npm - nexus-agents - Versions diffs - 10.2.0 → 11.0.0 - Mend

nexus-agents 10.2.0 → 11.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (179) hide show

package/dist/chunk-5CUI42NO.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"sources":["../src/cli-command-catalog.ts","../src/cli-help-text.ts","../src/cli-types.ts","../src/cli-server-gateway.ts"],"sourcesContent":["/**\n * nexus-agents CLI command catalog (Issue #2135).\n *\n * Single source of truth for every top-level command: name, one-line\n * description, and the *audience* that cares about it. `renderHelp`\n * consumes this to produce tiered output:\n *\n * - Default `nexus-agents --help`: essential + advanced, grouped\n * - `nexus-agents --help --all`: everything, grouped\n *\n * Maintainer-audience commands (benchmarks, release tooling, deep\n * observability) are still fully functional — they just don't clutter\n * the default --help. `nexus-agents <cmd> --help` still works for all\n * of them.\n *\n * @module cli-command-catalog\n */\n\n/** Who the command is aimed at. Drives the default --help filter. */\nexport type CommandAudience = 'essential' | 'advanced' | 'maintainer' | 'internal';\n\n/** One entry per top-level command. */\nexport interface CommandCatalogEntry {\n readonly command: string;\n readonly description: string;\n readonly audience: CommandAudience;\n}\n\n/**\n * Hard cap on the `essential` audience band. Enforced by the `keeps the\n * essential tier small (<=12) so new users are not overwhelmed` test in\n * `cli-command-catalog.test.ts`.\n *\n * Rationale: the default `nexus-agents --help` lists every `essential` entry\n * up front. Past 12 it stops feeling curated — new users start scanning,\n * skipping, and missing the actually-onboarding-critical commands. If you\n * need a 13th, demote something else to `advanced` first.\n *\n * History (#2492): the cap has been tripped silently twice — first by `auth`\n * (deliberate, deserved promotion), second by `usage` (#2469, not reviewed\n * against the cap). The CI test catches it; this comment is the contract.\n */\nexport const ESSENTIAL_AUDIENCE_CAP = 12;\n\n/**\n * All top-level commands, in display order within their audience band.\n *\n * Audience rationale:\n * - **essential**: what a new user needs to install, configure, verify, and\n * run their first task. Capped at 12 entries (`ESSENTIAL_AUDIENCE_CAP`) —\n * see the cap's docstring for the policy. When proposing a 13th, demote\n * an existing entry to `advanced` first.\n * - **advanced**: useful day-to-day but not first-touch (session mgmt,\n * capability inspection, workflow scaffolding, auth token rotation).\n * Telemetry/operator-facing dashboards (e.g. `usage`,\n * `improvement-review`) belong here — operators reach for them after\n * they've been running tasks, not on first install.\n * - **maintainer**: benchmarks, release tooling, self-audits, deep\n * observability dashboards, dogfooding helpers.\n * - **internal**: dev/eval loops that aren't part of the product surface\n * (e2e-eval, routing-ab, memory-benchmark). Hidden from both default\n * `--help` AND `--help --all`. Still present for entrypoint extraction\n * (repo-index / entrypoints.yaml) because they're real CLI commands.\n */\nexport const COMMAND_CATALOG: readonly CommandCatalogEntry[] = [\n // ── Essential ────────────────────────────────────────────────────────────\n {\n command: '(default)',\n description: 'Start MCP server with stdio transport',\n audience: 'essential',\n },\n {\n command: 'hello',\n description: 'Show welcome message and quick start (no API keys needed)',\n audience: 'essential',\n },\n {\n command: 'setup',\n description: 'Configure CLI integration (MCP + .rules + data dirs)',\n audience: 'essential',\n },\n {\n command: 'verify',\n description: 'Check install health (sqlite, adapters, config)',\n audience: 'essential',\n },\n {\n command: 'doctor',\n description: 'Detailed health check; no model completions by default; --live probes models',\n audience: 'essential',\n },\n {\n command: 'config',\n description: 'Manage configuration (init, get, set, list, export, import)',\n audience: 'essential',\n },\n {\n command: 'orchestrate',\n description: 'Execute a task via CLI tools (standalone mode)',\n audience: 'essential',\n },\n {\n command: 'vote',\n // Default panel is 7 roles; `--quick` runs 3 (getVoterRoles in\n // mcp/tools/consensus-vote.ts). Prior drift: \"5-6 agents\" here, \"6 agents\"\n // in HELP_TEXT, \"6 agents by default\" in COMMAND_HELP — all wrong (#3209).\n description: 'Run consensus vote on a proposal (7 agents; --quick uses 3)',\n audience: 'essential',\n },\n {\n command: 'workflow',\n description: 'Manage and run workflow templates (list, run)',\n audience: 'essential',\n },\n {\n command: 'expert',\n description: 'Manage expert agents (list, create, execute)',\n audience: 'essential',\n },\n {\n command: 'research',\n description: 'Manage research registry (status, add, stats, refresh)',\n audience: 'essential',\n },\n\n // ── Advanced ─────────────────────────────────────────────────────────────\n {\n command: 'tour',\n description:\n 'Guided walkthrough of the four headline tools — no API keys, no quota (#2851). --non-interactive runs straight through.',\n audience: 'advanced',\n },\n {\n command: 'session',\n description: 'Manage session persistence (list, show, export, delete)',\n audience: 'advanced',\n },\n {\n command: 'auth',\n description:\n 'Manage authentication: init/show/rotate MCP tokens; status shows per-CLI auth state',\n audience: 'essential',\n },\n {\n command: 'login',\n description: '[deprecated alias] Soft alias of \"auth status\"; renamed in #2449',\n audience: 'maintainer',\n },\n {\n command: 'usage',\n description:\n 'Cost / usage / quality dashboard from per-call telemetry (#2469). --format=json for scripting.',\n audience: 'advanced',\n },\n {\n command: 'status',\n description: 'At-a-glance project health dashboard',\n audience: 'advanced',\n },\n {\n command: 'capabilities',\n description: 'Show model capabilities matrix',\n audience: 'advanced',\n },\n {\n command: 'mode',\n description: 'Inspect detected mode (server/orchestrator) + signals + reasoning (#3214)',\n audience: 'advanced',\n },\n {\n command: 'jobs',\n description:\n 'Async job-record maintenance (#6224): `prune` deletes terminal records past the 7-day retention window and marks abandoned pending records failed; --dry-run prints the counts only.',\n audience: 'advanced',\n },\n {\n command: 'registry',\n description: 'Inspect + refresh the dynamic model registry (doctor / refresh)',\n audience: 'advanced',\n },\n {\n command: 'migrate',\n description:\n 'Relocate homedir state (sessions, checkpoints, traces, runs, audit, pipeline, tasks) into <repo>/.nexus-agents/ for users adopting NEXUS_REPO_PREFERRED=1. Cross-repo state stays homedir. --dry-run for a no-op plan. Epic #2872.',\n audience: 'advanced',\n },\n {\n command: 'init',\n description:\n 'Initialize portable nexus-agents config in a repo. Flags: --portable (#2305/#2308/#2311), --install / --uninstall (#2311), --gitignore, --mcp-config, --opencode <path> (#2504), --force, --dry-run.',\n audience: 'advanced',\n },\n {\n command: 'review',\n description: 'Review a GitHub PR (dogfooding helper)',\n audience: 'advanced',\n },\n {\n command: 'scaffold',\n description: 'Generate project files from templates',\n audience: 'advanced',\n },\n {\n command: 'validate',\n description: 'Run unified validation (doctor + fitness + config)',\n audience: 'advanced',\n },\n {\n command: 'index',\n description: 'Generate and manage codebase index',\n audience: 'advanced',\n },\n {\n command: 'improvement-review',\n description:\n 'Observability-driven improvement loop (#2402). Surfaces threshold breaches; --file-issues opt-in.',\n audience: 'advanced',\n },\n {\n command: 'model-drift',\n description:\n 'Report models the registry does not know and registry models no source lists (#6625). --json; --file-issue opt-in.',\n audience: 'maintainer',\n },\n {\n command: 'auto-remediate',\n description:\n 'Run one auto-remediation cycle (#3540). OFF unless NEXUS_AUTO_REMEDIATE=audit|enforce; never auto-merges.',\n audience: 'maintainer',\n },\n {\n command: 'remediation-review',\n description:\n 'Review audit-mode selections: list · panel-judge --batch N [--quick] · sample --n 10 [--seed S] · mark --evaluator --sound|--unsound [--sample id] · sign-off --owner · readiness (human, panel and owner-sample judgments + soak-store alarm).',\n audience: 'maintainer',\n },\n\n // ── Maintainer (hidden by default) ───────────────────────────────────────\n {\n command: 'demo',\n description: 'API-free exploration mode (marketing/demo flow)',\n audience: 'maintainer',\n },\n {\n command: 'hooks',\n description: 'Claude CLI hook integration commands',\n audience: 'maintainer',\n },\n {\n command: 'routing-audit',\n description: 'Debug model routing decisions',\n audience: 'maintainer',\n },\n {\n command: 'fitness-audit',\n description: 'Run CLI orchestration fitness score audit',\n audience: 'maintainer',\n },\n {\n command: 'system-review',\n description: 'Automated system review (5-phase checklist)',\n audience: 'maintainer',\n },\n {\n command: 'sprint',\n description: 'Automated sprint planning from open issues',\n audience: 'maintainer',\n },\n {\n command: 'evaluate',\n description: 'Self-evaluation of codebase components',\n audience: 'maintainer',\n },\n {\n command: 'issue',\n description: 'Issue template validation and management',\n audience: 'maintainer',\n },\n {\n command: 'validation',\n description: 'Learning validation dashboard',\n audience: 'maintainer',\n },\n {\n command: 'learning-metrics',\n description: 'Aggregated learning metrics dashboard',\n audience: 'maintainer',\n },\n {\n command: 'visualize',\n description: 'Generate Mermaid diagrams and ASCII dashboards',\n audience: 'maintainer',\n },\n {\n command: 'health',\n description: 'Swarm health metrics dashboard',\n audience: 'maintainer',\n },\n {\n command: 'release-notes',\n description: 'Generate release notes from git commits',\n audience: 'maintainer',\n },\n {\n command: 'release-validate',\n description: 'Run expert swarm validation for releases',\n audience: 'maintainer',\n },\n {\n command: 'release-announce',\n description: 'Generate release announcements (blog, social)',\n audience: 'maintainer',\n },\n\n // ── Internal (hidden everywhere; here for extractor/index completeness) ──\n {\n command: 'server',\n // Synonym for the no-arg invocation — `nexus-agents` and\n // `nexus-agents server` both run `handleServerCommand`. Listed here for\n // extractor completeness; humans see `(default)` in --help.