cascade-ai 0.76.0 → 0.78.0

package/dist/cli.cjs

@@ -1,6 +1,6 @@
 'use strict';
 
-var dns = require('dns');
+var dnsCallback = require('dns');
 var http = require('http');
 var https = require('https');
 var zlib = require('zlib');
@@ -9,8 +9,8 @@ var Anthropic = require('@anthropic-ai/sdk');
 var OpenAI = require('openai');
 var genai = require('@google/genai');
 var Database2 = require('better-sqlite3');
-var path35 = require('path');
-var fs32 = require('fs');
+var path36 = require('path');
+var fs33 = require('fs');
 var os10 = require('os');
 var crypto = require('crypto');
 var ink = require('ink');
@@ -31,6 +31,7 @@ var simpleGit = require('simple-git');
 var PDFDocument = require('pdfkit');
 var dns2 = require('dns/promises');
 var net = require('net');
+var undici = require('undici');
 var index_js = require('@modelcontextprotocol/sdk/client/index.js');
 var stdio_js = require('@modelcontextprotocol/sdk/client/stdio.js');
 var streamableHttp_js = require('@modelcontextprotocol/sdk/client/streamableHttp.js');
@@ -70,15 +71,15 @@ function _interopNamespace(e) {
   return Object.freeze(n);
 }
 
-var dns__default = /*#__PURE__*/_interopDefault(dns);
+var dnsCallback__default = /*#__PURE__*/_interopDefault(dnsCallback);
 var http__default = /*#__PURE__*/_interopDefault(http);
 var https__default = /*#__PURE__*/_interopDefault(https);
 var zlib__default = /*#__PURE__*/_interopDefault(zlib);
 var Anthropic__default = /*#__PURE__*/_interopDefault(Anthropic);
 var OpenAI__default = /*#__PURE__*/_interopDefault(OpenAI);
 var Database2__default = /*#__PURE__*/_interopDefault(Database2);
-var path35__default = /*#__PURE__*/_interopDefault(path35);
-var fs32__default = /*#__PURE__*/_interopDefault(fs32);
+var path36__default = /*#__PURE__*/_interopDefault(path36);
+var fs33__default = /*#__PURE__*/_interopDefault(fs33);
 var os10__default = /*#__PURE__*/_interopDefault(os10);
 var crypto__default = /*#__PURE__*/_interopDefault(crypto);
 var React2__default = /*#__PURE__*/_interopDefault(React2);
@@ -1848,7 +1849,7 @@ var CASCADE_VERSION, CASCADE_CONFIG_FILE, CASCADE_DB_FILE, CASCADE_DASHBOARD_SEC
 var init_constants = __esm({
   "src/constants.ts"() {
     init_pricing();
-    CASCADE_VERSION = "0.76.0";
+    CASCADE_VERSION = "0.78.0";
     CASCADE_CONFIG_FILE = ".cascade/config.json";
     CASCADE_DB_FILE = ".cascade/memory.db";
     CASCADE_DASHBOARD_SECRET_FILE = ".cascade/dashboard-secret";
@@ -1861,64 +1862,88 @@ var init_constants = __esm({
     DEFAULT_CONTEXT_LIMIT = 2e5;
     DEFAULT_AUTO_SUMMARIZE_AT = 15e4;
     MODELS = {
-      // Anthropic
-      "claude-opus-4": {
-        id: "claude-opus-4-5",
-        name: "Claude Opus 4",
+      // Anthropic — active Claude API models (2026-08-27).
+      "claude-fable-5": {
+        id: "claude-fable-5",
+        name: "Claude Fable 5",
         provider: "anthropic",
-        contextWindow: 2e5,
+        contextWindow: 1e6,
         isVisionCapable: true,
-        inputCostPer1kTokens: 0.015,
-        outputCostPer1kTokens: 0.075,
-        maxOutputTokens: 32e3,
+        inputCostPer1kTokens: 0.01,
+        outputCostPer1kTokens: 0.05,
+        maxOutputTokens: 128e3,
         supportsStreaming: true,
         isLocal: false
       },
-      "claude-sonnet-4": {
-        id: "claude-sonnet-4-5",
-        name: "Claude Sonnet 4",
+      "claude-opus-5": {
+        id: "claude-opus-5",
+        name: "Claude Opus 5",
         provider: "anthropic",
-        contextWindow: 2e5,
+        contextWindow: 1e6,
         isVisionCapable: true,
-        inputCostPer1kTokens: 3e-3,
-        outputCostPer1kTokens: 0.015,
-        maxOutputTokens: 16e3,
+        inputCostPer1kTokens: 5e-3,
+        outputCostPer1kTokens: 0.025,
+        maxOutputTokens: 128e3,
         supportsStreaming: true,
         isLocal: false
       },
-      "claude-haiku-3-5": {
-        id: "claude-haiku-3-5-20251001",
-        name: "Claude Haiku 3.5",
+      "claude-opus-4-8": {
+        id: "claude-opus-4-8",
+        name: "Claude Opus 4.8",
         provider: "anthropic",
-        contextWindow: 2e5,
+        contextWindow: 1e6,
         isVisionCapable: true,
-        inputCostPer1kTokens: 8e-4,
-        outputCostPer1kTokens: 4e-3,
-        maxOutputTokens: 8e3,
+        inputCostPer1kTokens: 5e-3,
+        outputCostPer1kTokens: 0.025,
+        maxOutputTokens: 128e3,
         supportsStreaming: true,
         isLocal: false
       },
-      "claude-haiku-4-5": {
-        id: "claude-haiku-4-5-20251001",
-        name: "Claude Haiku 4.5",
+      "claude-opus-4-7": {
+        id: "claude-opus-4-7",
+        name: "Claude Opus 4.7",
         provider: "anthropic",
-        contextWindow: 2e5,
+        contextWindow: 1e6,
         isVisionCapable: true,
-        inputCostPer1kTokens: 8e-4,
-        outputCostPer1kTokens: 4e-3,
-        maxOutputTokens: 8e3,
+        inputCostPer1kTokens: 5e-3,
+        outputCostPer1kTokens: 0.025,
+        maxOutputTokens: 128e3,
         supportsStreaming: true,
         isLocal: false
       },
-      "claude-opus-4-8": {
-        id: "claude-opus-4-8",
-        name: "Claude Opus 4.8",
+      "claude-opus-4-6": {
+        id: "claude-opus-4-6",
+        name: "Claude Opus 4.6",
+        provider: "anthropic",
+        contextWindow: 1e6,
+        isVisionCapable: true,
+        inputCostPer1kTokens: 5e-3,
+        outputCostPer1kTokens: 0.025,
+        maxOutputTokens: 128e3,
+        supportsStreaming: true,
+        isLocal: false
+      },
+      "claude-opus-4-5": {
+        id: "claude-opus-4-5-20251101",
+        name: "Claude Opus 4.5",
         provider: "anthropic",
         contextWindow: 2e5,
         isVisionCapable: true,
-        inputCostPer1kTokens: 0.015,
-        outputCostPer1kTokens: 0.075,
-        maxOutputTokens: 32e3,
+        inputCostPer1kTokens: 5e-3,
+        outputCostPer1kTokens: 0.025,
+        maxOutputTokens: 64e3,
+        supportsStreaming: true,
+        isLocal: false
+      },
+      "claude-sonnet-5": {
+        id: "claude-sonnet-5",
+        name: "Claude Sonnet 5",
+        provider: "anthropic",
+        contextWindow: 1e6,
+        isVisionCapable: true,
+        inputCostPer1kTokens: 2e-3,
+        outputCostPer1kTokens: 0.01,
+        maxOutputTokens: 128e3,
         supportsStreaming: true,
         isLocal: false
       },
@@ -1926,76 +1951,135 @@ var init_constants = __esm({
         id: "claude-sonnet-4-6",
         name: "Claude Sonnet 4.6",
         provider: "anthropic",
+        contextWindow: 1e6,
+        isVisionCapable: true,
+        inputCostPer1kTokens: 3e-3,
+        outputCostPer1kTokens: 0.015,
+        maxOutputTokens: 64e3,
+        supportsStreaming: true,
+        isLocal: false
+      },
+      "claude-sonnet-4-5": {
+        id: "claude-sonnet-4-5-20250929",
+        name: "Claude Sonnet 4.5",
+        provider: "anthropic",
         contextWindow: 2e5,
         isVisionCapable: true,
         inputCostPer1kTokens: 3e-3,
         outputCostPer1kTokens: 0.015,
-        maxOutputTokens: 16e3,
+        maxOutputTokens: 64e3,
         supportsStreaming: true,
         isLocal: false
       },
-      // OpenAI
-      "gpt-4o": {
-        id: "gpt-4o",
-        name: "GPT-4o",
+      "claude-haiku-4-5": {
+        id: "claude-haiku-4-5-20251001",
+        name: "Claude Haiku 4.5",
+        provider: "anthropic",
+        contextWindow: 2e5,
+        isVisionCapable: true,
+        inputCostPer1kTokens: 1e-3,
+        outputCostPer1kTokens: 5e-3,
+        maxOutputTokens: 64e3,
+        supportsStreaming: true,
+        isLocal: false
+      },
+      // OpenAI — active chat-capable models used by Cascade's Chat Completions path.
+      "gpt-5.6-sol": {
+        id: "gpt-5.6-sol",
+        name: "GPT-5.6 Sol",
         provider: "openai",
-        contextWindow: 128e3,
+        contextWindow: 105e4,
+        isVisionCapable: true,
+        inputCostPer1kTokens: 4e-3,
+        outputCostPer1kTokens: 0.02,
+        maxOutputTokens: 128e3,
+        supportsStreaming: true,
+        isLocal: false
+      },
+      "gpt-5.6-terra": {
+        id: "gpt-5.6-terra",
+        name: "GPT-5.6 Terra",
+        provider: "openai",
+        contextWindow: 105e4,
+        isVisionCapable: true,
+        inputCostPer1kTokens: 2e-3,
+        outputCostPer1kTokens: 0.012,
+        maxOutputTokens: 128e3,
+        supportsStreaming: true,
+        isLocal: false
+      },
+      "gpt-5.6-luna": {
+        id: "gpt-5.6-luna",
+        name: "GPT-5.6 Luna",
+        provider: "openai",
+        contextWindow: 105e4,
+        isVisionCapable: true,
+        inputCostPer1kTokens: 2e-4,
+        outputCostPer1kTokens: 12e-4,
+        maxOutputTokens: 128e3,
+        supportsStreaming: true,
+        isLocal: false
+      },
+      "gpt-5.5": {
+        id: "gpt-5.5",
+        name: "GPT-5.5",
+        provider: "openai",
+        contextWindow: 105e4,
         isVisionCapable: true,
         inputCostPer1kTokens: 5e-3,
-        outputCostPer1kTokens: 0.015,
-        maxOutputTokens: 16e3,
+        outputCostPer1kTokens: 0.03,
+        maxOutputTokens: 128e3,
         supportsStreaming: true,
         isLocal: false
       },
-      "gpt-4o-mini": {
-        id: "gpt-4o-mini",
-        name: "GPT-4o Mini",
+      "gpt-5.4": {
+        id: "gpt-5.4",
+        name: "GPT-5.4",
         provider: "openai",
-        contextWindow: 128e3,
+        contextWindow: 105e4,
         isVisionCapable: true,
-        inputCostPer1kTokens: 15e-5,
-        outputCostPer1kTokens: 6e-4,
-        maxOutputTokens: 16e3,
+        inputCostPer1kTokens: 25e-4,
+        outputCostPer1kTokens: 0.015,
+        maxOutputTokens: 128e3,
         supportsStreaming: true,
         isLocal: false
       },
-      "gpt-4.1": {
-        id: "gpt-4.1",
-        name: "GPT-4.1",
+      "gpt-5.4-mini": {
+        id: "gpt-5.4-mini",
+        name: "GPT-5.4 Mini",
         provider: "openai",
-        contextWindow: 1047576,
+        contextWindow: 4e5,
         isVisionCapable: true,
-        inputCostPer1kTokens: 2e-3,
-        outputCostPer1kTokens: 8e-3,
-        maxOutputTokens: 32768,
+        inputCostPer1kTokens: 75e-5,
+        outputCostPer1kTokens: 45e-4,
+        maxOutputTokens: 128e3,
         supportsStreaming: true,
         isLocal: false
       },
-      "gpt-4.1-mini": {
-        id: "gpt-4.1-mini",
-        name: "GPT-4.1 Mini",
+      "gpt-5.4-nano": {
+        id: "gpt-5.4-nano",
+        name: "GPT-5.4 Nano",
         provider: "openai",
-        contextWindow: 1047576,
+        contextWindow: 4e5,
         isVisionCapable: true,
-        inputCostPer1kTokens: 4e-4,
-        outputCostPer1kTokens: 16e-4,
-        maxOutputTokens: 32768,
+        inputCostPer1kTokens: 2e-4,
+        outputCostPer1kTokens: 125e-5,
+        maxOutputTokens: 128e3,
         supportsStreaming: true,
         isLocal: false
       },
-      "gpt-4.1-nano": {
-        id: "gpt-4.1-nano",
-        name: "GPT-4.1 Nano",
+      "gpt-5.2": {
+        id: "gpt-5.2",
+        name: "GPT-5.2",
         provider: "openai",
-        contextWindow: 1047576,
+        contextWindow: 4e5,
         isVisionCapable: true,
-        inputCostPer1kTokens: 1e-4,
-        outputCostPer1kTokens: 4e-4,
-        maxOutputTokens: 32768,
+        inputCostPer1kTokens: 175e-5,
+        outputCostPer1kTokens: 0.014,
+        maxOutputTokens: 128e3,
         supportsStreaming: true,
         isLocal: false
       },
-      // GPT-5 family (offline baseline pricing; the live fetch keeps it current).
       "gpt-5": {
         id: "gpt-5",
         name: "GPT-5",
@@ -2032,79 +2116,149 @@ var init_constants = __esm({
         supportsStreaming: true,
         isLocal: false
       },
-      // GPT-5 point releases — genuinely distinct capability, so they route as their
-      // own families (not folded into gpt-5). Offline baseline pricing; live fetch
-      // keeps it current. gpt-5.5 "Spud" (Apr 2026) is the current SWE-bench leader.
-      "gpt-5.5": {
-        id: "gpt-5.5",
-        name: "GPT-5.5",
+      "gpt-4.1": {
+        id: "gpt-4.1",
+        name: "GPT-4.1",
         provider: "openai",
-        contextWindow: 4e5,
+        contextWindow: 1047576,
         isVisionCapable: true,
-        inputCostPer1kTokens: 25e-4,
-        outputCostPer1kTokens: 0.02,
-        maxOutputTokens: 128e3,
+        inputCostPer1kTokens: 2e-3,
+        outputCostPer1kTokens: 8e-3,
+        maxOutputTokens: 32768,
         supportsStreaming: true,
         isLocal: false
       },
-      "gpt-5.4": {
-        id: "gpt-5.4",
-        name: "GPT-5.4",
+      "gpt-4.1-mini": {
+        id: "gpt-4.1-mini",
+        name: "GPT-4.1 Mini",
         provider: "openai",
-        contextWindow: 4e5,
+        contextWindow: 1047576,
         isVisionCapable: true,
-        inputCostPer1kTokens: 125e-5,
+        inputCostPer1kTokens: 4e-4,
+        outputCostPer1kTokens: 16e-4,
+        maxOutputTokens: 32768,
+        supportsStreaming: true,
+        isLocal: false
+      },
+      "gpt-4.1-nano": {
+        id: "gpt-4.1-nano",
+        name: "GPT-4.1 Nano",
+        provider: "openai",
+        contextWindow: 1047576,
+        isVisionCapable: true,
+        inputCostPer1kTokens: 1e-4,
+        outputCostPer1kTokens: 4e-4,
+        maxOutputTokens: 32768,
+        supportsStreaming: true,
+        isLocal: false
+      },
+      "gpt-4o": {
+        id: "gpt-4o",
+        name: "GPT-4o",
+        provider: "openai",
+        contextWindow: 128e3,
+        isVisionCapable: true,
+        inputCostPer1kTokens: 25e-4,
         outputCostPer1kTokens: 0.01,
-        maxOutputTokens: 128e3,
+        maxOutputTokens: 16e3,
         supportsStreaming: true,
         isLocal: false
       },
-      "gpt-5.4-mini": {
-        id: "gpt-5.4-mini",
-        name: "GPT-5.4 Mini",
+      "gpt-4o-mini": {
+        id: "gpt-4o-mini",
+        name: "GPT-4o Mini",
         provider: "openai",
-        contextWindow: 4e5,
+        contextWindow: 128e3,
         isVisionCapable: true,
-        inputCostPer1kTokens: 25e-5,
-        outputCostPer1kTokens: 2e-3,
-        maxOutputTokens: 128e3,
+        inputCostPer1kTokens: 15e-5,
+        outputCostPer1kTokens: 6e-4,
+        maxOutputTokens: 16e3,
         supportsStreaming: true,
         isLocal: false
       },
-      // Google
-      "gemini-2.0-flash": {
-        id: "gemini-2.0-flash",
-        name: "Gemini 2.0 Flash",
+      // Google Gemini — active GA + preview chat models. Gemini 2.0/1.5 are no
+      // longer advertised because the Gemini API shut those generations down.
+      "gemini-3.7-flash": {
+        id: "gemini-3.7-flash",
+        name: "Gemini 3.7 Flash",
         provider: "gemini",
-        contextWindow: 1e6,
+        contextWindow: 1048576,
         isVisionCapable: true,
-        inputCostPer1kTokens: 1e-4,
-        outputCostPer1kTokens: 4e-4,
-        maxOutputTokens: 8e3,
+        inputCostPer1kTokens: 75e-5,
+        outputCostPer1kTokens: 375e-5,
+        maxOutputTokens: 65536,
         supportsStreaming: true,
         isLocal: false
       },
-      "gemini-1.5-pro": {
-        id: "gemini-1.5-pro",
-        name: "Gemini 1.5 Pro",
+      "gemini-3.6-flash": {
+        id: "gemini-3.6-flash",
+        name: "Gemini 3.6 Flash",
         provider: "gemini",
-        contextWindow: 1e6,
+        contextWindow: 1048576,
         isVisionCapable: true,
-        inputCostPer1kTokens: 125e-5,
-        outputCostPer1kTokens: 5e-3,
-        maxOutputTokens: 8e3,
+        inputCostPer1kTokens: 75e-5,
+        outputCostPer1kTokens: 375e-5,
+        maxOutputTokens: 65536,
         supportsStreaming: true,
         isLocal: false
       },
-      "gemini-2.0-flash-lite": {
-        id: "gemini-2.0-flash-lite",
-        name: "Gemini 2.0 Flash-Lite",
+      "gemini-3.5-flash": {
+        id: "gemini-3.5-flash",
+        name: "Gemini 3.5 Flash",
         provider: "gemini",
-        contextWindow: 1e6,
+        contextWindow: 1048576,
         isVisionCapable: true,
-        inputCostPer1kTokens: 5e-5,
-        outputCostPer1kTokens: 2e-4,
-        maxOutputTokens: 8e3,
+        inputCostPer1kTokens: 15e-4,
+        outputCostPer1kTokens: 9e-3,
+        maxOutputTokens: 65536,
+        supportsStreaming: true,
+        isLocal: false
+      },
+      "gemini-3.5-flash-lite": {
+        id: "gemini-3.5-flash-lite",
+        name: "Gemini 3.5 Flash-Lite",
+        provider: "gemini",
+        contextWindow: 1048576,
+        isVisionCapable: true,
+        inputCostPer1kTokens: 3e-4,
+        outputCostPer1kTokens: 25e-4,
+        maxOutputTokens: 65536,
+        supportsStreaming: true,
+        isLocal: false
+      },
+      "gemini-3.1-flash-lite": {
+        id: "gemini-3.1-flash-lite",
+        name: "Gemini 3.1 Flash-Lite",
+        provider: "gemini",
+        contextWindow: 1048576,
+        isVisionCapable: true,
+        inputCostPer1kTokens: 25e-5,
+        outputCostPer1kTokens: 15e-4,
+        maxOutputTokens: 65536,
+        supportsStreaming: true,
+        isLocal: false
+      },
+      "gemini-3.1-pro-preview": {
+        id: "gemini-3.1-pro-preview",
+        name: "Gemini 3.1 Pro Preview",
+        provider: "gemini",
+        contextWindow: 1048576,
+        isVisionCapable: true,
+        inputCostPer1kTokens: 2e-3,
+        outputCostPer1kTokens: 0.012,
+        maxOutputTokens: 65536,
+        supportsStreaming: true,
+        isLocal: false
+      },
+      "gemini-3-flash-preview": {
+        id: "gemini-3-flash-preview",
+        name: "Gemini 3 Flash Preview",
+        provider: "gemini",
+        contextWindow: 1048576,
+        isVisionCapable: true,
+        inputCostPer1kTokens: 5e-4,
+        outputCostPer1kTokens: 3e-3,
+        maxOutputTokens: 65536,
         supportsStreaming: true,
         isLocal: false
       },
@@ -2112,7 +2266,7 @@ var init_constants = __esm({
         id: "gemini-2.5-pro",
         name: "Gemini 2.5 Pro",
         provider: "gemini",
-        contextWindow: 1e6,
+        contextWindow: 1048576,
         isVisionCapable: true,
         inputCostPer1kTokens: 125e-5,
         outputCostPer1kTokens: 0.01,
@@ -2124,10 +2278,22 @@ var init_constants = __esm({
         id: "gemini-2.5-flash",
         name: "Gemini 2.5 Flash",
         provider: "gemini",
-        contextWindow: 1e6,
+        contextWindow: 1048576,
         isVisionCapable: true,
-        inputCostPer1kTokens: 15e-5,
-        outputCostPer1kTokens: 6e-4,
+        inputCostPer1kTokens: 3e-4,
+        outputCostPer1kTokens: 25e-4,
+        maxOutputTokens: 65536,
+        supportsStreaming: true,
+        isLocal: false
+      },
+      "gemini-2.5-flash-lite": {
+        id: "gemini-2.5-flash-lite",
+        name: "Gemini 2.5 Flash-Lite",
+        provider: "gemini",
+        contextWindow: 1048576,
+        isVisionCapable: true,
+        inputCostPer1kTokens: 1e-4,
+        outputCostPer1kTokens: 4e-4,
         maxOutputTokens: 65536,
         supportsStreaming: true,
         isLocal: false
@@ -2197,43 +2363,57 @@ var init_constants = __esm({
       _m.pricingUnknown = false;
     }
     T1_MODEL_PRIORITY = [
+      "gpt-5.6-sol",
+      "claude-fable-5",
+      "claude-opus-5",
       "gpt-5.5",
       "gpt-5.4",
+      "gemini-3.1-pro-preview",
+      "claude-opus-4-8",
+      "claude-sonnet-5",
+      "gemini-3.7-flash",
+      "gpt-5.2",
       "gpt-5",
-      "claude-opus-4",
-      "claude-sonnet-4",
       "gemini-2.5-pro",
       "gpt-4.1",
-      "gpt-4o",
-      "gemini-1.5-pro"
+      "gpt-4o"
     ];
     T2_MODEL_PRIORITY = [
+      "gpt-5.6-terra",
+      "claude-sonnet-5",
+      "gemini-3.7-flash",
+      "gemini-3.6-flash",
       "gpt-5.4-mini",
       "gpt-5-mini",
-      "claude-sonnet-4",
+      "claude-sonnet-4-6",
       "claude-haiku-4-5",
-      "claude-haiku-3-5",
+      "gemini-3.5-flash",
       "gemini-2.5-flash",
       "gpt-4.1-mini",
       "gpt-4o-mini",
-      "gemini-2.0-flash",
       "llama3:70b"
     ];
     T3_MODEL_PRIORITY = [
+      "gpt-5.6-luna",
+      "gpt-5.4-nano",
+      "gemini-3.5-flash-lite",
+      "gemini-3.1-flash-lite",
+      "claude-haiku-4-5",
       "gpt-5-nano",
+      "gemini-2.5-flash-lite",
       "llama3.2:3b",
       "mistral:7b",
-      "claude-haiku-4-5",
-      "claude-haiku-3-5",
       "gpt-4.1-nano",
       "gpt-4o-mini",
-      "gemini-2.5-flash",
-      "gemini-2.0-flash"
+      "gemini-2.5-flash"
     ];
     VISION_MODEL_PRIORITY = [
-      "claude-sonnet-4",
+      "gpt-5.6-sol",
+      "claude-fable-5",
+      "claude-sonnet-5",
+      "gemini-3.7-flash",
       "gpt-4o",
-      "gemini-2.0-flash",
+      "gemini-2.5-flash",
       "llava"
     ];
     COMPLEXITY_T2_COUNT = {
@@ -2290,8 +2470,8 @@ function normalizeEndpoint(url) {
   if (!raw) return "";
   try {
     const u = new URL(raw);
-    const path40 = stripTrailingSlashes(`${u.pathname}${u.search}`);
-    return `${u.protocol}//${u.host.toLowerCase()}${path40}`;
+    const path41 = stripTrailingSlashes(`${u.pathname}${u.search}`);
+    return `${u.protocol}//${u.host.toLowerCase()}${path41}`;
   } catch {
     return raw.toLowerCase();
   }
@@ -2423,7 +2603,7 @@ var CLIENT_VERSION_SEGMENT, REDIRECT_STATUSES, NULL_BODY_STATUSES, MAX_REDIRECTS
 var init_net = __esm({
   "src/utils/net.ts"() {
     try {
-      dns__default.default.setDefaultResultOrder("ipv4first");
+      dnsCallback__default.default.setDefaultResultOrder("ipv4first");
     } catch {
     }
     CLIENT_VERSION_SEGMENT = {
@@ -3155,6 +3335,56 @@ var init_openai = __esm({
   }
 });
 
