cascade-ai 0.76.0 → 0.78.0

package/dist/index.cjs

@@ -1,14 +1,14 @@
 'use strict';
 
 var Database2 = require('better-sqlite3');
-var path27 = require('path');
-var fs26 = require('fs');
+var path28 = require('path');
+var fs27 = require('fs');
 var os6 = require('os');
 var crypto = require('crypto');
 var EventEmitter = require('events');
 var glob = require('glob');
 var Anthropic = require('@anthropic-ai/sdk');
-var dns = require('dns');
+var dnsCallback = require('dns');
 var http = require('http');
 var https = require('https');
 var zlib = require('zlib');
@@ -24,6 +24,7 @@ var simpleGit = require('simple-git');
 var PDFDocument = require('pdfkit');
 var dns2 = require('dns/promises');
 var net = require('net');
+var undici = require('undici');
 var index_js = require('@modelcontextprotocol/sdk/client/index.js');
 var stdio_js = require('@modelcontextprotocol/sdk/client/stdio.js');
 var streamableHttp_js = require('@modelcontextprotocol/sdk/client/streamableHttp.js');
@@ -61,13 +62,13 @@ function _interopNamespace(e) {
 }
 
 var Database2__default = /*#__PURE__*/_interopDefault(Database2);
-var path27__default = /*#__PURE__*/_interopDefault(path27);
-var fs26__default = /*#__PURE__*/_interopDefault(fs26);
+var path28__default = /*#__PURE__*/_interopDefault(path28);
+var fs27__default = /*#__PURE__*/_interopDefault(fs27);
 var os6__default = /*#__PURE__*/_interopDefault(os6);
 var crypto__default = /*#__PURE__*/_interopDefault(crypto);
 var EventEmitter__default = /*#__PURE__*/_interopDefault(EventEmitter);
 var Anthropic__default = /*#__PURE__*/_interopDefault(Anthropic);
-var dns__default = /*#__PURE__*/_interopDefault(dns);
+var dnsCallback__default = /*#__PURE__*/_interopDefault(dnsCallback);
 var http__default = /*#__PURE__*/_interopDefault(http);
 var https__default = /*#__PURE__*/_interopDefault(https);
 var zlib__default = /*#__PURE__*/_interopDefault(zlib);
@@ -178,16 +179,16 @@ var require_isarray = __commonJS({
   }
 });
 
-// node_modules/jszip/node_modules/readable-stream/lib/internal/streams/stream.js
+// node_modules/readable-stream/lib/internal/streams/stream.js
 var require_stream = __commonJS({
-  "node_modules/jszip/node_modules/readable-stream/lib/internal/streams/stream.js"(exports, module) {
+  "node_modules/readable-stream/lib/internal/streams/stream.js"(exports, module) {
     module.exports = __require("stream");
   }
 });
 
-// node_modules/jszip/node_modules/safe-buffer/index.js
+// node_modules/readable-stream/node_modules/safe-buffer/index.js
 var require_safe_buffer = __commonJS({
-  "node_modules/jszip/node_modules/safe-buffer/index.js"(exports, module) {
+  "node_modules/readable-stream/node_modules/safe-buffer/index.js"(exports, module) {
     var buffer = __require("buffer");
     var Buffer2 = buffer.Buffer;
     function copyProps(src, dst) {
@@ -305,7 +306,7 @@ var require_util = __commonJS({
       typeof arg === "undefined";
     }
     exports.isPrimitive = isPrimitive;
-    exports.isBuffer = Buffer.isBuffer;
+    exports.isBuffer = __require("buffer").Buffer.isBuffer;
     function objectToString(o) {
       return Object.prototype.toString.call(o);
     }
@@ -358,9 +359,9 @@ var require_inherits = __commonJS({
   }
 });
 
-// node_modules/jszip/node_modules/readable-stream/lib/internal/streams/BufferList.js
+// node_modules/readable-stream/lib/internal/streams/BufferList.js
 var require_BufferList = __commonJS({
-  "node_modules/jszip/node_modules/readable-stream/lib/internal/streams/BufferList.js"(exports, module) {
+  "node_modules/readable-stream/lib/internal/streams/BufferList.js"(exports, module) {
     function _classCallCheck(instance, Constructor) {
       if (!(instance instanceof Constructor)) {
         throw new TypeError("Cannot call a class as a function");
@@ -435,9 +436,9 @@ var require_BufferList = __commonJS({
   }
 });
 
-// node_modules/jszip/node_modules/readable-stream/lib/internal/streams/destroy.js
+// node_modules/readable-stream/lib/internal/streams/destroy.js
 var require_destroy = __commonJS({
-  "node_modules/jszip/node_modules/readable-stream/lib/internal/streams/destroy.js"(exports, module) {
+  "node_modules/readable-stream/lib/internal/streams/destroy.js"(exports, module) {
     var pna = require_process_nextick_args();
     function destroy(err, cb) {
       var _this = this;
@@ -510,9 +511,9 @@ var require_node = __commonJS({
   }
 });
 
-// node_modules/jszip/node_modules/readable-stream/lib/_stream_writable.js
+// node_modules/readable-stream/lib/_stream_writable.js
 var require_stream_writable = __commonJS({
-  "node_modules/jszip/node_modules/readable-stream/lib/_stream_writable.js"(exports, module) {
+  "node_modules/readable-stream/lib/_stream_writable.js"(exports, module) {
     var pna = require_process_nextick_args();
     module.exports = Writable;
     function CorkedRequest(state) {
@@ -949,9 +950,9 @@ var require_stream_writable = __commonJS({
   }
 });
 
-// node_modules/jszip/node_modules/readable-stream/lib/_stream_duplex.js
+// node_modules/readable-stream/lib/_stream_duplex.js
 var require_stream_duplex = __commonJS({
-  "node_modules/jszip/node_modules/readable-stream/lib/_stream_duplex.js"(exports, module) {
+  "node_modules/readable-stream/lib/_stream_duplex.js"(exports, module) {
     var pna = require_process_nextick_args();
     var objectKeys = Object.keys || function(obj) {
       var keys2 = [];
@@ -1025,10 +1026,67 @@ var require_stream_duplex = __commonJS({
   }
 });
 
-// node_modules/jszip/node_modules/string_decoder/lib/string_decoder.js
+// node_modules/string_decoder/node_modules/safe-buffer/index.js
+var require_safe_buffer2 = __commonJS({
+  "node_modules/string_decoder/node_modules/safe-buffer/index.js"(exports, module) {
+    var buffer = __require("buffer");
+    var Buffer2 = buffer.Buffer;
+    function copyProps(src, dst) {
+      for (var key in src) {
+        dst[key] = src[key];
+      }
+    }
+    if (Buffer2.from && Buffer2.alloc && Buffer2.allocUnsafe && Buffer2.allocUnsafeSlow) {
+      module.exports = buffer;
+    } else {
+      copyProps(buffer, exports);
+      exports.Buffer = SafeBuffer;
+    }
+    function SafeBuffer(arg, encodingOrOffset, length) {
+      return Buffer2(arg, encodingOrOffset, length);
+    }
+    copyProps(Buffer2, SafeBuffer);
+    SafeBuffer.from = function(arg, encodingOrOffset, length) {
+      if (typeof arg === "number") {
+        throw new TypeError("Argument must not be a number");
+      }
+      return Buffer2(arg, encodingOrOffset, length);
+    };
+    SafeBuffer.alloc = function(size, fill, encoding) {
+      if (typeof size !== "number") {
+        throw new TypeError("Argument must be a number");
+      }
+      var buf = Buffer2(size);
+      if (fill !== void 0) {
+        if (typeof encoding === "string") {
+          buf.fill(fill, encoding);
+        } else {
+          buf.fill(fill);
+        }
+      } else {
+        buf.fill(0);
+      }
+      return buf;
+    };
+    SafeBuffer.allocUnsafe = function(size) {
+      if (typeof size !== "number") {
+        throw new TypeError("Argument must be a number");
+      }
+      return Buffer2(size);
+    };
+    SafeBuffer.allocUnsafeSlow = function(size) {
+      if (typeof size !== "number") {
+        throw new TypeError("Argument must be a number");
+      }
+      return buffer.SlowBuffer(size);
+    };
+  }
+});
+
+// node_modules/string_decoder/lib/string_decoder.js
 var require_string_decoder = __commonJS({
-  "node_modules/jszip/node_modules/string_decoder/lib/string_decoder.js"(exports) {
-    var Buffer2 = require_safe_buffer().Buffer;
+  "node_modules/string_decoder/lib/string_decoder.js"(exports) {
+    var Buffer2 = require_safe_buffer2().Buffer;
     var isEncoding = Buffer2.isEncoding || function(encoding) {
       encoding = "" + encoding;
       switch (encoding && encoding.toLowerCase()) {
@@ -1262,9 +1320,9 @@ var require_string_decoder = __commonJS({
   }
 });
 
-// node_modules/jszip/node_modules/readable-stream/lib/_stream_readable.js
+// node_modules/readable-stream/lib/_stream_readable.js
 var require_stream_readable = __commonJS({
-  "node_modules/jszip/node_modules/readable-stream/lib/_stream_readable.js"(exports, module) {
+  "node_modules/readable-stream/lib/_stream_readable.js"(exports, module) {
     var pna = require_process_nextick_args();
     module.exports = Readable2;
     var isArray = require_isarray();
@@ -1947,9 +2005,9 @@ var require_stream_readable = __commonJS({
   }
 });
 
-// node_modules/jszip/node_modules/readable-stream/lib/_stream_transform.js
+// node_modules/readable-stream/lib/_stream_transform.js
 var require_stream_transform = __commonJS({
-  "node_modules/jszip/node_modules/readable-stream/lib/_stream_transform.js"(exports, module) {
+  "node_modules/readable-stream/lib/_stream_transform.js"(exports, module) {
     module.exports = Transform;
     var Duplex = require_stream_duplex();
     var util = Object.create(require_util());
@@ -2046,9 +2104,9 @@ var require_stream_transform = __commonJS({
   }
 });
 
-// node_modules/jszip/node_modules/readable-stream/lib/_stream_passthrough.js
+// node_modules/readable-stream/lib/_stream_passthrough.js
 var require_stream_passthrough = __commonJS({
-  "node_modules/jszip/node_modules/readable-stream/lib/_stream_passthrough.js"(exports, module) {
+  "node_modules/readable-stream/lib/_stream_passthrough.js"(exports, module) {
     module.exports = PassThrough;
     var Transform = require_stream_transform();
     var util = Object.create(require_util());
@@ -2064,9 +2122,9 @@ var require_stream_passthrough = __commonJS({
   }
 });
 
-// node_modules/jszip/node_modules/readable-stream/readable.js
+// node_modules/readable-stream/readable.js
 var require_readable = __commonJS({
-  "node_modules/jszip/node_modules/readable-stream/readable.js"(exports, module) {
+  "node_modules/readable-stream/readable.js"(exports, module) {
     var Stream = __require("stream");
     if (process.env.READABLE_STREAM === "disable" && Stream) {
       module.exports = Stream;
@@ -2975,8 +3033,8 @@ var require_utils = __commonJS({
       var result = transform[inputType][outputType](input);
       return result;
     };
-    exports.resolve = function(path29) {
-      var parts = path29.split("/");
+    exports.resolve = function(path30) {
+      var parts = path30.split("/");
       var result = [];
       for (var index = 0; index < parts.length; index++) {
         var part = parts[index];
@@ -8791,18 +8849,18 @@ var require_object = __commonJS({
       var object = new ZipObject(name, zipObjectContent, o);
       this.files[name] = object;
     };
-    var parentFolder = function(path29) {
-      if (path29.slice(-1) === "/") {
-        path29 = path29.substring(0, path29.length - 1);
+    var parentFolder = function(path30) {
+      if (path30.slice(-1) === "/") {
+        path30 = path30.substring(0, path30.length - 1);
       }
-      var lastSlash = path29.lastIndexOf("/");
-      return lastSlash > 0 ? path29.substring(0, lastSlash) : "";
+      var lastSlash = path30.lastIndexOf("/");
+      return lastSlash > 0 ? path30.substring(0, lastSlash) : "";
     };
-    var forceTrailingSlash = function(path29) {
-      if (path29.slice(-1) !== "/") {
-        path29 += "/";
+    var forceTrailingSlash = function(path30) {
+      if (path30.slice(-1) !== "/") {
+        path30 += "/";
       }
-      return path29;
+      return path30;
     };
     var folderAdd = function(name, createFolders) {
       createFolders = typeof createFolders !== "undefined" ? createFolders : defaults.createFolders;
@@ -9801,12 +9859,12 @@ var init_audit_logger = __esm({
       constructor(workspacePath, debugMode = false) {
         this.workspacePath = workspacePath;
         this.debugMode = debugMode;
-        const cascadeDir = path27__default.default.join(workspacePath, ".cascade");
-        if (!fs26__default.default.existsSync(cascadeDir)) {
-          fs26__default.default.mkdirSync(cascadeDir, { recursive: true });
+        const cascadeDir = path28__default.default.join(workspacePath, ".cascade");
+        if (!fs27__default.default.existsSync(cascadeDir)) {
+          fs27__default.default.mkdirSync(cascadeDir, { recursive: true });
         }
-        this.keyPath = path27__default.default.join(cascadeDir, "audit_log.key");
-        this.dbPath = path27__default.default.join(cascadeDir, "audit_log.db");
+        this.keyPath = path28__default.default.join(cascadeDir, "audit_log.key");
+        this.dbPath = path28__default.default.join(cascadeDir, "audit_log.db");
         this.initEncryptionKey();
         this.db = new Database2__default.default(this.dbPath);
         this.db.pragma("journal_mode = WAL");
@@ -9836,11 +9894,11 @@ var init_audit_logger = __esm({
         return crypto__default.default.createHash("sha256").update(`${prevHash}|${timestamp}|${eventType}|${tierId}|${encryptedPayload}`).digest("hex");
       }
       initEncryptionKey() {
-        if (fs26__default.default.existsSync(this.keyPath)) {
-          this.encryptionKey = fs26__default.default.readFileSync(this.keyPath);
+        if (fs27__default.default.existsSync(this.keyPath)) {
+          this.encryptionKey = fs27__default.default.readFileSync(this.keyPath);
         } else {
           this.encryptionKey = crypto__default.default.randomBytes(32);
-          fs26__default.default.writeFileSync(this.keyPath, this.encryptionKey);
+          fs27__default.default.writeFileSync(this.keyPath, this.encryptionKey);
         }
       }
       encrypt(text) {
@@ -9918,9 +9976,9 @@ var init_audit_logger = __esm({
       dumpDebugIfNeeded() {
         if (!this.debugMode) return;
         try {
-          const dumpPath = path27__default.default.join(os6__default.default.tmpdir(), "cascade_audit_logs_debug.json");
+          const dumpPath = path28__default.default.join(os6__default.default.tmpdir(), "cascade_audit_logs_debug.json");
           const entries = this.getAllLogs();
-          fs26__default.default.writeFileSync(dumpPath, JSON.stringify(entries, null, 2), "utf-8");
+          fs27__default.default.writeFileSync(dumpPath, JSON.stringify(entries, null, 2), "utf-8");
         } catch (err) {
           console.error("Failed to dump debug audit logs", err);
         }
@@ -11611,7 +11669,7 @@ function reconcilePrice(model, live) {
 }
 
