completedSections / totalSections * 85);
-        this.sendStatusUpdate({
-          progressPct,
-          currentAction: `T2 working on: ${section.sectionTitle}`,
-          status: "IN_PROGRESS"
-        });
-        this.throwIfCancelled();
-        let result;
-        try {
-          result = await manager.execute(section, taskId, this.signal);
-          manager.shareCompletedOutput(section.sectionId, result.sectionSummary);
-          if (result.status === "ESCALATED") {
-            this.escalations.push({
-              raisedBy: `T2_${section.sectionId}`,
+    const scheduler = new DependencyScheduler(
+      compiled.graph,
+      {
+        execute: async (node) => {
+          const section = node.payload;
+          const manager = managers[node.ordinal];
+          const progressPct = 10 + Math.floor(completedSections / totalSections * 85);
+          this.sendStatusUpdate({
+            progressPct,
+            currentAction: `T2 working on: ${section.sectionTitle}`,
+            status: "IN_PROGRESS"
+          });
+          this.throwIfCancelled();
+          try {
+            const result = await manager.execute(section, taskId, this.signal);
+            manager.shareCompletedOutput(section.sectionId, result.sectionSummary);
+            if (result.status === "ESCALATED") {
+              this.escalations.push({
+                raisedBy: `T2_${section.sectionId}`,
+                sectionId: section.sectionId,
+                attempted: result.issues,
+                blocker: result.issues.join("; "),
+                needs: "Human review required"
+              });
+            }
+            return result;
+          } catch (err) {
+            return {
               sectionId: section.sectionId,
-              attempted: result.issues,
-              blocker: result.issues.join("; "),
-              needs: "Human review required"
-            });
+              sectionTitle: section.sectionTitle,
+              status: "FAILED",
+              t3Results: [],
+              sectionSummary: "",
+              issues: [err instanceof Error ? err.message : String(err)]
+            };
           }
-        } catch (err) {
-          result = {
-            sectionId: section.sectionId,
-            sectionTitle: section.sectionTitle,
-            status: "FAILED",
-            t3Results: [],
-            sectionSummary: "",
-            issues: [err instanceof Error ? err.message : String(err)]
-          };
-        }
-        resultMap.set(id, result);
-        completedSections++;
-        for (const dependentId of adj.get(id) ?? /* @__PURE__ */ new Set()) {
-          inDegree.set(dependentId, Math.max(0, (inDegree.get(dependentId) ?? 1) - 1));
-        }
-      };
-      if (this.router.getT3ExecutionMode?.() === "sequential") {
-        for (const id of readyIds) {
-          await runOne(id);
+        },
+        onNodeComplete: (node, result) => {
+          resultMap.set(node.id, result);
+          completedSections++;
+          this.emit("section:complete", {
+            id: node.id,
+            title: result.sectionTitle,
+            status: result.status,
+            output: result.sectionSummary
+          });
         }
-      } else {
-        await Promise.all(readyIds.map(runOne));
-      }
-      if (Array.from(inDegree.values()).some((deg) => deg === 0) && resultMap.size < totalSections) {
-        await executeWave();
+      },
+      {
+        // Cross-section concurrency respects the same t3Execution mode as the
+        // intra-section T3 wave (t2-manager.ts) — 'sequential' otherwise only
+        // serialized T3 workers within a single section while every section's
+        // T2Manager (and its T3 workers) still ran in parallel here.
+        mode: this.router.getT3ExecutionMode?.() === "sequential" ? "sequential" : "parallel"
       }
-    };
-    await executeWave();
+    );
+    await scheduler.run();
     return sections.map((s) => resultMap.get(s.sectionId)).filter(Boolean);
   }
   async compileFinalOutput(originalPrompt, plan, t2Results) {
@@ -10304,6 +10708,705 @@ function buildMediaTools(deps, readFile) {
   if (modalities.has("transcription") && readFile) tools.push(new TranscribeAudioTool(deps, readFile));
   return tools;
 }
+var WorkspaceSandboxError = class extends Error {
+  constructor(attempted, workspaceRoot) {
+    super(`Refusing access to "${attempted}" \u2014 outside workspace root "${workspaceRoot}".`);
+    this.name = "WorkspaceSandboxError";
+  }
+};
+function resolveInWorkspace(workspaceRoot, input) {
+  if (typeof input !== "string" || input.length === 0) {
+    throw new WorkspaceSandboxError(String(input), workspaceRoot);
+  }
+  const root = path26.resolve(workspaceRoot);
+  const abs = path26.isAbsolute(input) ? path26.resolve(input) : path26.resolve(root, input);
+  const rel = path26.relative(root, abs);
+  if (rel === "" || rel === ".") ; else if (rel.startsWith("..") || path26.isAbsolute(rel)) {
+    throw new WorkspaceSandboxError(input, root);
+  }
+  try {
+    const real = fs25.realpathSync(abs);
+    const realRel = path26.relative(root, real);
+    if (realRel !== "" && realRel !== "." && (realRel.startsWith("..") || path26.isAbsolute(realRel))) {
+      throw new WorkspaceSandboxError(input, root);
+    }
+  } catch (e) {
+    if (e instanceof WorkspaceSandboxError) throw e;
+  }
+  return abs;
+}
+
+// src/core/documents/blocks.ts
+function fileExt(name) {
+  const base = name.split(/[\\/]/).pop() ?? name;
+  const dot = base.lastIndexOf(".");
+  return dot > 0 ? base.slice(dot + 1).toLowerCase() : "";
+}
+function parseDelimited(text, name = "") {
+  const delim = fileExt(name) === "tsv" || text.indexOf("	") !== -1 && text.indexOf(",") === -1 ? "	" : ",";
+  const rows = [];
+  let row = [];
+  let cell = "";
+  let quoted = false;
+  for (let i = 0; i < text.length; i++) {
+    const ch = text[i];
+    if (quoted) {
+      if (ch === '"') {
+        if (text[i + 1] === '"') {
+          cell += '"';
+          i++;
+        } else quoted = false;
+      } else cell += ch;
+    } else if (ch === '"') {
+      quoted = true;
+    } else if (ch === delim) {
+      row.push(cell);
+      cell = "";
+    } else if (ch === "\n") {
+      row.push(cell);
+      rows.push(row);
+      row = [];
+      cell = "";
+    } else if (ch === "\r") ; else {
+      cell += ch;
+    }
+    if (rows.length > 5e3) break;
+  }
+  if (cell !== "" || row.length) {
+    row.push(cell);
+    rows.push(row);
+  }
+  return rows.filter((r) => r.length > 1 || (r[0] ?? "") !== "");
+}
+var CHART_ALIASES = {
+  bar: "bar",
+  column: "bar",
+  bars: "bar",
+  barchart: "bar",
+  horizontalbar: "bar",
+  line: "line",
+  lines: "line",
+  linechart: "line",
+  pie: "pie",
+  piechart: "pie",
+  doughnut: "doughnut",
+  donut: "doughnut",
+  area: "area",
+  areachart: "area",
+  scatter: "scatter",
+  xy: "scatter"
+};
+function chartKind(raw) {
+  return CHART_ALIASES[raw.trim().toLowerCase().replace(/[\s_-]/g, "")] ?? null;
+}
+function toNumber(cell) {
+  const cleaned = cell.replace(/[$£€¥,\s%]/g, "").replace(/^\((.*)\)$/, "-$1");
+  const n = Number.parseFloat(cleaned);
+  return Number.isFinite(n) ? n : 0;
+}
+function parseChartSpec(kind, body) {
+  const lines = body.replace(/\r\n/g, "\n").split("\n");
+  let title;
+  while (lines.length && !lines[0].trim()) lines.shift();
+  const titleMatch = lines[0]?.match(/^\s*title\s*:\s*(.+)$/i);
+  if (titleMatch) {
+    title = titleMatch[1].trim();
+    lines.shift();
+  }
+  const rows = parseDelimited(lines.join("\n").trim());
+  if (rows.length < 2) return null;
+  const header = rows[0].map((c) => c.trim());
+  if (header.length < 2) return null;
+  const dataRows = rows.slice(1).filter((r) => r.some((c) => c.trim() !== ""));
+  if (!dataRows.length) return null;
+  const categories = dataRows.map((r, i) => (r[0] ?? "").trim() || `Item ${i + 1}`);
+  const series = header.slice(1).map((name, col) => ({
+    name: name || `Series ${col + 1}`,
+    values: dataRows.map((r) => toNumber((r[col + 1] ?? "").trim()))
+  }));
+  if (!series.length) return null;
+  return {
+    kind,
+    ...title ? { title } : {},
+    categoryName: header[0] || "Category",
+    categories,
+    series
+  };
+}
+function chartToTableRows(spec) {
+  return [
+    [spec.categoryName, ...spec.series.map((s) => s.name)],
+    ...spec.categories.map((cat, i) => [cat, ...spec.series.map((s) => String(s.values[i] ?? 0))])
+  ];
+}
+function parseBlocks(md) {
+  const out = [];
+  const lines = md.replace(/\r\n/g, "\n").split("\n");
+  let i = 0;
+  let ordinal = 0;
+  const reset = () => {
+    ordinal = 0;
+  };
+  while (i < lines.length) {
+    const line = lines[i] ?? "";
+    const fence = line.match(/^```+\s*(.*)$/);
+    if (fence) {
+      const info = (fence[1] ?? "").trim();
+      i++;
+      const code = [];
+      while (i < lines.length && !/^```/.test(lines[i] ?? "")) {
+        code.push(lines[i] ?? "");
+        i++;
+      }
+      i++;
+      const chartInfo = info.match(/^chart\s*:\s*(.+)$/i);
+      const kind = chartInfo ? chartKind(chartInfo[1]) : null;
+      const spec = kind ? parseChartSpec(kind, code.join("\n")) : null;
+      out.push(spec ? { t: "chart", spec } : { t: "code", lines: code });
+      reset();
+      continue;
+    }
+    if (!line.trim()) {
+      i++;
+      reset();
+      continue;
+    }
+    const h = line.match(/^(#{1,6})\s+(.*)$/);
+    if (h) {
+      out.push({ t: "heading", level: h[1].length, text: h[2] });
+      i++;
+      reset();
+      continue;
+    }
+    if (/^\s*([-*_])\s*(\1\s*){2,}$/.test(line)) {
+      out.push({ t: "hr" });
+      i++;
+      reset();
+      continue;
+    }
+    const li = line.match(/^(\s*)([-*+]|\d+[.)])\s+(.*)$/);
+    if (li) {
+      const ordered = /\d/.test(li[2]);
+      ordinal = ordered ? ordinal + 1 : 0;
+      out.push({ t: "bullet", ordered, index: ordered ? ordinal : 0, text: li[3] });
+      i++;
+      continue;
+    }
+    if (/^>\s?/.test(line)) {
+      out.push({ t: "quote", text: line.replace(/^>\s?/, "") });
+      i++;
+      reset();
+      continue;
+    }
+    if (/^\|.*\|/.test(line)) {
+      const rows = [];
+      while (i < lines.length && /^\|.*\|/.test(lines[i] ?? "")) {
+        const r = lines[i];
+        if (!/^\|[\s:|-]+\|?\s*$/.test(r)) rows.push(r.replace(/^\||\|\s*$/g, "").split("|").map((c) => c.trim()));
+        i++;
+      }
+      out.push({ t: "table", rows });
+      reset();
+      continue;
+    }
+    out.push({ t: "para", text: line });
+    i++;
+    reset();
+  }
+  return out;
+}
+var IMAGE_LINE = /^!\[([^\]]*)\]\(([^)]+)\)$/;
+function matchImageLine(s) {
+  const m = s.trim().match(IMAGE_LINE);
+  return m ? { alt: m[1].trim(), url: m[2].trim() } : null;
+}
+function sniffImage(b) {
+  const dv = new DataView(b.buffer, b.byteOffset, b.byteLength);
+  if (b.length > 24 && b[0] === 137 && b[1] === 80 && b[2] === 78 && b[3] === 71) {
+    return { type: "png", mime: "image/png", width: dv.getUint32(16), height: dv.getUint32(20) };
+  }
+  if (b.length > 10 && b[0] === 71 && b[1] === 73 && b[2] === 70) {
+    return { type: "gif", mime: "image/gif", width: dv.getUint16(6, true), height: dv.getUint16(8, true) };
+  }
+  if (b.length > 26 && b[0] === 66 && b[1] === 77) {
+    return { type: "bmp", mime: "image/bmp", width: Math.abs(dv.getInt32(18, true)), height: Math.abs(dv.getInt32(22, true)) };
+  }
+  if (b.length > 4 && b[0] === 255 && b[1] === 216) {
+    let i = 2;
+    while (i + 9 < b.length) {
+      if (b[i] !== 255) {
+        i++;
+        continue;
+      }
+      const marker = b[i + 1];
+      if (marker >= 192 && marker <= 207 && marker !== 196 && marker !== 200 && marker !== 204) {
+        return { type: "jpg", mime: "image/jpeg", height: dv.getUint16(i + 5), width: dv.getUint16(i + 7) };
+      }
+      i += 2 + dv.getUint16(i + 2);
+    }
+  }
+  return null;
+}
+function bytesToBase64(bytes) {
+  const g = globalThis;