+// src/providers/cloud-model-catalog.json
+var cloud_model_catalog_default;
+var init_cloud_model_catalog = __esm({
+  "src/providers/cloud-model-catalog.json"() {
+    cloud_model_catalog_default = {
+      schemaVersion: 1,
+      verifiedAt: "2026-08-27",
+      scope: "GA and Preview text/chat models that Cascade can route through its maintained cloud providers. Retired, shutdown, realtime/audio-only, embedding, image-only, video-only, and access-restricted models are excluded.",
+      note: "Capabilities belong to the canonical model. Pricing deliberately does not live here: Cascade resolves price by model x provider x region in core/router/pricing-data.json. A model exposed by multiple providers may therefore have different prices without duplicating its capability profile.",
+      models: [
+        { id: "gpt-5.6-sol", name: "GPT-5.6 Sol", providers: ["openai", "azure"], lifecycle: "ga", contextWindow: 105e4, maxOutputTokens: 128e3, vision: true, toolUse: true },
+        { id: "gpt-5.6-terra", name: "GPT-5.6 Terra", providers: ["openai", "azure"], lifecycle: "ga", contextWindow: 105e4, maxOutputTokens: 128e3, vision: true, toolUse: true },
+        { id: "gpt-5.6-luna", name: "GPT-5.6 Luna", providers: ["openai", "azure"], lifecycle: "ga", contextWindow: 105e4, maxOutputTokens: 128e3, vision: true, toolUse: true },
+        { id: "gpt-5.5", name: "GPT-5.5", providers: ["openai", "azure"], lifecycle: "ga", contextWindow: 105e4, maxOutputTokens: 128e3, vision: true, toolUse: true },
+        { id: "gpt-5.4", name: "GPT-5.4", providers: ["openai", "azure"], lifecycle: "ga", contextWindow: 105e4, maxOutputTokens: 128e3, vision: true, toolUse: true },
+        { id: "gpt-5.4-mini", name: "GPT-5.4 Mini", providers: ["openai", "azure"], lifecycle: "ga", contextWindow: 4e5, maxOutputTokens: 128e3, vision: true, toolUse: true },
+        { id: "gpt-5.4-nano", name: "GPT-5.4 Nano", providers: ["openai", "azure"], lifecycle: "ga", contextWindow: 4e5, maxOutputTokens: 128e3, vision: true, toolUse: true },
+        { id: "gpt-5", name: "GPT-5", providers: ["openai", "azure"], lifecycle: "ga", contextWindow: 4e5, maxOutputTokens: 128e3, vision: true, toolUse: true },
+        { id: "gpt-5-mini", name: "GPT-5 Mini", providers: ["openai", "azure"], lifecycle: "ga", contextWindow: 4e5, maxOutputTokens: 128e3, vision: true, toolUse: true },
+        { id: "gpt-5-nano", name: "GPT-5 Nano", providers: ["openai", "azure"], lifecycle: "ga", contextWindow: 4e5, maxOutputTokens: 128e3, vision: true, toolUse: true },
+        { id: "gpt-4.1", name: "GPT-4.1", providers: ["openai", "azure"], lifecycle: "ga", contextWindow: 1047576, maxOutputTokens: 32768, vision: true, toolUse: true },
+        { id: "gpt-4.1-mini", name: "GPT-4.1 Mini", providers: ["openai", "azure"], lifecycle: "ga", contextWindow: 1047576, maxOutputTokens: 32768, vision: true, toolUse: true },
+        { id: "gpt-4.1-nano", name: "GPT-4.1 Nano", providers: ["openai", "azure"], lifecycle: "ga", contextWindow: 1047576, maxOutputTokens: 32768, vision: true, toolUse: true },
+        { id: "gpt-4o", name: "GPT-4o", providers: ["openai", "azure"], lifecycle: "ga", contextWindow: 128e3, maxOutputTokens: 16384, vision: true, toolUse: true },
+        { id: "gpt-4o-mini", name: "GPT-4o Mini", providers: ["openai", "azure"], lifecycle: "ga", contextWindow: 128e3, maxOutputTokens: 16384, vision: true, toolUse: true },
+        { id: "claude-fable-5", name: "Claude Fable 5", providers: ["anthropic"], lifecycle: "ga", contextWindow: 1e6, maxOutputTokens: 128e3, vision: true, toolUse: true },
+        { id: "claude-opus-5", name: "Claude Opus 5", providers: ["anthropic"], lifecycle: "ga", contextWindow: 1e6, maxOutputTokens: 128e3, vision: true, toolUse: true },
+        { id: "claude-opus-4-8", name: "Claude Opus 4.8", providers: ["anthropic"], lifecycle: "ga", contextWindow: 1e6, maxOutputTokens: 128e3, vision: true, toolUse: true },
+        { id: "claude-opus-4-7", name: "Claude Opus 4.7", providers: ["anthropic"], lifecycle: "ga", contextWindow: 1e6, maxOutputTokens: 128e3, vision: true, toolUse: true },
+        { id: "claude-opus-4-6", name: "Claude Opus 4.6", providers: ["anthropic"], lifecycle: "ga", contextWindow: 1e6, vision: true, toolUse: true },
+        { id: "claude-opus-4-5-20251101", name: "Claude Opus 4.5", providers: ["anthropic"], lifecycle: "ga", contextWindow: 2e5, vision: true, toolUse: true },
+        { id: "claude-sonnet-5", name: "Claude Sonnet 5", providers: ["anthropic"], lifecycle: "ga", contextWindow: 1e6, maxOutputTokens: 128e3, vision: true, toolUse: true },
+        { id: "claude-sonnet-4-6", name: "Claude Sonnet 4.6", providers: ["anthropic"], lifecycle: "ga", contextWindow: 1e6, maxOutputTokens: 128e3, vision: true, toolUse: true },
+        { id: "claude-sonnet-4-5-20250929", name: "Claude Sonnet 4.5", providers: ["anthropic"], lifecycle: "ga", contextWindow: 2e5, vision: true, toolUse: true },
+        { id: "claude-haiku-4-5-20251001", name: "Claude Haiku 4.5", providers: ["anthropic"], lifecycle: "ga", contextWindow: 2e5, maxOutputTokens: 64e3, vision: true, toolUse: true },
+        { id: "gemini-3.7-flash", name: "Gemini 3.7 Flash", providers: ["gemini"], lifecycle: "ga", contextWindow: 1048576, maxOutputTokens: 65536, vision: true, toolUse: true },
+        { id: "gemini-3.6-flash", name: "Gemini 3.6 Flash", providers: ["gemini"], lifecycle: "ga", contextWindow: 1048576, maxOutputTokens: 65536, vision: true, toolUse: true },
+        { id: "gemini-3.5-flash", name: "Gemini 3.5 Flash", providers: ["gemini"], lifecycle: "ga", contextWindow: 1048576, maxOutputTokens: 65536, vision: true, toolUse: true },
+        { id: "gemini-3.5-flash-lite", name: "Gemini 3.5 Flash-Lite", providers: ["gemini"], lifecycle: "ga", contextWindow: 1048576, maxOutputTokens: 65536, vision: true, toolUse: true },
+        { id: "gemini-3.1-flash-lite", name: "Gemini 3.1 Flash-Lite", providers: ["gemini"], lifecycle: "ga", contextWindow: 1048576, maxOutputTokens: 65536, vision: true, toolUse: true },
+        { id: "gemini-3.1-pro-preview", name: "Gemini 3.1 Pro", providers: ["gemini"], lifecycle: "preview", contextWindow: 1048576, maxOutputTokens: 65536, vision: true, toolUse: true },
+        { id: "gemini-3-flash-preview", name: "Gemini 3 Flash", providers: ["gemini"], lifecycle: "preview", contextWindow: 1048576, maxOutputTokens: 65536, vision: true, toolUse: true },
+        { id: "gemini-2.5-pro", name: "Gemini 2.5 Pro", providers: ["gemini"], lifecycle: "ga", contextWindow: 1048576, maxOutputTokens: 65536, vision: true, toolUse: true },
+        { id: "gemini-2.5-flash", name: "Gemini 2.5 Flash", providers: ["gemini"], lifecycle: "ga", contextWindow: 1048576, maxOutputTokens: 65536, vision: true, toolUse: true },
+        { id: "gemini-2.5-flash-lite", name: "Gemini 2.5 Flash-Lite", providers: ["gemini"], lifecycle: "ga", contextWindow: 1048576, maxOutputTokens: 65536, vision: true, toolUse: true }
+      ]
+    };
+  }
+});
+
 // src/providers/azure.ts
 var azure_exports = {};
 __export(azure_exports, {
@@ -3163,36 +3393,81 @@ __export(azure_exports, {
   azureModelForDeployment: () => azureModelForDeployment,
   inferAzureBaseModel: () => inferAzureBaseModel
 });
+function compactModelId(id) {
+  return id.toLowerCase().replace(/[^a-z0-9.]/g, "");
+}
+function catalogEntry(id) {
+  const n = id.toLowerCase();
+  return CLOUD_MODELS.find((m) => m.id.toLowerCase() === n);
+}
 function inferAzureBaseModel(deploymentName) {
   const n = deploymentName.toLowerCase();
-  for (const [re, base] of AZURE_BASE_MODEL_RULES) if (re.test(n)) return base;
+  const compact = compactModelId(n);
+  const hasBareGpt56Alias = compact.includes("gpt5.6");
+  for (const model of AZURE_CATALOG) {
+    if (hasBareGpt56Alias && model.id === "gpt-5") continue;
+    if (n.includes(model.id.toLowerCase()) || compact.includes(compactModelId(model.id))) {
+      return model.id;
+    }
+  }
+  if (hasBareGpt56Alias) return "gpt-5.6-sol";
+  const gpt5At = compact.indexOf("gpt5");
+  if (gpt5At !== -1) {
+    const suffix = compact.slice(gpt5At + "gpt5".length);
+    if (suffix.includes("nano")) return "gpt-5-nano";
+    if (suffix.includes("mini")) return "gpt-5-mini";
+    return "gpt-5";
+  }
+  if (compact.includes("gpt4.1nano")) return "gpt-4.1-nano";
+  if (compact.includes("gpt4.1mini")) return "gpt-4.1-mini";
+  if (compact.includes("gpt4.1")) return "gpt-4.1";
+  if (compact.includes("gpt4omini")) return "gpt-4o-mini";
+  if (compact.includes("gpt4o")) return "gpt-4o";
   return null;
 }
+function catalogModelInfo(baseModelId) {
+  const entry = catalogEntry(baseModelId);
+  if (!entry?.contextWindow) return void 0;
+  return {
+    id: entry.id,
+    name: entry.name,
+    provider: "openai",
+    contextWindow: entry.contextWindow,
+    isVisionCapable: entry.vision ?? false,
+    inputCostPer1kTokens: 0,
+    outputCostPer1kTokens: 0,
+    maxOutputTokens: entry.maxOutputTokens ?? 16e3,
+    supportsStreaming: true,
+    isLocal: false,
+    supportsToolUse: entry.toolUse ?? true,
+    pricingUnknown: true
+  };
+}
 function azureModelForDeployment(cfg) {
   if (cfg.type !== "azure" || !cfg.deploymentName?.trim()) return null;
   const id = cfg.deploymentName.trim();
   const name = cfg.label?.trim() || id;
   const baseModelId = cfg.model?.trim() || inferAzureBaseModel(id) || void 0;
-  const base = baseModelId ? MODELS[baseModelId] : void 0;
-  if (base) {
+  const base = baseModelId ? MODELS[baseModelId] ?? catalogModelInfo(baseModelId) : void 0;
+  if (base && baseModelId) {
     const azurePrice = resolvePricing(
       { id, provider: "azure", isLocal: false, baseModelId },
       { region: cfg.region }
     );
+    const exactAzurePrice = !azurePrice.unknown && !azurePrice.estimatedFromProvider;
+    const nativeToolsOnThisTransport = /^gpt-5\.6-(?:sol|terra|luna)$/i.test(baseModelId) ? false : base.supportsToolUse ?? true;
     return {
       ...base,
       id,
-      // callable deployment name
       name,
       provider: "azure",
       baseModelId,
-      // real identity for benchmark + live pricing
-      supportsToolUse: base.supportsToolUse ?? true,
-      ...azurePrice.unknown ? {} : {
+      supportsToolUse: nativeToolsOnThisTransport,
+      ...!azurePrice.unknown ? {
         inputCostPer1kTokens: azurePrice.input,
         outputCostPer1kTokens: azurePrice.output,
-        pricingUnknown: false
-      }
+        pricingUnknown: !exactAzurePrice
+      } : { pricingUnknown: true }
     };
   }
   return {
@@ -3207,39 +3482,34 @@ function azureModelForDeployment(cfg) {
     maxOutputTokens: 16e3,
     supportsStreaming: true,
     isLocal: false,
-    supportsToolUse: true
+    supportsToolUse: true,
+    pricingUnknown: true
   };
 }
-var DEFAULT_AZURE_API_VERSION, AZURE_BASE_MODEL_RULES, AZURE_BASE_MODELS, AzureOpenAIProvider;
+function stripTrailingSlashes3(value) {
+  let end = value.length;
+  while (end > 0 && value.charCodeAt(end - 1) === 47) end--;
+  return value.slice(0, end);
+}
+var DEFAULT_AZURE_API_VERSION, CLOUD_MODELS, AZURE_CATALOG, AZURE_BASE_MODELS, AzureOpenAIProvider;
 var init_azure = __esm({
   "src/providers/azure.ts"() {
     init_constants();
     init_openai();
     init_pricing();
+    init_cloud_model_catalog();
     DEFAULT_AZURE_API_VERSION = "2024-12-01-preview";
-    AZURE_BASE_MODEL_RULES = [
-      [/gpt-?5\.5/, "gpt-5.5"],
-      [/gpt-?5\.4.*mini/, "gpt-5.4-mini"],
-      [/gpt-?5\.4/, "gpt-5.4"],
-      [/gpt-?5.*nano/, "gpt-5-nano"],
-      [/gpt-?5.*mini/, "gpt-5-mini"],
-      [/gpt-?5/, "gpt-5"],
-      [/gpt-?4\.1-nano/, "gpt-4.1-nano"],
-      [/gpt-?4\.1-mini/, "gpt-4.1-mini"],
-      [/gpt-?4\.1/, "gpt-4.1"],
-      [/gpt-?4o-mini/, "gpt-4o-mini"],
-      [/gpt-?4o/, "gpt-4o"]
-    ];
-    AZURE_BASE_MODELS = AZURE_BASE_MODEL_RULES.map(([, id]) => id);
+    CLOUD_MODELS = cloud_model_catalog_default.models;
+    AZURE_CATALOG = CLOUD_MODELS.filter((m) => m.providers.includes("azure")).slice().sort((a, b) => b.id.length - a.id.length || a.id.localeCompare(b.id));
+    AZURE_BASE_MODELS = AZURE_CATALOG.map((m) => m.id);
     AzureOpenAIProvider = class extends OpenAIProvider {
       constructor(config, model) {
         const rawUrl = config.baseUrl ?? AZURE_BASE_URL_TEMPLATE.replace("{resource}", "YOUR_RESOURCE");
-        const endpoint = rawUrl.replace(/\/+$/, "");
+        const endpoint = stripTrailingSlashes3(rawUrl);
         super(
           {
             ...config,
             baseUrl: endpoint
-            // Kept for superclass compatibility if it reads it
           },
           model
         );
@@ -4223,16 +4493,16 @@ var require_isarray = __commonJS({
   }
 });
 
