crosscheck-mcp 0.2.26 → 0.2.28

package/dist/node-stdio.cjs

@@ -958,8 +958,8 @@ __export(node_stdio_exports, {
 });
 module.exports = __toCommonJS(node_stdio_exports);
 init_cjs_shims();
-var import_node_fs19 = require("fs");
-var import_node_path18 = __toESM(require("path"), 1);
+var import_node_fs20 = require("fs");
+var import_node_path19 = __toESM(require("path"), 1);
 var import_node_url2 = require("url");
 var import_stdio = require("@modelcontextprotocol/sdk/server/stdio.js");
 
@@ -976,10 +976,10 @@ var StderrEmitter = class {
   }
 };
 var FileEmitter = class {
-  constructor(path15) {
-    this.path = path15;
+  constructor(path16) {
+    this.path = path16;
     try {
-      (0, import_node_fs.mkdirSync)((0, import_node_path.dirname)(path15), { recursive: true });
+      (0, import_node_fs.mkdirSync)((0, import_node_path.dirname)(path16), { recursive: true });
     } catch {
     }
   }
@@ -1012,13 +1012,13 @@ var NullEmitter = class {
 function buildDefaultEmitter(env) {
   const mode = (env["CROSSCHECK_EVENTS"] ?? "stderr").toLowerCase();
   if (mode === "off") return new NullEmitter();
-  const path15 = env["CROSSCHECK_EVENTS_PATH"];
+  const path16 = env["CROSSCHECK_EVENTS_PATH"];
   if (mode === "file") {
-    return path15 ? new FileEmitter(path15) : new NullEmitter();
+    return path16 ? new FileEmitter(path16) : new NullEmitter();
   }
   if (mode === "both") {
     const ems = [new StderrEmitter()];
-    if (path15) ems.push(new FileEmitter(path15));
+    if (path16) ems.push(new FileEmitter(path16));
     return new TeeEmitter(ems);
   }
   return new StderrEmitter();
@@ -1067,10 +1067,10 @@ function envelopeBytes(v) {
 // src/core/pricing.ts
 init_cjs_shims();
 var import_node_fs2 = require("fs");
-function loadPricing(path15) {
+function loadPricing(path16) {
   let raw;
   try {
-    raw = (0, import_node_fs2.readFileSync)(path15, "utf8");
+    raw = (0, import_node_fs2.readFileSync)(path16, "utf8");
   } catch {
     return {};
   }
@@ -1087,20 +1087,30 @@ function modelPricing(pricing, provider, model) {
   const block = pricing[provider];
   if (!block || typeof block !== "object" || Array.isArray(block)) return null;
   const table = block;
+  if (model.startsWith("_")) return null;
   let entry = table[model];
-  if (!entry || typeof entry !== "object" || Array.isArray(entry)) {
-    const best = Object.keys(table).filter((k) => model.startsWith(k)).sort((a, b) => b.length - a.length)[0];
-    entry = best !== void 0 ? table[best] : void 0;
+  let match = "exact";
+  if (!isRates(entry)) {
+    const best = Object.keys(table).filter((k) => !k.startsWith("_")).filter((k) => model.startsWith(k) && DATE_STAMP.test(model.slice(k.length))).sort((a, b) => b.length - a.length)[0];
+    if (best !== void 0) {
+      entry = table[best];
+      match = "stamp";
+    }
   }
-  if (!entry || typeof entry !== "object" || Array.isArray(entry)) return null;
+  if (!isRates(entry)) return null;
   const e = entry;
   return {
     prompt_per_1k: numberOrZero(e["prompt_per_1k"]),
     completion_per_1k: numberOrZero(e["completion_per_1k"]),
     cached_per_1k: numberOrZero(e["cached_per_1k"]),
-    ...e["estimated"] === true ? { estimated: true } : {}
+    ...e["estimated"] === true ? { estimated: true } : {},
+    match
   };
 }
+var DATE_STAMP = /^-\d{8}$/;
+function isRates(v) {
+  return Boolean(v) && typeof v === "object" && !Array.isArray(v);
+}
 function numberOrZero(v) {
   if (typeof v === "number" && Number.isFinite(v)) return v;
   if (typeof v === "string") {
@@ -1240,8 +1250,20 @@ var PROVIDER_CAPS = {
   gemini: {
     family: "gemini",
     system_role: "separate",
-    supports_temperature: true,
-    reasoning_prefixes: ["gemini-3.1-pro", "gemini-3.5-flash", "gemini-2.5-pro"]
+    // No sampling, on any Gemini model. Ignored since 3.6 Flash and rejected
+    // by upcoming models (Google, 2026-10). "model" means "omit for reasoning
+    // models", and every Gemini model is reasoning-class (below) — so this
+    // resolves to never, through the same rule the other providers use. The
+    // adapter also never sends it; this keeps the record honest for anything
+    // else that reads it.
+    supports_temperature: "model",
+    // EVERY Gemini model is reasoning-class. The old list named three
+    // families and missed gemini-3.8-flash — the DEFAULT — so the default
+    // model got the small non-reasoning budgets (768 tokens for an audit)
+    // while spending up to ~480 tokens of each call thinking. Google's docs
+    // say thinking cannot be switched off on current models, so a list of
+    // which ones think is a list that can only ever be incomplete.
+    reasoning_prefixes: ["gemini-"]
   },
   // Qwen's "Max" tier (qwen-v3.8, qwen-v3.7) is a standard instruct/chat
   // model, not a visible-reasoning model like QwQ — normal temperature and
@@ -1366,6 +1388,74 @@ function httpFailureToProviderError(provider, status, bodyText, retryAfterS, mod
   );
 }
 
+// src/providers/network-errors.ts
+init_cjs_shims();
+function codeOf(e) {
+  if (!e || typeof e !== "object") return null;
+  const c = e.code;
+  return typeof c === "string" && c.length > 0 ? c : null;
+}
+function rootCause(e, depth = 0) {
+  if (depth > 5 || !e || typeof e !== "object") return e;
+  const o = e;
+  if (Array.isArray(o.errors) && o.errors.length > 0) {
+    const coded = o.errors.find((x) => codeOf(x) !== null);
+    return rootCause(coded ?? o.errors[0], depth + 1);
+  }
+  if (o.cause !== void 0 && o.cause !== null) return rootCause(o.cause, depth + 1);
+  return e;
+}
+var BY_CODE = {
+  ENOTFOUND: { cause: "dns", detail: "the provider's hostname did not resolve \u2014 DNS, or a typo'd base URL", transient: false, kind: "network" },
+  EAI_AGAIN: { cause: "dns", detail: "DNS lookup failed temporarily \u2014 resolver or network is flapping", transient: true, kind: "network" },
+  ECONNREFUSED: { cause: "refused", detail: "the connection was refused \u2014 nothing is listening, or a proxy blocked it", transient: false, kind: "network" },
+  ECONNRESET: { cause: "reset", detail: "the peer closed the connection mid-request \u2014 flaky path, or an upstream error behind a proxy", transient: true, kind: "network" },
+  EPIPE: { cause: "reset", detail: "the connection closed while we were still writing", transient: true, kind: "network" },
+  ETIMEDOUT: { cause: "connect_timeout", detail: "the connection timed out before it was established", transient: true, kind: "timeout" },
+  EHOSTUNREACH: { cause: "unreachable", detail: "no route to the provider \u2014 VPN, or offline", transient: true, kind: "network" },
+  ENETUNREACH: { cause: "unreachable", detail: "the network is unreachable \u2014 offline, or a routing change", transient: true, kind: "network" },
+  ENETDOWN: { cause: "unreachable", detail: "the local network is down", transient: true, kind: "network" },
+  EPROTO: { cause: "tls", detail: "the TLS handshake failed \u2014 an intercepting proxy, or a protocol mismatch", transient: false, kind: "network" },
+  ERR_TLS_CERT_ALTNAME_INVALID: { cause: "tls", detail: "the certificate did not match the hostname \u2014 traffic is being intercepted", transient: false, kind: "network" },
+  CERT_HAS_EXPIRED: { cause: "tls", detail: "the server certificate has expired, or this machine's clock is wrong", transient: false, kind: "network" },
+  UNABLE_TO_VERIFY_LEAF_SIGNATURE: { cause: "tls", detail: "the certificate chain could not be verified \u2014 a corporate proxy's root is probably not trusted here", transient: false, kind: "network" },
+  UND_ERR_CONNECT_TIMEOUT: { cause: "connect_timeout", detail: "could not open a connection within the timeout \u2014 firewall, or the host is down", transient: true, kind: "timeout" },
+  UND_ERR_HEADERS_TIMEOUT: { cause: "read_timeout", detail: "connected, but the provider sent no response headers in time \u2014 it is overloaded or thinking too long", transient: true, kind: "timeout" },
+  UND_ERR_BODY_TIMEOUT: { cause: "read_timeout", detail: "the response body stalled mid-stream", transient: true, kind: "timeout" },
+  UND_ERR_SOCKET: { cause: "reset", detail: "the socket closed unexpectedly", transient: true, kind: "network" },
+  UND_ERR_ABORTED: { cause: "aborted", detail: "the request was cancelled", transient: false, kind: "network" },
+  ABORT_ERR: { cause: "aborted", detail: "the request was cancelled", transient: false, kind: "network" }
+};
+function diagnoseNetworkError(e) {
+  const root = rootCause(e);
+  const code = codeOf(root) ?? codeOf(e);
+  if (code && BY_CODE[code]) return { ...BY_CODE[code], code };
+  const name = root && typeof root === "object" ? root.name : void 0;
+  if (name === "AbortError" || name === "TimeoutError") {
+    return {
+      cause: name === "TimeoutError" ? "read_timeout" : "aborted",
+      code: code ?? String(name),
+      detail: name === "TimeoutError" ? "the request exceeded its timeout" : "the request was cancelled",
+      transient: name === "TimeoutError",
+      kind: name === "TimeoutError" ? "timeout" : "network"
+    };
+  }
+  return {
+    cause: "unknown",
+    code,
+    detail: code ? `the connection failed with ${code}` : "the connection failed and the underlying error carried no code",
+    transient: true,
+    kind: "network"
+  };
+}
+function looksLikeNetworkFailure(d) {
+  return d.code !== null || d.cause !== "unknown";
+}
+function networkErrorMessage(provider, d) {
+  const code = d.code ? ` [${d.code}]` : "";
+  return `${provider}: ${d.detail}${code}`;
+}
+
 // src/providers/retry.ts
 init_cjs_shims();
 var override = null;
@@ -1697,7 +1787,11 @@ async function sendAnthropic(args) {
       try {
         respLike = await doFetch(url, init);
       } catch (e) {
-        throw new ProviderError("network", `anthropic: fetch failed: ${e.message}`);
+        const d = diagnoseNetworkError(e);
+        if (!looksLikeNetworkFailure(d)) throw e;
+        throw new ProviderError(d.kind, networkErrorMessage("anthropic", d), {
+          transient: d.transient
+        });
       }
       const status = respLike.status;
       if (status >= 200 && status < 300) {
@@ -1771,6 +1865,11 @@ function jsonSchemaToGeminiSchema(schema) {
   }
   return out;
 }
+var GEMINI_THINKING_HEADROOM_TOKENS = 16384;
+function thinkingHeadroom() {
+  const raw = Number(process.env["CROSSCHECK_GEMINI_THINKING_HEADROOM_TOKENS"]);
+  return Number.isFinite(raw) && raw >= 0 ? Math.trunc(raw) : GEMINI_THINKING_HEADROOM_TOKENS;
+}
 function buildGeminiRequest(opts) {
   const contents = [];
   let systemText = null;
@@ -1789,8 +1888,9 @@ function buildGeminiRequest(opts) {
   const body = {
     contents,
     generationConfig: {
-      maxOutputTokens: opts.maxTokens,
-      temperature: opts.temperature
+      // Answer budget + thinking headroom. No temperature / topP / topK /
+      // thinkingBudget, on any model — see the header note.
+      maxOutputTokens: opts.maxTokens + thinkingHeadroom()
     }
   };
   if (systemText !== null && systemText !== "") {
@@ -1800,8 +1900,8 @@ function buildGeminiRequest(opts) {
     body.generationConfig.responseMimeType = "application/json";
     body.generationConfig.responseSchema = jsonSchemaToGeminiSchema(opts.jsonSchema);
   }
-  const url = `${GEMINI_API_URL_BASE}/${encodeURIComponent(opts.model)}:generateContent?key=${encodeURIComponent(opts.apiKey)}`;
-  return { url, headers: {}, body };
+  const url = `${GEMINI_API_URL_BASE}/${encodeURIComponent(opts.model)}:generateContent`;
+  return { url, headers: { "x-goog-api-key": opts.apiKey }, body };
 }
 function parseGeminiResponse(opts) {
   const r = opts.resp ?? {};
@@ -1831,16 +1931,19 @@ function parseGeminiResponse(opts) {
   }
   try {
     const first = cands[0];
-    const content = first["content"];
-    const parts = content["parts"];
+    const finishReason = typeof first["finishReason"] === "string" ? first["finishReason"] : void 0;
+    const content = first["content"] ?? {};
+    const parts = Array.isArray(content["parts"]) ? content["parts"] : [];
     let text = "";
     for (const p of parts) {
       if (p && typeof p === "object") {
-        const t = p["text"];
+        const part = p;
+        if (part["thought"] === true) continue;
+        const t = part["text"];
         if (typeof t === "string") text += t;
       }
     }
-    return { text, usage };
+    return { text, usage, ...finishReason ? { finishReason } : {} };
   } catch (e) {
     throw new ProviderError(
       "parse",
@@ -1869,7 +1972,8 @@ async function sendGemini(args) {
     apiKey: args.apiKey,
     messages: args.messages,
     maxTokens: args.maxTokens,
-    temperature: args.temperature,
+    // args.temperature is deliberately NOT forwarded: Gemini ignores it and
+    // upcoming models reject it. See the header note.
     ...args.jsonSchema ? { jsonSchema: args.jsonSchema } : {}
   });
   const doFetch = args.fetchImpl ?? globalThis.fetch;
@@ -1884,7 +1988,11 @@ async function sendGemini(args) {
     try {
       respLike = await doFetch(url, init);
     } catch (e) {
-      throw new ProviderError("network", `gemini: fetch failed: ${e.message}`);
+      const d = diagnoseNetworkError(e);
+      if (!looksLikeNetworkFailure(d)) throw e;
+      throw new ProviderError(d.kind, networkErrorMessage("gemini", d), {
+        transient: d.transient
+      });
     }
     const status = respLike.status;
     if (status >= 200 && status < 300) {
@@ -1894,11 +2002,18 @@ async function sendGemini(args) {
       } catch (e) {
         throw new ProviderError("parse", `gemini: response body not JSON: ${e.message}`);
       }
-      const { text, usage } = parseGeminiResponse({
+      const { text, usage, finishReason } = parseGeminiResponse({
         resp: parsed,
         model: args.model,
         purpose: args.purpose ?? "worker"
       });
+      if (text.trim() === "" && finishReason === "MAX_TOKENS") {
+        throw new ProviderError(
+          "parse",
+          `gemini: the answer was cut off before any visible text \u2014 thinking used the whole output budget (${usage.completion_tokens} tokens). Raise CROSSCHECK_GEMINI_THINKING_HEADROOM_TOKENS or the purpose's budget.`,
+          { transient: false }
+        );
+      }
       return { text, attempts: 1, usage: applyPricing2(usage, args.pricing) };
     }
     const bodyText = await respLike.text().catch(() => "");
@@ -2066,7 +2181,11 @@ async function sendOpenAICompatible(args) {
     try {
       respLike = await doFetch(url, init);
     } catch (e) {
-      throw new ProviderError("network", `${args.provider}: fetch failed: ${e.message}`);
+      const d = diagnoseNetworkError(e);
+      if (!looksLikeNetworkFailure(d)) throw e;
+      throw new ProviderError(d.kind, networkErrorMessage(args.provider, d), {
+        transient: d.transient
+      });
     }
     const status = respLike.status;
     if (status >= 200 && status < 300) {
@@ -2094,7 +2213,7 @@ async function sendOpenAICompatible(args) {
 // src/providers/registry.ts
 var DEFAULT_MODELS = {
   anthropic: "claude-opus-5-5",
-  openai: "gpt-5.6-sol",
+  openai: "gpt-6-sol",
   xai: "grok-4-latest",
   mistral: "mistral-large-latest",
   groq: "llama-3.3-70b-versatile",
@@ -2251,50 +2370,6 @@ init_cjs_shims();
 var import_server = require("@modelcontextprotocol/sdk/server/index.js");
 var import_types9 = require("@modelcontextprotocol/sdk/types.js");
 