\n description: 'Start MCP server with stdio transport (explicit form)',\n audience: 'internal',\n },\n {\n command: 'e2e-eval',\n description: 'E2E evaluation scenario runner (dev loop)',\n audience: 'internal',\n },\n {\n command: 'memory-benchmark',\n description: 'Memory-system benchmark runner (dev loop)',\n audience: 'internal',\n },\n {\n command: 'memory-eval',\n description: 'Comparative memory evaluation benchmark (dev loop)',\n audience: 'internal',\n },\n {\n command: 'routing-ab',\n description: 'A/B comparison of routing strategies (dev loop)',\n audience: 'internal',\n },\n {\n command: 'scenario',\n description: 'Execute a named scenario from the testing framework',\n audience: 'internal',\n },\n {\n command: 'warm-up',\n description: 'Warm the model/adapter caches before a run',\n audience: 'internal',\n },\n];\n\n/**\n * Returns the catalog filtered for `--help` output.\n *\n * - `showAll: false` → essential + advanced (the default `--help` surface)\n * - `showAll: true` → essential + advanced + maintainer (`--help --all`)\n *\n * `internal` audience entries are **always excluded** from human-facing\n * output. They're still reachable via `COMMAND_CATALOG` for extractors that\n * need a complete inventory (repo-index, entrypoints.yaml).\n */\nexport function filterCatalog(showAll: boolean): readonly CommandCatalogEntry[] {\n const visible = COMMAND_CATALOG.filter((e) => e.audience !== 'internal');\n if (showAll) return visible;\n return visible.filter((e) => e.audience !== 'maintainer');\n}\n\n/**\n * Returns every real top-level command, including internal ones, but\n * excluding the `(default)` placeholder (no actual handler). Used by\n * entrypoint extractors and the repo-index generator — #2156.\n */\nexport function catalogForExtractors(): readonly CommandCatalogEntry[] {\n return COMMAND_CATALOG.filter((e) => e.command !== '(default)');\n}\n\n/**\n * Looks up the canonical one-line description for a command from the catalog\n * (the single source of truth — #3209). Returns `undefined` if the command is\n * not cataloged.\n *\n * Used by `cli-command-help.ts` so per-command help (`formatCommandHelp`,\n * `formatAllCommandsHelp`) does not keep a third independent copy of the\n * one-line summary. The richer per-command help (flags, examples) still lives\n * in `COMMAND_HELP`; only the one-liner is single-sourced here.\n */\nexport function getCommandDescription(command: string): string | undefined {\n return COMMAND_CATALOG.find((e) => e.command === command)?.description;\n}\n\n/** Groups entries by audience, preserving catalog order within each group. */\nexport function groupByAudience(\n entries: readonly CommandCatalogEntry[]\n): ReadonlyMap<CommandAudience, readonly CommandCatalogEntry[]> {\n const groups = new Map<CommandAudience, CommandCatalogEntry[]>();\n for (const entry of entries) {\n const existing = groups.get(entry.audience) ?? [];\n existing.push(entry);\n groups.set(entry.audience, existing);\n }\n return groups;\n}\n\nconst AUDIENCE_HEADINGS: Record<CommandAudience, string> = {\n essential: 'Essential — install, configure, run',\n advanced: 'Advanced — day-to-day extras',\n maintainer: 'Maintainer — benchmarks, releases, deep diagnostics',\n // Never rendered (filterCatalog strips internal before renderCommandsSection\n // iterates), but required by the Record<CommandAudience, string> contract.\n internal: 'Internal — dev/eval loops (hidden from --help)',\n};\n\n/**\n * Renders the COMMANDS section of `--help`, grouped and tiered.\n *\n * Output shape (indent-sensitive — consumed verbatim inside `COMMANDS:` block):\n *\n * ```\n * Essential — install, configure, run\n * hello Show welcome message...\n * setup Configure CLI integration...\n *\n * Advanced — day-to-day extras\n * ...\n * ```\n *\n * Trailing hint line (\"Run with --all…\") is appended only when `showAll=false`.\n */\nexport function renderCommandsSection(showAll: boolean): string {\n const filtered = filterCatalog(showAll);\n const groups = groupByAudience(filtered);\n const lines: string[] = [];\n const order: CommandAudience[] = showAll\n ? ['essential', 'advanced', 'maintainer']\n : ['essential', 'advanced'];\n for (const audience of order) {\n const entries = groups.get(audience);\n if (entries === undefined || entries.length === 0) continue;\n lines.push(` ${AUDIENCE_HEADINGS[audience]}`);\n for (const entry of entries) {\n lines.push(` ${entry.command.padEnd(16)} ${entry.description}`);\n }\n lines.push('');\n }\n if (!showAll) {\n lines.push(' Run with --all to show maintainer commands (benchmarks, release tooling).');\n }\n return lines.join('\\n').replace(/\\n+$/, '');\n}\n","/**\n * nexus-agents CLI Help Text\n *\n * Help documentation for the CLI commands and options.\n * Extracted from cli-types.ts to maintain file size limits.\n *\n * The COMMANDS list is NO LONGER hardcoded here (#3209). It is generated from\n * `COMMAND_CATALOG` in `cli-command-catalog.ts` — the single source of truth\n * for each command's one-line description — via `renderCommandsSection`. The\n * non-command sections (USAGE, OPTIONS, EXAMPLES) stay static in\n * `HELP_TEXT_FRAME`. `HELP_TEXT` is that frame with the full (`--all`)\n * catalog-derived COMMANDS block stitched in; `renderHelp({ all: false })`\n * stitches in the audience-filtered block instead.\n *\n * Do not reshape the top-level sections (USAGE / COMMANDS / OPTIONS /\n * EXAMPLES): `indexer/entrypoint-extractor.ts` loads this module by AST and\n * the catalog/help snapshot tests assert their presence. (Command names +\n * descriptions for the entrypoint index come from the catalog via\n * `catalogForExtractors()`, not from parsing this text — #2156.)\n *\n * @module cli-help-text\n */\n\nimport { renderCommandsSection } from './cli-command-catalog.js';\n\n/**\n * Placeholder token inside {@link HELP_TEXT_FRAME} that the renderers replace\n * with the catalog-derived COMMANDS block. Distinct from any real help content\n * so the single substitution is unambiguous.\n */\nconst COMMANDS_PLACEHOLDER = '__COMMANDS__';\n\n/**\n * Static help frame: everything except the COMMANDS list, which is a single\n * {@link COMMANDS_PLACEHOLDER} token filled at render time from the catalog.\n */\nconst HELP_TEXT_FRAME = `\nnexus-agents - Intelligent orchestration platform for AI coding tools\n\nUSAGE:\n nexus-agents [OPTIONS]\n nexus-agents [COMMAND] [SUBCOMMAND] [OPTIONS]\n\nCOMMANDS:\n${COMMANDS_PLACEHOLDER}\n\nOPTIONS:\n -h, --help Show this help message\n -v, --version Show version information\n --verbose Enable verbose output\n --interactive Start interactive REPL mode\n -m, --mode <mode> Server mode: server, orchestrator (default: server)\n - server: MCP server only (for Claude CLI integration)\n - orchestrator: CLI orchestrator (calls Gemini/Codex CLIs)\n\nFor command-specific options, run: nexus-agents <command> --help\n(For example: nexus-agents vote --help)\n\nEXAMPLES:\n nexus-agents hello Show welcome + quick start (no API keys needed)\n nexus-agents setup --interactive Run guided setup wizard\n nexus-agents verify Quick install check (run first)\n nexus-agents auth status Per-CLI auth state + login fix instructions\n nexus-agents doctor Detailed CLI/adapter health check\n nexus-agents orchestrate -t \"...\" Run a one-off task via the CLI orchestrator\n nexus-agents vote --quick -p \"X\" 3-agent consensus vote on proposal \"X\"\n nexus-agents --help --all Show every command (incl. maintainer tools)\n\nFor more information, visit: https://github.com/nexus-substrate/nexus-agents\n`.trim();\n\n/** Fills the COMMANDS placeholder in the frame with a catalog-derived block. */\nfunction composeHelp(commandsSection: string): string {\n return HELP_TEXT_FRAME.replace(COMMANDS_PLACEHOLDER, commandsSection);\n}\n\n/**\n * Full (`--all`) help text, with the COMMANDS list generated from\n * `COMMAND_CATALOG` (single source of truth — #3209). Equivalent to\n * `renderHelp({ all: true })`; exported for callers/tests that want the\n * canonical full view as a value.\n */\nexport const HELP_TEXT = composeHelp(renderCommandsSection(true));\n\n/**\n * Renders the top-level help output.\n *\n * @param opts.all - If true, returns the full view (includes maintainer\n * commands like benchmarks and release tooling). If false, returns a tiered\n * view that hides maintainer commands — surfaced via `--all` hint at the\n * bottom of the COMMANDS block. Both views derive the command list (and its\n * one-line descriptions) from `COMMAND_CATALOG`.\n */\nexport function renderHelp(opts: { all: boolean }): string {\n if (opts.all) return HELP_TEXT;\n return composeHelp(renderCommandsSection(false));\n}\n","/* eslint-disable max-lines -- canonical CLI types + parseArgs config, intentionally centralized */\n/**\n * nexus-agents CLI Types\n *\n * Type definitions and constants for the CLI.\n *\n * @module cli-types\n */\n\nimport type { ServerMode } from './cli/index.js';\nimport type {\n ErrorPolicy,\n VoteThreshold,\n VotingStrategy,\n} from './mcp/tools/consensus-vote-types.js';\nimport type { NoQuorumPolicy } from './cli/vote-types.js';\nimport type { VoteRecordPrBinding } from './audit/vote-record.js';\nimport type { CommandResult } from './core/command-result.js';\nimport { VOTE_TIMEOUTS } from './config/timeouts.js';\n\n// Re-export help text from extracted module for backward compatibility\nexport { HELP_TEXT } from './cli-help-text.js';\n\n/**\n * Exit codes for the CLI.\n */\nexport const EXIT_CODES = {\n SUCCESS: 0,\n SERVER_START_FAILED: 1,\n SHUTDOWN_ERROR: 2,\n INVALID_ARGS: 3,\n /** Subcommand is stubbed / advertised but not implemented (#2727). */\n NOT_IMPLEMENTED: 4,\n} as const;\n\n/**\n * A {@link CommandResult} that also carries the process exit code the\n * dispatcher should terminate with (#3210).\n *\n * Handlers RETURN this instead of calling `process.exit` inline, and the\n * single `process.exit` lives at the dispatcher boundary (see `exitWith`).\n * This makes exit behavior unit-testable (assert the returned `exitCode`)\n * without mocking `process.exit`, and centralizes the one process-killing\n * call so its policy is consistent across commands.\n */\nexport interface CliExitResult extends CommandResult {\n /** The exit code the CLI process should terminate with. */\n readonly exitCode: number;\n}\n\n/**\n * Builds a {@link CliExitResult} from a raw exit code, deriving `success`\n * from the conventional `0 == success` mapping. Optional human-readable\n * `message` is preserved for callers/tests.\n */\nexport function cliExit(exitCode: number, message?: string): CliExitResult {\n return message === undefined\n ? { success: exitCode === EXIT_CODES.SUCCESS, exitCode }\n : { success: exitCode === EXIT_CODES.SUCCESS, exitCode, message };\n}\n\n/**\n * Maps a handler's `0|non-0` status to the canonical success/failure exit\n * codes (`SUCCESS` / `SERVER_START_FAILED`) used by the bulk of CLI\n * commands, then wraps it in a {@link CliExitResult}. Centralizes the\n * `exitCode === 0 ? SUCCESS : SERVER_START_FAILED` ternary that was\n * duplicated across every handler.