-// node_modules/jszip/node_modules/readable-stream/lib/internal/streams/stream.js
+// node_modules/readable-stream/lib/internal/streams/stream.js
 var require_stream = __commonJS({
-  "node_modules/jszip/node_modules/readable-stream/lib/internal/streams/stream.js"(exports, module) {
+  "node_modules/readable-stream/lib/internal/streams/stream.js"(exports, module) {
     module.exports = __require("stream");
   }
 });
 
-// node_modules/jszip/node_modules/safe-buffer/index.js
+// node_modules/readable-stream/node_modules/safe-buffer/index.js
 var require_safe_buffer = __commonJS({
-  "node_modules/jszip/node_modules/safe-buffer/index.js"(exports, module) {
+  "node_modules/readable-stream/node_modules/safe-buffer/index.js"(exports, module) {
     var buffer = __require("buffer");
     var Buffer2 = buffer.Buffer;
     function copyProps(src, dst) {
@@ -4350,7 +4620,7 @@ var require_util = __commonJS({
       typeof arg === "undefined";
     }
     exports.isPrimitive = isPrimitive;
-    exports.isBuffer = Buffer.isBuffer;
+    exports.isBuffer = __require("buffer").Buffer.isBuffer;
     function objectToString(o) {
       return Object.prototype.toString.call(o);
     }
@@ -4403,9 +4673,9 @@ var require_inherits = __commonJS({
   }
 });
 
-// node_modules/jszip/node_modules/readable-stream/lib/internal/streams/BufferList.js
+// node_modules/readable-stream/lib/internal/streams/BufferList.js
 var require_BufferList = __commonJS({
-  "node_modules/jszip/node_modules/readable-stream/lib/internal/streams/BufferList.js"(exports, module) {
+  "node_modules/readable-stream/lib/internal/streams/BufferList.js"(exports, module) {
     function _classCallCheck(instance, Constructor) {
       if (!(instance instanceof Constructor)) {
         throw new TypeError("Cannot call a class as a function");
@@ -4480,9 +4750,9 @@ var require_BufferList = __commonJS({
   }
 });
 
-// node_modules/jszip/node_modules/readable-stream/lib/internal/streams/destroy.js
+// node_modules/readable-stream/lib/internal/streams/destroy.js
 var require_destroy = __commonJS({
-  "node_modules/jszip/node_modules/readable-stream/lib/internal/streams/destroy.js"(exports, module) {
+  "node_modules/readable-stream/lib/internal/streams/destroy.js"(exports, module) {
     var pna = require_process_nextick_args();
     function destroy(err, cb) {
       var _this = this;
@@ -4555,9 +4825,9 @@ var require_node = __commonJS({
   }
 });
 
-// node_modules/jszip/node_modules/readable-stream/lib/_stream_writable.js
+// node_modules/readable-stream/lib/_stream_writable.js
 var require_stream_writable = __commonJS({
-  "node_modules/jszip/node_modules/readable-stream/lib/_stream_writable.js"(exports, module) {
+  "node_modules/readable-stream/lib/_stream_writable.js"(exports, module) {
     var pna = require_process_nextick_args();
     module.exports = Writable;
     function CorkedRequest(state) {
@@ -4994,9 +5264,9 @@ var require_stream_writable = __commonJS({
   }
 });
 
-// node_modules/jszip/node_modules/readable-stream/lib/_stream_duplex.js
+// node_modules/readable-stream/lib/_stream_duplex.js
 var require_stream_duplex = __commonJS({
-  "node_modules/jszip/node_modules/readable-stream/lib/_stream_duplex.js"(exports, module) {
+  "node_modules/readable-stream/lib/_stream_duplex.js"(exports, module) {
     var pna = require_process_nextick_args();
     var objectKeys = Object.keys || function(obj) {
       var keys2 = [];
@@ -5070,10 +5340,67 @@ var require_stream_duplex = __commonJS({
   }
 });
 
-// node_modules/jszip/node_modules/string_decoder/lib/string_decoder.js
+// node_modules/string_decoder/node_modules/safe-buffer/index.js
+var require_safe_buffer2 = __commonJS({
+  "node_modules/string_decoder/node_modules/safe-buffer/index.js"(exports, module) {
+    var buffer = __require("buffer");
+    var Buffer2 = buffer.Buffer;
+    function copyProps(src, dst) {
+      for (var key in src) {
+        dst[key] = src[key];
+      }
+    }
+    if (Buffer2.from && Buffer2.alloc && Buffer2.allocUnsafe && Buffer2.allocUnsafeSlow) {
+      module.exports = buffer;
+    } else {
+      copyProps(buffer, exports);
+      exports.Buffer = SafeBuffer;
+    }
+    function SafeBuffer(arg, encodingOrOffset, length) {
+      return Buffer2(arg, encodingOrOffset, length);
+    }
+    copyProps(Buffer2, SafeBuffer);
+    SafeBuffer.from = function(arg, encodingOrOffset, length) {
+      if (typeof arg === "number") {
+        throw new TypeError("Argument must not be a number");
+      }
+      return Buffer2(arg, encodingOrOffset, length);
+    };
+    SafeBuffer.alloc = function(size, fill, encoding) {
+      if (typeof size !== "number") {
+        throw new TypeError("Argument must be a number");
+      }
+      var buf = Buffer2(size);
+      if (fill !== void 0) {
+        if (typeof encoding === "string") {
+          buf.fill(fill, encoding);
+        } else {
+          buf.fill(fill);
+        }
+      } else {
+        buf.fill(0);
+      }
+      return buf;
+    };
+    SafeBuffer.allocUnsafe = function(size) {
+      if (typeof size !== "number") {
+        throw new TypeError("Argument must be a number");
+      }
+      return Buffer2(size);
+    };
+    SafeBuffer.allocUnsafeSlow = function(size) {
+      if (typeof size !== "number") {
+        throw new TypeError("Argument must be a number");
+      }
+      return buffer.SlowBuffer(size);
+    };
+  }
+});
+
+// node_modules/string_decoder/lib/string_decoder.js
 var require_string_decoder = __commonJS({
-  "node_modules/jszip/node_modules/string_decoder/lib/string_decoder.js"(exports) {
-    var Buffer2 = require_safe_buffer().Buffer;
+  "node_modules/string_decoder/lib/string_decoder.js"(exports) {
+    var Buffer2 = require_safe_buffer2().Buffer;
     var isEncoding = Buffer2.isEncoding || function(encoding) {
       encoding = "" + encoding;
       switch (encoding && encoding.toLowerCase()) {
@@ -5307,9 +5634,9 @@ var require_string_decoder = __commonJS({
   }
 });
 
-// node_modules/jszip/node_modules/readable-stream/lib/_stream_readable.js
+// node_modules/readable-stream/lib/_stream_readable.js
 var require_stream_readable = __commonJS({
-  "node_modules/jszip/node_modules/readable-stream/lib/_stream_readable.js"(exports, module) {
+  "node_modules/readable-stream/lib/_stream_readable.js"(exports, module) {
     var pna = require_process_nextick_args();
     module.exports = Readable2;
     var isArray = require_isarray();
@@ -5992,9 +6319,9 @@ var require_stream_readable = __commonJS({
   }
 });
 
-// node_modules/jszip/node_modules/readable-stream/lib/_stream_transform.js
+// node_modules/readable-stream/lib/_stream_transform.js
 var require_stream_transform = __commonJS({
-  "node_modules/jszip/node_modules/readable-stream/lib/_stream_transform.js"(exports, module) {
+  "node_modules/readable-stream/lib/_stream_transform.js"(exports, module) {
     module.exports = Transform;
     var Duplex = require_stream_duplex();
     var util = Object.create(require_util());
@@ -6091,9 +6418,9 @@ var require_stream_transform = __commonJS({
   }
 });
 
-// node_modules/jszip/node_modules/readable-stream/lib/_stream_passthrough.js
+// node_modules/readable-stream/lib/_stream_passthrough.js
 var require_stream_passthrough = __commonJS({
-  "node_modules/jszip/node_modules/readable-stream/lib/_stream_passthrough.js"(exports, module) {
+  "node_modules/readable-stream/lib/_stream_passthrough.js"(exports, module) {
     module.exports = PassThrough;
     var Transform = require_stream_transform();
     var util = Object.create(require_util());
@@ -6109,9 +6436,9 @@ var require_stream_passthrough = __commonJS({
   }
 });
 
-// node_modules/jszip/node_modules/readable-stream/readable.js
+// node_modules/readable-stream/readable.js
 var require_readable = __commonJS({
-  "node_modules/jszip/node_modules/readable-stream/readable.js"(exports, module) {
+  "node_modules/readable-stream/readable.js"(exports, module) {
     var Stream = __require("stream");
     if (process.env.READABLE_STREAM === "disable" && Stream) {
       module.exports = Stream;
@@ -7020,8 +7347,8 @@ var require_utils = __commonJS({
       var result = transform[inputType][outputType](input);
       return result;
     };
-    exports.resolve = function(path40) {
-      var parts = path40.split("/");
+    exports.resolve = function(path41) {
+      var parts = path41.split("/");
       var result = [];
       for (var index = 0; index < parts.length; index++) {
         var part = parts[index];
@@ -12836,18 +13163,18 @@ var require_object = __commonJS({
       var object = new ZipObject(name, zipObjectContent, o);
       this.files[name] = object;
     };
-    var parentFolder = function(path40) {
-      if (path40.slice(-1) === "/") {
-        path40 = path40.substring(0, path40.length - 1);
+    var parentFolder = function(path41) {
+      if (path41.slice(-1) === "/") {
+        path41 = path41.substring(0, path41.length - 1);
       }
-      var lastSlash = path40.lastIndexOf("/");
-      return lastSlash > 0 ? path40.substring(0, lastSlash) : "";
+      var lastSlash = path41.lastIndexOf("/");
+      return lastSlash > 0 ? path41.substring(0, lastSlash) : "";
     };
-    var forceTrailingSlash = function(path40) {
-      if (path40.slice(-1) !== "/") {
-        path40 += "/";
+    var forceTrailingSlash = function(path41) {
+      if (path41.slice(-1) !== "/") {
+        path41 += "/";
       }
-      return path40;
+      return path41;
     };
     var folderAdd = function(name, createFolders) {
       createFolders = typeof createFolders !== "undefined" ? createFolders : defaults.createFolders;
@@ -13846,12 +14173,12 @@ var init_audit_logger = __esm({
       constructor(workspacePath, debugMode = false) {
         this.workspacePath = workspacePath;
         this.debugMode = debugMode;
-        const cascadeDir = path35__default.default.join(workspacePath, ".cascade");
-        if (!fs32__default.default.existsSync(cascadeDir)) {
-          fs32__default.default.mkdirSync(cascadeDir, { recursive: true });
+        const cascadeDir = path36__default.default.join(workspacePath, ".cascade");
+        if (!fs33__default.default.existsSync(cascadeDir)) {
+          fs33__default.default.mkdirSync(cascadeDir, { recursive: true });
         }
-        this.keyPath = path35__default.default.join(cascadeDir, "audit_log.key");
-        this.dbPath = path35__default.default.join(cascadeDir, "audit_log.db");
+        this.keyPath = path36__default.default.join(cascadeDir, "audit_log.key");
+        this.dbPath = path36__default.default.join(cascadeDir, "audit_log.db");
         this.initEncryptionKey();
         this.db = new Database2__default.default(this.dbPath);
         this.db.pragma("journal_mode = WAL");
@@ -13881,11 +14208,11 @@ var init_audit_logger = __esm({
         return crypto__default.default.createHash("sha256").update(`${prevHash}|${timestamp}|${eventType}|${tierId}|${encryptedPayload}`).digest("hex");
       }
       initEncryptionKey() {
-        if (fs32__default.default.existsSync(this.keyPath)) {
-          this.encryptionKey = fs32__default.default.readFileSync(this.keyPath);
+        if (fs33__default.default.existsSync(this.keyPath)) {
+          this.encryptionKey = fs33__default.default.readFileSync(this.keyPath);
         } else {
           this.encryptionKey = crypto__default.default.randomBytes(32);
-          fs32__default.default.writeFileSync(this.keyPath, this.encryptionKey);
+          fs33__default.default.writeFileSync(this.keyPath, this.encryptionKey);
         }
       }
       encrypt(text) {
@@ -13963,9 +14290,9 @@ var init_audit_logger = __esm({
       dumpDebugIfNeeded() {
         if (!this.debugMode) return;
         try {
-          const dumpPath = path35__default.default.join(os10__default.default.tmpdir(), "cascade_audit_logs_debug.json");
+          const dumpPath = path36__default.default.join(os10__default.default.tmpdir(), "cascade_audit_logs_debug.json");
           const entries = this.getAllLogs();
-          fs32__default.default.writeFileSync(dumpPath, JSON.stringify(entries, null, 2), "utf-8");
+          fs33__default.default.writeFileSync(dumpPath, JSON.stringify(entries, null, 2), "utf-8");
         } catch (err) {
           console.error("Failed to dump debug audit logs", err);
         }
@@ -14020,7 +14347,7 @@ var Keystore = class {
       const creds = await this.keytar.findCredentials(KEYTAR_SERVICE);
       this.cache = Object.fromEntries(creds.map((c) => [c.account, c.password]));
       this.backend = "keytar";
-      if (password && fs32__default.default.existsSync(this.storePath)) {
+      if (password && fs33__default.default.existsSync(this.storePath)) {
         try {
           const fileEntries = this.decryptFile(password);
           for (const [k, v] of Object.entries(fileEntries)) {
@@ -14039,7 +14366,7 @@ var Keystore = class {
         "Keystore unlock requires a password because the OS keychain (keytar) is not available on this system."
       );
     }
-    if (!fs32__default.default.existsSync(this.storePath)) {
+    if (!fs33__default.default.existsSync(this.storePath)) {
       const salt = crypto__default.default.randomBytes(SALT_LEN);
       this.masterKey = this.deriveKey(password, salt);
       this.writeWithSalt({}, salt);
@@ -14053,7 +14380,7 @@ var Keystore = class {
   }
   /** Synchronous legacy unlock kept for AES-only environments. */
   unlockSync(password) {
-    if (!fs32__default.default.existsSync(this.storePath)) {
+    if (!fs33__default.default.existsSync(this.storePath)) {
       const salt = crypto__default.default.randomBytes(SALT_LEN);
       this.masterKey = this.deriveKey(password, salt);
       this.writeWithSalt({}, salt);
@@ -14111,7 +14438,7 @@ var Keystore = class {
     }
   }
   decryptFile(password, knownSalt) {
-    if (!fs32__default.default.existsSync(this.storePath)) return {};
+    if (!fs33__default.default.existsSync(this.storePath)) return {};
     try {
       const { salt, ciphertext, iv, tag } = this.readRaw();
       const useSalt = knownSalt ?? salt;
@@ -14133,8 +14460,8 @@ var Keystore = class {
     const ciphertext = Buffer.concat([cipher.update(plaintext), cipher.final()]);
     const tag = cipher.getAuthTag();
     const out = Buffer.concat([raw.salt, iv, tag, ciphertext]);
-    fs32__default.default.mkdirSync(path35__default.default.dirname(this.storePath), { recursive: true });
-    fs32__default.default.writeFileSync(this.storePath, out, { mode: 384 });
+    fs33__default.default.mkdirSync(path36__default.default.dirname(this.storePath), { recursive: true });
+    fs33__default.default.writeFileSync(this.storePath, out, { mode: 384 });
   }
   writeWithSalt(data, salt) {
     if (!this.masterKey) throw new Error("writeWithSalt called before masterKey was set");
@@ -14144,11 +14471,11 @@ var Keystore = class {
     const ciphertext = Buffer.concat([cipher.update(plaintext), cipher.final()]);
     const tag = cipher.getAuthTag();
     const out = Buffer.concat([salt, iv, tag, ciphertext]);
-    fs32__default.default.mkdirSync(path35__default.default.dirname(this.storePath), { recursive: true });
-    fs32__default.default.writeFileSync(this.storePath, out, { mode: 384 });
+    fs33__default.default.mkdirSync(path36__default.default.dirname(this.storePath), { recursive: true });
+    fs33__default.default.writeFileSync(this.storePath, out, { mode: 384 });
   }
   readRaw() {
-    const buf = fs32__default.default.readFileSync(this.storePath);
+    const buf = fs33__default.default.readFileSync(this.storePath);
     let offset = 0;
     const salt = buf.subarray(offset, offset + SALT_LEN);
     offset += SALT_LEN;
@@ -14181,7 +14508,7 @@ var CascadeIgnore = class {
     ]);
   }
   async load(workspacePath) {
-    const filePath = path35__default.default.join(workspacePath, ".cascadeignore");
+    const filePath = path36__default.default.join(workspacePath, ".cascadeignore");
     try {
       const content = await fs11__default.default.readFile(filePath, "utf-8");
       const lines = content.split("\n").filter((l) => l.trim() && !l.startsWith("#"));
@@ -14192,7 +14519,7 @@ var CascadeIgnore = class {
   }
   isIgnored(filePath, workspacePath) {
     try {
-      const relative = workspacePath ? path35__default.default.relative(workspacePath, filePath) : filePath;
+      const relative = workspacePath ? path36__default.default.relative(workspacePath, filePath) : filePath;
       return this.ig.ignores(relative);
     } catch {
       return false;
@@ -14203,7 +14530,7 @@ var CascadeIgnore = class {
   }
 };
 async function createDefaultIgnoreFile(workspacePath) {
-  const filePath = path35__default.default.join(workspacePath, ".cascadeignore");
+  const filePath = path36__default.default.join(workspacePath, ".cascadeignore");
   const content = `# .cascadeignore \u2014 Files Cascade agents cannot read or modify
 # Syntax identical to .gitignore
 
@@ -14233,7 +14560,7 @@ Thumbs.db
   await fs11__default.default.writeFile(filePath, content, "utf-8");
 }
 async function loadCascadeMd(workspacePath) {
-  const filePath = path35__default.default.join(workspacePath, "CASCADE.md");
+  const filePath = path36__default.default.join(workspacePath, "CASCADE.md");
   try {
     const raw = await fs11__default.default.readFile(filePath, "utf-8");
     return parseCascadeMd(raw);
@@ -14262,7 +14589,7 @@ ${raw.trim()}`;
   return { raw, sections, systemPrompt };
 }
 async function createDefaultCascadeMd(workspacePath) {
-  const filePath = path35__default.default.join(workspacePath, "CASCADE.md");
+  const filePath = path36__default.default.join(workspacePath, "CASCADE.md");
   const content = `# Cascade Project Instructions
 
 This file contains project-specific instructions for the Cascade AI agent.
@@ -14297,7 +14624,7 @@ List any areas the agent should not touch.
 var MemoryStore = class _MemoryStore {
   db;
   constructor(dbPath) {
-    fs32__default.default.mkdirSync(path35__default.default.dirname(dbPath), { recursive: true });
+    fs33__default.default.mkdirSync(path36__default.default.dirname(dbPath), { recursive: true });
     try {
       this.db = new Database2__default.default(dbPath, { timeout: 5e3 });
       this.db.pragma("journal_mode = WAL");
@@ -15195,13 +15522,38 @@ var WebSearchConfigSchema = zod.z.object({
   /** Tavily API key — get one at https://tavily.com */
   tavilyApiKey: zod.z.string().optional(),
   /** Max results per search (default 5) */
-  maxResults: zod.z.number().default(5)
+  maxResults: zod.z.number().default(5),
+  /**
+   * Send `searxngUrl` through the SSRF guard. Off for a local run, where the
+   * URL is the machine owner's own config and a self-hosted SearXNG is
+   * routinely on a private address; on for a host that accepts it from a
+   * request. See `src/tools/web-search.ts`.
+   *
+   * It has to be named HERE, not just on the TypeScript interfaces: the config
+   * passes through `CascadeConfigSchema.parse()` on its way into a run, and
+   * zod drops every key this object does not declare.
+   */
+  guardSearxngUrl: zod.z.boolean().optional()
 });
 var ToolsConfigSchema = zod.z.object({
   shellAllowlist: zod.z.array(zod.z.string()).default([]),
   shellBlocklist: zod.z.array(zod.z.string()).default(["rm -rf", "sudo rm", "format", "mkfs"]),
   requireApprovalFor: zod.z.array(zod.z.string()).default([]),
   browserEnabled: zod.z.boolean().default(false),
+  /**
+   * Let a run ACT on the page open in the desktop's built-in browser — click,
+   * type, submit — not just read it.
+   *
+   * Distinct from `browserEnabled`, which turns on the headless Playwright
+   * tool. That one drives a throwaway browser with an empty cookie jar; this
+   * one drives the session the user is signed into, which is a different order
+   * of consequence and so gets its own switch rather than riding on that one.
+   *
+   * Off by default. Turning it on does not hand anything over silently: the
+   * tool still goes through the approval chain, and the browser panel carries a
+   * stop control for the run that is acting.
+   */
+  agentBrowserControl: zod.z.boolean().default(false),
   mcpServers: zod.z.array(McpServerConfigSchema).optional(),
   mcpTrusted: zod.z.array(zod.z.string()).optional(),
   /** Web search backends — at least one should be configured for best results */
@@ -15604,7 +15956,7 @@ function credentialEndpointsConflict(type, rowEndpoint, credentialEndpoint) {
 