+  if (g.Buffer) return g.Buffer.from(bytes).toString("base64");
+  const CHUNK = 32768;
+  let binary = "";
+  for (let i = 0; i < bytes.length; i += CHUNK) {
+    binary += String.fromCharCode(...bytes.subarray(i, i + CHUNK));
+  }
+  return g.btoa(binary);
+}
+function stripInline(s) {
+  return s.replace(/\*\*(.+?)\*\*/g, "$1").replace(/(^|[^*])\*(?!\s)(.+?)\*/g, "$1$2").replace(/`([^`]+)`/g, "$1").replace(/\[(.+?)\]\((.+?)\)/g, "$1 ($2)");
+}
+function inlineRuns(text) {
+  const acc = [];
+  const re = /(\*\*[^*]+\*\*|`[^`]+`|\[[^\]]{1,500}\]\([^)]{1,2000}\)|\*[^*\s][^*]*\*)/g;
+  let last = 0;
+  let m;
+  while ((m = re.exec(text)) !== null) {
+    if (m.index > last) acc.push({ text: text.slice(last, m.index) });
+    const tok = m[0];
+    if (tok.startsWith("**")) acc.push({ text: tok.slice(2, -2), bold: true });
+    else if (tok.startsWith("`")) acc.push({ text: tok.slice(1, -1), code: true });
+    else if (tok.startsWith("[")) {
+      const l = tok.match(/\[([^\]]{1,500})\]\(([^)]{1,2000})\)/);
+      acc.push({ text: l ? `${l[1]} (${l[2]})` : tok });
+    } else acc.push({ text: tok.slice(1, -1), italic: true });
+    last = re.lastIndex;
+  }
+  if (last < text.length) acc.push({ text: text.slice(last) });
+  return acc.length ? acc : [{ text }];
+}
+function splitSlides(md) {
+  const norm = md.replace(/\r\n/g, "\n").trim();
+  let chunks = norm.split(/\n\s*-{3,}\s*\n/);
+  if (chunks.length === 1) {
+    const lines = norm.split("\n");
+    const sections = [];
+    let cur = [];
+    for (const ln of lines) {
+      if (/^#{1,2}\s+/.test(ln) && cur.some((l) => l.trim())) {
+        sections.push(cur.join("\n"));
+        cur = [];
+      }
+      cur.push(ln);
+    }
+    if (cur.length) sections.push(cur.join("\n"));
+    if (sections.length > 1) chunks = sections;
+  }
+  return chunks.map(parseSlide).filter((s) => s.title || s.body.length || s.images.length || s.charts.length);
+}
+function parseSlide(chunk) {
+  let title = "";
+  const body = [];
+  const images = [];
+  const charts = [];
+  const lines = chunk.split("\n");
+  for (let i = 0; i < lines.length; i++) {
+    const raw = lines[i] ?? "";
+    const fence = raw.match(/^[ \t]*```+[ \t]*chart[ \t]*:(.*)/i);
+    if (fence) {
+      const kind = chartKind(fence[1]);
+      const bodyLines = [];
+      i++;
+      while (i < lines.length && !/^\s*```/.test(lines[i] ?? "")) {
+        bodyLines.push(lines[i] ?? "");
+        i++;
+      }
+      const spec = kind ? parseChartSpec(kind, bodyLines.join("\n")) : null;
+      if (spec) charts.push(spec);
+      else for (const bl of bodyLines) if (bl.trim()) body.push(stripInline(bl.trim()));
+      continue;
+    }
+    const line = raw.trim();
+    if (!line) continue;
+    const h = line.match(/^#{1,6}[ \t]+(.*)/);
+    if (h) {
+      if (!title) title = stripInline(h[1]);
+      else body.push(stripInline(h[1]));
+      continue;
+    }
+    const img = matchImageLine(line);
+    if (img) {
+      images.push(img);
+      continue;
+    }
+    const li = line.match(/^([-*+]|\d+[.)])[ \t]+(.*)/);
+    if (li) {
+      const bulletImg = matchImageLine(li[2]);
+      if (bulletImg) {
+        images.push(bulletImg);
+        continue;
+      }
+      body.push(stripInline(li[2]));
+      continue;
+    }
+    if (/^>\s?/.test(line)) {
+      body.push(stripInline(line.replace(/^>\s?/, "")));
+      continue;
+    }
+    body.push(stripInline(line));
+  }
+  return { title, body, images, charts };
+}
+function extractCharts(source) {
+  const lines = source.replace(/\r\n/g, "\n").split("\n");
+  const charts = [];
+  const rest = [];
+  for (let i = 0; i < lines.length; i++) {
+    const fence = lines[i].match(/^[ \t]*```+[ \t]*chart[ \t]*:(.*)/i);
+    if (!fence) {
+      rest.push(lines[i]);
+      continue;
+    }
+    const kind = chartKind(fence[1]);
+    const body = [];
+    i++;
+    while (i < lines.length && !/^\s*```/.test(lines[i] ?? "")) {
+      body.push(lines[i] ?? "");
+      i++;
+    }
+    const spec = kind ? parseChartSpec(kind, body.join("\n")) : null;
+    if (spec) charts.push(spec);
+    else rest.push(...body);
+  }
+  return { charts, rest: rest.join("\n") };
+}
+
+// src/core/documents/render.ts
+var DOCUMENT_MIME = {
+  docx: "application/vnd.openxmlformats-officedocument.wordprocessingml.document",
+  pptx: "application/vnd.openxmlformats-officedocument.presentationml.presentation",
+  xlsx: "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet"
+};
+function isDocumentFormat(ext) {
+  return ext === "docx" || ext === "pptx" || ext === "xlsx";
+}
+async function loadImage(ref, load) {
+  if (!load) return null;
+  try {
+    const bytes = await load(ref.url);
+    if (!bytes || !bytes.length) return null;
+    const info = sniffImage(bytes);
+    if (!info || info.width <= 0 || info.height <= 0) return null;
+    return { ...info, bytes, alt: ref.alt };
+  } catch {
+    return null;
+  }
+}
+async function renderXlsx(source, opts = {}) {
+  const XLSX = await import('xlsx');
+  const { charts, rest } = extractCharts(source);
+  const name = opts.name ?? "";
+  const rows = parseDelimited(rest, name.toLowerCase().endsWith(".tsv") ? "x.tsv" : "x.csv");
+  const wb = XLSX.utils.book_new();
+  XLSX.utils.book_append_sheet(wb, XLSX.utils.aoa_to_sheet(rows.length ? rows : [[""]]), "Sheet1");
+  const used = /* @__PURE__ */ new Set(["Sheet1"]);
+  charts.forEach((spec, i) => {
+    const base = (spec.title || `Chart ${i + 1}`).replace(/[:\\/?*[\]]/g, " ").trim().slice(0, 28) || `Chart ${i + 1}`;
+    let sheetName = base;
+    let n = 2;
+    while (used.has(sheetName)) sheetName = `${base} ${n++}`.slice(0, 31);
+    used.add(sheetName);
+    const aoa = [
+      [spec.categoryName, ...spec.series.map((s) => s.name)],
+      ...spec.categories.map((cat, r) => [cat, ...spec.series.map((s) => s.values[r] ?? 0)])
+    ];
+    XLSX.utils.book_append_sheet(wb, XLSX.utils.aoa_to_sheet(aoa), sheetName);
+  });
+  return new Uint8Array(XLSX.write(wb, { type: "array", bookType: "xlsx" }));
+}
+var DOCX_MAX_W = 600;
+var DOCX_MAX_H = 864;
+async function renderDocx(md, opts = {}) {
+  const d = await import('docx');
+  const {
+    Document,
+    Packer,
+    Paragraph,
+    TextRun,
+    ImageRun,
+    HeadingLevel,
+    Table,
+    TableRow,
+    TableCell,
+    WidthType,
+    BorderStyle,
+    AlignmentType
+  } = d;
+  const HEADINGS = [
+    HeadingLevel.HEADING_1,
+    HeadingLevel.HEADING_2,
+    HeadingLevel.HEADING_3,
+    HeadingLevel.HEADING_4,
+    HeadingLevel.HEADING_5,
+    HeadingLevel.HEADING_6
+  ];
+  const runs = (text) => inlineRuns(text).map((r) => new TextRun({
+    text: r.text,
+    ...r.bold ? { bold: true } : {},
+    ...r.italic ? { italics: true } : {},
+    ...r.code ? { font: "Courier New" } : {}
+  }));
+  const tableOf = (rows) => new Table({
+    width: { size: 100, type: WidthType.PERCENTAGE },
+    rows: rows.map((r) => new TableRow({
+      children: r.map((c) => new TableCell({ children: [new Paragraph({ children: runs(c) })] }))
+    }))
+  });
+  const imageParagraph = (img) => {
+    const scale = Math.min(1, DOCX_MAX_W / img.width, DOCX_MAX_H / img.height);
+    return new Paragraph({
+      children: [new ImageRun({
+        type: img.type,
+        data: img.bytes,
+        transformation: { width: Math.round(img.width * scale), height: Math.round(img.height * scale) },
+        ...img.alt ? { altText: { name: img.alt, description: img.alt, title: img.alt } } : {}
+      })]
+    });
+  };
+  const asImage = async (text) => {
+    const ref = matchImageLine(text);
+    return ref ? await loadImage(ref, opts.loadImageBytes) : null;
+  };
+  const children = [];
+  for (const b of parseBlocks(md)) {
+    switch (b.t) {
+      case "heading":
+        children.push(new Paragraph({ heading: HEADINGS[Math.min(b.level, 6) - 1], children: runs(b.text) }));
+        break;
+      case "para": {
+        const img = await asImage(b.text);
+        children.push(img ? imageParagraph(img) : new Paragraph({ children: runs(b.text) }));
+        break;
+      }
+      case "bullet": {
+        const img = await asImage(b.text);
+        children.push(img ? imageParagraph(img) : new Paragraph({
+          children: runs(b.text),
+          ...b.ordered ? { numbering: { reference: "ol", level: 0 } } : { bullet: { level: 0 } }
+        }));
+        break;
+      }
+      case "code":
+        for (const cl of b.lines) {
+          children.push(new Paragraph({ children: [new TextRun({ text: cl || " ", font: "Courier New", size: 18 })] }));
+        }
+        break;
+      case "quote":
+        children.push(new Paragraph({ indent: { left: 360 }, children: [new TextRun({ text: stripInline(b.text), italics: true })] }));
+        break;
+      case "table":
+        children.push(tableOf(b.rows));
+        break;
+      case "chart":
+        if (b.spec.title) {
+          children.push(new Paragraph({ children: [new TextRun({ text: b.spec.title, bold: true })] }));
+        }
+        children.push(tableOf(chartToTableRows(b.spec)));
+        break;
+      case "hr":
+        children.push(new Paragraph({
+          children: [],
+          border: { bottom: { color: "CCCCCC", space: 1, style: BorderStyle.SINGLE, size: 6 } }
+        }));
+        break;
+    }
+  }
+  const doc = new Document({
+    numbering: {
+      config: [{ reference: "ol", levels: [{ level: 0, format: "decimal", text: "%1.", alignment: AlignmentType.START }] }]
+    },
+    sections: [{ children: children.length ? children : [new Paragraph({ children: [new TextRun("")] })] }]
+  });
+  return new Uint8Array(await Packer.toArrayBuffer(doc));
+}
+function pptxConstructor(mod) {
+  let c = mod;
+  for (let i = 0; i < 3 && c && typeof c !== "function"; i++) c = c.default;
+  if (typeof c !== "function") throw new Error("pptxgenjs did not export a constructor.");
+  return c;
+}
+var SLIDE_H = 7.5;
+var CONTENT_X = 0.6;
+var CONTENT_W = 12.1;
+var CONTENT_BOTTOM = 0.4;
+async function renderPptx(md, opts = {}) {
+  const PptxGen = pptxConstructor(await import('pptxgenjs'));
+  const pptx = new PptxGen();
+  pptx.layout = "LAYOUT_WIDE";
+  const CHART_TYPES = {
+    bar: pptx.ChartType["bar"],
+    line: pptx.ChartType["line"],
+    pie: pptx.ChartType["pie"],
+    doughnut: pptx.ChartType["doughnut"],
+    area: pptx.ChartType["area"],
+    scatter: pptx.ChartType["scatter"]
+  };
+  const slides = splitSlides(md);
+  const blank = { title: "", body: [""], images: [], charts: [] };
+  for (const s of slides.length ? slides : [blank]) {
+    const slide = pptx.addSlide();
+    if (s.title) slide.addText(s.title, { x: 0.5, y: 0.35, w: 12.3, h: 0.9, fontSize: 28, bold: true, color: "1F2937" });
+    const top = s.title ? 1.5 : 0.5;
+    const pics = (await Promise.all(s.images.map((r) => loadImage(r, opts.loadImageBytes)))).filter((p) => p !== null);
+    const visuals = [
+      ...s.charts.map((spec) => ({ kind: "chart", spec })),
+      ...pics.map((img) => ({ kind: "image", img }))
+    ];
+    const bodyH = visuals.length ? 2.2 : 5.4;
+    if (s.body.length) {
+      slide.addText(
+        s.body.map((t) => ({ text: t, options: { bullet: true, breakLine: true } })),
+        { x: CONTENT_X, y: top, w: CONTENT_W, h: bodyH, fontSize: 16, color: "374151", valign: "top" }
+      );
+    }
+    if (visuals.length) {
+      const y = top + (s.body.length ? bodyH + 0.2 : 0);
+      const h = Math.max(1, SLIDE_H - CONTENT_BOTTOM - y);
+      const gap = 0.3;
+      const w = (CONTENT_W - gap * (visuals.length - 1)) / visuals.length;
+      visuals.forEach((v, i) => {
+        const x = CONTENT_X + i * (w + gap);
+        if (v.kind === "image") {
+          slide.addImage({
+            data: `data:${v.img.mime};base64,${bytesToBase64(v.img.bytes)}`,
+            x,
+            y,
+            w,
+            h,
+            // 'contain' keeps the aspect ratio inside the box — a stretched
+            // render looks worse than a smaller correct one.