\n */\nexport function cliExitFromStatus(status: number, message?: string): CliExitResult {\n return cliExit(\n status === EXIT_CODES.SUCCESS ? EXIT_CODES.SUCCESS : EXIT_CODES.SERVER_START_FAILED,\n message\n );\n}\n\n/**\n * Explicit sentinel a handler RETURNS to signal \"I own my own process\n * lifecycle — do NOT force an exit at the dispatcher\" (#3942).\n *\n * Before #3942 this was conveyed by returning `undefined`/`void`, which\n * conflated *intentional* delegation (the MCP stdio server runs until its\n * transport closes, then exits itself) with an *accidentally dropped*\n * return on an error path. A missing return was not a compile error, so\n * `exitWith` would silently no-op and a non-zero exit code would be lost.\n *\n * By typing every handler as {@link CliHandlerResult} (a union that\n * excludes `undefined`/`void`), a handler that falls off the end without\n * returning is a TS2366 compile error (\"Function lacks ending return\n * statement…\"). Lifecycle-owning handlers RETURN this sentinel explicitly,\n * making delegation a deliberate, checked choice.\n *\n * Implemented as a branded const so it is a single unique value (not just\n * any object), and `exitWith` can match it by identity.\n */\nexport const LIFECYCLE_DELEGATED = {\n __lifecycleDelegated: true,\n} as const;\n\n/**\n * The type of {@link LIFECYCLE_DELEGATED}. A handler whose return type\n * includes this signals lifecycle delegation; see the sentinel docs.\n */\nexport type LifecycleDelegated = typeof LIFECYCLE_DELEGATED;\n\n/**\n * The exhaustive return contract for every CLI command handler dispatched\n * from `cli-commands.ts` (#3942). A handler EITHER returns a\n * {@link CliExitResult} (the dispatcher exits with its `exitCode`) OR the\n * {@link LIFECYCLE_DELEGATED} sentinel (the dispatcher does nothing because\n * the handler owns the process lifecycle). There is deliberately NO\n * `undefined`/`void` member: that is what makes a dropped return a compile\n * error rather than a silently-swallowed exit code.\n */\nexport type CliHandlerResult = CliExitResult | LifecycleDelegated;\n\n/**\n * Type guard distinguishing the {@link LIFECYCLE_DELEGATED} sentinel from a\n * {@link CliExitResult}. Used by `exitWith` to handle the handler-result\n * union exhaustively without a `void` fallthrough.\n *\n * Discriminates on the brand property rather than reference identity so the\n * guard is robust across module-boundary/test-mock copies of the sentinel\n * while remaining unambiguous (a `CliExitResult` never carries this brand).\n */\nexport function isLifecycleDelegated(result: CliHandlerResult): result is LifecycleDelegated {\n return (\n (result as Partial<LifecycleDelegated>).__lifecycleDelegated === true && !('exitCode' in result)\n );\n}\n\n/**\n * CLI command types that can be executed.\n */\nexport type CliCommand =\n | 'server'\n | 'help'\n | 'version'\n | 'hello'\n | 'config'\n | 'expert'\n | 'workflow'\n | 'doctor'\n | 'verify'\n | 'review'\n | 'routing-audit'\n | 'orchestrate'\n | 'system-review'\n | 'vote'\n | 'index'\n | 'research'\n | 'validation'\n | 'learning-metrics'\n | 'setup'\n | 'hooks'\n | 'demo'\n | 'sprint'\n | 'session'\n | 'evaluate'\n | 'issue'\n | 'fitness-audit'\n | 'release-notes'\n | 'release-validate'\n | 'release-announce'\n | 'scaffold'\n | 'visualize'\n | 'capabilities'\n | 'status'\n | 'memory-benchmark'\n | 'auth'\n | 'scenario'\n | 'warm-up'\n | 'e2e-eval'\n | 'routing-ab'\n | 'memory-eval'\n | 'health'\n | 'init'\n | 'validate'\n | 'registry'\n | 'login'\n | 'usage'\n | 'migrate'\n | 'tour'\n | 'improvement-review'\n | 'model-drift'\n | 'auto-remediate'\n | 'remediation-review'\n | 'mode'\n | 'jobs';\n\n/**\n * Parsed CLI arguments and command.\n */\nexport interface ParsedCliArgs {\n command: CliCommand;\n subcommand?: string;\n options: {\n help: boolean;\n version: boolean;\n verbose: boolean;\n interactive: boolean;\n // Tiered --help output (Issue #2135)\n all: boolean;\n mode: ServerMode;\n output?: string;\n force: boolean;\n format: string;\n input?: string;\n dryRun: boolean;\n banditStats: boolean;\n // Review command options\n setup: boolean;\n skipChecks: boolean;\n // Orchestrate command options (also used in orchestrator mode)\n task?: string;\n model?: string;\n maxTokens?: number;\n maxCostUsd?: number;\n engine?: 'router' | 'puppeteer';\n learn?: boolean;\n policyPath?: string;\n maxSteps?: number;\n // System review command options\n createIssue: boolean;\n fix: boolean;\n // Vote command options\n proposal?: string;\n /** File inlined into every voter proposal (--artifact-file). */\n artifactFile?: string;\n /** Legacy spelling of the bar; `strategy` wins when both are given (#6227). */\n threshold?: VoteThreshold;\n /** #6227 — `--strategy`, the tool's own enum, passed to the engine as the MCP tool passes it. */\n strategy?: VotingStrategy;\n /** #6227 — `--ratifies-pr <n>@<sha>`, already parsed into the record's binding shape. */\n ratifiesPr?: VoteRecordPrBinding;\n quick: boolean;\n timeoutMs?: number;\n /** #2630 — see `applyErrorPolicy`. */\n errorPolicy?: ErrorPolicy;\n /** #4135 — how the vote command maps a `no_quorum` decision. Default `fail`. */\n onNoQuorum?: NoQuorumPolicy;\n /** #4472 / #4941 — repeatable `--option`, the named alternatives to tally. */\n options?: string[];\n /** #6110 — `--project`, the project the panel judges (replaces `nexus-agents` in the prompts). */\n project?: string;\n // Learning-metrics and validation command options\n period?: string;\n export?: string;\n noTrends?: boolean;\n // Setup command options (Issue #363, #416, #1252, #1253, #1259, #1263)\n nonInteractive: boolean;\n skipMcp: boolean;\n skipRules: boolean;\n skipHooks: boolean;\n skipConfig: boolean;\n skipOpencode: boolean;\n skipGemini: boolean;\n skipCodex: boolean;\n scope?: 'user' | 'project';\n // Setup --custom-api for OpenAI-compatible gateway configuration (#2124)\n customApi?: string;\n customApiKey?: string;\n customModel?: string;\n // Demo command options\n mock: boolean;\n // Doctor command options (Issue #1031)\n deep: boolean;\n /**\n * Run the `serves` readiness level: a real completion per adapter (#4376).\n *\n * Opt-in because it spends generation quota. The default run proves\n * `installed` and `authenticated` only, and reports `serves` as\n * not-attempted rather than assuming it.\n */\n live: boolean;\n /** `doctor --gateway` (#6609): print the measured gateway section. */\n gateway: boolean;\n /** `doctor --probe` (#6609): one completion per gateway family; spends tokens. */\n probe: boolean;\n // Registry command options (#2179)\n json?: boolean;\n source?: string;\n /** model-drift `--file-issue` (#6625): open one issue per new model with `gh`. */\n fileIssue?: boolean;\n // init --portable command options (#2305)\n portable?: boolean;\n gitignore?: boolean;\n // init --portable --mcp-config flag (#2308)\n mcpConfig?: boolean;\n // init --portable --install / --uninstall flags (#2311)\n install?: boolean;\n uninstall?: boolean;\n // init --opencode <path> flag (#2504)\n opencode?: string;\n validate?: boolean;\n // remediation-review command options (#3765)\n evaluator?: string;\n owner?: string;\n note?: string;\n sound?: boolean;\n unsound?: boolean;\n batch?: string;\n n?: string;\n seed?: string;\n sample?: string;\n // improvement-review command options (#2444, #6636)\n 'file-issues'?: boolean;\n fileIssues?: boolean;\n 'lookback-days'?: string;\n lookbackDays?: string;\n 'min-sample-size'?: string;\n minSampleSize?: string;\n 'fitness-floor'?: string;\n fitnessFloor?: string;\n // session command options (#6693)\n limit?: string;\n markdown?: boolean;\n // usage command options (#6693)\n since?: string;\n until?: string;\n // validation command options (#6693)\n 'task-type'?: string;\n taskType?: string;\n 'min-sample'?: string;\n minSample?: string;\n // Subcommand flags the parser still rejected after #6705 (#6693 follow-up).\n /** `sprint --vote`, `research review|prioritize --vote`. */\n vote?: boolean;\n /** `research discover|review|prioritize|autofile --topic=<t>`. */\n topic?: string;\n /** `research status --status=<s>`. */\n status?: string;\n /** `research review --create-issues`. */\n createIssues?: boolean;\n /** `research autofile --max=<n>`. */\n max?: number;\n /** `research index --generate | --check`. */\n generate?: boolean;\n check?: boolean;\n /** `research index --validate --strict`, `release-validate --strict`. */\n strict?: boolean;\n /** `research index --silent`. */\n silent?: boolean;\n /** `research index --no-check-files`. */\n noCheckFiles?: boolean;\n /** `release-validate --skip <validator>` (repeatable). */\n skip?: string[];\n };\n positionals: string[];\n}\n\n/**\n * parseArgs configuration for the CLI.\n * (Source: Node.js 22.x util.parseArgs documentation)\n */\nexport const PARSE_ARGS_CONFIG = {\n options: {\n help: {\n type: 'boolean' as const,\n short: 'h',\n default: false,\n },\n version: {\n type: 'boolean' as const,\n short: 'v',\n default: false,\n },\n verbose: {\n type: 'boolean' as const,\n default: false,\n },\n interactive: {\n type: 'boolean' as const,\n default: false,\n },\n // Tiered --help output (Issue #2135): `--help --all` unhides maintainer commands\n all: {\n type: 'boolean' as const,\n default: false,\n },\n mode: {\n type: 'string' as const,\n short: 'm',\n default: 'server',\n },\n output: {\n type: 'string' as const,\n short: 'o',\n },\n force: {\n type: 'boolean' as const,\n short: 'f',\n default: false,\n },\n format: {\n type: 'string' as const,\n default: 'table',\n },\n input: {\n type: 'string' as const,\n short: 'i',\n },\n 'dry-run': {\n type: 'boolean' as const,\n default: false,\n },\n 'bandit-stats': {\n type: 'boolean' as const,\n default: false,\n },\n // Review command options\n setup: {\n type: 'boolean' as const,\n default: false,\n },\n 'skip-checks': {\n type: 'boolean' as const,\n default: false,\n },\n // Orchestrate command options (also used in orchestrator mode)\n task: {\n type: 'string' as const,\n short: 't',\n },\n model: {\n type: 'string' as const,\n },\n 'max-tokens': {\n type: 'string' as const,\n },\n 'max-cost-usd': {\n type: 'string' as const,\n },\n // Orchestrate engine options (Issue #386)\n engine: {\n type: 'string' as const,\n default: 'router',\n },\n learn: {\n type: 'boolean' as const,\n default: false,\n },\n 'policy-path': {\n type: 'string' as const,\n },\n 'max-steps': {\n type: 'string' as const,\n },\n // System review command options\n 'create-issue': {\n type: 'boolean' as const,\n default: false,\n },\n fix: {\n type: 'boolean' as const,\n default: false,\n },\n // Vote command options\n proposal: {\n type: 'string' as const,\n short: 'p',\n },\n // Repeatable. No short letter: every free one is taken, and the two\n // collisions that already existed silently bound the wrong option (#4922).