-// src/bridge/index.ts
-init_cjs_shims();
-
-// src/bridge/proxy-tools.ts
-init_cjs_shims();
-function buildPythonProxies(bridge) {
-  const proxies = /* @__PURE__ */ new Map();
-  for (const name of bridge.toolNames) {
-    proxies.set(name, makeProxy(bridge, name));
-  }
-  return proxies;
-}
-function makeProxy(bridge, name) {
-  return {
-    name,
-    description: `(forwarded to Python crosscheck-agent) ${name}`,
-    // We don't carry the per-tool input schema across the bridge in
-    // route-all mode — the TS server is a transparent forwarder, so
-    // arg validation happens on the Python side. inputSchema is left
-    // permissive; the Python validator throws structured errors that
-    // tunnel back through `callTool()`.
-    inputSchema: {
-      type: "object",
-      additionalProperties: true,
-      description: `Forwarded to Python \u2014 see Python tool '${name}' for full schema.`
-    },
-    handler: async (args) => {
-      const r = await bridge.callTool(name, args);
-      if (!r.content.length) {
-        return {};
-      }
-      const first = r.content[0];
-      if (first.type === "text" && first.text) {
-        try {
-          return JSON.parse(first.text);
-        } catch {
-          return { text: first.text };
-        }
-      }
-      return { content: r.content };
-    }
-  };
-}
-
 // src/instructions.ts
 init_cjs_shims();
 var ROUTABLE_TOOLS = [
@@ -2358,13 +2433,13 @@ Examples:
 This convention is opt-in: a user message without the \`xc\`/\`XC\` prefix should NOT be auto-routed here. Pick tools normally based on the conversation.
 
 Reasoning upgrade (Fable 5):
-- The reasoning tools (plan, solve, debate, orchestrate, audit, triangulate) can bump their lead reasoning seat to Fable 5 \u2014 Anthropic's newest thinking model \u2014 instead of the default Opus 4.8. Only that one seat is upgraded; other panel seats stay on their normal models, so premium tokens are not wasted.
+- The reasoning tools (plan, solve, debate, orchestrate, audit, triangulate) can bump their lead reasoning seat to Fable 5 \u2014 Anthropic's newest thinking model \u2014 instead of the default Opus 5.5. Only that one seat is upgraded; other panel seats stay on their normal models, so premium tokens are not wasted.
 - When a tool result includes a "suggested_upgrade" block, the engine judged the task reasoning-heavy. Surface it: ask the user something like "This looks reasoning-heavy \u2014 bump the lead seat to Fable 5 (higher quality, higher cost)?" If they say yes, re-run the SAME tool with reasoning:"max" added. Do NOT upgrade silently.
 - If the user explicitly asks for the best/deepest reasoning up front, pass reasoning:"max" directly. A result with reasoning_upgrade.applied = true confirms Fable 5 was used.
 
 Super mode (confer / debate / plan / triangulate / list_providers only \u2014 internal team trial, do not mention this outside the team or write it into any docs/help text):
 - When the token immediately after the tool name is \`super\` (e.g. \`xc confer super what's the best caching strategy?\`), pass \`super: true\` in that tool's args and treat everything after \`super\` as the normal primary-argument text (same slot as usual \u2014 \`question\`/\`topic\`/\`goal\`). Example: \`xc confer super what's the best caching strategy?\` \u2192 \`mcp__crosscheck__confer({ question: "what's the best caching strategy?", super: true })\`.
-- This swaps the panel to a fixed top-tier lineup (one flagship model per provider, restricted to providers the user actually has keys for) and triples the completion-token budget. For debate/plan/triangulate it also forces the Fable 5 + GPT-5.6 co-reasoner synthesis path automatically \u2014 no need to also pass reasoning:"max".
+- This swaps the panel to a fixed top-tier lineup (one flagship model per provider, restricted to providers the user actually has keys for) and triples the completion-token budget. For debate/plan/triangulate it also forces the Fable 5 + OpenAI co-reasoner synthesis path automatically \u2014 no need to also pass reasoning:"max".
 - A result with a "super_mode" block confirms it ran; show the panel it used.
 - \`xc list_providers super\` (no text after \`super\` \u2014 list_providers takes no other args) \u2192 \`mcp__crosscheck__list_providers({ super: true })\`. Shows the top-tier lineup and which of those models are actually available, instead of the normal default-model listing.
 
@@ -2381,7 +2456,7 @@ var import_zod = require("zod");
 // src/server-meta.ts
 init_cjs_shims();
 var SERVER_NAME = "crosscheck-agent";
-var SERVER_VERSION = true ? "0.2.26" : "0.0.0-dev";
+var SERVER_VERSION = true ? "0.2.28" : "0.0.0-dev";
 
 // src/tools/audit.ts
 init_cjs_shims();
@@ -2448,27 +2523,27 @@ function extractJson(text) {
 
 // src/core/json-schema.ts
 init_cjs_shims();
-function validateSchema(value, schema, path15 = "") {
+function validateSchema(value, schema, path16 = "") {
   const errs = [];
   if ("anyOf" in schema) {
     const subs = schema["anyOf"].map(
-      (s) => validateSchema(value, s, path15)
+      (s) => validateSchema(value, s, path16)
     );
     if (!subs.some((e) => e.length === 0)) {
-      errs.push(`${path15 || "<root>"}: did not match anyOf`);
+      errs.push(`${path16 || "<root>"}: did not match anyOf`);
     }
     return errs;
   }
   if ("oneOf" in schema) {
-    const passed = schema["oneOf"].filter((s) => validateSchema(value, s, path15).length === 0).length;
+    const passed = schema["oneOf"].filter((s) => validateSchema(value, s, path16).length === 0).length;
     if (passed !== 1) {
-      errs.push(`${path15 || "<root>"}: matched ${passed} of oneOf, expected 1`);
+      errs.push(`${path16 || "<root>"}: matched ${passed} of oneOf, expected 1`);
     }
     return errs;
   }
   if ("const" in schema && !deepEqual(value, schema["const"])) {
     errs.push(
-      `${path15 || "<root>"}: expected const ${pyRepr(schema["const"])}, got ${pyRepr(value)}`
+      `${path16 || "<root>"}: expected const ${pyRepr(schema["const"])}, got ${pyRepr(value)}`
     );
     return errs;
   }
@@ -2478,7 +2553,7 @@ function validateSchema(value, schema, path15 = "") {
     const ok = types.some((tt) => matchesType(value, String(tt)));
     if (!ok) {
       errs.push(
-        `${path15 || "<root>"}: expected type ${pyReprType(t)}, got ${pyTypeName(value)}`
+        `${path16 || "<root>"}: expected type ${pyReprType(t)}, got ${pyTypeName(value)}`
       );
       return errs;
     }
@@ -2487,29 +2562,29 @@ function validateSchema(value, schema, path15 = "") {
     if ("enum" in schema) {
       const en = schema["enum"];
       if (!en.some((x) => deepEqual(x, value))) {
-        errs.push(`${path15 || "<root>"}: value ${pyRepr(value)} not in enum`);
+        errs.push(`${path16 || "<root>"}: value ${pyRepr(value)} not in enum`);
       }
     }
     if ("minLength" in schema && value.length < schema["minLength"]) {
-      errs.push(`${path15 || "<root>"}: shorter than minLength ${schema["minLength"]}`);
+      errs.push(`${path16 || "<root>"}: shorter than minLength ${schema["minLength"]}`);
     }
   }
   if (typeof value === "number" && !Number.isNaN(value)) {
     if ("minimum" in schema && value < schema["minimum"]) {
-      errs.push(`${path15 || "<root>"}: ${value} < minimum ${schema["minimum"]}`);
+      errs.push(`${path16 || "<root>"}: ${value} < minimum ${schema["minimum"]}`);
     }
     if ("maximum" in schema && value > schema["maximum"]) {
-      errs.push(`${path15 || "<root>"}: ${value} > maximum ${schema["maximum"]}`);
+      errs.push(`${path16 || "<root>"}: ${value} > maximum ${schema["maximum"]}`);
     }
   }
   if (Array.isArray(value)) {
     if ("minItems" in schema && value.length < schema["minItems"]) {
-      errs.push(`${path15 || "<root>"}: fewer items than minItems ${schema["minItems"]}`);
+      errs.push(`${path16 || "<root>"}: fewer items than minItems ${schema["minItems"]}`);
     }
     const itemSchema = schema["items"];
     if (isObj(itemSchema)) {
       for (let i = 0; i < value.length; i++) {
-        errs.push(...validateSchema(value[i], itemSchema, `${path15}[${i}]`));
+        errs.push(...validateSchema(value[i], itemSchema, `${path16}[${i}]`));
       }
     }
   }
@@ -2518,19 +2593,19 @@ function validateSchema(value, schema, path15 = "") {
     const required = schema["required"] ?? [];
     for (const r of required) {
       if (!(r in value)) {
-        errs.push(`${path15 || "<root>"}: missing required key ${pyRepr(r)}`);
+        errs.push(`${path16 || "<root>"}: missing required key ${pyRepr(r)}`);
       }
     }
     if (schema["additionalProperties"] === false) {
       for (const k of Object.keys(value)) {
         if (!(k in props)) {
-          errs.push(`${path15 || "<root>"}: unknown key ${pyRepr(k)}`);
+          errs.push(`${path16 || "<root>"}: unknown key ${pyRepr(k)}`);
         }
       }
     }
     for (const [k, v] of Object.entries(value)) {
       const ps = props[k];
-      if (ps) errs.push(...validateSchema(v, ps, path15 ? `${path15}.${k}` : k));
+      if (ps) errs.push(...validateSchema(v, ps, path16 ? `${path16}.${k}` : k));
     }
   }
   return errs;
@@ -2612,6 +2687,34 @@ function pyReprType(t) {
 