 // src/constants.ts
-var CASCADE_VERSION = "0.76.0";
+var CASCADE_VERSION = "0.78.0";
 var CASCADE_CONFIG_DIR = ".cascade";
 var CASCADE_MD_FILE = "CASCADE.md";
 var CASCADE_IGNORE_FILE = ".cascadeignore";
@@ -11632,64 +11690,88 @@ var DEFAULT_AUTO_SUMMARIZE_AT = 15e4;
 var DEFAULT_MAX_SESSION_MESSAGES = 1e3;
 var DEFAULT_RETENTION_DAYS = 90;
 var MODELS = {
-  // Anthropic
-  "claude-opus-4": {
-    id: "claude-opus-4-5",
-    name: "Claude Opus 4",
+  // Anthropic — active Claude API models (2026-08-27).
+  "claude-fable-5": {
+    id: "claude-fable-5",
+    name: "Claude Fable 5",
     provider: "anthropic",
-    contextWindow: 2e5,
+    contextWindow: 1e6,
     isVisionCapable: true,
-    inputCostPer1kTokens: 0.015,
-    outputCostPer1kTokens: 0.075,
-    maxOutputTokens: 32e3,
+    inputCostPer1kTokens: 0.01,
+    outputCostPer1kTokens: 0.05,
+    maxOutputTokens: 128e3,
     supportsStreaming: true,
     isLocal: false
   },
-  "claude-sonnet-4": {
-    id: "claude-sonnet-4-5",
-    name: "Claude Sonnet 4",
+  "claude-opus-5": {
+    id: "claude-opus-5",
+    name: "Claude Opus 5",
     provider: "anthropic",
-    contextWindow: 2e5,
+    contextWindow: 1e6,
     isVisionCapable: true,
-    inputCostPer1kTokens: 3e-3,
-    outputCostPer1kTokens: 0.015,
-    maxOutputTokens: 16e3,
+    inputCostPer1kTokens: 5e-3,
+    outputCostPer1kTokens: 0.025,
+    maxOutputTokens: 128e3,
     supportsStreaming: true,
     isLocal: false
   },
-  "claude-haiku-3-5": {
-    id: "claude-haiku-3-5-20251001",
-    name: "Claude Haiku 3.5",
+  "claude-opus-4-8": {
+    id: "claude-opus-4-8",
+    name: "Claude Opus 4.8",
     provider: "anthropic",
-    contextWindow: 2e5,
+    contextWindow: 1e6,
     isVisionCapable: true,
-    inputCostPer1kTokens: 8e-4,
-    outputCostPer1kTokens: 4e-3,
-    maxOutputTokens: 8e3,
+    inputCostPer1kTokens: 5e-3,
+    outputCostPer1kTokens: 0.025,
+    maxOutputTokens: 128e3,
     supportsStreaming: true,
     isLocal: false
   },
-  "claude-haiku-4-5": {
-    id: "claude-haiku-4-5-20251001",
-    name: "Claude Haiku 4.5",
+  "claude-opus-4-7": {
+    id: "claude-opus-4-7",
+    name: "Claude Opus 4.7",
     provider: "anthropic",
-    contextWindow: 2e5,
+    contextWindow: 1e6,
     isVisionCapable: true,
-    inputCostPer1kTokens: 8e-4,
-    outputCostPer1kTokens: 4e-3,
-    maxOutputTokens: 8e3,
+    inputCostPer1kTokens: 5e-3,
+    outputCostPer1kTokens: 0.025,
+    maxOutputTokens: 128e3,
     supportsStreaming: true,
     isLocal: false
   },
-  "claude-opus-4-8": {
-    id: "claude-opus-4-8",
-    name: "Claude Opus 4.8",
+  "claude-opus-4-6": {
+    id: "claude-opus-4-6",
+    name: "Claude Opus 4.6",
+    provider: "anthropic",
+    contextWindow: 1e6,
+    isVisionCapable: true,
+    inputCostPer1kTokens: 5e-3,
+    outputCostPer1kTokens: 0.025,
+    maxOutputTokens: 128e3,
+    supportsStreaming: true,
+    isLocal: false
+  },
+  "claude-opus-4-5": {
+    id: "claude-opus-4-5-20251101",
+    name: "Claude Opus 4.5",
     provider: "anthropic",
     contextWindow: 2e5,
     isVisionCapable: true,
-    inputCostPer1kTokens: 0.015,
-    outputCostPer1kTokens: 0.075,
-    maxOutputTokens: 32e3,
+    inputCostPer1kTokens: 5e-3,
+    outputCostPer1kTokens: 0.025,
+    maxOutputTokens: 64e3,
+    supportsStreaming: true,
+    isLocal: false
+  },
+  "claude-sonnet-5": {
+    id: "claude-sonnet-5",
+    name: "Claude Sonnet 5",
+    provider: "anthropic",
+    contextWindow: 1e6,
+    isVisionCapable: true,
+    inputCostPer1kTokens: 2e-3,
+    outputCostPer1kTokens: 0.01,
+    maxOutputTokens: 128e3,
     supportsStreaming: true,
     isLocal: false
   },
@@ -11697,76 +11779,135 @@ var MODELS = {
     id: "claude-sonnet-4-6",
     name: "Claude Sonnet 4.6",
     provider: "anthropic",
+    contextWindow: 1e6,
+    isVisionCapable: true,
+    inputCostPer1kTokens: 3e-3,
+    outputCostPer1kTokens: 0.015,
+    maxOutputTokens: 64e3,
+    supportsStreaming: true,
+    isLocal: false
+  },
+  "claude-sonnet-4-5": {
+    id: "claude-sonnet-4-5-20250929",
+    name: "Claude Sonnet 4.5",
+    provider: "anthropic",
     contextWindow: 2e5,
     isVisionCapable: true,
     inputCostPer1kTokens: 3e-3,
     outputCostPer1kTokens: 0.015,
-    maxOutputTokens: 16e3,
+    maxOutputTokens: 64e3,
     supportsStreaming: true,
     isLocal: false
   },
-  // OpenAI
-  "gpt-4o": {
-    id: "gpt-4o",
-    name: "GPT-4o",
+  "claude-haiku-4-5": {
+    id: "claude-haiku-4-5-20251001",
+    name: "Claude Haiku 4.5",
+    provider: "anthropic",
+    contextWindow: 2e5,
+    isVisionCapable: true,
+    inputCostPer1kTokens: 1e-3,
+    outputCostPer1kTokens: 5e-3,
+    maxOutputTokens: 64e3,
+    supportsStreaming: true,
+    isLocal: false
+  },
+  // OpenAI — active chat-capable models used by Cascade's Chat Completions path.
+  "gpt-5.6-sol": {
+    id: "gpt-5.6-sol",
+    name: "GPT-5.6 Sol",
     provider: "openai",
-    contextWindow: 128e3,
+    contextWindow: 105e4,
+    isVisionCapable: true,
+    inputCostPer1kTokens: 4e-3,
+    outputCostPer1kTokens: 0.02,
+    maxOutputTokens: 128e3,
+    supportsStreaming: true,
+    isLocal: false
+  },
+  "gpt-5.6-terra": {
+    id: "gpt-5.6-terra",
+    name: "GPT-5.6 Terra",
+    provider: "openai",
+    contextWindow: 105e4,
+    isVisionCapable: true,
+    inputCostPer1kTokens: 2e-3,
+    outputCostPer1kTokens: 0.012,
+    maxOutputTokens: 128e3,
+    supportsStreaming: true,
+    isLocal: false
+  },
+  "gpt-5.6-luna": {
+    id: "gpt-5.6-luna",
+    name: "GPT-5.6 Luna",
+    provider: "openai",
+    contextWindow: 105e4,
+    isVisionCapable: true,
+    inputCostPer1kTokens: 2e-4,
+    outputCostPer1kTokens: 12e-4,
+    maxOutputTokens: 128e3,
+    supportsStreaming: true,
+    isLocal: false
+  },
+  "gpt-5.5": {
+    id: "gpt-5.5",
+    name: "GPT-5.5",
+    provider: "openai",
+    contextWindow: 105e4,
     isVisionCapable: true,
     inputCostPer1kTokens: 5e-3,
-    outputCostPer1kTokens: 0.015,
-    maxOutputTokens: 16e3,
+    outputCostPer1kTokens: 0.03,
+    maxOutputTokens: 128e3,
     supportsStreaming: true,
     isLocal: false
   },
-  "gpt-4o-mini": {
-    id: "gpt-4o-mini",
-    name: "GPT-4o Mini",
+  "gpt-5.4": {
+    id: "gpt-5.4",
+    name: "GPT-5.4",
     provider: "openai",
-    contextWindow: 128e3,
+    contextWindow: 105e4,
     isVisionCapable: true,
-    inputCostPer1kTokens: 15e-5,
-    outputCostPer1kTokens: 6e-4,
-    maxOutputTokens: 16e3,
+    inputCostPer1kTokens: 25e-4,
+    outputCostPer1kTokens: 0.015,
+    maxOutputTokens: 128e3,
     supportsStreaming: true,
     isLocal: false
   },
-  "gpt-4.1": {
-    id: "gpt-4.1",
-    name: "GPT-4.1",
+  "gpt-5.4-mini": {
+    id: "gpt-5.4-mini",
+    name: "GPT-5.4 Mini",
     provider: "openai",
-    contextWindow: 1047576,
+    contextWindow: 4e5,
     isVisionCapable: true,
-    inputCostPer1kTokens: 2e-3,
-    outputCostPer1kTokens: 8e-3,
-    maxOutputTokens: 32768,
+    inputCostPer1kTokens: 75e-5,
+    outputCostPer1kTokens: 45e-4,
+    maxOutputTokens: 128e3,
     supportsStreaming: true,
     isLocal: false
   },
-  "gpt-4.1-mini": {
-    id: "gpt-4.1-mini",
-    name: "GPT-4.1 Mini",
+  "gpt-5.4-nano": {
+    id: "gpt-5.4-nano",
+    name: "GPT-5.4 Nano",
     provider: "openai",
-    contextWindow: 1047576,
+    contextWindow: 4e5,
     isVisionCapable: true,
-    inputCostPer1kTokens: 4e-4,
-    outputCostPer1kTokens: 16e-4,
-    maxOutputTokens: 32768,
+    inputCostPer1kTokens: 2e-4,
+    outputCostPer1kTokens: 125e-5,
+    maxOutputTokens: 128e3,
     supportsStreaming: true,
     isLocal: false
   },
-  "gpt-4.1-nano": {
-    id: "gpt-4.1-nano",
-    name: "GPT-4.1 Nano",
+  "gpt-5.2": {
+    id: "gpt-5.2",
+    name: "GPT-5.2",
     provider: "openai",
-    contextWindow: 1047576,
+    contextWindow: 4e5,
     isVisionCapable: true,
-    inputCostPer1kTokens: 1e-4,
-    outputCostPer1kTokens: 4e-4,
-    maxOutputTokens: 32768,
+    inputCostPer1kTokens: 175e-5,
+    outputCostPer1kTokens: 0.014,
+    maxOutputTokens: 128e3,
     supportsStreaming: true,
     isLocal: false
   },
-  // GPT-5 family (offline baseline pricing; the live fetch keeps it current).
   "gpt-5": {
     id: "gpt-5",
     name: "GPT-5",
@@ -11803,79 +11944,149 @@ var MODELS = {
     supportsStreaming: true,
     isLocal: false
   },
-  // GPT-5 point releases — genuinely distinct capability, so they route as their
-  // own families (not folded into gpt-5). Offline baseline pricing; live fetch
-  // keeps it current. gpt-5.5 "Spud" (Apr 2026) is the current SWE-bench leader.
-  "gpt-5.5": {
-    id: "gpt-5.5",
-    name: "GPT-5.5",
+  "gpt-4.1": {
+    id: "gpt-4.1",
+    name: "GPT-4.1",
     provider: "openai",
-    contextWindow: 4e5,
+    contextWindow: 1047576,
     isVisionCapable: true,
-    inputCostPer1kTokens: 25e-4,
-    outputCostPer1kTokens: 0.02,
-    maxOutputTokens: 128e3,
+    inputCostPer1kTokens: 2e-3,
+    outputCostPer1kTokens: 8e-3,
+    maxOutputTokens: 32768,
     supportsStreaming: true,
     isLocal: false
   },
-  "gpt-5.4": {
-    id: "gpt-5.4",
-    name: "GPT-5.4",
+  "gpt-4.1-mini": {
+    id: "gpt-4.1-mini",
+    name: "GPT-4.1 Mini",
     provider: "openai",
-    contextWindow: 4e5,
+    contextWindow: 1047576,
     isVisionCapable: true,
-    inputCostPer1kTokens: 125e-5,
+    inputCostPer1kTokens: 4e-4,
+    outputCostPer1kTokens: 16e-4,
+    maxOutputTokens: 32768,
+    supportsStreaming: true,
+    isLocal: false
+  },
+  "gpt-4.1-nano": {
+    id: "gpt-4.1-nano",
+    name: "GPT-4.1 Nano",
+    provider: "openai",
+    contextWindow: 1047576,
+    isVisionCapable: true,
+    inputCostPer1kTokens: 1e-4,
+    outputCostPer1kTokens: 4e-4,
+    maxOutputTokens: 32768,
+    supportsStreaming: true,
+    isLocal: false
+  },
+  "gpt-4o": {
+    id: "gpt-4o",
+    name: "GPT-4o",
+    provider: "openai",
+    contextWindow: 128e3,
+    isVisionCapable: true,
+    inputCostPer1kTokens: 25e-4,
     outputCostPer1kTokens: 0.01,
-    maxOutputTokens: 128e3,
+    maxOutputTokens: 16e3,
     supportsStreaming: true,
     isLocal: false
   },
-  "gpt-5.4-mini": {
-    id: "gpt-5.4-mini",
-    name: "GPT-5.4 Mini",
+  "gpt-4o-mini": {
+    id: "gpt-4o-mini",
+    name: "GPT-4o Mini",
     provider: "openai",
-    contextWindow: 4e5,
+    contextWindow: 128e3,
     isVisionCapable: true,
-    inputCostPer1kTokens: 25e-5,
-    outputCostPer1kTokens: 2e-3,
-    maxOutputTokens: 128e3,
+    inputCostPer1kTokens: 15e-5,
+    outputCostPer1kTokens: 6e-4,
+    maxOutputTokens: 16e3,
     supportsStreaming: true,
     isLocal: false
   },
-  // Google
-  "gemini-2.0-flash": {
-    id: "gemini-2.0-flash",
-    name: "Gemini 2.0 Flash",
+  // Google Gemini — active GA + preview chat models. Gemini 2.0/1.5 are no
+  // longer advertised because the Gemini API shut those generations down.
+  "gemini-3.7-flash": {
+    id: "gemini-3.7-flash",
+    name: "Gemini 3.7 Flash",
     provider: "gemini",
-    contextWindow: 1e6,
+    contextWindow: 1048576,
     isVisionCapable: true,
-    inputCostPer1kTokens: 1e-4,
-    outputCostPer1kTokens: 4e-4,
-    maxOutputTokens: 8e3,
+    inputCostPer1kTokens: 75e-5,
+    outputCostPer1kTokens: 375e-5,
+    maxOutputTokens: 65536,
     supportsStreaming: true,
     isLocal: false
   },
-  "gemini-1.5-pro": {
-    id: "gemini-1.5-pro",
-    name: "Gemini 1.5 Pro",
+  "gemini-3.6-flash": {
+    id: "gemini-3.6-flash",
+    name: "Gemini 3.6 Flash",
     provider: "gemini",
-    contextWindow: 1e6,
+    contextWindow: 1048576,
     isVisionCapable: true,
-    inputCostPer1kTokens: 125e-5,
-    outputCostPer1kTokens: 5e-3,
-    maxOutputTokens: 8e3,
+    inputCostPer1kTokens: 75e-5,
+    outputCostPer1kTokens: 375e-5,
+    maxOutputTokens: 65536,
     supportsStreaming: true,
     isLocal: false
   },
-  "gemini-2.0-flash-lite": {
-    id: "gemini-2.0-flash-lite",
-    name: "Gemini 2.0 Flash-Lite",
+  "gemini-3.5-flash": {
+    id: "gemini-3.5-flash",
+    name: "Gemini 3.5 Flash",
     provider: "gemini",
-    contextWindow: 1e6,
+    contextWindow: 1048576,
     isVisionCapable: true,
-    inputCostPer1kTokens: 5e-5,
-    outputCostPer1kTokens: 2e-4,
-    maxOutputTokens: 8e3,
+    inputCostPer1kTokens: 15e-4,
+    outputCostPer1kTokens: 9e-3,
+    maxOutputTokens: 65536,
+    supportsStreaming: true,
+    isLocal: false
+  },
+  "gemini-3.5-flash-lite": {
+    id: "gemini-3.5-flash-lite",
+    name: "Gemini 3.5 Flash-Lite",
+    provider: "gemini",
+    contextWindow: 1048576,
+    isVisionCapable: true,
+    inputCostPer1kTokens: 3e-4,
+    outputCostPer1kTokens: 25e-4,
+    maxOutputTokens: 65536,
+    supportsStreaming: true,
+    isLocal: false
+  },
+  "gemini-3.1-flash-lite": {
+    id: "gemini-3.1-flash-lite",
+    name: "Gemini 3.1 Flash-Lite",
+    provider: "gemini",
+    contextWindow: 1048576,
+    isVisionCapable: true,
+    inputCostPer1kTokens: 25e-5,
+    outputCostPer1kTokens: 15e-4,
+    maxOutputTokens: 65536,
+    supportsStreaming: true,
+    isLocal: false
+  },
+  "gemini-3.1-pro-preview": {
+    id: "gemini-3.1-pro-preview",
+    name: "Gemini 3.1 Pro Preview",
+    provider: "gemini",
+    contextWindow: 1048576,
+    isVisionCapable: true,
+    inputCostPer1kTokens: 2e-3,
+    outputCostPer1kTokens: 0.012,
+    maxOutputTokens: 65536,
+    supportsStreaming: true,
+    isLocal: false
+  },
+  "gemini-3-flash-preview": {
+    id: "gemini-3-flash-preview",
+    name: "Gemini 3 Flash Preview",
+    provider: "gemini",
+    contextWindow: 1048576,
+    isVisionCapable: true,
+    inputCostPer1kTokens: 5e-4,
+    outputCostPer1kTokens: 3e-3,
+    maxOutputTokens: 65536,
     supportsStreaming: true,
     isLocal: false
   },
@@ -11883,7 +12094,7 @@ var MODELS = {
     id: "gemini-2.5-pro",
     name: "Gemini 2.5 Pro",
     provider: "gemini",
-    contextWindow: 1e6,
+    contextWindow: 1048576,
     isVisionCapable: true,
     inputCostPer1kTokens: 125e-5,
     outputCostPer1kTokens: 0.01,
@@ -11895,10 +12106,22 @@ var MODELS = {
     id: "gemini-2.5-flash",
     name: "Gemini 2.5 Flash",
     provider: "gemini",
-    contextWindow: 1e6,
+    contextWindow: 1048576,
     isVisionCapable: true,
-    inputCostPer1kTokens: 15e-5,
-    outputCostPer1kTokens: 6e-4,
+    inputCostPer1kTokens: 3e-4,
+    outputCostPer1kTokens: 25e-4,
+    maxOutputTokens: 65536,
+    supportsStreaming: true,
+    isLocal: false
+  },
+  "gemini-2.5-flash-lite": {
+    id: "gemini-2.5-flash-lite",
+    name: "Gemini 2.5 Flash-Lite",
+    provider: "gemini",
+    contextWindow: 1048576,
+    isVisionCapable: true,
+    inputCostPer1kTokens: 1e-4,
+    outputCostPer1kTokens: 4e-4,
     maxOutputTokens: 65536,
     supportsStreaming: true,
     isLocal: false
@@ -11968,43 +12191,57 @@ for (const _m of Object.values(MODELS)) {
   _m.pricingUnknown = false;
 }
 var T1_MODEL_PRIORITY = [
+  "gpt-5.6-sol",
+  "claude-fable-5",
+  "claude-opus-5",
   "gpt-5.5",
   "gpt-5.4",
+  "gemini-3.1-pro-preview",
+  "claude-opus-4-8",
+  "claude-sonnet-5",
+  "gemini-3.7-flash",
+  "gpt-5.2",
   "gpt-5",
-  "claude-opus-4",
-  "claude-sonnet-4",
   "gemini-2.5-pro",
   "gpt-4.1",
-  "gpt-4o",
-  "gemini-1.5-pro"
+  "gpt-4o"
 ];
 var T2_MODEL_PRIORITY = [
+  "gpt-5.6-terra",
+  "claude-sonnet-5",
+  "gemini-3.7-flash",
+  "gemini-3.6-flash",
   "gpt-5.4-mini",
   "gpt-5-mini",
-  "claude-sonnet-4",
+  "claude-sonnet-4-6",
   "claude-haiku-4-5",
-  "claude-haiku-3-5",
+  "gemini-3.5-flash",
   "gemini-2.5-flash",
   "gpt-4.1-mini",
   "gpt-4o-mini",
-  "gemini-2.0-flash",
   "llama3:70b"
 ];
 var T3_MODEL_PRIORITY = [
+  "gpt-5.6-luna",
+  "gpt-5.4-nano",
+  "gemini-3.5-flash-lite",
+  "gemini-3.1-flash-lite",
+  "claude-haiku-4-5",
   "gpt-5-nano",
+  "gemini-2.5-flash-lite",
   "llama3.2:3b",
   "mistral:7b",
-  "claude-haiku-4-5",
-  "claude-haiku-3-5",
   "gpt-4.1-nano",
   "gpt-4o-mini",
-  "gemini-2.5-flash",
-  "gemini-2.0-flash"
+  "gemini-2.5-flash"
 ];
 var VISION_MODEL_PRIORITY = [
-  "claude-sonnet-4",
+  "gpt-5.6-sol",
+  "claude-fable-5",
+  "claude-sonnet-5",
+  "gemini-3.7-flash",
   "gpt-4o",
-  "gemini-2.0-flash",
+  "gemini-2.5-flash",
   "llava"
 ];
 var COMPLEXITY_T2_COUNT = {
@@ -12185,7 +12422,7 @@ function isChatModel(id, methods) {
   return !NON_CHAT.test(id);
 }
 try {
-  dns__default.default.setDefaultResultOrder("ipv4first");
+  dnsCallback__default.default.setDefaultResultOrder("ipv4first");
 } catch {
 }
 function preferIpv4Host(url) {
@@ -12201,8 +12438,8 @@ function normalizeEndpoint(url) {
   if (!raw) return "";
   try {
     const u = new URL(raw);
-    const path29 = stripTrailingSlashes(`${u.pathname}${u.search}`);
-    return `${u.protocol}//${u.host.toLowerCase()}${path29}`;
+    const path30 = stripTrailingSlashes(`${u.pathname}${u.search}`);
+    return `${u.protocol}//${u.host.toLowerCase()}${path30}`;
   } catch {
     return raw.toLowerCase();
   }
@@ -12869,52 +13106,127 @@ var OpenAIProvider = class extends BaseProvider {
   }
 };
 