 // src/config/global-credentials.ts
 function credentialsPath(globalDir2) {
-  return path35__default.default.join(globalDir2, GLOBAL_CREDENTIALS_FILE);
+  return path36__default.default.join(globalDir2, GLOBAL_CREDENTIALS_FILE);
 }
 function providerKey(p) {
   return p.type;
@@ -15634,7 +15986,7 @@ function isPersistable(p) {
 }
 function loadGlobalCredentials(globalDir2) {
   try {
-    const raw = fs32__default.default.readFileSync(credentialsPath(globalDir2), "utf-8");
+    const raw = fs33__default.default.readFileSync(credentialsPath(globalDir2), "utf-8");
     const parsed = JSON.parse(raw);
     if (!Array.isArray(parsed.providers)) return [];
     return parsed.providers.filter(
@@ -15646,13 +15998,13 @@ function loadGlobalCredentials(globalDir2) {
 }
 function saveGlobalCredentials(globalDir2, providers) {
   const filePath = credentialsPath(globalDir2);
-  fs32__default.default.mkdirSync(globalDir2, { recursive: true, mode: 448 });
+  fs33__default.default.mkdirSync(globalDir2, { recursive: true, mode: 448 });
   const body = { version: 1, providers: providers.filter(isPersistable) };
   const tmp = `${filePath}.tmp`;
-  fs32__default.default.writeFileSync(tmp, JSON.stringify(body, null, 2), { encoding: "utf-8", mode: 384 });
-  fs32__default.default.renameSync(tmp, filePath);
+  fs33__default.default.writeFileSync(tmp, JSON.stringify(body, null, 2), { encoding: "utf-8", mode: 384 });
+  fs33__default.default.renameSync(tmp, filePath);
   try {
-    fs32__default.default.chmodSync(filePath, 384);
+    fs33__default.default.chmodSync(filePath, 384);
   } catch {
   }
 }
@@ -16057,7 +16409,7 @@ var ConfigManager = class {
   /** `globalDirOverride` exists for tests — never point it at the real home dir there. */
   constructor(workspacePath = process.cwd(), globalDirOverride) {
     this.workspacePath = workspacePath;
-    this.globalDir = globalDirOverride ?? path35__default.default.join(os10__default.default.homedir(), GLOBAL_CONFIG_DIR);
+    this.globalDir = globalDirOverride ?? path36__default.default.join(os10__default.default.homedir(), GLOBAL_CONFIG_DIR);
   }
   async load() {
     this.config = await this.loadConfig();
@@ -16071,8 +16423,8 @@ var ConfigManager = class {
     this.ignore = new CascadeIgnore();
     await this.ignore.load(this.workspacePath);
     this.cascadeMd = await loadCascadeMd(this.workspacePath);
-    this.keystore = new Keystore(path35__default.default.join(this.globalDir, GLOBAL_KEYSTORE_FILE));
-    this.store = new MemoryStore(path35__default.default.join(this.workspacePath, CASCADE_DB_FILE));
+    this.keystore = new Keystore(path36__default.default.join(this.globalDir, GLOBAL_KEYSTORE_FILE));
+    this.store = new MemoryStore(path36__default.default.join(this.workspacePath, CASCADE_DB_FILE));
     const globalRevoked = stripRevokedCredentials(loadGlobalCredentials(this.globalDir));
     const globalCreds = filterRetiredCredentials(globalRevoked.kept);
     if (globalRevoked.removed > 0) this.revokedCredentials += globalRevoked.removed;
@@ -16145,8 +16497,8 @@ var ConfigManager = class {
    * never reached the disk (see `commitSettings`).
    */
   async save(config = this.config) {
-    const configPath = path35__default.default.join(this.workspacePath, CASCADE_CONFIG_FILE);
-    await fs11__default.default.mkdir(path35__default.default.dirname(configPath), { recursive: true });
+    const configPath = path36__default.default.join(this.workspacePath, CASCADE_CONFIG_FILE);
+    await fs11__default.default.mkdir(path36__default.default.dirname(configPath), { recursive: true });
     await fs11__default.default.writeFile(configPath, JSON.stringify(config, null, 2), "utf-8");
     try {
       saveGlobalCredentials(this.globalDir, config.providers);
@@ -16196,7 +16548,7 @@ var ConfigManager = class {
     this.revokedCredentials = 0;
     this.revokedPins = [];
     this.revokedNotice = void 0;
-    const configPath = path35__default.default.join(this.workspacePath, CASCADE_CONFIG_FILE);
+    const configPath = path36__default.default.join(this.workspacePath, CASCADE_CONFIG_FILE);
     try {
       const raw = await fs11__default.default.readFile(configPath, "utf-8");
       const parsed = JSON.parse(raw);
@@ -16290,7 +16642,7 @@ var ConfigManager = class {
     return onResource;
   }
   async persistClearedPins(tiers) {
-    const configPath = path35__default.default.join(this.workspacePath, CASCADE_CONFIG_FILE);
+    const configPath = path36__default.default.join(this.workspacePath, CASCADE_CONFIG_FILE);
     try {
       const raw = JSON.parse(await fs11__default.default.readFile(configPath, "utf-8"));
       const models = raw["models"];
@@ -17584,13 +17936,13 @@ var DeadModelStore = class {
 function fileDeadModelPersistence(filePath) {
   return {
     load() {
-      if (!fs32.existsSync(filePath)) return [];
-      const raw = JSON.parse(fs32.readFileSync(filePath, "utf-8"));
+      if (!fs33.existsSync(filePath)) return [];
+      const raw = JSON.parse(fs33.readFileSync(filePath, "utf-8"));
       return Array.isArray(raw) ? raw : [];
     },
     save(records) {
-      fs32.mkdirSync(path35.dirname(filePath), { recursive: true });
-      fs32.writeFileSync(filePath, JSON.stringify(records, null, 2));
+      fs33.mkdirSync(path36.dirname(filePath), { recursive: true });
+      fs33.writeFileSync(filePath, JSON.stringify(records, null, 2));
     }
   };
 }
@@ -18014,7 +18366,7 @@ init_pricing();
 var DEFAULT_SNAPSHOT_URL = "https://raw.githubusercontent.com/Varun-SV/Cascade-AI/main/src/core/router/benchmark-data.json";
 var OPENROUTER_MODELS_URL = "https://openrouter.ai/api/v1/models";
 var FETCH_TIMEOUT_MS = 8e3;
-var DEFAULT_CACHE_FILE = path35__default.default.join(os10__default.default.homedir(), GLOBAL_CONFIG_DIR, "benchmarks-cache.json");
+var DEFAULT_CACHE_FILE = path36__default.default.join(os10__default.default.homedir(), GLOBAL_CONFIG_DIR, "benchmarks-cache.json");
 function normalizeModelId2(id) {
   let s = id.toLowerCase();
   const slash = s.lastIndexOf("/");
@@ -18161,7 +18513,7 @@ var LiveDataProvider = class {
   }
   async saveCache() {
     try {
-      await fs11__default.default.mkdir(path35__default.default.dirname(this.opts.cacheFile), { recursive: true });
+      await fs11__default.default.mkdir(path36__default.default.dirname(this.opts.cacheFile), { recursive: true });
       const cache = {
         fetchedAt: this.fetchedAt,
         snapshot: this.snapshot ?? void 0,
@@ -18268,9 +18620,15 @@ var FAMILY_BENCHMARKS = {
   "claude-opus": { code: 95, analysis: 92, creative: 90, data: 88 },
   "claude-sonnet": { code: 93, analysis: 88, creative: 87, data: 85 },
   "claude-haiku": { code: 80, analysis: 75, creative: 76, data: 72 },
-  // OpenAI GPT-5 family — current flagship; strongest all-round. Offline
-  // baseline (the live fetch refreshes these). Distinct point releases carry
-  // their own scores: gpt-5.5 "Spud" leads SWE-bench (88.7%); gpt-5.4 ~80%.
+  // OpenAI GPT-5 family. GPT-5.6 is split by durable capability tier instead
+  // of being folded into generic gpt-5: Sol, Terra and Luna have materially
+  // different benchmark/cost envelopes and should compete independently.
+  // Scores are the committed normalized snapshot; provenance is in
+  // scripts/benchmarks/sources/openai-gpt-5.6-2026-08.json.
+  "gpt-5.6-sol": { code: 100, analysis: 98, creative: 88, data: 88 },
+  "gpt-5.6-terra": { code: 97, analysis: 92, creative: 82, data: 85 },
+  "gpt-5.6-luna": { code: 93, analysis: 85, creative: 74, data: 60 },
+  // Older GPT-5 point releases remain distinct where public data supports it.
   "gpt-5.5": { code: 97, analysis: 96, creative: 94, data: 95 },
   "gpt-5.4": { code: 94, analysis: 94, creative: 92, data: 92 },
   "gpt-5.4-mini": { code: 86, analysis: 85, creative: 85, data: 83 },
@@ -18306,13 +18664,19 @@ var FAMILY_BENCHMARKS = {
   "llama-small": { code: 55, analysis: 56, creative: 60, data: 54 }
 };
 var FAMILY_MATCHERS = [
+  [/fable/i, "claude-opus"],
   [/opus/i, "claude-opus"],
   [/sonnet/i, "claude-sonnet"],
   [/haiku/i, "claude-haiku"],
-  // GPT-5 family — ordered most-specific first. Distinct point releases
-  // (gpt-5.5, gpt-5.4, gpt-5.4-mini) match their own family; nano/mini before
-  // the base; unrecognised gpt-5.x still fold into the gpt-5 base.
+  // GPT-5 family — ordered most-specific first. GPT-5.6 durable tiers carry
+  // their own profiles. 5.4 Nano intentionally maps to the nano class rather
+  // than being swallowed by the generic 5.4 rule.
+  [/gpt-?5\.6.*sol/i, "gpt-5.6-sol"],
+  [/gpt-?5\.6.*terra/i, "gpt-5.6-terra"],
+  [/gpt-?5\.6.*luna/i, "gpt-5.6-luna"],
+  [/gpt-?5\.6(?:\s|$)/i, "gpt-5.6-sol"],
   [/gpt-?5\.5/i, "gpt-5.5"],
+  [/gpt-?5\.4.*nano/i, "gpt-5-nano"],
   [/gpt-?5\.4.*mini/i, "gpt-5.4-mini"],
   [/gpt-?5\.4/i, "gpt-5.4"],
   [/gpt-?5.*nano/i, "gpt-5-nano"],
@@ -21114,6 +21478,23 @@ Now execute your subtask using this context where relevant.`
       this.setStatus("FAILED", finalOutput);
       this.peerBus?.publish(this.id, assignment.subtaskId, finalOutput, "FAILED");
       return this.buildResult("ESCALATED", finalOutput, { checksRun, passed, failed }, issues, correctionAttempts);
+    } finally {
+      this.releaseBrowserControl();
+    }
+  }
+  /**
+   * End this worker's hold on the shared browser.
+   *
+   * Duck-typed rather than imported: `browser_control` is registered only by a
+   * host that HAS a browser (the desktop), so in the CLI and hosted runs there
+   * is no such tool and this is a no-op. Importing the class to instanceof-check
+   * it would couple the worker to a tool that usually is not there.
+   */
+  releaseBrowserControl() {
+    try {
+      const tool = this.toolRegistry.getTool?.("browser_control");
+      tool?.releaseActor?.(this.id);
+    } catch {
     }
   }
   sendToPeer(toId, content) {
@@ -21372,8 +21753,8 @@ HIERARCHY CONTEXT: ${this.hierarchyContext}` : "") + textToolSuffix,
         // Media generation can run for a minute; without this a cancelled run
         // still pays for an image nobody will see.
         ...this.signal ? { signal: this.signal } : {},
-        saveSnapshot: async (path40, content) => {
-          this.store?.addFileSnapshot(this.taskId, path40, content);
+        saveSnapshot: async (path41, content) => {
+          this.store?.addFileSnapshot(this.taskId, path41, content);
         },
         sendPeerSync: (to, syncType, content) => {
           this.peerBus?.send(this.id, to, syncType, this.assignment?.subtaskId ?? "", content);
@@ -21576,7 +21957,7 @@ ${assignment.expectedOutput}`;
     const { promisify: promisify4 } = await import('util');
     const execFileAsync2 = promisify4(execFile3);
     for (const artifactPath of artifactPaths) {
-      const absolutePath = path35__default.default.resolve(this.artifactRoot(), artifactPath);
+      const absolutePath = path36__default.default.resolve(this.artifactRoot(), artifactPath);
       try {
         const stat = await fs11__default.default.stat(absolutePath);
         if (!stat.isFile()) {
@@ -21611,7 +21992,7 @@ ${assignment.expectedOutput}`;
           issues.push(`PDF artifact looks too small to be valid: ${artifactPath}`);
           continue;
         }
-        const ext = path35__default.default.extname(absolutePath).toLowerCase();
+        const ext = path36__default.default.extname(absolutePath).toLowerCase();
         const check = ext === ".ts" || ext === ".tsx" ? { cmd: "npx", args: ["tsc", "--noEmit", absolutePath] } : ext === ".js" || ext === ".jsx" ? { cmd: process.execPath, args: ["--check", absolutePath] } : ext === ".py" ? { cmd: "python", args: ["-m", "py_compile", absolutePath] } : null;
         if (check) {
           try {
@@ -21703,7 +22084,7 @@ HIERARCHY CONTEXT: ${this.hierarchyContext}` : ""),
   async checkAcceptance(assignment) {
     const criteria = assignment.acceptance ?? [];
     if (!criteria.length) return [];
-    const resolve2 = (target) => path35__default.default.resolve(this.artifactRoot(), target);
+    const resolve2 = (target) => path36__default.default.resolve(this.artifactRoot(), target);
     const workerCanWriteFiles = canProduceFiles(this.tools.map((t) => t.name));
     return evaluateAcceptance(criteria, assignment.files ?? [], {
       stat: async (target) => {
@@ -25014,16 +25395,16 @@ function resolveInWorkspace(workspaceRoot, input) {
   if (typeof input !== "string" || input.length === 0) {
     throw new WorkspaceSandboxError(String(input), workspaceRoot);
   }
-  const root = path35__default.default.resolve(workspaceRoot);
-  const abs = path35__default.default.isAbsolute(input) ? path35__default.default.resolve(input) : path35__default.default.resolve(root, input);
-  const rel = path35__default.default.relative(root, abs);
-  if (rel === "" || rel === ".") ; else if (rel.startsWith("..") || path35__default.default.isAbsolute(rel)) {
+  const root = path36__default.default.resolve(workspaceRoot);
+  const abs = path36__default.default.isAbsolute(input) ? path36__default.default.resolve(input) : path36__default.default.resolve(root, input);
+  const rel = path36__default.default.relative(root, abs);
+  if (rel === "" || rel === ".") ; else if (rel.startsWith("..") || path36__default.default.isAbsolute(rel)) {
     throw new WorkspaceSandboxError(input, root);
   }
   try {
-    const real = fs32__default.default.realpathSync(abs);
-    const realRel = path35__default.default.relative(root, real);
-    if (realRel !== "" && realRel !== "." && (realRel.startsWith("..") || path35__default.default.isAbsolute(realRel))) {
+    const real = fs33__default.default.realpathSync(abs);
+    const realRel = path36__default.default.relative(root, real);
+    if (realRel !== "" && realRel !== "." && (realRel.startsWith("..") || path36__default.default.isAbsolute(realRel))) {
       throw new WorkspaceSandboxError(input, root);
     }
   } catch (e) {
@@ -25572,9 +25953,9 @@ async function animatePptx(bytes, scheme) {
     const zip = await import_jszip.default.loadAsync(bytes);
     const slidePaths = Object.keys(zip.files).filter((n) => /^ppt\/slides\/slide\d+\.xml$/.test(n));
     if (slidePaths.length === 0) return bytes;
-    for (const path40 of slidePaths) {
-      const xml = await zip.file(path40).async("string");
-      zip.file(path40, animateSlideXml(xml, scheme));
+    for (const path41 of slidePaths) {
+      const xml = await zip.file(path41).async("string");
+      zip.file(path41, animateSlideXml(xml, scheme));
     }
     return await zip.generateAsync({ type: "uint8array", compression: "DEFLATE" });
   } catch {
@@ -25955,7 +26336,7 @@ var GenerateDocumentTool = class extends BaseTool {
       }
     }
     const bytes = await renderDocument(ext, content, { name: filePath, loadImageBytes });
-    await fs11__default.default.mkdir(path35__default.default.dirname(absPath), { recursive: true });
+    await fs11__default.default.mkdir(path36__default.default.dirname(absPath), { recursive: true });
     await fs11__default.default.writeFile(absPath, bytes);
     const charts = countCharts(content);
     return [
@@ -26176,7 +26557,7 @@ var FileWriteTool = class extends BaseTool {
       } catch {
       }
     }
-    await fs11__default.default.mkdir(path35__default.default.dirname(absPath), { recursive: true });
+    await fs11__default.default.mkdir(path36__default.default.dirname(absPath), { recursive: true });
     await fs11__default.default.writeFile(absPath, content, "utf-8");
     return `Written ${content.length} characters to ${filePath}`;
   }
@@ -26534,12 +26915,10 @@ ${data.description}`;
     }
   }
 };
-
-// src/tools/browser.ts
 var BROWSER_LAUNCH_TIMEOUT_MS = 15e3;
 var BrowserTool = class extends BaseTool {
   name = "browser";
-  description = "Control a browser: navigate to URLs, click elements, fill forms, take screenshots. Only available with multimodal models.";
+  description = "Control a browser: navigate to URLs, click elements, fill forms, take screenshots. Screenshots are saved to a file for image_analyze to read.";
   inputSchema = {
     type: "object",
     properties: {
@@ -26606,7 +26985,14 @@ var BrowserTool = class extends BaseTool {
         }
         case "screenshot": {
           const buf = await page2.screenshot({ type: "png" });
-          return `data:image/png;base64,${buf.toString("base64")}`;
+          const rel = path36__default.default.join(".cascade", "screenshots", `screenshot-${Date.now()}-${crypto.randomUUID().slice(0, 8)}.png`);
+          const abs = resolveInWorkspace(this.workspaceRoot, rel);
+          await fs11__default.default.mkdir(path36__default.default.dirname(abs), { recursive: true });
+          await fs11__default.default.writeFile(abs, buf);
+          return [
+            `Screenshot saved to ${abs} (${Math.round(buf.byteLength / 1024)} KB).`,
+            `Call image_analyze with that path to see what is on it \u2014 that needs a vision-capable model.`
+          ].join(" ");
         }
         case "evaluate": {
           const result = await page2.evaluate(input["script"]);
@@ -26674,7 +27060,7 @@ var ImageAnalyzeTool = class extends BaseTool {
 };
 async function fileToImageAttachment(filePath) {
   const data = await fs11__default.default.readFile(filePath);
-  const ext = path35__default.default.extname(filePath).toLowerCase();
+  const ext = path36__default.default.extname(filePath).toLowerCase();
   const mimeMap = {
     ".jpg": "image/jpeg",
     ".jpeg": "image/jpeg",
@@ -26708,14 +27094,14 @@ var PDFCreateTool = class extends BaseTool {
     const filePath = input["path"];
     const content = input["content"];
     const title = input["title"];
-    const dir = path35__default.default.dirname(filePath);
-    if (!fs32__default.default.existsSync(dir)) {
-      fs32__default.default.mkdirSync(dir, { recursive: true });
+    const dir = path36__default.default.dirname(filePath);
+    if (!fs33__default.default.existsSync(dir)) {
+      fs33__default.default.mkdirSync(dir, { recursive: true });
     }
     return new Promise((resolve2, reject) => {
       try {
         const doc = new PDFDocument__default.default({ margin: 50 });
-        const stream = fs32__default.default.createWriteStream(filePath);
+        const stream = fs33__default.default.createWriteStream(filePath);
         doc.pipe(stream);
         if (title) {
           doc.info["Title"] = title;
@@ -26793,22 +27179,22 @@ var CodeInterpreterTool = class extends BaseTool {
       }
       cmdPrefix = NODE_CMD;
     }
-    const tmpDir = path35__default.default.join(this.workspaceRoot, ".cascade", "tmp");
-    if (!fs32__default.default.existsSync(tmpDir)) {
-      fs32__default.default.mkdirSync(tmpDir, { recursive: true });
+    const tmpDir = path36__default.default.join(this.workspaceRoot, ".cascade", "tmp");
+    if (!fs33__default.default.existsSync(tmpDir)) {
+      fs33__default.default.mkdirSync(tmpDir, { recursive: true });
     }
     const extension = language === "python" ? "py" : "js";
     const fileName = `intp_${crypto.randomUUID().slice(0, 8)}.${extension}`;
-    const filePath = path35__default.default.join(tmpDir, fileName);
-    fs32__default.default.writeFileSync(filePath, code, "utf-8");
+    const filePath = path36__default.default.join(tmpDir, fileName);
+    fs33__default.default.writeFileSync(filePath, code, "utf-8");
     const execArgs = [filePath, ...args];
     return new Promise((resolve2) => {
       const startMs = Date.now();
       child_process.execFile(cmdPrefix, execArgs, { cwd: this.workspaceRoot, timeout: 3e4 }, (error, stdout, stderr) => {
         const duration = Date.now() - startMs;
         try {
-          if (fs32__default.default.existsSync(filePath)) {
-            fs32__default.default.unlinkSync(filePath);
+          if (fs33__default.default.existsSync(filePath)) {
+            fs33__default.default.unlinkSync(filePath);
           }
         } catch (cleanupErr) {
           console.error(`Failed to cleanup interpreter script ${filePath}:`, cleanupErr);
@@ -26888,18 +27274,178 @@ ${formatted}`;
     return `Unknown action: ${action}`;
   }
 };
+var SsrfBlockedError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "SsrfBlockedError";
+  }
+};
+var ALLOWED_PROTOCOLS = /* @__PURE__ */ new Set(["http:", "https:"]);
+var MAX_REDIRECTS2 = 5;
+function allowLocal() {
+  return process.env["CASCADE_ALLOW_LOCAL_FETCH"] === "1";
+}
+function isPrivateAddress(ip) {
+  const type = net__default.default.isIP(ip);
+  if (type === 4) return isPrivateIPv4(ip);
+  if (type === 6) return isPrivateIPv6(ip);
+  return true;
+}
+function isPrivateIPv4(ip) {
+  const parts = ip.split(".").map((p) => Number(p));
+  if (parts.length !== 4 || parts.some((p) => Number.isNaN(p) || p < 0 || p > 255)) return true;
+  const [a, b] = parts;
+  if (a === 0) return true;
+  if (a === 10) return true;
+  if (a === 127) return true;
+  if (a === 169 && b === 254) return true;
+  if (a === 172 && b >= 16 && b <= 31) return true;
+  if (a === 192 && b === 168) return true;
+  if (a === 100 && b >= 64 && b <= 127) return true;
+  if (a >= 224) return true;
+  return false;
+}
+function ipv6Groups(ip) {
+  let s = ip.toLowerCase().replace(/^\[|\]$/g, "");
+  const zone = s.indexOf("%");
+  if (zone !== -1) s = s.slice(0, zone);
+  const dotted = /^(.*:)(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/.exec(s);
+  if (dotted) {
+    const o = [dotted[2], dotted[3], dotted[4], dotted[5]].map((p) => Number(p));
+    if (o.some((n) => !Number.isInteger(n) || n < 0 || n > 255)) return null;
+    s = `${dotted[1]}${(o[0] << 8 | o[1]).toString(16)}:${(o[2] << 8 | o[3]).toString(16)}`;
+  }
+  const halves = s.split("::");
+  if (halves.length > 2) return null;
+  const split = (part) => part ? part.split(":") : [];
+  const head = split(halves[0] ?? "");
+  const tail = halves.length === 2 ? split(halves[1] ?? "") : [];
+  const zeros = halves.length === 2 ? 8 - head.length - tail.length : 0;
+  if (zeros < 0) return null;
+  const groups = [...head, ...Array(zeros).fill("0"), ...tail];
+  if (groups.length !== 8) return null;
+  const out = [];
+  for (const g of groups) {
+    if (!/^[0-9a-f]{1,4}$/.test(g)) return null;
+    out.push(parseInt(g, 16));
+  }
+  return out;
+}
+function embeddedIPv4(g) {
+  const quad = (hi, lo) => `${hi >> 8}.${hi & 255}.${lo >> 8}.${lo & 255}`;
+  const leadingZero = (n) => g.slice(0, n).every((x) => x === 0);
+  if (leadingZero(5) && g[5] === 65535) return quad(g[6], g[7]);
+  if (leadingZero(6)) return quad(g[6], g[7]);
+  if (g[0] === 100 && g[1] === 65435) {
+    if (g[2] === 1) {
+      return quad(g[3], (g[4] & 255) << 8 | g[5] >> 8);
+    }
+    if (g[2] === 0 && g[3] === 0 && g[4] === 0 && g[5] === 0) return quad(g[6], g[7]);
+    return null;
+  }
+  if (g[0] === 8194) return quad(g[1], g[2]);
+  return null;
+}
+function isPrivateIPv6(ip) {
+  const g = ipv6Groups(ip);
+  if (!g) return true;
+  const v4 = embeddedIPv4(g);
+  if (v4) return isPrivateIPv4(v4);
+  if (g[0] === 100 && g[1] === 65435) return true;
+  if (g.every((x) => x === 0)) return true;
+  if (leading7Zero(g) && g[7] === 1) return true;
+  if ((g[0] & 65472) === 65152) return true;
+  if ((g[0] & 65024) === 64512) return true;
+  if ((g[0] & 65280) === 65280) return true;
+  return false;
+}
+function leading7Zero(g) {
+  return g.slice(0, 7).every((x) => x === 0);
+}
+async function assertPublicUrl(rawUrl) {
+  let url;
+  try {
+    url = new URL(rawUrl);
+  } catch {
+    throw new SsrfBlockedError(`Invalid URL: ${rawUrl}`);
+  }
+  if (!ALLOWED_PROTOCOLS.has(url.protocol)) {
+    throw new SsrfBlockedError(`Blocked URL scheme "${url.protocol}" \u2014 only http and https are allowed.`);
+  }
+  if (allowLocal()) return url;
+  const host = url.hostname.replace(/^\[|\]$/g, "");
+  if (net__default.default.isIP(host)) {
+    if (isPrivateAddress(host)) {
+      throw new SsrfBlockedError(`Blocked request to non-public address ${host}.`);
+    }
+    return url;
+  }
+  if (host === "localhost" || host.endsWith(".localhost") || host.endsWith(".local")) {
+    throw new SsrfBlockedError(`Blocked request to local hostname "${host}".`);
+  }
+  let addresses;
+  try {
+    const records = await dns2__default.default.lookup(host, { all: true });
+    addresses = records.map((r) => r.address);
+  } catch {
+    throw new SsrfBlockedError(`Could not resolve host "${host}".`);
+  }
+  if (addresses.length === 0 || addresses.some((addr) => isPrivateAddress(addr))) {
+    throw new SsrfBlockedError(`Blocked request to "${host}" \u2014 resolves to a non-public address.`);
+  }
+  return url;
+}
+var ssrfAgent = new undici.Agent({
+  connect: {
+    lookup(hostname, options, callback) {
+      if (allowLocal()) {
+        dnsCallback__default.default.lookup(hostname, options, callback);
+        return;
+      }
+      dnsCallback__default.default.lookup(hostname, { ...options, all: true }, (err, addresses) => {
+        if (err) return callback(err, "", 0);
+        const list = Array.isArray(addresses) ? addresses : [addresses];
+        const bad = list.find((a) => isPrivateAddress(a.address));
+        if (bad) {
+          return callback(
+            new SsrfBlockedError(`Blocked connection to "${hostname}" \u2014 resolved to non-public address ${bad.address}.`),
+            "",
+            0
+          );
+        }
+        if (options.all) return callback(null, list);
+        const first = list[0];
+        return callback(null, first.address, first.family);
+      });
+    }
+  }
+});
+async function safeFetch(rawUrl, init = {}) {
+  let currentUrl = (await assertPublicUrl(rawUrl)).toString();
+  for (let i = 0; i <= MAX_REDIRECTS2; i++) {
+    const resp = await fetch(currentUrl, { ...init, redirect: "manual", dispatcher: ssrfAgent });
+    if (resp.status < 300 || resp.status >= 400) return resp;
+    const location = resp.headers.get("location");
+    if (!location) return resp;
+    const next = new URL(location, currentUrl);
+    await assertPublicUrl(next.toString());
+    currentUrl = next.toString();
+  }
+  throw new SsrfBlockedError(`Too many redirects (>${MAX_REDIRECTS2}).`);
+}
 