 // src/core/usage.ts
 init_cjs_shims();
+
+// src/core/session.ts
+init_cjs_shims();
+var import_node_crypto2 = require("crypto");
+var processSessionId = null;
+var startedAt = null;
+function engineSessionId() {
+  if (processSessionId === null) {
+    processSessionId = (0, import_node_crypto2.randomUUID)();
+    startedAt = Date.now();
+  }
+  return processSessionId;
+}
+function resolveSessionId(callerSupplied) {
+  const trimmed = typeof callerSupplied === "string" ? callerSupplied.trim() : "";
+  return trimmed.length > 0 ? trimmed : engineSessionId();
+}
+function localSessionRecordingEnabled(env = globalThis.process?.env ?? {}) {
+  const v = (env["CROSSCHECK_RECORD_SESSIONS"] ?? "").trim().toLowerCase();
+  return !["0", "false", "off", "no"].includes(v);
+}
+function recordingSessionId(callerSupplied) {
+  if (localSessionRecordingEnabled()) return resolveSessionId(callerSupplied);
+  const trimmed = typeof callerSupplied === "string" ? callerSupplied.trim() : "";
+  return trimmed.length > 0 ? trimmed : null;
+}
+
+// src/core/usage.ts
 function emptyUsage(provider, model, purpose = "worker") {
   return {
     provider,
@@ -2716,11 +2819,11 @@ function withCommas(n) {
 function renderRunSummary(opts) {
   const endedAt = opts.endedAtS ?? Math.trunc(Date.now() / 1e3);
   let scope = "call";
-  let startedAt = null;
+  let startedAt2 = null;
   let rows = [];
   if (opts.sessionScope && opts.sessionScope.rows.length > 0) {
     scope = "session";
-    startedAt = opts.sessionScope.startedAt;
+    startedAt2 = opts.sessionScope.startedAt;
     rows = opts.sessionScope.rows.map((r) => ({ ...r }));
   } else {
     const byPurpose = /* @__PURE__ */ new Map();
@@ -2751,6 +2854,7 @@ function renderRunSummary(opts) {
       row.cpu_ms += a.cpu_ms ?? 0;
       if (a.cache_hit) row.cache_hits += 1;
       if (a.error) row.errors += 1;
+      if (a.usage?.estimated) row.estimated = true;
     }
     rows = Array.from(byPurpose.values());
   }
@@ -2763,16 +2867,18 @@ function renderRunSummary(opts) {
     wall_ms: rows.reduce((s, r) => s + r.wall_ms, 0),
     cpu_ms: rows.reduce((s, r) => s + r.cpu_ms, 0),
     cache_hits: rows.reduce((s, r) => s + r.cache_hits, 0),
-    errors: rows.reduce((s, r) => s + r.errors, 0)
+    errors: rows.reduce((s, r) => s + r.errors, 0),
+    ...rows.some((r) => r.estimated) ? { estimated: true } : {}
   };
   const titleLeft = scope === "session" ? `session: ${opts.sessionId ?? ""}` : `call: ${opts.toolName}`;
-  const header = `${titleLeft}   (${totals.calls} calls, ${withCommas(totals.total_tokens)} tokens, $${totals.cost_usd.toFixed(4)}, ${(totals.wall_ms / 1e3).toFixed(1)}s wall, ${(totals.cpu_ms / 1e3).toFixed(3)}s cpu)`;
+  const costText = totals.estimated ? `$${totals.cost_usd.toFixed(4)}+ (some calls unpriced)` : `$${totals.cost_usd.toFixed(4)}`;
+  const header = `${titleLeft}   (${totals.calls} calls, ${withCommas(totals.total_tokens)} tokens, ${costText}, ${(totals.wall_ms / 1e3).toFixed(1)}s wall, ${(totals.cpu_ms / 1e3).toFixed(3)}s cpu)`;
   const bodyLines = [];
   for (let i = 0; i < rows.length; i++) {
     const r = rows[i];
     const glyph = i === rows.length - 1 ? "`-" : "|-";
     bodyLines.push(
-      `${glyph} purpose: ${r.purpose}  (calls=${r.calls} tokens=${withCommas(r.total_tokens)} cost=$${r.cost_usd.toFixed(4)} wall=${(r.wall_ms / 1e3).toFixed(1)}s cpu=${(r.cpu_ms / 1e3).toFixed(3)}s)`
+      `${glyph} purpose: ${r.purpose}  (calls=${r.calls} tokens=${withCommas(r.total_tokens)} cost=$${r.cost_usd.toFixed(4)}${r.estimated ? "+" : ""} wall=${(r.wall_ms / 1e3).toFixed(1)}s cpu=${(r.cpu_ms / 1e3).toFixed(3)}s)`
     );
   }
   const callByModel = rollupSpendByModel(
@@ -2820,7 +2926,7 @@ function renderRunSummary(opts) {
     tool: opts.toolName,
     scope,
     currency: "USD",
-    started_at: startedAt,
+    started_at: startedAt2,
     ended_at: endedAt,
     rows,
     totals,
@@ -2945,14 +3051,15 @@ async function attachUsageBlock(result, answers, opts) {
   delete result["_suppress_run_summary"];
 }
 async function appendUsageLog(storage, sessionId, toolName, answers, nowS) {
-  if (!sessionId || answers.length === 0) return;
+  const sid = recordingSessionId(sessionId);
+  if (!sid || answers.length === 0) return;
   const now = nowS ?? Math.trunc(Date.now() / 1e3);
   const rows = [];
   for (const a of answers) {
     const u = a.usage;
     if (!u || typeof u.provider !== "string" || u.provider === "") continue;
     rows.push({
-      session_id: sessionId,
+      session_id: sid,
       ts: now,
       tool: toolName,
       purpose: u.purpose ?? "worker",
@@ -2975,13 +3082,14 @@ async function appendUsageLog(storage, sessionId, toolName, answers, nowS) {
   }
 }
 async function recordSessionCall(storage, sessionId, answers, wallMs, cpuMs, nowS) {
-  if (!sessionId) return;
+  const sid = recordingSessionId(sessionId);
+  if (!sid) return;
   const now = nowS ?? Math.trunc(Date.now() / 1e3);
   try {
-    let existing = await storage.getSession(sessionId);
+    let existing = await storage.getSession(sid);
     if (!existing) {
       await storage.upsertSession({
-        session_id: sessionId,
+        session_id: sid,
         started_at: now,
         last_at: now,
         calls: 0,
@@ -2994,7 +3102,7 @@ async function recordSessionCall(storage, sessionId, answers, wallMs, cpuMs, now
         total_cost_usd: 0,
         total_cpu_ms: 0
       });
-      existing = await storage.getSession(sessionId);
+      existing = await storage.getSession(sid);
     }
     if (!existing) return;
     let promptDelta = 0;
@@ -3014,7 +3122,7 @@ async function recordSessionCall(storage, sessionId, answers, wallMs, cpuMs, now
       }
       if (a.cache_hit) cacheHitDelta += 1;
     }
-    await storage.accumulateSessionTotals(sessionId, {
+    await storage.accumulateSessionTotals(sid, {
       calls: answers.length,
       wall_ms: wallMs,
       cache_hits: cacheHitDelta,
@@ -3409,7 +3517,7 @@ function buildPersonaInjection(opts) {
 
 // src/core/canary.ts
 init_cjs_shims();
-var import_node_crypto2 = require("crypto");
+var import_node_crypto3 = require("crypto");
 
 // src/core/injection.ts
 init_cjs_shims();
@@ -3428,8 +3536,8 @@ var UNTRUSTED_SYSTEM_NOTE = "Some inputs in this conversation are wrapped in <un
 function mintCanary() {
   const t = process.hrtime.bigint().toString();
   const pid = String(process.pid);
-  const r = (0, import_node_crypto2.randomBytes)(16).toString("hex");
-  const hex = (0, import_node_crypto2.createHash)("sha256").update(`${t}-${pid}-${r}`).digest("hex").slice(0, 16).toUpperCase();
+  const r = (0, import_node_crypto3.randomBytes)(16).toString("hex");
+  const hex = (0, import_node_crypto3.createHash)("sha256").update(`${t}-${pid}-${r}`).digest("hex").slice(0, 16).toUpperCase();
   return `CC_CANARY_${hex}`;
 }
 function wrapUntrusted(content, canary) {
@@ -3619,7 +3727,7 @@ var import_node_path3 = __toESM(require("path"), 1);
 
 // src/core/redact.ts
 init_cjs_shims();
-var import_node_crypto3 = require("crypto");
+var import_node_crypto4 = require("crypto");
 function builtinRedactionRules() {
   return [
     { pattern: /[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}/g, label: "EMAIL", prefix_group: false },
@@ -3646,7 +3754,7 @@ function hmacSuffix(cfg2, label, value) {
   const sid = cfg2.session_id ?? "";
   const sidBytes = Buffer.from(sid, "utf8");
   const key = Buffer.concat([Buffer.from(secret), sidBytes]);
-  const digest = (0, import_node_crypto3.createHmac)("sha256", key).update(`${label}:${value}`, "utf8").digest("hex");
+  const digest = (0, import_node_crypto4.createHmac)("sha256", key).update(`${label}:${value}`, "utf8").digest("hex");
   return digest.slice(0, 8);
 }
 function redactText(s, cfg2) {
@@ -3984,13 +4092,25 @@ var import_node_perf_hooks = require("perf_hooks");
 
 // src/core/co-reason.ts
 init_cjs_shims();
-var CO_REASON_MODEL = "gpt-5.6-sol";
+var CO_REASON_MODEL = "gpt-6-sol";
+var CO_REASON_ALTERNATE = "gpt-6-astra";
+var LABELS = {
+  "gpt-6-sol": "GPT-6 Sol",
+  "gpt-6-astra": "GPT-6 Astra",
+  "gpt-5.6-sol": "GPT-5.6 Sol"
+};
+function coReasonLabel(model) {
+  return LABELS[model] ?? model;
+}
+var CO_REASON_LABEL = coReasonLabel(CO_REASON_MODEL);
 var CO_REASON_PROVIDER = "openai";
-var CO_REASON_LABEL = "GPT-5.6";
-function pickCoReasoner(providers, upgradeRequested) {
+function pickCoReasoner(providers, upgradeRequested, openAiSeatModel) {
   if (!upgradeRequested) return null;
   const base = providers[CO_REASON_PROVIDER];
-  return base ? retargetProvider(base, CO_REASON_MODEL) : null;
+  if (!base) return null;
+  const seat = openAiSeatModel ?? base.model;
+  const model = seat === CO_REASON_MODEL ? CO_REASON_ALTERNATE : CO_REASON_MODEL;
+  return retargetProvider(base, model);
 }
 async function coReasonThenInject(opts) {
   const { provider, messages, maxTokens } = opts;
@@ -4221,7 +4341,7 @@ function buildSuggestedUpgrade(toolName, assessment) {
     model: UPGRADE_MODEL,
     label: UPGRADE_LABEL,
     reason: assessment.reason,
-    how: `re-run \`${toolName}\` with reasoning:"max" (or upgrade:true) to route the lead reasoning seat to ${UPGRADE_LABEL}, and \u2014 when an OpenAI key is configured \u2014 add a GPT-5.6 second-opinion pass that ${UPGRADE_LABEL} weighs before finalizing. Other panel seats stay on their normal models.`
+    how: `re-run \`${toolName}\` with reasoning:"max" (or upgrade:true) to route the lead reasoning seat to ${UPGRADE_LABEL}, and \u2014 when an OpenAI key is configured \u2014 add an OpenAI second-opinion pass that ${UPGRADE_LABEL} weighs before finalizing (the result names which model ran). Other panel seats stay on their normal models.`
   };
 }
 
@@ -4524,8 +4644,9 @@ ${rubricText}`;
   const upgradeRequested = isUpgradeRequested(args);
   const upgraded = upgradeRequested && opts.providers["anthropic"] !== void 0;
   const auditorForCall = upgraded ? retargetProvider(opts.providers["anthropic"], UPGRADE_MODEL) : auditor;
+  const coProvider = pickCoReasoner(opts.providers, upgradeRequested);
   const coReason = await coReasonThenInject({
-    provider: pickCoReasoner(opts.providers, upgradeRequested),
+    provider: coProvider,
     messages: msgs,
     maxTokens: 2048,
     purpose: "audit-coreason"
@@ -4609,7 +4730,7 @@ ${rubricText}`;
       model: UPGRADE_MODEL,
       label: UPGRADE_LABEL,
       seat: "auditor",
-      ...coReasoned ? { co_reasoner: { model: CO_REASON_MODEL, label: CO_REASON_LABEL } } : {}
+      ...coReasoned ? { co_reasoner: { model: coProvider.model, label: coReasonLabel(coProvider.model) } } : {}
     };
   } else if (upgradeRequested) {
     result["reasoning_upgrade"] = {
@@ -5348,8 +5469,12 @@ var SUPER_MODELS = {
   // Fable 5.1 verified present on the account; 5 as the fallback for accounts
   // that haven't been granted 5.1 yet.
   anthropic: ["claude-fable-5-1", UPGRADE_MODEL],
-  // Astra when it exists; gpt-5.6 until then. See the note above.
-  openai: ["gpt-6-astra", CO_REASON_MODEL],
+  // Astra is live (verified against the account's model list 2026-09-23).
+  // The fallback is named explicitly rather than reusing CO_REASON_MODEL:
+  // that constant means "OpenAI's top reasoning model" for the max-reasoning
+  // co-reasoner, which is a different question from "what should super fall
+  // back to". Sharing the symbol silently coupled two unrelated decisions.
+  openai: ["gpt-6-astra", "gpt-6-sol"],
   // Explicitly left as-is per product decision. Note grok-4-latest is not in
   // xAI's published model list, but it resolves in practice — real panel calls
   // on it succeeded as recently as 2026-08-30 — so it is an unlisted alias
@@ -5966,10 +6091,6 @@ If you need supporting evidence, you may emit ONE \`<tool_call>...</tool_call>\`
 }
 
