nexus-agents 11.1.4 → 11.1.5

package/dist/{ast-rule-runner-DV7BPCPY.js → ast-rule-runner-UEWL3YQZ.js}

@@ -9,12 +9,18 @@ import {
   getBuiltInAstRulesPath,
   loadRules,
   runAstQaRules
-} from "./chunk-7TP54NKY.js";
-import "./chunk-UO6AQXTT.js";
+} from "./chunk-KUT24IWT.js";
+import "./chunk-S4SQYXVK.js";
 import "./chunk-XBEKMUTO.js";
+import "./chunk-VJZRLJYD.js";
+import "./chunk-BLJIQS7C.js";
 import "./chunk-RUHKJC3X.js";
+import "./chunk-UFAK5UGH.js";
+import "./chunk-GR6WCJWY.js";
 import "./chunk-CH6IBWXH.js";
-import "./chunk-4PN3UVZV.js";
+import "./chunk-6TBRXZY7.js";
+import "./chunk-SYTFRVWX.js";
+import "./chunk-MTN5VMBX.js";
 import "./chunk-PX6F3LHL.js";
 export {
   AST_RULE_LANGUAGES,
@@ -28,4 +34,4 @@ export {
   loadRules,
   runAstQaRules
 };
-//# sourceMappingURL=ast-rule-runner-DV7BPCPY.js.map
+//# sourceMappingURL=ast-rule-runner-UEWL3YQZ.js.map

package/dist/{child-mcp-config-VF2A6G5A.js → child-mcp-config-K6JDLQLF.js}

@@ -1,13 +1,19 @@
 import {
   nexusMkdtempSync
 } from "./chunk-U7HL7FGS.js";
-import {
-  createLogger
-} from "./chunk-UO6AQXTT.js";
+import "./chunk-S4SQYXVK.js";
 import "./chunk-XBEKMUTO.js";
+import "./chunk-VJZRLJYD.js";
+import "./chunk-BLJIQS7C.js";
 import "./chunk-RUHKJC3X.js";
+import "./chunk-UFAK5UGH.js";
+import {
+  createLogger
+} from "./chunk-GR6WCJWY.js";
 import "./chunk-CH6IBWXH.js";
-import "./chunk-4PN3UVZV.js";
+import "./chunk-6TBRXZY7.js";
+import "./chunk-SYTFRVWX.js";
+import "./chunk-MTN5VMBX.js";
 import "./chunk-PX6F3LHL.js";
 
 // src/cli-adapters/child-mcp-config.ts
@@ -75,4 +81,4 @@ async function generateMcpConfig(options) {
 export {
   generateMcpConfig
 };
-//# sourceMappingURL=child-mcp-config-VF2A6G5A.js.map
+//# sourceMappingURL=child-mcp-config-K6JDLQLF.js.map

package/dist/{child-mcp-config-VF2A6G5A.js.map → child-mcp-config-K6JDLQLF.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/cli-adapters/child-mcp-config.ts"],"sourcesContent":["/**\n * nexus-agents/cli-adapters - Child CLI MCP Config Generator\n *\n * Generates MCP server configuration for child Claude CLI sessions so\n * spawned agents can call back into nexus-agents' MCP tools (memory,\n * research, etc.). Used by `pipeline/expert-bridge.ts` to give expert\n * agents tool access. Originally lived under `swe-bench/` (#1413);\n * relocated here in #2515 — the helper is generic CLI-spawn\n * infrastructure, not benchmark-specific.\n *\n * The generated config grants NO tool approvals. It only tells the child\n * where the nexus-agents MCP server is; whether an expert may actually call\n * one of its tools follows the host's Claude permission settings (for\n * example `defaultMode`). Measured 2026-09-24: in auto mode the calls run,\n * in default mode they are refused (#6784). An unused `allowedTools` list\n * that read like a guard but was never passed to the CLI was removed then.\n *\n * @module cli-adapters/child-mcp-config\n */\n\nimport { rm } from 'node:fs/promises';\nimport { rmSync, writeFileSync } from 'node:fs';\nimport { nexusMkdtempSync } from '../config/nexus-tmp-dir.js';\nimport { join } from 'node:path';\nimport { createLogger } from '../core/index.js';\n\nconst logger = createLogger({ component: 'swe-bench-mcp-config' });\n\n// Async finally blocks cannot run after process.exit (#4631). One listener\n// covers concurrent configs; SIGKILL cannot execute any in-process cleanup.\nconst activeMcpDirs = new Set<string>();\n\nfunction cleanupOnExit(): void {\n  for (const dir of activeMcpDirs) {\n    try {\n      rmSync(dir, { recursive: true, force: true });\n    } catch (error: unknown) {\n      logger.debug('MCP-config exit cleanup failed', {\n        error: error instanceof Error ? error.message : String(error),\n      });\n    }\n  }\n}\n\n/**\n * MCP server entry in Claude CLI config format.