\n option: {\n type: 'string' as const,\n multiple: true as const,\n },\n // No `short`. `parseArgs` takes one options object for every command, so\n // a short letter is global: `-t` was already `task`, which won, and\n // `vote -t supermajority` silently ran a simple-majority vote. Long form\n // only — `cli-types.test.ts` pins that no two options share a letter.\n threshold: {\n type: 'string' as const,\n },\n // #6227 — the bar as the tool spells it. `threshold` is the legacy spelling;\n // the engine's `resolveStrategy` lets `strategy` win when both are given.\n strategy: {\n type: 'string' as const,\n },\n 'artifact-file': {\n type: 'string' as const,\n },\n // #6227 — `<pr>@<40-hex sha>`: binds the record to a governor-path PR for\n // `scripts/append-ratification-record.ts`. Validated in `buildVoteOptions`.\n 'ratifies-pr': {\n type: 'string' as const,\n },\n quick: {\n type: 'boolean' as const,\n short: 'q',\n default: false,\n },\n // #6236 — seconds, read from the same constant `vote --help` renders and\n // `runVote` falls back to. A hard-coded '90' here ran every seat at less\n // than a third of the #1640 budget while the help said 300.\n timeout: {\n type: 'string' as const,\n default: String(VOTE_TIMEOUTS.defaultMs / 1000),\n },\n // #2630 — error policy for the vote command.\n 'error-policy': {\n type: 'string' as const,\n },\n // #4135 — how the vote command maps a no_quorum decision (fail|exit2|retry).\n 'on-no-quorum': {\n type: 'string' as const,\n },\n // #6110 — the project the voter prompts name; derived from the cwd when absent.\n project: {\n type: 'string' as const,\n },\n // Learning-metrics command options\n // No `short` — `-p` is `proposal`, which was declared first and won. See\n // the note on `threshold`.\n period: {\n type: 'string' as const,\n },\n export: {\n type: 'string' as const,\n },\n 'no-trends': {\n type: 'boolean' as const,\n default: false,\n },\n // Setup command options (Issue #363)\n 'non-interactive': {\n type: 'boolean' as const,\n default: false,\n },\n 'skip-mcp': {\n type: 'boolean' as const,\n default: false,\n },\n 'skip-rules': {\n type: 'boolean' as const,\n default: false,\n },\n 'skip-hooks': {\n type: 'boolean' as const,\n default: false,\n },\n 'skip-config': {\n type: 'boolean' as const,\n default: false,\n },\n 'skip-opencode': {\n type: 'boolean' as const,\n default: false,\n },\n 'skip-gemini': {\n type: 'boolean' as const,\n default: false,\n },\n 'skip-codex': {\n type: 'boolean' as const,\n default: false,\n },\n scope: {\n type: 'string' as const,\n default: 'user',\n },\n // Setup --custom-api for OpenAI-compatible gateway configuration (#2124)\n 'custom-api': {\n type: 'string' as const,\n },\n 'custom-api-key': {\n type: 'string' as const,\n },\n 'custom-model': {\n type: 'string' as const,\n },\n // Demo command options\n mock: {\n type: 'boolean' as const,\n default: false,\n },\n // Doctor command options (Issue #1031)\n deep: {\n type: 'boolean' as const,\n default: false,\n },\n // Doctor live readiness probe (#4376)\n live: {\n type: 'boolean' as const,\n default: false,\n },\n // Doctor gateway section and opt-in completion probe (#6609)\n gateway: {\n type: 'boolean' as const,\n default: false,\n },\n probe: {\n type: 'boolean' as const,\n default: false,\n },\n // Registry command options (#2179)\n json: {\n type: 'boolean' as const,\n default: false,\n },\n // model-drift command option (#6625)\n 'file-issue': {\n type: 'boolean' as const,\n default: false,\n },\n source: {\n type: 'string' as const,\n },\n // init --portable command options (#2305)\n portable: {\n type: 'boolean' as const,\n default: false,\n },\n gitignore: {\n type: 'boolean' as const,\n default: false,\n },\n // init --portable --mcp-config flag (#2308)\n 'mcp-config': {\n type: 'boolean' as const,\n default: false,\n },\n // init --portable --install / --uninstall flags (#2311)\n install: {\n type: 'boolean' as const,\n default: false,\n },\n uninstall: {\n type: 'boolean' as const,\n default: false,\n },\n // improvement-review command options (#2444)\n 'lookback-days': {\n type: 'string' as const,\n },\n 'file-issues': {\n type: 'boolean' as const,\n default: false,\n },\n 'min-sample-size': {\n type: 'string' as const,\n },\n 'fitness-floor': {\n type: 'string' as const,\n },\n // init --opencode <path> flag (#2504)\n opencode: {\n type: 'string' as const,\n },\n validate: {\n type: 'boolean' as const,\n default: false,\n },\n // remediation-review command options (#3765)\n evaluator: {\n type: 'string' as const,\n },\n owner: {\n type: 'string' as const,\n },\n note: {\n type: 'string' as const,\n },\n sound: {\n type: 'boolean' as const,\n default: false,\n },\n unsound: {\n type: 'boolean' as const,\n default: false,\n },\n batch: { type: 'string' as const },\n n: { type: 'string' as const },\n seed: { type: 'string' as const },\n sample: { type: 'string' as const },\n // session command options (#6693)\n limit: {\n type: 'string' as const,\n },\n markdown: {\n type: 'boolean' as const,\n default: false,\n },\n // usage command options (#6693)\n since: {\n type: 'string' as const,\n },\n until: {\n type: 'string' as const,\n },\n // validation command options (#6693)\n 'task-type': {\n type: 'string' as const,\n },\n 'min-sample': {\n type: 'string' as const,\n },\n // #6693 follow-up — subcommand flags that usage text advertised and\n // handlers read, still rejected after #6705. Forwarded by\n // `buildSubcommandFlagOptions` (cli/subcommand-flag-options.ts). No short\n // letters: a short letter is global (see the note on `threshold`).\n vote: { type: 'boolean' as const, default: false },\n topic: { type: 'string' as const },\n status: { type: 'string' as const },\n 'create-issues': { type: 'boolean' as const, default: false },\n max: { type: 'string' as const },\n generate: { type: 'boolean' as const, default: false },\n check: { type: 'boolean' as const, default: false },\n strict: { type: 'boolean' as const, default: false },\n silent: { type: 'boolean' as const, default: false },\n 'no-check-files': { type: 'boolean' as const, default: false },\n skip: { type: 'string' as const, multiple: true as const },\n },\n allowPositionals: true,\n strict: true,\n} as const;\n\n/**\n * Every command name {@link isValidCommand} accepts. Exported so the parity\n * gate (`command-parity.test.ts`, #3212) can assert it stays consistent with\n * the real dispatch tables and `COMMAND_CATALOG`, rather than trusting the\n * `isValidCommand` predicate alone.\n */\nexport const VALID_COMMANDS: readonly CliCommand[] = [\n 'server',\n 'help',\n 'version',\n 'hello',\n 'config',\n 'expert',\n 'workflow',\n 'doctor',\n 'verify',\n 'review',\n 'routing-audit',\n 'orchestrate',\n 'system-review',\n 'vote',\n 'index',\n 'research',\n 'validation',\n 'learning-metrics',\n 'setup',\n 'hooks',\n 'demo',\n 'sprint',\n 'session',\n 'evaluate',\n 'issue',\n 'fitness-audit',\n 'release-notes',\n 'release-validate',\n 'release-announce',\n 'scaffold',\n 'visualize',\n 'capabilities',\n 'status',\n 'memory-benchmark',\n 'auth',\n 'scenario',\n 'warm-up',\n 'e2e-eval',\n 'routing-ab',\n 'memory-eval',\n 'health',\n 'init',\n 'validate',\n 'registry',\n 'login',\n 'usage',\n 'improvement-review',\n 'model-drift',\n 'migrate',\n 'tour',\n 'auto-remediate',\n 'remediation-review',\n 'mode',\n 'jobs',\n];\n\n/**\n * Checks if a string is a valid CLI command.\n */\nexport function isValidCommand(value: string): value is CliCommand {\n return (VALID_COMMANDS as readonly string[]).includes(value);\n}\n","/**\n * Gateway adapter bootstrap (#2502, child 2 of epic #2500).\n *\n * The OpenAI-compatible gateway adapter (`adapters/openai-compat-adapter.ts`,\n * #2468) was implemented but never wired into the runtime. This module\n * closes that loop: at MCP-server startup, when `NEXUS_OPENAI_COMPAT_URL`\n * + `NEXUS_OPENAI_COMPAT_KEY` are set, we discover the gateway's models\n * and produce a single `IModelAdapter` that orchestrator/expert tools can\n * use directly. In sandbox mode (#2501), we fail-fast on misconfiguration\n * because there's no human at a CLI prompt to recover.\n *\n * @module cli-server-gateway\n */\n\nimport type { ILogger, IModelAdapter } from './core/index.js';\nimport {\n readOpenAICompatEndpoint,\n readOpenAICompatEnv,\n buildOpenAICompatAdapters,\n} from './adapters/openai-compat-adapter.js';\nimport { createGatewayArmAdapter } from './adapters/gateway-arm-adapter.js';\nimport { discoverGatewayOnce } from './adapters/gateway-discovery.js';\nimport {\n GatewayHostRefusedError,\n type GatewayHostRefused,\n} from './adapters/gateway-host-status.js';\nimport { GatewayRediscovery, setGatewayRediscovery } from './adapters/gateway-rediscovery.js';\nimport { setGatewayCatalog } from './adapters/sdk/gateway-catalog.js';\nimport {\n logGatewaySlotMapping,\n resolveGatewayDefault,\n setGatewaySlotCatalog,\n} from './adapters/gateway-family-slots.js';\nimport { gatewayEndpointRejection } from './adapters/sdk/gateway-cost.js';\nimport { hostnameOf } from './adapters/sdk/gateway-env.js';\nimport type { IResilientAdapter } from './adapters/resilient-adapter-types.js';\nimport { getDefaultCliCircuitBreakerRegistry } from './cli-adapters/cli-circuit-breaker.js';\nimport { isEndpointArmId, type EndpointArmId } from './cli-adapters/types-core.js';\nimport { detectSandbox } from './config/sandbox-detection.js';\nimport { getGlobalRegistry } from './adapters/unified-registry.js';\nimport { parseBoolEnv } from './config/defaults-env.js';\nimport { EXIT_CODES } from './cli-types.js';\n\n/**\n * Wire ALL discovered gateway adapters — one per model the gateway serves\n * (#4040), so the voter path can round-robin roles across distinct models\n * (per-role diversity, all in-process).\n *\n * Behavioural matrix:\n *\n * | Sandbox | Env vars | Probe | Outcome |\n * | :------ | :------- | :------ | :--------------------------------------- |\n * | active | unset | n/a | exit(SERVER_START_FAILED) |\n * | active | set | fails | exit(SERVER_START_FAILED) with HTTP info |\n * | active | set | succeed | log + return every discovered adapter |\n * | inactive| unset | n/a | return undefined (CLI flow handles it) |\n * | inactive| set | fails | log warning + return undefined |\n * | inactive| set | succeed | log + return every discovered adapter |\n *\n * A gateway listing 0 models is treated as a failed probe. Which adapter a\n * tool uses by default is {@link resolveDefaultModelAdapter}'s decision, not\n * list order.