 // src/tools/web-search.ts
-async function searchSearXNG(query, baseUrl, maxResults) {
+async function searchSearXNG(query, baseUrl, maxResults, guardUrl = false) {
   const url = new URL("/search", baseUrl);
   url.searchParams.set("q", query);
   url.searchParams.set("format", "json");
   url.searchParams.set("categories", "general");
   url.searchParams.set("engines", "google,bing,duckduckgo");
-  const resp = await fetch(url.toString(), {
+  const init = {
     headers: { "User-Agent": "Cascade-AI/1.0 WebSearchTool" },
     signal: AbortSignal.timeout(1e4)
-  });
+  };
+  const resp = guardUrl ? await safeFetch(url.toString(), init) : await fetch(url.toString(), init);
   if (!resp.ok) {
     throw new Error(`SearXNG returned HTTP ${resp.status}`);
   }
@@ -27028,7 +27574,11 @@ var WebSearchTool = class extends BaseTool {
       searxngUrl: config.searxngUrl ?? process.env["SEARXNG_URL"],
       braveApiKey: config.braveApiKey ?? process.env["BRAVE_SEARCH_API_KEY"],
       tavilyApiKey: config.tavilyApiKey ?? process.env["TAVILY_API_KEY"],
-      maxResults: config.maxResults ?? 5
+      maxResults: config.maxResults ?? 5,
+      // Note this reads only from `config`, never from the environment: the
+      // guard tracks the trustworthiness of the URL the host passed in, and an
+      // env var says nothing about that.
+      guardSearxngUrl: config.guardSearxngUrl ?? false
     };
   }
   async execute(input, _options) {
@@ -27043,7 +27593,7 @@ var WebSearchTool = class extends BaseTool {
     let anyBackendReachable = false;
     if (this.config.searxngUrl) {
       try {
-        results = await searchSearXNG(query, this.config.searxngUrl, maxResults);
+        results = await searchSearXNG(query, this.config.searxngUrl, maxResults, this.config.guardSearxngUrl);
         anyBackendReachable = true;
         if (results.length > 0) return this.formatResults(query, results);
         errors.push("SearXNG: returned 0 results");
@@ -27120,7 +27670,7 @@ var GlobTool = class extends BaseTool {
   };
   async execute(input, _options) {
     const pattern = input["pattern"];
-    const searchPath = input["path"] ? path35__default.default.resolve(this.workspaceRoot, input["path"]) : this.workspaceRoot;
+    const searchPath = input["path"] ? path36__default.default.resolve(this.workspaceRoot, input["path"]) : this.workspaceRoot;
     const matches = await glob.glob(pattern, {
       cwd: searchPath,
       ignore: ["node_modules/**", ".git/**", "dist/**", "build/**"],
@@ -27133,7 +27683,7 @@ var GlobTool = class extends BaseTool {
     const withMtime = await Promise.all(
       matches.map(async (rel) => {
         try {
-          const stat = await fs11__default.default.stat(path35__default.default.join(searchPath, rel));
+          const stat = await fs11__default.default.stat(path36__default.default.join(searchPath, rel));
           return { rel, mtime: stat.mtimeMs };
         } catch {
           return { rel, mtime: 0 };
@@ -27182,7 +27732,7 @@ var GrepTool = class extends BaseTool {
   };
   async execute(input, _options) {
     const pattern = input["pattern"];
-    const searchPath = input["path"] ? path35__default.default.resolve(this.workspaceRoot, input["path"]) : this.workspaceRoot;
+    const searchPath = input["path"] ? path36__default.default.resolve(this.workspaceRoot, input["path"]) : this.workspaceRoot;
     const globPattern = input["glob"];
     const outputMode = input["output_mode"] ?? "content";
     const context = input["context"] ?? 0;
@@ -27236,12 +27786,12 @@ var GrepTool = class extends BaseTool {
         nodir: true
       });
     } catch {
-      files = [path35__default.default.relative(searchPath, searchPath) || "."];
+      files = [path36__default.default.relative(searchPath, searchPath) || "."];
     }
     const results = [];
     let totalCount = 0;
     for (const rel of files) {
-      const abs = path35__default.default.join(searchPath, rel);
+      const abs = path36__default.default.join(searchPath, rel);
       let content;
       try {
         content = await fs11__default.default.readFile(abs, "utf-8");
@@ -27282,92 +27832,6 @@ Total: ${totalCount} matches`);
     return results.join("\n");
   }
 };
-var SsrfBlockedError = class extends Error {
-  constructor(message) {
-    super(message);
-    this.name = "SsrfBlockedError";
-  }
-};
-var ALLOWED_PROTOCOLS = /* @__PURE__ */ new Set(["http:", "https:"]);
-var MAX_REDIRECTS2 = 5;
-function allowLocal() {
-  return process.env["CASCADE_ALLOW_LOCAL_FETCH"] === "1";
-}
-function isPrivateAddress(ip) {
-  const type = net__default.default.isIP(ip);
-  if (type === 4) return isPrivateIPv4(ip);
-  if (type === 6) return isPrivateIPv6(ip);
-  return true;
-}
-function isPrivateIPv4(ip) {
-  const parts = ip.split(".").map((p) => Number(p));
-  if (parts.length !== 4 || parts.some((p) => Number.isNaN(p) || p < 0 || p > 255)) return true;
-  const [a, b] = parts;
-  if (a === 0) return true;
-  if (a === 10) return true;
-  if (a === 127) return true;
-  if (a === 169 && b === 254) return true;
-  if (a === 172 && b >= 16 && b <= 31) return true;
-  if (a === 192 && b === 168) return true;
-  if (a === 100 && b >= 64 && b <= 127) return true;
-  if (a >= 224) return true;
-  return false;
-}
-function isPrivateIPv6(ip) {
-  const lower = ip.toLowerCase().replace(/^\[|\]$/g, "");
-  if (lower === "::1" || lower === "::") return true;
-  if (lower.startsWith("fe80")) return true;
-  if (lower.startsWith("fc") || lower.startsWith("fd")) return true;
-  const mapped = /^::ffff:(\d+\.\d+\.\d+\.\d+)$/.exec(lower);
-  if (mapped) return isPrivateIPv4(mapped[1]);
-  return false;
-}
-async function assertPublicUrl(rawUrl) {
-  let url;
-  try {
-    url = new URL(rawUrl);
-  } catch {
-    throw new SsrfBlockedError(`Invalid URL: ${rawUrl}`);
-  }
-  if (!ALLOWED_PROTOCOLS.has(url.protocol)) {
-    throw new SsrfBlockedError(`Blocked URL scheme "${url.protocol}" \u2014 only http and https are allowed.`);
-  }
-  if (allowLocal()) return url;
-  const host = url.hostname.replace(/^\[|\]$/g, "");
-  if (net__default.default.isIP(host)) {
-    if (isPrivateAddress(host)) {
-      throw new SsrfBlockedError(`Blocked request to non-public address ${host}.`);
-    }
-    return url;
-  }
-  if (host === "localhost" || host.endsWith(".localhost") || host.endsWith(".local")) {
-    throw new SsrfBlockedError(`Blocked request to local hostname "${host}".`);
-  }
-  let addresses;
-  try {
-    const records = await dns2__default.default.lookup(host, { all: true });
-    addresses = records.map((r) => r.address);
-  } catch {
-    throw new SsrfBlockedError(`Could not resolve host "${host}".`);
-  }
-  if (addresses.length === 0 || addresses.some((addr) => isPrivateAddress(addr))) {
-    throw new SsrfBlockedError(`Blocked request to "${host}" \u2014 resolves to a non-public address.`);
-  }
-  return url;
-}
-async function safeFetch(rawUrl, init = {}) {
-  let currentUrl = (await assertPublicUrl(rawUrl)).toString();
-  for (let i = 0; i <= MAX_REDIRECTS2; i++) {
-    const resp = await fetch(currentUrl, { ...init, redirect: "manual" });
-    if (resp.status < 300 || resp.status >= 400) return resp;
-    const location = resp.headers.get("location");
-    if (!location) return resp;
-    const next = new URL(location, currentUrl);
-    await assertPublicUrl(next.toString());
-    currentUrl = next.toString();
-  }
-  throw new SsrfBlockedError(`Too many redirects (>${MAX_REDIRECTS2}).`);
-}
 
 // src/tools/web-fetch.ts
 var MAX_CHARS = 5e4;
@@ -27640,10 +28104,10 @@ var ToolRegistry = class extends EventEmitter__default.default {
   }
   isIgnored(filePath) {
     if (!filePath) return false;
-    const abs = path35__default.default.resolve(this.workspaceRoot, filePath);
-    const rel = path35__default.default.relative(this.workspaceRoot, abs);
-    if (!rel || rel.startsWith("..") || path35__default.default.isAbsolute(rel)) return true;
-    const posixRel = rel.split(path35__default.default.sep).join("/");
+    const abs = path36__default.default.resolve(this.workspaceRoot, filePath);
+    const rel = path36__default.default.relative(this.workspaceRoot, abs);
+    if (!rel || rel.startsWith("..") || path36__default.default.isAbsolute(rel)) return true;
+    const posixRel = rel.split(path36__default.default.sep).join("/");
     return this.ignoreMatcher.ignores(posixRel);
   }
 };
@@ -27877,22 +28341,22 @@ var FileMcpOAuthStore = class {
   filePath;
   load() {
     try {
-      return JSON.parse(fs32__default.default.readFileSync(this.filePath, "utf-8"));
+      return JSON.parse(fs33__default.default.readFileSync(this.filePath, "utf-8"));
     } catch {
       return void 0;
     }
   }
   save(state) {
-    fs32__default.default.mkdirSync(path35__default.default.dirname(this.filePath), { recursive: true, mode: 448 });
-    fs32__default.default.writeFileSync(this.filePath, JSON.stringify(state, null, 2), { mode: 384 });
+    fs33__default.default.mkdirSync(path36__default.default.dirname(this.filePath), { recursive: true, mode: 448 });
+    fs33__default.default.writeFileSync(this.filePath, JSON.stringify(state, null, 2), { mode: 384 });
     try {
-      fs32__default.default.chmodSync(this.filePath, 384);
+      fs33__default.default.chmodSync(this.filePath, 384);
     } catch {
     }
   }
   clear() {
     try {
-      fs32__default.default.rmSync(this.filePath);
+      fs33__default.default.rmSync(this.filePath);
     } catch {
     }
   }
@@ -28712,7 +29176,7 @@ var TaskAnalyzer = class {
 