+// src/providers/cloud-model-catalog.json
+var cloud_model_catalog_default = {
+  models: [
+    { id: "gpt-5.6-sol", name: "GPT-5.6 Sol", providers: ["openai", "azure"], lifecycle: "ga", contextWindow: 105e4, maxOutputTokens: 128e3, vision: true, toolUse: true },
+    { id: "gpt-5.6-terra", name: "GPT-5.6 Terra", providers: ["openai", "azure"], lifecycle: "ga", contextWindow: 105e4, maxOutputTokens: 128e3, vision: true, toolUse: true },
+    { id: "gpt-5.6-luna", name: "GPT-5.6 Luna", providers: ["openai", "azure"], lifecycle: "ga", contextWindow: 105e4, maxOutputTokens: 128e3, vision: true, toolUse: true },
+    { id: "gpt-5.5", name: "GPT-5.5", providers: ["openai", "azure"], lifecycle: "ga", contextWindow: 105e4, maxOutputTokens: 128e3, vision: true, toolUse: true },
+    { id: "gpt-5.4", name: "GPT-5.4", providers: ["openai", "azure"], lifecycle: "ga", contextWindow: 105e4, maxOutputTokens: 128e3, vision: true, toolUse: true },
+    { id: "gpt-5.4-mini", name: "GPT-5.4 Mini", providers: ["openai", "azure"], lifecycle: "ga", contextWindow: 4e5, maxOutputTokens: 128e3, vision: true, toolUse: true },
+    { id: "gpt-5.4-nano", name: "GPT-5.4 Nano", providers: ["openai", "azure"], lifecycle: "ga", contextWindow: 4e5, maxOutputTokens: 128e3, vision: true, toolUse: true },
+    { id: "gpt-5", name: "GPT-5", providers: ["openai", "azure"], lifecycle: "ga", contextWindow: 4e5, maxOutputTokens: 128e3, vision: true, toolUse: true },
+    { id: "gpt-5-mini", name: "GPT-5 Mini", providers: ["openai", "azure"], lifecycle: "ga", contextWindow: 4e5, maxOutputTokens: 128e3, vision: true, toolUse: true },
+    { id: "gpt-5-nano", name: "GPT-5 Nano", providers: ["openai", "azure"], lifecycle: "ga", contextWindow: 4e5, maxOutputTokens: 128e3, vision: true, toolUse: true },
+    { id: "gpt-4.1", name: "GPT-4.1", providers: ["openai", "azure"], lifecycle: "ga", contextWindow: 1047576, maxOutputTokens: 32768, vision: true, toolUse: true },
+    { id: "gpt-4.1-mini", name: "GPT-4.1 Mini", providers: ["openai", "azure"], lifecycle: "ga", contextWindow: 1047576, maxOutputTokens: 32768, vision: true, toolUse: true },
+    { id: "gpt-4.1-nano", name: "GPT-4.1 Nano", providers: ["openai", "azure"], lifecycle: "ga", contextWindow: 1047576, maxOutputTokens: 32768, vision: true, toolUse: true },
+    { id: "gpt-4o", name: "GPT-4o", providers: ["openai", "azure"], lifecycle: "ga", contextWindow: 128e3, maxOutputTokens: 16384, vision: true, toolUse: true },
+    { id: "gpt-4o-mini", name: "GPT-4o Mini", providers: ["openai", "azure"], lifecycle: "ga", contextWindow: 128e3, maxOutputTokens: 16384, vision: true, toolUse: true },
+    { id: "claude-fable-5", name: "Claude Fable 5", providers: ["anthropic"], lifecycle: "ga", contextWindow: 1e6, maxOutputTokens: 128e3, vision: true, toolUse: true },
+    { id: "claude-opus-5", name: "Claude Opus 5", providers: ["anthropic"], lifecycle: "ga", contextWindow: 1e6, maxOutputTokens: 128e3, vision: true, toolUse: true },
+    { id: "claude-opus-4-8", name: "Claude Opus 4.8", providers: ["anthropic"], lifecycle: "ga", contextWindow: 1e6, maxOutputTokens: 128e3, vision: true, toolUse: true },
+    { id: "claude-opus-4-7", name: "Claude Opus 4.7", providers: ["anthropic"], lifecycle: "ga", contextWindow: 1e6, maxOutputTokens: 128e3, vision: true, toolUse: true },
+    { id: "claude-opus-4-6", name: "Claude Opus 4.6", providers: ["anthropic"], lifecycle: "ga", contextWindow: 1e6, vision: true, toolUse: true },
+    { id: "claude-opus-4-5-20251101", name: "Claude Opus 4.5", providers: ["anthropic"], lifecycle: "ga", contextWindow: 2e5, vision: true, toolUse: true },
+    { id: "claude-sonnet-5", name: "Claude Sonnet 5", providers: ["anthropic"], lifecycle: "ga", contextWindow: 1e6, maxOutputTokens: 128e3, vision: true, toolUse: true },
+    { id: "claude-sonnet-4-6", name: "Claude Sonnet 4.6", providers: ["anthropic"], lifecycle: "ga", contextWindow: 1e6, maxOutputTokens: 128e3, vision: true, toolUse: true },
+    { id: "claude-sonnet-4-5-20250929", name: "Claude Sonnet 4.5", providers: ["anthropic"], lifecycle: "ga", contextWindow: 2e5, vision: true, toolUse: true },
+    { id: "claude-haiku-4-5-20251001", name: "Claude Haiku 4.5", providers: ["anthropic"], lifecycle: "ga", contextWindow: 2e5, maxOutputTokens: 64e3, vision: true, toolUse: true },
+    { id: "gemini-3.7-flash", name: "Gemini 3.7 Flash", providers: ["gemini"], lifecycle: "ga", contextWindow: 1048576, maxOutputTokens: 65536, vision: true, toolUse: true },
+    { id: "gemini-3.6-flash", name: "Gemini 3.6 Flash", providers: ["gemini"], lifecycle: "ga", contextWindow: 1048576, maxOutputTokens: 65536, vision: true, toolUse: true },
+    { id: "gemini-3.5-flash", name: "Gemini 3.5 Flash", providers: ["gemini"], lifecycle: "ga", contextWindow: 1048576, maxOutputTokens: 65536, vision: true, toolUse: true },
+    { id: "gemini-3.5-flash-lite", name: "Gemini 3.5 Flash-Lite", providers: ["gemini"], lifecycle: "ga", contextWindow: 1048576, maxOutputTokens: 65536, vision: true, toolUse: true },
+    { id: "gemini-3.1-flash-lite", name: "Gemini 3.1 Flash-Lite", providers: ["gemini"], lifecycle: "ga", contextWindow: 1048576, maxOutputTokens: 65536, vision: true, toolUse: true },
+    { id: "gemini-3.1-pro-preview", name: "Gemini 3.1 Pro", providers: ["gemini"], lifecycle: "preview", contextWindow: 1048576, maxOutputTokens: 65536, vision: true, toolUse: true },
+    { id: "gemini-3-flash-preview", name: "Gemini 3 Flash", providers: ["gemini"], lifecycle: "preview", contextWindow: 1048576, maxOutputTokens: 65536, vision: true, toolUse: true },
+    { id: "gemini-2.5-pro", name: "Gemini 2.5 Pro", providers: ["gemini"], lifecycle: "ga", contextWindow: 1048576, maxOutputTokens: 65536, vision: true, toolUse: true },
+    { id: "gemini-2.5-flash", name: "Gemini 2.5 Flash", providers: ["gemini"], lifecycle: "ga", contextWindow: 1048576, maxOutputTokens: 65536, vision: true, toolUse: true },
+    { id: "gemini-2.5-flash-lite", name: "Gemini 2.5 Flash-Lite", providers: ["gemini"], lifecycle: "ga", contextWindow: 1048576, maxOutputTokens: 65536, vision: true, toolUse: true }
+  ]
+};
+
 // src/providers/azure.ts
 var DEFAULT_AZURE_API_VERSION = "2024-12-01-preview";
-var AZURE_BASE_MODEL_RULES = [
-  [/gpt-?5\.5/, "gpt-5.5"],
-  [/gpt-?5\.4.*mini/, "gpt-5.4-mini"],
-  [/gpt-?5\.4/, "gpt-5.4"],
-  [/gpt-?5.*nano/, "gpt-5-nano"],
-  [/gpt-?5.*mini/, "gpt-5-mini"],
-  [/gpt-?5/, "gpt-5"],
-  [/gpt-?4\.1-nano/, "gpt-4.1-nano"],
-  [/gpt-?4\.1-mini/, "gpt-4.1-mini"],
-  [/gpt-?4\.1/, "gpt-4.1"],
-  [/gpt-?4o-mini/, "gpt-4o-mini"],
-  [/gpt-?4o/, "gpt-4o"]
-];
-var AZURE_BASE_MODELS = AZURE_BASE_MODEL_RULES.map(([, id]) => id);
+var CLOUD_MODELS = cloud_model_catalog_default.models;
+var AZURE_CATALOG = CLOUD_MODELS.filter((m) => m.providers.includes("azure")).slice().sort((a, b) => b.id.length - a.id.length || a.id.localeCompare(b.id));
+var AZURE_BASE_MODELS = AZURE_CATALOG.map((m) => m.id);
+function compactModelId(id) {
+  return id.toLowerCase().replace(/[^a-z0-9.]/g, "");
+}
+function catalogEntry(id) {
+  const n = id.toLowerCase();
+  return CLOUD_MODELS.find((m) => m.id.toLowerCase() === n);
+}
 function inferAzureBaseModel(deploymentName) {
   const n = deploymentName.toLowerCase();
-  for (const [re, base] of AZURE_BASE_MODEL_RULES) if (re.test(n)) return base;
+  const compact = compactModelId(n);
+  const hasBareGpt56Alias = compact.includes("gpt5.6");
+  for (const model of AZURE_CATALOG) {
+    if (hasBareGpt56Alias && model.id === "gpt-5") continue;
+    if (n.includes(model.id.toLowerCase()) || compact.includes(compactModelId(model.id))) {
+      return model.id;
+    }
+  }
+  if (hasBareGpt56Alias) return "gpt-5.6-sol";
+  const gpt5At = compact.indexOf("gpt5");
+  if (gpt5At !== -1) {
+    const suffix = compact.slice(gpt5At + "gpt5".length);
+    if (suffix.includes("nano")) return "gpt-5-nano";
+    if (suffix.includes("mini")) return "gpt-5-mini";
+    return "gpt-5";
+  }
+  if (compact.includes("gpt4.1nano")) return "gpt-4.1-nano";
+  if (compact.includes("gpt4.1mini")) return "gpt-4.1-mini";
+  if (compact.includes("gpt4.1")) return "gpt-4.1";
+  if (compact.includes("gpt4omini")) return "gpt-4o-mini";
+  if (compact.includes("gpt4o")) return "gpt-4o";
   return null;
 }
+function catalogModelInfo(baseModelId) {
+  const entry = catalogEntry(baseModelId);
+  if (!entry?.contextWindow) return void 0;
+  return {
+    id: entry.id,
+    name: entry.name,
+    provider: "openai",
+    contextWindow: entry.contextWindow,
+    isVisionCapable: entry.vision ?? false,
+    inputCostPer1kTokens: 0,
+    outputCostPer1kTokens: 0,
+    maxOutputTokens: entry.maxOutputTokens ?? 16e3,
+    supportsStreaming: true,
+    isLocal: false,
+    supportsToolUse: entry.toolUse ?? true,
+    pricingUnknown: true
+  };
+}
 function azureModelForDeployment(cfg) {
   if (cfg.type !== "azure" || !cfg.deploymentName?.trim()) return null;
   const id = cfg.deploymentName.trim();
   const name = cfg.label?.trim() || id;
   const baseModelId = cfg.model?.trim() || inferAzureBaseModel(id) || void 0;
-  const base = baseModelId ? MODELS[baseModelId] : void 0;
-  if (base) {
+  const base = baseModelId ? MODELS[baseModelId] ?? catalogModelInfo(baseModelId) : void 0;
+  if (base && baseModelId) {
     const azurePrice = resolvePricing(
       { id, provider: "azure", isLocal: false, baseModelId },
       { region: cfg.region }
     );
+    const exactAzurePrice = !azurePrice.unknown && !azurePrice.estimatedFromProvider;
+    const nativeToolsOnThisTransport = /^gpt-5\.6-(?:sol|terra|luna)$/i.test(baseModelId) ? false : base.supportsToolUse ?? true;
     return {
       ...base,
       id,
-      // callable deployment name
       name,
       provider: "azure",
       baseModelId,
-      // real identity for benchmark + live pricing
-      supportsToolUse: base.supportsToolUse ?? true,
-      ...azurePrice.unknown ? {} : {
+      supportsToolUse: nativeToolsOnThisTransport,
+      ...!azurePrice.unknown ? {
         inputCostPer1kTokens: azurePrice.input,
         outputCostPer1kTokens: azurePrice.output,
-        pricingUnknown: false
-      }
+        pricingUnknown: !exactAzurePrice
+      } : { pricingUnknown: true }
     };
   }
   return {
@@ -12929,18 +13241,23 @@ function azureModelForDeployment(cfg) {
     maxOutputTokens: 16e3,
     supportsStreaming: true,
     isLocal: false,
-    supportsToolUse: true
+    supportsToolUse: true,
+    pricingUnknown: true
   };
 }
+function stripTrailingSlashes3(value) {
+  let end = value.length;
+  while (end > 0 && value.charCodeAt(end - 1) === 47) end--;
+  return value.slice(0, end);
+}
 var AzureOpenAIProvider = class extends OpenAIProvider {
   constructor(config, model) {
     const rawUrl = config.baseUrl ?? AZURE_BASE_URL_TEMPLATE.replace("{resource}", "YOUR_RESOURCE");
-    const endpoint = rawUrl.replace(/\/+$/, "");
+    const endpoint = stripTrailingSlashes3(rawUrl);
     super(
       {
         ...config,
         baseUrl: endpoint
-        // Kept for superclass compatibility if it reads it
       },
       model
     );
@@ -14632,13 +14949,13 @@ var DeadModelStore = class {
 function fileDeadModelPersistence(filePath) {
   return {
     load() {
-      if (!fs26.existsSync(filePath)) return [];
-      const raw = JSON.parse(fs26.readFileSync(filePath, "utf-8"));
+      if (!fs27.existsSync(filePath)) return [];
+      const raw = JSON.parse(fs27.readFileSync(filePath, "utf-8"));
       return Array.isArray(raw) ? raw : [];
     },
     save(records) {
-      fs26.mkdirSync(path27.dirname(filePath), { recursive: true });
-      fs26.writeFileSync(filePath, JSON.stringify(records, null, 2));
+      fs27.mkdirSync(path28.dirname(filePath), { recursive: true });
+      fs27.writeFileSync(filePath, JSON.stringify(records, null, 2));
     }
   };
 }
@@ -14683,7 +15000,7 @@ var Keystore = class {
       const creds = await this.keytar.findCredentials(KEYTAR_SERVICE);
       this.cache = Object.fromEntries(creds.map((c) => [c.account, c.password]));
       this.backend = "keytar";
-      if (password && fs26__default.default.existsSync(this.storePath)) {
+      if (password && fs27__default.default.existsSync(this.storePath)) {
         try {
           const fileEntries = this.decryptFile(password);
           for (const [k, v] of Object.entries(fileEntries)) {
@@ -14702,7 +15019,7 @@ var Keystore = class {
         "Keystore unlock requires a password because the OS keychain (keytar) is not available on this system."
       );
     }
-    if (!fs26__default.default.existsSync(this.storePath)) {
+    if (!fs27__default.default.existsSync(this.storePath)) {
       const salt = crypto__default.default.randomBytes(SALT_LEN);
       this.masterKey = this.deriveKey(password, salt);
       this.writeWithSalt({}, salt);
@@ -14716,7 +15033,7 @@ var Keystore = class {
   }
   /** Synchronous legacy unlock kept for AES-only environments. */
   unlockSync(password) {
-    if (!fs26__default.default.existsSync(this.storePath)) {
+    if (!fs27__default.default.existsSync(this.storePath)) {
       const salt = crypto__default.default.randomBytes(SALT_LEN);
       this.masterKey = this.deriveKey(password, salt);
       this.writeWithSalt({}, salt);
@@ -14774,7 +15091,7 @@ var Keystore = class {
     }
   }
   decryptFile(password, knownSalt) {
-    if (!fs26__default.default.existsSync(this.storePath)) return {};
+    if (!fs27__default.default.existsSync(this.storePath)) return {};
     try {
       const { salt, ciphertext, iv, tag } = this.readRaw();
       const useSalt = knownSalt ?? salt;
@@ -14796,8 +15113,8 @@ var Keystore = class {
     const ciphertext = Buffer.concat([cipher.update(plaintext), cipher.final()]);
     const tag = cipher.getAuthTag();
     const out = Buffer.concat([raw.salt, iv, tag, ciphertext]);
-    fs26__default.default.mkdirSync(path27__default.default.dirname(this.storePath), { recursive: true });
-    fs26__default.default.writeFileSync(this.storePath, out, { mode: 384 });
+    fs27__default.default.mkdirSync(path28__default.default.dirname(this.storePath), { recursive: true });
+    fs27__default.default.writeFileSync(this.storePath, out, { mode: 384 });
   }
   writeWithSalt(data, salt) {
     if (!this.masterKey) throw new Error("writeWithSalt called before masterKey was set");
@@ -14807,11 +15124,11 @@ var Keystore = class {
     const ciphertext = Buffer.concat([cipher.update(plaintext), cipher.final()]);
     const tag = cipher.getAuthTag();
     const out = Buffer.concat([salt, iv, tag, ciphertext]);
-    fs26__default.default.mkdirSync(path27__default.default.dirname(this.storePath), { recursive: true });
-    fs26__default.default.writeFileSync(this.storePath, out, { mode: 384 });
+    fs27__default.default.mkdirSync(path28__default.default.dirname(this.storePath), { recursive: true });
+    fs27__default.default.writeFileSync(this.storePath, out, { mode: 384 });
   }
   readRaw() {
-    const buf = fs26__default.default.readFileSync(this.storePath);
+    const buf = fs27__default.default.readFileSync(this.storePath);
     let offset = 0;
     const salt = buf.subarray(offset, offset + SALT_LEN);
     offset += SALT_LEN;
@@ -14844,7 +15161,7 @@ var CascadeIgnore = class {
     ]);
   }
   async load(workspacePath) {
-    const filePath = path27__default.default.join(workspacePath, ".cascadeignore");
+    const filePath = path28__default.default.join(workspacePath, ".cascadeignore");
     try {
       const content = await fs11__default.default.readFile(filePath, "utf-8");
       const lines = content.split("\n").filter((l) => l.trim() && !l.startsWith("#"));
@@ -14855,7 +15172,7 @@ var CascadeIgnore = class {
   }
   isIgnored(filePath, workspacePath) {
     try {
-      const relative = workspacePath ? path27__default.default.relative(workspacePath, filePath) : filePath;
+      const relative = workspacePath ? path28__default.default.relative(workspacePath, filePath) : filePath;
       return this.ig.ignores(relative);
     } catch {
       return false;
@@ -14866,7 +15183,7 @@ var CascadeIgnore = class {
   }
 };
 async function loadCascadeMd(workspacePath) {
-  const filePath = path27__default.default.join(workspacePath, "CASCADE.md");
+  const filePath = path28__default.default.join(workspacePath, "CASCADE.md");
   try {
     const raw = await fs11__default.default.readFile(filePath, "utf-8");
     return parseCascadeMd(raw);
@@ -14897,7 +15214,7 @@ ${raw.trim()}`;
 var MemoryStore = class _MemoryStore {
   db;
   constructor(dbPath) {
-    fs26__default.default.mkdirSync(path27__default.default.dirname(dbPath), { recursive: true });
+    fs27__default.default.mkdirSync(path28__default.default.dirname(dbPath), { recursive: true });
     try {
       this.db = new Database2__default.default(dbPath, { timeout: 5e3 });
       this.db.pragma("journal_mode = WAL");
@@ -15795,13 +16112,38 @@ var WebSearchConfigSchema = zod.z.object({
   /** Tavily API key — get one at https://tavily.com */
   tavilyApiKey: zod.z.string().optional(),
   /** Max results per search (default 5) */
-  maxResults: zod.z.number().default(5)
+  maxResults: zod.z.number().default(5),
+  /**
+   * Send `searxngUrl` through the SSRF guard. Off for a local run, where the
+   * URL is the machine owner's own config and a self-hosted SearXNG is
+   * routinely on a private address; on for a host that accepts it from a
+   * request. See `src/tools/web-search.ts`.
+   *
+   * It has to be named HERE, not just on the TypeScript interfaces: the config
+   * passes through `CascadeConfigSchema.parse()` on its way into a run, and
+   * zod drops every key this object does not declare.
+   */
+  guardSearxngUrl: zod.z.boolean().optional()
 });
 var ToolsConfigSchema = zod.z.object({
   shellAllowlist: zod.z.array(zod.z.string()).default([]),
   shellBlocklist: zod.z.array(zod.z.string()).default(["rm -rf", "sudo rm", "format", "mkfs"]),
   requireApprovalFor: zod.z.array(zod.z.string()).default([]),
   browserEnabled: zod.z.boolean().default(false),
+  /**
+   * Let a run ACT on the page open in the desktop's built-in browser — click,
+   * type, submit — not just read it.
+   *
+   * Distinct from `browserEnabled`, which turns on the headless Playwright
+   * tool. That one drives a throwaway browser with an empty cookie jar; this
+   * one drives the session the user is signed into, which is a different order
+   * of consequence and so gets its own switch rather than riding on that one.
+   *
+   * Off by default. Turning it on does not hand anything over silently: the
+   * tool still goes through the approval chain, and the browser panel carries a
+   * stop control for the run that is acting.
+   */
+  agentBrowserControl: zod.z.boolean().default(false),
   mcpServers: zod.z.array(McpServerConfigSchema).optional(),
   mcpTrusted: zod.z.array(zod.z.string()).optional(),
   /** Web search backends — at least one should be configured for best results */
@@ -16199,7 +16541,7 @@ function credentialEndpointsConflict(type, rowEndpoint, credentialEndpoint) {
 