\n */\nexport async function tryWireGatewayAdapters(\n logger: ILogger\n): Promise<readonly IModelAdapter[] | undefined> {\n return (await wireGatewayOnce(logger)).adapters;\n}\n\n/** One wiring attempt's adapters, and whether a later attempt could succeed. */\ninterface WiringOutcome {\n readonly adapters: readonly IModelAdapter[] | undefined;\n readonly retryable: boolean;\n}\n\n/**\n * One wiring attempt. `retryable` is true when a gateway is configured but\n * the probe failed for a reason that can clear on its own — unreachable,\n * error status, zero models — and false when retrying cannot help: not\n * configured, or refused by the private-address guard (allowing it is an env\n * change, which needs a restart). Lazy re-discovery (#6608) arms only on\n * `retryable`.\n */\nasync function wireGatewayOnce(logger: ILogger): Promise<WiringOutcome> {\n const sandboxActive = detectSandbox().active;\n const env = readOpenAICompatEnv();\n if (env === null) {\n handleMissingEnv(logger, sandboxActive);\n noticeCliSubprocessFallback(logger);\n return { adapters: undefined, retryable: false };\n }\n\n // The process's one probe (#4392): a lazy discovery that ran first is\n // reused, never repeated, and a later lazy call reuses this one.\n const result = await discoverGatewayOnce(logger);\n if (result === null) {\n // env-was-set guard; build contract allows it\n noticeCliSubprocessFallback(logger);\n return { adapters: undefined, retryable: false };\n }\n if (!result.ok && result.error instanceof GatewayHostRefusedError) {\n handleHostRefused(logger, sandboxActive, result.error.status);\n noticeCliSubprocessFallback(logger);\n return { adapters: undefined, retryable: false };\n }\n if (!result.ok) {\n handleProbeFailure(logger, sandboxActive, result.error.message);\n noticeCliSubprocessFallback(logger);\n return { adapters: undefined, retryable: true };\n }\n if (result.value.length === 0) {\n handleZeroModels(logger, sandboxActive);\n noticeCliSubprocessFallback(logger);\n return { adapters: undefined, retryable: true };\n }\n\n // Log the discovered model IDs at info level — operators want to confirm\n // the gateway's catalog matches what they configured upstream. The API\n // key never reaches logs (env-only read), and neither does the full base\n // URL — it can carry userinfo — only its host (#4392 increment 3).\n logger.info('OpenAI-compatible gateway wired', {\n host: hostnameOf(env.baseUrl),\n modelCount: result.value.length,\n models: result.value.map((a) => a.modelId),\n });\n return { adapters: result.value, retryable: false };\n}\n\n/**\n * One-time operator notice (#4255): whenever no in-process gateway ends up\n * wired — env unset, probe failed, or the gateway listed 0 models — voter\n * and consensus calls fall through to the CLI-subprocess round-robin path\n * (`voter-agents.ts` `getAvailableClis`). That path is slower (~90s wall\n * time observed) and depends on each CLI's own auth/quota, but nothing told\n * the operator a faster in-process option exists (#4040). Logged once per\n * process via {@link cliSubprocessFallbackNoticeLogged} so a busy startup\n * (or repeated calls in tests) can't spam it.\n */\nlet cliSubprocessFallbackNoticeLogged = false;\n\nfunction noticeCliSubprocessFallback(logger: ILogger): void {\n if (cliSubprocessFallbackNoticeLogged) return;\n cliSubprocessFallbackNoticeLogged = true;\n logger.info(\n 'No in-process gateway is configured, so voter/consensus calls will spawn CLI ' +\n \"subprocesses (slower per-vote startup, subject to each CLI's own auth/quota). \" +\n 'Set NEXUS_OPENAI_COMPAT_URL and NEXUS_OPENAI_COMPAT_KEY to route voters through ' +\n 'an OpenAI-compatible gateway in-process instead (lower latency, no subprocess spawn).'\n );\n}\n\n/** Test-only: reset the one-time notice guard so repeated tests can re-trigger it. */\nexport function _resetCliSubprocessFallbackNotice(): void {\n cliSubprocessFallbackNoticeLogged = false;\n}\n\n/**\n * The default model adapter. With a gateway configured (#2502/#4040) it is the\n * catalogue's ranked default, `resolveGatewayDefault` (#6651) — the same rule\n * the registry's unpinned default uses, so the two cannot name different\n * models, and listing order (arbitrary, #6606) does not decide it. When that\n * rule resolves nothing (no catalogue registered, or no chat model in it) the\n * primary gateway model is kept, as before. With no gateway it is the\n * CLI-registry default. The registry is typed structurally so this stays free\n * of the adapter-registry import.\n */\nexport function resolveDefaultModelAdapter(\n gatewayAdapters: readonly IModelAdapter[] | undefined,\n adapterRegistry: { getDefault(): IModelAdapter }\n): IModelAdapter {\n const primary = gatewayAdapters?.[0];\n if (primary === undefined) return adapterRegistry.getDefault();\n const ranked = resolveGatewayDefault();\n return ranked.kind === 'resolved' ? ranked.adapter : primary;\n}\n\n/**\n * Register the discovered gateway models as ONE `api:<endpoint>` arm in the\n * adapter registry (#4392 increment 2, step 2), in EVERY billing mode — the\n * arm is what the shared breaker, the `NEXUS_GATEWAY_COST` declaration and\n * (once #6291 widens the routing ids) routing key on. `registerApiArm` warns\n * when the arm's cost is undeclared. The per-model adapters keep flowing to\n * the voter tools unchanged; this adds the arm beside them.\n *\n * Returns the arm id, or `undefined` when nothing was registered: no gateway\n * (`adapters` undefined or empty — the named empty case, logged at debug), or\n * an `endpoint` that is not a valid endpoint id (the env schema already\n * reported it; a garbage arm id is never minted from it).\n */\nexport function registerGatewayArm(\n adapters: readonly IModelAdapter[] | undefined,\n endpoint: string,\n registry: {\n registerApiArm(arm: EndpointArmId, adapter: IResilientAdapter): void;\n getLogger(): ILogger;\n }\n): EndpointArmId | undefined {\n const logger = registry.getLogger();\n if (adapters === undefined || adapters.length === 0) {\n logger.debug('No gateway adapters discovered; no api: arm registered');\n return undefined;\n }\n const armId = `api:${endpoint}`;\n const rejection = gatewayEndpointRejection(endpoint);\n if (rejection !== undefined || !isEndpointArmId(armId)) {\n // Not echoed: the likely mistake is a pasted URL, which can carry a key.\n logger.warn('Gateway endpoint is not a valid gateway endpoint; no api: arm registered', {\n reason: rejection ?? 'not a valid endpoint id',\n });\n return undefined;\n }\n registry.registerApiArm(\n armId,\n createGatewayArmAdapter(armId, adapters, {\n circuitBreakerRegistry: getDefaultCliCircuitBreakerRegistry(),\n logger,\n })\n );\n // Publish only after registration succeeds. The new wrapper already retains\n // the catalogue, so replacing an earlier wrapper cannot erase its metadata.\n setGatewayCatalog(\n armId,\n adapters.map((a) => a.modelId)\n );\n logger.info('Gateway registered as one api: arm', { arm: armId, modelCount: adapters.length });\n return armId;\n}\n\n/**\n * The bootstrap entry (#4392 inc 2 step 2): discover the gateway\n * ({@link tryWireGatewayAdapters}), register its `api:<endpoint>` arm\n * ({@link registerGatewayArm}) under the operator's endpoint id, register the\n * family-slot catalogue (#6604), and hand the per-model adapters back for the\n * tools. One call, so `cli-server.ts` cannot\n * wire the adapters without the arm.\n */\nexport async function wireGateway(\n logger: ILogger,\n registry: Parameters<typeof registerGatewayArm>[2] = getGlobalRegistry()\n): Promise<readonly IModelAdapter[] | undefined> {\n const { adapters, retryable } = await wireGatewayOnce(logger);\n const endpoint = readOpenAICompatEndpoint(process.env, logger);\n const registerArms = (found: readonly IModelAdapter[] | undefined): void => {\n registerGatewayArm(found, endpoint, registry);\n // The server's private registry retains its historical 30-minute default.\n // Router arms live in the global registry, whose CLI timeouts stay per-complexity.\n // Independent wrappers share the endpoint breaker and are disposed by their owners.\n if (parseBoolEnv('NEXUS_ROUTE_GATEWAY_ARMS', false)) {\n const global = getGlobalRegistry();\n if (global !== registry) registerGatewayArm(found, endpoint, global);\n }\n };\n registerArms(adapters);\n registerFamilySlots(adapters, logger);\n if (!retryable) return adapters;\n // #6608: a gateway that was down at boot is retried lazily. The tools get\n // an empty live list (every reader treats empty as \"no gateway\"); the first\n // gateway-needing call after the backoff fills it in place and registers\n // the arm. Every registry adapter triggers it (#6659, see\n // gateway-rediscovery.ts), and the boot-time default re-detects onto the\n // gateway once it is found.\n const live: IModelAdapter[] = [];\n setGatewayRediscovery(\n new GatewayRediscovery({\n target: live,\n logger,\n discover: () => rediscoverGateway(logger),\n onDiscovered: (found) => {\n registerArms(found);\n registerFamilySlots(found, logger);\n },\n })\n );\n return live;\n}\n\n/**\n * #6604: the family-slot catalogue — each vendor CLI slot without an\n * available CLI resolves to a gateway model of its own family. None\n * registered (no gateway, or discovery failed) means no gateway.\n */\nfunction registerFamilySlots(\n adapters: readonly IModelAdapter[] | undefined,\n logger: ILogger\n): void {\n setGatewaySlotCatalog(adapters ?? []);\n logGatewaySlotMapping(logger);\n}\n\n/**\n * One lazy re-discovery attempt: the adapters; `undefined` (logged) when it\n * failed in a way that can clear; `'refused'` when the private-address guard\n * refused the host (#6659), logged with the same remedy as at boot and never\n * retried, since allowing it is an env change that needs a restart.\n */\nasync function rediscoverGateway(\n logger: ILogger\n): Promise<readonly IModelAdapter[] | 'refused' | undefined> {\n const result = await buildOpenAICompatAdapters(logger);\n if (result === null) return undefined;\n if (!result.ok && result.error instanceof GatewayHostRefusedError) {\n // Re-discovery is armed only outside sandbox mode (a failed boot probe\n // there exits), so this never takes the sandbox exit branch.