 // src/tools/confer.ts
-var DEFERRED_OPTS = [
-  // empty — every confer opt runs natively except worker_tools, which
-  // is gated below (non-empty list → defer).
-];
 async function runConfer(args, opts) {
   const callStartedWall = import_node_perf_hooks2.performance.now();
   const callStartedCpu = process.cpuUsage();
@@ -5985,16 +6106,11 @@ async function runConfer(args, opts) {
       rejectedWorkerTools.push(t);
     }
   }
-  const workerToolsNeedsBridge = acceptedWorkerTools.length > 0 && !opts.innerCallers;
-  const needsBridge = DEFERRED_OPTS.some((k) => Boolean(args[k])) || workerToolsNeedsBridge;
-  if (needsBridge) {
-    if (opts.bridge && opts.bridge.toolNames.has("confer")) {
-      return await deferConfer(args, opts.bridge);
-    }
+  if (acceptedWorkerTools.length > 0 && !opts.innerCallers) {
     return errorEnvelope2(
       "CONFER_OPT_NOT_NATIVE",
       "worker_tools requested but innerCallers are not wired",
-      "Native confer covers untrusted_input + early_stop + extract_claims + inject_session_memory + auto_panel. worker_tools needs innerCallers wired by the host (or CROSSCHECK_BRIDGE_PYTHON=1 as a backstop)."
+      "Native confer covers untrusted_input + early_stop + extract_claims + inject_session_memory + auto_panel. worker_tools needs innerCallers wired by the host."
     );
   }
   const question = typeof args["question"] === "string" ? args["question"] : String(args["question"] ?? "");
@@ -6345,21 +6461,6 @@ function unknownProviderError(unknownNames, available) {
     available_now: Object.keys(available).sort()
   };
 }
-async function deferConfer(args, bridge) {
-  const r = await bridge.callTool("confer", args);
-  const text = r.content[0]?.text;
-  if (typeof text === "string") {
-    try {
-      return JSON.parse(text);
-    } catch {
-    }
-  }
-  return errorEnvelope2(
-    "CONFER_BRIDGE_BAD_ENVELOPE",
-    "bridge returned an unparseable envelope for confer",
-    "Check that the Python child is healthy."
-  );
-}
 function errorEnvelope2(code, message, hint) {
   return {
     tool: "confer",
@@ -6735,7 +6836,7 @@ function errorEnvelope3(code, message, hint) {
     transient: false
   };
 }
-async function runVerify(args, bridge, fetchConfig) {
+async function runVerify(args, fetchConfig) {
   const checks = args["checks"];
   if (!Array.isArray(checks) || checks.length === 0) {
     return {
@@ -6747,7 +6848,6 @@ async function runVerify(args, bridge, fetchConfig) {
       )
     };
   }
-  void bridge;
   const allowShell = Boolean(args["allow_shell"] ?? false);
   const wallStart = import_node_perf_hooks3.performance.now();
   const cpuStart = process.cpuUsage();
@@ -7049,7 +7149,6 @@ async function runBench(args, opts) {
       const innerOpts = {
         providers: opts.providers,
         allowlist: opts.allowlist ?? null,
-        ...opts.bridge ? { bridge: opts.bridge } : {},
         ...opts.moderator ? { moderator: opts.moderator } : {}
       };
       let inner;
@@ -7262,7 +7361,7 @@ function isObj4(v) {
 
 // src/tools/config-pin.ts
 init_cjs_shims();
-var import_node_crypto4 = require("crypto");
+var import_node_crypto5 = require("crypto");
 var import_node_fs7 = require("fs");
 var import_node_path7 = __toESM(require("path"), 1);
 var DEFAULT_PIN_PATH = ".crosscheck/config_pins.json";
@@ -7417,7 +7516,7 @@ function hashFile(abs) {
     return "";
   }
   const normalized = stripCrBeforeLf(raw);
-  return "sha256:" + (0, import_node_crypto4.createHash)("sha256").update(normalized).digest("hex");
+  return "sha256:" + (0, import_node_crypto5.createHash)("sha256").update(normalized).digest("hex");
 }
 function stripCrBeforeLf(buf) {
   const out = [];
@@ -7495,7 +7594,7 @@ function pyRepr2(v) {
 
 // src/tools/create.ts
 init_cjs_shims();
-var import_node_crypto7 = require("crypto");
+var import_node_crypto8 = require("crypto");
 var import_node_fs10 = require("fs");
 var import_node_path10 = __toESM(require("path"), 1);
 
@@ -7598,7 +7697,7 @@ function isDeadModelError(err) {
 
 // src/core/node-cache.ts
 init_cjs_shims();
-var import_node_crypto5 = require("crypto");
+var import_node_crypto6 = require("crypto");
 var import_node_fs8 = require("fs");
 var import_node_path8 = require("path");
 var NODE_CACHE_KEY_VERSION = "v2";
@@ -7625,7 +7724,7 @@ function canonicalizeNodeText(s) {
   return out;
 }
 function sha256Hex(s) {
-  return (0, import_node_crypto5.createHash)("sha256").update(s, "utf8").digest("hex");
+  return (0, import_node_crypto6.createHash)("sha256").update(s, "utf8").digest("hex");
 }
 function nodeCacheKey(node, upstreamOutputs, provider, model) {
   const canonUpstream = {};
@@ -7683,11 +7782,11 @@ function getNodeCache(cfg2, repoRoot, key, nowMs) {
     return null;
   }
 }
-function atomicWriteJson(path15, payload) {
-  (0, import_node_fs8.mkdirSync)((0, import_node_path8.dirname)(path15), { recursive: true });
-  const tmp = `${path15}.${process.pid}.${Date.now()}.tmp`;
+function atomicWriteJson(path16, payload) {
+  (0, import_node_fs8.mkdirSync)((0, import_node_path8.dirname)(path16), { recursive: true });
+  const tmp = `${path16}.${process.pid}.${Date.now()}.tmp`;
   (0, import_node_fs8.writeFileSync)(tmp, JSON.stringify(payload), "utf8");
-  (0, import_node_fs8.renameSync)(tmp, path15);
+  (0, import_node_fs8.renameSync)(tmp, path16);
 }
 function putNodeCache(cfg2, repoRoot, key, value) {
   if (!cfg2 || cfg2.enabled === false) return;
@@ -7745,7 +7844,6 @@ var EST_TOKENS = {
   med: [1500, 800],
   high: [2500, 1500]
 };
-var DEFERRED_OPTS2 = [];
 var REACTIVE_SIGNAL_RE = /<signals>\s*(\{[\s\S]*?\})\s*<\/signals>/g;
 function parseReactiveSignals(output) {
   if (typeof output !== "string" || !output.includes("<signals>")) return [];
@@ -7785,17 +7883,6 @@ async function runOrchestrate(args, opts) {
     );
     if (breakerEnv) return breakerEnv;
   }
-  const needsBridge = DEFERRED_OPTS2.some((k) => Boolean(args[k]));
-  if (needsBridge) {
-    if (opts.bridge && opts.bridge.toolNames.has("orchestrate")) {
-      return await deferOrchestrate(args, opts.bridge);
-    }
-    return errorEnvelope5(
-      "ORCHESTRATE_OPT_NOT_NATIVE",
-      "this orchestrate opt-in requires the Python bridge in v1",
-      "v1 native covers the plain DAG flow + cheap_mode. reactive (mid-flight DAG updates) still defers. Set CROSSCHECK_BRIDGE_PYTHON=1 to enable."
-    );
-  }
   const goal = typeof args["goal"] === "string" ? args["goal"] : null;
   const dagIn = isObj5(args["dag"]) ? args["dag"] : null;
   if (goal === null === (dagIn === null)) {
@@ -8338,8 +8425,9 @@ ${recombineSys}` : recombineSys },
       provider: synthProvider.name
     } }
   );
+  const coProvider = pickCoReasoner(opts.providers, upgradeRequested);
   const coReason = await coReasonThenInject({
-    provider: pickCoReasoner(opts.providers, upgradeRequested),
+    provider: coProvider,
     messages: recMsgs,
     maxTokens,
     purpose: "orchestrate-coreason"
@@ -8398,7 +8486,7 @@ ${recombineSys}` : recombineSys },
       model: UPGRADE_MODEL,
       label: UPGRADE_LABEL,
       seat: "recombine/synthesis",
-      ...coReasoned ? { co_reasoner: { model: CO_REASON_MODEL, label: CO_REASON_LABEL } } : {}
+      ...coReasoned ? { co_reasoner: { model: coProvider.model, label: coReasonLabel(coProvider.model) } } : {}
     };
   } else if (upgradeRequested) {
     result["reasoning_upgrade"] = {
@@ -8736,21 +8824,6 @@ function resolveProviders3(names, available, allowlist) {
   }
   return out;
 }
-async function deferOrchestrate(args, bridge) {
-  const r = await bridge.callTool("orchestrate", args);
-  const text = r.content[0]?.text;
-  if (typeof text === "string") {
-    try {
-      return JSON.parse(text);
-    } catch {
-    }
-  }
-  return errorEnvelope5(
-    "ORCHESTRATE_BRIDGE_BAD_ENVELOPE",
-    "bridge returned an unparseable envelope for orchestrate",
-    "Check that the Python child is healthy."
-  );
-}
 function errorEnvelope5(code, message, hint, kind = "client") {
   return {
     tool: "orchestrate",
@@ -8799,7 +8872,7 @@ function pyRound6(x) {
 
 // src/tools/fetch.ts
 init_cjs_shims();
-var import_node_crypto6 = require("crypto");
+var import_node_crypto7 = require("crypto");
 var import_node_fs9 = require("fs");
 var import_node_path9 = __toESM(require("path"), 1);
 var DEFAULT_CONFIG = {
@@ -9013,10 +9086,10 @@ function extractHost(url) {
   }
 }
 function sha256Hex2(s) {
-  return (0, import_node_crypto6.createHash)("sha256").update(s, "utf8").digest("hex");
+  return (0, import_node_crypto7.createHash)("sha256").update(s, "utf8").digest("hex");
 }
 function sha256HexBytes(bytes) {
-  return (0, import_node_crypto6.createHash)("sha256").update(bytes).digest("hex");
+  return (0, import_node_crypto7.createHash)("sha256").update(bytes).digest("hex");
 }
 function resolveEvidenceDir(configured, repoRoot) {
   if (import_node_path9.default.isAbsolute(configured)) return configured;
@@ -9115,7 +9188,6 @@ ${documentsPayload}`;
   }, {
     providers: opts.providers,
     allowlist: opts.allowlist ?? null,
-    ...opts.bridge ? { bridge: opts.bridge } : {},
     ctx
   });
   const scopeAnswer = Array.isArray(scope["answers"]) ? scope["answers"].filter((a) => typeof a["response"] === "string" && a["response"]).map((a) => `[${a["provider"]}]
@@ -9138,7 +9210,6 @@ ${scopeAnswer || "(none)"}
     providers: opts.providers,
     allowlist: opts.allowlist ?? null,
     moderator,
-    ...opts.bridge ? { bridge: opts.bridge } : {},
     ctx
   });
   let attempts = 1;
@@ -9173,7 +9244,6 @@ ${scopeAnswer || "(none)"}
     }, {
       providers: opts.providers,
       allowlist: opts.allowlist ?? null,
-      ...opts.bridge ? { bridge: opts.bridge } : {},
       ctx
     });
   }
@@ -9196,7 +9266,6 @@ ${scopeAnswer || "(none)"}
     }, {
       providers: opts.providers,
       allowlist: opts.allowlist ?? null,
-      ...opts.bridge ? { bridge: opts.bridge } : {},
       ctx
     });
     let overallF = toNumberOrNull(auditEnvelope["overall_score"]);
@@ -9221,7 +9290,6 @@ ${documentsPayload}`
           providers: opts.providers,
           allowlist: opts.allowlist ?? null,
           moderator,
-          ...opts.bridge ? { bridge: opts.bridge } : {},
           ctx
         }
       );
@@ -9241,7 +9309,6 @@ ${documentsPayload}`
         }, {
           providers: opts.providers,
           allowlist: opts.allowlist ?? null,
-          ...opts.bridge ? { bridge: opts.bridge } : {},
           ctx
         });
         overallF = toNumberOrNull(auditEnvelope["overall_score"]);
@@ -9378,7 +9445,7 @@ async function ingestDocuments(documents, sessionId, opts) {
         source: ref,
         type: "file",
         status: "ok",
-        hash: (0, import_node_crypto7.createHash)("sha256").update(text, "utf8").digest("hex"),
+        hash: (0, import_node_crypto8.createHash)("sha256").update(text, "utf8").digest("hex"),
         content: ""
       }, text));
     }
@@ -9415,7 +9482,7 @@ ${d.content}
 function makeSessionId(opts, supplied) {
   if (typeof supplied === "string" && supplied) return supplied;
   const stamp = opts.nowEpochSeconds ? opts.nowEpochSeconds() : Math.floor(Date.now() / 1e3);
-  const rnd = opts.randomBytes ? opts.randomBytes() : (0, import_node_crypto7.createHash)("sha256").update(`${stamp}-${process.pid}-${Math.random()}`).digest("hex");
+  const rnd = opts.randomBytes ? opts.randomBytes() : (0, import_node_crypto8.createHash)("sha256").update(`${stamp}-${process.pid}-${Math.random()}`).digest("hex");
   const suffix = rnd.slice(0, 8);
   return `${opts.toolName}-${stamp}-${suffix}`;
 }
@@ -9480,11 +9547,6 @@ function errorEnvelope6(toolName, code, message, hint) {
 // src/tools/coordinate.ts
 init_cjs_shims();
 var import_node_perf_hooks7 = require("perf_hooks");
-var DEFERRED_OPTS3 = [
-  // empty — every coordinate opt runs natively when its deps
-  // (storage / innerCallers) are wired. Without them the
-  // worker_tools gate still triggers a bridge defer.
-];
 var COORDINATE_DEFAULT_TEMP = 0.4;
 var ROLE_TURN_SCHEMA = {
   type: "object",
@@ -9539,23 +9601,18 @@ async function runCoordinate(args, opts) {
       rejectedWorkerTools.push(t);
     }
   }
-  const workerToolsNeedsBridge = acceptedWorkerTools.length > 0 && !opts.innerCallers;
-  const needsBridge = DEFERRED_OPTS3.some((k) => Boolean(args[k])) || workerToolsNeedsBridge;
-  if (needsBridge) {
+  if (acceptedWorkerTools.length > 0 && !opts.innerCallers) {
     if (superRequested) {
       return errorEnvelope7(
         "COORDINATE_SUPER_NOT_NATIVE",
-        "super mode requested but worker_tools needs the Python bridge",
-        "worker_tools without innerCallers wired defers to the Python bridge, which doesn't support super mode. Drop worker_tools, or wire innerCallers, to use super."
+        "super mode requested with worker_tools, but innerCallers are not wired",
+        "worker_tools needs innerCallers wired by the host. Drop worker_tools, or wire innerCallers, to use super."
       );
     }
-    if (opts.bridge && opts.bridge.toolNames.has("coordinate")) {
-      return await deferCoordinate(args, opts.bridge);
-    }
     return errorEnvelope7(
       "COORDINATE_OPT_NOT_NATIVE",
       "worker_tools requested but innerCallers are not wired",
-      "Native coordinate covers the three-role flow + untrusted_input + inject_session_memory. worker_tools needs innerCallers wired by the host (or CROSSCHECK_BRIDGE_PYTHON=1 as a backstop)."
+      "Native coordinate covers the three-role flow + untrusted_input + inject_session_memory. worker_tools needs innerCallers wired by the host."
     );
   }
   const untrusted = Boolean(args["untrusted_input"]);
@@ -9747,8 +9804,9 @@ CRITIQUES:
 ${critiqueBlock}`
     }
   ];
+  const coProvider = pickCoReasoner(opts.providers, upgradeRequested);
   const coReason = await coReasonThenInject({
-    provider: pickCoReasoner(opts.providers, upgradeRequested),
+    provider: coProvider,
     messages: synthMessages,
     maxTokens,
     purpose: "coordinate-coreason"
@@ -9812,7 +9870,7 @@ ${critiqueBlock}`
       model: superRequested ? superPrimary("anthropic") ?? UPGRADE_MODEL : UPGRADE_MODEL,
       label: UPGRADE_LABEL,
       seat: "synthesizer",
-      ...coReasonAns ? { co_reasoner: { model: CO_REASON_MODEL, label: CO_REASON_LABEL } } : {}
+      ...coReasonAns ? { co_reasoner: { model: coProvider.model, label: coReasonLabel(coProvider.model) } } : {}
     };
   } else if (upgradeRequested) {
     result["reasoning_upgrade"] = {
@@ -9954,21 +10012,6 @@ function unknownProviderError3(unknownNames, available) {
     available_now: Object.keys(available).sort()
   };
 }
-async function deferCoordinate(args, bridge) {
-  const r = await bridge.callTool("coordinate", args);
-  const text = r.content[0]?.text;
-  if (typeof text === "string") {
-    try {
-      return JSON.parse(text);
-    } catch {
-    }
-  }
-  return errorEnvelope7(
-    "COORDINATE_BRIDGE_BAD_ENVELOPE",
-    "bridge returned an unparseable envelope for coordinate",
-    "Check that the Python child is healthy."
-  );
-}
 function errorEnvelope7(code, message, hint) {
   return {
     tool: "coordinate",
@@ -10301,10 +10344,6 @@ function buildModeratorTranscript(transcript) {
 