 // src/config/global-credentials.ts
 function credentialsPath(globalDir2) {
-  return path27__default.default.join(globalDir2, GLOBAL_CREDENTIALS_FILE);
+  return path28__default.default.join(globalDir2, GLOBAL_CREDENTIALS_FILE);
 }
 function providerKey(p) {
   return p.type;
@@ -16229,7 +16571,7 @@ function isPersistable(p) {
 }
 function loadGlobalCredentials(globalDir2) {
   try {
-    const raw = fs26__default.default.readFileSync(credentialsPath(globalDir2), "utf-8");
+    const raw = fs27__default.default.readFileSync(credentialsPath(globalDir2), "utf-8");
     const parsed = JSON.parse(raw);
     if (!Array.isArray(parsed.providers)) return [];
     return parsed.providers.filter(
@@ -16241,13 +16583,13 @@ function loadGlobalCredentials(globalDir2) {
 }
 function saveGlobalCredentials(globalDir2, providers) {
   const filePath = credentialsPath(globalDir2);
-  fs26__default.default.mkdirSync(globalDir2, { recursive: true, mode: 448 });
+  fs27__default.default.mkdirSync(globalDir2, { recursive: true, mode: 448 });
   const body = { version: 1, providers: providers.filter(isPersistable) };
   const tmp = `${filePath}.tmp`;
-  fs26__default.default.writeFileSync(tmp, JSON.stringify(body, null, 2), { encoding: "utf-8", mode: 384 });
-  fs26__default.default.renameSync(tmp, filePath);
+  fs27__default.default.writeFileSync(tmp, JSON.stringify(body, null, 2), { encoding: "utf-8", mode: 384 });
+  fs27__default.default.renameSync(tmp, filePath);
   try {
-    fs26__default.default.chmodSync(filePath, 384);
+    fs27__default.default.chmodSync(filePath, 384);
   } catch {
   }
 }
@@ -16648,7 +16990,7 @@ var ConfigManager = class {
   /** `globalDirOverride` exists for tests — never point it at the real home dir there. */
   constructor(workspacePath = process.cwd(), globalDirOverride) {
     this.workspacePath = workspacePath;
-    this.globalDir = globalDirOverride ?? path27__default.default.join(os6__default.default.homedir(), GLOBAL_CONFIG_DIR);
+    this.globalDir = globalDirOverride ?? path28__default.default.join(os6__default.default.homedir(), GLOBAL_CONFIG_DIR);
   }
   async load() {
     this.config = await this.loadConfig();
@@ -16662,8 +17004,8 @@ var ConfigManager = class {
     this.ignore = new CascadeIgnore();
     await this.ignore.load(this.workspacePath);
     this.cascadeMd = await loadCascadeMd(this.workspacePath);
-    this.keystore = new Keystore(path27__default.default.join(this.globalDir, GLOBAL_KEYSTORE_FILE));
-    this.store = new MemoryStore(path27__default.default.join(this.workspacePath, CASCADE_DB_FILE));
+    this.keystore = new Keystore(path28__default.default.join(this.globalDir, GLOBAL_KEYSTORE_FILE));
+    this.store = new MemoryStore(path28__default.default.join(this.workspacePath, CASCADE_DB_FILE));
     const globalRevoked = stripRevokedCredentials(loadGlobalCredentials(this.globalDir));
     const globalCreds = filterRetiredCredentials(globalRevoked.kept);
     if (globalRevoked.removed > 0) this.revokedCredentials += globalRevoked.removed;
@@ -16736,8 +17078,8 @@ var ConfigManager = class {
    * never reached the disk (see `commitSettings`).
    */
   async save(config = this.config) {
-    const configPath = path27__default.default.join(this.workspacePath, CASCADE_CONFIG_FILE);
-    await fs11__default.default.mkdir(path27__default.default.dirname(configPath), { recursive: true });
+    const configPath = path28__default.default.join(this.workspacePath, CASCADE_CONFIG_FILE);
+    await fs11__default.default.mkdir(path28__default.default.dirname(configPath), { recursive: true });
     await fs11__default.default.writeFile(configPath, JSON.stringify(config, null, 2), "utf-8");
     try {
       saveGlobalCredentials(this.globalDir, config.providers);
@@ -16787,7 +17129,7 @@ var ConfigManager = class {
     this.revokedCredentials = 0;
     this.revokedPins = [];
     this.revokedNotice = void 0;
-    const configPath = path27__default.default.join(this.workspacePath, CASCADE_CONFIG_FILE);
+    const configPath = path28__default.default.join(this.workspacePath, CASCADE_CONFIG_FILE);
     try {
       const raw = await fs11__default.default.readFile(configPath, "utf-8");
       const parsed = JSON.parse(raw);
@@ -16881,7 +17223,7 @@ var ConfigManager = class {
     return onResource;
   }
   async persistClearedPins(tiers) {
-    const configPath = path27__default.default.join(this.workspacePath, CASCADE_CONFIG_FILE);
+    const configPath = path28__default.default.join(this.workspacePath, CASCADE_CONFIG_FILE);
     try {
       const raw = JSON.parse(await fs11__default.default.readFile(configPath, "utf-8"));
       const models = raw["models"];
@@ -17475,7 +17817,7 @@ function computeDelegationSavings(stats, t1Model) {
 var DEFAULT_SNAPSHOT_URL = "https://raw.githubusercontent.com/Varun-SV/Cascade-AI/main/src/core/router/benchmark-data.json";
 var OPENROUTER_MODELS_URL = "https://openrouter.ai/api/v1/models";
 var FETCH_TIMEOUT_MS = 8e3;
-var DEFAULT_CACHE_FILE = path27__default.default.join(os6__default.default.homedir(), GLOBAL_CONFIG_DIR, "benchmarks-cache.json");
+var DEFAULT_CACHE_FILE = path28__default.default.join(os6__default.default.homedir(), GLOBAL_CONFIG_DIR, "benchmarks-cache.json");
 function normalizeModelId2(id) {
   let s = id.toLowerCase();
   const slash = s.lastIndexOf("/");
@@ -17622,7 +17964,7 @@ var LiveDataProvider = class {
   }
   async saveCache() {
     try {
-      await fs11__default.default.mkdir(path27__default.default.dirname(this.opts.cacheFile), { recursive: true });
+      await fs11__default.default.mkdir(path28__default.default.dirname(this.opts.cacheFile), { recursive: true });
       const cache = {
         fetchedAt: this.fetchedAt,
         snapshot: this.snapshot ?? void 0,
@@ -17729,9 +18071,15 @@ var FAMILY_BENCHMARKS = {
   "claude-opus": { code: 95, analysis: 92, creative: 90, data: 88 },
   "claude-sonnet": { code: 93, analysis: 88, creative: 87, data: 85 },
   "claude-haiku": { code: 80, analysis: 75, creative: 76, data: 72 },
-  // OpenAI GPT-5 family — current flagship; strongest all-round. Offline
-  // baseline (the live fetch refreshes these). Distinct point releases carry
-  // their own scores: gpt-5.5 "Spud" leads SWE-bench (88.7%); gpt-5.4 ~80%.
+  // OpenAI GPT-5 family. GPT-5.6 is split by durable capability tier instead
+  // of being folded into generic gpt-5: Sol, Terra and Luna have materially
+  // different benchmark/cost envelopes and should compete independently.
+  // Scores are the committed normalized snapshot; provenance is in
+  // scripts/benchmarks/sources/openai-gpt-5.6-2026-08.json.
+  "gpt-5.6-sol": { code: 100, analysis: 98, creative: 88, data: 88 },
+  "gpt-5.6-terra": { code: 97, analysis: 92, creative: 82, data: 85 },
+  "gpt-5.6-luna": { code: 93, analysis: 85, creative: 74, data: 60 },
+  // Older GPT-5 point releases remain distinct where public data supports it.
   "gpt-5.5": { code: 97, analysis: 96, creative: 94, data: 95 },
   "gpt-5.4": { code: 94, analysis: 94, creative: 92, data: 92 },
   "gpt-5.4-mini": { code: 86, analysis: 85, creative: 85, data: 83 },
@@ -17767,13 +18115,19 @@ var FAMILY_BENCHMARKS = {
   "llama-small": { code: 55, analysis: 56, creative: 60, data: 54 }
 };
 var FAMILY_MATCHERS = [
+  [/fable/i, "claude-opus"],
   [/opus/i, "claude-opus"],
   [/sonnet/i, "claude-sonnet"],
   [/haiku/i, "claude-haiku"],
-  // GPT-5 family — ordered most-specific first. Distinct point releases
-  // (gpt-5.5, gpt-5.4, gpt-5.4-mini) match their own family; nano/mini before
-  // the base; unrecognised gpt-5.x still fold into the gpt-5 base.
+  // GPT-5 family — ordered most-specific first. GPT-5.6 durable tiers carry
+  // their own profiles. 5.4 Nano intentionally maps to the nano class rather
+  // than being swallowed by the generic 5.4 rule.
+  [/gpt-?5\.6.*sol/i, "gpt-5.6-sol"],
+  [/gpt-?5\.6.*terra/i, "gpt-5.6-terra"],
+  [/gpt-?5\.6.*luna/i, "gpt-5.6-luna"],
+  [/gpt-?5\.6(?:\s|$)/i, "gpt-5.6-sol"],
   [/gpt-?5\.5/i, "gpt-5.5"],
+  [/gpt-?5\.4.*nano/i, "gpt-5-nano"],
   [/gpt-?5\.4.*mini/i, "gpt-5.4-mini"],
   [/gpt-?5\.4/i, "gpt-5.4"],
   [/gpt-?5.*nano/i, "gpt-5-nano"],
@@ -20574,6 +20928,23 @@ Now execute your subtask using this context where relevant.`
       this.setStatus("FAILED", finalOutput);
       this.peerBus?.publish(this.id, assignment.subtaskId, finalOutput, "FAILED");
       return this.buildResult("ESCALATED", finalOutput, { checksRun, passed, failed }, issues, correctionAttempts);
+    } finally {
+      this.releaseBrowserControl();
+    }
+  }
+  /**
+   * End this worker's hold on the shared browser.
+   *
+   * Duck-typed rather than imported: `browser_control` is registered only by a
+   * host that HAS a browser (the desktop), so in the CLI and hosted runs there
+   * is no such tool and this is a no-op. Importing the class to instanceof-check
+   * it would couple the worker to a tool that usually is not there.
+   */
+  releaseBrowserControl() {
+    try {
+      const tool = this.toolRegistry.getTool?.("browser_control");
+      tool?.releaseActor?.(this.id);
+    } catch {
     }
   }
   sendToPeer(toId, content) {
@@ -20832,8 +21203,8 @@ HIERARCHY CONTEXT: ${this.hierarchyContext}` : "") + textToolSuffix,
         // Media generation can run for a minute; without this a cancelled run
         // still pays for an image nobody will see.
         ...this.signal ? { signal: this.signal } : {},
-        saveSnapshot: async (path29, content) => {
-          this.store?.addFileSnapshot(this.taskId, path29, content);
+        saveSnapshot: async (path30, content) => {
+          this.store?.addFileSnapshot(this.taskId, path30, content);
         },
         sendPeerSync: (to, syncType, content) => {
           this.peerBus?.send(this.id, to, syncType, this.assignment?.subtaskId ?? "", content);
@@ -21036,7 +21407,7 @@ ${assignment.expectedOutput}`;
     const { promisify: promisify4 } = await import('util');
     const execFileAsync3 = promisify4(execFile4);
     for (const artifactPath of artifactPaths) {
-      const absolutePath = path27__default.default.resolve(this.artifactRoot(), artifactPath);
+      const absolutePath = path28__default.default.resolve(this.artifactRoot(), artifactPath);
       try {
         const stat = await fs11__default.default.stat(absolutePath);
         if (!stat.isFile()) {
@@ -21071,7 +21442,7 @@ ${assignment.expectedOutput}`;
           issues.push(`PDF artifact looks too small to be valid: ${artifactPath}`);
           continue;
         }
-        const ext = path27__default.default.extname(absolutePath).toLowerCase();
+        const ext = path28__default.default.extname(absolutePath).toLowerCase();
         const check = ext === ".ts" || ext === ".tsx" ? { cmd: "npx", args: ["tsc", "--noEmit", absolutePath] } : ext === ".js" || ext === ".jsx" ? { cmd: process.execPath, args: ["--check", absolutePath] } : ext === ".py" ? { cmd: "python", args: ["-m", "py_compile", absolutePath] } : null;
         if (check) {
           try {
@@ -21163,7 +21534,7 @@ HIERARCHY CONTEXT: ${this.hierarchyContext}` : ""),
   async checkAcceptance(assignment) {
     const criteria = assignment.acceptance ?? [];
     if (!criteria.length) return [];
-    const resolve2 = (target) => path27__default.default.resolve(this.artifactRoot(), target);
+    const resolve2 = (target) => path28__default.default.resolve(this.artifactRoot(), target);
     const workerCanWriteFiles = canProduceFiles(this.tools.map((t) => t.name));
     return evaluateAcceptance(criteria, assignment.files ?? [], {
       stat: async (target) => {
@@ -24467,16 +24838,16 @@ function resolveInWorkspace(workspaceRoot, input) {
   if (typeof input !== "string" || input.length === 0) {
     throw new WorkspaceSandboxError(String(input), workspaceRoot);
   }
-  const root = path27__default.default.resolve(workspaceRoot);
-  const abs = path27__default.default.isAbsolute(input) ? path27__default.default.resolve(input) : path27__default.default.resolve(root, input);
-  const rel = path27__default.default.relative(root, abs);
-  if (rel === "" || rel === ".") ; else if (rel.startsWith("..") || path27__default.default.isAbsolute(rel)) {
+  const root = path28__default.default.resolve(workspaceRoot);
+  const abs = path28__default.default.isAbsolute(input) ? path28__default.default.resolve(input) : path28__default.default.resolve(root, input);
+  const rel = path28__default.default.relative(root, abs);
+  if (rel === "" || rel === ".") ; else if (rel.startsWith("..") || path28__default.default.isAbsolute(rel)) {
     throw new WorkspaceSandboxError(input, root);
   }
   try {
-    const real = fs26__default.default.realpathSync(abs);
-    const realRel = path27__default.default.relative(root, real);
-    if (realRel !== "" && realRel !== "." && (realRel.startsWith("..") || path27__default.default.isAbsolute(realRel))) {
+    const real = fs27__default.default.realpathSync(abs);
+    const realRel = path28__default.default.relative(root, real);
+    if (realRel !== "" && realRel !== "." && (realRel.startsWith("..") || path28__default.default.isAbsolute(realRel))) {
       throw new WorkspaceSandboxError(input, root);
     }
   } catch (e) {
@@ -25025,9 +25396,9 @@ async function animatePptx(bytes, scheme) {
     const zip = await import_jszip.default.loadAsync(bytes);
     const slidePaths = Object.keys(zip.files).filter((n) => /^ppt\/slides\/slide\d+\.xml$/.test(n));
     if (slidePaths.length === 0) return bytes;
-    for (const path29 of slidePaths) {
-      const xml = await zip.file(path29).async("string");
-      zip.file(path29, animateSlideXml(xml, scheme));
+    for (const path30 of slidePaths) {
+      const xml = await zip.file(path30).async("string");
+      zip.file(path30, animateSlideXml(xml, scheme));
     }
     return await zip.generateAsync({ type: "uint8array", compression: "DEFLATE" });
   } catch {
@@ -25413,7 +25784,7 @@ var GenerateDocumentTool = class extends BaseTool {
       }
     }
     const bytes = await renderDocument(ext, content, { name: filePath, loadImageBytes });
-    await fs11__default.default.mkdir(path27__default.default.dirname(absPath), { recursive: true });
+    await fs11__default.default.mkdir(path28__default.default.dirname(absPath), { recursive: true });
     await fs11__default.default.writeFile(absPath, bytes);
     const charts = countCharts(content);
     return [
@@ -25631,7 +26002,7 @@ var FileWriteTool = class extends BaseTool {
       } catch {
       }
     }
-    await fs11__default.default.mkdir(path27__default.default.dirname(absPath), { recursive: true });
+    await fs11__default.default.mkdir(path28__default.default.dirname(absPath), { recursive: true });
     await fs11__default.default.writeFile(absPath, content, "utf-8");
     return `Written ${content.length} characters to ${filePath}`;
   }
@@ -25989,12 +26360,10 @@ ${data.description}`;
     }
   }
 };
-
-// src/tools/browser.ts
 var BROWSER_LAUNCH_TIMEOUT_MS = 15e3;
 var BrowserTool = class extends BaseTool {
   name = "browser";
-  description = "Control a browser: navigate to URLs, click elements, fill forms, take screenshots. Only available with multimodal models.";
+  description = "Control a browser: navigate to URLs, click elements, fill forms, take screenshots. Screenshots are saved to a file for image_analyze to read.";
   inputSchema = {
     type: "object",
     properties: {
@@ -26061,7 +26430,14 @@ var BrowserTool = class extends BaseTool {
         }
         case "screenshot": {
           const buf = await page2.screenshot({ type: "png" });
-          return `data:image/png;base64,${buf.toString("base64")}`;
+          const rel = path28__default.default.join(".cascade", "screenshots", `screenshot-${Date.now()}-${crypto.randomUUID().slice(0, 8)}.png`);
+          const abs = resolveInWorkspace(this.workspaceRoot, rel);
+          await fs11__default.default.mkdir(path28__default.default.dirname(abs), { recursive: true });
+          await fs11__default.default.writeFile(abs, buf);
+          return [
+            `Screenshot saved to ${abs} (${Math.round(buf.byteLength / 1024)} KB).`,
+            `Call image_analyze with that path to see what is on it \u2014 that needs a vision-capable model.`
+          ].join(" ");
         }
         case "evaluate": {
           const result = await page2.evaluate(input["script"]);
@@ -26129,7 +26505,7 @@ var ImageAnalyzeTool = class extends BaseTool {
 };
 async function fileToImageAttachment(filePath) {
   const data = await fs11__default.default.readFile(filePath);
-  const ext = path27__default.default.extname(filePath).toLowerCase();
+  const ext = path28__default.default.extname(filePath).toLowerCase();
   const mimeMap = {
     ".jpg": "image/jpeg",
     ".jpeg": "image/jpeg",
@@ -26163,14 +26539,14 @@ var PDFCreateTool = class extends BaseTool {
     const filePath = input["path"];
     const content = input["content"];
     const title = input["title"];
-    const dir = path27__default.default.dirname(filePath);
-    if (!fs26__default.default.existsSync(dir)) {
-      fs26__default.default.mkdirSync(dir, { recursive: true });
+    const dir = path28__default.default.dirname(filePath);
+    if (!fs27__default.default.existsSync(dir)) {
+      fs27__default.default.mkdirSync(dir, { recursive: true });
     }
     return new Promise((resolve2, reject) => {
       try {
         const doc = new PDFDocument__default.default({ margin: 50 });
-        const stream = fs26__default.default.createWriteStream(filePath);
+        const stream = fs27__default.default.createWriteStream(filePath);
         doc.pipe(stream);
         if (title) {
           doc.info["Title"] = title;
@@ -26248,22 +26624,22 @@ var CodeInterpreterTool = class extends BaseTool {
       }
       cmdPrefix = NODE_CMD;
     }
-    const tmpDir = path27__default.default.join(this.workspaceRoot, ".cascade", "tmp");
-    if (!fs26__default.default.existsSync(tmpDir)) {
-      fs26__default.default.mkdirSync(tmpDir, { recursive: true });
+    const tmpDir = path28__default.default.join(this.workspaceRoot, ".cascade", "tmp");
+    if (!fs27__default.default.existsSync(tmpDir)) {
+      fs27__default.default.mkdirSync(tmpDir, { recursive: true });
     }
     const extension = language === "python" ? "py" : "js";
     const fileName = `intp_${crypto.randomUUID().slice(0, 8)}.${extension}`;
-    const filePath = path27__default.default.join(tmpDir, fileName);
-    fs26__default.default.writeFileSync(filePath, code, "utf-8");
+    const filePath = path28__default.default.join(tmpDir, fileName);
+    fs27__default.default.writeFileSync(filePath, code, "utf-8");
     const execArgs = [filePath, ...args];
     return new Promise((resolve2) => {
       const startMs = Date.now();
       child_process.execFile(cmdPrefix, execArgs, { cwd: this.workspaceRoot, timeout: 3e4 }, (error, stdout, stderr) => {
         const duration = Date.now() - startMs;
         try {
-          if (fs26__default.default.existsSync(filePath)) {
-            fs26__default.default.unlinkSync(filePath);
+          if (fs27__default.default.existsSync(filePath)) {
+            fs27__default.default.unlinkSync(filePath);
           }
         } catch (cleanupErr) {
           console.error(`Failed to cleanup interpreter script ${filePath}:`, cleanupErr);
@@ -26343,18 +26719,178 @@ ${formatted}`;
     return `Unknown action: ${action}`;
   }
 };
+var SsrfBlockedError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "SsrfBlockedError";
+  }
+};
+var ALLOWED_PROTOCOLS = /* @__PURE__ */ new Set(["http:", "https:"]);
+var MAX_REDIRECTS2 = 5;
+function allowLocal() {
+  return process.env["CASCADE_ALLOW_LOCAL_FETCH"] === "1";
+}
+function isPrivateAddress(ip) {
+  const type = net__default.default.isIP(ip);
+  if (type === 4) return isPrivateIPv4(ip);
+  if (type === 6) return isPrivateIPv6(ip);
+  return true;
+}
+function isPrivateIPv4(ip) {
+  const parts = ip.split(".").map((p) => Number(p));
+  if (parts.length !== 4 || parts.some((p) => Number.isNaN(p) || p < 0 || p > 255)) return true;
+  const [a, b] = parts;
+  if (a === 0) return true;
+  if (a === 10) return true;
+  if (a === 127) return true;
+  if (a === 169 && b === 254) return true;
+  if (a === 172 && b >= 16 && b <= 31) return true;
+  if (a === 192 && b === 168) return true;
+  if (a === 100 && b >= 64 && b <= 127) return true;
+  if (a >= 224) return true;
+  return false;
+}
+function ipv6Groups(ip) {
+  let s = ip.toLowerCase().replace(/^\[|\]$/g, "");
+  const zone = s.indexOf("%");
+  if (zone !== -1) s = s.slice(0, zone);
+  const dotted = /^(.*:)(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/.exec(s);
+  if (dotted) {
+    const o = [dotted[2], dotted[3], dotted[4], dotted[5]].map((p) => Number(p));
+    if (o.some((n) => !Number.isInteger(n) || n < 0 || n > 255)) return null;
+    s = `${dotted[1]}${(o[0] << 8 | o[1]).toString(16)}:${(o[2] << 8 | o[3]).toString(16)}`;
+  }
+  const halves = s.split("::");
+  if (halves.length > 2) return null;
+  const split = (part) => part ? part.split(":") : [];
+  const head = split(halves[0] ?? "");
+  const tail = halves.length === 2 ? split(halves[1] ?? "") : [];
+  const zeros = halves.length === 2 ? 8 - head.length - tail.length : 0;
+  if (zeros < 0) return null;
+  const groups = [...head, ...Array(zeros).fill("0"), ...tail];
+  if (groups.length !== 8) return null;
+  const out = [];
+  for (const g of groups) {
+    if (!/^[0-9a-f]{1,4}$/.test(g)) return null;
+    out.push(parseInt(g, 16));
+  }
+  return out;
+}
+function embeddedIPv4(g) {
+  const quad = (hi, lo) => `${hi >> 8}.${hi & 255}.${lo >> 8}.${lo & 255}`;
+  const leadingZero = (n) => g.slice(0, n).every((x) => x === 0);
+  if (leadingZero(5) && g[5] === 65535) return quad(g[6], g[7]);
+  if (leadingZero(6)) return quad(g[6], g[7]);
+  if (g[0] === 100 && g[1] === 65435) {
+    if (g[2] === 1) {
+      return quad(g[3], (g[4] & 255) << 8 | g[5] >> 8);
+    }
+    if (g[2] === 0 && g[3] === 0 && g[4] === 0 && g[5] === 0) return quad(g[6], g[7]);
+    return null;
+  }
+  if (g[0] === 8194) return quad(g[1], g[2]);
+  return null;
+}
+function isPrivateIPv6(ip) {
+  const g = ipv6Groups(ip);
+  if (!g) return true;
+  const v4 = embeddedIPv4(g);
+  if (v4) return isPrivateIPv4(v4);
+  if (g[0] === 100 && g[1] === 65435) return true;
+  if (g.every((x) => x === 0)) return true;
+  if (leading7Zero(g) && g[7] === 1) return true;
+  if ((g[0] & 65472) === 65152) return true;
+  if ((g[0] & 65024) === 64512) return true;
+  if ((g[0] & 65280) === 65280) return true;
+  return false;
+}
+function leading7Zero(g) {
+  return g.slice(0, 7).every((x) => x === 0);
+}
+async function assertPublicUrl(rawUrl) {
+  let url;
+  try {
+    url = new URL(rawUrl);
+  } catch {
+    throw new SsrfBlockedError(`Invalid URL: ${rawUrl}`);
+  }
+  if (!ALLOWED_PROTOCOLS.has(url.protocol)) {
+    throw new SsrfBlockedError(`Blocked URL scheme "${url.protocol}" \u2014 only http and https are allowed.`);
+  }
+  if (allowLocal()) return url;
+  const host = url.hostname.replace(/^\[|\]$/g, "");
+  if (net__default.default.isIP(host)) {
+    if (isPrivateAddress(host)) {
+      throw new SsrfBlockedError(`Blocked request to non-public address ${host}.`);
+    }
+    return url;
+  }
+  if (host === "localhost" || host.endsWith(".localhost") || host.endsWith(".local")) {
+    throw new SsrfBlockedError(`Blocked request to local hostname "${host}".`);
+  }
+  let addresses;
+  try {
+    const records = await dns2__default.default.lookup(host, { all: true });
+    addresses = records.map((r) => r.address);
+  } catch {
+    throw new SsrfBlockedError(`Could not resolve host "${host}".`);
+  }
+  if (addresses.length === 0 || addresses.some((addr) => isPrivateAddress(addr))) {
+    throw new SsrfBlockedError(`Blocked request to "${host}" \u2014 resolves to a non-public address.`);
+  }
+  return url;
+}
+var ssrfAgent = new undici.Agent({
+  connect: {
+    lookup(hostname, options, callback) {
+      if (allowLocal()) {
+        dnsCallback__default.default.lookup(hostname, options, callback);
+        return;
+      }
+      dnsCallback__default.default.lookup(hostname, { ...options, all: true }, (err, addresses) => {
+        if (err) return callback(err, "", 0);
+        const list = Array.isArray(addresses) ? addresses : [addresses];
+        const bad = list.find((a) => isPrivateAddress(a.address));
+        if (bad) {
+          return callback(
+            new SsrfBlockedError(`Blocked connection to "${hostname}" \u2014 resolved to non-public address ${bad.address}.`),
+            "",
+            0
+          );
+        }
+        if (options.all) return callback(null, list);
+        const first = list[0];
+        return callback(null, first.address, first.family);
+      });
+    }
+  }
+});
+async function safeFetch(rawUrl, init = {}) {
+  let currentUrl = (await assertPublicUrl(rawUrl)).toString();
+  for (let i = 0; i <= MAX_REDIRECTS2; i++) {
+    const resp = await fetch(currentUrl, { ...init, redirect: "manual", dispatcher: ssrfAgent });
+    if (resp.status < 300 || resp.status >= 400) return resp;
+    const location = resp.headers.get("location");
+    if (!location) return resp;
+    const next = new URL(location, currentUrl);
+    await assertPublicUrl(next.toString());
+    currentUrl = next.toString();
+  }
+  throw new SsrfBlockedError(`Too many redirects (>${MAX_REDIRECTS2}).`);
+}
 