\n handleHostRefused(logger, false, result.error.status);\n return 'refused';\n }\n if (!result.ok) {\n logger.warn('Gateway re-discovery failed; calls stay on CLI subprocesses', {\n error: result.error.message,\n });\n return undefined;\n }\n return result.value;\n}\n\nfunction handleMissingEnv(logger: ILogger, sandboxActive: boolean): void {\n if (sandboxActive) {\n logger.error(\n 'Sandbox mode active but NEXUS_OPENAI_COMPAT_URL / NEXUS_OPENAI_COMPAT_KEY are not set. ' +\n 'Configure the gateway in your launch env or opencode.json. ' +\n 'See docs/guides/SANDBOXED-USAGE.md.',\n new Error('Missing gateway configuration in sandbox mode')\n );\n process.exit(EXIT_CODES.SERVER_START_FAILED);\n }\n return undefined;\n}\n\nfunction handleProbeFailure(logger: ILogger, sandboxActive: boolean, reason: string): void {\n if (sandboxActive) {\n logger.error(\n 'Sandbox mode active and OpenAI-compatible gateway probe failed.',\n new Error(reason)\n );\n process.exit(EXIT_CODES.SERVER_START_FAILED);\n }\n logger.warn('OpenAI-compatible gateway probe failed; continuing with CLI adapters', {\n error: reason,\n });\n return undefined;\n}\n\n/**\n * The private-address guard refused the gateway host (#6608). The message\n * names the variable that allows it and says the gateway is not in use —\n * before this, the operator saw a generic probe-failure line.\n */\nfunction handleHostRefused(\n logger: ILogger,\n sandboxActive: boolean,\n status: GatewayHostRefused\n): void {\n const message =\n `Gateway host ${status.host} refused by the private-address guard: the in-process ` +\n 'gateway is NOT in use, and voter/consensus calls fall back to CLI subprocesses. ' +\n status.remedy;\n if (sandboxActive) {\n logger.error(message, new Error(status.reason));\n process.exit(EXIT_CODES.SERVER_START_FAILED);\n }\n logger.warn(message, { host: status.host, reason: status.reason });\n}\n\nfunction handleZeroModels(logger: ILogger, sandboxActive: boolean): void {\n if (sandboxActive) {\n logger.error(\n 'Sandbox mode active and gateway returned 0 models. Check upstream provider quotas / list filters.',\n new Error('Gateway discovered 0 models')\n );\n process.exit(EXIT_CODES.SERVER_START_FAILED);\n }\n logger.warn('OpenAI-compatible gateway returned 0 models; ignoring');\n return undefined;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgEO,IAAM,kBAAkD;AAAA;AAAA,EAE7D;AAAA,IACE,SAAS;AAAA,IACT,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,SAAS;AAAA;AAAA;AAAA;AAAA,IAIT,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA;AAAA,EAGA;AAAA,IACE,SAAS;AAAA,IACT,aACE;AAAA,IACF,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,aACE;AAAA,IACF,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,aACE;AAAA,IACF,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,aACE;AAAA,IACF,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,aACE;AAAA,IACF,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,aACE;AAAA,IACF,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,aACE;AAAA,IACF,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,aACE;AAAA,IACF,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,aACE;AAAA,IACF,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,aACE;AAAA,IACF,UAAU;AAAA,EACZ;AAAA;AAAA,EAGA;AAAA,IACE,SAAS;AAAA,IACT,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA;AAAA,EAGA;AAAA,IACE,SAAS;AAAA;AAAA;AAAA;AAAA,IAIT,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AACF;AAYO,SAAS,cAAc,SAAkD;AAC9E,QAAM,UAAU,gBAAgB,OAAO,CAAC,MAAM,EAAE,aAAa,UAAU;AACvE,MAAI,QAAS,QAAO;AACpB,SAAO,QAAQ,OAAO,CAAC,MAAM,EAAE,aAAa,YAAY;AAC1D;AAOO,SAAS,uBAAuD;AACrE,SAAO,gBAAgB,OAAO,CAAC,MAAM,EAAE,YAAY,WAAW;AAChE;AAYO,SAAS,sBAAsB,SAAqC;AACzE,SAAO,gBAAgB,KAAK,CAAC,MAAM,EAAE,YAAY,OAAO,GAAG;AAC7D;AAGO,SAAS,gBACd,SAC8D;AAC9D,QAAM,SAAS,oBAAI,IAA4C;AAC/D,aAAW,SAAS,SAAS;AAC3B,UAAM,WAAW,OAAO,IAAI,MAAM,QAAQ,KAAK,CAAC;AAChD,aAAS,KAAK,KAAK;AACnB,WAAO,IAAI,MAAM,UAAU,QAAQ;AAAA,EACrC;AACA,SAAO;AACT;AAEA,IAAM,oBAAqD;AAAA,EACzD,WAAW;AAAA,EACX,UAAU;AAAA,EACV,YAAY;AAAA;AAAA;AAAA,EAGZ,UAAU;AACZ;AAkBO,SAAS,sBAAsB,SAA0B;AAC9D,QAAM,WAAW,cAAc,OAAO;AACtC,QAAM,SAAS,gBAAgB,QAAQ;AACvC,QAAM,QAAkB,CAAC;AACzB,QAAM,QAA2B,UAC7B,CAAC,aAAa,YAAY,YAAY,IACtC,CAAC,aAAa,UAAU;AAC5B,aAAW,YAAY,OAAO;AAC5B,UAAM,UAAU,OAAO,IAAI,QAAQ;AACnC,QAAI,YAAY,UAAa,QAAQ,WAAW,EAAG;AACnD,UAAM,KAAK,KAAK,kBAAkB,QAAQ,CAAC,EAAE;AAC7C,eAAW,SAAS,SAAS;AAC3B,YAAM,KAAK,OAAO,MAAM,QAAQ,OAAO,EAAE,CAAC,IAAI,MAAM,WAAW,EAAE;AAAA,IACnE;AACA,UAAM,KAAK,EAAE;AAAA,EACf;AACA,MAAI,CAAC,SAAS;AACZ,UAAM,KAAK,6EAA6E;AAAA,EAC1F;AACA,SAAO,MAAM,KAAK,IAAI,EAAE,QAAQ,QAAQ,EAAE;AAC5C;;;ACtaA,IAAM,uBAAuB;AAM7B,IAAM,kBAAkB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQtB,oBAAoB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAyBpB,KAAK;AAGP,SAAS,YAAY,iBAAiC;AACpD,SAAO,gBAAgB,QAAQ,sBAAsB,eAAe;AACtE;AAQO,IAAM,YAAY,YAAY,sBAAsB,IAAI,CAAC;AAWzD,SAAS,WAAW,MAAgC;AACzD,MAAI,KAAK,IAAK,QAAO;AACrB,SAAO,YAAY,sBAAsB,KAAK,CAAC;AACjD;;;ACtEO,IAAM,aAAa;AAAA,EACxB,SAAS;AAAA,EACT,qBAAqB;AAAA,EACrB,gBAAgB;AAAA,EAChB,cAAc;AAAA;AAAA,EAEd,iBAAiB;AACnB;AAsBO,SAAS,QAAQ,UAAkB,SAAiC;AACzE,SAAO,YAAY,SACf,EAAE,SAAS,aAAa,WAAW,SAAS,SAAS,IACrD,EAAE,SAAS,aAAa,WAAW,SAAS,UAAU,QAAQ;AACpE;AASO,SAAS,kBAAkB,QAAgB,SAAiC;AACjF,SAAO;AAAA,IACL,WAAW,WAAW,UAAU,WAAW,UAAU,WAAW;AAAA,IAChE;AAAA,EACF;AACF;AAqBO,IAAM,sBAAsB;AAAA,EACjC,sBAAsB;AACxB;AA4BO,SAAS,qBAAqB,QAAwD;AAC3F,SACG,OAAuC,yBAAyB,QAAQ,EAAE,cAAc;AAE7F;AAkOO,IAAM,oBAAoB;AAAA,EAC/B,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,MAAM;AAAA,MACN,OAAO;AAAA,MACP,SAAS;AAAA,IACX;AAAA,IACA,SAAS;AAAA,MACP,MAAM;AAAA,MACN,OAAO;AAAA,MACP,SAAS;AAAA,IACX;AAAA,IACA,SAAS;AAAA,MACP,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA,IACA,aAAa;AAAA,MACX,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA;AAAA,IAEA,KAAK;AAAA,MACH,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA,IACA,MAAM;AAAA,MACJ,MAAM;AAAA,MACN,OAAO;AAAA,MACP,SAAS;AAAA,IACX;AAAA,IACA,QAAQ;AAAA,MACN,MAAM;AAAA,MACN,OAAO;AAAA,IACT;AAAA,IACA,OAAO;AAAA,MACL,MAAM;AAAA,MACN,OAAO;AAAA,MACP,SAAS;AAAA,IACX;AAAA,IACA,QAAQ;AAAA,MACN,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA,IACA,OAAO;AAAA,MACL,MAAM;AAAA,MACN,OAAO;AAAA,IACT;AAAA,IACA,WAAW;AAAA,MACT,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA,IACA,gBAAgB;AAAA,MACd,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA;AAAA,IAEA,OAAO;AAAA,MACL,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA,IACA,eAAe;AAAA,MACb,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA;AAAA,IAEA,MAAM;AAAA,MACJ,MAAM;AAAA,MACN,OAAO;AAAA,IACT;AAAA,IACA,OAAO;AAAA,MACL,MAAM;AAAA,IACR;AAAA,IACA,cAAc;AAAA,MACZ,MAAM;AAAA,IACR;AAAA,IACA,gBAAgB;AAAA,MACd,MAAM;AAAA,IACR;AAAA;AAAA,IAEA,QAAQ;AAAA,MACN,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA,IACA,OAAO;AAAA,MACL,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA,IACA,eAAe;AAAA,MACb,MAAM;AAAA,IACR;AAAA,IACA,aAAa;AAAA,MACX,MAAM;AAAA,IACR;AAAA;AAAA,IAEA,gBAAgB;AAAA,MACd,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA,IACA,KAAK;AAAA,MACH,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA;AAAA,IAEA,UAAU;AAAA,MACR,MAAM;AAAA,MACN,OAAO;AAAA,IACT;AAAA;AAAA;AAAA,IAGA,QAAQ;AAAA,MACN,MAAM;AAAA,MACN,UAAU;AAAA,IACZ;AAAA;AAAA;AAAA;AAAA;AAAA,IAKA,WAAW;AAAA,MACT,MAAM;AAAA,IACR;AAAA;AAAA;AAAA,IAGA,UAAU;AAAA,MACR,MAAM;AAAA,IACR;AAAA,IACA,iBAAiB;AAAA,MACf,MAAM;AAAA,IACR;AAAA;AAAA;AAAA,IAGA,eAAe;AAAA,MACb,MAAM;AAAA,IACR;AAAA,IACA,OAAO;AAAA,MACL,MAAM;AAAA,MACN,OAAO;AAAA,MACP,SAAS;AAAA,IACX;AAAA;AAAA;AAAA;AAAA,IAIA,SAAS;AAAA,MACP,MAAM;AAAA,MACN,SAAS,OAAO,cAAc,YAAY,GAAI;AAAA,IAChD;AAAA;AAAA,IAEA,gBAAgB;AAAA,MACd,MAAM;AAAA,IACR;AAAA;AAAA,IAEA,gBAAgB;AAAA,MACd,MAAM;AAAA,IACR;AAAA;AAAA,IAEA,SAAS;AAAA,MACP,MAAM;AAAA,IACR;AAAA;AAAA;AAAA;AAAA,IAIA,QAAQ;AAAA,MACN,MAAM;AAAA,IACR;AAAA,IACA,QAAQ;AAAA,MACN,MAAM;AAAA,IACR;AAAA,IACA,aAAa;AAAA,MACX,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA;AAAA,IAEA,mBAAmB;AAAA,MACjB,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA,IACA,YAAY;AAAA,MACV,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA,IACA,cAAc;AAAA,MACZ,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA,IACA,cAAc;AAAA,MACZ,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA,IACA,eAAe;AAAA,MACb,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA,IACA,iBAAiB;AAAA,MACf,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA,IACA,eAAe;AAAA,MACb,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA,IACA,cAAc;AAAA,MACZ,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA,IACA,OAAO;AAAA,MACL,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA;AAAA,IAEA,cAAc;AAAA,MACZ,MAAM;AAAA,IACR;AAAA,IACA,kBAAkB;AAAA,MAChB,MAAM;AAAA,IACR;AAAA,IACA,gBAAgB;AAAA,MACd,MAAM;AAAA,IACR;AAAA;AAAA,IAEA,MAAM;AAAA,MACJ,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA;AAAA,IAEA,MAAM;AAAA,MACJ,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA;AAAA,IAEA,MAAM;AAAA,MACJ,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA;AAAA,IAEA,SAAS;AAAA,MACP,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA,IACA,OAAO;AAAA,MACL,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA;AAAA,IAEA,MAAM;AAAA,MACJ,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA;AAAA,IAEA,cAAc;AAAA,MACZ,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA,IACA,QAAQ;AAAA,MACN,MAAM;AAAA,IACR;AAAA;AAAA,IAEA,UAAU;AAAA,MACR,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA,IACA,WAAW;AAAA,MACT,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA;AAAA,IAEA,cAAc;AAAA,MACZ,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA;AAAA,IAEA,SAAS;AAAA,MACP,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA,IACA,WAAW;AAAA,MACT,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA;AAAA,IAEA,iBAAiB;AAAA,MACf,MAAM;AAAA,IACR;AAAA,IACA,eAAe;AAAA,MACb,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA,IACA,mBAAmB;AAAA,MACjB,MAAM;AAAA,IACR;AAAA,IACA,iBAAiB;AAAA,MACf,MAAM;AAAA,IACR;AAAA;AAAA,IAEA,UAAU;AAAA,MACR,MAAM;AAAA,IACR;AAAA,IACA,UAAU;AAAA,MACR,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA;AAAA,IAEA,WAAW;AAAA,MACT,MAAM;AAAA,IACR;AAAA,IACA,OAAO;AAAA,MACL,MAAM;AAAA,IACR;AAAA,IACA,MAAM;AAAA,MACJ,MAAM;AAAA,IACR;AAAA,IACA,OAAO;AAAA,MACL,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA,IACA,SAAS;AAAA,MACP,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA,IACA,OAAO,EAAE,MAAM,SAAkB;AAAA,IACjC,GAAG,EAAE,MAAM,SAAkB;AAAA,IAC7B,MAAM,EAAE,MAAM,SAAkB;AAAA,IAChC,QAAQ,EAAE,MAAM,SAAkB;AAAA;AAAA,IAElC,OAAO;AAAA,MACL,MAAM;AAAA,IACR;AAAA,IACA,UAAU;AAAA,MACR,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA;AAAA,IAEA,OAAO;AAAA,MACL,MAAM;AAAA,IACR;AAAA,IACA,OAAO;AAAA,MACL,MAAM;AAAA,IACR;AAAA;AAAA,IAEA,aAAa;AAAA,MACX,MAAM;AAAA,IACR;AAAA,IACA,cAAc;AAAA,MACZ,MAAM;AAAA,IACR;AAAA;AAAA;AAAA;AAAA;AAAA,IAKA,MAAM,EAAE,MAAM,WAAoB,SAAS,MAAM;AAAA,IACjD,OAAO,EAAE,MAAM,SAAkB;AAAA,IACjC,QAAQ,EAAE,MAAM,SAAkB;AAAA,IAClC,iBAAiB,EAAE,MAAM,WAAoB,SAAS,MAAM;AAAA,IAC5D,KAAK,EAAE,MAAM,SAAkB;AAAA,IAC/B,UAAU,EAAE,MAAM,WAAoB,SAAS,MAAM;AAAA,IACrD,OAAO,EAAE,MAAM,WAAoB,SAAS,MAAM;AAAA,IAClD,QAAQ,EAAE,MAAM,WAAoB,SAAS,MAAM;AAAA,IACnD,QAAQ,EAAE,MAAM,WAAoB,SAAS,MAAM;AAAA,IACnD,kBAAkB,EAAE,MAAM,WAAoB,SAAS,MAAM;AAAA,IAC7D,MAAM,EAAE,MAAM,UAAmB,UAAU,KAAc;AAAA,EAC3D;AAAA,EACA,kBAAkB;AAAA,EAClB,QAAQ;AACV;AAQO,IAAM,iBAAwC;AAAA,EACn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eAAe,OAAoC;AACjE,SAAQ,eAAqC,SAAS,KAAK;AAC7D;;;ACltBA,eAAsB,uBACpB,QAC+C;AAC/C,UAAQ,MAAM,gBAAgB,MAAM,GAAG;AACzC;AAgBA,eAAe,gBAAgB,QAAyC;AACtE,QAAM,gBAAgB,cAAc,EAAE;AACtC,QAAM,MAAM,oBAAoB;AAChC,MAAI,QAAQ,MAAM;AAChB,qBAAiB,QAAQ,aAAa;AACtC,gCAA4B,MAAM;AAClC,WAAO,EAAE,UAAU,QAAW,WAAW,MAAM;AAAA,EACjD;AAIA,QAAM,SAAS,MAAM,oBAAoB,MAAM;AAC/C,MAAI,WAAW,MAAM;AAEnB,gCAA4B,MAAM;AAClC,WAAO,EAAE,UAAU,QAAW,WAAW,MAAM;AAAA,EACjD;AACA,MAAI,CAAC,OAAO,MAAM,OAAO,iBAAiB,yBAAyB;AACjE,sBAAkB,QAAQ,eAAe,OAAO,MAAM,MAAM;AAC5D,gCAA4B,MAAM;AAClC,WAAO,EAAE,UAAU,QAAW,WAAW,MAAM;AAAA,EACjD;AACA,MAAI,CAAC,OAAO,IAAI;AACd,uBAAmB,QAAQ,eAAe,OAAO,MAAM,OAAO;AAC9D,gCAA4B,MAAM;AAClC,WAAO,EAAE,UAAU,QAAW,WAAW,KAAK;AAAA,EAChD;AACA,MAAI,OAAO,MAAM,WAAW,GAAG;AAC7B,qBAAiB,QAAQ,aAAa;AACtC,gCAA4B,MAAM;AAClC,WAAO,EAAE,UAAU,QAAW,WAAW,KAAK;AAAA,EAChD;AAMA,SAAO,KAAK,mCAAmC;AAAA,IAC7C,MAAM,WAAW,IAAI,OAAO;AAAA,IAC5B,YAAY,OAAO,MAAM;AAAA,IACzB,QAAQ,OAAO,MAAM,IAAI,CAAC,MAAM,EAAE,OAAO;AAAA,EAC3C,CAAC;AACD,SAAO,EAAE,UAAU,OAAO,OAAO,WAAW,MAAM;AACpD;AAYA,IAAI,oCAAoC;AAExC,SAAS,4BAA4B,QAAuB;AAC1D,MAAI,kCAAmC;AACvC,sCAAoC;AACpC,SAAO;AAAA,IACL;AAAA,EAIF;AACF;AAGO,SAAS,oCAA0C;AACxD,sCAAoC;AACtC;AAYO,SAAS,2BACd,iBACA,iBACe;AACf,QAAM,UAAU,kBAAkB,CAAC;AACnC,MAAI,YAAY,OAAW,QAAO,gBAAgB,WAAW;AAC7D,QAAM,SAAS,sBAAsB;AACrC,SAAO,OAAO,SAAS,aAAa,OAAO,UAAU;AACvD;AAeO,SAAS,mBACd,UACA,UACA,UAI2B;AAC3B,QAAM,SAAS,SAAS,UAAU;AAClC,MAAI,aAAa,UAAa,SAAS,WAAW,GAAG;AACnD,WAAO,MAAM,wDAAwD;AACrE,WAAO;AAAA,EACT;AACA,QAAM,QAAQ,OAAO,QAAQ;AAC7B,QAAM,YAAY,yBAAyB,QAAQ;AACnD,MAAI,cAAc,UAAa,CAAC,gBAAgB,KAAK,GAAG;AAEtD,WAAO,KAAK,4EAA4E;AAAA,MACtF,QAAQ,aAAa;AAAA,IACvB,CAAC;AACD,WAAO;AAAA,EACT;AACA,WAAS;AAAA,IACP;AAAA,IACA,wBAAwB,OAAO,UAAU;AAAA,MACvC,wBAAwB,oCAAoC;AAAA,MAC5D;AAAA,IACF,CAAC;AAAA,EACH;AAGA;AAAA,IACE;AAAA,IACA,SAAS,IAAI,CAAC,MAAM,EAAE,OAAO;AAAA,EAC/B;AACA,SAAO,KAAK,sCAAsC,EAAE,KAAK,OAAO,YAAY,SAAS,OAAO,CAAC;AAC7F,SAAO;AACT;AAUA,eAAsB,YACpB,QACA,WAAqD,kBAAkB,GACxB;AAC/C,QAAM,EAAE,UAAU,UAAU,IAAI,MAAM,gBAAgB,MAAM;AAC5D,QAAM,WAAW,yBAAyB,QAAQ,KAAK,MAAM;AAC7D,QAAM,eAAe,CAAC,UAAsD;AAC1E,uBAAmB,OAAO,UAAU,QAAQ;AAI5C,QAAI,aAAa,4BAA4B,KAAK,GAAG;AACnD,YAAM,SAAS,kBAAkB;AACjC,UAAI,WAAW,SAAU,oBAAmB,OAAO,UAAU,MAAM;AAAA,IACrE;AAAA,EACF;AACA,eAAa,QAAQ;AACrB,sBAAoB,UAAU,MAAM;AACpC,MAAI,CAAC,UAAW,QAAO;AAOvB,QAAM,OAAwB,CAAC;AAC/B;AAAA,IACE,IAAI,mBAAmB;AAAA,MACrB,QAAQ;AAAA,MACR;AAAA,MACA,UAAU,MAAM,kBAAkB,MAAM;AAAA,MACxC,cAAc,CAAC,UAAU;AACvB,qBAAa,KAAK;AAClB,4BAAoB,OAAO,MAAM;AAAA,MACnC;AAAA,IACF,CAAC;AAAA,EACH;AACA,SAAO;AACT;AAOA,SAAS,oBACP,UACA,QACM;AACN,wBAAsB,YAAY,CAAC,CAAC;AACpC,wBAAsB,MAAM;AAC9B;AAQA,eAAe,kBACb,QAC2D;AAC3D,QAAM,SAAS,MAAM,0BAA0B,MAAM;AACrD,MAAI,WAAW,KAAM,QAAO;AAC5B,MAAI,CAAC,OAAO,MAAM,OAAO,iBAAiB,yBAAyB;AAGjE,sBAAkB,QAAQ,OAAO,OAAO,MAAM,MAAM;AACpD,WAAO;AAAA,EACT;AACA,MAAI,CAAC,OAAO,IAAI;AACd,WAAO,KAAK,+DAA+D;AAAA,MACzE,OAAO,OAAO,MAAM;AAAA,IACtB,CAAC;AACD,WAAO;AAAA,EACT;AACA,SAAO,OAAO;AAChB;AAEA,SAAS,iBAAiB,QAAiB,eAA8B;AACvE,MAAI,eAAe;AACjB,WAAO;AAAA,MACL;AAAA,MAGA,IAAI,MAAM,+CAA+C;AAAA,IAC3D;AACA,YAAQ,KAAK,WAAW,mBAAmB;AAAA,EAC7C;AACA,SAAO;AACT;AAEA,SAAS,mBAAmB,QAAiB,eAAwB,QAAsB;AACzF,MAAI,eAAe;AACjB,WAAO;AAAA,MACL;AAAA,MACA,IAAI,MAAM,MAAM;AAAA,IAClB;AACA,YAAQ,KAAK,WAAW,mBAAmB;AAAA,EAC7C;AACA,SAAO,KAAK,wEAAwE;AAAA,IAClF,OAAO;AAAA,EACT,CAAC;AACD,SAAO;AACT;AAOA,SAAS,kBACP,QACA,eACA,QACM;AACN,QAAM,UACJ,gBAAgB,OAAO,IAAI,2IAE3B,OAAO;AACT,MAAI,eAAe;AACjB,WAAO,MAAM,SAAS,IAAI,MAAM,OAAO,MAAM,CAAC;AAC9C,YAAQ,KAAK,WAAW,mBAAmB;AAAA,EAC7C;AACA,SAAO,KAAK,SAAS,EAAE,MAAM,OAAO,MAAM,QAAQ,OAAO,OAAO,CAAC;AACnE;AAEA,SAAS,iBAAiB,QAAiB,eAA8B;AACvE,MAAI,eAAe;AACjB,WAAO;AAAA,MACL;AAAA,MACA,IAAI,MAAM,6BAA6B;AAAA,IACzC;AACA,YAAQ,KAAK,WAAW,mBAAmB;AAAA,EAC7C;AACA,SAAO,KAAK,uDAAuD;AACnE,SAAO;AACT;","names":[]}

package/dist/{chunk-23QA6GQD.js → chunk-66BE4KF4.js} RENAMED Viewed

@@ -1,12 +1,12 @@
 import {
   generateHyphenId
-} from "./chunk-GAX75XCV.js";
+} from "./chunk-2BZXKNLN.js";
 import {
   getDefaultCliCircuitBreakerRegistry
-} from "./chunk-SX2XWCGA.js";
+} from "./chunk-V6AJCRAU.js";
 import {
   sanitizeOutput
-} from "./chunk-QM5W3T3O.js";
+} from "./chunk-PZMODRBC.js";
 import {
   CLI_VERSION_REQUIREMENTS,
   DEFAULT_CAPABILITIES,
@@ -47,10 +47,10 @@ import {
   servesListedModel,
   unenforcedAccessModeRefusal,
   withEnforcedAccessMode
-} from "./chunk-WKFPKPEM.js";
+} from "./chunk-GPRYEKAA.js";
 import {
   parseBoolValue
-} from "./chunk-LWOX65CP.js";
+} from "./chunk-CH6IBWXH.js";
 import {
   CLI_SUBPROCESS_TIMEOUTS,
   CLI_TIMEOUTS,
@@ -290,7 +290,7 @@ var BaseCliAdapter = class {
   }
   /** Local CLI auth evidence from the canonical probe; makes no live API call. */
   async authStatus() {
-    const { probeCli } = await import("./cli-auth-probe-A7ANEHJ7.js");
+    const { probeCli } = await import("./cli-auth-probe-GUK3NXW3.js");
     return probeCli(this.name);
   }
   /** Unmeasured by default; live opt-in delegates to the bounded completion probe. */
@@ -1960,4 +1960,4 @@ export {
   IN_FAMILY_FALLBACK_OPTION,
   ClaudeCliAdapter
 };
-//# sourceMappingURL=chunk-23QA6GQD.js.map
+//# sourceMappingURL=chunk-66BE4KF4.js.map

package/dist/{chunk-TDUXUVUU.js → chunk-6LWUJOAS.js} RENAMED Viewed

@@ -7,7 +7,7 @@ import {
   getAdaptiveBonus,
   getOutcomeStore,
   hasMeasuredCategory
-} from "./chunk-WKFPKPEM.js";
+} from "./chunk-GPRYEKAA.js";
 import {
   TASK_CATEGORIES
 } from "./chunk-4PN3UVZV.js";
@@ -150,4 +150,4 @@ export {
   runDeepDiagnostics,
   formatDeepDiagnostics
 };
-//# sourceMappingURL=chunk-TDUXUVUU.js.map
+//# sourceMappingURL=chunk-6LWUJOAS.js.map

package/dist/{chunk-XDUTAUK3.js → chunk-7H3SOL4O.js} RENAMED Viewed

@@ -5,7 +5,7 @@ import {
 } from "./chunk-WDAND5YU.js";
 import {
   executeExpert
-} from "./chunk-GX5ZHZR2.js";
+} from "./chunk-QARJHIQM.js";
 import {
   JobStatusSchema,
   RawFindingSchema,
@@ -58,11 +58,11 @@ import {
   updateStage,
   withFileLock,
   writeJobCancelled
-} from "./chunk-2TA6KTRF.js";
+} from "./chunk-OJ3PXTN3.js";
 import {
   normalizeTopicToCanonical,
   synthesizeResearch
-} from "./chunk-FNHVTDHZ.js";
+} from "./chunk-R75NZRON.js";
 import {
   IssueTriage,
   createAuditTrail,
@@ -71,13 +71,13 @@ import {
   createGraphAuditBridge,
   emitPipelinePolicyEvent,
   readActionRefusal
-} from "./chunk-SS53PZO6.js";
+} from "./chunk-EFZRQ67X.js";
 import {
   sanitizeInput
-} from "./chunk-V26YQQK4.js";
+} from "./chunk-I7VX7JWV.js";
 import {
   withPrerequisite
-} from "./chunk-J44RKRGQ.js";
+} from "./chunk-AFJE7K6Q.js";
 import {
   NOOP_NOTIFIER,
   RateLimiter,
@@ -105,10 +105,10 @@ import {
   toolSuccess,
   withProgressHeartbeat,
   wrapToolWithTimeout
-} from "./chunk-LP5ISXKM.js";
+} from "./chunk-SFWQ72ZS.js";
 import {
   generateSecurityPlan
-} from "./chunk-JGY5HMWI.js";
+} from "./chunk-7HHXY7LM.js";
 import {
   analyzeGitHubRepo
 } from "./chunk-4GDMHCKX.js";
@@ -152,18 +152,18 @@ import {
   parseRegistry,
   sourceExistsInRegistry,
   summarizeContextForPrompt
-} from "./chunk-VLOPXV47.js";
+} from "./chunk-53XY7YJD.js";
 import {
   REGISTRY_PATH,
   getProjectRoot,
   loadPapersRegistry,
   loadTechniquesRegistry,
   resolveRegistryRoot
-} from "./chunk-4JJI34RV.js";
+} from "./chunk-S6XQFO4A.js";
 import {
   getTokenEnvVars,
   resolveToken
-} from "./chunk-7EV3QAKO.js";
+} from "./chunk-HUYVIUF3.js";
 import {
   DEFAULT_RELEVANCE_CONFIG,
   MemoryImportance,
@@ -171,7 +171,7 @@ import {
   calculateTextJaccardSimilarity,
   getToolMemory,
   memoryTrustTierTag
-} from "./chunk-FWQSOPBA.js";
+} from "./chunk-YOT3XEZM.js";
 import {
   EXTERNAL_CONTENT_TRUST_TIER,
   resolveContentTrustProvenance,
@@ -187,7 +187,7 @@ import {
 import {
   DEFAULT_TASK_TTL_MS,
   clampTaskTtl
-} from "./chunk-OMSKBBL7.js";
+} from "./chunk-377L2ZEK.js";
 import {
   allOf,
   anyOf
@@ -196,37 +196,35 @@ import {
   VERSION,
   createRequestContext,
   measuredTrustTier
-} from "./chunk-WD4DENPC.js";
-import {
-  EventTopics,
-  createEvent,
-  getGlobalEventBus,
-  getGlobalRegistry
-} from "./chunk-UZJ6IPJR.js";
+} from "./chunk-B3RAA47W.js";
 import {
   BWRAP_READ_ONLY_ARGS,
   CliDetectionCache,
+  EventTopics,
   createBwrapPreflight,
+  createEvent,
   extractRequestSystemPrompt,
   getAvailableClis,
+  getGlobalEventBus,
+  getGlobalRegistry,
   isAbsentSeat
-} from "./chunk-QRC3QLUQ.js";
+} from "./chunk-PY6HJQYC.js";
 import {
   ensureGatewayDiscovered,
   getAvailabilityCache,
   getCliForModelId,
   resolveFallback
-} from "./chunk-LXYT2P2Y.js";
+} from "./chunk-IGYZQEKM.js";
 import {
   DEFAULTS
-} from "./chunk-XSAUVC6D.js";
+} from "./chunk-NLFCAEEK.js";
 import {
   DEFAULT_EXECUTION_MODE,
   DEFAULT_TOOL_RATE_LIMITS
 } from "./chunk-TYLE7Z2S.js";
 import {
   getNexusTmpDir
-} from "./chunk-JPFRRNRR.js";
+} from "./chunk-U7HL7FGS.js";
 import {
   BaseAdapter,
   createStream,
@@ -234,10 +232,10 @@ import {
   parseGatewayExtraHeaders,
   requireApiKey,
   validateApiKeyPresence
-} from "./chunk-KLSNDPU6.js";
+} from "./chunk-SKM75Y7E.js";
 import {
   createSessionMemory
-} from "./chunk-QS5HGPCN.js";
+} from "./chunk-VZ7YZ2EF.js";
 import {
   TrustTierSchema
 } from "./chunk-CJKHQ6MV.js";
@@ -251,17 +249,17 @@ import {
   terminateProcessTree,
   trackProcessTree,
   withTimeout
-} from "./chunk-23QA6GQD.js";
+} from "./chunk-66BE4KF4.js";
 import {
   generateHyphenId,
   generateUUID
-} from "./chunk-GAX75XCV.js";
+} from "./chunk-2BZXKNLN.js";
 import {
   getDefaultCliCircuitBreakerRegistry
-} from "./chunk-SX2XWCGA.js";
+} from "./chunk-V6AJCRAU.js";
 import {
   sanitizeErrorDetails
-} from "./chunk-QM5W3T3O.js";
+} from "./chunk-PZMODRBC.js";
 import {
   ARCHITECTURE_KEYWORDS,
   AUTHORITY_TIERS,
@@ -351,6 +349,7 @@ import {
   isBanditInterceptFeature,
   isCliName,
   isDisabledSlotUnserved,
+  isEndpointArmId,
   isErr,
   isRateLimitLikeError,
   isTimeoutAbortReason,
@@ -371,7 +370,7 @@ import {
   resolveModelIdentitySync,
   resolveOutcomeCategory,
   resolveOwnerCli,
-  routingArmDisplaySlot,
+  routingArmCliSlot,
   runInHeartbeatSession,
   selectStrategyByManifest,
   serializeValidatedRecord,
@@ -380,7 +379,7 @@ import {
   toExpertTaskAnalysisResult,
   truncateWithInfo,
   withStep
-} from "./chunk-WKFPKPEM.js";
+} from "./chunk-GPRYEKAA.js";
 import {
   SUPPORTED_EXTENSIONS
 } from "./chunk-XBEKMUTO.js";
@@ -388,7 +387,7 @@ import {
   ensureLearningDir,
   getMetaOutcomesFile,
   isPersistenceEnabled
-} from "./chunk-UE7A2XHM.js";
+} from "./chunk-RUHKJC3X.js";
 import {
   findRepoRoot,
   getActiveWorkspaceRoot,
@@ -398,7 +397,7 @@ import {
   nexusDataPathEnsure,
   parseBoolEnv,
   setActiveWorkspaceRoot
-} from "./chunk-LWOX65CP.js";
+} from "./chunk-CH6IBWXH.js";
 import {
   AGENT_ROUTER_TIMEOUTS,
   API_TIMEOUTS,
@@ -607,6 +606,8 @@ var NexusEnvSchema = z.object({
   NEXUS_CUSTOM_API_SURFACE: z.string().refine((v) => ["", "chat", "responses"].includes(v.trim().toLowerCase()), {
     message: "Must be one of: responses, chat"
   }).optional(),
+  // #7151 OPTION B: endpoint router arms are opt-in in every billing mode.