 // src/tools/debate.ts
 var import_node_perf_hooks9 = require("perf_hooks");
-var DEFERRED_OPTS4 = [
-  // empty — every debate opt runs natively when its deps
-  // (storage / innerCallers) are wired.
-];
 async function runDebate(args, opts) {
   const callStartedWall = import_node_perf_hooks9.performance.now();
   const callStartedCpu = process.cpuUsage();
@@ -10322,23 +10361,18 @@ async function runDebate(args, opts) {
       rejectedWorkerTools.push(t);
     }
   }
-  const workerToolsNeedsBridge = acceptedWorkerTools.length > 0 && !opts.innerCallers;
-  const needsBridge = DEFERRED_OPTS4.some((k) => Boolean(args[k])) || workerToolsNeedsBridge;
-  if (needsBridge) {
+  if (acceptedWorkerTools.length > 0 && !opts.innerCallers) {
     if (superRequested) {
       return errorEnvelope9(
         "DEBATE_SUPER_NOT_NATIVE",
-        "super mode requested but worker_tools needs the Python bridge",
-        "worker_tools without innerCallers wired defers to the Python bridge, which doesn't support super mode. Drop worker_tools, or wire innerCallers, to use super."
+        "super mode requested with worker_tools, but innerCallers are not wired",
+        "worker_tools needs innerCallers wired by the host. Drop worker_tools, or wire innerCallers, to use super."
       );
     }
-    if (opts.bridge && opts.bridge.toolNames.has("debate")) {
-      return await deferDebate(args, opts.bridge);
-    }
     return errorEnvelope9(
       "DEBATE_OPT_NOT_NATIVE",
       "worker_tools requested but innerCallers are not wired",
-      "Native debate covers N-round + plain/structured moderator synthesis + inject_session_memory + auto_panel + extract_claims + early_stop. worker_tools needs innerCallers wired by the host (or CROSSCHECK_BRIDGE_PYTHON=1 as a backstop)."
+      "Native debate covers N-round + plain/structured moderator synthesis + inject_session_memory + auto_panel + extract_claims + early_stop. worker_tools needs innerCallers wired by the host."
     );
   }
   const topic = typeof args["topic"] === "string" ? args["topic"] : String(args["topic"] ?? "");
@@ -10539,6 +10573,7 @@ ${prior.body}` });
   let synthesisErrors = [];
   let personaMeta = null;
   let coReasoned = false;
+  let coReasonerModel = null;
   if (moderator) {
     const synthProvider = superRequested && opts.providers["anthropic"] ? retargetForSuper(opts.providers["anthropic"]) : upgraded ? retargetProvider(opts.providers["anthropic"], UPGRADE_MODEL) : moderator;
     const condensed = buildModeratorTranscript(transcript);
@@ -10566,13 +10601,16 @@ TRANSCRIPT:
 ${condensed}`
       }
     ];
+    const openAiSeat = selected.find((p) => p.name === "openai")?.model;
+    const coProvider = pickCoReasoner(opts.providers, upgradeRequested, openAiSeat);
     const coReason = await coReasonThenInject({
-      provider: pickCoReasoner(opts.providers, upgradeRequested),
+      provider: coProvider,
       messages: synthMessages,
       maxTokens,
       purpose: "debate-coreason"
     });
     synthMessages = coReason.messages;
+    coReasonerModel = coProvider?.model ?? null;
     if (coReason.answer) extraAnswers.push(coReason.answer);
     coReasoned = coReason.answer !== null;
     if (structuredOpt) {
@@ -10631,7 +10669,7 @@ ${condensed}`
       model: superRequested ? superPrimary("anthropic") ?? UPGRADE_MODEL : UPGRADE_MODEL,
       label: UPGRADE_LABEL,
       seat: "moderator synthesis",
-      ...coReasoned ? { co_reasoner: { model: CO_REASON_MODEL, label: CO_REASON_LABEL } } : {}
+      ...coReasoned && coReasonerModel ? { co_reasoner: { model: coReasonerModel, label: coReasonLabel(coReasonerModel) } } : {}
     };
   } else if (upgradeRequested) {
     result["reasoning_upgrade"] = {
@@ -10771,21 +10809,6 @@ function unknownProviderError5(unknownNames, available) {
     available_now: Object.keys(available).sort()
   };
 }
-async function deferDebate(args, bridge) {
-  const r = await bridge.callTool("debate", args);
-  const text = r.content[0]?.text;
-  if (typeof text === "string") {
-    try {
-      return JSON.parse(text);
-    } catch {
-    }
-  }
-  return errorEnvelope9(
-    "DEBATE_BRIDGE_BAD_ENVELOPE",
-    "bridge returned an unparseable envelope for debate",
-    "Check that the Python child is healthy."
-  );
-}
 function errorEnvelope9(code, message, hint) {
   return {
     tool: "debate",
@@ -10806,9 +10829,6 @@ var DEFAULT_DELEGATION_LIMITS = {
 };
 async function runDelegate(args, opts) {
   if (!opts.storage) {
-    if (opts.bridge && opts.bridge.toolNames.has("delegate")) {
-      return await deferDelegate(args, opts.bridge);
-    }
     return errorEnvelope10(
       "DELEGATE_STORAGE_UNAVAILABLE",
       "delegate needs the local database (for quota tracking), which isn't available",
@@ -10880,7 +10900,6 @@ async function runDelegate(args, opts) {
   const innerOpts = {
     providers: opts.providers,
     allowlist: opts.allowlist ?? null,
-    ...opts.bridge ? { bridge: opts.bridge } : {},
     ...opts.moderator ? { moderator: opts.moderator } : {}
   };
   let result;
@@ -10919,21 +10938,6 @@ async function record(storage, sessionId, requester, toolCall, via, accepted, no
     created_at: nowEpochSeconds
   });
 }
-async function deferDelegate(args, bridge) {
-  const r = await bridge.callTool("delegate", args);
-  const text = r.content[0]?.text;
-  if (typeof text === "string") {
-    try {
-      return JSON.parse(text);
-    } catch {
-    }
-  }
-  return errorEnvelope10(
-    "DELEGATE_BRIDGE_BAD_ENVELOPE",
-    "bridge returned an unparseable envelope for delegate",
-    "Check that the Python child is healthy."
-  );
-}
 function errorEnvelope10(code, message, hint) {
   return {
     tool: "delegate",
@@ -10977,9 +10981,6 @@ async function runExplain(args, opts) {
     );
   }
   if (!opts.storage) {
-    if (opts.bridge && opts.bridge.toolNames.has("explain")) {
-      return await deferExplain(args, opts.bridge);
-    }
     return errorEnvelope11(
       "EXPLAIN_STORAGE_UNAVAILABLE",
       "explain needs the local transcript/stats database, which isn't available",
@@ -11261,21 +11262,6 @@ function pyRepr5(v) {
   }
   return String(v);
 }
-async function deferExplain(args, bridge) {
-  const r = await bridge.callTool("explain", args);
-  const text = r.content[0]?.text;
-  if (typeof text === "string") {
-    try {
-      return JSON.parse(text);
-    } catch {
-    }
-  }
-  return errorEnvelope11(
-    "EXPLAIN_BRIDGE_BAD_ENVELOPE",
-    "bridge returned an unparseable envelope for explain",
-    "Check that the Python child is healthy."
-  );
-}
 function errorEnvelope11(code, message, hint, kind = "client", extra = {}) {
   return {
     tool: "explain",
@@ -11833,9 +11819,6 @@ async function runRecall(args, opts) {
   if (k < 1) k = 1;
   if (k > 50) k = 50;
   if (!opts.storage) {
-    if (opts.bridge && opts.bridge.toolNames.has("recall")) {
-      return await deferRecall(args, opts.bridge);
-    }
     return errorEnvelope12(
       "RECALL_STORAGE_UNAVAILABLE",
       "recall needs the local database, which isn't available",
@@ -11888,21 +11871,6 @@ async function runRecall(args, opts) {
     applied_filters: applied
   };
 }
-async function deferRecall(args, bridge) {
-  const r = await bridge.callTool("recall", args);
-  const text = r.content[0]?.text;
-  if (typeof text === "string") {
-    try {
-      return JSON.parse(text);
-    } catch {
-    }
-  }
-  return errorEnvelope12(
-    "RECALL_BRIDGE_BAD_ENVELOPE",
-    "bridge returned an unparseable envelope for recall",
-    "Check that the Python child is healthy."
-  );
-}
 function errorEnvelope12(code, message, hint) {
   return {
     tool: "recall",
@@ -11926,9 +11894,6 @@ async function runRecommendPanel(args, opts) {
     );
   }
   if (!opts.storage) {
-    if (opts.bridge && opts.bridge.toolNames.has("recommend_panel")) {
-      return await deferRecommendPanel(args, opts.bridge);
-    }
     return errorEnvelope13(
       "RECOMMEND_PANEL_STORAGE_UNAVAILABLE",
       "recommend_panel needs the local stats database, which isn't available",
@@ -11991,21 +11956,6 @@ async function runRecommendPanel(args, opts) {
     meta: result.meta
   };
 }
-async function deferRecommendPanel(args, bridge) {
-  const r = await bridge.callTool("recommend_panel", args);
-  const text = r.content[0]?.text;
-  if (typeof text === "string") {
-    try {
-      return JSON.parse(text);
-    } catch {
-    }
-  }
-  return errorEnvelope13(
-    "RECOMMEND_PANEL_BRIDGE_BAD_ENVELOPE",
-    "bridge returned an unparseable envelope for recommend_panel",
-    "Check that the Python child is healthy."
-  );
-}
 function errorEnvelope13(code, message, hint) {
   return {
     tool: "recommend_panel",
@@ -12036,9 +11986,6 @@ init_cjs_shims();
 var import_node_fs12 = require("fs");
 async function runScoreboard(args, opts) {
   if (!opts.storage) {
-    if (opts.bridge && opts.bridge.toolNames.has("scoreboard")) {
-      return await deferScoreboard(args, opts.bridge);
-    }
     return errorEnvelope14(
       "SCOREBOARD_STORAGE_UNAVAILABLE",
       "scoreboard needs the local stats database, which isn't available",
@@ -12161,21 +12108,6 @@ function clampInt3(raw, min, max, fallback) {
   if (!Number.isFinite(n)) return fallback;
   return Math.min(max, Math.max(min, Math.trunc(n)));
 }
-async function deferScoreboard(args, bridge) {
-  const r = await bridge.callTool("scoreboard", args);
-  const text = r.content[0]?.text;
-  if (typeof text === "string") {
-    try {
-      return JSON.parse(text);
-    } catch {
-    }
-  }
-  return errorEnvelope14(
-    "SCOREBOARD_BRIDGE_BAD_ENVELOPE",
-    "bridge returned an unparseable envelope for scoreboard",
-    "Check that the Python child is healthy."
-  );
-}
 function errorEnvelope14(code, message, hint) {
   return {
     tool: "scoreboard",
@@ -12213,9 +12145,6 @@ async function runSessionMemory(args, opts) {
     );
   }
   if (!opts.storage) {
-    if (opts.bridge && opts.bridge.toolNames.has("session_memory")) {
-      return await deferSessionMemory(args, opts.bridge);
-    }
     return errorEnvelope15(
       "SESSION_MEMORY_STORAGE_UNAVAILABLE",
       "session_memory needs the local database, which isn't available",
@@ -12320,21 +12249,6 @@ function clampInt4(raw, min, max, fallback) {
   if (!Number.isFinite(n)) return fallback;
   return Math.min(max, Math.max(min, Math.trunc(n)));
 }
-async function deferSessionMemory(args, bridge) {
-  const r = await bridge.callTool("session_memory", args);
-  const text = r.content[0]?.text;
-  if (typeof text === "string") {
-    try {
-      return JSON.parse(text);
-    } catch {
-    }
-  }
-  return errorEnvelope15(
-    "SESSION_MEMORY_BRIDGE_BAD_ENVELOPE",
-    "bridge returned an unparseable envelope for session_memory",
-    "Check that the Python child is healthy."
-  );
-}
 function errorEnvelope15(code, message, hint) {
   return {
     tool: "session_memory",
@@ -12667,7 +12581,7 @@ Re-emit the FULL solution. No commentary.`
       model: UPGRADE_MODEL,