 // src/tools/web-search.ts
-async function searchSearXNG(query, baseUrl, maxResults) {
+async function searchSearXNG(query, baseUrl, maxResults, guardUrl = false) {
   const url = new URL("/search", baseUrl);
   url.searchParams.set("q", query);
   url.searchParams.set("format", "json");
   url.searchParams.set("categories", "general");
   url.searchParams.set("engines", "google,bing,duckduckgo");
-  const resp = await fetch(url.toString(), {
+  const init = {
     headers: { "User-Agent": "Cascade-AI/1.0 WebSearchTool" },
     signal: AbortSignal.timeout(1e4)
-  });
+  };
+  const resp = guardUrl ? await safeFetch(url.toString(), init) : await fetch(url.toString(), init);
   if (!resp.ok) {
     throw new Error(`SearXNG returned HTTP ${resp.status}`);
   }
@@ -26483,7 +27019,11 @@ var WebSearchTool = class extends BaseTool {
       searxngUrl: config.searxngUrl ?? process.env["SEARXNG_URL"],
       braveApiKey: config.braveApiKey ?? process.env["BRAVE_SEARCH_API_KEY"],
       tavilyApiKey: config.tavilyApiKey ?? process.env["TAVILY_API_KEY"],
-      maxResults: config.maxResults ?? 5
+      maxResults: config.maxResults ?? 5,
+      // Note this reads only from `config`, never from the environment: the
+      // guard tracks the trustworthiness of the URL the host passed in, and an
+      // env var says nothing about that.
+      guardSearxngUrl: config.guardSearxngUrl ?? false
     };
   }
   async execute(input, _options) {
@@ -26498,7 +27038,7 @@ var WebSearchTool = class extends BaseTool {
     let anyBackendReachable = false;
     if (this.config.searxngUrl) {
       try {
-        results = await searchSearXNG(query, this.config.searxngUrl, maxResults);
+        results = await searchSearXNG(query, this.config.searxngUrl, maxResults, this.config.guardSearxngUrl);
         anyBackendReachable = true;
         if (results.length > 0) return this.formatResults(query, results);
         errors.push("SearXNG: returned 0 results");
@@ -26575,7 +27115,7 @@ var GlobTool = class extends BaseTool {
   };
   async execute(input, _options) {
     const pattern = input["pattern"];
-    const searchPath = input["path"] ? path27__default.default.resolve(this.workspaceRoot, input["path"]) : this.workspaceRoot;
+    const searchPath = input["path"] ? path28__default.default.resolve(this.workspaceRoot, input["path"]) : this.workspaceRoot;
     const matches = await glob.glob(pattern, {
       cwd: searchPath,
       ignore: ["node_modules/**", ".git/**", "dist/**", "build/**"],
@@ -26588,7 +27128,7 @@ var GlobTool = class extends BaseTool {
     const withMtime = await Promise.all(
       matches.map(async (rel) => {
         try {
-          const stat = await fs11__default.default.stat(path27__default.default.join(searchPath, rel));
+          const stat = await fs11__default.default.stat(path28__default.default.join(searchPath, rel));
           return { rel, mtime: stat.mtimeMs };
         } catch {
           return { rel, mtime: 0 };
@@ -26637,7 +27177,7 @@ var GrepTool = class extends BaseTool {
   };
   async execute(input, _options) {
     const pattern = input["pattern"];
-    const searchPath = input["path"] ? path27__default.default.resolve(this.workspaceRoot, input["path"]) : this.workspaceRoot;
+    const searchPath = input["path"] ? path28__default.default.resolve(this.workspaceRoot, input["path"]) : this.workspaceRoot;
     const globPattern = input["glob"];
     const outputMode = input["output_mode"] ?? "content";
     const context = input["context"] ?? 0;
@@ -26691,12 +27231,12 @@ var GrepTool = class extends BaseTool {
         nodir: true
       });
     } catch {
-      files = [path27__default.default.relative(searchPath, searchPath) || "."];
+      files = [path28__default.default.relative(searchPath, searchPath) || "."];
     }
     const results = [];
     let totalCount = 0;
     for (const rel of files) {
-      const abs = path27__default.default.join(searchPath, rel);
+      const abs = path28__default.default.join(searchPath, rel);
       let content;
       try {
         content = await fs11__default.default.readFile(abs, "utf-8");
@@ -26737,92 +27277,6 @@ Total: ${totalCount} matches`);
     return results.join("\n");
   }
 };
-var SsrfBlockedError = class extends Error {
-  constructor(message) {
-    super(message);
-    this.name = "SsrfBlockedError";
-  }
-};
-var ALLOWED_PROTOCOLS = /* @__PURE__ */ new Set(["http:", "https:"]);
-var MAX_REDIRECTS2 = 5;
-function allowLocal() {
-  return process.env["CASCADE_ALLOW_LOCAL_FETCH"] === "1";
-}
-function isPrivateAddress(ip) {
-  const type = net__default.default.isIP(ip);
-  if (type === 4) return isPrivateIPv4(ip);
-  if (type === 6) return isPrivateIPv6(ip);
-  return true;
-}
-function isPrivateIPv4(ip) {
-  const parts = ip.split(".").map((p) => Number(p));
-  if (parts.length !== 4 || parts.some((p) => Number.isNaN(p) || p < 0 || p > 255)) return true;
-  const [a, b] = parts;
-  if (a === 0) return true;
-  if (a === 10) return true;
-  if (a === 127) return true;
-  if (a === 169 && b === 254) return true;
-  if (a === 172 && b >= 16 && b <= 31) return true;
-  if (a === 192 && b === 168) return true;
-  if (a === 100 && b >= 64 && b <= 127) return true;
-  if (a >= 224) return true;
-  return false;
-}
-function isPrivateIPv6(ip) {
-  const lower = ip.toLowerCase().replace(/^\[|\]$/g, "");
-  if (lower === "::1" || lower === "::") return true;
-  if (lower.startsWith("fe80")) return true;
-  if (lower.startsWith("fc") || lower.startsWith("fd")) return true;
-  const mapped = /^::ffff:(\d+\.\d+\.\d+\.\d+)$/.exec(lower);
-  if (mapped) return isPrivateIPv4(mapped[1]);
-  return false;
-}
-async function assertPublicUrl(rawUrl) {
-  let url;
-  try {
-    url = new URL(rawUrl);
-  } catch {
-    throw new SsrfBlockedError(`Invalid URL: ${rawUrl}`);
-  }
-  if (!ALLOWED_PROTOCOLS.has(url.protocol)) {
-    throw new SsrfBlockedError(`Blocked URL scheme "${url.protocol}" \u2014 only http and https are allowed.`);
-  }
-  if (allowLocal()) return url;
-  const host = url.hostname.replace(/^\[|\]$/g, "");
-  if (net__default.default.isIP(host)) {
-    if (isPrivateAddress(host)) {
-      throw new SsrfBlockedError(`Blocked request to non-public address ${host}.`);
-    }
-    return url;
-  }
-  if (host === "localhost" || host.endsWith(".localhost") || host.endsWith(".local")) {
-    throw new SsrfBlockedError(`Blocked request to local hostname "${host}".`);
-  }
-  let addresses;
-  try {
-    const records = await dns2__default.default.lookup(host, { all: true });
-    addresses = records.map((r) => r.address);
-  } catch {
-    throw new SsrfBlockedError(`Could not resolve host "${host}".`);
-  }
-  if (addresses.length === 0 || addresses.some((addr) => isPrivateAddress(addr))) {
-    throw new SsrfBlockedError(`Blocked request to "${host}" \u2014 resolves to a non-public address.`);
-  }
-  return url;
-}
-async function safeFetch(rawUrl, init = {}) {
-  let currentUrl = (await assertPublicUrl(rawUrl)).toString();
-  for (let i = 0; i <= MAX_REDIRECTS2; i++) {
-    const resp = await fetch(currentUrl, { ...init, redirect: "manual" });
-    if (resp.status < 300 || resp.status >= 400) return resp;
-    const location = resp.headers.get("location");
-    if (!location) return resp;
-    const next = new URL(location, currentUrl);
-    await assertPublicUrl(next.toString());
-    currentUrl = next.toString();
-  }
-  throw new SsrfBlockedError(`Too many redirects (>${MAX_REDIRECTS2}).`);
-}
 