+            sizing: { type: "contain", w, h },
+            ...v.img.alt ? { altText: v.img.alt } : {}
+          });
+        } else {
+          slide.addChart(CHART_TYPES[v.spec.kind], chartData(v.spec), {
+            x,
+            y,
+            w,
+            h,
+            showLegend: v.spec.series.length > 1 || v.spec.kind === "pie" || v.spec.kind === "doughnut",
+            legendPos: "b",
+            showTitle: !!v.spec.title,
+            ...v.spec.title ? { title: v.spec.title } : {},
+            showValue: v.spec.kind === "pie" || v.spec.kind === "doughnut"
+          });
+        }
+      });
+    }
+  }
+  return new Uint8Array(await pptx.write({ outputType: "arraybuffer" }));
+}
+function chartData(spec) {
+  const series = spec.kind === "pie" || spec.kind === "doughnut" ? spec.series.slice(0, 1) : spec.series;
+  return series.map((s) => ({ name: s.name, labels: spec.categories, values: s.values }));
+}
+async function renderDocument(format, source, opts = {}) {
+  if (format === "docx") return renderDocx(source, opts);
+  if (format === "pptx") return renderPptx(source, opts);
+  return renderXlsx(source, opts);
+}
+
+// src/tools/generate-document.ts
+var SOURCE_HINT = {
+  docx: "Markdown",
+  pptx: "Markdown slides (separate slides with a --- rule; each slide starts with a heading)",
+  xlsx: "CSV (one header row, then data rows)"
+};
+var GenerateDocumentTool = class extends BaseTool {
+  /**
+   * `readFile` is injected so the image loader is testable and so a host with a
+   * different workspace (not plain disk) can supply its own reader.
+   */
+  constructor(readFile = async (p) => new Uint8Array(await fs5.readFile(p))) {
+    super();
+    this.readFile = readFile;
+  }
+  readFile;
+  name = "generate_document";
+  description = "Create a REAL Microsoft Office file (.docx Word, .pptx PowerPoint, .xlsx Excel) in the workspace. You write the SOURCE and this tool renders the actual binary: Markdown for .docx, Markdown slides (separated by --- rules) for .pptx, CSV for .xlsx. ALWAYS use this instead of file_write for those three extensions \u2014 file_write stores your text verbatim, which Office reports as a corrupted file. Supports embedded images (reference a generated image as ![alt](path-the-image-tool-returned) on its own line) and real, data-accurate charts (a ```chart:bar / chart:line / chart:pie fenced block whose body is CSV). Use pdf_create for PDFs.";
+  inputSchema = {
+    type: "object",
+    properties: {
+      path: {
+        type: "string",
+        description: "Where to write the file, relative to the workspace root. The extension decides the format: .docx, .pptx or .xlsx."
+      },
+      content: {
+        type: "string",
+        description: 'The document source. Markdown for .docx; Markdown slides separated by --- rules for .pptx (each slide starts with a heading); CSV for .xlsx. A standalone ![alt](path) line embeds that image. A fenced ```chart:bar (or chart:line, chart:pie, chart:area, chart:doughnut, chart:scatter) block whose body is CSV \u2014 an optional "title: \u2026" line, then a header row of "<category>,<series1>,<series2>", then data rows \u2014 becomes a real chart.'
+      },
+      format: {
+        type: "string",
+        description: 'Optional override: "docx", "pptx" or "xlsx". Normally inferred from the path extension.'
+      }
+    },
+    required: ["path", "content"]
+  };
+  isDangerous() {
+    return true;
+  }
+  async execute(input, options) {
+    const filePath = String(input["path"] ?? "").trim();
+    if (!filePath) return 'Provide a "path" for the document, e.g. "report.docx".';
+    const content = typeof input["content"] === "string" ? input["content"] : "";
+    if (!content.trim()) return 'Provide "content" \u2014 the Markdown (docx/pptx) or CSV (xlsx) source for the document.';
+    const requested = String(input["format"] ?? "").trim().toLowerCase().replace(/^\./, "");
+    const ext = requested || fileExt(filePath);
+    if (!isDocumentFormat(ext)) {
+      return `generate_document renders .docx, .pptx and .xlsx. "${filePath}" is not one of those \u2014 use pdf_create for a PDF, or file_write for a text file.`;
+    }
+    const absPath = resolveInWorkspace(this.workspaceRoot, filePath);
+    const embedded = [];
+    const skipped = [];
+    const loadImageBytes = async (url) => {
+      if (/^(https?|ftp):\/\//i.test(url)) {
+        skipped.push(`${url} (remote URL \u2014 download it into the workspace first)`);
+        return null;
+      }
+      const local = url.replace(/^file:\/\//i, "").split("?")[0].split("#")[0];
+      try {
+        const bytes2 = await this.readFile(resolveInWorkspace(this.workspaceRoot, decodeURIComponent(local)));
+        embedded.push(local);
+        return bytes2;
+      } catch {
+        skipped.push(`${local} (not found in the workspace)`);
+        return null;
+      }
+    };
+    if (options.saveSnapshot) {
+      try {
+        const old = await fs5.readFile(absPath, "utf-8");
+        await options.saveSnapshot(absPath, old);
+      } catch {
+      }
+    }
+    const bytes = await renderDocument(ext, content, { name: filePath, loadImageBytes });
+    await fs5.mkdir(path26.dirname(absPath), { recursive: true });
+    await fs5.writeFile(absPath, bytes);
+    const charts = countCharts(content);
+    return [
+      `Wrote a real ${LABEL[ext]} file to ${filePath} (${bytes.length} bytes) from ${SOURCE_HINT[ext]}.`,
+      embedded.length ? `Embedded ${embedded.length} image(s): ${embedded.join(", ")}.` : "",
+      // Named, not counted: a dropped image is the failure the user actually
+      // notices, and the model can only fix it if it is told which reference died.
+      skipped.length ? `Could NOT embed ${skipped.length} image reference(s): ${skipped.join("; ")}.` : "",
+      charts && ext === "pptx" ? `Rendered ${charts} chart block(s) as real, editable PowerPoint charts.` : "",
+      charts && ext === "docx" ? `Rendered ${charts} chart block(s) as data tables \u2014 Word documents cannot hold a native chart object.` : "",
+      charts && ext === "xlsx" ? `Wrote ${charts} chart block(s) onto their own worksheets as real rows the user can chart in Excel.` : ""
+    ].filter(Boolean).join("\n");
+  }
+};
+var LABEL = { docx: "Word", pptx: "PowerPoint", xlsx: "Excel" };
+function countCharts(source) {
+  return (source.match(/^\s*```+\s*chart\s*:/gim) ?? []).length;
+}
+function buildDocumentTools(readFile) {
+  return readFile ? [new GenerateDocumentTool(readFile)] : [];
+}
 
 // src/core/run-breaker.ts
 var DEFAULT_FAILURE_THRESHOLD = 3;
@@ -10626,35 +11729,6 @@ ${[e.stdout, e.stderr].filter(Boolean).join("\n").trim()}`;
     }
   }
 };
-var WorkspaceSandboxError = class extends Error {
-  constructor(attempted, workspaceRoot) {
-    super(`Refusing access to "${attempted}" \u2014 outside workspace root "${workspaceRoot}".`);
-    this.name = "WorkspaceSandboxError";
-  }
-};
-function resolveInWorkspace(workspaceRoot, input) {
-  if (typeof input !== "string" || input.length === 0) {
-    throw new WorkspaceSandboxError(String(input), workspaceRoot);
-  }
-  const root = path24.resolve(workspaceRoot);
-  const abs = path24.isAbsolute(input) ? path24.resolve(input) : path24.resolve(root, input);
-  const rel = path24.relative(root, abs);
-  if (rel === "" || rel === ".") ; else if (rel.startsWith("..") || path24.isAbsolute(rel)) {
-    throw new WorkspaceSandboxError(input, root);
-  }
-  try {
-    const real = fs23.realpathSync(abs);
-    const realRel = path24.relative(root, real);
-    if (realRel !== "" && realRel !== "." && (realRel.startsWith("..") || path24.isAbsolute(realRel))) {
-      throw new WorkspaceSandboxError(input, root);
-    }
-  } catch (e) {
-    if (e instanceof WorkspaceSandboxError) throw e;
-  }
-  return abs;
-}
-
-// src/tools/file.ts
 var FileReadTool = class extends BaseTool {
   name = "file_read";
   description = "Read the contents of a file. Returns the file content as a string.";
@@ -10672,7 +11746,7 @@ var FileReadTool = class extends BaseTool {
     const absPath = resolveInWorkspace(this.workspaceRoot, filePath);
     const offset = input["offset"] ?? 1;
     const limit = input["limit"];
-    const content = await fs4.readFile(absPath, "utf-8");
+    const content = await fs5.readFile(absPath, "utf-8");
     const lines = content.split("\n");
     const start = Math.max(0, offset - 1);
     const end = limit ? start + limit : lines.length;
@@ -10701,13 +11775,13 @@ var FileWriteTool = class extends BaseTool {
     const content = input["content"];
     if (options.saveSnapshot) {
       try {
-        const oldContent = await fs4.readFile(absPath, "utf-8");
+        const oldContent = await fs5.readFile(absPath, "utf-8");
         await options.saveSnapshot(absPath, oldContent);
       } catch {
       }
     }
-    await fs4.mkdir(path24.dirname(absPath), { recursive: true });
-    await fs4.writeFile(absPath, content, "utf-8");
+    await fs5.mkdir(path26.dirname(absPath), { recursive: true });
+    await fs5.writeFile(absPath, content, "utf-8");
     return `Written ${content.length} characters to ${filePath}`;
   }
 };
@@ -10733,7 +11807,7 @@ var FileEditTool = class extends BaseTool {
     const oldString = input["old_string"];
     const newString = input["new_string"];
     const replaceAll = input["replace_all"] ?? false;
-    const rawContent = await fs4.readFile(absPath, "utf-8");
+    const rawContent = await fs5.readFile(absPath, "utf-8");
     if (options.saveSnapshot) {
       await options.saveSnapshot(absPath, rawContent);
     }
@@ -10745,7 +11819,7 @@ var FileEditTool = class extends BaseTool {
       );
     }
     const updated = replaceAll ? content.split(normalizedOld).join(newString) : content.replace(normalizedOld, newString);
-    await fs4.writeFile(absPath, updated, "utf-8");
+    await fs5.writeFile(absPath, updated, "utf-8");
     const count = replaceAll ? content.split(normalizedOld).length - 1 : 1;
     return `Replaced ${count} occurrence(s) in ${filePath}`;
   }
@@ -10768,12 +11842,12 @@ var FileDeleteTool = class extends BaseTool {
     const absPath = resolveInWorkspace(this.workspaceRoot, filePath);
     if (options.saveSnapshot) {
       try {
-        const oldContent = await fs4.readFile(absPath, "utf-8");
+        const oldContent = await fs5.readFile(absPath, "utf-8");
         await options.saveSnapshot(absPath, oldContent);
       } catch {
       }
     }
-    await fs4.rm(absPath, { recursive: false });
+    await fs5.rm(absPath, { recursive: false });
     return `Deleted ${filePath}`;
   }
 };
@@ -10790,7 +11864,7 @@ var FileListTool = class extends BaseTool {
   async execute(input, _options) {
     const inputPath = input["path"] || ".";
     const absPath = resolveInWorkspace(this.workspaceRoot, inputPath);
-    const entries = await fs4.readdir(absPath, { withFileTypes: true });
+    const entries = await fs5.readdir(absPath, { withFileTypes: true });
     return entries.map((e) => `${e.isDirectory() ? "[DIR] " : "      "}${e.name}`).join("\n") || "(empty directory)";
   }
 };
@@ -11203,8 +12277,8 @@ var ImageAnalyzeTool = class extends BaseTool {
   }
 };
 async function fileToImageAttachment(filePath) {
-  const data = await fs4.readFile(filePath);
-  const ext = path24.extname(filePath).toLowerCase();
+  const data = await fs5.readFile(filePath);
+  const ext = path26.extname(filePath).toLowerCase();
   const mimeMap = {
     ".jpg": "image/jpeg",
     ".jpeg": "image/jpeg",
@@ -11238,14 +12312,14 @@ var PDFCreateTool = class extends BaseTool {
     const filePath = input["path"];
     const content = input["content"];
     const title = input["title"];
-    const dir = path24.dirname(filePath);
-    if (!fs23.existsSync(dir)) {
-      fs23.mkdirSync(dir, { recursive: true });
+    const dir = path26.dirname(filePath);
+    if (!fs25.existsSync(dir)) {
+      fs25.mkdirSync(dir, { recursive: true });
     }
     return new Promise((resolve2, reject) => {
       try {
         const doc = new PDFDocument({ margin: 50 });
-        const stream = fs23.createWriteStream(filePath);
+        const stream = fs25.createWriteStream(filePath);
         doc.pipe(stream);
         if (title) {
           doc.info["Title"] = title;
@@ -11323,22 +12397,22 @@ var CodeInterpreterTool = class extends BaseTool {