\n */\ninterface McpServerEntry {\n  readonly command: string;\n  readonly args: readonly string[];\n  readonly env?: Readonly<Record<string, string>>;\n}\n\n/**\n * MCP config file format for Claude CLI (--mcp-config).\n */\ninterface McpConfigFile {\n  readonly mcpServers: Readonly<Record<string, McpServerEntry>>;\n}\n\n/**\n * Options for generating MCP config.\n */\nexport interface McpConfigOptions {\n  /** Path to nexus-agents CLI entry point. */\n  readonly cliPath?: string;\n  /** Additional environment variables for the MCP server. */\n  readonly env?: Readonly<Record<string, string>>;\n}\n\n/**\n * Resolves the nexus-agents CLI path.\n * Uses the built dist/cli.js relative to this package.\n */\nfunction resolveCliPath(override?: string): string {\n  if (override !== undefined) return override;\n  // Resolve relative to this file: src/swe-bench/ → dist/cli.js\n  // At runtime we're in dist/swe-bench/, so go up one level\n  const distDir = join(__dirname, '..');\n  return join(distDir, 'cli.js');\n}\n\n/**\n * Env marker naming a child server (#6795). The child's stdio caller is an\n * expert CLI driven by a model, not the operator, so the child must not\n * measure it at tier 1; `connectTransport` reads this and records the caller\n * as unmeasured.\n */\nconst MCP_CHILD_ENV = 'NEXUS_MCP_CHILD';\n\n/**\n * Builds the MCP config object for a nexus-agents server.\n */\nfunction buildConfig(options?: McpConfigOptions): McpConfigFile {\n  const cliPath = resolveCliPath(options?.cliPath);\n\n  const entry: McpServerEntry = {\n    command: 'node',\n    args: [cliPath, '--mode=server'],\n    // The child marker is applied LAST so caller-supplied env cannot unset it.\n    env: { ...options?.env, [MCP_CHILD_ENV]: '1' },\n  };\n\n  return {\n    mcpServers: {\n      'nexus-agents': entry,\n    },\n  };\n}\n\n/**\n * Generated MCP config with path and cleanup function.\n */\nexport interface GeneratedMcpConfig {\n  /** Path to the generated config file. */\n  readonly configPath: string;\n  /** Cleanup function to remove temp files. */\n  readonly cleanup: () => Promise<void>;\n}\n\n/**\n * Generates an MCP config file for Claude CLI child sessions.\n *\n * Creates a temporary JSON file that can be passed to `claude --mcp-config`.\n * Returns the file path and a cleanup function.\n */\nexport async function generateMcpConfig(options?: McpConfigOptions): Promise<GeneratedMcpConfig> {\n  const config = buildConfig(options);\n\n  // Creation and exit registration must occur in one turn: async mkdtemp\n  // can finish in its worker before JS can register cleanup (#4631).\n  const tempDir = nexusMkdtempSync('nexus-mcp-');\n  const configPath = join(tempDir, 'mcp-config.json');\n\n  if (activeMcpDirs.size === 0) process.on('exit', cleanupOnExit);\n  activeMcpDirs.add(tempDir);\n\n  const cleanup = async (): Promise<void> => {\n    try {\n      await rm(tempDir, { recursive: true, force: true });\n      activeMcpDirs.delete(tempDir);\n      if (activeMcpDirs.size === 0) process.removeListener('exit', cleanupOnExit);\n    } catch (e: unknown) {\n      logger.debug('Best-effort cleanup failed', {\n        error: e instanceof Error ? e.message : String(e),\n      });\n    }\n  };\n\n  try {\n    // An async open can create the file after exit cleanup lists an empty\n    // directory, making its rmdir fail with ENOTEMPTY (#7121).\n    writeFileSync(configPath, JSON.stringify(config, null, 2), 'utf-8');\n    return { configPath, cleanup };\n  } catch (error: unknown) {\n    await cleanup();\n    throw