 // src/tools/web-fetch.ts
 var MAX_CHARS = 5e4;
@@ -27095,10 +27549,10 @@ var ToolRegistry = class extends EventEmitter__default.default {
   }
   isIgnored(filePath) {
     if (!filePath) return false;
-    const abs = path27__default.default.resolve(this.workspaceRoot, filePath);
-    const rel = path27__default.default.relative(this.workspaceRoot, abs);
-    if (!rel || rel.startsWith("..") || path27__default.default.isAbsolute(rel)) return true;
-    const posixRel = rel.split(path27__default.default.sep).join("/");
+    const abs = path28__default.default.resolve(this.workspaceRoot, filePath);
+    const rel = path28__default.default.relative(this.workspaceRoot, abs);
+    if (!rel || rel.startsWith("..") || path28__default.default.isAbsolute(rel)) return true;
+    const posixRel = rel.split(path28__default.default.sep).join("/");
     return this.ignoreMatcher.ignores(posixRel);
   }
 };
@@ -27332,22 +27786,22 @@ var FileMcpOAuthStore = class {
   filePath;
   load() {
     try {
-      return JSON.parse(fs26__default.default.readFileSync(this.filePath, "utf-8"));
+      return JSON.parse(fs27__default.default.readFileSync(this.filePath, "utf-8"));
     } catch {
       return void 0;
     }
   }
   save(state) {
-    fs26__default.default.mkdirSync(path27__default.default.dirname(this.filePath), { recursive: true, mode: 448 });
-    fs26__default.default.writeFileSync(this.filePath, JSON.stringify(state, null, 2), { mode: 384 });
+    fs27__default.default.mkdirSync(path28__default.default.dirname(this.filePath), { recursive: true, mode: 448 });
+    fs27__default.default.writeFileSync(this.filePath, JSON.stringify(state, null, 2), { mode: 384 });
     try {
-      fs26__default.default.chmodSync(this.filePath, 384);
+      fs27__default.default.chmodSync(this.filePath, 384);
     } catch {
     }
   }
   clear() {
     try {
-      fs26__default.default.rmSync(this.filePath);
+      fs27__default.default.rmSync(this.filePath);
     } catch {
     }
   }
@@ -28185,7 +28639,7 @@ var TaskAnalyzer = class {
     analysisCache.clear();
   }
 };
-var DEFAULT_STATS_FILE = path27__default.default.join(os6__default.default.homedir(), ".cascade", "model-perf.json");
+var DEFAULT_STATS_FILE = path28__default.default.join(os6__default.default.homedir(), ".cascade", "model-perf.json");
 var ModelPerformanceTracker = class _ModelPerformanceTracker {
   stats = /* @__PURE__ */ new Map();
   featureStats = /* @__PURE__ */ new Map();
@@ -28225,7 +28679,7 @@ var ModelPerformanceTracker = class _ModelPerformanceTracker {
   async save() {
     if (this.readOnly) return;
     try {
-      await fs11__default.default.mkdir(path27__default.default.dirname(this.statsFile), { recursive: true });
+      await fs11__default.default.mkdir(path28__default.default.dirname(this.statsFile), { recursive: true });
       const modelsObj = {};
       const featuresObj = {};
       for (const [key, stat] of this.stats) modelsObj[key] = stat;
@@ -28858,7 +29312,7 @@ Required capability: ${description.slice(0, 300)}`;
    *  any dangerous action, so a silently-reloaded tool can't act without approval. */
   async loadPersistedTools() {
     if (!this.workspacePath || !this.persistEnabled) return;
-    const file = path27__default.default.join(this.workspacePath, ".cascade", DYNAMIC_TOOLS_FILE);
+    const file = path28__default.default.join(this.workspacePath, ".cascade", DYNAMIC_TOOLS_FILE);
     try {
       const raw = await fs11__default.default.readFile(file, "utf-8");
       const specs = JSON.parse(raw);
@@ -28882,8 +29336,8 @@ Required capability: ${description.slice(0, 300)}`;
   }
   async persist() {
     if (!this.workspacePath || !this.persistEnabled) return;
-    const dir = path27__default.default.join(this.workspacePath, ".cascade");
-    const file = path27__default.default.join(dir, DYNAMIC_TOOLS_FILE);
+    const dir = path28__default.default.join(this.workspacePath, ".cascade");
+    const file = path28__default.default.join(dir, DYNAMIC_TOOLS_FILE);
     try {
       await fs11__default.default.mkdir(dir, { recursive: true });
       await fs11__default.default.writeFile(file, JSON.stringify(Array.from(this.specs.values()), null, 2), "utf-8");
@@ -28903,12 +29357,12 @@ var WorldStateDB = class {
   constructor(workspacePath, debugMode = false) {
     this.workspacePath = workspacePath;
     this.debugMode = debugMode;
-    const cascadeDir = path27__default.default.join(workspacePath, ".cascade");
-    if (!fs26__default.default.existsSync(cascadeDir)) {
-      fs26__default.default.mkdirSync(cascadeDir, { recursive: true });
+    const cascadeDir = path28__default.default.join(workspacePath, ".cascade");
+    if (!fs27__default.default.existsSync(cascadeDir)) {
+      fs27__default.default.mkdirSync(cascadeDir, { recursive: true });
     }
-    this.keyPath = path27__default.default.join(cascadeDir, "world_state.key");
-    this.dbPath = path27__default.default.join(cascadeDir, "world_state.db");
+    this.keyPath = path28__default.default.join(cascadeDir, "world_state.key");
+    this.dbPath = path28__default.default.join(cascadeDir, "world_state.db");
     this.initEncryptionKey();
     this.db = new Database2__default.default(this.dbPath);
     this.db.pragma("journal_mode = WAL");
@@ -28965,11 +29419,11 @@ var WorldStateDB = class {
     ).run(e, r, row.encrypted_value, row.source_worker, row.timestamp, validTo, change);
   }
   initEncryptionKey() {
-    if (fs26__default.default.existsSync(this.keyPath)) {
-      this.encryptionKey = fs26__default.default.readFileSync(this.keyPath);
+    if (fs27__default.default.existsSync(this.keyPath)) {
+      this.encryptionKey = fs27__default.default.readFileSync(this.keyPath);
     } else {
       this.encryptionKey = crypto__default.default.randomBytes(32);
-      fs26__default.default.writeFileSync(this.keyPath, this.encryptionKey);
+      fs27__default.default.writeFileSync(this.keyPath, this.encryptionKey);
     }
   }
   encrypt(text) {
@@ -29255,9 +29709,9 @@ var WorldStateDB = class {
   dumpDebugIfNeeded() {
     if (!this.debugMode) return;
     try {
-      const dumpPath = path27__default.default.join(os6__default.default.tmpdir(), "cascade_world_state_debug.json");
+      const dumpPath = path28__default.default.join(os6__default.default.tmpdir(), "cascade_world_state_debug.json");
       const entries = this.getAllEntries();
-      fs26__default.default.writeFileSync(dumpPath, JSON.stringify(entries, null, 2), "utf-8");
+      fs27__default.default.writeFileSync(dumpPath, JSON.stringify(entries, null, 2), "utf-8");
     } catch (err) {
       console.error("Failed to dump debug world state", err);
     }
@@ -29313,11 +29767,11 @@ var ResumeStore = class {
         version: RESUME_SCHEMA_VERSION,
         createdAt: checkpoint.createdAt ?? new Date(timestamp).toISOString()
       };
-      await fs26.promises.mkdir(this.dir, { recursive: true });
-      const finalPath = path27__default.default.join(this.dir, `${timestamp}-${safeId(record.taskId)}.json`);
+      await fs27.promises.mkdir(this.dir, { recursive: true });
+      const finalPath = path28__default.default.join(this.dir, `${timestamp}-${safeId(record.taskId)}.json`);
       const tempPath = `${finalPath}.${process.pid}.tmp`;
-      await fs26.promises.writeFile(tempPath, JSON.stringify(record, null, 2), "utf-8");
-      await fs26.promises.rename(tempPath, finalPath);
+      await fs27.promises.writeFile(tempPath, JSON.stringify(record, null, 2), "utf-8");
+      await fs27.promises.rename(tempPath, finalPath);
       await this.prune();
       return true;
     } catch {
@@ -29328,7 +29782,7 @@ var ResumeStore = class {
   async list() {
     let entries;
     try {
-      entries = await fs26.promises.readdir(this.dir);
+      entries = await fs27.promises.readdir(this.dir);
     } catch {
       return [];
     }
@@ -29337,7 +29791,7 @@ var ResumeStore = class {
     const checkpoints = [];
     for (const candidate of candidates) {
       try {
-        const raw = await fs26.promises.readFile(path27__default.default.join(this.dir, candidate.name), "utf-8");
+        const raw = await fs27.promises.readFile(path28__default.default.join(this.dir, candidate.name), "utf-8");
         const parsed = JSON.parse(raw);
         if (isCheckpoint(parsed)) checkpoints.push(parsed);
       } catch {
@@ -29371,12 +29825,12 @@ var ResumeStore = class {
     const target = taskId ? all.find((c) => c.taskId === taskId) : all[0];
     if (!target) return null;
     try {
-      const entries = await fs26.promises.readdir(this.dir);
+      const entries = await fs27.promises.readdir(this.dir);
       const wanted = safeId(target.taskId);
       const source = entries.find((name) => FILE_PATTERN.exec(name)?.[2] === wanted);
       if (!source) return null;
       const claimId = `${this.now()}-${safeId(target.taskId)}`;
-      await fs26.promises.rename(path27__default.default.join(this.dir, source), path27__default.default.join(this.dir, `${claimId}${CLAIM_SUFFIX}`));
+      await fs27.promises.rename(path28__default.default.join(this.dir, source), path28__default.default.join(this.dir, `${claimId}${CLAIM_SUFFIX}`));
       return { checkpoint: target, claimId };
     } catch {
       return null;
@@ -29385,9 +29839,9 @@ var ResumeStore = class {
   /** Give a claim back, so the work stays recoverable after a failed start. */
   async release(claimId) {
     try {
-      await fs26.promises.rename(
-        path27__default.default.join(this.dir, `${claimId}${CLAIM_SUFFIX}`),
-        path27__default.default.join(this.dir, `${claimId}.json`)
+      await fs27.promises.rename(
+        path28__default.default.join(this.dir, `${claimId}${CLAIM_SUFFIX}`),
+        path28__default.default.join(this.dir, `${claimId}.json`)
       );
     } catch {
     }
@@ -29395,7 +29849,7 @@ var ResumeStore = class {
   /** Discard a claim for good — the resumed run has taken ownership. */
   async settle(claimId) {
     try {
-      await fs26.promises.rm(path27__default.default.join(this.dir, `${claimId}${CLAIM_SUFFIX}`), { force: true });
+      await fs27.promises.rm(path28__default.default.join(this.dir, `${claimId}${CLAIM_SUFFIX}`), { force: true });
     } catch {
     }
   }
@@ -29417,15 +29871,15 @@ var ResumeStore = class {
   async reclaimStale() {
     let reclaimed = 0;
     try {
-      const entries = await fs26.promises.readdir(this.dir);
+      const entries = await fs27.promises.readdir(this.dir);
       const cutoff = this.now() - this.claimTimeoutMs;
       for (const name of entries) {
         if (!name.endsWith(CLAIM_SUFFIX)) continue;
         const stamp2 = Number(/^(\d+)-/.exec(name)?.[1]);
         if (!Number.isFinite(stamp2) || stamp2 >= cutoff) continue;
-        await fs26.promises.rename(
-          path27__default.default.join(this.dir, name),
-          path27__default.default.join(this.dir, `${name.slice(0, -CLAIM_SUFFIX.length)}.json`)
+        await fs27.promises.rename(
+          path28__default.default.join(this.dir, name),
+          path28__default.default.join(this.dir, `${name.slice(0, -CLAIM_SUFFIX.length)}.json`)
         );
         reclaimed++;
       }
@@ -29436,12 +29890,12 @@ var ResumeStore = class {
   /** Remove every checkpoint for a task id. */
   async delete(taskId) {
     try {
-      const entries = await fs26.promises.readdir(this.dir);
+      const entries = await fs27.promises.readdir(this.dir);
       const wanted = safeId(taskId);
       await Promise.all(entries.map(async (name) => {
         const match = FILE_PATTERN.exec(name);
         if (match?.[2] === wanted) {
-          await fs26.promises.rm(path27__default.default.join(this.dir, name), { force: true });
+          await fs27.promises.rm(path28__default.default.join(this.dir, name), { force: true });
         }
       }));
     } catch {
@@ -29450,13 +29904,13 @@ var ResumeStore = class {
   /** Drop expired checkpoints, then any beyond the newest `maxCheckpoints`. */
   async prune() {
     try {
-      const entries = await fs26.promises.readdir(this.dir);
+      const entries = await fs27.promises.readdir(this.dir);
       const cutoff = this.now() - this.maxAgeMs;
       const files = entries.map((name) => ({ name, match: FILE_PATTERN.exec(name) })).filter((e) => e.match !== null).map((e) => ({ name: e.name, timestamp: Number(e.match[1]) })).sort((a, b) => b.timestamp - a.timestamp);
       const doomed = files.filter((f, index) => f.timestamp < cutoff || index >= this.maxCheckpoints);
       const staleTemps = entries.filter((name) => name.endsWith(".tmp")).filter((name) => (Number(FILE_PATTERN.exec(name.replace(/\.\d+\.tmp$/, ".json"))?.[1]) || 0) < cutoff);
       await Promise.all([...doomed.map((f) => f.name), ...staleTemps].map(
-        (name) => fs26.promises.rm(path27__default.default.join(this.dir, name), { force: true })
+        (name) => fs27.promises.rm(path28__default.default.join(this.dir, name), { force: true })
       ));
     } catch {
     }
@@ -29833,7 +30287,7 @@ var WorkspaceIndex = class {
   isIgnored;
   chunker;
   constructor(opts) {
-    this.root = path27__default.default.resolve(opts.root);
+    this.root = path28__default.default.resolve(opts.root);
     this.db = opts.db;
     this.namespace = opts.namespace ?? "code";
     this.extensions = new Set((opts.extensions ?? DEFAULT_EXTENSIONS).map((e) => e.replace(/^\./, "").toLowerCase()));
@@ -29865,14 +30319,14 @@ var WorkspaceIndex = class {
         return;
       }
       for (const entry of entries) {
-        const abs = path27__default.default.join(dir, entry.name);
+        const abs = path28__default.default.join(dir, entry.name);
         if (entry.isDirectory()) {
           if (HARD_SKIP_DIRS.has(entry.name) || this.isIgnored(abs)) continue;
           await walk(abs);
         } else if (entry.isFile()) {
-          const ext = path27__default.default.extname(entry.name).slice(1).toLowerCase();
+          const ext = path28__default.default.extname(entry.name).slice(1).toLowerCase();
           if (!this.extensions.has(ext) || this.isIgnored(abs)) continue;
-          out.push(path27__default.default.relative(this.root, abs));
+          out.push(path28__default.default.relative(this.root, abs));
         }
       }
     };
@@ -29902,7 +30356,7 @@ var WorkspaceIndex = class {
     const entries = [];
     for (const rel of rels) {
       try {
-        const abs = path27__default.default.join(this.root, rel);
+        const abs = path28__default.default.join(this.root, rel);
         const stat = await fs11__default.default.stat(abs);
         if (stat.size > this.maxFileBytes) continue;
         const buf = await fs11__default.default.readFile(abs);
@@ -30307,6 +30761,127 @@ var CurrentPageTool = class extends BaseTool {
   }
 };
 