       }
       cmdPrefix = NODE_CMD;
     }
-    const tmpDir = path24.join(this.workspaceRoot, ".cascade", "tmp");
-    if (!fs23.existsSync(tmpDir)) {
-      fs23.mkdirSync(tmpDir, { recursive: true });
+    const tmpDir = path26.join(this.workspaceRoot, ".cascade", "tmp");
+    if (!fs25.existsSync(tmpDir)) {
+      fs25.mkdirSync(tmpDir, { recursive: true });
     }
     const extension = language === "python" ? "py" : "js";
     const fileName = `intp_${randomUUID().slice(0, 8)}.${extension}`;
-    const filePath = path24.join(tmpDir, fileName);
-    fs23.writeFileSync(filePath, code, "utf-8");
+    const filePath = path26.join(tmpDir, fileName);
+    fs25.writeFileSync(filePath, code, "utf-8");
     const execArgs = [filePath, ...args];
     return new Promise((resolve2) => {
       const startMs = Date.now();
       execFile(cmdPrefix, execArgs, { cwd: this.workspaceRoot, timeout: 3e4 }, (error, stdout, stderr) => {
         const duration = Date.now() - startMs;
         try {
-          if (fs23.existsSync(filePath)) {
-            fs23.unlinkSync(filePath);
+          if (fs25.existsSync(filePath)) {
+            fs25.unlinkSync(filePath);
           }
         } catch (cleanupErr) {
           console.error(`Failed to cleanup interpreter script ${filePath}:`, cleanupErr);
@@ -11650,7 +12724,7 @@ var GlobTool = class extends BaseTool {
   };
   async execute(input, _options) {
     const pattern = input["pattern"];
-    const searchPath = input["path"] ? path24.resolve(this.workspaceRoot, input["path"]) : this.workspaceRoot;
+    const searchPath = input["path"] ? path26.resolve(this.workspaceRoot, input["path"]) : this.workspaceRoot;
     const matches = await glob(pattern, {
       cwd: searchPath,
       ignore: ["node_modules/**", ".git/**", "dist/**", "build/**"],
@@ -11663,7 +12737,7 @@ var GlobTool = class extends BaseTool {
     const withMtime = await Promise.all(
       matches.map(async (rel) => {
         try {
-          const stat = await fs4.stat(path24.join(searchPath, rel));
+          const stat = await fs5.stat(path26.join(searchPath, rel));
           return { rel, mtime: stat.mtimeMs };
         } catch {
           return { rel, mtime: 0 };
@@ -11712,7 +12786,7 @@ var GrepTool = class extends BaseTool {
   };
   async execute(input, _options) {
     const pattern = input["pattern"];
-    const searchPath = input["path"] ? path24.resolve(this.workspaceRoot, input["path"]) : this.workspaceRoot;
+    const searchPath = input["path"] ? path26.resolve(this.workspaceRoot, input["path"]) : this.workspaceRoot;
     const globPattern = input["glob"];
     const outputMode = input["output_mode"] ?? "content";
     const context = input["context"] ?? 0;
@@ -11766,15 +12840,15 @@ var GrepTool = class extends BaseTool {
         nodir: true
       });
     } catch {
-      files = [path24.relative(searchPath, searchPath) || "."];
+      files = [path26.relative(searchPath, searchPath) || "."];
     }
     const results = [];
     let totalCount = 0;
     for (const rel of files) {
-      const abs = path24.join(searchPath, rel);
+      const abs = path26.join(searchPath, rel);
       let content;
       try {
-        content = await fs4.readFile(abs, "utf-8");
+        content = await fs5.readFile(abs, "utf-8");
       } catch {
         continue;
       }
@@ -12158,10 +13232,10 @@ var ToolRegistry = class extends EventEmitter {
   }
   isIgnored(filePath) {
     if (!filePath) return false;
-    const abs = path24.resolve(this.workspaceRoot, filePath);
-    const rel = path24.relative(this.workspaceRoot, abs);
-    if (!rel || rel.startsWith("..") || path24.isAbsolute(rel)) return true;
-    const posixRel = rel.split(path24.sep).join("/");
+    const abs = path26.resolve(this.workspaceRoot, filePath);
+    const rel = path26.relative(this.workspaceRoot, abs);
+    if (!rel || rel.startsWith("..") || path26.isAbsolute(rel)) return true;
+    const posixRel = rel.split(path26.sep).join("/");
     return this.ignoreMatcher.ignores(posixRel);
   }
 };
@@ -12395,22 +13469,22 @@ var FileMcpOAuthStore = class {
   filePath;
   load() {
     try {
-      return JSON.parse(fs23.readFileSync(this.filePath, "utf-8"));
+      return JSON.parse(fs25.readFileSync(this.filePath, "utf-8"));
     } catch {
       return void 0;
     }
   }
   save(state) {
-    fs23.mkdirSync(path24.dirname(this.filePath), { recursive: true, mode: 448 });
-    fs23.writeFileSync(this.filePath, JSON.stringify(state, null, 2), { mode: 384 });
+    fs25.mkdirSync(path26.dirname(this.filePath), { recursive: true, mode: 448 });
+    fs25.writeFileSync(this.filePath, JSON.stringify(state, null, 2), { mode: 384 });
     try {
-      fs23.chmodSync(this.filePath, 384);
+      fs25.chmodSync(this.filePath, 384);
     } catch {
     }
   }
   clear() {
     try {
-      fs23.rmSync(this.filePath);
+      fs25.rmSync(this.filePath);
     } catch {
     }
   }
@@ -13307,6 +14381,14 @@ function heuristicAnalyze(prompt) {
   const estimatedTokens = wordCount * 5;
   return { type, complexity, requiresReasoning, requiresVision, estimatedTokens, confidence };
 }
+function hashPrompt(prompt) {
+  let hash = 2166136261;
+  for (let index = 0; index < prompt.length; index++) {
+    hash ^= prompt.charCodeAt(index);
+    hash = Math.imul(hash, 16777619) >>> 0;
+  }
+  return `${prompt.length}:${hash.toString(36)}`;
+}
 var analysisCache = /* @__PURE__ */ new Map();
 var TASK_TYPE_TAGS = {
   code: ["code", "instruction"],
@@ -13350,7 +14432,7 @@ var TaskAnalyzer = class {
    * Low confidence prompts fall back to a conservative mixed/moderate profile.
    */
   async analyze(prompt) {
-    const cacheKey = prompt.slice(0, 200);
+    const cacheKey = hashPrompt(prompt);
     const cached = analysisCache.get(cacheKey);
     if (cached) {
       this.lastProfile = cached;
@@ -13449,7 +14531,7 @@ var TaskAnalyzer = class {
     analysisCache.clear();
   }
 };
-var DEFAULT_STATS_FILE = path24.join(os6.homedir(), ".cascade", "model-perf.json");
+var DEFAULT_STATS_FILE = path26.join(os6.homedir(), ".cascade", "model-perf.json");
 var ModelPerformanceTracker = class {
   stats = /* @__PURE__ */ new Map();
   featureStats = /* @__PURE__ */ new Map();
@@ -13469,7 +14551,7 @@ var ModelPerformanceTracker = class {
     if (this.loaded) return;
     this.loaded = true;
     try {
-      const raw = await fs4.readFile(this.statsFile, "utf-8");
+      const raw = await fs5.readFile(this.statsFile, "utf-8");
       const parsed = JSON.parse(raw);
       if (parsed.models) {
         for (const [key, stat] of Object.entries(parsed.models)) this.stats.set(key, stat);
@@ -13489,15 +14571,15 @@ var ModelPerformanceTracker = class {
   async save() {
     if (this.readOnly) return;
     try {
-      await fs4.mkdir(path24.dirname(this.statsFile), { recursive: true });
+      await fs5.mkdir(path26.dirname(this.statsFile), { recursive: true });
       const modelsObj = {};
       const featuresObj = {};
       for (const [key, stat] of this.stats) modelsObj[key] = stat;
       for (const [key, stat] of this.featureStats) featuresObj[key] = stat;
       const json = JSON.stringify({ models: modelsObj, features: featuresObj }, null, 2);
       const tmp = `${this.statsFile}.${process.pid}.${Date.now()}.tmp`;
-      await fs4.writeFile(tmp, json, "utf-8");
-      await fs4.rename(tmp, this.statsFile);
+      await fs5.writeFile(tmp, json, "utf-8");
+      await fs5.rename(tmp, this.statsFile);
     } catch {
     }
   }
@@ -14037,9 +15119,9 @@ Required capability: ${description.slice(0, 300)}`;
    *  any dangerous action, so a silently-reloaded tool can't act without approval. */
   async loadPersistedTools() {
     if (!this.workspacePath || !this.persistEnabled) return;
-    const file = path24.join(this.workspacePath, ".cascade", DYNAMIC_TOOLS_FILE);
+    const file = path26.join(this.workspacePath, ".cascade", DYNAMIC_TOOLS_FILE);
     try {
-      const raw = await fs4.readFile(file, "utf-8");
+      const raw = await fs5.readFile(file, "utf-8");
       const specs = JSON.parse(raw);
       if (!Array.isArray(specs)) return;
       let loaded = 0;
@@ -14061,11 +15143,11 @@ Required capability: ${description.slice(0, 300)}`;
   }
   async persist() {
     if (!this.workspacePath || !this.persistEnabled) return;
-    const dir = path24.join(this.workspacePath, ".cascade");
-    const file = path24.join(dir, DYNAMIC_TOOLS_FILE);
+    const dir = path26.join(this.workspacePath, ".cascade");
+    const file = path26.join(dir, DYNAMIC_TOOLS_FILE);
     try {
-      await fs4.mkdir(dir, { recursive: true });
-      await fs4.writeFile(file, JSON.stringify(Array.from(this.specs.values()), null, 2), "utf-8");
+      await fs5.mkdir(dir, { recursive: true });
+      await fs5.writeFile(file, JSON.stringify(Array.from(this.specs.values()), null, 2), "utf-8");
     } catch (err) {
       this.log(`[tool-creator] Failed to persist tools: ${err instanceof Error ? err.message : String(err)}`);
     }
@@ -14082,12 +15164,12 @@ var WorldStateDB = class {
   constructor(workspacePath, debugMode = false) {
     this.workspacePath = workspacePath;
     this.debugMode = debugMode;
-    const cascadeDir = path24.join(workspacePath, ".cascade");
-    if (!fs23.existsSync(cascadeDir)) {
-      fs23.mkdirSync(cascadeDir, { recursive: true });
+    const cascadeDir = path26.join(workspacePath, ".cascade");
+    if (!fs25.existsSync(cascadeDir)) {
+      fs25.mkdirSync(cascadeDir, { recursive: true });
     }
-    this.keyPath = path24.join(cascadeDir, "world_state.key");
-    this.dbPath = path24.join(cascadeDir, "world_state.db");
+    this.keyPath = path26.join(cascadeDir, "world_state.key");
+    this.dbPath = path26.join(cascadeDir, "world_state.db");
     this.initEncryptionKey();
     this.db = new Database(this.dbPath);
     this.db.pragma("journal_mode = WAL");
@@ -14144,11 +15226,11 @@ var WorldStateDB = class {
     ).run(e, r, row.encrypted_value, row.source_worker, row.timestamp, validTo, change);
   }
   initEncryptionKey() {
-    if (fs23.existsSync(this.keyPath)) {
-      this.encryptionKey = fs23.readFileSync(this.keyPath);
+    if (fs25.existsSync(this.keyPath)) {
+      this.encryptionKey = fs25.readFileSync(this.keyPath);
     } else {
       this.encryptionKey = crypto4.randomBytes(32);
-      fs23.writeFileSync(this.keyPath, this.encryptionKey);
+      fs25.writeFileSync(this.keyPath, this.encryptionKey);
     }
   }
   encrypt(text) {
@@ -14434,9 +15516,9 @@ var WorldStateDB = class {
   dumpDebugIfNeeded() {
     if (!this.debugMode) return;
     try {
-      const dumpPath = path24.join(os6.tmpdir(), "cascade_world_state_debug.json");
+      const dumpPath = path26.join(os6.tmpdir(), "cascade_world_state_debug.json");
       const entries = this.getAllEntries();
-      fs23.writeFileSync(dumpPath, JSON.stringify(entries, null, 2), "utf-8");
+      fs25.writeFileSync(dumpPath, JSON.stringify(entries, null, 2), "utf-8");
     } catch (err) {
       console.error("Failed to dump debug world state", err);
     }
@@ -14445,6 +15527,128 @@ var WorldStateDB = class {
     this.db.close();
   }
 };
+var RESUME_SCHEMA_VERSION = 1;
+var DEFAULT_MAX_CHECKPOINTS = 5;
+var DEFAULT_MAX_AGE_MS = 7 * 24 * 60 * 60 * 1e3;
+var FILE_PATTERN = /^(\d+)-(.+)\.json$/;
+function safeId(taskId) {
+  const cleaned = taskId.replace(/[^A-Za-z0-9._-]/g, "_").replace(/\.{2,}/g, "_");
+  return cleaned.slice(0, 100) || "run";
+}
+function isCheckpoint(value) {
+  if (typeof value !== "object" || value === null) return false;
+  const c = value;
+  return c.version === RESUME_SCHEMA_VERSION && typeof c.taskId === "string" && typeof c.prompt === "string" && typeof c.createdAt === "string" && typeof c.partialOutput === "string" && Array.isArray(c.completed);
+}
+var ResumeStore = class {
+  dir;
+  maxCheckpoints;
+  maxAgeMs;
+  now;
+  constructor(options) {
+    this.dir = options.dir;
+    this.maxCheckpoints = options.maxCheckpoints ?? DEFAULT_MAX_CHECKPOINTS;
+    this.maxAgeMs = options.maxAgeMs ?? DEFAULT_MAX_AGE_MS;
+    this.now = options.now ?? Date.now;
+  }
+  /**
+   * Persist a checkpoint and prune. Never throws: failing to save a resume file
+   * must not turn a recoverable stop into a crash, which would be a strictly
+   * worse outcome than the one this store exists to improve.