error;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;AAoBA,SAAS,UAAU;AACnB,SAAS,QAAQ,qBAAqB;AAEtC,SAAS,YAAY;AAGrB,IAAM,SAAS,aAAa,EAAE,WAAW,uBAAuB,CAAC;AAIjE,IAAM,gBAAgB,oBAAI,IAAY;AAEtC,SAAS,gBAAsB;AAC7B,aAAW,OAAO,eAAe;AAC/B,QAAI;AACF,aAAO,KAAK,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,IAC9C,SAAS,OAAgB;AACvB,aAAO,MAAM,kCAAkC;AAAA,QAC7C,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,MAC9D,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAgCA,SAAS,eAAe,UAA2B;AACjD,MAAI,aAAa,OAAW,QAAO;AAGnC,QAAM,UAAU,KAAK,WAAW,IAAI;AACpC,SAAO,KAAK,SAAS,QAAQ;AAC/B;AAQA,IAAM,gBAAgB;AAKtB,SAAS,YAAY,SAA2C;AAC9D,QAAM,UAAU,eAAe,SAAS,OAAO;AAE/C,QAAM,QAAwB;AAAA,IAC5B,SAAS;AAAA,IACT,MAAM,CAAC,SAAS,eAAe;AAAA;AAAA,IAE/B,KAAK,EAAE,GAAG,SAAS,KAAK,CAAC,aAAa,GAAG,IAAI;AAAA,EAC/C;AAEA,SAAO;AAAA,IACL,YAAY;AAAA,MACV,gBAAgB;AAAA,IAClB;AAAA,EACF;AACF;AAkBA,eAAsB,kBAAkB,SAAyD;AAC/F,QAAM,SAAS,YAAY,OAAO;AAIlC,QAAM,UAAU,iBAAiB,YAAY;AAC7C,QAAM,aAAa,KAAK,SAAS,iBAAiB;AAElD,MAAI,cAAc,SAAS,EAAG,SAAQ,GAAG,QAAQ,aAAa;AAC9D,gBAAc,IAAI,OAAO;AAEzB,QAAM,UAAU,YAA2B;AACzC,QAAI;AACF,YAAM,GAAG,SAAS,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAClD,oBAAc,OAAO,OAAO;AAC5B,UAAI,cAAc,SAAS,EAAG,SAAQ,eAAe,QAAQ,aAAa;AAAA,IAC5E,SAAS,GAAY;AACnB,aAAO,MAAM,8BAA8B;AAAA,QACzC,OAAO,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC;AAAA,MAClD,CAAC;AAAA,IACH;AAAA,EACF;AAEA,MAAI;AAGF,kBAAc,YAAY,KAAK,UAAU,QAAQ,MAAM,CAAC,GAAG,OAAO;AAClE,WAAO,EAAE,YAAY,QAAQ;AAAA,EAC/B,SAAS,OAAgB;AACvB,UAAM,QAAQ;AACd,UAAM;AAAA,EACR;AACF;","names":[]}
+{"version":3,"sources":["../src/cli-adapters/child-mcp-config.ts"],"sourcesContent":["/**\n * nexus-agents/cli-adapters - Child CLI MCP Config Generator\n *\n * Generates MCP server configuration for child Claude CLI sessions so\n * spawned agents can call back into nexus-agents' MCP tools (memory,\n * research, etc.). Used by `pipeline/expert-bridge.ts` to give expert\n * agents tool access. Originally lived under `swe-bench/` (#1413);\n * relocated here in #2515 — the helper is generic CLI-spawn\n * infrastructure, not benchmark-specific.\n *\n * The generated config grants NO tool approvals. It only tells the child\n * where the nexus-agents MCP server is; whether an expert may actually call\n * one of its tools follows the host's Claude permission settings (for\n * example `defaultMode`). Measured 2026-09-24: in auto mode the calls run,\n * in default mode they are refused (#6784). An unused `allowedTools` list\n * that read like a guard but was never passed to the CLI was removed then.\n *\n * @module cli-adapters/child-mcp-config\n */\n\nimport { rm } from 'node:fs/promises';\nimport { rmSync, writeFileSync } from 'node:fs';\nimport { nexusMkdtempSync } from '../config/nexus-tmp-dir.js';\nimport { join } from 'node:path';\nimport { createLogger } from '../core/index.js';\n\nconst logger = createLogger({ component: 'swe-bench-mcp-config' });\n\n// Async finally blocks cannot run after process.exit (#4631). One listener\n// covers concurrent configs; SIGKILL cannot execute any in-process cleanup.\nconst activeMcpDirs = new Set<string>();\n\nfunction cleanupOnExit(): void {\n  for (const dir of activeMcpDirs) {\n    try {\n      rmSync(dir, { recursive: true, force: true });\n    } catch (error: unknown) {\n      logger.debug('MCP-config exit cleanup failed', {\n        error: error instanceof Error ? error.message : String(error),\n      });\n    }\n  }\n}\n\n/**\n * MCP server entry in Claude CLI config format.\n */\ninterface McpServerEntry {\n  readonly command: string;\n  readonly args: readonly string[];\n  readonly env?: Readonly<Record<string, string>>;\n}\n\n/**\n * MCP config file format for Claude CLI (--mcp-config).\n */\ninterface McpConfigFile {\n  readonly mcpServers: Readonly<Record<string, McpServerEntry>>;\n}\n\n/**\n * Options for generating MCP config.\n */\nexport interface McpConfigOptions {\n  /** Path to nexus-agents CLI entry point. */\n  readonly cliPath?: string;\n  /** Additional environment variables for the MCP server. */\n  readonly env?: Readonly<Record<string, string>>;\n}\n\n/**\n * Resolves the nexus-agents CLI path.\n * Uses the built dist/cli.js relative to this package.\n */\nfunction resolveCliPath(override?: string): string {\n  if (override !