 // src/core/router/model-performance-tracker.ts
 init_pricing();
-var DEFAULT_STATS_FILE = path35__default.default.join(os10__default.default.homedir(), ".cascade", "model-perf.json");
+var DEFAULT_STATS_FILE = path36__default.default.join(os10__default.default.homedir(), ".cascade", "model-perf.json");
 var ModelPerformanceTracker = class _ModelPerformanceTracker {
   stats = /* @__PURE__ */ new Map();
   featureStats = /* @__PURE__ */ new Map();
@@ -28752,7 +29216,7 @@ var ModelPerformanceTracker = class _ModelPerformanceTracker {
   async save() {
     if (this.readOnly) return;
     try {
-      await fs11__default.default.mkdir(path35__default.default.dirname(this.statsFile), { recursive: true });
+      await fs11__default.default.mkdir(path36__default.default.dirname(this.statsFile), { recursive: true });
       const modelsObj = {};
       const featuresObj = {};
       for (const [key, stat] of this.stats) modelsObj[key] = stat;
@@ -29385,7 +29849,7 @@ Required capability: ${description.slice(0, 300)}`;
    *  any dangerous action, so a silently-reloaded tool can't act without approval. */
   async loadPersistedTools() {
     if (!this.workspacePath || !this.persistEnabled) return;
-    const file = path35__default.default.join(this.workspacePath, ".cascade", DYNAMIC_TOOLS_FILE);
+    const file = path36__default.default.join(this.workspacePath, ".cascade", DYNAMIC_TOOLS_FILE);
     try {
       const raw = await fs11__default.default.readFile(file, "utf-8");
       const specs = JSON.parse(raw);
@@ -29409,8 +29873,8 @@ Required capability: ${description.slice(0, 300)}`;
   }
   async persist() {
     if (!this.workspacePath || !this.persistEnabled) return;
-    const dir = path35__default.default.join(this.workspacePath, ".cascade");
-    const file = path35__default.default.join(dir, DYNAMIC_TOOLS_FILE);
+    const dir = path36__default.default.join(this.workspacePath, ".cascade");
+    const file = path36__default.default.join(dir, DYNAMIC_TOOLS_FILE);
     try {
       await fs11__default.default.mkdir(dir, { recursive: true });
       await fs11__default.default.writeFile(file, JSON.stringify(Array.from(this.specs.values()), null, 2), "utf-8");
@@ -29430,12 +29894,12 @@ var WorldStateDB = class {
   constructor(workspacePath, debugMode = false) {
     this.workspacePath = workspacePath;
     this.debugMode = debugMode;
-    const cascadeDir = path35__default.default.join(workspacePath, ".cascade");
-    if (!fs32__default.default.existsSync(cascadeDir)) {
-      fs32__default.default.mkdirSync(cascadeDir, { recursive: true });
+    const cascadeDir = path36__default.default.join(workspacePath, ".cascade");
+    if (!fs33__default.default.existsSync(cascadeDir)) {
+      fs33__default.default.mkdirSync(cascadeDir, { recursive: true });
     }
-    this.keyPath = path35__default.default.join(cascadeDir, "world_state.key");
-    this.dbPath = path35__default.default.join(cascadeDir, "world_state.db");
+    this.keyPath = path36__default.default.join(cascadeDir, "world_state.key");
+    this.dbPath = path36__default.default.join(cascadeDir, "world_state.db");
     this.initEncryptionKey();
     this.db = new Database2__default.default(this.dbPath);
     this.db.pragma("journal_mode = WAL");
@@ -29492,11 +29956,11 @@ var WorldStateDB = class {
     ).run(e, r, row.encrypted_value, row.source_worker, row.timestamp, validTo, change);
   }
   initEncryptionKey() {
-    if (fs32__default.default.existsSync(this.keyPath)) {
-      this.encryptionKey = fs32__default.default.readFileSync(this.keyPath);
+    if (fs33__default.default.existsSync(this.keyPath)) {
+      this.encryptionKey = fs33__default.default.readFileSync(this.keyPath);
     } else {
       this.encryptionKey = crypto__default.default.randomBytes(32);
-      fs32__default.default.writeFileSync(this.keyPath, this.encryptionKey);
+      fs33__default.default.writeFileSync(this.keyPath, this.encryptionKey);
     }
   }
   encrypt(text) {
@@ -29782,9 +30246,9 @@ var WorldStateDB = class {
   dumpDebugIfNeeded() {
     if (!this.debugMode) return;
     try {
-      const dumpPath = path35__default.default.join(os10__default.default.tmpdir(), "cascade_world_state_debug.json");
+      const dumpPath = path36__default.default.join(os10__default.default.tmpdir(), "cascade_world_state_debug.json");
       const entries = this.getAllEntries();
-      fs32__default.default.writeFileSync(dumpPath, JSON.stringify(entries, null, 2), "utf-8");
+      fs33__default.default.writeFileSync(dumpPath, JSON.stringify(entries, null, 2), "utf-8");
     } catch (err) {
       console.error("Failed to dump debug world state", err);
     }
@@ -29840,11 +30304,11 @@ var ResumeStore = class {
         version: RESUME_SCHEMA_VERSION,
         createdAt: checkpoint.createdAt ?? new Date(timestamp).toISOString()
       };
-      await fs32.promises.mkdir(this.dir, { recursive: true });
-      const finalPath = path35__default.default.join(this.dir, `${timestamp}-${safeId(record.taskId)}.json`);
+      await fs33.promises.mkdir(this.dir, { recursive: true });
+      const finalPath = path36__default.default.join(this.dir, `${timestamp}-${safeId(record.taskId)}.json`);
       const tempPath = `${finalPath}.${process.pid}.tmp`;
-      await fs32.promises.writeFile(tempPath, JSON.stringify(record, null, 2), "utf-8");
-      await fs32.promises.rename(tempPath, finalPath);
+      await fs33.promises.writeFile(tempPath, JSON.stringify(record, null, 2), "utf-8");
+      await fs33.promises.rename(tempPath, finalPath);
       await this.prune();
       return true;
     } catch {
@@ -29855,7 +30319,7 @@ var ResumeStore = class {
   async list() {
     let entries;
     try {
-      entries = await fs32.promises.readdir(this.dir);
+      entries = await fs33.promises.readdir(this.dir);
     } catch {
       return [];
     }
@@ -29864,7 +30328,7 @@ var ResumeStore = class {
     const checkpoints = [];
     for (const candidate of candidates2) {
       try {
-        const raw = await fs32.promises.readFile(path35__default.default.join(this.dir, candidate.name), "utf-8");
+        const raw = await fs33.promises.readFile(path36__default.default.join(this.dir, candidate.name), "utf-8");
         const parsed = JSON.parse(raw);
         if (isCheckpoint(parsed)) checkpoints.push(parsed);
       } catch {
@@ -29898,12 +30362,12 @@ var ResumeStore = class {
     const target = taskId ? all.find((c) => c.taskId === taskId) : all[0];
     if (!target) return null;
     try {
-      const entries = await fs32.promises.readdir(this.dir);
+      const entries = await fs33.promises.readdir(this.dir);
       const wanted = safeId(target.taskId);
       const source = entries.find((name) => FILE_PATTERN.exec(name)?.[2] === wanted);
       if (!source) return null;
       const claimId = `${this.now()}-${safeId(target.taskId)}`;
-      await fs32.promises.rename(path35__default.default.join(this.dir, source), path35__default.default.join(this.dir, `${claimId}${CLAIM_SUFFIX}`));
+      await fs33.promises.rename(path36__default.default.join(this.dir, source), path36__default.default.join(this.dir, `${claimId}${CLAIM_SUFFIX}`));
       return { checkpoint: target, claimId };
     } catch {
       return null;
@@ -29912,9 +30376,9 @@ var ResumeStore = class {
   /** Give a claim back, so the work stays recoverable after a failed start. */
   async release(claimId) {
     try {
-      await fs32.promises.rename(
-        path35__default.default.join(this.dir, `${claimId}${CLAIM_SUFFIX}`),
-        path35__default.default.join(this.dir, `${claimId}.json`)
+      await fs33.promises.rename(
+        path36__default.default.join(this.dir, `${claimId}${CLAIM_SUFFIX}`),
+        path36__default.default.join(this.dir, `${claimId}.json`)
       );
     } catch {
     }
@@ -29922,7 +30386,7 @@ var ResumeStore = class {
   /** Discard a claim for good — the resumed run has taken ownership. */
   async settle(claimId) {
     try {
-      await fs32.promises.rm(path35__default.default.join(this.dir, `${claimId}${CLAIM_SUFFIX}`), { force: true });
+      await fs33.promises.rm(path36__default.default.join(this.dir, `${claimId}${CLAIM_SUFFIX}`), { force: true });
     } catch {
     }
   }
@@ -29944,15 +30408,15 @@ var ResumeStore = class {
   async reclaimStale() {
     let reclaimed = 0;
     try {
-      const entries = await fs32.promises.readdir(this.dir);
+      const entries = await fs33.promises.readdir(this.dir);
       const cutoff = this.now() - this.claimTimeoutMs;
       for (const name of entries) {
         if (!name.endsWith(CLAIM_SUFFIX)) continue;
         const stamp2 = Number(/^(\d+)-/.exec(name)?.[1]);
         if (!Number.isFinite(stamp2) || stamp2 >= cutoff) continue;
-        await fs32.promises.rename(
-          path35__default.default.join(this.dir, name),
-          path35__default.default.join(this.dir, `${name.slice(0, -CLAIM_SUFFIX.length)}.json`)
+        await fs33.promises.rename(
+          path36__default.default.join(this.dir, name),
+          path36__default.default.join(this.dir, `${name.slice(0, -CLAIM_SUFFIX.length)}.json`)
         );
         reclaimed++;
       }
@@ -29963,12 +30427,12 @@ var ResumeStore = class {
   /** Remove every checkpoint for a task id. */
   async delete(taskId) {
     try {
-      const entries = await fs32.promises.readdir(this.dir);
+      const entries = await fs33.promises.readdir(this.dir);
       const wanted = safeId(taskId);
       await Promise.all(entries.map(async (name) => {
         const match = FILE_PATTERN.exec(name);
         if (match?.[2] === wanted) {
-          await fs32.promises.rm(path35__default.default.join(this.dir, name), { force: true });
+          await fs33.promises.rm(path36__default.default.join(this.dir, name), { force: true });
         }
       }));
     } catch {
@@ -29977,13 +30441,13 @@ var ResumeStore = class {
   /** Drop expired checkpoints, then any beyond the newest `maxCheckpoints`. */
   async prune() {
     try {
-      const entries = await fs32.promises.readdir(this.dir);
+      const entries = await fs33.promises.readdir(this.dir);
       const cutoff = this.now() - this.maxAgeMs;
       const files = entries.map((name) => ({ name, match: FILE_PATTERN.exec(name) })).filter((e) => e.match !== null).map((e) => ({ name: e.name, timestamp: Number(e.match[1]) })).sort((a, b) => b.timestamp - a.timestamp);
       const doomed = files.filter((f, index) => f.timestamp < cutoff || index >= this.maxCheckpoints);
       const staleTemps = entries.filter((name) => name.endsWith(".tmp")).filter((name) => (Number(FILE_PATTERN.exec(name.replace(/\.\d+\.tmp$/, ".json"))?.[1]) || 0) < cutoff);
       await Promise.all([...doomed.map((f) => f.name), ...staleTemps].map(
-        (name) => fs32.promises.rm(path35__default.default.join(this.dir, name), { force: true })
+        (name) => fs33.promises.rm(path36__default.default.join(this.dir, name), { force: true })
       ));
     } catch {
     }
@@ -30360,7 +30824,7 @@ var WorkspaceIndex = class {
   isIgnored;
   chunker;
   constructor(opts) {
-    this.root = path35__default.default.resolve(opts.root);
+    this.root = path36__default.default.resolve(opts.root);
     this.db = opts.db;
     this.namespace = opts.namespace ?? "code";
     this.extensions = new Set((opts.extensions ?? DEFAULT_EXTENSIONS).map((e) => e.replace(/^\./, "").toLowerCase()));
@@ -30392,14 +30856,14 @@ var WorkspaceIndex = class {
         return;
       }
       for (const entry of entries) {
-        const abs = path35__default.default.join(dir, entry.name);
+        const abs = path36__default.default.join(dir, entry.name);
         if (entry.isDirectory()) {
           if (HARD_SKIP_DIRS.has(entry.name) || this.isIgnored(abs)) continue;
           await walk(abs);
         } else if (entry.isFile()) {
-          const ext = path35__default.default.extname(entry.name).slice(1).toLowerCase();
+          const ext = path36__default.default.extname(entry.name).slice(1).toLowerCase();
           if (!this.extensions.has(ext) || this.isIgnored(abs)) continue;
-          out.push(path35__default.default.relative(this.root, abs));
+          out.push(path36__default.default.relative(this.root, abs));
         }
       }
     };
@@ -30429,7 +30893,7 @@ var WorkspaceIndex = class {
     const entries = [];
     for (const rel of rels) {
       try {
-        const abs = path35__default.default.join(this.root, rel);
+        const abs = path36__default.default.join(this.root, rel);
         const stat = await fs11__default.default.stat(abs);
         if (stat.size > this.maxFileBytes) continue;
         const buf = await fs11__default.default.readFile(abs);
@@ -30834,6 +31298,127 @@ var CurrentPageTool = class extends BaseTool {
   }
 };
 