+   */
+  async save(checkpoint) {
+    try {
+      const timestamp = this.now();
+      const record = {
+        ...checkpoint,
+        version: RESUME_SCHEMA_VERSION,
+        createdAt: checkpoint.createdAt ?? new Date(timestamp).toISOString()
+      };
+      await promises.mkdir(this.dir, { recursive: true });
+      const finalPath = path26.join(this.dir, `${timestamp}-${safeId(record.taskId)}.json`);
+      const tempPath = `${finalPath}.${process.pid}.tmp`;
+      await promises.writeFile(tempPath, JSON.stringify(record, null, 2), "utf-8");
+      await promises.rename(tempPath, finalPath);
+      await this.prune();
+    } catch {
+    }
+  }
+  /** Valid, unexpired checkpoints, newest first. */
+  async list() {
+    let entries;
+    try {
+      entries = await promises.readdir(this.dir);
+    } catch {
+      return [];
+    }
+    const cutoff = this.now() - this.maxAgeMs;
+    const candidates = entries.map((name) => ({ name, match: FILE_PATTERN.exec(name) })).filter((e) => e.match !== null).map((e) => ({ name: e.name, timestamp: Number(e.match[1]) })).filter((e) => e.timestamp >= cutoff).sort((a, b) => b.timestamp - a.timestamp);
+    const checkpoints = [];
+    for (const candidate of candidates) {
+      try {
+        const raw = await promises.readFile(path26.join(this.dir, candidate.name), "utf-8");
+        const parsed = JSON.parse(raw);
+        if (isCheckpoint(parsed)) checkpoints.push(parsed);
+      } catch {
+        continue;
+      }
+    }
+    return checkpoints;
+  }
+  /** The most recent resumable run, or null. */
+  async latest() {
+    return (await this.list())[0] ?? null;
+  }
+  /**
+   * Load a checkpoint and delete it in the same step. Resuming twice from one
+   * checkpoint would re-run restored work, so consumption is part of reading.
+   */
+  async consume(taskId) {
+    const all = await this.list();
+    const target = taskId ? all.find((c) => c.taskId === taskId) : all[0];
+    if (!target) return null;
+    await this.delete(target.taskId);
+    return target;
+  }
+  /** Remove every checkpoint for a task id. */
+  async delete(taskId) {
+    try {
+      const entries = await promises.readdir(this.dir);
+      const wanted = safeId(taskId);
+      await Promise.all(entries.map(async (name) => {
+        const match = FILE_PATTERN.exec(name);
+        if (match?.[2] === wanted) {
+          await promises.rm(path26.join(this.dir, name), { force: true });
+        }
+      }));
+    } catch {
+    }
+  }
+  /** Drop expired checkpoints, then any beyond the newest `maxCheckpoints`. */
+  async prune() {
+    try {
+      const entries = await promises.readdir(this.dir);
+      const cutoff = this.now() - this.maxAgeMs;
+      const files = entries.map((name) => ({ name, match: FILE_PATTERN.exec(name) })).filter((e) => e.match !== null).map((e) => ({ name: e.name, timestamp: Number(e.match[1]) })).sort((a, b) => b.timestamp - a.timestamp);
+      const doomed = files.filter((f, index) => f.timestamp < cutoff || index >= this.maxCheckpoints);
+      const staleTemps = entries.filter((name) => name.endsWith(".tmp")).filter((name) => (Number(FILE_PATTERN.exec(name.replace(/\.\d+\.tmp$/, ".json"))?.[1]) || 0) < cutoff);
+      await Promise.all([...doomed.map((f) => f.name), ...staleTemps].map(
+        (name) => promises.rm(path26.join(this.dir, name), { force: true })
+      ));
+    } catch {
+    }
+  }
+};
+function summarizeCompleted(completed, perNodeChars = 500) {
+  if (!completed.length) return "";
+  const lines = completed.map((node) => {
+    const body = node.output.length > perNodeChars ? `${node.output.slice(0, perNodeChars)}\u2026` : node.output;
+    return `- [${node.status}] ${node.title}
+  ${body.replace(/\n/g, "\n  ")}`;
+  });
+  return `ALREADY COMPLETED in a previous attempt \u2014 do NOT redo these:
+${lines.join("\n")}`;
+}
 var ignore2 = ignoreFactory.default ?? ignoreFactory;
 var PrivacyPaths = class {
   localOnly;
@@ -14491,9 +15695,9 @@ var CascadeIgnore = class {
     ]);
   }
   async load(workspacePath) {
-    const filePath = path24.join(workspacePath, ".cascadeignore");
+    const filePath = path26.join(workspacePath, ".cascadeignore");
     try {
-      const content = await fs4.readFile(filePath, "utf-8");
+      const content = await fs5.readFile(filePath, "utf-8");
       const lines = content.split("\n").filter((l) => l.trim() && !l.startsWith("#"));
       this.ig.add(lines);
       this.loaded = true;
@@ -14502,7 +15706,7 @@ var CascadeIgnore = class {
   }
   isIgnored(filePath, workspacePath) {
     try {
-      const relative = workspacePath ? path24.relative(workspacePath, filePath) : filePath;
+      const relative = workspacePath ? path26.relative(workspacePath, filePath) : filePath;
       return this.ig.ignores(relative);
     } catch {
       return false;
@@ -14845,7 +16049,7 @@ var WorkspaceIndex = class {
   isIgnored;
   chunker;
   constructor(opts) {
-    this.root = path24.resolve(opts.root);
+    this.root = path26.resolve(opts.root);
     this.db = opts.db;
     this.namespace = opts.namespace ?? "code";
     this.extensions = new Set((opts.extensions ?? DEFAULT_EXTENSIONS).map((e) => e.replace(/^\./, "").toLowerCase()));
@@ -14872,19 +16076,19 @@ var WorkspaceIndex = class {
     const walk = async (dir) => {
       let entries;
       try {
-        entries = await fs4.readdir(dir, { withFileTypes: true });
+        entries = await fs5.readdir(dir, { withFileTypes: true });
       } catch {
         return;
       }
       for (const entry of entries) {
-        const abs = path24.join(dir, entry.name);
+        const abs = path26.join(dir, entry.name);
         if (entry.isDirectory()) {
           if (HARD_SKIP_DIRS.has(entry.name) || this.isIgnored(abs)) continue;
           await walk(abs);
         } else if (entry.isFile()) {
-          const ext = path24.extname(entry.name).slice(1).toLowerCase();
+          const ext = path26.extname(entry.name).slice(1).toLowerCase();
           if (!this.extensions.has(ext) || this.isIgnored(abs)) continue;
-          out.push(path24.relative(this.root, abs));
+          out.push(path26.relative(this.root, abs));
         }
       }
     };
@@ -14914,10 +16118,10 @@ var WorkspaceIndex = class {
     const entries = [];
     for (const rel of rels) {
       try {
-        const abs = path24.join(this.root, rel);
-        const stat = await fs4.stat(abs);
+        const abs = path26.join(this.root, rel);
+        const stat = await fs5.stat(abs);
         if (stat.size > this.maxFileBytes) continue;
-        const buf = await fs4.readFile(abs);
+        const buf = await fs5.readFile(abs);
         if (buf.includes(0)) continue;
         entries.push({ path: rel, hash: hashContent(buf), text: buf.toString("utf8") });
       } catch {
@@ -15452,8 +16656,16 @@ var Cascade = class _Cascade extends EventEmitter {
   /** Orchestration decisions for the CURRENT run — cleared on each run(). */
   decisionLog = [];
   initialized = false;
-  /** Last task that stopped at the budget cap — powers /continue (resumeRun). */
+  /**
+   * Last interrupted task — powers /continue (resumeRun). Kept in memory as a
+   * fast path for the same-process case; the durable copy lives in `resumeStore`
+   * so a crash or an exit no longer throws away everything already finished.
+   */
   lastInterruptedRun;
+  /** Durable resume checkpoints. See core/orchestration/resume-store.ts. */
+  resumeStore;
+  /** Section results of the CURRENT run, so an interruption can checkpoint them. */
+  currentRunCompleted = [];
   initPromise;
   store;
   audit;
@@ -15486,14 +16698,21 @@ var Cascade = class _Cascade extends EventEmitter {
     this.toolRegistry = new ToolRegistry(this.config.tools, workspacePath);
     try {
       this.router.setDeadModelStore(new DeadModelStore(
-        fileDeadModelPersistence(path24.join(workspacePath, ".cascade", "dead-models.json"))
+        fileDeadModelPersistence(path26.join(workspacePath, ".cascade", "dead-models.json"))
       ));
     } catch {
     }
+    try {
+      this.resumeStore = new ResumeStore({
+        dir: path26.join(workspacePath, ".cascade", "resume")
+      });
+    } catch {
+    }
     this.multimodal = new MultimodalRegistry(
       (this.config.providers ?? []).map((p) => p.type)
     );
     this.registerMediaTools(workspacePath);
+    this.registerDocumentTools(workspacePath);
     this.telemetry = config.telemetry?.enabled ? new Telemetry(config.telemetry, config.telemetry.distinctId ?? "anonymous") : noopTelemetry;
     this.worldStateDB = new WorldStateDB(this.workspacePath, this.config.workspace?.debugWorldState ?? false);
     this.router.setWorldStateDB(this.worldStateDB);
@@ -15573,8 +16792,8 @@ var Cascade = class _Cascade extends EventEmitter {
       this.emit("log", { level: "warn", message: "Code index enabled but no embeddings-capable provider is configured \u2014 skipping." });
       return;
     }
-    const dbPath = ci.dbPath || path24.join(this.workspacePath, ".cascade", "code-index.db");
-    fs23.mkdirSync(path24.dirname(dbPath), { recursive: true });
+    const dbPath = ci.dbPath || path26.join(this.workspacePath, ".cascade", "code-index.db");
+    fs25.mkdirSync(path26.dirname(dbPath), { recursive: true });
     const db = new Database(dbPath);
     db.pragma("journal_mode = WAL");
     const complete = chatCompleterFromProviders(this.config.providers);
@@ -15914,6 +17133,35 @@ ${input}` }],
       this.toolRegistry.register(tool);
     }
   }
+  /**
+   * Register `generate_document` where there is a real workspace to write into.