+  NEXUS_ROUTE_GATEWAY_ARMS: boolLooseStr.optional(),
   // #6604: pin the gateway model a family slot (claude/codex/gemini) uses.
   // Any model id is legal here; the one reader (adapters/gateway-family-slots.ts)
   // validates it against the discovered catalogue and warns on a miss.
@@ -1152,7 +1153,7 @@ import { z as z3 } from "zod";
 var AdapterConfigSchema = z3.object({
   /** Provider identifier (e.g., 'anthropic', 'openai') */
   providerId: z3.string().min(1, "Provider ID is required"),
-  /** Model identifier (e.g., 'claude-sonnet-4', 'gpt-4o') */
+  /** Model identifier (e.g., 'claude-sonnet-4', 'gpt-4o-2024-11-20') */
   modelId: z3.string().min(1, "Model ID is required"),
   /** API key for authentication (optional, may come from environment) */
   apiKey: z3.string().optional(),
@@ -29750,7 +29751,7 @@ function execIdFields(executionId) {
 async function populateUnifiedContextOnState(state, options) {
   const taskCandidate = state["task"];
   if (typeof taskCandidate !== "string" || taskCandidate === "") return;
-  const { getContextForTask: getContextForTask2, inferTaskCategory: inferTaskCategory2 } = await import("./context-retriever-HVPLM6DH.js");
+  const { getContextForTask: getContextForTask2, inferTaskCategory: inferTaskCategory2 } = await import("./context-retriever-P6ZE6UXS.js");
   const category = inferTaskCategory2(taskCandidate);
   const executionId = options?.executionId;
   const execFields = execIdFields(executionId);
@@ -37175,18 +37176,25 @@ var DEFAULT_CAPABILITIES2 = {
   cost: 6
 };
 function mapCompositeDecisionToOutput(decision, estimatedTokens) {
-  const modelName = decision.model ?? cliNameToModel(routingArmDisplaySlot(decision.cliName));
-  const caps = MODEL_CAPABILITIES2[modelName] ?? DEFAULT_CAPABILITIES2;
+  const slot = routingArmCliSlot(decision.cliName);
+  const endpoint = slot === void 0 && isEndpointArmId(decision.cliName);
+  const modelName = endpoint ? decision.adapter.getModelInfo().id : decision.model ?? (slot === void 0 ? decision.cliName : cliNameToModel(slot));
+  const caps = endpoint ? decision.adapter.capabilities : MODEL_CAPABILITIES2[modelName] ?? DEFAULT_CAPABILITIES2;
   return {
     recommended_model: modelName,
     reasoning: decision.reason,
     capabilities: caps,
     estimated_tokens: estimatedTokens,
-    alternatives: decision.alternatives.slice(0, 3).map((alt) => describeAlternative(alt, decision, caps))
+    // A decision has only the winner's adapter. Endpoint alternatives cannot
+    // be resolved here, so omit them instead of inventing an OpenCode model.
+    alternatives: decision.alternatives.flatMap((alt) => {
+      const altSlot = routingArmCliSlot(alt);
+      return altSlot === void 0 ? [] : [describeAlternative(alt, altSlot, decision, caps)];
+    }).slice(0, 3)
   };
 }
-function describeAlternative(alt, decision, bestCaps) {
-  const model = cliNameToModel(routingArmDisplaySlot(alt));
+function describeAlternative(alt, slot, decision, bestCaps) {
+  const model = cliNameToModel(slot);
   const altCaps = MODEL_CAPABILITIES2[model] ?? DEFAULT_CAPABILITIES2;
   const ranked = decision.alternativeScores?.get(alt);
   if (ranked !== void 0) {
@@ -46252,7 +46260,7 @@ async function tryIssueTriage(task) {
   try {
     const issueMatch = task.match(/github\.com\/([^/]+\/[^/]+)\/issues\/(\d+)/);
     if (issueMatch === null) return null;
-    const { createIssueTriage } = await import("./issue-triage-YBVJVAUU.js");
+    const { createIssueTriage } = await import("./issue-triage-BLZHWC6U.js");
     const triage = createIssueTriage();
     const owner = issueMatch[1] ?? "";
     const num2 = issueMatch[2] ?? "";
@@ -46280,7 +46288,7 @@ var VALID_TEMPLATES = /* @__PURE__ */ new Set([
 ]);
 async function classifyWithLLM(task) {
   try {
-    const { executeExpert: executeExpert2 } = await import("./expert-bridge-O3UZXLGB.js");
+    const { executeExpert: executeExpert2 } = await import("./expert-bridge-3VWOHLC7.js");
     const prompt = [
       "Classify this task into exactly one pipeline template.",
       "Templates: dev (implementation/bug fix/refactor), research (investigate/evaluate/compare),",
@@ -46649,7 +46657,7 @@ function buildVotingInput(plan, config) {
 }
 async function executeSingleVote(plan, config, log) {
   try {
-    const { executeVoting } = await import("./consensus-vote-RNQQUBXO.js");
+    const { executeVoting } = await import("./consensus-vote-JMWTJO4M.js");
     const input = buildVotingInput(plan, config);
     const result = await executeVoting(input, log);
     return parseVotingResult(result);
@@ -48168,8 +48176,8 @@ var memoryInitPromise = null;
 async function initPipelineMemory() {
   if (cachedMemory !== null) return cachedMemory;
   try {
-    const { createSessionMemory: createSessionMemory2 } = await import("./session-memory-4LMEWO3X.js");
-    const { getLearningDir } = await import("./learning-persistence-FB4U5AX2.js");
+    const { createSessionMemory: createSessionMemory2 } = await import("./session-memory-YVT5M4AN.js");
+    const { getLearningDir } = await import("./learning-persistence-X24OOBYY.js");
     const mem = createSessionMemory2(getLearningDir());
     mem.startSession(`pipeline-${String(getTimeProvider().now())}`);
     cachedMemory = {
@@ -48230,7 +48238,7 @@ function recordRoutingExperience(category, success, durationMs, tokensUsed = 0,
     callRecord(routingMemoryCache);
     return;
   }
-  routingMemoryInitPromise ??= import("./routing-memory-OCIVXKOU.js").then(({ createRoutingMemory }) => {
+  routingMemoryInitPromise ??= import("./routing-memory-TWCXFPAD.js").then(({ createRoutingMemory }) => {
     routingMemoryCache ??= createRoutingMemory();
     return routingMemoryCache;
   }).catch((error) => {
@@ -48449,7 +48457,7 @@ function createVoteStage({ config, startStage }) {
     const strategy = config.votingStrategy ?? "higher_order";
     await postProgress(config, "Vote", `Running consensus with ${strategy} strategy...`);
     try {
-      const { executeVoting } = await import("./consensus-vote-RNQQUBXO.js");
+      const { executeVoting } = await import("./consensus-vote-JMWTJO4M.js");
       const proposal = buildVoteProposal(plan, research);
       const votingResult = await executeVoting(
         {
@@ -49256,7 +49264,7 @@ ${text}` : "";
 }
 async function getWeatherContext() {
   try {
-    const { generateWeatherReport: generateWeatherReport2 } = await import("./weather-report-PMYQ3WBW.js");
+    const { generateWeatherReport: generateWeatherReport2 } = await import("./weather-report-KA5RT57Q.js");
     const report = generateWeatherReport2({ includeAdaptive: true });
     const mappings = "recommendedMappings" in report ? report.recommendedMappings : [];
     if (!Array.isArray(mappings) || mappings.length === 0) return "";
@@ -49274,8 +49282,8 @@ ${lines}
 }
 async function getMemoryContext(task) {
   try {
-    const { createSessionMemory: createSessionMemory2 } = await import("./session-memory-4LMEWO3X.js");
-    const { getLearningDir } = await import("./learning-persistence-FB4U5AX2.js");
+    const { createSessionMemory: createSessionMemory2 } = await import("./session-memory-YVT5M4AN.js");
+    const { getLearningDir } = await import("./learning-persistence-X24OOBYY.js");
     const memory = createSessionMemory2(getLearningDir(), { maxLearningsInContext: 10 });
     const learnings = memory.searchLearnings(task.slice(0, 200));
     if (learnings.length === 0) return "";
@@ -49991,7 +49999,7 @@ async function searchCodebaseForTask(task) {
 }
 async function queryResearchRegistry(task) {
   try {
-    const { synthesizeResearch: synthesizeResearch2 } = await import("./research-helpers-synthesize-X6MVAAKT.js");
+    const { synthesizeResearch: synthesizeResearch2 } = await import("./research-helpers-synthesize-SXNAJWHX.js");
     const topic = task.split(/[.!?\n]/).filter((s) => s.trim().length > 10)[0]?.trim();
     if (topic === void 0) return null;
     const result = await synthesizeResearch2(topic.slice(0, 50));
@@ -50062,7 +50070,7 @@ function createScanStageWrapper() {
       try {
         const slug = ctx.task.match(/([a-zA-Z0-9._-]+\/[a-zA-Z0-9._-]+)/)?.[1];
         if (slug !== void 0) {
-          const { generateSecurityPlan: generateSecurityPlan2 } = await import("./repo-security-plan-LFWLVEL2.js");
+          const { generateSecurityPlan: generateSecurityPlan2 } = await import("./repo-security-plan-SOFUCHO4.js");
           const plan = await generateSecurityPlan2({ repo: slug, maxScanners: 10 });
           const recs = plan.recommendations.slice(0, 5).map((r) => `${r.priority}: ${r.displayName} (${r.category})`).join("; ");
           return output(PIPELINE_STATE_KEYS.FINDINGS, recs, getTimeProvider().now() - start, true);
@@ -53988,7 +53996,7 @@ var GitHubTaskTracker = class {
   cachedProvider = null;
   async getProvider() {
     if (this.cachedProvider !== null) return this.cachedProvider;
-    const { createScmProvider } = await import("./factory-LUKUIB6C.js");
+    const { createScmProvider } = await import("./factory-YPJXDMN4.js");
     const result = await createScmProvider({ repo: this.config.repo ?? "" });
     if (!result.ok) throw new Error(`SCM provider error: ${result.error.message}`);
     this.cachedProvider = result.value;
@@ -55035,7 +55043,7 @@ function withCatalogueCaveat(report) {
 var GATEWAY_TRANSPORT = "gateway";
 var GATEWAY_API_ARM = "api:custom-openai";
 async function gatewaySource(apiArm) {
-  const { discoverModels, readOpenAICompatEnv } = await import("./openai-compat-adapter-GPZDIR3D.js");
+  const { discoverModels, readOpenAICompatEnv } = await import("./openai-compat-adapter-GRJA6RPZ.js");
   const config = readOpenAICompatEnv();
   if (config !== null) {
     return {
@@ -55054,7 +55062,7 @@ async function gatewaySource(apiArm) {
 }
 async function defaultSources(includeOpenRouter, adaptersFactory) {
   const adapters = new Map(
-    adaptersFactory !== void 0 ? adaptersFactory() : (await import("./factory-KCKQQAEH.js")).createAllAdapters()
+    adaptersFactory !== void 0 ? adaptersFactory() : (await import("./factory-A44THDRG.js")).createAllAdapters()
   );
   const apiArm = adapters.get(GATEWAY_API_ARM);
   adapters.delete(GATEWAY_API_ARM);
@@ -58411,4 +58419,4 @@ export {
   initializeSandbox,
   getSandboxMode
 };
-//# sourceMappingURL=chunk-XDUTAUK3.js.map
+//# sourceMappingURL=chunk-7H3SOL4O.js.map