       label: UPGRADE_LABEL,
       seat: "solver",
-      ...coReasoned ? { co_reasoner: { model: CO_REASON_MODEL, label: CO_REASON_LABEL } } : {}
+      ...coReasoned ? { co_reasoner: { model: coProvider.model, label: coReasonLabel(coProvider.model) } } : {}
     };
   } else if (upgradeRequested) {
     result["reasoning_upgrade"] = {
@@ -12958,7 +12872,7 @@ var CHECK_INTERVAL_SECONDS = 3 * 24 * 60 * 60;
 var DEFAULT_PACKAGE = "crosscheck-cli";
 var FETCH_TIMEOUT_MS = 3e3;
 function engineVersion() {
-  return true ? "0.2.26" : "0.0.0-dev";
+  return true ? "0.2.28" : "0.0.0-dev";
 }
 function defaultUpdateCachePath() {
   const base = process.env["CROSSCHECK_DATA_DIR"] || import_node_path13.default.join(import_node_os2.default.homedir() || import_node_os2.default.tmpdir(), ".crosscheck");
@@ -13732,12 +13646,11 @@ function helpTool() {
     }
   });
 }
-function registerCoreTools(opts = {}) {
-  const o = opts && typeof opts === "object" && "toolNames" in opts ? { bridge: opts } : opts;
+function registerCoreTools(o = {}) {
   const tools = /* @__PURE__ */ new Map();
   const list = [
     pingTool(),
-    verifyTool(o.bridge, o.fetchConfig),
+    verifyTool(o.fetchConfig),
     pickTool(
       o.providers ?? {},
       o.providerAllowlist ?? null,
@@ -13749,7 +13662,6 @@ function registerCoreTools(opts = {}) {
     auditTool(
       o.providers ?? {},
       o.providerAllowlist ?? null,
-      o.bridge,
       o.transcriptsDir,
       o.pricing,
       o.storage,
@@ -13759,7 +13671,6 @@ function registerCoreTools(opts = {}) {
     conferTool(
       o.providers ?? {},
       o.providerAllowlist ?? null,
-      o.bridge,
       o.moderatorDefault ?? "anthropic",
       o.pricing,
       o.storage,
@@ -13772,7 +13683,6 @@ function registerCoreTools(opts = {}) {
     debateTool(
       o.providers ?? {},
       o.providerAllowlist ?? null,
-      o.bridge,
       buildInnerCallers(o),
       o.storage,
       o.pricing,
@@ -13784,7 +13694,6 @@ function registerCoreTools(opts = {}) {
     coordinateTool(
       o.providers ?? {},
       o.providerAllowlist ?? null,
-      o.bridge,
       buildInnerCallers(o),
       o.storage,
       o.circuitBreakers,
@@ -13795,7 +13704,6 @@ function registerCoreTools(opts = {}) {
     triangulateTool(
       o.providers ?? {},
       o.providerAllowlist ?? null,
-      o.bridge,
       o.storage,
       o.circuitBreakers,
       o.transcriptsDir,
@@ -13804,7 +13712,6 @@ function registerCoreTools(opts = {}) {
     planTool(
       o.providers ?? {},
       o.providerAllowlist ?? null,
-      o.bridge,
       o.storage,
       o.circuitBreakers,
       o.transcriptsDir,
@@ -13813,7 +13720,6 @@ function registerCoreTools(opts = {}) {
     critiqueTool(
       o.providers ?? {},
       o.providerAllowlist ?? null,
-      o.bridge,
       o.storage,
       o.circuitBreakers,
       o.transcriptsDir,
@@ -13822,7 +13728,6 @@ function registerCoreTools(opts = {}) {
     reviewTool(
       o.providers ?? {},
       o.providerAllowlist ?? null,
-      o.bridge,
       o.storage,
       o.circuitBreakers,
       o.transcriptsDir,
@@ -13830,25 +13735,23 @@ function registerCoreTools(opts = {}) {
     ),
     listProvidersTool(o.providers ?? {}, o.activeProviders ?? null, o.moderatorDefault ?? "anthropic"),
     modelsTool(o.providers ?? {}, o.activeProviders ?? null),
-    recallTool(o.storage, o.bridge),
-    sessionMemoryTool(o.storage, o.bridge),
-    scoreboardTool(o.storage, o.bridge, o.eventsPath),
-    explainTool(o.storage, o.bridge, o.transcriptsDir),
+    recallTool(o.storage),
+    sessionMemoryTool(o.storage),
+    scoreboardTool(o.storage, o.eventsPath),
+    explainTool(o.storage, o.transcriptsDir),
     delegateTool(
       o.providers ?? {},
       o.providerAllowlist ?? null,
       o.storage,
-      o.bridge,
       o.moderatorDefault ?? "anthropic"
     ),
     fetchTool(o.storage, o.fetchConfig, o.repoRoot),
-    recommendPanelTool(o.providers ?? {}, o.storage, o.bridge),
+    recommendPanelTool(o.providers ?? {}, o.storage),
     updateCrosscheckTool(o.repoRoot ?? null),
     benchTool(
       o.providers ?? {},
       o.providerAllowlist ?? null,
       o.storage,
-      o.bridge,
       o.moderatorDefault ?? "anthropic",
       o.benchGoldensDir,
       o.circuitBreakers,
@@ -13859,7 +13762,6 @@ function registerCoreTools(opts = {}) {
     solveTool(
       o.providers ?? {},
       o.providerAllowlist ?? null,
-      o.bridge,
       o.storage,
       o.circuitBreakers,
       o.transcriptsDir,
@@ -13868,7 +13770,6 @@ function registerCoreTools(opts = {}) {
     orchestrateTool(
       o.providers ?? {},
       o.providerAllowlist ?? null,
-      o.bridge,
       o.moderatorDefault ?? "anthropic",
       o.storage,
       o.pricing,
@@ -13915,7 +13816,6 @@ function createTool(o, toolName, cheapDefault) {
       providers: o.providers ?? {},
       allowlist: o.providerAllowlist ?? null,
       ...o.storage ? { storage: o.storage } : {},
-      ...o.bridge ? { bridge: o.bridge } : {},
       ...o.moderatorDefault ? { moderator: o.moderatorDefault } : {},
       ...o.fetchConfig ? { fetchConfig: o.fetchConfig } : {},
       ...o.repoRoot ? { repoRoot: o.repoRoot } : {},
@@ -13924,7 +13824,7 @@ function createTool(o, toolName, cheapDefault) {
     })
   };
 }
-function orchestrateTool(providers, allowlist, bridge, moderator, storage, pricing, breakers, transcriptsDir, repoRoot, nodeCache) {
+function orchestrateTool(providers, allowlist, moderator, storage, pricing, breakers, transcriptsDir, repoRoot, nodeCache) {
   return {
     name: "orchestrate",
     description: "Plan and execute a DAG of LLM subtasks. Either supply a `goal` (planner will draft the DAG) OR a hand-authored `dag`. Workers run topologically; recombine produces a single `final`. Covers the sequential flow, cheap_mode (per-node tier picking), and reactive (mid-flight DAG updates) \u2014 all native.",
@@ -13949,7 +13849,6 @@ function orchestrateTool(providers, allowlist, bridge, moderator, storage, prici
       providers,
       allowlist,
       moderator,
-      ...bridge ? { bridge } : {},
       ...storage ? { storage } : {},
       ...pricing ? { pricing } : {},
       ...breakers ? { breakers } : {},
@@ -13959,7 +13858,7 @@ function orchestrateTool(providers, allowlist, bridge, moderator, storage, prici
     })
   };
 }
-function solveTool(providers, allowlist, bridge, storage, breakers, transcriptsDir, repoRoot) {
+function solveTool(providers, allowlist, storage, breakers, transcriptsDir, repoRoot) {
   return {
     name: "solve",
     description: "Iterative LLM solver. Generates a proposal, verifies it against the supplied verifier, and retries with feedback up to max_attempts. Verifier kinds: regex_response and shell (run in a native sandbox with wall-clock + optional memory/CPU limits). With target_path, returns a unified-diff patch.",
@@ -13981,7 +13880,6 @@ function solveTool(providers, allowlist, bridge, storage, breakers, transcriptsD
     handler: (args) => runSolve(args, {
       providers,
       allowlist,
-      ...bridge ? { bridge } : {},
       ...storage ? { storage } : {},
       ...breakers ? { breakers } : {},
       ...transcriptsDir ? { transcriptsDir } : {},
@@ -14020,7 +13918,7 @@ function configPinTool(repoRoot, config2, rejectDriftEnv) {
     }
   };
 }
-function benchTool(providers, allowlist, storage, bridge, moderator, defaultGoldensDir, breakers, transcriptsDir, repoRoot) {
+function benchTool(providers, allowlist, storage, moderator, defaultGoldensDir, breakers, transcriptsDir, repoRoot) {
   return {
     name: "bench",
     description: "Run benchmark goldens against each provider's confer/review output. Each golden: {name, tool_call: confer|review, args, verifiers[]}. Returns per-provider pass/fail/error + a ranking sorted by score. Records ballots into provider_stats when storage is wired (used by triangulate's win-rate weights).",
@@ -14039,7 +13937,6 @@ function benchTool(providers, allowlist, storage, bridge, moderator, defaultGold
       allowlist,
       moderator,
       ...storage ? { storage } : {},
-      ...bridge ? { bridge } : {},
       ...defaultGoldensDir ? { defaultGoldensDir } : {},
       ...breakers ? { breakers } : {},
       ...transcriptsDir ? { transcriptsDir } : {},
@@ -14066,7 +13963,7 @@ function updateCrosscheckTool(repoRoot) {
     }
   };
 }
-function recommendPanelTool(providers, storage, bridge) {
+function recommendPanelTool(providers, storage) {
   return {
     name: "recommend_panel",
     description: "Recommend a minimal effective panel for a given purpose, based on historical usage_log + provider_stats. Cold-start falls back to the configured panel ordered by win-rate.",
@@ -14084,8 +13981,7 @@ function recommendPanelTool(providers, storage, bridge) {
     },
     handler: (args) => runRecommendPanel(args, {
       providers,
-      ...storage ? { storage } : {},
-      ...bridge ? { bridge } : {}
+      ...storage ? { storage } : {}
     })
   };
 }
@@ -14110,7 +14006,7 @@ function fetchTool(storage, fetchConfig, repoRoot) {
     })
   };
 }
-function delegateTool(providers, allowlist, storage, bridge, moderator) {
+function delegateTool(providers, allowlist, storage, moderator) {
   return {
     name: "delegate",
     description: "Run a delegable tool (confer | review) restricted to a single named provider, with explicit quota check. Records every attempt (accepted or refused) to the delegations table; quota in the response reflects counts AFTER the current call.",
@@ -14130,12 +14026,11 @@ function delegateTool(providers, allowlist, storage, bridge, moderator) {
       providers,
       allowlist,
       moderator,
-      ...storage ? { storage } : {},
-      ...bridge ? { bridge } : {}
+      ...storage ? { storage } : {}
     })
   };
 }
-function explainTool(storage, bridge, transcriptsDir) {
+function explainTool(storage, transcriptsDir) {
   return {
     name: "explain",
     description: "Replay a session as a navigable tree with cost/latency annotations. Reads usage_log + optionally walks the transcripts directory for per-tool summaries.",
@@ -14153,12 +14048,11 @@ function explainTool(storage, bridge, transcriptsDir) {
     },
     handler: (args) => runExplain(args, {
       ...storage ? { storage } : {},
-      ...bridge ? { bridge } : {},
       ...transcriptsDir ? { transcriptsDir } : {}
     })
   };
 }
-function scoreboardTool(storage, bridge, eventsPath) {
+function scoreboardTool(storage, eventsPath) {
   return {
     name: "scoreboard",
     description: "Aggregate provider ballot stats + delegation counts + table totals. Supports top_k (rank limit) and recent_limit (tail of events.jsonl when configured). Reads the engine's local stats database (auto-created at <data dir>/db.sqlite).",
@@ -14172,12 +14066,11 @@ function scoreboardTool(storage, bridge, eventsPath) {
     },
     handler: (args) => runScoreboard(args, {
       ...storage ? { storage } : {},
-      ...bridge ? { bridge } : {},