+   *
+   * A `.docx`/`.pptx`/`.xlsx` is a ZIP of OOXML parts, so `file_write` — which
+   * does exactly what it says and writes the model's text verbatim — produced
+   * files Word/Excel/PowerPoint correctly reported as corrupted. This tool owns
+   * the conversion (see tools/generate-document.ts for why it isn't folded into
+   * file_write).
+   *
+   * Registered OUTSIDE `enabledTools` for the same reason the media tools are:
+   * that allowlist is a blast-radius control for tools that reach the machine
+   * or the network, and this one only writes the artifact the user asked for,
+   * into the workspace the run already owns. `disabledTools` still removes it.
+   * A host with no filesystem (the cloud) has its own browser-side exporter and
+   * simply never reaches this path — `buildDocumentTools` returns nothing
+   * without a file reader, mirroring `transcribe_audio`.
+   */
+  registerDocumentTools(workspacePath) {
+    const denied = new Set(this.config.tools?.disabledTools ?? []);
+    const tools = buildDocumentTools(async (p) => {
+      const fsp = await import('fs/promises');
+      return new Uint8Array(await fsp.readFile(p));
+    });
+    for (const tool of tools) {
+      if (denied.has(tool.name)) continue;
+      tool.setWorkspaceRoot(workspacePath);
+      this.toolRegistry.register(tool);
+    }
+  }
   /**
    * Supply per-model thumbs-up/down counts so Auto routing can weigh how models
    * have actually performed for this user, on top of public benchmarks.
@@ -15925,10 +17173,43 @@ ${input}` }],
   setFeedbackSource(source) {
     this.router.setFeedbackSource(source);
   }
-  /** True when a task stopped at the budget cap and can be resumed via /continue. */
+  /**
+   * Write a durable checkpoint for an interrupted run.
+   *
+   * Best-effort throughout: a run is already ending badly on every path that
+   * calls this, and failing to record a resume file must not make that ending
+   * worse. Nothing here is allowed to throw.
+   */
+  async checkpointRun(taskId, prompt, partialOutput, reason, detail) {
+    if (!this.currentRunCompleted.length && !partialOutput) return;
+    try {
+      await this.resumeStore?.save({
+        taskId,
+        prompt,
+        reason,
+        ...detail ? { detail } : {},
+        partialOutput,
+        completed: [...this.currentRunCompleted]
+      });
+    } catch {
+    }
+  }
+  /** True when a task can be resumed via /continue (this process or a previous one). */
   hasResumableRun() {
     return this.lastInterruptedRun != null;
   }
+  /**
+   * True when a checkpoint from ANY process is resumable. Async because the
+   * durable check touches disk; `hasResumableRun` remains the sync in-memory
+   * answer for callers already on a hot path.
+   */
+  async hasDurableResume() {
+    return await this.resumeStore?.latest() != null;
+  }
+  /** Interrupted runs available to resume, newest first. */
+  async listResumableRuns() {
+    return await this.resumeStore?.list() ?? [];
+  }
   /**
    * Raise the per-run token budget for a resume and return the continuation
    * prompt (or null when nothing is resumable). Consumes the interrupted-run
@@ -15939,22 +17220,54 @@ ${input}` }],
     const last = this.lastInterruptedRun;
     if (!last) return null;
     this.lastInterruptedRun = void 0;
-    const raised = opts.maxTokens ?? Math.round((this.config.budget?.maxTokensPerRun ?? 2e5) * 2);
+    this.raiseBudgetForResume(opts.maxTokens);
+    return this.buildResumePrompt(last.prompt, last.partialOutput, []);
+  }
+  /**
+   * Durable counterpart to prepareResume: recovers a run interrupted in ANY
+   * process, including one that crashed before it could return. Consumes the
+   * checkpoint, so the same finished work is never restored into two runs.
+   */
+  async prepareDurableResume(opts = {}) {
+    const checkpoint = await this.resumeStore?.consume(opts.taskId);
+    if (!checkpoint) return null;
+    this.lastInterruptedRun = void 0;
+    this.raiseBudgetForResume(opts.maxTokens);
+    return this.buildResumePrompt(checkpoint.prompt, checkpoint.partialOutput, checkpoint.completed);
+  }
+  /** A resume gets a bigger budget — the previous attempt exhausted the old one. */
+  raiseBudgetForResume(maxTokens) {
+    const raised = maxTokens ?? Math.round((this.config.budget?.maxTokensPerRun ?? 2e5) * 2);
     this.config = { ...this.config, budget: { ...this.config.budget, maxTokensPerRun: raised } };
     this.router.setMaxTokensPerRun(raised);
-    return `Continue and FINISH this task. A previous attempt was interrupted before completion; any files already created are on disk \u2014 build on them, do NOT recreate them. Complete only the remaining work.
-
-Original task: ${last.prompt}` + (last.partialOutput ? `
-
+  }
+  /**
+   * The resume prompt. Completed sections are named explicitly rather than
+   * gestured at: "do not recreate the files" is an instruction a planner can
+   * only guess at, whereas a list of what is already done, and what it produced,
+   * is something it can act on. That difference is the entire reason node
+   * results are kept — a re-plan that cannot see the finished work will plan the
+   * finished work again, and the user pays for it a second time.
+   */
+  buildResumePrompt(prompt, partialOutput, completed) {
+    const done = summarizeCompleted(completed);
+    return [
+      "Continue and FINISH this task. A previous attempt was interrupted before completion; any files already created are on disk \u2014 build on them, do NOT recreate them. Plan ONLY the remaining work.",
+      "",
+      `Original task: ${prompt}`,
+      done ? `
+${done}` : "",
+      partialOutput ? `
 Partial result so far:
-${last.partialOutput}` : "");
+${partialOutput}` : ""
+    ].filter(Boolean).join("\n");
   }
   /**
    * Resume the last budget-capped task with a raised budget (SDK/headless).
    * Returns null when there is nothing to resume.
    */
   async resumeRun(opts = {}) {
-    const prompt = this.prepareResume(opts);
+    const prompt = await this.prepareDurableResume(opts) ?? this.prepareResume(opts);
     if (!prompt) return null;
     return this.run({ prompt });
   }
@@ -16325,6 +17638,7 @@ ${prompt}` : prompt;
     const startMs = Date.now();
     const taskId = randomUUID();
     this.decisionLog = [];
+    this.currentRunCompleted = [];
     if (options.fastAnswer) {
       return this.runFastAnswer(options, startMs, taskId);
     }
@@ -16439,6 +17753,11 @@ ${prompt}` : prompt;
       });
       tier.on("log", (e) => this.emit("log", e));
       tier.on("tier:status", (e) => this.emit("tier:status", e));
+      tier.on("section:complete", (e) => {
+        if (e.status !== "COMPLETED" && e.status !== "PARTIAL") return;
+        this.currentRunCompleted.push(e);
+        this.emit("section:complete", e);
+      });
       tier.on("tool:call", (e) => this.emit("tool:call", e));
       tier.on("tool:result", (e) => this.emit("tool:result", e));
       tier.on("tool:approval-request", async (request) => {
@@ -16585,6 +17904,7 @@ _(incomplete: ${reasons.join("; ")})_` : partial;
       if (budgetInfo) throw new CascadeRouter.BudgetExceededError(budgetInfo.reason);
       const trip = runBreaker.reason();
       if (trip) {
+        await this.checkpointRun(taskId, options.prompt, finalOutput || "", "breaker", trip.message);
         finalOutput = [
           `\u26A0 **Run stopped early \u2014 ${trip.modelId} was failing every request.**`,
           "",
@@ -16604,6 +17924,13 @@ ${finalOutput}` : ""
           reason: err instanceof Error ? err.message : "Task cancelled",
           partialOutput: finalOutput || ""
         });
+        await this.checkpointRun(
+          taskId,
+          options.prompt,
+          finalOutput || "",
+          "cancelled",
+          err instanceof Error ? err.message : "Task cancelled"
+        );
         runError = null;
       } else if (err instanceof Error && err.name === "BudgetExceededError") {
         this.emit("run:budget-exceeded", {
@@ -16612,9 +17939,17 @@ ${finalOutput}` : ""
           partialOutput: finalOutput || ""
         });
         this.lastInterruptedRun = { prompt: options.prompt, partialOutput: finalOutput || "", taskId };
+        await this.checkpointRun(taskId, options.prompt, finalOutput || "", "budget", err.message);
         if (!finalOutput) finalOutput = `\u26A0 Stopped to avoid runaway cost: ${err.message}`;
         runError = null;
       } else {
+        await this.checkpointRun(
+          taskId,
+          options.prompt,
+          finalOutput || "",
+          "error",
+          err instanceof Error ? err.message : String(err)
+        );
         runError = err;
         throw err;
       }
@@ -16862,7 +18197,7 @@ var Keystore = class {
       const creds = await this.keytar.findCredentials(KEYTAR_SERVICE);
       this.cache = Object.fromEntries(creds.map((c) => [c.account, c.password]));
       this.backend = "keytar";
-      if (password && fs23.existsSync(this.storePath)) {
+      if (password && fs25.existsSync(this.storePath)) {
         try {
           const fileEntries = this.decryptFile(password);
           for (const [k, v] of Object.entries(fileEntries)) {
@@ -16881,7 +18216,7 @@ var Keystore = class {
         "Keystore unlock requires a password because the OS keychain (keytar) is not available on this system."