== undefined) return override;\n  // Resolve relative to this file: src/swe-bench/ → dist/cli.js\n  // At runtime we're in dist/swe-bench/, so go up one level\n  const distDir = join(__dirname, '..');\n  return join(distDir, 'cli.js');\n}\n\n/**\n * Env marker naming a child server (#6795). The child's stdio caller is an\n * expert CLI driven by a model, not the operator, so the child must not\n * measure it at tier 1; `connectTransport` reads this and records the caller\n * as unmeasured.\n */\nconst MCP_CHILD_ENV = 'NEXUS_MCP_CHILD';\n\n/**\n * Builds the MCP config object for a nexus-agents server.\n */\nfunction buildConfig(options?: McpConfigOptions): McpConfigFile {\n  const cliPath = resolveCliPath(options?.cliPath);\n\n  const entry: McpServerEntry = {\n    command: 'node',\n    args: [cliPath, '--mode=server'],\n    // The child marker is applied LAST so caller-supplied env cannot unset it.\n    env: { ...options?.env, [MCP_CHILD_ENV]: '1' },\n  };\n\n  return {\n    mcpServers: {\n      'nexus-agents': entry,\n    },\n  };\n}\n\n/**\n * Generated MCP config with path and cleanup function.\n */\nexport interface GeneratedMcpConfig {\n  /** Path to the generated config file. */\n  readonly configPath: string;\n  /** Cleanup function to remove temp files. */\n  readonly cleanup: () => Promise<void>;\n}\n\n/**\n * Generates an MCP config file for Claude CLI child sessions.\n *\n * Creates a temporary JSON file that can be passed to `claude --mcp-config`.\n * Returns the file path and a cleanup function.\n */\nexport async function generateMcpConfig(options?: McpConfigOptions): Promise<GeneratedMcpConfig> {\n  const config = buildConfig(options);\n\n  // Creation and exit registration must occur in one turn: async mkdtemp\n  // can finish in its worker before JS can register cleanup (#4631).\n  const tempDir = nexusMkdtempSync('nexus-mcp-');\n  const configPath = join(tempDir, 'mcp-config.json');\n\n  if (activeMcpDirs.size === 0) process.on('exit', cleanupOnExit);\n  activeMcpDirs.add(tempDir);\n\n  const cleanup = async (): Promise<void> => {\n    try {\n      await rm(tempDir, { recursive: true, force: true });\n      activeMcpDirs.delete(tempDir);\n      if (activeMcpDirs.size === 0) process.removeListener('exit', cleanupOnExit);\n    } catch (e: unknown) {\n      logger.debug('Best-effort cleanup failed', {\n        error: e instanceof Error ? e.message : String(e),\n      });\n    }\n  };\n\n  try {\n    // An async open can create the file after exit cleanup lists an empty\n    // directory, making its rmdir fail with ENOTEMPTY (#7121).\n    writeFileSync(configPath, JSON.stringify(config, null, 2), 'utf-8');\n    return { configPath, cleanup };\n  } catch (error: unknown) {\n    await cleanup();\n    throw error;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAoBA,SAAS,UAAU;AACnB,SAAS,QAAQ,qBAAqB;AAEtC,SAAS,YAAY;AAGrB,IAAM,SAAS,aAAa,EAAE,WAAW,uBAAuB,CAAC;AAIjE,IAAM,gBAAgB,oBAAI,IAAY;AAEtC,SAAS,gBAAsB;AAC7B,aAAW,OAAO,eAAe;AAC/B,QAAI;AACF,aAAO,KAAK,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,IAC9C,SAAS,OAAgB;AACvB,aAAO,MAAM,kCAAkC;AAAA,QAC7C,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,MAC9D,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAgCA,SAAS,eAAe,UAA2B;AACjD,MAAI,aAAa,OAAW,QAAO;AAGnC,QAAM,UAAU,KAAK,WAAW,IAAI;AACpC,SAAO,KAAK,SAAS,QAAQ;AAC/B;AAQA,IAAM,gBAAgB;AAKtB,SAAS,YAAY,SAA2C;AAC9D,QAAM,UAAU,eAAe,SAAS,OAAO;AAE/C,QAAM,QAAwB;AAAA,IAC5B,SAAS;AAAA,IACT,MAAM,CAAC,SAAS,eAAe;AAAA;AAAA,IAE/B,KAAK,EAAE,GAAG,SAAS,KAAK,CAAC,aAAa,GAAG,IAAI;AAAA,EAC/C;AAEA,SAAO;AAAA,IACL,YAAY;AAAA,MACV,gBAAgB;AAAA,IAClB;AAAA,EACF;AACF;AAkBA,eAAsB,kBAAkB,SAAyD;AAC/F,QAAM,SAAS,YAAY,OAAO;AAIlC,QAAM,UAAU,iBAAiB,YAAY;AAC7C,QAAM,aAAa,KAAK,SAAS,iBAAiB;AAElD,MAAI,cAAc,SAAS,EAAG,SAAQ,GAAG,QAAQ,aAAa;AAC9D,gBAAc,IAAI,OAAO;AAEzB,QAAM,UAAU,YAA2B;AACzC,QAAI;AACF,YAAM,GAAG,SAAS,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAClD,oBAAc,OAAO,OAAO;AAC5B,UAAI,cAAc,SAAS,EAAG,SAAQ,eAAe,QAAQ,aAAa;AAAA,IAC5E,SAAS,GAAY;AACnB,aAAO,MAAM,8BAA8B;AAAA,QACzC,OAAO,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC;AAAA,MAClD,CAAC;AAAA,IACH;AAAA,EACF;AAEA,MAAI;AAGF,kBAAc,YAAY,KAAK,UAAU,QAAQ,MAAM,CAAC,GAAG,OAAO;AAClE,WAAO,EAAE,YAAY,QAAQ;AAAA,EAC/B,SAAS,OAAgB;AACvB,UAAM,QAAQ;AACd,UAAM;AAAA,EACR;AACF;","names":[]}