       ...eventsPath ? { eventsPath } : {}
     })
   };
 }
-function sessionMemoryTool(storage, bridge) {
+function sessionMemoryTool(storage) {
   return {
     name: "session_memory",
     description: "CRUD over the per-session working memory ledger. Actions: list, add, mark_stale, clear. Uses the engine's local database (auto-created at <data dir>/db.sqlite).",
@@ -14200,15 +14093,14 @@ function sessionMemoryTool(storage, bridge) {
       required: ["action", "session_id"]
     },
     handler: (args) => runSessionMemory(args, {
-      ...storage ? { storage } : {},
-      ...bridge ? { bridge } : {}
+      ...storage ? { storage } : {}
     })
   };
 }
-function recallTool(storage, bridge) {
+function recallTool(storage) {
   return {
     name: "recall",
-    description: "Full-text search across persisted transcripts via SQLite FTS5. Returns rows ordered by relevance with a windowed snippet. Requires a wired Storage adapter; falls back to the Python bridge when not available.",
+    description: "Full-text search across persisted transcripts via SQLite FTS5. Returns rows ordered by relevance with a windowed snippet. Requires a wired Storage adapter.",
     inputSchema: {
       type: "object",
       additionalProperties: true,
@@ -14222,8 +14114,7 @@ function recallTool(storage, bridge) {
       required: ["query"]
     },
     handler: (args) => runRecall(args, {
-      ...storage ? { storage } : {},
-      ...bridge ? { bridge } : {}
+      ...storage ? { storage } : {}
     })
   };
 }
@@ -14259,7 +14150,7 @@ function modelsTool(providers, activeProviders) {
     handler: async (args) => runModels(args, { providers, activeProviders })
   };
 }
-function reviewTool(providers, allowlist, bridge, storage, breakers, transcriptsDir, repoRoot) {
+function reviewTool(providers, allowlist, storage, breakers, transcriptsDir, repoRoot) {
   return {
     name: "review",
     description: "Have an LLM panel peer-review a code or proposal snippet. Returns the confer envelope (one answer per provider).",
@@ -14278,7 +14169,6 @@ function reviewTool(providers, allowlist, bridge, storage, breakers, transcripts
     handler: (args) => runReview(args, {
       providers,
       allowlist,
-      ...bridge ? { bridge } : {},
       ...storage ? { storage } : {},
       ...breakers ? { breakers } : {},
       ...transcriptsDir ? { transcriptsDir } : {},
@@ -14286,7 +14176,7 @@ function reviewTool(providers, allowlist, bridge, storage, breakers, transcripts
     })
   };
 }
-function critiqueTool(providers, allowlist, bridge, storage, breakers, transcriptsDir, repoRoot) {
+function critiqueTool(providers, allowlist, storage, breakers, transcriptsDir, repoRoot) {
   return {
     name: "critique",
     description: "Have each LLM panelist list the top weaknesses of a proposed answer or approach (severity-rated). Returns per-provider weakness lists + a merged list ordered by severity.",
@@ -14306,7 +14196,6 @@ function critiqueTool(providers, allowlist, bridge, storage, breakers, transcrip
     handler: (args) => runCritique(args, {
       providers,
       allowlist,
-      ...bridge ? { bridge } : {},
       ...storage ? { storage } : {},
       ...breakers ? { breakers } : {},
       ...transcriptsDir ? { transcriptsDir } : {},
@@ -14314,7 +14203,7 @@ function critiqueTool(providers, allowlist, bridge, storage, breakers, transcrip
     })
   };
 }
-function planTool(providers, allowlist, bridge, storage, breakers, transcriptsDir, repoRoot) {
+function planTool(providers, allowlist, storage, breakers, transcriptsDir, repoRoot) {
   return {
     name: "plan",
     description: 'Have an LLM panel debate a step-by-step plan for the stated goal under the given constraints. Returns the debate envelope with a moderator-synthesised plan. Defaults to `mode: "fast"` (2 rounds + early_stop) \u2014 set `mode: "thorough"` for 5 rounds without early_stop. Explicit `max_rounds` / `early_stop` / `early_stop_threshold` always override the mode preset. Use `structured: true` for schema-validated synthesis.',
@@ -14341,7 +14230,6 @@ function planTool(providers, allowlist, bridge, storage, breakers, transcriptsDi
     handler: (args) => runPlan(args, {
       providers,
       allowlist,
-      ...bridge ? { bridge } : {},
       ...storage ? { storage } : {},
       ...breakers ? { breakers } : {},
       ...transcriptsDir ? { transcriptsDir } : {},
@@ -14349,7 +14237,7 @@ function planTool(providers, allowlist, bridge, storage, breakers, transcriptsDi
     })
   };
 }
-function triangulateTool(providers, allowlist, bridge, storage, breakers, transcriptsDir, repoRoot) {
+function triangulateTool(providers, allowlist, storage, breakers, transcriptsDir, repoRoot) {
   return {
     name: "triangulate",
     description: "Run a coordinate flow and reshape the output as a consensus + minority report with per-provider weights. v1 uses 1.0 weights (matches a fresh provider_stats DB); future versions thread real win-rate weights when the DB layer ports.",
@@ -14370,7 +14258,6 @@ function triangulateTool(providers, allowlist, bridge, storage, breakers, transc
     handler: (args) => runTriangulate(args, {
       providers,
       allowlist,
-      ...bridge ? { bridge } : {},
       ...storage ? { storage } : {},
       ...breakers ? { breakers } : {},
       ...transcriptsDir ? { transcriptsDir } : {},
@@ -14378,7 +14265,7 @@ function triangulateTool(providers, allowlist, bridge, storage, breakers, transc
     })
   };
 }
-function coordinateTool(providers, allowlist, bridge, innerCallers, storage, breakers, transcriptsDir, repoRoot, workerToolsCfg) {
+function coordinateTool(providers, allowlist, innerCallers, storage, breakers, transcriptsDir, repoRoot, workerToolsCfg) {
   return {
     name: "coordinate",
     description: "Run a three-role coordination flow (proposer \u2192 critics \u2192 synthesizer) with structured output at every step. Native opts: untrusted_input (canary + neutralize), worker_tools (bounded ReAct on proposer + critic roles; synth never sees inner tools), inject_session_memory (storage-backed working-memory block prepended to the topic).",
@@ -14403,7 +14290,6 @@ function coordinateTool(providers, allowlist, bridge, innerCallers, storage, bre
     handler: (args) => runCoordinate(args, {
       providers,
       allowlist,
-      ...bridge ? { bridge } : {},
       innerCallers,
       ...storage ? { storage } : {},
       ...breakers ? { breakers } : {},
@@ -14413,7 +14299,7 @@ function coordinateTool(providers, allowlist, bridge, innerCallers, storage, bre
     })
   };
 }
-function debateTool(providers, allowlist, bridge, innerCallers, storage, pricing, breakers, transcriptsDir, repoRoot, workerToolsCfg) {
+function debateTool(providers, allowlist, innerCallers, storage, pricing, breakers, transcriptsDir, repoRoot, workerToolsCfg) {
   return {
     name: "debate",
     description: "Run a multi-round debate between LLM providers and synthesise the result via a moderator. Native opts: inject_session_memory, auto_panel, worker_tools, structured synthesis (schema-validated), extract_claims (final-round distillation), early_stop (post-round agreement check).",
@@ -14443,7 +14329,6 @@ function debateTool(providers, allowlist, bridge, innerCallers, storage, pricing
     handler: (args) => runDebate(args, {
       providers,
       allowlist,
-      ...bridge ? { bridge } : {},
       innerCallers,
       ...storage ? { storage } : {},
       ...pricing ? { pricing } : {},
@@ -14463,10 +14348,10 @@ function buildInnerCallers(o) {
       ...o.repoRoot ? { repoRoot: o.repoRoot } : {}
     });
   }
-  out.verify = (args) => runVerify(args, o.bridge, o.fetchConfig);
+  out.verify = (args) => runVerify(args, o.fetchConfig);
   return out;
 }
-function conferTool(providers, allowlist, bridge, moderator, pricing, storage, innerCallers, breakers, transcriptsDir, repoRoot, workerToolsCfg) {
+function conferTool(providers, allowlist, moderator, pricing, storage, innerCallers, breakers, transcriptsDir, repoRoot, workerToolsCfg) {
   return {
     name: "confer",
     description: "Ask a panel of LLM providers the same question; return one answer per provider. Native opts: untrusted_input (canary + neutralization), early_stop (cheap-tier agreement check after first 2 panelists when N>=3), extract_claims (cheap-tier extractor with per-provider support maps), inject_session_memory (storage-backed working-memory block prepended to the first user message), auto_panel (router-driven top-N panel pick), worker_tools (bounded ReAct loop per panelist when innerCallers are wired by the host).",
@@ -14493,7 +14378,6 @@ function conferTool(providers, allowlist, bridge, moderator, pricing, storage, i
     handler: (args) => runConfer(args, {
       providers,
       allowlist,
-      ...bridge ? { bridge } : {},
       moderator,
       ...pricing ? { pricing } : {},
       ...storage ? { storage } : {},
@@ -14505,7 +14389,7 @@ function conferTool(providers, allowlist, bridge, moderator, pricing, storage, i
     })
   };
 }
-function auditTool(providers, allowlist, bridge, transcriptsDir, pricing, storage, breakers, repoRoot) {
+function auditTool(providers, allowlist, transcriptsDir, pricing, storage, breakers, repoRoot) {
   return {
     name: "audit",
     description: "Score a piece of output against an audit rubric. Single-judge by default; coalesce-mode (multi-judge consensus) and panel-exhausted self-audit run natively. cheap_mode picks the cheapest 'med'-tier model as auditor when a pricing.json is wired. session_id-only inputs load the latest transcript automatically when a transcripts directory is wired.",
@@ -14531,7 +14415,6 @@ function auditTool(providers, allowlist, bridge, transcriptsDir, pricing, storag
     handler: (args) => runAudit(args, {
       providers,
       allowlist,
-      ...bridge ? { bridge } : {},
       ...transcriptsDir ? { transcriptsDir } : {},
       ...pricing ? { pricing } : {},
       ...storage ? { storage } : {},
@@ -14595,7 +14478,7 @@ function pickTool(providers, allowlist, storage, breakers, transcriptsDir, repoR
     })
   };
 }
-function verifyTool(bridge, fetchConfig) {
+function verifyTool(fetchConfig) {
   return {
     name: "verify",
     description: "Run a list of deterministic property checks against caller-supplied data. No LLM calls; everything is local. Returns per-check {passed, reason} plus all_passed / summary / timing fields. Supports the text kinds (contains, not_contains, regex_match, contains_any, contains_all, min_length), shell (sandboxed subprocess with timeout + Unix pgid isolation), and url_head (HEAD request gated by fetch.url_allowlist). All kinds run natively.",
@@ -14613,7 +14496,7 @@ function verifyTool(bridge, fetchConfig) {
       },
       required: ["checks"]
     },
-    handler: (args) => runVerify(args, bridge, fetchConfig)
+    handler: (args) => runVerify(args, fetchConfig)
   };
 }
 function pingTool() {
@@ -14693,18 +14576,18 @@ function attachUpdateNotice(result, toolName, opts) {
 