+// src/tools/browser-control.ts
+var BrowserControlTool = class extends BaseTool {
+  name = "browser_control";
+  description = "Act on the web page the user has open in the built-in browser: navigate, click an element, type into a field, press a key, or wait for something to appear. This drives the REAL browser the user is signed into and can see, so actions have real consequences \u2014 prefer read_current_page when you only need to look. CSS selectors are matched against the live page; call extract_text first if you need to find one. There is one browser: if another part of this run is using it, this call waits its turn, so a slow reply means queued, not stuck.";
+  inputSchema = {
+    type: "object",
+    properties: {
+      action: {
+        type: "string",
+        enum: ["navigate", "click", "fill", "press", "wait_for", "extract_text"],
+        description: "What to do."
+      },
+      url: { type: "string", description: "For navigate: the http(s) address to open." },
+      selector: {
+        type: "string",
+        description: "CSS selector for click, fill and wait_for. Optional for extract_text (defaults to the whole page)."
+      },
+      value: { type: "string", description: "For fill: the text to type." },
+      key: { type: "string", description: 'For press: a key name such as "Enter", "Tab" or "Escape".' },
+      timeoutMs: { type: "number", description: "For wait_for: how long to wait before giving up (default 10000, max 30000)." }
+    },
+    required: ["action"]
+  };
+  controller;
+  release;
+  /** One-way. See `revoke`. */
+  revoked = false;
+  constructor(controller, release) {
+    super();
+    this.controller = controller;
+    this.release = release;
+  }
+  /**
+   * A worker has finished. Ends its hold on the browser.
+   *
+   * Called from the tier's terminal path rather than by the model, because a
+   * model cannot be relied on to announce that it is done — which is why the
+   * host cannot use idle time as the boundary instead.
+   */
+  releaseActor(actorId) {
+    this.release?.(actorId);
+  }
+  /**
+   * Permanently disable this tool, whatever the registry still holds.
+   *
+   * Registration-time gates cannot express "this run turned out to be
+   * unattended": a host that wires the controller and only then declares the
+   * run unattended has already registered the tool, and a check that ran at
+   * registration has no second chance. Enforcing at EXECUTION time makes the
+   * guarantee independent of call order, which is the whole point of stating
+   * the invariant rather than relying on the scheduler's current sequence.
+   *
+   * One-way on purpose. A safety gate that can be re-opened by a later call is
+   * a gate that a refactor re-opens by accident.
+   */
+  revoke() {
+    this.revoked = true;
+  }
+  // Acting on a session the user is signed into is the highest-consequence
+  // thing in the tool set — higher than shell, arguably, because the blast
+  // radius is someone else's server rather than this machine.
+  isDangerous() {
+    return true;
+  }
+  async execute(input, options) {
+    if (this.revoked) {
+      return "Error: browser control is not available in this run. It requires a person watching who can stop it, and nobody is.";
+    }
+    const kind = input["action"];
+    if (!kind) return "Error: action is required.";
+    if (options?.signal?.aborted) return "Error: the run was cancelled before this action ran.";
+    const missing = requiredFieldFor(kind, input);
+    if (missing) return `Error: "${kind}" needs ${missing}.`;
+    const action = {
+      kind,
+      ...typeof input["url"] === "string" ? { url: input["url"] } : {},
+      ...typeof input["selector"] === "string" ? { selector: input["selector"] } : {},
+      ...typeof input["value"] === "string" ? { value: input["value"] } : {},
+      ...typeof input["key"] === "string" ? { key: input["key"] } : {},
+      ...typeof input["timeoutMs"] === "number" ? { timeoutMs: Math.min(Math.max(input["timeoutMs"], 0), 3e4) } : {}
+    };
+    let outcome;
+    try {
+      outcome = await this.controller(action, {
+        // `sessionId` is the run. The host scopes both revocation and its
+        // single-owner lease on it, so passing it is not telemetry — drop it
+        // and a Stop in one run silently stops every later one.
+        sessionId: options?.sessionId ?? "",
+        actorId: options?.tierId ?? options?.sessionId ?? "",
+        ...options?.signal ? { signal: options.signal } : {}
+      });
+    } catch (err) {
+      return `Error: the browser could not perform "${kind}" \u2014 ${err instanceof Error ? err.message : String(err)}`;
+    }
+    const where = outcome.url ? `
+Page: ${outcome.title ? `${outcome.title} \u2014 ` : ""}${outcome.url}` : "";
+    return `${outcome.ok ? "" : "Failed: "}${outcome.detail}${where}`;
+  }
+};
+function requiredFieldFor(kind, input) {
+  const has = (k) => typeof input[k] === "string" && input[k].length > 0;
+  const given = (k) => typeof input[k] === "string";
+  switch (kind) {
+    case "navigate":
+      return has("url") ? null : "a url";
+    case "click":
+      return has("selector") ? null : "a selector";
+    case "fill":
+      return has("selector") ? given("value") ? null : "a value" : "a selector";
+    case "press":
+      return has("key") ? null : "a key";
+    case "wait_for":
+      return has("selector") ? null : "a selector";
+    // extract_text works with or without a selector.
+    case "extract_text":
+      return null;
+    default:
+      return null;
+  }
+}
+
 // src/core/cascade.ts
 var ESCALATION_DECISION_TIMEOUT_MS = 5 * 6e4;
 function buildContextualPrompt(prompt, history = []) {
@@ -30919,13 +31504,13 @@ var Cascade = class _Cascade extends EventEmitter__default.default {
     this.toolRegistry = new ToolRegistry(this.config.tools, workspacePath);
     try {
       this.router.setDeadModelStore(new DeadModelStore(
-        fileDeadModelPersistence(path35__default.default.join(workspacePath, ".cascade", "dead-models.json"))
+        fileDeadModelPersistence(path36__default.default.join(workspacePath, ".cascade", "dead-models.json"))
       ));
     } catch {
     }
     try {
       this.resumeStore = new ResumeStore({
-        dir: path35__default.default.join(workspacePath, ".cascade", "resume")
+        dir: path36__default.default.join(workspacePath, ".cascade", "resume")
       });
     } catch {
     }
@@ -31013,8 +31598,8 @@ var Cascade = class _Cascade extends EventEmitter__default.default {
       this.emit("log", { level: "warn", message: "Code index enabled but no embeddings-capable provider is configured \u2014 skipping." });
       return;
     }
-    const dbPath = ci.dbPath || path35__default.default.join(this.workspacePath, ".cascade", "code-index.db");
-    fs32__default.default.mkdirSync(path35__default.default.dirname(dbPath), { recursive: true });
+    const dbPath = ci.dbPath || path36__default.default.join(this.workspacePath, ".cascade", "code-index.db");
+    fs33__default.default.mkdirSync(path36__default.default.dirname(dbPath), { recursive: true });
     const db = new Database2__default.default(dbPath);
     db.pragma("journal_mode = WAL");
     const complete = chatCompleterFromProviders(this.config.providers);
@@ -31326,6 +31911,49 @@ ${input}` }],
     if ((this.config.tools?.disabledTools ?? []).includes("read_current_page")) return;
     this.toolRegistry.register(new CurrentPageTool(provider));
   }
+  /**
+   * True when nobody is watching this run — a scheduled/cron task, which
+   * auto-approves every tool because there is no one to ask.
+   *
+   * That auto-approval is fine for ordinary tools and disqualifying for this
+   * one: `browser_control` drives the signed-in browser, and "every run asks
+   * first" is the promise the Settings copy makes. The property used to hold
+   * only because `runScheduledTask` happens not to call `setBrowserController`
+   * — a guarantee resting on an ABSENT call, which is exactly what a later
+   * refactor adds without noticing. Stated and enforced instead.
+   */
+  unattended = false;
+  /**
+   * Declare that no human is watching this run, so capabilities that depend on
+   * a person being able to see and stop them are refused outright.
+   */
+  setUnattended(on) {
+    this.unattended = on;
+    if (!on) return;
+    const tool = this.toolRegistry.getTool("browser_control");
+    tool?.revoke?.();
+  }
+  /**
+   * Wire the host's browser so a run can ACT on the open page, not just read it.
+   *
+   * Two gates before this registers anything, and both matter:
+   *
+   *   - `tools.agentBrowserControl` must be on. Unlike read_current_page, which
+   *     reaches nothing the user has not already opened themselves, this drives
+   *     the session they are signed into. That is opt-in, not a default.
+   *   - `disabledTools` still removes it, the same as every other tool.
+   *   - The run must not be UNATTENDED. See `setUnattended`.
+   *
+   * Host-supplied like the page provider: the tool exists only where there is a
+   * real browser to drive, so it never has to be refused in the CLI or a hosted
+   * run — it is simply not there.
+   */
+  setBrowserController(controller, release) {
+    if (this.unattended) return;
+    if (!this.config.tools?.agentBrowserControl) return;
+    if ((this.config.tools?.disabledTools ?? []).includes("browser_control")) return;
+    this.toolRegistry.register(new BrowserControlTool(controller, release));
+  }
   registerMediaTools(workspacePath) {
     const denied = new Set(this.config.tools?.disabledTools ?? []);
     const permitted = (name) => !denied.has(name);
@@ -31931,6 +32559,7 @@ ${prompt}` : prompt;
     this.router.setRunSignal(options.signal);
     const startMs = Date.now();
     const taskId = crypto.randomUUID();
+    this.emit("run:started", { taskId });
     this.decisionLog = [];
     this.currentRunCompleted = [];
     this.wroteCheckpointThisRun = false;
@@ -32482,14 +33111,14 @@ ${finalOutput}` : ""
 init_constants();
 var CLOUD_SESSION_FILE = "cloud-session.json";
 function globalDir(homeDir = os10__default.default.homedir()) {
-  return path35__default.default.join(homeDir, GLOBAL_CONFIG_DIR);
+  return path36__default.default.join(homeDir, GLOBAL_CONFIG_DIR);
 }
 function cloudSessionPath(dir = globalDir()) {
-  return path35__default.default.join(dir, CLOUD_SESSION_FILE);
+  return path36__default.default.join(dir, CLOUD_SESSION_FILE);
 }
 function loadCloudSession(dir = globalDir()) {
   try {
-    const raw = fs32__default.default.readFileSync(cloudSessionPath(dir), "utf-8");
+    const raw = fs33__default.default.readFileSync(cloudSessionPath(dir), "utf-8");
     const parsed = JSON.parse(raw);
     if (!parsed?.refreshToken || !parsed?.serverUrl) return null;
     return parsed;
@@ -32498,17 +33127,17 @@ function loadCloudSession(dir = globalDir()) {
   }
 }
 function saveCloudSession(session, dir = globalDir()) {
-  fs32__default.default.mkdirSync(dir, { recursive: true, mode: 448 });
+  fs33__default.default.mkdirSync(dir, { recursive: true, mode: 448 });
   const file = cloudSessionPath(dir);
-  fs32__default.default.writeFileSync(file, JSON.stringify(session, null, 2), { mode: 384 });
+  fs33__default.default.writeFileSync(file, JSON.stringify(session, null, 2), { mode: 384 });
   try {
-    fs32__default.default.chmodSync(file, 384);
+    fs33__default.default.chmodSync(file, 384);
   } catch {
   }
 }
 function clearCloudSession(dir = globalDir()) {
   try {
-    fs32__default.default.rmSync(cloudSessionPath(dir));
+    fs33__default.default.rmSync(cloudSessionPath(dir));
   } catch {
   }
 }
@@ -32680,16 +33309,16 @@ var CloudClient = class _CloudClient {
     return (await this.refresh()).accessToken;
   }
   /** Authenticated request that refreshes once on a 401 (e.g. server-side revoke). */
-  async authed(path40, init = {}) {
-    const call = (token) => fetch(this.url(path40), { ...init, headers: { ...init.headers ?? {}, Authorization: `Bearer ${token}` } });
+  async authed(path41, init = {}) {
+    const call = (token) => fetch(this.url(path41), { ...init, headers: { ...init.headers ?? {}, Authorization: `Bearer ${token}` } });
     let res = await call(await this.accessToken());
     if (res.status === 401) res = await call((await this.refresh()).accessToken);
     if (!res.ok) throw new Error(`Request failed (${res.status}).`);
     const text = await res.text();
     return text ? JSON.parse(text) : {};
   }
-  authedGet(path40) {
-    return this.authed(path40);
+  authedGet(path41) {
+    return this.authed(path41);
   }
   async fetchMe(token) {
     const res = await fetch(this.url("/api/me"), { headers: { Authorization: `Bearer ${token}` } });
@@ -34463,9 +35092,9 @@ function Repl({ config, workspacePath, themeName, initialPrompt, identityName, s
       }
     } catch {
     }
-    const configPath = path35__default.default.join(workspacePath, ".cascade", "config.json");
+    const configPath = path36__default.default.join(workspacePath, ".cascade", "config.json");
     try {
-      await fs11__default.default.mkdir(path35__default.default.dirname(configPath), { recursive: true });
+      await fs11__default.default.mkdir(path36__default.default.dirname(configPath), { recursive: true });
       await fs11__default.default.writeFile(configPath, JSON.stringify(config, null, 2), "utf-8");
     } catch (err) {
       const msg = err instanceof Error ? err.message : String(err);
@@ -34517,9 +35146,9 @@ function Repl({ config, workspacePath, themeName, initialPrompt, identityName, s
       if (msg.includes("non-text parts")) return;
       originalLog(...args);
     };
-    const store = new MemoryStore(path35__default.default.join(workspacePath, CASCADE_DB_FILE));
+    const store = new MemoryStore(path36__default.default.join(workspacePath, CASCADE_DB_FILE));
     storeRef.current = store;
-    globalStoreRef.current = new MemoryStore(path35__default.default.join(os10__default.default.homedir(), GLOBAL_CONFIG_DIR, GLOBAL_RUNTIME_DB_FILE));
+    globalStoreRef.current = new MemoryStore(path36__default.default.join(os10__default.default.homedir(), GLOBAL_CONFIG_DIR, GLOBAL_RUNTIME_DB_FILE));
     const identityRows = store.listIdentities().map((i) => ({ id: i.id, name: i.name, isDefault: i.isDefault }));
     setIdentities(identityRows);
     let initialIdentityId = config.defaultIdentityId ?? identityRows.find((i) => i.isDefault)?.id ?? identityRows[0]?.id;
@@ -34599,7 +35228,7 @@ function Repl({ config, workspacePath, themeName, initialPrompt, identityName, s
       onThemeChange: (name) => setTheme(getTheme(name)),
       onExport: async (fmt) => {
         const stamp2 = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
-        const exportPath = path35__default.default.join(workspacePath, `cascade-export-${stamp2}.${fmt === "json" ? "json" : "md"}`);
+        const exportPath = path36__default.default.join(workspacePath, `cascade-export-${stamp2}.${fmt === "json" ? "json" : "md"}`);
         if (fmt === "json") {
           await fs11__default.default.writeFile(exportPath, JSON.stringify({ sessionId: sessionIdRef.current, messages: state.messages }, null, 2), "utf-8");
         } else {
@@ -35519,7 +36148,7 @@ function stringifySlashOutput(val) {
 }
 async function searchSessionsAndMessages(query, workspacePath) {
   if (!query) return "Usage: /search <query>";
-  const dbPath = path35__default.default.join(workspacePath, CASCADE_DB_FILE);
+  const dbPath = path36__default.default.join(workspacePath, CASCADE_DB_FILE);
   try {
     await fs11__default.default.access(dbPath);
   } catch {
@@ -35553,7 +36182,7 @@ async function searchSessionsAndMessages(query, workspacePath) {
 async function diagnoseRuntime(config, workspacePath) {
   const providers = config.providers.map((p) => `${p.type}${p.apiKey ? " (key set)" : " (no key)"}`).join("\n");
   const models = [`T1: ${config.models.t1 ?? "default"}`, `T2: ${config.models.t2 ?? "default"}`, `T3: ${config.models.t3 ?? "default"}`].join("\n");
-  const store = new MemoryStore(path35__default.default.join(workspacePath, CASCADE_DB_FILE));
+  const store = new MemoryStore(path36__default.default.join(workspacePath, CASCADE_DB_FILE));
   try {
     const sessions2 = store.listSessions(void 0, 3);
     return [
@@ -35572,7 +36201,7 @@ async function diagnoseRuntime(config, workspacePath) {
 }
 async function showRecentLogs(args, workspacePath) {
   const limit = Number.parseInt(args[0] ?? "10", 10) || 10;
-  const store = new MemoryStore(path35__default.default.join(workspacePath, CASCADE_DB_FILE));
+  const store = new MemoryStore(path36__default.default.join(workspacePath, CASCADE_DB_FILE));
   try {
     const logs = store.listRuntimeNodeLogs(void 0, void 0, limit);
     if (!logs.length) return "No recent runtime logs.";
@@ -35584,7 +36213,7 @@ async function showRecentLogs(args, workspacePath) {
 async function loadSessionSnapshot(args, workspacePath) {
   const sessionId = args[0];
   if (!sessionId) return "Usage: /resume <sessionId>";
-  const store = new MemoryStore(path35__default.default.join(workspacePath, CASCADE_DB_FILE));
+  const store = new MemoryStore(path36__default.default.join(workspacePath, CASCADE_DB_FILE));
   try {
     const session = store.getSession(sessionId);
     if (!session) return `Session not found: ${sessionId}`;
@@ -36004,9 +36633,9 @@ function SetupWizard({ workspacePath, onComplete }) {
           ...anyAuto ? { cascadeAuto: true } : {}
         };
         const config = CascadeConfigSchema.parse(rawConfig);
-        const configDir = path35__default.default.join(workspacePath, ".cascade");
+        const configDir = path36__default.default.join(workspacePath, ".cascade");
         await fs11__default.default.mkdir(configDir, { recursive: true });
-        const configPath = path35__default.default.join(workspacePath, CASCADE_CONFIG_FILE);
+        const configPath = path36__default.default.join(workspacePath, CASCADE_CONFIG_FILE);
         await fs11__default.default.writeFile(configPath, JSON.stringify(config, null, 2), "utf-8");
         savedConfigRef.current = config;
         dispatchRef.current({ type: "GO_DONE" });
@@ -36347,14 +36976,14 @@ function printTelemetryBanner() {
 async function initCommand(workspacePath = process.cwd()) {
   const spin = ora__default.default({ text: "Initializing Cascade project\u2026", color: "magenta" }).start();
   try {
-    const configDir = path35__default.default.join(workspacePath, ".cascade");
+    const configDir = path36__default.default.join(workspacePath, ".cascade");
     await fs11__default.default.mkdir(configDir, { recursive: true });
-    const mdPath = path35__default.default.join(workspacePath, "CASCADE.md");
+    const mdPath = path36__default.default.join(workspacePath, "CASCADE.md");
     if (!await fileExists(mdPath)) {
       await createDefaultCascadeMd(workspacePath);
       spin.succeed(chalk8__default.default.green("Created CASCADE.md"));
     }
-    const ignorePath = path35__default.default.join(workspacePath, ".cascadeignore");
+    const ignorePath = path36__default.default.join(workspacePath, ".cascadeignore");
     if (!await fileExists(ignorePath)) {
       await createDefaultIgnoreFile(workspacePath);
       spin.succeed(chalk8__default.default.green("Created .cascadeignore"));
@@ -36363,7 +36992,7 @@ async function initCommand(workspacePath = process.cwd()) {
     console.log();
     console.log(chalk8__default.default.magenta("  \u25C8 Cascade AI \u2014 Project initialized"));
     console.log();
-    const configPath = path35__default.default.join(workspacePath, CASCADE_CONFIG_FILE);
+    const configPath = path36__default.default.join(workspacePath, CASCADE_CONFIG_FILE);
     if (await fileExists(configPath)) {
       console.log(chalk8__default.default.yellow("  .cascade/config.json already exists \u2014 launching wizard to reconfigure."));
       console.log();
@@ -36514,8 +37143,8 @@ function fromEnv(env) {
   return out;
 }
 async function fromClaudeCode(home, env) {
-  const dir = str(env["CLAUDE_CONFIG_DIR"]) ?? path35__default.default.join(home, ".claude");
-  const file = path35__default.default.join(dir, ".credentials.json");
+  const dir = str(env["CLAUDE_CONFIG_DIR"]) ?? path36__default.default.join(home, ".claude");
+  const file = path36__default.default.join(dir, ".credentials.json");
   const data = await readJson(file);
   if (!data) return [];
   const found = [];
@@ -36539,7 +37168,7 @@ async function fromClaudeCode(home, env) {
   return found;
 }
 async function fromCodex(home) {
-  const file = path35__default.default.join(home, ".codex", "auth.json");
+  const file = path36__default.default.join(home, ".codex", "auth.json");
   const data = await readJson(file);
   if (!data) return [];
   const apiKey = str(data["OPENAI_API_KEY"]);
@@ -36562,7 +37191,7 @@ async function fromCodex(home) {
   return [];
 }
 async function fromGemini(home) {
-  const file = path35__default.default.join(home, ".gemini", "oauth_creds.json");
+  const file = path36__default.default.join(home, ".gemini", "oauth_creds.json");
   const data = await readJson(file);
   const accessToken = str(data?.["access_token"]);
   if (!accessToken) return [];
@@ -36578,7 +37207,7 @@ async function fromGemini(home) {
 }
 async function fromCopilot(home) {
   for (const name of ["apps.json", "hosts.json"]) {
-    const file = path35__default.default.join(home, ".config", "github-copilot", name);
+    const file = path36__default.default.join(home, ".config", "github-copilot", name);
     const data = await readJson(file);
     if (!data) continue;
     for (const value of Object.values(data)) {
@@ -36879,7 +37508,7 @@ async function doctorCommand() {
   checks.push({
     label: "Cascade config",
     ok: true,
-    detail: `Loaded ${path35__default.default.join(process.cwd(), CASCADE_CONFIG_FILE)}`
+    detail: `Loaded ${path36__default.default.join(process.cwd(), CASCADE_CONFIG_FILE)}`
   });
   const providers = [
     { type: "anthropic", name: "Anthropic" },
@@ -36989,7 +37618,7 @@ async function checkEndpoint(url) {
   }
 }
 async function indexCommand(dirPath) {
-  const workspace = path35__default.default.resolve(dirPath || process.cwd());
+  const workspace = path36__default.default.resolve(dirPath || process.cwd());
   const cm = new ConfigManager(workspace);
   await cm.load();
   const config = cm.getConfig();
@@ -37000,8 +37629,8 @@ async function indexCommand(dirPath) {
     process.exitCode = 1;
     return;
   }
-  const dbPath = config.codeIndex?.dbPath || path35__default.default.join(workspace, ".cascade", "code-index.db");
-  fs32__default.default.mkdirSync(path35__default.default.dirname(dbPath), { recursive: true });
+  const dbPath = config.codeIndex?.dbPath || path36__default.default.join(workspace, ".cascade", "code-index.db");
+  fs33__default.default.mkdirSync(path36__default.default.dirname(dbPath), { recursive: true });
   const db = new Database2__default.default(dbPath);
   db.pragma("journal_mode = WAL");
   const complete = chatCompleterFromProviders(config.providers);
@@ -37533,7 +38162,7 @@ function openBrowser2(url) {
 }
 function storePathFor(name) {
   const safe = name.replace(/[^a-z0-9._-]/gi, "_").slice(0, 64) || "server";
-  return path35__default.default.join(os10__default.default.homedir(), ".cascade-ai", "mcp-oauth", `${safe}.json`);
+  return path36__default.default.join(os10__default.default.homedir(), ".cascade-ai", "mcp-oauth", `${safe}.json`);
 }
 function defaultName(url) {
   try {
@@ -37828,6 +38457,7 @@ function applySettingsPayload(config, data) {
     if (["auto", "T1", "T2", "T3"].includes(a["forceTier"])) config.routing = { ...config.routing ?? {}, forceTier: a["forceTier"] };
     if (typeof a["benchmarksLive"] === "boolean") config.benchmarks = { ...config.benchmarks ?? {}, live: a["benchmarksLive"] };
     if (["isolate", "worker", "auto"].includes(a["dynamicToolSandbox"])) config.tools = { ...config.tools ?? {}, dynamicToolSandbox: a["dynamicToolSandbox"] };
+    if (typeof a["agentBrowserControl"] === "boolean") config.tools = { ...config.tools ?? {}, agentBrowserControl: a["agentBrowserControl"] };
     if (typeof a["factsExtraction"] === "boolean") config.knowledge = { ...config.knowledge ?? {}, factsExtraction: a["factsExtraction"] };
     if (typeof a["rememberSessions"] === "boolean") config.memory = { ...config.memory ?? {}, rememberSessions: a["rememberSessions"] };
     if (typeof a["enableToolCreation"] === "boolean") config.enableToolCreation = a["enableToolCreation"];
@@ -37885,6 +38515,7 @@ function settingsSnapshot(config) {
       forceTier: config.routing?.forceTier,
       benchmarksLive: config.benchmarks?.live,
       dynamicToolSandbox: config.tools?.dynamicToolSandbox,
+      agentBrowserControl: config.tools?.agentBrowserControl,
       factsExtraction: config.knowledge?.factsExtraction,
       rememberSessions: config.memory?.rememberSessions,
       enableToolCreation: config.enableToolCreation,
@@ -37920,8 +38551,8 @@ function replaceInPlace(target, source) {
 }
 function writeConfigFile(configPath, config) {
   try {
-    fs32__default.default.mkdirSync(path35__default.default.dirname(configPath), { recursive: true });
-    fs32__default.default.writeFileSync(configPath, JSON.stringify(config, null, 2), "utf-8");
+    fs33__default.default.mkdirSync(path36__default.default.dirname(configPath), { recursive: true });
+    fs33__default.default.writeFileSync(configPath, JSON.stringify(config, null, 2), "utf-8");
     return { ok: true };
   } catch (err) {
     return { ok: false, error: err instanceof Error ? err.message : String(err) };
@@ -38337,7 +38968,7 @@ function aggregateCostStats(sessions2, opts = {}) {
 }
 