+// src/tools/browser-control.ts
+var BrowserControlTool = class extends BaseTool {
+  name = "browser_control";
+  description = "Act on the web page the user has open in the built-in browser: navigate, click an element, type into a field, press a key, or wait for something to appear. This drives the REAL browser the user is signed into and can see, so actions have real consequences \u2014 prefer read_current_page when you only need to look. CSS selectors are matched against the live page; call extract_text first if you need to find one. There is one browser: if another part of this run is using it, this call waits its turn, so a slow reply means queued, not stuck.";
+  inputSchema = {
+    type: "object",
+    properties: {
+      action: {
+        type: "string",
+        enum: ["navigate", "click", "fill", "press", "wait_for", "extract_text"],
+        description: "What to do."
+      },
+      url: { type: "string", description: "For navigate: the http(s) address to open." },
+      selector: {
+        type: "string",
+        description: "CSS selector for click, fill and wait_for. Optional for extract_text (defaults to the whole page)."
+      },
+      value: { type: "string", description: "For fill: the text to type." },
+      key: { type: "string", description: 'For press: a key name such as "Enter", "Tab" or "Escape".' },
+      timeoutMs: { type: "number", description: "For wait_for: how long to wait before giving up (default 10000, max 30000)." }
+    },
+    required: ["action"]
+  };
+  controller;
+  release;
+  /** One-way. See `revoke`. */
+  revoked = false;
+  constructor(controller, release) {
+    super();
+    this.controller = controller;
+    this.release = release;
+  }
+  /**
+   * A worker has finished. Ends its hold on the browser.
+   *
+   * Called from the tier's terminal path rather than by the model, because a
+   * model cannot be relied on to announce that it is done — which is why the
+   * host cannot use idle time as the boundary instead.
+   */
+  releaseActor(actorId) {
+    this.release?.(actorId);
+  }
+  /**
+   * Permanently disable this tool, whatever the registry still holds.
+   *
+   * Registration-time gates cannot express "this run turned out to be
+   * unattended": a host that wires the controller and only then declares the
+   * run unattended has already registered the tool, and a check that ran at
+   * registration has no second chance. Enforcing at EXECUTION time makes the
+   * guarantee independent of call order, which is the whole point of stating
+   * the invariant rather than relying on the scheduler's current sequence.
+   *
+   * One-way on purpose. A safety gate that can be re-opened by a later call is
+   * a gate that a refactor re-opens by accident.
+   */
+  revoke() {
+    this.revoked = true;
+  }
+  // Acting on a session the user is signed into is the highest-consequence
+  // thing in the tool set — higher than shell, arguably, because the blast
+  // radius is someone else's server rather than this machine.
+  isDangerous() {
+    return true;
+  }
+  async execute(input, options) {
+    if (this.revoked) {
+      return "Error: browser control is not available in this run. It requires a person watching who can stop it, and nobody is.";
+    }
+    const kind = input["action"];
+    if (!kind) return "Error: action is required.";
+    if (options?.signal?.aborted) return "Error: the run was cancelled before this action ran.";
+    const missing = requiredFieldFor(kind, input);
+    if (missing) return `Error: "${kind}" needs ${missing}.`;
+    const action = {
+      kind,
+      ...typeof input["url"] === "string" ? { url: input["url"] } : {},
+      ...typeof input["selector"] === "string" ? { selector: input["selector"] } : {},
+      ...typeof input["value"] === "string" ? { value: input["value"] } : {},
+      ...typeof input["key"] === "string" ? { key: input["key"] } : {},
+      ...typeof input["timeoutMs"] === "number" ? { timeoutMs: Math.min(Math.max(input["timeoutMs"], 0), 3e4) } : {}
+    };
+    let outcome;
+    try {
+      outcome = await this.controller(action, {
+        // `sessionId` is the run. The host scopes both revocation and its
+        // single-owner lease on it, so passing it is not telemetry — drop it
+        // and a Stop in one run silently stops every later one.
+        sessionId: options?.sessionId ?? "",
+        actorId: options?.tierId ?? options?.sessionId ?? "",
+        ...options?.signal ? { signal: options.signal } : {}
+      });
+    } catch (err) {
+      return `Error: the browser could not perform "${kind}" \u2014 ${err instanceof Error ? err.message : String(err)}`;
+    }
+    const where = outcome.url ? `
+Page: ${outcome.title ? `${outcome.title} \u2014 ` : ""}${outcome.url}` : "";
+    return `${outcome.ok ? "" : "Failed: "}${outcome.detail}${where}`;
+  }
+};
+function requiredFieldFor(kind, input) {
+  const has = (k) => typeof input[k] === "string" && input[k].length > 0;
+  const given = (k) => typeof input[k] === "string";
+  switch (kind) {
+    case "navigate":
+      return has("url") ? null : "a url";
+    case "click":
+      return has("selector") ? null : "a selector";
+    case "fill":
+      return has("selector") ? given("value") ? null : "a value" : "a selector";
+    case "press":
+      return has("key") ? null : "a key";
+    case "wait_for":
+      return has("selector") ? null : "a selector";
+    // extract_text works with or without a selector.
+    case "extract_text":
+      return null;
+    default:
+      return null;
+  }
+}
+
 // src/core/cascade.ts
 var ESCALATION_DECISION_TIMEOUT_MS = 5 * 6e4;
 function buildContextualPrompt(prompt, history = []) {
@@ -30392,13 +30967,13 @@ var Cascade = class _Cascade extends EventEmitter__default.default {
     this.toolRegistry = new ToolRegistry(this.config.tools, workspacePath);
     try {
       this.router.setDeadModelStore(new DeadModelStore(
-        fileDeadModelPersistence(path27__default.default.join(workspacePath, ".cascade", "dead-models.json"))
+        fileDeadModelPersistence(path28__default.default.join(workspacePath, ".cascade", "dead-models.json"))
       ));
     } catch {
     }
     try {
       this.resumeStore = new ResumeStore({
-        dir: path27__default.default.join(workspacePath, ".cascade", "resume")
+        dir: path28__default.default.join(workspacePath, ".cascade", "resume")
       });
     } catch {
     }
@@ -30486,8 +31061,8 @@ var Cascade = class _Cascade extends EventEmitter__default.default {
       this.emit("log", { level: "warn", message: "Code index enabled but no embeddings-capable provider is configured \u2014 skipping." });
       return;
     }
-    const dbPath = ci.dbPath || path27__default.default.join(this.workspacePath, ".cascade", "code-index.db");
-    fs26__default.default.mkdirSync(path27__default.default.dirname(dbPath), { recursive: true });
+    const dbPath = ci.dbPath || path28__default.default.join(this.workspacePath, ".cascade", "code-index.db");
+    fs27__default.default.mkdirSync(path28__default.default.dirname(dbPath), { recursive: true });
     const db = new Database2__default.default(dbPath);
     db.pragma("journal_mode = WAL");
     const complete = chatCompleterFromProviders(this.config.providers);
@@ -30799,6 +31374,49 @@ ${input}` }],
     if ((this.config.tools?.disabledTools ?? []).includes("read_current_page")) return;
     this.toolRegistry.register(new CurrentPageTool(provider));
   }
+  /**
+   * True when nobody is watching this run — a scheduled/cron task, which
+   * auto-approves every tool because there is no one to ask.
+   *
+   * That auto-approval is fine for ordinary tools and disqualifying for this
+   * one: `browser_control` drives the signed-in browser, and "every run asks
+   * first" is the promise the Settings copy makes. The property used to hold
+   * only because `runScheduledTask` happens not to call `setBrowserController`
+   * — a guarantee resting on an ABSENT call, which is exactly what a later
+   * refactor adds without noticing. Stated and enforced instead.
+   */
+  unattended = false;
+  /**
+   * Declare that no human is watching this run, so capabilities that depend on
+   * a person being able to see and stop them are refused outright.
+   */
+  setUnattended(on) {
+    this.unattended = on;
+    if (!on) return;
+    const tool = this.toolRegistry.getTool("browser_control");
+    tool?.revoke?.();
+  }
+  /**
+   * Wire the host's browser so a run can ACT on the open page, not just read it.
+   *
+   * Two gates before this registers anything, and both matter:
+   *
+   *   - `tools.agentBrowserControl` must be on. Unlike read_current_page, which
+   *     reaches nothing the user has not already opened themselves, this drives
+   *     the session they are signed into. That is opt-in, not a default.
+   *   - `disabledTools` still removes it, the same as every other tool.
+   *   - The run must not be UNATTENDED. See `setUnattended`.
+   *
+   * Host-supplied like the page provider: the tool exists only where there is a
+   * real browser to drive, so it never has to be refused in the CLI or a hosted
+   * run — it is simply not there.
+   */
+  setBrowserController(controller, release) {
+    if (this.unattended) return;
+    if (!this.config.tools?.agentBrowserControl) return;
+    if ((this.config.tools?.disabledTools ?? []).includes("browser_control")) return;
+    this.toolRegistry.register(new BrowserControlTool(controller, release));
+  }
   registerMediaTools(workspacePath) {
     const denied = new Set(this.config.tools?.disabledTools ?? []);
     const permitted = (name) => !denied.has(name);
@@ -31404,6 +32022,7 @@ ${prompt}` : prompt;
     this.router.setRunSignal(options.signal);
     const startMs = Date.now();
     const taskId = crypto.randomUUID();
+    this.emit("run:started", { taskId });
     this.decisionLog = [];
     this.currentRunCompleted = [];
     this.wroteCheckpointThisRun = false;
@@ -32169,6 +32788,7 @@ function applySettingsPayload(config, data) {
     if (["auto", "T1", "T2", "T3"].includes(a["forceTier"])) config.routing = { ...config.routing ?? {}, forceTier: a["forceTier"] };
     if (typeof a["benchmarksLive"] === "boolean") config.benchmarks = { ...config.benchmarks ?? {}, live: a["benchmarksLive"] };
     if (["isolate", "worker", "auto"].includes(a["dynamicToolSandbox"])) config.tools = { ...config.tools ?? {}, dynamicToolSandbox: a["dynamicToolSandbox"] };
+    if (typeof a["agentBrowserControl"] === "boolean") config.tools = { ...config.tools ?? {}, agentBrowserControl: a["agentBrowserControl"] };
     if (typeof a["factsExtraction"] === "boolean") config.knowledge = { ...config.knowledge ?? {}, factsExtraction: a["factsExtraction"] };
     if (typeof a["rememberSessions"] === "boolean") config.memory = { ...config.memory ?? {}, rememberSessions: a["rememberSessions"] };
     if (typeof a["enableToolCreation"] === "boolean") config.enableToolCreation = a["enableToolCreation"];
@@ -32226,6 +32846,7 @@ function settingsSnapshot(config) {
       forceTier: config.routing?.forceTier,
       benchmarksLive: config.benchmarks?.live,
       dynamicToolSandbox: config.tools?.dynamicToolSandbox,
+      agentBrowserControl: config.tools?.agentBrowserControl,
       factsExtraction: config.knowledge?.factsExtraction,
       rememberSessions: config.memory?.rememberSessions,
       enableToolCreation: config.enableToolCreation,
@@ -32261,8 +32882,8 @@ function replaceInPlace(target, source) {
 }
 function writeConfigFile(configPath, config) {
   try {
-    fs26__default.default.mkdirSync(path27__default.default.dirname(configPath), { recursive: true });
-    fs26__default.default.writeFileSync(configPath, JSON.stringify(config, null, 2), "utf-8");
+    fs27__default.default.mkdirSync(path28__default.default.dirname(configPath), { recursive: true });
+    fs27__default.default.writeFileSync(configPath, JSON.stringify(config, null, 2), "utf-8");
     return { ok: true };
   } catch (err) {
     return { ok: false, error: err instanceof Error ? err.message : String(err) };
@@ -32672,7 +33293,7 @@ function aggregateCostStats(sessions, opts = {}) {
 }
 