 // src/core/telemetry.ts
 init_cjs_shims();
-var import_node_crypto10 = __toESM(require("crypto"), 1);
+var import_node_crypto11 = __toESM(require("crypto"), 1);
 
 // src/core/segments.ts
 init_cjs_shims();
-var import_node_crypto9 = __toESM(require("crypto"), 1);
+var import_node_crypto10 = __toESM(require("crypto"), 1);
 var import_node_fs17 = require("fs");
 var import_node_path16 = __toESM(require("path"), 1);
 
 // src/core/git-context.ts
 init_cjs_shims();
 var import_node_child_process3 = require("child_process");
-var import_node_crypto8 = __toESM(require("crypto"), 1);
+var import_node_crypto9 = __toESM(require("crypto"), 1);
 var TRUNK_BRANCHES = /* @__PURE__ */ new Set([
   "main",
   "master",
@@ -14733,7 +14616,7 @@ function repoIdentity(cwd) {
   return top ? `path:${top}` : null;
 }
 function fingerprintOf(seatKey, parts) {
-  return import_node_crypto8.default.createHmac("sha256", seatKey).update(parts.join("\0")).digest("hex");
+  return import_node_crypto9.default.createHmac("sha256", seatKey).update(parts.join("\0")).digest("hex");
 }
 function readGitContext(seatKey, cwd) {
   try {
@@ -14786,7 +14669,7 @@ function canonicalSegmentBody(s) {
   ].join("|");
 }
 function signSegment(seatKey, s) {
-  return import_node_crypto9.default.createHmac("sha256", seatKey).update(canonicalSegmentBody(s)).digest("hex");
+  return import_node_crypto10.default.createHmac("sha256", seatKey).update(canonicalSegmentBody(s)).digest("hex");
 }
 var cfgResolved = false;
 var cfg = null;
@@ -14801,7 +14684,7 @@ function getConfig() {
   const seatKey = process.env["CROSSCHECK_SEAT_HMAC_KEY"];
   if (!base || !seatId || !orgId || !seatKey) return cfg = null;
   if (!UUID_RE.test(seatId) || !UUID_RE.test(orgId)) return cfg = null;
-  const sessionId = process.env["CLAUDE_SESSION_ID"] || process.env["CLAUDE_CODE_SESSION_ID"] || `engine-${import_node_crypto9.default.randomUUID()}`;
+  const sessionId = process.env["CLAUDE_SESSION_ID"] || process.env["CLAUDE_CODE_SESSION_ID"] || `engine-${import_node_crypto10.default.randomUUID()}`;
   cfg = {
     url: base.replace(/\/telemetry\/?$/, "/segments"),
     seatId,
@@ -14874,7 +14757,7 @@ function syncSegment(cwd) {
     const now = (/* @__PURE__ */ new Date()).toISOString();
     if (current) emit(c, current, now);
     current = {
-      segmentId: import_node_crypto9.default.randomUUID(),
+      segmentId: import_node_crypto10.default.randomUUID(),
       seq: nextSeq++,
       context,
       startedAt: now
@@ -14945,10 +14828,12 @@ function canonicalEventBody(e) {
     e.status,
     e.errorClass ?? ""
   ].join("|");
-  if (e.runId === void 0 && e.purpose === void 0 && e.fingerprint === void 0) {
-    return base;
-  }
-  return [base, e.runId ?? "", e.purpose ?? "", e.fingerprint ?? ""].join("|");
+  const hasV2 = e.runId !== void 0 || e.purpose !== void 0 || e.fingerprint !== void 0;
+  const hasV3 = e.sessionId !== void 0;
+  if (!hasV2 && !hasV3) return base;
+  const parts = [base, e.runId ?? "", e.purpose ?? "", e.fingerprint ?? ""];
+  if (hasV3) parts.push(e.sessionId ?? "");
+  return parts.join("|");
 }
 function normalizePurpose(v) {
   if (typeof v !== "string") return void 0;
@@ -14956,7 +14841,7 @@ function normalizePurpose(v) {
   return /^[a-z0-9][a-z0-9_-]*$/.test(slug) ? slug : void 0;
 }
 function signEvent(seatSigningKey, e) {
-  return import_node_crypto10.default.createHmac("sha256", seatSigningKey).update(canonicalEventBody(e)).digest("hex");
+  return import_node_crypto11.default.createHmac("sha256", seatSigningKey).update(canonicalEventBody(e)).digest("hex");
 }
 var configResolved = false;
 var config = null;
@@ -15066,9 +14951,9 @@ function scheduleFlush() {
   }, FLUSH_INTERVAL_MS);
   if (typeof flushTimer.unref === "function") flushTimer.unref();
 }
-function enqueue(cfg2, input, runId, fingerprint) {
+function enqueue(cfg2, input, runId, fingerprint, sessionId) {
   const base = {
-    eventId: import_node_crypto10.default.randomUUID(),
+    eventId: import_node_crypto11.default.randomUUID(),
     seatId: cfg2.seatId,
     orgId: cfg2.orgId,
     ts: (/* @__PURE__ */ new Date()).toISOString(),
@@ -15085,6 +14970,7 @@ function enqueue(cfg2, input, runId, fingerprint) {
     // omitting keeps the JSON honest about what we actually know.
     ...input.errorClass === void 0 ? {} : { errorClass: input.errorClass },
     runId,
+    sessionId,
     // Omit entirely (not "") when unknown, so the canonical body stays
     // consistent with what the server reconstructs from the JSON.
     ...input.purpose === void 0 ? {} : { purpose: input.purpose },
@@ -15099,15 +14985,23 @@ function enqueue(cfg2, input, runId, fingerprint) {
   if (queue.length >= FLUSH_BATCH_AT) void flush();
   else scheduleFlush();
 }
+function sessionIdFromEnvelope(out) {
+  if (!out || typeof out !== "object") return null;
+  const rs = out["run_summary"];
+  if (!rs || typeof rs !== "object") return null;
+  const v = rs["session_id"];
+  return typeof v === "string" && v.trim().length > 0 ? v : null;
+}
 function recordUsage(out, toolName) {
   try {
     const cfg2 = getConfig2();
     if (!cfg2) return;
     if (toolName === "update_crosscheck") return;
-    const runId = import_node_crypto10.default.randomUUID();
+    const runId = import_node_crypto11.default.randomUUID();
+    const sessionId = resolveSessionId(sessionIdFromEnvelope(out));
     const fingerprint = currentFingerprint();
     for (const ev of usageEventsFromEnvelope(out, toolName)) {
-      enqueue(cfg2, ev, runId, fingerprint);
+      enqueue(cfg2, ev, runId, fingerprint, sessionId);
     }
   } catch {
   }
@@ -15214,7 +15108,7 @@ function createServer(opts = {}) {
       throw new Error(`unknown tool: ${name}`);
     }
     const args = req.params.arguments ?? {};
-    const startedAt = (/* @__PURE__ */ new Date()).toISOString();
+    const startedAt2 = (/* @__PURE__ */ new Date()).toISOString();
     const startedHr = process.hrtime.bigint();
     const id = nextEventId();
     syncSegment(opts.repoRoot);
@@ -15228,7 +15122,7 @@ function createServer(opts = {}) {
         event: "tool_invoke",
         id,
         tool: name,
-        started_at: startedAt,
+        started_at: startedAt2,
         duration_ms: 0,
         status: "ok",
         args_keys: topLevelKeys(args),
@@ -15262,7 +15156,7 @@ function createServer(opts = {}) {
         event: "tool_invoke",
         id,
         tool: name,
-        started_at: startedAt,
+        started_at: startedAt2,
         duration_ms: durationMs,
         status: "ok",
         args_keys: topLevelKeys(args),
@@ -15284,7 +15178,7 @@ function createServer(opts = {}) {
         event: "tool_invoke",
         id,
         tool: name,
-        started_at: startedAt,
+        started_at: startedAt2,
         duration_ms: durationMs,
         status: "error",
         args_keys: topLevelKeys(args),
@@ -15315,7 +15209,6 @@ async function connectAndServe(transport, opts = {}) {
 }
 function buildToolRegistry(opts) {
   const registerOpts = {};
-  if (opts.bridge) registerOpts.bridge = opts.bridge;
   if (opts.providers) registerOpts.providers = opts.providers;
   if (opts.providerAllowlist !== void 0)
     registerOpts.providerAllowlist = opts.providerAllowlist;
@@ -15332,20 +15225,14 @@ function buildToolRegistry(opts) {
   if (opts.moderatorDefault) registerOpts.moderatorDefault = opts.moderatorDefault;
   if (opts.benchGoldensDir) registerOpts.benchGoldensDir = opts.benchGoldensDir;
   if (opts.eventsPath) registerOpts.eventsPath = opts.eventsPath;
-  const tools = registerCoreTools(registerOpts);
-  if (!opts.bridge) return tools;
-  const proxies = buildPythonProxies(opts.bridge);
-  for (const [name, proxy] of proxies) {
-    if (!tools.has(name)) tools.set(name, proxy);
-  }
-  return tools;
+  return registerCoreTools(registerOpts);
 }
 
 // src/core/config-file.ts
 init_cjs_shims();
 var import_node_fs18 = require("fs");
 var import_node_path17 = __toESM(require("path"), 1);
-var import_node_crypto11 = require("crypto");
+var import_node_crypto12 = require("crypto");
 function asObj(v) {
   return v && typeof v === "object" && !Array.isArray(v) ? v : void 0;
 }
@@ -15479,7 +15366,7 @@ function mapConfig(raw, sourcePath) {
     if (extras && extras.length > 0) cfg2.patterns_extra = extras;
     if (bool(red["hmac_tokens"]) === true) {
       cfg2.hmac_tokens = true;
-      cfg2.hmac_secret = (0, import_node_crypto11.randomBytes)(32);
+      cfg2.hmac_secret = (0, import_node_crypto12.randomBytes)(32);
     }
     if (Object.keys(cfg2).length > 0) setRedactionConfig(cfg2);
   }
@@ -15513,14 +15400,39 @@ function loadConfigFile(opts) {
   return mapConfig(obj, file);
 }
 
+// src/core/process-registry.ts
+init_cjs_shims();
+var import_node_fs19 = require("fs");
+var import_node_os3 = __toESM(require("os"), 1);
+var import_node_path18 = __toESM(require("path"), 1);
+function registryDir(env = process.env) {
+  const base = env["CROSSCHECK_DATA_DIR"] || import_node_path18.default.join(env["HOME"] ?? env["USERPROFILE"] ?? import_node_os3.default.homedir(), ".crosscheck");
+  return import_node_path18.default.join(base, "procs");
+}
+function registerProcess(rec, env = process.env) {
+  try {
+    const dir = registryDir(env);
+    (0, import_node_fs19.mkdirSync)(dir, { recursive: true, mode: 448 });
+    (0, import_node_fs19.writeFileSync)(import_node_path18.default.join(dir, `${rec.pid}.json`), JSON.stringify(rec), { mode: 384 });
+  } catch {
+  }
+}
+function unregisterProcess(pid = process.pid, env = process.env) {
+  try {
+    (0, import_node_fs19.rmSync)(import_node_path18.default.join(registryDir(env), `${pid}.json`), { force: true });
+  } catch {
+  }
+}
+
 // src/entrypoints/node-stdio.ts
+var HERE = typeof __dirname !== "undefined" ? __dirname : import_node_path19.default.dirname((0, import_node_url2.fileURLToPath)(importMetaUrl));
 var SHUTDOWN_TIMEOUT_MS = 2e3;
 async function main() {
   enforceLicenseOrExit();
-  const cfgDataDir = process.env["CROSSCHECK_DATA_DIR"] || import_node_path18.default.join(process.env["HOME"] ?? process.env["USERPROFILE"] ?? "", ".crosscheck");
+  const cfgDataDir = process.env["CROSSCHECK_DATA_DIR"] || import_node_path19.default.join(process.env["HOME"] ?? process.env["USERPROFILE"] ?? "", ".crosscheck");
   const configFile = loadConfigFile({
     startDir: process.cwd(),
-    repoRoot: findGitRoot(__dirname),
+    repoRoot: findGitRoot(HERE),
     dataDir: cfgDataDir
   });
   if (configFile) {
@@ -15534,15 +15446,17 @@ async function main() {
 `);
   }
   setEventEmitter(buildDefaultEmitter(process.env));
-  if (process.env["CROSSCHECK_BRIDGE_PYTHON"] === "1") {
-    process.stderr.write(
-      "crosscheck-agent: CROSSCHECK_BRIDGE_PYTHON is deprecated and ignored \u2014 the engine is native-only.\n"
-    );
-  }
   installShutdownHandlers();
+  registerProcess({
+    pid: process.pid,
+    version: SERVER_VERSION,
+    startedAt: Date.now(),
+    ppid: process.ppid,
+    sessionId: engineSessionId()
+  });
   const bundledPricing = (() => {
     try {
-      return import_node_path18.default.join(import_node_path18.default.dirname((0, import_node_url2.fileURLToPath)(importMetaUrl)), "pricing.json");
+      return import_node_path19.default.join(import_node_path19.default.dirname((0, import_node_url2.fileURLToPath)(importMetaUrl)), "pricing.json");
     } catch {
       return void 0;
     }
@@ -15551,7 +15465,7 @@ async function main() {
     process.env["CROSSCHECK_PRICING_PATH"],
     resolveRepoFile("config/pricing.json"),
     bundledPricing
-  ].find((p) => p && (0, import_node_fs19.existsSync)(p));
+  ].find((p) => p && (0, import_node_fs20.existsSync)(p));
   const pricing = pricingPath ? loadPricing(pricingPath) : {};
   const providers = buildProviders({ env: process.env, pricing });
   if (Object.keys(providers).length > 0) {
@@ -15569,10 +15483,10 @@ async function main() {
   }
   let storage;
   if (process.env["CROSSCHECK_DB_DISABLED"] !== "1") {
-    const dbPath = process.env["CROSSCHECK_DB_PATH"] ?? resolveRepoFile(".crosscheck/db.sqlite") ?? import_node_path18.default.join(cfgDataDir, "db.sqlite");
+    const dbPath = process.env["CROSSCHECK_DB_PATH"] ?? resolveRepoFile(".crosscheck/db.sqlite") ?? import_node_path19.default.join(cfgDataDir, "db.sqlite");
     if (dbPath) {
       try {
-        (0, import_node_fs19.mkdirSync)(import_node_path18.default.dirname(dbPath), { recursive: true });
+        (0, import_node_fs20.mkdirSync)(import_node_path19.default.dirname(dbPath), { recursive: true });
         const { openBetterSqliteStorage: openBetterSqliteStorage2 } = await Promise.resolve().then(() => (init_better_sqlite3(), better_sqlite3_exports));
         storage = openBetterSqliteStorage2({ path: dbPath });
         await storage.migrate();
@@ -15590,7 +15504,7 @@ async function main() {
     }
   }
   const transcriptsDir = configFile?.logTranscripts === false ? void 0 : process.env["CROSSCHECK_TRANSCRIPTS_DIR"] ?? configFile?.transcriptsDir ?? resolveRepoFile(".crosscheck/transcripts");
-  const repoRoot = process.env["CROSSCHECK_REPO_ROOT"] ?? findGitRoot(__dirname);
+  const repoRoot = process.env["CROSSCHECK_REPO_ROOT"] ?? findGitRoot(HERE);
   const transport = new import_stdio.StdioServerTransport();
   const serverOpts = { providers };
   if (storage) serverOpts.storage = storage;
@@ -15620,6 +15534,7 @@ function installShutdownHandlers() {
       new Promise((resolve2) => setTimeout(resolve2, SHUTDOWN_TIMEOUT_MS))
     ]).catch(() => {
     });
+    unregisterProcess();
     process.stderr.write(`crosscheck-agent: shutdown (${reason})
 `);
     process.exit(0);
@@ -15638,11 +15553,11 @@ function installShutdownHandlers() {
   });
 }
 function resolveRepoFile(rel) {
-  let dir = __dirname;
+  let dir = HERE;
   for (let i = 0; i < 8; i++) {
-    const candidate = import_node_path18.default.join(dir, rel);
-    if ((0, import_node_fs19.existsSync)(candidate)) return candidate;
-    const parent = import_node_path18.default.dirname(dir);
+    const candidate = import_node_path19.default.join(dir, rel);
+    if ((0, import_node_fs20.existsSync)(candidate)) return candidate;
+    const parent = import_node_path19.default.dirname(dir);
     if (parent === dir) break;
     dir = parent;
   }
@@ -15651,8 +15566,8 @@ function resolveRepoFile(rel) {
 function findGitRoot(startDir) {
   let dir = startDir;
   for (let i = 0; i < 12; i++) {
-    if ((0, import_node_fs19.existsSync)(import_node_path18.default.join(dir, ".git"))) return dir;
-    const parent = import_node_path18.default.dirname(dir);
+    if ((0, import_node_fs20.existsSync)(import_node_path19.default.join(dir, ".git"))) return dir;
+    const parent = import_node_path19.default.dirname(dir);
     if (parent === dir) break;
     dir = parent;
   }
@@ -15662,7 +15577,7 @@ var isMainEntry = (() => {
   try {
     const argv1 = process.argv[1];
     if (!argv1) return false;
-    return /(?:\/|\\)node-stdio\.(?:js|cjs|mjs)$/.test(argv1);
+    return /(?:\/|\\)node-stdio\.(?:js|cjs|mjs|ts)$/.test(argv1);
   } catch {
     return false;
   }