 // src/dashboard/server.ts
-var __dirname$1 = path35__default.default.dirname(url.fileURLToPath((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli.cjs', document.baseURI).href))));
+var __dirname$1 = path36__default.default.dirname(url.fileURLToPath((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli.cjs', document.baseURI).href))));
 var ORPHANED_ESCALATION_GRACE_MS = 3e4;
 var MASK = "***";
 function masked(key, value) {
@@ -38395,6 +39026,14 @@ var DashboardServer = class {
    * always failing.
    */
   currentPageProvider;
+  /**
+   * Supplied by the desktop shell so a run can ACT on that page — click, type,
+   * submit — not just read it. Same reasoning as the provider above: absent in
+   * the CLI, so the tool is not registered rather than present and failing.
+   * Cascade applies the `tools.agentBrowserControl` gate on top of this.
+   */
+  browserController;
+  browserActorRelease;
   activeControllers = /* @__PURE__ */ new Map();
   /**
    * Run taskIds per chat session — file snapshots are keyed by the run's
@@ -38456,6 +39095,7 @@ var DashboardServer = class {
     });
     this.socket.onConfigUpdate(async (data) => {
       const result = await commitSettings(this.config, data, (committed) => this.persistConfig(committed));
+      if (result.ok) this.settingsChangeHook?.(this.config);
       const refused = result.refused.map((r) => ({
         type: r.type,
         reason: r.reason,
@@ -38479,6 +39119,7 @@ var DashboardServer = class {
       const cascade = new Cascade(cfg, this.workspacePath, this.store);
       this.activeSessions.set(sessionId, cascade);
       if (this.currentPageProvider) cascade.setCurrentPageProvider(this.currentPageProvider);
+      if (this.browserController) cascade.setBrowserController(this.browserController, this.browserActorRelease);
       cascade.on("stream:token", (e) => {
         this.emitToSessionClients(socketId, sessionId, "stream:token", { sessionId, tierId: e.tierId, text: e.text, primary: e.primary });
       });
@@ -38502,13 +39143,16 @@ var DashboardServer = class {
         if (ev.requestId) this.clearPendingEscalation(ev.requestId);
         this.emitToSessionClients(socketId, sessionId, "escalation:timeout", { sessionId, ...e });
       });
+      cascade.on("run:started", (e) => {
+        const id = e.taskId;
+        if (id) this.recordSessionTask(sessionId, id);
+      });
       try {
         const result = await cascade.run({
           prompt: runPrompt,
           signal: abortController.signal,
           approvalCallback: this.makeApprovalCallback(sessionId)
         });
-        this.recordSessionTask(sessionId, result.taskId);
         this.persistRunEnd(sessionId, title, prompt, result.output, "COMPLETED", result);
         this.captureWhy(sessionId, cascade, result);
         this.emitToSessionClients(socketId, sessionId, "session:complete", { sessionId, result });
@@ -38574,6 +39218,49 @@ var DashboardServer = class {
   setCurrentPageProvider(provider) {
     this.currentPageProvider = provider;
   }
+  /** Let runs act on that view, not just read it (desktop only). */
+  setBrowserController(controller, release) {
+    this.browserController = controller;
+    this.browserActorRelease = release;
+  }
+  /**
+   * Told whenever settings are committed through THIS server.
+   *
+   * Settings reach the live config by two routes — the desktop's Electron IPC
+   * handler and this server's `config:update` socket — and both run the same
+   * `commitSettings`. The desktop mirrors `tools.agentBrowserControl` into its
+   * browser module after its own route, but had no way to learn about the
+   * other, so a socket write left the module's copy stale: an enable the module
+   * still refused, or worse a disable the module still honoured for a run
+   * already holding the tool. This is the same sibling-writer drift
+   * `settings-payload.ts` exists to prevent, one layer up.
+   */
+  settingsChangeHook;
+  onSettingsChanged(hook) {
+    this.settingsChangeHook = hook;
+  }
+  /**
+   * Told when a run ends, so a host holding run-scoped state can release it.
+   *
+   * The desktop uses this to retire a run's browser Stop control: that has to
+   * outlive each individual action (the gap between two actions is when the
+   * user most wants it) but must not outlive the run.
+   */
+  /**
+   * Fired when a run ends, carrying BOTH identifiers explicitly.
+   *
+   * They are different things and conflating them was a live bug: a chat
+   * `sessionId` can contain many runs (hence `sessionTaskIds`), while
+   * `Cascade.run()` mints a fresh random `taskId` per run — and it is the
+   * taskId that tools see as `ToolExecuteOptions.sessionId`. Passing only the
+   * chat id meant browser cleanup keyed on the task id matched nothing, so a
+   * finished run kept its Stop banner armed and held its browser lease until
+   * the deadlock ceiling.
+   */
+  runEndedHook;
+  onRunEnded(hook) {
+    this.runEndedHook = hook;
+  }
   async start() {
     const isLoopback = this.host === "127.0.0.1" || this.host === "::1" || this.host === "localhost";
     if (!isLoopback) {
@@ -38656,7 +39343,7 @@ var DashboardServer = class {
    * silently and still typecheck.
    */
   persistConfig(config) {
-    const result = writeConfigFile(path35__default.default.join(this.workspacePath, CASCADE_CONFIG_FILE), config);
+    const result = writeConfigFile(path36__default.default.join(this.workspacePath, CASCADE_CONFIG_FILE), config);
     if (!result.ok) console.warn(`[dashboard] Failed to persist config: ${result.error}`);
     return result;
   }
@@ -38675,7 +39362,7 @@ var DashboardServer = class {
    */
   syncGlobalCredentials() {
     try {
-      saveGlobalCredentials(path35__default.default.join(os10__default.default.homedir(), GLOBAL_CONFIG_DIR), this.config.providers ?? []);
+      saveGlobalCredentials(path36__default.default.join(os10__default.default.homedir(), GLOBAL_CONFIG_DIR), this.config.providers ?? []);
     } catch (err) {
       console.warn(`[dashboard] Failed to sync global credentials: ${err instanceof Error ? err.message : String(err)}`);
     }
@@ -38690,15 +39377,15 @@ var DashboardServer = class {
   resolveDashboardSecret() {
     const fromConfig = this.config.dashboard.secret ?? process.env["CASCADE_DASHBOARD_SECRET"];
     if (fromConfig) return fromConfig;
-    const secretPath = path35__default.default.join(this.workspacePath, CASCADE_DASHBOARD_SECRET_FILE);
+    const secretPath = path36__default.default.join(this.workspacePath, CASCADE_DASHBOARD_SECRET_FILE);
     try {
-      if (fs32__default.default.existsSync(secretPath)) {
-        const existing = fs32__default.default.readFileSync(secretPath, "utf-8").trim();
+      if (fs33__default.default.existsSync(secretPath)) {
+        const existing = fs33__default.default.readFileSync(secretPath, "utf-8").trim();
         if (existing.length >= 16) return existing;
       }
       const generated = crypto.randomUUID();
-      fs32__default.default.mkdirSync(path35__default.default.dirname(secretPath), { recursive: true });
-      fs32__default.default.writeFileSync(secretPath, generated, { encoding: "utf-8", mode: 384 });
+      fs33__default.default.mkdirSync(path36__default.default.dirname(secretPath), { recursive: true });
+      fs33__default.default.writeFileSync(secretPath, generated, { encoding: "utf-8", mode: 384 });
       if (this.config.dashboard.auth) {
         console.warn(
           `Dashboard auth enabled with no secret configured; persisted a generated secret to ${secretPath}. Set CASCADE_DASHBOARD_SECRET or config.dashboard.secret to override.`
@@ -38725,7 +39412,7 @@ var DashboardServer = class {
   // ── Setup ─────────────────────────────────────
   getGlobalStore() {
     if (!this.globalStore) {
-      const globalDbPath = path35__default.default.join(os10__default.default.homedir(), GLOBAL_CONFIG_DIR, GLOBAL_RUNTIME_DB_FILE);
+      const globalDbPath = path36__default.default.join(os10__default.default.homedir(), GLOBAL_CONFIG_DIR, GLOBAL_RUNTIME_DB_FILE);
       this.globalStore = new MemoryStore(globalDbPath);
     }
     return this.globalStore;
@@ -38764,6 +39451,8 @@ var DashboardServer = class {
   }
   /** Record run end: the assistant reply (when there is one) and the runtime row's final status. */
   persistRunEnd(sessionId, title, latestPrompt, reply, status, result) {
+    const endedTaskId = result?.taskId ?? this.sessionTaskIds.get(sessionId)?.at(-1);
+    this.runEndedHook?.({ sessionId, ...endedTaskId ? { taskId: endedTaskId } : {} });
     try {
       if (reply && reply.trim()) {
         this.store.addMessage({ id: crypto.randomUUID(), sessionId, role: "assistant", content: reply, timestamp: (/* @__PURE__ */ new Date()).toISOString() });
@@ -38857,6 +39546,7 @@ var DashboardServer = class {
     const prompt = task.prompt;
     const title = this.persistRunStart(sessionId, `[${task.name}] ${prompt}`);
     const cascade = new Cascade(this.config, task.workspacePath ?? this.workspacePath, this.store);
+    cascade.setUnattended(true);
     this.activeSessions.set(sessionId, cascade);
     cascade.on("tier:status", (e) => {
       this.socket.broadcast("tier:status", { sessionId, ...e });
@@ -38864,13 +39554,16 @@ var DashboardServer = class {
     cascade.on("peer:message", (e) => {
       this.socket.emitPeerMessage(e);
     });
+    cascade.on("run:started", (e) => {
+      const id = e.taskId;
+      if (id) this.recordSessionTask(sessionId, id);
+    });
     try {
       const result = await cascade.run({
         prompt,
         identityId: task.identityId,
         approvalCallback: async () => ({ approved: true, always: false })
       });
-      this.recordSessionTask(sessionId, result.taskId);
       this.persistRunEnd(sessionId, title, prompt, result.output, "COMPLETED", result);
       this.captureWhy(sessionId, cascade, result);
       this.socket.broadcast("session:complete", { sessionId, result });
@@ -39105,12 +39798,12 @@ ${prompt}`;
     }
   }
   watchRuntimeChanges() {
-    const workspaceDbPath = path35__default.default.join(this.workspacePath, CASCADE_DB_FILE);
-    const globalDbPath = path35__default.default.join(os10__default.default.homedir(), GLOBAL_CONFIG_DIR, GLOBAL_RUNTIME_DB_FILE);
+    const workspaceDbPath = path36__default.default.join(this.workspacePath, CASCADE_DB_FILE);
+    const globalDbPath = path36__default.default.join(os10__default.default.homedir(), GLOBAL_CONFIG_DIR, GLOBAL_RUNTIME_DB_FILE);
     const watchPaths = [workspaceDbPath, globalDbPath].filter((p, index, arr) => arr.indexOf(p) === index);
     for (const watchPath of watchPaths) {
-      if (!fs32__default.default.existsSync(watchPath)) continue;
-      fs32__default.default.watchFile(watchPath, { interval: 3e3 }, () => {
+      if (!fs33__default.default.existsSync(watchPath)) continue;
+      fs33__default.default.watchFile(watchPath, { interval: 3e3 }, () => {
         this.throttledBroadcast(watchPath === globalDbPath ? "global" : "workspace");
       });
     }
@@ -39232,7 +39925,7 @@ ${prompt}`;
       const sessionId = req.params.id;
       this.store.deleteSession(sessionId);
       this.store.deleteRuntimeSession(sessionId);
-      const globalDbPath = path35__default.default.join(os10__default.default.homedir(), GLOBAL_CONFIG_DIR, GLOBAL_RUNTIME_DB_FILE);
+      const globalDbPath = path36__default.default.join(os10__default.default.homedir(), GLOBAL_CONFIG_DIR, GLOBAL_RUNTIME_DB_FILE);
       const globalStore = new MemoryStore(globalDbPath);
       try {
         globalStore.deleteRuntimeSession(sessionId);
@@ -39325,7 +40018,7 @@ ${prompt}`;
     });
     this.app.delete("/api/sessions", auth2, (req, res) => {
       const body = req.body;
-      const globalDbPath = path35__default.default.join(os10__default.default.homedir(), GLOBAL_CONFIG_DIR, GLOBAL_RUNTIME_DB_FILE);
+      const globalDbPath = path36__default.default.join(os10__default.default.homedir(), GLOBAL_CONFIG_DIR, GLOBAL_RUNTIME_DB_FILE);
       if (body?.ids && Array.isArray(body.ids) && body.ids.length > 0) {
         const globalStore = new MemoryStore(globalDbPath);
         try {
@@ -39348,7 +40041,7 @@ ${prompt}`;
     });
     this.app.delete("/api/runtime", auth2, (_req, res) => {
       this.store.deleteAllRuntimeNodes();
-      const globalDbPath = path35__default.default.join(os10__default.default.homedir(), GLOBAL_CONFIG_DIR, GLOBAL_RUNTIME_DB_FILE);
+      const globalDbPath = path36__default.default.join(os10__default.default.homedir(), GLOBAL_CONFIG_DIR, GLOBAL_RUNTIME_DB_FILE);
       const globalStore = new MemoryStore(globalDbPath);
       try {
         globalStore.deleteAllRuntimeNodes();
@@ -39433,12 +40126,12 @@ ${prompt}`;
       if (body["tierLimits"]) this.config.tierLimits = { ...this.config.tierLimits, ...body["tierLimits"] };
       if (body["budget"]) this.config.budget = { ...this.config.budget, ...body["budget"] };
       try {
-        const configPath = path35__default.default.join(this.workspacePath, CASCADE_CONFIG_FILE);
-        const existing = fs32__default.default.existsSync(configPath) ? JSON.parse(fs32__default.default.readFileSync(configPath, "utf-8")) : {};
+        const configPath = path36__default.default.join(this.workspacePath, CASCADE_CONFIG_FILE);
+        const existing = fs33__default.default.existsSync(configPath) ? JSON.parse(fs33__default.default.readFileSync(configPath, "utf-8")) : {};
         const updated = { ...existing, tierLimits: this.config.tierLimits, budget: this.config.budget };
         const tmp = configPath + ".tmp";
-        fs32__default.default.writeFileSync(tmp, JSON.stringify(updated, null, 2), "utf-8");
-        fs32__default.default.renameSync(tmp, configPath);
+        fs33__default.default.writeFileSync(tmp, JSON.stringify(updated, null, 2), "utf-8");
+        fs33__default.default.renameSync(tmp, configPath);
         res.json({ ok: true });
       } catch (err) {
         res.status(500).json({ error: `Failed to save config: ${err instanceof Error ? err.message : String(err)}` });
@@ -39466,7 +40159,7 @@ ${prompt}`;
     this.app.get("/api/runtime", auth2, (req, res) => {
       const scope = req.query["scope"] ?? "workspace";
       if (scope === "global") {
-        const globalDbPath = path35__default.default.join(os10__default.default.homedir(), GLOBAL_CONFIG_DIR, GLOBAL_RUNTIME_DB_FILE);
+        const globalDbPath = path36__default.default.join(os10__default.default.homedir(), GLOBAL_CONFIG_DIR, GLOBAL_RUNTIME_DB_FILE);
         const globalStore = new MemoryStore(globalDbPath);
         try {
           res.json({
@@ -39503,6 +40196,7 @@ ${prompt}`;
         const cascade = new Cascade(this.config, this.workspacePath, this.store);
         this.activeSessions.set(sessionId, cascade);
         if (this.currentPageProvider) cascade.setCurrentPageProvider(this.currentPageProvider);
+        if (this.browserController) cascade.setBrowserController(this.browserController, this.browserActorRelease);
         cascade.on("stream:token", (e) => {
           this.socket.broadcastToRoom(`session:${sessionId}`, "stream:token", { sessionId, tierId: e.tierId, text: e.text, primary: e.primary });
         });
@@ -39526,13 +40220,16 @@ ${prompt}`;
           if (ev.requestId) this.clearPendingEscalation(ev.requestId);
           this.socket.broadcastToRoom(`session:${sessionId}`, "escalation:timeout", { sessionId, ...e });
         });
+        cascade.on("run:started", (e) => {
+          const id = e.taskId;
+          if (id) this.recordSessionTask(sessionId, id);
+        });
         try {
           const result = await cascade.run({
             prompt: runPrompt,
             identityId: body.identityId,
             approvalCallback: this.makeApprovalCallback(sessionId)
           });
-          this.recordSessionTask(sessionId, result.taskId);
           this.persistRunEnd(sessionId, title, prompt, result.output, "COMPLETED", result);
           this.captureWhy(sessionId, cascade, result);
           this.socket.broadcast("cost:update", {
@@ -39807,13 +40504,13 @@ ${prompt}`;
         res.status(500).json({ error: err instanceof Error ? err.message : String(err) });
       }
     });
-    const prodPath = path35__default.default.resolve(__dirname$1, "../web/dist");
-    const devPath = path35__default.default.resolve(__dirname$1, "../../web/dist");
-    const webDistPath = fs32__default.default.existsSync(prodPath) ? prodPath : devPath;
-    if (fs32__default.default.existsSync(webDistPath)) {
+    const prodPath = path36__default.default.resolve(__dirname$1, "../web/dist");
+    const devPath = path36__default.default.resolve(__dirname$1, "../../web/dist");
+    const webDistPath = fs33__default.default.existsSync(prodPath) ? prodPath : devPath;
+    if (fs33__default.default.existsSync(webDistPath)) {
       this.app.use(express__default.default.static(webDistPath));
       this.app.get("*", (_req, res) => {
-        res.sendFile(path35__default.default.join(webDistPath, "index.html"));
+        res.sendFile(path36__default.default.join(webDistPath, "index.html"));
       });
     } else {
       this.app.get("/", (_req, res) => {
@@ -39834,7 +40531,7 @@ init_constants();
 async function dashboardCommand(config, workspacePath = process.cwd()) {
   const port = config.dashboard.port ?? DEFAULT_DASHBOARD_PORT;
   const spin = ora__default.default({ text: `Starting dashboard on port ${port}\u2026`, color: "magenta" }).start();
-  const store = new MemoryStore(path35__default.default.join(workspacePath, CASCADE_DB_FILE));
+  const store = new MemoryStore(path36__default.default.join(workspacePath, CASCADE_DB_FILE));
   const server = new DashboardServer(config, store, workspacePath);
   server.watchRuntimeChanges();
   const gThis = globalThis;
@@ -39866,7 +40563,7 @@ init_constants();
 function makeIdentityCommand(workspacePath = process.cwd()) {
   const identity = new commander.Command("identity").alias("id").description("Manage Cascade identities");
   identity.command("list").description("List all available identities").action(() => {
-    const store = new MemoryStore(path35__default.default.join(workspacePath, CASCADE_DB_FILE));
+    const store = new MemoryStore(path36__default.default.join(workspacePath, CASCADE_DB_FILE));
     try {
       const identities = store.listIdentities();
       console.log(chalk8__default.default.bold("\n  Identities:"));
@@ -39886,7 +40583,7 @@ function makeIdentityCommand(workspacePath = process.cwd()) {
     }
   });
   identity.command("create <name>").description("Create a new identity").option("-d, --desc <text>", "Description of the identity").option("-s, --system <text>", "System prompt").option("--default", "Set as default identity").action((name, options) => {
-    const store = new MemoryStore(path35__default.default.join(workspacePath, CASCADE_DB_FILE));
+    const store = new MemoryStore(path36__default.default.join(workspacePath, CASCADE_DB_FILE));
     try {
       if (options.default) {
         const existingDefault = store.getDefaultIdentity();
@@ -39912,7 +40609,7 @@ function makeIdentityCommand(workspacePath = process.cwd()) {
     }
   });
   identity.command("set-default <name>").description("Set an identity as default by name or ID").action((query) => {
-    const store = new MemoryStore(path35__default.default.join(workspacePath, CASCADE_DB_FILE));
+    const store = new MemoryStore(path36__default.default.join(workspacePath, CASCADE_DB_FILE));
     try {
       const identities = store.listIdentities();
       const match = identities.find((i) => i.id === query || i.name.toLowerCase() === query.toLowerCase());
@@ -40061,8 +40758,8 @@ async function exportCommand(options = {}) {
   let store;
   try {
     const workspacePath = options.workspacePath ?? process.cwd();
-    const workspaceDbPath = path35__default.default.join(workspacePath, CASCADE_DB_FILE);
-    const globalDbPath = path35__default.default.join(os10__default.default.homedir(), GLOBAL_CONFIG_DIR, GLOBAL_DB_FILE);
+    const workspaceDbPath = path36__default.default.join(workspacePath, CASCADE_DB_FILE);
+    const globalDbPath = path36__default.default.join(os10__default.default.homedir(), GLOBAL_CONFIG_DIR, GLOBAL_DB_FILE);
     let dbPath = globalDbPath;
     try {
       await fs11__default.default.access(workspaceDbPath);
@@ -40104,7 +40801,7 @@ async function exportCommand(options = {}) {
     const ext = format === "json" ? ".json" : ".md";
     const safeName = session.title.replace(/[^\w\s-]/g, "").replace(/\s+/g, "-").slice(0, 60);
     const defaultFile = `cascade-export-${safeName}${ext}`;
-    const outPath = options.output ? path35__default.default.resolve(options.output) : path35__default.default.join(process.cwd(), defaultFile);
+    const outPath = options.output ? path36__default.default.resolve(options.output) : path36__default.default.join(process.cwd(), defaultFile);
     await fs11__default.default.writeFile(outPath, content, "utf-8");
     spin.succeed(chalk8__default.default.green(`Exported to ${chalk8__default.default.white(outPath)}`));
     const messageCount = Array.isArray(session.messages) ? session.messages.length : 0;
@@ -40244,7 +40941,7 @@ var SHOW_CURSOR = "\x1B[?25h";
 function writeNow(stdout, text) {
   if (typeof stdout.fd === "number") {
     try {
-      fs32__default.default.writeSync(stdout.fd, text);
+      fs33__default.default.writeSync(stdout.fd, text);
       return;
     } catch {
     }
@@ -40267,11 +40964,11 @@ function restoreTerminal(stdin, stdout) {
 dotenv__default.default.config();
 function warnIfBuildIsStale() {
   try {
-    const here = path35__default.default.dirname(url.fileURLToPath((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli.cjs', document.baseURI).href))));
+    const here = path36__default.default.dirname(url.fileURLToPath((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('cli.cjs', document.baseURI).href))));
     for (const rel of ["..", "../.."]) {
-      const pkgPath = path35__default.default.join(here, rel, "package.json");
-      if (!fs32__default.default.existsSync(pkgPath)) continue;
-      const pkg = JSON.parse(fs32__default.default.readFileSync(pkgPath, "utf-8"));
+      const pkgPath = path36__default.default.join(here, rel, "package.json");
+      if (!fs33__default.default.existsSync(pkgPath)) continue;
+      const pkg = JSON.parse(fs33__default.default.readFileSync(pkgPath, "utf-8"));
       if (pkg.name !== "cascade-ai") continue;
       if (pkg.version && pkg.version !== CASCADE_VERSION) {
         console.error(