 // src/dashboard/server.ts
-var __dirname$1 = path27__default.default.dirname(url.fileURLToPath((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('index.cjs', document.baseURI).href))));
+var __dirname$1 = path28__default.default.dirname(url.fileURLToPath((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('index.cjs', document.baseURI).href))));
 var ORPHANED_ESCALATION_GRACE_MS = 3e4;
 var MASK = "***";
 function masked(key, value) {
@@ -32730,6 +33351,14 @@ var DashboardServer = class {
    * always failing.
    */
   currentPageProvider;
+  /**
+   * Supplied by the desktop shell so a run can ACT on that page — click, type,
+   * submit — not just read it. Same reasoning as the provider above: absent in
+   * the CLI, so the tool is not registered rather than present and failing.
+   * Cascade applies the `tools.agentBrowserControl` gate on top of this.
+   */
+  browserController;
+  browserActorRelease;
   activeControllers = /* @__PURE__ */ new Map();
   /**
    * Run taskIds per chat session — file snapshots are keyed by the run's
@@ -32791,6 +33420,7 @@ var DashboardServer = class {
     });
     this.socket.onConfigUpdate(async (data) => {
       const result = await commitSettings(this.config, data, (committed) => this.persistConfig(committed));
+      if (result.ok) this.settingsChangeHook?.(this.config);
       const refused = result.refused.map((r) => ({
         type: r.type,
         reason: r.reason,
@@ -32814,6 +33444,7 @@ var DashboardServer = class {
       const cascade = new Cascade(cfg, this.workspacePath, this.store);
       this.activeSessions.set(sessionId, cascade);
       if (this.currentPageProvider) cascade.setCurrentPageProvider(this.currentPageProvider);
+      if (this.browserController) cascade.setBrowserController(this.browserController, this.browserActorRelease);
       cascade.on("stream:token", (e) => {
         this.emitToSessionClients(socketId, sessionId, "stream:token", { sessionId, tierId: e.tierId, text: e.text, primary: e.primary });
       });
@@ -32837,13 +33468,16 @@ var DashboardServer = class {
         if (ev.requestId) this.clearPendingEscalation(ev.requestId);
         this.emitToSessionClients(socketId, sessionId, "escalation:timeout", { sessionId, ...e });
       });
+      cascade.on("run:started", (e) => {
+        const id = e.taskId;
+        if (id) this.recordSessionTask(sessionId, id);
+      });
       try {
         const result = await cascade.run({
           prompt: runPrompt,
           signal: abortController.signal,
           approvalCallback: this.makeApprovalCallback(sessionId)
         });
-        this.recordSessionTask(sessionId, result.taskId);
         this.persistRunEnd(sessionId, title, prompt, result.output, "COMPLETED", result);
         this.captureWhy(sessionId, cascade, result);
         this.emitToSessionClients(socketId, sessionId, "session:complete", { sessionId, result });
@@ -32909,6 +33543,49 @@ var DashboardServer = class {
   setCurrentPageProvider(provider) {
     this.currentPageProvider = provider;
   }
+  /** Let runs act on that view, not just read it (desktop only). */
+  setBrowserController(controller, release) {
+    this.browserController = controller;
+    this.browserActorRelease = release;
+  }
+  /**
+   * Told whenever settings are committed through THIS server.
+   *
+   * Settings reach the live config by two routes — the desktop's Electron IPC
+   * handler and this server's `config:update` socket — and both run the same
+   * `commitSettings`. The desktop mirrors `tools.agentBrowserControl` into its
+   * browser module after its own route, but had no way to learn about the
+   * other, so a socket write left the module's copy stale: an enable the module
+   * still refused, or worse a disable the module still honoured for a run
+   * already holding the tool. This is the same sibling-writer drift
+   * `settings-payload.ts` exists to prevent, one layer up.
+   */
+  settingsChangeHook;
+  onSettingsChanged(hook) {
+    this.settingsChangeHook = hook;
+  }
+  /**
+   * Told when a run ends, so a host holding run-scoped state can release it.
+   *
+   * The desktop uses this to retire a run's browser Stop control: that has to
+   * outlive each individual action (the gap between two actions is when the
+   * user most wants it) but must not outlive the run.
+   */
+  /**
+   * Fired when a run ends, carrying BOTH identifiers explicitly.
+   *
+   * They are different things and conflating them was a live bug: a chat
+   * `sessionId` can contain many runs (hence `sessionTaskIds`), while
+   * `Cascade.run()` mints a fresh random `taskId` per run — and it is the
+   * taskId that tools see as `ToolExecuteOptions.sessionId`. Passing only the
+   * chat id meant browser cleanup keyed on the task id matched nothing, so a
+   * finished run kept its Stop banner armed and held its browser lease until
+   * the deadlock ceiling.
+   */
+  runEndedHook;
+  onRunEnded(hook) {
+    this.runEndedHook = hook;
+  }
   async start() {
     const isLoopback = this.host === "127.0.0.1" || this.host === "::1" || this.host === "localhost";
     if (!isLoopback) {
@@ -32991,7 +33668,7 @@ var DashboardServer = class {
    * silently and still typecheck.
    */
   persistConfig(config) {
-    const result = writeConfigFile(path27__default.default.join(this.workspacePath, CASCADE_CONFIG_FILE), config);
+    const result = writeConfigFile(path28__default.default.join(this.workspacePath, CASCADE_CONFIG_FILE), config);
     if (!result.ok) console.warn(`[dashboard] Failed to persist config: ${result.error}`);
     return result;
   }
@@ -33010,7 +33687,7 @@ var DashboardServer = class {
    */
   syncGlobalCredentials() {
     try {
-      saveGlobalCredentials(path27__default.default.join(os6__default.default.homedir(), GLOBAL_CONFIG_DIR), this.config.providers ?? []);
+      saveGlobalCredentials(path28__default.default.join(os6__default.default.homedir(), GLOBAL_CONFIG_DIR), this.config.providers ?? []);
     } catch (err) {
       console.warn(`[dashboard] Failed to sync global credentials: ${err instanceof Error ? err.message : String(err)}`);
     }
@@ -33025,15 +33702,15 @@ var DashboardServer = class {
   resolveDashboardSecret() {
     const fromConfig = this.config.dashboard.secret ?? process.env["CASCADE_DASHBOARD_SECRET"];
     if (fromConfig) return fromConfig;
-    const secretPath = path27__default.default.join(this.workspacePath, CASCADE_DASHBOARD_SECRET_FILE);
+    const secretPath = path28__default.default.join(this.workspacePath, CASCADE_DASHBOARD_SECRET_FILE);
     try {
-      if (fs26__default.default.existsSync(secretPath)) {
-        const existing = fs26__default.default.readFileSync(secretPath, "utf-8").trim();
+      if (fs27__default.default.existsSync(secretPath)) {
+        const existing = fs27__default.default.readFileSync(secretPath, "utf-8").trim();
         if (existing.length >= 16) return existing;
       }
       const generated = crypto.randomUUID();
-      fs26__default.default.mkdirSync(path27__default.default.dirname(secretPath), { recursive: true });
-      fs26__default.default.writeFileSync(secretPath, generated, { encoding: "utf-8", mode: 384 });
+      fs27__default.default.mkdirSync(path28__default.default.dirname(secretPath), { recursive: true });
+      fs27__default.default.writeFileSync(secretPath, generated, { encoding: "utf-8", mode: 384 });
       if (this.config.dashboard.auth) {
         console.warn(
           `Dashboard auth enabled with no secret configured; persisted a generated secret to ${secretPath}. Set CASCADE_DASHBOARD_SECRET or config.dashboard.secret to override.`
@@ -33060,7 +33737,7 @@ var DashboardServer = class {
   // ── Setup ─────────────────────────────────────
   getGlobalStore() {
     if (!this.globalStore) {
-      const globalDbPath = path27__default.default.join(os6__default.default.homedir(), GLOBAL_CONFIG_DIR, GLOBAL_RUNTIME_DB_FILE);
+      const globalDbPath = path28__default.default.join(os6__default.default.homedir(), GLOBAL_CONFIG_DIR, GLOBAL_RUNTIME_DB_FILE);
       this.globalStore = new MemoryStore(globalDbPath);
     }
     return this.globalStore;
@@ -33099,6 +33776,8 @@ var DashboardServer = class {
   }
   /** Record run end: the assistant reply (when there is one) and the runtime row's final status. */
   persistRunEnd(sessionId, title, latestPrompt, reply, status, result) {
+    const endedTaskId = result?.taskId ?? this.sessionTaskIds.get(sessionId)?.at(-1);
+    this.runEndedHook?.({ sessionId, ...endedTaskId ? { taskId: endedTaskId } : {} });
     try {
       if (reply && reply.trim()) {
         this.store.addMessage({ id: crypto.randomUUID(), sessionId, role: "assistant", content: reply, timestamp: (/* @__PURE__ */ new Date()).toISOString() });
@@ -33192,6 +33871,7 @@ var DashboardServer = class {
     const prompt = task.prompt;
     const title = this.persistRunStart(sessionId, `[${task.name}] ${prompt}`);
     const cascade = new Cascade(this.config, task.workspacePath ?? this.workspacePath, this.store);
+    cascade.setUnattended(true);
     this.activeSessions.set(sessionId, cascade);
     cascade.on("tier:status", (e) => {
       this.socket.broadcast("tier:status", { sessionId, ...e });
@@ -33199,13 +33879,16 @@ var DashboardServer = class {
     cascade.on("peer:message", (e) => {
       this.socket.emitPeerMessage(e);
     });
+    cascade.on("run:started", (e) => {
+      const id = e.taskId;
+      if (id) this.recordSessionTask(sessionId, id);
+    });
     try {
       const result = await cascade.run({
         prompt,
         identityId: task.identityId,
         approvalCallback: async () => ({ approved: true, always: false })
       });
-      this.recordSessionTask(sessionId, result.taskId);
       this.persistRunEnd(sessionId, title, prompt, result.output, "COMPLETED", result);
       this.captureWhy(sessionId, cascade, result);
       this.socket.broadcast("session:complete", { sessionId, result });
@@ -33440,12 +34123,12 @@ ${prompt}`;
     }
   }
   watchRuntimeChanges() {
-    const workspaceDbPath = path27__default.default.join(this.workspacePath, CASCADE_DB_FILE);
-    const globalDbPath = path27__default.default.join(os6__default.default.homedir(), GLOBAL_CONFIG_DIR, GLOBAL_RUNTIME_DB_FILE);
+    const workspaceDbPath = path28__default.default.join(this.workspacePath, CASCADE_DB_FILE);
+    const globalDbPath = path28__default.default.join(os6__default.default.homedir(), GLOBAL_CONFIG_DIR, GLOBAL_RUNTIME_DB_FILE);
     const watchPaths = [workspaceDbPath, globalDbPath].filter((p, index, arr) => arr.indexOf(p) === index);
     for (const watchPath of watchPaths) {
-      if (!fs26__default.default.existsSync(watchPath)) continue;
-      fs26__default.default.watchFile(watchPath, { interval: 3e3 }, () => {
+      if (!fs27__default.default.existsSync(watchPath)) continue;
+      fs27__default.default.watchFile(watchPath, { interval: 3e3 }, () => {
         this.throttledBroadcast(watchPath === globalDbPath ? "global" : "workspace");
       });
     }
@@ -33567,7 +34250,7 @@ ${prompt}`;
       const sessionId = req.params.id;
       this.store.deleteSession(sessionId);
       this.store.deleteRuntimeSession(sessionId);
-      const globalDbPath = path27__default.default.join(os6__default.default.homedir(), GLOBAL_CONFIG_DIR, GLOBAL_RUNTIME_DB_FILE);
+      const globalDbPath = path28__default.default.join(os6__default.default.homedir(), GLOBAL_CONFIG_DIR, GLOBAL_RUNTIME_DB_FILE);
       const globalStore = new MemoryStore(globalDbPath);
       try {
         globalStore.deleteRuntimeSession(sessionId);
@@ -33660,7 +34343,7 @@ ${prompt}`;
     });
     this.app.delete("/api/sessions", auth2, (req, res) => {
       const body = req.body;
-      const globalDbPath = path27__default.default.join(os6__default.default.homedir(), GLOBAL_CONFIG_DIR, GLOBAL_RUNTIME_DB_FILE);
+      const globalDbPath = path28__default.default.join(os6__default.default.homedir(), GLOBAL_CONFIG_DIR, GLOBAL_RUNTIME_DB_FILE);
       if (body?.ids && Array.isArray(body.ids) && body.ids.length > 0) {
         const globalStore = new MemoryStore(globalDbPath);
         try {
@@ -33683,7 +34366,7 @@ ${prompt}`;
     });
     this.app.delete("/api/runtime", auth2, (_req, res) => {
       this.store.deleteAllRuntimeNodes();
-      const globalDbPath = path27__default.default.join(os6__default.default.homedir(), GLOBAL_CONFIG_DIR, GLOBAL_RUNTIME_DB_FILE);
+      const globalDbPath = path28__default.default.join(os6__default.default.homedir(), GLOBAL_CONFIG_DIR, GLOBAL_RUNTIME_DB_FILE);
       const globalStore = new MemoryStore(globalDbPath);
       try {
         globalStore.deleteAllRuntimeNodes();
@@ -33768,12 +34451,12 @@ ${prompt}`;
       if (body["tierLimits"]) this.config.tierLimits = { ...this.config.tierLimits, ...body["tierLimits"] };
       if (body["budget"]) this.config.budget = { ...this.config.budget, ...body["budget"] };
       try {
-        const configPath = path27__default.default.join(this.workspacePath, CASCADE_CONFIG_FILE);
-        const existing = fs26__default.default.existsSync(configPath) ? JSON.parse(fs26__default.default.readFileSync(configPath, "utf-8")) : {};
+        const configPath = path28__default.default.join(this.workspacePath, CASCADE_CONFIG_FILE);
+        const existing = fs27__default.default.existsSync(configPath) ? JSON.parse(fs27__default.default.readFileSync(configPath, "utf-8")) : {};
         const updated = { ...existing, tierLimits: this.config.tierLimits, budget: this.config.budget };
         const tmp = configPath + ".tmp";
-        fs26__default.default.writeFileSync(tmp, JSON.stringify(updated, null, 2), "utf-8");
-        fs26__default.default.renameSync(tmp, configPath);
+        fs27__default.default.writeFileSync(tmp, JSON.stringify(updated, null, 2), "utf-8");
+        fs27__default.default.renameSync(tmp, configPath);
         res.json({ ok: true });
       } catch (err) {
         res.status(500).json({ error: `Failed to save config: ${err instanceof Error ? err.message : String(err)}` });
@@ -33801,7 +34484,7 @@ ${prompt}`;
     this.app.get("/api/runtime", auth2, (req, res) => {
       const scope = req.query["scope"] ?? "workspace";
       if (scope === "global") {
-        const globalDbPath = path27__default.default.join(os6__default.default.homedir(), GLOBAL_CONFIG_DIR, GLOBAL_RUNTIME_DB_FILE);
+        const globalDbPath = path28__default.default.join(os6__default.default.homedir(), GLOBAL_CONFIG_DIR, GLOBAL_RUNTIME_DB_FILE);
         const globalStore = new MemoryStore(globalDbPath);
         try {
           res.json({
@@ -33838,6 +34521,7 @@ ${prompt}`;
         const cascade = new Cascade(this.config, this.workspacePath, this.store);
         this.activeSessions.set(sessionId, cascade);
         if (this.currentPageProvider) cascade.setCurrentPageProvider(this.currentPageProvider);
+        if (this.browserController) cascade.setBrowserController(this.browserController, this.browserActorRelease);
         cascade.on("stream:token", (e) => {
           this.socket.broadcastToRoom(`session:${sessionId}`, "stream:token", { sessionId, tierId: e.tierId, text: e.text, primary: e.primary });
         });
@@ -33861,13 +34545,16 @@ ${prompt}`;
           if (ev.requestId) this.clearPendingEscalation(ev.requestId);
           this.socket.broadcastToRoom(`session:${sessionId}`, "escalation:timeout", { sessionId, ...e });
         });
+        cascade.on("run:started", (e) => {
+          const id = e.taskId;
+          if (id) this.recordSessionTask(sessionId, id);
+        });
         try {
           const result = await cascade.run({
             prompt: runPrompt,
             identityId: body.identityId,
             approvalCallback: this.makeApprovalCallback(sessionId)
           });
-          this.recordSessionTask(sessionId, result.taskId);
           this.persistRunEnd(sessionId, title, prompt, result.output, "COMPLETED", result);
           this.captureWhy(sessionId, cascade, result);
           this.socket.broadcast("cost:update", {
@@ -34142,13 +34829,13 @@ ${prompt}`;
         res.status(500).json({ error: err instanceof Error ? err.message : String(err) });
       }
     });
-    const prodPath = path27__default.default.resolve(__dirname$1, "../web/dist");
-    const devPath = path27__default.default.resolve(__dirname$1, "../../web/dist");
-    const webDistPath = fs26__default.default.existsSync(prodPath) ? prodPath : devPath;
-    if (fs26__default.default.existsSync(webDistPath)) {
+    const prodPath = path28__default.default.resolve(__dirname$1, "../web/dist");
+    const devPath = path28__default.default.resolve(__dirname$1, "../../web/dist");
+    const webDistPath = fs27__default.default.existsSync(prodPath) ? prodPath : devPath;
+    if (fs27__default.default.existsSync(webDistPath)) {
       this.app.use(express__default.default.static(webDistPath));
       this.app.get("*", (_req, res) => {
-        res.sendFile(path27__default.default.join(webDistPath, "index.html"));
+        res.sendFile(path28__default.default.join(webDistPath, "index.html"));
       });
     } else {
       this.app.get("/", (_req, res) => {
@@ -34335,14 +35022,14 @@ function planRetrieval(ctx) {
 }
 var CLOUD_SESSION_FILE = "cloud-session.json";
 function globalDir(homeDir = os6__default.default.homedir()) {
-  return path27__default.default.join(homeDir, GLOBAL_CONFIG_DIR);
+  return path28__default.default.join(homeDir, GLOBAL_CONFIG_DIR);
 }
 function cloudSessionPath(dir = globalDir()) {
-  return path27__default.default.join(dir, CLOUD_SESSION_FILE);
+  return path28__default.default.join(dir, CLOUD_SESSION_FILE);
 }
 function loadCloudSession(dir = globalDir()) {
   try {
-    const raw = fs26__default.default.readFileSync(cloudSessionPath(dir), "utf-8");
+    const raw = fs27__default.default.readFileSync(cloudSessionPath(dir), "utf-8");
     const parsed = JSON.parse(raw);
     if (!parsed?.refreshToken || !parsed?.serverUrl) return null;
     return parsed;
@@ -34351,17 +35038,17 @@ function loadCloudSession(dir = globalDir()) {
   }
 }
 function saveCloudSession(session, dir = globalDir()) {
-  fs26__default.default.mkdirSync(dir, { recursive: true, mode: 448 });
+  fs27__default.default.mkdirSync(dir, { recursive: true, mode: 448 });
   const file = cloudSessionPath(dir);
-  fs26__default.default.writeFileSync(file, JSON.stringify(session, null, 2), { mode: 384 });
+  fs27__default.default.writeFileSync(file, JSON.stringify(session, null, 2), { mode: 384 });
   try {
-    fs26__default.default.chmodSync(file, 384);
+    fs27__default.default.chmodSync(file, 384);
   } catch {
   }
 }
 function clearCloudSession(dir = globalDir()) {
   try {
-    fs26__default.default.rmSync(cloudSessionPath(dir));
+    fs27__default.default.rmSync(cloudSessionPath(dir));
   } catch {
   }
 }
@@ -34533,16 +35220,16 @@ var CloudClient = class _CloudClient {
     return (await this.refresh()).accessToken;
   }
   /** Authenticated request that refreshes once on a 401 (e.g. server-side revoke). */
-  async authed(path29, init = {}) {
-    const call = (token) => fetch(this.url(path29), { ...init, headers: { ...init.headers ?? {}, Authorization: `Bearer ${token}` } });
+  async authed(path30, init = {}) {
+    const call = (token) => fetch(this.url(path30), { ...init, headers: { ...init.headers ?? {}, Authorization: `Bearer ${token}` } });
     let res = await call(await this.accessToken());
     if (res.status === 401) res = await call((await this.refresh()).accessToken);
     if (!res.ok) throw new Error(`Request failed (${res.status}).`);
     const text = await res.text();
     return text ? JSON.parse(text) : {};
   }
-  authedGet(path29) {
-    return this.authed(path29);
+  authedGet(path30) {
+    return this.authed(path30);
   }
   async fetchMe(token) {
     const res = await fetch(this.url("/api/me"), { headers: { Authorization: `Bearer ${token}` } });
@@ -34910,6 +35597,7 @@ function applySyncBundle(bundle, config, cleanup) {
 exports.AZURE_BASE_MODELS = AZURE_BASE_MODELS;
 exports.AZURE_BASE_URL_TEMPLATE = AZURE_BASE_URL_TEMPLATE;
 exports.AuditLogger = AuditLogger;
+exports.BrowserControlTool = BrowserControlTool;
 exports.CASCADE_AUDIT_FILE = CASCADE_AUDIT_FILE;
 exports.CASCADE_CONFIG_DIR = CASCADE_CONFIG_DIR;
 exports.CASCADE_CONFIG_FILE = CASCADE_CONFIG_FILE;
@@ -34923,6 +35611,7 @@ exports.CHARS_PER_TOKEN = CHARS_PER_TOKEN2;
 exports.COMPLEXITY_T2_COUNT = COMPLEXITY_T2_COUNT;
 exports.Cascade = Cascade;
 exports.CascadeCancelledError = CascadeCancelledError;
+exports.CascadeConfigSchema = CascadeConfigSchema;
 exports.CascadeIgnore = CascadeIgnore;
 exports.CascadeRouter = CascadeRouter;
 exports.CascadeToolError = CascadeToolError;