package/dist/{chunk-SDGAFACO.js → chunk-25F2TZ7W.js}

@@ -5,7 +5,7 @@ import {
 } from "./chunk-WDAND5YU.js";
 import {
   executeExpert
-} from "./chunk-TZXLHU47.js";
+} from "./chunk-5S5YPIET.js";
 import {
   JobStatusSchema,
   RawFindingSchema,
@@ -58,11 +58,11 @@ import {
   updateStage,
   withFileLock,
   writeJobCancelled
-} from "./chunk-Q5Y3LGXK.js";
+} from "./chunk-FGR5X76Q.js";
 import {
   normalizeTopicToCanonical,
   synthesizeResearch
-} from "./chunk-FITWRS42.js";
+} from "./chunk-WSRFLAXD.js";
 import {
   IssueTriage,
   createAuditTrail,
@@ -71,13 +71,13 @@ import {
   createGraphAuditBridge,
   emitPipelinePolicyEvent,
   readActionRefusal
-} from "./chunk-GOKCPKDZ.js";
+} from "./chunk-LGRJPOE6.js";
 import {
   sanitizeInput
-} from "./chunk-BZJ7SXRH.js";
+} from "./chunk-HQ2SMW4Y.js";
 import {
   withPrerequisite
-} from "./chunk-MX5TGEKS.js";
+} from "./chunk-QUKC5T4A.js";
 import {
   NOOP_NOTIFIER,
   RateLimiter,
@@ -105,10 +105,10 @@ import {
   toolSuccess,
   withProgressHeartbeat,
   wrapToolWithTimeout
-} from "./chunk-ICXSPHHI.js";
+} from "./chunk-KHRUUX22.js";
 import {
   generateSecurityPlan
-} from "./chunk-M2DCIFPW.js";
+} from "./chunk-6ZTMMN2N.js";
 import {
   analyzeGitHubRepo
 } from "./chunk-4GDMHCKX.js";
@@ -152,18 +152,18 @@ import {
   parseRegistry,
   sourceExistsInRegistry,
   summarizeContextForPrompt
-} from "./chunk-ZT7YVYHN.js";
+} from "./chunk-3JGDITTW.js";
 import {
   REGISTRY_PATH,
   getProjectRoot,
   loadPapersRegistry,
   loadTechniquesRegistry,
   resolveRegistryRoot
-} from "./chunk-EDMDLLIW.js";
+} from "./chunk-3ZRZPYDN.js";
 import {
   getTokenEnvVars,
   resolveToken
-} from "./chunk-Y256EPFV.js";
+} from "./chunk-R7L2IEJR.js";
 import {
   DEFAULT_RELEVANCE_CONFIG,
   MemoryImportance,
@@ -171,7 +171,7 @@ import {
   calculateTextJaccardSimilarity,
   getToolMemory,
   memoryTrustTierTag
-} from "./chunk-UORGBYIM.js";
+} from "./chunk-TE4HHEXW.js";
 import {
   EXTERNAL_CONTENT_TRUST_TIER,
   resolveContentTrustProvenance,
@@ -187,7 +187,7 @@ import {
 import {
   DEFAULT_TASK_TTL_MS,
   clampTaskTtl
-} from "./chunk-DXXYDYAC.js";
+} from "./chunk-QOAIAAT5.js";
 import {
   allOf,
   anyOf
@@ -196,7 +196,7 @@ import {
   VERSION,
   createRequestContext,
   measuredTrustTier
-} from "./chunk-IP6QYHQQ.js";
+} from "./chunk-NNYNYXMV.js";
 import {
   BWRAP_READ_ONLY_ARGS,
   CliDetectionCache,
@@ -208,16 +208,16 @@ import {
   getGlobalEventBus,
   getGlobalRegistry,
   isAbsentSeat
-} from "./chunk-WPALBPDO.js";
+} from "./chunk-HT5UAK7E.js";
 import {
   ensureGatewayDiscovered,
   getAvailabilityCache,
   getCliForModelId,
   resolveFallback
-} from "./chunk-57WNH6BV.js";
+} from "./chunk-SBXLWHYC.js";
 import {
   DEFAULTS
-} from "./chunk-NLFCAEEK.js";
+} from "./chunk-4S77S56F.js";
 import {
   DEFAULT_EXECUTION_MODE,
   DEFAULT_TOOL_RATE_LIMITS
@@ -232,10 +232,10 @@ import {
   parseGatewayExtraHeaders,
   requireApiKey,
   validateApiKeyPresence
-} from "./chunk-LJQPCRYR.js";
+} from "./chunk-TDVR4XDT.js";
 import {
   createSessionMemory
-} from "./chunk-2VS5BGTI.js";
+} from "./chunk-5KBOQWCM.js";
 import {
   TrustTierSchema
 } from "./chunk-CJKHQ6MV.js";
@@ -249,17 +249,17 @@ import {
   terminateProcessTree,
   trackProcessTree,
   withTimeout
-} from "./chunk-CK2LRTUB.js";
+} from "./chunk-JFW3CQS5.js";
 import {
   generateHyphenId,
   generateUUID
-} from "./chunk-U5VVV5FM.js";
+} from "./chunk-S7M3QHO6.js";
 import {
   getDefaultCliCircuitBreakerRegistry
-} from "./chunk-6GRCHU72.js";
+} from "./chunk-R4TXJKS3.js";
 import {
   sanitizeErrorDetails
-} from "./chunk-SJGCOT6H.js";
+} from "./chunk-7LKX7AUQ.js";
 import {
   ARCHITECTURE_KEYWORDS,
   AUTHORITY_TIERS,