       );
     }
-    if (!fs23.existsSync(this.storePath)) {
+    if (!fs25.existsSync(this.storePath)) {
       const salt = crypto4.randomBytes(SALT_LEN);
       this.masterKey = this.deriveKey(password, salt);
       this.writeWithSalt({}, salt);
@@ -16895,7 +18230,7 @@ var Keystore = class {
   }
   /** Synchronous legacy unlock kept for AES-only environments. */
   unlockSync(password) {
-    if (!fs23.existsSync(this.storePath)) {
+    if (!fs25.existsSync(this.storePath)) {
       const salt = crypto4.randomBytes(SALT_LEN);
       this.masterKey = this.deriveKey(password, salt);
       this.writeWithSalt({}, salt);
@@ -16953,7 +18288,7 @@ var Keystore = class {
     }
   }
   decryptFile(password, knownSalt) {
-    if (!fs23.existsSync(this.storePath)) return {};
+    if (!fs25.existsSync(this.storePath)) return {};
     try {
       const { salt, ciphertext, iv, tag } = this.readRaw();
       const useSalt = knownSalt ?? salt;
@@ -16975,8 +18310,8 @@ var Keystore = class {
     const ciphertext = Buffer.concat([cipher.update(plaintext), cipher.final()]);
     const tag = cipher.getAuthTag();
     const out = Buffer.concat([raw.salt, iv, tag, ciphertext]);
-    fs23.mkdirSync(path24.dirname(this.storePath), { recursive: true });
-    fs23.writeFileSync(this.storePath, out, { mode: 384 });
+    fs25.mkdirSync(path26.dirname(this.storePath), { recursive: true });
+    fs25.writeFileSync(this.storePath, out, { mode: 384 });
   }
   writeWithSalt(data, salt) {
     if (!this.masterKey) throw new Error("writeWithSalt called before masterKey was set");
@@ -16986,11 +18321,11 @@ var Keystore = class {
     const ciphertext = Buffer.concat([cipher.update(plaintext), cipher.final()]);
     const tag = cipher.getAuthTag();
     const out = Buffer.concat([salt, iv, tag, ciphertext]);
-    fs23.mkdirSync(path24.dirname(this.storePath), { recursive: true });
-    fs23.writeFileSync(this.storePath, out, { mode: 384 });
+    fs25.mkdirSync(path26.dirname(this.storePath), { recursive: true });
+    fs25.writeFileSync(this.storePath, out, { mode: 384 });
   }
   readRaw() {
-    const buf = fs23.readFileSync(this.storePath);
+    const buf = fs25.readFileSync(this.storePath);
     let offset = 0;
     const salt = buf.subarray(offset, offset + SALT_LEN);
     offset += SALT_LEN;
@@ -17006,9 +18341,9 @@ var Keystore = class {
   }
 };
 async function loadCascadeMd(workspacePath) {
-  const filePath = path24.join(workspacePath, "CASCADE.md");
+  const filePath = path26.join(workspacePath, "CASCADE.md");
   try {
-    const raw = await fs4.readFile(filePath, "utf-8");
+    const raw = await fs5.readFile(filePath, "utf-8");
     return parseCascadeMd(raw);
   } catch {
     return null;
@@ -17037,7 +18372,7 @@ ${raw.trim()}`;
 var MemoryStore = class _MemoryStore {
   db;
   constructor(dbPath) {
-    fs23.mkdirSync(path24.dirname(dbPath), { recursive: true });
+    fs25.mkdirSync(path26.dirname(dbPath), { recursive: true });
     try {
       this.db = new Database(dbPath, { timeout: 5e3 });
       this.db.pragma("journal_mode = WAL");
@@ -17873,7 +19208,7 @@ Original error: ${err.message}`
   }
 };
 function credentialsPath(globalDir2) {
-  return path24.join(globalDir2, GLOBAL_CREDENTIALS_FILE);
+  return path26.join(globalDir2, GLOBAL_CREDENTIALS_FILE);
 }
 function providerKey(p) {
   if (p.type === "azure") {
@@ -17886,7 +19221,7 @@ function isPersistable(p) {
 }
 function loadGlobalCredentials(globalDir2) {
   try {
-    const raw = fs23.readFileSync(credentialsPath(globalDir2), "utf-8");
+    const raw = fs25.readFileSync(credentialsPath(globalDir2), "utf-8");
     const parsed = JSON.parse(raw);
     if (!Array.isArray(parsed.providers)) return [];
     return parsed.providers.filter(
@@ -17898,13 +19233,13 @@ function loadGlobalCredentials(globalDir2) {
 }
 function saveGlobalCredentials(globalDir2, providers) {
   const filePath = credentialsPath(globalDir2);
-  fs23.mkdirSync(globalDir2, { recursive: true, mode: 448 });
+  fs25.mkdirSync(globalDir2, { recursive: true, mode: 448 });
   const body = { version: 1, providers: providers.filter(isPersistable) };
   const tmp = `${filePath}.tmp`;
-  fs23.writeFileSync(tmp, JSON.stringify(body, null, 2), { encoding: "utf-8", mode: 384 });
-  fs23.renameSync(tmp, filePath);
+  fs25.writeFileSync(tmp, JSON.stringify(body, null, 2), { encoding: "utf-8", mode: 384 });
+  fs25.renameSync(tmp, filePath);
   try {
-    fs23.chmodSync(filePath, 384);
+    fs25.chmodSync(filePath, 384);
   } catch {
   }
 }
@@ -17939,7 +19274,7 @@ var ConfigManager = class {
   /** `globalDirOverride` exists for tests — never point it at the real home dir there. */
   constructor(workspacePath = process.cwd(), globalDirOverride) {
     this.workspacePath = workspacePath;
-    this.globalDir = globalDirOverride ?? path24.join(os6.homedir(), GLOBAL_CONFIG_DIR);
+    this.globalDir = globalDirOverride ?? path26.join(os6.homedir(), GLOBAL_CONFIG_DIR);
   }
   async load() {
     this.config = await this.loadConfig();
@@ -17953,8 +19288,8 @@ var ConfigManager = class {
     this.ignore = new CascadeIgnore();
     await this.ignore.load(this.workspacePath);
     this.cascadeMd = await loadCascadeMd(this.workspacePath);
-    this.keystore = new Keystore(path24.join(this.globalDir, GLOBAL_KEYSTORE_FILE));
-    this.store = new MemoryStore(path24.join(this.workspacePath, CASCADE_DB_FILE));
+    this.keystore = new Keystore(path26.join(this.globalDir, GLOBAL_KEYSTORE_FILE));
+    this.store = new MemoryStore(path26.join(this.workspacePath, CASCADE_DB_FILE));
     await this.injectEnvKeys();
     this.config.providers = mergeGlobalCredentials(this.config.providers, loadGlobalCredentials(this.globalDir));
     await this.ensureDefaultIdentity();
@@ -17979,9 +19314,9 @@ var ConfigManager = class {
     return this.workspacePath;
   }
   async save() {
-    const configPath = path24.join(this.workspacePath, CASCADE_CONFIG_FILE);
-    await fs4.mkdir(path24.dirname(configPath), { recursive: true });
-    await fs4.writeFile(configPath, JSON.stringify(this.config, null, 2), "utf-8");
+    const configPath = path26.join(this.workspacePath, CASCADE_CONFIG_FILE);
+    await fs5.mkdir(path26.dirname(configPath), { recursive: true });
+    await fs5.writeFile(configPath, JSON.stringify(this.config, null, 2), "utf-8");
     try {
       saveGlobalCredentials(this.globalDir, this.config.providers);
     } catch (err) {
@@ -18016,9 +19351,9 @@ var ConfigManager = class {
     return configProvider?.apiKey;
   }
   async loadConfig() {
-    const configPath = path24.join(this.workspacePath, CASCADE_CONFIG_FILE);
+    const configPath = path26.join(this.workspacePath, CASCADE_CONFIG_FILE);
     try {
-      const raw = await fs4.readFile(configPath, "utf-8");
+      const raw = await fs5.readFile(configPath, "utf-8");
       return validateConfig(JSON.parse(raw));
     } catch (err) {
       if (err.code === "ENOENT") {
@@ -18548,7 +19883,7 @@ function aggregateCostStats(sessions, opts = {}) {
 }
 
 // src/dashboard/server.ts
-var __dirname$1 = path24.dirname(fileURLToPath(import.meta.url));
+var __dirname$1 = path26.dirname(fileURLToPath(import.meta.url));
 var ORPHANED_ESCALATION_GRACE_MS = 3e4;
 var DashboardServer = class {
   app;
@@ -18828,14 +20163,14 @@ var DashboardServer = class {
    */
   persistConfig() {
     try {
-      const configPath = path24.join(this.workspacePath, CASCADE_CONFIG_FILE);
-      fs23.mkdirSync(path24.dirname(configPath), { recursive: true });
-      fs23.writeFileSync(configPath, JSON.stringify(this.config, null, 2), "utf-8");
+      const configPath = path26.join(this.workspacePath, CASCADE_CONFIG_FILE);
+      fs25.mkdirSync(path26.dirname(configPath), { recursive: true });
+      fs25.writeFileSync(configPath, JSON.stringify(this.config, null, 2), "utf-8");
     } catch (err) {
       console.warn(`[dashboard] Failed to persist config: ${err instanceof Error ? err.message : String(err)}`);
     }
     try {
-      saveGlobalCredentials(path24.join(os6.homedir(), GLOBAL_CONFIG_DIR), this.config.providers ?? []);
+      saveGlobalCredentials(path26.join(os6.homedir(), GLOBAL_CONFIG_DIR), this.config.providers ?? []);
     } catch (err) {
       console.warn(`[dashboard] Failed to sync global credentials: ${err instanceof Error ? err.message : String(err)}`);
     }
@@ -18850,15 +20185,15 @@ var DashboardServer = class {
   resolveDashboardSecret() {
     const fromConfig = this.config.dashboard.secret ?? process.env["CASCADE_DASHBOARD_SECRET"];
     if (fromConfig) return fromConfig;
-    const secretPath = path24.join(this.workspacePath, CASCADE_DASHBOARD_SECRET_FILE);
+    const secretPath = path26.join(this.workspacePath, CASCADE_DASHBOARD_SECRET_FILE);
     try {
-      if (fs23.existsSync(secretPath)) {
-        const existing = fs23.readFileSync(secretPath, "utf-8").trim();
+      if (fs25.existsSync(secretPath)) {
+        const existing = fs25.readFileSync(secretPath, "utf-8").trim();
         if (existing.length >= 16) return existing;
       }
       const generated = randomUUID();
-      fs23.mkdirSync(path24.dirname(secretPath), { recursive: true });
-      fs23.writeFileSync(secretPath, generated, { encoding: "utf-8", mode: 384 });
+      fs25.mkdirSync(path26.dirname(secretPath), { recursive: true });
+      fs25.writeFileSync(secretPath, generated, { encoding: "utf-8", mode: 384 });
       if (this.config.dashboard.auth) {
         console.warn(
           `Dashboard auth enabled with no secret configured; persisted a generated secret to ${secretPath}. Set CASCADE_DASHBOARD_SECRET or config.dashboard.secret to override.`
@@ -18885,7 +20220,7 @@ var DashboardServer = class {
   // ── Setup ─────────────────────────────────────
   getGlobalStore() {
     if (!this.globalStore) {
-      const globalDbPath = path24.join(os6.homedir(), GLOBAL_CONFIG_DIR, GLOBAL_RUNTIME_DB_FILE);
+      const globalDbPath = path26.join(os6.homedir(), GLOBAL_CONFIG_DIR, GLOBAL_RUNTIME_DB_FILE);
       this.globalStore = new MemoryStore(globalDbPath);
     }
     return this.globalStore;
@@ -19265,12 +20600,12 @@ ${prompt}`;
     }
   }
   watchRuntimeChanges() {
-    const workspaceDbPath = path24.join(this.workspacePath, CASCADE_DB_FILE);
-    const globalDbPath = path24.join(os6.homedir(), GLOBAL_CONFIG_DIR, GLOBAL_RUNTIME_DB_FILE);
+    const workspaceDbPath = path26.join(this.workspacePath, CASCADE_DB_FILE);
+    const globalDbPath = path26.join(os6.homedir(), GLOBAL_CONFIG_DIR, GLOBAL_RUNTIME_DB_FILE);
     const watchPaths = [workspaceDbPath, globalDbPath].filter((p, index, arr) => arr.indexOf(p) === index);
     for (const watchPath of watchPaths) {
-      if (!fs23.existsSync(watchPath)) continue;
-      fs23.watchFile(watchPath, { interval: 3e3 }, () => {
+      if (!fs25.existsSync(watchPath)) continue;
+      fs25.watchFile(watchPath, { interval: 3e3 }, () => {
         this.throttledBroadcast(watchPath === globalDbPath ? "global" : "workspace");
       });
     }
@@ -19392,7 +20727,7 @@ ${prompt}`;
       const sessionId = req.params.id;
       this.store.deleteSession(sessionId);
       this.store.deleteRuntimeSession(sessionId);