@@ -274,7 +274,6 @@ import {
   DEFAULT_ZERO_ROUTER_CONFIG,
   DecisionGateSchema,
   ErrorCode,
-  FALLBACK_CONTEXT_WINDOW,
   LinUCBBandit,
   ModelCapability,
   NEUTRAL_BANDIT_FEATURE,
@@ -290,29 +289,22 @@ import {
   SharedTaskAnalyzer,
   StrategyNameSchema,
   TOOL_MANIFEST,
-  TRACE_ID_MAX_LENGTH,
   TimeoutError,
   UNRESOLVED_MODEL_ID,
   ValidationError,
   WeatherReportInputSchema,
   WorkflowError,
-  accessModeSignal,
   asRecord,
   assertNotSourceCheckoutWrite,
   breakerKeys,
-  buildCapabilityProfiles,
   buildDefaultModelSources,
   buildResearchContext,
-  categorizeOutcomeError,
-  categorizeOutcomeErrorMessage,
   clamp,
   clamp01,
   classifyRequestTier,
   classifyStallTick,
   computeTokenCost,
-  createLogger,
   createSharedTaskAnalyzer,
-  deriveEntry,
   deriveResearchMaturity,
   detectCapabilityGaps,
   detectTrend,
@@ -320,7 +312,6 @@ import {
   err,
   extractJsonArray,
   extractNumberField,
-  findCanonicalModel,
   findMatchingKeyword,
   formatBanditFeatureLabel,
   formatPercentage,
@@ -328,36 +319,25 @@ import {
   gatewayEndpointRejection,
   generateWeatherReport,
   getAdaptiveBonus,
-  getCliModelName,
   getDefaultAvailableModelsCache,
-  getDefaultModelForCli,
-  getDefaultRegistry,
   getErrorMessage,
   getFallbackChainForCategory,
   getGapLedger,
   getHeartbeatMonitor,
-  getInTreeCapabilitiesMatrix,
-  getModelContextWindow,
   getOutcomeStore,
   getOutcomeSummaryText,
   getPipelineEventBus,
   getRandomProvider,
   getStrategyManifest,
-  getTimeProvider,
   getTokenEstimator,
   hasGatewaySlotCatalog,
   isBanditInterceptFeature,
-  isCliName,
   isDisabledSlotUnserved,
-  isEndpointArmId,
   isErr,
   isRateLimitLikeError,
   isTimeoutAbortReason,
-  lookupInTreeCapability,
   matchesAnyKeyword,
-  modelSupportsAll,
   ok,
-  outcomeFailureFields,
   parseGatewayCostEnv,
   pipelineRunId,
   raceAbort,
@@ -366,11 +346,6 @@ import {
   recordToolRefusal,
   researchContextFromText,
   resolveInsideRoot,
-  resolveModelIdentity,
-  resolveModelIdentitySync,
-  resolveOutcomeCategory,
-  resolveOwnerCli,
-  routingArmCliSlot,
   runInHeartbeatSession,
   selectStrategyByManifest,
   serializeValidatedRecord,
@@ -379,15 +354,48 @@ import {
   toExpertTaskAnalysisResult,
   truncateWithInfo,
   withStep
-} from "./chunk-UO6AQXTT.js";
+} from "./chunk-S4SQYXVK.js";
 import {
   SUPPORTED_EXTENSIONS
 } from "./chunk-XBEKMUTO.js";
+import {
+  FALLBACK_CONTEXT_WINDOW,
+  buildCapabilityProfiles,
+  findCanonicalModel,
+  getCliModelName,
+  getDefaultModelForCli,
+  getInTreeCapabilitiesMatrix,
+  getModelContextWindow,
+  lookupInTreeCapability,
+  modelSupportsAll,
+  resolveOwnerCli
+} from "./chunk-VJZRLJYD.js";
+import {
+  deriveEntry,
+  getDefaultRegistry,
+  resolveModelIdentity,
+  resolveModelIdentitySync
+} from "./chunk-BLJIQS7C.js";
 import {
   ensureLearningDir,
   getMetaOutcomesFile,
   isPersistenceEnabled
 } from "./chunk-RUHKJC3X.js";
+import {
+  TRACE_ID_MAX_LENGTH,
+  accessModeSignal,
+  categorizeOutcomeError,
+  categorizeOutcomeErrorMessage,
+  isCliName,
+  isEndpointArmId,
+  outcomeFailureFields,
+  resolveOutcomeCategory,
+  routingArmCliSlot
+} from "./chunk-UFAK5UGH.js";
+import {
+  createLogger,
+  getTimeProvider
+} from "./chunk-GR6WCJWY.js";
 import {
   findRepoRoot,
   getActiveWorkspaceRoot,
@@ -401,10 +409,7 @@ import {
 import {
   AGENT_ROUTER_TIMEOUTS,
   API_TIMEOUTS,
-  CLI_NAMES,
   CLI_SUBPROCESS_TIMEOUTS,
-  CliNameSchema,
-  DEFAULT_CLI,
   EXPERT_TIMEOUTS,
   GRAPH_TIMEOUTS,
   HEARTBEAT_TIMEOUTS,
@@ -416,7 +421,6 @@ import {
   SEARCH_TREE_MAX_TIME_MS,
   SINGLE_LLM_EVAL_TIMEOUT_MS,
   STEP_EXECUTOR_TIMEOUTS,
-  TASK_CATEGORIES,
   TIMEOUT_MULTIPLIER_ENV_VAR,
   WORKER_TIMEOUTS,
   WORKFLOW_TIMEOUTS,
@@ -425,7 +429,15 @@ import {
   getExpertTaskTimeout,
   getMcpSafeDeadlineMs,
   resolveClassGuardMs
-} from "./chunk-4PN3UVZV.js";
+} from "./chunk-6TBRXZY7.js";
+import {
+  TASK_CATEGORIES
+} from "./chunk-SYTFRVWX.js";
+import {
+  CLI_NAMES,
+  CliNameSchema,
+  DEFAULT_CLI
+} from "./chunk-MTN5VMBX.js";
 
 // src/config/env-schema.ts
 import { z } from "zod";
@@ -29751,7 +29763,7 @@ function execIdFields(executionId) {
 async function populateUnifiedContextOnState(state, options) {
   const taskCandidate = state["task"];
   if (typeof taskCandidate !== "string" || taskCandidate === "") return;
-  const { getContextForTask: getContextForTask2, inferTaskCategory: inferTaskCategory2 } = await import("./context-retriever-BSMYABVH.js");
+  const { getContextForTask: getContextForTask2, inferTaskCategory: inferTaskCategory2 } = await import("./context-retriever-SE4FED6S.js");
   const category = inferTaskCategory2(taskCandidate);
   const executionId = options?.executionId;
   const execFields = execIdFields(executionId);
@@ -46260,7 +46272,7 @@ async function tryIssueTriage(task) {
   try {
     const issueMatch = task.match(/github\.com\/([^/]+\/[^/]+)\/issues\/(\d+)/);
     if (issueMatch === null) return null;
-    const { createIssueTriage } = await import("./issue-triage-JSLR4JTR.js");
+    const { createIssueTriage } = await import("./issue-triage-KCY7KNJX.js");
     const triage = createIssueTriage();
     const owner = issueMatch[1] ?? "";
     const num2 = issueMatch[2] ?? "";
@@ -46288,7 +46300,7 @@ var VALID_TEMPLATES = /* @__PURE__ */ new Set([
 ]);
 async function classifyWithLLM(task) {
   try {
-    const { executeExpert: executeExpert2 } = await import("./expert-bridge-ZQFBHLCD.js");
+    const { executeExpert: executeExpert2 } = await import("./expert-bridge-KUAWX2ZC.js");
     const prompt = [
       "Classify this task into exactly one pipeline template.",
       "Templates: dev (implementation/bug fix/refactor), research (investigate/evaluate/compare),",
@@ -46657,7 +46669,7 @@ function buildVotingInput(plan, config) {
 }
 async function executeSingleVote(plan, config, log) {
   try {
-    const { executeVoting } = await import("./consensus-vote-V3CNOCVD.js");
+    const { executeVoting } = await import("./consensus-vote-ZRBGPE2N.js");
     const input = buildVotingInput(plan, config);
     const result = await executeVoting(input, log);
     return parseVotingResult(result);
@@ -48201,7 +48213,7 @@ var memoryInitPromise = null;
 async function initPipelineMemory() {
   if (cachedMemory !== null) return cachedMemory;
   try {
-    const { createSessionMemory: createSessionMemory2 } = await import("./session-memory-C5K2QR3W.js");
+    const { createSessionMemory: createSessionMemory2 } = await import("./session-memory-S33AHGTC.js");
     const { getLearningDir } = await import("./learning-persistence-X24OOBYY.js");
     const mem = createSessionMemory2(getLearningDir());
     mem.startSession(`pipeline-${String(getTimeProvider().now())}`);
@@ -48263,7 +48275,7 @@ function recordRoutingExperience(category, success, durationMs, tokensUsed = 0,
     callRecord(routingMemoryCache);
     return;
   }
-  routingMemoryInitPromise ??= import("./routing-memory-5JPC5QKO.js").then(({ createRoutingMemory }) => {
+  routingMemoryInitPromise ??= import("./routing-memory-BK2ZSPIT.js").then(({ createRoutingMemory }) => {
     routingMemoryCache ??= createRoutingMemory();
     return routingMemoryCache;
   }).catch((error) => {
@@ -48489,7 +48501,7 @@ function createVoteStage({ config, startStage }) {
     const strategy = config.votingStrategy ?? "higher_order";
     await postProgress(config, "Vote", `Running consensus with ${strategy} strategy...`);
     try {
-      const { executeVoting } = await import("./consensus-vote-V3CNOCVD.js");
+      const { executeVoting } = await import("./consensus-vote-ZRBGPE2N.js");
       const proposal = buildVoteProposal(plan, research);
       const votingResult = await executeVoting(
         {
@@ -49299,7 +49311,7 @@ ${text}` : "";
 }
 async function getWeatherContext() {