-      const globalDbPath = path24.join(os6.homedir(), GLOBAL_CONFIG_DIR, GLOBAL_RUNTIME_DB_FILE);
+      const globalDbPath = path26.join(os6.homedir(), GLOBAL_CONFIG_DIR, GLOBAL_RUNTIME_DB_FILE);
       const globalStore = new MemoryStore(globalDbPath);
       try {
         globalStore.deleteRuntimeSession(sessionId);
@@ -19485,7 +20820,7 @@ ${prompt}`;
     });
     this.app.delete("/api/sessions", auth2, (req, res) => {
       const body = req.body;
-      const globalDbPath = path24.join(os6.homedir(), GLOBAL_CONFIG_DIR, GLOBAL_RUNTIME_DB_FILE);
+      const globalDbPath = path26.join(os6.homedir(), GLOBAL_CONFIG_DIR, GLOBAL_RUNTIME_DB_FILE);
       if (body?.ids && Array.isArray(body.ids) && body.ids.length > 0) {
         const globalStore = new MemoryStore(globalDbPath);
         try {
@@ -19508,7 +20843,7 @@ ${prompt}`;
     });
     this.app.delete("/api/runtime", auth2, (_req, res) => {
       this.store.deleteAllRuntimeNodes();
-      const globalDbPath = path24.join(os6.homedir(), GLOBAL_CONFIG_DIR, GLOBAL_RUNTIME_DB_FILE);
+      const globalDbPath = path26.join(os6.homedir(), GLOBAL_CONFIG_DIR, GLOBAL_RUNTIME_DB_FILE);
       const globalStore = new MemoryStore(globalDbPath);
       try {
         globalStore.deleteAllRuntimeNodes();
@@ -19594,12 +20929,12 @@ ${prompt}`;
       if (body["tierLimits"]) this.config.tierLimits = { ...this.config.tierLimits, ...body["tierLimits"] };
       if (body["budget"]) this.config.budget = { ...this.config.budget, ...body["budget"] };
       try {
-        const configPath = path24.join(this.workspacePath, CASCADE_CONFIG_FILE);
-        const existing = fs23.existsSync(configPath) ? JSON.parse(fs23.readFileSync(configPath, "utf-8")) : {};
+        const configPath = path26.join(this.workspacePath, CASCADE_CONFIG_FILE);
+        const existing = fs25.existsSync(configPath) ? JSON.parse(fs25.readFileSync(configPath, "utf-8")) : {};
         const updated = { ...existing, tierLimits: this.config.tierLimits, budget: this.config.budget };
         const tmp = configPath + ".tmp";
-        fs23.writeFileSync(tmp, JSON.stringify(updated, null, 2), "utf-8");
-        fs23.renameSync(tmp, configPath);
+        fs25.writeFileSync(tmp, JSON.stringify(updated, null, 2), "utf-8");
+        fs25.renameSync(tmp, configPath);
         res.json({ ok: true });
       } catch (err) {
         res.status(500).json({ error: `Failed to save config: ${err instanceof Error ? err.message : String(err)}` });
@@ -19627,7 +20962,7 @@ ${prompt}`;
     this.app.get("/api/runtime", auth2, (req, res) => {
       const scope = req.query["scope"] ?? "workspace";
       if (scope === "global") {
-        const globalDbPath = path24.join(os6.homedir(), GLOBAL_CONFIG_DIR, GLOBAL_RUNTIME_DB_FILE);
+        const globalDbPath = path26.join(os6.homedir(), GLOBAL_CONFIG_DIR, GLOBAL_RUNTIME_DB_FILE);
         const globalStore = new MemoryStore(globalDbPath);
         try {
           res.json({
@@ -19968,13 +21303,13 @@ ${prompt}`;
         res.status(500).json({ error: err instanceof Error ? err.message : String(err) });
       }
     });
-    const prodPath = path24.resolve(__dirname$1, "../web/dist");
-    const devPath = path24.resolve(__dirname$1, "../../web/dist");
-    const webDistPath = fs23.existsSync(prodPath) ? prodPath : devPath;
-    if (fs23.existsSync(webDistPath)) {
+    const prodPath = path26.resolve(__dirname$1, "../web/dist");
+    const devPath = path26.resolve(__dirname$1, "../../web/dist");
+    const webDistPath = fs25.existsSync(prodPath) ? prodPath : devPath;
+    if (fs25.existsSync(webDistPath)) {
       this.app.use(express.static(webDistPath));
       this.app.get("*", (_req, res) => {
-        res.sendFile(path24.join(webDistPath, "index.html"));
+        res.sendFile(path26.join(webDistPath, "index.html"));
       });
     } else {
       this.app.get("/", (_req, res) => {
@@ -20161,14 +21496,14 @@ function planRetrieval(ctx) {
 }
 var CLOUD_SESSION_FILE = "cloud-session.json";
 function globalDir(homeDir = os6.homedir()) {
-  return path24.join(homeDir, GLOBAL_CONFIG_DIR);
+  return path26.join(homeDir, GLOBAL_CONFIG_DIR);
 }
 function cloudSessionPath(dir = globalDir()) {
-  return path24.join(dir, CLOUD_SESSION_FILE);
+  return path26.join(dir, CLOUD_SESSION_FILE);
 }
 function loadCloudSession(dir = globalDir()) {
   try {
-    const raw = fs23.readFileSync(cloudSessionPath(dir), "utf-8");
+    const raw = fs25.readFileSync(cloudSessionPath(dir), "utf-8");
     const parsed = JSON.parse(raw);
     if (!parsed?.refreshToken || !parsed?.serverUrl) return null;
     return parsed;
@@ -20177,17 +21512,17 @@ function loadCloudSession(dir = globalDir()) {
   }
 }
 function saveCloudSession(session, dir = globalDir()) {
-  fs23.mkdirSync(dir, { recursive: true, mode: 448 });
+  fs25.mkdirSync(dir, { recursive: true, mode: 448 });
   const file = cloudSessionPath(dir);
-  fs23.writeFileSync(file, JSON.stringify(session, null, 2), { mode: 384 });
+  fs25.writeFileSync(file, JSON.stringify(session, null, 2), { mode: 384 });
   try {
-    fs23.chmodSync(file, 384);
+    fs25.chmodSync(file, 384);
   } catch {
   }
 }
 function clearCloudSession(dir = globalDir()) {
   try {
-    fs23.rmSync(cloudSessionPath(dir));
+    fs25.rmSync(cloudSessionPath(dir));
   } catch {
   }
 }
@@ -20359,16 +21694,16 @@ var CloudClient = class _CloudClient {
     return (await this.refresh()).accessToken;
   }
   /** Authenticated request that refreshes once on a 401 (e.g. server-side revoke). */
-  async authed(path26, init = {}) {
-    const call = (token) => fetch(this.url(path26), { ...init, headers: { ...init.headers ?? {}, Authorization: `Bearer ${token}` } });
+  async authed(path28, init = {}) {
+    const call = (token) => fetch(this.url(path28), { ...init, headers: { ...init.headers ?? {}, Authorization: `Bearer ${token}` } });
     let res = await call(await this.accessToken());
     if (res.status === 401) res = await call((await this.refresh()).accessToken);
     if (!res.ok) throw new Error(`Request failed (${res.status}).`);
     const text = await res.text();
     return text ? JSON.parse(text) : {};
   }
-  authedGet(path26) {
-    return this.authed(path26);
+  authedGet(path28) {
+    return this.authed(path28);
   }
   async fetchMe(token) {
     const res = await fetch(this.url("/api/me"), { headers: { Authorization: `Bearer ${token}` } });
@@ -20705,6 +22040,6 @@ function applySyncBundle(bundle, config) {
   return next;
 }
 
-export { AZURE_BASE_MODELS, AZURE_BASE_URL_TEMPLATE, AuditLogger, CASCADE_AUDIT_FILE, CASCADE_CONFIG_DIR, CASCADE_CONFIG_FILE, CASCADE_DASHBOARD_SECRET_FILE, CASCADE_DB_FILE, CASCADE_IGNORE_FILE, CASCADE_KEYSTORE_FILE, CASCADE_MD_FILE, CASCADE_VERSION, CHARS_PER_TOKEN, COMPLEXITY_T2_COUNT, Cascade, CascadeCancelledError, CascadeIgnore, CascadeRouter, CascadeToolError, CloudClient, CodeSearchTool, ConfigManager, CurrentPageTool, DEFAULT_API_PORT, DEFAULT_APPROVAL_REQUIRED, DEFAULT_AUTO_SUMMARIZE_AT, DEFAULT_CLOUD_URL, DEFAULT_CONTEXT_LIMIT, DEFAULT_DASHBOARD_PORT, DEFAULT_MAX_SESSION_MESSAGES, DEFAULT_RETENTION_DAYS, DEFAULT_THEME, DashboardServer, FileMcpOAuthStore, GITHUB_MODELS_API_VERSION, GITHUB_MODELS_CATALOG_URL, GITHUB_MODELS_INFERENCE_URL, GLOBAL_CONFIG_DIR, GLOBAL_CREDENTIALS_FILE, GLOBAL_DB_FILE, GLOBAL_KEYSTORE_FILE, GLOBAL_RUNTIME_DB_FILE, GraphRetriever, GraphSearchTool, HooksRunner, Keystore, LLMReranker, LM_STUDIO_BASE_URL, MAX_PAGE_TEXT_CHARS, MCP_TOOL_PREFIX, MODELS, McpClient, McpOAuthProvider, MemoryStore, OLLAMA_BASE_URL, OpenAICompatibleEmbedder, PROVIDER_DISPLAY_NAMES, Retriever, SqliteVectorStore, T1Administrator, T1_MODEL_PRIORITY, T2Manager, T2_MODEL_PRIORITY, T3Worker, T3_MODEL_PRIORITY, THEME_NAMES, TOOL_NAMES, TaskScheduler, Telemetry, ToolRegistry, VISION_MODEL_PRIORITY, WorkspaceIndex, applySyncBundle, azureModelForDeployment, beginMcpOAuth, buildManifest, buildSessionTranscript, cagCharBudget, chatCompleterFromProviders, chunkCode, chunkText2 as chunkText, completeMcpOAuth, connectMcpWithLoopbackOAuth, createCascade, decryptJSON as decryptSyncBlob, diffManifest, disambiguateMcpServerNames, discoverMcpAuthServer, discoverMcpTools, distillSessionFacts, embedderFromProviders, encryptJSON as encryptSyncBlob, fileOAuthProvider, gatherSyncBundle, hashContent, heuristicCodeChunker, inferAzureBaseModel, isMcpToolName, mcpServerPrefix, mcpToolName, nodeHttpFetch, parseRankOrder, planRetrieval, preferIpv4Host, reciprocalRankFusion, refreshMcpToken, removeMcpServerDenials, runCascade, sessionWorthRemembering, streamCascade, uniqueMcpServerName };
+export { AZURE_BASE_MODELS, AZURE_BASE_URL_TEMPLATE, AuditLogger, CASCADE_AUDIT_FILE, CASCADE_CONFIG_DIR, CASCADE_CONFIG_FILE, CASCADE_DASHBOARD_SECRET_FILE, CASCADE_DB_FILE, CASCADE_IGNORE_FILE, CASCADE_KEYSTORE_FILE, CASCADE_MD_FILE, CASCADE_VERSION, CHARS_PER_TOKEN, COMPLEXITY_T2_COUNT, Cascade, CascadeCancelledError, CascadeIgnore, CascadeRouter, CascadeToolError, CloudClient, CodeSearchTool, ConfigManager, CurrentPageTool, DEFAULT_API_PORT, DEFAULT_APPROVAL_REQUIRED, DEFAULT_AUTO_SUMMARIZE_AT, DEFAULT_CLOUD_URL, DEFAULT_CONTEXT_LIMIT, DEFAULT_DASHBOARD_PORT, DEFAULT_MAX_SESSION_MESSAGES, DEFAULT_RETENTION_DAYS, DEFAULT_THEME, DOCUMENT_MIME, DashboardServer, DependencyScheduler, FileMcpOAuthStore, GITHUB_MODELS_API_VERSION, GITHUB_MODELS_CATALOG_URL, GITHUB_MODELS_INFERENCE_URL, GLOBAL_CONFIG_DIR, GLOBAL_CREDENTIALS_FILE, GLOBAL_DB_FILE, GLOBAL_KEYSTORE_FILE, GLOBAL_RUNTIME_DB_FILE, GenerateDocumentTool, GraphRetriever, GraphSearchTool, HooksRunner, Keystore, LLMReranker, LM_STUDIO_BASE_URL, MAX_PAGE_TEXT_CHARS, MCP_TOOL_PREFIX, MODELS, McpClient, McpOAuthProvider, MemoryStore, OLLAMA_BASE_URL, OpenAICompatibleEmbedder, PROVIDER_DISPLAY_NAMES, RESUME_SCHEMA_VERSION, ResumeStore, Retriever, SqliteVectorStore, T1Administrator, T1_MODEL_PRIORITY, T2Manager, T2_MODEL_PRIORITY, T3Worker, T3_MODEL_PRIORITY, THEME_NAMES, TOOL_NAMES, TaskGraphValidationError, TaskScheduler, Telemetry, ToolRegistry, VISION_MODEL_PRIORITY, WorkspaceIndex, applySyncBundle, azureModelForDeployment, beginMcpOAuth, buildDocumentTools, buildManifest, buildSessionTranscript, bytesToBase64, cagCharBudget, chartKind, chartToTableRows, chatCompleterFromProviders, chunkCode, chunkText2 as chunkText, compileSectionGraph, compileSubtaskGraph, compileTaskGraph, completeMcpOAuth, connectMcpWithLoopbackOAuth, createCascade, decryptJSON as decryptSyncBlob, diffManifest, disambiguateMcpServerNames, discoverMcpAuthServer, discoverMcpTools, distillSessionFacts, embedderFromProviders, encryptJSON as encryptSyncBlob, evaluateAcceptance, extractCharts, failures, fileExt, fileOAuthProvider, gatherSyncBundle, hashContent, heuristicCodeChunker, inferAzureBaseModel, inlineRuns, isDocumentFormat, isMcpToolName, matchImageLine, mcpServerPrefix, mcpToolName, nodeHttpFetch, parseBlocks, parseChartSpec, parseDelimited, parseRankOrder, parseSlide, planRetrieval, preferIpv4Host, reciprocalRankFusion, refreshMcpToken, removeMcpServerDenials, renderDocument, renderDocx, renderPptx, renderXlsx, runCascade, sessionWorthRemembering, sniffImage, splitSlides, streamCascade, stripInline, summarizeCompleted, undecided, uniqueMcpServerName };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map