   try {
-    const { generateWeatherReport: generateWeatherReport2 } = await import("./weather-report-ETPVDBDS.js");
+    const { generateWeatherReport: generateWeatherReport2 } = await import("./weather-report-6SRJJPFL.js");
     const report = generateWeatherReport2({ includeAdaptive: true });
     const mappings = "recommendedMappings" in report ? report.recommendedMappings : [];
     if (!Array.isArray(mappings) || mappings.length === 0) return "";
@@ -49317,7 +49329,7 @@ ${lines}
 }
 async function getMemoryContext(task) {
   try {
-    const { createSessionMemory: createSessionMemory2 } = await import("./session-memory-C5K2QR3W.js");
+    const { createSessionMemory: createSessionMemory2 } = await import("./session-memory-S33AHGTC.js");
     const { getLearningDir } = await import("./learning-persistence-X24OOBYY.js");
     const memory = createSessionMemory2(getLearningDir(), { maxLearningsInContext: 10 });
     const learnings = memory.searchLearnings(task.slice(0, 200));
@@ -50034,7 +50046,7 @@ async function searchCodebaseForTask(task) {
 }
 async function queryResearchRegistry(task) {
   try {
-    const { synthesizeResearch: synthesizeResearch2 } = await import("./research-helpers-synthesize-33F7T37I.js");
+    const { synthesizeResearch: synthesizeResearch2 } = await import("./research-helpers-synthesize-TCBKMTRH.js");
     const topic = task.split(/[.!?\n]/).filter((s) => s.trim().length > 10)[0]?.trim();
     if (topic === void 0) return null;
     const result = await synthesizeResearch2(topic.slice(0, 50));
@@ -50105,7 +50117,7 @@ function createScanStageWrapper() {
       try {
         const slug = ctx.task.match(/([a-zA-Z0-9._-]+\/[a-zA-Z0-9._-]+)/)?.[1];
         if (slug !== void 0) {
-          const { generateSecurityPlan: generateSecurityPlan2 } = await import("./repo-security-plan-TBK63H22.js");
+          const { generateSecurityPlan: generateSecurityPlan2 } = await import("./repo-security-plan-UDATQA3H.js");
           const plan = await generateSecurityPlan2({ repo: slug, maxScanners: 10 });
           const recs = plan.recommendations.slice(0, 5).map((r) => `${r.priority}: ${r.displayName} (${r.category})`).join("; ");
           return output(PIPELINE_STATE_KEYS.FINDINGS, recs, getTimeProvider().now() - start, true);
@@ -54049,7 +54061,7 @@ var GitHubTaskTracker = class {
   cachedProvider = null;
   async getProvider() {
     if (this.cachedProvider !== null) return this.cachedProvider;
-    const { createScmProvider } = await import("./factory-Z5NBVADZ.js");
+    const { createScmProvider } = await import("./factory-3TYQRDEB.js");
     const result = await createScmProvider({ repo: this.config.repo ?? "" });
     if (!result.ok) throw new Error(`SCM provider error: ${result.error.message}`);
     this.cachedProvider = result.value;
@@ -55097,7 +55109,7 @@ function withCatalogueCaveat(report) {
 var GATEWAY_TRANSPORT = "gateway";
 var GATEWAY_API_ARM = "api:custom-openai";
 async function gatewaySource(apiArm) {
-  const { discoverModels, readOpenAICompatEnv } = await import("./openai-compat-adapter-QIZKYV3M.js");
+  const { discoverModels, readOpenAICompatEnv } = await import("./openai-compat-adapter-5XRY7CAO.js");
   const config = readOpenAICompatEnv();
   if (config !== null) {
     return {
@@ -55116,7 +55128,7 @@ async function gatewaySource(apiArm) {
 }
 async function defaultSources(includeOpenRouter, adaptersFactory) {
   const adapters = new Map(
-    adaptersFactory !== void 0 ? adaptersFactory() : (await import("./factory-USTPCUWD.js")).createAllAdapters()
+    adaptersFactory !== void 0 ? adaptersFactory() : (await import("./factory-NEFQHS47.js")).createAllAdapters()
   );
   const apiArm = adapters.get(GATEWAY_API_ARM);
   adapters.delete(GATEWAY_API_ARM);
@@ -58473,4 +58485,4 @@ export {
   initializeSandbox,
   getSandboxMode
 };
-//# sourceMappingURL=chunk-SDGAFACO.js.map
+//# sourceMappingURL=chunk-25F2TZ7W.js.map